@openclaw/signal 2026.9.1-beta.1 → 2026.9.2

package/dist/api.js

@@ -1,13 +1,13 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-B9TcrBCr.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-Ch0dk2sh.js";
-import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-DBwSJm7U.js";
-import { i as installSignalCli } from "./install-signal-cli-Cpiyk0k1.js";
-import { t as monitorSignalProvider } from "./monitor-BIMAiZNm.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-u8wH_fQM.js";
-import { t as probeSignal } from "./probe-C2Z15YNS.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-BcDiypLn.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-B-A_5_Vz.js";
+import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
+import { t as monitorSignalProvider } from "./monitor-D7Slr0-A.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
+import { t as probeSignal } from "./probe-CtO2EIfg.js";
 //#region extensions/signal/src/channel.setup.ts
 const signalSetupPlugin = { ...createSignalPluginBase({
 	setupWizard: signalSetupWizard,

package/dist/{approval-auth-BsYHLTHK.js → approval-auth-pNCKKotV.js}

@@ -8,7 +8,8 @@ import { normalizeE164 } from "openclaw/plugin-sdk/text-utility-runtime";
 function normalizeAliasKey(raw) {
 	const trimmed = raw.trim();
 	if (!trimmed) return;
-	return normalizeLowercaseStringOrEmpty(/^signal:/i.test(trimmed) ? trimmed.slice(7).trim() : trimmed) || void 0;
+	const withoutSignal = /^signal:/i.test(trimmed) ? trimmed.slice(7).trim() : trimmed;
+	return normalizeLowercaseStringOrEmpty(withoutSignal) || void 0;
 }
 function resolveAliasMap(params) {
 	const account = resolveSignalAccount({
@@ -76,6 +77,17 @@ function resolveSignalTarget(params) {
 	};
 	return null;
 }
+function resolveSignalDeliveredConversationKey(params) {
+	try {
+		return resolveSignalTarget({
+			cfg: params.cfg,
+			accountId: params.accountId,
+			input: params.to
+		})?.to ?? normalizeSignalMessagingTarget(params.to) ?? null;
+	} catch {
+		return normalizeSignalMessagingTarget(params.to) ?? null;
+	}
+}
 function listSignalAliasDirectoryEntries(params) {
 	const aliases = resolveAliasMap(params);
 	const query = normalizeLowercaseStringOrEmpty(params.query);
@@ -152,4 +164,4 @@ const signalApproval = createChannelApprovalAuth({
 const getSignalApprovalApprovers = signalApproval.resolveApprovers;
 const signalApprovalAuth = signalApproval.approvalAuth;
 //#endregion
-export { resolveSignalTarget as i, signalApprovalAuth as n, listSignalAliasDirectoryEntries as r, getSignalApprovalApprovers as t };
+export { resolveSignalTarget as a, resolveSignalDeliveredConversationKey as i, signalApprovalAuth as n, listSignalAliasDirectoryEntries as r, getSignalApprovalApprovers as t };

package/dist/{approval-handler.runtime-COrjDqm1.js → approval-handler.runtime-Dsg_GE8N.js}

@@ -1,8 +1,8 @@
 import { r as resolveDefaultSignalAccountId } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { i as resolveSignalTarget } from "./approval-auth-BsYHLTHK.js";
-import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-D8x4WFYZ.js";
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-u8wH_fQM.js";
+import { a as resolveSignalTarget } from "./approval-auth-pNCKKotV.js";
+import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-D-nkbsvm.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";
@@ -23,7 +23,11 @@ function buildPendingPayload(params) {
 	return buildApprovalReactionPendingContent(params);
 }
 const signalApprovalNativeRuntime = createChannelApprovalNativeRuntimeAdapter({
-	eventKinds: ["exec", "plugin"],
+	eventKinds: [
+		"exec",
+		"plugin",
+		"system-agent"
+	],
 	availability: {
 		isConfigured: ({ context }) => Boolean(context),
 		shouldHandle: ({ context }) => Boolean(context)

package/dist/{approval-reactions-D8x4WFYZ.js → approval-reactions-D-nkbsvm.js}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { i as resolveSignalTarget, n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-BsYHLTHK.js";
+import { a as resolveSignalTarget, i as resolveSignalDeliveredConversationKey, n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-pNCKKotV.js";
 import { l as looksLikeUuid } from "./identity-YXPmgFMu.js";
-import { i as getOptionalSignalRuntime } from "./transport-detection-B9TcrBCr.js";
+import { i as getOptionalSignalRuntime } from "./transport-detection-BcDiypLn.js";
 import { createLazyRuntimeSurface } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -127,30 +127,20 @@ var approval_reactions_exports = /* @__PURE__ */ __exportAll({
 });
 const PERSISTENT_NAMESPACE = "signal.approval-reactions.v2";
 const PERSISTENT_MAX_ENTRIES = 1e3;
-const DEFAULT_REACTION_TARGET_TTL_MS = 1440 * 60 * 1e3;
+const DEFAULT_REACTION_TARGET_TTL_MS = 864e5;
 const loadResolveApprovalOverGateway = createLazyRuntimeSurface(() => import("openclaw/plugin-sdk/approval-gateway-runtime"), (runtime) => runtime.resolveApprovalOverGateway);
+const reportPersistentApprovalReactionError = createPluginStateErrorReporter(getOptionalSignalRuntime, "signal", "approval-reaction-state", "Signal persistent approval reaction state failed");
 const signalApprovalReactionTargets = createApprovalReactionTargetStore({
 	namespace: PERSISTENT_NAMESPACE,
 	maxEntries: PERSISTENT_MAX_ENTRIES,
 	defaultTtlMs: DEFAULT_REACTION_TARGET_TTL_MS,
 	openStore: (storeParams) => getOptionalSignalRuntime()?.state.openKeyedStore(storeParams),
-	logPersistentError: createPluginStateErrorReporter(getOptionalSignalRuntime, "signal", "approval-reaction-state", "Signal persistent approval reaction state failed"),
+	logPersistentError: reportPersistentApprovalReactionError,
 	readPersistedTarget
 });
 function resolveSignalApprovalConversationKey(to) {
 	return normalizeSignalMessagingTarget(to) ?? null;
 }
-function resolveSignalApprovalConversationKeyForDeliveredTarget(params) {
-	try {
-		return resolveSignalTarget({
-			cfg: params.cfg,
-			accountId: params.accountId,
-			input: params.to
-		})?.to ?? resolveSignalApprovalConversationKey(params.to);
-	} catch {
-		return resolveSignalApprovalConversationKey(params.to);
-	}
-}
 function normalizeSignalApprovalTargetAuthorKey(value) {
 	const normalized = normalizeOptionalString(value);
 	if (!normalized) return null;
@@ -280,7 +270,7 @@ function registerSignalApprovalReactionTargetForDeliveredPayload(params) {
 		cfg: params.cfg,
 		accountId: params.target.accountId
 	})) return false;
-	const conversationKey = resolveSignalApprovalConversationKeyForDeliveredTarget({
+	const conversationKey = resolveSignalDeliveredConversationKey({
 		cfg: params.cfg,
 		accountId: params.target.accountId,
 		to: params.target.to
@@ -421,7 +411,7 @@ async function maybeResolveSignalApprovalReaction(params) {
 			return true;
 		}
 		params.logVerboseMessage?.(`signal: approval reaction failed id=${target.approvalId} sender=${actorId}: ${String(error)}`);
-		return true;
+		throw error;
 	}
 }
 function clearSignalApprovalReactionTargetsForTest() {

package/dist/{channel-DBwSJm7U.js → channel-B-A_5_Vz.js}

@@ -1,11 +1,12 @@
 import { a as isSignalManagedNativeConnectionUrlForBind, i as assignSignalManagedNativePort, l as normalizeSignalTransportHost, o as isValidSignalManagedNativePort, r as allocateSignalManagedNativePort, s as resolveLocalSignalTransportPort, u as normalizeSignalTransportUrl } from "./transport-policy-DxvSMHp9.js";
 import { a as resolveSignalAccountConfig, i as resolveSignalAccount, n as listSignalAccountIds, o as resolveSignalReplyToMode, r as resolveDefaultSignalAccountId, s as resolveSignalTransport } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
-import { i as resolveSignalTarget, r as listSignalAliasDirectoryEntries } from "./approval-auth-BsYHLTHK.js";
+import { a as resolveSignalTarget, r as listSignalAliasDirectoryEntries } from "./approval-auth-pNCKKotV.js";
 import { c as resolveSignalSender, l as looksLikeUuid, o as resolveSignalPeerId, s as resolveSignalRecipient } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-B9TcrBCr.js";
-import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-Dnp5eQQJ.js";
-import { t as SignalChannelConfigSchema } from "./config-schema-CkMIK7zp.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-BcDiypLn.js";
+import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-C18u1hW0.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
+import { describeAccountSnapshot, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { buildDmGroupAccountAllowlistAdapter } from "openclaw/plugin-sdk/allowlist-config-edit";
 import { createChatChannelPlugin } from "openclaw/plugin-sdk/channel-core";
@@ -15,7 +16,6 @@ import { attachChannelToResult } from "openclaw/plugin-sdk/channel-send-result";
 import { PAIRING_APPROVED_MESSAGE } from "openclaw/plugin-sdk/channel-status";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
-import { resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/media-runtime";
 import { questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { chunkText, resolveTextChunkLimit } from "openclaw/plugin-sdk/reply-chunking";
 import { buildOutboundBaseSessionKey } from "openclaw/plugin-sdk/routing";
@@ -30,7 +30,6 @@ import { createChannelDmPolicy } from "openclaw/plugin-sdk/channel-dm-policy";
 import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$2, createCliPathTextInput, createDelegatedSetupWizardProxy, createDelegatedTextInputShouldPrompt, createPatchedAccountSetupAdapter, createSetupInputPresenceValidator, createSetupTranslator, patchChannelConfigForAccount, promptParsedAllowFromForAccount, setAccountAllowFromForChannel, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup-runtime";
 import { formatCliCommand, formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
-import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { createRestrictSendersChannelSecurity } from "openclaw/plugin-sdk/channel-policy";
 //#region extensions/signal/src/outbound-session.ts
@@ -209,13 +208,14 @@ function prepareSignalManagedNativeTransport(params) {
 }
 async function probeSignalTransport(params) {
 	const timeoutMs = params.timeoutMs ?? 1e4;
-	const resolved = resolveSignalTransport(params.transport.kind === "managed-native" ? prepareSignalManagedNativeTransport({
+	const transport = params.transport.kind === "managed-native" ? prepareSignalManagedNativeTransport({
 		cfg: params.cfg,
 		accountId: params.accountId,
 		overrides: managedTransportOptions(params.transport)
-	}) : params.transport);
-	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-BsJdp0oI.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
-	return (params.probeNative ?? (await import("./transport-probes.runtime-BsJdp0oI.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
+	}) : params.transport;
+	const resolved = resolveSignalTransport(transport);
+	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
+	return (params.probeNative ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
 }
 function writeSignalAccountTransport(params) {
 	const transport = normalizeTransport(params.transport);
@@ -229,13 +229,14 @@ function writeSignalAccountTransport(params) {
 		accountId: params.accountId,
 		transport
 	});
+	const next = patchChannelConfigForAccount({
+		cfg: params.cfg,
+		channel: "signal",
+		accountId: params.accountId,
+		patch: { transport }
+	});
 	const canonical = clearLegacySignalTransportFieldsForAccount({
-		cfg: patchChannelConfigForAccount({
-			cfg: params.cfg,
-			channel: "signal",
-			accountId: params.accountId,
-			patch: { transport }
-		}),
+		cfg: next,
 		accountId: params.accountId
 	});
 	if (transport.kind === "managed-native") resolveSignalAccount({
@@ -571,7 +572,7 @@ function createSignalSetupWizardProxy(loadWizard) {
 const signalDoctor = {
 	normalizeCompatibilityConfig,
 	cleanStaleConfig: async ({ cfg }) => {
-		const { detectSignalTransport } = await import("./transport-detection.runtime-kDheC5_M.js");
+		const { detectSignalTransport } = await import("./transport-detection.runtime-DYuvIa7s.js");
 		return await migrateLegacySignalTransportConfig({
 			cfg,
 			detect: detectSignalTransport
@@ -582,7 +583,7 @@ const signalDoctor = {
 //#region extensions/signal/src/shared.ts
 const SIGNAL_CHANNEL = "signal";
 async function loadSignalChannelRuntime() {
-	return await import("./channel.runtime-DvhLiRgJ.js");
+	return await import("./channel.runtime-LfE0qPMj.js");
 }
 const signalSetupWizard = createSignalSetupWizardProxy(async () => (await loadSignalChannelRuntime()).signalSetupWizard);
 const signalConfigAdapter = {
@@ -647,7 +648,10 @@ function createSignalPluginBase(params) {
 				minChars: 1500,
 				idleMs: 1e3
 			} },
-			reload: { configPrefixes: ["channels.signal"] },
+			reload: {
+				configPrefixes: ["channels.signal"],
+				noopPrefixes: ["messages.inbound", "messages.ackReactionScope"]
+			},
 			configSchema: SignalChannelConfigSchema,
 			doctor: signalDoctor,
 			config: {
@@ -667,17 +671,16 @@ function createSignalPluginBase(params) {
 }
 //#endregion
 //#region extensions/signal/src/channel.ts
-const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-BIMAiZNm.js").then((n) => n.n));
-const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-C2Z15YNS.js").then((n) => n.n));
-const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-DolSm_sS.js"));
-const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-D8x4WFYZ.js").then((n) => n.n));
+const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-D7Slr0-A.js").then((n) => n.n));
+const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-CtO2EIfg.js").then((n) => n.n));
+const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-BLiqhyHW.js"));
+const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-D-nkbsvm.js").then((n) => n.n));
 async function resolveSignalSendContext(params) {
 	return {
 		send: resolveOutboundSendDep(params.deps, "signal") ?? (await loadSignalSendRuntime()).sendMessageSignal,
 		maxBytes: resolveChannelMediaMaxBytes({
 			cfg: params.cfg,
-			resolveChannelLimitMb: ({ cfg, accountId }) => cfg.channels?.signal?.accounts?.[accountId]?.mediaMaxMb ?? cfg.channels?.signal?.mediaMaxMb,
-			accountId: params.accountId
+			resolveChannelLimitMb: () => resolveSignalAccount(params).config.mediaMaxMb
 		})
 	};
 }
@@ -836,14 +839,15 @@ async function sendFormattedSignalText(ctx) {
 			accountId: ctx.accountId,
 			replyToId
 		});
-		const deliveryResult = attachChannelToResult("signal", attachSignalVisibleText(await send(to, chunk.text, {
+		const result = await send(to, chunk.text, {
 			cfg: ctx.cfg,
 			maxBytes,
 			accountId: ctx.accountId ?? void 0,
 			textMode: "plain",
 			textStyles: chunk.styles,
 			...replyOptions
-		}), chunk.text));
+		});
+		const deliveryResult = attachChannelToResult("signal", attachSignalVisibleText(result, chunk.text));
 		results.push(deliveryResult);
 		await ctx.onDeliveryResult?.(deliveryResult);
 	}
@@ -876,7 +880,7 @@ async function sendFormattedSignalMedia(ctx) {
 		accountId: ctx.accountId,
 		replyToId: ctx.replyToId
 	});
-	return attachChannelToResult("signal", attachSignalVisibleText(await send(to, formatted.text, {
+	const result = await send(to, formatted.text, {
 		cfg: ctx.cfg,
 		mediaUrl: ctx.mediaUrl,
 		...ctx.mediaAccess ? { mediaAccess: ctx.mediaAccess } : {},
@@ -887,7 +891,8 @@ async function sendFormattedSignalMedia(ctx) {
 		textMode: "plain",
 		textStyles: formatted.styles,
 		...replyOptions
-	}), formatted.text));
+	});
+	return attachChannelToResult("signal", attachSignalVisibleText(result, formatted.text));
 }
 async function registerDeliveredSignalApprovalPayloadForReactions(params) {
 	const account = resolveSignalAccount({
@@ -897,7 +902,7 @@ async function registerDeliveredSignalApprovalPayloadForReactions(params) {
 	const targetAuthor = normalizeOptionalString(account.config.account);
 	const targetAuthorUuid = normalizeOptionalString(account.config.accountUuid);
 	if (!targetAuthor && !targetAuthorUuid) return;
-	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-CkO8Q5i2.js").then((n) => n.n);
+	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-CsVOpHg_.js").then((n) => n.n);
 	registerSignalQuestionReactionTargetForDeliveredPayload({
 		cfg: params.cfg,
 		target: {

package/dist/channel-config-api.js

@@ -1,2 +1,2 @@
-import { t as SignalChannelConfigSchema } from "./config-schema-CkMIK7zp.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
 export { SignalChannelConfigSchema };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as signalPlugin } from "./channel-DBwSJm7U.js";
+import { t as signalPlugin } from "./channel-B-A_5_Vz.js";
 export { signalPlugin };

package/dist/{channel.runtime-DvhLiRgJ.js → channel.runtime-LfE0qPMj.js}

@@ -1,6 +1,6 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds } from "./accounts-DO4HMqaK.js";
-import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-DBwSJm7U.js";
-import { i as installSignalCli } from "./install-signal-cli-Cpiyk0k1.js";
+import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-B-A_5_Vz.js";
+import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
 import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 import { createDetectedBinaryStatus, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 //#region extensions/signal/src/setup-surface.ts
@@ -59,7 +59,8 @@ const signalSetupWizard = {
 			accountId
 		}).transport;
 		if (transport.kind !== "managed-native") return;
-		const cliDetected = await detectBinary((typeof credentialValues.cliPath === "string" ? credentialValues.cliPath : void 0) ?? (transport.kind === "managed-native" ? transport.cliPath : void 0) ?? "signal-cli");
+		const currentCliPath = (typeof credentialValues.cliPath === "string" ? credentialValues.cliPath : void 0) ?? (transport.kind === "managed-native" ? transport.cliPath : void 0) ?? "signal-cli";
+		const cliDetected = await detectBinary(currentCliPath);
 		if (!await prompter.confirm({
 			message: cliDetected ? t("wizard.signal.reinstallPrompt") : t("wizard.signal.installPrompt"),
 			initialValue: !cliDetected

package/dist/{client-CvnR8_XA.js → client-BmpTN7R3.js}

@@ -19,12 +19,12 @@ import { generateSecureUuid } from "openclaw/plugin-sdk/core";
 */
 const DEFAULT_TIMEOUT_MS$1 = 1e4;
 const DEFAULT_ATTACHMENT_RESPONSE_MAX_BYTES = 1048576;
-const SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES = 16 * 1024;
-const SIGNAL_REST_SUCCESS_RESPONSE_MAX_BYTES = 16 * 1024 * 1024;
-const WS_MAX_PAYLOAD = 1024 * 1024;
+const SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES = 16384;
+const SIGNAL_REST_SUCCESS_RESPONSE_MAX_BYTES = 16777216;
+const WS_MAX_PAYLOAD = 1048576;
 const WS_HANDSHAKE_MS = 3e4;
 const WS_SHUTDOWN_DRAIN_TIMEOUT_MS = 1500;
-const DEFAULT_SIGNAL_CONTAINER_MAX_ATTACHMENT_BYTES = 8 * 1024 * 1024;
+const DEFAULT_SIGNAL_CONTAINER_MAX_ATTACHMENT_BYTES = 8388608;
 const CONTAINER_TEXT_STYLE_MARKERS = {
 	BOLD: "**",
 	ITALIC: "*",
@@ -100,7 +100,7 @@ async function readSignalRestText(res, bodyIdleTimeoutMs, bodyTimeoutMs) {
 		onTimeout: signalRestRequestTimeoutError,
 		onOverflow: ({ maxBytes }) => /* @__PURE__ */ new Error(`Signal REST: text response exceeds ${maxBytes} bytes`)
 	});
-	return new TextDecoder().decode(bytes);
+	return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
 }
 async function readSignalRestErrorText(res, bodyIdleTimeoutMs, bodyTimeoutMs) {
 	return (await readResponseTextPrefix(res, SIGNAL_REST_ERROR_RESPONSE_MAX_BYTES, {
@@ -632,6 +632,13 @@ async function containerRpcRequest(method, params, opts) {
 }
 //#endregion
 //#region extensions/signal/src/client.ts
+/** Thrown when the native SSE endpoint rejects the request with a non-2xx HTTP status. */
+var SignalSseRejectionError = class extends Error {
+	constructor(status, statusText) {
+		super(`Signal SSE failed (${status} ${statusText})`);
+		this.status = status;
+	}
+};
 const DEFAULT_TIMEOUT_MS = 1e4;
 const DEFAULT_SIGNAL_HTTP_RESPONSE_MAX_BYTES = 1048576;
 const MAX_SIGNAL_SSE_BUFFER_BYTES = 1048576;
@@ -683,7 +690,7 @@ function normalizeSignalSseTimeoutMs(timeoutMs) {
 	if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) return null;
 	return resolveTimerTimeoutMs(timeoutMs, DEFAULT_TIMEOUT_MS);
 }
-function requestSignalHttpText(url, options) {
+function requestSignalHttp(url, options) {
 	assertSignalHttpProtocol(url, "HTTP");
 	const timeoutMs = resolveTimerTimeoutMs(options.timeoutMs, DEFAULT_TIMEOUT_MS);
 	const client = url.protocol === "https:" ? https : http;
@@ -732,8 +739,7 @@ function requestSignalHttpText(url, options) {
 			res.on("end", () => {
 				resolveOnce({
 					status: res.statusCode ?? 0,
-					statusText: res.statusMessage || "error",
-					text: Buffer$1.concat(chunks).toString("utf8")
+					body: Buffer$1.concat(chunks)
 				});
 			});
 		});
@@ -753,7 +759,7 @@ async function signalRpcRequest(method, params, opts) {
 		params,
 		id
 	});
-	const res = await requestSignalHttpText(resolveSignalEndpointUrl(opts.baseUrl, "/api/v1/rpc"), {
+	const res = await requestSignalHttp(resolveSignalEndpointUrl(opts.baseUrl, "/api/v1/rpc"), {
 		method: "POST",
 		headers: {
 			"Content-Type": "application/json",
@@ -764,8 +770,9 @@ async function signalRpcRequest(method, params, opts) {
 		maxResponseBytes: opts.maxResponseBytes
 	});
 	if (res.status === 201) return;
-	if (!res.text) throw new Error(`Signal RPC empty response (status ${res.status})`);
-	const parsed = parseSignalRpcResponse(res.text, res.status);
+	const text = new TextDecoder("utf-8", { fatal: true }).decode(res.body);
+	if (!text) throw new Error(`Signal RPC empty response (status ${res.status})`);
+	const parsed = parseSignalRpcResponse(text, res.status);
 	if (parsed.error) {
 		const code = parsed.error.code ?? "unknown";
 		const msg = parsed.error.message ?? "Signal RPC error";
@@ -775,7 +782,7 @@ async function signalRpcRequest(method, params, opts) {
 }
 async function signalCheck(baseUrl, timeoutMs = DEFAULT_TIMEOUT_MS) {
 	try {
-		const res = await requestSignalHttpText(resolveSignalEndpointUrl(baseUrl, "/api/v1/check"), {
+		const res = await requestSignalHttp(resolveSignalEndpointUrl(baseUrl, "/api/v1/check"), {
 			method: "GET",
 			timeoutMs
 		});
@@ -830,7 +837,7 @@ function openSignalEventStream(url, abortSignal, timeoutMs = DEFAULT_TIMEOUT_MS)
 			const status = res.statusCode ?? 0;
 			if (status < 200 || status >= 300) {
 				res.resume();
-				rejectOnce(/* @__PURE__ */ new Error(`Signal SSE failed (${status} ${res.statusMessage || "error"})`));
+				rejectOnce(new SignalSseRejectionError(status, res.statusMessage || "error"));
 				return;
 			}
 			if (settled) {
@@ -927,4 +934,4 @@ async function streamSignalEvents(params) {
 	await flushEvent();
 }
 //#endregion
-export { containerRpcRequest as a, containerCheck as i, signalRpcRequest as n, streamContainerEvents as o, streamSignalEvents as r, signalCheck as t };
+export { containerCheck as a, streamSignalEvents as i, signalCheck as n, containerRpcRequest as o, signalRpcRequest as r, streamContainerEvents as s, SignalSseRejectionError as t };

package/dist/{client-adapter-D9SNPaNx.js → client-adapter-CDyW9LrQ.js}

@@ -1,4 +1,4 @@
-import { a as containerRpcRequest, i as containerCheck, n as signalRpcRequest$1, o as streamContainerEvents, r as streamSignalEvents$1, t as signalCheck$1 } from "./client-CvnR8_XA.js";
+import { a as containerCheck, i as streamSignalEvents$1, n as signalCheck$1, o as containerRpcRequest, r as signalRpcRequest$1, s as streamContainerEvents } from "./client-BmpTN7R3.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/client-adapter.ts
 /**

package/dist/{config-schema-CkMIK7zp.js → config-schema-CHihQTOp.js}

@@ -1,7 +1,7 @@
 import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId, resolveAccountEntry } from "openclaw/plugin-sdk/account-resolution";
-import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelConfigSchema, buildChannelReactionShape, buildCommonChannelAccountShape, buildGroupEntrySchema, requireAllowlistAllowFrom, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
+import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelAccountSchemaParts, buildChannelConfigSchema, buildChannelReactionShape, buildGroupEntrySchema, requireAllowlistAllowFrom, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
 //#region extensions/signal/src/config-ui-hints.ts
 const signalChannelConfigUiHints = {
@@ -104,13 +104,13 @@ const SignalGroupEntrySchema = buildGroupEntrySchema({ ingest: z.boolean().optio
 	"systemPrompt"
 ] });
 const SignalGroupsSchema = z.record(z.string(), SignalGroupEntrySchema.optional()).optional();
+const { accountShape, rootPolicyShape } = buildChannelAccountSchemaParts({
+	omit: ["mentionPatterns"],
+	streaming: ChannelDeliveryStreamingConfigSchema.optional(),
+	mediaMaxMb: z.number().int().positive().optional()
+});
 const SignalAccountSchemaBase = z.object({
-	...buildCommonChannelAccountShape({
-		useDefaults: true,
-		omit: ["mentionPatterns"],
-		streaming: ChannelDeliveryStreamingConfigSchema.optional(),
-		mediaMaxMb: z.number().int().positive().optional()
-	}),
+	...accountShape,
 	account: z.string().optional(),
 	accountUuid: z.string().optional(),
 	transport: SignalTransportSchema.optional(),
@@ -137,6 +137,7 @@ const SignalAccountSchemaBase = z.object({
 	actions: z.object({ reactions: z.boolean().optional() }).strict().optional()
 }).strict();
 const SignalConfigSchemaBase = SignalAccountSchemaBase.extend({
+	...rootPolicyShape,
 	accounts: z.record(z.string(), SignalAccountSchemaBase.optional()).optional(),
 	defaultAccount: z.string().optional()
 });
@@ -197,7 +198,8 @@ function validateSignalContainerAccounts(value, ctx) {
 		if (!account || !channelEnabled || account.enabled === false) continue;
 		const isDefaultAccount = normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID;
 		if ((isDefaultAccount && value.transport ? value.transport : account.transport)?.kind !== "container" || isDefaultAccount && value.transport) continue;
-		if (!normalizeOptionalString(account.account === void 0 ? value.account : account.account)) ctx.addIssue({
+		const effectiveAccount = account.account === void 0 ? value.account : account.account;
+		if (!normalizeOptionalString(effectiveAccount)) ctx.addIssue({
 			code: z.ZodIssueCode.custom,
 			message: "channels.signal account container transport requires an account number on the account or channel",
 			path: [

package/dist/contract-api.js

@@ -1,4 +1,4 @@
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { i as isSignalSenderAllowed } from "./identity-YXPmgFMu.js";
-import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-Cpiyk0k1.js";
+import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-7tEL37_j.js";
 export { MAX_SIGNAL_CLI_EXTRACTED_BYTES, downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeArchive, looksLikeSignalTargetId, normalizeSignalMessagingTarget, normalizeSignalReactionRecipient, pickAsset };

package/dist/{doctor-contract-api-Dnp5eQQJ.js → doctor-contract-api-C18u1hW0.js}

@@ -428,7 +428,7 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 	};
 }
 //#endregion
-//#region extensions/signal/doctor-contract-api.ts
+//#region extensions/signal/config-doctor-api.ts
 const RETIRED_SIGNAL_ACCOUNT_TRANSPORT_FIELDS = [
 	"configPath",
 	"httpUrl",

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-Dnp5eQQJ.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-C18u1hW0.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/{install-signal-cli-Cpiyk0k1.js → install-signal-cli-7tEL37_j.js}

@@ -12,10 +12,10 @@ import { runPluginCommandWithTimeout } from "openclaw/plugin-sdk/run-command";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import { withTempDownloadPath } from "openclaw/plugin-sdk/temp-path";
 //#region extensions/signal/src/install-signal-cli.ts
-const MAX_SIGNAL_CLI_ARCHIVE_BYTES = 256 * 1024 * 1024;
+const MAX_SIGNAL_CLI_ARCHIVE_BYTES = 268435456;
 /** @internal Exported for testing. */
-const MAX_SIGNAL_CLI_EXTRACTED_BYTES = 384 * 1024 * 1024;
-const SIGNAL_CLI_DOWNLOAD_TIMEOUT_MS = 5 * 6e4;
+const MAX_SIGNAL_CLI_EXTRACTED_BYTES = 402653184;
+const SIGNAL_CLI_DOWNLOAD_TIMEOUT_MS = 3e5;
 const SIGNAL_CLI_RELEASE_INFO_TIMEOUT_MS = 3e4;
 const CONTENT_LENGTH_RE = /^\d+$/;
 /** @internal Exported for testing. */
@@ -57,7 +57,8 @@ function normalizeReleaseAsset(value) {
 	} : void 0;
 }
 function normalizeSignalCliRelease(value) {
-	const version = normalizeOptionalString(normalizeOptionalString(value.tag_name)?.replace(/^v/, ""));
+	const tagName = normalizeOptionalString(value.tag_name);
+	const version = normalizeOptionalString(tagName?.replace(/^v/, ""));
 	if (!version || !Array.isArray(value.assets)) return;
 	return {
 		version,
@@ -114,14 +115,17 @@ async function downloadToFile(url, dest, maxRedirects = 5, maxBytes = MAX_SIGNAL
 		}
 		let totalBytes = 0;
 		const body = response.body;
-		await pipeline(isNodeReadableStream(body) ? body : Readable.fromWeb(body), new Transform({ transform(chunk, _encoding, callback) {
+		const readable = isNodeReadableStream(body) ? body : Readable.fromWeb(body);
+		const limiter = new Transform({ transform(chunk, _encoding, callback) {
 			totalBytes += chunkByteLength(chunk);
 			if (totalBytes > maxBytes) {
 				callback(/* @__PURE__ */ new Error(`signal-cli archive exceeded the ${maxBytes}-byte download cap.`));
 				return;
 			}
 			callback(null, chunk);
-		} }), createWriteStream(dest));
+		} });
+		const out = createWriteStream(dest);
+		await pipeline(readable, limiter, out);
 		completed = true;
 	} finally {
 		await release();
@@ -178,7 +182,7 @@ async function installSignalCliViaBrew(runtime) {
 			"install",
 			"signal-cli"
 		],
-		timeoutMs: 15 * 6e4
+		timeoutMs: 9e5
 	});
 	if (result.code !== 0) return {
 		ok: false,