@rubytech/create-maxy 1.0.459 → 1.0.461

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy",
-  "version": "1.0.459",
+  "version": "1.0.461",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy": "./dist/index.js"

package/payload/maxy/server.js

@@ -23641,7 +23641,8 @@ var WhatsAppAccountSchema = external_exports.object({
   dmPolicy: DmPolicySchema.optional().describe("Who can message your public agent via WhatsApp DM. 'Open' lets anyone message. 'Allowlist' restricts to approved phone numbers. 'Disabled' blocks all public messages."),
   groupPolicy: GroupPolicySchema.optional().describe("Whether your agent responds in WhatsApp group chats. 'Open' enables group responses (subject to per-group activation). 'Allowlist' restricts to approved senders. 'Disabled' ignores all group messages."),
   selfChatMode: external_exports.boolean().optional().describe("Enable if the bot uses the owner's personal WhatsApp number (same phone for admin and bot). Changes how self-messages are routed."),
-  allowFrom: external_exports.array(external_exports.string()).optional().describe("Phone numbers (E.164 format, e.g. +44...) allowed to message via DM when policy is 'allowlist'. Add '*' to allow everyone."),
+  adminPhones: external_exports.array(external_exports.string()).optional().describe("Phone numbers (E.164) that route to the admin agent. Managed via add-admin-phone / remove-admin-phone."),
+  allowFrom: external_exports.array(external_exports.string()).optional().describe("Phone numbers allowed to message the public agent when DM policy is 'allowlist'. Add '*' for open access. Does not affect admin routing \u2014 use adminPhones for that."),
   groupAllowFrom: external_exports.array(external_exports.string()).optional().describe("Phone numbers allowed to trigger the agent in groups when group policy is 'allowlist'."),
   sendReadReceipts: external_exports.boolean().optional().default(true).describe("Whether to send read receipts (blue ticks) when messages are received. Disabling may feel less responsive but preserves privacy."),
   groups: external_exports.record(
@@ -23671,7 +23672,8 @@ var WhatsAppConfigSchema = external_exports.object({
   accounts: external_exports.record(external_exports.string(), WhatsAppAccountSchema.optional()).optional().describe("Per-account config keyed by account ID."),
   dmPolicy: DmPolicySchema.optional().default("disabled").describe("Who can message your public agent via WhatsApp DM. 'Open' lets anyone message. 'Allowlist' restricts to approved phone numbers. 'Disabled' blocks all public messages."),
   groupPolicy: GroupPolicySchema.optional().default("disabled").describe("Whether your agent responds in WhatsApp group chats. 'Open' enables group responses (subject to per-group activation). 'Allowlist' restricts to approved senders. 'Disabled' ignores all group messages."),
-  allowFrom: external_exports.array(external_exports.string()).optional().describe("Phone numbers (E.164 format, e.g. +44...) allowed to message via DM when policy is 'allowlist'. Add '*' to allow everyone."),
+  adminPhones: external_exports.array(external_exports.string()).optional().describe("Phone numbers (E.164) that route to the admin agent. Managed via add-admin-phone / remove-admin-phone."),
+  allowFrom: external_exports.array(external_exports.string()).optional().describe("Phone numbers allowed to message the public agent when DM policy is 'allowlist'. Add '*' for open access. Does not affect admin routing \u2014 use adminPhones for that."),
   groupAllowFrom: external_exports.array(external_exports.string()).optional().describe("Phone numbers allowed to trigger the agent in groups when group policy is 'allowlist'."),
   sendReadReceipts: external_exports.boolean().optional().default(true).describe("Whether to send read receipts (blue ticks) when messages are received. Disabling may feel less responsive but preserves privacy."),
   mediaMaxMb: external_exports.number().int().positive().optional().default(50).describe("Maximum file size in MB for media the agent will download and process."),
@@ -23689,6 +23691,282 @@ var WhatsAppConfigSchema = external_exports.object({
   });
 });
 
+// app/lib/whatsapp/config-persist.ts
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, existsSync as existsSync10 } from "fs";
+import { resolve as resolve9, join as join5 } from "path";
+var TAG4 = "[whatsapp:config]";
+function configPath(accountDir) {
+  return resolve9(accountDir, "account.json");
+}
+function readConfig(accountDir) {
+  const path2 = configPath(accountDir);
+  if (!existsSync10(path2)) throw new Error(`account.json not found at ${path2}`);
+  return JSON.parse(readFileSync10(path2, "utf-8"));
+}
+function writeConfig(accountDir, config2) {
+  const path2 = configPath(accountDir);
+  writeFileSync6(path2, JSON.stringify(config2, null, 2) + "\n", "utf-8");
+}
+function reloadManagerConfig(accountDir) {
+  try {
+    const config2 = readConfig(accountDir);
+    reloadConfig(config2);
+    console.error(`${TAG4} reloaded manager config`);
+  } catch (err) {
+    console.error(`${TAG4} manager config reload failed: ${String(err)}`);
+  }
+}
+var E164_PATTERN = /^\+\d{7,15}$/;
+function migrateAdminPhones(wa) {
+  if (wa.adminPhones !== void 0) return 0;
+  if (!Array.isArray(wa.allowFrom)) return 0;
+  const allowFrom = wa.allowFrom;
+  const phones = [];
+  const remaining = [];
+  for (const entry of allowFrom) {
+    if (E164_PATTERN.test(entry)) {
+      phones.push(entry);
+    } else {
+      remaining.push(entry);
+    }
+  }
+  if (phones.length === 0) return 0;
+  wa.adminPhones = phones;
+  wa.allowFrom = remaining;
+  console.error(`${TAG4} migrated ${phones.length} phone(s) from allowFrom to adminPhones`);
+  return phones.length;
+}
+function persistAfterPairing(accountDir, accountId, selfPhone) {
+  try {
+    const config2 = readConfig(accountDir);
+    if (!config2.whatsapp || typeof config2.whatsapp !== "object") {
+      config2.whatsapp = {};
+    }
+    const wa = config2.whatsapp;
+    if (!wa.accounts || typeof wa.accounts !== "object") {
+      wa.accounts = {};
+    }
+    const accounts = wa.accounts;
+    if (!accounts[accountId] || typeof accounts[accountId] !== "object") {
+      accounts[accountId] = { name: "Main" };
+    }
+    if (selfPhone) {
+      const normalized = selfPhone.startsWith("+") ? selfPhone : `+${selfPhone}`;
+      if (!Array.isArray(wa.adminPhones)) {
+        wa.adminPhones = [];
+      }
+      const adminPhones = wa.adminPhones;
+      if (!adminPhones.includes(normalized)) {
+        adminPhones.push(normalized);
+        console.error(`${TAG4} added selfPhone=${normalized} to adminPhones`);
+      }
+    } else {
+      console.error(`${TAG4} skipping adminPhones \u2014 selfPhone is null account=${accountId}`);
+    }
+    const parsed = WhatsAppConfigSchema.safeParse(wa);
+    if (!parsed.success) {
+      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+      console.error(`${TAG4} validation failed after pairing: ${msg}`);
+      return { ok: false, error: `Validation failed: ${msg}` };
+    }
+    config2.whatsapp = parsed.data;
+    writeConfig(accountDir, config2);
+    console.error(`${TAG4} persisted after pairing account=${accountId} phone=${selfPhone ?? "null"}`);
+    reloadManagerConfig(accountDir);
+    return { ok: true };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`${TAG4} persist failed account=${accountId}: ${msg}`);
+    return { ok: false, error: msg };
+  }
+}
+function addAdminPhone(accountDir, phone) {
+  const normalized = phone.trim();
+  if (!E164_PATTERN.test(normalized)) {
+    return { ok: false, error: `Invalid phone format "${normalized}". Expected E.164 (e.g. +441234567890).` };
+  }
+  try {
+    const config2 = readConfig(accountDir);
+    if (!config2.whatsapp || typeof config2.whatsapp !== "object") {
+      config2.whatsapp = {};
+    }
+    const wa = config2.whatsapp;
+    migrateAdminPhones(wa);
+    if (!Array.isArray(wa.adminPhones)) {
+      wa.adminPhones = [];
+    }
+    const adminPhones = wa.adminPhones;
+    if (adminPhones.includes(normalized)) {
+      return { ok: true, message: `Phone ${normalized} is already in the admin list.` };
+    }
+    adminPhones.push(normalized);
+    const parsed = WhatsAppConfigSchema.safeParse(wa);
+    if (!parsed.success) {
+      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+      return { ok: false, error: `Validation failed: ${msg}` };
+    }
+    config2.whatsapp = parsed.data;
+    writeConfig(accountDir, config2);
+    console.error(`${TAG4} added admin phone=${normalized}`);
+    reloadManagerConfig(accountDir);
+    return { ok: true, message: `Added ${normalized} as admin phone. Messages from this number will route to the admin agent.` };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`${TAG4} addAdminPhone failed: ${msg}`);
+    return { ok: false, error: msg };
+  }
+}
+function removeAdminPhone(accountDir, phone) {
+  const normalized = phone.trim();
+  try {
+    const config2 = readConfig(accountDir);
+    if (!config2.whatsapp || typeof config2.whatsapp !== "object") {
+      return { ok: true, message: `No WhatsApp config exists \u2014 nothing to remove.` };
+    }
+    const wa = config2.whatsapp;
+    migrateAdminPhones(wa);
+    if (!Array.isArray(wa.adminPhones)) {
+      return { ok: true, message: `No admin phones configured \u2014 nothing to remove.` };
+    }
+    const adminPhones = wa.adminPhones;
+    const idx = adminPhones.indexOf(normalized);
+    if (idx === -1) {
+      return { ok: true, message: `Phone ${normalized} is not in the admin list.` };
+    }
+    adminPhones.splice(idx, 1);
+    const parsed = WhatsAppConfigSchema.safeParse(wa);
+    if (!parsed.success) {
+      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+      return { ok: false, error: `Validation failed: ${msg}` };
+    }
+    config2.whatsapp = parsed.data;
+    writeConfig(accountDir, config2);
+    console.error(`${TAG4} removed admin phone=${normalized}`);
+    reloadManagerConfig(accountDir);
+    return { ok: true, message: `Removed ${normalized} from admin phones. Messages from this number will now route to the public agent.` };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`${TAG4} removeAdminPhone failed: ${msg}`);
+    return { ok: false, error: msg };
+  }
+}
+function readAdminPhones(accountDir) {
+  try {
+    const config2 = readConfig(accountDir);
+    const wa = config2.whatsapp;
+    if (!wa) return [];
+    const migrated = migrateAdminPhones(wa);
+    if (migrated > 0) {
+      const parsed = WhatsAppConfigSchema.safeParse(wa);
+      if (parsed.success) {
+        config2.whatsapp = parsed.data;
+        writeConfig(accountDir, config2);
+        reloadManagerConfig(accountDir);
+      }
+    }
+    if (!Array.isArray(wa.adminPhones)) return [];
+    return wa.adminPhones.filter((p) => typeof p === "string");
+  } catch {
+    return [];
+  }
+}
+function setPublicAgent(accountDir, slug) {
+  const trimmed = slug.trim();
+  if (!trimmed) {
+    return { ok: false, error: "Agent slug cannot be empty." };
+  }
+  const agentConfigPath = join5(accountDir, "agents", trimmed, "config.json");
+  if (!existsSync10(agentConfigPath)) {
+    return { ok: false, error: `Agent "${trimmed}" not found \u2014 no config.json at ${agentConfigPath}. Check the agent slug and try again.` };
+  }
+  try {
+    const config2 = readConfig(accountDir);
+    if (!config2.whatsapp || typeof config2.whatsapp !== "object") {
+      config2.whatsapp = {};
+    }
+    const wa = config2.whatsapp;
+    wa.publicAgent = trimmed;
+    const parsed = WhatsAppConfigSchema.safeParse(wa);
+    if (!parsed.success) {
+      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+      return { ok: false, error: `Validation failed: ${msg}` };
+    }
+    config2.whatsapp = parsed.data;
+    writeConfig(accountDir, config2);
+    console.error(`${TAG4} publicAgent set to ${trimmed}`);
+    reloadManagerConfig(accountDir);
+    return { ok: true, message: `Public agent set to "${trimmed}". WhatsApp messages from non-admin phones will be handled by this agent.` };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`${TAG4} setPublicAgent failed: ${msg}`);
+    return { ok: false, error: msg };
+  }
+}
+function getPublicAgent(accountDir) {
+  try {
+    const config2 = readConfig(accountDir);
+    const wa = config2.whatsapp;
+    if (!wa) return null;
+    const slug = wa.publicAgent;
+    if (typeof slug === "string" && slug.trim()) {
+      return slug.trim();
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function updateConfig(accountDir, fields) {
+  const fieldNames = Object.keys(fields);
+  if (fieldNames.length === 0) {
+    return { ok: false, error: "No fields provided to update." };
+  }
+  try {
+    const config2 = readConfig(accountDir);
+    if (!config2.whatsapp || typeof config2.whatsapp !== "object") {
+      config2.whatsapp = {};
+    }
+    const wa = config2.whatsapp;
+    migrateAdminPhones(wa);
+    for (const [key, value] of Object.entries(fields)) {
+      wa[key] = value;
+    }
+    const parsed = WhatsAppConfigSchema.safeParse(wa);
+    if (!parsed.success) {
+      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+      console.error(`${TAG4} update validation failed: ${msg}`);
+      return { ok: false, error: `Validation failed: ${msg}` };
+    }
+    config2.whatsapp = parsed.data;
+    writeConfig(accountDir, config2);
+    console.error(`${TAG4} updated fields=[${fieldNames.join(",")}]`);
+    reloadManagerConfig(accountDir);
+    return { ok: true, message: `Updated WhatsApp config: ${fieldNames.join(", ")}.` };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`${TAG4} updateConfig failed: ${msg}`);
+    return { ok: false, error: msg };
+  }
+}
+function getConfig(accountDir) {
+  try {
+    const config2 = readConfig(accountDir);
+    const wa = config2.whatsapp;
+    if (!wa) return null;
+    const migrated = migrateAdminPhones(wa);
+    const parsed = WhatsAppConfigSchema.safeParse(wa);
+    if (!parsed.success) return wa;
+    if (migrated > 0) {
+      config2.whatsapp = parsed.data;
+      writeConfig(accountDir, config2);
+      reloadManagerConfig(accountDir);
+    }
+    return parsed.data;
+  } catch {
+    return null;
+  }
+}
+
 // app/lib/whatsapp/normalize.ts
 var WHATSAPP_USER_JID_RE = /^(\d+)(?::\d+)?@s\.whatsapp\.net$/i;
 var WHATSAPP_LID_RE = /^(\d+)@lid$/i;
@@ -23852,18 +24130,16 @@ function resolveAccountConfig(config2, accountConfig) {
   return {
     dmPolicy: accountConfig?.dmPolicy ?? config2.dmPolicy ?? "disabled",
     groupPolicy: accountConfig?.groupPolicy ?? config2.groupPolicy ?? "disabled",
+    adminPhones: accountConfig?.adminPhones ?? config2.adminPhones ?? [],
     allowFrom: accountConfig?.allowFrom ?? config2.allowFrom ?? [],
     groupAllowFrom: accountConfig?.groupAllowFrom ?? config2.groupAllowFrom ?? [],
     selfChatMode: accountConfig?.selfChatMode ?? false
   };
 }
-function isAdminPhone(phone, allowFrom) {
+function isAdminPhone(phone, adminPhones) {
   const normalized = normalizeE164(phone);
   if (!normalized) return false;
-  return allowFrom.some((entry) => {
-    if (entry === "*") return false;
-    return phonesMatch(entry, normalized);
-  });
+  return adminPhones.some((entry) => phonesMatch(entry, normalized));
 }
 function checkDmAccess(params) {
   const { senderPhone, selfPhone } = params;
@@ -23871,7 +24147,7 @@ function checkDmAccess(params) {
   if (phonesMatch(senderPhone, selfPhone)) {
     return { allowed: true, reason: "self-phone", agentType: "admin" };
   }
-  if (isAdminPhone(senderPhone, cfg.allowFrom)) {
+  if (isAdminPhone(senderPhone, cfg.adminPhones)) {
     return { allowed: true, reason: "admin-binding", agentType: "admin" };
   }
   switch (cfg.dmPolicy) {
@@ -23912,10 +24188,7 @@ function checkGroupAccess(params) {
       return { allowed: true, reason: "group-policy-open", agentType: "public" };
     }
     case "allowlist": {
-      const inList = cfg.groupAllowFrom.some((entry) => phonesMatch(entry, senderPhone)) || cfg.allowFrom.some((entry) => {
-        if (entry === "*") return false;
-        return phonesMatch(entry, senderPhone);
-      });
+      const inList = cfg.groupAllowFrom.some((entry) => phonesMatch(entry, senderPhone)) || cfg.adminPhones.some((entry) => phonesMatch(entry, senderPhone));
       if (!inList) {
         return { allowed: false, reason: "not-in-group-allowlist", agentType: "public" };
       }
@@ -23979,7 +24252,7 @@ function isDuplicateInbound(key) {
 }
 
 // app/lib/whatsapp/outbound/send.ts
-var TAG4 = "[whatsapp:outbound]";
+var TAG5 = "[whatsapp:outbound]";
 async function sendTextMessage(sock, to, text, opts) {
   try {
     const jid = to.includes("@") ? to : toWhatsappJid(to);
@@ -23991,11 +24264,11 @@ async function sendTextMessage(sock, to, text, opts) {
     const messageId = result?.key?.id;
     if (messageId) {
       trackAgentSentMessage(messageId);
-      console.error(`${TAG4} sent text to=${jid} id=${messageId}`);
+      console.error(`${TAG5} sent text to=${jid} id=${messageId}`);
     }
     return { success: true, messageId: messageId ?? void 0 };
   } catch (err) {
-    console.error(`${TAG4} send failed to=${to}: ${String(err)}`);
+    console.error(`${TAG5} send failed to=${to}: ${String(err)}`);
     return { success: false, error: String(err) };
   }
 }
@@ -24015,13 +24288,13 @@ async function sendReadReceipt(sock, chatJid, messageIds, participant) {
 // app/lib/whatsapp/inbound/media.ts
 import { randomUUID as randomUUID6 } from "crypto";
 import { writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 import {
   downloadMediaMessage,
   downloadContentFromMessage,
   normalizeMessageContent as normalizeMessageContent2
 } from "@whiskeysockets/baileys";
-var TAG5 = "[whatsapp:media]";
+var TAG6 = "[whatsapp:media]";
 var MEDIA_DIR = "/tmp/maxy-media";
 function mimeToExt(mimetype) {
   const map2 = {
@@ -24077,47 +24350,47 @@ async function downloadInboundMedia(msg, sock, opts) {
       }
     );
     if (!buffer || buffer.length === 0) {
-      console.error(`${TAG5} primary download returned empty, trying direct fallback`);
+      console.error(`${TAG6} primary download returned empty, trying direct fallback`);
       const downloadable = getDownloadableContent(content);
       if (downloadable) {
         try {
           const stream = await downloadContentFromMessage(downloadable.downloadable, downloadable.mediaType);
           buffer = await streamToBuffer(stream);
         } catch (fallbackErr) {
-          console.error(`${TAG5} direct download fallback failed: ${String(fallbackErr)}`);
+          console.error(`${TAG6} direct download fallback failed: ${String(fallbackErr)}`);
         }
       }
     }
     if (!buffer || buffer.length === 0) {
-      console.error(`${TAG5} download failed: empty buffer for ${mimetype ?? "unknown"}`);
+      console.error(`${TAG6} download failed: empty buffer for ${mimetype ?? "unknown"}`);
       return void 0;
     }
     if (buffer.length > maxBytes) {
       const sizeMB = (buffer.length / (1024 * 1024)).toFixed(1);
       const limitMB = (maxBytes / (1024 * 1024)).toFixed(0);
-      console.error(`${TAG5} media too large type=${mimetype ?? "unknown"} size=${sizeMB}MB limit=${limitMB}MB`);
+      console.error(`${TAG6} media too large type=${mimetype ?? "unknown"} size=${sizeMB}MB limit=${limitMB}MB`);
       return void 0;
     }
     await mkdir2(MEDIA_DIR, { recursive: true });
     const ext = mimeToExt(mimetype ?? "application/octet-stream");
     const filename = `${randomUUID6()}.${ext}`;
-    const filePath = join5(MEDIA_DIR, filename);
+    const filePath = join6(MEDIA_DIR, filename);
     await writeFile2(filePath, buffer);
     const sizeKB = (buffer.length / 1024).toFixed(0);
-    console.error(`${TAG5} media downloaded type=${mimetype ?? "unknown"} size=${sizeKB}KB path=${filePath}`);
+    console.error(`${TAG6} media downloaded type=${mimetype ?? "unknown"} size=${sizeKB}KB path=${filePath}`);
     return {
       path: filePath,
       mimetype: mimetype ?? "application/octet-stream",
       size: buffer.length
     };
   } catch (err) {
-    console.error(`${TAG5} media download failed type=${mimetype ?? "unknown"} error=${String(err)}`);
+    console.error(`${TAG6} media download failed type=${mimetype ?? "unknown"} error=${String(err)}`);
     return void 0;
   }
 }
 
 // app/lib/whatsapp/inbound/debounce.ts
-var TAG6 = "[whatsapp:debounce]";
+var TAG7 = "[whatsapp:debounce]";
 function createInboundDebouncer(opts) {
   const { debounceMs, buildKey, onFlush, onError } = opts;
   const pending = /* @__PURE__ */ new Map();
@@ -24129,7 +24402,7 @@ function createInboundDebouncer(opts) {
     pending.delete(key);
     const batchSize = batch.entries.length;
     try {
-      console.error(`${TAG6} debounce flush key=${key} batchSize=${batchSize}`);
+      console.error(`${TAG7} debounce flush key=${key} batchSize=${batchSize}`);
       const result = onFlush(batch.entries);
       if (result && typeof result.catch === "function") {
         result.catch(onError);
@@ -24187,7 +24460,7 @@ function createInboundDebouncer(opts) {
 }
 
 // app/lib/whatsapp/manager.ts
-var TAG7 = "[whatsapp:manager]";
+var TAG8 = "[whatsapp:manager]";
 var MAX_RECONNECT_ATTEMPTS = 10;
 var connections = /* @__PURE__ */ new Map();
 var configDir = null;
@@ -24196,7 +24469,7 @@ var onInboundMessage = null;
 var initialized = false;
 async function init(opts) {
   if (initialized) {
-    console.error(`${TAG7} already initialized`);
+    console.error(`${TAG8} already initialized`);
     return;
   }
   configDir = opts.configDir;
@@ -24204,20 +24477,20 @@ async function init(opts) {
   loadConfig(opts.accountConfig);
   const accountIds = listCredentialAccountIds(configDir);
   if (accountIds.length === 0) {
-    console.error(`${TAG7} init: no stored WhatsApp credentials found`);
+    console.error(`${TAG8} init: no stored WhatsApp credentials found`);
     initialized = true;
     return;
   }
-  console.error(`${TAG7} init: found ${accountIds.length} credentialed account(s): ${accountIds.join(", ")}`);
+  console.error(`${TAG8} init: found ${accountIds.length} credentialed account(s): ${accountIds.join(", ")}`);
   initialized = true;
   for (const accountId of accountIds) {
     const accountCfg = whatsAppConfig.accounts?.[accountId];
     if (accountCfg?.enabled === false) {
-      console.error(`${TAG7} skipping disabled account=${accountId}`);
+      console.error(`${TAG8} skipping disabled account=${accountId}`);
       continue;
     }
     startConnection(accountId).catch((err) => {
-      console.error(`${TAG7} failed to auto-start account=${accountId}: ${formatError(err)}`);
+      console.error(`${TAG8} failed to auto-start account=${accountId}: ${formatError(err)}`);
     });
   }
 }
@@ -24226,7 +24499,7 @@ async function startConnection(accountId) {
   const authDir = resolveAuthDir(configDir, accountId);
   const hasAuth = await authExists(authDir);
   if (!hasAuth) {
-    console.error(`${TAG7} no credentials for account=${accountId}`);
+    console.error(`${TAG8} no credentials for account=${accountId}`);
     return;
   }
   await stopConnection(accountId);
@@ -24261,11 +24534,11 @@ async function stopConnection(accountId) {
       conn.sock.ev.removeAllListeners("creds.update");
       conn.sock.ws?.close?.();
     } catch (err) {
-      console.warn(`${TAG7} socket cleanup error during stop account=${accountId}: ${String(err)}`);
+      console.warn(`${TAG8} socket cleanup error during stop account=${accountId}: ${String(err)}`);
     }
   }
   connections.delete(accountId);
-  console.error(`${TAG7} stopped account=${accountId}`);
+  console.error(`${TAG8} stopped account=${accountId}`);
 }
 function getStatus() {
   return Array.from(connections.values()).map((conn) => ({
@@ -24304,13 +24577,13 @@ async function registerLoginSocket(accountId, sock, authDir) {
   connections.set(accountId, conn);
   try {
     await sock.sendPresenceUpdate("available");
-    console.error(`${TAG7} presence set to available account=${accountId}`);
+    console.error(`${TAG8} presence set to available account=${accountId}`);
   } catch (err) {
-    console.error(`${TAG7} presence update failed account=${accountId}: ${String(err)}`);
+    console.error(`${TAG8} presence update failed account=${accountId}: ${String(err)}`);
   }
   monitorInbound(conn);
   watchForDisconnect(conn);
-  console.error(`${TAG7} registered login socket for account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
+  console.error(`${TAG8} registered login socket for account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
 }
 function reloadConfig(accountConfig) {
   loadConfig(accountConfig);
@@ -24320,22 +24593,24 @@ async function shutdown() {
   const ids = Array.from(connections.keys());
   await Promise.all(ids.map((id) => stopConnection(id)));
   initialized = false;
-  console.error(`${TAG7} shutdown complete`);
+  console.error(`${TAG8} shutdown complete`);
 }
 function loadConfig(accountConfig) {
   try {
     const raw2 = accountConfig?.whatsapp;
     if (raw2 && typeof raw2 === "object") {
-      const parsed = WhatsAppConfigSchema.safeParse(raw2);
+      const wa = raw2;
+      migrateAdminPhones(wa);
+      const parsed = WhatsAppConfigSchema.safeParse(wa);
       if (parsed.success) {
         whatsAppConfig = parsed.data;
       } else {
-        console.error(`${TAG7} config validation failed: ${parsed.error.message}`);
+        console.error(`${TAG8} config validation failed: ${parsed.error.message}`);
         whatsAppConfig = {};
       }
     }
   } catch (err) {
-    console.error(`${TAG7} config load error: ${String(err)}`);
+    console.error(`${TAG8} config load error: ${String(err)}`);
     whatsAppConfig = {};
   }
 }
@@ -24343,13 +24618,13 @@ async function connectWithReconnect(conn) {
   const maxAttempts = MAX_RECONNECT_ATTEMPTS;
   while (!conn.abortController.signal.aborted) {
     try {
-      console.error(`${TAG7} connecting account=${conn.accountId} attempt=${conn.reconnectAttempts}`);
+      console.error(`${TAG8} connecting account=${conn.accountId} attempt=${conn.reconnectAttempts}`);
       const sock = await createWaSocket({
         authDir: conn.authDir,
         silent: true
       });
       conn.sock = sock;
-      console.error(`${TAG7} socket created account=${conn.accountId} \u2014 waiting for connection`);
+      console.error(`${TAG8} socket created account=${conn.accountId} \u2014 waiting for connection`);
       await waitForConnection(sock);
       const selfId = readSelfId(conn.authDir);
       conn.connected = true;
@@ -24359,12 +24634,12 @@ async function connectWithReconnect(conn) {
       conn.reconnectAttempts = 0;
       conn.lastError = void 0;
       conn.lidMapping = sock.signalRepository?.lidMapping ?? null;
-      console.error(`${TAG7} connected account=${conn.accountId} phone=${selfId.e164 ?? "unknown"}`);
+      console.error(`${TAG8} connected account=${conn.accountId} phone=${selfId.e164 ?? "unknown"}`);
       try {
         await sock.sendPresenceUpdate("available");
-        console.error(`${TAG7} presence set to available account=${conn.accountId}`);
+        console.error(`${TAG8} presence set to available account=${conn.accountId}`);
       } catch (err) {
-        console.error(`${TAG7} presence update failed account=${conn.accountId}: ${String(err)}`);
+        console.error(`${TAG8} presence update failed account=${conn.accountId}: ${String(err)}`);
       }
       if (conn.debouncer) {
         conn.debouncer.destroy();
@@ -24379,19 +24654,19 @@ async function connectWithReconnect(conn) {
       conn.sock = null;
       const classification = classifyDisconnect(err);
       conn.lastError = classification.message;
-      console.error(`${TAG7} disconnect account=${conn.accountId}: ${classification.kind} \u2014 ${classification.message}`);
+      console.error(`${TAG8} disconnect account=${conn.accountId}: ${classification.kind} \u2014 ${classification.message}`);
       if (!classification.shouldRetry) {
-        console.error(`${TAG7} terminal disconnect for account=${conn.accountId}, stopping reconnection`);
+        console.error(`${TAG8} terminal disconnect for account=${conn.accountId}, stopping reconnection`);
         return;
       }
       conn.reconnectAttempts++;
       if (conn.reconnectAttempts > maxAttempts) {
-        console.error(`${TAG7} max retries exceeded for account=${conn.accountId}`);
+        console.error(`${TAG8} max retries exceeded for account=${conn.accountId}`);
         conn.lastError = `Max reconnect attempts (${maxAttempts}) exceeded`;
         return;
       }
       const delay = computeBackoff(conn.reconnectAttempts);
-      console.error(`${TAG7} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${conn.reconnectAttempts}/${maxAttempts})`);
+      console.error(`${TAG8} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${conn.reconnectAttempts}/${maxAttempts})`);
       await new Promise((resolve17) => {
         const timer = setTimeout(resolve17, delay);
         conn.abortController.signal.addEventListener("abort", () => {
@@ -24421,11 +24696,11 @@ function watchForDisconnect(conn) {
   conn.sock.ev.on("connection.update", (update) => {
     if (update.connection === "close") {
       if (connections.get(conn.accountId) !== conn) return;
-      console.error(`${TAG7} socket disconnected for account=${conn.accountId}`);
+      console.error(`${TAG8} socket disconnected for account=${conn.accountId}`);
       conn.connected = false;
       conn.sock = null;
       connectWithReconnect(conn).catch((err) => {
-        console.error(`${TAG7} reconnection failed for account=${conn.accountId}: ${formatError(err)}`);
+        console.error(`${TAG8} reconnection failed for account=${conn.accountId}: ${formatError(err)}`);
       });
     }
   });
@@ -24434,7 +24709,7 @@ function monitorInbound(conn) {
   if (!conn.sock || !onInboundMessage) return;
   const sock = conn.sock;
   const debounceMs = whatsAppConfig.accounts?.[conn.accountId]?.debounceMs ?? whatsAppConfig.debounceMs ?? 0;
-  console.error(`${TAG7} monitorInbound started account=${conn.accountId} debounceMs=${debounceMs}`);
+  console.error(`${TAG8} monitorInbound started account=${conn.accountId} debounceMs=${debounceMs}`);
   conn.debouncer = createInboundDebouncer({
     debounceMs,
     buildKey: (payload) => {
@@ -24447,7 +24722,7 @@ function monitorInbound(conn) {
         onInboundMessage(entries[0]);
         return;
       }
-      console.error(`${TAG7} debounce: combining ${entries.length} messages account=${conn.accountId} from=${entries[0].senderPhone}`);
+      console.error(`${TAG8} debounce: combining ${entries.length} messages account=${conn.accountId} from=${entries[0].senderPhone}`);
       const last = entries[entries.length - 1];
       const mediaEntry = entries.find((e) => e.mediaPath);
       const combinedText = entries.map((e) => e.text).filter(Boolean).join("\n");
@@ -24460,7 +24735,7 @@ function monitorInbound(conn) {
       });
     },
     onError: (err) => {
-      console.error(`${TAG7} debounce flush error account=${conn.accountId}: ${String(err)}`);
+      console.error(`${TAG8} debounce flush error account=${conn.accountId}: ${String(err)}`);
     }
   });
   sock.ev.on("messages.upsert", async (upsert) => {
@@ -24469,7 +24744,7 @@ function monitorInbound(conn) {
       try {
         await handleInboundMessage(conn, msg);
       } catch (err) {
-        console.error(`${TAG7} inbound handler error account=${conn.accountId}: ${String(err)}`);
+        console.error(`${TAG8} inbound handler error account=${conn.accountId}: ${String(err)}`);
       }
     }
   });
@@ -24479,31 +24754,31 @@ async function handleInboundMessage(conn, msg) {
   const remoteJid = msg.key.remoteJid;
   if (!remoteJid) return;
   if (remoteJid === "status@broadcast") {
-    console.error(`${TAG7} drop: status broadcast account=${conn.accountId}`);
+    console.error(`${TAG8} drop: status broadcast account=${conn.accountId}`);
     return;
   }
   if (!msg.message) {
-    console.error(`${TAG7} drop: empty message account=${conn.accountId} from=${remoteJid}`);
+    console.error(`${TAG8} drop: empty message account=${conn.accountId} from=${remoteJid}`);
     return;
   }
   const dedupKey = `${conn.accountId}:${remoteJid}:${msg.key.id}`;
   if (isDuplicateInbound(dedupKey)) {
-    console.error(`${TAG7} drop: duplicate account=${conn.accountId} key=${dedupKey}`);
+    console.error(`${TAG8} drop: duplicate account=${conn.accountId} key=${dedupKey}`);
     return;
   }
   if (msg.key.fromMe) {
     if (msg.key.id && isAgentSentMessage(msg.key.id)) {
-      console.error(`${TAG7} drop: echo suppression account=${conn.accountId} msgId=${msg.key.id}`);
+      console.error(`${TAG8} drop: echo suppression account=${conn.accountId} msgId=${msg.key.id}`);
       return;
     }
     const extracted2 = extractMessage(msg);
     if (!extracted2.text) {
-      console.error(`${TAG7} owner reply skipped \u2014 no text content account=${conn.accountId}`);
+      console.error(`${TAG8} owner reply skipped \u2014 no text content account=${conn.accountId}`);
       return;
     }
     const isGroup2 = isGroupJid(remoteJid);
     const senderPhone2 = conn.selfPhone ?? "owner";
-    console.error(`${TAG7} owner reply mirrored to session from=${senderPhone2} account=${conn.accountId}`);
+    console.error(`${TAG8} owner reply mirrored to session from=${senderPhone2} account=${conn.accountId}`);
     const reply2 = async (text) => {
       const currentSock = conn.sock;
       if (!currentSock) throw new Error("WhatsApp disconnected \u2014 cannot reply");
@@ -24524,7 +24799,7 @@ async function handleInboundMessage(conn, msg) {
   }
   const extracted = extractMessage(msg);
   if (!extracted.text && !extracted.mediaType) {
-    console.error(`${TAG7} drop: no text or media account=${conn.accountId} from=${remoteJid}`);
+    console.error(`${TAG8} drop: no text or media account=${conn.accountId} from=${remoteJid}`);
     return;
   }
   let mediaResult;
@@ -24534,7 +24809,7 @@ async function handleInboundMessage(conn, msg) {
       maxBytes: maxMb * 1024 * 1024
     });
     if (!mediaResult) {
-      console.error(`${TAG7} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
+      console.error(`${TAG8} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
     }
   }
   const isGroup = isGroupJid(remoteJid);
@@ -24562,7 +24837,7 @@ async function handleInboundMessage(conn, msg) {
     });
   }
   console.error(
-    `${TAG7} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (mediaResult ? ` mediaPath=${mediaResult.path}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
+    `${TAG8} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (mediaResult ? ` mediaPath=${mediaResult.path}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
   );
   if (!accessResult.allowed) return;
   const sendReceipts = whatsAppConfig.accounts?.[conn.accountId]?.sendReadReceipts ?? whatsAppConfig.sendReadReceipts ?? true;
@@ -24597,201 +24872,6 @@ async function handleInboundMessage(conn, msg) {
   }
 }
 
-// app/lib/whatsapp/config-persist.ts
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, existsSync as existsSync10 } from "fs";
-import { resolve as resolve9, join as join6 } from "path";
-var TAG8 = "[whatsapp:config]";
-function configPath(accountDir) {
-  return resolve9(accountDir, "account.json");
-}
-function readConfig(accountDir) {
-  const path2 = configPath(accountDir);
-  if (!existsSync10(path2)) throw new Error(`account.json not found at ${path2}`);
-  return JSON.parse(readFileSync10(path2, "utf-8"));
-}
-function writeConfig(accountDir, config2) {
-  const path2 = configPath(accountDir);
-  writeFileSync6(path2, JSON.stringify(config2, null, 2) + "\n", "utf-8");
-}
-function reloadManagerConfig(accountDir) {
-  try {
-    const config2 = readConfig(accountDir);
-    reloadConfig(config2);
-    console.error(`${TAG8} reloaded manager config`);
-  } catch (err) {
-    console.error(`${TAG8} manager config reload failed: ${String(err)}`);
-  }
-}
-var E164_PATTERN = /^\+\d{7,15}$/;
-function persistAfterPairing(accountDir, accountId, selfPhone) {
-  try {
-    const config2 = readConfig(accountDir);
-    if (!config2.whatsapp || typeof config2.whatsapp !== "object") {
-      config2.whatsapp = {};
-    }
-    const wa = config2.whatsapp;
-    if (!wa.accounts || typeof wa.accounts !== "object") {
-      wa.accounts = {};
-    }
-    const accounts = wa.accounts;
-    if (!accounts[accountId] || typeof accounts[accountId] !== "object") {
-      accounts[accountId] = { name: "Main" };
-    }
-    if (selfPhone) {
-      const normalized = selfPhone.startsWith("+") ? selfPhone : `+${selfPhone}`;
-      if (!Array.isArray(wa.allowFrom)) {
-        wa.allowFrom = [];
-      }
-      const allowFrom = wa.allowFrom;
-      if (!allowFrom.includes(normalized)) {
-        allowFrom.push(normalized);
-        console.error(`${TAG8} added selfPhone=${normalized} to allowFrom`);
-      }
-    } else {
-      console.error(`${TAG8} skipping allowFrom \u2014 selfPhone is null account=${accountId}`);
-    }
-    const parsed = WhatsAppConfigSchema.safeParse(wa);
-    if (!parsed.success) {
-      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      console.error(`${TAG8} validation failed after pairing: ${msg}`);
-      return { ok: false, error: `Validation failed: ${msg}` };
-    }
-    config2.whatsapp = parsed.data;
-    writeConfig(accountDir, config2);
-    console.error(`${TAG8} persisted after pairing account=${accountId} phone=${selfPhone ?? "null"}`);
-    reloadManagerConfig(accountDir);
-    return { ok: true };
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG8} persist failed account=${accountId}: ${msg}`);
-    return { ok: false, error: msg };
-  }
-}
-function addAdminPhone(accountDir, phone) {
-  const normalized = phone.trim();
-  if (!E164_PATTERN.test(normalized)) {
-    return { ok: false, error: `Invalid phone format "${normalized}". Expected E.164 (e.g. +441234567890).` };
-  }
-  try {
-    const config2 = readConfig(accountDir);
-    if (!config2.whatsapp || typeof config2.whatsapp !== "object") {
-      config2.whatsapp = {};
-    }
-    const wa = config2.whatsapp;
-    if (!Array.isArray(wa.allowFrom)) {
-      wa.allowFrom = [];
-    }
-    const allowFrom = wa.allowFrom;
-    if (allowFrom.includes(normalized)) {
-      return { ok: true, message: `Phone ${normalized} is already in the admin list.` };
-    }
-    allowFrom.push(normalized);
-    const parsed = WhatsAppConfigSchema.safeParse(wa);
-    if (!parsed.success) {
-      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      return { ok: false, error: `Validation failed: ${msg}` };
-    }
-    config2.whatsapp = parsed.data;
-    writeConfig(accountDir, config2);
-    console.error(`${TAG8} added admin phone=${normalized}`);
-    reloadManagerConfig(accountDir);
-    return { ok: true, message: `Added ${normalized} as admin phone. Messages from this number will route to the admin agent.` };
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG8} addAdminPhone failed: ${msg}`);
-    return { ok: false, error: msg };
-  }
-}
-function removeAdminPhone(accountDir, phone) {
-  const normalized = phone.trim();
-  try {
-    const config2 = readConfig(accountDir);
-    if (!config2.whatsapp || typeof config2.whatsapp !== "object") {
-      return { ok: true, message: `No WhatsApp config exists \u2014 nothing to remove.` };
-    }
-    const wa = config2.whatsapp;
-    if (!Array.isArray(wa.allowFrom)) {
-      return { ok: true, message: `No admin phones configured \u2014 nothing to remove.` };
-    }
-    const allowFrom = wa.allowFrom;
-    const idx = allowFrom.indexOf(normalized);
-    if (idx === -1) {
-      return { ok: true, message: `Phone ${normalized} is not in the admin list.` };
-    }
-    allowFrom.splice(idx, 1);
-    const parsed = WhatsAppConfigSchema.safeParse(wa);
-    if (!parsed.success) {
-      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      return { ok: false, error: `Validation failed: ${msg}` };
-    }
-    config2.whatsapp = parsed.data;
-    writeConfig(accountDir, config2);
-    console.error(`${TAG8} removed admin phone=${normalized}`);
-    reloadManagerConfig(accountDir);
-    return { ok: true, message: `Removed ${normalized} from admin phones. Messages from this number will now route to the public agent.` };
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG8} removeAdminPhone failed: ${msg}`);
-    return { ok: false, error: msg };
-  }
-}
-function readAdminPhones(accountDir) {
-  try {
-    const config2 = readConfig(accountDir);
-    const wa = config2.whatsapp;
-    if (!wa || !Array.isArray(wa.allowFrom)) return [];
-    return wa.allowFrom.filter((p) => typeof p === "string");
-  } catch {
-    return [];
-  }
-}
-function setPublicAgent(accountDir, slug) {
-  const trimmed = slug.trim();
-  if (!trimmed) {
-    return { ok: false, error: "Agent slug cannot be empty." };
-  }
-  const agentConfigPath = join6(accountDir, "agents", trimmed, "config.json");
-  if (!existsSync10(agentConfigPath)) {
-    return { ok: false, error: `Agent "${trimmed}" not found \u2014 no config.json at ${agentConfigPath}. Check the agent slug and try again.` };
-  }
-  try {
-    const config2 = readConfig(accountDir);
-    if (!config2.whatsapp || typeof config2.whatsapp !== "object") {
-      config2.whatsapp = {};
-    }
-    const wa = config2.whatsapp;
-    wa.publicAgent = trimmed;
-    const parsed = WhatsAppConfigSchema.safeParse(wa);
-    if (!parsed.success) {
-      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      return { ok: false, error: `Validation failed: ${msg}` };
-    }
-    config2.whatsapp = parsed.data;
-    writeConfig(accountDir, config2);
-    console.error(`${TAG8} publicAgent set to ${trimmed}`);
-    reloadManagerConfig(accountDir);
-    return { ok: true, message: `Public agent set to "${trimmed}". WhatsApp messages from non-admin phones will be handled by this agent.` };
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG8} setPublicAgent failed: ${msg}`);
-    return { ok: false, error: msg };
-  }
-}
-function getPublicAgent(accountDir) {
-  try {
-    const config2 = readConfig(accountDir);
-    const wa = config2.whatsapp;
-    if (!wa) return null;
-    const slug = wa.publicAgent;
-    if (typeof slug === "string" && slug.trim()) {
-      return slug.trim();
-    }
-    return null;
-  } catch {
-    return null;
-  }
-}
-
 // app/api/whatsapp/login/wait/route.ts
 async function POST10(req) {
   try {
@@ -24977,7 +25057,7 @@ function serializeWhatsAppSchema() {
     "",
     "## Constraints (superRefine)",
     "",
-    '- `dmPolicy: "open"` requires `allowFrom` to include `"*"` (both top-level and per-account)',
+    '- `dmPolicy: "open"` requires `allowFrom` to include `"*"` (both top-level and per-account). This is a DM policy constraint \u2014 it does not affect admin phones, which live in the separate `adminPhones` field.',
     "- Account-level fields override top-level defaults when present"
   ].join("\n");
   return [topLevel, "", account, constraints].join("\n");
@@ -24987,7 +25067,7 @@ function serializeWhatsAppSchema() {
 async function POST14(req) {
   try {
     const body = await req.json().catch(() => ({}));
-    const { action, phone, slug, accountId } = body;
+    const { action, phone, slug, fields, accountId } = body;
     if (!action || typeof action !== "string") {
       return Response.json({ ok: false, error: 'Missing required field "action".' }, { status: 400 });
     }
@@ -25056,9 +25136,23 @@ async function POST14(req) {
           return Response.json({ ok: false, error: `Failed to fetch groups: ${String(err)}` });
         }
       }
+      case "update-config": {
+        if (!fields || typeof fields !== "object" || Array.isArray(fields)) {
+          return Response.json({ ok: false, error: 'Missing required field "fields" (object with config field names and values).' }, { status: 400 });
+        }
+        const result = updateConfig(account.accountDir, fields);
+        const fieldNames = Object.keys(fields);
+        console.error(`[whatsapp:api] config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
+        return Response.json(result, { status: result.ok ? 200 : 400 });
+      }
+      case "get-config": {
+        const waConfig = getConfig(account.accountDir);
+        console.error(`[whatsapp:api] config action=get-config`);
+        return Response.json({ ok: true, config: waConfig });
+      }
       default:
         return Response.json(
-          { ok: false, error: `Unknown action "${action}". Valid actions: add-admin-phone, remove-admin-phone, list-admin-phones, set-public-agent, get-public-agent, schema, list-groups.` },
+          { ok: false, error: `Unknown action "${action}". Valid actions: add-admin-phone, remove-admin-phone, list-admin-phones, set-public-agent, get-public-agent, update-config, get-config, schema, list-groups.` },
           { status: 400 }
         );
     }

package/payload/platform/plugins/whatsapp/mcp/dist/index.js

@@ -127,14 +127,25 @@ server.tool("whatsapp-send", "Send a WhatsApp message to a phone number or group
     }
 });
 // ─── whatsapp-config ──────────────────────────────────────────────────
-server.tool("whatsapp-config", "Manage WhatsApp configuration. Actions: add-admin-phone (register a phone as admin — messages from it route to admin agent), remove-admin-phone (demote to public routing), list-admin-phones (show current admin phones), set-public-agent (set which agent handles WhatsApp messages from non-admin phones — requires the agent slug), get-public-agent (show the currently configured public agent), schema (return all config field definitions — names, types, defaults, descriptions, constraints), list-groups (return WhatsApp groups the account belongs to — names, JIDs, participant counts). Phone numbers must be E.164 format (e.g. +441234567890).", {
-    action: z.enum(["add-admin-phone", "remove-admin-phone", "list-admin-phones", "set-public-agent", "get-public-agent", "schema", "list-groups"]).describe("The config action to perform"),
+server.tool("whatsapp-config", "Manage WhatsApp configuration. Actions: add-admin-phone (register a phone as admin — messages from it route to admin agent), remove-admin-phone (demote to public routing), list-admin-phones (show current admin phones), set-public-agent (set which agent handles WhatsApp messages from non-admin phones — requires the agent slug), get-public-agent (show the currently configured public agent), update-config (change any WhatsApp config field — pass field names and values in the fields parameter), get-config (return the full current WhatsApp config object), schema (return all config field definitions — names, types, defaults, descriptions, constraints), list-groups (return WhatsApp groups the account belongs to — names, JIDs, participant counts). Phone numbers must be E.164 format (e.g. +441234567890).", {
+    action: z.enum(["add-admin-phone", "remove-admin-phone", "list-admin-phones", "set-public-agent", "get-public-agent", "update-config", "get-config", "schema", "list-groups"]).describe("The config action to perform"),
     phone: z.string().optional().describe("Phone number in E.164 format (required for add/remove admin phone)"),
     slug: z.string().optional().describe("Agent slug (required for set-public-agent)"),
+    fields: z.string().optional().describe('JSON string of config fields to update (required for update-config, e.g. \'{"dmPolicy":"open","allowFrom":["*"]}\')'),
     accountId: z.string().optional().describe('Account ID for list-groups (default: "default")'),
-}, async ({ action, phone, slug, accountId }) => {
+}, async ({ action, phone, slug, fields, accountId }) => {
     try {
-        const result = await callApi("/api/whatsapp/config", "POST", { action, phone, slug, accountId });
+        // Parse fields JSON string for update-config
+        let parsedFields;
+        if (action === "update-config" && fields) {
+            try {
+                parsedFields = JSON.parse(fields);
+            }
+            catch {
+                return textResult('Invalid JSON in "fields" parameter. Expected a JSON object, e.g. {"dmPolicy":"open","allowFrom":["*"]}', true);
+            }
+        }
+        const result = await callApi("/api/whatsapp/config", "POST", { action, phone, slug, fields: parsedFields, accountId });
         if (!result.ok)
             return textResult(result.error ?? "Config operation failed.", true);
         if (action === "list-admin-phones") {
@@ -152,6 +163,12 @@ server.tool("whatsapp-config", "Manage WhatsApp configuration. Actions: add-admi
         if (action === "schema") {
             return textResult(result.text ?? "Schema unavailable.");
         }
+        if (action === "get-config") {
+            const waConfig = result.config;
+            if (!waConfig)
+                return textResult("No WhatsApp config found. Connect WhatsApp first.");
+            return textResult(JSON.stringify(waConfig, null, 2));
+        }
         if (action === "list-groups") {
             const groups = result.groups ?? [];
             if (groups.length === 0)

package/payload/platform/plugins/whatsapp/mcp/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;AAChD,IAAI,CAAC,aAAa,EAAE,CAAC;IACnB,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;AAChH,CAAC;AACD,MAAM,QAAQ,GAAG,oBAAoB,aAAa,EAAE,CAAC;AAErD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,SAAyB,MAAM,EAAE,IAAc;IAClF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE;QAC5C,MAAM;QACN,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,SAAS;QAClE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IAC/C,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;QAC1C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,qMAAqM,EACrM;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC5E,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAClF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,2BAA2B,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAQ,CAAC;QAC/F,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,uBAAuB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAEjF,IAAI,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,QAAQ,IAAI,4FAA4F,CAAC;YACzG,QAAQ,IAAI,eAAe,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/H,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,QAAQ,IAAI,mBAAmB,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACrG,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,wIAAwI,EACxI;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;CAClF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,0BAA0B,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAQ,CAAC;QAClG,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAEhF,IAAI,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACzC,QAAQ,IAAI,mBAAmB,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpG,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,6IAA6I,EAC7I,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,sBAAsB,EAAE,KAAK,CAAQ,CAAC;QACnE,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,wBAAwB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAElF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC,2EAA2E,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;YACpC,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAC9D,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,OAAO,GAAG,CAAC,CAAC,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtG,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,iFAAiF,EACjF;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CAC3F,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,0BAA0B,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAQ,CAAC;QACvF,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAChF,OAAO,UAAU,CAAC,qBAAqB,MAAM,CAAC,SAAS,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpG,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,eAAe,EACf,sHAAsH,EACtH;IACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACnE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACvF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAQ,CAAC;QAC3F,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1E,OAAO,UAAU,CAAC,4BAA4B,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC,CACF,CAAC;AAEF,yEAAyE;AAEzE,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,moBAAmoB,EACnoB;IACE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACxL,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC3G,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAClF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CAC7F,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,sBAAsB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAQ,CAAC;QACxG,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAEpF,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,UAAU,CAAC,kEAAkE,CAAC,CAAC;YAC/G,OAAO,UAAU,CAAC,kBAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;YAC9B,IAAI,CAAC,SAAS;gBAAE,OAAO,UAAU,CAAC,8EAA8E,CAAC,CAAC;YAClH,OAAO,UAAU,CAAC,0BAA0B,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,qBAAqB,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,UAAU,CAAC,+FAA+F,CAAC,CAAC;YAC5I,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,gBAAgB,eAAe,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/F,OAAO,UAAU,CAAC,oBAAoB,MAAM,CAAC,MAAM,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;AAChD,IAAI,CAAC,aAAa,EAAE,CAAC;IACnB,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;AAChH,CAAC;AACD,MAAM,QAAQ,GAAG,oBAAoB,aAAa,EAAE,CAAC;AAErD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,eAAe;IACrB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,SAAyB,MAAM,EAAE,IAAc;IAClF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE;QAC5C,MAAM;QACN,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,SAAS;QAClE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC9C,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAO,GAAG,KAAK;IAC/C,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;QAC1C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,sBAAsB,EACtB,qMAAqM,EACrM;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC5E,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAClF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,2BAA2B,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAQ,CAAC;QAC/F,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,uBAAuB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAEjF,IAAI,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,QAAQ,IAAI,4FAA4F,CAAC;YACzG,QAAQ,IAAI,eAAe,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/H,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,QAAQ,IAAI,mBAAmB,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACrG,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,wIAAwI,EACxI;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;CAClF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,0BAA0B,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAQ,CAAC;QAClG,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAEhF,IAAI,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACzC,QAAQ,IAAI,mBAAmB,MAAM,CAAC,SAAS,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpG,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,6IAA6I,EAC7I,EAAE,EACF,KAAK,IAAI,EAAE;IACT,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,sBAAsB,EAAE,KAAK,CAAQ,CAAC;QACnE,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,wBAAwB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAElF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,UAAU,CAAC,2EAA2E,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;YACpC,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC;YAC9D,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,OAAO,GAAG,CAAC,CAAC,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtG,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,iFAAiF,EACjF;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CAC3F,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,0BAA0B,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAQ,CAAC;QACvF,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAChF,OAAO,UAAU,CAAC,qBAAqB,MAAM,CAAC,SAAS,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpG,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,CAAC,IAAI,CACT,eAAe,EACf,sHAAsH,EACtH;IACE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACnE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;CACvF,EACD,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAQ,CAAC;QAC3F,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,UAAU,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC1E,OAAO,UAAU,CAAC,4BAA4B,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC,CACF,CAAC;AAEF,yEAAyE;AAEzE,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB,wyBAAwyB,EACxyB;IACE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACvN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oEAAoE,CAAC;IAC3G,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAClF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qHAAqH,CAAC;IAC7J,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;CAC7F,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;IACnD,IAAI,CAAC;QACH,6CAA6C;QAC7C,IAAI,YAAiD,CAAC;QACtD,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,UAAU,CAAC,wGAAwG,EAAE,IAAI,CAAC,CAAC;YACpI,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,sBAAsB,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,CAAQ,CAAC;QAC9H,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,0BAA0B,EAAE,IAAI,CAAC,CAAC;QAEpF,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,UAAU,CAAC,kEAAkE,CAAC,CAAC;YAC/G,OAAO,UAAU,CAAC,kBAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;YAC9B,IAAI,CAAC,SAAS;gBAAE,OAAO,UAAU,CAAC,8EAA8E,CAAC,CAAC;YAClH,OAAO,UAAU,CAAC,0BAA0B,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,qBAAqB,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,IAAI,CAAC,QAAQ;gBAAE,OAAO,UAAU,CAAC,mDAAmD,CAAC,CAAC;YACtF,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;YACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,UAAU,CAAC,+FAA+F,CAAC,CAAC;YAC5I,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,gBAAgB,eAAe,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC/F,OAAO,UAAU,CAAC,oBAAoB,MAAM,CAAC,MAAM,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,UAAU,CAAC,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC,CACF,CAAC;AAEF,0EAA0E;AAE1E,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC"}

package/payload/platform/plugins/whatsapp/references/channels-whatsapp.md

@@ -30,7 +30,7 @@ The initial first-run wizard flow stays single-account. Multi-account is managed
 ```yaml
 channels:
   whatsapp:
-    allowFrom:
+    adminPhones:
       - "<admin-phone>"    # E.164 phone the user messages from
     accounts:
       default:
@@ -42,7 +42,7 @@ Accounts are linked via QR in the Channels UI. Outbound routing (`src/web/outbou
 
 | Target | Account | Reason |
 |--------|---------|--------|
-| Admin/allowFrom phones | Account with admin binding | Admin's registered number |
+| Admin phones | Account with admin binding | Admin's registered number |
 | Self-chat | Account with selfChatMode | Admin talking to themselves |
 | Group messages | Account that is a group member | Whichever is in the group |
 | Customer DMs | Account with open DM policy | Dedicated agent number |
@@ -88,14 +88,14 @@ The platform enforces this at multiple levels:
 | Term | Definition | Code |
 |------|-----------|------|
 | **Self phone** | The WhatsApp account's own phone number (the phone that scanned the QR code). Self-chat only. | `phonesMatch(senderPhone, selfPhone)` in `access-control.ts` |
-| **Admin phones** | Phones with explicit non-wildcard entries in `allowFrom` in `account.json`. The user's personal phone must be registered here during setup — it is not auto-registered on QR link. | `isAdminPhone()` in `access-control.ts` — iterates `allowFrom`, skips `"*"` entries |
-| **Public/unknown** | Any phone that is not self and not in `allowFrom` (non-wildcard). Subject to DM policy gating. | Everything else in `checkDmAccess()` |
+| **Admin phones** | Phones listed in `adminPhones` in `account.json`. The user's personal phone is auto-registered on QR link; additional phones are added via `whatsapp-config action: "add-admin-phone"`. | `isAdminPhone()` in `access-control.ts` — iterates `adminPhones` |
+| **Public/unknown** | Any phone that is not self and not in `adminPhones`. Subject to DM policy gating. | Everything else in `checkDmAccess()` |
 
-**Critical distinction:** The *self phone* is the paired device's number (the WhatsApp account Maxy controls). The *admin phone* is the user's personal phone (the phone they message *from*). These are typically different numbers. If the user's personal phone is not in `allowFrom`, their messages route as public — not admin.
+**Critical distinction:** The *self phone* is the paired device's number (the WhatsApp account Maxy controls). The *admin phone* is the user's personal phone (the phone they message *from*). These are typically different numbers. If the user's personal phone is not in `adminPhones`, their messages route as public — not admin.
 
 **`dmPolicy` behaviour (per-account):**
 
-| Policy | Self phone | Admin phones (in `allowFrom`) | Public/unknown |
+| Policy | Self phone | Admin phones (in `adminPhones`) | Public/unknown |
 |--------|-----------|-------------------------------|----------------|
 | `"open"` | Allowed | Allowed | Allowed |
 | `"allowlist"` | Allowed | Allowed | Allowed only if in `allowFrom` (wildcard `"*"` counts) |
@@ -107,7 +107,7 @@ Admin phones always bypass DM policy — the `isAdminPhone()` check runs before
 
 **Key file:** `access-control.ts` — `checkDmAccess()` and `checkGroupAccess()`.
 
-**Config path:** Per-account at `whatsapp.accounts.{accountId}.dmPolicy` in `account.json`. Falls back to `whatsapp.dmPolicy`. Changes are conversational — the admin agent writes to config via the `account-update` tool.
+**Config path:** Per-account at `whatsapp.accounts.{accountId}.dmPolicy` in `account.json`. Falls back to `whatsapp.dmPolicy`. Changes are conversational — the admin agent writes to config via `whatsapp-config action: "update-config"`.
 
 For config field definitions (field names, types, valid values), use `whatsapp-config action: schema`.
 

package/payload/platform/plugins/whatsapp/skills/connect-whatsapp/SKILL.md

@@ -68,7 +68,7 @@ Admin phone registration and public agent selection persist across relinks — n
 - **QR expired** — generate a new one with `whatsapp-login-start`
 - **Phone not scanning** — ensure the phone has internet, WhatsApp is updated, and the user is in Linked Devices
 - **Keeps disconnecting** — check `whatsapp-status` for error details. A 401 means re-link is needed. Repeated transient errors suggest network issues on the device.
-- **Messages routing as public** — the user's personal phone is not in `allowFrom`. Call `whatsapp-config` with `action: "add-admin-phone"` and the user's phone number to register it.
+- **Messages routing as public** — the user's personal phone is not in `adminPhones`. Call `whatsapp-config` with `action: "add-admin-phone"` and the user's phone number to register it.
 
 ## Language
 

package/payload/platform/plugins/whatsapp/skills/manage-whatsapp-config/SKILL.md

@@ -47,7 +47,7 @@ When the user wants to configure per-group settings:
 
 ## Writing changes
 
-After the user submits, write changes via `account-update` with `field: "whatsapp"` and the updated config object. Confirm what changed — name each setting that was modified and its new value.
+After the user submits, write changes via `whatsapp-config action: "update-config"` with the `fields` parameter containing a JSON object of the changed fields. Each field is merged individually — unchanged fields are left untouched. Confirm what changed — name each setting that was modified and its new value.
 
 ## Language