@openclaw/signal 2026.9.1-beta.1 → 2026.9.1

package/dist/api.js

@@ -1,13 +1,13 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-B9TcrBCr.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-Ch0dk2sh.js";
-import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-DBwSJm7U.js";
-import { i as installSignalCli } from "./install-signal-cli-Cpiyk0k1.js";
-import { t as monitorSignalProvider } from "./monitor-BIMAiZNm.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-u8wH_fQM.js";
-import { t as probeSignal } from "./probe-C2Z15YNS.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-CbPFIo0i.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-sL5Cf1nT.js";
+import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
+import { t as monitorSignalProvider } from "./monitor-BPOcRufA.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-DF4T9tXZ.js";
+import { t as probeSignal } from "./probe-Bjs1Yd79.js";
 //#region extensions/signal/src/channel.setup.ts
 const signalSetupPlugin = { ...createSignalPluginBase({
 	setupWizard: signalSetupWizard,

package/dist/{approval-auth-BsYHLTHK.js → approval-auth-CkljhI65.js}

@@ -8,7 +8,8 @@ import { normalizeE164 } from "openclaw/plugin-sdk/text-utility-runtime";
 function normalizeAliasKey(raw) {
 	const trimmed = raw.trim();
 	if (!trimmed) return;
-	return normalizeLowercaseStringOrEmpty(/^signal:/i.test(trimmed) ? trimmed.slice(7).trim() : trimmed) || void 0;
+	const withoutSignal = /^signal:/i.test(trimmed) ? trimmed.slice(7).trim() : trimmed;
+	return normalizeLowercaseStringOrEmpty(withoutSignal) || void 0;
 }
 function resolveAliasMap(params) {
 	const account = resolveSignalAccount({

package/dist/{approval-handler.runtime-COrjDqm1.js → approval-handler.runtime-DvZd_IWj.js}

@@ -1,8 +1,8 @@
 import { r as resolveDefaultSignalAccountId } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { i as resolveSignalTarget } from "./approval-auth-BsYHLTHK.js";
-import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-D8x4WFYZ.js";
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-u8wH_fQM.js";
+import { i as resolveSignalTarget } from "./approval-auth-CkljhI65.js";
+import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-Cno-4mmH.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-DF4T9tXZ.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";
@@ -23,7 +23,11 @@ function buildPendingPayload(params) {
 	return buildApprovalReactionPendingContent(params);
 }
 const signalApprovalNativeRuntime = createChannelApprovalNativeRuntimeAdapter({
-	eventKinds: ["exec", "plugin"],
+	eventKinds: [
+		"exec",
+		"plugin",
+		"system-agent"
+	],
 	availability: {
 		isConfigured: ({ context }) => Boolean(context),
 		shouldHandle: ({ context }) => Boolean(context)

package/dist/{approval-reactions-D8x4WFYZ.js → approval-reactions-Cno-4mmH.js}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { i as resolveSignalTarget, n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-BsYHLTHK.js";
+import { i as resolveSignalTarget, n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-CkljhI65.js";
 import { l as looksLikeUuid } from "./identity-YXPmgFMu.js";
-import { i as getOptionalSignalRuntime } from "./transport-detection-B9TcrBCr.js";
+import { i as getOptionalSignalRuntime } from "./transport-detection-CbPFIo0i.js";
 import { createLazyRuntimeSurface } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -127,14 +127,15 @@ var approval_reactions_exports = /* @__PURE__ */ __exportAll({
 });
 const PERSISTENT_NAMESPACE = "signal.approval-reactions.v2";
 const PERSISTENT_MAX_ENTRIES = 1e3;
-const DEFAULT_REACTION_TARGET_TTL_MS = 1440 * 60 * 1e3;
+const DEFAULT_REACTION_TARGET_TTL_MS = 864e5;
 const loadResolveApprovalOverGateway = createLazyRuntimeSurface(() => import("openclaw/plugin-sdk/approval-gateway-runtime"), (runtime) => runtime.resolveApprovalOverGateway);
+const reportPersistentApprovalReactionError = createPluginStateErrorReporter(getOptionalSignalRuntime, "signal", "approval-reaction-state", "Signal persistent approval reaction state failed");
 const signalApprovalReactionTargets = createApprovalReactionTargetStore({
 	namespace: PERSISTENT_NAMESPACE,
 	maxEntries: PERSISTENT_MAX_ENTRIES,
 	defaultTtlMs: DEFAULT_REACTION_TARGET_TTL_MS,
 	openStore: (storeParams) => getOptionalSignalRuntime()?.state.openKeyedStore(storeParams),
-	logPersistentError: createPluginStateErrorReporter(getOptionalSignalRuntime, "signal", "approval-reaction-state", "Signal persistent approval reaction state failed"),
+	logPersistentError: reportPersistentApprovalReactionError,
 	readPersistedTarget
 });
 function resolveSignalApprovalConversationKey(to) {
@@ -421,7 +422,7 @@ async function maybeResolveSignalApprovalReaction(params) {
 			return true;
 		}
 		params.logVerboseMessage?.(`signal: approval reaction failed id=${target.approvalId} sender=${actorId}: ${String(error)}`);
-		return true;
+		throw error;
 	}
 }
 function clearSignalApprovalReactionTargetsForTest() {

package/dist/channel-config-api.js

@@ -1,2 +1,2 @@
-import { t as SignalChannelConfigSchema } from "./config-schema-CkMIK7zp.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
 export { SignalChannelConfigSchema };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as signalPlugin } from "./channel-DBwSJm7U.js";
+import { t as signalPlugin } from "./channel-sL5Cf1nT.js";
 export { signalPlugin };

package/dist/{channel-DBwSJm7U.js → channel-sL5Cf1nT.js}

@@ -1,11 +1,12 @@
 import { a as isSignalManagedNativeConnectionUrlForBind, i as assignSignalManagedNativePort, l as normalizeSignalTransportHost, o as isValidSignalManagedNativePort, r as allocateSignalManagedNativePort, s as resolveLocalSignalTransportPort, u as normalizeSignalTransportUrl } from "./transport-policy-DxvSMHp9.js";
 import { a as resolveSignalAccountConfig, i as resolveSignalAccount, n as listSignalAccountIds, o as resolveSignalReplyToMode, r as resolveDefaultSignalAccountId, s as resolveSignalTransport } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
-import { i as resolveSignalTarget, r as listSignalAliasDirectoryEntries } from "./approval-auth-BsYHLTHK.js";
+import { i as resolveSignalTarget, r as listSignalAliasDirectoryEntries } from "./approval-auth-CkljhI65.js";
 import { c as resolveSignalSender, l as looksLikeUuid, o as resolveSignalPeerId, s as resolveSignalRecipient } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-B9TcrBCr.js";
-import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-Dnp5eQQJ.js";
-import { t as SignalChannelConfigSchema } from "./config-schema-CkMIK7zp.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-CbPFIo0i.js";
+import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-C18u1hW0.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
+import { describeAccountSnapshot, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { buildDmGroupAccountAllowlistAdapter } from "openclaw/plugin-sdk/allowlist-config-edit";
 import { createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
@@ -15,7 +16,6 @@ import { attachChannelToResult } from "openclaw/plugin-sdk/channel-send-result";
 import { PAIRING_APPROVED_MESSAGE } from "openclaw/plugin-sdk/channel-status";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
-import { resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/media-runtime";
 import { questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { chunkText, resolveTextChunkLimit } from "openclaw/plugin-sdk/reply-chunking";
 import { buildOutboundBaseSessionKey } from "openclaw/plugin-sdk/routing";
@@ -30,7 +30,6 @@ import { createChannelDmPolicy } from "openclaw/plugin-sdk/channel-dm-policy";
 import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$2, createCliPathTextInput, createDelegatedSetupWizardProxy, createDelegatedTextInputShouldPrompt, createPatchedAccountSetupAdapter, createSetupInputPresenceValidator, createSetupTranslator, patchChannelConfigForAccount, promptParsedAllowFromForAccount, setAccountAllowFromForChannel, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup-runtime";
 import { formatCliCommand, formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
-import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { createRestrictSendersChannelSecurity } from "openclaw/plugin-sdk/channel-policy";
 //#region extensions/signal/src/outbound-session.ts
@@ -209,13 +208,14 @@ function prepareSignalManagedNativeTransport(params) {
 }
 async function probeSignalTransport(params) {
 	const timeoutMs = params.timeoutMs ?? 1e4;
-	const resolved = resolveSignalTransport(params.transport.kind === "managed-native" ? prepareSignalManagedNativeTransport({
+	const transport = params.transport.kind === "managed-native" ? prepareSignalManagedNativeTransport({
 		cfg: params.cfg,
 		accountId: params.accountId,
 		overrides: managedTransportOptions(params.transport)
-	}) : params.transport);
-	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-BsJdp0oI.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
-	return (params.probeNative ?? (await import("./transport-probes.runtime-BsJdp0oI.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
+	}) : params.transport;
+	const resolved = resolveSignalTransport(transport);
+	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
+	return (params.probeNative ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
 }
 function writeSignalAccountTransport(params) {
 	const transport = normalizeTransport(params.transport);
@@ -229,13 +229,14 @@ function writeSignalAccountTransport(params) {
 		accountId: params.accountId,
 		transport
 	});
+	const next = patchChannelConfigForAccount({
+		cfg: params.cfg,
+		channel: "signal",
+		accountId: params.accountId,
+		patch: { transport }
+	});
 	const canonical = clearLegacySignalTransportFieldsForAccount({
-		cfg: patchChannelConfigForAccount({
-			cfg: params.cfg,
-			channel: "signal",
-			accountId: params.accountId,
-			patch: { transport }
-		}),
+		cfg: next,
 		accountId: params.accountId
 	});
 	if (transport.kind === "managed-native") resolveSignalAccount({
@@ -571,7 +572,7 @@ function createSignalSetupWizardProxy(loadWizard) {
 const signalDoctor = {
 	normalizeCompatibilityConfig,
 	cleanStaleConfig: async ({ cfg }) => {
-		const { detectSignalTransport } = await import("./transport-detection.runtime-kDheC5_M.js");
+		const { detectSignalTransport } = await import("./transport-detection.runtime-B81flHI8.js");
 		return await migrateLegacySignalTransportConfig({
 			cfg,
 			detect: detectSignalTransport
@@ -582,7 +583,7 @@ const signalDoctor = {
 //#region extensions/signal/src/shared.ts
 const SIGNAL_CHANNEL = "signal";
 async function loadSignalChannelRuntime() {
-	return await import("./channel.runtime-DvhLiRgJ.js");
+	return await import("./channel.runtime-D2a4nSLo.js");
 }
 const signalSetupWizard = createSignalSetupWizardProxy(async () => (await loadSignalChannelRuntime()).signalSetupWizard);
 const signalConfigAdapter = {
@@ -667,17 +668,16 @@ function createSignalPluginBase(params) {
 }
 //#endregion
 //#region extensions/signal/src/channel.ts
-const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-BIMAiZNm.js").then((n) => n.n));
-const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-C2Z15YNS.js").then((n) => n.n));
-const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-DolSm_sS.js"));
-const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-D8x4WFYZ.js").then((n) => n.n));
+const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-BPOcRufA.js").then((n) => n.n));
+const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-Bjs1Yd79.js").then((n) => n.n));
+const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-DHPi6R_z.js"));
+const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-Cno-4mmH.js").then((n) => n.n));
 async function resolveSignalSendContext(params) {
 	return {
 		send: resolveOutboundSendDep(params.deps, "signal") ?? (await loadSignalSendRuntime()).sendMessageSignal,
 		maxBytes: resolveChannelMediaMaxBytes({
 			cfg: params.cfg,
-			resolveChannelLimitMb: ({ cfg, accountId }) => cfg.channels?.signal?.accounts?.[accountId]?.mediaMaxMb ?? cfg.channels?.signal?.mediaMaxMb,
-			accountId: params.accountId
+			resolveChannelLimitMb: () => resolveSignalAccount(params).config.mediaMaxMb
 		})
 	};
 }
@@ -836,14 +836,15 @@ async function sendFormattedSignalText(ctx) {
 			accountId: ctx.accountId,
 			replyToId
 		});
-		const deliveryResult = attachChannelToResult("signal", attachSignalVisibleText(await send(to, chunk.text, {
+		const result = await send(to, chunk.text, {
 			cfg: ctx.cfg,
 			maxBytes,
 			accountId: ctx.accountId ?? void 0,
 			textMode: "plain",
 			textStyles: chunk.styles,
 			...replyOptions
-		}), chunk.text));
+		});
+		const deliveryResult = attachChannelToResult("signal", attachSignalVisibleText(result, chunk.text));
 		results.push(deliveryResult);
 		await ctx.onDeliveryResult?.(deliveryResult);
 	}
@@ -876,7 +877,7 @@ async function sendFormattedSignalMedia(ctx) {
 		accountId: ctx.accountId,
 		replyToId: ctx.replyToId
 	});
-	return attachChannelToResult("signal", attachSignalVisibleText(await send(to, formatted.text, {
+	const result = await send(to, formatted.text, {
 		cfg: ctx.cfg,
 		mediaUrl: ctx.mediaUrl,
 		...ctx.mediaAccess ? { mediaAccess: ctx.mediaAccess } : {},
@@ -887,7 +888,8 @@ async function sendFormattedSignalMedia(ctx) {
 		textMode: "plain",
 		textStyles: formatted.styles,
 		...replyOptions
-	}), formatted.text));
+	});
+	return attachChannelToResult("signal", attachSignalVisibleText(result, formatted.text));
 }
 async function registerDeliveredSignalApprovalPayloadForReactions(params) {
 	const account = resolveSignalAccount({
@@ -897,7 +899,7 @@ async function registerDeliveredSignalApprovalPayloadForReactions(params) {
 	const targetAuthor = normalizeOptionalString(account.config.account);
 	const targetAuthorUuid = normalizeOptionalString(account.config.accountUuid);
 	if (!targetAuthor && !targetAuthorUuid) return;
-	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-CkO8Q5i2.js").then((n) => n.n);
+	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-DJfSmeYo.js").then((n) => n.n);
 	registerSignalQuestionReactionTargetForDeliveredPayload({
 		cfg: params.cfg,
 		target: {

package/dist/{channel.runtime-DvhLiRgJ.js → channel.runtime-D2a4nSLo.js}

@@ -1,6 +1,6 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds } from "./accounts-DO4HMqaK.js";
-import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-DBwSJm7U.js";
-import { i as installSignalCli } from "./install-signal-cli-Cpiyk0k1.js";
+import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-sL5Cf1nT.js";
+import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
 import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 import { createDetectedBinaryStatus, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 //#region extensions/signal/src/setup-surface.ts
@@ -59,7 +59,8 @@ const signalSetupWizard = {
 			accountId
 		}).transport;
 		if (transport.kind !== "managed-native") return;
-		const cliDetected = await detectBinary((typeof credentialValues.cliPath === "string" ? credentialValues.cliPath : void 0) ?? (transport.kind === "managed-native" ? transport.cliPath : void 0) ?? "signal-cli");
+		const currentCliPath = (typeof credentialValues.cliPath === "string" ? credentialValues.cliPath : void 0) ?? (transport.kind === "managed-native" ? transport.cliPath : void 0) ?? "signal-cli";
+		const cliDetected = await detectBinary(currentCliPath);
 		if (!await prompter.confirm({
 			message: cliDetected ? t("wizard.signal.reinstallPrompt") : t("wizard.signal.installPrompt"),
 			initialValue: !cliDetected

package/dist/{client-CvnR8_XA.js → client-BmpTN7R3.js}

@@ -19,12 +19,12 @@ import { generateSecureUuid } from "openclaw/plugin-sdk/core";
 */
 const DEFAULT_TIMEOUT_MS$1 = 1e4;
 const DEFAULT_ATTACHMENT_RESPONSE_MAX_BYTES = 1048576;
-const SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES = 16 * 1024;
-const SIGNAL_REST_SUCCESS_RESPONSE_MAX_BYTES = 16 * 1024 * 1024;
-const WS_MAX_PAYLOAD = 1024 * 1024;
+const SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES = 16384;
+const SIGNAL_REST_SUCCESS_RESPONSE_MAX_BYTES = 16777216;
+const WS_MAX_PAYLOAD = 1048576;
 const WS_HANDSHAKE_MS = 3e4;
 const WS_SHUTDOWN_DRAIN_TIMEOUT_MS = 1500;
-const DEFAULT_SIGNAL_CONTAINER_MAX_ATTACHMENT_BYTES = 8 * 1024 * 1024;
+const DEFAULT_SIGNAL_CONTAINER_MAX_ATTACHMENT_BYTES = 8388608;
 const CONTAINER_TEXT_STYLE_MARKERS = {
 	BOLD: "**",
 	ITALIC: "*",
@@ -100,7 +100,7 @@ async function readSignalRestText(res, bodyIdleTimeoutMs, bodyTimeoutMs) {
 		onTimeout: signalRestRequestTimeoutError,
 		onOverflow: ({ maxBytes }) => /* @__PURE__ */ new Error(`Signal REST: text response exceeds ${maxBytes} bytes`)
 	});
-	return new TextDecoder().decode(bytes);
+	return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
 }
 async function readSignalRestErrorText(res, bodyIdleTimeoutMs, bodyTimeoutMs) {
 	return (await readResponseTextPrefix(res, SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES, {
@@ -632,6 +632,13 @@ async function containerRpcRequest(method, params, opts) {
 }
 //#endregion
 //#region extensions/signal/src/client.ts
+/** Thrown when the native SSE endpoint rejects the request with a non-2xx HTTP status. */
+var SignalSseRejectionError = class extends Error {
+	constructor(status, statusText) {
+		super(`Signal SSE failed (${status} ${statusText})`);
+		this.status = status;
+	}
+};
 const DEFAULT_TIMEOUT_MS = 1e4;
 const DEFAULT_SIGNAL_HTTP_RESPONSE_MAX_BYTES = 1048576;
 const MAX_SIGNAL_SSE_BUFFER_BYTES = 1048576;
@@ -683,7 +690,7 @@ function normalizeSignalSseTimeoutMs(timeoutMs) {
 	if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) return null;
 	return resolveTimerTimeoutMs(timeoutMs, DEFAULT_TIMEOUT_MS);
 }
-function requestSignalHttpText(url, options) {
+function requestSignalHttp(url, options) {
 	assertSignalHttpProtocol(url, "HTTP");
 	const timeoutMs = resolveTimerTimeoutMs(options.timeoutMs, DEFAULT_TIMEOUT_MS);
 	const client = url.protocol === "https:" ? https : http;
@@ -732,8 +739,7 @@ function requestSignalHttpText(url, options) {
 			res.on("end", () => {
 				resolveOnce({
 					status: res.statusCode ?? 0,
-					statusText: res.statusMessage || "error",
-					text: Buffer$1.concat(chunks).toString("utf8")
+					body: Buffer$1.concat(chunks)
 				});
 			});
 		});
@@ -753,7 +759,7 @@ async function signalRpcRequest(method, params, opts) {
 		params,
 		id
 	});
-	const res = await requestSignalHttpText(resolveSignalEndpointUrl(opts.baseUrl, "/api/v1/rpc"), {
+	const res = await requestSignalHttp(resolveSignalEndpointUrl(opts.baseUrl, "/api/v1/rpc"), {
 		method: "POST",
 		headers: {
 			"Content-Type": "application/json",
@@ -764,8 +770,9 @@ async function signalRpcRequest(method, params, opts) {
 		maxResponseBytes: opts.maxResponseBytes
 	});
 	if (res.status === 201) return;
-	if (!res.text) throw new Error(`Signal RPC empty response (status ${res.status})`);
-	const parsed = parseSignalRpcResponse(res.text, res.status);
+	const text = new TextDecoder("utf-8", { fatal: true }).decode(res.body);
+	if (!text) throw new Error(`Signal RPC empty response (status ${res.status})`);
+	const parsed = parseSignalRpcResponse(text, res.status);
 	if (parsed.error) {
 		const code = parsed.error.code ?? "unknown";
 		const msg = parsed.error.message ?? "Signal RPC error";
@@ -775,7 +782,7 @@ async function signalRpcRequest(method, params, opts) {
 }
 async function signalCheck(baseUrl, timeoutMs = DEFAULT_TIMEOUT_MS) {
 	try {
-		const res = await requestSignalHttpText(resolveSignalEndpointUrl(baseUrl, "/api/v1/check"), {
+		const res = await requestSignalHttp(resolveSignalEndpointUrl(baseUrl, "/api/v1/check"), {
 			method: "GET",
 			timeoutMs
 		});
@@ -830,7 +837,7 @@ function openSignalEventStream(url, abortSignal, timeoutMs = DEFAULT_TIMEOUT_MS)
 			const status = res.statusCode ?? 0;
 			if (status < 200 || status >= 300) {
 				res.resume();
-				rejectOnce(/* @__PURE__ */ new Error(`Signal SSE failed (${status} ${res.statusMessage || "error"})`));
+				rejectOnce(new SignalSseRejectionError(status, res.statusMessage || "error"));
 				return;
 			}
 			if (settled) {
@@ -927,4 +934,4 @@ async function streamSignalEvents(params) {
 	await flushEvent();
 }
 //#endregion
-export { containerRpcRequest as a, containerCheck as i, signalRpcRequest as n, streamContainerEvents as o, streamSignalEvents as r, signalCheck as t };
+export { containerCheck as a, streamSignalEvents as i, signalCheck as n, containerRpcRequest as o, signalRpcRequest as r, streamContainerEvents as s, SignalSseRejectionError as t };

package/dist/{client-adapter-D9SNPaNx.js → client-adapter-CDyW9LrQ.js}

@@ -1,4 +1,4 @@
-import { a as containerRpcRequest, i as containerCheck, n as signalRpcRequest$1, o as streamContainerEvents, r as streamSignalEvents$1, t as signalCheck$1 } from "./client-CvnR8_XA.js";
+import { a as containerCheck, i as streamSignalEvents$1, n as signalCheck$1, o as containerRpcRequest, r as signalRpcRequest$1, s as streamContainerEvents } from "./client-BmpTN7R3.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/client-adapter.ts
 /**

package/dist/{config-schema-CkMIK7zp.js → config-schema-CHihQTOp.js}

@@ -1,7 +1,7 @@
 import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId, resolveAccountEntry } from "openclaw/plugin-sdk/account-resolution";
-import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelConfigSchema, buildChannelReactionShape, buildCommonChannelAccountShape, buildGroupEntrySchema, requireAllowlistAllowFrom, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
+import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelAccountSchemaParts, buildChannelConfigSchema, buildChannelReactionShape, buildGroupEntrySchema, requireAllowlistAllowFrom, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
 //#region extensions/signal/src/config-ui-hints.ts
 const signalChannelConfigUiHints = {
@@ -104,13 +104,13 @@ const SignalGroupEntrySchema = buildGroupEntrySchema({ ingest: z.boolean().optio
 	"systemPrompt"
 ] });
 const SignalGroupsSchema = z.record(z.string(), SignalGroupEntrySchema.optional()).optional();
+const { accountShape, rootPolicyShape } = buildChannelAccountSchemaParts({
+	omit: ["mentionPatterns"],
+	streaming: ChannelDeliveryStreamingConfigSchema.optional(),
+	mediaMaxMb: z.number().int().positive().optional()
+});
 const SignalAccountSchemaBase = z.object({
-	...buildCommonChannelAccountShape({
-		useDefaults: true,
-		omit: ["mentionPatterns"],
-		streaming: ChannelDeliveryStreamingConfigSchema.optional(),
-		mediaMaxMb: z.number().int().positive().optional()
-	}),
+	...accountShape,
 	account: z.string().optional(),
 	accountUuid: z.string().optional(),
 	transport: SignalTransportSchema.optional(),
@@ -137,6 +137,7 @@ const SignalAccountSchemaBase = z.object({
 	actions: z.object({ reactions: z.boolean().optional() }).strict().optional()
 }).strict();
 const SignalConfigSchemaBase = SignalAccountSchemaBase.extend({
+	...rootPolicyShape,
 	accounts: z.record(z.string(), SignalAccountSchemaBase.optional()).optional(),
 	defaultAccount: z.string().optional()
 });
@@ -197,7 +198,8 @@ function validateSignalContainerAccounts(value, ctx) {
 		if (!account || !channelEnabled || account.enabled === false) continue;
 		const isDefaultAccount = normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID;
 		if ((isDefaultAccount && value.transport ? value.transport : account.transport)?.kind !== "container" || isDefaultAccount && value.transport) continue;
-		if (!normalizeOptionalString(account.account === void 0 ? value.account : account.account)) ctx.addIssue({
+		const effectiveAccount = account.account === void 0 ? value.account : account.account;
+		if (!normalizeOptionalString(effectiveAccount)) ctx.addIssue({
 			code: z.ZodIssueCode.custom,
 			message: "channels.signal account container transport requires an account number on the account or channel",
 			path: [

package/dist/contract-api.js

@@ -1,4 +1,4 @@
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { i as isSignalSenderAllowed } from "./identity-YXPmgFMu.js";
-import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-Cpiyk0k1.js";
+import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-7tEL37_j.js";
 export { MAX_SIGNAL_CLI_EXTRACTED_BYTES, downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeArchive, looksLikeSignalTargetId, normalizeSignalMessagingTarget, normalizeSignalReactionRecipient, pickAsset };

package/dist/{doctor-contract-api-Dnp5eQQJ.js → doctor-contract-api-C18u1hW0.js}

@@ -428,7 +428,7 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 	};
 }
 //#endregion
-//#region extensions/signal/doctor-contract-api.ts
+//#region extensions/signal/config-doctor-api.ts
 const RETIRED_SIGNAL_ACCOUNT_TRANSPORT_FIELDS = [
 	"configPath",
 	"httpUrl",

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-Dnp5eQQJ.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-C18u1hW0.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/{install-signal-cli-Cpiyk0k1.js → install-signal-cli-7tEL37_j.js}

@@ -12,10 +12,10 @@ import { runPluginCommandWithTimeout } from "openclaw/plugin-sdk/run-command";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import { withTempDownloadPath } from "openclaw/plugin-sdk/temp-path";
 //#region extensions/signal/src/install-signal-cli.ts
-const MAX_SIGNAL_CLI_ARCHIVE_BYTES = 256 * 1024 * 1024;
+const MAX_SIGNAL_CLI_ARCHIVE_BYTES = 268435456;
 /** @internal Exported for testing. */
-const MAX_SIGNAL_CLI_EXTRACTED_BYTES = 384 * 1024 * 1024;
-const SIGNAL_CLI_DOWNLOAD_TIMEOUT_MS = 5 * 6e4;
+const MAX_SIGNAL_CLI_EXTRACTED_BYTES = 402653184;
+const SIGNAL_CLI_DOWNLOAD_TIMEOUT_MS = 3e5;
 const SIGNAL_CLI_RELEASE_INFO_TIMEOUT_MS = 3e4;
 const CONTENT_LENGTH_RE = /^\d+$/;
 /** @internal Exported for testing. */
@@ -57,7 +57,8 @@ function normalizeReleaseAsset(value) {
 	} : void 0;
 }
 function normalizeSignalCliRelease(value) {
-	const version = normalizeOptionalString(normalizeOptionalString(value.tag_name)?.replace(/^v/, ""));
+	const tagName = normalizeOptionalString(value.tag_name);
+	const version = normalizeOptionalString(tagName?.replace(/^v/, ""));
 	if (!version || !Array.isArray(value.assets)) return;
 	return {
 		version,
@@ -114,14 +115,17 @@ async function downloadToFile(url, dest, maxRedirects = 5, maxBytes = MAX_SIGNAL
 		}
 		let totalBytes = 0;
 		const body = response.body;
-		await pipeline(isNodeReadableStream(body) ? body : Readable.fromWeb(body), new Transform({ transform(chunk, _encoding, callback) {
+		const readable = isNodeReadableStream(body) ? body : Readable.fromWeb(body);
+		const limiter = new Transform({ transform(chunk, _encoding, callback) {
 			totalBytes += chunkByteLength(chunk);
 			if (totalBytes > maxBytes) {
 				callback(/* @__PURE__ */ new Error(`signal-cli archive exceeded the ${maxBytes}-byte download cap.`));
 				return;
 			}
 			callback(null, chunk);
-		} }), createWriteStream(dest));
+		} });
+		const out = createWriteStream(dest);
+		await pipeline(readable, limiter, out);
 		completed = true;
 	} finally {
 		await release();
@@ -178,7 +182,7 @@ async function installSignalCliViaBrew(runtime) {
 			"install",
 			"signal-cli"
 		],
-		timeoutMs: 15 * 6e4
+		timeoutMs: 9e5
 	});
 	if (result.code !== 0) return {
 		ok: false,

package/dist/{monitor-BIMAiZNm.js → monitor-BPOcRufA.js}

@@ -3,20 +3,21 @@ import { l as normalizeSignalTransportHost } from "./transport-policy-DxvSMHp9.j
 import { i as resolveSignalAccount, o as resolveSignalReplyToMode } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, f as isSignalNativeApprovalHandlerConfigured, i as getOptionalSignalRuntime, l as formatSignalMediaText, n as registerSignalReplyContext, o as materializeSignalPresentationFallback } from "./transport-detection-B9TcrBCr.js";
-import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-D9SNPaNx.js";
-import { n as sendReactionSignal } from "./reaction-runtime-api-Ch0dk2sh.js";
-import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-D8x4WFYZ.js";
-import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-CkO8Q5i2.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-u8wH_fQM.js";
+import { c as resolveSignalReactionLevel, f as isSignalNativeApprovalHandlerConfigured, i as getOptionalSignalRuntime, l as formatSignalMediaText, n as registerSignalReplyContext, o as materializeSignalPresentationFallback } from "./transport-detection-CbPFIo0i.js";
+import { t as SignalSseRejectionError } from "./client-BmpTN7R3.js";
+import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-CDyW9LrQ.js";
+import { n as sendReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-Cno-4mmH.js";
+import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-DJfSmeYo.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-DF4T9tXZ.js";
 import { bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor, createChannelMessageReplyPipeline, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
-import { canonicalizeBase64, detectMime, estimateBase64DecodedBytes, kindFromMime, saveMediaBuffer } from "openclaw/plugin-sdk/media-runtime";
 import { resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
 import { asPositiveSafeInteger, isRecord, normalizeNullableString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
 import { normalizeE164, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInboundDebouncer, filterChannelInboundQuoteContext, formatInboundEnvelope, formatInboundFromLabel, formatInboundMediaUnavailableText, hasVisibleInboundReplyDispatch, logInboundDrop, matchesMentionPatterns, readAgentRunTerminalOutcome, resolveEnvelopeFormatOptions, resolveInboundMentionDecision, resolveInboundSupplementalSenderAllowed, runChannelInboundEvent, shouldDebounceTextInbound, toHistoryMediaEntries, toInboundMediaFactsWithMetadata } from "openclaw/plugin-sdk/channel-inbound";
+import { canonicalizeBase64, detectMime, estimateBase64DecodedBytes, kindFromMime, saveMediaBuffer } from "openclaw/plugin-sdk/media-runtime";
 import { collectErrorGraphCandidates, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { ensurePortAvailable, extractErrorCode, formatErrorMessage as formatErrorMessage$1, resolvePinnedMainDmOwnerFromAllowlist } from "openclaw/plugin-sdk/security-runtime";
 import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention } from "openclaw/plugin-sdk/channel-policy";
@@ -45,7 +46,7 @@ import { upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-ru
 import { listChatCommands, maybeResolveTextAlias, normalizeCommandBody } from "openclaw/plugin-sdk/command-auth-native";
 import { isAbortRequestText } from "openclaw/plugin-sdk/command-primitives-runtime";
 import { resolveChannelContextVisibilityMode } from "openclaw/plugin-sdk/context-visibility-runtime";
-import { channelReadyPatch } from "openclaw/plugin-sdk/gateway-runtime";
+import { channelBlockedPatch, channelReadyPatch } from "openclaw/plugin-sdk/gateway-runtime";
 //#region extensions/signal/src/daemon.ts
 const SIGNAL_DAEMON_STOP_KILL_TIMEOUT_MS = 1500;
 function formatSignalDaemonExit(exit) {
@@ -1648,10 +1649,10 @@ async function startSignalIngressMonitor(params) {
 			createClaimError: (_kind, claim) => new SignalIngressPermanentError("unsupported-event", `Signal ingress row ${claim.id} has an invalid payload`)
 		},
 		deliver: ([event, parsedPayload], lifecycle) => parsedPayload ? params.dispatch(event, lifecycle, parsedPayload) : void 0,
-		onDurableAdmission: async (_event, { facts }) => {
+		onDurableAdmission: async (_event, { facts, isNew }) => {
 			const { numberAliasEventId } = facts;
 			if (!numberAliasEventId) return;
-			if (!await ingressQueue.complete(numberAliasEventId)) await ingressQueue.complete(facts.eventId);
+			if (!await ingressQueue.complete(numberAliasEventId) && isNew) await ingressQueue.complete(facts.eventId);
 		},
 		pollIntervalMs: SIGNAL_INGRESS_DRAIN_INTERVAL_MS,
 		retention: {
@@ -1684,6 +1685,14 @@ const DEFAULT_RECONNECT_POLICY = {
 	factor: 2,
 	jitter: .2
 };
+function isPermanentSignalSseRejection(error) {
+	if (!(error instanceof SignalSseRejectionError)) return false;
+	return error.status >= 400 && error.status < 500 && ![
+		408,
+		425,
+		429
+	].includes(error.status);
+}
 function publishSignalRecovering(statusSink, lastError) {
 	statusSink?.({
 		connected: false,
@@ -1731,6 +1740,12 @@ async function runSignalSseLoop({ baseUrl, account, abortSignal, runtime, onEven
 		} catch (err) {
 			if (abortSignal?.aborted) return;
 			runtime.error?.(`Signal stream error: ${String(err)}`);
+			if (isPermanentSignalSseRejection(err)) {
+				const lastError = `Signal daemon rejected the event stream: ${err.message}. Check the configured account and daemon URL, fix the daemon or proxy response, then restart the channel.`;
+				runtime.log?.(`Signal reconnect stopped: ${lastError}`);
+				statusSink?.(channelBlockedPatch(lastError, { connected: false }));
+				return;
+			}
 			publishSignalRecovering(statusSink, String(err));
 			reconnectAttempts += 1;
 			const delayMs = computeBackoff(reconnectPolicy, reconnectAttempts);
@@ -1816,7 +1831,7 @@ function buildSignalReactionSystemEventText(params) {
 	const withTarget = params.targetLabel ? `${base} from ${params.targetLabel}` : base;
 	return params.groupLabel ? `${withTarget} in ${params.groupLabel}` : withTarget;
 }
-const SIGNAL_ATTACHMENT_RPC_RESPONSE_HEADROOM_BYTES = 64 * 1024;
+const SIGNAL_ATTACHMENT_RPC_RESPONSE_HEADROOM_BYTES = 65536;
 const SIGNAL_BASE64_OVERHEAD_NUMERATOR = 4;
 const SIGNAL_BASE64_OVERHEAD_DENOMINATOR = 3;
 function deriveSignalAttachmentRpcMaxResponseBytes(maxBytes) {
@@ -1826,7 +1841,7 @@ function deriveSignalAttachmentRpcMaxResponseBytes(maxBytes) {
 async function fetchAttachment(params) {
 	const { attachment } = params;
 	if (!attachment?.id) return null;
-	if (typeof attachment.size === "number" && attachment.size > params.maxBytes) throw new Error(`Signal attachment ${attachment.id} exceeds ${(params.maxBytes / (1024 * 1024)).toFixed(0)}MB limit`);
+	if (typeof attachment.size === "number" && attachment.size > params.maxBytes) throw new Error(`Signal attachment ${attachment.id} exceeds ${(params.maxBytes / 1048576).toFixed(0)}MB limit`);
 	const rpcParams = { id: attachment.id };
 	if (params.account) rpcParams.account = params.account;
 	if (params.groupId) rpcParams.groupId = params.groupId;
@@ -1838,15 +1853,16 @@ async function fetchAttachment(params) {
 		transportKind: params.transportKind
 	});
 	if (!result?.data) return null;
-	if (estimateBase64DecodedBytes(result.data) > params.maxBytes) throw new Error(`Signal attachment ${attachment.id} exceeds ${(params.maxBytes / (1024 * 1024)).toFixed(0)}MB limit`);
+	if (estimateBase64DecodedBytes(result.data) > params.maxBytes) throw new Error(`Signal attachment ${attachment.id} exceeds ${(params.maxBytes / 1048576).toFixed(0)}MB limit`);
 	const canonicalData = canonicalizeBase64(result.data);
 	if (!canonicalData) throw new Error(`Signal attachment ${attachment.id} returned malformed base64 data`);
 	const buffer = Buffer.from(canonicalData, "base64");
 	const originalFilename = normalizeOptionalString(attachment.filename ?? void 0);
-	const saved = await saveMediaBuffer(buffer, normalizeOptionalString(attachment.contentType ?? void 0) ?? await detectMime({
+	const contentType = normalizeOptionalString(attachment.contentType ?? void 0) ?? await detectMime({
 		buffer,
 		filePath: originalFilename
-	}), "inbound", params.maxBytes, originalFilename);
+	});
+	const saved = await saveMediaBuffer(buffer, contentType, "inbound", params.maxBytes, originalFilename);
 	return {
 		path: saved.path,
 		contentType: saved.contentType

package/dist/{probe-C2Z15YNS.js → probe-Bjs1Yd79.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { t as detectSignalTransport } from "./transport-detection-B9TcrBCr.js";
-import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-D9SNPaNx.js";
+import { t as detectSignalTransport } from "./transport-detection-CbPFIo0i.js";
+import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-CDyW9LrQ.js";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/probe.ts

package/dist/{question-reactions-CkO8Q5i2.js → question-reactions-DJfSmeYo.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { i as resolveSignalTarget } from "./approval-auth-BsYHLTHK.js";
-import { c as resolveSignalApprovalTargetAuthorKeys, s as resolveSignalApprovalConversationKey } from "./approval-reactions-D8x4WFYZ.js";
+import { i as resolveSignalTarget } from "./approval-auth-CkljhI65.js";
+import { c as resolveSignalApprovalTargetAuthorKeys, s as resolveSignalApprovalConversationKey } from "./approval-reactions-Cno-4mmH.js";
 import { createQuestionReactionTargetStore, questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 //#region extensions/signal/src/question-reactions.ts

package/dist/{reaction-runtime-api-Ch0dk2sh.js → reaction-runtime-api-7FQFT_qb.js}

@@ -1,12 +1,13 @@
 import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
 import { r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.js";
-import { n as signalRpcRequest } from "./client-adapter-D9SNPaNx.js";
+import { n as signalRpcRequest } from "./client-adapter-CDyW9LrQ.js";
 import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 //#region extensions/signal/src/send-reactions.ts
 async function sendReactionSignalCore(params) {
+	const cfg = requireRuntimeConfig(params.opts.cfg, "Signal reactions");
 	const accountInfo = resolveSignalAccount({
-		cfg: requireRuntimeConfig(params.opts.cfg, "Signal reactions"),
+		cfg,
 		accountId: params.opts.accountId
 	});
 	const { baseUrl, account } = resolveSignalRpcContext(params.opts, accountInfo);

package/dist/reaction-runtime-api.js

@@ -1,2 +1,2 @@
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-Ch0dk2sh.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
 export { removeReactionSignal, sendReactionSignal };

package/dist/runtime-api.js

@@ -1,14 +1,14 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
-import { a as setSignalRuntime, c as resolveSignalReactionLevel, s as signalMessageActions } from "./transport-detection-B9TcrBCr.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-Ch0dk2sh.js";
-import { n as SignalConfigSchema } from "./config-schema-CkMIK7zp.js";
-import { i as installSignalCli } from "./install-signal-cli-Cpiyk0k1.js";
-import { t as monitorSignalProvider } from "./monitor-BIMAiZNm.js";
-import { t as sendMessageSignal } from "./send-u8wH_fQM.js";
-import { t as probeSignal } from "./probe-C2Z15YNS.js";
+import { a as setSignalRuntime, c as resolveSignalReactionLevel, s as signalMessageActions } from "./transport-detection-CbPFIo0i.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { n as SignalConfigSchema } from "./config-schema-CHihQTOp.js";
+import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
+import { t as monitorSignalProvider } from "./monitor-BPOcRufA.js";
+import { t as sendMessageSignal } from "./send-DF4T9tXZ.js";
+import { t as probeSignal } from "./probe-Bjs1Yd79.js";
+import { resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { PAIRING_APPROVED_MESSAGE } from "openclaw/plugin-sdk/channel-status";
-import { resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/media-runtime";
 import { buildBaseAccountStatusSnapshot, buildBaseChannelStatusSummary, collectStatusIssuesFromLastError, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";
 import { normalizeE164 } from "openclaw/plugin-sdk/text-utility-runtime";
 import { DEFAULT_ACCOUNT_ID, applyAccountNameToChannelSection, deleteAccountFromConfigSection, emptyPluginConfigSchema, formatPairingApproveHint, getChatChannelMeta, migrateBaseNameToDefaultAccount, normalizeAccountId, setAccountEnabledInConfigSection } from "openclaw/plugin-sdk/core";

package/dist/{send-u8wH_fQM.js → send-DF4T9tXZ.js}

@@ -1,12 +1,12 @@
 import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { n as registerSignalReplyContext, u as markdownToSignalText } from "./transport-detection-B9TcrBCr.js";
-import { n as signalRpcRequest } from "./client-adapter-D9SNPaNx.js";
+import { n as registerSignalReplyContext, u as markdownToSignalText } from "./transport-detection-CbPFIo0i.js";
+import { n as signalRpcRequest } from "./client-adapter-CDyW9LrQ.js";
 import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
-import { kindFromMime, resolveOutboundAttachmentFromUrl } from "openclaw/plugin-sdk/media-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { kindFromMime, resolveOutboundAttachmentFromUrl } from "openclaw/plugin-sdk/media-runtime";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 //#region extensions/signal/src/send.ts
 function assertSignalRecipientDelivery(result, target) {
@@ -28,8 +28,9 @@ function assertSignalRecipientDelivery(result, target) {
 }
 async function resolveSignalRpcAccountInfo(opts) {
 	if (!opts.cfg) throw new Error("Signal RPC account resolution requires a resolved runtime config. Load and resolve config at the command or gateway boundary, then pass cfg through the runtime path.");
+	const cfg = requireRuntimeConfig(opts.cfg, "Signal RPC account resolution");
 	return resolveSignalAccount({
-		cfg: requireRuntimeConfig(opts.cfg, "Signal RPC account resolution"),
+		cfg,
 		accountId: opts.accountId
 	});
 }
@@ -111,7 +112,8 @@ function resolveSignalQuoteParams(opts) {
 	};
 }
 function isSignalQuoteMetadataRejection(error) {
-	const normalized = normalizeLowercaseStringOrEmpty(error instanceof Error ? error.message : String(error));
+	const message = error instanceof Error ? error.message : String(error);
+	const normalized = normalizeLowercaseStringOrEmpty(message);
 	const rpcCode = /^signal rpc (-?\d+):/u.exec(normalized)?.[1];
 	if (rpcCode !== void 0) {
 		if (rpcCode !== "-32602") return false;
@@ -142,7 +144,7 @@ async function sendMessageSignal(to, text, opts) {
 		if (typeof opts.maxBytes === "number") return opts.maxBytes;
 		if (typeof accountInfo.config.mediaMaxMb === "number") return accountInfo.config.mediaMaxMb * 1024 * 1024;
 		if (typeof cfg.agents?.defaults?.mediaMaxMb === "number") return cfg.agents.defaults.mediaMaxMb * 1024 * 1024;
-		return 8 * 1024 * 1024;
+		return 8388608;
 	})();
 	let attachments;
 	if (opts.mediaUrl?.trim()) {
@@ -157,16 +159,18 @@ async function sendMessageSignal(to, text, opts) {
 			kind: kindFromMime(resolved.contentType ?? void 0) ?? "unknown"
 		};
 	}
-	if (message.trim()) if (textMode === "plain") textStyles = opts.textStyles ?? [];
-	else {
-		const tableMode = resolveMarkdownTableMode({
-			cfg,
-			channel: "signal",
-			accountId: accountInfo.accountId
-		});
-		const formatted = markdownToSignalText(message, { tableMode });
-		message = formatted.text;
-		textStyles = formatted.styles;
+	if (message.trim()) {
+		if (textMode === "plain") textStyles = opts.textStyles ?? [];
+		else {
+			const tableMode = resolveMarkdownTableMode({
+				cfg,
+				channel: "signal",
+				accountId: accountInfo.accountId
+			});
+			const formatted = markdownToSignalText(message, { tableMode });
+			message = formatted.text;
+			textStyles = formatted.styles;
+		}
 	}
 	if (!message.trim() && (!attachments || attachments.length === 0)) throw new Error("Signal send requires text or media");
 	const params = { message };

package/dist/{send.runtime-DolSm_sS.js → send.runtime-DHPi6R_z.js}

@@ -1,2 +1,2 @@
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-u8wH_fQM.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-DF4T9tXZ.js";
 export { sendMessageSignal, sendTypingSignal };

package/dist/{transport-detection-B9TcrBCr.js → transport-detection-CbPFIo0i.js}

@@ -1,10 +1,9 @@
 import { u as normalizeSignalTransportUrl } from "./transport-policy-DxvSMHp9.js";
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.js";
-import { n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-BsYHLTHK.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-Ch0dk2sh.js";
+import { n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-CkljhI65.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
-import { kindFromMime } from "openclaw/plugin-sdk/media-runtime";
 import { questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
 import { resolveReactionLevel } from "openclaw/plugin-sdk/status-helpers";
@@ -15,6 +14,7 @@ import { createLazyChannelApprovalNativeRuntimeAdapter } from "openclaw/plugin-s
 import { shouldSuppressLocalNativeExecApprovalPrompt } from "openclaw/plugin-sdk/approval-native-runtime";
 import { buildApprovalReactionPendingContentForRequest } from "openclaw/plugin-sdk/approval-reaction-runtime";
 import { formatMediaPlaceholderText } from "openclaw/plugin-sdk/channel-inbound";
+import { kindFromMime } from "openclaw/plugin-sdk/media-runtime";
 import { createActionGate, jsonResult, readStringParam, resolveReactionMessageId } from "openclaw/plugin-sdk/channel-actions";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-reply-runtime";
@@ -58,7 +58,11 @@ const signalApproval = createApproverRestrictedNativeApprovalCapabilityFromForwa
 		}).manualFallbackPayload }
 	},
 	createNativeRuntime: (routing) => createLazyChannelApprovalNativeRuntimeAdapter({
-		eventKinds: ["exec", "plugin"],
+		eventKinds: [
+			"exec",
+			"plugin",
+			"system-agent"
+		],
 		isConfigured: ({ cfg, accountId, context }) => Boolean(context) && routing.isNativeApprovalHandlerConfigured({
 			cfg,
 			accountId
@@ -69,7 +73,7 @@ const signalApproval = createApproverRestrictedNativeApprovalCapabilityFromForwa
 			approvalKind,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-COrjDqm1.js")).signalApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-DvZd_IWj.js")).signalApprovalNativeRuntime
 	})
 });
 const signalApprovalRouting = signalApproval.routing;
@@ -164,8 +168,9 @@ function markdownToSignalText(markdown, options = {}) {
 	return renderSignalText(markdownToSignalIR(markdown, options));
 }
 function markdownToSignalTextChunks(markdown, limit, options = {}) {
+	const ir = markdownToSignalIR(markdown, options);
 	return renderMarkdownIRChunksWithinLimit({
-		ir: markdownToSignalIR(markdown, options),
+		ir,
 		limit,
 		assistantTranscriptRoleMessageBoundaries: true,
 		renderChunk: renderSignalText,
@@ -200,11 +205,12 @@ function formatSignalMediaText(media) {
 * - "extensive": Agent can react liberally
 */
 function resolveSignalReactionLevel(params) {
+	const account = resolveSignalAccount({
+		cfg: params.cfg,
+		accountId: params.accountId
+	});
 	return resolveReactionLevel({
-		value: resolveSignalAccount({
-			cfg: params.cfg,
-			accountId: params.accountId
-		}).config.reactionLevel,
+		value: account.config.reactionLevel,
 		defaultLevel: "minimal",
 		invalidFallback: "minimal"
 	});
@@ -317,10 +323,11 @@ function materializeSignalPresentationFallback(payload, presentationOverride) {
 	const presentation = presentationOverride ?? normalizeMessagePresentation(payload.presentation);
 	if (!presentation) return payload;
 	const currentText = payload.text?.trim() ?? "";
-	const presentationFallback = renderMessagePresentationFallbackText({ presentation: Boolean(getExecApprovalReplyMetadata(payload) && currentText) ? {
+	const fallbackPresentation = Boolean(getExecApprovalReplyMetadata(payload) && currentText) ? {
 		...presentation,
 		blocks: presentation.blocks.filter((block) => !isMessagePresentationInteractiveBlock(block))
-	} : presentation });
+	} : presentation;
+	const presentationFallback = renderMessagePresentationFallbackText({ presentation: fallbackPresentation });
 	const text = currentText.includes(presentationFallback) ? currentText : [currentText, presentationFallback].filter(Boolean).join("\n\n");
 	const { presentation: _presentation, ...withoutPresentation } = payload;
 	return {
@@ -344,7 +351,7 @@ const { setRuntime: setSignalRuntime, tryGetRuntime: getOptionalSignalRuntime }
 //#region extensions/signal/src/reply-authors.ts
 const PERSISTENT_NAMESPACE = "signal.reply-authors.v1";
 const PERSISTENT_MAX_ENTRIES = 5e3;
-const DEFAULT_REPLY_AUTHOR_TTL_MS = 10080 * 60 * 1e3;
+const DEFAULT_REPLY_AUTHOR_TTL_MS = 6048e5;
 const { memoryReplyContexts } = signalReplyAuthorState;
 function openSignalReplyAuthorStore() {
 	if (signalReplyAuthorState.persistentStoreDisabled) return;
@@ -515,7 +522,7 @@ const DEFAULT_PROBE_TIMEOUT_MS = 1e4;
 async function detectSignalTransport(params) {
 	const url = normalizeSignalTransportUrl(params.url);
 	const timeoutMs = params.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS;
-	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-BsJdp0oI.js");
+	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-B7kr_6Zu.js");
 	const probeNative = params.probeNative ?? probes?.nativeCheck;
 	const probeContainer = params.probeContainer ?? probes?.containerCheck;
 	if (!probeNative || !probeContainer) throw new Error("Signal transport probes are unavailable");

package/dist/{transport-detection.runtime-kDheC5_M.js → transport-detection.runtime-B81flHI8.js}

@@ -1,2 +1,2 @@
-import { t as detectSignalTransport } from "./transport-detection-B9TcrBCr.js";
+import { t as detectSignalTransport } from "./transport-detection-CbPFIo0i.js";
 export { detectSignalTransport };

package/dist/transport-probes.runtime-B7kr_6Zu.js

@@ -0,0 +1,2 @@
+import { a as containerCheck, n as signalCheck } from "./client-BmpTN7R3.js";
+export { containerCheck, signalCheck as nativeCheck };

package/openclaw.plugin.json

@@ -543,7 +543,6 @@
                   "type": "boolean"
                 },
                 "dmPolicy": {
-                  "default": "pairing",
                   "type": "string",
                   "enum": [
                     "pairing",
@@ -582,7 +581,6 @@
                   }
                 },
                 "groupPolicy": {
-                  "default": "allowlist",
                   "type": "string",
                   "enum": [
                     "open",
@@ -996,10 +994,6 @@
                   "additionalProperties": false
                 }
               },
-              "required": [
-                "dmPolicy",
-                "groupPolicy"
-              ],
               "additionalProperties": false
             }
           },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/signal",
-  "version": "2026.9.1-beta.1",
+  "version": "2026.9.1",
   "description": "OpenClaw Signal channel plugin",
   "type": "module",
   "dependencies": {
@@ -93,10 +93,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.9.1-beta.1"
+      "pluginApi": ">=2026.9.1"
     },
     "build": {
-      "openclawVersion": "2026.9.1-beta.1",
+      "openclawVersion": "2026.9.1",
       "bundledDist": false
     },
     "release": {
@@ -118,7 +118,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.9.1-beta.1"
+    "openclaw": ">=2026.9.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/dist/transport-probes.runtime-BsJdp0oI.js

@@ -1,2 +0,0 @@
-import { i as containerCheck, t as signalCheck } from "./client-CvnR8_XA.js";
-export { containerCheck, signalCheck as nativeCheck };