nuc/.artifacts/2026-02-17_00-00_openclaw-whatsapp-management.md

# OpenClaw WhatsApp Management System — Complete Reference

**Date:** 2026-02-17 00:00
**Context:** Comprehensive operational guide for the WhatsApp monitoring, querying, and messaging system built on OpenClaw

## Architecture Overview

```
WhatsApp message arrives (any contact)
         │
    ┌────┴────────────────────┐
    │                         │
    ▼                         ▼
  Hook: whatsapp-logger     allowFrom filter
  (captures ALL messages)   (OWNER ONLY: +34678000075)
    │                         │
    ▼                         ▼
  JSONL files               Agent session
  (~/.openclaw/             (only owner can
   whatsapp-monitor/)        interact with AI)
    │
    ├─── wa-query.js (on-demand queries, UNTRUSTED markers)
    │
    ├─── sidecar.py (host) ──→ PostgreSQL (Coolify, :5450)
    │         │                     │
    │         └── index.json        └── CloudBeaver queryable
    │              (refreshed every 5 min)
    │
    ├─── Hook: whatsapp-context (injects unread count at session start)
    │
    └─── Cron digests (09:00 + 21:00 UTC → WhatsApp summary to owner)
```

## Components

### 1. Logger Hook (inside container)

| Property | Value |
|----------|-------|
| **File** | `~/.openclaw/hooks/whatsapp-logger/handler.ts` |
| **Size** | ~160 lines |
| **Event** | `message_received` |
| **Purpose** | Captures ALL incoming WhatsApp messages to JSONL files |

**What it does:**
- Writes to daily JSONL: `~/.openclaw/whatsapp-monitor/messages-YYYY-MM-DD.jsonl`
- Maintains rolling window: `~/.openclaw/whatsapp-monitor/latest-100.jsonl`
- Auto-updates `contacts.json` (senderName, lastSeen, messageCount)
- Detects media types (`audio`, `image`, `video`, `document`, `sticker`)
- Flags voice notes (`isVoiceNote: true`)
- Generates deterministic SHA256 message IDs
- In-memory deduplication (Set of last 1000 IDs)

**JSONL entry structure:**
```json
{
  "id": "sha256-hash",
  "ts": "2026-02-16T15:30:00Z",
  "epoch": 1771350600000,
  "channel": "whatsapp",
  "from": "+34612345678",
  "fromE164": "+34612345678",
  "senderName": "María García",
  "content": "Hola, necesito la factura",
  "mediaType": null,
  "isVoiceNote": false,
  "isGroup": false,
  "messageId": "3EB0...",
  "read": false
}
```

### 2. Query Tool (inside container)

| Property | Value |
|----------|-------|
| **File** | `~/.openclaw/workspace/tools/wa-query.js` |
| **Size** | ~611 lines |
| **Runtime** | Node.js (no npm dependencies) |
| **Execution** | Agent runs via `exec` tool: `node tools/wa-query.js <command>` |

**Commands:**

| Command | Description | Example |
|---------|-------------|---------|
| `unread` | Unread messages grouped by contact | `node wa-query.js unread` |
| `from "Name"` | Messages from a contact (fuzzy match) | `node wa-query.js from "María"` |
| `search "keyword"` | Full-text search across messages | `node wa-query.js search "factura"` |
| `summary N` | Last N hours summary | `node wa-query.js summary 24` |
| `contacts` | List known contacts | `node wa-query.js contacts` |
| `contact-update +34... --name "X" --relationship "Y"` | Update contact info | `node wa-query.js contact-update +34612345678 --name "María" --relationship "client"` |
| `mark-read all\|+34...` | Mark messages as read | `node wa-query.js mark-read all` |
| `stats` | Message statistics | `node wa-query.js stats` |
| `resolve-contact "Name"` | Resolve contact for outbound messaging | `node wa-query.js resolve-contact "María"` |
| `help` | Show all commands | `node wa-query.js help` |

**Security features:**
- All content wrapped: `[UNTRUSTED from Name (+number)] content [/UNTRUSTED]`
- Content truncated to 500 chars per message
- Total output capped at 8000 chars
- No raw message content treated as agent instructions

### 3. Contact Directory

| Property | Value |
|----------|-------|
| **File** | `~/.openclaw/whatsapp-monitor/contacts.json` |
| **Auto-populated** | Yes, from logger hook (senderName, lastSeen, messageCount) |
| **Enrichment** | Via `wa-query.js contact-update` or natural language to agent |

**Entry structure:**
```json
{
  "+34612345678": {
    "name": "María García",
    "relationship": "client",
    "language": "es",
    "tone": "formal",
    "notes": "Whyrating project, handles invoices",
    "firstSeen": "2026-02-16T10:00:00Z",
    "lastSeen": "2026-02-16T15:30:00Z",
    "messageCount": 12
  }
}
```

**Known contacts with messaging rules:**

| Contact | Language | Tone | Notes |
|---------|----------|------|-------|
| Nedas Mikelionis | English | Couple/pet names | Alex's partner. Pet names OK ("potato", "bf") |
| Aleksandra Bakaite | English | Casual but PRUDENT | Nedas's best friend. Never reveal private info |
| DCD Miguel | Spanish | Casual | Normal casual Spanish |
| Mondri / Mondragón | Spanish | Trolling/banter | Banter style |

### 4. Sidecar Service (NUC host)

| Property | Value |
|----------|-------|
| **File** | `~/.openclaw/whatsapp-monitor/sidecar.py` |
| **Size** | ~414 lines |
| **Runtime** | Python 3.12 with pg8000 (in venv) |
| **Systemd** | `whatsapp-monitor.service` |
| **Memory** | ~14 MB RSS |

**What it does:**
- Polls JSONL files every 30 seconds for new entries
- Inserts messages into PostgreSQL
- Generates `index.json` every 5 minutes (unread counts per contact)
- Thread detection (groups messages from same contact within 2-hour windows)
- Syncs contacts from contacts.json into PG contacts table
- Tracks file offsets in `.sidecar-state.json`

**Systemd management:**
```bash
# Status
ssh nuc "systemctl status whatsapp-monitor"

# Start/stop/restart
ssh nuc "echo '7vXHpSTD.' | sudo -S systemctl start whatsapp-monitor"
ssh nuc "echo '7vXHpSTD.' | sudo -S systemctl stop whatsapp-monitor"
ssh nuc "echo '7vXHpSTD.' | sudo -S systemctl restart whatsapp-monitor"

# Logs
ssh nuc "journalctl -u whatsapp-monitor -n 50 --no-pager"
```

### 5. PostgreSQL Database

| Property | Value |
|----------|-------|
| **Container** | `akwgskos0woc4w0coc8ssks4` |
| **Image** | `postgres:16-alpine` |
| **Host Port** | `5450` |
| **User** | `openclaw` |
| **Password** | `OpenClaw2026!` |
| **Database** | `whatsapp_monitor` |
| **Coolify UUID** | `akwgskos0woc4w0coc8ssks4` |
| **Internal URL** | `postgres://openclaw:OpenClaw2026%21@akwgskos0woc4w0coc8ssks4:5432/whatsapp_monitor` |
| **Host URL** | `postgres://openclaw:OpenClaw2026!@127.0.0.1:5450/whatsapp_monitor` |

**Tables:**

```sql
-- Messages
CREATE TABLE messages (
    id TEXT PRIMARY KEY,
    ts TEXT NOT NULL,
    epoch INTEGER NOT NULL,
    from_number TEXT NOT NULL,
    sender_name TEXT,
    content TEXT NOT NULL,
    media_type TEXT,
    is_voice_note INTEGER DEFAULT 0,
    is_group INTEGER DEFAULT 0,
    read INTEGER DEFAULT 0,
    thread_id INTEGER
);

-- Contacts
CREATE TABLE contacts (
    e164 TEXT PRIMARY KEY,
    name TEXT,
    relationship TEXT DEFAULT '',
    language TEXT DEFAULT '',
    tone TEXT DEFAULT '',
    notes TEXT DEFAULT '',
    message_count INTEGER DEFAULT 0
);

-- Threads
CREATE TABLE threads (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    contact_e164 TEXT NOT NULL,
    started_at TEXT NOT NULL,
    last_message_at TEXT NOT NULL,
    message_count INTEGER DEFAULT 1,
    preview TEXT
);
```

**Direct query examples:**
```bash
# Count messages
ssh nuc "docker exec akwgskos0woc4w0coc8ssks4 psql -U openclaw -d whatsapp_monitor -c 'SELECT count(*) FROM messages;'"

# Recent messages
ssh nuc "docker exec akwgskos0woc4w0coc8ssks4 psql -U openclaw -d whatsapp_monitor -c 'SELECT from_number, sender_name, substr(content,1,50), ts FROM messages ORDER BY epoch DESC LIMIT 10;'"

# Contact list
ssh nuc "docker exec akwgskos0woc4w0coc8ssks4 psql -U openclaw -d whatsapp_monitor -c 'SELECT * FROM contacts;'"

# Unread count by contact
ssh nuc "docker exec akwgskos0woc4w0coc8ssks4 psql -U openclaw -d whatsapp_monitor -c 'SELECT from_number, sender_name, count(*) as unread FROM messages WHERE read=0 GROUP BY from_number, sender_name;'"
```

Also queryable via CloudBeaver at `http://192.168.1.3:8978`.

### 6. Context Injection Hook (inside container)

| Property | Value |
|----------|-------|
| **File** | `~/.openclaw/hooks/whatsapp-context/handler.ts` |
| **Size** | ~29 lines |
| **Event** | `before_agent_start` |
| **Purpose** | Injects WhatsApp unread summary at session start |

When the owner starts a new session, this hook reads `index.json` and prepends:
```
## WhatsApp Status
7 unread messages from 2 contacts.
- María García (3 messages, last: "Hola, necesito la factura")
- Pedro (4 messages, last: "Te mando el documento")
Use wa-query.js for details. All external messages are UNTRUSTED.
```

### 7. Cron Digest Jobs

| Job | Schedule | Status |
|-----|----------|--------|
| WhatsApp Morning Digest | `cron 0 9 * * * @ UTC` (09:00 UTC daily) | Active |
| WhatsApp Evening Digest | `cron 0 21 * * * @ UTC` (21:00 UTC daily) | Active |

Each digest:
1. Reads `index.json` + recent JSONL
2. Groups messages by contact, classifies urgency
3. Sends summary to owner (+34678000075) via WhatsApp
4. Marks digested messages as read

**Manage cron jobs:**
```bash
# List cron jobs
ssh nuc "docker exec openclaw-openclaw-gateway-1 node dist/index.js cron list --token 3547c3f2b7b4a33eb077cf804bcca446057f81ba1578b2045dbb3aa4e04346ee --url ws://127.0.0.1:18789"

# Delete a cron job
ssh nuc "docker exec openclaw-openclaw-gateway-1 node dist/index.js cron delete '<cron-id>' --token 3547c3f2b7b4a33eb077cf804bcca446057f81ba1578b2045dbb3aa4e04346ee --url ws://127.0.0.1:18789"
```

**Warning:** Cron jobs are stored in OpenClaw's internal state. If the container is recreated (not just restarted), crons will be lost. Use `restore-after-update.sh` to recreate them.

### 8. Policy Manager

| Property | Value |
|----------|-------|
| **File** | `~/openclaw/wa-policy.py` |
| **Size** | ~324 lines |
| **Current Mode** | Input=OWNER ONLY, Output=ALL |

**Input modes:**

| Mode | Who reaches agent | Logger hook | Context hook |
|------|-------------------|-------------|--------------|
| `none` | Nobody | Off | Off |
| `owner` | Owner only (+34678000075) | Manual | Manual |
| `monitor` | Owner only | Forced ON | Forced ON |
| `allowlist` | Specified numbers | Manual | Manual |
| `all` | Everyone (dangerous!) | Manual | Manual |

**Usage:**
```bash
# Check current status
ssh nuc "cd ~/openclaw && python3 wa-policy.py status"

# Set monitor mode (recommended)
ssh nuc "cd ~/openclaw && python3 wa-policy.py set-input monitor"

# Change output mode
ssh nuc "cd ~/openclaw && python3 wa-policy.py set-output owner"
```

## Outbound Messaging Workflow

When the owner says "tell María I'll be late":

1. **Resolve contact**: Agent runs `node wa-query.js resolve-contact "María"`
2. **Draft message**: Using contact's `language` and `tone` fields
3. **Show confirmation**:
   ```
   Draft message for:
   Name: María García
   Number: +34612345678
   Language: Spanish (formal tone)

   Message: "Hola María, voy a llegar un poco tarde a la reunión. Disculpa las molestias. (by BotMou)"

   Send? [agent waits for owner confirmation]
   ```
4. **On approval**, sends via OpenClaw CLI:
   ```bash
   docker exec openclaw-openclaw-gateway-1 node dist/index.js message send \
     --channel whatsapp --target +34612345678 \
     --message "Hola María, voy a llegar un poco tarde. (by BotMou)"
   ```

**Mandatory rules:**
- ALL messages MUST end with `(by BotMou)`
- Agent MUST show contact number + name before sending
- Agent MUST wait for owner confirmation before sending
- Match contact's language and tone
- NEVER say anything flirty/romantic to anyone except Nedas
- NEVER reveal private info across contact domains

## File Inventory (NUC)

| File | Location | Size | Purpose |
|------|----------|------|---------|
| Logger hook | `~/.openclaw/hooks/whatsapp-logger/handler.ts` | ~160 lines | Captures all messages |
| Logger HOOK.md | `~/.openclaw/hooks/whatsapp-logger/HOOK.md` | Frontmatter | Hook metadata |
| Context hook | `~/.openclaw/hooks/whatsapp-context/handler.ts` | ~29 lines | Injects unread count |
| Context HOOK.md | `~/.openclaw/hooks/whatsapp-context/HOOK.md` | Frontmatter | Hook metadata |
| Query tool | `~/.openclaw/workspace/tools/wa-query.js` | ~611 lines | On-demand queries |
| Sidecar | `~/.openclaw/whatsapp-monitor/sidecar.py` | ~414 lines | JSONL → PostgreSQL bridge |
| Policy manager | `~/openclaw/wa-policy.py` | ~324 lines | Input/output policy |
| Contacts | `~/.openclaw/whatsapp-monitor/contacts.json` | Variable | Contact directory |
| Index | `~/.openclaw/whatsapp-monitor/index.json` | Variable | Pre-computed unread summary |
| Sidecar state | `~/.openclaw/whatsapp-monitor/.sidecar-state.json` | Small | File offset tracking |
| Daily JSONL | `~/.openclaw/whatsapp-monitor/messages-YYYY-MM-DD.jsonl` | Growing | Daily message archive |
| Rolling JSONL | `~/.openclaw/whatsapp-monitor/latest-100.jsonl` | ~100 entries | Recent messages window |
| Backup script | `~/.openclaw/whatsapp-monitor/backup-config.sh` | Script | Pre-update backup |
| Restore script | `~/.openclaw/whatsapp-monitor/restore-after-update.sh` | Script | Post-update restore |
| TOOLS.md | `~/.openclaw/workspace/TOOLS.md` | Large | Agent instructions (includes WA section) |
| Systemd unit | `/etc/systemd/system/whatsapp-monitor.service` | Unit file | Sidecar auto-start |
| Python venv | `~/.openclaw/whatsapp-monitor/.venv/` | Directory | pg8000 + dependencies |

## OpenClaw Config (relevant sections)

**Hooks (`~/.openclaw/openclaw.json`):**
```json
{
  "hooks": {
    "internal": {
      "enabled": true,
      "entries": {
        "WhatsApp Message Logger": { "enabled": true },
        "WhatsApp Context Injector": { "enabled": true }
      }
    }
  }
}
```

**WhatsApp channel:**
```json
{
  "channels": {
    "whatsapp": {
      "dmPolicy": "allowlist",
      "allowFrom": ["+34678000075"],
      "sendReadReceipts": false
    }
  }
}
```

## Operational Commands Quick Reference

```bash
# === Status Checks ===

# Sidecar status
ssh nuc "systemctl status whatsapp-monitor --no-pager"

# PostgreSQL row counts
ssh nuc "docker exec akwgskos0woc4w0coc8ssks4 psql -U openclaw -d whatsapp_monitor -c 'SELECT (SELECT count(*) FROM messages) as messages, (SELECT count(*) FROM contacts) as contacts, (SELECT count(*) FROM threads) as threads;'"

# Current unread summary (index.json)
ssh nuc "cat ~/.openclaw/whatsapp-monitor/index.json | python3 -m json.tool"

# OpenClaw gateway logs
ssh nuc "docker logs openclaw-openclaw-gateway-1 2>&1 | tail -30"

# Cron job list
ssh nuc "docker exec openclaw-openclaw-gateway-1 node dist/index.js cron list --token 3547c3f2b7b4a33eb077cf804bcca446057f81ba1578b2045dbb3aa4e04346ee --url ws://127.0.0.1:18789"

# Policy status
ssh nuc "cd ~/openclaw && python3 wa-policy.py status"

# === Message Queries (via wa-query.js inside container) ===

ssh nuc "docker exec openclaw-openclaw-gateway-1 node tools/wa-query.js unread"
ssh nuc "docker exec openclaw-openclaw-gateway-1 node tools/wa-query.js from 'María'"
ssh nuc "docker exec openclaw-openclaw-gateway-1 node tools/wa-query.js search 'factura'"
ssh nuc "docker exec openclaw-openclaw-gateway-1 node tools/wa-query.js summary 24"
ssh nuc "docker exec openclaw-openclaw-gateway-1 node tools/wa-query.js contacts"
ssh nuc "docker exec openclaw-openclaw-gateway-1 node tools/wa-query.js stats"

# === Send a Message ===

ssh nuc "docker exec openclaw-openclaw-gateway-1 node dist/index.js message send --channel whatsapp --target '+34612345678' --message 'Hello! (by BotMou)'"

# === Maintenance ===

# Restart sidecar
ssh nuc "echo '7vXHpSTD.' | sudo -S systemctl restart whatsapp-monitor"

# Restart OpenClaw gateway
ssh nuc "cd ~/openclaw && docker compose restart openclaw-gateway"

# Backup before update
ssh nuc "bash ~/.openclaw/whatsapp-monitor/backup-config.sh"

# Restore after update
ssh nuc "bash ~/.openclaw/whatsapp-monitor/restore-after-update.sh"
```

## Troubleshooting

### Messages not appearing in JSONL
1. Check logger hook is enabled: `cat ~/.openclaw/openclaw.json | python3 -c "import sys,json; c=json.load(sys.stdin); print(c.get('hooks',{}).get('internal',{}).get('entries',{}).get('WhatsApp Message Logger',{}))" `
2. Check gateway logs for hook errors: `docker logs openclaw-openclaw-gateway-1 2>&1 | grep -i hook`
3. Verify the message was received by OpenClaw (not blocked by WhatsApp)

### Sidecar not ingesting messages
1. Check systemd status: `systemctl status whatsapp-monitor`
2. Check sidecar logs: `journalctl -u whatsapp-monitor -n 30 --no-pager`
3. Verify PG connection: `docker exec akwgskos0woc4w0coc8ssks4 psql -U openclaw -d whatsapp_monitor -c 'SELECT 1;'`
4. Check `.sidecar-state.json` for stale offsets (delete to force re-read)

### index.json stale or empty
1. Sidecar generates it every 5 minutes — wait for next cycle
2. Check sidecar is running (see above)
3. Force regeneration: restart sidecar

### Cron digests not firing
1. Verify crons exist: `docker exec openclaw-openclaw-gateway-1 node dist/index.js cron list --token TOKEN --url URL`
2. If missing, container was likely recreated — run restore script
3. Check gateway logs around scheduled time

### wa-query.js returns no results
1. Verify JSONL files exist: `ls -la ~/.openclaw/whatsapp-monitor/messages-*.jsonl`
2. Check latest-100.jsonl has entries: `wc -l ~/.openclaw/whatsapp-monitor/latest-100.jsonl`
3. For `from` queries, try exact phone number: `node wa-query.js from "+34612345678"`

### Context hook not injecting
1. Verify index.json exists and has content
2. Check hook is enabled in openclaw.json
3. Check gateway logs for `whatsapp-context` errors

## Upgrade Protection

Full details in `.artifacts/2026-02-16_22-30_openclaw-upgrade-protection.md`.

**Before ANY OpenClaw update:**
1. Run backup: `bash ~/.openclaw/whatsapp-monitor/backup-config.sh`
2. Note cron count
3. Pull/update OpenClaw
4. Run restore: `bash ~/.openclaw/whatsapp-monitor/restore-after-update.sh`
5. Verify sidecar, hooks, crons, PG

**What survives updates (host volume mounts):** hooks, workspace tools, JSONL files, contacts.json, sidecar, PostgreSQL

**What may NOT survive:** cron jobs (internal state), openclaw.json schema changes, hook type API changes

## Related Artifacts

| Artifact | Content |
|----------|---------|
| `.artifacts/2026-02-16_22-00_whatsapp-monitoring-system-plan.md` | Original implementation plan |
| `.artifacts/2026-02-16_22-30_openclaw-upgrade-protection.md` | Upgrade protection strategy + backup/restore scripts |
| `.artifacts/2026-02-12_22-50_whatsapp-mcp-setup.md` | WhatsApp MCP server setup |
| `.artifacts/2026-02-12_02-30_openclaw-setup.md` | OpenClaw initial setup |
| `.artifacts/2026-02-16_21-30_communication-style-prompt-v2.md` | Communication style rules per contact |