@openclaw/signal 2026.9.2 → 2026.9.3

package/dist/api.js

@@ -1,13 +1,13 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-BcDiypLn.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
-import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-B-A_5_Vz.js";
-import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
-import { t as monitorSignalProvider } from "./monitor-D7Slr0-A.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
-import { t as probeSignal } from "./probe-CtO2EIfg.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-BD__qywn.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
+import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-DJQccJtU.js";
+import { i as installSignalCli } from "./install-signal-cli-QlEIfWBv.js";
+import { t as monitorSignalProvider } from "./monitor-CokYfKOk.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-BvWSfyNf.js";
+import { t as probeSignal } from "./probe-Bh9f0rRO.js";
 //#region extensions/signal/src/channel.setup.ts
 const signalSetupPlugin = { ...createSignalPluginBase({
 	setupWizard: signalSetupWizard,

package/dist/{approval-handler.runtime-Dsg_GE8N.js → approval-handler.runtime-X6DXgK_3.js}

@@ -1,8 +1,8 @@
 import { r as resolveDefaultSignalAccountId } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
 import { a as resolveSignalTarget } from "./approval-auth-pNCKKotV.js";
-import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-D-nkbsvm.js";
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
+import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-Cub0slPC.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-BvWSfyNf.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";

package/dist/{approval-reactions-D-nkbsvm.js → approval-reactions-Cub0slPC.js}

@@ -1,14 +1,13 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
 import { a as resolveSignalTarget, i as resolveSignalDeliveredConversationKey, n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-pNCKKotV.js";
 import { l as looksLikeUuid } from "./identity-YXPmgFMu.js";
-import { i as getOptionalSignalRuntime } from "./transport-detection-BcDiypLn.js";
+import { i as getOptionalSignalRuntime } from "./transport-detection-BD__qywn.js";
 import { createLazyRuntimeSurface } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { addApprovalReactionHintToText, createApprovalReactionTargetStore, hasApprovalReactionHintText, listApprovalReactionBindings, readApprovalReactionDecisionList, resolveTypedApprovalReactionTarget } from "openclaw/plugin-sdk/approval-reaction-runtime";
+import { addApprovalReactionHintToText, createApprovalReactionTargetStore, hasApprovalReactionHintText, listApprovalReactionBindings, readApprovalReactionTargetRecord, resolveTypedApprovalReactionTarget, settleApprovalReaction } from "openclaw/plugin-sdk/approval-reaction-runtime";
 import { normalizeE164 } from "openclaw/plugin-sdk/text-utility-runtime";
-import { isApprovalNotFoundError } from "openclaw/plugin-sdk/error-runtime";
 import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-reply-runtime";
 import { createPluginStateErrorReporter } from "openclaw/plugin-sdk/plugin-state-runtime";
 import { matchesApprovalRequestFilters } from "openclaw/plugin-sdk/approval-client-runtime";
@@ -165,10 +164,9 @@ function buildReactionTargetKey(params) {
 	return `${accountId}:${conversationKey}:${messageId}`;
 }
 function readPersistedTarget(target) {
+	const record = readApprovalReactionTargetRecord(target);
 	const value = target;
-	if (!value || typeof value.approvalId !== "string" || value.approvalKind !== "exec" && value.approvalKind !== "plugin" || !value.route || value.route.deliveryMode !== "session" && value.route.deliveryMode !== "target" || !Array.isArray(value.targetAuthorKeys)) return null;
-	const allowedDecisions = readApprovalReactionDecisionList(value.allowedDecisions);
-	if (!allowedDecisions) return null;
+	if (!record || !value?.route || value.route.deliveryMode !== "session" && value.route.deliveryMode !== "target" || !Array.isArray(value.targetAuthorKeys)) return null;
 	const targetRouteTo = value.route.deliveryMode === "target" && typeof value.route.to === "string" ? normalizeSignalMessagingTarget(value.route.to) : null;
 	if (value.route.deliveryMode === "target" && !targetRouteTo) return null;
 	const route = value.route.deliveryMode === "target" ? {
@@ -183,9 +181,7 @@ function readPersistedTarget(target) {
 		...typeof value.route.sessionKey === "string" ? { sessionKey: value.route.sessionKey } : {}
 	};
 	return {
-		approvalId: value.approvalId,
-		approvalKind: value.approvalKind,
-		allowedDecisions,
+		...record,
 		targetAuthorKeys: value.targetAuthorKeys,
 		route
 	};
@@ -359,26 +355,8 @@ async function maybeResolveSignalApprovalReaction(params) {
 		params.logVerboseMessage?.(`signal: approval reaction ignored for ${target.approvalId}; missing actor identity`);
 		return true;
 	}
-	if (getSignalApprovalApprovers({
-		cfg: params.cfg,
-		accountId: params.accountId
-	}).length === 0) {
-		params.logVerboseMessage?.(`signal: approval reaction denied id=${target.approvalId}; reactions require explicit approvers`);
-		return true;
-	}
-	if (!signalApprovalAuth.authorizeActorAction({
-		cfg: params.cfg,
-		accountId: params.accountId,
-		senderId: actorId,
-		action: "approve",
-		approvalKind: target.approvalKind
-	}).authorized) {
-		params.logVerboseMessage?.(`signal: approval reaction denied id=${target.approvalId} sender=${actorId}`);
-		return true;
-	}
-	const resolveApprovalOverGateway = await loadResolveApprovalOverGateway();
-	try {
-		const result = await resolveApprovalOverGateway({
+	await settleApprovalReaction({
+		request: {
 			cfg: params.cfg,
 			approvalId: target.approvalId,
 			approvalKind: target.approvalKind,
@@ -387,32 +365,25 @@ async function maybeResolveSignalApprovalReaction(params) {
 			accountId: params.accountId,
 			senderId: actorId,
 			gatewayUrl: params.gatewayUrl
-		});
-		const terminalTruth = formatSignalApprovalTerminalTruth(result.approval);
-		unregisterSignalApprovalReactionTarget({
+		},
+		approvers: getSignalApprovalApprovers({
+			cfg: params.cfg,
+			accountId: params.accountId
+		}),
+		authorizeActorAction: (input) => signalApprovalAuth.authorizeActorAction(input),
+		loadResolver: loadResolveApprovalOverGateway,
+		clearTarget: () => unregisterSignalApprovalReactionTarget({
 			accountId: params.accountId,
 			conversationKey: params.conversationKey,
 			messageId: params.messageId
-		});
-		if (!result.applied) {
-			params.logVerboseMessage?.(`signal: approval reaction already resolved id=${target.approvalId} sender=${actorId} ${terminalTruth}`);
-			return true;
-		}
-		params.logVerboseMessage?.(`signal: approval reaction resolved id=${target.approvalId} sender=${actorId} ${terminalTruth}`);
-		return true;
-	} catch (error) {
-		if (isApprovalNotFoundError(error)) {
-			unregisterSignalApprovalReactionTarget({
-				accountId: params.accountId,
-				conversationKey: params.conversationKey,
-				messageId: params.messageId
-			});
-			params.logVerboseMessage?.(`signal: approval reaction ignored for expired approval id=${target.approvalId} sender=${actorId}`);
-			return true;
-		}
-		params.logVerboseMessage?.(`signal: approval reaction failed id=${target.approvalId} sender=${actorId}: ${String(error)}`);
-		throw error;
-	}
+		}),
+		onResolved: (result) => {
+			const outcome = result.applied ? "resolved" : "already resolved";
+			params.logVerboseMessage?.(`signal: approval reaction ${outcome} id=${target.approvalId} sender=${actorId} ${formatSignalApprovalTerminalTruth(result.approval)}`);
+		},
+		logVerboseMessage: params.logVerboseMessage
+	});
+	return true;
 }
 function clearSignalApprovalReactionTargetsForTest() {
 	signalApprovalReactionTargets.clearForTest();

package/dist/{channel-B-A_5_Vz.js → channel-DJQccJtU.js}

@@ -3,9 +3,9 @@ import { a as resolveSignalAccountConfig, i as resolveSignalAccount, n as listSi
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { a as resolveSignalTarget, r as listSignalAliasDirectoryEntries } from "./approval-auth-pNCKKotV.js";
 import { c as resolveSignalSender, l as looksLikeUuid, o as resolveSignalPeerId, s as resolveSignalRecipient } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-BcDiypLn.js";
-import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-C18u1hW0.js";
-import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-BD__qywn.js";
+import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-D0SnglP4.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-DfEbpMVQ.js";
 import { describeAccountSnapshot, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { buildDmGroupAccountAllowlistAdapter } from "openclaw/plugin-sdk/allowlist-config-edit";
@@ -214,8 +214,8 @@ async function probeSignalTransport(params) {
 		overrides: managedTransportOptions(params.transport)
 	}) : params.transport;
 	const resolved = resolveSignalTransport(transport);
-	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
-	return (params.probeNative ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
+	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-DV7x4VWu.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
+	return (params.probeNative ?? (await import("./transport-probes.runtime-DV7x4VWu.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
 }
 function writeSignalAccountTransport(params) {
 	const transport = normalizeTransport(params.transport);
@@ -572,7 +572,7 @@ function createSignalSetupWizardProxy(loadWizard) {
 const signalDoctor = {
 	normalizeCompatibilityConfig,
 	cleanStaleConfig: async ({ cfg }) => {
-		const { detectSignalTransport } = await import("./transport-detection.runtime-DYuvIa7s.js");
+		const { detectSignalTransport } = await import("./transport-detection.runtime-c9q3r3AM.js");
 		return await migrateLegacySignalTransportConfig({
 			cfg,
 			detect: detectSignalTransport
@@ -583,7 +583,7 @@ const signalDoctor = {
 //#region extensions/signal/src/shared.ts
 const SIGNAL_CHANNEL = "signal";
 async function loadSignalChannelRuntime() {
-	return await import("./channel.runtime-LfE0qPMj.js");
+	return await import("./channel.runtime-QerbTca6.js");
 }
 const signalSetupWizard = createSignalSetupWizardProxy(async () => (await loadSignalChannelRuntime()).signalSetupWizard);
 const signalConfigAdapter = {
@@ -671,10 +671,10 @@ function createSignalPluginBase(params) {
 }
 //#endregion
 //#region extensions/signal/src/channel.ts
-const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-D7Slr0-A.js").then((n) => n.n));
-const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-CtO2EIfg.js").then((n) => n.n));
-const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-BLiqhyHW.js"));
-const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-D-nkbsvm.js").then((n) => n.n));
+const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-CokYfKOk.js").then((n) => n.n));
+const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-Bh9f0rRO.js").then((n) => n.n));
+const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-BNQ0x-2k.js"));
+const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-Cub0slPC.js").then((n) => n.n));
 async function resolveSignalSendContext(params) {
 	return {
 		send: resolveOutboundSendDep(params.deps, "signal") ?? (await loadSignalSendRuntime()).sendMessageSignal,
@@ -902,7 +902,7 @@ async function registerDeliveredSignalApprovalPayloadForReactions(params) {
 	const targetAuthor = normalizeOptionalString(account.config.account);
 	const targetAuthorUuid = normalizeOptionalString(account.config.accountUuid);
 	if (!targetAuthor && !targetAuthorUuid) return;
-	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-CsVOpHg_.js").then((n) => n.n);
+	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-B06vyt3T.js").then((n) => n.n);
 	registerSignalQuestionReactionTargetForDeliveredPayload({
 		cfg: params.cfg,
 		target: {
@@ -1093,8 +1093,11 @@ const signalPlugin = createChatChannelPlugin({
 		idLabel: "signalNumber",
 		message: PAIRING_APPROVED_MESSAGE,
 		normalizeAllowEntry: createPairingPrefixStripper(/^signal:/i),
-		notify: async ({ cfg, id, message }) => {
-			await (await loadSignalSendRuntime()).sendMessageSignal(id, message, { cfg });
+		notify: async ({ cfg, id, message, accountId }) => {
+			await (await loadSignalSendRuntime()).sendMessageSignal(id, message, {
+				cfg,
+				accountId
+			});
 		}
 	} },
 	security: signalSecurityAdapter,

package/dist/channel-config-api.js

@@ -1,2 +1,2 @@
-import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-DfEbpMVQ.js";
 export { SignalChannelConfigSchema };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as signalPlugin } from "./channel-B-A_5_Vz.js";
+import { t as signalPlugin } from "./channel-DJQccJtU.js";
 export { signalPlugin };

package/dist/{channel.runtime-LfE0qPMj.js → channel.runtime-QerbTca6.js}

@@ -1,6 +1,6 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds } from "./accounts-DO4HMqaK.js";
-import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-B-A_5_Vz.js";
-import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
+import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-DJQccJtU.js";
+import { i as installSignalCli } from "./install-signal-cli-QlEIfWBv.js";
 import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 import { createDetectedBinaryStatus, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 //#region extensions/signal/src/setup-surface.ts

package/dist/{client-BmpTN7R3.js → client-B3C0ciqU.js}

@@ -1,14 +1,19 @@
+import { createRequire } from "node:module";
 import { detectMime, extractOriginalFilename, parseMediaContentLength } from "openclaw/plugin-sdk/media-runtime";
 import { parseStrictNonNegativeInteger, resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { coerceErrorMessage, formatErrorMessage, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { resolveFetch } from "openclaw/plugin-sdk/fetch-runtime";
 import { readResponseTextPrefix, readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 import { readRegularFile } from "openclaw/plugin-sdk/security-runtime";
-import WebSocket from "ws";
+import path from "node:path";
 import { Buffer as Buffer$1 } from "node:buffer";
 import http from "node:http";
 import https from "node:https";
 import { generateSecureUuid } from "openclaw/plugin-sdk/core";
+//#region extensions/signal/src/ws-runtime.ts
+const require = createRequire(import.meta.url);
+const WebSocket = require(path.join(path.dirname(require.resolve("ws/package.json")), "index.js"));
+//#endregion
 //#region extensions/signal/src/client-container.ts
 /**
 * Signal client for bbernhard/signal-cli-rest-api container.

package/dist/{client-adapter-CDyW9LrQ.js → client-adapter-CNc5wzzs.js}

@@ -1,4 +1,4 @@
-import { a as containerCheck, i as streamSignalEvents$1, n as signalCheck$1, o as containerRpcRequest, r as signalRpcRequest$1, s as streamContainerEvents } from "./client-BmpTN7R3.js";
+import { a as containerCheck, i as streamSignalEvents$1, n as signalCheck$1, o as containerRpcRequest, r as signalRpcRequest$1, s as streamContainerEvents } from "./client-B3C0ciqU.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/client-adapter.ts
 /**

package/dist/{config-schema-CHihQTOp.js → config-schema-DfEbpMVQ.js}

@@ -1,7 +1,7 @@
 import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId, resolveAccountEntry } from "openclaw/plugin-sdk/account-resolution";
-import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelAccountSchemaParts, buildChannelConfigSchema, buildChannelReactionShape, buildGroupEntrySchema, requireAllowlistAllowFrom, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
+import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelAccountSchemaParts, buildChannelConfigSchema, buildChannelReactionShape, buildGroupEntrySchema, refineChannelDmPolicy } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
 //#region extensions/signal/src/config-ui-hints.ts
 const signalChannelConfigUiHints = {
@@ -142,45 +142,18 @@ const SignalConfigSchemaBase = SignalAccountSchemaBase.extend({
 	defaultAccount: z.string().optional()
 });
 function validateSignalConfigAllowFrom(value, ctx) {
-	requireOpenAllowFrom({
-		policy: value.dmPolicy,
-		allowFrom: value.allowFrom,
-		ctx,
-		path: ["allowFrom"],
-		message: "channels.signal.dmPolicy=\"open\" requires channels.signal.allowFrom to include \"*\""
-	});
-	requireAllowlistAllowFrom({
-		policy: value.dmPolicy,
-		allowFrom: value.allowFrom,
-		ctx,
-		path: ["allowFrom"],
-		message: "channels.signal.dmPolicy=\"allowlist\" requires channels.signal.allowFrom to contain at least one sender ID"
+	refineChannelDmPolicy({
+		channelId: "signal",
+		value,
+		ctx
 	});
 	for (const [accountId, account] of Object.entries(value.accounts ?? {})) {
 		if (!account) continue;
-		const effectivePolicy = account.dmPolicy ?? value.dmPolicy;
-		const effectiveAllowFrom = account.allowFrom ?? value.allowFrom;
-		requireOpenAllowFrom({
-			policy: effectivePolicy,
-			allowFrom: effectiveAllowFrom,
-			ctx,
-			path: [
-				"accounts",
-				accountId,
-				"allowFrom"
-			],
-			message: "channels.signal.accounts.*.dmPolicy=\"open\" requires channels.signal.accounts.*.allowFrom (or channels.signal.allowFrom) to include \"*\""
-		});
-		requireAllowlistAllowFrom({
-			policy: effectivePolicy,
-			allowFrom: effectiveAllowFrom,
-			ctx,
-			path: [
-				"accounts",
-				accountId,
-				"allowFrom"
-			],
-			message: "channels.signal.accounts.*.dmPolicy=\"allowlist\" requires channels.signal.accounts.*.allowFrom (or channels.signal.allowFrom) to contain at least one sender ID"
+		refineChannelDmPolicy({
+			channelId: "signal",
+			value,
+			accountId,
+			ctx
 		});
 	}
 }

package/dist/contract-api.js

@@ -1,4 +1,4 @@
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { i as isSignalSenderAllowed } from "./identity-YXPmgFMu.js";
-import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-7tEL37_j.js";
+import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-QlEIfWBv.js";
 export { MAX_SIGNAL_CLI_EXTRACTED_BYTES, downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeArchive, looksLikeSignalTargetId, normalizeSignalMessagingTarget, normalizeSignalReactionRecipient, pickAsset };

package/dist/{doctor-contract-api-C18u1hW0.js → doctor-contract-api-D0SnglP4.js}

@@ -293,76 +293,7 @@ function hasContainerTransportWithoutEffectiveAccount(cfg) {
 	}
 	return false;
 }
-async function migrateLegacySignalTransportConfig(params) {
-	const signal = params.cfg.channels?.signal;
-	if (!isRecord(signal)) return {
-		config: params.cfg,
-		changes: []
-	};
-	const accounts = isRecord(signal.accounts) ? signal.accounts : {};
-	if (!(Object.hasOwn(signal, "apiMode") || hasLegacyFields(signal) || Object.values(accounts).some((entry) => isRecord(entry) && hasLegacyFields(entry)))) return {
-		config: params.cfg,
-		changes: []
-	};
-	const apiMode = signal.apiMode;
-	const entries = [signal, ...Object.values(accounts).filter(isRecord)];
-	const legacyResolutionEntries = entries.filter((_, index) => shouldMaterializeTransport(entries, index)).filter((entry) => !isSignalTransportConfig(entry.transport));
-	const invalidDerivedEndpoint = findInvalidLegacyDerivedEndpoint(legacyResolutionEntries, signal);
-	if (invalidDerivedEndpoint) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [invalidDerivedEndpoint === "port" ? PENDING_LEGACY_INVALID_PORT_WARNING : PENDING_LEGACY_INVALID_HOST_WARNING]
-	};
-	if (hasInvalidLegacyHttpUrl(legacyResolutionEntries, signal)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_INVALID_URL_WARNING]
-	};
-	if (!params.detect && legacyResolutionEntries.some((entry) => requiresDetection(entry, signal, apiMode))) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_TRANSPORT_WARNING]
-	};
-	const resolvedTransports = await Promise.all(entries.map(async (entry, index) => !shouldMaterializeTransport(entries, index) ? void 0 : await resolveLegacyTransport({
-		entry,
-		parent: signal,
-		apiMode,
-		detect: params.detect
-	})));
-	if (hasInvalidManagedTransportPort(resolvedTransports)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_INVALID_PORT_WARNING]
-	};
-	const transports = allocateMigratedManagedPorts({
-		entries,
-		transports: resolvedTransports
-	});
-	if (transports.some((transport, index) => shouldMaterializeTransport(entries, index) && !transport)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_TRANSPORT_WARNING]
-	};
-	const next = applyMigratedSignalTransports({
-		cfg: params.cfg,
-		entries,
-		transports
-	});
-	if (!next) return {
-		config: params.cfg,
-		changes: []
-	};
-	if (hasContainerTransportWithoutEffectiveAccount(next)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_CONTAINER_ACCOUNT_WARNING]
-	};
-	return {
-		config: next,
-		changes: ["Migrated channels.signal transport settings to concrete account-owned transport objects."]
-	};
-}
-function migrateLegacySignalTransportConfigSync(cfg) {
+function prepareLegacySignalTransportMigration(cfg) {
 	const signal = cfg.channels?.signal;
 	if (!isRecord(signal)) return {
 		config: cfg,
@@ -373,6 +304,7 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 		config: cfg,
 		changes: []
 	};
+	const apiMode = signal.apiMode;
 	const entries = [signal, ...Object.values(accounts).filter(isRecord)];
 	const legacyResolutionEntries = entries.filter((_, index) => shouldMaterializeTransport(entries, index)).filter((entry) => !isSignalTransportConfig(entry.transport));
 	const invalidDerivedEndpoint = findInvalidLegacyDerivedEndpoint(legacyResolutionEntries, signal);
@@ -386,14 +318,14 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 		changes: [],
 		warnings: [PENDING_LEGACY_INVALID_URL_WARNING]
 	};
-	const resolvedTransports = entries.map((entry, index) => {
-		if (!shouldMaterializeTransport(entries, index)) return;
-		return resolveLegacyTransportWithoutDetection({
-			entry,
-			parent: signal,
-			apiMode: signal.apiMode
-		});
-	});
+	return {
+		signal,
+		apiMode,
+		entries,
+		legacyResolutionEntries
+	};
+}
+function finishLegacySignalTransportMigration(cfg, entries, resolvedTransports) {
 	if (hasInvalidManagedTransportPort(resolvedTransports)) return {
 		config: cfg,
 		changes: [],
@@ -427,6 +359,36 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 		changes: ["Migrated channels.signal transport settings to concrete account-owned transport objects."]
 	};
 }
+async function migrateLegacySignalTransportConfig(params) {
+	const prepared = prepareLegacySignalTransportMigration(params.cfg);
+	if ("config" in prepared) return prepared;
+	const { signal, apiMode, entries, legacyResolutionEntries } = prepared;
+	if (!params.detect && legacyResolutionEntries.some((entry) => requiresDetection(entry, signal, apiMode))) return {
+		config: params.cfg,
+		changes: [],
+		warnings: [PENDING_LEGACY_TRANSPORT_WARNING]
+	};
+	const resolvedTransports = await Promise.all(entries.map(async (entry, index) => !shouldMaterializeTransport(entries, index) ? void 0 : await resolveLegacyTransport({
+		entry,
+		parent: signal,
+		apiMode,
+		detect: params.detect
+	})));
+	return finishLegacySignalTransportMigration(params.cfg, entries, resolvedTransports);
+}
+function migrateLegacySignalTransportConfigSync(cfg) {
+	const prepared = prepareLegacySignalTransportMigration(cfg);
+	if ("config" in prepared) return prepared;
+	const { signal, apiMode, entries } = prepared;
+	return finishLegacySignalTransportMigration(cfg, entries, entries.map((entry, index) => {
+		if (!shouldMaterializeTransport(entries, index)) return;
+		return resolveLegacyTransportWithoutDetection({
+			entry,
+			parent: signal,
+			apiMode
+		});
+	}));
+}
 //#endregion
 //#region extensions/signal/config-doctor-api.ts
 const RETIRED_SIGNAL_ACCOUNT_TRANSPORT_FIELDS = [

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-C18u1hW0.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-D0SnglP4.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/{monitor-D7Slr0-A.js → monitor-CokYfKOk.js}

@@ -1,15 +1,15 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { l as normalizeSignalTransportHost } from "./transport-policy-DxvSMHp9.js";
 import { i as resolveSignalAccount, o as resolveSignalReplyToMode } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, f as isSignalNativeApprovalHandlerConfigured, i as getOptionalSignalRuntime, l as formatSignalMediaText, n as registerSignalReplyContext, o as materializeSignalPresentationFallback } from "./transport-detection-BcDiypLn.js";
-import { t as SignalSseRejectionError } from "./client-BmpTN7R3.js";
-import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-CDyW9LrQ.js";
-import { n as sendReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
-import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-D-nkbsvm.js";
-import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-CsVOpHg_.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
+import { c as resolveSignalReactionLevel, f as isSignalNativeApprovalHandlerConfigured, i as getOptionalSignalRuntime, l as formatSignalMediaText, n as registerSignalReplyContext, o as materializeSignalPresentationFallback } from "./transport-detection-BD__qywn.js";
+import { t as SignalSseRejectionError } from "./client-B3C0ciqU.js";
+import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-CNc5wzzs.js";
+import { n as sendReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
+import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-Cub0slPC.js";
+import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-B06vyt3T.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-BvWSfyNf.js";
 import { bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor, createChannelMessageReplyPipeline, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
 import { resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
@@ -20,8 +20,8 @@ import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInbo
 import { canonicalizeBase64, detectMime, estimateBase64DecodedBytes, kindFromMime, saveMediaBuffer } from "openclaw/plugin-sdk/media-runtime";
 import { collectErrorGraphCandidates, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { ensurePortAvailable, extractErrorCode, formatErrorMessage as formatErrorMessage$1, resolvePinnedMainDmOwnerFromAllowlist } from "openclaw/plugin-sdk/security-runtime";
-import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention, resolveChannelGroups, resolveChannelGroupsConfigPath } from "openclaw/plugin-sdk/channel-policy";
 import path from "node:path";
+import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention, resolveChannelGroups, resolveChannelGroupsConfigPath } from "openclaw/plugin-sdk/channel-policy";
 import { registerChannelRuntimeContext } from "openclaw/plugin-sdk/channel-runtime-context";
 import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
 import { deliverTextOrMediaReply, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";

package/dist/{probe-CtO2EIfg.js → probe-Bh9f0rRO.js}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { t as detectSignalTransport } from "./transport-detection-BcDiypLn.js";
-import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-CDyW9LrQ.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as detectSignalTransport } from "./transport-detection-BD__qywn.js";
+import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-CNc5wzzs.js";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/probe.ts

package/dist/{question-reactions-CsVOpHg_.js → question-reactions-B06vyt3T.js}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { i as resolveSignalDeliveredConversationKey } from "./approval-auth-pNCKKotV.js";
-import { c as resolveSignalApprovalTargetAuthorKeys } from "./approval-reactions-D-nkbsvm.js";
+import { c as resolveSignalApprovalTargetAuthorKeys } from "./approval-reactions-Cub0slPC.js";
 import { createQuestionReactionTargetStore, questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 //#region extensions/signal/src/question-reactions.ts

package/dist/{reaction-runtime-api-7FQFT_qb.js → reaction-runtime-api-CWqDv5-q.js}

@@ -1,6 +1,6 @@
 import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
 import { r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.js";
-import { n as signalRpcRequest } from "./client-adapter-CDyW9LrQ.js";
+import { n as signalRpcRequest } from "./client-adapter-CNc5wzzs.js";
 import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 //#region extensions/signal/src/send-reactions.ts

package/dist/reaction-runtime-api.js

@@ -1,2 +1,2 @@
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
 export { removeReactionSignal, sendReactionSignal };

package/dist/{rolldown-runtime-D7D4PA-g.js → rolldown-runtime-8H4AJuhK.js}

@@ -1,3 +1,4 @@
+import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {

package/dist/runtime-api.js

@@ -1,12 +1,12 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
-import { a as setSignalRuntime, c as resolveSignalReactionLevel, s as signalMessageActions } from "./transport-detection-BcDiypLn.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
-import { n as SignalConfigSchema } from "./config-schema-CHihQTOp.js";
-import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
-import { t as monitorSignalProvider } from "./monitor-D7Slr0-A.js";
-import { t as sendMessageSignal } from "./send-DuH2ntJt.js";
-import { t as probeSignal } from "./probe-CtO2EIfg.js";
+import { a as setSignalRuntime, c as resolveSignalReactionLevel, s as signalMessageActions } from "./transport-detection-BD__qywn.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
+import { n as SignalConfigSchema } from "./config-schema-DfEbpMVQ.js";
+import { i as installSignalCli } from "./install-signal-cli-QlEIfWBv.js";
+import { t as monitorSignalProvider } from "./monitor-CokYfKOk.js";
+import { t as sendMessageSignal } from "./send-BvWSfyNf.js";
+import { t as probeSignal } from "./probe-Bh9f0rRO.js";
 import { resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { PAIRING_APPROVED_MESSAGE } from "openclaw/plugin-sdk/channel-status";
 import { buildBaseAccountStatusSnapshot, buildBaseChannelStatusSummary, collectStatusIssuesFromLastError, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";

package/dist/{send-DuH2ntJt.js → send-BvWSfyNf.js}

@@ -1,7 +1,7 @@
 import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { n as registerSignalReplyContext, u as markdownToSignalText } from "./transport-detection-BcDiypLn.js";
-import { n as signalRpcRequest } from "./client-adapter-CDyW9LrQ.js";
+import { n as registerSignalReplyContext, u as markdownToSignalText } from "./transport-detection-BD__qywn.js";
+import { n as signalRpcRequest } from "./client-adapter-CNc5wzzs.js";
 import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";

package/dist/{send.runtime-BLiqhyHW.js → send.runtime-BNQ0x-2k.js}

@@ -1,2 +1,2 @@
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-BvWSfyNf.js";
 export { sendMessageSignal, sendTypingSignal };

package/dist/{transport-detection-BcDiypLn.js → transport-detection-BD__qywn.js}

@@ -2,7 +2,7 @@ import { u as normalizeSignalTransportUrl } from "./transport-policy-DxvSMHp9.js
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.js";
 import { n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-pNCKKotV.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
@@ -73,7 +73,7 @@ const signalApproval = createApproverRestrictedNativeApprovalCapabilityFromForwa
 			approvalKind,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-Dsg_GE8N.js")).signalApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-X6DXgK_3.js")).signalApprovalNativeRuntime
 	})
 });
 const signalApprovalRouting = signalApproval.routing;
@@ -522,7 +522,7 @@ const DEFAULT_PROBE_TIMEOUT_MS = 1e4;
 async function detectSignalTransport(params) {
 	const url = normalizeSignalTransportUrl(params.url);
 	const timeoutMs = params.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS;
-	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-B7kr_6Zu.js");
+	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-DV7x4VWu.js");
 	const probeNative = params.probeNative ?? probes?.nativeCheck;
 	const probeContainer = params.probeContainer ?? probes?.containerCheck;
 	if (!probeNative || !probeContainer) throw new Error("Signal transport probes are unavailable");

package/dist/{transport-detection.runtime-DYuvIa7s.js → transport-detection.runtime-c9q3r3AM.js}

@@ -1,2 +1,2 @@
-import { t as detectSignalTransport } from "./transport-detection-BcDiypLn.js";
+import { t as detectSignalTransport } from "./transport-detection-BD__qywn.js";
 export { detectSignalTransport };

package/dist/{transport-probes.runtime-B7kr_6Zu.js → transport-probes.runtime-DV7x4VWu.js}

@@ -1,2 +1,2 @@
-import { a as containerCheck, n as signalCheck } from "./client-BmpTN7R3.js";
+import { a as containerCheck, n as signalCheck } from "./client-B3C0ciqU.js";
 export { containerCheck, signalCheck as nativeCheck };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/signal",
-  "version": "2026.9.2",
+  "version": "2026.9.3",
   "description": "OpenClaw Signal channel plugin",
   "type": "module",
   "dependencies": {
@@ -93,10 +93,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.9.2"
+      "pluginApi": ">=2026.9.3"
     },
     "build": {
-      "openclawVersion": "2026.9.2",
+      "openclawVersion": "2026.9.3",
       "bundledDist": false
     },
     "release": {
@@ -118,7 +118,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.9.2"
+    "openclaw": ">=2026.9.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/dist/{install-signal-cli-7tEL37_j.js → install-signal-cli-QlEIfWBv.js}

@@ -1,10 +1,10 @@
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import path from "node:path";
 import { CONFIG_DIR, extractArchive, resolveBrewExecutable } from "openclaw/plugin-sdk/setup-tools";
 import { createWriteStream } from "node:fs";
 import fs from "node:fs/promises";
-import path from "node:path";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { readProviderJsonObjectResponse } from "openclaw/plugin-sdk/provider-http";