WhatsMine - AI Omnichannel Marketing, Automation & Chatbot SaaS (WhatsApp, Messenger, SMS & Email) V2.0.0 Nulled

View hidden content is available for registered users!

WhatsMine - AI Omnichannel Marketing, Automation & Chatbot SaaS (WhatsApp, Messenger, SMS & Email) V2.0.0 Nulled
27 October 2026 — V2.0.0

- Before you update:
- WhatsMine 2.0 needs PHP 8.3 or newer (was 8.2). The framework is upgraded to Laravel 13, Inertia 3 and Vite 8. Switch your PHP version first (cPanel → MultiPHP Manager or your host's panel).
- Back up your files and database. After copying the files run php artisan migrate --force (16 new migrations; existing duplicate conversations and messages are merged automatically), then php artisan optimize:clear and php artisan queue:restart.
- Queue workers must listen on every queue: php artisan queue:work --queue=whatsapp,broadcast,ai,social,leads,automation,default. With only the default queue, campaign, WhatsApp, AI, automation, social and lead jobs never run.

- New:
- Prepaid wallet with Meta message charges: each plan chooses who pays Meta — the tenant's own WhatsApp Business card (you charge a platform fee only) or your platform wallet (Meta rate + your markup % + fee). Billable messages are charged once from Meta's status webhook pricing. Admin Meta rate table by market and category (editor + CSV import), wallet ledger with admin credit/debit, Stripe and PayPal top-ups, automatic top-ups with a saved Stripe card, low-balance alerts and usage alerts at 75/90/100 %. An empty wallet blocks WhatsApp sends and pauses campaigns.
- AI agents that take actions: chatbots can look up orders, create leads, add/remove tags, update contact fields, collect details, hand off to a human with an AI summary note and book appointments (Google Calendar, after the customer confirms). Each tool can be switched on per bot and every call is logged.
- OpenAI-compatible AI provider: Groq, DeepSeek, OpenRouter, Mistral, Together, xAI, Azure OpenAI, and Ollama / LM Studio at platform level. Live model lists from each provider, provider and model per chatbot, voice notes transcribed and answered, stay-on-topic guardrail (on by default), and the monthly AI token limit is enforced with fallback/hand-over instead of errors.
- Inbox AI assist: suggest a reply, summarize, translate and auto-label a conversation.
- Two-way SMS inbox: connect SMS numbers to the inbox and reply from it. Inbound messages and delivery statuses arrive on a per-number webhook URL (Twilio, Telnyx, Vonage, Plivo, MessageBird and Infobip, with signature checks).
- Website live chat: a native chat widget for any website (colour, title, greeting, position, allowed domains, optional WhatsApp link and name/email prompt). Chats land in the inbox and chatbots and automations answer them like any other channel.
- Comment automation: Facebook Page and Instagram comments trigger automations (platform, keyword and post filters), with public replies and private replies (comment-to-DM). New triggers for Instagram story mentions, click-to-WhatsApp / Messenger / Instagram ads, tag added and contact dates (birthdays, anniversaries). Ice breakers for Messenger and Instagram can be set from Inbox setup.
- WhatsApp Coexistence: onboard a number that stays on the WhatsApp Business app. Contacts and chat history are imported and messages sent from the phone app appear in the inbox.
- Team roles and permissions: built-in Administrator, Manager and Agent roles plus custom roles per workspace, covering billing, API tokens and webhooks, channel connect, contact delete/export, campaigns, automations, AI, social, leads, e-commerce, reports, team, settings, audit log and inbox visibility. Existing staff become Agents.
- Team inbox: teams/departments, automatic assignment (round-robin or lowest load), business hours with an away reply, SLA policies with breach alerts, snooze, bulk actions, full-text message search and CSAT surveys with a CSAT report.
- Contact identities and merge: one contact can hold several phone numbers, emails, WhatsApp user IDs/usernames, Messenger and Instagram IDs. Merge duplicate contacts from the list or the API, edit a contact's phone number, and GDPR export (ZIP) or erase a contact.
- Plans: switch modules on or off per plan (the sidebar hides switched-off modules), new limits for contacts, channel accounts and inbox agents, usage meters that follow each client's billing cycle, one-time setup fee (Stripe and PayPal), private plans, contact-sales plans and a switch to turn off public registration.
- Affiliate program: referral link per client, commission % globally or per plan, optional first-payment-only, and a pending → approved → paid ledger with bulk actions in the admin panel.
- Custom domains per client: verified by a DNS TXT record, with the client's own branding and login on that domain.
- MCP server: connect Claude Desktop, Cursor or Claude Code to a workspace with an API token to search conversations and contacts, send messages, manage tags and notes, and search knowledge bases.
- REST API: new endpoints for templates, media upload, tags, leads, channel accounts and team members, plus OpenAPI documentation at /docs/api for signed-in users.
- Outbound webhooks are now per workspace, with 11 new events (message sent and status, conversation created/assigned/status changed, lead created/updated/stage changed, order created/updated, template status updated).
- Tenant audit log: channel, social account, API token, webhook, role, member and contact actions, with filters and CSV export.
- Safer one-click updater: runs in small steps (check, download, verify, extract, server requirements, backup, install, update database, finish), checks PHP version, extensions and disk space before changing anything, backs up files, vendor/ and the database, and rolls back automatically if installing fails. New command php artisan update:rollback.
- Admin → System health page: PHP version and extensions, writable folders, storage link, APP_URL check, scheduler and per-queue worker heartbeat, mail, broadcaster and Meta app status. The installer explains MySQL connection errors with hosting-specific hints.
- Inbox works without Pusher: when no broadcaster is configured the inbox refreshes itself every few seconds.
- Messenger and Instagram: images, video, audio, files, locations, shared posts and reels, story mentions, quick replies and button taps are shown as what they are; reactions are attached to the message; team members can reply up to 7 days after the customer's last message (HUMAN_AGENT tag).
- WhatsApp: reactions, quoted replies, Flow answers, click-to-WhatsApp ad referrals, "request phone number" button, per-message Meta pricing, marketing opt-out (campaigns skip marketing templates for opted-out contacts) and user ID / number changes re-key the contact. Inbound media from every channel is downloaded as soon as it arrives (Meta deletes it after 7 days).
- Campaign send throttle per WhatsApp number (default 20 messages/second), with automatic back-off on Meta rate-limit errors and new paced / held / skipped recipient statuses.
- New command php artisan platformrune (scheduled daily) clears old webhook deliveries, AI runs and inbound webhook logs; periods set in config/retention.php.
- Landing page copy you have not edited is now shown in the visitor's language.

- Improvements & Fixes:
- Fixed the WhatsApp 24-hour window always showing as open.
- Fixed duplicate conversations for the same contact and channel account and duplicate messages from retried webhooks; starting a conversation reopens the existing one.
- Fixed chatbots reading the oldest 20 messages of a conversation instead of the latest.
- Fixed WhatsApp phone-number quality and display-name webhooks, template rejection reasons, and phone-number lookups that Meta rejected because of an undocumented field.
- Fixed a fresh install showing raw keys (admin.settings, client.inbox.setup...) instead of menu labels.
- Security: the 2FA QR code is now drawn on your server (it was loaded from an external QR service, which exposed the secret).
- Security: safe media downloads and upload extensions, team members can no longer take over the company account, custom domains need DNS ownership proof, GDPR erase cannot delete other files, MCP tools respect plan modules, limits and inbox visibility, AI order lookup no longer trusts a claimed email, OpenAI-compatible hosts are pinned, webchat is rate-limited per widget, the setup fee cannot be skipped, and API endpoints use the same permissions as the web app.
- Security: wallet top-ups check the currency, automatic top-ups are atomic, negative Meta rates are rejected on import, self-referrals are blocked and commissions are voided on refunds and chargebacks.
- Security: password-reset and verification links are built from APP_URL; forwarded IP and HTTPS headers from proxies are honoured, but X-Forwarded-Host is never trusted (set TRUSTED_PROXIES to restrict).
- Shared Meta token exchange and webhook subscription code for inbox setup, embedded signup and social connect.
- Refreshed translations across all 15 interface languages.
- Over 1,000 automated tests, plus performance and stability improvements.

View hidden content is available for registered users!

WhatsMine - AI Omnichannel Marketing, Automation & Chatbot SaaS (WhatsApp, Messenger, SMS & Email) V1.9.5 Nulled
30 September 2026 — V1.9.5

- New:
- Embedded Signup v4 ready: Meta retires Embedded Signup v2/v3 in October 2026 (v2 on 15 October). Create a new Facebook Login for Business configuration with the WhatsApp Embedded Signup variation, select your products (this sets it to v4) and paste its ID in Admin → Integrations → Meta App. The signup flow now reads Meta's new completion and cancel messages.
- Meta charges for WhatsApp service messages from 1 October 2026, including chatbot and AI replies. The WhatsApp setup page now reminds you to add a payment method to each WhatsApp Business Account so replies keep being delivered.
- New setting in Admin → Plans: choose what accounts without a subscription may use — unlimited access (default, unchanged) or your free plan's limits (subscription required if there is no free plan).
- Security: admins can now turn on two-factor authentication (sidebar → Two-Factor Authentication) and admin sign-in asks for the code; the REST API login (/api/v1/auth/login) requires a code field for accounts with two-factor authentication; the 2FA code check is rate-limited; and turning 2FA off from the profile page works again.
- New artisan command whatsapp:split-username-contacts — moves messages that were merged into one "+" contact before this update back to each sender's own contact and conversation. Run it once after updating (add --dry-run to preview).

- Improvements & Fixes:
- WhatsApp usernames: Meta now lets people hide their phone number behind a WhatsApp username, and their messages arrive with a business-scoped user ID instead of a number. These senders were all stored as one contact with phone "+", so their conversations were merged together. Each one now gets its own contact (matched on the user ID, with username and profile name), replies are sent to the user ID, and Meta's user-ID-change webhook keeps the contact linked. Migration included — run php artisan migrate after updating.
- Meta Graph API: the version is now set in one place (default v25.0, override with META_GRAPH_VERSION in .env). v20.0 expired on 24 September 2026 and the social module still used v19.0.
- AI: Anthropic retired every Claude 3 model and Google shut down Gemini 1.x and text-embedding-004, so those providers failed on every request. Defaults are now claude-opus-5-5, gemini-3.8-flash and gemini-embedding-001; saved models are moved to a current model of the same tier (Haiku → Claude Haiku 4.5, Sonnet → Claude Sonnet 5.5). Re-index knowledge bases that were built with Gemini embeddings.
- AI: replies from newer Claude models are read correctly when they include thinking blocks, declined requests fall back to another model instead of returning an empty reply, the system prompt is now passed to every provider (it was ignored for AI email writing), and the Anthropic connection test no longer depends on a specific model.
- Plan limits are now enforced: monthly usage counters accumulate correctly (they were reset on every use), limits follow self-serve subscriptions as well as admin-assigned ones, and the number of chatbots, knowledge bases, automations, WhatsApp accounts, WhatsApp templates, social accounts and team members is checked before a new one is created. Inbox, bot and automation WhatsApp messages now count toward the monthly WhatsApp message limit. Review your plans in Admin → Plans after updating.
- Admin plan form now saves every limit — previously 14 of the 16 limit fields were dropped on save and shown as Unlimited. The storage limit (MB) now applies to media uploads.
- Signing up for a free plan from the pricing page now goes straight to the dashboard instead of looping back to checkout.
- Contact bulk import uses a new built-in grid (paste rows from Excel or Google Sheets, tag and segment suggestions) in place of Handsontable, whose free licence key does not allow commercial use.
- When a plan limit is reached you now stay on the page and see the upgrade prompt — it previously redirected to /billing, which did not exist.
- After updating, restart your queue workers (php artisan queue:restart, or restart Supervisor) so they run the new code. The updater now does this automatically for future updates.
- Branded email templates (resources/views/vendor/mail) are now included in the package. Recent packages left them out, so system emails fell back to Laravel's default layout.
- New feature tests for WhatsApp usernames, AI providers, plan limits and two-factor sign-in, the username repair command, plus performance and stability improvements.

View hidden content is available for registered users!

WhatsMine - AI Omnichannel Marketing, Automation & Chatbot SaaS (WhatsApp, Messenger, SMS & Email) v1.8.0 Nulled

12 September 2026 — V1.9.0

- New:
- WhatsApp website widget: the embed script is now also served at an extensionless URL (/widgets/whatsapp/{key}), so it keeps working on hosts whose web server treats every .js path as a static file and never passes it to the app (nginx “location ~ \.js$” rules, some CDN/cache layers). The .js URL remains the canonical one.
– The widget embed snippet is now generated on the server, so installs served from a sub-directory (e.g. https://example.com/public/) get a script URL that carries the right base path — the copy button, card preview and “direct JS link” all use it.
– Widget greeting card supports multi-line messages and closes on Escape or a click outside; the script can now be placed in <head> with async — it waits for the document to be ready before touching the page.

- Improvements & Fixes:
– Fixed Instagram and Messenger inbound messages silently going missing for some contacts. Meta’s signed CDN profile-picture URLs run 600–900+ characters while the contact avatar column was capped at 512, so the webhook failed with “Data too long for column ‘avatar’” before the message was stored — the contact appeared, the conversation never did. The column is now TEXT (migration included — run php artisan migrate after updating).
– Widget script hardened: every value that comes from the database (greeting, agent name, colours, allowed domains) is JSON-encoded and HTML-escaped, so quotes, newlines, </script> or emoji can no longer break the script or inject markup into your customer’s page, and the output is pure ASCII.
– Widget phone number is normalised to digits for wa.me (a ”+”, spaces or dashes used to produce a dead link), the pre-filled text is only appended when set, allowed domains are matched on the bare host (scheme, www., port and path are stripped), colour values are validated, the agent-name initial is multibyte-safe, and script errors are caught and logged instead of breaking the host page.
– New feature tests for the WhatsApp widget embed (both URLs, sub-directory base path, JavaScript validity, domain whitelist) and for Instagram inbound messages with long avatar URLs.
– Performance and stability improvements.

View hidden content is available for registered users!

WhatsMine - AI Omnichannel Marketing, Automation & Chatbot SaaS (WhatsApp, Messenger, SMS & Email) V1.8.0 Nulled
4 September 2026 — V1.8.0

- New:
- One contact, one automation, one run at a time — a contact who sends three quick messages now gets one flow, not three copies. Duplicate runs from retried webhooks and parallel queue workers are blocked with an atomic lock.
- New artisan command automationrune-stale-runs (scheduled daily) — cancels runs parked on an “Ask question” node whose contact never replied, with a readable reason, so abandoned conversations no longer pile up as “waiting”.
– Lead Finder searches update live — the recent-searches list refreshes while a search is queued or running, shows the failure reason when a search fails, and warns when a job is stuck because no worker is consuming the “leads” queue.
– WhatsApp embedded signup now recognises when you close or cancel the Meta dialog and says so, instead of reporting a failed connection.

- Improvements & Fixes:
– Fixed duplicate automation runs, outbound webhooks and notifications — event listeners were registered twice (explicitly and by auto-discovery), so one inbound message fired every listener two times.
– A reply to an “Ask question” node now only resumes the parked run; it no longer also restarts the automation from its trigger, which re-asked the question on every answer.
– Outbound messages (echoes of your own replies) no longer trigger “message received” automations, and each inbound message is evaluated for triggers exactly once.
– Fixed API-triggered automation runs (POST /api/v1/automations/{id}/trigger) sitting at “pending” forever — they were dispatched to a queue no worker listened to. The endpoint now returns 422 when the automation is inactive or a run is already in progress for that contact.
– Crashed automation runs now show their failure reason on the Runs page (it was being written to a non-existent column).
– Finished runs can no longer be executed a second time by a late delayed wake-up job, and runs whose automation has been deleted fail cleanly.
– Flows saved from the builder are normalised so the engine recognises every node type — live runs, test runs and run logs now agree on trigger and step types.
– Meta embedded signup: the Content-Security-Policy now allows business.facebook.com and connect.facebook.net (the Facebook SDK config would not load without them), and signup messages are accepted from every facebook.com host.
– New automation production-readiness test suite.
– Performance and stability improvements.

View hidden content is available for registered users!

WhatsMine - AI Omnichannel Marketing, Automation & Chatbot SaaS (WhatsApp, Messenger, SMS & Email) v1.7.0 Nulled
Nulled version added.

View hidden content is available for registered users!

WhatsMine - AI Omnichannel Marketing, Automation & Chatbot SaaS (WhatsApp, Messenger, SMS & Email) v1.7.0
10 August 2026 — V1.7.0

- New:
- Manual channel connection — connect WhatsApp, Instagram and Messenger with your own Meta App credentials instead of the embedded signup popup. Paste a WABA ID and permanent token (or Page ID and Page token); credentials are verified, phone numbers and templates synced, and webhooks wired up for you.
- Webhook health check & one-click re-subscribe — see exactly why a connected channel isn't receiving messages (app subscription, Page subscription, callback URL, queue worker, last inbound message) and repair it from the Setup page.
- New artisan command meta:resubscribe — repairs webhook subscriptions for every connected Instagram and Messenger account in one pass.
– Conversation activity log — a new Activity tab in the inbox shows who did what and when: created, assigned, transferred, status changed, bot/human handover, and labels added or removed — including actions taken by automations, campaigns and the API.
– New SMS gateway: MSG91 (India) — auth key, sender ID, route and DLT template ID, with an in-app setup guide.
– Manual social account connect — add Facebook, Instagram, LinkedIn, X (Twitter), YouTube and TikTok accounts with your own access token when you’d rather not use OAuth; tokens are validated on save and refreshed automatically.
– Contact CSV import wizard — upload, map columns, import and review in four steps, with a live progress bar, chunked importing, tag & segment assignment and a per-row failure report.
– Bulk tags and segments — select contacts in the list and add or remove tags (create new ones inline) or segments in one action.

- Improvements & Fixes:
– Social tokens are refreshed every 15 minutes instead of once a day, so short-lived X (Twitter) and Google tokens no longer expire between runs; a failed refresh only disconnects the account when the refresh token is truly dead.
– Scheduled social posts are far more reliable — permanent failures (disconnected account, missing media) are recorded instead of retried, transient failures retry with backoff and can never double-post, stuck posts requeue automatically, and Instagram waits for media processing to finish before publishing.
– Facebook & Instagram connect now works with business-type Meta apps (login configuration ID), upgrades to long-lived tokens, handles accounts with many Pages, and tells you exactly which permissions are missing when no Page is returned.
– Meta embedded signup now warns you when a webhook subscription fails instead of reporting success and leaving an empty inbox.
– Contact import handles real-world files — semicolon/tab delimiters, UTF-8 BOMs, ragged rows, many header aliases, combined name columns, E.164 phone normalisation and per-row tags; rows with no phone or email are skipped with a reason instead of creating blank contacts.
– Translation changes now appear immediately after deployment instead of waiting for the locale cache to expire.
– Payment gateway settings show each provider’s brand logo, and Meta App settings clarify which permissions the Social Config ID needs.
– Expanded automated test coverage across inbox, contacts, social and SMS.
– Performance and stability improvements.

View hidden content is available for registered users!

WhatsMine - AI Omnichannel Marketing, Automation & Chatbot SaaS (WhatsApp, Messenger, SMS & Email) v1.7.0
10 August 2026 — V1.7.0

- New:
- Manual channel connection — connect WhatsApp, Instagram and Messenger with your own Meta App credentials instead of the embedded signup popup. Paste a WABA ID and permanent token (or Page ID and Page token); credentials are verified, phone numbers and templates synced, and webhooks wired up for you.
- Webhook health check & one-click re-subscribe — see exactly why a connected channel isn't receiving messages (app subscription, Page subscription, callback URL, queue worker, last inbound message) and repair it from the Setup page.
- New artisan command meta:resubscribe — repairs webhook subscriptions for every connected Instagram and Messenger account in one pass.
– Conversation activity log — a new Activity tab in the inbox shows who did what and when: created, assigned, transferred, status changed, bot/human handover, and labels added or removed — including actions taken by automations, campaigns and the API.
– New SMS gateway: MSG91 (India) — auth key, sender ID, route and DLT template ID, with an in-app setup guide.
– Manual social account connect — add Facebook, Instagram, LinkedIn, X (Twitter), YouTube and TikTok accounts with your own access token when you’d rather not use OAuth; tokens are validated on save and refreshed automatically.
– Contact CSV import wizard — upload, map columns, import and review in four steps, with a live progress bar, chunked importing, tag & segment assignment and a per-row failure report.
– Bulk tags and segments — select contacts in the list and add or remove tags (create new ones inline) or segments in one action.

- Improvements & Fixes:
– Social tokens are refreshed every 15 minutes instead of once a day, so short-lived X (Twitter) and Google tokens no longer expire between runs; a failed refresh only disconnects the account when the refresh token is truly dead.
– Scheduled social posts are far more reliable — permanent failures (disconnected account, missing media) are recorded instead of retried, transient failures retry with backoff and can never double-post, stuck posts requeue automatically, and Instagram waits for media processing to finish before publishing.
– Facebook & Instagram connect now works with business-type Meta apps (login configuration ID), upgrades to long-lived tokens, handles accounts with many Pages, and tells you exactly which permissions are missing when no Page is returned.
– Meta embedded signup now warns you when a webhook subscription fails instead of reporting success and leaving an empty inbox.
– Contact import handles real-world files — semicolon/tab delimiters, UTF-8 BOMs, ragged rows, many header aliases, combined name columns, E.164 phone normalisation and per-row tags; rows with no phone or email are skipped with a reason instead of creating blank contacts.
– Translation changes now appear immediately after deployment instead of waiting for the locale cache to expire.
– Payment gateway settings show each provider’s brand logo, and Meta App settings clarify which permissions the Social Config ID needs.
– Expanded automated test coverage across inbox, contacts, social and SMS.
– Performance and stability improvements.