@openclaw/signal 2026.9.1 → 2026.9.3

package/dist/api.js

@@ -1,13 +1,13 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-CbPFIo0i.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
-import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-sL5Cf1nT.js";
-import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
-import { t as monitorSignalProvider } from "./monitor-BPOcRufA.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-DF4T9tXZ.js";
-import { t as probeSignal } from "./probe-Bjs1Yd79.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-BD__qywn.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
+import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-DJQccJtU.js";
+import { i as installSignalCli } from "./install-signal-cli-QlEIfWBv.js";
+import { t as monitorSignalProvider } from "./monitor-CokYfKOk.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-BvWSfyNf.js";
+import { t as probeSignal } from "./probe-Bh9f0rRO.js";
 //#region extensions/signal/src/channel.setup.ts
 const signalSetupPlugin = { ...createSignalPluginBase({
 	setupWizard: signalSetupWizard,

package/dist/{approval-auth-CkljhI65.js → approval-auth-pNCKKotV.js}

@@ -77,6 +77,17 @@ function resolveSignalTarget(params) {
 	};
 	return null;
 }
+function resolveSignalDeliveredConversationKey(params) {
+	try {
+		return resolveSignalTarget({
+			cfg: params.cfg,
+			accountId: params.accountId,
+			input: params.to
+		})?.to ?? normalizeSignalMessagingTarget(params.to) ?? null;
+	} catch {
+		return normalizeSignalMessagingTarget(params.to) ?? null;
+	}
+}
 function listSignalAliasDirectoryEntries(params) {
 	const aliases = resolveAliasMap(params);
 	const query = normalizeLowercaseStringOrEmpty(params.query);
@@ -153,4 +164,4 @@ const signalApproval = createChannelApprovalAuth({
 const getSignalApprovalApprovers = signalApproval.resolveApprovers;
 const signalApprovalAuth = signalApproval.approvalAuth;
 //#endregion
-export { resolveSignalTarget as i, signalApprovalAuth as n, listSignalAliasDirectoryEntries as r, getSignalApprovalApprovers as t };
+export { resolveSignalTarget as a, resolveSignalDeliveredConversationKey as i, signalApprovalAuth as n, listSignalAliasDirectoryEntries as r, getSignalApprovalApprovers as t };

package/dist/{approval-handler.runtime-DvZd_IWj.js → approval-handler.runtime-X6DXgK_3.js}

@@ -1,8 +1,8 @@
 import { r as resolveDefaultSignalAccountId } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { i as resolveSignalTarget } from "./approval-auth-CkljhI65.js";
-import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-Cno-4mmH.js";
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-DF4T9tXZ.js";
+import { a as resolveSignalTarget } from "./approval-auth-pNCKKotV.js";
+import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-Cub0slPC.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-BvWSfyNf.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";

package/dist/{approval-reactions-Cno-4mmH.js → approval-reactions-Cub0slPC.js}

@@ -1,14 +1,13 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { i as resolveSignalTarget, n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-CkljhI65.js";
+import { a as resolveSignalTarget, i as resolveSignalDeliveredConversationKey, n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-pNCKKotV.js";
 import { l as looksLikeUuid } from "./identity-YXPmgFMu.js";
-import { i as getOptionalSignalRuntime } from "./transport-detection-CbPFIo0i.js";
+import { i as getOptionalSignalRuntime } from "./transport-detection-BD__qywn.js";
 import { createLazyRuntimeSurface } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { addApprovalReactionHintToText, createApprovalReactionTargetStore, hasApprovalReactionHintText, listApprovalReactionBindings, readApprovalReactionDecisionList, resolveTypedApprovalReactionTarget } from "openclaw/plugin-sdk/approval-reaction-runtime";
+import { addApprovalReactionHintToText, createApprovalReactionTargetStore, hasApprovalReactionHintText, listApprovalReactionBindings, readApprovalReactionTargetRecord, resolveTypedApprovalReactionTarget, settleApprovalReaction } from "openclaw/plugin-sdk/approval-reaction-runtime";
 import { normalizeE164 } from "openclaw/plugin-sdk/text-utility-runtime";
-import { isApprovalNotFoundError } from "openclaw/plugin-sdk/error-runtime";
 import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-reply-runtime";
 import { createPluginStateErrorReporter } from "openclaw/plugin-sdk/plugin-state-runtime";
 import { matchesApprovalRequestFilters } from "openclaw/plugin-sdk/approval-client-runtime";
@@ -141,17 +140,6 @@ const signalApprovalReactionTargets = createApprovalReactionTargetStore({
 function resolveSignalApprovalConversationKey(to) {
 	return normalizeSignalMessagingTarget(to) ?? null;
 }
-function resolveSignalApprovalConversationKeyForDeliveredTarget(params) {
-	try {
-		return resolveSignalTarget({
-			cfg: params.cfg,
-			accountId: params.accountId,
-			input: params.to
-		})?.to ?? resolveSignalApprovalConversationKey(params.to);
-	} catch {
-		return resolveSignalApprovalConversationKey(params.to);
-	}
-}
 function normalizeSignalApprovalTargetAuthorKey(value) {
 	const normalized = normalizeOptionalString(value);
 	if (!normalized) return null;
@@ -176,10 +164,9 @@ function buildReactionTargetKey(params) {
 	return `${accountId}:${conversationKey}:${messageId}`;
 }
 function readPersistedTarget(target) {
+	const record = readApprovalReactionTargetRecord(target);
 	const value = target;
-	if (!value || typeof value.approvalId !== "string" || value.approvalKind !== "exec" && value.approvalKind !== "plugin" || !value.route || value.route.deliveryMode !== "session" && value.route.deliveryMode !== "target" || !Array.isArray(value.targetAuthorKeys)) return null;
-	const allowedDecisions = readApprovalReactionDecisionList(value.allowedDecisions);
-	if (!allowedDecisions) return null;
+	if (!record || !value?.route || value.route.deliveryMode !== "session" && value.route.deliveryMode !== "target" || !Array.isArray(value.targetAuthorKeys)) return null;
 	const targetRouteTo = value.route.deliveryMode === "target" && typeof value.route.to === "string" ? normalizeSignalMessagingTarget(value.route.to) : null;
 	if (value.route.deliveryMode === "target" && !targetRouteTo) return null;
 	const route = value.route.deliveryMode === "target" ? {
@@ -194,9 +181,7 @@ function readPersistedTarget(target) {
 		...typeof value.route.sessionKey === "string" ? { sessionKey: value.route.sessionKey } : {}
 	};
 	return {
-		approvalId: value.approvalId,
-		approvalKind: value.approvalKind,
-		allowedDecisions,
+		...record,
 		targetAuthorKeys: value.targetAuthorKeys,
 		route
 	};
@@ -281,7 +266,7 @@ function registerSignalApprovalReactionTargetForDeliveredPayload(params) {
 		cfg: params.cfg,
 		accountId: params.target.accountId
 	})) return false;
-	const conversationKey = resolveSignalApprovalConversationKeyForDeliveredTarget({
+	const conversationKey = resolveSignalDeliveredConversationKey({
 		cfg: params.cfg,
 		accountId: params.target.accountId,
 		to: params.target.to
@@ -370,26 +355,8 @@ async function maybeResolveSignalApprovalReaction(params) {
 		params.logVerboseMessage?.(`signal: approval reaction ignored for ${target.approvalId}; missing actor identity`);
 		return true;
 	}
-	if (getSignalApprovalApprovers({
-		cfg: params.cfg,
-		accountId: params.accountId
-	}).length === 0) {
-		params.logVerboseMessage?.(`signal: approval reaction denied id=${target.approvalId}; reactions require explicit approvers`);
-		return true;
-	}
-	if (!signalApprovalAuth.authorizeActorAction({
-		cfg: params.cfg,
-		accountId: params.accountId,
-		senderId: actorId,
-		action: "approve",
-		approvalKind: target.approvalKind
-	}).authorized) {
-		params.logVerboseMessage?.(`signal: approval reaction denied id=${target.approvalId} sender=${actorId}`);
-		return true;
-	}
-	const resolveApprovalOverGateway = await loadResolveApprovalOverGateway();
-	try {
-		const result = await resolveApprovalOverGateway({
+	await settleApprovalReaction({
+		request: {
 			cfg: params.cfg,
 			approvalId: target.approvalId,
 			approvalKind: target.approvalKind,
@@ -398,32 +365,25 @@ async function maybeResolveSignalApprovalReaction(params) {
 			accountId: params.accountId,
 			senderId: actorId,
 			gatewayUrl: params.gatewayUrl
-		});
-		const terminalTruth = formatSignalApprovalTerminalTruth(result.approval);
-		unregisterSignalApprovalReactionTarget({
+		},
+		approvers: getSignalApprovalApprovers({
+			cfg: params.cfg,
+			accountId: params.accountId
+		}),
+		authorizeActorAction: (input) => signalApprovalAuth.authorizeActorAction(input),
+		loadResolver: loadResolveApprovalOverGateway,
+		clearTarget: () => unregisterSignalApprovalReactionTarget({
 			accountId: params.accountId,
 			conversationKey: params.conversationKey,
 			messageId: params.messageId
-		});
-		if (!result.applied) {
-			params.logVerboseMessage?.(`signal: approval reaction already resolved id=${target.approvalId} sender=${actorId} ${terminalTruth}`);
-			return true;
-		}
-		params.logVerboseMessage?.(`signal: approval reaction resolved id=${target.approvalId} sender=${actorId} ${terminalTruth}`);
-		return true;
-	} catch (error) {
-		if (isApprovalNotFoundError(error)) {
-			unregisterSignalApprovalReactionTarget({
-				accountId: params.accountId,
-				conversationKey: params.conversationKey,
-				messageId: params.messageId
-			});
-			params.logVerboseMessage?.(`signal: approval reaction ignored for expired approval id=${target.approvalId} sender=${actorId}`);
-			return true;
-		}
-		params.logVerboseMessage?.(`signal: approval reaction failed id=${target.approvalId} sender=${actorId}: ${String(error)}`);
-		throw error;
-	}
+		}),
+		onResolved: (result) => {
+			const outcome = result.applied ? "resolved" : "already resolved";
+			params.logVerboseMessage?.(`signal: approval reaction ${outcome} id=${target.approvalId} sender=${actorId} ${formatSignalApprovalTerminalTruth(result.approval)}`);
+		},
+		logVerboseMessage: params.logVerboseMessage
+	});
+	return true;
 }
 function clearSignalApprovalReactionTargetsForTest() {
 	signalApprovalReactionTargets.clearForTest();

package/dist/{channel-sL5Cf1nT.js → channel-DJQccJtU.js}

@@ -1,11 +1,11 @@
 import { a as isSignalManagedNativeConnectionUrlForBind, i as assignSignalManagedNativePort, l as normalizeSignalTransportHost, o as isValidSignalManagedNativePort, r as allocateSignalManagedNativePort, s as resolveLocalSignalTransportPort, u as normalizeSignalTransportUrl } from "./transport-policy-DxvSMHp9.js";
 import { a as resolveSignalAccountConfig, i as resolveSignalAccount, n as listSignalAccountIds, o as resolveSignalReplyToMode, r as resolveDefaultSignalAccountId, s as resolveSignalTransport } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
-import { i as resolveSignalTarget, r as listSignalAliasDirectoryEntries } from "./approval-auth-CkljhI65.js";
+import { a as resolveSignalTarget, r as listSignalAliasDirectoryEntries } from "./approval-auth-pNCKKotV.js";
 import { c as resolveSignalSender, l as looksLikeUuid, o as resolveSignalPeerId, s as resolveSignalRecipient } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-CbPFIo0i.js";
-import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-C18u1hW0.js";
-import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-BD__qywn.js";
+import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-D0SnglP4.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-DfEbpMVQ.js";
 import { describeAccountSnapshot, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { buildDmGroupAccountAllowlistAdapter } from "openclaw/plugin-sdk/allowlist-config-edit";
@@ -214,8 +214,8 @@ async function probeSignalTransport(params) {
 		overrides: managedTransportOptions(params.transport)
 	}) : params.transport;
 	const resolved = resolveSignalTransport(transport);
-	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
-	return (params.probeNative ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
+	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-DV7x4VWu.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
+	return (params.probeNative ?? (await import("./transport-probes.runtime-DV7x4VWu.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
 }
 function writeSignalAccountTransport(params) {
 	const transport = normalizeTransport(params.transport);
@@ -572,7 +572,7 @@ function createSignalSetupWizardProxy(loadWizard) {
 const signalDoctor = {
 	normalizeCompatibilityConfig,
 	cleanStaleConfig: async ({ cfg }) => {
-		const { detectSignalTransport } = await import("./transport-detection.runtime-B81flHI8.js");
+		const { detectSignalTransport } = await import("./transport-detection.runtime-c9q3r3AM.js");
 		return await migrateLegacySignalTransportConfig({
 			cfg,
 			detect: detectSignalTransport
@@ -583,7 +583,7 @@ const signalDoctor = {
 //#region extensions/signal/src/shared.ts
 const SIGNAL_CHANNEL = "signal";
 async function loadSignalChannelRuntime() {
-	return await import("./channel.runtime-D2a4nSLo.js");
+	return await import("./channel.runtime-QerbTca6.js");
 }
 const signalSetupWizard = createSignalSetupWizardProxy(async () => (await loadSignalChannelRuntime()).signalSetupWizard);
 const signalConfigAdapter = {
@@ -648,7 +648,10 @@ function createSignalPluginBase(params) {
 				minChars: 1500,
 				idleMs: 1e3
 			} },
-			reload: { configPrefixes: ["channels.signal"] },
+			reload: {
+				configPrefixes: ["channels.signal"],
+				noopPrefixes: ["messages.inbound", "messages.ackReactionScope"]
+			},
 			configSchema: SignalChannelConfigSchema,
 			doctor: signalDoctor,
 			config: {
@@ -668,10 +671,10 @@ function createSignalPluginBase(params) {
 }
 //#endregion
 //#region extensions/signal/src/channel.ts
-const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-BPOcRufA.js").then((n) => n.n));
-const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-Bjs1Yd79.js").then((n) => n.n));
-const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-DHPi6R_z.js"));
-const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-Cno-4mmH.js").then((n) => n.n));
+const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-CokYfKOk.js").then((n) => n.n));
+const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-Bh9f0rRO.js").then((n) => n.n));
+const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-BNQ0x-2k.js"));
+const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-Cub0slPC.js").then((n) => n.n));
 async function resolveSignalSendContext(params) {
 	return {
 		send: resolveOutboundSendDep(params.deps, "signal") ?? (await loadSignalSendRuntime()).sendMessageSignal,
@@ -899,7 +902,7 @@ async function registerDeliveredSignalApprovalPayloadForReactions(params) {
 	const targetAuthor = normalizeOptionalString(account.config.account);
 	const targetAuthorUuid = normalizeOptionalString(account.config.accountUuid);
 	if (!targetAuthor && !targetAuthorUuid) return;
-	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-DJfSmeYo.js").then((n) => n.n);
+	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-B06vyt3T.js").then((n) => n.n);
 	registerSignalQuestionReactionTargetForDeliveredPayload({
 		cfg: params.cfg,
 		target: {
@@ -1090,8 +1093,11 @@ const signalPlugin = createChatChannelPlugin({
 		idLabel: "signalNumber",
 		message: PAIRING_APPROVED_MESSAGE,
 		normalizeAllowEntry: createPairingPrefixStripper(/^signal:/i),
-		notify: async ({ cfg, id, message }) => {
-			await (await loadSignalSendRuntime()).sendMessageSignal(id, message, { cfg });
+		notify: async ({ cfg, id, message, accountId }) => {
+			await (await loadSignalSendRuntime()).sendMessageSignal(id, message, {
+				cfg,
+				accountId
+			});
 		}
 	} },
 	security: signalSecurityAdapter,

package/dist/channel-config-api.js

@@ -1,2 +1,2 @@
-import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-DfEbpMVQ.js";
 export { SignalChannelConfigSchema };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as signalPlugin } from "./channel-sL5Cf1nT.js";
+import { t as signalPlugin } from "./channel-DJQccJtU.js";
 export { signalPlugin };

package/dist/{channel.runtime-D2a4nSLo.js → channel.runtime-QerbTca6.js}

@@ -1,6 +1,6 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds } from "./accounts-DO4HMqaK.js";
-import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-sL5Cf1nT.js";
-import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
+import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-DJQccJtU.js";
+import { i as installSignalCli } from "./install-signal-cli-QlEIfWBv.js";
 import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 import { createDetectedBinaryStatus, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 //#region extensions/signal/src/setup-surface.ts

package/dist/{client-BmpTN7R3.js → client-B3C0ciqU.js}

@@ -1,14 +1,19 @@
+import { createRequire } from "node:module";
 import { detectMime, extractOriginalFilename, parseMediaContentLength } from "openclaw/plugin-sdk/media-runtime";
 import { parseStrictNonNegativeInteger, resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { coerceErrorMessage, formatErrorMessage, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { resolveFetch } from "openclaw/plugin-sdk/fetch-runtime";
 import { readResponseTextPrefix, readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 import { readRegularFile } from "openclaw/plugin-sdk/security-runtime";
-import WebSocket from "ws";
+import path from "node:path";
 import { Buffer as Buffer$1 } from "node:buffer";
 import http from "node:http";
 import https from "node:https";
 import { generateSecureUuid } from "openclaw/plugin-sdk/core";
+//#region extensions/signal/src/ws-runtime.ts
+const require = createRequire(import.meta.url);
+const WebSocket = require(path.join(path.dirname(require.resolve("ws/package.json")), "index.js"));
+//#endregion
 //#region extensions/signal/src/client-container.ts
 /**
 * Signal client for bbernhard/signal-cli-rest-api container.

package/dist/{client-adapter-CDyW9LrQ.js → client-adapter-CNc5wzzs.js}

@@ -1,4 +1,4 @@
-import { a as containerCheck, i as streamSignalEvents$1, n as signalCheck$1, o as containerRpcRequest, r as signalRpcRequest$1, s as streamContainerEvents } from "./client-BmpTN7R3.js";
+import { a as containerCheck, i as streamSignalEvents$1, n as signalCheck$1, o as containerRpcRequest, r as signalRpcRequest$1, s as streamContainerEvents } from "./client-B3C0ciqU.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/client-adapter.ts
 /**

package/dist/{config-schema-CHihQTOp.js → config-schema-DfEbpMVQ.js}

@@ -1,7 +1,7 @@
 import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId, resolveAccountEntry } from "openclaw/plugin-sdk/account-resolution";
-import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelAccountSchemaParts, buildChannelConfigSchema, buildChannelReactionShape, buildGroupEntrySchema, requireAllowlistAllowFrom, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
+import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelAccountSchemaParts, buildChannelConfigSchema, buildChannelReactionShape, buildGroupEntrySchema, refineChannelDmPolicy } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
 //#region extensions/signal/src/config-ui-hints.ts
 const signalChannelConfigUiHints = {
@@ -142,45 +142,18 @@ const SignalConfigSchemaBase = SignalAccountSchemaBase.extend({
 	defaultAccount: z.string().optional()
 });
 function validateSignalConfigAllowFrom(value, ctx) {
-	requireOpenAllowFrom({
-		policy: value.dmPolicy,
-		allowFrom: value.allowFrom,
-		ctx,
-		path: ["allowFrom"],
-		message: "channels.signal.dmPolicy=\"open\" requires channels.signal.allowFrom to include \"*\""
-	});
-	requireAllowlistAllowFrom({
-		policy: value.dmPolicy,
-		allowFrom: value.allowFrom,
-		ctx,
-		path: ["allowFrom"],
-		message: "channels.signal.dmPolicy=\"allowlist\" requires channels.signal.allowFrom to contain at least one sender ID"
+	refineChannelDmPolicy({
+		channelId: "signal",
+		value,
+		ctx
 	});
 	for (const [accountId, account] of Object.entries(value.accounts ?? {})) {
 		if (!account) continue;
-		const effectivePolicy = account.dmPolicy ?? value.dmPolicy;
-		const effectiveAllowFrom = account.allowFrom ?? value.allowFrom;
-		requireOpenAllowFrom({
-			policy: effectivePolicy,
-			allowFrom: effectiveAllowFrom,
-			ctx,
-			path: [
-				"accounts",
-				accountId,
-				"allowFrom"
-			],
-			message: "channels.signal.accounts.*.dmPolicy=\"open\" requires channels.signal.accounts.*.allowFrom (or channels.signal.allowFrom) to include \"*\""
-		});
-		requireAllowlistAllowFrom({
-			policy: effectivePolicy,
-			allowFrom: effectiveAllowFrom,
-			ctx,
-			path: [
-				"accounts",
-				accountId,
-				"allowFrom"
-			],
-			message: "channels.signal.accounts.*.dmPolicy=\"allowlist\" requires channels.signal.accounts.*.allowFrom (or channels.signal.allowFrom) to contain at least one sender ID"
+		refineChannelDmPolicy({
+			channelId: "signal",
+			value,
+			accountId,
+			ctx
 		});
 	}
 }

package/dist/contract-api.js

@@ -1,4 +1,4 @@
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { i as isSignalSenderAllowed } from "./identity-YXPmgFMu.js";
-import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-7tEL37_j.js";
+import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-QlEIfWBv.js";
 export { MAX_SIGNAL_CLI_EXTRACTED_BYTES, downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeArchive, looksLikeSignalTargetId, normalizeSignalMessagingTarget, normalizeSignalReactionRecipient, pickAsset };

package/dist/{doctor-contract-api-C18u1hW0.js → doctor-contract-api-D0SnglP4.js}

@@ -293,76 +293,7 @@ function hasContainerTransportWithoutEffectiveAccount(cfg) {
 	}
 	return false;
 }
-async function migrateLegacySignalTransportConfig(params) {
-	const signal = params.cfg.channels?.signal;
-	if (!isRecord(signal)) return {
-		config: params.cfg,
-		changes: []
-	};
-	const accounts = isRecord(signal.accounts) ? signal.accounts : {};
-	if (!(Object.hasOwn(signal, "apiMode") || hasLegacyFields(signal) || Object.values(accounts).some((entry) => isRecord(entry) && hasLegacyFields(entry)))) return {
-		config: params.cfg,
-		changes: []
-	};
-	const apiMode = signal.apiMode;
-	const entries = [signal, ...Object.values(accounts).filter(isRecord)];
-	const legacyResolutionEntries = entries.filter((_, index) => shouldMaterializeTransport(entries, index)).filter((entry) => !isSignalTransportConfig(entry.transport));
-	const invalidDerivedEndpoint = findInvalidLegacyDerivedEndpoint(legacyResolutionEntries, signal);
-	if (invalidDerivedEndpoint) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [invalidDerivedEndpoint === "port" ? PENDING_LEGACY_INVALID_PORT_WARNING : PENDING_LEGACY_INVALID_HOST_WARNING]
-	};
-	if (hasInvalidLegacyHttpUrl(legacyResolutionEntries, signal)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_INVALID_URL_WARNING]
-	};
-	if (!params.detect && legacyResolutionEntries.some((entry) => requiresDetection(entry, signal, apiMode))) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_TRANSPORT_WARNING]
-	};
-	const resolvedTransports = await Promise.all(entries.map(async (entry, index) => !shouldMaterializeTransport(entries, index) ? void 0 : await resolveLegacyTransport({
-		entry,
-		parent: signal,
-		apiMode,
-		detect: params.detect
-	})));
-	if (hasInvalidManagedTransportPort(resolvedTransports)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_INVALID_PORT_WARNING]
-	};
-	const transports = allocateMigratedManagedPorts({
-		entries,
-		transports: resolvedTransports
-	});
-	if (transports.some((transport, index) => shouldMaterializeTransport(entries, index) && !transport)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_TRANSPORT_WARNING]
-	};
-	const next = applyMigratedSignalTransports({
-		cfg: params.cfg,
-		entries,
-		transports
-	});
-	if (!next) return {
-		config: params.cfg,
-		changes: []
-	};
-	if (hasContainerTransportWithoutEffectiveAccount(next)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_CONTAINER_ACCOUNT_WARNING]
-	};
-	return {
-		config: next,
-		changes: ["Migrated channels.signal transport settings to concrete account-owned transport objects."]
-	};
-}
-function migrateLegacySignalTransportConfigSync(cfg) {
+function prepareLegacySignalTransportMigration(cfg) {
 	const signal = cfg.channels?.signal;
 	if (!isRecord(signal)) return {
 		config: cfg,
@@ -373,6 +304,7 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 		config: cfg,
 		changes: []
 	};
+	const apiMode = signal.apiMode;
 	const entries = [signal, ...Object.values(accounts).filter(isRecord)];
 	const legacyResolutionEntries = entries.filter((_, index) => shouldMaterializeTransport(entries, index)).filter((entry) => !isSignalTransportConfig(entry.transport));
 	const invalidDerivedEndpoint = findInvalidLegacyDerivedEndpoint(legacyResolutionEntries, signal);
@@ -386,14 +318,14 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 		changes: [],
 		warnings: [PENDING_LEGACY_INVALID_URL_WARNING]
 	};
-	const resolvedTransports = entries.map((entry, index) => {
-		if (!shouldMaterializeTransport(entries, index)) return;
-		return resolveLegacyTransportWithoutDetection({
-			entry,
-			parent: signal,
-			apiMode: signal.apiMode
-		});
-	});
+	return {
+		signal,
+		apiMode,
+		entries,
+		legacyResolutionEntries
+	};
+}
+function finishLegacySignalTransportMigration(cfg, entries, resolvedTransports) {
 	if (hasInvalidManagedTransportPort(resolvedTransports)) return {
 		config: cfg,
 		changes: [],
@@ -427,6 +359,36 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 		changes: ["Migrated channels.signal transport settings to concrete account-owned transport objects."]
 	};
 }
+async function migrateLegacySignalTransportConfig(params) {
+	const prepared = prepareLegacySignalTransportMigration(params.cfg);
+	if ("config" in prepared) return prepared;
+	const { signal, apiMode, entries, legacyResolutionEntries } = prepared;
+	if (!params.detect && legacyResolutionEntries.some((entry) => requiresDetection(entry, signal, apiMode))) return {
+		config: params.cfg,
+		changes: [],
+		warnings: [PENDING_LEGACY_TRANSPORT_WARNING]
+	};
+	const resolvedTransports = await Promise.all(entries.map(async (entry, index) => !shouldMaterializeTransport(entries, index) ? void 0 : await resolveLegacyTransport({
+		entry,
+		parent: signal,
+		apiMode,
+		detect: params.detect
+	})));
+	return finishLegacySignalTransportMigration(params.cfg, entries, resolvedTransports);
+}
+function migrateLegacySignalTransportConfigSync(cfg) {
+	const prepared = prepareLegacySignalTransportMigration(cfg);
+	if ("config" in prepared) return prepared;
+	const { signal, apiMode, entries } = prepared;
+	return finishLegacySignalTransportMigration(cfg, entries, entries.map((entry, index) => {
+		if (!shouldMaterializeTransport(entries, index)) return;
+		return resolveLegacyTransportWithoutDetection({
+			entry,
+			parent: signal,
+			apiMode
+		});
+	}));
+}
 //#endregion
 //#region extensions/signal/config-doctor-api.ts
 const RETIRED_SIGNAL_ACCOUNT_TRANSPORT_FIELDS = [

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-C18u1hW0.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-D0SnglP4.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/{monitor-BPOcRufA.js → monitor-CokYfKOk.js}

@@ -1,32 +1,32 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { l as normalizeSignalTransportHost } from "./transport-policy-DxvSMHp9.js";
 import { i as resolveSignalAccount, o as resolveSignalReplyToMode } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, f as isSignalNativeApprovalHandlerConfigured, i as getOptionalSignalRuntime, l as formatSignalMediaText, n as registerSignalReplyContext, o as materializeSignalPresentationFallback } from "./transport-detection-CbPFIo0i.js";
-import { t as SignalSseRejectionError } from "./client-BmpTN7R3.js";
-import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-CDyW9LrQ.js";
-import { n as sendReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
-import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-Cno-4mmH.js";
-import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-DJfSmeYo.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-DF4T9tXZ.js";
+import { c as resolveSignalReactionLevel, f as isSignalNativeApprovalHandlerConfigured, i as getOptionalSignalRuntime, l as formatSignalMediaText, n as registerSignalReplyContext, o as materializeSignalPresentationFallback } from "./transport-detection-BD__qywn.js";
+import { t as SignalSseRejectionError } from "./client-B3C0ciqU.js";
+import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-CNc5wzzs.js";
+import { n as sendReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
+import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-Cub0slPC.js";
+import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-B06vyt3T.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-BvWSfyNf.js";
 import { bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor, createChannelMessageReplyPipeline, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
 import { resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
 import { asPositiveSafeInteger, isRecord, normalizeNullableString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
 import { normalizeE164, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
-import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInboundDebouncer, filterChannelInboundQuoteContext, formatInboundEnvelope, formatInboundFromLabel, formatInboundMediaUnavailableText, hasVisibleInboundReplyDispatch, logInboundDrop, matchesMentionPatterns, readAgentRunTerminalOutcome, resolveEnvelopeFormatOptions, resolveInboundMentionDecision, resolveInboundSupplementalSenderAllowed, runChannelInboundEvent, shouldDebounceTextInbound, toHistoryMediaEntries, toInboundMediaFactsWithMetadata } from "openclaw/plugin-sdk/channel-inbound";
+import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInboundDebouncer, filterChannelInboundQuoteContext, formatInboundEnvelope, formatInboundFromLabel, formatInboundMediaUnavailableText, hasVisibleInboundReplyDispatch, logInboundDrop, matchesMentionPatterns, readAgentRunTerminalOutcome, resolveEnvelopeFormatOptions, resolveInboundDebounceMs, resolveInboundMentionDecision, resolveInboundSupplementalSenderAllowed, runChannelInboundEvent, shouldDebounceTextInbound, toHistoryMediaEntries, toInboundMediaFactsWithMetadata } from "openclaw/plugin-sdk/channel-inbound";
 import { canonicalizeBase64, detectMime, estimateBase64DecodedBytes, kindFromMime, saveMediaBuffer } from "openclaw/plugin-sdk/media-runtime";
 import { collectErrorGraphCandidates, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { ensurePortAvailable, extractErrorCode, formatErrorMessage as formatErrorMessage$1, resolvePinnedMainDmOwnerFromAllowlist } from "openclaw/plugin-sdk/security-runtime";
-import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention } from "openclaw/plugin-sdk/channel-policy";
 import path from "node:path";
+import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention, resolveChannelGroups, resolveChannelGroupsConfigPath } from "openclaw/plugin-sdk/channel-policy";
 import { registerChannelRuntimeContext } from "openclaw/plugin-sdk/channel-runtime-context";
 import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
 import { deliverTextOrMediaReply, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
 import { chunkTextWithMode, createReplyReferencePlanner, resolveChunkMode, resolveTextChunkLimit } from "openclaw/plugin-sdk/reply-runtime";
-import { getRuntimeConfig } from "openclaw/plugin-sdk/runtime-config-snapshot";
+import { createRuntimeConfigReader, getRuntimeConfig } from "openclaw/plugin-sdk/runtime-config-snapshot";
 import { computeBackoff, createNonExitingRuntime, danger, logVerbose, shouldLogVerbose, sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 import { resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
 import { waitForTransportReady } from "openclaw/plugin-sdk/transport-ready-runtime";
@@ -676,9 +676,17 @@ async function finalizeSignalStatusReaction(params) {
 	await params.controller.restoreInitial();
 }
 function createSignalEventHandler(deps) {
+	const readConfig = createRuntimeConfigReader(deps.cfg);
+	const groupsConfigPath = resolveChannelGroupsConfigPath({
+		cfg: deps.cfg,
+		channel: "signal",
+		accountId: deps.accountId,
+		groups: resolveChannelGroups(deps.cfg, "signal", deps.accountId)
+	});
 	const statusReactionTiming = deps.statusReactionTiming ?? DEFAULT_TIMING;
 	const activeEnqueueEntries = /* @__PURE__ */ new WeakSet();
 	async function handleSignalInboundMessage(entry) {
+		const { cfg } = entry;
 		const fromLabel = formatInboundFromLabel({
 			isGroup: entry.isGroup,
 			groupLabel: entry.groupName ?? void 0,
@@ -688,14 +696,14 @@ function createSignalEventHandler(deps) {
 			directId: entry.senderDisplay
 		});
 		const route = resolveSignalInboundRoute({
-			cfg: deps.cfg,
+			cfg,
 			accountId: deps.accountId,
 			isGroup: entry.isGroup,
 			groupId: entry.groupId,
 			senderPeerId: entry.senderPeerId
 		});
-		const storePath = resolveStorePath(deps.cfg.session?.store, { agentId: route.agentId });
-		const envelopeOptions = resolveEnvelopeFormatOptions(deps.cfg);
+		const storePath = resolveStorePath(cfg.session?.store, { agentId: route.agentId });
+		const envelopeOptions = resolveEnvelopeFormatOptions(cfg);
 		const previousTimestamp = readSessionUpdatedAt({
 			storePath,
 			sessionKey: route.sessionKey
@@ -736,7 +744,7 @@ function createSignalEventHandler(deps) {
 			limit: deps.historyLimit
 		}) : void 0;
 		const replyToMode = resolveSignalReplyToMode({
-			cfg: deps.cfg,
+			cfg,
 			accountId: deps.accountId,
 			chatType: entry.isGroup ? "group" : "direct"
 		});
@@ -798,17 +806,17 @@ function createSignalEventHandler(deps) {
 			logVerbose(`signal inbound: from=${ctxPayload.From} len=${body.length} preview="${preview}"`);
 		}
 		const statusReactionTimestamp = resolveSignalStatusReactionTimestamp(entry);
-		const statusReactionsConfig = deps.cfg.messages?.statusReactions;
+		const statusReactionsConfig = cfg.messages?.statusReactions;
 		const signalReactionLevel = resolveSignalReactionLevel({
-			cfg: deps.cfg,
+			cfg,
 			accountId: route.accountId
 		});
-		const ackReaction = resolveAckReaction(deps.cfg, route.agentId, {
+		const ackReaction = resolveAckReaction(cfg, route.agentId, {
 			channel: "signal",
 			accountId: route.accountId
 		});
 		const shouldSendStatusReaction = Boolean(ackReaction && shouldAckReaction({
-			scope: deps.cfg.messages?.ackReactionScope,
+			scope: cfg.messages?.ackReactionScope,
 			isDirect: !entry.isGroup,
 			isGroup: entry.isGroup,
 			isMentionableGroup: entry.isGroup,
@@ -817,7 +825,7 @@ function createSignalEventHandler(deps) {
 		}));
 		const statusReactionTarget = `${entry.groupId ?? entry.senderRecipient}/${statusReactionTimestamp ?? "unknown"}`;
 		const signalReactionOpts = {
-			cfg: deps.cfg,
+			cfg,
 			...deps.baseUrl ? { baseUrl: deps.baseUrl } : {},
 			...deps.account ? { account: deps.account } : {},
 			...deps.accountId ? { accountId: deps.accountId } : {},
@@ -846,7 +854,7 @@ function createSignalEventHandler(deps) {
 		}) : null;
 		if (statusReactionController) statusReactionController.setQueued();
 		const { onModelSelected, typingCallbacks, ...replyPipeline } = createChannelMessageReplyPipeline({
-			cfg: deps.cfg,
+			cfg,
 			agentId: route.agentId,
 			channel: "signal",
 			accountId: route.accountId,
@@ -854,7 +862,7 @@ function createSignalEventHandler(deps) {
 				start: async () => {
 					if (!ctxPayload.To) return;
 					await sendTypingSignal(ctxPayload.To, {
-						cfg: deps.cfg,
+						cfg,
 						baseUrl: deps.baseUrl,
 						account: deps.account,
 						accountId: deps.accountId
@@ -880,13 +888,13 @@ function createSignalEventHandler(deps) {
 		const dispatcherOptions = {
 			...replyPipeline,
 			propagateRetryableNoSendFailure: true,
-			humanDelay: resolveHumanDelayConfig(deps.cfg, route.agentId),
+			humanDelay: resolveHumanDelayConfig(cfg, route.agentId),
 			typingCallbacks
 		};
 		const delivery = {
 			deliver: async (payload, _info) => {
 				await deps.deliverReplies({
-					cfg: deps.cfg,
+					cfg,
 					replies: [payload],
 					target: ctxPayload.To,
 					baseUrl: deps.baseUrl,
@@ -946,7 +954,7 @@ function createSignalEventHandler(deps) {
 					raw: entry
 				}),
 				resolveTurn: () => ({
-					cfg: deps.cfg,
+					cfg,
 					channel: "signal",
 					accountId: route.accountId,
 					route: {
@@ -964,7 +972,7 @@ function createSignalEventHandler(deps) {
 							mainDmOwnerPin: (() => {
 								if (inboundLastRouteSessionKey !== route.mainSessionKey) return;
 								const pinnedOwner = resolvePinnedMainDmOwnerFromAllowlist({
-									dmScope: deps.cfg.session?.dmScope,
+									dmScope: cfg.session?.dmScope,
 									allowFrom: deps.allowFrom,
 									normalizeEntry: normalizeSignalAllowRecipient
 								});
@@ -1072,7 +1080,7 @@ function createSignalEventHandler(deps) {
 	async function resolveSignalBatchChannelIngress(entries, last) {
 		if (last.boundChannelIngress) return last.boundChannelIngress;
 		const route = resolveSignalInboundRoute({
-			cfg: deps.cfg,
+			cfg: last.cfg,
 			accountId: deps.accountId,
 			isGroup: last.isGroup,
 			groupId: last.groupId,
@@ -1152,6 +1160,10 @@ function createSignalEventHandler(deps) {
 	const { debouncer } = createChannelInboundDebouncer({
 		cfg: deps.cfg,
 		channel: "signal",
+		resolveDebounceMs: (entry) => resolveInboundDebounceMs({
+			cfg: entry.cfg,
+			channel: "signal"
+		}),
 		buildKey: (entry) => resolveSignalInboundDebounceKey(deps.accountId, entry),
 		shouldDebounce: (entry) => shouldDebounceTextInbound({
 			text: entry.commandBody,
@@ -1183,7 +1195,7 @@ function createSignalEventHandler(deps) {
 		const messageId = params.reaction.targetSentTimestamp ? String(params.reaction.targetSentTimestamp) : "unknown";
 		const conversationKey = resolveSignalApprovalConversationKey(groupId ? `group:${groupId}` : `signal:${resolveSignalRecipient(params.sender)}`);
 		if (conversationKey && await maybeResolveSignalApprovalReaction({
-			cfg: deps.cfg,
+			cfg: params.cfg,
 			accountId: deps.accountId,
 			conversationKey,
 			messageId,
@@ -1198,7 +1210,7 @@ function createSignalEventHandler(deps) {
 			return true;
 		}
 		if (conversationKey && await maybeResolveSignalQuestionReaction({
-			cfg: deps.cfg,
+			cfg: params.cfg,
 			accountId: deps.accountId,
 			conversationKey,
 			messageId,
@@ -1220,7 +1232,7 @@ function createSignalEventHandler(deps) {
 		})) return true;
 		const senderPeerId = resolveSignalPeerId(params.sender);
 		const route = resolveSignalInboundRoute({
-			cfg: deps.cfg,
+			cfg: params.cfg,
 			accountId: deps.accountId,
 			isGroup,
 			groupId,
@@ -1251,6 +1263,7 @@ function createSignalEventHandler(deps) {
 	}
 	return async (event, turnAdoptionLifecycle, preparedPayload) => {
 		if (event.event !== "receive" || !event.data) return;
+		const cfg = readConfig();
 		let payload = preparedPayload ?? null;
 		if (!preparedPayload) try {
 			payload = JSON.parse(event.data);
@@ -1272,7 +1285,7 @@ function createSignalEventHandler(deps) {
 		const messageText = renderSignalMentions(rawMessage, dataMessage?.mentions).trim();
 		const groupId = dataMessage?.groupInfo?.groupId ?? reaction?.groupInfo?.groupId ?? void 0;
 		const isGroup = Boolean(groupId);
-		const hasControlCommandInMessage = isControlCommandMessage(messageText, deps.cfg);
+		const hasControlCommandInMessage = isControlCommandMessage(messageText, cfg);
 		const senderDisplay = formatSignalSenderDisplay(sender);
 		const resolveChannelIngress = async (contextBinding) => await resolveSignalAccessState({
 			accountId: deps.accountId,
@@ -1283,14 +1296,14 @@ function createSignalEventHandler(deps) {
 			sender,
 			groupId,
 			isGroup,
-			cfg: deps.cfg,
+			cfg,
 			hasControlCommand: hasControlCommandInMessage,
 			contextBinding
 		});
 		const { senderAccess, commandAccess } = await resolveChannelIngress();
 		const quoteText = normalizeOptionalString(dataMessage?.quote?.text) ?? "";
 		const { contextVisibilityMode, quoteSenderAllowed, visibleQuoteText, visibleQuoteSender } = resolveSignalQuoteContext({
-			cfg: deps.cfg,
+			cfg,
 			accountId: deps.accountId,
 			isGroup,
 			dataMessage,
@@ -1299,6 +1312,7 @@ function createSignalEventHandler(deps) {
 		if (quoteText && !visibleQuoteText && isGroup) logVerbose(`signal: drop quote context (mode=${contextVisibilityMode}, sender_allowed=${quoteSenderAllowed ? "yes" : "no"})`);
 		const hasBodyContent = Boolean(messageText || visibleQuoteText) || Boolean(!reaction && dataMessage?.attachments?.length);
 		if (reaction && await handleReactionOnlyInbound({
+			cfg,
 			envelope,
 			sender,
 			senderDisplay,
@@ -1324,7 +1338,7 @@ function createSignalEventHandler(deps) {
 				accountId: deps.accountId,
 				sendPairingReply: async (text) => {
 					await sendMessageSignal(`signal:${senderRecipient}`, text, {
-						cfg: deps.cfg,
+						cfg,
 						baseUrl: deps.baseUrl,
 						account: deps.account,
 						maxBytes: deps.mediaMaxBytes,
@@ -1353,7 +1367,7 @@ function createSignalEventHandler(deps) {
 			return;
 		}
 		const route = resolveSignalInboundRoute({
-			cfg: deps.cfg,
+			cfg,
 			accountId: deps.accountId,
 			isGroup,
 			groupId,
@@ -1365,12 +1379,12 @@ function createSignalEventHandler(deps) {
 		const replyToId = typeof nativeReplyTargetTimestamp === "number" ? String(nativeReplyTargetTimestamp) : void 0;
 		const signalToRaw = isGroup ? `group:${groupId}` : `signal:${senderRecipient}`;
 		const signalTo = normalizeSignalMessagingTarget(signalToRaw) ?? signalToRaw;
-		const mentionRegexes = buildMentionRegexes(deps.cfg, route.agentId);
+		const mentionRegexes = buildMentionRegexes(cfg, route.agentId);
 		const textWasMentioned = isGroup && matchesMentionPatterns(messageText, mentionRegexes);
 		const nativeMentionFacts = resolveSignalMentionFacts(deps, rawMessage, dataMessage?.mentions);
 		const wasMentioned = isGroup && (textWasMentioned || nativeMentionFacts.mentionsBot);
 		const requireMention = isGroup && resolveChannelGroupRequireMention({
-			cfg: deps.cfg,
+			cfg,
 			channel: "signal",
 			groupId,
 			accountId: deps.accountId,
@@ -1395,10 +1409,12 @@ function createSignalEventHandler(deps) {
 		const effectiveWasMentioned = mentionDecision.effectiveWasMentioned;
 		if (isGroup && requireMention && canDetectMention && mentionDecision.shouldSkip) {
 			logInboundDrop({
-				log: logVerbose,
+				log: deps.runtime.log,
 				channel: "signal",
 				reason: "no mention",
-				target: senderDisplay
+				target: groupId,
+				onceKey: JSON.stringify([deps.accountId, groupId]),
+				hint: `Mention patterns can be derived from the agent identity name. Set ${groupsConfigPath}[${JSON.stringify(groupId)}].requireMention=false to process messages without a mention. Preserve existing groups entries; when adding the first groups map, include "*": {} to keep other chats admitted.`
 			});
 			const pendingMedia = (dataMessage.attachments ?? []).map((attachment) => {
 				const contentType = attachment?.contentType ?? void 0;
@@ -1431,32 +1447,29 @@ function createSignalEventHandler(deps) {
 				sourceTimestamp: inboundTimestamp
 			});
 			const signalGroupPolicy = resolveChannelGroupPolicy({
-				cfg: deps.cfg,
+				cfg,
 				channel: "signal",
 				groupId,
 				accountId: deps.accountId
 			});
-			if ((signalGroupPolicy.groupConfig?.ingest ?? signalGroupPolicy.defaultConfig?.ingest) === true) {
-				const canonicalGroupTarget = normalizeSignalMessagingTarget(`group:${groupId}`) ?? `group:${groupId}`;
-				fireAndForgetHook(triggerInternalHook(createInternalHookEvent("message", "received", route.sessionKey, toInternalMessageReceivedContext({
-					from: `group:${groupId}`,
-					to: canonicalGroupTarget,
-					content: pendingBodyText,
-					timestamp: envelope.timestamp ?? void 0,
-					channelId: "signal",
-					accountId: deps.accountId,
-					conversationId: canonicalGroupTarget,
-					messageId: typeof envelope.timestamp === "number" ? String(envelope.timestamp) : void 0,
-					senderId: senderDisplay,
-					senderName: envelope.sourceName ?? void 0,
-					provider: "signal",
-					surface: "signal",
-					originatingChannel: "signal",
-					originatingTo: canonicalGroupTarget,
-					isGroup: true,
-					groupId: canonicalGroupTarget
-				}))), "signal: mention-skip message hook failed");
-			}
+			if ((signalGroupPolicy.groupConfig?.ingest ?? signalGroupPolicy.defaultConfig?.ingest) === true) fireAndForgetHook(triggerInternalHook(createInternalHookEvent("message", "received", route.sessionKey, toInternalMessageReceivedContext({
+				from: `group:${groupId}`,
+				to: signalTo,
+				content: pendingBodyText,
+				timestamp: envelope.timestamp ?? void 0,
+				channelId: "signal",
+				accountId: deps.accountId,
+				conversationId: signalTo,
+				messageId: typeof envelope.timestamp === "number" ? String(envelope.timestamp) : void 0,
+				senderId: senderDisplay,
+				senderName: envelope.sourceName ?? void 0,
+				provider: "signal",
+				surface: "signal",
+				originatingChannel: "signal",
+				originatingTo: signalTo,
+				isGroup: true,
+				groupId: signalTo
+			}))), "signal: mention-skip message hook failed");
 			return;
 		}
 		const attachments = dataMessage.attachments ?? [];
@@ -1507,7 +1520,7 @@ function createSignalEventHandler(deps) {
 		if (!bodyText && mediaFacts.length === 0 && !visibleQuoteText) return;
 		if (deps.sendReadReceipts && !deps.readReceiptsViaDaemon && !isGroup && inboundTimestamp) try {
 			await sendReadReceiptSignal(`signal:${senderRecipient}`, inboundTimestamp, {
-				cfg: deps.cfg,
+				cfg,
 				baseUrl: deps.baseUrl,
 				account: deps.account,
 				accountId: deps.accountId
@@ -1527,6 +1540,7 @@ function createSignalEventHandler(deps) {
 			sourceTimestamp: inboundTimestamp
 		});
 		const entry = {
+			cfg,
 			senderName,
 			senderDisplay,
 			senderRecipient,

package/dist/{probe-Bjs1Yd79.js → probe-Bh9f0rRO.js}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { t as detectSignalTransport } from "./transport-detection-CbPFIo0i.js";
-import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-CDyW9LrQ.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as detectSignalTransport } from "./transport-detection-BD__qywn.js";
+import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-CNc5wzzs.js";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/probe.ts

package/dist/{question-reactions-DJfSmeYo.js → question-reactions-B06vyt3T.js}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { i as resolveSignalTarget } from "./approval-auth-CkljhI65.js";
-import { c as resolveSignalApprovalTargetAuthorKeys, s as resolveSignalApprovalConversationKey } from "./approval-reactions-Cno-4mmH.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { i as resolveSignalDeliveredConversationKey } from "./approval-auth-pNCKKotV.js";
+import { c as resolveSignalApprovalTargetAuthorKeys } from "./approval-reactions-Cub0slPC.js";
 import { createQuestionReactionTargetStore, questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 //#region extensions/signal/src/question-reactions.ts
@@ -24,21 +24,10 @@ const questionReactionTargets = createQuestionReactionTargetStore({
 	registerChannelDelivery: questionGatewayRuntime.registerChannelDelivery,
 	resolveReaction: questionGatewayRuntime.resolveReaction
 });
-function resolveConversationKey(params) {
-	try {
-		return resolveSignalTarget({
-			cfg: params.cfg,
-			accountId: params.accountId,
-			input: params.to
-		})?.to ?? resolveSignalApprovalConversationKey(params.to);
-	} catch {
-		return resolveSignalApprovalConversationKey(params.to);
-	}
-}
 function registerSignalQuestionReactionTargetForDeliveredPayload(params) {
 	const binding = questionGatewayRuntime.readReactionBinding(params.payload);
 	if (params.target.channel !== "signal" || !binding) return false;
-	const conversationKey = resolveConversationKey({
+	const conversationKey = resolveSignalDeliveredConversationKey({
 		cfg: params.cfg,
 		...params.target
 	});

package/dist/{reaction-runtime-api-7FQFT_qb.js → reaction-runtime-api-CWqDv5-q.js}

@@ -1,6 +1,6 @@
 import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
 import { r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.js";
-import { n as signalRpcRequest } from "./client-adapter-CDyW9LrQ.js";
+import { n as signalRpcRequest } from "./client-adapter-CNc5wzzs.js";
 import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 //#region extensions/signal/src/send-reactions.ts

package/dist/reaction-runtime-api.js

@@ -1,2 +1,2 @@
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
 export { removeReactionSignal, sendReactionSignal };

package/dist/{rolldown-runtime-D7D4PA-g.js → rolldown-runtime-8H4AJuhK.js}

@@ -1,3 +1,4 @@
+import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {

package/dist/runtime-api.js

@@ -1,12 +1,12 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
-import { a as setSignalRuntime, c as resolveSignalReactionLevel, s as signalMessageActions } from "./transport-detection-CbPFIo0i.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
-import { n as SignalConfigSchema } from "./config-schema-CHihQTOp.js";
-import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
-import { t as monitorSignalProvider } from "./monitor-BPOcRufA.js";
-import { t as sendMessageSignal } from "./send-DF4T9tXZ.js";
-import { t as probeSignal } from "./probe-Bjs1Yd79.js";
+import { a as setSignalRuntime, c as resolveSignalReactionLevel, s as signalMessageActions } from "./transport-detection-BD__qywn.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
+import { n as SignalConfigSchema } from "./config-schema-DfEbpMVQ.js";
+import { i as installSignalCli } from "./install-signal-cli-QlEIfWBv.js";
+import { t as monitorSignalProvider } from "./monitor-CokYfKOk.js";
+import { t as sendMessageSignal } from "./send-BvWSfyNf.js";
+import { t as probeSignal } from "./probe-Bh9f0rRO.js";
 import { resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { PAIRING_APPROVED_MESSAGE } from "openclaw/plugin-sdk/channel-status";
 import { buildBaseAccountStatusSnapshot, buildBaseChannelStatusSummary, collectStatusIssuesFromLastError, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";

package/dist/{send-DF4T9tXZ.js → send-BvWSfyNf.js}

@@ -1,7 +1,7 @@
 import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { n as registerSignalReplyContext, u as markdownToSignalText } from "./transport-detection-CbPFIo0i.js";
-import { n as signalRpcRequest } from "./client-adapter-CDyW9LrQ.js";
+import { n as registerSignalReplyContext, u as markdownToSignalText } from "./transport-detection-BD__qywn.js";
+import { n as signalRpcRequest } from "./client-adapter-CNc5wzzs.js";
 import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";

package/dist/{send.runtime-DHPi6R_z.js → send.runtime-BNQ0x-2k.js}

@@ -1,2 +1,2 @@
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-DF4T9tXZ.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-BvWSfyNf.js";
 export { sendMessageSignal, sendTypingSignal };

package/dist/{transport-detection-CbPFIo0i.js → transport-detection-BD__qywn.js}

@@ -1,8 +1,8 @@
 import { u as normalizeSignalTransportUrl } from "./transport-policy-DxvSMHp9.js";
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.js";
-import { n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-CkljhI65.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-pNCKKotV.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
@@ -73,7 +73,7 @@ const signalApproval = createApproverRestrictedNativeApprovalCapabilityFromForwa
 			approvalKind,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-DvZd_IWj.js")).signalApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-X6DXgK_3.js")).signalApprovalNativeRuntime
 	})
 });
 const signalApprovalRouting = signalApproval.routing;
@@ -522,7 +522,7 @@ const DEFAULT_PROBE_TIMEOUT_MS = 1e4;
 async function detectSignalTransport(params) {
 	const url = normalizeSignalTransportUrl(params.url);
 	const timeoutMs = params.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS;
-	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-B7kr_6Zu.js");
+	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-DV7x4VWu.js");
 	const probeNative = params.probeNative ?? probes?.nativeCheck;
 	const probeContainer = params.probeContainer ?? probes?.containerCheck;
 	if (!probeNative || !probeContainer) throw new Error("Signal transport probes are unavailable");

package/dist/{transport-detection.runtime-B81flHI8.js → transport-detection.runtime-c9q3r3AM.js}

@@ -1,2 +1,2 @@
-import { t as detectSignalTransport } from "./transport-detection-CbPFIo0i.js";
+import { t as detectSignalTransport } from "./transport-detection-BD__qywn.js";
 export { detectSignalTransport };

package/dist/{transport-probes.runtime-B7kr_6Zu.js → transport-probes.runtime-DV7x4VWu.js}

@@ -1,2 +1,2 @@
-import { a as containerCheck, n as signalCheck } from "./client-BmpTN7R3.js";
+import { a as containerCheck, n as signalCheck } from "./client-B3C0ciqU.js";
 export { containerCheck, signalCheck as nativeCheck };

package/openclaw.plugin.json

@@ -1,9 +1,10 @@
 {
   "id": "signal",
+  "name": "Signal",
+  "description": "OpenClaw Signal channel plugin.",
   "doctorContract": {
     "configRepair": true
   },
-  "icon": "https://cdn.simpleicons.org/signal",
   "activation": {
     "onStartup": false
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/signal",
-  "version": "2026.9.1",
+  "version": "2026.9.3",
   "description": "OpenClaw Signal channel plugin",
   "type": "module",
   "dependencies": {
@@ -93,10 +93,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.9.1"
+      "pluginApi": ">=2026.9.3"
     },
     "build": {
-      "openclawVersion": "2026.9.1",
+      "openclawVersion": "2026.9.3",
       "bundledDist": false
     },
     "release": {
@@ -118,7 +118,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.9.1"
+    "openclaw": ">=2026.9.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/dist/{install-signal-cli-7tEL37_j.js → install-signal-cli-QlEIfWBv.js}

@@ -1,10 +1,10 @@
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import path from "node:path";
 import { CONFIG_DIR, extractArchive, resolveBrewExecutable } from "openclaw/plugin-sdk/setup-tools";
 import { createWriteStream } from "node:fs";
 import fs from "node:fs/promises";
-import path from "node:path";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { readProviderJsonObjectResponse } from "openclaw/plugin-sdk/provider-http";