feat(signal): add signal-cli channel (#841)

Author: penso

Cargo.lock

@@ -42,6 +42,7 @@ default-members = [
   "crates/secret-store",
   "crates/service-traits",
   "crates/sessions",
+  "crates/signal",
   "crates/skills",
   "crates/slack",
   "crates/swift-bridge",
@@ -100,6 +101,7 @@ members = [
   "crates/secret-store",
   "crates/service-traits",
   "crates/sessions",
+  "crates/signal",
   "crates/skills",
   "crates/slack",
   "crates/swift-bridge",
@@ -363,6 +365,7 @@ moltis-schema-export    = { path = "crates/schema-export" }
 moltis-secret-store     = { default-features = false, path = "crates/secret-store" }
 moltis-service-traits   = { path = "crates/service-traits" }
 moltis-sessions         = { path = "crates/sessions" }
+moltis-signal           = { path = "crates/signal" }
 moltis-skills           = { path = "crates/skills" }
 moltis-slack            = { path = "crates/slack" }
 moltis-swift-bridge     = { path = "crates/swift-bridge" }

Cargo.toml

@@ -25,7 +25,7 @@ Moltis recently hit [the front page of Hacker News](https://news.ycombinator.com
 
 **Your hardware** — Runs on a Mac Mini, a Raspberry Pi, or any server you own. One Rust binary, no Node.js, no npm, no runtime.
 
-**Full-featured** — Voice, memory, cross-session recall, automatic edit checkpoints, scheduling, Telegram, Discord, browser automation, MCP servers, SSH or node-backed remote exec, managed deploy keys with host pinning in the web UI, a live Settings → Tools inventory, Cursor-compatible project context, and context-file threat scanning — all built-in. No plugin marketplace to get supply-chain attacked through.
+**Full-featured** — Voice, memory, cross-session recall, automatic edit checkpoints, scheduling, Telegram, Signal, Discord, browser automation, MCP servers, SSH or node-backed remote exec, managed deploy keys with host pinning in the web UI, a live Settings → Tools inventory, Cursor-compatible project context, and context-file threat scanning — all built-in. No plugin marketplace to get supply-chain attacked through.
 
 **Auditable** — The agent runner and model interface fit in ~7.5K lines, with providers in ~19K more. The Rust workspace is ~270K lines across 59 modular crates you can audit independently, with 470+ Rust files containing tests. Unsafe code is isolated to FFI and precompiled runtime boundaries, not the core agent loop.
 
@@ -90,7 +90,7 @@ Current Rust workspace: ~270K LoC across 59 crates. The table below groups the m
 
 | Category | Crates | Combined LoC |
 |----------|--------|-------------|
-| Channels | `moltis-telegram`, `moltis-whatsapp`, `moltis-discord`, `moltis-msteams`, `moltis-matrix`, `moltis-slack`, `moltis-nostr`, `moltis-channels` | 34.0K |
+| Channels | `moltis-telegram`, `moltis-whatsapp`, `moltis-signal`, `moltis-discord`, `moltis-msteams`, `moltis-matrix`, `moltis-slack`, `moltis-nostr`, `moltis-channels` | 34.0K |
 | Web and APIs | `moltis-web`, `moltis-graphql`, `moltis-webhooks` | 10.8K |
 | Extensibility | `moltis-mcp`, `moltis-mcp-agent-bridge`, `moltis-skills`, `moltis-plugins` | 11.5K |
 | Memory and context | `moltis-memory`, `moltis-qmd`, `moltis-code-index`, `moltis-projects` | 11.7K |
@@ -121,7 +121,7 @@ Verify releases with `gh attestation verify <artifact> -R moltis-org/moltis` or
 ## Features
 
 - **AI Gateway** — Multi-provider LLM support (OpenAI Codex, GitHub Copilot, Local), streaming responses, agent loop with sub-agent delegation, parallel tool execution
-- **Communication** — Web UI, Telegram, Microsoft Teams, Discord, API access, voice I/O (8 TTS + 7 STT providers), mobile PWA with push notifications
+- **Communication** — Web UI, Telegram, Signal, Microsoft Teams, Discord, API access, voice I/O (8 TTS + 7 STT providers), mobile PWA with push notifications
 - **Memory & Recall** — Per-agent memory workspaces, embeddings-powered long-term memory, hybrid vector + full-text search, session persistence with auto-compaction, cross-session recall, Cursor-compatible project context, context-file safety scanning
 - **Safer Agent Editing** — Automatic checkpoints before built-in skill and memory mutations, restore tooling, session branching
 - **Extensibility** — MCP servers (stdio + HTTP/SSE), skill system, 15 lifecycle hook events with circuit breaker, destructive command guard

README.md

@@ -23,6 +23,7 @@ pub enum ChannelType {
     Slack,
     Matrix,
     Nostr,
+    Signal,
 }
 
 impl ChannelType {
@@ -36,6 +37,7 @@ impl ChannelType {
             Self::Slack => "slack",
             Self::Matrix => "matrix",
             Self::Nostr => "nostr",
+            Self::Signal => "signal",
         }
     }
 
@@ -49,6 +51,7 @@ impl ChannelType {
             Self::Slack => "Slack",
             Self::Matrix => "Matrix",
             Self::Nostr => "Nostr",
+            Self::Signal => "Signal",
         }
     }
 
@@ -65,6 +68,13 @@ impl ChannelType {
                     Some("private".to_string())
                 }
             },
+            Self::Signal => {
+                if chat_id.starts_with("group:") {
+                    Some("group".to_string())
+                } else {
+                    Some("direct".to_string())
+                }
+            },
             Self::Nostr => Some("dm".to_string()),
             _ => None,
         }
@@ -80,6 +90,7 @@ impl ChannelType {
             Self::Slack => &["bot_token", "app_token", "signing_secret"],
             Self::Matrix => &["access_token", "password"],
             Self::Nostr => &["secret_key"],
+            Self::Signal => &[],
         }
     }
 }
@@ -102,6 +113,7 @@ impl std::str::FromStr for ChannelType {
             "slack" => Ok(Self::Slack),
             "matrix" | "element" => Ok(Self::Matrix),
             "nostr" => Ok(Self::Nostr),
+            "signal" => Ok(Self::Signal),
             other => Err(Error::invalid_input(format!(
                 "unknown channel type: {other}"
             ))),
@@ -119,6 +131,7 @@ impl ChannelType {
         Self::Slack,
         Self::Matrix,
         Self::Nostr,
+        Self::Signal,
     ];
 
     /// Returns the static descriptor for this channel type.
@@ -237,6 +250,22 @@ impl ChannelType {
                     supports_location: false,
                 },
             },
+            Self::Signal => ChannelDescriptor {
+                channel_type: *self,
+                display_name: "Signal",
+                capabilities: ChannelCapabilities {
+                    inbound_mode: InboundMode::GatewayLoop,
+                    supports_outbound: true,
+                    supports_streaming: false,
+                    supports_interactive: false,
+                    supports_threads: false,
+                    supports_voice_ingest: false,
+                    supports_pairing: false,
+                    supports_otp: true,
+                    supports_reactions: false,
+                    supports_location: false,
+                },
+            },
         }
     }
 }

crates/channels/src/plugin.rs

@@ -127,6 +127,7 @@ default = [
   "prometheus",
   "push-notifications",
   "qmd",
+  "signal",
   "slack",
   "tailscale",
   "tls",
@@ -175,6 +176,7 @@ openclaw-import    = ["dep:moltis-openclaw-import", "moltis-gateway/openclaw-imp
 prometheus         = ["moltis-httpd/prometheus"]
 push-notifications = ["moltis-httpd/push-notifications", "moltis-web?/push-notifications"]
 qmd                = ["moltis-gateway/qmd"]
+signal             = ["moltis-httpd/signal"]
 slack              = ["moltis-httpd/slack"]
 tailscale          = ["moltis-httpd/tailscale", "moltis-web?/tailscale"]
 tls                = ["moltis-httpd/tls"]

crates/cli/Cargo.toml

@@ -183,7 +183,7 @@ pub struct McpOAuthOverrideEntry {
 /// Kept in `moltis-config` (not `moltis-channels`) so the config crate stays
 /// independent of the channels crate while still validating channel names.
 pub const KNOWN_CHANNEL_TYPES: &[&str] = &[
-    "telegram", "whatsapp", "msteams", "discord", "slack", "matrix",
+    "telegram", "whatsapp", "msteams", "discord", "slack", "matrix", "nostr", "signal",
 ];
 
 /// Per-chat-type tool policy for a channel account.
@@ -227,7 +227,7 @@ pub struct ChannelToolPolicyOverride {
 #[serde(default)]
 pub struct ChannelsConfig {
     /// Which channel types are offered in the web UI (onboarding + channels page).
-    /// Defaults to `["telegram", "whatsapp", "msteams", "discord", "slack", "matrix", "nostr"]`.
+    /// Defaults to `["telegram", "whatsapp", "msteams", "discord", "slack", "matrix", "nostr", "signal"]`.
     #[serde(
         default = "default_channels_offered",
         skip_serializing_if = "Vec::is_empty"
@@ -251,6 +251,9 @@ pub struct ChannelsConfig {
     /// Nostr DM accounts, keyed by account ID.
     #[serde(default)]
     pub nostr: HashMap<String, serde_json::Value>,
+    /// Signal accounts backed by signal-cli, keyed by account ID.
+    #[serde(default)]
+    pub signal: HashMap<String, serde_json::Value>,
     /// Additional channel types not covered by the named fields above.
     ///
     /// This allows new channel plugins to be configured without changing
@@ -264,14 +267,15 @@ impl ChannelsConfig {
     ///
     /// This is the single source of truth for the set of named channel types.
     /// Keep in sync with the struct fields.
-    fn named_fields(&self) -> [(&str, &HashMap<String, serde_json::Value>); 6] {
+    fn named_fields(&self) -> [(&str, &HashMap<String, serde_json::Value>); 7] {
         [
             ("telegram", &self.telegram),
             ("whatsapp", &self.whatsapp),
             ("msteams", &self.msteams),
             ("discord", &self.discord),
             ("slack", &self.slack),
             ("nostr", &self.nostr),
+            ("signal", &self.signal),
         ]
     }
 
@@ -314,6 +318,7 @@ fn default_channels_offered() -> Vec<String> {
         "slack".into(),
         "matrix".into(),
         "nostr".into(),
+        "signal".into(),
     ]
 }
 
@@ -327,6 +332,7 @@ impl Default for ChannelsConfig {
             discord: HashMap::new(),
             slack: HashMap::new(),
             nostr: HashMap::new(),
+            signal: HashMap::new(),
             extra: HashMap::new(),
         }
     }

crates/config/src/schema/runtime.rs

@@ -382,6 +382,7 @@ fn channels_config_defaults_offered() {
         "slack".to_string(),
         "matrix".to_string(),
         "nostr".to_string(),
+        "signal".to_string(),
     ]);
 }
 
@@ -396,6 +397,7 @@ fn channels_config_empty_toml_defaults_offered() {
         "slack".to_string(),
         "matrix".to_string(),
         "nostr".to_string(),
+        "signal".to_string(),
     ]);
 }
 

crates/config/src/schema/tests.rs

@@ -877,9 +877,8 @@ reset_on_exit = true              # Reset serve/funnel when gateway shuts down
 
 [channels]
 # Which channel types appear in the web UI's "+ Add Channel" menu.
-# Default: ["telegram", "msteams", "discord", "slack", "matrix", "nostr"]
-# Add "whatsapp" to enable it in the UI.
-# offered = ["telegram", "msteams", "discord", "slack", "matrix", "nostr", "whatsapp"]
+# Default: ["telegram", "whatsapp", "msteams", "discord", "slack", "matrix", "nostr", "signal"]
+# offered = ["telegram", "msteams", "discord", "slack", "matrix", "nostr", "signal", "whatsapp"]
 
 # WhatsApp linked-device accounts
 # [channels.whatsapp.my-bot]
@@ -1023,6 +1022,24 @@ reset_on_exit = true              # Reset serve/funnel when gateway shuts down
 # name = "Moltis Bot"
 # about = "AI assistant on Nostr"
 
+# Signal accounts via signal-cli daemon
+# Start signal-cli separately, for example:
+#   signal-cli --account +15551234567 daemon --http 127.0.0.1:8080
+# [channels.signal.my-bot]
+# account = "+15551234567"         # Signal account loaded by signal-cli
+# http_url = "http://127.0.0.1:8080"
+# dm_policy = "allowlist"          # "open", "allowlist", or "disabled"
+# allowlist = []                   # Allowed sender phone numbers or UUIDs
+# group_policy = "disabled"        # "open", "allowlist", or "disabled"
+# group_allowlist = []             # Signal group IDs
+# mention_mode = "mention"         # "mention", "always", or "none"
+# ignore_stories = true
+# model = "anthropic/claude-sonnet-4-20250514"
+# model_provider = "anthropic"
+# otp_self_approval = true         # OTP self-approval for non-allowlisted DM users
+# otp_cooldown_secs = 300          # Cooldown after 3 failed OTP attempts
+# text_chunk_limit = 4000
+
 # ══════════════════════════════════════════════════════════════════════════════
 # HOOKS
 # ══════════════════════════════════════════════════════════════════════════════

crates/config/src/template.rs

@@ -417,6 +417,7 @@ pub(super) fn build_schema_map() -> KnownKeys {
                     ("slack", Map(Box::new(channel_account()))),
                     ("matrix", Map(Box::new(channel_account()))),
                     ("nostr", Map(Box::new(channel_account()))),
+                    ("signal", Map(Box::new(channel_account()))),
                 ]),
             }
         }),

crates/config/src/validate/schema_map.rs

@@ -52,6 +52,7 @@ moltis-routing          = { workspace = true }
 moltis-secret-store     = { workspace = true }
 moltis-service-traits   = { workspace = true }
 moltis-sessions         = { workspace = true }
+moltis-signal           = { optional = true, workspace = true }
 moltis-skills           = { workspace = true }
 moltis-slack            = { optional = true, workspace = true }
 moltis-tailscale        = { optional = true, workspace = true }
@@ -112,6 +113,7 @@ default = [
   "prometheus",
   "push-notifications",
   "qmd",
+  "signal",
   "slack",
   "tailscale",
   "tls",
@@ -152,12 +154,14 @@ metrics = [
   "moltis-metrics/sqlite",
   "moltis-msteams/metrics",
   "moltis-nostr?/metrics",
+  "moltis-signal?/metrics",
 ]
 nostr = ["dep:moltis-nostr"]
 openclaw-import = ["dep:moltis-openclaw-import"]
 prometheus = ["metrics", "moltis-metrics/prometheus"]
 push-notifications = ["dep:chrono", "dep:p256", "dep:web-push", "moltis-chat/push-notifications"]
 qmd = ["dep:moltis-qmd", "moltis-code-index/qmd"]
+signal = ["dep:moltis-signal"]
 slack = ["dep:moltis-slack", "moltis-slack/metrics"]
 tailscale = ["dep:moltis-tailscale"]
 tls = []