@openclaw/signal 2026.7.1-beta.6 → 2026.7.2-beta.1

package/dist/{client-adapter-C9mB2Jz8.js → client-adapter-aEM0kGhC.js}

@@ -2,8 +2,7 @@ import { detectMime, parseMediaContentLength } from "openclaw/plugin-sdk/media-r
 import { asDateTimestampMs, parseStrictNonNegativeInteger, resolveExpiresAtMsFromDurationMs, resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import nodePath from "node:path";
 import { resolveFetch } from "openclaw/plugin-sdk/fetch-runtime";
-import { readProviderTextResponse, readResponseTextLimited } from "openclaw/plugin-sdk/provider-http";
-import { readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
+import { readResponseTextPrefix, readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 import { readRegularFile } from "openclaw/plugin-sdk/security-runtime";
 import WebSocket from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
@@ -21,7 +20,10 @@ import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 */
 const DEFAULT_TIMEOUT_MS$2 = 1e4;
 const DEFAULT_ATTACHMENT_RESPONSE_MAX_BYTES = 1048576;
-const SIGNAL_CONTAINER_WS_MAX_PAYLOAD_BYTES = 1024 * 1024;
+const SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES = 16 * 1024;
+const SIGNAL_REST_SUCCESS_RESPONSE_MAX_BYTES = 16 * 1024 * 1024;
+const WS_MAX_PAYLOAD = 1024 * 1024;
+const WS_HANDSHAKE_MS = 3e4;
 const DEFAULT_SIGNAL_CONTAINER_MAX_ATTACHMENT_BYTES = 8 * 1024 * 1024;
 const CONTAINER_TEXT_STYLE_MARKERS = {
 	BOLD: "**",
@@ -62,10 +64,34 @@ function normalizeMaxResponseBytes(value) {
 function readContentLength(res) {
 	return parseMediaContentLength(res.headers?.get("content-length") ?? null) ?? void 0;
 }
-async function readCappedResponseBuffer(res, maxResponseBytes) {
+function signalRestIdleTimeoutError({ chunkTimeoutMs }) {
+	return /* @__PURE__ */ new Error(`Signal REST response body stalled after ${chunkTimeoutMs}ms`);
+}
+function signalAttachmentIdleTimeoutError({ chunkTimeoutMs }) {
+	return /* @__PURE__ */ new Error(`Signal REST attachment response body stalled after ${chunkTimeoutMs}ms`);
+}
+async function readSignalRestText(res, bodyIdleTimeoutMs) {
+	const bytes = await readResponseWithLimit(res, SIGNAL_REST_SUCCESS_RESPONSE_MAX_BYTES, {
+		chunkTimeoutMs: bodyIdleTimeoutMs,
+		onIdleTimeout: signalRestIdleTimeoutError,
+		onOverflow: ({ maxBytes }) => /* @__PURE__ */ new Error(`Signal REST: text response exceeds ${maxBytes} bytes`)
+	});
+	return new TextDecoder().decode(bytes);
+}
+async function readSignalRestErrorText(res, bodyIdleTimeoutMs) {
+	return (await readResponseTextPrefix(res, SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES, {
+		chunkTimeoutMs: bodyIdleTimeoutMs,
+		onIdleTimeout: signalRestIdleTimeoutError
+	})).text;
+}
+async function readCappedResponseBuffer(res, maxResponseBytes, bodyIdleTimeoutMs) {
 	const contentLength = readContentLength(res);
 	if (contentLength !== void 0 && contentLength > maxResponseBytes) throw new Error("Signal REST attachment exceeded size limit");
-	return await readResponseWithLimit(res, maxResponseBytes, { onOverflow: () => /* @__PURE__ */ new Error("Signal REST attachment exceeded size limit") });
+	return await readResponseWithLimit(res, maxResponseBytes, {
+		chunkTimeoutMs: bodyIdleTimeoutMs,
+		onIdleTimeout: signalAttachmentIdleTimeoutError,
+		onOverflow: () => /* @__PURE__ */ new Error("Signal REST attachment exceeded size limit")
+	});
 }
 async function releaseUnreadResponseBody(res) {
 	if (res?.bodyUsed !== true) await res?.body?.cancel().catch(() => void 0);
@@ -122,7 +148,7 @@ function containerReceiveCheck(normalizedBaseUrl, account, timeoutMs) {
 			resolve(result);
 		};
 		try {
-			ws = new WebSocket(wsUrl, { maxPayload: SIGNAL_CONTAINER_WS_MAX_PAYLOAD_BYTES });
+			ws = new WebSocket(wsUrl, { maxPayload: WS_MAX_PAYLOAD });
 		} catch (err) {
 			settle({
 				ok: false,
@@ -174,13 +200,15 @@ async function containerRestRequest(endpoint, opts, method = "GET", body) {
 		headers: { "Content-Type": "application/json" }
 	};
 	if (body) init.body = JSON.stringify(body);
-	const res = await fetchWithTimeout(url, init, opts.timeoutMs ?? DEFAULT_TIMEOUT_MS$2);
+	const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS$2;
+	const bodyIdleTimeoutMs = resolveTimerTimeoutMs(timeoutMs, DEFAULT_TIMEOUT_MS$2);
+	const res = await fetchWithTimeout(url, init, timeoutMs);
 	if (res.status === 204) return;
 	if (!res.ok) {
-		const errorText = await readResponseTextLimited(res).catch(() => "");
+		const errorText = await readSignalRestErrorText(res, bodyIdleTimeoutMs).catch(() => "");
 		throw new Error(`Signal REST ${res.status}: ${errorText || res.statusText}`);
 	}
-	const text = await readProviderTextResponse(res, "Signal REST");
+	const text = await readSignalRestText(res, bodyIdleTimeoutMs);
 	if (!text) return;
 	try {
 		return JSON.parse(text);
@@ -195,9 +223,11 @@ async function containerFetchAttachment(attachmentId, opts) {
 	const url = `${normalizeBaseUrl$1(opts.baseUrl)}/v1/attachments/${encodeURIComponent(attachmentId)}`;
 	let res;
 	try {
-		res = await fetchWithTimeout(url, { method: "GET" }, opts.timeoutMs ?? DEFAULT_TIMEOUT_MS$2);
+		const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS$2;
+		const bodyIdleTimeoutMs = resolveTimerTimeoutMs(timeoutMs, DEFAULT_TIMEOUT_MS$2);
+		res = await fetchWithTimeout(url, { method: "GET" }, timeoutMs);
 		if (!res.ok) return null;
-		return await readCappedResponseBuffer(res, normalizeMaxResponseBytes(opts.maxResponseBytes));
+		return await readCappedResponseBuffer(res, normalizeMaxResponseBytes(opts.maxResponseBytes), bodyIdleTimeoutMs);
 	} finally {
 		await releaseUnreadResponseBody(res);
 	}
@@ -227,7 +257,10 @@ async function streamContainerEvents(params) {
 			}
 		};
 		try {
-			ws = new WebSocket(wsUrl, { maxPayload: SIGNAL_CONTAINER_WS_MAX_PAYLOAD_BYTES });
+			ws = new WebSocket(wsUrl, {
+				maxPayload: WS_MAX_PAYLOAD,
+				handshakeTimeout: WS_HANDSHAKE_MS
+			});
 		} catch (err) {
 			logError(`[signal-ws] failed to create WebSocket: ${err instanceof Error ? err.message : String(err)}`);
 			reject(toLintErrorObject$1(err, "Non-Error rejection"));
@@ -317,11 +350,10 @@ function renderContainerStyledText(text, styles) {
 		...spans.flatMap((span) => [span.start, span.end])
 	])].toSorted((a, b) => a - b);
 	let rendered = "";
-	for (let i = 0; i < positions.length; i += 1) {
-		const pos = positions[i];
+	for (const [index, pos] of positions.entries()) {
 		for (const span of spans.filter((candidate) => candidate.end === pos).toSorted((a, b) => b.start - a.start)) rendered += span.marker;
 		for (const span of spans.filter((candidate) => candidate.start === pos).toSorted((a, b) => b.end - a.end)) rendered += span.marker;
-		const next = positions[i + 1];
+		const next = positions[index + 1];
 		if (next !== void 0 && next > pos) rendered += escapeContainerStyledText(text.slice(pos, next));
 	}
 	return rendered;
@@ -453,13 +485,14 @@ async function containerRpcRequest(method, params, opts) {
 			const groupId = p.groupId;
 			const formattedGroupId = groupId ? formatGroupIdForContainer(groupId) : void 0;
 			const finalRecipients = recipients.length > 0 ? recipients : usernames.length > 0 ? usernames : formattedGroupId ? [formattedGroupId] : [];
-			const textStyles = p["text-style"]?.map((s) => {
+			const textStyles = p["text-style"]?.flatMap((s) => {
 				const [start, length, style] = s.split(":");
-				return {
+				if (start === void 0 || length === void 0 || style === void 0) return [];
+				return [{
 					start: Number(start),
 					length: Number(length),
 					style
-				};
+				}];
 			});
 			const quoteTimestamp = normalizeContainerQuoteTimestamp(p.quoteTimestamp ?? p["quote-timestamp"]);
 			const quoteAuthor = normalizeContainerQuoteText(p.quoteAuthor ?? p["quote-author"]);
@@ -789,6 +822,7 @@ async function streamSignalEvents$1(params) {
 		}
 		if (line.startsWith(":")) return;
 		const [rawField, ...rest] = line.split(":");
+		if (rawField === void 0) return;
 		const field = rawField.trim();
 		const rawValue = rest.join(":");
 		const value = rawValue.startsWith(" ") ? rawValue.slice(1) : rawValue;

package/dist/config-api-DIg1lInT.js

@@ -0,0 +1,3 @@
+import { buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";
+import { SignalConfigSchema } from "openclaw/plugin-sdk/bundled-channel-config-schema";
+export { buildChannelConfigSchema as n, SignalConfigSchema as t };

package/dist/{config-schema-BiojLEsX.js → config-schema-CfVNH0DB.js}

@@ -1,4 +1,5 @@
-import { n as buildChannelConfigSchema, t as SignalConfigSchema } from "./config-api-KS-qhQvD.js";
+import { n as buildChannelConfigSchema, t as SignalConfigSchema } from "./config-api-DIg1lInT.js";
+import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 //#endregion
 //#region extensions/signal/src/config-schema.ts
 const SignalChannelConfigSchema = buildChannelConfigSchema(SignalConfigSchema, { uiHints: {
@@ -6,14 +7,11 @@ const SignalChannelConfigSchema = buildChannelConfigSchema(SignalConfigSchema, {
 		label: "Signal",
 		help: "Signal channel provider configuration including account identity and DM policy behavior. Keep account mapping explicit so routing remains stable across multi-device setups."
 	},
-	dmPolicy: {
-		label: "Signal DM Policy",
-		help: "Direct message access control (\"pairing\" recommended). \"open\" requires channels.signal.allowFrom=[\"*\"]."
-	},
-	configWrites: {
-		label: "Signal Config Writes",
-		help: "Allow Signal to write config in response to channel events/commands (default: true)."
-	},
+	...createChannelConfigUiHints({
+		channelLabel: "Signal",
+		dmPolicy: { channelKey: "signal" },
+		configWrites: true
+	}),
 	account: {
 		label: "Signal Account",
 		help: "Signal account identifier (phone/number handle) used to bind this channel config to a specific Signal identity. Keep this aligned with your linked device/session state."

package/dist/contract-api.js

@@ -1,3 +1,3 @@
-import { d as normalizeSignalMessagingTarget, i as isSignalSenderAllowed, u as looksLikeSignalTargetId } from "./identity-C8-yk4J9.js";
-import { a as looksLikeArchive, i as installSignalCliFromRelease, n as extractSignalCliArchive, o as pickAsset, r as installSignalCli, t as downloadToFile } from "./install-signal-cli-ik8VPaGg.js";
-export { downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeArchive, looksLikeSignalTargetId, normalizeSignalMessagingTarget, pickAsset };
+import { d as normalizeSignalMessagingTarget, i as isSignalSenderAllowed, u as looksLikeSignalTargetId } from "./identity-BF8taj7g.js";
+import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-CtusY3tN.js";
+export { MAX_SIGNAL_CLI_EXTRACTED_BYTES, downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeArchive, looksLikeSignalTargetId, normalizeSignalMessagingTarget, pickAsset };

package/dist/doctor-contract-api.js

@@ -0,0 +1,16 @@
+import { defineChannelAliasMigration } from "openclaw/plugin-sdk/runtime-doctor";
+//#region extensions/signal/doctor-contract-api.ts
+const streamingAliasMigration = defineChannelAliasMigration({
+	channelId: "signal",
+	streaming: {
+		defaultMode: "partial",
+		deliveryOnly: true
+	},
+	accountStreamingReplacesRoot: true
+});
+const legacyConfigRules = streamingAliasMigration.legacyConfigRules;
+function normalizeCompatibilityConfig({ cfg }) {
+	return streamingAliasMigration.normalizeChannelConfig({ cfg });
+}
+//#endregion
+export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/{identity-C8-yk4J9.js → identity-BF8taj7g.js}

@@ -61,15 +61,16 @@ function stripSignalPrefix(value) {
 }
 function resolveSignalSender(params) {
 	const sourceNumber = params.sourceNumber?.trim();
+	const sourceUuid = params.sourceUuid?.trim();
 	if (sourceNumber) {
 		const e164 = normalizeE164(sourceNumber);
 		if (e164) return {
 			kind: "phone",
 			raw: sourceNumber,
-			e164
+			e164,
+			...sourceUuid ? { aliases: { uuid: sourceUuid } } : {}
 		};
 	}
-	const sourceUuid = params.sourceUuid?.trim();
 	if (sourceUuid) return {
 		kind: "uuid",
 		raw: sourceUuid
@@ -124,9 +125,11 @@ function isSignalSenderAllowed(sender, allowFrom) {
 	if (allowFrom.length === 0) return false;
 	const parsed = allowFrom.map(parseSignalAllowEntry).filter((entry) => entry !== null);
 	if (parsed.some((entry) => entry.kind === "any")) return true;
+	const senderE164 = sender.kind === "phone" ? sender.e164 : sender.aliases?.e164;
+	const senderUuid = sender.kind === "uuid" ? sender.raw : sender.aliases?.uuid;
 	return parsed.some((entry) => {
-		if (entry.kind === "phone" && sender.kind === "phone") return entry.e164 === sender.e164;
-		if (entry.kind === "uuid" && sender.kind === "uuid") return entry.raw === sender.raw;
+		if (entry.kind === "phone") return senderE164 !== void 0 && entry.e164 === senderE164;
+		if (entry.kind === "uuid") return senderUuid !== void 0 && entry.raw === senderUuid;
 		return false;
 	});
 }

package/dist/{install-signal-cli-ik8VPaGg.js → install-signal-cli-CtusY3tN.js}

@@ -1,18 +1,20 @@
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import nodePath from "node:path";
-import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { CONFIG_DIR, extractArchive, resolveBrewExecutable } from "openclaw/plugin-sdk/setup-tools";
 import { createWriteStream } from "node:fs";
 import fs from "node:fs/promises";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
+import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { runPluginCommandWithTimeout } from "openclaw/plugin-sdk/run-command";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
-import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
+import { withTempDownloadPath } from "openclaw/plugin-sdk/temp-path";
 //#region extensions/signal/src/install-signal-cli.ts
 const MAX_SIGNAL_CLI_ARCHIVE_BYTES = 256 * 1024 * 1024;
+/** @internal Exported for testing. */
+const MAX_SIGNAL_CLI_EXTRACTED_BYTES = 384 * 1024 * 1024;
 const SIGNAL_CLI_DOWNLOAD_TIMEOUT_MS = 5 * 6e4;
 const SIGNAL_CLI_RELEASE_INFO_TIMEOUT_MS = 3e4;
 const CONTENT_LENGTH_RE = /^\d+$/;
@@ -21,7 +23,13 @@ async function extractSignalCliArchive(archivePath, installRoot, timeoutMs) {
 	await extractArchive({
 		archivePath,
 		destDir: installRoot,
-		timeoutMs
+		timeoutMs,
+		limits: {
+			maxArchiveBytes: MAX_SIGNAL_CLI_ARCHIVE_BYTES,
+			maxEntries: 32,
+			maxEntryBytes: MAX_SIGNAL_CLI_EXTRACTED_BYTES,
+			maxExtractedBytes: MAX_SIGNAL_CLI_EXTRACTED_BYTES
+		}
 	});
 }
 /** @internal Exported for testing. */
@@ -202,36 +210,39 @@ async function installSignalCliFromRelease(runtime) {
 		ok: false,
 		error: "No compatible release asset found for this platform."
 	};
-	const tmpDir = await fs.mkdtemp(nodePath.join(resolvePreferredOpenClawTmpDir(), "openclaw-signal-"));
-	const archivePath = nodePath.join(tmpDir, asset.name);
-	runtime.log(`Downloading signal-cli ${version} (${asset.name})…`);
-	await downloadToFile(asset.browser_download_url, archivePath);
-	const installRoot = nodePath.join(CONFIG_DIR, "tools", "signal-cli", version);
-	await fs.mkdir(installRoot, { recursive: true });
-	if (!looksLikeArchive(normalizeLowercaseStringOrEmpty(asset.name))) return {
-		ok: false,
-		error: `Unsupported archive type: ${asset.name}`
-	};
-	try {
-		await extractSignalCliArchive(archivePath, installRoot, 6e4);
-	} catch (err) {
-		const message = formatErrorMessage(err);
-		return {
+	return await withTempDownloadPath({
+		prefix: "openclaw-signal",
+		fileName: asset.name
+	}, async (archivePath) => {
+		runtime.log(`Downloading signal-cli ${version} (${asset.name})…`);
+		await downloadToFile(asset.browser_download_url, archivePath);
+		const installRoot = nodePath.join(CONFIG_DIR, "tools", "signal-cli", version);
+		await fs.mkdir(installRoot, { recursive: true });
+		if (!looksLikeArchive(normalizeLowercaseStringOrEmpty(asset.name))) return {
 			ok: false,
-			error: `Failed to extract ${asset.name}: ${message}`
+			error: `Unsupported archive type: ${asset.name}`
 		};
-	}
-	const cliPath = await findSignalCliBinary(installRoot);
-	if (!cliPath) return {
-		ok: false,
-		error: `signal-cli binary not found after extracting ${asset.name}`
-	};
-	await fs.chmod(cliPath, 493).catch(() => {});
-	return {
-		ok: true,
-		cliPath,
-		version
-	};
+		try {
+			await extractSignalCliArchive(archivePath, installRoot, 6e4);
+		} catch (err) {
+			const message = formatErrorMessage(err);
+			return {
+				ok: false,
+				error: `Failed to extract ${asset.name}: ${message}`
+			};
+		}
+		const cliPath = await findSignalCliBinary(installRoot);
+		if (!cliPath) return {
+			ok: false,
+			error: `signal-cli binary not found after extracting ${asset.name}`
+		};
+		await fs.chmod(cliPath, 493).catch(() => {});
+		return {
+			ok: true,
+			cliPath,
+			version
+		};
+	});
 }
 async function installSignalCli(runtime) {
 	if (process.platform === "win32") return {
@@ -242,4 +253,4 @@ async function installSignalCli(runtime) {
 	return installSignalCliViaBrew(runtime);
 }
 //#endregion
-export { looksLikeArchive as a, installSignalCliFromRelease as i, extractSignalCliArchive as n, pickAsset as o, installSignalCli as r, downloadToFile as t };
+export { installSignalCliFromRelease as a, installSignalCli as i, downloadToFile as n, looksLikeArchive as o, extractSignalCliArchive as r, pickAsset as s, MAX_SIGNAL_CLI_EXTRACTED_BYTES as t };