fix(web): let group pings bypass allowFrom

This commit is contained in:
Peter Steinberger
2025-12-03 13:11:01 +00:00
parent 47d0b6fc14
commit 3a782b6ace
3 changed files with 11 additions and 15 deletions

View File

@@ -26,7 +26,8 @@ Goal: Enable warelays web provider to participate in WhatsApp group chats, re
- If `requireMention` and no mention detected, store in buffer only; no reply.
- Allow opt-out via `requireMention: false`.
- **Allow list**:
- Apply `inbound.allowFrom` to the *participant* (senderE164), not the group ID. Same-phone bypass preserved.
- Group chats ignore `inbound.allowFrom` so anyone in the group can trigger a reply; we still record the sender E.164 for context.
- Direct chats keep enforcing `inbound.allowFrom` (same-phone bypass preserved).
- **Heartbeats**:
- Skip reply heartbeats when the last inbound was a group chat; connection heartbeat still runs.
- **Sessions**: