@openclaw/whatsapp 2026.9.1 → 2026.9.3

package/dist/api.js

@@ -4,10 +4,10 @@ import { a as normalizeWhatsAppAllowFromEntries, c as normalizeWhatsAppTarget, i
 import { t as resolveWhatsAppOutboundTarget } from "./resolve-outbound-target-1GqbT1uX.js";
 import { c as toWhatsappJid, i as markdownToWhatsApp, l as toWhatsappJidWithLid, n as isSelfChatMode, r as jidToE164, s as resolveJidToE164, t as assertWebChannel } from "./targets-runtime-RBjx3pg_.js";
 import { n as resolveUserPath, t as normalizeE164 } from "./text-runtime-DyfmcATV.js";
-import { n as WHATSAPP_LEGACY_OUTBOUND_SEND_DEP_KEYS, t as whatsappPlugin } from "./channel-DebjeuFC.js";
-import { a as resolveWhatsAppGroupRequireMention, o as resolveWhatsAppGroupToolPolicy } from "./shared-BzKxoeKY.js";
+import { n as WHATSAPP_LEGACY_OUTBOUND_SEND_DEP_KEYS, t as whatsappPlugin } from "./channel-BeBrHPVa.js";
+import { a as resolveWhatsAppGroupRequireMention, o as resolveWhatsAppGroupToolPolicy } from "./shared-D6cUWXiq.js";
 import { t as whatsappCommandPolicy } from "./command-policy-BIOSHySD.js";
-import { t as whatsappSetupPlugin } from "./channel.setup-D1-jE0aE.js";
+import { t as whatsappSetupPlugin } from "./channel.setup-DhuZ51Kg.js";
 import { t as DEFAULT_WEB_MEDIA_BYTES } from "./constants-C7m81BNe.js";
 import { a as waitForWaConnection, o as DEFAULT_WHATSAPP_SOCKET_TIMING, r as createWaSocket, s as createWhatsAppSocketOperationTimeoutAdapter } from "./socket-close-B3X9uerq.js";
 import { n as getStatusCode, t as formatError } from "./session-errors-JuazczrA.js";

package/dist/{approval-handler.runtime-C2cpkbpY.js → approval-handler.runtime-DGJEaoqh.js}

@@ -4,7 +4,7 @@ import { s as normalizeWhatsAppMessagingTarget } from "./normalize-target-CugRyO
 import { i as sendTypingWhatsApp, t as sendMessageWhatsApp } from "./send-BDDGPxav.js";
 import { i as getWhatsAppRuntime } from "./runtime-BLlToOi6.js";
 import "./normalize-C7Hkc_vE.js";
-import { i as unregisterWhatsAppApprovalReactionTarget, r as registerWhatsAppApprovalReactionTarget } from "./approval-reactions-DrZe-NmN.js";
+import { i as unregisterWhatsAppApprovalReactionTarget, r as registerWhatsAppApprovalReactionTarget } from "./approval-reactions-DSFH6Mtx.js";
 import { createSubsystemLogger } from "openclaw/plugin-sdk/runtime-env";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { buildApprovalReactionPendingContent } from "openclaw/plugin-sdk/approval-reaction-runtime";

package/dist/{approval-reactions-DrZe-NmN.js → approval-reactions-DSFH6Mtx.js}

@@ -2,9 +2,8 @@ import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
 import { a as resolveWhatsAppAccount } from "./accounts-CiKHiuEe.js";
 import { n as getOptionalWhatsAppRuntime } from "./runtime-BLlToOi6.js";
 import { c as getWhatsAppApprovalApprovers, l as whatsappApprovalAuth } from "./group-session-key-BmVDSPr1.js";
-import { isApprovalNotFoundError } from "openclaw/plugin-sdk/error-runtime";
 import { createLazyRuntimeSurface } from "openclaw/plugin-sdk/lazy-runtime";
-import { approvalReactionDecisionSetsMatch, buildApprovalReactionDeliveredBindingMarker, createApprovalReactionTargetStore, listApprovalReactionBindings, readApprovalReactionDecisionList, readApprovalReactionDeliveredBinding, readApprovalReactionPresentationBinding, resolveTypedApprovalReactionTarget } from "openclaw/plugin-sdk/approval-reaction-runtime";
+import { approvalReactionDecisionSetsMatch, buildApprovalReactionDeliveredBindingMarker, createApprovalReactionTargetStore, listApprovalReactionBindings, readApprovalReactionDecisionList, readApprovalReactionDeliveredBinding, readApprovalReactionPresentationBinding, readApprovalReactionTargetRecord, resolveTypedApprovalReactionTarget, settleApprovalReaction } from "openclaw/plugin-sdk/approval-reaction-runtime";
 import { createPluginStateErrorReporter } from "openclaw/plugin-sdk/plugin-state-runtime";
 //#region extensions/whatsapp/src/approval-reactions.ts
 var approval_reactions_exports = /* @__PURE__ */ __exportAll({
@@ -28,7 +27,7 @@ const whatsappApprovalReactionTargets = createApprovalReactionTargetStore({
 	defaultTtlMs: DEFAULT_REACTION_TARGET_TTL_MS,
 	openStore: (storeParams) => getOptionalWhatsAppRuntime()?.state.openKeyedStore(storeParams),
 	logPersistentError: reportPersistentApprovalReactionError,
-	readPersistedTarget
+	readPersistedTarget: readApprovalReactionTargetRecord
 });
 function buildReactionTargetKey(params) {
 	const accountId = params.accountId.trim();
@@ -52,17 +51,6 @@ function reportApprovalBindingCorrelationMismatch(binding) {
 		});
 	} catch {}
 }
-function readPersistedTarget(target) {
-	const value = target;
-	if (!value || typeof value.approvalId !== "string" || value.approvalKind !== "exec" && value.approvalKind !== "plugin") return null;
-	const allowedDecisions = readApprovalReactionDecisionList(value.allowedDecisions);
-	if (!allowedDecisions) return null;
-	return {
-		approvalId: value.approvalId,
-		approvalKind: value.approvalKind,
-		allowedDecisions
-	};
-}
 const APPROVAL_ID_LINE_RE = /^\s*ID:\s*(\S(?:.*\S)?)\s*$/i;
 const APPROVAL_KIND_LINE_RE = /^\s*(?:\S+\s+)?(Exec|Plugin) approval required\s*$/i;
 function visibleApprovalBindingMatches(text, binding) {
@@ -264,26 +252,8 @@ async function maybeResolveWhatsAppApprovalReaction(params) {
 		params.logVerboseMessage?.(`whatsapp: approval reaction ignored for ${target.approvalId}; missing actor identity`);
 		return true;
 	}
-	if (getWhatsAppApprovalApprovers({
-		cfg: params.cfg,
-		accountId: params.accountId
-	}).length === 0) {
-		params.logVerboseMessage?.(`whatsapp: approval reaction denied id=${target.approvalId}; reactions require explicit approvers`);
-		return true;
-	}
-	if (!whatsappApprovalAuth.authorizeActorAction({
-		cfg: params.cfg,
-		accountId: params.accountId,
-		senderId: actorId,
-		action: "approve",
-		approvalKind: target.approvalKind
-	}).authorized) {
-		params.logVerboseMessage?.(`whatsapp: approval reaction denied id=${target.approvalId} sender=${actorId}`);
-		return true;
-	}
-	const resolveApprovalOverGateway = await loadResolveApprovalOverGateway();
-	try {
-		const result = await resolveApprovalOverGateway({
+	await settleApprovalReaction({
+		request: {
 			cfg: params.cfg,
 			approvalId: target.approvalId,
 			approvalKind: target.approvalKind,
@@ -292,28 +262,25 @@ async function maybeResolveWhatsAppApprovalReaction(params) {
 			accountId: params.accountId,
 			senderId: actorId,
 			gatewayUrl: params.gatewayUrl
-		});
-		unregisterWhatsAppApprovalReactionTarget({
+		},
+		approvers: getWhatsAppApprovalApprovers({
+			cfg: params.cfg,
+			accountId: params.accountId
+		}),
+		authorizeActorAction: (input) => whatsappApprovalAuth.authorizeActorAction(input),
+		loadResolver: loadResolveApprovalOverGateway,
+		clearTarget: () => unregisterWhatsAppApprovalReactionTarget({
 			accountId: params.accountId,
 			remoteJid: target.remoteJid,
 			messageId: event.messageId
-		});
-		const canonicalDecision = "decision" in result.approval ? ` decision=${result.approval.decision}` : "";
-		params.logVerboseMessage?.(result.applied ? `whatsapp: approval reaction applied id=${target.approvalId} sender=${actorId} status=${result.approval.status}${canonicalDecision}` : `whatsapp: approval reaction already resolved id=${target.approvalId} sender=${actorId} status=${result.approval.status}${canonicalDecision}`);
-		return true;
-	} catch (error) {
-		if (isApprovalNotFoundError(error)) {
-			unregisterWhatsAppApprovalReactionTarget({
-				accountId: params.accountId,
-				remoteJid: target.remoteJid,
-				messageId: event.messageId
-			});
-			params.logVerboseMessage?.(`whatsapp: approval reaction ignored for expired approval id=${target.approvalId} sender=${actorId}`);
-			return true;
-		}
-		params.logVerboseMessage?.(`whatsapp: approval reaction failed id=${target.approvalId} sender=${actorId}: ${String(error)}`);
-		return true;
-	}
+		}),
+		onResolved: (result) => {
+			const canonicalDecision = "decision" in result.approval ? ` decision=${result.approval.decision}` : "";
+			params.logVerboseMessage?.(result.applied ? `whatsapp: approval reaction applied id=${target.approvalId} sender=${actorId} status=${result.approval.status}${canonicalDecision}` : `whatsapp: approval reaction already resolved id=${target.approvalId} sender=${actorId} status=${result.approval.status}${canonicalDecision}`);
+		},
+		logVerboseMessage: params.logVerboseMessage
+	});
+	return true;
 }
 function clearWhatsAppApprovalReactionTargetsForTest() {
 	whatsappApprovalReactionTargets.clearForTest();

package/dist/{channel-DebjeuFC.js → channel-BeBrHPVa.js}

@@ -8,7 +8,7 @@ import "./normalize-C7Hkc_vE.js";
 import { c as toWhatsappJid } from "./targets-runtime-RBjx3pg_.js";
 import "./text-runtime-DyfmcATV.js";
 import { c as getWhatsAppApprovalApprovers, l as whatsappApprovalAuth, s as lookupInboundMessageMetaForTarget, t as resolveWhatsAppGroupSessionKey } from "./group-session-key-BmVDSPr1.js";
-import { a as resolveWhatsAppGroupRequireMention, c as loadWhatsAppChannelRuntime, i as whatsappSetupContract, l as readWhatsAppAccountLinkState, n as whatsappSetupWizardProxy, o as resolveWhatsAppGroupToolPolicy, s as formatWhatsAppConfigAllowFromEntries, t as createWhatsAppPluginBase } from "./shared-BzKxoeKY.js";
+import { a as resolveWhatsAppGroupRequireMention, c as loadWhatsAppChannelRuntime, i as whatsappSetupContract, l as readWhatsAppAccountLinkState, n as whatsappSetupWizardProxy, o as resolveWhatsAppGroupToolPolicy, s as formatWhatsAppConfigAllowFromEntries, t as createWhatsAppPluginBase } from "./shared-D6cUWXiq.js";
 import { t as whatsappCommandPolicy } from "./command-policy-BIOSHySD.js";
 import { f as readWebAuthExistsForDecision, n as WHATSAPP_AUTH_UNSTABLE_CODE } from "./auth-store-ZWaclAbd.js";
 import { createActionGate as createActionGate$1 } from "openclaw/plugin-sdk/channel-actions";
@@ -82,7 +82,7 @@ const whatsappApproval = createApproverRestrictedNativeApprovalCapabilityFromFor
 			approvalKind,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-C2cpkbpY.js")).whatsappApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-DGJEaoqh.js")).whatsappApprovalNativeRuntime
 	})
 });
 function buildWhatsAppPendingPayload(params, approvalKind) {
@@ -229,10 +229,6 @@ function createWhatsAppOutboundBase({ sendMessageWhatsApp, sendPollWhatsApp, sho
 	return {
 		...outbound,
 		sendPayload: async (ctx) => {
-			if (ctx.payload.isError === true) return {
-				channel: "whatsapp",
-				messageId: ""
-			};
 			const payload = normalizeWhatsAppOutboundPayload(ctx.payload, { normalizeText });
 			if (!payload.text && !(payload.mediaUrl || payload.mediaUrls?.length)) {
 				if (ctx.payload.interactive || ctx.payload.presentation || ctx.payload.channelData) throw new Error("WhatsApp sendPayload does not support structured-only payloads without text or media.");
@@ -254,7 +250,7 @@ function createWhatsAppOutboundBase({ sendMessageWhatsApp, sendPollWhatsApp, sho
 }
 //#endregion
 //#region extensions/whatsapp/src/channel-outbound.ts
-const loadWhatsAppApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-DrZe-NmN.js").then((n) => n.t));
+const loadWhatsAppApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-DSFH6Mtx.js").then((n) => n.t));
 const loadWhatsAppQuestionReactionsModule = createLazyRuntimeModule(() => import("./question-reactions-bbe0Qnjn.js").then((n) => n.n));
 function normalizeWhatsAppChannelPayloadText(text) {
 	return normalizeWhatsAppPayloadTextPreservingIndentation(text);

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as whatsappPlugin } from "./channel-DebjeuFC.js";
+import { t as whatsappPlugin } from "./channel-BeBrHPVa.js";
 export { whatsappPlugin };

package/dist/{channel.runtime-B90_wffD.js → channel.runtime-qi6Zbi9p.js}

@@ -1,9 +1,9 @@
 import { startWebLoginWithQr as startWebLoginWithQr$1, waitForWebLogin as waitForWebLogin$1 } from "./login-qr-runtime.js";
 import { c as logoutWeb$1, d as readWebAuthExistsBestEffort$1, f as readWebAuthExistsForDecision$1, g as readWebSelfId$1, h as readWebAuthState$1, m as readWebAuthSnapshotBestEffort$1, o as getWebAuthAgeMs$1, p as readWebAuthSnapshot$1, s as logWebSelfId$1, x as webAuthExists$1 } from "./auth-store-ZWaclAbd.js";
 import { t as getActiveWebListener$1 } from "./active-listener-BEjWsCNM.js";
-import { t as monitorWebChannel$1 } from "./monitor-DyPdOPRx.js";
+import { t as monitorWebChannel$1 } from "./monitor-DNGfO3k0.js";
 import { t as loginWeb$1 } from "./login-6j2iP9nR.js";
-import { whatsappSetupWizard as whatsappSetupWizard$1 } from "./setup-surface-WsAzq337.js";
+import { whatsappSetupWizard as whatsappSetupWizard$1 } from "./setup-surface-B5UnuLT_.js";
 //#region extensions/whatsapp/src/channel.runtime.ts
 function getActiveWebListener(...args) {
 	return getActiveWebListener$1(...args);

package/dist/{channel.setup-D1-jE0aE.js → channel.setup-DhuZ51Kg.js}

@@ -1,4 +1,4 @@
-import { a as resolveWhatsAppGroupRequireMention, i as whatsappSetupContract, l as readWhatsAppAccountLinkState, n as whatsappSetupWizardProxy, o as resolveWhatsAppGroupToolPolicy, t as createWhatsAppPluginBase } from "./shared-BzKxoeKY.js";
+import { a as resolveWhatsAppGroupRequireMention, i as whatsappSetupContract, l as readWhatsAppAccountLinkState, n as whatsappSetupWizardProxy, o as resolveWhatsAppGroupToolPolicy, t as createWhatsAppPluginBase } from "./shared-D6cUWXiq.js";
 //#region extensions/whatsapp/src/channel.setup.ts
 const whatsappSetupPlugin = { ...createWhatsAppPluginBase({
 	groups: {

package/dist/{monitor-DyPdOPRx.js → monitor-DNGfO3k0.js}

@@ -13,7 +13,7 @@ import { t as BufferJSON } from "./session.runtime-Nsqaehbd.js";
 import { _ as resolveInboundMediaMimetype, a as addWhatsAppImagePreviewFields, c as extractContextInfo, d as extractMediaKind, f as extractMentionedJids, g as projectWhatsAppInboundMessage, h as hasInboundUserContent, i as resolveWhatsAppOutboundMentions, l as extractExternalAdReplyContext, n as addWhatsAppOutboundMentionsToContent, o as describeReplyContext, p as extractText, r as mayContainWhatsAppOutboundMention, s as extractContactContext, t as createWebSendApi, u as extractLocationData } from "./send-api-C_Zn4Ij-.js";
 import { t as resolveWhatsAppRuntimeGroupPolicy } from "./runtime-group-policy-DeSRFXEV.js";
 import { c as computeBackoff, d as resolveReconnectPolicy, f as sleepWithAbort, l as newConnectionId, n as WHATSAPP_WATCHDOG_TIMEOUT_ERROR, r as WhatsAppConnectionController, s as DEFAULT_RECONNECT_POLICY, u as resolveHeartbeatSeconds } from "./connection-controller-DNp6U1NN.js";
-import { n as maybeResolveWhatsAppApprovalReaction } from "./approval-reactions-DrZe-NmN.js";
+import { n as maybeResolveWhatsAppApprovalReaction } from "./approval-reactions-DSFH6Mtx.js";
 import { t as maybeResolveWhatsAppQuestionReaction } from "./question-reactions-bbe0Qnjn.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { createAckReactionHandle, createStatusReactionController, logAckFailure, removeAckReactionHandleAfterReply, shouldAckReaction } from "openclaw/plugin-sdk/channel-feedback";
@@ -40,12 +40,12 @@ import { createHash } from "node:crypto";
 import { resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
 import { resolveChunkMode, resolveTextChunkLimit } from "openclaw/plugin-sdk/reply-runtime";
 import { CHANNEL_APPROVAL_NATIVE_RUNTIME_CONTEXT_CAPABILITY } from "openclaw/plugin-sdk/approval-handler-runtime";
-import { createInboundDebouncer, resolveInboundDebounceMs } from "openclaw/plugin-sdk/channel-inbound-debounce";
 import { drainPendingDeliveries } from "openclaw/plugin-sdk/delivery-queue-runtime";
 import { DEFAULT_GROUP_HISTORY_LIMIT, buildHistoryContextFromEntries, buildInboundHistoryFromEntries, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
 import { enqueueSystemEvent } from "openclaw/plugin-sdk/system-event-runtime";
 import { fanInChannelIngressLifecycles, resolveStableChannelMessageIngress } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { getSessionEntry, patchSessionEntry, resolveGroupSessionKey, resolveStorePath, resolveStorePath as resolveStorePath$1, updateLastRoute } from "openclaw/plugin-sdk/session-store-runtime";
+import { createInboundDebouncer, resolveInboundDebounceMs } from "openclaw/plugin-sdk/channel-inbound-debounce";
 import { saveMediaStream } from "openclaw/plugin-sdk/media-store";
 import { upsertChannelPairingRequest } from "openclaw/plugin-sdk/conversation-runtime";
 import { createDedupeCache } from "openclaw/plugin-sdk/dedupe-runtime";
@@ -529,10 +529,10 @@ function createWhatsAppGroupMetadataCacheOwner(params) {
 		const listen = (event, listener) => {
 			detachListeners.push(params.listen(event, listener));
 		};
-		listen("groups.upsert", ((groups) => {
+		listen("groups.upsert", (groups) => {
 			for (const group of groups) if (group.id) rememberFullUpdate(group.id, group);
-		}));
-		listen("groups.update", ((updates) => {
+		});
+		listen("groups.update", (updates) => {
 			for (const update of updates) {
 				if (!update.id) continue;
 				if (typeof update.subject === "string" && Array.isArray(update.participants)) {
@@ -541,10 +541,10 @@ function createWhatsAppGroupMetadataCacheOwner(params) {
 				}
 				forgetFullMetadata(update.id);
 			}
-		}));
-		listen("group-participants.update", ((update) => {
+		});
+		listen("group-participants.update", (update) => {
 			forgetFullMetadata(update.id);
-		}));
+		});
 		(async () => {
 			try {
 				const groups = await params.sock.groupFetchAllParticipating();
@@ -578,13 +578,7 @@ function createWhatsAppGroupMetadataCacheOwner(params) {
 //#region extensions/whatsapp/src/inbound/lifecycle.ts
 function attachEmitterListener(emitter, event, listener) {
 	emitter.on(event, listener);
-	return () => {
-		if (typeof emitter.off === "function") {
-			emitter.off(event, listener);
-			return;
-		}
-		if (typeof emitter.removeListener === "function") emitter.removeListener(event, listener);
-	};
+	return () => emitter.off(event, listener);
 }
 function closeInboundMonitorSocket(sock) {
 	if (typeof sock.end === "function") {
@@ -606,7 +600,6 @@ function resolveWhatsAppIngressLifecycle(message) {
 //#endregion
 //#region extensions/whatsapp/src/inbound/message-debounce.ts
 function createWhatsAppInboundMessageDebouncer(options) {
-	const debounceMs = Math.max(0, Math.trunc(options.debounceMs ?? 0));
 	const pendingKeys = /* @__PURE__ */ new Map();
 	const activeFlushes = /* @__PURE__ */ new Set();
 	const workWaiters = /* @__PURE__ */ new Set();
@@ -636,7 +629,8 @@ function createWhatsAppInboundMessageDebouncer(options) {
 		return timestampDiff !== 0 ? timestampDiff : (a.receiveOrder ?? 0) - (b.receiveOrder ?? 0);
 	});
 	const debouncer = createInboundDebouncer({
-		debounceMs,
+		debounceMs: options.resolveDebounceMs(),
+		resolveDebounceMs: (entry) => entry.debounceMs,
 		buildKey: (msg) => msg.debounceKey ?? buildKey(msg),
 		shouldDebounce,
 		onFlush: (entries, createFlush) => {
@@ -702,11 +696,15 @@ function createWhatsAppInboundMessageDebouncer(options) {
 		},
 		onError: options.onError
 	});
-	const enqueue = async (message) => {
+	const enqueue = async (input) => {
+		const message = {
+			...input,
+			debounceMs: options.resolveDebounceMs()
+		};
 		const key = buildKey(message);
 		if (key) {
 			message.debounceKey = key;
-			if (debounceMs > 0 && shouldDebounce(message)) {
+			if (message.debounceMs > 0 && shouldDebounce(message)) {
 				message.debounceKeyTracked = true;
 				trackKey(key);
 				options.onPendingWorkChanged();
@@ -1184,7 +1182,11 @@ function createWhatsAppMessageDeliveryCoordinator(options) {
 		await maybeMarkInboundAsRead(target);
 	};
 	const messageDebouncer = createWhatsAppInboundMessageDebouncer({
-		debounceMs: options.debounceMs,
+		resolveDebounceMs: () => resolveInboundDebounceMs({
+			cfg: options.loadConfig?.() ?? options.cfg,
+			channel: "whatsapp",
+			overrideMs: options.debounceMs
+		}),
 		onMessage: options.onMessage,
 		shouldDebounce: options.shouldDebounce,
 		markRead: maybeMarkInboundAsRead,
@@ -1340,6 +1342,16 @@ function createWhatsAppMessageDeliveryCoordinator(options) {
 		const preparation = durableId ? preparedInboundByDurableId.get(durableId) : void 0;
 		if (durableId) preparedInboundByDurableId.delete(durableId);
 		if (context.skipRecentOutboundEcho === true) return "completed";
+		if (await maybeResolveWhatsAppApprovalReaction({
+			cfg: options.loadConfig?.() ?? options.cfg,
+			accountId: options.accountId,
+			msg,
+			selfJid: self.jid,
+			selfLid: self.lid,
+			resolveInboundJid,
+			resolveReactionTargetJids,
+			logVerboseMessage: (message) => logWhatsAppVerbose$1(options.verbose, message)
+		})) return "completed";
 		const prepared = await preparation;
 		if (prepared === null) return "completed";
 		const inbound = prepared ?? await normalizeInboundMessage(msg);
@@ -1392,16 +1404,22 @@ function createWhatsAppMessageDeliveryCoordinator(options) {
 		for (const msg of upsert.messages ?? []) {
 			rememberBaileysMessage(msg.key?.remoteJid, msg.key?.id, msg.message);
 			const receiveOrder = nextReceiveOrder++;
-			if (await maybeResolveWhatsAppApprovalReaction({
-				cfg: options.loadConfig?.() ?? options.cfg,
-				accountId: options.accountId,
-				msg,
-				selfJid: self.jid,
-				selfLid: self.lid,
-				resolveInboundJid,
-				resolveReactionTargetJids,
-				logVerboseMessage: (message) => logWhatsAppVerbose$1(options.verbose, message)
-			})) continue;
+			let approvalReactionResolved = false;
+			try {
+				approvalReactionResolved = await maybeResolveWhatsAppApprovalReaction({
+					cfg: options.loadConfig?.() ?? options.cfg,
+					accountId: options.accountId,
+					msg,
+					selfJid: self.jid,
+					selfLid: self.lid,
+					resolveInboundJid,
+					resolveReactionTargetJids,
+					logVerboseMessage: (message) => logWhatsAppVerbose$1(options.verbose, message)
+				});
+			} catch (error) {
+				inboundLogger.warn({ error: formatError(error) }, "whatsapp approval reaction resolution failed; admitting reaction for durable replay");
+			}
+			if (approvalReactionResolved) continue;
 			const receivedAt = Date.now();
 			const skipStaleAppend = shouldSkipStaleAppend(msg, upsert.type);
 			const skipRecentOutboundEcho = shouldSkipRecentOutboundEcho(msg);
@@ -2415,7 +2433,11 @@ async function applyGroupGating(params) {
 	const conversationGroupPolicy = inboundPolicy.resolveConversationGroupPolicy(conversationId);
 	if (conversationGroupPolicy.allowlistEnabled && !conversationGroupPolicy.allowed) {
 		const accountId = inboundPolicy.account.accountId;
-		if (shouldWarnForGroupDrop(`${accountId}:${conversationId}`)) {
+		if (shouldWarnForGroupDrop(JSON.stringify([
+			accountId,
+			conversationId,
+			"group registry"
+		]))) {
 			const groupsPath = resolveWhatsAppGroupsConfigPath({
 				cfg: params.cfg,
 				accountId
@@ -2504,6 +2526,22 @@ async function applyGroupGating(params) {
 				needsMentionText: true
 			};
 		}
+		const accountId = inboundPolicy.account.accountId;
+		if (shouldWarnForGroupDrop(JSON.stringify([
+			accountId,
+			conversationId,
+			"no mention"
+		]))) {
+			const groupsPath = resolveWhatsAppGroupsConfigPath({
+				cfg: params.cfg,
+				accountId
+			});
+			params.replyLogger.warn({
+				conversationId,
+				accountId,
+				groupsPath
+			}, `WhatsApp group ${conversationId}: skipping messages without a mention. Mention patterns can be derived from the agent identity name. Use /activation always for this session, or set ${groupsPath}[${JSON.stringify(conversationId)}].requireMention=false for the default. Preserve existing groups entries; when adding the first groups map, include "*": {} to keep other chats admitted.`);
+		}
 		const pendingHistoryBody = params.mentionText === void 0 ? void 0 : formatAudioTranscriptForAgent(params.mentionText);
 		return skipGroupMessageAndStoreHistory(params, `Group message stored for context (no mention detected) in ${conversationId}: ${mentionMsg.payload.body}`, pendingHistoryBody);
 	}
@@ -2552,21 +2590,15 @@ function resolvePeerId(msg) {
 }
 //#endregion
 //#region extensions/whatsapp/src/system-prompt.ts
+function resolveWhatsAppSystemPrompt(prompts, targetId) {
+	if (!targetId) return;
+	return (prompts?.[targetId]?.systemPrompt ?? prompts?.["*"]?.systemPrompt)?.trim() || void 0;
+}
 function resolveWhatsAppGroupSystemPrompt(params) {
-	if (!params.groupId) return;
-	const groups = params.accountConfig?.groups;
-	const specific = groups?.[params.groupId];
-	if (specific != null && specific.systemPrompt != null) return specific.systemPrompt.trim() || void 0;
-	const wildcard = groups?.["*"]?.systemPrompt;
-	return wildcard != null ? wildcard.trim() || void 0 : void 0;
+	return resolveWhatsAppSystemPrompt(params.accountConfig?.groups, params.groupId);
 }
 function resolveWhatsAppDirectSystemPrompt(params) {
-	if (!params.peerId) return;
-	const direct = params.accountConfig?.direct;
-	const specific = direct?.[params.peerId];
-	if (specific != null && specific.systemPrompt != null) return specific.systemPrompt.trim() || void 0;
-	const wildcard = direct?.["*"]?.systemPrompt;
-	return wildcard != null ? wildcard.trim() || void 0 : void 0;
+	return resolveWhatsAppSystemPrompt(params.accountConfig?.direct, params.peerId);
 }
 //#endregion
 //#region extensions/whatsapp/src/outbound-retry.ts
@@ -3071,7 +3103,7 @@ function resolveWhatsAppDurableReplyToId(params) {
 }
 function resolveWhatsAppDeliverablePayload(payload, info) {
 	if (payload.isReasoning === true || payload.isCompactionNotice === true) return null;
-	if (payload.isError === true) return null;
+	if (payload.isError === true && info.kind !== "final") return null;
 	if (info.kind === "tool") {
 		if (!resolveSendableOutboundReplyParts(payload).hasMedia) return null;
 		return {
@@ -4348,10 +4380,6 @@ async function monitorWebChannel(verbose, listenerFactory = attachWebInboxToSock
 		while (true) {
 			if (stopRequested()) break;
 			const connectionId = newConnectionId();
-			const inboundDebounceMs = resolveInboundDebounceMs({
-				cfg,
-				channel: "whatsapp"
-			});
 			const shouldDebounce = (msg) => shouldDebounceTextInbound({
 				text: msg.payload.commandBody ?? msg.payload.body,
 				cfg,
@@ -4396,7 +4424,7 @@ async function monitorWebChannel(verbose, listenerFactory = attachWebInboxToSock
 							selfChatMode: account.selfChatMode,
 							sendReadReceipts: account.sendReadReceipts,
 							socketTiming,
-							debounceMs: inboundDebounceMs,
+							debounceMs: tuning.debounceMs,
 							appendReplyWindow: connectionLocal.openedAfterRecentInbound ? {
 								afterMs: connectionLocal.startedAt - reconnectCatchUpWindowMs,
 								untilMs: connectionLocal.startedAt + reconnectCatchUpWindowMs,

package/dist/runtime-api.js

@@ -10,7 +10,7 @@ import { n as resolveWebAccountId, t as getActiveWebListener } from "./active-li
 import { a as waitForWaConnection, i as newConnectionId, r as createWaSocket } from "./socket-close-B3X9uerq.js";
 import { n as getStatusCode, t as formatError } from "./session-errors-JuazczrA.js";
 import { p as extractText, s as extractContactContext, u as extractLocationData } from "./send-api-C_Zn4Ij-.js";
-import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-DyPdOPRx.js";
+import { a as loadWebMediaRaw, c as monitorWebInbox, i as loadWebMedia, l as resetWebInboundDedupe, n as LocalMediaAccessError, o as optimizeImageToJpeg, r as getDefaultLocalRoots, s as optimizeImageToPng, t as monitorWebChannel } from "./monitor-DNGfO3k0.js";
 import { t as loginWeb } from "./login-6j2iP9nR.js";
 import { HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, SILENT_REPLY_TOKEN, stripHeartbeatToken } from "openclaw/plugin-sdk/reply-runtime";
 export { DEFAULT_WEB_MEDIA_BYTES, HEARTBEAT_PROMPT, HEARTBEAT_TOKEN, LocalMediaAccessError, SILENT_REPLY_TOKEN, WA_WEB_AUTH_DIR, WHATSAPP_AUTH_UNSTABLE_CODE, WhatsAppAuthUnstableError, createWaSocket, createWhatsAppLoginTool, extractContactContext, extractLocationData, extractText, formatError, formatWhatsAppWebAuthStatusState, getActiveWebListener, getDefaultLocalRoots, getStatusCode, getWebAuthAgeMs, handleWhatsAppAction, hasWebCredsSync, loadWebMedia, loadWebMediaRaw, logWebSelfId, loginWeb, logoutWeb, monitorWebChannel, monitorWebInbox, newConnectionId, optimizeImageToJpeg, optimizeImageToPng, pickWebChannel, readCredsJsonRaw, readWebAuthExistsBestEffort, readWebAuthExistsForDecision, readWebAuthSnapshot, readWebAuthSnapshotBestEffort, readWebAuthState, readWebSelfId, readWebSelfIdentity, readWebSelfIdentityForDecision, resetWebInboundDedupe, resolveDefaultWebAuthDir, resolveWebAccountId, resolveWebCredsBackupPath, resolveWebCredsPath, restoreCredsFromBackupIfNeeded, sendMessageWhatsApp, sendPollWhatsApp, sendReactionWhatsApp, sendTypingWhatsApp, setWhatsAppRuntime, startWebLoginWithQr, stripHeartbeatToken, waitForCredsSaveQueue, waitForCredsSaveQueueWithTimeout, waitForWaConnection, waitForWebLogin, webAuthExists, whatsAppActionRuntime, writeCredsJsonAtomically };

package/dist/{setup-finalize-C5QtbrWV.js → setup-finalize-Bp-4QnVw.js}

@@ -2,7 +2,7 @@ import { a as resolveWhatsAppAccount, o as resolveWhatsAppAuthDir } from "./acco
 import { r as resolveDefaultWhatsAppAccountId } from "./account-ids-CB5SOWjc.js";
 import { r as hasWebCredsSync } from "./creds-files-Drg3usj1.js";
 import { a as normalizeWhatsAppAllowFromEntries, o as normalizeWhatsAppAllowFromEntry } from "./normalize-target-CugRyONv.js";
-import { r as whatsappSetupAdapter } from "./shared-BzKxoeKY.js";
+import { r as whatsappSetupAdapter } from "./shared-D6cUWXiq.js";
 import { formatCliCommand, formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 import { DEFAULT_ACCOUNT_ID, createSetupTranslator, splitSetupEntries } from "openclaw/plugin-sdk/setup";
 //#region extensions/whatsapp/src/setup-finalize.ts

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as whatsappSetupPlugin } from "./channel.setup-D1-jE0aE.js";
+import { t as whatsappSetupPlugin } from "./channel.setup-DhuZ51Kg.js";
 export { whatsappSetupPlugin };

package/dist/{setup-surface-WsAzq337.js → setup-surface-B5UnuLT_.js}

@@ -36,7 +36,7 @@ const whatsappSetupWizard = {
 	},
 	resolveShouldPromptAccountIds: ({ shouldPromptAccountIds }) => shouldPromptAccountIds,
 	credentials: [],
-	finalize: async (params) => await (await import("./setup-finalize-C5QtbrWV.js")).finalizeWhatsAppSetup(params),
+	finalize: async (params) => await (await import("./setup-finalize-Bp-4QnVw.js")).finalizeWhatsAppSetup(params),
 	disable: (cfg) => setSetupChannelEnabled(cfg, channel, false),
 	onAccountRecorded: (accountId, options) => {
 		options?.onAccountId?.(channel, accountId);

package/dist/{shared-BzKxoeKY.js → shared-D6cUWXiq.js}

@@ -27,7 +27,7 @@ async function readWhatsAppAccountLinkState(authDir) {
 }
 const loadWhatsAppChannelRuntime = createLazyRuntimeModule(async () => {
 	await loadWhatsAppAuthStore();
-	return await import("./channel.runtime-B90_wffD.js");
+	return await import("./channel.runtime-qi6Zbi9p.js");
 });
 //#endregion
 //#region extensions/whatsapp/src/config-accessors.ts
@@ -116,7 +116,7 @@ async function applyWhatsAppSecurityConfigFixes(params) {
 //#region extensions/whatsapp/src/shared.ts
 const WHATSAPP_CHANNEL = "whatsapp";
 async function loadWhatsAppSetupSurface() {
-	return await import("./setup-surface-WsAzq337.js");
+	return await import("./setup-surface-B5UnuLT_.js");
 }
 const whatsappSetupWizardProxy = createWhatsAppSetupWizardProxy(async () => (await loadWhatsAppSetupSurface()).whatsappSetupWizard);
 const whatsappConfigAdapter = createScopedChannelConfigAdapter({
@@ -252,7 +252,11 @@ function createWhatsAppPluginBase(params) {
 				"channels.whatsapp.accounts",
 				"channels.whatsapp.selfChatMode"
 			],
-			noopPrefixes: ["channels.whatsapp"]
+			noopPrefixes: [
+				"channels.whatsapp",
+				"messages.inbound",
+				"messages.ackReactionScope"
+			]
 		},
 		gatewayMethodDescriptors: [{ name: "web.login.start" }, { name: "web.login.wait" }],
 		configSchema: WhatsAppChannelConfigSchema,

package/node_modules/typebox/build/format/json_pointer.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a json pointer
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export declare function IsJsonPointer(value: string): boolean;

package/node_modules/typebox/build/format/json_pointer.mjs

@@ -1,8 +1,8 @@
 const JsonPointer = /^(?:\/(?:[^~/]|~0|~1)*)*$/;
 /**
  * Returns true if the value is a json pointer
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export function IsJsonPointer(value) {
     return JsonPointer.test(value);

package/node_modules/typebox/build/format/json_pointer_uri_fragment.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a json pointer uri fragment
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export declare function IsJsonPointerUriFragment(value: string): boolean;

package/node_modules/typebox/build/format/json_pointer_uri_fragment.mjs

@@ -1,8 +1,8 @@
 const JsonPointerUriFragment = /^#(?:\/(?:[a-z0-9_\-.!$&'()*+,;:=@]|%[0-9a-f]{2}|~0|~1)*)*$/i;
 /**
  * Returns true if the value is a json pointer uri fragment
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export function IsJsonPointerUriFragment(value) {
     return JsonPointerUriFragment.test(value);

package/node_modules/typebox/build/format/relative_json_pointer.d.mts

@@ -1,6 +1,6 @@
 /**
  * Returns true if the value is a relative json pointer
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export declare function IsRelativeJsonPointer(value: string): boolean;

package/node_modules/typebox/build/format/relative_json_pointer.mjs

@@ -1,8 +1,8 @@
 const RelativeJsonPointer = /^(?:0|[1-9][0-9]*)(?:#|(?:\/(?:[^~/]|~0|~1)*)*)$/;
 /**
  * Returns true if the value is a relative json pointer
- * @specification
- * @source ajv-formats
+ * @specification https://datatracker.ietf.org/doc/html/rfc6901
+ * @source https://github.com/ajv-validator/ajv-formats
  */
 export function IsRelativeJsonPointer(value) {
     return RelativeJsonPointer.test(value);

package/node_modules/typebox/build/system/memory/assign.mjs

@@ -1,11 +1,12 @@
 // deno-lint-ignore-file ban-types no-explicit-any
 // deno-fmt-ignore-file
 import { Metrics } from './metrics.mjs';
+import { Freeze } from './freeze.mjs';
 /**
  * Performs an Object assign using the Left and Right object types. We track this operation as it
  * creates a new GC handle per assignment.
  */
 export function Assign(left, right) {
     Metrics.assign += 1;
-    return { ...left, ...right };
+    return Freeze({ ...left, ...right });
 }

package/node_modules/typebox/build/system/memory/create.mjs

@@ -1,7 +1,7 @@
 // deno-lint-ignore-file no-explicit-any
-// deno-fmt-ignore-file
 import { Settings } from '../settings/index.mjs';
 import { Metrics } from './metrics.mjs';
+import { Freeze } from './freeze.mjs';
 function MergeHidden(left, right) {
     for (const key of Object.keys(right)) {
         Object.defineProperty(left, key, {
@@ -23,8 +23,7 @@ function Merge(left, right) {
  */
 export function Create(hidden, enumerable, options = {}) {
     Metrics.create += 1;
-    const settings = Settings.Get();
     const withOptions = Merge(enumerable, options);
-    const withHidden = settings.enumerableKind ? Merge(withOptions, hidden) : MergeHidden(withOptions, hidden);
-    return settings.immutableTypes ? Object.freeze(withHidden) : withHidden;
+    const withHidden = Settings.Get().enumerableKind ? Merge(withOptions, hidden) : MergeHidden(withOptions, hidden);
+    return Freeze(withHidden);
 }

package/node_modules/typebox/build/system/memory/discard.mjs

@@ -1,7 +1,7 @@
 // deno-lint-ignore-file no-explicit-any
-// deno-fmt-ignore-file
 import { Guard } from '../../guard/index.mjs';
 import { Metrics } from './metrics.mjs';
+import { Freeze } from './freeze.mjs';
 import { Clone } from './clone.mjs';
 /** Discards multiple property keys from the given object value */
 export function Discard(value, propertyKeys) {
@@ -14,5 +14,5 @@ export function Discard(value, propertyKeys) {
         descriptor.value = Clone(descriptor.value);
         Object.defineProperty(result, key, descriptor);
     }
-    return result;
+    return Freeze(result);
 }

package/node_modules/typebox/build/system/memory/freeze.d.mts

@@ -0,0 +1,4 @@
+type ObjectLike = Record<PropertyKey, any>;
+/** Conditionally freezes the value if `immutableTypes` is true, otherwise no action. */
+export declare function Freeze(value: ObjectLike): ObjectLike;
+export {};

package/node_modules/typebox/build/system/memory/freeze.mjs

@@ -0,0 +1,6 @@
+// deno-lint-ignore-file no-explicit-any
+import { Settings } from '../settings/index.mjs';
+/** Conditionally freezes the value if `immutableTypes` is true, otherwise no action. */
+export function Freeze(value) {
+    return Settings.Get().immutableTypes ? Object.freeze(value) : value;
+}

package/node_modules/typebox/build/system/memory/update.mjs

@@ -1,6 +1,7 @@
-// deno-fmt-ignore-file
+// deno-lint-ignore-file no-explicit-any
 import { Settings } from '../settings/index.mjs';
 import { Metrics } from './metrics.mjs';
+import { Freeze } from './freeze.mjs';
 import { Clone } from './clone.mjs';
 /**
  * Updates a value with new properties while preserving property enumerability. Use this function to modify
@@ -28,5 +29,5 @@ export function Update(current, hidden, enumerable) {
             value: enumerable[key]
         });
     }
-    return result;
+    return Freeze(result);
 }

package/node_modules/typebox/package.json

@@ -1,7 +1,7 @@
 {
   "name": "typebox",
   "description": "Json Schema Type Builder with Static Type Resolution for TypeScript",
-  "version": "1.3.17",
+  "version": "1.3.18",
   "keywords": [
     "typescript",
     "jsonschema"

package/openclaw.plugin.json

@@ -2,11 +2,14 @@
   "id": "whatsapp",
   "doctorContract": {
     "configRepair": true,
-    "stateMigrations": true
+    "stateMigrations": [
+      {
+        "id": "whatsapp-legacy-state"
+      }
+    ]
   },
   "name": "WhatsApp",
   "description": "OpenClaw WhatsApp channel plugin for WhatsApp Web chats.",
-  "icon": "https://cdn.simpleicons.org/whatsapp",
   "skills": [
     "./skills"
   ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/whatsapp",
-  "version": "2026.9.1",
+  "version": "2026.9.3",
   "description": "OpenClaw WhatsApp channel plugin for WhatsApp Web chats.",
   "repository": {
     "type": "git",
@@ -10,10 +10,10 @@
   "dependencies": {
     "audio-decode": "2.2.3",
     "baileys": "7.0.0-rc14",
-    "typebox": "1.3.17"
+    "typebox": "1.3.18"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.9.1"
+    "openclaw": ">=2026.9.3"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -65,11 +65,11 @@
       "minHostVersion": ">=2026.4.25"
     },
     "compat": {
-      "pluginApi": ">=2026.9.1"
+      "pluginApi": ">=2026.9.3"
     },
     "build": {
       "bundledDist": false,
-      "openclawVersion": "2026.9.1"
+      "openclawVersion": "2026.9.3"
     },
     "release": {
       "publishToClawHub": true,