@openclaw/crabline 0.1.16 → 0.1.18

package/README.md

@@ -187,6 +187,14 @@ provider server, or `startOpenClawCrablineAdapter`. Crabline awaits the callback
 after appending each API/admin event to `recorderPath`, so callers can react in
 process while retaining the JSONL artifact as durable evidence.
 
+Provider servers initialize recorder ownership before reporting readiness,
+without creating recorder files or emitting synthetic events. Closing a server
+stops new recorder admissions and waits for admitted persistence to finish.
+Shutdown does not wait for event observers, which may themselves call `close()`.
+Concurrent and repeated close calls share the same shutdown. All transports are
+closed even if one fails, and the persistence drain includes asynchronous cleanup
+after a failed recorder lock acquisition.
+
 Recorder files should normally have one filesystem name. If multiple processes
 cannot share the same OS account home, the home is read-only, or they write
 through hardlinks to the same recorder inode, set

package/dist/src/openclaw/bridges/whatsapp.js

@@ -25,7 +25,26 @@ function requireWhatsAppConversationKind(kind, targetId) {
         throw new Error("WhatsApp inbound conversation kind does not match the native JID.");
     }
 }
+function whatsappInboundAudio(input) {
+    if (!input.attachments?.length) {
+        return undefined;
+    }
+    if (input.attachments.length !== 1 || input.attachments[0]?.kind !== "audio") {
+        throw new Error("WhatsApp Crabline inbound supports exactly one inline audio attachment.");
+    }
+    const attachment = input.attachments[0];
+    if (!attachment.contentBase64) {
+        throw new Error("WhatsApp Crabline inbound audio requires inline contentBase64.");
+    }
+    return {
+        contentBase64: attachment.contentBase64,
+        ...(attachment.fileName ? { fileName: attachment.fileName } : {}),
+        mimeType: attachment.mimeType,
+        ptt: true,
+    };
+}
 export const WHATSAPP_OPENCLAW_CRABLINE_PROVIDER_BRIDGE = createOpenClawCrablineProviderBridge({
+    allowAttachmentOnlyInbound: true,
     provider: "whatsapp",
     createAdapter(whatsapp) {
         const messagesPath = new URL(whatsapp.endpoints.messagesUrl).pathname;
@@ -113,6 +132,7 @@ export const WHATSAPP_OPENCLAW_CRABLINE_PROVIDER_BRIDGE = createOpenClawCrabline
                 requireWhatsAppConversationKind(input.conversation.kind, nativeChatJid);
                 const nativeSenderJid = requireWhatsAppJid(input.senderId, "WhatsApp sender", true);
                 const providerTargetKey = canonicalizeWhatsAppChatCorrelationJid(nativeChatJid);
+                const audio = whatsappInboundAudio(input);
                 if (input.conversation.kind === "direct" &&
                     canonicalizeWhatsAppUserCorrelationJid(nativeChatJid) !==
                         canonicalizeWhatsAppUserCorrelationJid(nativeSenderJid)) {
@@ -124,7 +144,7 @@ export const WHATSAPP_OPENCLAW_CRABLINE_PROVIDER_BRIDGE = createOpenClawCrabline
                         chatJid: nativeChatJid,
                         senderJid: nativeSenderJid,
                         ...(input.senderName ? { pushName: input.senderName } : {}),
-                        text: input.text,
+                        ...(audio ? { audio } : { text: input.text }),
                     },
                     providerTargetKey,
                     qaTarget: qaTargetForInbound({

package/dist/src/openclaw/bridges/whatsapp.js.map

@@ -1 +1 @@
-{"version":3,"file":"whatsapp.js","sourceRoot":"","sources":["../../../../src/openclaw/bridges/whatsapp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oCAAoC,EACpC,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sCAAsC,EACtC,2BAA2B,EAC3B,sCAAsC,EACtC,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAE,QAAQ,GAAG,KAAK;IACxE,MAAM,SAAS,GAAG,QAAQ;QACxB,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC;QACpC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAqD,EACrD,QAAgB;IAEhB,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAwB,EAAE,QAAgB;IACjF,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,0CAA0C,GAAG,oCAAoC,CAAC;IAC7F,QAAQ,EAAE,UAAU;IACpB,aAAa,CAAC,QAAQ;QACpB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QACtE,OAAO;YACL,KAAK,CAAC,KAAK,CAAC,MAAM;gBAChB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE;oBAC9D,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,QAAQ,CAAC,WAAW,EAAE;qBAChD;oBACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9B,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,mBAAmB,CACvB,QAAQ,EACR,4CAA4C,QAAQ,CAAC,MAAM,GAAG,CAC/D,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC5E,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBAClF,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,aAAa;gBACX,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,OAAO,EAAE,UAAU;oBACnB,0BAA0B,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBACpC,GAAG,GAAG;wBACN,6BAA6B,EAAE,QAAQ,CAAC,UAAU;wBAClD,+BAA+B,EAAE,QAAQ,CAAC,YAAY;wBACtD,0BAA0B,EAAE,QAAQ,CAAC,OAAO;wBAC5C,gCAAgC,EAAE,QAAQ,CAAC,SAAS,CAAC,mBAAmB;qBACzE,CAAC;oBACF,mBAAmB,EAAE,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE;wBAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClF,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAE9D,OAAO;4BACL,GAAG,cAAc;4BACjB,QAAQ,EAAE;gCACR,GAAG,QAAQ;gCACX,QAAQ,EAAE;oCACR,GAAG,cAAc;oCACjB,OAAO,EAAE,IAAI;oCACb,QAAQ,EAAE,MAAM;oCAChB,WAAW,EAAE,MAAM;oCACnB,SAAS,EAAE,CAAC,GAAG,CAAC;oCAChB,cAAc,EAAE,CAAC,GAAG,CAAC;oCACrB,MAAM,EAAE;wCACN,GAAG,MAAM;wCACT,GAAG,EAAE;4CACH,GAAG,YAAY;4CACf,cAAc,EAAE,KAAK;yCACtB;qCACF;iCACF;6BACF;yBACF,CAAC;oBACJ,CAAC;oBACD,iBAAiB,EAAE,CAAC,UAAU,CAAC;iBAChC,CAAC;YACJ,CAAC;YACD,mBAAmB,CAAC,MAAM;gBACxB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBAClE,yBAAyB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;gBACxF,CAAC;gBACD,MAAM,EAAE,GAAG,sCAAsC,CAAC,QAAQ,CAAE,CAAC;gBAC7D,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,iBAAiB,EAAE,EAAE;oBACrB,EAAE;oBACF,YAAY,EAAE,UAAU;oBACxB,OAAO,EAAE,EAAE;iBACZ,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,KAAK;gBACjB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;gBACzF,+BAA+B,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBACxE,MAAM,eAAe,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACpF,MAAM,iBAAiB,GAAG,sCAAsC,CAAC,aAAa,CAAE,CAAC;gBACjF,IACE,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ;oBACpC,sCAAsC,CAAC,aAAa,CAAC;wBACnD,sCAAsC,CAAC,eAAe,CAAC,EACzD,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,GAAG,yBAAyB,CAAC,QAAQ,CAAC;oBACtC,YAAY,EAAE;wBACZ,OAAO,EAAE,aAAa;wBACtB,SAAS,EAAE,eAAe;wBAC1B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3D,IAAI,EAAE,KAAK,CAAC,IAAI;qBACjB;oBACD,iBAAiB;oBACjB,QAAQ,EAAE,kBAAkB,CAAC;wBAC3B,GAAG,KAAK;wBACR,YAAY,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE;qBAC/D,CAAC;oBACF,iBAAiB,EAAE;wBACjB,EAAE,EAAE,aAAa;wBACjB,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;qBAC3D;iBACF,CAAC;YACJ,CAAC;YACD,yBAAyB,CAAC,EAAE,KAAK,EAAE;gBACjC,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAChB,KAAK,CAAC,IAAI,KAAK,KAAK;oBACpB,KAAK,CAAC,QAAQ,KAAK,IAAI;oBACvB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAC9B,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzE,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrF,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;gBAChF,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAClE,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChD,MAAM,eAAe,GACnB,KAAK,CAAC,MAAM,KAAK,MAAM;oBACvB,KAAK,CAAC,IAAI,KAAK,YAAY;oBAC3B,CAAC,CAAC,CAAC,mBAAmB,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,gBAAgB,KAAK,UAAU,CAAC;oBACzE,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,KAAK,MAAM,CAAC;oBACnD,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;oBACzB,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,EAAE,CAAC;oBACvC,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpC,MAAM,IAAI,GAAG,aAAa;oBACxB,CAAC,CAAC,kBAAkB,CAAC,cAAc,EAAE,YAAY,CAAC;oBAClD,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;wBACrB,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC;wBACtC,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,cAAc,GAAG,aAAa;oBAClC,CAAC,CAAC,sCAAsC,CAAC,EAAE,CAAC;oBAC5C,CAAC,CAAC,CAAC,2BAA2B,CAAC,EAAE,CAAC;wBAChC,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,aAAa;oBACzB,IAAI;oBACJ,kBAAkB,EAAE,CAAC,cAAc,CAAC;oBACpC,cAAc,EAAE,cAAc;iBAC/B,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import {\n  createAdminInboundRequest,\n  createOpenClawCrablineProviderBridge,\n  DEFAULT_ACCOUNT_ID,\n  isRecord,\n  qaTargetForInbound,\n  readNonBlankString,\n  readString,\n} from \"../shared.js\";\nimport {\n  canonicalizeWhatsAppChatCorrelationJid,\n  canonicalizeWhatsAppChatJid,\n  canonicalizeWhatsAppUserCorrelationJid,\n  canonicalizeWhatsAppUserJid,\n} from \"../../servers/whatsapp-jid.js\";\nimport { throwProbeHttpError } from \"./probe-response.js\";\n\nfunction requireWhatsAppJid(value: string, label: string, userOnly = false): string {\n  const canonical = userOnly\n    ? canonicalizeWhatsAppUserJid(value)\n    : canonicalizeWhatsAppChatJid(value);\n  if (!canonical) {\n    throw new Error(`${label} must be a native WhatsApp JID.`);\n  }\n  return canonical;\n}\n\nfunction requireWhatsAppTargetKind(\n  parsed: { kind: \"direct\" | \"group\"; native: boolean },\n  targetId: string,\n): void {\n  if (parsed.native && parsed.kind === \"direct\") {\n    return;\n  }\n  const nativeKind = targetId.endsWith(\"@g.us\") ? \"group\" : \"direct\";\n  if (parsed.kind !== nativeKind) {\n    throw new Error(\"WhatsApp target kind does not match the native JID.\");\n  }\n}\n\nfunction requireWhatsAppConversationKind(kind: \"direct\" | \"group\", targetId: string): void {\n  const nativeKind = targetId.endsWith(\"@g.us\") ? \"group\" : \"direct\";\n  if (kind !== nativeKind) {\n    throw new Error(\"WhatsApp inbound conversation kind does not match the native JID.\");\n  }\n}\n\nexport const WHATSAPP_OPENCLAW_CRABLINE_PROVIDER_BRIDGE = createOpenClawCrablineProviderBridge({\n  provider: \"whatsapp\",\n  createAdapter(whatsapp) {\n    const messagesPath = new URL(whatsapp.endpoints.messagesUrl).pathname;\n    return {\n      async probe(signal) {\n        const response = await fetch(whatsapp.endpoints.phoneNumberUrl, {\n          headers: {\n            authorization: `Bearer ${whatsapp.accessToken}`,\n          },\n          ...(signal ? { signal } : {}),\n        });\n        if (!response.ok) {\n          await throwProbeHttpError(\n            response,\n            `Crabline WhatsApp probe failed with HTTP ${response.status}.`,\n          );\n        }\n        const payload: unknown = await response.json();\n        if (!isRecord(payload) || readString(payload.id) !== whatsapp.phoneNumberId) {\n          throw new Error(\"Crabline WhatsApp probe returned an unexpected phone number.\");\n        }\n        return payload;\n      },\n      createBinding() {\n        return {\n          accountId: DEFAULT_ACCOUNT_ID,\n          channel: \"whatsapp\",\n          createProviderReadinessEnv: (env) => ({\n            ...env,\n            CRABLINE_WHATSAPP_ADMIN_TOKEN: whatsapp.adminToken,\n            CRABLINE_WHATSAPP_RECORDER_PATH: whatsapp.recorderPath,\n            CRABLINE_WHATSAPP_SELF_JID: whatsapp.selfJid,\n            OPENCLAW_WHATSAPP_WEB_SOCKET_URL: whatsapp.endpoints.baileysWebSocketUrl,\n          }),\n          createGatewayConfig: (openclawConfig = {}) => {\n            const channels = isRecord(openclawConfig.channels) ? openclawConfig.channels : {};\n            const whatsappConfig = isRecord(channels.whatsapp) ? channels.whatsapp : {};\n            const groups = isRecord(whatsappConfig.groups) ? whatsappConfig.groups : {};\n            const defaultGroup = isRecord(groups[\"*\"]) ? groups[\"*\"] : {};\n\n            return {\n              ...openclawConfig,\n              channels: {\n                ...channels,\n                whatsapp: {\n                  ...whatsappConfig,\n                  enabled: true,\n                  dmPolicy: \"open\",\n                  groupPolicy: \"open\",\n                  allowFrom: [\"*\"],\n                  groupAllowFrom: [\"*\"],\n                  groups: {\n                    ...groups,\n                    \"*\": {\n                      ...defaultGroup,\n                      requireMention: false,\n                    },\n                  },\n                },\n              },\n            };\n          },\n          requiredPluginIds: [\"whatsapp\"],\n        };\n      },\n      createAgentDelivery(parsed) {\n        if (parsed.threadId !== undefined) {\n          throw new Error(\"WhatsApp does not support thread targets.\");\n        }\n        const nativeTo = requireWhatsAppJid(parsed.id, \"WhatsApp target\");\n        requireWhatsAppTargetKind(parsed, nativeTo);\n        if (nativeTo.endsWith(\"@g.us\")) {\n          throw new Error(\"WhatsApp Crabline WebSocket outbound supports direct targets only.\");\n        }\n        const to = canonicalizeWhatsAppUserCorrelationJid(nativeTo)!;\n        return {\n          channel: \"whatsapp\",\n          providerTargetKey: to,\n          to,\n          replyChannel: \"whatsapp\",\n          replyTo: to,\n        };\n      },\n      createInbound(input) {\n        if (input.threadId !== undefined) {\n          throw new Error(\"WhatsApp does not support thread targets.\");\n        }\n        const nativeChatJid = requireWhatsAppJid(input.conversation.id, \"WhatsApp conversation\");\n        requireWhatsAppConversationKind(input.conversation.kind, nativeChatJid);\n        const nativeSenderJid = requireWhatsAppJid(input.senderId, \"WhatsApp sender\", true);\n        const providerTargetKey = canonicalizeWhatsAppChatCorrelationJid(nativeChatJid)!;\n        if (\n          input.conversation.kind === \"direct\" &&\n          canonicalizeWhatsAppUserCorrelationJid(nativeChatJid) !==\n            canonicalizeWhatsAppUserCorrelationJid(nativeSenderJid)\n        ) {\n          throw new Error(\n            \"WhatsApp direct conversation and sender must identify the same recipient.\",\n          );\n        }\n        return {\n          ...createAdminInboundRequest(whatsapp),\n          providerBody: {\n            chatJid: nativeChatJid,\n            senderJid: nativeSenderJid,\n            ...(input.senderName ? { pushName: input.senderName } : {}),\n            text: input.text,\n          },\n          providerTargetKey,\n          qaTarget: qaTargetForInbound({\n            ...input,\n            conversation: { ...input.conversation, id: providerTargetKey },\n          }),\n          stateConversation: {\n            id: nativeChatJid,\n            kind: nativeChatJid.endsWith(\"@g.us\") ? \"group\" : \"direct\",\n          },\n        };\n      },\n      createOutboundObservation({ event }) {\n        if (\n          !isRecord(event) ||\n          event.type !== \"api\" ||\n          event.accepted !== true ||\n          typeof event.path !== \"string\"\n        ) {\n          return null;\n        }\n        if (!isRecord(event.body)) {\n          return null;\n        }\n        const baileysKey = isRecord(event.body.key) ? event.body.key : undefined;\n        const baileysMessage = isRecord(event.body.message) ? event.body.message : undefined;\n        const isBaileysSend = event.method === \"WEBSOCKET\" && event.path === \"/ws/chat\";\n        const messagingProduct = readString(event.body.messaging_product);\n        const messageType = readString(event.body.type);\n        const isCloudTextSend =\n          event.method === \"POST\" &&\n          event.path === messagesPath &&\n          (!(\"messaging_product\" in event.body) || messagingProduct === \"whatsapp\") &&\n          (!(\"type\" in event.body) || messageType === \"text\") &&\n          !(\"status\" in event.body) &&\n          !(\"message_id\" in event.body);\n        if (!isBaileysSend && !isCloudTextSend) {\n          return null;\n        }\n        const to = isBaileysSend ? readString(baileysKey?.remoteJid) : readString(event.body.to);\n        const textPayload = event.body.text;\n        const text = isBaileysSend\n          ? readNonBlankString(baileysMessage?.conversation)\n          : isRecord(textPayload)\n            ? readNonBlankString(textPayload.body)\n            : undefined;\n        if (!to || !text) {\n          return null;\n        }\n        const providerTarget = isBaileysSend\n          ? canonicalizeWhatsAppChatCorrelationJid(to)\n          : (canonicalizeWhatsAppChatJid(to) ??\n            (/^\\d{7,15}$/u.test(to) ? `${to}@s.whatsapp.net` : to));\n        if (!providerTarget) {\n          return null;\n        }\n        return {\n          accountId: DEFAULT_ACCOUNT_ID,\n          senderId: \"openclaw\",\n          senderName: \"OpenClaw QA\",\n          text,\n          providerTargetKeys: [providerTarget],\n          fallbackTarget: providerTarget,\n        };\n      },\n    };\n  },\n});\n"]}
+{"version":3,"file":"whatsapp.js","sourceRoot":"","sources":["../../../../src/openclaw/bridges/whatsapp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,oCAAoC,EACpC,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,sCAAsC,EACtC,2BAA2B,EAC3B,sCAAsC,EACtC,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAE,QAAQ,GAAG,KAAK;IACxE,MAAM,SAAS,GAAG,QAAQ;QACxB,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC;QACpC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAqD,EACrD,QAAgB;IAEhB,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,IAAwB,EAAE,QAAgB;IACjF,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACnE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAS7B;IACC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,0CAA0C,GAAG,oCAAoC,CAAC;IAC7F,0BAA0B,EAAE,IAAI;IAChC,QAAQ,EAAE,UAAU;IACpB,aAAa,CAAC,QAAQ;QACpB,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QACtE,OAAO;YACL,KAAK,CAAC,KAAK,CAAC,MAAM;gBAChB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE;oBAC9D,OAAO,EAAE;wBACP,aAAa,EAAE,UAAU,QAAQ,CAAC,WAAW,EAAE;qBAChD;oBACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9B,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,mBAAmB,CACvB,QAAQ,EACR,4CAA4C,QAAQ,CAAC,MAAM,GAAG,CAC/D,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC/C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;oBAC5E,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBAClF,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,aAAa;gBACX,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,OAAO,EAAE,UAAU;oBACnB,0BAA0B,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBACpC,GAAG,GAAG;wBACN,6BAA6B,EAAE,QAAQ,CAAC,UAAU;wBAClD,+BAA+B,EAAE,QAAQ,CAAC,YAAY;wBACtD,0BAA0B,EAAE,QAAQ,CAAC,OAAO;wBAC5C,gCAAgC,EAAE,QAAQ,CAAC,SAAS,CAAC,mBAAmB;qBACzE,CAAC;oBACF,mBAAmB,EAAE,CAAC,cAAc,GAAG,EAAE,EAAE,EAAE;wBAC3C,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClF,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5E,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAE9D,OAAO;4BACL,GAAG,cAAc;4BACjB,QAAQ,EAAE;gCACR,GAAG,QAAQ;gCACX,QAAQ,EAAE;oCACR,GAAG,cAAc;oCACjB,OAAO,EAAE,IAAI;oCACb,QAAQ,EAAE,MAAM;oCAChB,WAAW,EAAE,MAAM;oCACnB,SAAS,EAAE,CAAC,GAAG,CAAC;oCAChB,cAAc,EAAE,CAAC,GAAG,CAAC;oCACrB,MAAM,EAAE;wCACN,GAAG,MAAM;wCACT,GAAG,EAAE;4CACH,GAAG,YAAY;4CACf,cAAc,EAAE,KAAK;yCACtB;qCACF;iCACF;6BACF;yBACF,CAAC;oBACJ,CAAC;oBACD,iBAAiB,EAAE,CAAC,UAAU,CAAC;iBAChC,CAAC;YACJ,CAAC;YACD,mBAAmB,CAAC,MAAM;gBACxB,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBAClE,yBAAyB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;gBACxF,CAAC;gBACD,MAAM,EAAE,GAAG,sCAAsC,CAAC,QAAQ,CAAE,CAAC;gBAC7D,OAAO;oBACL,OAAO,EAAE,UAAU;oBACnB,iBAAiB,EAAE,EAAE;oBACrB,EAAE;oBACF,YAAY,EAAE,UAAU;oBACxB,OAAO,EAAE,EAAE;iBACZ,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,KAAK;gBACjB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;gBACzF,+BAA+B,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;gBACxE,MAAM,eAAe,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACpF,MAAM,iBAAiB,GAAG,sCAAsC,CAAC,aAAa,CAAE,CAAC;gBACjF,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;gBAC1C,IACE,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,QAAQ;oBACpC,sCAAsC,CAAC,aAAa,CAAC;wBACnD,sCAAsC,CAAC,eAAe,CAAC,EACzD,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,GAAG,yBAAyB,CAAC,QAAQ,CAAC;oBACtC,YAAY,EAAE;wBACZ,OAAO,EAAE,aAAa;wBACtB,SAAS,EAAE,eAAe;wBAC1B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3D,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;qBAC9C;oBACD,iBAAiB;oBACjB,QAAQ,EAAE,kBAAkB,CAAC;wBAC3B,GAAG,KAAK;wBACR,YAAY,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE;qBAC/D,CAAC;oBACF,iBAAiB,EAAE;wBACjB,EAAE,EAAE,aAAa;wBACjB,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ;qBAC3D;iBACF,CAAC;YACJ,CAAC;YACD,yBAAyB,CAAC,EAAE,KAAK,EAAE;gBACjC,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAChB,KAAK,CAAC,IAAI,KAAK,KAAK;oBACpB,KAAK,CAAC,QAAQ,KAAK,IAAI;oBACvB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAC9B,CAAC;oBACD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1B,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;gBACzE,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrF,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;gBAChF,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAClE,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChD,MAAM,eAAe,GACnB,KAAK,CAAC,MAAM,KAAK,MAAM;oBACvB,KAAK,CAAC,IAAI,KAAK,YAAY;oBAC3B,CAAC,CAAC,CAAC,mBAAmB,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,gBAAgB,KAAK,UAAU,CAAC;oBACzE,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,KAAK,MAAM,CAAC;oBACnD,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC;oBACzB,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,EAAE,CAAC;oBACvC,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACzF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpC,MAAM,IAAI,GAAG,aAAa;oBACxB,CAAC,CAAC,kBAAkB,CAAC,cAAc,EAAE,YAAY,CAAC;oBAClD,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;wBACrB,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC;wBACtC,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,cAAc,GAAG,aAAa;oBAClC,CAAC,CAAC,sCAAsC,CAAC,EAAE,CAAC;oBAC5C,CAAC,CAAC,CAAC,2BAA2B,CAAC,EAAE,CAAC;wBAChC,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO;oBACL,SAAS,EAAE,kBAAkB;oBAC7B,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,aAAa;oBACzB,IAAI;oBACJ,kBAAkB,EAAE,CAAC,cAAc,CAAC;oBACpC,cAAc,EAAE,cAAc;iBAC/B,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC","sourcesContent":["import {\n  createAdminInboundRequest,\n  createOpenClawCrablineProviderBridge,\n  DEFAULT_ACCOUNT_ID,\n  isRecord,\n  qaTargetForInbound,\n  readNonBlankString,\n  readString,\n} from \"../shared.js\";\nimport {\n  canonicalizeWhatsAppChatCorrelationJid,\n  canonicalizeWhatsAppChatJid,\n  canonicalizeWhatsAppUserCorrelationJid,\n  canonicalizeWhatsAppUserJid,\n} from \"../../servers/whatsapp-jid.js\";\nimport { throwProbeHttpError } from \"./probe-response.js\";\n\nfunction requireWhatsAppJid(value: string, label: string, userOnly = false): string {\n  const canonical = userOnly\n    ? canonicalizeWhatsAppUserJid(value)\n    : canonicalizeWhatsAppChatJid(value);\n  if (!canonical) {\n    throw new Error(`${label} must be a native WhatsApp JID.`);\n  }\n  return canonical;\n}\n\nfunction requireWhatsAppTargetKind(\n  parsed: { kind: \"direct\" | \"group\"; native: boolean },\n  targetId: string,\n): void {\n  if (parsed.native && parsed.kind === \"direct\") {\n    return;\n  }\n  const nativeKind = targetId.endsWith(\"@g.us\") ? \"group\" : \"direct\";\n  if (parsed.kind !== nativeKind) {\n    throw new Error(\"WhatsApp target kind does not match the native JID.\");\n  }\n}\n\nfunction requireWhatsAppConversationKind(kind: \"direct\" | \"group\", targetId: string): void {\n  const nativeKind = targetId.endsWith(\"@g.us\") ? \"group\" : \"direct\";\n  if (kind !== nativeKind) {\n    throw new Error(\"WhatsApp inbound conversation kind does not match the native JID.\");\n  }\n}\n\nfunction whatsappInboundAudio(input: {\n  attachments?:\n    | Array<{\n        contentBase64?: string | undefined;\n        fileName?: string | undefined;\n        kind: string;\n        mimeType: string;\n      }>\n    | undefined;\n}) {\n  if (!input.attachments?.length) {\n    return undefined;\n  }\n  if (input.attachments.length !== 1 || input.attachments[0]?.kind !== \"audio\") {\n    throw new Error(\"WhatsApp Crabline inbound supports exactly one inline audio attachment.\");\n  }\n  const attachment = input.attachments[0];\n  if (!attachment.contentBase64) {\n    throw new Error(\"WhatsApp Crabline inbound audio requires inline contentBase64.\");\n  }\n  return {\n    contentBase64: attachment.contentBase64,\n    ...(attachment.fileName ? { fileName: attachment.fileName } : {}),\n    mimeType: attachment.mimeType,\n    ptt: true,\n  };\n}\n\nexport const WHATSAPP_OPENCLAW_CRABLINE_PROVIDER_BRIDGE = createOpenClawCrablineProviderBridge({\n  allowAttachmentOnlyInbound: true,\n  provider: \"whatsapp\",\n  createAdapter(whatsapp) {\n    const messagesPath = new URL(whatsapp.endpoints.messagesUrl).pathname;\n    return {\n      async probe(signal) {\n        const response = await fetch(whatsapp.endpoints.phoneNumberUrl, {\n          headers: {\n            authorization: `Bearer ${whatsapp.accessToken}`,\n          },\n          ...(signal ? { signal } : {}),\n        });\n        if (!response.ok) {\n          await throwProbeHttpError(\n            response,\n            `Crabline WhatsApp probe failed with HTTP ${response.status}.`,\n          );\n        }\n        const payload: unknown = await response.json();\n        if (!isRecord(payload) || readString(payload.id) !== whatsapp.phoneNumberId) {\n          throw new Error(\"Crabline WhatsApp probe returned an unexpected phone number.\");\n        }\n        return payload;\n      },\n      createBinding() {\n        return {\n          accountId: DEFAULT_ACCOUNT_ID,\n          channel: \"whatsapp\",\n          createProviderReadinessEnv: (env) => ({\n            ...env,\n            CRABLINE_WHATSAPP_ADMIN_TOKEN: whatsapp.adminToken,\n            CRABLINE_WHATSAPP_RECORDER_PATH: whatsapp.recorderPath,\n            CRABLINE_WHATSAPP_SELF_JID: whatsapp.selfJid,\n            OPENCLAW_WHATSAPP_WEB_SOCKET_URL: whatsapp.endpoints.baileysWebSocketUrl,\n          }),\n          createGatewayConfig: (openclawConfig = {}) => {\n            const channels = isRecord(openclawConfig.channels) ? openclawConfig.channels : {};\n            const whatsappConfig = isRecord(channels.whatsapp) ? channels.whatsapp : {};\n            const groups = isRecord(whatsappConfig.groups) ? whatsappConfig.groups : {};\n            const defaultGroup = isRecord(groups[\"*\"]) ? groups[\"*\"] : {};\n\n            return {\n              ...openclawConfig,\n              channels: {\n                ...channels,\n                whatsapp: {\n                  ...whatsappConfig,\n                  enabled: true,\n                  dmPolicy: \"open\",\n                  groupPolicy: \"open\",\n                  allowFrom: [\"*\"],\n                  groupAllowFrom: [\"*\"],\n                  groups: {\n                    ...groups,\n                    \"*\": {\n                      ...defaultGroup,\n                      requireMention: false,\n                    },\n                  },\n                },\n              },\n            };\n          },\n          requiredPluginIds: [\"whatsapp\"],\n        };\n      },\n      createAgentDelivery(parsed) {\n        if (parsed.threadId !== undefined) {\n          throw new Error(\"WhatsApp does not support thread targets.\");\n        }\n        const nativeTo = requireWhatsAppJid(parsed.id, \"WhatsApp target\");\n        requireWhatsAppTargetKind(parsed, nativeTo);\n        if (nativeTo.endsWith(\"@g.us\")) {\n          throw new Error(\"WhatsApp Crabline WebSocket outbound supports direct targets only.\");\n        }\n        const to = canonicalizeWhatsAppUserCorrelationJid(nativeTo)!;\n        return {\n          channel: \"whatsapp\",\n          providerTargetKey: to,\n          to,\n          replyChannel: \"whatsapp\",\n          replyTo: to,\n        };\n      },\n      createInbound(input) {\n        if (input.threadId !== undefined) {\n          throw new Error(\"WhatsApp does not support thread targets.\");\n        }\n        const nativeChatJid = requireWhatsAppJid(input.conversation.id, \"WhatsApp conversation\");\n        requireWhatsAppConversationKind(input.conversation.kind, nativeChatJid);\n        const nativeSenderJid = requireWhatsAppJid(input.senderId, \"WhatsApp sender\", true);\n        const providerTargetKey = canonicalizeWhatsAppChatCorrelationJid(nativeChatJid)!;\n        const audio = whatsappInboundAudio(input);\n        if (\n          input.conversation.kind === \"direct\" &&\n          canonicalizeWhatsAppUserCorrelationJid(nativeChatJid) !==\n            canonicalizeWhatsAppUserCorrelationJid(nativeSenderJid)\n        ) {\n          throw new Error(\n            \"WhatsApp direct conversation and sender must identify the same recipient.\",\n          );\n        }\n        return {\n          ...createAdminInboundRequest(whatsapp),\n          providerBody: {\n            chatJid: nativeChatJid,\n            senderJid: nativeSenderJid,\n            ...(input.senderName ? { pushName: input.senderName } : {}),\n            ...(audio ? { audio } : { text: input.text }),\n          },\n          providerTargetKey,\n          qaTarget: qaTargetForInbound({\n            ...input,\n            conversation: { ...input.conversation, id: providerTargetKey },\n          }),\n          stateConversation: {\n            id: nativeChatJid,\n            kind: nativeChatJid.endsWith(\"@g.us\") ? \"group\" : \"direct\",\n          },\n        };\n      },\n      createOutboundObservation({ event }) {\n        if (\n          !isRecord(event) ||\n          event.type !== \"api\" ||\n          event.accepted !== true ||\n          typeof event.path !== \"string\"\n        ) {\n          return null;\n        }\n        if (!isRecord(event.body)) {\n          return null;\n        }\n        const baileysKey = isRecord(event.body.key) ? event.body.key : undefined;\n        const baileysMessage = isRecord(event.body.message) ? event.body.message : undefined;\n        const isBaileysSend = event.method === \"WEBSOCKET\" && event.path === \"/ws/chat\";\n        const messagingProduct = readString(event.body.messaging_product);\n        const messageType = readString(event.body.type);\n        const isCloudTextSend =\n          event.method === \"POST\" &&\n          event.path === messagesPath &&\n          (!(\"messaging_product\" in event.body) || messagingProduct === \"whatsapp\") &&\n          (!(\"type\" in event.body) || messageType === \"text\") &&\n          !(\"status\" in event.body) &&\n          !(\"message_id\" in event.body);\n        if (!isBaileysSend && !isCloudTextSend) {\n          return null;\n        }\n        const to = isBaileysSend ? readString(baileysKey?.remoteJid) : readString(event.body.to);\n        const textPayload = event.body.text;\n        const text = isBaileysSend\n          ? readNonBlankString(baileysMessage?.conversation)\n          : isRecord(textPayload)\n            ? readNonBlankString(textPayload.body)\n            : undefined;\n        if (!to || !text) {\n          return null;\n        }\n        const providerTarget = isBaileysSend\n          ? canonicalizeWhatsAppChatCorrelationJid(to)\n          : (canonicalizeWhatsAppChatJid(to) ??\n            (/^\\d{7,15}$/u.test(to) ? `${to}@s.whatsapp.net` : to));\n        if (!providerTarget) {\n          return null;\n        }\n        return {\n          accountId: DEFAULT_ACCOUNT_ID,\n          senderId: \"openclaw\",\n          senderName: \"OpenClaw QA\",\n          text,\n          providerTargetKeys: [providerTarget],\n          fallbackTarget: providerTarget,\n        };\n      },\n    };\n  },\n});\n"]}

package/dist/src/openclaw/private-file.js

@@ -730,28 +730,80 @@ async function syncPathAncestry(filePath, syncParent, platform, firstCreatedDire
         currentPath = parentPath;
     }
 }
-async function darwinDirectoryHasExtendedAcl(directoryPath) {
+// Directory rights from chmod(1); inheritance flags are deliberately not rights.
+const DARWIN_DIRECTORY_ACL_RIGHTS = new Set([
+    "list",
+    "add_file",
+    "search",
+    "delete",
+    "add_subdirectory",
+    "delete_child",
+    "readattr",
+    "writeattr",
+    "readextattr",
+    "writeextattr",
+    "readsecurity",
+    "writesecurity",
+    "chown",
+]);
+async function readDarwinDirectoryAcl(directoryPath) {
     if (process.platform !== "darwin") {
-        return false;
+        return "none";
     }
+    const directory = await captureDirectoryIdentity(directoryPath);
     let output;
     try {
-        const result = await execFileAsync("/bin/ls", ["-lde", directoryPath], {
+        // A literal basename prevents newline-containing paths from impersonating ACEs.
+        const result = await execFileAsync("/bin/ls", ["-lde", "."], {
+            cwd: directoryPath,
             encoding: "utf8",
             env: { ...process.env, LC_ALL: "C" },
             maxBuffer: 64 * 1024,
         });
+        if (result.stderr.length > 0) {
+            throw new Error("macOS ACL inspection reported a diagnostic.");
+        }
         output = result.stdout;
     }
     catch (error) {
         throw new Error("Could not verify the private directory macOS ACL.", { cause: error });
     }
-    const mode = output.trimStart().split(/\s+/u, 1)[0] ?? "";
-    return mode.includes("+");
+    await directory.assertIdentityAt();
+    for (const character of output) {
+        const code = character.charCodeAt(0);
+        if ((code < 32 && character !== "\n") || (code >= 127 && code <= 159)) {
+            return "unsafe";
+        }
+    }
+    const [header, ...entries] = output.slice(0, -1).split("\n");
+    const mode = header?.match(/^d[r-][w-][xsS-][r-][w-][xsS-][r-][w-][xtT-]([+@]?) +[1-9]\d* +\S+ +\S+ +\d+ +[A-Z][a-z]{2} +\d{1,2} +(?:\d{2}:\d{2}|\d{4}) +\.$/u);
+    if (!output.endsWith("\n") || !mode) {
+        return "unsafe";
+    }
+    // Extended attributes take precedence over '+' in ls, even when an ACL exists.
+    if (entries.length === 0) {
+        return mode[1] === "+" ? "unsafe" : "none";
+    }
+    if (mode[1] === "") {
+        return "unsafe";
+    }
+    for (const [index, entry] of entries.entries()) {
+        // 'inherited' records origin; unlike *_inherit flags it does not propagate.
+        const ace = entry.match(/^ +(\d+): (?:user|group):\S+ (?:inherited )?deny ([a-z_]+(?:,[a-z_]+)*)$/u);
+        if (!ace ||
+            ace[1] !== String(index) ||
+            !ace[2].split(",").every((right) => DARWIN_DIRECTORY_ACL_RIGHTS.has(right))) {
+            return "unsafe";
+        }
+    }
+    return "nonpropagating-deny";
 }
-async function assertDarwinDirectoryHasNoExtendedAcl(directoryPath) {
-    if (await darwinDirectoryHasExtendedAcl(directoryPath)) {
-        throw new Error("Private directory must not have a macOS extended ACL.");
+async function assertDarwinDirectoryAcl(directoryPath, scope) {
+    const acl = await readDarwinDirectoryAcl(directoryPath);
+    if (acl === "unsafe" || (scope === "private" && acl !== "none")) {
+        throw new Error(scope === "private"
+            ? "Private directory must not have a macOS extended ACL."
+            : "Private mutation ancestry has an unsafe or unverifiable macOS ACL.");
     }
 }
 async function removeDarwinExtendedAcl(directoryPath) {
@@ -812,7 +864,7 @@ async function assertDarwinCreatedAncestryHasNoExtendedAcl(firstCreatedDirectory
         currentPath = parentPath;
     }
     for (const createdPath of createdPaths.reverse()) {
-        await assertDarwinDirectoryHasNoExtendedAcl(createdPath);
+        await assertDarwinDirectoryAcl(createdPath, "private");
     }
 }
 async function captureSingleSafePrivateMutationBoundary(directoryPath, platform, stickyTargetOwnedByCurrentUser) {
@@ -824,6 +876,7 @@ async function captureSingleSafePrivateMutationBoundary(directoryPath, platform,
     if (currentUserId === undefined || !Number.isSafeInteger(currentUserId) || currentUserId < 0) {
         throw new Error("Could not resolve the current POSIX user for private mutation.");
     }
+    const boundary = await captureDirectoryIdentity(directoryPath);
     const stats = await fs.lstat(directoryPath, { bigint: true });
     if (!stats.isDirectory()) {
         throw new Error("Private mutation boundary is not a directory.");
@@ -837,8 +890,9 @@ async function captureSingleSafePrivateMutationBoundary(directoryPath, platform,
     if (writableByAnotherPrincipal && !protectedByStickyOwnership) {
         throw new Error("Private mutation boundary is writable by another POSIX principal.");
     }
-    await assertDarwinDirectoryHasNoExtendedAcl(directoryPath);
-    return await captureDirectoryIdentity(directoryPath);
+    await assertDarwinDirectoryAcl(directoryPath, "ancestor");
+    await boundary.assertIdentityAt();
+    return boundary;
 }
 async function captureSafePrivateMutationBoundary(directoryPath, platform, stickyTargetOwnedByCurrentUser) {
     const resolvedBoundaryPath = path.resolve(directoryPath);
@@ -993,7 +1047,7 @@ export async function securePrivateDirectory(directoryPath, options = {}) {
             }
         }
         if (!existed) {
-            await assertDarwinDirectoryHasNoExtendedAcl(path.dirname(directoryPath));
+            await assertDarwinDirectoryAcl(path.dirname(directoryPath), "ancestor");
         }
         try {
             await fs.mkdir(directoryPath, { mode: 0o700 });
@@ -1059,7 +1113,7 @@ export async function securePrivateDirectory(directoryPath, options = {}) {
             const currentStats = await handle.stat({ bigint: true });
             const mutationRootMode = options.markMutationRoot === false ? currentStats.mode & 512n : 512n;
             await handle.chmod(Number(448n | mutationRootMode));
-            await assertDarwinDirectoryHasNoExtendedAcl(directoryPath);
+            await assertDarwinDirectoryAcl(directoryPath, "private");
             await (options.syncDirectory ?? (() => handle.sync()))();
         }
         await secured.assertIdentityAt();
@@ -1263,19 +1317,25 @@ function parsePrivateMutationClaimOwner(contents) {
     }
     return owner;
 }
-async function assertClaimPathIdentity(claimPath, expected, expectedLinkCount) {
+async function claimPathHasIdentity(claimPath, expected, expectedLinkCount) {
     try {
         const stats = await fs.lstat(claimPath, { bigint: true });
-        if (stats.isFile() &&
+        return (stats.isFile() &&
             (expectedLinkCount === undefined ? stats.nlink >= 1n : stats.nlink === expectedLinkCount) &&
             stats.dev === expected.device &&
-            stats.ino === expected.inode) {
-            return;
-        }
+            stats.ino === expected.inode);
     }
     catch (error) {
+        if (error.code === "ENOENT") {
+            return false;
+        }
         throw new Error("Private path mutation claim identity changed.", { cause: error });
     }
+}
+async function assertClaimPathIdentity(claimPath, expected, expectedLinkCount) {
+    if (await claimPathHasIdentity(claimPath, expected, expectedLinkCount)) {
+        return;
+    }
     throw new Error("Private path mutation claim identity changed.");
 }
 function assertOwnerOnlyPosixMutationClaim(stats, kind) {
@@ -1331,7 +1391,11 @@ async function readPrivateMutationClaim(claimPath) {
         }
         const contents = buffer.toString("utf8");
         const owner = parsePrivateMutationClaimOwner(contents);
-        await assertClaimPathIdentity(claimPath, identity);
+        // A live owner may release or replace this pathname after our handle opens.
+        // The open handle is safe, but its metadata is no longer the active claim.
+        if (!(await claimPathHasIdentity(claimPath, identity))) {
+            return null;
+        }
         return { contents, identity, owner };
     }
     catch (error) {
@@ -1399,15 +1463,6 @@ async function acquireHardLinkPrivateMutationClaim(parent, options) {
             (runtime.processIdentity.length === 0 || runtime.processIdentity.length > 256))) {
         throw new Error("Private path mutation claim runtime is invalid.");
     }
-    if (!Number.isSafeInteger(runtime.pid) ||
-        runtime.pid <= 0 ||
-        !PRIVATE_MUTATION_CLAIM_OWNER_ID_PATTERN.test(runtime.ownerId) ||
-        !Number.isSafeInteger(runtime.processStartedAtMs) ||
-        runtime.processStartedAtMs <= 0 ||
-        (runtime.processIdentity !== undefined &&
-            (runtime.processIdentity.length === 0 || runtime.processIdentity.length > 256))) {
-        throw new Error("Private path mutation claim runtime is invalid.");
-    }
     const ownerContents = `${JSON.stringify({
         ownerId: runtime.ownerId,
         pid: runtime.pid,
@@ -2128,17 +2183,19 @@ async function captureOwnerOnlyPrivateClaimAncestor(directoryPath, platform) {
     if (currentUserId === undefined || !Number.isSafeInteger(currentUserId) || currentUserId < 0) {
         throw new Error("Could not resolve the current POSIX user for private mutation claims.");
     }
+    const directory = await captureDirectoryIdentity(directoryPath);
     const stats = await fs.lstat(directoryPath, { bigint: true });
     if (!stats.isDirectory()) {
         throw new Error("Private mutation claim ancestry contains a non-directory entry.");
     }
     if (stats.uid !== BigInt(currentUserId) ||
         (stats.mode & 18n) !== 0n ||
-        (await darwinDirectoryHasExtendedAcl(directoryPath))) {
+        (await readDarwinDirectoryAcl(directoryPath)) === "unsafe") {
         return null;
     }
+    await directory.assertIdentityAt();
     return {
-        directory: await captureDirectoryIdentity(directoryPath),
+        directory,
         mutationRoot: (stats.mode & 512n) !== 0n,
     };
 }