@openclaw/synology-chat 2026.7.1 → 2026.7.2-beta.2

package/dist/api.js

@@ -1,3 +1,3 @@
-import { n as setSynologyRuntime, t as synologyChatPlugin } from "./channel-C6bhvNZi.js";
+import { n as setSynologyRuntime, t as synologyChatPlugin } from "./channel-Hiv3SX8l.js";
 import { t as collectSynologyChatSecurityAuditFindings } from "./security-audit-DIsaxIaB.js";
 export { collectSynologyChatSecurityAuditFindings, setSynologyRuntime, synologyChatPlugin };

package/dist/{channel-C6bhvNZi.js → channel-Hiv3SX8l.js}

@@ -1,4 +1,4 @@
-import { i as resolveAccount, n as synologyChatSetupWizard, r as listAccountIds, t as synologyChatSetupAdapter } from "./setup-surface-pMbKFqU5.js";
+import { i as resolveAccount, n as synologyChatSetupWizard, r as listAccountIds, t as synologyChatSetupAdapter } from "./setup-surface-CJtfU_Gw.js";
 import { t as collectSynologyChatSecurityAuditFindings } from "./security-audit-DIsaxIaB.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { createHybridChannelConfigAdapter, createScopedDmSecurityResolver } from "openclaw/plugin-sdk/channel-config-helpers";
@@ -8,16 +8,18 @@ import { composeWarningCollectors, createConditionalWarningCollector, projectAcc
 import { createEmptyChannelDirectoryAdapter } from "openclaw/plugin-sdk/directory-runtime";
 import { finiteSecondsToTimerSafeMilliseconds, parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
 import { normalizeLowercaseStringOrEmpty, normalizeStringEntriesLower } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { sanitizeAssistantVisibleText } from "openclaw/plugin-sdk/text-chunking";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1 } from "openclaw/plugin-sdk/account-resolution";
-import { createResolvedApproverActionAuthAdapter, resolveApprovalApprovers } from "openclaw/plugin-sdk/approval-auth-runtime";
+import { createChannelApprovalAuth } from "openclaw/plugin-sdk/approval-auth-runtime";
 import * as http from "node:http";
 import * as https from "node:https";
 import { safeParseJsonWithSchema, safeParseWithSchema } from "openclaw/plugin-sdk/extension-shared";
+import { readByteStreamWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 import { sleep } from "openclaw/plugin-sdk/runtime-env";
 import { formatErrorMessage, resolvePinnedHostnameWithPolicy } from "openclaw/plugin-sdk/ssrf-runtime";
 import { z } from "zod";
 import { buildChannelConfigSchema } from "openclaw/plugin-sdk/channel-config-schema";
-import { beginWebhookRequestPipelineOrReject, createFixedWindowRateLimiter, createWebhookInFlightLimiter, isRequestBodyLimitError, readRequestBodyWithLimit, registerPluginHttpRoute, requestBodyErrorToText } from "openclaw/plugin-sdk/webhook-ingress";
+import { beginWebhookRequestPipelineOrReject, createFixedWindowRateLimiter, createWebhookInFlightLimiter, isRequestBodyLimitError, readRequestBodyWithLimit, registerPluginHttpRoute, requestBodyErrorToText, resolveRequestClientIp } from "openclaw/plugin-sdk/webhook-ingress";
 import { createPluginRuntimeStore } from "openclaw/plugin-sdk/runtime-store";
 import { buildAgentSessionKey } from "openclaw/plugin-sdk/routing";
 import * as querystring from "node:querystring";
@@ -29,16 +31,13 @@ function normalizeSynologyChatApproverId(value) {
 	const trimmed = String(value).trim();
 	return /^\d+$/.test(trimmed) ? trimmed : void 0;
 }
-const synologyChatApprovalAuth = createResolvedApproverActionAuthAdapter({
+const synologyChatApprovalAuth = createChannelApprovalAuth({
 	channelLabel: "Synology Chat",
-	resolveApprovers: ({ cfg, accountId }) => {
-		return resolveApprovalApprovers({
-			allowFrom: resolveAccount(cfg ?? {}, accountId).allowedUserIds,
-			normalizeApprover: normalizeSynologyChatApproverId
-		});
+	resolveInputs: ({ cfg, accountId }) => {
+		return { allowFrom: resolveAccount(cfg ?? {}, accountId).allowedUserIds };
 	},
-	normalizeSenderId: (value) => normalizeSynologyChatApproverId(value)
-});
+	normalizeApprover: normalizeSynologyChatApproverId
+}).approvalAuth;
 //#endregion
 //#region extensions/synology-chat/src/client.ts
 /**
@@ -46,6 +45,8 @@ const synologyChatApprovalAuth = createResolvedApproverActionAuthAdapter({
 * Sends messages TO Synology Chat via the incoming webhook URL.
 */
 const MIN_SEND_INTERVAL_MS = 500;
+/** user_list JSON can be larger than inbound webhook pre-auth payloads. */
+const USER_LIST_RESPONSE_MAX_BYTES = 1 * 1024 * 1024;
 let lastSendTime = 0;
 let sendQueue = Promise.resolve();
 const ChatUserSchema = z.object({
@@ -129,29 +130,36 @@ async function fetchChatUsers(incomingUrl, allowInsecureSsl = false, log) {
 		const transport = parsedUrl.protocol === "https:" ? https : http;
 		const requestOptions = parsedUrl.protocol === "https:" ? { rejectUnauthorized: !allowInsecureSsl } : {};
 		const req = transport.get(listUrl, requestOptions, (res) => {
-			let data = "";
-			res.on("data", (c) => {
-				data += c.toString();
-			});
-			res.on("end", () => {
-				const result = safeParseJsonWithSchema(ChatUserListResponseSchema, data);
-				if (!result) {
-					log?.warn("fetchChatUsers: failed to parse user_list response");
-					finish(cached?.users ?? []);
-					return;
-				}
-				if (result.success) {
-					const users = result.data?.users ?? [];
-					chatUserCache.set(listUrl, {
-						users,
-						cachedAt: now
+			(async () => {
+				try {
+					const data = await readByteStreamWithLimit(res, {
+						maxBytes: USER_LIST_RESPONSE_MAX_BYTES,
+						onOverflow: ({ maxBytes }) => /* @__PURE__ */ new Error(`user_list response exceeded ${maxBytes} bytes`)
 					});
-					finish(users);
-					return;
+					if (settled) return;
+					const result = safeParseJsonWithSchema(ChatUserListResponseSchema, data.toString("utf8"));
+					if (!result) {
+						log?.warn("fetchChatUsers: failed to parse user_list response");
+						finish(cached?.users ?? []);
+						return;
+					}
+					if (result.success) {
+						const users = result.data?.users ?? [];
+						chatUserCache.set(listUrl, {
+							users,
+							cachedAt: now
+						});
+						finish(users);
+						return;
+					}
+					log?.warn(`fetchChatUsers: API returned success=${result.success}, using cached data`);
+					finish(cached?.users ?? []);
+				} catch (err) {
+					if (settled) return;
+					log?.warn(`fetchChatUsers: ${formatErrorMessage(err)}, using cached data`);
+					finish(cached?.users ?? []);
 				}
-				log?.warn(`fetchChatUsers: API returned success=${result.success}, using cached data`);
-				finish(cached?.users ?? []);
-			});
+			})();
 		}).on("error", (err) => {
 			log?.warn(`fetchChatUsers: HTTP error — ${err instanceof Error ? err.message : err}`);
 			finish(cached?.users ?? []);
@@ -228,13 +236,10 @@ function doPost(url, body, allowInsecureSsl = false) {
 			timeout: 3e4,
 			rejectUnauthorized: !allowInsecureSsl
 		}, (res) => {
-			let data = "";
-			res.on("data", (chunk) => {
-				data += chunk.toString();
-			});
 			res.on("end", () => {
 				resolve(res.statusCode === 200);
 			});
+			res.resume();
 		});
 		req.on("error", reject);
 		req.on("timeout", () => {
@@ -554,8 +559,8 @@ function getInvalidTokenRateLimiter(account) {
 	}
 	return rl;
 }
-function getSynologyWebhookInvalidTokenRateLimitKey(req) {
-	return req.socket?.remoteAddress ?? "unknown";
+function getSynologyWebhookInvalidTokenRateLimitKey(params) {
+	return resolveRequestClientIp(params.req, params.trustedProxies, params.allowRealIpFallback === true) ?? params.req.socket?.remoteAddress ?? "unknown";
 }
 function getSynologyWebhookInFlightKey(account) {
 	return account.accountId;
@@ -736,7 +741,11 @@ async function parseWebhookPayloadRequest(params) {
 	};
 }
 async function authorizeSynologyWebhook(params) {
-	const invalidTokenRateLimitKey = getSynologyWebhookInvalidTokenRateLimitKey(params.req);
+	const invalidTokenRateLimitKey = getSynologyWebhookInvalidTokenRateLimitKey({
+		req: params.req,
+		trustedProxies: params.trustedProxies,
+		allowRealIpFallback: params.allowRealIpFallback
+	});
 	if (params.invalidTokenRateLimiter.isLocked(invalidTokenRateLimitKey)) {
 		params.log?.warn(`Rate limit exceeded for remote IP: ${invalidTokenRateLimitKey}`);
 		return {
@@ -815,6 +824,8 @@ async function parseAndAuthorizeSynologyWebhook(params) {
 		payload: parsed.payload,
 		invalidTokenRateLimiter: params.invalidTokenRateLimiter,
 		rateLimiter: params.rateLimiter,
+		trustedProxies: params.trustedProxies,
+		allowRealIpFallback: params.allowRealIpFallback,
 		log: params.log
 	});
 	if (!authorized.ok) {
@@ -902,6 +913,8 @@ function createWebhookHandler(deps) {
 				account,
 				invalidTokenRateLimiter,
 				rateLimiter,
+				trustedProxies: deps.trustedProxies,
+				allowRealIpFallback: deps.allowRealIpFallback,
 				log,
 				bodyTimeoutMs: deps.bodyTimeoutMs
 			});
@@ -988,7 +1001,7 @@ function validateSynologyGatewayAccountStartup(params) {
 	return { ok: true };
 }
 function registerSynologyWebhookRoute(params) {
-	const { account, log } = params;
+	const { cfg, account, log } = params;
 	const routeKey = getRouteKey(account);
 	const prevUnregister = activeRouteUnregisters.get(routeKey);
 	if (prevUnregister) {
@@ -998,6 +1011,8 @@ function registerSynologyWebhookRoute(params) {
 	}
 	const handler = createWebhookHandler({
 		account,
+		trustedProxies: cfg.gateway?.trustedProxies,
+		allowRealIpFallback: cfg.gateway?.allowRealIpFallback === true,
 		deliver: async (msg) => await dispatchSynologyChatInboundEvent({
 			account,
 			msg,
@@ -1198,6 +1213,7 @@ function createSynologyChatPlugin() {
 					}).ok) return waitUntilAbort(abortSignal);
 					log?.info?.(`Starting Synology Chat channel (account: ${accountId}, path: ${account.webhookPath})`);
 					const unregister = registerSynologyWebhookRoute({
+						cfg,
 						account,
 						accountId,
 						log
@@ -1255,6 +1271,7 @@ function createSynologyChatPlugin() {
 		outbound: {
 			deliveryMode: "gateway",
 			textChunkLimit: 2e3,
+			sanitizeText: ({ text }) => sanitizeAssistantVisibleText(text),
 			sendText: sendSynologyChatText,
 			sendMedia: async (ctx) => {
 				if (!ctx.mediaUrl) throw new Error("Synology Chat media send requires mediaUrl");

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as synologyChatPlugin } from "./channel-C6bhvNZi.js";
+import { t as synologyChatPlugin } from "./channel-Hiv3SX8l.js";
 export { synologyChatPlugin };

package/dist/setup-api.js

@@ -1,2 +1,2 @@
-import { n as synologyChatSetupWizard, t as synologyChatSetupAdapter } from "./setup-surface-pMbKFqU5.js";
+import { n as synologyChatSetupWizard, t as synologyChatSetupAdapter } from "./setup-surface-CJtfU_Gw.js";
 export { synologyChatSetupAdapter, synologyChatSetupWizard };

package/dist/{setup-surface-pMbKFqU5.js → setup-surface-CJtfU_Gw.js}

@@ -1,8 +1,8 @@
 import { parseStrictInteger } from "openclaw/plugin-sdk/number-runtime";
 import { normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { DEFAULT_ACCOUNT_ID, listCombinedAccountIds, resolveMergedAccountConfig } from "openclaw/plugin-sdk/account-resolution";
+import { DEFAULT_ACCOUNT_ID, hasConfiguredAccountValue, listCombinedAccountIds, resolveMergedAccountConfig } from "openclaw/plugin-sdk/account-resolution";
 import { resolveDangerousNameMatchingEnabled } from "openclaw/plugin-sdk/dangerous-name-runtime";
-import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, createAllowFromSection, createSetupTranslator, createStandardChannelSetupStatus, formatDocsLink, mergeAllowFromEntries, normalizeAccountId, setSetupChannelEnabled, splitSetupEntries } from "openclaw/plugin-sdk/setup";
+import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, createAllowFromSection, createSetupTranslator, createStandardChannelSetupStatus, defineTokenCredential, formatDocsLink, mergeAllowFromEntries, normalizeAccountId, setSetupChannelEnabled, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 //#region extensions/synology-chat/src/accounts.ts
 /**
 * Account resolution: reads config from channels.synology-chat,
@@ -13,7 +13,7 @@ function getChannelConfig$1(cfg) {
 	return cfg?.channels?.["synology-chat"];
 }
 function resolveImplicitAccountId(channelCfg) {
-	return channelCfg.token || process.env.SYNOLOGY_CHAT_TOKEN ? DEFAULT_ACCOUNT_ID : void 0;
+	return hasConfiguredAccountValue(channelCfg.token) || hasConfiguredAccountValue(process.env.SYNOLOGY_CHAT_TOKEN) ? DEFAULT_ACCOUNT_ID : void 0;
 }
 function getRawAccountConfig$1(channelCfg, accountId) {
 	if (accountId === DEFAULT_ACCOUNT_ID) return channelCfg;
@@ -238,8 +238,9 @@ const synologyChatSetupWizard = {
 		title: t("wizard.synologyChat.setupTitle"),
 		lines: SYNOLOGY_SETUP_HELP_LINES
 	},
-	credentials: [{
+	credentials: [defineTokenCredential({
 		inputKey: "token",
+		configKey: "token",
 		providerHint: channel,
 		credentialLabel: "outgoing webhook token",
 		preferredEnvVar: "SYNOLOGY_CHAT_TOKEN",
@@ -249,30 +250,25 @@ const synologyChatSetupWizard = {
 		keepPrompt: t("wizard.synologyChat.tokenKeep"),
 		inputPrompt: t("wizard.synologyChat.tokenInput"),
 		allowEnv: ({ accountId }) => accountId === DEFAULT_ACCOUNT_ID$1,
-		inspect: ({ cfg, accountId }) => {
-			const account = resolveAccount(cfg, accountId);
-			const raw = getRawAccountConfig(cfg, accountId);
-			return {
-				accountConfigured: isSynologyChatConfigured(cfg, accountId),
-				hasConfiguredValue: Boolean(normalizeOptionalString(raw.token)),
-				resolvedValue: normalizeOptionalString(account.token),
-				envValue: accountId === DEFAULT_ACCOUNT_ID$1 ? normalizeOptionalString(process.env.SYNOLOGY_CHAT_TOKEN) : void 0
-			};
-		},
-		applyUseEnv: async ({ cfg, accountId }) => patchSynologyChatAccountConfig({
-			cfg,
-			accountId,
-			enabled: true,
-			clearFields: ["token"],
-			patch: {}
+		resolveAccount: ({ cfg, accountId }) => ({
+			config: getRawAccountConfig(cfg, accountId),
+			resolved: resolveAccount(cfg, accountId),
+			configured: isSynologyChatConfigured(cfg, accountId)
 		}),
-		applySet: async ({ cfg, accountId, resolvedValue }) => patchSynologyChatAccountConfig({
+		accountConfigured: (account) => account.configured,
+		hasConfiguredValue: (account) => Boolean(normalizeOptionalString(account.config.token)),
+		resolvedValue: (account) => normalizeOptionalString(account.resolved.token),
+		envValue: ({ accountId }) => accountId === DEFAULT_ACCOUNT_ID$1 ? normalizeOptionalString(process.env.SYNOLOGY_CHAT_TOKEN) : void 0,
+		patchAccount: ({ cfg, accountId, patch, clearFields }) => patchSynologyChatAccountConfig({
 			cfg,
 			accountId,
 			enabled: true,
-			patch: { token: resolvedValue }
-		})
-	}],
+			clearFields,
+			patch
+		}),
+		useEnv: { clearFields: ["token"] },
+		set: { value: "resolved" }
+	})],
 	textInputs: [{
 		inputKey: "url",
 		message: t("wizard.synologyChat.incomingWebhookUrlPrompt"),

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@openclaw/synology-chat",
-  "version": "2026.7.1",
+  "version": "2026.7.2-beta.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openclaw/synology-chat",
-      "version": "2026.7.1",
+      "version": "2026.7.2-beta.2",
       "dependencies": {
         "zod": "4.4.3"
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/synology-chat",
-  "version": "2026.7.1",
+  "version": "2026.7.2-beta.2",
   "description": "Synology Chat channel plugin for OpenClaw channels and direct messages.",
   "repository": {
     "type": "git",
@@ -27,10 +27,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.7.1"
+      "pluginApi": ">=2026.7.2-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.7.1"
+      "openclawVersion": "2026.7.2-beta.2"
     },
     "release": {
       "publishToClawHub": true,
@@ -51,7 +51,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.7.1"
+    "openclaw": ">=2026.7.2-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {