@openclaw/whatsapp 2026.5.9-beta.1 → 2026.5.10-beta.2

package/dist/{access-control-hFVqAWSd.js → access-control-CdP8S3rJ.js}

@@ -1,15 +1,20 @@
+import { r as isSelfChatMode, t as text_runtime_exports } from "./text-runtime-DBKC9uEi.js";
 import { a as resolveWhatsAppAccount } from "./accounts-BDqgpFEB.js";
-import { r as isSelfChatMode, t as text_runtime_exports } from "./text-runtime-DFFwk5z6.js";
-import { a as getSelfIdentity, o as getSenderIdentity } from "./identity-DhaC0MoD.js";
-import { t as resolveWhatsAppRuntimeGroupPolicy } from "./runtime-group-policy-Gp1lQ0at.js";
+import { a as getSelfIdentity, o as getSenderIdentity } from "./identity-KxdJfH7p.js";
+import { t as resolveWhatsAppRuntimeGroupPolicy } from "./runtime-group-policy-BH_U23qp.js";
 import { defaultRuntime } from "openclaw/plugin-sdk/runtime-env";
-import { expandAllowFromWithAccessGroups, readStoreAllowFromForDmPolicy, resolveDmGroupAccessWithCommandGate, resolveDmGroupAccessWithLists, resolveEffectiveAllowFromLists } from "openclaw/plugin-sdk/security-runtime";
 import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention } from "openclaw/plugin-sdk/channel-policy";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
 import { upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-runtime";
 import { resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
+import { resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { resolveGroupSessionKey } from "openclaw/plugin-sdk/session-store-runtime";
 //#region extensions/whatsapp/src/inbound-policy.ts
+function normalizeWhatsAppIngressPhone(value) {
+	const trimmed = value.trim();
+	if (!trimmed) return null;
+	return (0, text_runtime_exports.normalizeE164)(trimmed);
+}
 function resolveGroupConversationId(conversationId) {
 	return resolveGroupSessionKey({
 		From: conversationId,
@@ -17,11 +22,9 @@ function resolveGroupConversationId(conversationId) {
 		Provider: "whatsapp"
 	})?.id ?? conversationId;
 }
-function isNormalizedSenderAllowed(allowEntries, sender) {
-	if (allowEntries.includes("*")) return true;
-	const normalizedSender = (0, text_runtime_exports.normalizeE164)(sender ?? "");
-	if (!normalizedSender) return false;
-	return new Set(allowEntries.map((entry) => (0, text_runtime_exports.normalizeE164)(entry)).filter((entry) => Boolean(entry))).has(normalizedSender);
+function maybeSamePhoneDmAllowFrom(params) {
+	if (params.isGroup || !params.dmSenderId || !params.policy.isSamePhone(params.dmSenderId)) return [];
+	return [params.dmSenderId];
 }
 function buildResolvedWhatsAppGroupConfig(params) {
 	return { channels: { whatsapp: {
@@ -37,11 +40,7 @@ function resolveWhatsAppInboundPolicy(params) {
 	const configuredAllowFrom = account.allowFrom ?? [];
 	const dmPolicy = account.dmPolicy ?? "pairing";
 	const dmAllowFrom = configuredAllowFrom.length > 0 ? configuredAllowFrom : params.selfE164 ? [params.selfE164] : [];
-	const groupAllowFrom = account.groupAllowFrom ?? (configuredAllowFrom.length > 0 ? configuredAllowFrom : void 0) ?? [];
-	const { effectiveGroupAllowFrom } = resolveEffectiveAllowFromLists({
-		allowFrom: configuredAllowFrom,
-		groupAllowFrom
-	});
+	const groupAllowFrom = (Array.isArray(account.groupAllowFrom) && account.groupAllowFrom.length > 0 ? account.groupAllowFrom : void 0) ?? (configuredAllowFrom.length > 0 ? configuredAllowFrom : void 0) ?? [];
 	const defaultGroupPolicy = resolveDefaultGroupPolicy(params.cfg);
 	const { groupPolicy, providerMissingFallbackApplied } = resolveWhatsAppRuntimeGroupPolicy({
 		providerConfigPresent: params.cfg.channels?.whatsapp !== void 0,
@@ -62,15 +61,12 @@ function resolveWhatsAppInboundPolicy(params) {
 		groupAllowFrom,
 		isSelfChat: account.selfChatMode ?? isSelfChatMode(params.selfE164, configuredAllowFrom),
 		providerMissingFallbackApplied,
-		shouldReadStorePairingApprovals: dmPolicy !== "allowlist",
 		isSamePhone,
-		isDmSenderAllowed: (allowEntries, sender) => isSamePhone(sender) || isNormalizedSenderAllowed(allowEntries, sender),
-		isGroupSenderAllowed: (allowEntries, sender) => isNormalizedSenderAllowed(allowEntries, sender),
 		resolveConversationGroupPolicy: (conversationId) => resolveChannelGroupPolicy({
 			cfg: resolvedGroupCfg,
 			channel: "whatsapp",
 			groupId: resolveGroupConversationId(conversationId),
-			hasGroupAllowFrom: effectiveGroupAllowFrom.length > 0
+			hasGroupAllowFrom: groupAllowFrom.length > 0
 		}),
 		resolveConversationRequireMention: (conversationId) => resolveChannelGroupRequireMention({
 			cfg: resolvedGroupCfg,
@@ -79,9 +75,40 @@ function resolveWhatsAppInboundPolicy(params) {
 		})
 	};
 }
+async function resolveWhatsAppIngressAccess(params) {
+	const samePhoneDmAllowFrom = maybeSamePhoneDmAllowFrom({
+		isGroup: params.isGroup,
+		policy: params.policy,
+		dmSenderId: params.dmSenderId
+	});
+	const dmAllowFrom = [...params.policy.dmAllowFrom, ...samePhoneDmAllowFrom];
+	return await resolveStableChannelMessageIngress({
+		channelId: "whatsapp",
+		accountId: params.policy.account.accountId,
+		identity: {
+			key: "whatsapp-sender-phone",
+			kind: "phone",
+			normalize: normalizeWhatsAppIngressPhone,
+			sensitivity: "pii",
+			entryIdPrefix: "whatsapp-entry"
+		},
+		cfg: params.cfg,
+		useDefaultPairingStore: true,
+		subject: { stableId: params.senderId ?? "" },
+		conversation: {
+			kind: params.isGroup ? "group" : "direct",
+			id: params.conversationId
+		},
+		dmPolicy: params.policy.dmPolicy,
+		groupPolicy: params.policy.groupPolicy,
+		policy: { groupAllowFromFallbackToAllowFrom: false },
+		allowFrom: dmAllowFrom,
+		groupAllowFrom: params.policy.groupAllowFrom,
+		command: params.includeCommand === true ? {} : void 0
+	});
+}
 async function resolveWhatsAppCommandAuthorized(params) {
-	const useAccessGroups = params.cfg.commands?.useAccessGroups !== false;
-	if (!useAccessGroups) return true;
+	if (!(params.cfg.commands?.useAccessGroups !== false)) return true;
 	const self = getSelfIdentity(params.msg);
 	const policy = params.policy ?? resolveWhatsAppInboundPolicy({
 		cfg: params.cfg,
@@ -92,52 +119,16 @@ async function resolveWhatsAppCommandAuthorized(params) {
 	const sender = getSenderIdentity(params.msg);
 	const dmSender = sender.e164 ?? params.msg.from ?? "";
 	const groupSender = sender.e164 ?? "";
-	const normalizedSender = (0, text_runtime_exports.normalizeE164)(isGroup ? groupSender : dmSender);
-	if (!normalizedSender) return false;
-	const storeAllowFrom = isGroup || !policy.shouldReadStorePairingApprovals ? [] : await readStoreAllowFromForDmPolicy({
-		provider: "whatsapp",
-		accountId: policy.account.accountId,
-		dmPolicy: policy.dmPolicy,
-		shouldRead: policy.shouldReadStorePairingApprovals
-	});
-	const isSenderAllowed = (senderId, allowEntries) => isGroup ? policy.isGroupSenderAllowed(allowEntries, senderId) : policy.isDmSenderAllowed(allowEntries, senderId);
-	const [allowFrom, groupAllowFrom] = await Promise.all([expandAllowFromWithAccessGroups({
-		cfg: params.cfg,
-		allowFrom: policy.dmAllowFrom,
-		channel: "whatsapp",
-		accountId: policy.account.accountId,
-		senderId: normalizedSender,
-		isSenderAllowed
-	}), expandAllowFromWithAccessGroups({
+	if (!(0, text_runtime_exports.normalizeE164)(isGroup ? groupSender : dmSender)) return false;
+	return (await resolveWhatsAppIngressAccess({
 		cfg: params.cfg,
-		allowFrom: policy.groupAllowFrom,
-		channel: "whatsapp",
-		accountId: policy.account.accountId,
-		senderId: normalizedSender,
-		isSenderAllowed
-	})]);
-	const dmStoreAllowFrom = isGroup ? [] : await expandAllowFromWithAccessGroups({
-		cfg: params.cfg,
-		allowFrom: storeAllowFrom,
-		channel: "whatsapp",
-		accountId: policy.account.accountId,
-		senderId: normalizedSender,
-		isSenderAllowed
-	});
-	return resolveDmGroupAccessWithCommandGate({
+		policy,
 		isGroup,
-		dmPolicy: policy.dmPolicy,
-		groupPolicy: policy.groupPolicy,
-		allowFrom,
-		groupAllowFrom,
-		storeAllowFrom: dmStoreAllowFrom,
-		isSenderAllowed: (allowEntries) => isGroup ? policy.isGroupSenderAllowed(allowEntries, groupSender) : policy.isDmSenderAllowed(allowEntries, dmSender),
-		command: {
-			useAccessGroups,
-			allowTextCommands: true,
-			hasControlCommand: true
-		}
-	}).commandAuthorized;
+		conversationId: params.msg.conversationId ?? params.msg.chatId ?? params.msg.from,
+		senderId: isGroup ? groupSender : dmSender,
+		dmSenderId: dmSender,
+		includeCommand: true
+	})).commandAccess.authorized;
 }
 //#endregion
 //#region extensions/whatsapp/src/inbound/access-control.ts
@@ -152,12 +143,6 @@ async function checkInboundAccessControl(params) {
 		accountId: params.accountId,
 		selfE164: params.selfE164
 	});
-	const storeAllowFrom = params.group ? [] : await readStoreAllowFromForDmPolicy({
-		provider: "whatsapp",
-		accountId: policy.account.accountId,
-		dmPolicy: policy.dmPolicy,
-		shouldRead: policy.shouldReadStorePairingApprovals
-	});
 	const pairingGraceMs = typeof params.pairingGraceMs === "number" && params.pairingGraceMs > 0 ? params.pairingGraceMs : PAIRING_REPLY_HISTORY_GRACE_MS;
 	const suppressPairingReply = typeof params.connectedAtMs === "number" && typeof params.messageTimestampMs === "number" && params.messageTimestampMs < params.connectedAtMs - pairingGraceMs;
 	warnMissingProviderGroupPolicyFallbackOnce({
@@ -166,47 +151,17 @@ async function checkInboundAccessControl(params) {
 		accountId: policy.account.accountId,
 		log: (message) => logWhatsAppVerbose(params.verbose, message)
 	});
-	const accessGroupSenderId = params.group ? params.senderE164 ?? params.from : params.from;
-	const isAccessGroupSenderAllowed = (senderId, allowEntries) => {
-		return params.group ? policy.isGroupSenderAllowed(allowEntries, senderId) : policy.isDmSenderAllowed(allowEntries, senderId);
-	};
-	const [allowFrom, groupAllowFrom] = await Promise.all([expandAllowFromWithAccessGroups({
-		cfg: params.cfg,
-		allowFrom: params.group ? policy.configuredAllowFrom : policy.dmAllowFrom,
-		channel: "whatsapp",
-		accountId: policy.account.accountId,
-		senderId: accessGroupSenderId,
-		isSenderAllowed: isAccessGroupSenderAllowed
-	}), expandAllowFromWithAccessGroups({
+	const { senderAccess } = await resolveWhatsAppIngressAccess({
 		cfg: params.cfg,
-		allowFrom: policy.groupAllowFrom,
-		channel: "whatsapp",
-		accountId: policy.account.accountId,
-		senderId: accessGroupSenderId,
-		isSenderAllowed: isAccessGroupSenderAllowed
-	})]);
-	const dmStoreAllowFrom = params.group ? [] : await expandAllowFromWithAccessGroups({
-		cfg: params.cfg,
-		allowFrom: storeAllowFrom,
-		channel: "whatsapp",
-		accountId: policy.account.accountId,
-		senderId: accessGroupSenderId,
-		isSenderAllowed: isAccessGroupSenderAllowed
-	});
-	const access = resolveDmGroupAccessWithLists({
+		policy,
 		isGroup: params.group,
-		dmPolicy: policy.dmPolicy,
-		groupPolicy: policy.groupPolicy,
-		allowFrom,
-		groupAllowFrom,
-		storeAllowFrom: dmStoreAllowFrom,
-		isSenderAllowed: (allowEntries) => {
-			return params.group ? policy.isGroupSenderAllowed(allowEntries, params.senderE164) : policy.isDmSenderAllowed(allowEntries, params.from);
-		}
+		conversationId: params.remoteJid,
+		senderId: params.group ? params.senderE164 : params.from,
+		dmSenderId: params.from
 	});
-	if (params.group && access.decision !== "allow") {
-		if (access.reason === "groupPolicy=disabled") logWhatsAppVerbose(params.verbose, "Blocked group message (groupPolicy: disabled)");
-		else if (access.reason === "groupPolicy=allowlist (empty allowlist)") logWhatsAppVerbose(params.verbose, "Blocked group message (groupPolicy: allowlist, no groupAllowFrom)");
+	if (params.group && senderAccess.decision !== "allow") {
+		if (senderAccess.reasonCode === "group_policy_disabled") logWhatsAppVerbose(params.verbose, "Blocked group message (groupPolicy: disabled)");
+		else if (senderAccess.reasonCode === "group_policy_empty_allowlist") logWhatsAppVerbose(params.verbose, "Blocked group message (groupPolicy: allowlist, no groupAllowFrom)");
 		else logWhatsAppVerbose(params.verbose, `Blocked group message from ${params.senderE164 ?? "unknown sender"} (groupPolicy: allowlist)`);
 		return {
 			allowed: false,
@@ -225,7 +180,7 @@ async function checkInboundAccessControl(params) {
 				resolvedAccountId: policy.account.accountId
 			};
 		}
-		if (access.decision === "block" && access.reason === "dmPolicy=disabled") {
+		if (senderAccess.decision === "block" && senderAccess.reasonCode === "dm_policy_disabled") {
 			logWhatsAppVerbose(params.verbose, "Blocked dm (dmPolicy: disabled)");
 			return {
 				allowed: false,
@@ -234,7 +189,7 @@ async function checkInboundAccessControl(params) {
 				resolvedAccountId: policy.account.accountId
 			};
 		}
-		if (access.decision === "pairing" && !policy.isSamePhone(params.from)) {
+		if (senderAccess.decision === "pairing" && !policy.isSamePhone(params.from)) {
 			const candidate = params.from;
 			if (suppressPairingReply) logWhatsAppVerbose(params.verbose, `Skipping pairing reply for historical DM from ${candidate}.`);
 			else await createChannelPairingChallengeIssuer({
@@ -266,7 +221,7 @@ async function checkInboundAccessControl(params) {
 				resolvedAccountId: policy.account.accountId
 			};
 		}
-		if (access.decision !== "allow") {
+		if (senderAccess.decision !== "allow") {
 			logWhatsAppVerbose(params.verbose, `Blocked unauthorized sender ${params.from} (dmPolicy=${policy.dmPolicy})`);
 			return {
 				allowed: false,

package/dist/{action-runtime-flTHnBac.js → action-runtime-CMhO8liB.js}

@@ -1,7 +1,7 @@
 import { a as resolveWhatsAppAccount } from "./accounts-BDqgpFEB.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-CQ3Y1i0g.js";
 import { t as resolveWhatsAppReactionLevel } from "./reaction-level-CRVEVAfi.js";
-import { r as sendReactionWhatsApp } from "./send-CLBN7TZv.js";
+import { r as sendReactionWhatsApp } from "./send-u88yh8Hw.js";
 import { ToolAuthorizationError, createActionGate, jsonResult, readReactionParams, readStringParam } from "openclaw/plugin-sdk/channel-actions";
 //#region extensions/whatsapp/src/action-runtime-target-auth.ts
 function resolveAuthorizedWhatsAppOutboundTarget(params) {

package/dist/action-runtime-api.js

@@ -1,2 +1,2 @@
-import { t as handleWhatsAppAction } from "./action-runtime-flTHnBac.js";
+import { t as handleWhatsAppAction } from "./action-runtime-CMhO8liB.js";
 export { handleWhatsAppAction };

package/dist/action-runtime.runtime.js

@@ -1,2 +1,2 @@
-import { t as handleWhatsAppAction } from "./action-runtime-flTHnBac.js";
+import { t as handleWhatsAppAction } from "./action-runtime-CMhO8liB.js";
 export { handleWhatsAppAction };

package/dist/api.js

@@ -1,21 +1,21 @@
+import { a as markdownToWhatsApp, i as jidToE164, n as assertWebChannel, o as resolveJidToE164, r as isSelfChatMode, s as toWhatsappJid, t as text_runtime_exports } from "./text-runtime-DBKC9uEi.js";
 import { r as resolveDefaultWhatsAppAccountId, t as listAccountIds } from "./account-ids-DG18xddX.js";
 import { a as resolveWhatsAppAccount, i as listWhatsAppAuthDirs, n as hasAnyWhatsAppAuth, o as resolveWhatsAppAuthDir, r as listEnabledWhatsAppAccounts, s as resolveWhatsAppMediaMaxBytes, t as DEFAULT_WHATSAPP_MEDIA_MAX_MB } from "./accounts-BDqgpFEB.js";
 import { a as normalizeWhatsAppAllowFromEntries, c as normalizeWhatsAppTarget, i as looksLikeWhatsAppTargetId, r as isWhatsAppUserTarget, s as normalizeWhatsAppMessagingTarget, t as isWhatsAppGroupJid } from "./normalize-target-nXxC_hxG.js";
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-CQ3Y1i0g.js";
 import "./reaction-level-CRVEVAfi.js";
-import { a as markdownToWhatsApp, i as jidToE164, n as assertWebChannel, o as resolveJidToE164, r as isSelfChatMode, s as toWhatsappJid, t as text_runtime_exports } from "./text-runtime-DFFwk5z6.js";
-import "./send-CLBN7TZv.js";
-import { t as whatsappPlugin } from "./channel-Dnv-QeNE.js";
-import { n as WHATSAPP_LEGACY_OUTBOUND_SEND_DEP_KEYS } from "./outbound-base-CCx7atwc.js";
-import { t as whatsappCommandPolicy } from "./command-policy-O8sRnqUV.js";
-import { a as resolveWhatsAppGroupToolPolicy, i as resolveWhatsAppGroupRequireMention, o as resolveWhatsAppGroupIntroHint } from "./shared-h4cwNeYT.js";
-import "./config-schema-Dmo66Ubb.js";
-import { t as whatsappSetupPlugin } from "./channel.setup-CV0OjAwl.js";
-import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-DLGCIbfl.js";
-import { n as listWhatsAppDirectoryGroupsFromConfig, r as listWhatsAppDirectoryPeersFromConfig } from "./directory-config-BNCbgnmy.js";
-import { t as __testing } from "./access-control-hFVqAWSd.js";
-import { p as extractText, t as createWebSendApi } from "./send-api-DoycpOvC.js";
-import { r as waitForWaConnection, t as createWaSocket } from "./session-BXC3R43P.js";
+import "./send-u88yh8Hw.js";
+import { t as whatsappPlugin } from "./channel-BxntAClG.js";
+import { n as WHATSAPP_LEGACY_OUTBOUND_SEND_DEP_KEYS } from "./outbound-base-MVpg2zU2.js";
+import { t as whatsappCommandPolicy } from "./command-policy-BgZRZ31o.js";
+import { a as resolveWhatsAppGroupToolPolicy, i as resolveWhatsAppGroupRequireMention, o as resolveWhatsAppGroupIntroHint } from "./shared-CgYT3IzU.js";
+import "./config-schema-cSC7M4YA.js";
+import { t as whatsappSetupPlugin } from "./channel.setup-BqlcEVzR.js";
+import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-yKXGCGU9.js";
+import { n as listWhatsAppDirectoryGroupsFromConfig, r as listWhatsAppDirectoryPeersFromConfig } from "./directory-config-o-muXLgk.js";
+import { t as __testing } from "./access-control-CdP8S3rJ.js";
+import { p as extractText, t as createWebSendApi } from "./send-api-DsbCqDre.js";
+import { r as waitForWaConnection, t as createWaSocket } from "./session-DeIU_vjJ.js";
 import "openclaw/plugin-sdk/channel-actions";
 import "openclaw/plugin-sdk/account-resolution";
 import "openclaw/plugin-sdk/core";

package/dist/{auth-store-CG0eSZ0D.js → auth-store-CjEimXKX.js}

@@ -1,6 +1,6 @@
+import { t as text_runtime_exports } from "./text-runtime-DBKC9uEi.js";
 import { n as resolveWebCredsBackupPath, r as resolveWebCredsPath } from "./creds-files-_2V8jzQa.js";
-import { t as text_runtime_exports } from "./text-runtime-DFFwk5z6.js";
-import { c as resolveComparableIdentity } from "./identity-DhaC0MoD.js";
+import { c as resolveComparableIdentity } from "./identity-KxdJfH7p.js";
 import fs from "node:fs";
 import path from "node:path";
 import { resolveOAuthDir as resolveOAuthDir$1 } from "openclaw/plugin-sdk/state-paths";
@@ -14,7 +14,7 @@ const CREDS_FILE_MODE = 384;
 const CREDS_SAVE_FLUSH_TIMEOUT_MS = 15e3;
 const credsSaveQueues = /* @__PURE__ */ new Map();
 async function stringifyCreds(creds) {
-	const { BufferJSON } = await import("./session.runtime-CVhtXjTk.js").then((n) => n.a);
+	const { BufferJSON } = await import("./session.runtime-B9VlYnWQ.js").then((n) => n.a);
 	return JSON.stringify(creds, BufferJSON.replacer);
 }
 async function writeCredsJsonAtomically(authDir, creds) {

package/dist/{channel-Dnv-QeNE.js → channel-BxntAClG.js}

@@ -4,16 +4,16 @@ import { c as normalizeWhatsAppTarget, i as looksLikeWhatsAppTargetId, n as isWh
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-CQ3Y1i0g.js";
 import { t as resolveWhatsAppReactionLevel } from "./reaction-level-CRVEVAfi.js";
 import "./normalize-Y3eBdM8a.js";
-import { r as normalizeWhatsAppPayloadTextPreservingIndentation } from "./outbound-media-contract-Dzi1ILTd.js";
-import { i as sendTypingWhatsApp, n as sendPollWhatsApp, t as sendMessageWhatsApp } from "./send-CLBN7TZv.js";
-import { t as createWhatsAppLoginTool } from "./agent-tools-login-DpRxLNRB.js";
-import { t as createWhatsAppOutboundBase } from "./outbound-base-CCx7atwc.js";
-import { t as getWhatsAppRuntime } from "./runtime-6fZ67abR.js";
-import { t as whatsappCommandPolicy } from "./command-policy-O8sRnqUV.js";
-import { a as resolveWhatsAppGroupToolPolicy, c as formatWhatsAppConfigAllowFromEntries, i as resolveWhatsAppGroupRequireMention, n as loadWhatsAppChannelRuntime, o as resolveWhatsAppGroupIntroHint, r as whatsappSetupWizardProxy, s as resolveWhatsAppMentionStripRegexes, t as createWhatsAppPluginBase } from "./shared-h4cwNeYT.js";
-import { d as readWebAuthExistsForDecision, n as WHATSAPP_AUTH_UNSTABLE_CODE } from "./auth-store-CG0eSZ0D.js";
-import { t as whatsappSetupAdapter } from "./setup-core-DZKvpzbH.js";
-import { t as detectWhatsAppLegacyStateMigrations } from "./state-migrations-Bm0S67yH.js";
+import { r as normalizeWhatsAppPayloadTextPreservingIndentation } from "./outbound-media-contract-BzWwBppP.js";
+import { i as sendTypingWhatsApp, n as sendPollWhatsApp, t as sendMessageWhatsApp } from "./send-u88yh8Hw.js";
+import { t as createWhatsAppLoginTool } from "./agent-tools-login-DYKYW5Nh.js";
+import { t as createWhatsAppOutboundBase } from "./outbound-base-MVpg2zU2.js";
+import { t as getWhatsAppRuntime } from "./runtime-DdodQB8G.js";
+import { t as whatsappCommandPolicy } from "./command-policy-BgZRZ31o.js";
+import { a as resolveWhatsAppGroupToolPolicy, c as formatWhatsAppConfigAllowFromEntries, i as resolveWhatsAppGroupRequireMention, n as loadWhatsAppChannelRuntime, o as resolveWhatsAppGroupIntroHint, r as whatsappSetupWizardProxy, s as resolveWhatsAppMentionStripRegexes, t as createWhatsAppPluginBase } from "./shared-CgYT3IzU.js";
+import { d as readWebAuthExistsForDecision, n as WHATSAPP_AUTH_UNSTABLE_CODE } from "./auth-store-CjEimXKX.js";
+import { t as whatsappSetupAdapter } from "./setup-core-DnhO0PjG.js";
+import { t as detectWhatsAppLegacyStateMigrations } from "./state-migrations-CtdIArlK.js";
 import { createActionGate as createActionGate$1 } from "openclaw/plugin-sdk/channel-actions";
 import { formatCliCommand } from "openclaw/plugin-sdk/cli-runtime";
 import { buildChannelOutboundSessionRoute } from "openclaw/plugin-sdk/core";
@@ -322,8 +322,8 @@ function collectWhatsAppStatusIssues(accounts) {
 }
 //#endregion
 //#region extensions/whatsapp/src/channel.ts
-const loadWhatsAppDirectoryConfig = createLazyRuntimeModule(() => import("./directory-config-BNCbgnmy.js").then((n) => n.t));
-const loadWhatsAppChannelReactAction = createLazyRuntimeModule(() => import("./channel-react-action-LOuxBqX6.js"));
+const loadWhatsAppDirectoryConfig = createLazyRuntimeModule(() => import("./directory-config-o-muXLgk.js").then((n) => n.t));
+const loadWhatsAppChannelReactAction = createLazyRuntimeModule(() => import("./channel-react-action-DJvzhIPw.js"));
 function parseWhatsAppExplicitTarget(raw) {
 	const normalized = normalizeWhatsAppTarget(raw);
 	if (!normalized) return null;

package/dist/channel-config-api.js

@@ -1,2 +1,2 @@
-import { t as WhatsAppChannelConfigSchema } from "./config-schema-Dmo66Ubb.js";
+import { t as WhatsAppChannelConfigSchema } from "./config-schema-cSC7M4YA.js";
 export { WhatsAppChannelConfigSchema };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as whatsappPlugin } from "./channel-Dnv-QeNE.js";
+import { t as whatsappPlugin } from "./channel-BxntAClG.js";
 export { whatsappPlugin };

package/dist/{channel-react-action-LOuxBqX6.js → channel-react-action-DJvzhIPw.js}

@@ -1,5 +1,5 @@
 import { c as normalizeWhatsAppTarget, t as isWhatsAppGroupJid } from "./normalize-target-nXxC_hxG.js";
-import { t as handleWhatsAppAction } from "./action-runtime-flTHnBac.js";
+import { t as handleWhatsAppAction } from "./action-runtime-CMhO8liB.js";
 import "./normalize-Y3eBdM8a.js";
 import { readStringOrNumberParam, readStringParam as readStringParam$1, resolveReactionMessageId } from "openclaw/plugin-sdk/channel-actions";
 //#region extensions/whatsapp/src/channel-react-action.ts

package/dist/{channel.runtime-CCZpOzbU.js → channel.runtime-CNdPCK3G.js}

@@ -1,9 +1,9 @@
 import { startWebLoginWithQr as startWebLoginWithQr$1, waitForWebLogin as waitForWebLogin$1 } from "./login-qr-runtime.js";
-import { a as getWebAuthAgeMs$1, b as webAuthExists$1, d as readWebAuthExistsForDecision$1, f as readWebAuthSnapshot$1, h as readWebSelfId$1, m as readWebAuthState$1, o as logWebSelfId$1, p as readWebAuthSnapshotBestEffort$1, s as logoutWeb$1, u as readWebAuthExistsBestEffort$1 } from "./auth-store-CG0eSZ0D.js";
-import { t as getActiveWebListener$1 } from "./active-listener-DTbKS-j-.js";
-import { t as monitorWebChannel$1 } from "./monitor-5u0dVXnB.js";
-import { t as loginWeb$1 } from "./login-B_u009k0.js";
-import { whatsappSetupWizard as whatsappSetupWizard$1 } from "./setup-surface-RbOpXjSR.js";
+import { a as getWebAuthAgeMs$1, b as webAuthExists$1, d as readWebAuthExistsForDecision$1, f as readWebAuthSnapshot$1, h as readWebSelfId$1, m as readWebAuthState$1, o as logWebSelfId$1, p as readWebAuthSnapshotBestEffort$1, s as logoutWeb$1, u as readWebAuthExistsBestEffort$1 } from "./auth-store-CjEimXKX.js";
+import { t as getActiveWebListener$1 } from "./active-listener-D2NHQ5Og.js";
+import { t as monitorWebChannel$1 } from "./monitor-mfy3Mmq-.js";
+import { t as loginWeb$1 } from "./login-DV99D0IN.js";
+import { whatsappSetupWizard as whatsappSetupWizard$1 } from "./setup-surface-CHjYlKJc.js";
 //#region extensions/whatsapp/src/channel.runtime.ts
 function getActiveWebListener(...args) {
 	return getActiveWebListener$1(...args);

package/dist/{channel.setup-CV0OjAwl.js → channel.setup-BqlcEVzR.js}

@@ -1,7 +1,7 @@
-import { a as resolveWhatsAppGroupToolPolicy, i as resolveWhatsAppGroupRequireMention, o as resolveWhatsAppGroupIntroHint, r as whatsappSetupWizardProxy, t as createWhatsAppPluginBase } from "./shared-h4cwNeYT.js";
-import { m as readWebAuthState } from "./auth-store-CG0eSZ0D.js";
-import { t as whatsappSetupAdapter } from "./setup-core-DZKvpzbH.js";
-import { t as detectWhatsAppLegacyStateMigrations } from "./state-migrations-Bm0S67yH.js";
+import { a as resolveWhatsAppGroupToolPolicy, i as resolveWhatsAppGroupRequireMention, o as resolveWhatsAppGroupIntroHint, r as whatsappSetupWizardProxy, t as createWhatsAppPluginBase } from "./shared-CgYT3IzU.js";
+import { m as readWebAuthState } from "./auth-store-CjEimXKX.js";
+import { t as whatsappSetupAdapter } from "./setup-core-DnhO0PjG.js";
+import { t as detectWhatsAppLegacyStateMigrations } from "./state-migrations-CtdIArlK.js";
 //#region extensions/whatsapp/src/channel.setup.ts
 const whatsappSetupPlugin = {
 	...createWhatsAppPluginBase({

package/dist/{connection-controller-d8D2iUBj.js → connection-controller-DX2phM7V.js}

@@ -1,7 +1,7 @@
 import { n as registerWhatsAppConnectionController, r as unregisterWhatsAppConnectionController } from "./connection-controller-registry-D_iIGz5m.js";
 import { n as getStatusCode, t as formatError } from "./session-errors-CSuKZPub.js";
-import { s as logoutWeb } from "./auth-store-CG0eSZ0D.js";
-import { r as waitForWaConnection, t as createWaSocket } from "./session-BXC3R43P.js";
+import { s as logoutWeb } from "./auth-store-CjEimXKX.js";
+import { r as waitForWaConnection, t as createWaSocket } from "./session-DeIU_vjJ.js";
 import { clamp } from "openclaw/plugin-sdk/text-runtime";
 import { computeBackoff, info, sleepWithAbort } from "openclaw/plugin-sdk/runtime-env";
 import { DisconnectReason } from "@whiskeysockets/baileys";

package/dist/constants.js

@@ -1,2 +1,2 @@
-import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-DLGCIbfl.js";
+import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-yKXGCGU9.js";
 export { DEFAULT_WEB_MEDIA_BYTES };

package/dist/contract-api.js

@@ -1,11 +1,11 @@
 import { c as normalizeWhatsAppTarget$1, t as isWhatsAppGroupJid$1 } from "./normalize-target-nXxC_hxG.js";
-import { t as whatsappCommandPolicy$1 } from "./command-policy-O8sRnqUV.js";
-import { t as resolveLegacyGroupSessionKey$1 } from "./group-session-contract-B8QBn0I2.js";
-import { n as unsupportedSecretRefSurfacePatterns, t as collectUnsupportedSecretRefConfigCandidates } from "./security-contract-DqH8JDX6.js";
-import { r as isLegacyGroupSessionKey$1, t as canonicalizeLegacySessionKey$1 } from "./session-contract-B0efQf9P.js";
-import { n as listWhatsAppDirectoryGroupsFromConfig, r as listWhatsAppDirectoryPeersFromConfig } from "./directory-config-BNCbgnmy.js";
-import { t as resolveWhatsAppRuntimeGroupPolicy$1 } from "./runtime-group-policy-Gp1lQ0at.js";
-import { t as __testing } from "./access-control-hFVqAWSd.js";
+import { t as whatsappCommandPolicy$1 } from "./command-policy-BgZRZ31o.js";
+import { t as resolveLegacyGroupSessionKey$1 } from "./group-session-contract-DL-SLclv.js";
+import { n as unsupportedSecretRefSurfacePatterns, t as collectUnsupportedSecretRefConfigCandidates } from "./security-contract-BzlZFreO.js";
+import { r as isLegacyGroupSessionKey$1, t as canonicalizeLegacySessionKey$1 } from "./session-contract-BNUscPf4.js";
+import { n as listWhatsAppDirectoryGroupsFromConfig, r as listWhatsAppDirectoryPeersFromConfig } from "./directory-config-o-muXLgk.js";
+import { t as resolveWhatsAppRuntimeGroupPolicy$1 } from "./runtime-group-policy-BH_U23qp.js";
+import { t as __testing } from "./access-control-CdP8S3rJ.js";
 //#region extensions/whatsapp/contract-api.ts
 const canonicalizeLegacySessionKey = canonicalizeLegacySessionKey$1;
 const isLegacyGroupSessionKey = isLegacyGroupSessionKey$1;

package/dist/{directory-config-BNCbgnmy.js → directory-config-o-muXLgk.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-RkAeH_Qm.js";
+import { l as __exportAll } from "./text-runtime-DBKC9uEi.js";
 import { t as resolveMergedWhatsAppAccountConfig } from "./account-config-CNQ33oav.js";
 import { c as normalizeWhatsAppTarget, t as isWhatsAppGroupJid } from "./normalize-target-nXxC_hxG.js";
 import "./normalize-Y3eBdM8a.js";

package/dist/directory-contract-api.js

@@ -1,2 +1,2 @@
-import { n as listWhatsAppDirectoryGroupsFromConfig, r as listWhatsAppDirectoryPeersFromConfig } from "./directory-config-BNCbgnmy.js";
+import { n as listWhatsAppDirectoryGroupsFromConfig, r as listWhatsAppDirectoryPeersFromConfig } from "./directory-config-o-muXLgk.js";
 export { listWhatsAppDirectoryGroupsFromConfig, listWhatsAppDirectoryPeersFromConfig };

package/dist/doctor-contract-api.js

@@ -1,4 +1,4 @@
-import { t as normalizeCompatibilityConfig$1 } from "./doctor-A9tXm9Om.js";
+import { t as normalizeCompatibilityConfig$1 } from "./doctor-BrgepDUP.js";
 //#region extensions/whatsapp/src/doctor-contract.ts
 function normalizeCompatibilityConfig({ cfg }) {
 	return normalizeCompatibilityConfig$1({ cfg });

package/dist/{identity-DhaC0MoD.js → identity-KxdJfH7p.js}

@@ -1,4 +1,4 @@
-import { i as jidToE164, t as text_runtime_exports } from "./text-runtime-DFFwk5z6.js";
+import { i as jidToE164, t as text_runtime_exports } from "./text-runtime-DBKC9uEi.js";
 //#region extensions/whatsapp/src/identity.ts
 const WHATSAPP_LID_RE = /@(lid|hosted\.lid)$/i;
 function normalizeDeviceScopedJid(jid) {

package/dist/legacy-session-surface-api.js

@@ -1,4 +1,4 @@
-import { r as isLegacyGroupSessionKey, t as canonicalizeLegacySessionKey } from "./session-contract-B0efQf9P.js";
+import { r as isLegacyGroupSessionKey, t as canonicalizeLegacySessionKey } from "./session-contract-BNUscPf4.js";
 //#region extensions/whatsapp/legacy-session-surface-api.ts
 const whatsappLegacySessionSurface = {
 	isLegacyGroupSessionKey,

package/dist/legacy-state-migrations-api.js

@@ -1,2 +1,2 @@
-import { t as detectWhatsAppLegacyStateMigrations } from "./state-migrations-Bm0S67yH.js";
+import { t as detectWhatsAppLegacyStateMigrations } from "./state-migrations-CtdIArlK.js";
 export { detectWhatsAppLegacyStateMigrations };

package/dist/light-runtime-api.js

@@ -1,5 +1,5 @@
 import { n as getStatusCode, t as formatError } from "./session-errors-CSuKZPub.js";
-import { t as createWhatsAppLoginTool } from "./agent-tools-login-DpRxLNRB.js";
-import { a as getWebAuthAgeMs, b as webAuthExists, c as pickWebChannel, h as readWebSelfId, o as logWebSelfId, s as logoutWeb, t as WA_WEB_AUTH_DIR } from "./auth-store-CG0eSZ0D.js";
-import { t as getActiveWebListener } from "./active-listener-DTbKS-j-.js";
+import { t as createWhatsAppLoginTool } from "./agent-tools-login-DYKYW5Nh.js";
+import { a as getWebAuthAgeMs, b as webAuthExists, c as pickWebChannel, h as readWebSelfId, o as logWebSelfId, s as logoutWeb, t as WA_WEB_AUTH_DIR } from "./auth-store-CjEimXKX.js";
+import { t as getActiveWebListener } from "./active-listener-D2NHQ5Og.js";
 export { WA_WEB_AUTH_DIR, createWhatsAppLoginTool, formatError, getActiveWebListener, getStatusCode, getWebAuthAgeMs, logWebSelfId, logoutWeb, pickWebChannel, readWebSelfId, webAuthExists };

package/dist/{login-B_u009k0.js → login-DV99D0IN.js}

@@ -1,8 +1,8 @@
-import { t as __exportAll } from "./rolldown-runtime-RkAeH_Qm.js";
+import { l as __exportAll } from "./text-runtime-DBKC9uEi.js";
 import { a as resolveWhatsAppAccount } from "./accounts-BDqgpFEB.js";
-import { y as restoreCredsFromBackupIfNeeded } from "./auth-store-CG0eSZ0D.js";
-import { a as renderQrTerminal, i as resolveWhatsAppSocketTiming, t as createWaSocket } from "./session-BXC3R43P.js";
-import { a as waitForWhatsAppLoginResult, i as closeWaSocketSoon } from "./connection-controller-d8D2iUBj.js";
+import { y as restoreCredsFromBackupIfNeeded } from "./auth-store-CjEimXKX.js";
+import { a as renderQrTerminal, i as resolveWhatsAppSocketTiming, t as createWaSocket } from "./session-DeIU_vjJ.js";
+import { a as waitForWhatsAppLoginResult, i as closeWaSocketSoon } from "./connection-controller-DX2phM7V.js";
 import { logInfo } from "openclaw/plugin-sdk/text-runtime";
 import { formatCliCommand } from "openclaw/plugin-sdk/cli-runtime";
 import { danger, defaultRuntime, success } from "openclaw/plugin-sdk/runtime-env";

package/dist/{login-qr-C0b7I7hu.js → login-qr-cKndAXTv.js}

@@ -1,7 +1,7 @@
 import { a as resolveWhatsAppAccount } from "./accounts-BDqgpFEB.js";
-import { d as readWebAuthExistsForDecision, h as readWebSelfId, n as WHATSAPP_AUTH_UNSTABLE_CODE } from "./auth-store-CG0eSZ0D.js";
-import { i as resolveWhatsAppSocketTiming, t as createWaSocket } from "./session-BXC3R43P.js";
-import { a as waitForWhatsAppLoginResult, r as closeWaSocket, t as WHATSAPP_LOGGED_OUT_QR_MESSAGE } from "./connection-controller-d8D2iUBj.js";
+import { d as readWebAuthExistsForDecision, h as readWebSelfId, n as WHATSAPP_AUTH_UNSTABLE_CODE } from "./auth-store-CjEimXKX.js";
+import { i as resolveWhatsAppSocketTiming, t as createWaSocket } from "./session-DeIU_vjJ.js";
+import { a as waitForWhatsAppLoginResult, r as closeWaSocket, t as WHATSAPP_LOGGED_OUT_QR_MESSAGE } from "./connection-controller-DX2phM7V.js";
 import { logInfo } from "openclaw/plugin-sdk/text-runtime";
 import { danger, defaultRuntime, info, success } from "openclaw/plugin-sdk/runtime-env";
 import { renderQrPngDataUrl } from "openclaw/plugin-sdk/media-runtime";

package/dist/login-qr-runtime.js

@@ -1,7 +1,7 @@
 //#region extensions/whatsapp/login-qr-runtime.ts
 let loginQrModulePromise = null;
 function loadLoginQrModule() {
-	loginQrModulePromise ??= import("./login-qr-C0b7I7hu.js");
+	loginQrModulePromise ??= import("./login-qr-cKndAXTv.js");
 	return loginQrModulePromise;
 }
 async function startWebLoginWithQr(...args) {

package/dist/{monitor-5u0dVXnB.js → monitor-mfy3Mmq-.js}

@@ -1,17 +1,17 @@
+import { a as markdownToWhatsApp, i as jidToE164, o as resolveJidToE164, r as isSelfChatMode, t as text_runtime_exports } from "./text-runtime-DBKC9uEi.js";
 import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-BDqgpFEB.js";
 import { t as isWhatsAppGroupJid } from "./normalize-target-nXxC_hxG.js";
 import { t as resolveWhatsAppReactionLevel } from "./reaction-level-CRVEVAfi.js";
 import { n as getStatusCode, t as formatError } from "./session-errors-CSuKZPub.js";
-import { a as markdownToWhatsApp, i as jidToE164, o as resolveJidToE164, r as isSelfChatMode, t as text_runtime_exports } from "./text-runtime-DFFwk5z6.js";
-import { i as prepareWhatsAppOutboundMedia, o as sendWhatsAppOutboundWithRetry, r as normalizeWhatsAppPayloadTextPreservingIndentation, t as normalizeWhatsAppOutboundPayload } from "./outbound-media-contract-Dzi1ILTd.js";
-import { r as sendReactionWhatsApp } from "./send-CLBN7TZv.js";
-import { n as cacheInboundMessageMeta, r as lookupInboundMessageMeta, t as buildQuotedMessageOptions } from "./quoted-message-BXs55Teh.js";
-import { _ as readWebSelfIdentityForDecision, a as getWebAuthAgeMs, h as readWebSelfId, r as WhatsAppAuthUnstableError, s as logoutWeb } from "./auth-store-CG0eSZ0D.js";
-import { a as getSelfIdentity, c as resolveComparableIdentity, i as getReplyContext, n as getMentionIdentities, o as getSenderIdentity, r as getPrimaryIdentityId, s as identitiesOverlap, t as getComparableIdentityValues } from "./identity-DhaC0MoD.js";
-import { i as resolveWhatsAppInboundPolicy, n as checkInboundAccessControl, r as resolveWhatsAppCommandAuthorized } from "./access-control-hFVqAWSd.js";
-import { a as mayContainWhatsAppOutboundMention, c as extractContactContext, d as extractMediaPlaceholder, f as extractMentionedJids, i as addWhatsAppOutboundMentionsToContent, l as extractContextInfo, m as hasInboundUserContent, n as listWhatsAppSendResultMessageIds, o as resolveWhatsAppOutboundMentions, p as extractText, r as normalizeWhatsAppSendResult, s as describeReplyContext, t as createWebSendApi, u as extractLocationData } from "./send-api-DoycpOvC.js";
-import { i as resolveWhatsAppSocketTiming, r as waitForWaConnection, t as createWaSocket } from "./session-BXC3R43P.js";
-import { c as newConnectionId, d as sleepWithAbort, l as resolveHeartbeatSeconds, n as WhatsAppConnectionController, o as DEFAULT_RECONNECT_POLICY, s as computeBackoff, u as resolveReconnectPolicy } from "./connection-controller-d8D2iUBj.js";
+import { i as prepareWhatsAppOutboundMedia, o as sendWhatsAppOutboundWithRetry, r as normalizeWhatsAppPayloadTextPreservingIndentation, t as normalizeWhatsAppOutboundPayload } from "./outbound-media-contract-BzWwBppP.js";
+import { r as sendReactionWhatsApp } from "./send-u88yh8Hw.js";
+import { n as cacheInboundMessageMeta, r as lookupInboundMessageMeta, t as buildQuotedMessageOptions } from "./quoted-message-DQ6hAr34.js";
+import { _ as readWebSelfIdentityForDecision, a as getWebAuthAgeMs, h as readWebSelfId, r as WhatsAppAuthUnstableError, s as logoutWeb } from "./auth-store-CjEimXKX.js";
+import { a as getSelfIdentity, c as resolveComparableIdentity, i as getReplyContext, n as getMentionIdentities, o as getSenderIdentity, r as getPrimaryIdentityId, s as identitiesOverlap, t as getComparableIdentityValues } from "./identity-KxdJfH7p.js";
+import { i as resolveWhatsAppInboundPolicy, n as checkInboundAccessControl, r as resolveWhatsAppCommandAuthorized } from "./access-control-CdP8S3rJ.js";
+import { a as mayContainWhatsAppOutboundMention, c as extractContactContext, d as extractMediaPlaceholder, f as extractMentionedJids, i as addWhatsAppOutboundMentionsToContent, l as extractContextInfo, m as hasInboundUserContent, n as listWhatsAppSendResultMessageIds, o as resolveWhatsAppOutboundMentions, p as extractText, r as normalizeWhatsAppSendResult, s as describeReplyContext, t as createWebSendApi, u as extractLocationData } from "./send-api-DsbCqDre.js";
+import { i as resolveWhatsAppSocketTiming, r as waitForWaConnection, t as createWaSocket } from "./session-DeIU_vjJ.js";
+import { c as newConnectionId, d as sleepWithAbort, l as resolveHeartbeatSeconds, n as WhatsAppConnectionController, o as DEFAULT_RECONNECT_POLICY, s as computeBackoff, u as resolveReconnectPolicy } from "./connection-controller-DX2phM7V.js";
 import { resolveAccountEntry } from "openclaw/plugin-sdk/account-core";
 import { getChildLogger, normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/text-runtime";
 import { createAckReactionHandle, logAckFailure, removeAckReactionHandleAfterReply, shouldAckReactionForWhatsApp } from "openclaw/plugin-sdk/channel-feedback";
@@ -2003,11 +2003,18 @@ async function processMessage(params) {
 	let audioTranscript = params.preflightAudioTranscript ?? void 0;
 	const hasAudioBody = params.msg.mediaType?.startsWith("audio/") === true && params.msg.body === "<media:audio>";
 	if (params.preflightAudioTranscript === void 0 && hasAudioBody && params.msg.mediaPath) try {
-		const { transcribeFirstAudio } = await import("./audio-preflight.runtime-MmkB-pgX.js");
+		const { transcribeFirstAudio } = await import("./audio-preflight.runtime-CIFjeaEN.js");
 		audioTranscript = await transcribeFirstAudio({
 			ctx: {
 				MediaPaths: [params.msg.mediaPath],
-				MediaTypes: params.msg.mediaType ? [params.msg.mediaType] : void 0
+				MediaTypes: params.msg.mediaType ? [params.msg.mediaType] : void 0,
+				From: params.msg.from,
+				To: params.msg.to,
+				Provider: "whatsapp",
+				Surface: "whatsapp",
+				OriginatingChannel: "whatsapp",
+				OriginatingTo: conversationId,
+				AccountId: params.route.accountId
 			},
 			cfg: params.cfg
 		});
@@ -2317,11 +2324,18 @@ function createWebOnMessageHandler(params) {
 			});
 			ackAlreadySent = ackReaction !== null;
 			try {
-				const { transcribeFirstAudio } = await import("./audio-preflight.runtime-MmkB-pgX.js");
+				const { transcribeFirstAudio } = await import("./audio-preflight.runtime-CIFjeaEN.js");
 				preflightAudioTranscript = await transcribeFirstAudio({
 					ctx: {
 						MediaPaths: [msg.mediaPath],
-						MediaTypes: msg.mediaType ? [msg.mediaType] : void 0
+						MediaTypes: msg.mediaType ? [msg.mediaType] : void 0,
+						From: msg.from,
+						To: msg.to,
+						Provider: "whatsapp",
+						Surface: "whatsapp",
+						OriginatingChannel: "whatsapp",
+						OriginatingTo: conversationId,
+						AccountId: route.accountId
 					},
 					cfg: params.cfg
 				}) ?? null;
@@ -2433,7 +2447,7 @@ function isNonRetryableWebCloseStatus(statusCode) {
 }
 let replyResolverRuntimePromise = null;
 function loadReplyResolverRuntime() {
-	replyResolverRuntimePromise ??= import("./reply-resolver.runtime-rIVWohXr.js");
+	replyResolverRuntimePromise ??= import("./reply-resolver.runtime-CROyXXQh.js");
 	return replyResolverRuntimePromise;
 }
 function normalizeReconnectAccountId(accountId) {

package/dist/{outbound-adapter-BoHBD2S7.js → outbound-adapter-B9ZW8sht.js}

@@ -1,12 +1,12 @@
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-CQ3Y1i0g.js";
-import { n as normalizeWhatsAppPayloadText } from "./outbound-media-contract-Dzi1ILTd.js";
-import { t as createWhatsAppOutboundBase } from "./outbound-base-CCx7atwc.js";
+import { n as normalizeWhatsAppPayloadText } from "./outbound-media-contract-BzWwBppP.js";
+import { t as createWhatsAppOutboundBase } from "./outbound-base-MVpg2zU2.js";
 import { shouldLogVerbose } from "openclaw/plugin-sdk/runtime-env";
 import { chunkText } from "openclaw/plugin-sdk/reply-chunking";
 //#region extensions/whatsapp/src/outbound-adapter.ts
 let whatsAppSendModulePromise;
 function loadWhatsAppSendModule() {
-	whatsAppSendModulePromise ??= import("./send-CLBN7TZv.js").then((n) => n.a);
+	whatsAppSendModulePromise ??= import("./send-u88yh8Hw.js").then((n) => n.a);
 	return whatsAppSendModulePromise;
 }
 function normalizeOutboundText(text) {

package/dist/{outbound-base-CCx7atwc.js → outbound-base-MVpg2zU2.js}

@@ -1,6 +1,6 @@
-import { s as toWhatsappJid } from "./text-runtime-DFFwk5z6.js";
-import { n as normalizeWhatsAppPayloadText, t as normalizeWhatsAppOutboundPayload } from "./outbound-media-contract-Dzi1ILTd.js";
-import { i as lookupInboundMessageMetaForTarget } from "./quoted-message-BXs55Teh.js";
+import { s as toWhatsappJid } from "./text-runtime-DBKC9uEi.js";
+import { n as normalizeWhatsAppPayloadText, t as normalizeWhatsAppOutboundPayload } from "./outbound-media-contract-BzWwBppP.js";
+import { i as lookupInboundMessageMetaForTarget } from "./quoted-message-DQ6hAr34.js";
 import { DEFAULT_ACCOUNT_ID, listCombinedAccountIds, normalizeOptionalAccountId, resolveListedDefaultAccountId } from "openclaw/plugin-sdk/account-core";
 import { createAttachedChannelResultAdapter } from "openclaw/plugin-sdk/channel-send-result";
 import { resolveOutboundSendDep } from "openclaw/plugin-sdk/outbound-send-deps";

package/dist/{outbound-media-contract-Dzi1ILTd.js → outbound-media-contract-BzWwBppP.js}

@@ -1,5 +1,5 @@
+import { t as text_runtime_exports } from "./text-runtime-DBKC9uEi.js";
 import { t as formatError } from "./session-errors-CSuKZPub.js";
-import { t as text_runtime_exports } from "./text-runtime-DFFwk5z6.js";
 import path from "node:path";
 import { MEDIA_FFMPEG_MAX_AUDIO_DURATION_SECS, runFfmpeg } from "openclaw/plugin-sdk/media-runtime";
 import { sanitizeForPlainText } from "openclaw/plugin-sdk/outbound-runtime";

package/dist/outbound-payload-test-api.js

@@ -1,2 +1,2 @@
-import { t as whatsappOutbound } from "./outbound-adapter-BoHBD2S7.js";
+import { t as whatsappOutbound } from "./outbound-adapter-B9ZW8sht.js";
 export { whatsappOutbound };

package/dist/{quoted-message-BXs55Teh.js → quoted-message-DQ6hAr34.js}

@@ -1,4 +1,4 @@
-import { i as jidToE164 } from "./text-runtime-DFFwk5z6.js";
+import { i as jidToE164 } from "./text-runtime-DBKC9uEi.js";
 //#region extensions/whatsapp/src/quoted-message.ts
 const CACHE_TTL_MS = 600 * 1e3;
 const MAX_ENTRIES = 500;

package/dist/runtime-api.js

@@ -1,16 +1,16 @@
 import { n as resolveWebCredsBackupPath, r as resolveWebCredsPath, t as hasWebCredsSync } from "./creds-files-_2V8jzQa.js";
-import { n as whatsAppActionRuntime, t as handleWhatsAppAction } from "./action-runtime-flTHnBac.js";
+import { n as whatsAppActionRuntime, t as handleWhatsAppAction } from "./action-runtime-CMhO8liB.js";
 import { n as getStatusCode, t as formatError } from "./session-errors-CSuKZPub.js";
-import { i as sendTypingWhatsApp, n as sendPollWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./send-CLBN7TZv.js";
+import { i as sendTypingWhatsApp, n as sendPollWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./send-u88yh8Hw.js";
 import { startWebLoginWithQr, waitForWebLogin } from "./login-qr-runtime.js";
-import { t as createWhatsAppLoginTool } from "./agent-tools-login-DpRxLNRB.js";
-import { n as setWhatsAppRuntime } from "./runtime-6fZ67abR.js";
-import { C as waitForCredsSaveQueueWithTimeout, S as waitForCredsSaveQueue, _ as readWebSelfIdentityForDecision, a as getWebAuthAgeMs, b as webAuthExists, c as pickWebChannel, d as readWebAuthExistsForDecision, f as readWebAuthSnapshot, g as readWebSelfIdentity, h as readWebSelfId, i as formatWhatsAppWebAuthStatusState, l as readCredsJsonRaw, m as readWebAuthState, n as WHATSAPP_AUTH_UNSTABLE_CODE, o as logWebSelfId, p as readWebAuthSnapshotBestEffort, r as WhatsAppAuthUnstableError, s as logoutWeb, t as WA_WEB_AUTH_DIR, u as readWebAuthExistsBestEffort, v as resolveDefaultWebAuthDir, w as writeCredsJsonAtomically, y as restoreCredsFromBackupIfNeeded } from "./auth-store-CG0eSZ0D.js";
-import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-DLGCIbfl.js";
-import { c as extractContactContext, d as extractMediaPlaceholder, p as extractText, u as extractLocationData } from "./send-api-DoycpOvC.js";
-import { n as newConnectionId, r as waitForWaConnection, t as createWaSocket } from "./session-BXC3R43P.js";
-import { n as resolveWebAccountId, t as getActiveWebListener } from "./active-listener-DTbKS-j-.js";
-import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-5u0dVXnB.js";
-import { t as loginWeb } from "./login-B_u009k0.js";
+import { t as createWhatsAppLoginTool } from "./agent-tools-login-DYKYW5Nh.js";
+import { n as setWhatsAppRuntime } from "./runtime-DdodQB8G.js";
+import { C as waitForCredsSaveQueueWithTimeout, S as waitForCredsSaveQueue, _ as readWebSelfIdentityForDecision, a as getWebAuthAgeMs, b as webAuthExists, c as pickWebChannel, d as readWebAuthExistsForDecision, f as readWebAuthSnapshot, g as readWebSelfIdentity, h as readWebSelfId, i as formatWhatsAppWebAuthStatusState, l as readCredsJsonRaw, m as readWebAuthState, n as WHATSAPP_AUTH_UNSTABLE_CODE, o as logWebSelfId, p as readWebAuthSnapshotBestEffort, r as WhatsAppAuthUnstableError, s as logoutWeb, t as WA_WEB_AUTH_DIR, u as readWebAuthExistsBestEffort, v as resolveDefaultWebAuthDir, w as writeCredsJsonAtomically, y as restoreCredsFromBackupIfNeeded } from "./auth-store-CjEimXKX.js";
+import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-yKXGCGU9.js";
+import { c as extractContactContext, d as extractMediaPlaceholder, p as extractText, u as extractLocationData } from "./send-api-DsbCqDre.js";
+import { n as newConnectionId, r as waitForWaConnection, t as createWaSocket } from "./session-DeIU_vjJ.js";
+import { n as resolveWebAccountId, t as getActiveWebListener } from "./active-listener-D2NHQ5Og.js";
+import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-mfy3Mmq-.js";
+import { t as loginWeb } from "./login-DV99D0IN.js";
 import { HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, SILENT_REPLY_TOKEN, stripHeartbeatToken } from "openclaw/plugin-sdk/reply-runtime";
 export { DEFAULT_WEB_MEDIA_BYTES, HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, LocalMediaAccessError, SILENT_REPLY_TOKEN, WA_WEB_AUTH_DIR, WHATSAPP_AUTH_UNSTABLE_CODE, WhatsAppAuthUnstableError, createWaSocket, createWhatsAppLoginTool, extractContactContext, extractLocationData, extractMediaPlaceholder, extractText, formatError, formatWhatsAppWebAuthStatusState, getActiveWebListener, getDefaultLocalRoots, getStatusCode, getWebAuthAgeMs, handleWhatsAppAction, hasWebCredsSync, loadWebMedia, loadWebMediaRaw, logWebSelfId, loginWeb, logoutWeb, monitorWebChannel, monitorWebInbox, newConnectionId, optimizeImageToJpeg, optimizeImageToPng, pickWebChannel, readCredsJsonRaw, readWebAuthExistsBestEffort, readWebAuthExistsForDecision, readWebAuthSnapshot, readWebAuthSnapshotBestEffort, readWebAuthState, readWebSelfId, readWebSelfIdentity, readWebSelfIdentityForDecision, resetWebInboundDedupe, resolveDefaultWebAuthDir, resolveWebAccountId, resolveWebCredsBackupPath, resolveWebCredsPath, restoreCredsFromBackupIfNeeded, sendMessageWhatsApp, sendPollWhatsApp, sendReactionWhatsApp, sendTypingWhatsApp, setWhatsAppRuntime, startWebLoginWithQr, stripHeartbeatToken, waitForCredsSaveQueue, waitForCredsSaveQueueWithTimeout, waitForWaConnection, waitForWebLogin, webAuthExists, whatsAppActionRuntime, writeCredsJsonAtomically };

package/dist/security-contract-api.js

@@ -1,2 +1,2 @@
-import { n as unsupportedSecretRefSurfacePatterns, t as collectUnsupportedSecretRefConfigCandidates } from "./security-contract-DqH8JDX6.js";
+import { n as unsupportedSecretRefSurfacePatterns, t as collectUnsupportedSecretRefConfigCandidates } from "./security-contract-BzlZFreO.js";
 export { collectUnsupportedSecretRefConfigCandidates, unsupportedSecretRefSurfacePatterns };

package/dist/{send-api-DoycpOvC.js → send-api-DsbCqDre.js}

@@ -1,8 +1,8 @@
+import { c as toWhatsappJidWithLid, i as jidToE164, s as toWhatsappJid } from "./text-runtime-DBKC9uEi.js";
 import { n as isWhatsAppNewsletterJid } from "./normalize-target-nXxC_hxG.js";
 import "./normalize-Y3eBdM8a.js";
-import { c as toWhatsappJidWithLid, i as jidToE164, s as toWhatsappJid } from "./text-runtime-DFFwk5z6.js";
-import { t as buildQuotedMessageOptions } from "./quoted-message-BXs55Teh.js";
-import { c as resolveComparableIdentity } from "./identity-DhaC0MoD.js";
+import { t as buildQuotedMessageOptions } from "./quoted-message-DQ6hAr34.js";
+import { c as resolveComparableIdentity } from "./identity-KxdJfH7p.js";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/text-runtime";
 import { logVerbose } from "openclaw/plugin-sdk/runtime-env";
 import { createMessageReceiptFromOutboundResults, listMessageReceiptPlatformIds } from "openclaw/plugin-sdk/channel-message";

package/dist/{send-CLBN7TZv.js → send-u88yh8Hw.js}

@@ -1,11 +1,10 @@
-import { t as __exportAll } from "./rolldown-runtime-RkAeH_Qm.js";
+import { a as markdownToWhatsApp, l as __exportAll, s as toWhatsappJid } from "./text-runtime-DBKC9uEi.js";
 import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-DG18xddX.js";
 import { a as resolveWhatsAppAccount, s as resolveWhatsAppMediaMaxBytes } from "./accounts-BDqgpFEB.js";
 import { n as isWhatsAppNewsletterJid } from "./normalize-target-nXxC_hxG.js";
 import { t as getRegisteredWhatsAppConnectionController } from "./connection-controller-registry-D_iIGz5m.js";
 import "./normalize-Y3eBdM8a.js";
-import { a as markdownToWhatsApp, s as toWhatsappJid } from "./text-runtime-DFFwk5z6.js";
-import { a as resolveWhatsAppOutboundMediaUrls, i as prepareWhatsAppOutboundMedia, n as normalizeWhatsAppPayloadText } from "./outbound-media-contract-Dzi1ILTd.js";
+import { a as resolveWhatsAppOutboundMediaUrls, i as prepareWhatsAppOutboundMedia, n as normalizeWhatsAppPayloadText } from "./outbound-media-contract-BzWwBppP.js";
 import { formatCliCommand } from "openclaw/plugin-sdk/cli-runtime";
 import { generateSecureUuid } from "openclaw/plugin-sdk/core";
 import { redactIdentifier } from "openclaw/plugin-sdk/logging-core";

package/dist/{session-BXC3R43P.js → session-DeIU_vjJ.js}

@@ -1,7 +1,7 @@
 import { n as resolveWebCredsBackupPath, r as resolveWebCredsPath } from "./creds-files-_2V8jzQa.js";
 import { n as getStatusCode } from "./session-errors-CSuKZPub.js";
-import { C as waitForCredsSaveQueueWithTimeout, l as readCredsJsonRaw, v as resolveDefaultWebAuthDir, w as writeCredsJsonAtomically, x as enqueueCredsSave, y as restoreCredsFromBackupIfNeeded } from "./auth-store-CG0eSZ0D.js";
-import { i as makeWASocket, n as fetchLatestBaileysVersion, o as useMultiFileAuthState, r as makeCacheableSignalKeyStore, t as DisconnectReason } from "./session.runtime-CVhtXjTk.js";
+import { C as waitForCredsSaveQueueWithTimeout, l as readCredsJsonRaw, v as resolveDefaultWebAuthDir, w as writeCredsJsonAtomically, x as enqueueCredsSave, y as restoreCredsFromBackupIfNeeded } from "./auth-store-CjEimXKX.js";
+import { i as makeWASocket, n as fetchLatestBaileysVersion, o as useMultiFileAuthState, r as makeCacheableSignalKeyStore, t as DisconnectReason } from "./session.runtime-B9VlYnWQ.js";
 import fs from "node:fs";
 import { ensureDir, resolveUserPath } from "openclaw/plugin-sdk/text-runtime";
 import { VERSION, formatCliCommand } from "openclaw/plugin-sdk/cli-runtime";

package/dist/{session.runtime-CVhtXjTk.js → session.runtime-B9VlYnWQ.js}

@@ -1,4 +1,4 @@
-import { t as __exportAll } from "./rolldown-runtime-RkAeH_Qm.js";
+import { l as __exportAll } from "./text-runtime-DBKC9uEi.js";
 import { BufferJSON, DisconnectReason as DisconnectReason$1, fetchLatestBaileysVersion, makeCacheableSignalKeyStore, makeWASocket, useMultiFileAuthState } from "@whiskeysockets/baileys";
 //#region extensions/whatsapp/src/session.runtime.ts
 var session_runtime_exports = /* @__PURE__ */ __exportAll({

package/dist/{setup-surface-RbOpXjSR.js → setup-finalize-D3YuMUBs.js}

@@ -1,10 +1,9 @@
-import { r as resolveDefaultWhatsAppAccountId, t as listAccountIds } from "./account-ids-DG18xddX.js";
+import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-DG18xddX.js";
 import { a as resolveWhatsAppAccount, o as resolveWhatsAppAuthDir } from "./accounts-BDqgpFEB.js";
 import { a as normalizeWhatsAppAllowFromEntries, o as normalizeWhatsAppAllowFromEntry } from "./normalize-target-nXxC_hxG.js";
-import { i as formatWhatsAppWebAuthStatusState, m as readWebAuthState } from "./auth-store-CG0eSZ0D.js";
-import { t as whatsappSetupAdapter } from "./setup-core-DZKvpzbH.js";
+import { t as whatsappSetupAdapter } from "./setup-core-DnhO0PjG.js";
 import path from "node:path";
-import { DEFAULT_ACCOUNT_ID, pathExists, setSetupChannelEnabled, splitSetupEntries } from "openclaw/plugin-sdk/setup";
+import { DEFAULT_ACCOUNT_ID, pathExists, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 import { formatCliCommand, formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 //#region extensions/whatsapp/src/setup-finalize.ts
 function trimPromptText(value) {
@@ -280,7 +279,7 @@ async function finalizeWhatsAppSetup(params) {
 		message: linked ? "WhatsApp already linked. Re-link now?" : "Link WhatsApp now (QR)?",
 		initialValue: !linked
 	})) try {
-		const { loginWeb } = await import("./login-B_u009k0.js").then((n) => n.n);
+		const { loginWeb } = await import("./login-DV99D0IN.js").then((n) => n.n);
 		await loginWeb(false, void 0, params.runtime, accountId);
 	} catch (error) {
 		params.runtime.error(`WhatsApp login failed: ${String(error)}`);
@@ -296,50 +295,4 @@ async function finalizeWhatsAppSetup(params) {
 	return { cfg: next };
 }
 //#endregion
-//#region extensions/whatsapp/src/setup-surface.ts
-const channel = "whatsapp";
-async function readWhatsAppSetupLinkState(cfg, accountId) {
-	const { authDir } = resolveWhatsAppAuthDir({
-		cfg,
-		accountId
-	});
-	return await readWebAuthState(authDir);
-}
-const whatsappSetupWizard = {
-	channel,
-	status: {
-		configuredLabel: "linked",
-		unconfiguredLabel: "not linked",
-		configuredHint: "linked",
-		unconfiguredHint: "not linked",
-		configuredScore: 5,
-		unconfiguredScore: 4,
-		resolveConfigured: async ({ cfg, accountId }) => {
-			for (const resolvedAccountId of accountId ? [accountId] : listAccountIds(cfg)) if (await readWhatsAppSetupLinkState(cfg, resolvedAccountId) === "linked") return true;
-			return false;
-		},
-		resolveStatusLines: async ({ cfg, accountId, configured }) => {
-			const linkedAccountId = (await Promise.all((accountId ? [accountId] : listAccountIds(cfg)).map(async (resolvedAccountId) => ({
-				accountId: resolvedAccountId,
-				state: await readWhatsAppSetupLinkState(cfg, resolvedAccountId)
-			})))).find((entry) => entry.state === "linked" || entry.state === "unstable");
-			const labelAccountId = accountId ?? linkedAccountId?.accountId;
-			return [`${labelAccountId ? `WhatsApp (${labelAccountId === DEFAULT_ACCOUNT_ID ? "default" : labelAccountId})` : "WhatsApp"}: ${configured ? formatWhatsAppWebAuthStatusState("linked") : formatWhatsAppWebAuthStatusState(linkedAccountId?.state ?? "not-linked")}`];
-		}
-	},
-	resolveShouldPromptAccountIds: ({ shouldPromptAccountIds }) => shouldPromptAccountIds,
-	credentials: [],
-	finalize: async ({ cfg, accountId, forceAllowFrom, prompter, runtime }) => await finalizeWhatsAppSetup({
-		cfg,
-		accountId,
-		forceAllowFrom,
-		prompter,
-		runtime
-	}),
-	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false),
-	onAccountRecorded: (accountId, options) => {
-		options?.onAccountId?.(channel, accountId);
-	}
-};
-//#endregion
-export { whatsappSetupWizard };
+export { finalizeWhatsAppSetup };

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as whatsappSetupPlugin } from "./channel.setup-CV0OjAwl.js";
+import { t as whatsappSetupPlugin } from "./channel.setup-BqlcEVzR.js";
 export { whatsappSetupPlugin };

package/dist/setup-surface-CHjYlKJc.js

@@ -0,0 +1,45 @@
+import { t as listAccountIds } from "./account-ids-DG18xddX.js";
+import { o as resolveWhatsAppAuthDir } from "./accounts-BDqgpFEB.js";
+import { i as formatWhatsAppWebAuthStatusState, m as readWebAuthState } from "./auth-store-CjEimXKX.js";
+import { DEFAULT_ACCOUNT_ID, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
+//#region extensions/whatsapp/src/setup-surface.ts
+const channel = "whatsapp";
+async function readWhatsAppSetupLinkState(cfg, accountId) {
+	const { authDir } = resolveWhatsAppAuthDir({
+		cfg,
+		accountId
+	});
+	return await readWebAuthState(authDir);
+}
+const whatsappSetupWizard = {
+	channel,
+	status: {
+		configuredLabel: "linked",
+		unconfiguredLabel: "not linked",
+		configuredHint: "linked",
+		unconfiguredHint: "not linked",
+		configuredScore: 5,
+		unconfiguredScore: 4,
+		resolveConfigured: async ({ cfg, accountId }) => {
+			for (const resolvedAccountId of accountId ? [accountId] : listAccountIds(cfg)) if (await readWhatsAppSetupLinkState(cfg, resolvedAccountId) === "linked") return true;
+			return false;
+		},
+		resolveStatusLines: async ({ cfg, accountId, configured }) => {
+			const linkedAccountId = (await Promise.all((accountId ? [accountId] : listAccountIds(cfg)).map(async (resolvedAccountId) => ({
+				accountId: resolvedAccountId,
+				state: await readWhatsAppSetupLinkState(cfg, resolvedAccountId)
+			})))).find((entry) => entry.state === "linked" || entry.state === "unstable");
+			const labelAccountId = accountId ?? linkedAccountId?.accountId;
+			return [`${labelAccountId ? `WhatsApp (${labelAccountId === DEFAULT_ACCOUNT_ID ? "default" : labelAccountId})` : "WhatsApp"}: ${configured ? formatWhatsAppWebAuthStatusState("linked") : formatWhatsAppWebAuthStatusState(linkedAccountId?.state ?? "not-linked")}`];
+		}
+	},
+	resolveShouldPromptAccountIds: ({ shouldPromptAccountIds }) => shouldPromptAccountIds,
+	credentials: [],
+	finalize: async (params) => await (await import("./setup-finalize-D3YuMUBs.js")).finalizeWhatsAppSetup(params),
+	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false),
+	onAccountRecorded: (accountId, options) => {
+		options?.onAccountId?.(channel, accountId);
+	}
+};
+//#endregion
+export { whatsappSetupWizard };

package/dist/{shared-h4cwNeYT.js → shared-CgYT3IzU.js}

@@ -1,11 +1,11 @@
 import { r as resolveDefaultWhatsAppAccountId, t as listAccountIds } from "./account-ids-DG18xddX.js";
 import { a as resolveWhatsAppAccount, n as hasAnyWhatsAppAuth } from "./accounts-BDqgpFEB.js";
 import { a as normalizeWhatsAppAllowFromEntries } from "./normalize-target-nXxC_hxG.js";
-import { t as WhatsAppChannelConfigSchema } from "./config-schema-Dmo66Ubb.js";
-import { n as whatsappDoctor } from "./doctor-A9tXm9Om.js";
-import { t as resolveLegacyGroupSessionKey } from "./group-session-contract-B8QBn0I2.js";
-import { n as unsupportedSecretRefSurfacePatterns, t as collectUnsupportedSecretRefConfigCandidates } from "./security-contract-DqH8JDX6.js";
-import { n as deriveLegacySessionChatType, r as isLegacyGroupSessionKey, t as canonicalizeLegacySessionKey } from "./session-contract-B0efQf9P.js";
+import { t as WhatsAppChannelConfigSchema } from "./config-schema-cSC7M4YA.js";
+import { n as whatsappDoctor } from "./doctor-BrgepDUP.js";
+import { t as resolveLegacyGroupSessionKey } from "./group-session-contract-DL-SLclv.js";
+import { n as unsupportedSecretRefSurfacePatterns, t as collectUnsupportedSecretRefConfigCandidates } from "./security-contract-BzlZFreO.js";
+import { n as deriveLegacySessionChatType, r as isLegacyGroupSessionKey, t as canonicalizeLegacySessionKey } from "./session-contract-BNUscPf4.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-core";
 import { normalizeE164 } from "openclaw/plugin-sdk/account-resolution";
 import { createChannelPluginBase, getChatChannelMeta } from "openclaw/plugin-sdk/core";
@@ -124,10 +124,10 @@ function resolveWhatsAppConfigPath(params) {
 	return `${resolveWhatsAppGroupScopeBasePath(params)}.${params.field}`;
 }
 async function loadWhatsAppChannelRuntime() {
-	return await import("./channel.runtime-CCZpOzbU.js");
+	return await import("./channel.runtime-CNdPCK3G.js");
 }
 async function loadWhatsAppSetupSurface() {
-	return await import("./setup-surface-RbOpXjSR.js");
+	return await import("./setup-surface-CHjYlKJc.js");
 }
 const whatsappSetupWizardProxy = createWhatsAppSetupWizardProxy(async () => (await loadWhatsAppSetupSurface()).whatsappSetupWizard);
 const whatsappConfigAdapter = createScopedChannelConfigAdapter({

package/dist/test-api.js

@@ -1,3 +1,3 @@
-import { t as resolveWhatsAppRuntimeGroupPolicy } from "./runtime-group-policy-Gp1lQ0at.js";
-import { t as whatsappOutbound } from "./outbound-adapter-BoHBD2S7.js";
+import { t as resolveWhatsAppRuntimeGroupPolicy } from "./runtime-group-policy-BH_U23qp.js";
+import { t as whatsappOutbound } from "./outbound-adapter-B9ZW8sht.js";
 export { resolveWhatsAppRuntimeGroupPolicy, whatsappOutbound };

package/dist/{text-runtime-DFFwk5z6.js → text-runtime-DBKC9uEi.js}

@@ -1,9 +1,34 @@
-import { n as __reExport, t as __exportAll } from "./rolldown-runtime-RkAeH_Qm.js";
 import fs from "node:fs";
 import path from "node:path";
 import { CONFIG_DIR, escapeRegExp, resolveUserPath } from "openclaw/plugin-sdk/text-runtime";
 import { normalizeE164 } from "openclaw/plugin-sdk/account-resolution";
 import { logVerbose, shouldLogVerbose } from "openclaw/plugin-sdk/runtime-env";
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+//#endregion
 //#region extensions/whatsapp/src/targets-runtime.ts
 const WHATSAPP_FENCE_PLACEHOLDER = "\0FENCE";
 const WHATSAPP_INLINE_CODE_PLACEHOLDER = "\0CODE";
@@ -139,4 +164,4 @@ var text_runtime_exports = /* @__PURE__ */ __exportAll({
 import * as import_openclaw_plugin_sdk_text_runtime from "openclaw/plugin-sdk/text-runtime";
 __reExport(text_runtime_exports, import_openclaw_plugin_sdk_text_runtime);
 //#endregion
-export { markdownToWhatsApp as a, toWhatsappJidWithLid as c, jidToE164 as i, assertWebChannel as n, resolveJidToE164 as o, isSelfChatMode as r, toWhatsappJid as s, text_runtime_exports as t };
+export { markdownToWhatsApp as a, toWhatsappJidWithLid as c, jidToE164 as i, __exportAll as l, assertWebChannel as n, resolveJidToE164 as o, isSelfChatMode as r, toWhatsappJid as s, text_runtime_exports as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/whatsapp",
-  "version": "2026.5.9-beta.1",
+  "version": "2026.5.10-beta.2",
   "description": "OpenClaw WhatsApp channel plugin",
   "repository": {
     "type": "git",
@@ -8,7 +8,7 @@
   },
   "type": "module",
   "dependencies": {
-    "@whiskeysockets/baileys": "7.0.0-rc.9",
+    "@whiskeysockets/baileys": "7.0.0-rc10",
     "https-proxy-agent": "^9.0.0",
     "jimp": "^1.6.1",
     "typebox": "1.1.38",
@@ -19,7 +19,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.9-beta.1"
+    "openclaw": ">=2026.5.10-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -61,10 +61,10 @@
       "minHostVersion": ">=2026.4.25"
     },
     "compat": {
-      "pluginApi": ">=2026.5.9-beta.1"
+      "pluginApi": ">=2026.5.10-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.9-beta.1"
+      "openclawVersion": "2026.5.10-beta.2"
     },
     "release": {
       "publishToClawHub": true,

package/dist/rolldown-runtime-RkAeH_Qm.js

@@ -1,27 +0,0 @@
-//#region \0rolldown/runtime.js
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __exportAll = (all, no_symbols) => {
-	let target = {};
-	for (var name in all) __defProp(target, name, {
-		get: all[name],
-		enumerable: true
-	});
-	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
-	return target;
-};
-var __copyProps = (to, from, except, desc) => {
-	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
-		key = keys[i];
-		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
-			get: ((k) => from[k]).bind(null, key),
-			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
-		});
-	}
-	return to;
-};
-var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
-//#endregion
-export { __reExport as n, __exportAll as t };