@openclaw/whatsapp 2026.10.5-beta.4 → 2026.10.6

package/dist/.setup/audio-preflight.runtime-DOv4YzLh.mjs

@@ -0,0 +1 @@
+export { transcribeFirstAudio } from "openclaw/plugin-sdk/media-runtime";

package/dist/.setup/{channel-DcHw3Up2.mjs → channel-D-6ZIq4y.mjs}

@@ -6,7 +6,7 @@ import { i as sendTypingWhatsApp, n as sendPollWhatsApp, o as normalizeWhatsAppO
 import { i as getWhatsAppRuntime } from "./runtime-BLlToOi6.mjs";
 import { c as toWhatsappJid } from "./targets-runtime-D5ryyPxh.mjs";
 import { c as whatsappApprovalAuth, o as lookupInboundMessageMetaForTarget, s as getWhatsAppApprovalApprovers, t as resolveWhatsAppGroupSessionKey } from "./group-session-key-BbTPosdy.mjs";
-import { a as loadWhatsAppChannelRuntime, t as createWhatsAppPluginBase } from "./shared-SqcOkt51.mjs";
+import { a as loadWhatsAppChannelRuntime, t as createWhatsAppPluginBase } from "./shared-hKs0keEG.mjs";
 import { t as whatsappCommandPolicy } from "./command-policy-BIOSHySD.mjs";
 import { d as readWebAuthExistsForDecision, n as WHATSAPP_AUTH_UNSTABLE_CODE } from "./auth-store-DOBi5BPe.mjs";
 import { createActionGate } from "openclaw/plugin-sdk/channel-actions";

package/dist/.setup/{channel.runtime-DTj-wkEP.mjs → channel.runtime-B6_rU38G.mjs}

@@ -1,9 +1,9 @@
 import { startWebLoginWithQr, waitForWebLogin } from "../login-qr-runtime.js";
 import { b as webAuthExists, c as logoutWeb, d as readWebAuthExistsForDecision, f as readWebAuthSnapshot, h as readWebSelfId, m as readWebAuthState, o as getWebAuthAgeMs, p as readWebAuthSnapshotBestEffort, s as logWebSelfId, u as readWebAuthExistsBestEffort } from "./auth-store-DOBi5BPe.mjs";
 import { t as getActiveWebListener } from "./active-listener-CDjoX9QR.mjs";
-import { t as monitorWebChannel } from "./monitor-CmXEQad9.mjs";
+import { t as monitorWebChannel } from "./monitor-DVzumwCI.mjs";
 import { t as loginWeb } from "./login-DUx5JYuW.mjs";
-import { whatsappSetupWizard as whatsappSetupWizard$1 } from "./setup-surface-C_flQyHy.mjs";
+import { whatsappSetupWizard as whatsappSetupWizard$1 } from "./setup-surface-DQSBET5t.mjs";
 //#region extensions/whatsapp/src/channel.runtime.ts
 const whatsappSetupWizard = { ...whatsappSetupWizard$1 };
 //#endregion

package/dist/.setup/{channel.setup-BJWEyQlF.mjs → channel.setup-DPwmOf7N.mjs}

@@ -1,4 +1,4 @@
-import { t as createWhatsAppPluginBase } from "./shared-SqcOkt51.mjs";
+import { t as createWhatsAppPluginBase } from "./shared-hKs0keEG.mjs";
 //#region extensions/whatsapp/src/channel.setup.ts
 const whatsappSetupPlugin = createWhatsAppPluginBase();
 //#endregion

package/dist/.setup/legacy-session-surface-api-BwP_Pgmu.mjs

@@ -0,0 +1 @@
+export { whatsappLegacySessionSurface } from "../legacy-session-surface-api.js";

package/dist/.setup/{monitor-CmXEQad9.mjs → monitor-DVzumwCI.mjs}

@@ -28,7 +28,7 @@ import { buildChannelInboundEventContext, createChannelPartialDeliveryError, fil
 import { getAgentScopedMediaLocalRoots } from "openclaw/plugin-sdk/media-runtime";
 import { isReasoningReplyPayload, resolveSendableOutboundReplyParts, resolveTextChunksWithFallback, sendMediaWithLeadingCaption } from "openclaw/plugin-sdk/reply-payload";
 import { normalizeE164, normalizeE164 as normalizeE164$1, normalizeE164 as normalizeE164$2, truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
-import { DisconnectReason, downloadMediaMessage, isHostedLidUser, isHostedPnUser, isJidGroup, isJidGroup as isJidGroup$1, jidDecode, jidEncode, jidNormalizedUser, normalizeMessageContent as normalizeMessageContent$1 } from "baileys";
+import { DisconnectReason, WAMessageStubType, downloadMediaMessage, generateMessageIDV2, isHostedLidUser, isHostedPnUser, isJidGroup, isJidGroup as isJidGroup$1, jidDecode, jidEncode, jidNormalizedUser, normalizeMessageContent as normalizeMessageContent$1 } from "baileys";
 import { pruneMapToMaxSize } from "openclaw/plugin-sdk/collection-runtime";
 import { DEFAULT_MAIN_KEY, buildAgentMainSessionKey, buildAgentSessionKey, buildGroupHistoryKey, deriveLastRoutePolicy, resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
 import { asDateTimestampMs, parseStrictFiniteNumber, resolveExpiresAtMsFromDurationMs, resolvePromptHistoryLimit } from "openclaw/plugin-sdk/number-runtime";
@@ -723,13 +723,16 @@ function createWhatsAppInboundMessageDebouncer(options) {
 }
 //#endregion
 //#region extensions/whatsapp/src/inbound/media.ts
+const NON_MEDIA_URL_HOSTS = /* @__PURE__ */ new Set(["a.whatsapp.net", "web.whatsapp.net"]);
 async function downloadInboundMedia(msg, sock, maxBytes = 52428800, normalizedMessage) {
 	const message = normalizedMessage ?? normalizeMessageContent$1(msg.message);
 	if (!message) return;
 	const mimetype = resolveInboundMediaMimetype(message);
 	const fileName = message.documentMessage?.fileName ?? void 0;
-	if (!message.imageMessage && !message.videoMessage && !message.ptvMessage && !message.documentMessage && !message.audioMessage && !message.stickerMessage) return;
-	const stream = await downloadMediaMessage(msg, "stream", {}, {
+	const media = message.imageMessage ?? message.videoMessage ?? message.ptvMessage ?? message.documentMessage ?? message.audioMessage ?? message.stickerMessage;
+	if (!media) return;
+	const urlHost = media.url ? URL.parse(media.url)?.hostname : void 0;
+	const stream = await downloadMediaMessage(msg, "stream", urlHost && NON_MEDIA_URL_HOSTS.has(urlHost) ? { host: sock.getMediaHost() } : {}, {
 		reuploadRequest: sock.updateMediaMessage,
 		logger: sock.logger
 	});
@@ -1384,6 +1387,7 @@ function createWhatsAppMessageDeliveryCoordinator(options) {
 	const handleMessagesUpsert = async (upsert) => {
 		if (upsert.type !== "notify" && upsert.type !== "append") return;
 		for (const msg of upsert.messages ?? []) {
+			if (!msg.message && msg.messageStubType === WAMessageStubType.CIPHERTEXT) continue;
 			rememberBaileysMessage(msg.key?.remoteJid, msg.key?.id, msg.message);
 			const receiveOrder = nextReceiveOrder++;
 			let approvalReactionResolved = false;
@@ -1633,12 +1637,16 @@ async function createWhatsAppAttachedSocketSession(options) {
 		await assertCanSendToJid(jid, currentSock, { rememberReady: true });
 	};
 	const sendTrackedMessage = async (jid, content, sendOptions) => {
+		const trackedOptions = {
+			...sendOptions,
+			messageId: sendOptions?.messageId || generateMessageIDV2(getCurrentSock()?.user?.id)
+		};
 		let lastError = /* @__PURE__ */ new Error(RECONNECT_IN_PROGRESS_ERROR);
 		for (let attempt = 1;; attempt += 1) {
 			const currentSock = getCurrentSock();
 			if (currentSock) try {
 				await assertCanSendToJid(jid, currentSock, { useVerifiedReady: true });
-				const result = await currentSocketOperations(currentSock).sendMessage(jid, content, sendOptions);
+				const result = await currentSocketOperations(currentSock).sendMessage(jid, content, trackedOptions);
 				rememberOutboundMessage(jid, result);
 				return result;
 			} catch (error) {
@@ -2149,7 +2157,7 @@ function hasWhatsAppAudioBody(msg) {
 	return (msg.payload.media?.kind === "audio" || msg.payload.media?.type?.startsWith("audio/") === true) && !msg.payload.body.trim();
 }
 async function transcribeWhatsAppAudioMessage(cfg, msg, accountId) {
-	const { transcribeFirstAudio } = await import("./audio-preflight.runtime-Dg8oZgre.mjs");
+	const { transcribeFirstAudio } = await import("./audio-preflight.runtime-DOv4YzLh.mjs");
 	const media = msg.payload.media;
 	const conversationId = msg.admission.conversation.id;
 	return await transcribeFirstAudio({
@@ -3950,7 +3958,7 @@ function isRetryableAuthUnstableError(error) {
 const DEFAULT_TRANSPORT_TIMEOUT_MS = 3e5;
 const WHATSAPP_RECONNECT_CATCH_UP_MAX_MS = 12e5;
 async function monitorWebChannel(verbose, listenerFactory = attachWebInboxToSocket, keepAlive = true, replyResolver, runtime = defaultRuntime, abortSignal, tuning = {}) {
-	const activeReplyResolver = replyResolver ?? (await import("./reply-resolver.runtime-Ded8D58Y.mjs")).getReplyFromConfig;
+	const activeReplyResolver = replyResolver ?? (await import("./reply-resolver.runtime-Byxo9w3l.mjs")).getReplyFromConfig;
 	const runId = newConnectionId();
 	const replyLogger = getChildLogger$1({
 		module: "web-auto-reply",

package/dist/.setup/reply-resolver.runtime-Byxo9w3l.mjs

@@ -0,0 +1 @@
+export { getReplyFromConfig } from "openclaw/plugin-sdk/reply-runtime";

package/dist/.setup/{setup-finalize-DSiP_-wa.mjs → setup-finalize-iBHhDu1n.mjs}

@@ -2,7 +2,7 @@ import { a as resolveWhatsAppAccount, o as resolveWhatsAppAuthDir } from "./acco
 import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-CB5SOWjc.mjs";
 import { n as hasWebCredsSync } from "./creds-files-B8WcOAmE.mjs";
 import { a as normalizeWhatsAppAllowFromEntries, o as normalizeWhatsAppAllowFromEntry } from "./normalize-target-D67Kc3g6.mjs";
-import { n as whatsappSetupAdapter } from "./shared-SqcOkt51.mjs";
+import { n as whatsappSetupAdapter } from "./shared-hKs0keEG.mjs";
 import { formatCliCommand, formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 //#region extensions/whatsapp/src/setup-finalize.ts

package/dist/.setup/setup-plugin-api-CcvTFSGj.mjs

@@ -0,0 +1,2 @@
+export { t as whatsappSetupPlugin } from "./channel.setup-DPwmOf7N.mjs";
+import "../setup-plugin-api.js";

package/dist/.setup/{setup-surface-C_flQyHy.mjs → setup-surface-DQSBET5t.mjs}

@@ -36,7 +36,7 @@ const whatsappSetupWizard = {
 	},
 	resolveShouldPromptAccountIds: ({ shouldPromptAccountIds }) => shouldPromptAccountIds,
 	credentials: [],
-	finalize: async (params) => await (await import("./setup-finalize-DSiP_-wa.mjs")).finalizeWhatsAppSetup(params),
+	finalize: async (params) => await (await import("./setup-finalize-iBHhDu1n.mjs")).finalizeWhatsAppSetup(params),
 	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false),
 	onAccountRecorded: (accountId, options) => {
 		options?.onAccountId?.(channel, accountId);

package/dist/.setup/{shared-SqcOkt51.mjs → shared-hKs0keEG.mjs}

@@ -27,7 +27,7 @@ async function readWhatsAppAccountLinkState(authDir) {
 }
 const loadWhatsAppChannelRuntime = createLazyRuntimeModule(async () => {
 	await loadWhatsAppAuthStore();
-	return await import("./channel.runtime-DTj-wkEP.mjs");
+	return await import("./channel.runtime-B6_rU38G.mjs");
 });
 //#endregion
 //#region extensions/whatsapp/src/group-policy.ts
@@ -132,7 +132,7 @@ const whatsappResolveDmPolicy = createScopedDmSecurityResolver({
 });
 const whatsappSetupWizardProxy = createDelegatedSetupWizardProxy({
 	channel: WHATSAPP_CHANNEL,
-	loadWizard: async () => (await import("./setup-surface-C_flQyHy.mjs")).whatsappSetupWizard,
+	loadWizard: async () => (await import("./setup-surface-DQSBET5t.mjs")).whatsappSetupWizard,
 	status: {
 		configuredLabel: "linked",
 		unconfiguredLabel: "not linked",

package/dist/action-runtime-api.js

@@ -1,2 +1 @@
-import { t as handleWhatsAppAction } from "./.setup/action-runtime-DUSkWTiZ.mjs";
-export { handleWhatsAppAction };
+export { t as handleWhatsAppAction } from "./.setup/action-runtime-DUSkWTiZ.mjs";

package/dist/action-runtime.runtime.js

@@ -1,2 +1 @@
-import { t as handleWhatsAppAction } from "./.setup/action-runtime-DUSkWTiZ.mjs";
-export { handleWhatsAppAction };
+export { t as handleWhatsAppAction } from "./.setup/action-runtime-DUSkWTiZ.mjs";

package/dist/api.js

@@ -3,10 +3,10 @@ import { r as resolveDefaultWhatsAppAccountId, t as listAccountIds } from "./.se
 import { a as normalizeWhatsAppAllowFromEntries, c as normalizeWhatsAppTarget, i as looksLikeWhatsAppTargetId, r as isWhatsAppUserTarget, s as normalizeWhatsAppMessagingTarget, t as isWhatsAppGroupJid } from "./.setup/normalize-target-D67Kc3g6.mjs";
 import { t as resolveWhatsAppOutboundTarget } from "./.setup/resolve-outbound-target-qikGL4r0.mjs";
 import { c as toWhatsappJid, i as markdownToWhatsApp, l as toWhatsappJidWithLid, n as isSelfChatMode, r as jidToE164, s as resolveJidToE164, t as assertWebChannel } from "./.setup/targets-runtime-D5ryyPxh.mjs";
-import { n as WHATSAPP_LEGACY_OUTBOUND_SEND_DEP_KEYS, t as whatsappPlugin } from "./.setup/channel-DcHw3Up2.mjs";
-import { i as resolveWhatsAppGroupToolPolicy, r as resolveWhatsAppGroupRequireMention } from "./.setup/shared-SqcOkt51.mjs";
+import { n as WHATSAPP_LEGACY_OUTBOUND_SEND_DEP_KEYS, t as whatsappPlugin } from "./.setup/channel-D-6ZIq4y.mjs";
+import { i as resolveWhatsAppGroupToolPolicy, r as resolveWhatsAppGroupRequireMention } from "./.setup/shared-hKs0keEG.mjs";
 import { t as whatsappCommandPolicy } from "./.setup/command-policy-BIOSHySD.mjs";
-import { t as whatsappSetupPlugin } from "./.setup/channel.setup-BJWEyQlF.mjs";
+import { t as whatsappSetupPlugin } from "./.setup/channel.setup-DPwmOf7N.mjs";
 import { t as DEFAULT_WEB_MEDIA_BYTES } from "./.setup/constants-C7m81BNe.mjs";
 import { d as DEFAULT_WHATSAPP_SOCKET_TIMING, f as createWhatsAppSocketOperationTimeoutAdapter, i as waitForWaConnection, r as createWaSocket } from "./.setup/socket-close-C9OU9mVN.mjs";
 import { n as getStatusCode, t as formatError } from "./.setup/session-errors-B8UcAnZN.mjs";

package/dist/channel-config-api.js

@@ -1,2 +1 @@
-import { t as WhatsAppChannelConfigSchema } from "./.setup/config-schema-BYA6e_Ii.mjs";
-export { WhatsAppChannelConfigSchema };
+export { t as WhatsAppChannelConfigSchema } from "./.setup/config-schema-BYA6e_Ii.mjs";

package/dist/channel-plugin-api.js

@@ -1,2 +1 @@
-import { t as whatsappPlugin } from "./.setup/channel-DcHw3Up2.mjs";
-export { whatsappPlugin };
+export { t as whatsappPlugin } from "./.setup/channel-D-6ZIq4y.mjs";

package/dist/login-qr-api.js

@@ -1,2 +1 @@
-import { startWebLoginWithQr, waitForWebLogin } from "./login-qr-runtime.js";
-export { startWebLoginWithQr, waitForWebLogin };
+export { startWebLoginWithQr, waitForWebLogin } from "./login-qr-runtime.js";

package/dist/runtime-api.js

@@ -10,7 +10,7 @@ import { n as resolveWebAccountId, t as getActiveWebListener } from "./.setup/ac
 import { i as waitForWaConnection, r as createWaSocket, s as newConnectionId } from "./.setup/socket-close-C9OU9mVN.mjs";
 import { n as getStatusCode, t as formatError } from "./.setup/session-errors-B8UcAnZN.mjs";
 import { p as extractText, s as extractContactContext, u as extractLocationData } from "./.setup/send-api-COzRvqXx.mjs";
-import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./.setup/monitor-CmXEQad9.mjs";
+import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./.setup/monitor-DVzumwCI.mjs";
 import { t as loginWeb } from "./.setup/login-DUx5JYuW.mjs";
 import { HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, SILENT_REPLY_TOKEN, stripHeartbeatToken } from "openclaw/plugin-sdk/reply-runtime";
 export { DEFAULT_WEB_MEDIA_BYTES, HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, LocalMediaAccessError, SILENT_REPLY_TOKEN, WA_WEB_AUTH_DIR, WHATSAPP_AUTH_UNSTABLE_CODE, WhatsAppAuthUnstableError, createWaSocket, createWhatsAppLoginTool, extractContactContext, extractLocationData, extractText, formatError, formatWhatsAppWebAuthStatusState, getActiveWebListener, getDefaultLocalRoots, getStatusCode, getWebAuthAgeMs, handleWhatsAppAction, hasWebCredsSync, loadWebMedia, loadWebMediaRaw, logWebSelfId, loginWeb, logoutWeb, monitorWebChannel, monitorWebInbox, newConnectionId, optimizeImageToJpeg, optimizeImageToPng, pickWebChannel, readWebCredsJsonRawSync as readCredsJsonRaw, readWebAuthExistsBestEffort, readWebAuthExistsForDecision, readWebAuthSnapshot, readWebAuthSnapshotBestEffort, readWebAuthState, readWebSelfId, readWebSelfIdentity, readWebSelfIdentityForDecision, resetWebInboundDedupe, resolveDefaultWebAuthDir, resolveWebAccountId, resolveWebCredsBackupPath, resolveWebCredsPath, restoreCredsFromBackupIfNeeded, sendMessageWhatsApp, sendPollWhatsApp, sendReactionWhatsApp, sendTypingWhatsApp, setWhatsAppRuntime, startWebLoginWithQr, stripHeartbeatToken, waitForCredsSaveQueue, waitForCredsSaveQueueWithTimeout, waitForWaConnection, waitForWebLogin, webAuthExists, whatsAppActionRuntime, writeCredsJsonAtomically };

package/dist/runtime-setter-api.js

@@ -1,2 +1 @@
-import { a as setWhatsAppRuntime } from "./.setup/runtime-BLlToOi6.mjs";
-export { setWhatsAppRuntime };
+export { a as setWhatsAppRuntime } from "./.setup/runtime-BLlToOi6.mjs";

package/dist/security-contract-api.js

@@ -1,2 +1 @@
-import { n as unsupportedSecretRefSurfacePatterns, t as collectUnsupportedSecretRefConfigCandidates } from "./.setup/security-contract-nAzD945y.mjs";
-export { collectUnsupportedSecretRefConfigCandidates, unsupportedSecretRefSurfacePatterns };
+export { t as collectUnsupportedSecretRefConfigCandidates, n as unsupportedSecretRefSurfacePatterns } from "./.setup/security-contract-nAzD945y.mjs";

package/dist/setup-entry.js

@@ -5,11 +5,11 @@ var setup_entry_default = defineBundledChannelSetupEntry({
 	importMetaUrl: import.meta.url,
 	features: { legacySessionSurfaces: true },
 	plugin: {
-		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-8WdNCjRW.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/setup-plugin-api-CcvTFSGj.mjs", import.meta.url).href),
 		exportName: "whatsappSetupPlugin"
 	},
 	legacySessionSurface: {
-		specifier: fileURLToPath(new URL(".setup/legacy-session-surface-api-B2szjq4r.mjs", import.meta.url).href),
+		specifier: fileURLToPath(new URL(".setup/legacy-session-surface-api-BwP_Pgmu.mjs", import.meta.url).href),
 		exportName: "whatsappLegacySessionSurface"
 	}
 });

package/dist/setup-plugin-api.js

@@ -1,2 +1 @@
-import { t as whatsappSetupPlugin } from "./.setup/channel.setup-BJWEyQlF.mjs";
-export { whatsappSetupPlugin };
+export { t as whatsappSetupPlugin } from "./.setup/channel.setup-DPwmOf7N.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/whatsapp",
-  "version": "2026.10.5-beta.4",
+  "version": "2026.10.6",
   "description": "OpenClaw WhatsApp channel plugin for WhatsApp Web chats.",
   "repository": {
     "type": "git",
@@ -13,7 +13,7 @@
     "typebox": "1.3.34"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.10.5-beta.4"
+    "openclaw": ">=2026.10.6"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -65,11 +65,11 @@
       "minHostVersion": ">=2026.4.25"
     },
     "compat": {
-      "pluginApi": ">=2026.10.5-beta.4"
+      "pluginApi": ">=2026.10.6"
     },
     "build": {
       "bundledDist": false,
-      "openclawVersion": "2026.10.5-beta.4"
+      "openclawVersion": "2026.10.6"
     },
     "release": {
       "publishToClawHub": true,

package/dist/.setup/audio-preflight.runtime-Dg8oZgre.mjs

@@ -1,2 +0,0 @@
-import { transcribeFirstAudio } from "openclaw/plugin-sdk/media-runtime";
-export { transcribeFirstAudio };

package/dist/.setup/legacy-session-surface-api-B2szjq4r.mjs

@@ -1,2 +0,0 @@
-import { whatsappLegacySessionSurface } from "../legacy-session-surface-api.js";
-export { whatsappLegacySessionSurface };

package/dist/.setup/reply-resolver.runtime-Ded8D58Y.mjs

@@ -1,2 +0,0 @@
-import { getReplyFromConfig } from "openclaw/plugin-sdk/reply-runtime";
-export { getReplyFromConfig };

package/dist/.setup/setup-plugin-api-8WdNCjRW.mjs

@@ -1,3 +0,0 @@
-import { t as whatsappSetupPlugin } from "./channel.setup-BJWEyQlF.mjs";
-import "../setup-plugin-api.js";
-export { whatsappSetupPlugin };