fix: trim sender ids before auth fallback

src/auto-reply/command-auth.test.ts

@@ -27,4 +27,50 @@ describe("resolveCommandAuthorization", () => {
     expect(auth.senderId).toBe("+123");
     expect(auth.isAuthorizedSender).toBe(true);
   });
+
+  it("falls back from whitespace SenderId to SenderE164", () => {
+    const cfg = {
+      whatsapp: { allowFrom: ["+123"] },
+    } as ClawdbotConfig;
+
+    const ctx = {
+      Provider: "whatsapp",
+      Surface: "whatsapp",
+      From: "whatsapp:+999",
+      SenderId: "   ",
+      SenderE164: "+123",
+    } as MsgContext;
+
+    const auth = resolveCommandAuthorization({
+      ctx,
+      cfg,
+      commandAuthorized: true,
+    });
+
+    expect(auth.senderId).toBe("+123");
+    expect(auth.isAuthorizedSender).toBe(true);
+  });
+
+  it("falls back to From when SenderId and SenderE164 are whitespace", () => {
+    const cfg = {
+      whatsapp: { allowFrom: ["+999"] },
+    } as ClawdbotConfig;
+
+    const ctx = {
+      Provider: "whatsapp",
+      Surface: "whatsapp",
+      From: "whatsapp:+999",
+      SenderId: "   ",
+      SenderE164: "   ",
+    } as MsgContext;
+
+    const auth = resolveCommandAuthorization({
+      ctx,
+      cfg,
+      commandAuthorized: true,
+    });
+
+    expect(auth.senderId).toBe("+999");
+    expect(auth.isAuthorizedSender).toBe(true);
+  });
 });

src/auto-reply/command-auth.ts

@@ -96,7 +96,9 @@ export function resolveCommandAuthorization(params: {
   }
   const ownerList = ownerCandidates;
 
-  const senderRaw = ctx.SenderId || ctx.SenderE164 || from;
+  const senderIdCandidate = ctx.SenderId?.trim() ?? "";
+  const senderE164Candidate = ctx.SenderE164?.trim() ?? "";
+  const senderRaw = senderIdCandidate || senderE164Candidate || from;
   const senderId = senderRaw
     ? formatAllowFromList({
         dock,