github.com/openclaw/wacli

0.19.0 - 2026-09-24

Highlights: opt-in read receipts without app-state recovery, accurate unread counts, and stable chat activity order.

• Chats: add opt-in mark-read --receipts through an independent network path, with bounded batches, safe unread boundaries, sync delegation, and privacy-aware outcome reporting. Thanks @zarmat99 and @Adi-A (#432, #433).
• Sync: preserve messages beyond replayed read boundaries, keep read counts monotonic, resolve same-second boundaries by message ID, and exclude system events, reactions, and revocations from new unread counts. Thanks @zarmat99 (#435).
• Sync: keep content-free system events out of chat activity order and rebuild matching existing activity timestamps from stored content. Thanks @zarmat99 (#436).

0.18.3 - 2026-09-21

Highlights: webhooks omit media keys, backfill follows verified phone/LID identities, and sync recovery survives interruptions.

• Security: omit attachment decryption keys and retrieval fields from media webhooks while preserving descriptive metadata and local downloads. (#417 - thanks @hchittanuru3)
• History and contacts: resolve verified phone/LID pairs for backfill requests and contact lookup, preserve alias/tag edits through either identity, and keep opaque LIDs out of phone fields. (#427 - thanks @ugoi)
• History: wait for response persistence before checking backfill progress, preventing an asynchronous reply from stopping a multi-batch backfill early.
• Sync: decrypt encrypted message edits in live/history sync and bind updates to the authenticated sender, chat, and target. (#362, #363 - thanks @goutamadwant)
• Sync: repair LTHash mismatches with a durable full refresh before bounded phone recovery, and replay interrupted recovery at startup. (#367, #382 - thanks @shishiv)
• Messages: index associated-child and group-status-mention content and group-invite captions during live/history sync. (#365 - thanks @natea)
• Auth: retain observed session revocation in auth/doctor diagnostics until confirmed login, and wait for login confirmation before reporting a successful diagnostic connection. (#389 - thanks @0xble)
• CLI: keep libsignal diagnostics off stdout, preserve warnings and errors safely on stderr, and emit them as NDJSON warnings with --events without exposing raw cryptographic payloads. (#418, #419 - thanks @shishiv)
• Store: return failure when bulk chat/group cleanup cannot delete selected rows, preserving successful deletions and reporting the underlying errors instead of emitting a successful JSON result.
• Session: close the WhatsApp SQLite container on permanent shutdown and initialization failure, while keeping temporary reconnects usable and draining pending app-state persistence before closing either database.
• Dependencies: refresh WhatsApp protocol handling, Go modules, pnpm, GoReleaser, and Docker images; keep the Go and Node source requirements unchanged.
• Builds: share production/test dead-code checks between local and CI gates, validate documentation links in CI, isolate concurrent Windows lock cross-builds, and allow Go module maintenance while keeping CGO-disabled builds rejected.

0.18.2 - 2026-09-11

Highlights: mark chats read or unread while continuous sync owns the store.

• Chats: delegate mark-read and mark-unread through the same-store follow process, preserving read-only checks and command output; restart older daemons after upgrading. (#361, #380 - thanks @shishiv)
• Dependencies: refresh whatsmeow, Go networking and database tooling, vulnerability and dead-code checkers, GoReleaser 2.18.1, and pnpm 12.4.0 while retaining the 48-hour package release-age window.
• Builds: identify source builds as the upcoming 0.18.2 patch.

0.18.1 - 2026-09-07

Highlights: bounded memory use when generating waveforms for long voice notes.

• Send: cap voice-note waveform decoding at 2 MiB (about 131 seconds), preserve full audio and duration, and omit partial waveforms when ffmpeg fails. (#402 - thanks @SebTardif)

0.18.0 - 2026-09-07

Highlights: faster, interruptible upgrades, offline group rosters, and explicit opt-in self-chat sends.

• Sync: speed up historical identity repair with indexed lookups and selective search-index updates, and honor cancellation between identities during startup. (#395, #398 - thanks @amitav13)
• Groups: add groups participants list for offline roster snapshots with roles and timestamps, and refresh participant snapshots with sync --refresh-groups. (#359, #381 - thanks @shishiv)
• Send: add default-off send text --allow-self for direct and delegated self-chat attempts, retaining the default rejection and documenting acknowledgement-only delivery and daemon restart requirements. (#396 - thanks @frdteknikelektro)
• Sync: expose server backlog preview and completion lifecycle events without changing webhook payloads; document that they do not classify individual deliveries or indicate a drained webhook queue. (#379 - thanks @hchittanuru3)
• Builds: refresh pnpm to 12.3.4 with its verified integrity pin and identify source builds as the upcoming 0.18.0 minor.
• Release: require the exact version in dated changelog headings before local release preparation. (#397 - thanks @vincentkoc)

0.17.2 - 2026-09-05

Highlights: more complete searchable message history, bounded backfill retries, and clearer guidance for commands used alongside continuous sync.

• Messages: extract comment bodies and album summaries in live/history sync, preserving comment reply targets and matching quote metadata. (#383 - thanks @shishiv and @Entretoize)
• History: retry an unanswered backfill anchor once with the next local message, report both anchors, and keep retries bounded without deleting history or filtering message IDs. (#371 - thanks @Entretoize)
• Sync: serialize message and receipt webhook timestamps as UTC, preserving their instants while replacing host-local offsets with the documented Z form. (#386, #388 - thanks @hchittanuru3)
• Media: explain how media download --read-only --output PATH bypasses the store lock held by continuous sync. (#387 - thanks @hchittanuru3)
• Messages: omit synthetic audio captions while preserving supplied text and the [Audio] display fallback; re-ingestion can correct legacy captions without migrating untouched rows. (#378 - thanks @hchittanuru3)
• CLI: keep successful JSON commands successful when a pipe reader closes early, including Unix SIGPIPE and Windows closed-pipe errors. (#366 - thanks @SebTardif)
• Groups: warn on stderr when groups list truncates matching results, including JSON output, and keep --events warnings machine-readable. (#360 - thanks @hchittanuru3)
• Contacts: bound system-contact exports and their helper processes while preserving the existing 10 MiB file-import limit. (#376 - thanks @SebTardif)
• Docs: render nested heading links and table-of-contents labels safely, preserving links and stable heading anchors. (#370 - thanks @vincentkoc)
• WhatsApp compatibility: update socket-context handling, message identity parsing, group deletion handling, and disconnect event processing through whatsmeow updates.
• Builds: use Go 1.27.1 for development, CI, release verification, and Docker while retaining the Go 1.27.0 source minimum; source builds now identify the upcoming 0.17.2 patch.
• Dependencies: refresh Go modules, pnpm 12.3.1, CI actions, GoReleaser, and Docker images, retaining a verified package-manager integrity pin. (#384 - thanks @thedavidweng)

v0.17.1 - 2026-08-14

Fixed

• Auth: stop with an actionable error when WhatsApp requires unsupported passkey pairing instead of silently rotating unusable QR codes. (#355 - thanks @Avg8888)
• Sync: normalize resolvable LIDs in message, receipt, and chat-presence webhook payloads to match stored identities. (#352 - thanks @hchittanuru3)

v0.17.0 - 2026-08-13

Highlight: group identities are finally stable — resolvable LIDs are
normalized everywhere they appear, and existing stores are repaired on upgrade.

Fixed

• Sync: normalize resolvable LIDs in group owners, participants, and quoted senders, including historical store repair. (#348 - thanks @hchittanuru3)

Added

• Messages: expose persisted edited state consistently in list, search, show, and context JSON output. (#347 - thanks @dvainrub)
• Sync: identify unhandled payload types when content extraction produces a placeholder, with bounded diagnostics during history replay. (#344 - thanks @dvainrub)

Chore

• Dependencies: update whatsmeow for current socket headers, LID history tokens, status queries, and group creation behavior.

0.16.0 - 2026-08-02

Added

• Locations: send native WhatsApp location pins and retain incoming static or live coordinates in local history with full purge, cleanup, and identity-migration lifecycle support. (#338 - thanks @0xlucuma)

Fixed

• Groups: preserve message-derived chat activity when refreshing group metadata so chats list ordering is not replaced by refresh time. (#340 - thanks @goutamadwant)

Chore

• Dependencies: update go-sqlite3, whatsmeow, database tooling, gRPC, WebAssembly, telemetry, and supporting Go modules.

0.15.2 - 2026-08-02

Added

• Contacts: add contacts check <phone> [phone...] to query live whether numbers are registered on WhatsApp, with JSON output for scripting; per-number responded distinguishes a server non-answer from a confirmed "not registered". (#331)

Fixed

• Send: surface local history failures after a delivered file, voice, or status send as a store_warning (stderr warning plus JSON field) instead of silently diverging local history, while keeping the delivered message id so scripts do not retry an already-sent message. (#328 - thanks @SebTardif)
• Send: extend the store_warning partial-success contract to every remaining send surface — text, sticker, reactions, polls, poll votes, button/list selections, and message forwarding — including sends delegated to a running sync --follow process.

Docs

• README: align the project overview, install paths, quickstart, and command map with the shared documentation standard.

0.15.1 - 2026-08-01

Added

• Sync: add opt-in --send-spacing fixed or randomized pacing for sends delegated to a running follow process. (#318 - thanks @cohnen)
• Sync: add opt-in receipt and chat-presence webhook events while keeping legacy message payloads unchanged. (#315 - thanks @Jaime-data)

Fixed

• Sync: stop promptly when WhatsApp revokes the linked session, including while a reconnect is already in progress, and print the re-authentication steps. (#325 - thanks @cohnen)
• Send: keep self-chat storage under the canonical phone-number chat and reject text sends to the linked account itself instead of reporting an acknowledgement that may never reach Message Yourself. (#319 - thanks @Lucas-Kim-J)
• Send: resolve quoted direct messages across phone-number and LID chat aliases so replies can find migrated history. (#326 - thanks @0xlucuma)

Chore

• Dependencies: update whatsmeow, terminal support, GraphQL parsing, and supporting Go modules.
• Tooling: update the pinned pnpm version from 10.34.4 to 11.18.0.
• Build: migrate sqlc code generator to Go 1.24+ go tool directive and bump project toolchain requirement to Go 1.26.5. (#313 - thanks @thedavidweng)
• Build: standardize the Makefile's build, check, snapshot, and verified local-release targets across the crawler repositories.
• Release: publish v0.15.0 under a one-time clean-VM Gatekeeper waiver, with retroactive VM proof still required when hardware returns, and verify preserved drafts against their release commit's Go toolchain.

Changelog

Highlights

• Send files with an explicit WhatsApp media type, so an MP3 can be delivered as a downloadable document while retaining its audio MIME type. (thanks @DiegoDAF)
• Webhooks now include the locally resolved chat name when it is available. (#312 - thanks @g1e2x87)

Added

• Send: add send file --as auto|document|audio|image|video to choose the WhatsApp media type independently of MIME, including downloadable MP3 documents. (thanks @DiegoDAF)

Fixed

• Sync: include locally resolved chat names in webhook payloads when available. (#312 - thanks @g1e2x87)

Highlights

• Deleted messages now keep their original payload behind timestamped tombstones, with an explicit confirmation-gated purge command for irreversible erasure.
• Message edits now delegate through a running sync --follow process instead of failing while the sync process owns the store lock. (#310 - thanks @Umair444)
• Text replies can again quote stored documents and other supported media. (#307 - thanks @suifatt7799-oss)

Added

• Messages: add an explicit, confirmation-gated messages purge command that irreversibly erases one retained payload while keeping a durable suppression tombstone.

Changed

• Messages: retain original text, interactive, reply, and media metadata behind timestamped deletion tombstones; keep sync/history imports merge-only so missing rows never imply deletion.
• WhatsApp compatibility: update whatsmeow for the latest protocol definitions and its required utility module.

Fixed

• Store: preserve duplicate local media paths across LID-to-phone-number migration so a later payload purge erases every retained copy.
• Send: delegate messages edit through a running sync --follow process like other send commands, so edits no longer always fail with store is locked while continuous sync owns the store. (#310 - thanks @Umair444)
• Send: allow text replies to quote stored documents and other supported media by rebuilding their saved message content. (#307 - thanks @suifatt7799-oss)

Changelog

Highlights

• Sync can now stay quiet during long-running mirror sessions so the primary phone keeps normal notification behavior. (#298 - thanks @GodsBoy)
• Text replies now carry complete quoted-message context through direct and delegated sends. (#302 - thanks @odilorg)
• Windows auth and store access now handle drive-letter and UNC paths without invalid SQLite URI errors. (#304 - thanks @goutamadwant)
• Official release artifacts now use a signed, notarized, provenance-bound draft-first pipeline with protected verification and Homebrew handoff.

Added

• Sync: add opt-in --presence-mode quiet to suppress available-presence updates during long-running sync sessions while retaining safe unavailable cleanup. (#298 - thanks @GodsBoy)

Fixed

• Messages: preserve quoted content, stanza IDs, and participants when replying to stored incoming or outgoing text messages, including through sync IPC delegation. (#302 - thanks @odilorg)
• Windows: normalize drive-letter and UNC paths before constructing SQLite file URIs so auth and read-only store opens no longer fail with invalid URI authority. (#304 - thanks @goutamadwant)
• WhatsApp compatibility: update whatsmeow for current protobufs, LID direct-message sends, pairing, and user lookup behavior. (#306)

Security

• Build: require Go 1.25.12 and gate source plus release binaries with govulncheck so reachable GO-2026-5856 standard-library paths are excluded.
• Release: sign all official macOS thin and universal binaries with the exact OpenClaw Foundation Developer ID metadata and designated requirement, hardened runtime, timestamp, and Apple notarization before draft upload; require naturally quarantined clean-VM execution as the standalone CLI Gatekeeper proof.
• Release: bind cross-build provenance and publication freshness to the current protected head, reject wrong linker/runtime versions and lookalike signing authorities, revalidate the exact draft and fresh published release by ID, and verify protected Homebrew handoff, formula stanzas, plus the installed binary's hash, architecture, signing identity, runtime, and notarization constraint.
• Release: move official publication to a local draft-first flow with authenticated cross-build provenance, separate protected-main native verification, a signed annotated exact tag, verified public-release and Homebrew manifests, and credential-free CI builds.

Changed

• Dependencies: update go-sqlite3, the Go networking stack, and whatsmeow with its required transitive modules. (#305, #306)
• Tooling: require Node.js 24 or newer and enforce a 48-hour minimum release age for pnpm packages. (thanks @vincentkoc)

Changelog

Added

• Media: add media backfill to download media for already-synced messages that have metadata but no local copy. (thanks @njt)
• Media: add media retry to recover CDN-expired media from the primary device. (thanks @njt)

Security

• Store: replace dynamic schema-inspection SQL with fixed allowlisted queries. (thanks @dovocoder)

Fixed

• Sync: finish queued media downloads before clean one-shot and bootstrap exits instead of canceling them at idle. (thanks @njt)

Changelog

Added

Security

• Store: escape SQLite file URI path delimiters so store names cannot alter connection parameters. (thanks @vincentkoc)
• Docs: escape raw HTML in generated-site link labels and give duplicate headings stable unique IDs. (thanks @vincentkoc)

Fixed

• WhatsApp compatibility: update whatsmeow for current protocol metadata, privacy tokens on more request types, and pairing/connect handling.
• Sync: keep linked-device presence accurate while sync is running and send unavailable presence on shutdown so phones resume push notifications. (#283)
• WhatsApp connectivity: update whatsmeow for the current WhatsApp protocol and fix 405 (Client Outdated) failures. (#280)
• Channels: report local cache persistence failures instead of silently returning incomplete success. (thanks @vincentkoc)
• Cleanup: reject non-positive chats cleanup --days values before opening the store. (thanks @vincentkoc)