@openclaw/whatsapp 2026.8.1-beta.2 → 2026.8.1

package/dist/{question-reactions-D3eAeB0i.js → question-reactions-B9D6MHXZ.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { a as resolveWhatsAppAccount } from "./accounts-BX2fZUyR.js";
+import { a as resolveWhatsAppAccount } from "./accounts-CeKQbu_s.js";
 import { createQuestionReactionTargetStore, questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 //#region extensions/whatsapp/src/question-reactions.ts
 var question_reactions_exports = /* @__PURE__ */ __exportAll({

package/dist/runtime-api.js

@@ -1,16 +1,16 @@
 import { c as resolveWebCredsPath, r as hasWebCredsSync, s as resolveWebCredsBackupPath } from "./creds-files-W6B3EMZ8.js";
-import { n as whatsAppActionRuntime, t as handleWhatsAppAction } from "./action-runtime-B4e3XFOY.js";
-import { i as sendTypingWhatsApp, n as sendPollWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./send-prK8F7Vj.js";
+import { n as whatsAppActionRuntime, t as handleWhatsAppAction } from "./action-runtime-YA_Yvunu.js";
+import { i as sendTypingWhatsApp, n as sendPollWhatsApp, r as sendReactionWhatsApp, t as sendMessageWhatsApp } from "./send-C3S-NqyO.js";
 import { a as setWhatsAppRuntime } from "./runtime-BLlToOi6.js";
 import { startWebLoginWithQr, waitForWebLogin } from "./login-qr-runtime.js";
-import { t as createWhatsAppLoginTool } from "./agent-tools-login-BjRpD-JQ.js";
-import { M as waitForCredsSaveQueueWithTimeout, N as writeCredsJsonAtomically, _ as readWebSelfIdentity, a as formatWhatsAppWebAuthStatusState, b as restoreCredsFromBackupIfNeeded, c as logoutWeb, d as readWebAuthExistsBestEffort, f as readWebAuthExistsForDecision, g as readWebSelfId, h as readWebAuthState, j as waitForCredsSaveQueue, l as pickWebChannel, m as readWebAuthSnapshotBestEffort, n as WHATSAPP_AUTH_UNSTABLE_CODE, o as getWebAuthAgeMs, p as readWebAuthSnapshot, r as WhatsAppAuthUnstableError, s as logWebSelfId, t as WA_WEB_AUTH_DIR, u as readCredsJsonRaw, v as readWebSelfIdentityForDecision, x as webAuthExists, y as resolveDefaultWebAuthDir } from "./auth-store-B_DQIdzp.js";
+import { t as createWhatsAppLoginTool } from "./agent-tools-login-B-2qZPzc.js";
+import { M as waitForCredsSaveQueueWithTimeout, N as writeCredsJsonAtomically, _ as readWebSelfIdentity, a as formatWhatsAppWebAuthStatusState, b as restoreCredsFromBackupIfNeeded, c as logoutWeb, d as readWebAuthExistsBestEffort, f as readWebAuthExistsForDecision, g as readWebSelfId, h as readWebAuthState, j as waitForCredsSaveQueue, l as pickWebChannel, m as readWebAuthSnapshotBestEffort, n as WHATSAPP_AUTH_UNSTABLE_CODE, o as getWebAuthAgeMs, p as readWebAuthSnapshot, r as WhatsAppAuthUnstableError, s as logWebSelfId, t as WA_WEB_AUTH_DIR, u as readCredsJsonRaw, v as readWebSelfIdentityForDecision, x as webAuthExists, y as resolveDefaultWebAuthDir } from "./auth-store-CtpBqH5S.js";
 import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-HU41RHGI.js";
 import { n as resolveWebAccountId, t as getActiveWebListener } from "./active-listener-BEjWsCNM.js";
-import { a as waitForWaConnection, i as newConnectionId, r as createWaSocket } from "./socket-close-09FojDO2.js";
+import { a as waitForWaConnection, i as newConnectionId, r as createWaSocket } from "./socket-close-2T0_jZTN.js";
 import { n as getStatusCode, t as formatError } from "./session-errors-JuazczrA.js";
-import { p as extractText, s as extractContactContext, u as extractLocationData } from "./send-api-DimZST3E.js";
-import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-BCe5Mm-1.js";
-import { t as loginWeb } from "./login-D6_rfxTZ.js";
+import { p as extractText, s as extractContactContext, u as extractLocationData } from "./send-api-C-FFC1p_.js";
+import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-CySzv38g.js";
+import { t as loginWeb } from "./login-1u5WcfTn.js";
 import { HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, SILENT_REPLY_TOKEN, stripHeartbeatToken } from "openclaw/plugin-sdk/reply-runtime";
 export { DEFAULT_WEB_MEDIA_BYTES, HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, LocalMediaAccessError, SILENT_REPLY_TOKEN, WA_WEB_AUTH_DIR, WHATSAPP_AUTH_UNSTABLE_CODE, WhatsAppAuthUnstableError, createWaSocket, createWhatsAppLoginTool, extractContactContext, extractLocationData, extractText, formatError, formatWhatsAppWebAuthStatusState, getActiveWebListener, getDefaultLocalRoots, getStatusCode, getWebAuthAgeMs, handleWhatsAppAction, hasWebCredsSync, loadWebMedia, loadWebMediaRaw, logWebSelfId, loginWeb, logoutWeb, monitorWebChannel, monitorWebInbox, newConnectionId, optimizeImageToJpeg, optimizeImageToPng, pickWebChannel, readCredsJsonRaw, readWebAuthExistsBestEffort, readWebAuthExistsForDecision, readWebAuthSnapshot, readWebAuthSnapshotBestEffort, readWebAuthState, readWebSelfId, readWebSelfIdentity, readWebSelfIdentityForDecision, resetWebInboundDedupe, resolveDefaultWebAuthDir, resolveWebAccountId, resolveWebCredsBackupPath, resolveWebCredsPath, restoreCredsFromBackupIfNeeded, sendMessageWhatsApp, sendPollWhatsApp, sendReactionWhatsApp, sendTypingWhatsApp, setWhatsAppRuntime, startWebLoginWithQr, stripHeartbeatToken, waitForCredsSaveQueue, waitForCredsSaveQueueWithTimeout, waitForWaConnection, waitForWebLogin, webAuthExists, whatsAppActionRuntime, writeCredsJsonAtomically };

package/dist/{send-prK8F7Vj.js → send-C3S-NqyO.js}

@@ -1,4 +1,4 @@
-import { a as resolveWhatsAppAccount, c as resolveMergedWhatsAppAccountConfig, s as resolveWhatsAppMediaMaxBytes } from "./accounts-BX2fZUyR.js";
+import { a as resolveWhatsAppAccount, c as resolveMergedWhatsAppAccountConfig, s as resolveWhatsAppMediaMaxBytes } from "./accounts-CeKQbu_s.js";
 import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-CB5SOWjc.js";
 import { n as isWhatsAppNewsletterJid } from "./normalize-target-CugRyONv.js";
 import { r as getWhatsAppConnectionController } from "./connection-controller-runtime-context-DG0tuYuw.js";
@@ -461,6 +461,9 @@ function resolveActualSentRemoteJid(result, fallbackJid) {
 	return fallbackJid;
 }
 async function sendMessageWhatsApp(to, body, options) {
+	return await sendWhatsAppUploadFile(to, body, options);
+}
+async function sendWhatsAppUploadFile(to, body, options) {
 	return await withWhatsAppLogicalDeliveryActivity(() => sendMessageWhatsAppInActivityScope(to, body, options));
 }
 async function sendMessageWhatsAppInActivityScope(to, body, options) {
@@ -493,7 +496,7 @@ async function sendMessageWhatsAppInActivityScope(to, body, options) {
 	const accountIdForFormatting = resolvedAccountId ?? options.accountId;
 	const textLimit = Math.min(resolveTextChunkLimit(cfg, "whatsapp", accountIdForFormatting, { fallbackLimit: 4e3 }), 4096);
 	const textChunks = markdownToWhatsAppChunks(text, textLimit, tableMode, resolveChunkMode(cfg, "whatsapp", accountIdForFormatting));
-	text = textChunks.shift() ?? "";
+	text = textChunks.shift() ?? text;
 	if (!text && !hasMedia) return {
 		messageId: "",
 		toJid: jid
@@ -514,13 +517,24 @@ async function sendMessageWhatsAppInActivityScope(to, body, options) {
 		let forceDocumentDelivery = false;
 		let media;
 		if (mediaPayload) media = await prepareWhatsAppOutboundMedia(mediaPayload, primaryMediaUrl);
-		else if (primaryMediaUrl) media = await prepareWhatsAppOutboundMedia(await loadOutboundMediaFromUrl(primaryMediaUrl, {
-			maxBytes: resolveWhatsAppMediaMaxBytes(account),
-			optimizeImages: options.forceDocument ? false : void 0,
-			mediaAccess: options.mediaAccess,
-			mediaLocalRoots: options.mediaLocalRoots,
-			mediaReadFile: options.mediaReadFile
-		}), primaryMediaUrl);
+		else if (primaryMediaUrl) {
+			const loadedMedia = await loadOutboundMediaFromUrl(primaryMediaUrl, {
+				maxBytes: resolveWhatsAppMediaMaxBytes(account),
+				optimizeImages: options.forceDocument ? false : void 0,
+				mediaAccess: options.mediaAccess,
+				mediaLocalRoots: options.mediaLocalRoots,
+				mediaReadFile: options.mediaReadFile
+			});
+			const mediaWithRequestedType = options.contentType ? {
+				...loadedMedia,
+				contentType: options.contentType,
+				kind: void 0
+			} : loadedMedia;
+			media = await prepareWhatsAppOutboundMedia(options.fileName ? {
+				...mediaWithRequestedType,
+				fileName: options.fileName
+			} : mediaWithRequestedType, primaryMediaUrl);
+		}
 		if (media) {
 			const mediaSendState = buildWhatsAppMediaSendState({
 				media,
@@ -694,4 +708,4 @@ async function sendPollWhatsApp(to, poll, options) {
 	}
 }
 //#endregion
-export { resolveWhatsAppReactionLevel as _, normalizeWhatsAppOutboundPayload as a, prepareWhatsAppOutboundMedia as c, mergeWhatsAppAcceptedSendError as d, normalizeWhatsAppSendResult as f, resolveWhatsAppDocumentFileName as g, withWhatsAppLogicalDeliveryActivity as h, sendTypingWhatsApp as i, combineWhatsAppSendResults as l, rememberWhatsAppPartialSend as m, sendPollWhatsApp as n, normalizeWhatsAppPayloadText as o, rememberWhatsAppAcceptedSend as p, sendReactionWhatsApp as r, normalizeWhatsAppPayloadTextPreservingIndentation as s, sendMessageWhatsApp as t, listWhatsAppSendResultMessageIds as u };
+export { resolveWhatsAppDocumentFileName as _, sendWhatsAppUploadFile as a, normalizeWhatsAppPayloadTextPreservingIndentation as c, listWhatsAppSendResultMessageIds as d, mergeWhatsAppAcceptedSendError as f, withWhatsAppLogicalDeliveryActivity as g, rememberWhatsAppPartialSend as h, sendTypingWhatsApp as i, prepareWhatsAppOutboundMedia as l, rememberWhatsAppAcceptedSend as m, sendPollWhatsApp as n, normalizeWhatsAppOutboundPayload as o, normalizeWhatsAppSendResult as p, sendReactionWhatsApp as r, normalizeWhatsAppPayloadText as s, sendMessageWhatsApp as t, combineWhatsAppSendResults as u, resolveWhatsAppReactionLevel as v };

package/dist/{send-api-DimZST3E.js → send-api-C-FFC1p_.js}

@@ -1,10 +1,10 @@
 import { n as isWhatsAppNewsletterJid } from "./normalize-target-CugRyONv.js";
-import { d as mergeWhatsAppAcceptedSendError, f as normalizeWhatsAppSendResult, g as resolveWhatsAppDocumentFileName, l as combineWhatsAppSendResults, p as rememberWhatsAppAcceptedSend } from "./send-prK8F7Vj.js";
+import { _ as resolveWhatsAppDocumentFileName, f as mergeWhatsAppAcceptedSendError, m as rememberWhatsAppAcceptedSend, p as normalizeWhatsAppSendResult, u as combineWhatsAppSendResults } from "./send-C3S-NqyO.js";
 import "./normalize-C7Hkc_vE.js";
 import { c as toWhatsappJid, l as toWhatsappJidWithLid, r as jidToE164 } from "./targets-runtime-TMk0lGuy.js";
 import "./text-runtime-CaKLhowd.js";
-import { i as buildQuotedMessageOptions } from "./group-session-key-DmFc_Cqi.js";
-import { k as resolveComparableIdentity } from "./auth-store-B_DQIdzp.js";
+import { i as buildQuotedMessageOptions } from "./group-session-key-CH9jJIVQ.js";
+import { k as resolveComparableIdentity } from "./auth-store-CtpBqH5S.js";
 import { isRecord, normalizeLowercaseStringOrEmpty, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { logVerbose } from "openclaw/plugin-sdk/runtime-env";
 import { formatLocationText } from "openclaw/plugin-sdk/channel-inbound";
@@ -97,7 +97,7 @@ function getFutureProofInnerMessage(message) {
 		}
 	}
 }
-function buildMessageChain(message) {
+function projectWhatsAppInboundMessage(message) {
 	const chain = [];
 	let current = normalizeMessageContent(message);
 	while (current && chain.length < 4) {
@@ -106,8 +106,14 @@ function buildMessageChain(message) {
 	}
 	return chain;
 }
+function isWhatsAppInboundMessageProjection(message) {
+	return Array.isArray(message);
+}
+function resolveWhatsAppInboundMessageProjection(message) {
+	return isWhatsAppInboundMessageProjection(message) ? message : projectWhatsAppInboundMessage(message);
+}
 function findMessageSection(rawMessage, sectionNames) {
-	const chain = buildMessageChain(rawMessage);
+	const chain = projectWhatsAppInboundMessage(rawMessage);
 	for (const name of sectionNames) for (const message of chain) {
 		const value = message[name];
 		if (isRecord(value)) return {
@@ -117,7 +123,7 @@ function findMessageSection(rawMessage, sectionNames) {
 	}
 }
 function unwrapMessage(message) {
-	return buildMessageChain(message).at(-1);
+	return resolveWhatsAppInboundMessageProjection(message).at(-1);
 }
 function extractContextInfoFromMessage(message) {
 	const contentType = getContentType(message);
@@ -142,13 +148,13 @@ function extractContextInfoFromMessage(message) {
 	}
 }
 function extractContextInfo(message) {
-	for (const candidate of buildMessageChain(message)) {
+	for (const candidate of resolveWhatsAppInboundMessageProjection(message)) {
 		const contextInfo = extractContextInfoFromMessage(candidate);
 		if (contextInfo) return contextInfo;
 	}
 }
-function extractMentionedJids(rawMessage) {
-	const mentionedJids = extractContextInfo(rawMessage)?.mentionedJid?.filter(Boolean);
+function extractMentionedJids(message) {
+	const mentionedJids = extractContextInfo(message)?.mentionedJid?.filter(Boolean);
 	if (!mentionedJids?.length) return;
 	return uniqueStrings(mentionedJids);
 }
@@ -163,8 +169,9 @@ function extractNativeFlowResponseText(response) {
 		return;
 	}
 }
-function extractText(rawMessage) {
-	const message = unwrapMessage(rawMessage);
+function extractText(source) {
+	const projection = resolveWhatsAppInboundMessageProjection(source);
+	const message = unwrapMessage(projection);
 	if (!message) return;
 	const extracted = extractMessageContent(message);
 	const candidates = [message, extracted && extracted !== message ? extracted : void 0];
@@ -192,11 +199,11 @@ function extractText(rawMessage) {
 			if (pollText) return pollText;
 		}
 	}
-	const contactPlaceholder = extractContactPlaceholder(message) ?? (extracted && extracted !== message ? extractContactPlaceholder(extracted) : void 0);
+	const contactPlaceholder = extractContactPlaceholder(projection) ?? (extracted && extracted !== message ? extractContactPlaceholder(extracted) : void 0);
 	if (contactPlaceholder) return contactPlaceholder;
 }
-function extractExternalAdReplyContext(rawMessage) {
-	const message = unwrapMessage(rawMessage);
+function extractExternalAdReplyContext(source) {
+	const message = unwrapMessage(source);
 	const adReply = message?.imageMessage?.contextInfo?.externalAdReply ?? message?.videoMessage?.contextInfo?.externalAdReply;
 	if (!adReply) return;
 	const title = adReply.title?.trim() || void 0;
@@ -208,8 +215,8 @@ function extractExternalAdReplyContext(rawMessage) {
 		body
 	} : void 0;
 }
-function extractMediaKind(rawMessage) {
-	const message = unwrapMessage(rawMessage);
+function extractMediaKind(source) {
+	const message = unwrapMessage(source);
 	if (!message) return;
 	if (message.imageMessage) return "image";
 	if (message.videoMessage || message.ptvMessage) return "video";
@@ -217,15 +224,15 @@ function extractMediaKind(rawMessage) {
 	if (message.documentMessage) return "document";
 	if (message.stickerMessage) return "sticker";
 }
-function extractContactPlaceholder(rawMessage) {
-	const contactContext = extractContactContext(rawMessage);
+function extractContactPlaceholder(source) {
+	const contactContext = extractContactContext(source);
 	if (!contactContext) return;
 	if (contactContext.kind === "contact") return "<contact>";
 	const suffix = contactContext.total === 1 ? "contact" : "contacts";
 	return `<contacts: ${contactContext.total} ${suffix}>`;
 }
-function extractContactContext(rawMessage) {
-	const message = unwrapMessage(rawMessage);
+function extractContactContext(source) {
+	const message = unwrapMessage(source);
 	if (!message) return;
 	const contact = message.contactMessage ?? void 0;
 	if (contact) {
@@ -261,8 +268,8 @@ function describeContact(input) {
 		phones: parsed.phones
 	};
 }
-function extractLocationData(rawMessage) {
-	const message = unwrapMessage(rawMessage);
+function extractLocationData(source) {
+	const message = unwrapMessage(source);
 	if (!message) return null;
 	const live = message.liveLocationMessage ?? void 0;
 	if (live) {
@@ -305,10 +312,11 @@ function extractLocationData(rawMessage) {
 	}
 	return null;
 }
-function describeReplyContext(rawMessage) {
-	const message = unwrapMessage(rawMessage);
+function describeReplyContext(source) {
+	const projection = resolveWhatsAppInboundMessageProjection(source);
+	const message = unwrapMessage(projection);
 	if (!message) return null;
-	const contextInfo = extractContextInfo(message);
+	const contextInfo = extractContextInfo(projection.length === 1 && projection[0] === message ? projection : projectWhatsAppInboundMessage(message));
 	const quoted = normalizeMessageContent(contextInfo?.quotedMessage);
 	if (!quoted && !contextInfo?.stanzaId) return null;
 	const senderJid = contextInfo?.participant ?? void 0;
@@ -321,10 +329,11 @@ function describeReplyContext(rawMessage) {
 		body: "[quoted message unavailable]",
 		sender
 	};
-	const location = extractLocationData(quoted);
+	const quotedProjection = projectWhatsAppInboundMessage(quoted);
+	const location = extractLocationData(quotedProjection);
 	const locationText = location ? formatLocationText(location) : void 0;
-	const body = [extractText(quoted), locationText].filter(Boolean).join("\n").trim();
-	const mediaKind = extractMediaKind(quoted);
+	const body = [extractText(quotedProjection), locationText].filter(Boolean).join("\n").trim();
+	const mediaKind = extractMediaKind(quotedProjection);
 	const media = mediaKind ? {
 		kind: mediaKind,
 		contentType: resolveInboundMediaMimetype(quoted)
@@ -352,12 +361,13 @@ function hasInteractiveResponseContent(message) {
 * `messages.upsert` stream as real messages but should not trigger pairing
 * access-control side effects.
 */
-function hasInboundUserContent(rawMessage) {
-	if (!rawMessage) return false;
-	if (extractText(rawMessage)) return true;
-	if (extractMediaKind(rawMessage)) return true;
-	if (extractLocationData(rawMessage)) return true;
-	for (const candidate of buildMessageChain(rawMessage)) if (hasInteractiveResponseContent(candidate)) return true;
+function hasInboundUserContent(source) {
+	const projection = resolveWhatsAppInboundMessageProjection(source);
+	if (projection.length === 0) return false;
+	if (extractText(projection)) return true;
+	if (extractMediaKind(projection)) return true;
+	if (extractLocationData(projection)) return true;
+	for (const candidate of projection) if (hasInteractiveResponseContent(candidate)) return true;
 	return false;
 }
 //#endregion
@@ -391,7 +401,7 @@ async function addWhatsAppImagePreviewFields(content) {
 //#endregion
 //#region extensions/whatsapp/src/inbound/outbound-mentions.ts
 const CODE_FENCE_RE = /```[\s\S]*?```/g;
-const INLINE_CODE_RE = /`[^`\n]+`/g;
+const INLINE_CODE_RE = /(?<=(?:^|[^\\])(?:\\\\)*)(`+)[\s\S]*?(?:(?<!`)\1(?!`)|$)/g;
 const OUTBOUND_MENTION_RE = /@(\+?\d+)/g;
 const KNOWN_USER_JID_RE = /^(\d+)(?::\d+)?@(s\.whatsapp\.net|hosted|lid|hosted\.lid|c\.us)$/i;
 const PHONE_JID_DOMAIN_RE = /^(s\.whatsapp\.net|hosted|c\.us)$/i;
@@ -725,4 +735,4 @@ function createWebSendApi(params) {
 	};
 }
 //#endregion
-export { addWhatsAppImagePreviewFields as a, extractContextInfo as c, extractMediaKind as d, extractMentionedJids as f, resolveInboundMediaMimetype as g, hasInboundUserContent as h, resolveWhatsAppOutboundMentions as i, extractExternalAdReplyContext as l, findMessageSection as m, addWhatsAppOutboundMentionsToContent as n, describeReplyContext as o, extractText as p, mayContainWhatsAppOutboundMention as r, extractContactContext as s, createWebSendApi as t, extractLocationData as u };
+export { resolveInboundMediaMimetype as _, addWhatsAppImagePreviewFields as a, extractContextInfo as c, extractMediaKind as d, extractMentionedJids as f, projectWhatsAppInboundMessage as g, hasInboundUserContent as h, resolveWhatsAppOutboundMentions as i, extractExternalAdReplyContext as l, findMessageSection as m, addWhatsAppOutboundMentionsToContent as n, describeReplyContext as o, extractText as p, mayContainWhatsAppOutboundMention as r, extractContactContext as s, createWebSendApi as t, extractLocationData as u };

package/dist/{setup-finalize-D3n71Uyx.js → setup-finalize-CRzMpx84.js}

@@ -1,10 +1,10 @@
-import { a as resolveWhatsAppAccount, o as resolveWhatsAppAuthDir } from "./accounts-BX2fZUyR.js";
+import { a as resolveWhatsAppAccount, o as resolveWhatsAppAuthDir } from "./accounts-CeKQbu_s.js";
 import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-CB5SOWjc.js";
 import { r as hasWebCredsSync } from "./creds-files-W6B3EMZ8.js";
 import { a as normalizeWhatsAppAllowFromEntries, o as normalizeWhatsAppAllowFromEntry } from "./normalize-target-CugRyONv.js";
-import { r as whatsappSetupAdapter } from "./shared-Dp9M3ZPX.js";
-import { DEFAULT_ACCOUNT_ID, createSetupTranslator, splitSetupEntries } from "openclaw/plugin-sdk/setup";
+import { r as whatsappSetupAdapter } from "./shared-D3B14d45.js";
 import { formatCliCommand, formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
+import { DEFAULT_ACCOUNT_ID, createSetupTranslator, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 //#region extensions/whatsapp/src/setup-finalize.ts
 const t = createSetupTranslator();
 function trimPromptText(value) {
@@ -295,7 +295,7 @@ async function finalizeWhatsAppSetup(params) {
 		};
 		let loginWeb;
 		try {
-			({loginWeb} = await import("./login-D6_rfxTZ.js").then((n) => n.n));
+			({loginWeb} = await import("./login-1u5WcfTn.js").then((n) => n.n));
 		} catch (error) {
 			await reportLoginFailure(error);
 		}

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as whatsappSetupPlugin } from "./channel.setup-Cmvd967u.js";
+import { t as whatsappSetupPlugin } from "./channel.setup-CRJQiWbh.js";
 export { whatsappSetupPlugin };

package/dist/{setup-surface-BCZszf3l.js → setup-surface-ym4doiv3.js}

@@ -1,6 +1,6 @@
-import { o as resolveWhatsAppAuthDir } from "./accounts-BX2fZUyR.js";
+import { o as resolveWhatsAppAuthDir } from "./accounts-CeKQbu_s.js";
 import { t as listAccountIds } from "./account-ids-CB5SOWjc.js";
-import { a as formatWhatsAppWebAuthStatusState, h as readWebAuthState } from "./auth-store-B_DQIdzp.js";
+import { a as formatWhatsAppWebAuthStatusState, h as readWebAuthState } from "./auth-store-CtpBqH5S.js";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
 //#region extensions/whatsapp/src/setup-surface.ts
 const t = createSetupTranslator();
@@ -36,7 +36,7 @@ const whatsappSetupWizard = {
 	},
 	resolveShouldPromptAccountIds: ({ shouldPromptAccountIds }) => shouldPromptAccountIds,
 	credentials: [],
-	finalize: async (params) => await (await import("./setup-finalize-D3n71Uyx.js")).finalizeWhatsAppSetup(params),
+	finalize: async (params) => await (await import("./setup-finalize-CRzMpx84.js")).finalizeWhatsAppSetup(params),
 	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false),
 	onAccountRecorded: (accountId, options) => {
 		options?.onAccountId?.(channel, accountId);

package/dist/{shared-Dp9M3ZPX.js → shared-D3B14d45.js}

@@ -1,4 +1,4 @@
-import { a as resolveWhatsAppAccount, n as hasAnyWhatsAppAuth } from "./accounts-BX2fZUyR.js";
+import { a as resolveWhatsAppAccount, n as hasAnyWhatsAppAuth } from "./accounts-CeKQbu_s.js";
 import { r as resolveDefaultWhatsAppAccountId, t as listAccountIds } from "./account-ids-CB5SOWjc.js";
 import { a as normalizeWhatsAppAllowFromEntries } from "./normalize-target-CugRyONv.js";
 import { t as WhatsAppChannelConfigSchema } from "./config-schema-BQP5YCeK.js";
@@ -12,7 +12,7 @@ import { normalizeE164 } from "openclaw/plugin-sdk/account-resolution";
 import { createChannelPluginBase } from "openclaw/plugin-sdk/core";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
-import { buildChannelGroupsScopeTree, collectOpenGroupPolicyRouteAllowlistWarnings, createAllowlistProviderGroupPolicyWarningCollector, resolveScopeRequireMention, resolveScopeToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
+import { buildChannelGroupsScopeTree, collectOpenGroupPolicyRouteAllowlistWarnings, createAllowlistProviderGroupPolicyWarningCollector, createConditionalWarningCollector, resolveScopeRequireMention, resolveScopeToolsPolicy } from "openclaw/plugin-sdk/channel-policy";
 import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
 import { createPatchedAccountSetupAdapter } from "openclaw/plugin-sdk/setup";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
@@ -20,14 +20,14 @@ import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter, createSco
 import { createDelegatedSetupWizardProxy } from "openclaw/plugin-sdk/setup-runtime";
 import { readChannelAllowFromStore } from "openclaw/plugin-sdk/channel-pairing";
 //#region extensions/whatsapp/src/channel-runtime-loader.ts
-const loadWhatsAppAuthStore = createLazyRuntimeModule(() => import("./auth-store-B_DQIdzp.js").then((n) => n.i));
+const loadWhatsAppAuthStore = createLazyRuntimeModule(() => import("./auth-store-CtpBqH5S.js").then((n) => n.i));
 async function readWhatsAppAccountLinkState(authDir) {
 	const state = await (await loadWhatsAppAuthStore()).readWebAuthState(authDir);
 	return state === "unstable" ? "unknown" : state;
 }
 const loadWhatsAppChannelRuntime = createLazyRuntimeModule(async () => {
 	await loadWhatsAppAuthStore();
-	return await import("./channel.runtime-RxuNGZ7w.js");
+	return await import("./channel.runtime-D_PjmeMT.js");
 });
 //#endregion
 //#region extensions/whatsapp/src/config-accessors.ts
@@ -115,7 +115,7 @@ async function applyWhatsAppSecurityConfigFixes(params) {
 //#region extensions/whatsapp/src/shared.ts
 const WHATSAPP_CHANNEL = "whatsapp";
 async function loadWhatsAppSetupSurface() {
-	return await import("./setup-surface-BCZszf3l.js");
+	return await import("./setup-surface-ym4doiv3.js");
 }
 const whatsappSetupWizardProxy = createWhatsAppSetupWizardProxy(async () => (await loadWhatsAppSetupSurface()).whatsappSetupWizard);
 const whatsappConfigAdapter = createScopedChannelConfigAdapter({
@@ -209,6 +209,12 @@ function createWhatsAppPluginBase(params) {
 			}
 		})
 	});
+	const collectWhatsAppOpenGroupFindings = createConditionalWarningCollector.findings({
+		collectWarnings: collectWhatsAppSecurityWarnings,
+		checkId: "channels.whatsapp.groups.open",
+		severity: "critical",
+		title: "WhatsApp security warning"
+	});
 	const base = createChannelPluginBase({
 		id: WHATSAPP_CHANNEL,
 		meta: {
@@ -270,7 +276,7 @@ function createWhatsAppPluginBase(params) {
 		security: {
 			applyConfigFixes: applyWhatsAppSecurityConfigFixes,
 			resolveDmPolicy: whatsappResolveDmPolicy,
-			collectWarnings: collectWhatsAppSecurityWarnings
+			collectWarnings: collectWhatsAppOpenGroupFindings
 		},
 		doctor: whatsappDoctor,
 		setupContract: params.setupContract,

package/dist/{socket-close-09FojDO2.js → socket-close-2T0_jZTN.js}

@@ -1,5 +1,5 @@
 import { c as resolveWebCredsPath, s as resolveWebCredsBackupPath, t as assertWebCredsPathRegularFileOrMissing } from "./creds-files-W6B3EMZ8.js";
-import { A as enqueueCredsSave, M as waitForCredsSaveQueueWithTimeout, N as writeCredsJsonAtomically, P as writeWebCredsRawAtomically, b as restoreCredsFromBackupIfNeeded, u as readCredsJsonRaw, y as resolveDefaultWebAuthDir } from "./auth-store-B_DQIdzp.js";
+import { A as enqueueCredsSave, M as waitForCredsSaveQueueWithTimeout, N as writeCredsJsonAtomically, P as writeWebCredsRawAtomically, b as restoreCredsFromBackupIfNeeded, u as readCredsJsonRaw, y as resolveDefaultWebAuthDir } from "./auth-store-CtpBqH5S.js";
 import { n as getStatusCode } from "./session-errors-JuazczrA.js";
 import { a as makeWASocket, i as makeCacheableSignalKeyStore, n as createBaileysSignalRepository, r as fetchLatestBaileysVersion, s as useMultiFileAuthState } from "./session.runtime-Nsqaehbd.js";
 import { VERSION, formatCliCommand } from "openclaw/plugin-sdk/cli-runtime";

package/node_modules/baileys/lib/Defaults/index.js

@@ -2,7 +2,7 @@ import { proto } from '../../WAProto/index.js';
 import { makeLibSignalRepository } from '../Signal/libsignal.js';
 import { Browsers } from '../Utils/browser-utils.js';
 import logger from '../Utils/logger.js';
-const version = [2, 3000, 1035194821];
+const version = [2, 3000, 1043857760];
 export const UNAUTHORIZED_CODES = [401, 403, 419];
 export const DEFAULT_ORIGIN = 'https://web.whatsapp.com';
 export const CALL_VIDEO_PREFIX = 'https://call.whatsapp.com/video/';

package/node_modules/baileys/lib/Socket/business.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"business.d.ts","sourceRoot":"","sources":["../../src/Socket/business.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC5G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAUnE,OAAO,EAAE,KAAK,UAAU,EAAqC,MAAM,aAAa,CAAA;AAIhF,eAAO,MAAM,kBAAkB,GAAI,QAAQ,YAAY;;+BA8Od,MAAM,eAAe,MAAM;yCAjGjB,iBAAiB;;;;2BAmD/B,MAAM;;;4BAkIL,aAAa;gCAwCT,MAAM,EAAE;;;+BA9ET,MAAM,UAAU,aAAa;kCAxR1B,0BAA0B;8BA2E9B,aAAa;2BAoChB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsSqvnB,CAAC;;;;;;;;;0DAhX9wnB,GAAG,0BAChB,GAAH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8WF,CAAA"}
+{"version":3,"file":"business.d.ts","sourceRoot":"","sources":["../../src/Socket/business.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAC5G,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAA;AAUnE,OAAO,EAAE,KAAK,UAAU,EAAqC,MAAM,aAAa,CAAA;AAIhF,eAAO,MAAM,kBAAkB,GAAI,QAAQ,YAAY;;+BA8Od,MAAM,eAAe,MAAM;yCAjGjB,iBAAiB;;;;2BAmD/B,MAAM;;;4BAkIL,aAAa;gCAwCT,MAAM,EAAE;;;+BA9ET,MAAM,UAAU,aAAa;kCAxR1B,0BAA0B;8BA2E9B,aAAa;2BAoChB,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAsS6+nB,CAAC;;;;;;;;;0DAhXtgoB,GAAG,0BAChB,GAAH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8WF,CAAA"}

package/node_modules/baileys/lib/Socket/chats.d.ts

@@ -5,6 +5,7 @@ import type { QuickReplyAction } from '../Types/Bussines.js';
 import type { LabelActionBody } from '../Types/Label.js';
 import { type BinaryNode } from '../WABinary/index.js';
 import { USyncQuery } from '../WAUSync/index.js';
+export declare const buildProfilePictureQueryContent: (type: "preview" | "image", tcTokenContent?: BinaryNode[]) => BinaryNode[];
 export declare const makeChatsSocket: (config: SocketConfig) => {
     serverProps: {
         /** AB prop 10518: gate tctoken on 1:1 messages. Default true (safe: avoids 463). */

package/node_modules/baileys/lib/Socket/chats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/Socket/chats.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AAE9C,OAAO,KAAK,EACX,WAAW,EACX,UAAU,EACV,gBAAgB,EAGhB,iBAAiB,EAEjB,YAAY,EAEZ,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,aAAa,EAEb,UAAU,EACV,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,MAAM,UAAU,CAAA;AAEjB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAqBrD,OAAO,EACN,KAAK,UAAU,EAWf,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,UAAU,EAAa,MAAM,YAAY,CAAA;AAGlD,eAAO,MAAM,eAAe,GAAI,QAAQ,YAAY;;QA8BlD,oFAAoF;;QAEpF,+EAA+E;;QAE/E,iFAAiF;;;2BAqqB9C,OAAO,GAAG,OAAO,UAAU;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,cAAc,MAAM;;;;;;;;;;;;;;;;;;4BA2HnE,aAAa;+BArGV,UAAU,UAAU,MAAM;+BA8C1B,MAAM;6BA5GR,MAAM,SAAQ,SAAS,GAAG,OAAO,cAA0B,MAAM;;2BAjdnE,MAAM,EAAE;yCAaM,MAAM,EAAE;gCAepD,MAAM,WACF,aAAa,eACT;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;gCAmCN,MAAM;kCA0BJ,MAAM;8BAkBV,MAAM;6BAkBP,MAAM,UAAU,OAAO,GAAG,SAAS;2DAooBX,OAAO;+BAr1B7B,kBAAkB;mCAJd,sBAAsB;mCAQtB,cAAc;iCAIhB,oBAAoB;yCAIZ,cAAc;iCAItB,cAAc;uCAIR,mBAAmB;oCAItB,sBAAsB;8CAIZ,MAAM;8BAqPtB,MAAM,KAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;;sBA4jBxD,gBAAgB,OAAO,MAAM;2BA1gBlB,cAAc,GAAG,QAAQ,kBAAkB,MAAM,GAAG,MAAM;4BA6iB/D,MAAM,WAAW,KAAK,CAAC,eAAe,CAAC,cAAc;yBAYxD,MAAM;;oBAYX,MAAM,UAAU,eAAe;wBAc3B,MAAM,WAAW,MAAM;2BAcpB,MAAM,WAAW,MAAM;2BAcvB,MAAM,aAAa,MAAM,WAAW,MAAM;8BAevC,MAAM,aAAa,MAAM,WAAW,MAAM;gBAhGxD,MAAM,YAAY;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,QAAQ,OAAO;sCA+G7C,gBAAgB;kCAYpB,MAAM;;;;;;0DAxlC5B,GAAG,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAi7C/C,CAAA"}
+{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/Socket/chats.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAA;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AAE9C,OAAO,KAAK,EACX,WAAW,EACX,UAAU,EACV,gBAAgB,EAGhB,iBAAiB,EAEjB,YAAY,EAEZ,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,aAAa,EAEb,UAAU,EACV,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,MAAM,UAAU,CAAA;AAEjB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAqBrD,OAAO,EACN,KAAK,UAAU,EAWf,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,UAAU,EAAa,MAAM,YAAY,CAAA;AAGlD,eAAO,MAAM,+BAA+B,GAC3C,MAAM,SAAS,GAAG,OAAO,EACzB,iBAAiB,UAAU,EAAE,KAC3B,UAAU,EAOZ,CAAA;AAED,eAAO,MAAM,eAAe,GAAI,QAAQ,YAAY;;QA8BlD,oFAAoF;;QAEpF,+EAA+E;;QAE/E,iFAAiF;;;2BAkqB9C,OAAO,GAAG,OAAO,UAAU;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,cAAc,MAAM;;;;;;;;;;;;;;;;;;4BA2HnE,aAAa;+BArGV,UAAU,UAAU,MAAM;+BA8C1B,MAAM;6BAzGR,MAAM,SAAQ,SAAS,GAAG,OAAO,cAA0B,MAAM;;2BAjdnE,MAAM,EAAE;yCAaM,MAAM,EAAE;gCAepD,MAAM,WACF,aAAa,eACT;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;gCAmCN,MAAM;kCA0BJ,MAAM;8BAkBV,MAAM;6BAkBP,MAAM,UAAU,OAAO,GAAG,SAAS;2DAioBX,OAAO;+BAl1B7B,kBAAkB;mCAJd,sBAAsB;mCAQtB,cAAc;iCAIhB,oBAAoB;yCAIZ,cAAc;iCAItB,cAAc;uCAIR,mBAAmB;oCAItB,sBAAsB;8CAIZ,MAAM;8BAqPtB,MAAM,KAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;;sBAyjBxD,gBAAgB,OAAO,MAAM;2BAvgBlB,cAAc,GAAG,QAAQ,kBAAkB,MAAM,GAAG,MAAM;4BA0iB/D,MAAM,WAAW,KAAK,CAAC,eAAe,CAAC,cAAc;yBAYxD,MAAM;;oBAYX,MAAM,UAAU,eAAe;wBAc3B,MAAM,WAAW,MAAM;2BAcpB,MAAM,WAAW,MAAM;2BAcvB,MAAM,aAAa,MAAM,WAAW,MAAM;8BAevC,MAAM,aAAa,MAAM,WAAW,MAAM;gBAhGxD,MAAM,YAAY;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,QAAQ,OAAO;sCA+G7C,gBAAgB;kCAYpB,MAAM;;;;;;0DAjmC5B,GAAG,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA07C/C,CAAA"}

package/node_modules/baileys/lib/Socket/chats.js

@@ -11,6 +11,13 @@ import { buildTcTokenFromJid } from '../Utils/tc-token-utils.js';
 import { getBinaryNodeChild, getBinaryNodeChildren, isHostedLidUser, isHostedPnUser, isLidUser, isPnUser, jidDecode, jidNormalizedUser, reduceBinaryNodeToDictionary, S_WHATSAPP_NET } from '../WABinary/index.js';
 import { USyncQuery, USyncUser } from '../WAUSync/index.js';
 import { makeSocket } from './socket.js';
+export const buildProfilePictureQueryContent = (type, tcTokenContent) => {
+    const picture = { tag: 'picture', attrs: { type, query: 'url' } };
+    if (tcTokenContent?.length) {
+        picture.content = tcTokenContent;
+    }
+    return [picture];
+};
 export const makeChatsSocket = (config) => {
     const { logger, markOnlineOnConnect, fireInitQueries, appStateMacVerification, shouldIgnoreJid, shouldSyncHistoryMessage, getMessage } = config;
     const sock = makeSocket(config);
@@ -546,7 +553,6 @@ export const makeChatsSocket = (config) => {
      * type = "image for the high res picture"
      */
     const profilePictureUrl = async (jid, type = 'preview', timeoutMs) => {
-        const baseContent = [{ tag: 'picture', attrs: { type, query: 'url' } }];
         // WA Web only includes tctoken for user JIDs (not groups/newsletters)
         // and never for own profile pic (Chat model for self has no tcToken).
         // Including tctoken for own JID causes the server to never respond.
@@ -554,12 +560,11 @@ export const makeChatsSocket = (config) => {
         const isUserJid = isPnUser(normalizedJid) || isLidUser(normalizedJid);
         const me = authState.creds.me;
         const isSelf = me && (normalizedJid === jidNormalizedUser(me.id) || (me.lid && normalizedJid === jidNormalizedUser(me.lid)));
-        let content = baseContent;
+        let tcTokenContent;
         if (serverProps.profilePicPrivacyToken && isUserJid && !isSelf) {
-            content = await buildTcTokenFromJid({
+            tcTokenContent = await buildTcTokenFromJid({
                 authState,
                 jid: normalizedJid,
-                baseContent,
                 getLIDForPN
             });
         }
@@ -572,7 +577,7 @@ export const makeChatsSocket = (config) => {
                 type: 'get',
                 xmlns: 'w:profile:picture'
             },
-            content
+            content: buildProfilePictureQueryContent(type, tcTokenContent)
         }, timeoutMs);
         const child = getBinaryNodeChild(result, 'picture');
         return child?.attrs?.url;