# Upgrade Guide — v0.14.1

<!-- bump: patch -->

## What Changed

### Silent Reject for Unauthorized WhatsApp Numbers (Default: On)

Previously, when an unauthorized phone number messaged a WhatsApp-connected agent, the agent responded with "This agent is not currently accepting new users." In linked-device mode (Baileys), this is a serious privacy issue — it reveals to the user's personal contacts that an AI agent is running on their number.

Now, unauthorized messages are **silently dropped** by default. No response is sent. The message is logged and an `auth:unauthorized` event is emitted, but the sender sees nothing.

**Config:**

| Field | Default | Description |
|-------|---------|-------------|
| `silentReject` | `true` | Silently drop unauthorized messages (no response). Set `false` to use AuthGate registration policy responses. |

To restore the old behavior (respond to unauthorized users):
```json
{
  "messaging": [{
    "type": "whatsapp",
    "config": {
      "silentReject": false
    }
  }]
}
```

## What to Tell Your User

- "Your agent no longer responds to people who aren't in your authorized numbers list. Their messages are silently ignored."
- If the user wants the agent to respond to unknown contacts (e.g., for a business bot on a dedicated number), let them know they can ask the agent to enable that — the agent will configure it for them.

## Summary of New Capabilities

| Capability | How to Use |
|-----------|-----------|
| Silent reject (default) | Unauthorized messages silently dropped — no config needed |
| Verbose reject | Set `silentReject: false` to send rejection messages |
