build(whatsapp): keep audio deps external

CHANGELOG.md

@@ -54,6 +54,7 @@ Docs: https://docs.openclaw.ai
 - fix(memory-wiki): require admin scope for ingest [AI]. (#80897) Thanks @pgondhi987.
 - memory-wiki: require write scope for Obsidian search [AI]. (#80904) Thanks @pgondhi987.
 - WhatsApp: externalize the channel as a ClawHub/npm plugin outside the core npm runtime bundle, and bump Baileys to `7.0.0-rc11` so libsignal resolves from the registry instead of a GitHub tarball.
+- WhatsApp: keep optional audio decoding dependencies local to the external plugin so the core npm install no longer pulls WhatsApp-only media helpers.
 - Build: skip copied metadata for bundled plugins that are excluded from build entries, preventing update/status rebuilds from advertising missing QQ Bot runtime files. (#80925)
 - Control UI/sessions: nest subagent sessions under their parent session in the session picker dropdown using a visual `└─ ` prefix, making the parent-child relationship clear. Fixes #77628. (#78623) Thanks @chinar-amrutkar.
 - fix(config): reject auto-managed meta.lastTouched\* paths in config set/unset (#80856). Thanks @ai-hpc

config/knip.config.ts

@@ -66,7 +66,6 @@ const rootBundledPluginRuntimeDependencies = [
   "@slack/bolt",
   "@slack/types",
   "@slack/web-api",
-  "audio-decode",
   "grammy",
   "linkedom",
   "minimatch",

docs/channels/whatsapp.md

@@ -16,8 +16,8 @@ Status: production-ready via WhatsApp Web (Baileys). Gateway owns linked session
 - Dev channel + git checkout: defaults to the local plugin path.
 - Stable/Beta: installs the official `@openclaw/whatsapp` plugin from ClawHub
   first, with npm as the fallback.
-- The WhatsApp runtime is distributed outside the core OpenClaw npm package
-  because its Baileys dependency chain uses GPL-licensed `libsignal`.
+- The WhatsApp runtime is distributed outside the core OpenClaw npm package so
+  WhatsApp-specific runtime dependencies stay with the external plugin.
 
 Manual install stays available:
 

extensions/whatsapp/package.json

@@ -8,6 +8,7 @@
   },
   "type": "module",
   "dependencies": {
+    "audio-decode": "2.2.3",
     "baileys": "7.0.0-rc11",
     "https-proxy-agent": "9.0.0",
     "jimp": "1.6.1",

package.json

@@ -1742,7 +1742,6 @@
     "@slack/types": "2.21.1",
     "@slack/web-api": "7.15.2",
     "ajv": "8.20.0",
-    "audio-decode": "2.2.3",
     "chalk": "5.6.2",
     "chokidar": "5.0.0",
     "commander": "14.0.3",

pnpm-lock.yaml

@@ -116,9 +116,6 @@ importers:
       ajv:
         specifier: 8.20.0
         version: 8.20.0
-      audio-decode:
-        specifier: 2.2.3
-        version: 2.2.3
       chalk:
         specifier: 5.6.2
         version: 5.6.2
@@ -1655,6 +1652,9 @@ importers:
 
   extensions/whatsapp:
     dependencies:
+      audio-decode:
+        specifier: 2.2.3
+        version: 2.2.3
       baileys:
         specifier: 7.0.0-rc11
         version: 7.0.0-rc11(patch_hash=a9aea1790d2c65b1ae543c77faca4119bbfb91ee3b6ca6c38d1cad4f5702ada2)(audio-decode@2.2.3)(jimp@1.6.1)(sharp@0.34.5)