@openclaw/signal 2026.7.2-beta.5 → 2026.7.33

package/dist/.setup/config-schema-BQRy2Glu.mjs

@@ -0,0 +1,27 @@
+import { n as buildChannelConfigSchema, t as SignalConfigSchema } from "./config-api-KS-qhQvD.mjs";
+//#endregion
+//#region extensions/signal/src/config-schema.ts
+const SignalChannelConfigSchema = buildChannelConfigSchema(SignalConfigSchema, { uiHints: {
+	"": {
+		label: "Signal",
+		help: "Signal channel provider configuration including account identity and DM policy behavior. Keep account mapping explicit so routing remains stable across multi-device setups."
+	},
+	dmPolicy: {
+		label: "Signal DM Policy",
+		help: "Direct message access control (\"pairing\" recommended). \"open\" requires channels.signal.allowFrom=[\"*\"]."
+	},
+	configWrites: {
+		label: "Signal Config Writes",
+		help: "Allow Signal to write config in response to channel events/commands (default: true)."
+	},
+	account: {
+		label: "Signal Account",
+		help: "Signal account identifier (phone/number handle) used to bind this channel config to a specific Signal identity. Keep this aligned with your linked device/session state."
+	},
+	configPath: {
+		label: "Signal CLI Config Path",
+		help: "Optional directory passed to signal-cli via --config when the service needs a non-default signal-cli data path."
+	}
+} });
+//#endregion
+export { SignalChannelConfigSchema as t };

package/dist/{identity-BQ4OzXXk.js → .setup/identity-C8-yk4J9.mjs}

@@ -1,6 +1,5 @@
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { normalizeE164 } from "openclaw/plugin-sdk/text-utility-runtime";
-import { resolveAllowlistMatchByCandidates } from "openclaw/plugin-sdk/allow-from";
 //#region extensions/signal/src/normalize.ts
 function normalizeSignalMessagingTarget(raw) {
 	const trimmed = raw.trim();
@@ -62,16 +61,15 @@ function stripSignalPrefix(value) {
 }
 function resolveSignalSender(params) {
 	const sourceNumber = params.sourceNumber?.trim();
-	const sourceUuid = params.sourceUuid?.trim();
 	if (sourceNumber) {
 		const e164 = normalizeE164(sourceNumber);
 		if (e164) return {
 			kind: "phone",
 			raw: sourceNumber,
-			e164,
-			...sourceUuid ? { aliases: { uuid: sourceUuid } } : {}
+			e164
 		};
 	}
+	const sourceUuid = params.sourceUuid?.trim();
 	if (sourceUuid) return {
 		kind: "uuid",
 		raw: sourceUuid
@@ -123,24 +121,14 @@ function normalizeSignalAllowRecipient(entry) {
 	return parsed.kind === "phone" ? parsed.e164 : parsed.raw;
 }
 function isSignalSenderAllowed(sender, allowFrom) {
-	const normalizedAllowFrom = allowFrom.flatMap((entry) => {
-		const parsed = parseSignalAllowEntry(entry);
-		if (!parsed) return [];
-		if (parsed.kind === "any") return ["*"];
-		return [parsed.kind === "phone" ? `phone:${parsed.e164}` : `uuid:${parsed.raw}`];
+	if (allowFrom.length === 0) return false;
+	const parsed = allowFrom.map(parseSignalAllowEntry).filter((entry) => entry !== null);
+	if (parsed.some((entry) => entry.kind === "any")) return true;
+	return parsed.some((entry) => {
+		if (entry.kind === "phone" && sender.kind === "phone") return entry.e164 === sender.e164;
+		if (entry.kind === "uuid" && sender.kind === "uuid") return entry.raw === sender.raw;
+		return false;
 	});
-	const senderE164 = sender.kind === "phone" ? sender.e164 : sender.aliases?.e164;
-	const senderUuid = sender.kind === "uuid" ? sender.raw : sender.aliases?.uuid;
-	return resolveAllowlistMatchByCandidates({
-		allowList: normalizedAllowFrom,
-		candidates: [{
-			value: senderE164 ? `phone:${senderE164}` : void 0,
-			source: "phone"
-		}, {
-			value: senderUuid ? `uuid:${senderUuid}` : void 0,
-			source: "uuid"
-		}]
-	}).allowed;
 }
 //#endregion
 export { normalizeSignalAllowRecipient as a, resolveSignalSender as c, normalizeSignalMessagingTarget as d, isSignalSenderAllowed as i, looksLikeUuid as l, formatSignalSenderDisplay as n, resolveSignalPeerId as o, formatSignalSenderId as r, resolveSignalRecipient as s, formatSignalPairingIdLine as t, looksLikeSignalTargetId as u };

package/dist/{install-signal-cli-qJF7iC4h.js → .setup/install-signal-cli-BoniH0EF.mjs}

@@ -1,21 +1,19 @@
-import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import nodePath from "node:path";
+import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { CONFIG_DIR, extractArchive, resolveBrewExecutable } from "openclaw/plugin-sdk/setup-tools";
 import { createWriteStream } from "node:fs";
 import fs from "node:fs/promises";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
-import { readProviderJsonObjectResponse } from "openclaw/plugin-sdk/provider-http";
 import { runPluginCommandWithTimeout } from "openclaw/plugin-sdk/run-command";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
-import { withTempDownloadPath } from "openclaw/plugin-sdk/temp-path";
+import { resolvePreferredOpenClawTmpDir } from "openclaw/plugin-sdk/temp-path";
 //#region extensions/signal/src/install-signal-cli.ts
-const MAX_SIGNAL_CLI_ARCHIVE_BYTES = 256 * 1024 * 1024;
-/** @internal Exported for testing. */
-const MAX_SIGNAL_CLI_EXTRACTED_BYTES = 384 * 1024 * 1024;
-const SIGNAL_CLI_DOWNLOAD_TIMEOUT_MS = 5 * 6e4;
+const MAX_SIGNAL_CLI_ARCHIVE_BYTES = 268435456;
+const SIGNAL_CLI_DOWNLOAD_TIMEOUT_MS = 3e5;
 const SIGNAL_CLI_RELEASE_INFO_TIMEOUT_MS = 3e4;
 const CONTENT_LENGTH_RE = /^\d+$/;
 /** @internal Exported for testing. */
@@ -23,13 +21,7 @@ async function extractSignalCliArchive(archivePath, installRoot, timeoutMs) {
 	await extractArchive({
 		archivePath,
 		destDir: installRoot,
-		timeoutMs,
-		limits: {
-			maxArchiveBytes: MAX_SIGNAL_CLI_ARCHIVE_BYTES,
-			maxEntries: 32,
-			maxEntryBytes: MAX_SIGNAL_CLI_EXTRACTED_BYTES,
-			maxExtractedBytes: MAX_SIGNAL_CLI_EXTRACTED_BYTES
-		}
+		timeoutMs
 	});
 }
 /** @internal Exported for testing. */
@@ -44,29 +36,6 @@ function chunkByteLength(chunk) {
 	if (chunk instanceof Uint8Array) return chunk.byteLength;
 	return Buffer.byteLength(String(chunk));
 }
-async function cancelUnusedResponseBody(response) {
-	await response.body?.cancel().catch(() => void 0);
-}
-function normalizeReleaseAsset(value) {
-	if (!isRecord(value)) return;
-	const name = normalizeOptionalString(value.name);
-	const browserDownloadUrl = normalizeOptionalString(value.browser_download_url);
-	return name && browserDownloadUrl ? {
-		name,
-		browser_download_url: browserDownloadUrl
-	} : void 0;
-}
-function normalizeSignalCliRelease(value) {
-	const version = normalizeOptionalString(normalizeOptionalString(value.tag_name)?.replace(/^v/, ""));
-	if (!version || !Array.isArray(value.assets)) return;
-	return {
-		version,
-		assets: value.assets.flatMap((asset) => {
-			const normalized = normalizeReleaseAsset(asset);
-			return normalized ? [normalized] : [];
-		})
-	};
-}
 /**
 * Pick a native release asset from the official GitHub releases.
 *
@@ -99,10 +68,7 @@ async function downloadToFile(url, dest, maxRedirects = 5, maxBytes = MAX_SIGNAL
 		auditContext: "signal-cli-install-archive"
 	});
 	try {
-		if (!response.ok || !response.body) {
-			await cancelUnusedResponseBody(response);
-			throw new Error(`HTTP ${response.status || "?"} downloading file`);
-		}
+		if (!response.ok || !response.body) throw new Error(`HTTP ${response.status || "?"} downloading file`);
 		const rawLength = response.headers.get("content-length");
 		if (rawLength !== null) {
 			const trimmedLength = rawLength.trim();
@@ -111,14 +77,17 @@ async function downloadToFile(url, dest, maxRedirects = 5, maxBytes = MAX_SIGNAL
 		}
 		let totalBytes = 0;
 		const body = response.body;
-		await pipeline(isNodeReadableStream(body) ? body : Readable.fromWeb(body), new Transform({ transform(chunk, _encoding, callback) {
+		const readable = isNodeReadableStream(body) ? body : Readable.fromWeb(body);
+		const limiter = new Transform({ transform(chunk, _encoding, callback) {
 			totalBytes += chunkByteLength(chunk);
 			if (totalBytes > maxBytes) {
 				callback(/* @__PURE__ */ new Error(`signal-cli archive exceeded the ${maxBytes}-byte download cap.`));
 				return;
 			}
 			callback(null, chunk);
-		} }), createWriteStream(dest));
+		} });
+		const out = createWriteStream(dest);
+		await pipeline(readable, limiter, out);
 		completed = true;
 	} finally {
 		await release();
@@ -175,7 +144,7 @@ async function installSignalCliViaBrew(runtime) {
 			"install",
 			"signal-cli"
 		],
-		timeoutMs: 15 * 6e4
+		timeoutMs: 9e5
 	});
 	if (result.code !== 0) return {
 		ok: false,
@@ -213,19 +182,14 @@ async function installSignalCliFromRelease(runtime) {
 			Accept: "application/vnd.github+json"
 		} }
 	});
-	let releaseInfo;
+	let payload;
 	try {
-		if (!response.ok) {
-			await cancelUnusedResponseBody(response);
-			return {
-				ok: false,
-				error: `Failed to fetch release info (${response.status})`
-			};
-		}
+		if (!response.ok) return {
+			ok: false,
+			error: `Failed to fetch release info (${response.status})`
+		};
 		try {
-			const normalized = normalizeSignalCliRelease(await readProviderJsonObjectResponse(response, "signal.release-info"));
-			if (!normalized) throw new Error("Unexpected signal-cli release info");
-			releaseInfo = normalized;
+			payload = await readProviderJsonResponse(response, "signal.release-info");
 		} catch {
 			return {
 				ok: false,
@@ -235,44 +199,42 @@ async function installSignalCliFromRelease(runtime) {
 	} finally {
 		await release();
 	}
-	const asset = pickAsset(releaseInfo.assets, process.platform, process.arch);
+	const version = payload.tag_name?.replace(/^v/, "") ?? "unknown";
+	const asset = pickAsset(payload.assets ?? [], process.platform, process.arch);
 	if (!asset) return {
 		ok: false,
 		error: "No compatible release asset found for this platform."
 	};
-	return await withTempDownloadPath({
-		prefix: "openclaw-signal",
-		fileName: asset.name
-	}, async (archivePath) => {
-		runtime.log(`Downloading signal-cli ${releaseInfo.version} (${asset.name})…`);
-		await downloadToFile(asset.browser_download_url, archivePath);
-		const installRoot = nodePath.join(CONFIG_DIR, "tools", "signal-cli", releaseInfo.version);
-		await fs.mkdir(installRoot, { recursive: true });
-		if (!looksLikeArchive(normalizeLowercaseStringOrEmpty(asset.name))) return {
-			ok: false,
-			error: `Unsupported archive type: ${asset.name}`
-		};
-		try {
-			await extractSignalCliArchive(archivePath, installRoot, 6e4);
-		} catch (err) {
-			const message = formatErrorMessage(err);
-			return {
-				ok: false,
-				error: `Failed to extract ${asset.name}: ${message}`
-			};
-		}
-		const cliPath = await findSignalCliBinary(installRoot);
-		if (!cliPath) return {
-			ok: false,
-			error: `signal-cli binary not found after extracting ${asset.name}`
-		};
-		await fs.chmod(cliPath, 493).catch(() => {});
+	const tmpDir = await fs.mkdtemp(nodePath.join(resolvePreferredOpenClawTmpDir(), "openclaw-signal-"));
+	const archivePath = nodePath.join(tmpDir, asset.name);
+	runtime.log(`Downloading signal-cli ${version} (${asset.name})…`);
+	await downloadToFile(asset.browser_download_url, archivePath);
+	const installRoot = nodePath.join(CONFIG_DIR, "tools", "signal-cli", version);
+	await fs.mkdir(installRoot, { recursive: true });
+	if (!looksLikeArchive(normalizeLowercaseStringOrEmpty(asset.name))) return {
+		ok: false,
+		error: `Unsupported archive type: ${asset.name}`
+	};
+	try {
+		await extractSignalCliArchive(archivePath, installRoot, 6e4);
+	} catch (err) {
+		const message = formatErrorMessage(err);
 		return {
-			ok: true,
-			cliPath,
-			version: releaseInfo.version
+			ok: false,
+			error: `Failed to extract ${asset.name}: ${message}`
 		};
-	});
+	}
+	const cliPath = await findSignalCliBinary(installRoot);
+	if (!cliPath) return {
+		ok: false,
+		error: `signal-cli binary not found after extracting ${asset.name}`
+	};
+	await fs.chmod(cliPath, 493).catch(() => {});
+	return {
+		ok: true,
+		cliPath,
+		version
+	};
 }
 async function installSignalCli(runtime) {
 	if (process.platform === "win32") return {
@@ -283,4 +245,4 @@ async function installSignalCli(runtime) {
 	return installSignalCliViaBrew(runtime);
 }
 //#endregion
-export { installSignalCliFromRelease as a, installSignalCli as i, downloadToFile as n, looksLikeArchive as o, extractSignalCliArchive as r, pickAsset as s, MAX_SIGNAL_CLI_EXTRACTED_BYTES as t };
+export { looksLikeArchive as a, installSignalCliFromRelease as i, extractSignalCliArchive as n, pickAsset as o, installSignalCli as r, downloadToFile as t };