@openclaw/signal 2026.7.2-beta.5 → 2026.7.2-beta.7

package/dist/api.js

@@ -2,9 +2,9 @@ import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefau
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, d as normalizeSignalMessagingTarget, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine, u as looksLikeSignalTargetId } from "./identity-BQ4OzXXk.js";
 import { a as signalMessageActions, c as markdownToSignalText, l as markdownToSignalTextChunks, o as resolveSignalReactionLevel, t as detectSignalTransport } from "./transport-detection-Da06-LOL.js";
 import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-BjeDyKcz.js";
-import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-CBIljGCH.js";
+import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-CmbWaYlm.js";
 import { i as installSignalCli, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset } from "./install-signal-cli-qJF7iC4h.js";
-import { t as monitorSignalProvider } from "./monitor-CHBkf7lk.js";
+import { t as monitorSignalProvider } from "./monitor-BvIzkrYW.js";
 import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-B_Ks4MZr.js";
 import { t as probeSignal } from "./probe-Br9abaGp.js";
 //#region extensions/signal/src/channel.setup.ts

package/dist/{channel-CBIljGCH.js → channel-CmbWaYlm.js}

@@ -3,8 +3,8 @@ import { a as resolveSignalAccountConfig, i as resolveSignalAccount, n as listSi
 import { c as resolveSignalSender, d as normalizeSignalMessagingTarget, l as looksLikeUuid, o as resolveSignalPeerId, s as resolveSignalRecipient, u as looksLikeSignalTargetId } from "./identity-BQ4OzXXk.js";
 import { a as listSignalAliasDirectoryEntries, o as resolveSignalTarget } from "./runtime-JPrGlV7h.js";
 import { a as signalMessageActions, d as shouldSuppressLocalSignalExecApprovalPrompt, f as signalApprovalCapability, i as materializeSignalPresentationFallback, l as markdownToSignalTextChunks, o as resolveSignalReactionLevel, r as resolveSignalReplyContextWithPersistence, s as formatSignalMediaText, t as detectSignalTransport } from "./transport-detection-Da06-LOL.js";
-import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-DbUCknbC.js";
-import { t as SignalChannelConfigSchema } from "./config-schema-DLvpQPN5.js";
+import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-Dcte-QYB.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-Y3dFGwdL.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { buildDmGroupAccountAllowlistAdapter } from "openclaw/plugin-sdk/allowlist-config-edit";
 import { createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
@@ -579,7 +579,7 @@ const signalDoctor = {
 //#region extensions/signal/src/shared.ts
 const SIGNAL_CHANNEL = "signal";
 async function loadSignalChannelRuntime() {
-	return await import("./channel.runtime-B8GXmuol.js");
+	return await import("./channel.runtime-BRDaqr5-.js");
 }
 const signalSetupWizard = createSignalSetupWizardProxy(async () => (await loadSignalChannelRuntime()).signalSetupWizard);
 const signalConfigAdapter = {
@@ -663,7 +663,7 @@ function createSignalPluginBase(params) {
 }
 //#endregion
 //#region extensions/signal/src/channel.ts
-const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-CHBkf7lk.js").then((n) => n.n));
+const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-BvIzkrYW.js").then((n) => n.n));
 const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-Br9abaGp.js").then((n) => n.n));
 const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-CbuXycZT.js"));
 const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-DtL47gSK.js").then((n) => n.r));

package/dist/channel-config-api.js

@@ -1,2 +1,2 @@
-import { t as SignalChannelConfigSchema } from "./config-schema-DLvpQPN5.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-Y3dFGwdL.js";
 export { SignalChannelConfigSchema };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as signalPlugin } from "./channel-CBIljGCH.js";
+import { t as signalPlugin } from "./channel-CmbWaYlm.js";
 export { signalPlugin };

package/dist/{channel.runtime-B8GXmuol.js → channel.runtime-BRDaqr5-.js}

@@ -1,5 +1,5 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds } from "./accounts-DrStJjiK.js";
-import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-CBIljGCH.js";
+import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-CmbWaYlm.js";
 import { i as installSignalCli } from "./install-signal-cli-qJF7iC4h.js";
 import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 import { createDetectedBinaryStatus, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";

package/dist/{config-schema-DLvpQPN5.js → config-schema-Y3dFGwdL.js}

@@ -1,6 +1,7 @@
 import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId, resolveAccountEntry } from "openclaw/plugin-sdk/account-resolution";
+import { isRecord as isRecord$1 } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelConfigSchema, buildChannelReactionShape, buildCommonChannelAccountShape, buildGroupEntrySchema, requireAllowlistAllowFrom, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
 //#region extensions/signal/src/config-ui-hints.ts
@@ -60,9 +61,6 @@ const SIGNAL_RETIRED_TRANSPORT_KEYS = [
 	"ignoreStories"
 ];
 const SignalTransportUrlSchema = z.string().url().regex(/^[Hh][Tt][Tt][Pp][Ss]?:\/\/(?![^/?#]*@)/, "Expected http:// or https:// URL without embedded credentials");
-function isRecord$1(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function projectSignalConfigForUpdateValidation(value) {
 	if (process.env.OPENCLAW_UPDATE_IN_PROGRESS !== "1" || !isRecord$1(value)) return value;
 	const next = { ...value };

package/dist/{doctor-contract-api-DbUCknbC.js → doctor-contract-api-Dcte-QYB.js}

@@ -1,5 +1,6 @@
 import { a as isSignalManagedNativeConnectionUrlForBind, c as buildSignalTransportHttpUrl, i as assignSignalManagedNativePort, o as isValidSignalManagedNativePort, r as allocateSignalManagedNativePort, s as resolveLocalSignalTransportPort, u as normalizeSignalTransportUrl } from "./transport-policy-DxvSMHp9.js";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-resolution";
+import { isRecord } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 import { defineChannelAliasMigration } from "openclaw/plugin-sdk/runtime-doctor";
 //#region extensions/signal/src/config-compat.ts
 const LEGACY_TRANSPORT_FIELDS = [
@@ -18,11 +19,8 @@ const PENDING_LEGACY_INVALID_URL_WARNING = "- channels.signal: legacy httpUrl is
 const PENDING_LEGACY_INVALID_HOST_WARNING = "- channels.signal: legacy httpHost is invalid; keep the current config, correct httpHost, then run openclaw doctor --fix.";
 const PENDING_LEGACY_INVALID_PORT_WARNING = "- channels.signal: legacy httpPort must be an integer between 1 and 65535; correct httpPort, then run openclaw doctor --fix.";
 const PENDING_LEGACY_CONTAINER_ACCOUNT_WARNING = "- channels.signal: legacy container transport requires an account number; add channels.signal.account (or the relevant channels.signal.accounts.*.account) and rerun openclaw doctor --fix.";
-function isRecord$1(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function isSignalTransportConfig(value) {
-	if (!isRecord$1(value)) return false;
+	if (!isRecord(value)) return false;
 	if (value.kind === "managed-native") {
 		if (value.httpPort !== void 0 && !isValidSignalManagedNativePort(value.httpPort)) return false;
 		if (value.url === void 0) return true;
@@ -175,8 +173,8 @@ function hasRootSignalAccount(entries) {
 	return entries.length === 1 || Boolean(optionalString(root?.account)) || isSignalTransportConfig(root?.transport);
 }
 function signalAccountIds(entries) {
-	const accounts = isRecord$1(entries[0]?.accounts) ? entries[0].accounts : {};
-	return Object.entries(accounts).filter(([, entry]) => isRecord$1(entry)).map(([accountId]) => accountId);
+	const accounts = isRecord(entries[0]?.accounts) ? entries[0].accounts : {};
+	return Object.entries(accounts).filter(([, entry]) => isRecord(entry)).map(([accountId]) => accountId);
 }
 function isDefaultSignalAccountId(accountId) {
 	return Boolean(accountId?.trim()) && normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID;
@@ -186,10 +184,10 @@ function resolveSignalAccountKey(accounts, accountId) {
 	return Object.keys(accounts).find((key) => Boolean(key.trim()) && normalizeAccountId(key) === normalizedAccountId);
 }
 function nestedDefaultOwnsEffectiveTransport(entries) {
-	const accounts = isRecord$1(entries[0]?.accounts) ? entries[0].accounts : {};
+	const accounts = isRecord(entries[0]?.accounts) ? entries[0].accounts : {};
 	const nestedDefaultKey = resolveSignalAccountKey(accounts, DEFAULT_ACCOUNT_ID);
 	const nestedDefault = nestedDefaultKey ? accounts[nestedDefaultKey] : void 0;
-	return isRecord$1(nestedDefault) && (isSignalTransportConfig(nestedDefault.transport) || hasLegacyFields(nestedDefault));
+	return isRecord(nestedDefault) && (isSignalTransportConfig(nestedDefault.transport) || hasLegacyFields(nestedDefault));
 }
 function isDiscardedTransportEntry(entries, index) {
 	if (index === 0) return !hasRootSignalAccount(entries) || nestedDefaultOwnsEffectiveTransport(entries);
@@ -204,23 +202,23 @@ function shouldMaterializeTransport(entries, index) {
 function clearLegacySignalTransportFieldsForAccount(params) {
 	const next = structuredClone(params.cfg);
 	const signal = next.channels?.signal;
-	if (!isRecord$1(signal)) return next;
+	if (!isRecord(signal)) return next;
 	if (isDefaultSignalAccountId(params.accountId)) {
 		clearLegacyTransportFields(signal);
 		delete signal.apiMode;
-		const accounts = isRecord$1(signal.accounts) ? signal.accounts : void 0;
+		const accounts = isRecord(signal.accounts) ? signal.accounts : void 0;
 		const nestedDefaultKey = accounts ? resolveSignalAccountKey(accounts, DEFAULT_ACCOUNT_ID) : void 0;
 		const nestedDefault = nestedDefaultKey ? accounts?.[nestedDefaultKey] : void 0;
-		if (isRecord$1(nestedDefault)) {
+		if (isRecord(nestedDefault)) {
 			clearLegacyTransportFields(nestedDefault);
 			delete nestedDefault.transport;
 		}
 		return next;
 	}
-	const accounts = isRecord$1(signal.accounts) ? signal.accounts : void 0;
+	const accounts = isRecord(signal.accounts) ? signal.accounts : void 0;
 	const accountKey = accounts ? resolveSignalAccountKey(accounts, params.accountId) : void 0;
 	const account = accountKey ? accounts?.[accountKey] : void 0;
-	if (isRecord$1(account)) clearLegacyTransportFields(account);
+	if (isRecord(account)) clearLegacyTransportFields(account);
 	return next;
 }
 function allocateMigratedManagedPorts(params) {
@@ -239,12 +237,12 @@ function allocateMigratedManagedPorts(params) {
 			const localConnectionPort = resolveLocalSignalTransportPort(transport.url);
 			if (localConnectionPort !== void 0) reservedPorts.add(localConnectionPort);
 		}
-		if (index === canonicalDefaultIndex || isRecord$1(params.entries[index]?.transport)) reservedPorts.add(transport.httpPort ?? 8080);
+		if (index === canonicalDefaultIndex || isRecord(params.entries[index]?.transport)) reservedPorts.add(transport.httpPort ?? 8080);
 	}
 	return params.transports.map((transport, index) => {
 		if (!transport || index === 0 && canonicalDefaultIndex !== 0) return transport;
 		if (transport.kind !== "managed-native") return transport;
-		if (isRecord$1(params.entries[index]?.transport) || index === canonicalDefaultIndex) return transport;
+		if (isRecord(params.entries[index]?.transport) || index === canonicalDefaultIndex) return transport;
 		const rawPreferredPort = params.entries[index]?.httpPort;
 		const preferredPort = typeof rawPreferredPort === "number" ? rawPreferredPort : transport.httpPort;
 		const httpPort = allocateSignalManagedNativePort({
@@ -258,10 +256,10 @@ function allocateMigratedManagedPorts(params) {
 function applyMigratedSignalTransports(params) {
 	const next = structuredClone(params.cfg);
 	const nextSignal = next.channels?.signal;
-	if (!isRecord$1(nextSignal)) return;
+	if (!isRecord(nextSignal)) return;
 	const accountIds = signalAccountIds(params.entries);
-	const nextAccounts = isRecord$1(nextSignal.accounts) ? nextSignal.accounts : {};
-	const nextEntries = [nextSignal, ...Object.values(nextAccounts).filter(isRecord$1)];
+	const nextAccounts = isRecord(nextSignal.accounts) ? nextSignal.accounts : {};
+	const nextEntries = [nextSignal, ...Object.values(nextAccounts).filter(isRecord)];
 	const rootIsAccount = hasRootSignalAccount(params.entries);
 	const canonicalRootTransport = isSignalTransportConfig(params.entries[0]?.transport) ? params.entries[0].transport : void 0;
 	for (const [index, entry] of nextEntries.entries()) {
@@ -280,17 +278,17 @@ function applyMigratedSignalTransports(params) {
 }
 function hasContainerTransportWithoutEffectiveAccount(cfg) {
 	const signal = cfg.channels?.signal;
-	if (!isRecord$1(signal)) return false;
-	const accounts = isRecord$1(signal.accounts) ? signal.accounts : {};
+	if (!isRecord(signal)) return false;
+	const accounts = isRecord(signal.accounts) ? signal.accounts : {};
 	const rootTransport = isSignalTransportConfig(signal.transport) ? signal.transport : void 0;
 	const defaultKey = resolveSignalAccountKey(accounts, DEFAULT_ACCOUNT_ID);
 	const defaultEntry = defaultKey ? accounts[defaultKey] : void 0;
-	const defaultAccount = isRecord$1(defaultEntry) && defaultEntry.account !== void 0 ? optionalString(defaultEntry.account) : optionalString(signal.account);
+	const defaultAccount = isRecord(defaultEntry) && defaultEntry.account !== void 0 ? optionalString(defaultEntry.account) : optionalString(signal.account);
 	const channelEnabled = signal.enabled !== false;
-	const defaultEnabled = !isRecord$1(defaultEntry) || defaultEntry.enabled !== false;
+	const defaultEnabled = !isRecord(defaultEntry) || defaultEntry.enabled !== false;
 	if (rootTransport?.kind === "container" && channelEnabled && defaultEnabled && !defaultAccount) return true;
 	for (const [accountId, entry] of Object.entries(accounts)) {
-		if (!isRecord$1(entry)) continue;
+		if (!isRecord(entry)) continue;
 		if (!channelEnabled || entry.enabled === false) continue;
 		const isDefaultAccount = isDefaultSignalAccountId(accountId);
 		if ((isDefaultAccount && rootTransport ? rootTransport : isSignalTransportConfig(entry.transport) ? entry.transport : void 0)?.kind !== "container" || isDefaultAccount && rootTransport) continue;
@@ -300,17 +298,17 @@ function hasContainerTransportWithoutEffectiveAccount(cfg) {
 }
 async function migrateLegacySignalTransportConfig(params) {
 	const signal = params.cfg.channels?.signal;
-	if (!isRecord$1(signal)) return {
+	if (!isRecord(signal)) return {
 		config: params.cfg,
 		changes: []
 	};
-	const accounts = isRecord$1(signal.accounts) ? signal.accounts : {};
-	if (!(Object.hasOwn(signal, "apiMode") || hasLegacyFields(signal) || Object.values(accounts).some((entry) => isRecord$1(entry) && hasLegacyFields(entry)))) return {
+	const accounts = isRecord(signal.accounts) ? signal.accounts : {};
+	if (!(Object.hasOwn(signal, "apiMode") || hasLegacyFields(signal) || Object.values(accounts).some((entry) => isRecord(entry) && hasLegacyFields(entry)))) return {
 		config: params.cfg,
 		changes: []
 	};
 	const apiMode = signal.apiMode;
-	const entries = [signal, ...Object.values(accounts).filter(isRecord$1)];
+	const entries = [signal, ...Object.values(accounts).filter(isRecord)];
 	const legacyResolutionEntries = entries.filter((_, index) => shouldMaterializeTransport(entries, index)).filter((entry) => !isSignalTransportConfig(entry.transport));
 	const invalidDerivedEndpoint = findInvalidLegacyDerivedEndpoint(legacyResolutionEntries, signal);
 	if (invalidDerivedEndpoint) return {
@@ -369,16 +367,16 @@ async function migrateLegacySignalTransportConfig(params) {
 }
 function migrateLegacySignalTransportConfigSync(cfg) {
 	const signal = cfg.channels?.signal;
-	if (!isRecord$1(signal)) return {
+	if (!isRecord(signal)) return {
 		config: cfg,
 		changes: []
 	};
-	const accounts = isRecord$1(signal.accounts) ? signal.accounts : {};
-	if (!(Object.hasOwn(signal, "apiMode") || hasLegacyFields(signal) || Object.values(accounts).some((entry) => isRecord$1(entry) && hasLegacyFields(entry)))) return {
+	const accounts = isRecord(signal.accounts) ? signal.accounts : {};
+	if (!(Object.hasOwn(signal, "apiMode") || hasLegacyFields(signal) || Object.values(accounts).some((entry) => isRecord(entry) && hasLegacyFields(entry)))) return {
 		config: cfg,
 		changes: []
 	};
-	const entries = [signal, ...Object.values(accounts).filter(isRecord$1)];
+	const entries = [signal, ...Object.values(accounts).filter(isRecord)];
 	const legacyResolutionEntries = entries.filter((_, index) => shouldMaterializeTransport(entries, index)).filter((entry) => !isSignalTransportConfig(entry.transport));
 	const invalidDerivedEndpoint = findInvalidLegacyDerivedEndpoint(legacyResolutionEntries, signal);
 	if (invalidDerivedEndpoint) return {
@@ -445,9 +443,6 @@ const RETIRED_SIGNAL_ACCOUNT_TRANSPORT_FIELDS = [
 	"receiveMode",
 	"ignoreStories"
 ];
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function hasRetiredSignalAccountTransportFields(value) {
 	return isRecord(value) && RETIRED_SIGNAL_ACCOUNT_TRANSPORT_FIELDS.some((field) => Object.hasOwn(value, field));
 }

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-DbUCknbC.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-Dcte-QYB.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/{monitor-CHBkf7lk.js → monitor-BvIzkrYW.js}

@@ -8,17 +8,18 @@ import { n as sendReactionSignal } from "./reaction-runtime-api-BjeDyKcz.js";
 import { a as maybeResolveSignalApprovalReaction, l as resolveSignalApprovalConversationKey, s as registerSignalApprovalReactionTargetForDeliveredPayload, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-DtL47gSK.js";
 import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-Ds48FtEu.js";
 import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-B_Ks4MZr.js";
-import { bindIngressLifecycleToReplyOptions, createChannelIngressMonitor, createChannelMessageReplyPipeline, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
+import { bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor, createChannelMessageReplyPipeline, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
-import { detectMime, estimateBase64DecodedBytes, kindFromMime, saveMediaBuffer } from "openclaw/plugin-sdk/media-runtime";
+import { canonicalizeBase64, detectMime, estimateBase64DecodedBytes, kindFromMime, saveMediaBuffer } from "openclaw/plugin-sdk/media-runtime";
 import { resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
-import { normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { normalizeNullableString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
 import { normalizeE164, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
-import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInboundDebouncer, filterChannelInboundQuoteContext, formatInboundEnvelope, formatInboundFromLabel, formatInboundMediaUnavailableText, hasVisibleInboundReplyDispatch, logInboundDrop, matchesMentionPatterns, resolveEnvelopeFormatOptions, resolveInboundMentionDecision, resolveInboundSupplementalSenderAllowed, runChannelInboundEvent, shouldDebounceTextInbound, toHistoryMediaEntries, toInboundMediaFacts } from "openclaw/plugin-sdk/channel-inbound";
+import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInboundDebouncer, filterChannelInboundQuoteContext, formatInboundEnvelope, formatInboundFromLabel, formatInboundMediaUnavailableText, hasVisibleInboundReplyDispatch, logInboundDrop, matchesMentionPatterns, resolveEnvelopeFormatOptions, resolveInboundMentionDecision, resolveInboundSupplementalSenderAllowed, runChannelInboundEvent, shouldDebounceTextInbound, toHistoryMediaEntries, toInboundMediaFactsWithMetadata } from "openclaw/plugin-sdk/channel-inbound";
 import nodePath from "node:path";
 import { collectErrorGraphCandidates, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { resolvePinnedMainDmOwnerFromAllowlist } from "openclaw/plugin-sdk/security-runtime";
+import { isRecord as isRecord$1 } from "openclaw/plugin-sdk/channel-secret-basic-runtime";
 import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention } from "openclaw/plugin-sdk/channel-policy";
 import { registerChannelRuntimeContext } from "openclaw/plugin-sdk/channel-runtime-context";
 import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
@@ -387,17 +388,9 @@ function createSignalPendingInboundRegistry(accountId) {
 		if (!conversationKey) return;
 		for (const inboundKey of countsByConversation.get(conversationKey)?.keys() ?? []) cancelKey(inboundKey);
 	};
-	const completeAfter = (flush) => async (entries) => {
-		try {
-			await flush(entries);
-		} finally {
-			complete(entries);
-		}
-	};
 	return {
 		track,
 		complete,
-		completeAfter,
 		cancelPendingOnAbort
 	};
 }
@@ -612,7 +605,7 @@ function createSignalEventHandler(deps) {
 			chatType: entry.isGroup ? "group" : "direct"
 		});
 		const replyThreading = resolveBatchedReplyThreadingPolicy(replyToMode, entry.isBatched === true);
-		const media = toInboundMediaFacts(entry.media);
+		const media = await toInboundMediaFactsWithMetadata(entry.media);
 		const ctxPayload = buildChannelInboundEventContext({
 			channel: "signal",
 			supplemental: { quote: entry.replyToBody ? {
@@ -664,7 +657,7 @@ function createSignalEventHandler(deps) {
 			}
 		});
 		if (shouldLogVerbose()) {
-			const preview = truncateUtf16Safe(body, 200).replace(/\\n/g, "\\\\n");
+			const preview = truncateUtf16Safe(body, 200).replace(/\r/g, "\\r").replace(/\n/g, "\\n");
 			logVerbose(`signal inbound: from=${ctxPayload.From} len=${body.length} preview="${preview}"`);
 		}
 		const statusReactionTimestamp = resolveSignalStatusReactionTimestamp(entry);
@@ -682,7 +675,6 @@ function createSignalEventHandler(deps) {
 			isDirect: !entry.isGroup,
 			isGroup: entry.isGroup,
 			isMentionableGroup: entry.isGroup,
-			requireMention: entry.requireMention === true,
 			canDetectMention: entry.canDetectMention === true,
 			effectiveWasMentioned: entry.wasMentioned === true
 		}));
@@ -872,15 +864,14 @@ function createSignalEventHandler(deps) {
 			}
 		});
 	}
-	async function flushSignalInboundEntries(entries) {
+	async function flushSignalInboundEntries(entries, lifecycle, settle) {
 		const last = entries.at(-1);
 		if (!last) return;
-		const { lifecycle, settle } = fanInChannelIngressLifecycles(entries.map((entry) => entry.turnAdoptionLifecycle));
 		if (entries.length === 1) {
-			await handleSignalInboundMessage(lifecycle ? {
+			await handleSignalInboundMessage({
 				...last,
 				turnAdoptionLifecycle: lifecycle
-			} : last);
+			});
 			await settle();
 			return;
 		}
@@ -894,14 +885,14 @@ function createSignalEventHandler(deps) {
 			...last,
 			bodyText: combinedText,
 			commandBody: combinedCommandBody,
-			...lifecycle ? { turnAdoptionLifecycle: lifecycle } : {},
+			turnAdoptionLifecycle: lifecycle,
 			isBatched: true,
 			nativeReplyBody: last.nativeReplyBody ?? last.bodyText,
 			media: entries.flatMap((entry) => entry.media ?? [])
 		});
 		await settle();
 	}
-	async function retrySignalInboundFlush(entries, initialError) {
+	async function retrySignalInboundFlush(entries, lifecycle, settle, initialError) {
 		let lastError = initialError;
 		for (const [attemptIndex, delayMs] of RETRYABLE_FLUSH_RETRY_DELAYS_MS.entries()) {
 			const attempt = attemptIndex + 1;
@@ -917,7 +908,7 @@ function createSignalEventHandler(deps) {
 			}
 			if (deps.abortSignal?.aborted) return;
 			try {
-				await flushSignalInboundEntries(entries);
+				await flushSignalInboundEntries(entries, lifecycle, settle);
 				return;
 			} catch (err) {
 				if (deps.abortSignal?.aborted) return;
@@ -927,26 +918,41 @@ function createSignalEventHandler(deps) {
 		}
 		throw lastError;
 	}
-	const flushDebouncedSignalInboundEntries = async (entries) => {
-		if (!entries.some((entry) => activeEnqueueEntries.has(entry)) && deps.abortSignal?.aborted) return;
-		try {
-			await flushSignalInboundEntries(entries);
-		} catch (err) {
-			if (!isSignalReplySessionInitConflictError(err)) throw err;
-			if (deps.abortSignal?.aborted) return;
-			const retryTask = retrySignalInboundFlush(entries, err).catch(async (terminalError) => {
-				await Promise.all(entries.map((entry) => Promise.resolve(entry.turnAdoptionLifecycle?.onAbandoned())));
-				throw terminalError;
-			});
-			deps.runTrackedTask?.(() => retryTask.catch(() => void 0));
-			await retryTask;
-		}
+	const flushDebouncedSignalInboundEntries = (entries, createFlush) => {
+		const { lifecycle, settle } = fanInChannelIngressLifecycles(entries.map((entry) => entry.turnAdoptionLifecycle));
+		return createFlush({
+			lifecycle,
+			dispatch: async (admissionLifecycle) => {
+				if (!entries.some((entry) => activeEnqueueEntries.has(entry)) && deps.abortSignal?.aborted) return;
+				try {
+					await flushSignalInboundEntries(entries, admissionLifecycle, settle);
+				} catch (err) {
+					if (!isSignalReplySessionInitConflictError(err)) throw err;
+					if (deps.abortSignal?.aborted) return;
+					await retrySignalInboundFlush(entries, admissionLifecycle, settle, err).catch(async (terminalError) => {
+						await Promise.all(entries.map((entry) => Promise.resolve(entry.turnAdoptionLifecycle?.onAbandoned())));
+						throw terminalError;
+					});
+				}
+			}
+		});
 	};
 	const reportSignalInboundFlushError = (err) => {
 		deps.runtime.error?.(`signal debounce flush failed: ${String(err)}`);
 	};
 	const pendingInboundRegistry = createSignalPendingInboundRegistry(deps.accountId);
-	const flushNormalSignalInboundEntries = pendingInboundRegistry.completeAfter(flushDebouncedSignalInboundEntries);
+	const trackSignalInboundFlush = (flush) => {
+		deps.runTrackedTask?.(() => flush.completion.catch(() => void 0));
+		return flush;
+	};
+	const flushNormalSignalInboundEntries = (entries, createFlush) => {
+		const flush = flushDebouncedSignalInboundEntries(entries, createFlush);
+		const completion = flush.completion.finally(() => pendingInboundRegistry.complete(entries));
+		return trackSignalInboundFlush({
+			admission: flush.admission,
+			completion
+		});
+	};
 	const { debouncer } = createChannelInboundDebouncer({
 		cfg: deps.cfg,
 		channel: "signal",
@@ -966,7 +972,7 @@ function createSignalEventHandler(deps) {
 		serializeImmediate: true,
 		buildKey: (entry) => resolveSignalControlLaneKey(deps.accountId, entry),
 		shouldDebounce: () => false,
-		onFlush: flushDebouncedSignalInboundEntries,
+		onFlush: (entries, createFlush) => trackSignalInboundFlush(flushDebouncedSignalInboundEntries(entries, createFlush)),
 		onError: reportSignalInboundFlushError
 	});
 	async function handleReactionOnlyInbound(params) {
@@ -1365,24 +1371,8 @@ function registerSignalReactionTargetsForDeliveredPayload(params) {
 }
 //#endregion
 //#region extensions/signal/src/signal-ingress.ts
-const SIGNAL_INGRESS_COMPLETED_TTL_MS = 720 * 60 * 60 * 1e3;
-const SIGNAL_INGRESS_COMPLETED_MAX_ENTRIES = 1e3;
-const SIGNAL_INGRESS_FAILED_TTL_MS = 720 * 60 * 60 * 1e3;
-const SIGNAL_INGRESS_FAILED_MAX_ENTRIES = 1e3;
 const SIGNAL_INGRESS_DRAIN_INTERVAL_MS = 1e3;
-var SignalIngressPermanentError = class extends Error {
-	constructor(reason, message, options) {
-		super(message, options);
-		this.reason = reason;
-		this.name = "SignalIngressPermanentError";
-	}
-};
-function isRecord$1(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function normalizeRawString(value) {
-	return typeof value === "string" && value.trim() ? value.trim() : null;
-}
+const SignalIngressPermanentError = createChannelIngressError("SignalIngressPermanentError", { withReason: true });
 function normalizeTimestamp(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : null;
 }
@@ -1407,15 +1397,15 @@ function inspectSignalIngressEvent(event) {
 	const dataMessage = resolveDataMessage(envelope);
 	const reactionMessage = isRecord$1(envelope.reactionMessage) ? envelope.reactionMessage : null;
 	if (!dataMessage && !reactionMessage) return null;
-	const senderUuid = normalizeRawString(envelope.sourceUuid);
-	const senderNumber = normalizeRawString(envelope.sourceNumber);
+	const senderUuid = normalizeNullableString(envelope.sourceUuid);
+	const senderNumber = normalizeNullableString(envelope.sourceNumber);
 	const senderKey = senderUuid ? `uuid:${senderUuid}` : senderNumber ? `number:${senderNumber}` : null;
 	if (!senderKey) throw new SignalIngressPermanentError("missing-sender", "Signal dispatchable envelope is missing sourceUuid/sourceNumber");
 	const timestamp = normalizeTimestamp(envelope.timestamp) ?? normalizeTimestamp(dataMessage?.timestamp);
 	if (timestamp === null) throw new SignalIngressPermanentError("missing-timestamp", "Signal dispatchable envelope is missing a stable timestamp");
 	const dataGroup = isRecord$1(dataMessage?.groupInfo) ? dataMessage.groupInfo : null;
 	const reactionGroup = isRecord$1(reactionMessage?.groupInfo) ? reactionMessage.groupInfo : null;
-	const groupId = normalizeRawString(dataGroup?.groupId) ?? normalizeRawString(reactionGroup?.groupId);
+	const groupId = normalizeNullableString(dataGroup?.groupId) ?? normalizeNullableString(reactionGroup?.groupId);
 	return {
 		eventId: JSON.stringify([senderKey, timestamp]),
 		laneKey: groupId ? `group:${groupId}` : `direct:${senderKey}`
@@ -1459,10 +1449,8 @@ async function startSignalIngressMonitor(params) {
 		pollIntervalMs: SIGNAL_INGRESS_DRAIN_INTERVAL_MS,
 		retention: {
 			pruneIntervalMs: 0,
-			completedTtlMs: SIGNAL_INGRESS_COMPLETED_TTL_MS,
-			completedMaxEntries: SIGNAL_INGRESS_COMPLETED_MAX_ENTRIES,
-			failedTtlMs: SIGNAL_INGRESS_FAILED_TTL_MS,
-			failedMaxEntries: SIGNAL_INGRESS_FAILED_MAX_ENTRIES
+			completedMaxEntries: 1e3,
+			failedMaxEntries: 1e3
 		},
 		appendRetryDelaysMs: [0],
 		drain: {
@@ -1680,7 +1668,9 @@ async function fetchAttachment(params) {
 	});
 	if (!result?.data) return null;
 	if (estimateBase64DecodedBytes(result.data) > params.maxBytes) throw new Error(`Signal attachment ${attachment.id} exceeds ${(params.maxBytes / (1024 * 1024)).toFixed(0)}MB limit`);
-	const buffer = Buffer.from(result.data, "base64");
+	const canonicalData = canonicalizeBase64(result.data);
+	if (!canonicalData) throw new Error(`Signal attachment ${attachment.id} returned malformed base64 data`);
+	const buffer = Buffer.from(canonicalData, "base64");
 	const originalFilename = normalizeOptionalString(attachment.filename ?? void 0);
 	const saved = await saveMediaBuffer(buffer, normalizeOptionalString(attachment.contentType ?? void 0) ?? await detectMime({
 		buffer,

package/dist/runtime-api.js

@@ -3,9 +3,9 @@ import { d as normalizeSignalMessagingTarget, u as looksLikeSignalTargetId } fro
 import { n as setSignalRuntime } from "./runtime-JPrGlV7h.js";
 import { a as signalMessageActions, o as resolveSignalReactionLevel } from "./transport-detection-Da06-LOL.js";
 import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-BjeDyKcz.js";
-import { n as SignalConfigSchema } from "./config-schema-DLvpQPN5.js";
+import { n as SignalConfigSchema } from "./config-schema-Y3dFGwdL.js";
 import { i as installSignalCli } from "./install-signal-cli-qJF7iC4h.js";
-import { t as monitorSignalProvider } from "./monitor-CHBkf7lk.js";
+import { t as monitorSignalProvider } from "./monitor-BvIzkrYW.js";
 import { t as sendMessageSignal } from "./send-B_Ks4MZr.js";
 import { t as probeSignal } from "./probe-Br9abaGp.js";
 import { PAIRING_APPROVED_MESSAGE } from "openclaw/plugin-sdk/channel-status";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/signal",
-  "version": "2026.7.2-beta.5",
+  "version": "2026.7.2-beta.7",
   "description": "OpenClaw Signal channel plugin",
   "type": "module",
   "dependencies": {
@@ -93,10 +93,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.7.2-beta.5"
+      "pluginApi": ">=2026.7.2-beta.7"
     },
     "build": {
-      "openclawVersion": "2026.7.2-beta.5",
+      "openclawVersion": "2026.7.2-beta.7",
       "bundledDist": false
     },
     "release": {
@@ -118,7 +118,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.7.2-beta.5"
+    "openclaw": ">=2026.7.2-beta.7"
   },
   "peerDependenciesMeta": {
     "openclaw": {