99b174f495
fix: avoid directive hits inside URLs and add tests
2025-12-05 22:28:36 +00:00
690113dd73
Add bundled pi default and session token reporting
2025-12-05 23:18:43 +01:00
fe87160b19
chore: add system marker to directives and abort
2025-12-05 21:37:11 +00:00
dc02bcee74
fix: normalize directive triggers and short-circuit
2025-12-05 21:29:41 +00:00
e7a9313135
chore: remove twilio and expand pi cli detection
2025-12-05 21:13:23 +00:00
5492845659
feat: stream turn completions and tighten rpc timeout
2025-12-05 21:13:17 +00:00
29dfe89137
chore: redact long texts in web logs
2025-12-05 19:21:23 +00:00
0da3f84a2e
fix: ignore rpc toolcall deltas to avoid duplicate replies
2025-12-05 19:16:03 +00:00
7c7314f673
chore: drop twilio and go web-only
2025-12-05 19:03:59 +00:00
869cc3d497
Route pi agent prompts via RPC stdin
2025-12-05 18:34:05 +00:00
f315bf074b
fix: harden pi rpc prompt handling
2025-12-05 18:24:45 +00:00
fcf0c28132
chore: make pi-only rpc with fixed sessions
2025-12-05 17:50:02 +00:00
b3e50cbb33
Switch to clawdis RPC mode and complete rebrand
2025-12-05 17:22:53 +00:00
20cb709ae3
chore: organize imports after rebrand
2025-12-04 18:02:51 +00:00
916a41ed60
branding: default to clawdis paths and launchd label
2025-12-04 18:01:30 +00:00
04ce98148d
web: fix mentioned JID extraction typing
2025-12-04 17:54:51 +00:00
34eb75f634
auto-reply: honor /new after timestamp prefixes
2025-12-04 17:54:20 +00:00
05b76281f7
CLI: add agent command for direct agent runs
2025-12-04 17:54:20 +00:00
4a35bcec21
fix: resolve lint errors (unused vars, imports, formatting)
...
- Prefix unused test variables with underscore
- Remove unused piSpec import and idleMs class member
- Fix import ordering and code formatting
2025-12-04 16:15:17 +00:00
518af0ef24
config: support clawdis.json path for rebranding
...
- Add CONFIG_PATH_CLAWDIS (~/.clawdis/clawdis.json) as preferred path
- Keep CONFIG_PATH_LEGACY (~/.warelay/warelay.json) for backward compatibility
- Update loadConfig() to check clawdis.json first, fallback to warelay.json
- Fix TypeScript type error in extractMentionedJids (null handling)
Part of the warelay → clawdis rebranding effort.
2025-12-04 16:15:17 +00:00
a155ec0599
auto-reply: handle group think/verbose directives
2025-12-04 02:29:32 +00:00
7bc56d7cfe
test: cover verbose directive in group batches
2025-12-03 15:45:43 +00:00
088bdb3313
fix: allow directive-only toggles inside group batches
2025-12-03 15:45:43 +00:00
07f323222b
fix(web): capture mentions from media captions
2025-12-03 15:45:43 +00:00
a321bf1a90
fix(web): surface media fetch failures
2025-12-03 15:45:43 +00:00
e878780808
auto-reply: single emoji per verbose tool line
2025-12-03 15:45:43 +00:00
cb5f1fa99d
auto-reply: emoji + result preview for verbose tool calls
2025-12-03 15:45:43 +00:00
b55ac994ea
feat(web): prime group sessions with member roster
2025-12-03 15:45:43 +00:00
3a8d6b80e0
auto-reply: surface tool args from rpc start events
2025-12-03 15:45:43 +00:00
edc894f6c7
fix(web): annotate group replies with sender
2025-12-03 13:25:34 +00:00
f68714ec8e
fix(web): unwrap ephemeral/view-once and keep mentions
2025-12-03 13:15:46 +00:00
7be9352a3a
test(web): ensure group messages carry sender + bypass allowFrom
2025-12-03 13:12:05 +00:00
3a782b6ace
fix(web): let group pings bypass allowFrom
2025-12-03 13:11:01 +00:00
8204351d67
fix(web): allow group replies past allowFrom
2025-12-03 13:08:54 +00:00
4c3635a7c0
logging: route console output into pino
2025-12-03 13:07:47 +00:00
7ea43b0145
fix(web): detect self number mentions in group chats
2025-12-03 12:43:20 +00:00
6afe6f4ecb
feat(web): add group chat mention support
2025-12-03 12:35:18 +00:00
0824873ffb
Add /restart WhatsApp command to restart warelay
2025-12-03 12:14:32 +00:00
8f99b13305
Pi: stream tool results faster (0.5s, flush after 5)
2025-12-03 12:08:58 +00:00
9253702966
Pi: stream assistant text during RPC runs
2025-12-03 11:50:49 +00:00
3958450223
Tau RPC: resolve on agent_end or exit
2025-12-03 11:34:00 +00:00
cc596ef011
Pi: resume Tau sessions with --continue
2025-12-03 11:33:51 +00:00
8220b11770
Tau RPC: wait for agent_end when tools run
2025-12-03 11:29:12 +00:00
62c54cd47c
Web: simplify logout message
2025-12-03 11:04:12 +00:00
e34d0d69aa
Chore: satisfy lint after tool-meta refactor
2025-12-03 10:42:10 +00:00
597e7e6f13
Refactor: extract tool meta formatter + debouncer
2025-12-03 10:30:01 +00:00
b460fd61bd
Verbose: shorten meta paths when aggregating
2025-12-03 10:26:41 +00:00
c9b5df8184
Verbose: collapse tool meta paths by directory
2025-12-03 10:24:41 +00:00
b6b5144ddf
Verbose: slow tool batch window to 1s
2025-12-03 10:13:02 +00:00
deac5ff585
Verbose: shorten home paths in tool meta
2025-12-03 10:12:27 +00:00
38a03ff2c8
Verbose: batch rapid tool results
2025-12-03 10:11:41 +00:00
527bed2b53
Verbose: include tool arg metadata in prefixes
2025-12-03 09:57:41 +00:00
318166f8b0
Verbose: send tool result metadata only
2025-12-03 09:40:05 +00:00
394c751d7d
Tau RPC: resolve on agent_end
2025-12-03 09:39:26 +00:00
c3792db0e5
Auto-reply: stream verbose tool results via tau rpc
2025-12-03 09:21:31 +00:00
16e42e6d6d
Auto-reply: show tool results before main reply in verbose mode
2025-12-03 09:14:10 +00:00
53c1674382
Chore: format + lint fixes
2025-12-03 09:09:34 +00:00
ae0d35c727
Auto-reply: add verbose session hint
2025-12-03 09:07:17 +00:00
086dd284d6
Auto-reply: add /verbose directives and tool result replies
2025-12-03 09:04:37 +00:00
8ba35a2dc3
Auto-reply: treat prefixed think directives as directive-only
2025-12-03 08:57:30 +00:00
48dfb1c8ca
Auto-reply: ack think directives
2025-12-03 08:54:38 +00:00
58520859e5
Auto-reply: add thinking directives
2025-12-03 08:45:23 +00:00
c4b0155cc2
Format: align thinking helpers
2025-12-03 01:02:10 +00:00
38b18202fc
Heartbeat: guard optional heartbeatCommand
2025-12-03 00:45:27 +00:00
0f17a7d828
Heartbeat: normalize reply arrays for twilio/web
2025-12-03 00:43:28 +00:00
9da5b9f4bb
Heartbeat: normalize array replies
2025-12-03 00:40:19 +00:00
a7fdc7b992
Auto-reply: allow array payloads in signature
2025-12-03 00:35:57 +00:00
f519e22e6d
CI: fix command-reply payload typing
2025-12-03 00:33:58 +00:00
ecac4dd72a
Auto-reply: format and lint fixes
2025-12-03 00:30:05 +00:00
b6c45485bc
Auto-reply: smarter chunking breaks
2025-12-03 00:25:01 +00:00
ec46932259
web: handle multi-payload replies
2025-12-02 23:46:11 +00:00
10182f1182
limits: chunk replies for twilio/web
2025-12-02 23:10:16 +00:00
cfaec9d608
auto-reply: support multi-text RPC outputs
2025-12-02 23:03:55 +00:00
0f6157a49d
logging: emit agent/session meta at command start
2025-12-02 21:30:28 +00:00
1df6373cb1
revert: mark system prompt sent on first turn
2025-12-02 21:23:56 +00:00
96722bba08
ci: fix lint and tau rpc typing
2025-12-02 21:12:51 +00:00
4e20a20927
fix(media): clean up files after response finishes
2025-12-02 21:10:18 +00:00
a0d1004909
test(media): add redirect coverage and update changelog
2025-12-02 21:09:26 +00:00
2018c90ae2
chore: tidy claude prompt and drop npm lock
2025-12-02 21:07:37 +00:00
793360c5bb
style: fix biome formatting
2025-12-02 21:07:13 +00:00
d8b1a38350
style: fix biome lint errors
2025-12-02 21:07:13 +00:00
499a3e3227
style: fix biome formatting
2025-12-02 21:07:13 +00:00
73a9fdca2a
fix: send Claude identity prefix on first session message
...
The systemSent variable was being set to true before being passed to
runCommandReply, causing the identity prefix to never be injected.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-02 21:07:13 +00:00
06dd9b8ed8
fix: follow redirects when downloading Twilio media
...
node:https request() doesn't follow redirects by default, causing
Twilio media URLs (which 302 to CDN) to save placeholder/metadata
instead of actual images.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-02 21:07:13 +00:00
a86cb932cf
chore: user-agnostic Claude identity and tests
...
- Use ~/Clawd instead of hardcoded /Users/steipete/clawd
- Add MEDIA: syntax instructions to identity prefix
- Update tests to check for 'scratchpad' instead of specific path
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-02 21:07:13 +00:00
2fae0a9f47
fix: media serving and id consistency
...
- server.ts: Replace sendFile with manual readFile+send to fix
NotFoundError when serving media (sendFile failed even after stat)
- store.ts: Return id with file extension so it matches actual filename
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-02 21:07:13 +00:00
2ec9192010
fix: use export type for type-only re-exports
...
Fixes build error with isolatedModules.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-02 21:06:27 +00:00
b172b538fc
perf(pi): reuse tau rpc for command auto-replies
2025-12-02 20:09:51 +00:00
2cf134668c
fix(media): block symlink traversal
2025-12-02 18:37:15 +00:00
b94b220156
Fix path traversal vulnerability in media server
...
The /media/:id endpoint was vulnerable to path traversal attacks.
Since this endpoint is exposed via Tailscale Funnel (unlike the
WhatsApp webhook which requires Twilio signature validation),
attackers could directly request paths like /media/%2e%2e%2fwarelay.json
to access sensitive files in ~/.warelay/ (e.g. warelay.json), or even
escape further to the user's home directory via multiple ../ sequences.
Fix: validate resolved paths stay within the media directory.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-02 19:33:21 +01:00
26921cbe68
chore(logs): rotate daily and prune after 24h
2025-12-02 17:11:43 +00:00
8844674825
chore(security): purge session store on logout
2025-12-02 16:33:44 +00:00
c9fbe2cb92
chore(security): harden ipc socket
2025-12-02 16:09:40 +00:00
ed080ae988
Tests: cover agents and fix web defaults
...
Co-authored-by: RealSid08 <RealSid08@users.noreply.github.com>
2025-12-02 11:08:00 +00:00
f31e89d5af
Agents: add pluggable CLIs
...
Co-authored-by: RealSid08 <RealSid08@users.noreply.github.com>
2025-12-02 11:07:46 +00:00
5b54d4de7a
feat(web): batch inbound messages
2025-12-02 07:54:13 +00:00
96152f6577
Add typing indicator after IPC send
...
After sending via IPC, automatically show "composing" indicator so
user knows more messages may be coming from the running session.
2025-12-02 06:58:17 +00:00
e86b507da7
Add IPC to prevent Signal session corruption from concurrent connections
...
When the relay is running, `warelay send` and `warelay heartbeat` now
communicate via Unix socket IPC (~/.warelay/relay.sock) to send messages
through the relay's existing WhatsApp connection.
Previously, these commands created new Baileys sockets that wrote to the
same auth state files, corrupting the Signal session ratchet and causing
the relay's subsequent sends to fail silently.
Changes:
- Add src/web/ipc.ts with Unix socket server/client
- Relay starts IPC server after connecting
- send command tries IPC first, falls back to direct
- heartbeat uses sendWithIpcFallback helper
- inbound.ts exposes sendMessage on listener object
- Messages sent via IPC are added to echo detection set
2025-12-02 06:31:07 +00:00
2fc3a822c8
web: isolate session fixtures and skip heartbeat when busy
2025-12-02 06:17:16 +00:00
d107b79c63
Fix test corrupting production sessions.json
...
The test 'falls back to most recent session when no to is provided' was
using resolveStorePath() which returns the real ~/.warelay/sessions.json.
This overwrote production session data with test values, causing session
fragmentation issues.
Changed to use a temp directory like other tests.
2025-12-02 05:54:31 +00:00
Peter Steinberger
Eng. Juan Combetto
Joao Lisboa