`gj[(UdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl m Z ddlmZddlmZmZmZ ddlmZdZ ddlZdZdd lmZmZdd lmZmZm Z m!Z!m"Z"dd l#m$Z$dd l%m&Z&ddl'm(Z(ejRe*Z+dZ,dZ-dZ.dZ/dZ0dZ1dZ2dZ3ddddddZ4ddddd dZ5e jld!Z7d"d"d"d#d#d$d%Z8d&e9d'<d/d(Z:d0d)Z;ee(d*d+Zy#e$rd ZdZYwxYw#e$rd ZdZYwxYw)2u WhatsApp Cloud API adapter — official Meta WhatsApp Business Platform. This adapter is a *complement* to ``whatsapp.py`` (the Baileys bridge), not a replacement. The two are independent: - ``whatsapp.py`` — unofficial Baileys bridge, personal accounts, no public URL needed, account-ban risk. - ``whatsapp_cloud.py`` (this file) — official Meta Cloud API, Business account required, public webhook URL required, token-based auth. Both share gating / mention / formatting behavior via ``WhatsAppBehaviorMixin``. Phase scope (this file evolves across phases): - Phase 2 — outbound text via Graph API + webhook server with verify-token handshake. - Phase 3 — X-Hub-Signature-256 HMAC verification (raw body, constant-time) + wamid replay protection + dispatch via handle_message. Phase 3 adapter is end-to-end usable for text DMs. - Phase 4 — media upload + send (image/video/audio/document), inbound media download via the Graph media endpoint, voice-note opus conversion via ffmpeg with graceful MP3 fallback when ffmpeg isn't on PATH. Document text injection for readable types. - Phase 5 — 24-hour conversation window + template fallback. Required env vars to enable the adapter: - WHATSAPP_CLOUD_PHONE_NUMBER_ID (the Graph URL path component) - WHATSAPP_CLOUD_ACCESS_TOKEN (System User permanent token) Optional / Phase-3+: - WHATSAPP_CLOUD_APP_ID - WHATSAPP_CLOUD_APP_SECRET (HMAC key for X-Hub-Signature-256) - WHATSAPP_CLOUD_WABA_ID (analytics / future use) - WHATSAPP_CLOUD_VERIFY_TOKEN (hub.verify_token shared secret) - WHATSAPP_CLOUD_WEBHOOK_HOST (default 0.0.0.0) - WHATSAPP_CLOUD_WEBHOOK_PORT (default 8090) - WHATSAPP_CLOUD_WEBHOOK_PATH (default /whatsapp/webhook) - WHATSAPP_CLOUD_API_VERSION (default v20.0) ) annotationsN) OrderedDict)Path)AnyDictOptional)webTF)PlatformPlatformConfig)BasePlatformAdapter MessageEvent MessageType SendResultSUPPORTED_DOCUMENT_TYPES)WhatsAppBehaviorMixin)rich_sent_store)get_hermes_dirzv20.0z0.0.0.0iz/whatsapp/webhookzhttps://graph.facebook.comi0iiiPii@)imagevideoaudiodocumentsticker image/jpegz video/mp4 audio/mpegapplication/octet-streamz image/webpffmpeg.oggz.m4az.jpg)z audio/oggzaudio/x-opus+oggz audio/opusz audio/mp4z audio/x-m4arDict[str, str]"_WHATSAPP_MIME_EXTENSION_OVERRIDEScK |jj|dzd{}t ||kDr t d|S7#tj$r}|j}Yd}~Ad}~wwxYww)z8Read at most ``max_bytes`` from an aiohttp request body.Nzpayload too large)content readexactlyasyncioIncompleteReadErrorpartiallen ValueError)request max_bytesbodyexcs S/root/.hermes/venv/lib/python3.12/site-packages/gateway/platforms/whatsapp_cloud.py_read_limited_request_bodyr/si__00Q?? 4y9,-- K @  & &{{s=A3!AAAA3AA0 A+&A3+A00A3c|sy|jddjj}tj |}|r|St j |xsdS)aUResolve a mime type to the file extension we want on disk. Consults the override map first so types like ``audio/ogg`` produce the extension downstream tools actually accept (``.ogg``, not the technically-correct-but-broken ``.oga``). Falls back to Python's ``mimetypes.guess_extension`` for anything we haven't pinned. N;r)splitstriplowerr get mimetypesguess_extension)mimeprimaryoverrides r. _ext_for_mimer;s\ jjoa &&(..0G155g>H  $ $W - 55zplatforms/whatsapp_cloud/mediazwhatsapp_cloud/mediactxrtS)aReturn whether transport dependencies are available. aiohttp is needed for the webhook server (inbound). httpx is needed for Graph API calls (outbound). Both ship with hermes-agent's default dependency set, so this should always be True in normal installs. )AIOHTTP_AVAILABLEHTTPX_AVAILABLEr<r.!check_whatsapp_cloud_requirementsrAs  00r<cPeZdZdZdZd1fd Zed2dZd3dZed4dZ d5dZ ed6dZ d7fd Z d8fd Z d7d Zd d d9dZd:dZ d; ddZ d= d?dZed@dAdZedBdAdZ d= dCdZ dD dEdZ d= dFdZedGdZdHdZ d= dIdZdddddd dJdZddddd dKdZ d; dLd Z d; dMd!Z d; dNd"Z d; dOd#Z! dP dQd$Z"dRd%Z#d:d&Z$dd' dSd(Z%dTd)Z&dTd*Z'dTd+Z(dUd,Z)dVd-Z*dWd.Z+ dXd/Z, dYd0Z-xZ.S)ZWhatsAppCloudAdapteraWhatsApp Business Cloud API adapter. Outbound: HTTPS POST to ``graph.facebook.com///messages``. Inbound: aiohttp server accepting Meta's webhook payloads. The mixin must come first in the bases list so its ``format_message`` overrides ``BasePlatformAdapter.format_message`` (the base provides a generic implementation that does not convert markdown to WhatsApp syntax). The Baileys adapter does the same. Tc t||tj|jxsi}t |j ddj|_t |j ddj|_ t |j ddj|_ t |j ddj|_ t |j ddj|_ t |j ddj|_ t |j dt|_t!|j d t"|_|j'|j d t(|_|j'|j d d |_t |j d t.|_ddl}|j d|_|j7|j9|j dxs9|j dxs&|j:dxs|j:d|_t |j:ddjj?dv}|rdn|j<rdnd}t |j dxs*|j:dxs|j:dxs|jj?|_ t |j dxs'|j:dxs|j:ddjj?|_!|j7|j9|j dxs%|j dxs|j:d |_"|jG|_$tK|_&d|_'d|_(d|_)d!|_*tK|_+tK|_,tK|_-tK|_.d|_/d|_0y)"Nphone_number_id access_tokenapp_id app_secretwaba_id verify_token webhook_host webhook_port webhook_path health_pathz/health api_versionr reply_prefix allow_from allowFromWHATSAPP_CLOUD_ALLOW_FROMWHATSAPP_CLOUD_ALLOWED_USERSWHATSAPP_CLOUD_ALLOW_ALL_USERS>1yestrueopen allowlist dm_policyWHATSAPP_CLOUD_DM_POLICYWHATSAPP_DM_POLICY group_policyWHATSAPP_CLOUD_GROUP_POLICYWHATSAPP_GROUP_POLICYgroup_allow_fromgroupAllowFromWHATSAPP_CLOUD_GROUP_ALLOW_FROMF)1super__init__r WHATSAPP_CLOUDextrastrr5r3_phone_number_id _access_token_app_id _app_secret_waba_id _verify_tokenDEFAULT_WEBHOOK_HOST _webhook_hostintDEFAULT_WEBHOOK_PORT _webhook_port_normalize_pathDEFAULT_WEBHOOK_PATH _webhook_path _health_pathDEFAULT_API_VERSION _api_versionos _reply_prefix_normalize_allow_ids_coerce_allow_listgetenv _allow_fromr4 _dm_policy _group_policy_group_allow_from_compile_mention_patterns_mention_patternsr _seen_wamids_duplicate_count_accepted_count_rejected_signature_count_warned_no_ffmpeg_last_inbound_wamid_by_chat_clarify_state_exec_approval_state_slash_confirm_state_runner _http_client)selfconfigrhr{_allow_all_optin_default_dm_policy __class__s r.rfzWhatsAppCloudAdapter.__init__s !8!89 "&)3Db)I%J%P%P%R"%eii&C"D"J"J"L  (B 78>>@ #EIIlB$? @ F F H 9b!9:@@B "%eii&C"D"J"J"L#&eii@T&U"V"%eii@T&U"V"&"6"6 IIn&: ;# "&!5!5 IImY /"  "%UYY}>Q%R!S ,1IIn,E &*%>%>  # # ,'=99[)=29989=299;<  &  BII6 ; %'%%'12'F!%!1!1+v  # IIk " "ryy34 "ryy-. ""  %'%%'  #& IIn % :ryy67 :ryy0&9#  %'%%'  ,0+D+D  # # ,-@99-.@299>? , "&!?!?!A 7Bm%&$%./&(-EPM( 8C}=H]!=H]! ;?r<ctt|xsdjxsd}|jdr|Sd|S)NrF/)rir3 startswith)pathraws r.ruz$WhatsAppCloudAdapter._normalize_pathGs9$*"o##%,nnS)s83%y8r<cx|jdr|dd}td|jd|jd|S)z@s.whatsapp.net`` JIDs. Users sharing an allowlist between both adapters (or pasting a JID/phone number with ``+`` or separators) should still match, so strip any ``@...`` suffix and non-digit characters. @r"r\DrF)setr2resubadd)ids normalizedentrybaredigitss r.r}z)WhatsAppCloudAdapter._normalize_allow_idscsY #u  ,E;;sA&q)DVVE2t,F NN6?U + ,r<c|jdk(rEtjddt|j ddd}|xs||j vSt ||S)z2Allowlist check against the normalized bare wa_id.r[rrFrr"r)rrrrir2rre_is_dm_allowed)r sender_idrrs r.rz#WhatsAppCloudAdapter._is_dm_allowedts] ??k )66%S^%9%9#q%A!%DED%I$*:*:: :w%i00r<cttjddjj dvryt |S)aAlso honor the documented WHATSAPP_CLOUD_ALLOW_ALL_USERS opt-in. The shared mixin only checks GATEWAY_ALLOW_ALL_USERS / WHATSAPP_ALLOW_ALL_USERS; the Cloud adapter's documented open-access opt-in is WHATSAPP_CLOUD_ALLOW_ALL_USERS, so honor it here too. rVrF>rWrXrYT)rir{rr3r4re_open_dm_opted_in)rrs r.rz&WhatsAppCloudAdapter._open_dm_opted_in{sB ryy92> ? E E G M M OSg gw(**r<cdt|xsdj}|sy|j|S)aAuthorize inbound button/list taps before running resolvers. Interactive replies bypass the normal ``_build_message_event_from_cloud`` path (which calls ``_should_process_message``), so approval / slash-confirm / clarify taps must re-check DM policy here. Uses the strict ``_is_dm_allowed`` gate (not intake/pairing) so a stale prompt cannot be answered after the sender is removed from the allowlist. rFF)rir3r)rr principals r.!_is_interactive_sender_authorizedz6WhatsAppCloudAdapter._is_interactive_sender_authorizeds2 R(..0 ""9--r<F) is_reconnectcKts|jdddy|jr |js|jdddyddlm}t jd | |_tjt }|jj|j|j|jj|j |j"|jj%|j |j&tj(||_|j*j-d{tj.|j*|j0|j2}|j5d{|j7t8j;d |j0|j2|j |j<|j|j>st8jAd |jBst8jAdy77w)Nwhatsapp_cloud_deps_missinguMaiohttp and httpx are required for whatsapp_cloud — reinstall hermes-agent.F) retryablewhatsapp_cloud_unconfiguredzLWHATSAPP_CLOUD_PHONE_NUMBER_ID and WHATSAPP_CLOUD_ACCESS_TOKEN are required.r)platform_httpx_limitsg>@)timeoutlimits)client_max_sizez=[whatsapp_cloud] Listening on %s:%d%s (Graph %s, phone_id=%s)uq[whatsapp_cloud] WHATSAPP_CLOUD_VERIFY_TOKEN is not set — the GET subscription handshake will fail until it is.u[whatsapp_cloud] WHATSAPP_CLOUD_APP_SECRET is not set — incoming webhook POSTs will be refused with 503. Set the app secret to enable inbound message delivery.T)"rA_set_fatal_errorrjrk%gateway.platforms._http_client_limitsrhttpx AsyncClientrr ApplicationWEBHOOK_MAX_BODY_BYTESrouteradd_getrx_handle_healthrw_handle_verifyadd_post_handle_webhook AppRunnerrsetupTCPSiterqrtstart_mark_connectedloggerinforzrowarningrm)rrrappsites r.connectzWhatsAppCloudAdapter.connects02  ! !-* "  $$D,>,>  ! !-  "   P!--!6!8 oo.DE 4,,d.A.AB 4--t/B/BC D..0D0DE}}S) ll  """{{4<<););T=O=OPjjl  K              ! !  !! NNH  NNE  1 #s&EI IA I $I %B$I  I cK|j* |jjd{d|_|j * |j j d{d|_|jy7R#t$rtj dYpwxYw7B#t$rtj dY`wxYww)Nz.[whatsapp_cloud] webhook server cleanup failedz)[whatsapp_cloud] http client close failed)rcleanup Exceptionr exceptionraclose_mark_disconnectedrs r. disconnectzWhatsAppCloudAdapter.disconnects << # Sll**,,, DL    ( N''..000!%D  !- S  !QR S 1 N  !LM Nsm C BBBC B(#B&$B((C BB# C "B##C &B((C C C  C NcTK|j tddS|r|js tddS|j|}|j ||j }|j d}d|jd d }d} t|D]\} } d d |d | ddd} |r | dk(rd|i| d< |jj||| d{} | jdk7r] | j}|j#|| j}tj%d| j|td|cS | j}|j'dxsg}|r|dj'd} | rt)j*|| |td| S7#t$r7}tjdtdt|cYd}~cSd}~wwxYw#t$rd| j ddi}YwxYw#t$rYwxYww)uSend a text message via Graph API. ``chat_id`` is the recipient's WhatsApp ID (``wa_id``) — typically their phone number with country code, no plus sign. NF Not connectedsuccesserrorTr message_idmessagesBearer application/json Authorizationz Content-Typewhatsapp individualtext)r, preview_url)messaging_productrecipient_typetotyperrrcontextheadersjsonz[whatsapp_cloud] send failedrz.[whatsapp_cloud] send rejected (status=%d): %sid)rrr3format_messagetruncate_message_outgoing_chunk_limitrrk enumeratepostrrrri status_coderr_format_graph_errorrr5rrecord)rchat_idr#reply_tometadata formattedchunksurlrlast_message_ididxchunkpayloadrespr-r, error_msgdatars r.sendzWhatsAppCloudAdapter.sends9    $e?C Cgmmodt< <''0 &&y$2L2L2NOooj)&t'9'9&:;.  *.#F+& JC%/".!&t< 'GC1H&2H%= " A!..33Cw3WW 3&499;D!44T4;K;KL D$$ "%yAA yy{hhz*0b&)!fjj&6OI& \   " "7OY G$?CCKX A  !?@!%s3x@@ A!4!499Tc?3D4  sB9H(:`` (or ``:other``); inbound webhook parsing dispatches on the prefix. NFrrrFreply_to_message_idu❓ r  rc36K|]\}}|dzd|yw)r"z. Nr@).0ics r. z4WhatsAppCloudAdapter.send_clarify..s'! $1q1ugRsO! s r*replycl::r"rtitlerr7buttonrbuttonsrr,action)r'H)rr; descriptionz:otheru ✏️ OtherzType your own answerlistChooseOptions)r;rows)r=sections)rrr3r5rrijoinrr,r(ranger(appendr#rrr)rr questionchoices clarify_id session_keyr r r4 choices_list option_lines body_textrr>r!rG choice_textresults r. send_clarifyz!WhatsAppCloudAdapter.send_clarifysx,    $e?C CN))+BJHN''(=>PT7d8*,=QQ Q 18 O1A A O Oyy! (1,(?!  ''$xj\N(KL |  !!\!23  $ #J#>{RT#>#U  KKJ>   d11:{ K qR P PWsDA#H%H & H1HH+AH 0H9B"HH0H HcK|j tddS~|xsd}t|dkr|n|dddz} |jd| d ||rd ndz} t j j dd } |r|xsijd nd} d d| iddd| dddddd| ddddgid} |j|| | d{}|jr|j|j| ||S7/w)u]Render a dangerous-command approval prompt with native buttons. Two quick-reply buttons (Approve / Deny). Tapping resolves the waiting agent via ``tools.approval.resolve_gateway_approval`` — same mechanism as the text ``/approve`` flow. The agent thread is blocked until the user taps or types a response. NFrrrFi r+u(⚠️ *Command Approval Required* ``` z ``` Reason: z@ Smart DENY: owner override applies to this one operation only. r.r=rr>r7appr:z:approveu ✅ Approver:r<z:denyu❌ Denyr?r/) rrr(r,uuiduuid4hexr5r#rrr)rr commandrOrCr allow_permanent smart_deniedcmd cmd_previewrR approval_idr r!rTs r.send_exec_approvalz'WhatsAppCloudAdapter.send_exec_approval/sW"    $e?C C m X_c#ds)e2C ''=!"m %XdSik m jjl&&s+ BJHN''(=>PTY' '*/ }H(EP]!^ !(*/ }E(BZ!X   "--g{X-VV >>   d77k R WsCC< C: 0C<c ~K|j tddS|jd|d|}|r|xsijdnd}dd |id d d |d ddd d|dddd d|dddgid} |j || |d{} | j r|j |j||| S7/w)u5Render a 3-button slash-command confirmation prompt. Mirrors Telegram's send_slash_confirm: Approve Once / Always / Cancel. The confirm_id is supplied by the caller (slash command handler) — we just store the session_key mapping for the inbound resolver to look up. NFrr*z* r.r=rr>r7zsc:once:u✅ Approve Oncer:r<z sc:always:u 🔒 Alwaysz sc:cancel:u ❌ Cancelr?r/)rrr,r5r#rrr) rr r;messagerO confirm_idr rRr r!rTs r.send_slash_confirmz'WhatsAppCloudAdapter.send_slash_confirmhs     $e?C C''!E7%y(AB BJHN''(=>PTY' '*2:,(?J\!] !(*4ZL(AM!Z !(*4ZL(AL!Y  *--g{X-VV >>   d77[ Q WsB B= B; 0B=c|xsijdxsi}|jdxs|jdxsd}|jd}| d|d|d|Sd |d |S) Nrrerz unknown errorrz graph error z (HTTP z): zHTTP z: )r5)r,rerrrers r.rz(WhatsAppCloudAdapter._format_graph_errors|zrw'-2'')$JJ?wwv  !$w{m3wiH H{m2gY//r<cK|ddSw)Ndm)namerr@)rr s r. get_chat_infoz"WhatsAppCloudAdapter.get_chat_infos  ..sc zK|jytjj|sdd|fStjj |}t j |t d}||kDr.ddtjj|d|d|d|d fS|stj|\}}|stj |d }|jd }d d |ji} t|d5} tjj|| |fdd|fd} |jj||| d{} ddd j&dk7r/ | j)} d|j-| | j&fS | j)}|j d}|sy|dfS7s#1swYrxYw#t$r,} t j#ddt%| fcYd} ~ Sd} ~ wwxYw#t$rd| j*ddi} YwxYw#t$rd}YzwxYww)uUpload a local file to the Graph /media endpoint. Returns ``(media_id, None)`` on success, ``(None, error_string)`` on failure. Two-step send: this gets the id, then ``_send_media`` references it. Used when we have a local file and no public URL. ``media_kind`` is one of "image", "video", "audio", "document", "sticker" — selects size cap + default mime fallback. N)NrzFile not found: rzFile z is z bytes; Cloud API z cap is z bytesrmediarrrb)Nr)filerr)rfilesz$[whatsapp_cloud] media upload failedrrrr)NzUpload response missing 'id')rr{rexistsgetsize_MEDIA_SIZE_LIMITSr5basenamer6 guess_type _DEFAULT_MIMErrkrZrrrrrirrrr)r file_path media_kind mime_typesizecap_rrfhrrrr-r,rmedia_ids r. _upload_mediaz"WhatsAppCloudAdapter._upload_mediasU    $(ww~~i(+I;77 7wwy) $$Z1CJ1OP #:((34D?'LV=  $// :LIq%))*6PQIoog&"gd.@.@-A$BC "i& W"WW--i8"iH);!9- "..33CPU3VV  W   s " 0yy{11$8H8HII I 99;Dxx~H7~'W  W W "   C DS> ! " 0tyy#/ 0 H sC7H;: GA GGGGH;-H =H;!H*=H;GG G H!H<H=H;HH; H'$H;&H''H;* H85H;7H88H;)r media_linkcaptionfilenamer c K|j tddSt|t|k(r tddS|jd}d|jdd } i} |r|| d <n|| d <|r |d vr|| d <|r |dk(r|| d<ddddd|d||| i} |rd|i| d< |jj || | d{} | jdk7r\ | j}|j|| j}tjd| j||td|S | j}|jdxsg}|r|djd nd}td| S7#t $r5} tjdtdt| cYd} ~ Sd} ~ wwxYw#t $rd| jddi}YwxYw#t $rd}Y}wxYww)!a7POST a media message referencing either an uploaded media_id or a public ``link``. Exactly one of ``media_id`` or ``media_link`` must be set. Captions and filenames are passed through where Meta accepts them (caption on image/video/document; filename on document only). NFrrz1Exactly one of media_id or media_link must be setrrrrrlink>rrrrrrrrrrrrrrrz"[whatsapp_cloud] media send failedrrrz=[whatsapp_cloud] media send rejected (status=%d, kind=%s): %srTr)rrboolrrkrrrrrirrrrrr5)rr rzrrrrr rr media_blockrrr-r,rrrrs r. _send_mediaz WhatsAppCloudAdapter._send_medias-$    $e?C C >T*- -I  ooj)&t'9'9&:;.  ')  (K ",K  z%CC%,K "  j0&.K #  l ' J  #  ".!9GI  =**//W7/SSD   s " 0yy{00t7G7GHI NNO  *i e9= = 99;D((:&,"C(+CFJJt$E$599/T =   A Be3s8< < = 0tyy#/ 0 E sBG/!E=E;E=G/F>%A G/1=G. G/;E== F;*F60F;1G/6F;;G/>GG/GG/ G,)G/+G,,G/)rrr r{cK|jdr|j||||||d{S|j|||d{\}} | r td| S|j||||||d{S7P777w)uXSmart dispatcher: HTTPS URL → ``link`` send; local path → upload + ``id`` send. Prefers the ``link`` path when possible (one fewer Graph round trip). Meta fetches from the URL themselves. Used as the common backend for ``send_image`` / ``send_video`` / etc. — keeps the public method bodies thin. zhttp://zhttps://)rrrr NFr)rrrr )rrrr) rr sourcerzrrr r{rris r._send_media_from_path_or_linkz2WhatsAppCloudAdapter._send_media_from_path_or_link8s$   4 5))!!! * #00YOO # e37 7%%   &   P s3,BA?B B 0B:B;BBBcJK|j||d||d{S7w)a Send an image by public URL. Prefers Meta's ``link`` mode. ``**kwargs`` absorbs platform-agnostic args the base class passes (e.g. ``metadata``) that the Cloud API doesn't have a use for. Mirrors send_image_file / send_video / send_voice / send_document. rrr Nr)rr  image_urlrr kwargss r. send_imagezWhatsAppCloudAdapter.send_image_s577 Y88    #!#cJK|j||d||d{S7w)z1Send a local image file via two-step upload + id.rrNr)rr  image_pathrr rs r.send_image_filez$WhatsAppCloudAdapter.send_image_fileq577 Z'H8    rcJK|j||d||d{S7w)u=Send a video. Local path → upload; HTTPS URL → link mode.rrNr)rr  video_pathrr rs r. send_videozWhatsAppCloudAdapter.send_video~rrc&K|}d}|jd xr@|jjdxrtjj |}|rU|j |d{} | r8 |j|| d||dd{} tj| | Sd}|j||d|||d{S7_7?#t$rY| SwxYw# tj| w#t$rYwwxYwxYw7Bw)a|Send an audio file as a WhatsApp voice message. WhatsApp renders ``audio/ogg; codecs=opus`` as the green voice-note bubble; other audio types (MP3, AAC, etc.) appear as a generic audio attachment. Hermes TTS produces MP3, so we try ffmpeg conversion to opus first and fall back to sending the MP3 as-is when ffmpeg is unavailable. Nrz.mp3rzaudio/ogg; codecs=opus)rr r{r) rr4endswithr{rrs_convert_to_opusrunlinkOSError) rr  audio_pathrr rrr{ is_local_mp3 opus_pathrTs r. send_voicezWhatsAppCloudAdapter.send_voices= #' %%&=> > +  "++F3 +z*  "33J??I #'#E#EG '(":$F$F ), %I77 VWh)8   +@#  )," sA/D1C2D9C%CC%C.D D DC% C"D!C""D%D 'C=<D = D D D  D  Dc K|j||d||xstjj||d{S7w)z+@+@+B *OO]s**79*EdsK  O!1    H I sZ0D:ADDD&D'A(DD:DD:DDD74D:6D77D:cV|jryd|_tjdy)NTu[whatsapp_cloud] ffmpeg not found on PATH — voice messages will be delivered as MP3 audio attachments instead of native voice notes (green waveform bubble). Install ffmpeg to enable: Windows `winget install Gyan.FFmpeg`, macOS `brew install ffmpeg`, Linux package manager.)rrrrs r.rz)WhatsAppCloudAdapter._warn_once_no_ffmpegs'  ! ! !% % r<ext_hintcK|jyt|j}tjd|st j d|ddydd|ji} |jjtd|jd|| d{}|jd k7r"t j d ||jy |j}|jd }|jdxsd}|sy |jj|| d{}|jd k7r"t j d||jy|} | s |r t|} | sd} t j#ddt || z } | j%|j&t| |xsdfS7-#t$rt jd |YywxYw#t$rYywxYw7#t$rt jd|YywxYw#t($rt jd|YywxYww)uTwo-step Graph media download: ``GET /`` → temp URL → bytes. Returns ``(local_path, mime_type)`` on success. ``mime_type`` falls back to what Graph reports in the metadata response. Returns ``(None, None)`` on any failure (logged). The temporary URL from step 1 is signed and expires in ~5 minutes; we download immediately and never persist the URL. NNNz[A-Za-z0-9._-]+z/[whatsapp_cloud] refusing malformed media id %r@rrr)rz4[whatsapp_cloud] media metadata fetch raised (id=%s)rz?[whatsapp_cloud] media metadata fetch failed (id=%s, status=%d)rr{rFz1[whatsapp_cloud] media bytes fetch raised (id=%s)z<[whatsapp_cloud] media bytes fetch failed (id=%s, status=%d)z.binT)parentsexist_okz5[whatsapp_cloud] failed to write cached media (id=%s))rrir3r fullmatchrrrkr5rrzrrrrr;_INBOUND_MEDIA_CACHEmkdir write_bytesr#r) rrrr meta_respmetatemp_urlr8 blob_respextrs r._download_media_to_cachez-WhatsAppCloudAdapter._download_media_to_cachest    $ x=&&(||.9 NNA8CR= "gd.@.@-A$BC "//33!"!D$5$5#6azB4I  C ' NNQ)//  >>#D88E?xx $* "//33Hg3NNI  C ' NNN)//  t%CC""4$"?'XJse*<<   !2!2 38}dld**{    F     O    CX   4    G   sA(I+6G!G"G&1IG6()I H2H3H7A*I"H,=IGG30I2G33I6 H?IHIHH)&I(H))I,I I IIc .Ktjd|jj|j|j t |jt |jtdu|j|j|jd Sw)Nok) rplatformrErNverify_token_configuredapp_secret_configuredffmpeg_presentaccepted duplicatesrejected_signature) r json_responserrrjrwrrormrrrr)rr*s r.rz#WhatsAppCloudAdapter._handle_healthcs   MM//#'#8#8 $ 2 2+/0B0B+C)-d.>.>)?".d": 00"33&*&D&D   sBBc6K|jstjddS|jj dd}|jj dd}|jj dd}|dk7rtjd d Sd d l}|j |j|jjstjd dS|stjd dStj|dSw)aCMeta subscription verification handshake. Meta calls GET ``?hub.mode=subscribe&hub.verify_token=... &hub.challenge=...``. We must echo the challenge as plain text iff ``hub.mode == "subscribe"`` AND ``hub.verify_token`` matches the shared secret. Constant-time comparison. zverify_token not configuredrrzhub.moderFzhub.verify_tokenz hub.challenge subscribezbad moderNizverify_token mismatchzmissing challengez text/plain)r content_type)ror Responsequeryr5hmaccompare_digestencode)rr*modetoken challenge_hmacs r.rz#WhatsAppCloudAdapter._handle_verifyss!!<``; we compute the same HMAC with ``app_secret`` as the key and ``raw_body`` (UTF-8 bytes, not re-serialized JSON) as the message. Constant-time compare. Fzsha256=Nr) rmrr(r3rnewrhashlibsha256 hexdigestrr4)rraw_bodyheader expected_hexcomputeds r.rz&WhatsAppCloudAdapter._verify_signaturesv  +c)no.446 88    # #G ,  NN  )+ "" NN  # # %|'9'9';'B'B'D  r<c|sy||jvr|xjdz c_yd|j|<t|jtkDr9|jj dt|jtkDr9y)zReturn True if this wamid is being seen for the first time. Returns False (and increments duplicate counter) if the wamid is already in the in-memory cache. Cache is FIFO-evicted at ``WAMID_DEDUP_CACHE_SIZE``. Tr"Fr)rrr(WAMID_DEDUP_CACHE_SIZEr)rrs r. _dedup_wamidz!WhatsAppCloudAdapter._dedup_wamids D%% %  ! !Q & !#'% $##$'==    % %5 % 1$##$'==r<c K|jddk7r&tjd|jdy|jdxsgD]Q}t|ts|jdxsgD]$}t|ts|jddk7r*|jd xsi}|jd xsg}|jd xsi}i}|D]}t|tst |jd xsd j } |jdxsi} t | jdxsd j } | s| || <|jdxsgD]} t| tst | jdxsd j } |j| stjd| h |j| ||d{}||xjdz c_ |j|d{|jdxsgD]H}t|tstjd|jd|jdJ'Ty7#t$rtjd| YCwxYw7#t$rtjd| YkwxYww)uWalk a verified Meta webhook payload and dispatch each message. Payload shape (truncated): {object, entry: [{id, changes: [{value: {messages, contacts, statuses, metadata}, field: "messages"}]}]} We surface ``messages`` events as MessageEvents; ``statuses`` events (sent/delivered/read/failed) are logged but not dispatched — the agent doesn't currently consume delivery receipts and forwarding them would create noisy synthetic events. objectwhatsapp_business_accountz6[whatsapp_cloud] ignoring non-WABA payload (object=%r)Nrchangesfieldrrcontactsr wa_idrFprofilerlrz-[whatsapp_cloud] duplicate wamid %s, skippingz3[whatsapp_cloud] failed to build event for wamid %sr"z3[whatsapp_cloud] handle_message raised for wamid %sstatusesz![whatsapp_cloud] status %s for %sr) r5rrrrrir3r_build_message_event_from_cloudrrrhandle_message)rrrchangerrr contacts_by_waidcontactrrrl raw_messagereventrs r.rz&WhatsAppCloudAdapter._dispatch_payloads ;;x $? ? LLH H%  [[)/RH EeT*))I.4"E !&$/::g&*4 7+1r 99Z06B 99Z06B46 '7G%gt4  G 4 :;AACE%kk)4:Gw{{628b9??AD26(/7$)99Z#8#>B$K%k48   5 ;<BBDE,,U3 K!!!&*&J&J')98'!} ((A-("11%888;$P$ii 39rF!&$/ ?"JJx0"JJt,E H J!% ! ((Q!! !9$((Q!sE*K8-BK82J*J( J* K8&K:K ;K?*K8*>K8(J**K K8 K K8KK5 1K84K5 5K8ct K|jdxsi}|jdxs|jdxsi}t|jdxsdj}|syt|jdxsdj}|j|stj d|xsd |y |j d r0|jd d }t|dk7ry|\}} } |jj| d} | stjd| y ddl m } | dk(ro ddl m} | | }|stjd| y| |j| < |j%t|jdxsddd{y t'| }t|jdxst|dz}| | |}|stjd| yy |j dr|jd d }t|dk7ry|\}}} |j*j|d} | stjd|y| d vr| |j*|<y dd!lm}|| | }|stjd#|  | d$k(rd%nd&}|j%t|jdxsd|d{y |j d(r|jd d }t|dk7ry|\}} }|j0j|d} | stjd)|y| d*vr| |j0|<y dd+lm} |j7| || d{}|r8 |j%t|jdxsd|d{y y y#t$rtj dYywxYw#t $rtj#d| d}YwxYw7u#t $rtj#dYy wxYw#t($r(tj d| | |j| <YywxYw#t$rtj d"YywxYw7#t $rtj#d'Yy wxYw#t$rtj d,YywxYw7W#t $rtj#d-Yy wxYw7E#t $rtj#d.Yy wxYww)/u9Route an inbound interactive reply to the matching resolver. Returns True if the tap was claimed (caller should drop the webhook entry without dispatching a fresh conversation turn). Returns False when the id has no recognized prefix, no live state entry, or the resolver itself reports no waiter — in those cases the caller falls back to standard text-event dispatch, which treats the button title as a normal user message. That graceful fallback covers stale-tap and cross-process-restart scenarios. Dispatch table: ``cl::`` → resolve_gateway_clarify ``appr::approve|deny`` → resolve_gateway_approval ``sc::`` → slash_confirm.resolve r! button_reply list_replyrrFFfromzM[whatsapp_cloud] Rejected unauthorized interactive tap from %s (button_id=%r)z Tr8r9r*Nuj[whatsapp_cloud] clarify tap with no matching state (clarify_id=%s) — likely stale; falling back to textr)resolve_gateway_clarifyzL[whatsapp_cloud] clarify resolver unavailable; falling back to text dispatchother)mark_awaiting_textz1[whatsapp_cloud] mark_awaiting_text failed for %sz\[whatsapp_cloud] clarify 'Other' tap but entry missing (clarify_id=%s); falling back to textu✏️ Type your answer:z,[whatsapp_cloud] clarify other-prompt failedz3[whatsapp_cloud] clarify tap had non-int choice: %rr;r"u][whatsapp_cloud] clarify resolver reported no waiter (clarify_id=%s) — falling back to textrXul[whatsapp_cloud] approval tap with no matching state (approval_id=%s) — likely stale; falling back to text)approvedeny)resolve_gateway_approvalz.[whatsapp_cloud] approval resolver unavailableub[whatsapp_cloud] approval resolver reported no waiter (session_key=%s) — likely already resolvedru ✅ Approved.u ❌ Denied.z([whatsapp_cloud] approval confirm failedzsc:uZ[whatsapp_cloud] slash_confirm tap with no matching state (confirm_id=%s) — likely stale)oncealwayscancel) slash_confirmz3[whatsapp_cloud] slash_confirm resolver unavailablez-[whatsapp_cloud] slash_confirm.resolve failedz+[whatsapp_cloud] slash_confirm reply failed)r5rir3rrrrr2r(rpoprtools.clarify_gatewayr ImportErrorrrrrrrr)rtools.approvalrrtoolsrresolve)rr r interinner button_idrpartsr~rNchoicerOrrflippedr response_textresolvedrarcount confirm_textrf_slash_confirm_mod result_texts r._dispatch_interactive_replyz0WhatsAppCloudAdapter._dispatch_interactive_reply`st* .4" .)JUYY|-DJ $-2.446  /526<<> 55i@ NN)([      &OOC+E5zQ$) !Az6--11*dCK M  I $H0##J/U))KOOF39r:2  &k  ' 2 Bc#'lCM.z=IH ?@J    (OOC+E5zQ%* "A{F3377 TJK N 009D))+6 C -[&AE C  M'-':O iiKOOF$;$Ar BLQQQ    &OOC+E5zQ$) !Avz3377 DIK 78B998C))*5 E  $6$>$>V% T))C (?(E2$F TTT { 4  &!$$$K"$G $,!U$$%STU  I 3>##J/ Z D  "R M  !KL M, I      !PQ  U T$$%RSTsD4T87O=T8O8(T8:1P#+P ,P#0T82 Q=CT8 Q;!T84:R".R/R"3BT86S=S-S*S-T81T T TT8O52T84O55T88!PT8PT8 P##QT8QT8.Q85T87Q88T8;RT8RT8R""ST8ST8S'$T8&S''T8*S--T T8 TT8TT52T84T55T8c V Kt|jdxsdj}|dk(r|j||d{}|ryd}|dk(r4|jdxsi}t|jdxsd}n|dvr|dk(r2t|jdxsijdxsd}n|jdxsi}|jd xs|jd xsi} t| jd xsd}n7|d vr3|j|xsi} t| jd xsd}tj tj tjtjtjtjtj tj tj tj tj d j|tj } t|jdxsdj} |j| d} |jd} | r'tjd| |jdy| }|| d|d}|j|syg}g}|d vr2|j|xsi} t| jdxsdj}t| jdxsdj}|rd}|r t|}|j||d{\}}|rB|j!||j!|xs|xsdtj#d||ntjd|||dk(r6t| jdxsdj}|r|sd|d}d}|dk(r|r|D]}t%|j&j}|dvs+ t%|j)j*}||kDrtj#d |||mt%|j-d!d"#}t%|j.}d$|d%|}|r|d&|n|}|jd(xsi}t|jdxsdjxsd} d}!d}"| rwt5j6|| }!t|jdxsdj}#t|jd)xsdj}$|#r|$r|#|$k(}"|j9|| xs|d*| | xsd+}%t|jdxsdxsd}&|&r8|r6|j;|j<||&|rt5j>||&|tA|| |%||&| |!|"||, S77#t0$rtj3d'|Y,wxYww)-uConvert a Cloud-API message object into a Hermes MessageEvent. Phase 4 expands beyond text to download inbound media (image, video, audio/voice, document, sticker) by ``media_id`` via the two-step Graph endpoint. Cached files are populated into ``media_urls`` / ``media_types`` so the agent's vision and STT layers see them. Text-readable documents (.txt, .md, .json, source code, etc.) are read and prepended to the message body up to 100KB — same heuristic the Baileys adapter uses. Returns None if the message is filtered out by the mixin's gating (broadcast filter, allow-list, mention requirements). rrr!NrFr,>r=r!r=rrr;>rrrvoicerrr) rrrrr1rrr=r!locationrrchatu[whatsapp_cloud] received group-shaped message (chat=%s, wamid=%s) — group support is not yet implemented; dropping. Use the Baileys whatsapp adapter for group chats.rF)chatIdsenderIdisGroupr,r{rrz,[whatsapp_cloud] cached inbound %s media: %sum[whatsapp_cloud] failed to download inbound %s (id=%s) — agent will see message metadata but not the binaryrrz [Document: ]r> .js.md.py.ts.css.csv.log.txt.xml.yml.html.json.yamlz?[whatsapp_cloud] skipping text injection for %s (%d bytes > %d)rr)encodingrz [Content of z]: r6z1[whatsapp_cloud] failed to read document text: %srdisplay_phone_numberrk)r  chat_name chat_typeuser_id user_name) r message_typerr rr. reply_to_textreply_to_is_own_message media_urls media_types)!rir5r4r/rTEXTPHOTOVIDEOVOICEDOCUMENTr3rr_should_process_messager;rrKrrsuffixstatst_size read_textrlrrrlookup build_sourcerrr r )'rr r r  msg_type_strhandledr,rr#r$rKr sender_name chat_fieldr  gating_datarNrOr inbound_mimer local_pathdl_mimefnameMAX_TEXT_INJECT_BYTESdoc_pathr file_sizer# display_name injectionr reply_to_idrLreply_to_is_own quoted_from our_numberrrs' r.rz4WhatsAppCloudAdapter._build_message_event_from_cloud8s&;??62 &**9b9 !__V,  NNDKOOD1    !  ++K8!# !# V VOOL17RE599T?0b1779Huyy5;<BBDL,\:H,0,I,Ix-J-'# G%%j1&&w'\,'\B\]KKF$j NNM$h  :- * 5 ;<BBDET!,UG15 !+ : %*& 8n++113$(N$7$7$9$A$A $'<<"KK!2 ()5J %"&x.":":%,Y#;#(,H~':': &2<.WI$N ;?)D7Y) D//),2'++d+1r288:Bd '+  +227KHMgkk&17R8>>@KX\\*@AGRHNNPJz"-";""!,W!)T # KOOD)/R08D W   d>> O&&wt<%# +'$3!#  ul'b#((O$sYAX) W= LX)XCX)%AX%X)&AX*EX)X)X&"X)%X&&X))rr )rrreturnri)rrirnri)rz'OrderedDict[str, str]'rrirrirnNone)rnri)rset[str]rnrp)rrirnrrnr)rrrnr)rnror) r rir#rir  Optional[str]r Optional[Dict[str, Any]]rnr)N)r rirnro)r rir"Dict[str, Any]r rrrnr))rrir'rrrnri)i)r rirLrirMzOptional[list]rNrirOrir rsrnr)zdangerous commandNTF)r rir\rirOrirCrir rsr]rr^rrnr)r rir;rirerirOrirfrir rsrnr)r,rtrrrrnri)r rirnrt)ryrirzrir{rrrn#tuple[Optional[str], Optional[str]])r rirzrirrrrrrrrrrrrr rrrnr)r rirrirzrirrrrrrr rrr{rrrnr) r rirrirrrr rrrnr) r rirrirrrr rrrnr) r rirrirrrr rrrnr) r rirrirrrr rrrnr)NNN) r riryrirrrrrrr rrrnr)rrirnrr)rrirrrrnrv)r*z 'web.Request'rnz'web.Response')rbytesrrirnr)rrirnr)rrtrnro)r rtr rrnr)r rtr rr rtrnzOptional[MessageEvent])/__name__ __module__ __qualname____doc__splits_long_messagesrf staticmethodrurrrr}rrrrrrrr#r(r,rUrbrgrrmrrrrrrrrrrrrrrrrrr/r __classcell__)rs@r.rCrCs<  w@t99V &&  1 + .5:<| "(#'-1 LDLDLD LD + LD  LD|4V#' 9D9D)9D 9D  9Dv 1 1)).2VVV V  V  V+V Vz/-1 $"777 7  7 + 777 7@.2... .  .  .+. .`00/$( ===! = - =H#'$(!%"&"&L:L:L:  L: " L:L: L: L: L:h"&"&"&#'% % %  %  %  %  % !%  % V"&"&          ,"&"&             ""&"&             ""&"& 1 1 1  1  1  1 n"&#'"&      !      $$L  "#' \+\+ \+ - \+@ G>A(H 4(ZxV#V)V  Vp` #` )` ! ` ` r<rC)r*rr+rrrnrw)r8rirnrrrq)?r{ __future__rr%rrloggingr6r{rshutilrY collectionsrpathlibrtypingrrraiohttpr r>rrr?gateway.configr r gateway.platforms.baser r rrr!gateway.platforms.whatsapp_commonrgatewayrhermes_constantsr getLoggerrxrryrprsrvrrrrrurxwhichrr __annotations__r/r;rrArCr@r<r.rs'R#  #&& O 4D#+   8 $ *-(  $  !   *  v||H%  6"N 6&N+KMcde1Y 02EY E CO Es$C6D6 DD DD