fix: gate group activation by owner

2026-01-05 00:48:16 +00:00
parent 1bad96aa2b
commit 85549ac3b6
2 changed files with 10 additions and 2 deletions
--- a/src/auto-reply/reply/commands.ts
+++ b/src/auto-reply/reply/commands.ts
@@ -89,7 +89,11 @@ export function buildCommandContext(params: {
  const ownerList = ownerCandidates
    .map((entry) => normalizeE164(entry))
    .filter((entry): entry is string => Boolean(entry));
-  const isAuthorizedSender = commandAuthorized;
+  const isOwner =
+    !isWhatsAppSurface ||
+    ownerList.length === 0 ||
+    (senderE164 ? ownerList.includes(senderE164) : false);
+  const isAuthorizedSender = commandAuthorized && isOwner;

  return {
    surface,