@openclaw/whatsapp 2026.5.28 → 2026.5.31-beta.1

package/dist/runtime-api.js

@@ -1,16 +1,16 @@
 import { o as resolveWebCredsBackupPath, r as hasWebCredsSync, s as resolveWebCredsPath } from "./creds-files-B1kSWtBg.js";
-import { n as whatsAppActionRuntime, t as handleWhatsAppAction } from "./action-runtime-BdhkGtaP.js";
-import { i as sendTypingWhatsApp, n as sendPollWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./send-C4LG-Cl6.js";
+import { n as whatsAppActionRuntime, t as handleWhatsAppAction } from "./action-runtime-Cyp5GNIT.js";
+import { i as sendTypingWhatsApp, n as sendPollWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./send-DSlVXKL_.js";
 import { r as setWhatsAppRuntime } from "./runtime-BfAdAEYT.js";
 import { n as getStatusCode, t as formatError } from "./session-errors-CbsoQqoy.js";
 import { startWebLoginWithQr, waitForWebLogin } from "./login-qr-runtime.js";
 import { t as createWhatsAppLoginTool } from "./agent-tools-login-BX7eHgDm.js";
-import { C as waitForCredsSaveQueue, T as writeCredsJsonAtomically, _ as readWebSelfIdentity, a as formatWhatsAppWebAuthStatusState, b as restoreCredsFromBackupIfNeeded, c as logoutWeb, d as readWebAuthExistsBestEffort, f as readWebAuthExistsForDecision, g as readWebSelfId, h as readWebAuthState, l as pickWebChannel, m as readWebAuthSnapshotBestEffort, n as WHATSAPP_AUTH_UNSTABLE_CODE, o as getWebAuthAgeMs, p as readWebAuthSnapshot, r as WhatsAppAuthUnstableError, s as logWebSelfId, t as WA_WEB_AUTH_DIR, u as readCredsJsonRaw, v as readWebSelfIdentityForDecision, w as waitForCredsSaveQueueWithTimeout, x as webAuthExists, y as resolveDefaultWebAuthDir } from "./auth-store-BrKb0mwT.js";
+import { C as waitForCredsSaveQueue, T as writeCredsJsonAtomically, _ as readWebSelfIdentity, a as formatWhatsAppWebAuthStatusState, b as restoreCredsFromBackupIfNeeded, c as logoutWeb, d as readWebAuthExistsBestEffort, f as readWebAuthExistsForDecision, g as readWebSelfId, h as readWebAuthState, l as pickWebChannel, m as readWebAuthSnapshotBestEffort, n as WHATSAPP_AUTH_UNSTABLE_CODE, o as getWebAuthAgeMs, p as readWebAuthSnapshot, r as WhatsAppAuthUnstableError, s as logWebSelfId, t as WA_WEB_AUTH_DIR, u as readCredsJsonRaw, v as readWebSelfIdentityForDecision, w as waitForCredsSaveQueueWithTimeout, x as webAuthExists, y as resolveDefaultWebAuthDir } from "./auth-store-CZ22aNcV.js";
 import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-HU41RHGI.js";
-import { d as extractLocationData, f as extractMediaPlaceholder, l as extractContactContext, m as extractText } from "./send-api-C66vkRl9.js";
-import { n as newConnectionId, r as waitForWaConnection, t as createWaSocket } from "./session-D8UW2Vbn.js";
+import { d as extractLocationData, f as extractMediaPlaceholder, l as extractContactContext, m as extractText } from "./send-api-Bjn-h80j.js";
+import { n as newConnectionId, r as waitForWaConnection, t as createWaSocket } from "./session-DyGWNClj.js";
 import { n as resolveWebAccountId, t as getActiveWebListener } from "./active-listener-CFwkn3ho.js";
-import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-Ccph7Y8M.js";
-import { t as loginWeb } from "./login-CE4UYnyO.js";
+import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-BVRq04Dt.js";
+import { t as loginWeb } from "./login-2fuBM7Je.js";
 import { HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, SILENT_REPLY_TOKEN, stripHeartbeatToken } from "openclaw/plugin-sdk/reply-runtime";
 export { DEFAULT_WEB_MEDIA_BYTES, HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, LocalMediaAccessError, SILENT_REPLY_TOKEN, WA_WEB_AUTH_DIR, WHATSAPP_AUTH_UNSTABLE_CODE, WhatsAppAuthUnstableError, createWaSocket, createWhatsAppLoginTool, extractContactContext, extractLocationData, extractMediaPlaceholder, extractText, formatError, formatWhatsAppWebAuthStatusState, getActiveWebListener, getDefaultLocalRoots, getStatusCode, getWebAuthAgeMs, handleWhatsAppAction, hasWebCredsSync, loadWebMedia, loadWebMediaRaw, logWebSelfId, loginWeb, logoutWeb, monitorWebChannel, monitorWebInbox, newConnectionId, optimizeImageToJpeg, optimizeImageToPng, pickWebChannel, readCredsJsonRaw, readWebAuthExistsBestEffort, readWebAuthExistsForDecision, readWebAuthSnapshot, readWebAuthSnapshotBestEffort, readWebAuthState, readWebSelfId, readWebSelfIdentity, readWebSelfIdentityForDecision, resetWebInboundDedupe, resolveDefaultWebAuthDir, resolveWebAccountId, resolveWebCredsBackupPath, resolveWebCredsPath, restoreCredsFromBackupIfNeeded, sendMessageWhatsApp, sendPollWhatsApp, sendReactionWhatsApp, sendTypingWhatsApp, setWhatsAppRuntime, startWebLoginWithQr, stripHeartbeatToken, waitForCredsSaveQueue, waitForCredsSaveQueueWithTimeout, waitForWaConnection, waitForWebLogin, webAuthExists, whatsAppActionRuntime, writeCredsJsonAtomically };

package/dist/{send-C4LG-Cl6.js → send-DSlVXKL_.js}

@@ -1,6 +1,6 @@
 import { t as resolveMergedWhatsAppAccountConfig } from "./account-config-6PTOSfaI.js";
 import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-CB5SOWjc.js";
-import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-DgViSyJx.js";
 import { c as normalizeWhatsAppTarget, n as isWhatsAppNewsletterJid } from "./normalize-target-bVWjgftN.js";
 import "./normalize-Bxwqo-bW.js";
 import { t as getOptionalWhatsAppRuntime } from "./runtime-BfAdAEYT.js";
@@ -282,7 +282,15 @@ function resolveWhatsAppDefaultDocumentFileName(mimetype) {
 }
 function resolveWhatsAppDocumentFileName(params) {
 	const fallbackName = resolveWhatsAppDefaultDocumentFileName(params.mimetype);
-	return params.fileName?.replace(/[\x00-\x1f\x7f]/g, "").trim() || fallbackName;
+	return stripAsciiControlCharacters(params.fileName ?? "").trim() || fallbackName;
+}
+function stripAsciiControlCharacters(value) {
+	let stripped = "";
+	for (const char of value) {
+		const code = char.charCodeAt(0);
+		if (code > 31 && code !== 127) stripped += char;
+	}
+	return stripped;
 }
 //#endregion
 //#region extensions/whatsapp/src/outbound-media-contract.ts
@@ -472,6 +480,29 @@ const outboundLog = createSubsystemLogger("gateway/channels/whatsapp").child("ou
 function supportsForcedDocumentDelivery(kind) {
 	return kind === "image" || kind === "video";
 }
+function buildWhatsAppMediaSendState(params) {
+	const { media, caption } = params;
+	const forceDocumentDelivery = Boolean(params.forceDocument && supportsForcedDocumentDelivery(media.kind));
+	let text = caption ?? "";
+	let documentFileName = media.kind === "document" ? media.fileName : void 0;
+	let visibleTextAfterVoice;
+	if (media.kind === "audio" && caption) {
+		visibleTextAfterVoice = caption;
+		text = "";
+	}
+	if (forceDocumentDelivery) documentFileName ??= resolveWhatsAppDocumentFileName({
+		fileName: media.fileName,
+		mimetype: media.mimetype
+	});
+	return {
+		mediaBuffer: media.buffer,
+		mediaType: media.mimetype,
+		text,
+		forceDocumentDelivery,
+		...documentFileName ? { documentFileName } : {},
+		...visibleTextAfterVoice ? { visibleTextAfterVoice } : {}
+	};
+}
 function resolveOutboundWhatsAppAccountId(params) {
 	const explicitAccountId = params.accountId?.trim();
 	if (explicitAccountId) return explicitAccountId;
@@ -535,46 +566,27 @@ async function sendMessageWhatsApp(to, body, options) {
 		let documentFileName;
 		let visibleTextAfterVoice;
 		let forceDocumentDelivery = false;
-		if (mediaPayload) {
-			const media = await prepareWhatsAppOutboundMedia(mediaPayload, primaryMediaUrl);
-			const caption = text || void 0;
-			mediaBuffer = media.buffer;
-			mediaType = media.mimetype;
-			forceDocumentDelivery = Boolean(options.forceDocument && supportsForcedDocumentDelivery(media.kind));
-			if (media.kind === "audio" && caption) {
-				visibleTextAfterVoice = caption;
-				text = "";
-			} else if (media.kind === "document") {
-				text = caption ?? "";
-				documentFileName = media.fileName;
-			} else text = caption ?? "";
-			if (forceDocumentDelivery) documentFileName ??= resolveWhatsAppDocumentFileName({
-				fileName: media.fileName,
-				mimetype: media.mimetype
-			});
-		} else if (primaryMediaUrl) {
-			const media = await prepareWhatsAppOutboundMedia(await loadOutboundMediaFromUrl(primaryMediaUrl, {
-				maxBytes: resolveWhatsAppMediaMaxBytes(account),
-				optimizeImages: options.forceDocument ? false : void 0,
-				mediaAccess: options.mediaAccess,
-				mediaLocalRoots: options.mediaLocalRoots,
-				mediaReadFile: options.mediaReadFile
-			}), primaryMediaUrl);
-			const caption = text || void 0;
-			mediaBuffer = media.buffer;
-			mediaType = media.mimetype;
-			forceDocumentDelivery = Boolean(options.forceDocument && supportsForcedDocumentDelivery(media.kind));
-			if (media.kind === "audio" && caption) {
-				visibleTextAfterVoice = caption;
-				text = "";
-			} else if (media.kind === "document") {
-				text = caption ?? "";
-				documentFileName = media.fileName;
-			} else text = caption ?? "";
-			if (forceDocumentDelivery) documentFileName ??= resolveWhatsAppDocumentFileName({
-				fileName: media.fileName,
-				mimetype: media.mimetype
+		let media;
+		if (mediaPayload) media = await prepareWhatsAppOutboundMedia(mediaPayload, primaryMediaUrl);
+		else if (primaryMediaUrl) media = await prepareWhatsAppOutboundMedia(await loadOutboundMediaFromUrl(primaryMediaUrl, {
+			maxBytes: resolveWhatsAppMediaMaxBytes(account),
+			optimizeImages: options.forceDocument ? false : void 0,
+			mediaAccess: options.mediaAccess,
+			mediaLocalRoots: options.mediaLocalRoots,
+			mediaReadFile: options.mediaReadFile
+		}), primaryMediaUrl);
+		if (media) {
+			const mediaSendState = buildWhatsAppMediaSendState({
+				media,
+				caption: text || void 0,
+				forceDocument: options.forceDocument
 			});
+			mediaBuffer = mediaSendState.mediaBuffer;
+			mediaType = mediaSendState.mediaType;
+			documentFileName = mediaSendState.documentFileName;
+			visibleTextAfterVoice = mediaSendState.visibleTextAfterVoice;
+			forceDocumentDelivery = mediaSendState.forceDocumentDelivery;
+			text = mediaSendState.text;
 		}
 		outboundLog.info(`Sending message -> ${redactedJid}${hasMedia ? " (media)" : ""}`);
 		logger.info({

package/dist/{send-api-C66vkRl9.js → send-api-Bjn-h80j.js}

@@ -1,5 +1,5 @@
 import { n as isWhatsAppNewsletterJid } from "./normalize-target-bVWjgftN.js";
-import { u as resolveWhatsAppDocumentFileName } from "./send-C4LG-Cl6.js";
+import { u as resolveWhatsAppDocumentFileName } from "./send-DSlVXKL_.js";
 import "./normalize-Bxwqo-bW.js";
 import { m as toWhatsappJidWithLid, p as toWhatsappJid, u as jidToE164 } from "./text-runtime-Dk37KYHj.js";
 import { t as buildQuotedMessageOptions } from "./quoted-message-CveINB35.js";
@@ -645,7 +645,8 @@ function createWebSendApi(params) {
 		mentionedJids: []
 	};
 	return {
-		sendMessage: async (to, text, mediaBuffer, mediaType, sendOptions) => {
+		sendMessage: async (to, text, mediaBuffer, mediaTypeInput, sendOptions) => {
+			let mediaType = mediaTypeInput;
 			const jid = resolveOutboundJid(to);
 			let payload;
 			if (mediaBuffer) mediaType ??= "application/octet-stream";

package/dist/{session-D8UW2Vbn.js → session-DyGWNClj.js}

@@ -1,6 +1,6 @@
 import { o as resolveWebCredsBackupPath, s as resolveWebCredsPath, t as assertWebCredsPathRegularFileOrMissing } from "./creds-files-B1kSWtBg.js";
 import { n as getStatusCode } from "./session-errors-CbsoQqoy.js";
-import { E as writeWebCredsRawAtomically, S as enqueueCredsSave, T as writeCredsJsonAtomically, b as restoreCredsFromBackupIfNeeded, u as readCredsJsonRaw, w as waitForCredsSaveQueueWithTimeout, y as resolveDefaultWebAuthDir } from "./auth-store-BrKb0mwT.js";
+import { E as writeWebCredsRawAtomically, S as enqueueCredsSave, T as writeCredsJsonAtomically, b as restoreCredsFromBackupIfNeeded, u as readCredsJsonRaw, w as waitForCredsSaveQueueWithTimeout, y as resolveDefaultWebAuthDir } from "./auth-store-CZ22aNcV.js";
 import { a as makeWASocket, i as makeCacheableSignalKeyStore, n as DisconnectReason, r as fetchLatestBaileysVersion, s as useMultiFileAuthState } from "./session.runtime-LZFdq3yb.js";
 import { VERSION, formatCliCommand } from "openclaw/plugin-sdk/cli-runtime";
 import { danger, getChildLogger, success, toPinoLikeLogger } from "openclaw/plugin-sdk/runtime-env";

package/dist/{setup-core-DpfT4K-2.js → setup-core-OvPMaAsx.js}

@@ -1,7 +1,7 @@
 import { r as resolveDefaultWhatsAppAccountId, t as listAccountIds } from "./account-ids-CB5SOWjc.js";
-import { a as resolveWhatsAppAccount, n as hasAnyWhatsAppAuth } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount, n as hasAnyWhatsAppAuth } from "./accounts-DgViSyJx.js";
 import { a as normalizeWhatsAppAllowFromEntries } from "./normalize-target-bVWjgftN.js";
-import { t as WhatsAppChannelConfigSchema } from "./config-schema-CsNDlDpL.js";
+import { t as WhatsAppChannelConfigSchema } from "./config-schema-CROZuhT-.js";
 import { n as whatsappDoctor } from "./doctor-By3SB4lm.js";
 import { t as resolveWhatsAppConfigPath } from "./group-config-path-BGyzT9Lg.js";
 import { t as resolveLegacyGroupSessionKey } from "./group-session-contract-DDnZSsJ1.js";
@@ -99,10 +99,10 @@ async function applyWhatsAppSecurityConfigFixes(params) {
 //#region extensions/whatsapp/src/shared.ts
 const WHATSAPP_CHANNEL = "whatsapp";
 async function loadWhatsAppChannelRuntime() {
-	return await import("./channel.runtime-C228XUjs.js");
+	return await import("./channel.runtime-Q1LZDB5s.js");
 }
 async function loadWhatsAppSetupSurface() {
-	return await import("./setup-surface-DRsmp0ZS.js");
+	return await import("./setup-surface-F-jVrH8u.js");
 }
 const whatsappSetupWizardProxy = createWhatsAppSetupWizardProxy(async () => (await loadWhatsAppSetupSurface()).whatsappSetupWizard);
 const whatsappConfigAdapter = createScopedChannelConfigAdapter({

package/dist/{setup-finalize-CFnxX7la.js → setup-finalize-Dk23pfKc.js}

@@ -1,8 +1,8 @@
 import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-CB5SOWjc.js";
 import { r as hasWebCredsSync } from "./creds-files-B1kSWtBg.js";
-import { a as resolveWhatsAppAccount, o as resolveWhatsAppAuthDir } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount, o as resolveWhatsAppAuthDir } from "./accounts-DgViSyJx.js";
 import { a as normalizeWhatsAppAllowFromEntries, o as normalizeWhatsAppAllowFromEntry } from "./normalize-target-bVWjgftN.js";
-import { t as whatsappSetupAdapter } from "./setup-core-DpfT4K-2.js";
+import { t as whatsappSetupAdapter } from "./setup-core-OvPMaAsx.js";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 import { formatCliCommand, formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 //#region extensions/whatsapp/src/setup-finalize.ts
@@ -280,7 +280,7 @@ async function finalizeWhatsAppSetup(params) {
 		message: linked ? t("wizard.whatsapp.relinkPrompt") : t("wizard.whatsapp.linkNowPrompt"),
 		initialValue: !linked
 	})) try {
-		const { loginWeb } = await import("./login-CE4UYnyO.js").then((n) => n.n);
+		const { loginWeb } = await import("./login-2fuBM7Je.js").then((n) => n.n);
 		await loginWeb(false, void 0, params.runtime, accountId);
 	} catch (error) {
 		params.runtime.error(`WhatsApp login failed: ${String(error)}`);

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as whatsappSetupPlugin } from "./channel.setup-BJQyTUUP.js";
+import { t as whatsappSetupPlugin } from "./channel.setup-DHXOo4h5.js";
 export { whatsappSetupPlugin };

package/dist/{setup-surface-DRsmp0ZS.js → setup-surface-F-jVrH8u.js}

@@ -1,6 +1,6 @@
 import { t as listAccountIds } from "./account-ids-CB5SOWjc.js";
-import { o as resolveWhatsAppAuthDir } from "./accounts-BMGM1RtF.js";
-import { a as formatWhatsAppWebAuthStatusState, h as readWebAuthState } from "./auth-store-BrKb0mwT.js";
+import { o as resolveWhatsAppAuthDir } from "./accounts-DgViSyJx.js";
+import { a as formatWhatsAppWebAuthStatusState, h as readWebAuthState } from "./auth-store-CZ22aNcV.js";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 //#region extensions/whatsapp/src/setup-surface.ts
 const t = createSetupTranslator();
@@ -36,7 +36,7 @@ const whatsappSetupWizard = {
 	},
 	resolveShouldPromptAccountIds: ({ shouldPromptAccountIds }) => shouldPromptAccountIds,
 	credentials: [],
-	finalize: async (params) => await (await import("./setup-finalize-CFnxX7la.js")).finalizeWhatsAppSetup(params),
+	finalize: async (params) => await (await import("./setup-finalize-Dk23pfKc.js")).finalizeWhatsAppSetup(params),
 	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false),
 	onAccountRecorded: (accountId, options) => {
 		options?.onAccountId?.(channel, accountId);

package/node_modules/@audio/decode-aac/LICENSE

@@ -0,0 +1,9 @@
+This work is offered to Krishna (https://github.com/krishnized/license).
+
+---
+
+This package is licensed under the GNU General Public License v2.0 (GPL-2.0),
+as required by the included FAAD2 library.
+
+FAAD2 Copyright (C) 2003-2005 M. Bakker, Nero AG, http://www.nero.com
+Full GPL-2.0 text: https://www.gnu.org/licenses/old-licenses/gpl-2.0.html

package/node_modules/@audio/decode-aac/README.md

@@ -0,0 +1,60 @@
+# @audio/decode-aac
+
+Decode AAC/M4A audio to PCM float samples. FAAD2 compiled to WASM — works in Node.js and browsers, no native dependencies.
+
+## Install
+
+```
+npm i @audio/decode-aac
+```
+
+## Usage
+
+```js
+import decode from '@audio/decode-aac'
+
+// M4A or raw ADTS — auto-detected
+let { channelData, sampleRate } = await decode(uint8array)
+// channelData: Float32Array[] (one per channel)
+// sampleRate: number
+```
+
+### Streaming
+
+```js
+import { decoder } from '@audio/decode-aac'
+
+let dec = await decoder()
+let { channelData, sampleRate } = dec.decode(chunk)
+dec.free()
+```
+
+## API
+
+### `decode(src: Uint8Array | ArrayBuffer): Promise<AudioData>`
+
+Whole-file decode. Auto-detects M4A (MP4 container) vs raw ADTS.
+
+### `decoder(): Promise<AACDecoder>`
+
+Creates a decoder instance for manual control.
+
+- **`dec.decode(data)`** — decode chunk, returns `{ channelData, sampleRate }`
+- **`dec.flush()`** — flush remaining (returns empty for AAC)
+- **`dec.free()`** — release WASM memory
+
+### `AudioData`
+
+```ts
+{ channelData: Float32Array[], sampleRate: number }
+```
+
+## Formats
+
+- M4A / MP4 with AAC audio
+- Raw ADTS streams (.aac)
+- LC, HE-AAC v1/v2 (SBR, PS)
+
+## License
+
+GPL-2.0 (FAAD2) — [krishnized](https://github.com/krishnized/license)

package/node_modules/@audio/decode-aac/decode-aac.d.ts

@@ -0,0 +1,16 @@
+interface AudioData {
+  channelData: Float32Array[];
+  sampleRate: number;
+}
+
+interface AACDecoder {
+  decode(data: Uint8Array): AudioData;
+  flush(): AudioData;
+  free(): void;
+}
+
+/** Whole-file decode — auto-detects M4A vs ADTS */
+export default function decode(src: ArrayBuffer | Uint8Array): Promise<AudioData>;
+
+/** Create streaming decoder instance */
+export function decoder(): Promise<AACDecoder>;