BlueBubbles Incoming Messages - "unauthorized guid" Error

Environment

• OpenClaw Version: 2026.2.14
• macOS: 26.2.0
• BlueBubbles Server: 1.9.9
• BlueBubbles Proxy: Cloudflare Tunnel

Issue

Incoming iMessage webhooks from BlueBubbles are always rejected with "unauthorized guid" error, regardless of dmPolicy configuration.

Steps to Reproduce

1. Configure BlueBubbles channel in openclaw.json:

"bluebubbles": {
  "enabled": true,
  "serverUrl": "https://[cloudflare-tunnel].trycloudflare.com",
  "password": "[password]",
  "dmPolicy": "disabled",
  "groupPolicy": "allowlist"
}

2. Register webhook in BlueBubbles pointing to OpenClaw gateway
3. Send iMessage TO the BlueBubbles-connected account
4. Check gateway error logs

Expected Behavior

With dmPolicy: "disabled" (or "open" with allowFrom: ["*"]), incoming messages should be accepted.

Actual Behavior

All incoming webhooks are rejected:

[bluebubbles] webhook rejected: unauthorized guid=***

Configurations Tried (all failed)

• dmPolicy: "disabled"
• dmPolicy: "open" with allowFrom: ["*"]
• dmPolicy: "allowlist" with explicit email in allowFrom
• Created credentials/bluebubbles-allowFrom.json with "*"
• Added gateway auth token to webhook URL

Notes

• Outgoing messages (OpenClaw → BlueBubbles) work correctly
• BlueBubbles API is accessible and responding
• Webhook is registered and receiving events
• Authorization check appears to ignore config settings

Logs

Gateway connects successfully:

[bluebubbles] [default] BlueBubbles server macOS 26.2.0
[bluebubbles] [default] BlueBubbles webhook listening on /bluebubbles-webhook

But all incoming webhooks fail:

[bluebubbles] webhook rejected: unauthorized guid=***