@openclaw/signal 2026.9.4 → 2026.9.6

package/dist/{doctor-contract-api-D0SnglP4.js → .setup/doctor-contract-api-Rbq_sRTI.mjs}

@@ -1,5 +1,6 @@
-import { a as isSignalManagedNativeConnectionUrlForBind, c as buildSignalTransportHttpUrl, i as assignSignalManagedNativePort, o as isValidSignalManagedNativePort, r as allocateSignalManagedNativePort, s as resolveLocalSignalTransportPort, u as normalizeSignalTransportUrl } from "./transport-policy-DxvSMHp9.js";
-import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { a as normalizeSignalTransportUrl, r as buildSignalTransportHttpUrl, s as resolveSignalAccountKey, t as assertSignalSocketTransport } from "./transport-url-CAC0JcuI.mjs";
+import { a as isSignalManagedNativeConnectionUrlForBind, i as assignSignalManagedNativePort, o as isValidSignalManagedNativePort, r as allocateSignalManagedNativePort, s as resolveLocalSignalTransportPort } from "./transport-policy-5VSnj5ma.mjs";
+import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-resolution";
 import { defineChannelAliasMigration } from "openclaw/plugin-sdk/runtime-doctor-migrations";
 //#region extensions/signal/src/config-compat.ts
@@ -22,6 +23,11 @@ const PENDING_LEGACY_CONTAINER_ACCOUNT_WARNING = "- channels.signal: legacy cont
 function isSignalTransportConfig(value) {
 	if (!isRecord(value)) return false;
 	if (value.kind === "managed-native") {
+		try {
+			assertSignalSocketTransport(value);
+		} catch {
+			return false;
+		}
 		if (value.httpPort !== void 0 && !isValidSignalManagedNativePort(value.httpPort)) return false;
 		if (value.url === void 0) return true;
 		if (typeof value.url !== "string") return false;
@@ -173,13 +179,15 @@ function signalAccountIds(entries) {
 	const accounts = isRecord(entries[0]?.accounts) ? entries[0].accounts : {};
 	return Object.entries(accounts).filter(([, entry]) => isRecord(entry)).map(([accountId]) => accountId);
 }
+function resolveNestedDefaultEntryIndex(entries) {
+	const accounts = isRecord(entries[0]?.accounts) ? entries[0].accounts : {};
+	const key = resolveSignalAccountKey(accounts, DEFAULT_ACCOUNT_ID);
+	const offset = signalAccountIds(entries).findIndex((accountId) => accountId === key);
+	return offset >= 0 ? offset + 1 : void 0;
+}
 function isDefaultSignalAccountId(accountId) {
 	return Boolean(accountId?.trim()) && normalizeAccountId(accountId) === DEFAULT_ACCOUNT_ID;
 }
-function resolveSignalAccountKey(accounts, accountId) {
-	const normalizedAccountId = normalizeAccountId(accountId);
-	return Object.keys(accounts).find((key) => Boolean(key.trim()) && normalizeAccountId(key) === normalizedAccountId);
-}
 function nestedDefaultOwnsEffectiveTransport(entries) {
 	const accounts = isRecord(entries[0]?.accounts) ? entries[0].accounts : {};
 	const nestedDefaultKey = resolveSignalAccountKey(accounts, DEFAULT_ACCOUNT_ID);
@@ -188,7 +196,7 @@ function nestedDefaultOwnsEffectiveTransport(entries) {
 }
 function isDiscardedTransportEntry(entries, index) {
 	if (index === 0) return !hasRootSignalAccount(entries) || nestedDefaultOwnsEffectiveTransport(entries);
-	return isDefaultSignalAccountId(signalAccountIds(entries)[index - 1]) && isSignalTransportConfig(entries[0]?.transport);
+	return index === resolveNestedDefaultEntryIndex(entries) && isSignalTransportConfig(entries[0]?.transport);
 }
 function shouldMaterializeTransport(entries, index) {
 	if (isDiscardedTransportEntry(entries, index)) return false;
@@ -221,10 +229,11 @@ function clearLegacySignalTransportFieldsForAccount(params) {
 function allocateMigratedManagedPorts(params) {
 	const reservedPorts = /* @__PURE__ */ new Set();
 	const rootIsAccount = hasRootSignalAccount(params.entries);
-	const nestedDefaultOffset = signalAccountIds(params.entries).findIndex((accountId) => isDefaultSignalAccountId(accountId));
-	const canonicalDefaultIndex = isSignalTransportConfig(params.entries[0]?.transport) ? 0 : nestedDefaultOffset >= 0 ? nestedDefaultOffset + 1 : rootIsAccount ? 0 : void 0;
+	const nestedDefaultIndex = resolveNestedDefaultEntryIndex(params.entries);
+	const canonicalDefaultIndex = isSignalTransportConfig(params.entries[0]?.transport) ? 0 : nestedDefaultIndex !== void 0 ? nestedDefaultIndex : rootIsAccount ? 0 : void 0;
 	for (const [index, transport] of params.transports.entries()) {
 		if (!transport || index === 0 && canonicalDefaultIndex !== 0) continue;
+		if (transport.kind === "managed-native" && transport.socketPath !== void 0) continue;
 		if (transport.kind !== "managed-native") {
 			const localPort = resolveLocalSignalTransportPort(transport.url);
 			if (localPort !== void 0) reservedPorts.add(localPort);
@@ -238,7 +247,7 @@ function allocateMigratedManagedPorts(params) {
 	}
 	return params.transports.map((transport, index) => {
 		if (!transport || index === 0 && canonicalDefaultIndex !== 0) return transport;
-		if (transport.kind !== "managed-native") return transport;
+		if (transport.kind !== "managed-native" || transport.socketPath !== void 0) return transport;
 		if (isRecord(params.entries[index]?.transport) || index === canonicalDefaultIndex) return transport;
 		const rawPreferredPort = params.entries[index]?.httpPort;
 		const preferredPort = typeof rawPreferredPort === "number" ? rawPreferredPort : transport.httpPort;
@@ -254,13 +263,13 @@ function applyMigratedSignalTransports(params) {
 	const next = structuredClone(params.cfg);
 	const nextSignal = next.channels?.signal;
 	if (!isRecord(nextSignal)) return;
-	const accountIds = signalAccountIds(params.entries);
+	const nestedDefaultIndex = resolveNestedDefaultEntryIndex(params.entries);
 	const nextAccounts = isRecord(nextSignal.accounts) ? nextSignal.accounts : {};
 	const nextEntries = [nextSignal, ...Object.values(nextAccounts).filter(isRecord)];
 	const rootIsAccount = hasRootSignalAccount(params.entries);
 	const canonicalRootTransport = isSignalTransportConfig(params.entries[0]?.transport) ? params.entries[0].transport : void 0;
 	for (const [index, entry] of nextEntries.entries()) {
-		if (isDefaultSignalAccountId(index === 0 ? void 0 : accountIds[index - 1])) {
+		if (index === nestedDefaultIndex) {
 			const defaultTransport = canonicalRootTransport ?? params.transports[index];
 			if (defaultTransport) nextSignal.transport = defaultTransport;
 			else delete nextSignal.transport;
@@ -306,6 +315,11 @@ function prepareLegacySignalTransportMigration(cfg) {
 	};
 	const apiMode = signal.apiMode;
 	const entries = [signal, ...Object.values(accounts).filter(isRecord)];
+	if (entries.some((entry) => isRecord(entry.transport) && Object.hasOwn(entry.transport, "socketPath") && (entry.transport.kind !== "managed-native" || !isSignalTransportConfig(entry.transport)))) return {
+		config: cfg,
+		changes: [],
+		warnings: ["- channels.signal: invalid transport.socketPath configuration; correct the socket path and remove conflicting HTTP or receiveMode on-start options, then run openclaw doctor --fix."]
+	};
 	const legacyResolutionEntries = entries.filter((_, index) => shouldMaterializeTransport(entries, index)).filter((entry) => !isSignalTransportConfig(entry.transport));
 	const invalidDerivedEndpoint = findInvalidLegacyDerivedEndpoint(legacyResolutionEntries, signal);
 	if (invalidDerivedEndpoint) return {
@@ -390,6 +404,51 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 	}));
 }
 //#endregion
+//#region extensions/signal/src/account-key-repair.ts
+function repairSignalAccountKeys({ cfg }) {
+	const signal = cfg.channels?.signal;
+	const accounts = signal?.accounts;
+	if (!accounts) return {
+		config: cfg,
+		changes: []
+	};
+	const groups = /* @__PURE__ */ new Map();
+	for (const key of Object.keys(accounts)) if (key) {
+		const id = normalizeAccountId(key);
+		groups.set(id, [...groups.get(id) ?? [], key]);
+	}
+	const moves = /* @__PURE__ */ new Map();
+	const warnings = [];
+	for (const [id, keys] of groups) {
+		if (keys.length > 1) {
+			warnings.push(`Signal account keys ${keys.map((key) => JSON.stringify(key)).join(", ")} resolve to "${id}". Doctor preserved them; rename them so each account has a unique normalized key.`);
+			continue;
+		}
+		for (const key of keys) if (normalizeLowercaseStringOrEmpty(key) !== id) {
+			if (resolveSignalAccountKey(accounts, id) !== key) {
+				warnings.push(`Signal account "${key}" is listed as "${id}" but currently uses the channel defaults. Doctor preserved it to avoid changing a working account; check its settings before renaming the key to "${id}".`);
+				continue;
+			}
+			moves.set(key, id);
+		}
+	}
+	const repaired = Object.fromEntries(Object.entries(accounts).map(([key, entry]) => [moves.get(key) ?? key, entry]));
+	return {
+		config: moves.size ? {
+			...cfg,
+			channels: {
+				...cfg.channels,
+				signal: {
+					...signal,
+					accounts: repaired
+				}
+			}
+		} : cfg,
+		changes: [...moves].map(([from, to]) => `Moved Signal account "${from}" to channels.signal.accounts.${to}.`),
+		warnings
+	};
+}
+//#endregion
 //#region extensions/signal/config-doctor-api.ts
 const RETIRED_SIGNAL_ACCOUNT_TRANSPORT_FIELDS = [
 	"configPath",
@@ -434,13 +493,18 @@ const legacyConfigRules = [
 	}
 ];
 function normalizeCompatibilityConfig({ cfg }) {
-	const streaming = streamingAliasMigration.normalizeChannelConfig({ cfg });
+	const accountKeys = repairSignalAccountKeys({ cfg });
+	const streaming = streamingAliasMigration.normalizeChannelConfig({ cfg: accountKeys.config });
 	const transport = migrateLegacySignalTransportConfigSync(streaming.config);
 	return {
 		config: transport.config,
-		changes: [...streaming.changes, ...transport.changes],
+		changes: [
+			...accountKeys.changes,
+			...streaming.changes,
+			...transport.changes
+		],
 		...transport.warnings?.length ? { warnings: transport.warnings } : {}
 	};
 }
 //#endregion
-export { migrateLegacySignalTransportConfig as i, normalizeCompatibilityConfig as n, clearLegacySignalTransportFieldsForAccount as r, legacyConfigRules as t };
+export { migrateLegacySignalTransportConfig as a, clearLegacySignalTransportFieldsForAccount as i, normalizeCompatibilityConfig as n, repairSignalAccountKeys as r, legacyConfigRules as t };

package/dist/{install-signal-cli-QlEIfWBv.js → .setup/install-signal-cli-BDbzFcU2.mjs}

@@ -1,19 +1,17 @@
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
-import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import path from "node:path";
-import { CONFIG_DIR, extractArchive, resolveBrewExecutable } from "openclaw/plugin-sdk/setup-tools";
-import { createWriteStream } from "node:fs";
+import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
+import { extractErrorCode, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import fs from "node:fs/promises";
-import { Readable, Transform } from "node:stream";
-import { pipeline } from "node:stream/promises";
+import { CONFIG_DIR, extractArchive, resolveBrewExecutable } from "openclaw/plugin-sdk/setup-tools";
+import { walkDirectory } from "@openclaw/fs-safe/walk";
+import { root } from "openclaw/plugin-sdk/file-access-runtime";
 import { readProviderJsonObjectResponse } from "openclaw/plugin-sdk/provider-http";
 import { runPluginCommandWithTimeout } from "openclaw/plugin-sdk/run-command";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import { withTempDownloadPath } from "openclaw/plugin-sdk/temp-path";
 //#region extensions/signal/src/install-signal-cli.ts
 const MAX_SIGNAL_CLI_ARCHIVE_BYTES = 268435456;
-/** @internal Exported for testing. */
 const MAX_SIGNAL_CLI_EXTRACTED_BYTES = 402653184;
 const SIGNAL_CLI_DOWNLOAD_TIMEOUT_MS = 3e5;
 const SIGNAL_CLI_RELEASE_INFO_TIMEOUT_MS = 3e4;
@@ -36,17 +34,6 @@ async function extractSignalCliArchive(archivePath, installRoot, timeoutMs) {
 function looksLikeArchive(name) {
 	return name.endsWith(".tar.gz") || name.endsWith(".tgz") || name.endsWith(".zip");
 }
-function isNodeReadableStream(value) {
-	return Boolean(value && typeof value.pipe === "function");
-}
-function chunkByteLength(chunk) {
-	if (typeof chunk === "string") return Buffer.byteLength(chunk);
-	if (chunk instanceof Uint8Array) return chunk.byteLength;
-	return Buffer.byteLength(String(chunk));
-}
-async function cancelUnusedResponseBody(response) {
-	await response.body?.cancel().catch(() => void 0);
-}
 function normalizeReleaseAsset(value) {
 	if (!isRecord(value)) return;
 	const name = normalizeOptionalString(value.name);
@@ -90,7 +77,6 @@ function pickAsset(assets, platform, arch) {
 }
 /** @internal Exported for testing. */
 async function downloadToFile(url, dest, maxRedirects = 5, maxBytes = MAX_SIGNAL_CLI_ARCHIVE_BYTES) {
-	let completed = false;
 	const { response, release } = await fetchWithSsrFGuard({
 		url,
 		maxRedirects,
@@ -100,51 +86,37 @@ async function downloadToFile(url, dest, maxRedirects = 5, maxBytes = MAX_SIGNAL
 		auditContext: "signal-cli-install-archive"
 	});
 	try {
-		if (!response.ok || !response.body) {
-			await cancelUnusedResponseBody(response);
-			throw new Error(`HTTP ${response.status || "?"} downloading file`);
-		}
+		if (!response.ok || !response.body) throw new Error(`HTTP ${response.status || "?"} downloading file`);
 		const rawLength = response.headers.get("content-length");
 		if (rawLength !== null) {
 			const trimmedLength = rawLength.trim();
 			const declaredLength = CONTENT_LENGTH_RE.test(trimmedLength) ? Number(trimmedLength) : NaN;
-			if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {
-				await cancelUnusedResponseBody(response);
-				throw new Error(`signal-cli archive exceeds the ${maxBytes}-byte download cap (declared ${declaredLength}).`);
-			}
+			if (Number.isFinite(declaredLength) && declaredLength > maxBytes) throw new Error(`signal-cli archive exceeds the ${maxBytes}-byte download cap (declared ${declaredLength}).`);
 		}
-		let totalBytes = 0;
 		const body = response.body;
-		const readable = isNodeReadableStream(body) ? body : Readable.fromWeb(body);
-		const limiter = new Transform({ transform(chunk, _encoding, callback) {
-			totalBytes += chunkByteLength(chunk);
-			if (totalBytes > maxBytes) {
-				callback(/* @__PURE__ */ new Error(`signal-cli archive exceeded the ${maxBytes}-byte download cap.`));
-				return;
-			}
-			callback(null, chunk);
-		} });
-		const out = createWriteStream(dest);
-		await pipeline(readable, limiter, out);
-		completed = true;
+		async function* chunks() {
+			yield* body.values({ preventCancel: true });
+		}
+		await (await root(path.dirname(dest))).create(path.basename(dest), chunks(), {
+			maxBytes,
+			mkdir: false,
+			durable: false,
+			mode: 438 & ~process.umask()
+		});
+	} catch (error) {
+		if (extractErrorCode(error) === "too-large") throw new Error(`signal-cli archive exceeded the ${maxBytes}-byte download cap.`, { cause: error });
+		throw error;
 	} finally {
 		await release();
-		if (!completed) await fs.rm(dest, { force: true }).catch(() => void 0);
 	}
 }
 async function findSignalCliBinary(root) {
-	const candidates = [];
-	const enqueue = async (dir, depth) => {
-		if (depth > 3) return;
-		const entries = await fs.readdir(dir, { withFileTypes: true }).catch(() => []);
-		for (const entry of entries) {
-			const full = path.join(dir, entry.name);
-			if (entry.isDirectory()) await enqueue(full, depth + 1);
-			else if (entry.isFile() && entry.name === "signal-cli") candidates.push(full);
-		}
-	};
-	await enqueue(root, 0);
-	return candidates[0] ?? null;
+	const { entries } = await walkDirectory(root, {
+		maxDepth: 4,
+		symlinks: "skip",
+		include: (entry) => entry.kind === "file" && entry.name === "signal-cli"
+	});
+	return entries[0]?.path ?? null;
 }
 async function resolveBrewSignalCliPath(brewExe) {
 	try {
@@ -222,13 +194,10 @@ async function installSignalCliFromRelease(runtime) {
 	});
 	let releaseInfo;
 	try {
-		if (!response.ok) {
-			await cancelUnusedResponseBody(response);
-			return {
-				ok: false,
-				error: `Failed to fetch release info (${response.status})`
-			};
-		}
+		if (!response.ok) return {
+			ok: false,
+			error: `Failed to fetch release info (${response.status})`
+		};
 		try {
 			const normalized = normalizeSignalCliRelease(await readProviderJsonObjectResponse(response, "signal.release-info"));
 			if (!normalized) throw new Error("Unexpected signal-cli release info");
@@ -290,4 +259,4 @@ async function installSignalCli(runtime) {
 	return installSignalCliViaBrew(runtime);
 }
 //#endregion
-export { installSignalCliFromRelease as a, installSignalCli as i, downloadToFile as n, looksLikeArchive as o, extractSignalCliArchive as r, pickAsset as s, MAX_SIGNAL_CLI_EXTRACTED_BYTES as t };
+export { looksLikeArchive as a, installSignalCliFromRelease as i, extractSignalCliArchive as n, pickAsset as o, installSignalCli as r, downloadToFile as t };

package/dist/{monitor-BiNWxMB3.js → .setup/monitor-Dnz6Ygz5.mjs}

@@ -1,44 +1,45 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { l as normalizeSignalTransportHost } from "./transport-policy-DxvSMHp9.js";
-import { i as resolveSignalAccount, o as resolveSignalReplyToMode } from "./accounts-DO4HMqaK.js";
-import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, f as isSignalNativeApprovalHandlerConfigured, i as getOptionalSignalRuntime, l as formatSignalMediaText, n as registerSignalReplyContext, o as materializeSignalPresentationFallback } from "./transport-detection-Do2pYMAH.js";
-import { t as SignalSseRejectionError } from "./client-B3C0ciqU.js";
-import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-CNc5wzzs.js";
-import { n as sendReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
-import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-CjhdkJ8P.js";
-import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-BFR9Mf-O.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-Bz0x0JC1.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { i as normalizeSignalTransportHost } from "./transport-url-CAC0JcuI.mjs";
+import { i as resolveSignalAccount, o as resolveSignalReplyToMode } from "./accounts-BV6tDOTc.mjs";
+import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.mjs";
+import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.mjs";
+import { a as getSignalRuntime, i as getOptionalSignalRuntime, l as resolveSignalReactionLevel, n as registerSignalReplyContext, p as isSignalNativeApprovalHandlerConfigured, s as materializeSignalPresentationFallback, u as formatSignalMediaText } from "./transport-detection-CoiRl7Gx.mjs";
+import { a as prepareSignalSocketPath, t as SignalSseRejectionError } from "./client-BseAt7F7.mjs";
+import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-dvFa47YL.mjs";
+import { n as sendReactionSignal } from "./reaction-runtime-api-BnQGHcrB.mjs";
+import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-DDQvPP_z.mjs";
+import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-C8cSEjVf.mjs";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-B78M_eFp.mjs";
 import { bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor, createChannelMessageReplyPipeline, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
 import { resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
 import { asPositiveSafeInteger, isRecord, normalizeNullableString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
+import path from "node:path";
 import { CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY } from "openclaw/plugin-sdk/approval-handler-adapter-runtime";
 import { normalizeE164, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInboundDebouncer, filterChannelInboundQuoteContext, formatInboundEnvelope, formatInboundFromLabel, formatInboundMediaUnavailableText, hasVisibleInboundReplyDispatch, logInboundDrop, matchesMentionPatterns, readAgentRunTerminalOutcome, resolveEnvelopeFormatOptions, resolveInboundDebounceMs, resolveInboundMentionDecision, resolveInboundSupplementalSenderAllowed, runChannelInboundEvent, shouldDebounceTextInbound, toHistoryMediaEntries, toInboundMediaFactsWithMetadata } from "openclaw/plugin-sdk/channel-inbound";
 import { canonicalizeBase64, detectMime, estimateBase64DecodedBytes, kindFromMime, saveMediaBuffer } from "openclaw/plugin-sdk/media-runtime";
+import { resolvePromptHistoryLimit } from "openclaw/plugin-sdk/number-runtime";
 import { collectErrorGraphCandidates, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
-import { ensurePortAvailable, extractErrorCode, formatErrorMessage as formatErrorMessage$1, resolvePinnedMainDmOwnerFromAllowlist } from "openclaw/plugin-sdk/security-runtime";
-import path from "node:path";
+import { ensurePortAvailable, extractErrorCode as extractErrorCode$1, formatErrorMessage as formatErrorMessage$1, resolvePinnedMainDmOwnerFromAllowlist } from "openclaw/plugin-sdk/security-runtime";
+import { spawn } from "node:child_process";
+import os from "node:os";
 import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention, resolveChannelGroups, resolveChannelGroupsConfigPath } from "openclaw/plugin-sdk/channel-policy";
 import { registerChannelRuntimeContext } from "openclaw/plugin-sdk/channel-runtime-context";
-import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
 import { deliverTextOrMediaReply, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
 import { chunkTextWithMode, createReplyReferencePlanner, resolveChunkMode, resolveTextChunkLimit } from "openclaw/plugin-sdk/reply-runtime";
 import { createRuntimeConfigReader, getRuntimeConfig } from "openclaw/plugin-sdk/runtime-config-snapshot";
 import { computeBackoff, createNonExitingRuntime, danger, logVerbose, shouldLogVerbose, sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 import { resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
 import { waitForTransportReady } from "openclaw/plugin-sdk/transport-ready-runtime";
-import { spawn } from "node:child_process";
-import os from "node:os";
 import { createInterface } from "node:readline";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { resolveHumanDelayConfig } from "openclaw/plugin-sdk/agent-runtime";
 import { DEFAULT_EMOJIS, DEFAULT_TIMING, createStatusReactionController, logAckFailure, logTypingFailure, resolveAckReaction, shouldAckReaction } from "openclaw/plugin-sdk/channel-feedback";
-import { createChannelIngressResolver, defineStableChannelIngressIdentity, fanInChannelIngressLifecycles } from "openclaw/plugin-sdk/channel-ingress-runtime";
+import { defineStableChannelIngressIdentity, fanInChannelIngressLifecycles } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { isControlCommandMessage } from "openclaw/plugin-sdk/command-detection";
 import { createInternalHookEvent, fireAndForgetHook, toInternalMessageReceivedContext, triggerInternalHook } from "openclaw/plugin-sdk/hook-runtime";
+import { createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
 import { resolveBatchedReplyThreadingPolicy } from "openclaw/plugin-sdk/reply-reference";
 import { readSessionUpdatedAt, resolveStorePath } from "openclaw/plugin-sdk/session-store-runtime";
 import { enqueueSystemEvent } from "openclaw/plugin-sdk/system-event-runtime";
@@ -56,11 +57,17 @@ function formatSignalDaemonEndpoint(httpHost, httpPort) {
 	return `${httpHost.includes(":") ? `[${httpHost}]` : httpHost}:${httpPort}`;
 }
 async function assertSignalDaemonEndpointAvailable(params) {
+	if (params.socketPath) {
+		params.abortSignal?.throwIfAborted();
+		await prepareSignalSocketPath(params.socketPath, params.abortSignal);
+		params.abortSignal?.throwIfAborted();
+		return;
+	}
 	try {
 		await ensurePortAvailable(params.httpPort, params.httpHost, params.abortSignal);
 	} catch (error) {
 		if (params.abortSignal?.aborted) throw params.abortSignal.reason;
-		if (!(extractErrorCode(error) === "EADDRINUSE" || error instanceof Error && error.name === "PortInUseError")) return;
+		if (!(extractErrorCode$1(error) === "EADDRINUSE" || error instanceof Error && error.name === "PortInUseError")) return;
 		const endpoint = formatSignalDaemonEndpoint(params.httpHost, params.httpPort);
 		throw new Error(`Signal managed native endpoint ${endpoint} is unavailable: ${formatErrorMessage$1(error)} Stop the conflicting service, configure this Signal account with a different transport.httpPort, or use external-native for an intentionally operator-managed daemon.`, { cause: error });
 	}
@@ -123,9 +130,11 @@ function buildDaemonArgs(opts) {
 	if (opts.configPath?.trim()) args.push("--config", resolveSignalCliConfigPath(opts.configPath));
 	if (opts.account) args.push("-a", opts.account);
 	args.push("daemon");
-	args.push("--http", `${opts.httpHost}:${opts.httpPort}`);
+	if (opts.socketPath) args.push("--socket", opts.socketPath);
+	else args.push("--http", `${opts.httpHost}:${opts.httpPort}`);
 	args.push("--no-receive-stdout");
-	if (opts.receiveMode) args.push("--receive-mode", opts.receiveMode);
+	if (opts.socketPath) args.push("--receive-mode", "manual");
+	else if (opts.receiveMode) args.push("--receive-mode", opts.receiveMode);
 	if (opts.ignoreAttachments) args.push("--ignore-attachments");
 	if (opts.ignoreStories) args.push("--ignore-stories");
 	if (opts.sendReadReceipts) args.push("--send-read-receipts");
@@ -374,7 +383,7 @@ async function resolveSignalAccessState(params) {
 		allowTextCommands: true,
 		directGroupAllowFrom: "effective"
 	} : void 0;
-	return await createChannelIngressResolver({
+	return await getSignalRuntime().channel.inbound.ingress.createResolver({
 		channelId: "signal",
 		accountId: params.accountId,
 		identity: signalIngressIdentity,
@@ -1559,9 +1568,9 @@ function createSignalEventHandler(deps) {
 }
 //#endregion
 //#region extensions/signal/src/reaction-targets.ts
-function registerSignalReactionTargetsForDeliveredPayload(params) {
+async function registerSignalReactionTargetsForDeliveredPayload(params) {
 	registerSignalQuestionReactionTargetForDeliveredPayload(params);
-	registerSignalApprovalReactionTargetForDeliveredPayload(params);
+	await registerSignalApprovalReactionTargetForDeliveredPayload(params);
 }
 //#endregion
 //#region extensions/signal/src/signal-ingress.ts
@@ -1919,7 +1928,7 @@ async function deliverReplies(params) {
 			sendText: send,
 			sendMedia: ({ mediaUrl, caption }) => send(caption ?? "", mediaUrl)
 		}) !== "empty") {
-			registerSignalReactionTargetsForDeliveredPayload({
+			await registerSignalReactionTargetsForDeliveredPayload({
 				cfg: params.cfg,
 				target: {
 					channel: "signal",
@@ -1942,7 +1951,7 @@ async function monitorSignalProvider(opts = {}) {
 		cfg,
 		accountId: opts.accountId
 	});
-	const historyLimit = Math.max(0, accountInfo.config.historyLimit ?? cfg.messages?.groupChat?.historyLimit ?? DEFAULT_GROUP_HISTORY_LIMIT);
+	const historyLimit = resolvePromptHistoryLimit(accountInfo.config.historyLimit ?? cfg.messages?.groupChat?.historyLimit);
 	const groupHistories = /* @__PURE__ */ new Map();
 	const textLimit = resolveTextChunkLimit(cfg, "signal", accountInfo.accountId);
 	const chunkMode = resolveChunkMode(cfg, "signal", accountInfo.accountId);
@@ -1968,6 +1977,8 @@ async function monitorSignalProvider(opts = {}) {
 	const mediaMaxBytes = (opts.mediaMaxMb ?? accountInfo.config.mediaMaxMb ?? 8) * 1024 * 1024;
 	const transportKind = accountInfo.transport.kind;
 	const managedTransport = accountInfo.transport.kind === "managed-native" ? accountInfo.transport : void 0;
+	const socketPath = managedTransport?.socketPath;
+	if (socketPath && (opts.baseUrl !== void 0 || opts.httpHost !== void 0 || opts.httpPort !== void 0)) throw new Error("Signal socket transport cannot be combined with HTTP endpoint overrides");
 	const ignoreAttachments = opts.ignoreAttachments ?? accountInfo.config.ignoreAttachments ?? false;
 	const sendReadReceipts = Boolean(opts.sendReadReceipts ?? accountInfo.config.sendReadReceipts);
 	const waitForTransportReadyFn = opts.waitForTransportReady ?? waitForTransportReady;
@@ -1990,6 +2001,7 @@ async function monitorSignalProvider(opts = {}) {
 			await assertSignalDaemonEndpointAvailable({
 				httpHost,
 				httpPort,
+				...socketPath ? { socketPath } : {},
 				abortSignal: endpointProbeSignal
 			});
 		} catch (error) {
@@ -2005,6 +2017,7 @@ async function monitorSignalProvider(opts = {}) {
 			account,
 			httpHost,
 			httpPort,
+			...socketPath ? { socketPath } : {},
 			receiveMode: opts.receiveMode ?? managedTransport?.receiveMode,
 			ignoreAttachments: opts.ignoreAttachments ?? accountInfo.config.ignoreAttachments,
 			ignoreStories: opts.ignoreStories ?? managedTransport?.ignoreStories,

package/dist/{probe-kOJqyjWz.js → .setup/probe-DXT2eLnw.mjs}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { t as detectSignalTransport } from "./transport-detection-Do2pYMAH.js";
-import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-CNc5wzzs.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { t as detectSignalTransport } from "./transport-detection-CoiRl7Gx.mjs";
+import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-dvFa47YL.mjs";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/probe.ts

package/dist/{question-reactions-BFR9Mf-O.js → .setup/question-reactions-C8cSEjVf.mjs}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
-import { i as resolveSignalDeliveredConversationKey } from "./approval-auth-pNCKKotV.js";
-import { c as resolveSignalApprovalTargetAuthorKeys } from "./approval-reactions-CjhdkJ8P.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.mjs";
+import { i as resolveSignalDeliveredConversationKey } from "./approval-auth-BBI9BTRm.mjs";
+import { c as resolveSignalApprovalTargetAuthorKeys } from "./approval-reactions-DDQvPP_z.mjs";
 import { createQuestionReactionTargetStore, questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 //#region extensions/signal/src/question-reactions.ts

package/dist/{reaction-runtime-api-CWqDv5-q.js → .setup/reaction-runtime-api-BnQGHcrB.mjs}

@@ -1,7 +1,7 @@
-import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
-import { r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.js";
-import { n as signalRpcRequest } from "./client-adapter-CNc5wzzs.js";
-import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
+import { i as resolveSignalAccount } from "./accounts-BV6tDOTc.mjs";
+import { r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.mjs";
+import { n as signalRpcRequest } from "./client-adapter-dvFa47YL.mjs";
+import { t as resolveSignalRpcContext } from "./rpc-context-CwwADZ1b.mjs";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 //#region extensions/signal/src/send-reactions.ts
 async function sendReactionSignalCore(params) {
@@ -38,7 +38,8 @@ async function sendReactionSignalCore(params) {
 		timestamp: (await signalRpcRequest("sendReaction", requestParams, {
 			baseUrl,
 			timeoutMs: params.opts.timeoutMs,
-			transportKind: params.opts.transportKind ?? accountInfo.transport.kind
+			transportKind: params.opts.transportKind ?? accountInfo.transport.kind,
+			assertDirectAdapterHandoff: params.opts.assertDirectAdapterHandoff
 		}))?.timestamp
 	};
 }

package/dist/{rpc-context-dXSy4NtF.js → .setup/rpc-context-CwwADZ1b.mjs}

@@ -1,4 +1,4 @@
-import "./accounts-DO4HMqaK.js";
+import "./accounts-BV6tDOTc.mjs";
 //#region extensions/signal/src/rpc-context.ts
 function resolveSignalRpcContext(opts, accountInfo) {
 	const baseUrlOverride = opts.baseUrl?.trim();

package/dist/{send-Bz0x0JC1.js → .setup/send-B78M_eFp.mjs}

@@ -1,8 +1,8 @@
-import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
-import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { n as registerSignalReplyContext, u as markdownToSignalText } from "./transport-detection-Do2pYMAH.js";
-import { n as signalRpcRequest } from "./client-adapter-CNc5wzzs.js";
-import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
+import { i as resolveSignalAccount } from "./accounts-BV6tDOTc.mjs";
+import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.mjs";
+import { d as markdownToSignalText, n as registerSignalReplyContext } from "./transport-detection-CoiRl7Gx.mjs";
+import { n as signalRpcRequest } from "./client-adapter-dvFa47YL.mjs";
+import { t as resolveSignalRpcContext } from "./rpc-context-CwwADZ1b.mjs";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -189,7 +189,8 @@ async function sendMessageSignal(to, text, opts) {
 		baseUrl,
 		timeoutMs: opts.timeoutMs,
 		transportKind: opts.transportKind ?? accountInfo.transport.kind,
-		maxAttachmentBytes: maxBytes
+		maxAttachmentBytes: maxBytes,
+		assertDirectAdapterHandoff: opts.assertDirectAdapterHandoff
 	};
 	let nativeReplyStatus;
 	let result;

package/dist/{send.runtime-CeV1p7Sq.js → .setup/send.runtime-CLnCWvrM.mjs}

@@ -1,2 +1,2 @@
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-Bz0x0JC1.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-B78M_eFp.mjs";
 export { sendMessageSignal, sendTypingSignal };