@openclaw/whatsapp 2026.5.30-beta.1 → 2026.5.31-beta.2

package/README.md

@@ -0,0 +1,11 @@
+# OpenClaw WhatsApp
+
+Official OpenClaw channel plugin for WhatsApp Web chats.
+
+Install from OpenClaw:
+
+```bash
+openclaw plugin add @openclaw/whatsapp
+```
+
+Link a WhatsApp account through the plugin's setup flow, then configure which chats OpenClaw agents should monitor and reply to.

package/dist/{access-control-Z0fYaWrx.js → access-control-C53zKYSN.js}

@@ -1,4 +1,4 @@
-import { a as resolveWhatsAppAccount } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount } from "./accounts-DgViSyJx.js";
 import { l as isSelfChatMode, n as normalizeE164 } from "./text-runtime-Dk37KYHj.js";
 import { a as getSelfIdentity, o as getSenderIdentity } from "./identity-xoLLdqEv.js";
 import { defaultRuntime } from "openclaw/plugin-sdk/runtime-env";

package/dist/{accounts-BMGM1RtF.js → accounts-DgViSyJx.js}

@@ -86,6 +86,7 @@ function resolveWhatsAppAccount(params) {
 		allowFrom: merged.allowFrom,
 		groupAllowFrom: merged.groupAllowFrom,
 		groupPolicy: merged.groupPolicy,
+		mentionPatterns: merged.mentionPatterns,
 		historyLimit: merged.historyLimit,
 		textChunkLimit: merged.textChunkLimit,
 		chunkMode: merged.chunkMode,

package/dist/{action-runtime-BbUDQ78g.js → action-runtime-Cyp5GNIT.js}

@@ -1,6 +1,6 @@
-import { a as resolveWhatsAppAccount } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount } from "./accounts-DgViSyJx.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-CcdugbDf.js";
-import { g as resolveWhatsAppReactionLevel, r as sendReactionWhatsApp } from "./send-DjMBLgiv.js";
+import { g as resolveWhatsAppReactionLevel, r as sendReactionWhatsApp } from "./send-DSlVXKL_.js";
 import { ToolAuthorizationError, createActionGate, jsonResult, readReactionParams, readStringParam } from "openclaw/plugin-sdk/channel-actions";
 //#region extensions/whatsapp/src/action-runtime-target-auth.ts
 function resolveAuthorizedWhatsAppOutboundTarget(params) {

package/dist/action-runtime-api.js

@@ -1,2 +1,2 @@
-import { t as handleWhatsAppAction } from "./action-runtime-BbUDQ78g.js";
+import { t as handleWhatsAppAction } from "./action-runtime-Cyp5GNIT.js";
 export { handleWhatsAppAction };

package/dist/action-runtime.runtime.js

@@ -1,2 +1,2 @@
-import { t as handleWhatsAppAction } from "./action-runtime-BbUDQ78g.js";
+import { t as handleWhatsAppAction } from "./action-runtime-Cyp5GNIT.js";
 export { handleWhatsAppAction };

package/dist/api.js

@@ -1,18 +1,18 @@
 import { r as resolveDefaultWhatsAppAccountId, t as listAccountIds } from "./account-ids-CB5SOWjc.js";
-import { a as resolveWhatsAppAccount, i as listWhatsAppAuthDirs, n as hasAnyWhatsAppAuth, o as resolveWhatsAppAuthDir, r as listEnabledWhatsAppAccounts, s as resolveWhatsAppMediaMaxBytes, t as DEFAULT_WHATSAPP_MEDIA_MAX_MB } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount, i as listWhatsAppAuthDirs, n as hasAnyWhatsAppAuth, o as resolveWhatsAppAuthDir, r as listEnabledWhatsAppAccounts, s as resolveWhatsAppMediaMaxBytes, t as DEFAULT_WHATSAPP_MEDIA_MAX_MB } from "./accounts-DgViSyJx.js";
 import { a as normalizeWhatsAppAllowFromEntries, c as normalizeWhatsAppTarget, i as looksLikeWhatsAppTargetId, r as isWhatsAppUserTarget, s as normalizeWhatsAppMessagingTarget, t as isWhatsAppGroupJid } from "./normalize-target-bVWjgftN.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-CcdugbDf.js";
-import "./send-DjMBLgiv.js";
+import "./send-DSlVXKL_.js";
 import { c as assertWebChannel, d as markdownToWhatsApp, f as resolveJidToE164, l as isSelfChatMode, m as toWhatsappJidWithLid, n as normalizeE164, p as toWhatsappJid, r as resolveUserPath, u as jidToE164 } from "./text-runtime-Dk37KYHj.js";
-import { n as WHATSAPP_LEGACY_OUTBOUND_SEND_DEP_KEYS, t as whatsappPlugin } from "./channel-dHRyqWut.js";
+import { n as WHATSAPP_LEGACY_OUTBOUND_SEND_DEP_KEYS, t as whatsappPlugin } from "./channel-DA2BAIo5.js";
 import { t as whatsappCommandPolicy } from "./command-policy-BIOSHySD.js";
-import { a as resolveWhatsAppGroupRequireMention, o as resolveWhatsAppGroupToolPolicy, s as resolveWhatsAppGroupIntroHint } from "./setup-core-B9CAuPOB.js";
-import "./config-schema-CsNDlDpL.js";
-import { t as whatsappSetupPlugin } from "./channel.setup-BuSd1d1D.js";
+import { a as resolveWhatsAppGroupRequireMention, o as resolveWhatsAppGroupToolPolicy, s as resolveWhatsAppGroupIntroHint } from "./setup-core-OvPMaAsx.js";
+import "./config-schema-CROZuhT-.js";
+import { t as whatsappSetupPlugin } from "./channel.setup-DHXOo4h5.js";
 import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-HU41RHGI.js";
 import { n as listWhatsAppDirectoryGroupsFromConfig, r as listWhatsAppDirectoryPeersFromConfig } from "./directory-config-Dijefxc3.js";
-import { n as testing } from "./access-control-Z0fYaWrx.js";
-import { m as extractText, t as createWebSendApi } from "./send-api-Cx2qeYqj.js";
+import { n as testing } from "./access-control-C53zKYSN.js";
+import { m as extractText, t as createWebSendApi } from "./send-api-Bjn-h80j.js";
 import { r as waitForWaConnection, t as createWaSocket } from "./session-DyGWNClj.js";
 import "openclaw/plugin-sdk/channel-actions";
 import "openclaw/plugin-sdk/account-resolution";

package/dist/{approval-handler.runtime-BIZgAkfR.js → approval-handler.runtime-BVmOu6x1.js}

@@ -1,12 +1,11 @@
 import { s as normalizeWhatsAppMessagingTarget } from "./normalize-target-bVWjgftN.js";
-import { f as registerWhatsAppApprovalReactionTarget, i as sendTypingWhatsApp, p as unregisterWhatsAppApprovalReactionTarget, t as sendMessageWhatsApp } from "./send-DjMBLgiv.js";
+import { f as registerWhatsAppApprovalReactionTarget, i as sendTypingWhatsApp, p as unregisterWhatsAppApprovalReactionTarget, t as sendMessageWhatsApp } from "./send-DSlVXKL_.js";
 import "./normalize-Bxwqo-bW.js";
 import { n as getWhatsAppRuntime } from "./runtime-BfAdAEYT.js";
 import { createSubsystemLogger } from "openclaw/plugin-sdk/runtime-env";
 import { buildApprovalReactionPendingContent } from "openclaw/plugin-sdk/approval-reaction-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";
 import { buildChannelApprovalExpiredText, buildChannelApprovalResolvedText, createChannelApprovalNativeRuntimeAdapter, resolvePreparedApprovalAccountId } from "openclaw/plugin-sdk/approval-handler-runtime";
-import "openclaw/plugin-sdk/approval-runtime";
 //#region extensions/whatsapp/src/approval-handler.runtime.ts
 const log = createSubsystemLogger("whatsapp/approvals");
 function buildPendingPayload(params) {

package/dist/{channel-dHRyqWut.js → channel-DA2BAIo5.js}

@@ -1,15 +1,15 @@
 import { r as resolveDefaultWhatsAppAccountId, t as listAccountIds } from "./account-ids-CB5SOWjc.js";
-import { a as resolveWhatsAppAccount } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount } from "./accounts-DgViSyJx.js";
 import { c as normalizeWhatsAppTarget, i as looksLikeWhatsAppTargetId, n as isWhatsAppNewsletterJid, o as normalizeWhatsAppAllowFromEntry, s as normalizeWhatsAppMessagingTarget, t as isWhatsAppGroupJid } from "./normalize-target-bVWjgftN.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-CcdugbDf.js";
-import { a as normalizeWhatsAppOutboundPayload, g as resolveWhatsAppReactionLevel, h as whatsappApprovalAuth, i as sendTypingWhatsApp, m as getWhatsAppApprovalApprovers, n as sendPollWhatsApp, o as normalizeWhatsAppPayloadText, s as normalizeWhatsAppPayloadTextPreservingIndentation, t as sendMessageWhatsApp } from "./send-DjMBLgiv.js";
+import { a as normalizeWhatsAppOutboundPayload, g as resolveWhatsAppReactionLevel, h as whatsappApprovalAuth, i as sendTypingWhatsApp, m as getWhatsAppApprovalApprovers, n as sendPollWhatsApp, o as normalizeWhatsAppPayloadText, s as normalizeWhatsAppPayloadTextPreservingIndentation, t as sendMessageWhatsApp } from "./send-DSlVXKL_.js";
 import "./normalize-Bxwqo-bW.js";
 import { n as getWhatsAppRuntime } from "./runtime-BfAdAEYT.js";
 import { p as toWhatsappJid } from "./text-runtime-Dk37KYHj.js";
 import { t as createWhatsAppLoginTool } from "./agent-tools-login-BX7eHgDm.js";
 import { i as lookupInboundMessageMetaForTarget } from "./quoted-message-CveINB35.js";
 import { t as whatsappCommandPolicy } from "./command-policy-BIOSHySD.js";
-import { a as resolveWhatsAppGroupRequireMention, c as resolveWhatsAppMentionStripRegexes, i as whatsappSetupWizardProxy, l as formatWhatsAppConfigAllowFromEntries, n as createWhatsAppPluginBase, o as resolveWhatsAppGroupToolPolicy, r as loadWhatsAppChannelRuntime, s as resolveWhatsAppGroupIntroHint, t as whatsappSetupAdapter } from "./setup-core-B9CAuPOB.js";
+import { a as resolveWhatsAppGroupRequireMention, c as resolveWhatsAppMentionStripRegexes, i as whatsappSetupWizardProxy, l as formatWhatsAppConfigAllowFromEntries, n as createWhatsAppPluginBase, o as resolveWhatsAppGroupToolPolicy, r as loadWhatsAppChannelRuntime, s as resolveWhatsAppGroupIntroHint, t as whatsappSetupAdapter } from "./setup-core-OvPMaAsx.js";
 import { f as readWebAuthExistsForDecision, n as WHATSAPP_AUTH_UNSTABLE_CODE } from "./auth-store-CZ22aNcV.js";
 import { t as detectWhatsAppLegacyStateMigrations } from "./state-migrations-D_BmQUR9.js";
 import { createActionGate as createActionGate$1 } from "openclaw/plugin-sdk/channel-actions";
@@ -205,7 +205,7 @@ const whatsappApprovalCapability = createChannelApprovalCapability({
 			accountId,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-BIZgAkfR.js")).whatsappApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-BVmOu6x1.js")).whatsappApprovalNativeRuntime
 	})
 });
 splitChannelApprovalCapability(whatsappApprovalCapability);
@@ -604,7 +604,7 @@ function collectWhatsAppStatusIssues(accounts) {
 //#endregion
 //#region extensions/whatsapp/src/channel.ts
 const loadWhatsAppDirectoryConfig = createLazyRuntimeModule(() => import("./directory-config-Dijefxc3.js").then((n) => n.t));
-const loadWhatsAppChannelReactAction = createLazyRuntimeModule(() => import("./channel-react-action-CYx128FS.js"));
+const loadWhatsAppChannelReactAction = createLazyRuntimeModule(() => import("./channel-react-action-zvbaCnGe.js"));
 function resolveWhatsAppTargetInfo(raw) {
 	const normalized = normalizeWhatsAppTarget(raw);
 	if (!normalized) return null;

package/dist/channel-config-api.js

@@ -1,2 +1,2 @@
-import { t as WhatsAppChannelConfigSchema } from "./config-schema-CsNDlDpL.js";
+import { t as WhatsAppChannelConfigSchema } from "./config-schema-CROZuhT-.js";
 export { WhatsAppChannelConfigSchema };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as whatsappPlugin } from "./channel-dHRyqWut.js";
+import { t as whatsappPlugin } from "./channel-DA2BAIo5.js";
 export { whatsappPlugin };

package/dist/{channel-react-action-CYx128FS.js → channel-react-action-zvbaCnGe.js}

@@ -1,7 +1,7 @@
-import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-DgViSyJx.js";
 import { c as normalizeWhatsAppTarget, t as isWhatsAppGroupJid } from "./normalize-target-bVWjgftN.js";
-import { r as resolveAuthorizedWhatsAppOutboundTarget, t as handleWhatsAppAction } from "./action-runtime-BbUDQ78g.js";
-import { t as sendMessageWhatsApp } from "./send-DjMBLgiv.js";
+import { r as resolveAuthorizedWhatsAppOutboundTarget, t as handleWhatsAppAction } from "./action-runtime-Cyp5GNIT.js";
+import { t as sendMessageWhatsApp } from "./send-DSlVXKL_.js";
 import "./normalize-Bxwqo-bW.js";
 import { jsonResult, readStringOrNumberParam, readStringParam as readStringParam$1, resolveReactionMessageId } from "openclaw/plugin-sdk/channel-actions";
 //#region extensions/whatsapp/src/channel-react-action.ts

package/dist/{channel.runtime-3WElbRZG.js → channel.runtime-Q1LZDB5s.js}

@@ -1,9 +1,9 @@
 import { startWebLoginWithQr as startWebLoginWithQr$1, waitForWebLogin as waitForWebLogin$1 } from "./login-qr-runtime.js";
 import { c as logoutWeb$1, d as readWebAuthExistsBestEffort$1, f as readWebAuthExistsForDecision$1, g as readWebSelfId$1, h as readWebAuthState$1, m as readWebAuthSnapshotBestEffort$1, o as getWebAuthAgeMs$1, p as readWebAuthSnapshot$1, s as logWebSelfId$1, x as webAuthExists$1 } from "./auth-store-CZ22aNcV.js";
 import { t as getActiveWebListener$1 } from "./active-listener-CFwkn3ho.js";
-import { t as monitorWebChannel$1 } from "./monitor-NKzAEWeJ.js";
-import { t as loginWeb$1 } from "./login-DygDn79y.js";
-import { whatsappSetupWizard as whatsappSetupWizard$1 } from "./setup-surface-_Cid6xIf.js";
+import { t as monitorWebChannel$1 } from "./monitor-BVRq04Dt.js";
+import { t as loginWeb$1 } from "./login-2fuBM7Je.js";
+import { whatsappSetupWizard as whatsappSetupWizard$1 } from "./setup-surface-F-jVrH8u.js";
 //#region extensions/whatsapp/src/channel.runtime.ts
 function getActiveWebListener(...args) {
 	return getActiveWebListener$1(...args);

package/dist/{channel.setup-BuSd1d1D.js → channel.setup-DHXOo4h5.js}

@@ -1,5 +1,4 @@
-import "./accounts-BMGM1RtF.js";
-import { a as resolveWhatsAppGroupRequireMention, i as whatsappSetupWizardProxy, n as createWhatsAppPluginBase, o as resolveWhatsAppGroupToolPolicy, s as resolveWhatsAppGroupIntroHint, t as whatsappSetupAdapter } from "./setup-core-B9CAuPOB.js";
+import { a as resolveWhatsAppGroupRequireMention, i as whatsappSetupWizardProxy, n as createWhatsAppPluginBase, o as resolveWhatsAppGroupToolPolicy, s as resolveWhatsAppGroupIntroHint, t as whatsappSetupAdapter } from "./setup-core-OvPMaAsx.js";
 import { t as detectWhatsAppLegacyStateMigrations } from "./state-migrations-D_BmQUR9.js";
 //#region extensions/whatsapp/src/channel.setup.ts
 async function isWhatsAppAuthConfigured(account) {

package/dist/{config-schema-CsNDlDpL.js → config-schema-CROZuhT-.js}

@@ -21,6 +21,22 @@ const WhatsAppChannelConfigSchema = buildChannelConfigSchema(WhatsAppConfigSchem
 	configWrites: {
 		label: "WhatsApp Config Writes",
 		help: "Allow WhatsApp to write config in response to channel events/commands (default: true)."
+	},
+	mentionPatterns: {
+		label: "WhatsApp Mention Pattern Policy",
+		help: "Scopes configured groupChat mentionPatterns to selected WhatsApp conversation IDs such as 123@g.us."
+	},
+	"mentionPatterns.mode": {
+		label: "WhatsApp Mention Pattern Mode",
+		help: "\"allow\" enables configured regex mention patterns unless denyIn matches; \"deny\" disables them unless allowIn matches."
+	},
+	"mentionPatterns.allowIn": {
+		label: "WhatsApp Mention Pattern Allowlist",
+		help: "WhatsApp conversation IDs where configured regex mention patterns are enabled when mode is deny."
+	},
+	"mentionPatterns.denyIn": {
+		label: "WhatsApp Mention Pattern Denylist",
+		help: "WhatsApp conversation IDs where configured regex mention patterns are disabled."
 	}
 } });
 //#endregion

package/dist/contract-api.js

@@ -4,7 +4,7 @@ import { t as resolveLegacyGroupSessionKey$1 } from "./group-session-contract-DD
 import { n as unsupportedSecretRefSurfacePatterns, t as collectUnsupportedSecretRefConfigCandidates } from "./security-contract-nAzD945y.js";
 import { r as isLegacyGroupSessionKey$1, t as canonicalizeLegacySessionKey$1 } from "./session-contract-DMTm6Q_L.js";
 import { n as listWhatsAppDirectoryGroupsFromConfig, r as listWhatsAppDirectoryPeersFromConfig } from "./directory-config-Dijefxc3.js";
-import { a as resolveWhatsAppRuntimeGroupPolicy$1, n as testing } from "./access-control-Z0fYaWrx.js";
+import { a as resolveWhatsAppRuntimeGroupPolicy$1, n as testing } from "./access-control-C53zKYSN.js";
 //#region extensions/whatsapp/contract-api.ts
 const canonicalizeLegacySessionKey = canonicalizeLegacySessionKey$1;
 const isLegacyGroupSessionKey = isLegacyGroupSessionKey$1;

package/dist/{login-DygDn79y.js → login-2fuBM7Je.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { a as resolveWhatsAppAccount } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount } from "./accounts-DgViSyJx.js";
 import { b as restoreCredsFromBackupIfNeeded } from "./auth-store-CZ22aNcV.js";
 import { a as renderQrTerminal, i as resolveWhatsAppSocketTiming, t as createWaSocket } from "./session-DyGWNClj.js";
 import { a as closeWaSocketSoon, o as waitForWhatsAppLoginResult } from "./connection-controller-Bnm4INld.js";

package/dist/{login-qr-nPxKvdjP.js → login-qr-B1o7GFy8.js}

@@ -1,4 +1,4 @@
-import { a as resolveWhatsAppAccount } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount } from "./accounts-DgViSyJx.js";
 import { f as readWebAuthExistsForDecision, g as readWebSelfId, n as WHATSAPP_AUTH_UNSTABLE_CODE } from "./auth-store-CZ22aNcV.js";
 import { i as resolveWhatsAppSocketTiming, t as createWaSocket } from "./session-DyGWNClj.js";
 import { i as closeWaSocket, o as waitForWhatsAppLoginResult, t as WHATSAPP_LOGGED_OUT_QR_MESSAGE } from "./connection-controller-Bnm4INld.js";

package/dist/login-qr-runtime.js

@@ -1,7 +1,7 @@
 //#region extensions/whatsapp/login-qr-runtime.ts
 let loginQrModulePromise = null;
 function loadLoginQrModule() {
-	loginQrModulePromise ??= import("./login-qr-nPxKvdjP.js");
+	loginQrModulePromise ??= import("./login-qr-B1o7GFy8.js");
 	return loginQrModulePromise;
 }
 async function startWebLoginWithQr(...args) {

package/dist/{monitor-NKzAEWeJ.js → monitor-BVRq04Dt.js}

@@ -1,6 +1,6 @@
-import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-DgViSyJx.js";
 import { t as isWhatsAppGroupJid } from "./normalize-target-bVWjgftN.js";
-import { a as normalizeWhatsAppOutboundPayload, c as prepareWhatsAppOutboundMedia, d as maybeResolveWhatsAppApprovalReaction, g as resolveWhatsAppReactionLevel, l as sendWhatsAppOutboundWithRetry, r as sendReactionWhatsApp, s as normalizeWhatsAppPayloadTextPreservingIndentation } from "./send-DjMBLgiv.js";
+import { a as normalizeWhatsAppOutboundPayload, c as prepareWhatsAppOutboundMedia, d as maybeResolveWhatsAppApprovalReaction, g as resolveWhatsAppReactionLevel, l as sendWhatsAppOutboundWithRetry, r as sendReactionWhatsApp, s as normalizeWhatsAppPayloadTextPreservingIndentation } from "./send-DSlVXKL_.js";
 import { n as getWhatsAppRuntime } from "./runtime-BfAdAEYT.js";
 import { n as getStatusCode, t as formatError } from "./session-errors-CbsoQqoy.js";
 import { d as markdownToWhatsApp, f as resolveJidToE164, l as isSelfChatMode, n as normalizeE164, t as convertMarkdownTables$1, u as jidToE164 } from "./text-runtime-Dk37KYHj.js";
@@ -8,8 +8,8 @@ import { n as cacheInboundMessageMeta, r as lookupInboundMessageMeta, t as build
 import { c as logoutWeb, g as readWebSelfId, o as getWebAuthAgeMs, r as WhatsAppAuthUnstableError, v as readWebSelfIdentityForDecision } from "./auth-store-CZ22aNcV.js";
 import { a as getSelfIdentity, c as resolveComparableIdentity, i as getReplyContext, n as getMentionIdentities, o as getSenderIdentity, r as getPrimaryIdentityId, s as identitiesOverlap, t as getComparableIdentityValues } from "./identity-xoLLdqEv.js";
 import { n as resolveWhatsAppGroupsConfigPath } from "./group-config-path-BGyzT9Lg.js";
-import { i as resolveWhatsAppInboundPolicy, r as resolveWhatsAppCommandAuthorized, t as checkInboundAccessControl } from "./access-control-Z0fYaWrx.js";
-import { a as mayContainWhatsAppOutboundMention, c as describeReplyContext, d as extractLocationData, f as extractMediaPlaceholder, h as hasInboundUserContent, i as addWhatsAppOutboundMentionsToContent, l as extractContactContext, m as extractText, n as listWhatsAppSendResultMessageIds, o as resolveWhatsAppOutboundMentions, p as extractMentionedJids, r as normalizeWhatsAppSendResult, s as addWhatsAppImagePreviewFields, t as createWebSendApi, u as extractContextInfo } from "./send-api-Cx2qeYqj.js";
+import { i as resolveWhatsAppInboundPolicy, r as resolveWhatsAppCommandAuthorized, t as checkInboundAccessControl } from "./access-control-C53zKYSN.js";
+import { a as mayContainWhatsAppOutboundMention, c as describeReplyContext, d as extractLocationData, f as extractMediaPlaceholder, h as hasInboundUserContent, i as addWhatsAppOutboundMentionsToContent, l as extractContactContext, m as extractText, n as listWhatsAppSendResultMessageIds, o as resolveWhatsAppOutboundMentions, p as extractMentionedJids, r as normalizeWhatsAppSendResult, s as addWhatsAppImagePreviewFields, t as createWebSendApi, u as extractContextInfo } from "./send-api-Bjn-h80j.js";
 import { i as resolveWhatsAppSocketTiming, r as waitForWaConnection, t as createWaSocket } from "./session-DyGWNClj.js";
 import { t as BufferJSON } from "./session.runtime-LZFdq3yb.js";
 import { c as computeBackoff, d as resolveReconnectPolicy, f as sleepWithAbort, l as newConnectionId, n as WHATSAPP_WATCHDOG_TIMEOUT_ERROR, r as WhatsAppConnectionController, s as DEFAULT_RECONNECT_POLICY, u as resolveHeartbeatSeconds } from "./connection-controller-Bnm4INld.js";
@@ -445,7 +445,7 @@ async function attachWebInboxToSocket(options) {
 		});
 	};
 	const sendTrackedMessage = async (jid, content, sendOptions) => {
-		let lastErr = new Error(RECONNECT_IN_PROGRESS_ERROR);
+		let lastErr = /* @__PURE__ */ new Error(RECONNECT_IN_PROGRESS_ERROR);
 		for (let attempt = 1;; attempt++) {
 			const currentSock = getCurrentSock();
 			if (currentSock) try {
@@ -1015,9 +1015,9 @@ const whatsappOutboundLog = whatsappLog.child("outbound");
 const whatsappHeartbeatLog = whatsappLog.child("heartbeat");
 //#endregion
 //#region extensions/whatsapp/src/auto-reply/mentions.ts
-function buildMentionConfig(cfg, agentId) {
+function buildMentionConfig(cfg, agentId, options) {
 	return {
-		mentionRegexes: buildMentionRegexes(cfg, agentId),
+		mentionRegexes: buildMentionRegexes(cfg, agentId, options),
 		allowFrom: cfg.channels?.whatsapp?.allowFrom
 	};
 }
@@ -1530,7 +1530,11 @@ async function applyGroupGating(params) {
 		allowFrom: inboundPolicy.configuredAllowFrom
 	};
 	const mentionConfig = {
-		...buildMentionConfig(params.cfg, params.agentId),
+		...buildMentionConfig(params.cfg, params.agentId, {
+			provider: "whatsapp",
+			conversationId: params.conversationId,
+			providerPolicy: params.providerMentionPatterns
+		}),
 		allowFrom: inboundPolicy.configuredAllowFrom
 	};
 	const mentionMsg = params.mentionText !== void 0 ? {
@@ -2184,7 +2188,8 @@ async function dispatchWhatsAppBufferedReply(params) {
 			CommandAuthorized: sourceReplyCommandAuthorized
 		}
 	}) : void 0;
-	const disableBlockStreaming = sourceReplyDeliveryMode === "message_tool_only" ? true : resolveWhatsAppDisableBlockStreaming(params.cfg);
+	const sourceRepliesAreToolOnly = sourceReplyDeliveryMode === "message_tool_only";
+	const disableBlockStreaming = sourceRepliesAreToolOnly ? true : resolveWhatsAppDisableBlockStreaming(params.cfg);
 	let didSendReply = false;
 	let didLogHeartbeatStrip = false;
 	const deliverNormalizedPayload = async (normalizedDeliveryPayload, info) => {
@@ -2340,6 +2345,7 @@ async function dispatchWhatsAppBufferedReply(params) {
 			}
 		},
 		replyOptions: {
+			suppressTyping: sourceRepliesAreToolOnly && params.msg.chatType === "group" && !params.msg.wasMentioned,
 			disableBlockStreaming,
 			...sourceReplyDeliveryMode ? { sourceReplyDeliveryMode } : {},
 			onModelSelected: params.onModelSelected,
@@ -2993,6 +2999,7 @@ function createWebOnMessageHandler(params) {
 				agentId: route.agentId,
 				sessionKey: route.sessionKey,
 				baseMentionConfig,
+				providerMentionPatterns: account.mentionPatterns,
 				authDir: account.authDir,
 				selfChatMode: account.selfChatMode,
 				groupHistories: params.groupHistories,
@@ -3012,6 +3019,7 @@ function createWebOnMessageHandler(params) {
 					agentId: route.agentId,
 					sessionKey: route.sessionKey,
 					baseMentionConfig,
+					providerMentionPatterns: account.mentionPatterns,
 					authDir: account.authDir,
 					selfChatMode: account.selfChatMode,
 					groupHistories: params.groupHistories,

package/dist/runtime-api.js

@@ -1,16 +1,16 @@
 import { o as resolveWebCredsBackupPath, r as hasWebCredsSync, s as resolveWebCredsPath } from "./creds-files-B1kSWtBg.js";
-import { n as whatsAppActionRuntime, t as handleWhatsAppAction } from "./action-runtime-BbUDQ78g.js";
-import { i as sendTypingWhatsApp, n as sendPollWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./send-DjMBLgiv.js";
+import { n as whatsAppActionRuntime, t as handleWhatsAppAction } from "./action-runtime-Cyp5GNIT.js";
+import { i as sendTypingWhatsApp, n as sendPollWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./send-DSlVXKL_.js";
 import { r as setWhatsAppRuntime } from "./runtime-BfAdAEYT.js";
 import { n as getStatusCode, t as formatError } from "./session-errors-CbsoQqoy.js";
 import { startWebLoginWithQr, waitForWebLogin } from "./login-qr-runtime.js";
 import { t as createWhatsAppLoginTool } from "./agent-tools-login-BX7eHgDm.js";
 import { C as waitForCredsSaveQueue, T as writeCredsJsonAtomically, _ as readWebSelfIdentity, a as formatWhatsAppWebAuthStatusState, b as restoreCredsFromBackupIfNeeded, c as logoutWeb, d as readWebAuthExistsBestEffort, f as readWebAuthExistsForDecision, g as readWebSelfId, h as readWebAuthState, l as pickWebChannel, m as readWebAuthSnapshotBestEffort, n as WHATSAPP_AUTH_UNSTABLE_CODE, o as getWebAuthAgeMs, p as readWebAuthSnapshot, r as WhatsAppAuthUnstableError, s as logWebSelfId, t as WA_WEB_AUTH_DIR, u as readCredsJsonRaw, v as readWebSelfIdentityForDecision, w as waitForCredsSaveQueueWithTimeout, x as webAuthExists, y as resolveDefaultWebAuthDir } from "./auth-store-CZ22aNcV.js";
 import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-HU41RHGI.js";
-import { d as extractLocationData, f as extractMediaPlaceholder, l as extractContactContext, m as extractText } from "./send-api-Cx2qeYqj.js";
+import { d as extractLocationData, f as extractMediaPlaceholder, l as extractContactContext, m as extractText } from "./send-api-Bjn-h80j.js";
 import { n as newConnectionId, r as waitForWaConnection, t as createWaSocket } from "./session-DyGWNClj.js";
 import { n as resolveWebAccountId, t as getActiveWebListener } from "./active-listener-CFwkn3ho.js";
-import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-NKzAEWeJ.js";
-import { t as loginWeb } from "./login-DygDn79y.js";
+import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-BVRq04Dt.js";
+import { t as loginWeb } from "./login-2fuBM7Je.js";
 import { HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, SILENT_REPLY_TOKEN, stripHeartbeatToken } from "openclaw/plugin-sdk/reply-runtime";
 export { DEFAULT_WEB_MEDIA_BYTES, HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, LocalMediaAccessError, SILENT_REPLY_TOKEN, WA_WEB_AUTH_DIR, WHATSAPP_AUTH_UNSTABLE_CODE, WhatsAppAuthUnstableError, createWaSocket, createWhatsAppLoginTool, extractContactContext, extractLocationData, extractMediaPlaceholder, extractText, formatError, formatWhatsAppWebAuthStatusState, getActiveWebListener, getDefaultLocalRoots, getStatusCode, getWebAuthAgeMs, handleWhatsAppAction, hasWebCredsSync, loadWebMedia, loadWebMediaRaw, logWebSelfId, loginWeb, logoutWeb, monitorWebChannel, monitorWebInbox, newConnectionId, optimizeImageToJpeg, optimizeImageToPng, pickWebChannel, readCredsJsonRaw, readWebAuthExistsBestEffort, readWebAuthExistsForDecision, readWebAuthSnapshot, readWebAuthSnapshotBestEffort, readWebAuthState, readWebSelfId, readWebSelfIdentity, readWebSelfIdentityForDecision, resetWebInboundDedupe, resolveDefaultWebAuthDir, resolveWebAccountId, resolveWebCredsBackupPath, resolveWebCredsPath, restoreCredsFromBackupIfNeeded, sendMessageWhatsApp, sendPollWhatsApp, sendReactionWhatsApp, sendTypingWhatsApp, setWhatsAppRuntime, startWebLoginWithQr, stripHeartbeatToken, waitForCredsSaveQueue, waitForCredsSaveQueueWithTimeout, waitForWaConnection, waitForWebLogin, webAuthExists, whatsAppActionRuntime, writeCredsJsonAtomically };

package/dist/{send-DjMBLgiv.js → send-DSlVXKL_.js}

@@ -1,6 +1,6 @@
 import { t as resolveMergedWhatsAppAccountConfig } from "./account-config-6PTOSfaI.js";
 import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-CB5SOWjc.js";
-import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-DgViSyJx.js";
 import { c as normalizeWhatsAppTarget, n as isWhatsAppNewsletterJid } from "./normalize-target-bVWjgftN.js";
 import "./normalize-Bxwqo-bW.js";
 import { t as getOptionalWhatsAppRuntime } from "./runtime-BfAdAEYT.js";
@@ -282,7 +282,15 @@ function resolveWhatsAppDefaultDocumentFileName(mimetype) {
 }
 function resolveWhatsAppDocumentFileName(params) {
 	const fallbackName = resolveWhatsAppDefaultDocumentFileName(params.mimetype);
-	return params.fileName?.replace(/[\x00-\x1f\x7f]/g, "").trim() || fallbackName;
+	return stripAsciiControlCharacters(params.fileName ?? "").trim() || fallbackName;
+}
+function stripAsciiControlCharacters(value) {
+	let stripped = "";
+	for (const char of value) {
+		const code = char.charCodeAt(0);
+		if (code > 31 && code !== 127) stripped += char;
+	}
+	return stripped;
 }
 //#endregion
 //#region extensions/whatsapp/src/outbound-media-contract.ts

package/dist/{send-api-Cx2qeYqj.js → send-api-Bjn-h80j.js}

@@ -1,5 +1,5 @@
 import { n as isWhatsAppNewsletterJid } from "./normalize-target-bVWjgftN.js";
-import { u as resolveWhatsAppDocumentFileName } from "./send-DjMBLgiv.js";
+import { u as resolveWhatsAppDocumentFileName } from "./send-DSlVXKL_.js";
 import "./normalize-Bxwqo-bW.js";
 import { m as toWhatsappJidWithLid, p as toWhatsappJid, u as jidToE164 } from "./text-runtime-Dk37KYHj.js";
 import { t as buildQuotedMessageOptions } from "./quoted-message-CveINB35.js";
@@ -645,7 +645,8 @@ function createWebSendApi(params) {
 		mentionedJids: []
 	};
 	return {
-		sendMessage: async (to, text, mediaBuffer, mediaType, sendOptions) => {
+		sendMessage: async (to, text, mediaBuffer, mediaTypeInput, sendOptions) => {
+			let mediaType = mediaTypeInput;
 			const jid = resolveOutboundJid(to);
 			let payload;
 			if (mediaBuffer) mediaType ??= "application/octet-stream";

package/dist/{setup-core-B9CAuPOB.js → setup-core-OvPMaAsx.js}

@@ -1,7 +1,7 @@
 import { r as resolveDefaultWhatsAppAccountId, t as listAccountIds } from "./account-ids-CB5SOWjc.js";
-import { a as resolveWhatsAppAccount, n as hasAnyWhatsAppAuth } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount, n as hasAnyWhatsAppAuth } from "./accounts-DgViSyJx.js";
 import { a as normalizeWhatsAppAllowFromEntries } from "./normalize-target-bVWjgftN.js";
-import { t as WhatsAppChannelConfigSchema } from "./config-schema-CsNDlDpL.js";
+import { t as WhatsAppChannelConfigSchema } from "./config-schema-CROZuhT-.js";
 import { n as whatsappDoctor } from "./doctor-By3SB4lm.js";
 import { t as resolveWhatsAppConfigPath } from "./group-config-path-BGyzT9Lg.js";
 import { t as resolveLegacyGroupSessionKey } from "./group-session-contract-DDnZSsJ1.js";
@@ -99,10 +99,10 @@ async function applyWhatsAppSecurityConfigFixes(params) {
 //#region extensions/whatsapp/src/shared.ts
 const WHATSAPP_CHANNEL = "whatsapp";
 async function loadWhatsAppChannelRuntime() {
-	return await import("./channel.runtime-3WElbRZG.js");
+	return await import("./channel.runtime-Q1LZDB5s.js");
 }
 async function loadWhatsAppSetupSurface() {
-	return await import("./setup-surface-_Cid6xIf.js");
+	return await import("./setup-surface-F-jVrH8u.js");
 }
 const whatsappSetupWizardProxy = createWhatsAppSetupWizardProxy(async () => (await loadWhatsAppSetupSurface()).whatsappSetupWizard);
 const whatsappConfigAdapter = createScopedChannelConfigAdapter({

package/dist/{setup-finalize-f95kxYvv.js → setup-finalize-Dk23pfKc.js}

@@ -1,8 +1,8 @@
 import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-CB5SOWjc.js";
 import { r as hasWebCredsSync } from "./creds-files-B1kSWtBg.js";
-import { a as resolveWhatsAppAccount, o as resolveWhatsAppAuthDir } from "./accounts-BMGM1RtF.js";
+import { a as resolveWhatsAppAccount, o as resolveWhatsAppAuthDir } from "./accounts-DgViSyJx.js";
 import { a as normalizeWhatsAppAllowFromEntries, o as normalizeWhatsAppAllowFromEntry } from "./normalize-target-bVWjgftN.js";
-import { t as whatsappSetupAdapter } from "./setup-core-B9CAuPOB.js";
+import { t as whatsappSetupAdapter } from "./setup-core-OvPMaAsx.js";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 import { formatCliCommand, formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 //#region extensions/whatsapp/src/setup-finalize.ts
@@ -280,7 +280,7 @@ async function finalizeWhatsAppSetup(params) {
 		message: linked ? t("wizard.whatsapp.relinkPrompt") : t("wizard.whatsapp.linkNowPrompt"),
 		initialValue: !linked
 	})) try {
-		const { loginWeb } = await import("./login-DygDn79y.js").then((n) => n.n);
+		const { loginWeb } = await import("./login-2fuBM7Je.js").then((n) => n.n);
 		await loginWeb(false, void 0, params.runtime, accountId);
 	} catch (error) {
 		params.runtime.error(`WhatsApp login failed: ${String(error)}`);

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as whatsappSetupPlugin } from "./channel.setup-BuSd1d1D.js";
+import { t as whatsappSetupPlugin } from "./channel.setup-DHXOo4h5.js";
 export { whatsappSetupPlugin };

package/dist/{setup-surface-_Cid6xIf.js → setup-surface-F-jVrH8u.js}

@@ -1,5 +1,5 @@
 import { t as listAccountIds } from "./account-ids-CB5SOWjc.js";
-import { o as resolveWhatsAppAuthDir } from "./accounts-BMGM1RtF.js";
+import { o as resolveWhatsAppAuthDir } from "./accounts-DgViSyJx.js";
 import { a as formatWhatsAppWebAuthStatusState, h as readWebAuthState } from "./auth-store-CZ22aNcV.js";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 //#region extensions/whatsapp/src/setup-surface.ts
@@ -36,7 +36,7 @@ const whatsappSetupWizard = {
 	},
 	resolveShouldPromptAccountIds: ({ shouldPromptAccountIds }) => shouldPromptAccountIds,
 	credentials: [],
-	finalize: async (params) => await (await import("./setup-finalize-f95kxYvv.js")).finalizeWhatsAppSetup(params),
+	finalize: async (params) => await (await import("./setup-finalize-Dk23pfKc.js")).finalizeWhatsAppSetup(params),
 	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false),
 	onAccountRecorded: (accountId, options) => {
 		options?.onAccountId?.(channel, accountId);

package/node_modules/@audio/decode-aac/LICENSE

@@ -0,0 +1,9 @@
+This work is offered to Krishna (https://github.com/krishnized/license).
+
+---
+
+This package is licensed under the GNU General Public License v2.0 (GPL-2.0),
+as required by the included FAAD2 library.
+
+FAAD2 Copyright (C) 2003-2005 M. Bakker, Nero AG, http://www.nero.com
+Full GPL-2.0 text: https://www.gnu.org/licenses/old-licenses/gpl-2.0.html

package/node_modules/@audio/decode-aac/README.md

@@ -0,0 +1,60 @@
+# @audio/decode-aac
+
+Decode AAC/M4A audio to PCM float samples. FAAD2 compiled to WASM — works in Node.js and browsers, no native dependencies.
+
+## Install
+
+```
+npm i @audio/decode-aac
+```
+
+## Usage
+
+```js
+import decode from '@audio/decode-aac'
+
+// M4A or raw ADTS — auto-detected
+let { channelData, sampleRate } = await decode(uint8array)
+// channelData: Float32Array[] (one per channel)
+// sampleRate: number
+```
+
+### Streaming
+
+```js
+import { decoder } from '@audio/decode-aac'
+
+let dec = await decoder()
+let { channelData, sampleRate } = dec.decode(chunk)
+dec.free()
+```
+
+## API
+
+### `decode(src: Uint8Array | ArrayBuffer): Promise<AudioData>`
+
+Whole-file decode. Auto-detects M4A (MP4 container) vs raw ADTS.
+
+### `decoder(): Promise<AACDecoder>`
+
+Creates a decoder instance for manual control.
+
+- **`dec.decode(data)`** — decode chunk, returns `{ channelData, sampleRate }`
+- **`dec.flush()`** — flush remaining (returns empty for AAC)
+- **`dec.free()`** — release WASM memory
+
+### `AudioData`
+
+```ts
+{ channelData: Float32Array[], sampleRate: number }
+```
+
+## Formats
+
+- M4A / MP4 with AAC audio
+- Raw ADTS streams (.aac)
+- LC, HE-AAC v1/v2 (SBR, PS)
+
+## License
+
+GPL-2.0 (FAAD2) — [krishnized](https://github.com/krishnized/license)

package/node_modules/@audio/decode-aac/decode-aac.d.ts

@@ -0,0 +1,16 @@
+interface AudioData {
+  channelData: Float32Array[];
+  sampleRate: number;
+}
+
+interface AACDecoder {
+  decode(data: Uint8Array): AudioData;
+  flush(): AudioData;
+  free(): void;
+}
+
+/** Whole-file decode — auto-detects M4A vs ADTS */
+export default function decode(src: ArrayBuffer | Uint8Array): Promise<AudioData>;
+
+/** Create streaming decoder instance */
+export function decoder(): Promise<AACDecoder>;