| ⚡ | Feature | Description |
|---|---|---|
| 🆕 | Sub-Bot Rental System | Spawn, manage & remove cloned bot instances with .rentbot / .listrental / .removerent — auth stored on disk, never in DB |
| 🆕 | tagnotadmin | Tag all group members while skipping every admin — perfect for member-only announcements |
| 🔒 | Logger Hardened | Session buffer leaks fully eliminated — dual-layer suppression with direct object checks |
| ⬆️ | v3.2.0 → v3.3.0 | Version bumped across all 7 locations: banner, menu, device, profile card, agent prompt & more |
|
⚡ ARTIFICIAL INTELLIGENCE LLaMA 3.3 · GPT · Groq |
🛡️ GROUP SECURITY Anti-link · Anti-spam · Anti-raid |
💰 ECONOMY ENGINE 60+ RPG economy commands |
|
📥 MEDIA SUITE YouTube · TikTok · Instagram |
🎮 INTERACTIVE GAMES Trivia · Hangman · Tic-Tac-Toe |
🤖 SUB-BOT SYSTEM Spawn Baileys sub-instances |
🤖 Sub-Bot Rental System — Spawn · Manage · Remove
Spawn fully operational clone bots directly from within XYLO-MD:
▸ .rentbot <number> [days] — Spawn a sub-bot, get pairing code (owner only)
▸ .listrental — List all active sub-bots with status & expiry
▸ .removerent <number> — Disconnect & wipe a sub-bot instantly
◆ Pairing code delivered inline — user enters it in WhatsApp Linked Devices
◆ Auth stored in subbots/<number>/ — zero session data in the database
◆ Full command support — sub-bots run the same 504 commands
◆ Auto-reconnects on drop — logs out cleanly on 401
◆ Expiry manager runs every 10 minutes — notifies renter on removal
◆ Creator retains full override access to all sub-bot instances
💰 Economy Engine — 60+ RPG Commands
A deep virtual economy built into every interaction:
EARNING — Daily rewards · Work · Crime · Fishing · Hunting · Begging · Robbing
BANKING — Deposit · Withdraw · Transfer · Bank interest · Safeguard
SHOP & ASSETS — Buy items · Buffs · Collectibles · Crypto · Factions
GAMBLING — Coinflip · Slots · Blackjack · Dice · Roulette · Crash
LOANS — System loans · P2P lending · Auto-deduction on default
SOCIAL — Marriage · Leaderboards · Achievements · Profile cards
13-Level Perk System (Lv.5 → Lv.100):
| Level | Perk |
|---|---|
| 5 | 1.1× earning multiplier |
| 15 | 10% cooldown reduction |
| 25 | Rob shield ability |
| 40 | 1.5× earning multiplier |
| 60 | 25% cooldown reduction |
| 80 | 1.8× earning · Crime boost |
| 100 | 2.0× earning · Legendary title |
All perks stack and apply automatically across every economy command.
🛡️ Group Security Suite — Military-Grade Protection
◆ Anti-Link — Auto-delete URLs with configurable warnings
◆ Anti-Spam — Detect and suppress repetitive behavior
◆ Anti-Raid — Automatic lockdown on mass-join events
◆ Anti-Bad-Words — Fully customizable word filter per group
◆ Anti-Sticker — Block sticker flooding in groups
◆ Anti-Delete — Forward deleted messages to admins silently
◆ Warning System — Configurable thresholds + auto kick/ban/mute
◆ Welcome Cards — Canvas-generated cards with custom messages
◆ Slow Mode — Throttle commands to avoid rate limits
◆ Triggers — Custom auto-responses per keyword per group
◆ tagnotadmin — Tag all members while skipping every admin
💳 Loan System — Borrow · Lend · Auto-Deduct
A full P2P and system loan engine with compound interest:
▸ loan <amount> — Borrow from the system (max 30% net worth)
▸ lend @user <amount> — Lend your XYLO coins to another user
▸ requestloan @user <amt> — Request a loan from someone
▸ repay [amount|all] — Repay your active system loan
▸ acceptloan <ID> — Accept a pending loan request
▸ myloans — View all active loans (borrowed + lent)
◆ System loans: 5% interest/day, 7-day term
◆ Overdue penalty: +2% rate per overdue day (capped at 50%)
◆ Auto-deduction: wallet deducted first, then bank — runs every hour
◆ P2P loans: lender funds leave wallet immediately, borrower notified via DM
🤖 AI Integration — Multi-Backend Intelligence
| Provider | Model | Use Case |
|---|---|---|
| Groq | LLaMA 3.3 70B | Primary chat with DuckDuckGo web search |
| OpenRouter | GPT fallback | Backup when Groq is unavailable |
| Pollinations | Flux / custom | Image generation & creative tools |
| XYLO Vision | Multimodal | Analyze images sent directly to the bot |
◆ Persistent conversation memory per user
◆ DuckDuckGo-augmented real-time web search
◆ XYLO Agent mode — acts as a full WhatsApp assistant
◆ Toggle chatbot mode per group (admin only)
🎮 Interactive Games with Economy Bet System
All games are integrated with the economy — bet real XYLO coins:
◆ Connect 4 — vs bot (Easy/Medium/Hard minimax AI) or vs player
◆ Trivia — Multiple categories, adjustable difficulty
◆ Hangman — Word guessing with hint system
◆ Tic-Tac-Toe — Classic 3×3 grid, bot or challenge mode
◆ Word Chain — Competitive vocabulary challenge
◆ Math Challenge — Speed arithmetic for XP and coins
◆ Emoji Quiz — Guess the phrase from emojis
◆ Riddles — Progressive hint system
◆ Party Games — Multi-player group games
All results feed into the gamestats leaderboard and player profile.
💬 Anonymous Confession System
Zero-trace anonymous messaging inside WhatsApp groups:
◆ Groups get a short code (gr1, gr2...) when confessions are enabled
◆ Users DM the bot: confess gr1 I have something to say
◆ Message surfaces anonymously — sender untraceable
◆ Rate limited: 5-minute cooldown, 10 confessions/day maximum
◆ Admin toggle per group: .confession on / .confession off
📥 Media Downloaders — Every Major Platform
| Platform | Content |
|---|---|
| YouTube | Video (up to 4K) + Audio extraction |
| TikTok | Video without watermark |
| Posts · Reels · Stories | |
| Snapchat | Spotlight videos |
| Public videos | |
| Images & boards | |
| Spotify | Track search + stream link |
| GitHub | Repository ZIP download |
◈ Expand installation guide
Prerequisites
▸ Node.js v18 or higher
▸ Git latest stable
▸ FFmpeg for media processing
Clone & Install
git clone https://github.com/DAV-EX/XYLO-MD.git
cd XYLO-MD
npm installConfigure
Create a .env file in the root:
SESSION_ID=YOUR_SESSION_ID_HERE
PREFIX=.
OWNER_NUMBER=YOUR_NUMBER_WITH_COUNTRY_CODE
MODE=public
GROQ_API_KEY=optional_for_ai_features
OPENROUTER_API_KEY=optional_for_ai_fallbackRun
# Development (auto-reload)
npm run dev
# Production
npm startXYLO-MD/
├── index.ts ◆ Entry — WhatsApp socket · events · plugin router
├── config.ts ◆ Config management synced with Turso DB
│
├── plugins/ ◆ 70 plugin files
│ ├── economy/ ◈ Economy subsystem (bank · shop · loans · market · betting)
│ ├── group/ ◈ Group security (moderation · settings · triggers · welcome)
│ ├── rentbot.ts ◈ Sub-bot rental system (spawn · list · remove)
│ ├── ai.ts ◈ AI chat & image generation
│ ├── games.ts ◈ Interactive game commands
│ ├── downloader.ts ◈ Platform media downloaders
│ ├── confess.ts ◈ Anonymous confession system
│ └── creator.ts ◈ Creator-only private commands
│
├── lib/ ◆ Core logic libraries
│ ├── subBotManager.ts ◈ Sub-bot spawner · pairing · reconnect · expiry
│ ├── economy.ts ◈ Economy engine · leveling · perks · achievements
│ ├── loanDB.ts ◈ Loan system DB layer
│ ├── gameListener.ts ◈ Game routing · bet logic
│ ├── games/ ◈ Individual game implementations
│ ├── groupMeta.ts ◈ Group metadata caching (TTL-based)
│ ├── antiRaid.ts ◈ Anti-raid detection and lockdown
│ ├── agentListener.ts ◈ XYLO Agent mode handler
│ ├── logger.ts ◈ Smart logger with session noise suppression
│ ├── extras.ts ◈ Schedulers (birthday · alerts · loan auto-deduct)
│ └── welcomeHandler.ts ◈ Canvas-generated welcome/goodbye cards
│
├── subbots/ ◆ Sub-bot auth dirs (one per rented number)
├── data/ ◆ Static data · audio editor · text styles
├── session/ ◆ WhatsApp auth credentials
└── tmp/ ◆ Temporary media processing files
| LAYER | TECHNOLOGY | ROLE |
|---|---|---|
| Runtime | TypeScript via tsx |
Direct execution — zero build step |
| Baileys (DAV-EX fork) | Multi-device WebSocket protocol | |
| Database | Turso — dual DB | Instance DB + Economy DB (distributed SQLite) |
| AI Primary | Groq — LLaMA 3.3 70B | Main chat with DuckDuckGo augmentation |
| AI Fallback | OpenRouter — GPT | Backup when primary unavailable |
| Image AI | Pollinations — Flux | On-demand image generation |
| Media | FFmpeg + Sharp | Conversion, audio effects, image optimization |
| Cards | node-canvas | Welcome/goodbye card rendering |
| Sub-Bots | Baileys multi-socket | Rental sub-bot spawner & manager |
| Process | PM2 | Production process management |
| VARIABLE | REQUIRED | DEFAULT | DESCRIPTION |
|---|---|---|---|
SESSION_ID |
Yes | — | WhatsApp session authentication key |
PREFIX |
No | . |
Command trigger prefix |
OWNER_NUMBER |
No | — | Bot owner's phone (with country code) |
MODE |
No | public |
public — all users · private — owner only |
BOT_NAME |
No | XYLO-MD |
Bot display name |
GROQ_API_KEY |
No | — | Groq API key for AI features |
OPENROUTER_API_KEY |
No | — | OpenRouter fallback AI key |
All contributions are welcome. Fork, build, and submit.
# 1. Fork the repository on GitHub
# 2. Create your feature branch
git checkout -b feature/your-feature-name
# 3. Commit your changes
git commit -m "feat: add your feature description"
# 4. Push to your fork
git push origin feature/your-feature-name
# 5. Open a Pull Request on GitHub◆ Follow the existing code style and file structure
◆ Add your command to the correct plugin file or create a new one
◆ Test thoroughly before submitting — bugs slow everyone down