@rubytech/create-maxy-code 0.1.267 → 0.1.268

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.267",
+  "version": "0.1.268",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/services/whatsapp-channel/dist/notification.d.ts

@@ -0,0 +1,40 @@
+export interface InboundPayload {
+    /** The WhatsApp sender this payload is for (E.164 digits or JID). */
+    senderId: string;
+    /** The message body, verbatim — multi-line content is preserved. */
+    text: string;
+    /** The WhatsApp message id, for dedup/observability. */
+    waMessageId: string;
+}
+/**
+ * Shape an inbound WhatsApp payload as a Claude Code channel notification.
+ * `content` becomes the `<channel>` body; each `meta` entry becomes a tag
+ * attribute, so keys must be identifier-safe ([A-Za-z0-9_]) — hyphenated
+ * keys are silently dropped by Claude Code.
+ */
+export declare function buildInboundNotification(p: InboundPayload): {
+    method: "notifications/claude/channel";
+    params: {
+        content: string;
+        meta: Record<string, string>;
+    };
+};
+/**
+ * Defence in depth: this server serves exactly one sender. Even though the
+ * gateway only streams that sender's messages, refuse anything else before
+ * it reaches the session.
+ */
+export declare function acceptsSender(mySenderId: string, p: {
+    senderId: string;
+}): boolean;
+/**
+ * Build the body for POST /wa-channel/reply. The reply tool exposes only
+ * `text` to the model; the senderId is the server's fixed sender (from spawn
+ * env), never trusted from the model, so a compromised turn cannot redirect a
+ * reply to a different WhatsApp recipient.
+ */
+export declare function buildReplyPostBody(mySenderId: string, text: string): {
+    senderId: string;
+    text: string;
+};
+//# sourceMappingURL=notification.d.ts.map

package/payload/platform/services/whatsapp-channel/dist/notification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.d.ts","sourceRoot":"","sources":["../src/notification.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,cAAc;IAC7B,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAA;IAChB,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAA;IACZ,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,cAAc;;;;cAKa,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;EAG5F;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAElF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAEvG"}

package/payload/platform/services/whatsapp-channel/dist/notification.js

@@ -0,0 +1,36 @@
+// Pure helpers for the WhatsApp channel server. No MCP SDK import here, so
+// these can be unit-tested without the SDK installed and so the server's
+// transport wiring (server.ts) stays separable from its message shaping.
+/**
+ * Shape an inbound WhatsApp payload as a Claude Code channel notification.
+ * `content` becomes the `<channel>` body; each `meta` entry becomes a tag
+ * attribute, so keys must be identifier-safe ([A-Za-z0-9_]) — hyphenated
+ * keys are silently dropped by Claude Code.
+ */
+export function buildInboundNotification(p) {
+    return {
+        method: 'notifications/claude/channel',
+        params: {
+            content: p.text,
+            meta: { sender_id: p.senderId, wa_message_id: p.waMessageId },
+        },
+    };
+}
+/**
+ * Defence in depth: this server serves exactly one sender. Even though the
+ * gateway only streams that sender's messages, refuse anything else before
+ * it reaches the session.
+ */
+export function acceptsSender(mySenderId, p) {
+    return p.senderId === mySenderId;
+}
+/**
+ * Build the body for POST /wa-channel/reply. The reply tool exposes only
+ * `text` to the model; the senderId is the server's fixed sender (from spawn
+ * env), never trusted from the model, so a compromised turn cannot redirect a
+ * reply to a different WhatsApp recipient.
+ */
+export function buildReplyPostBody(mySenderId, text) {
+    return { senderId: mySenderId, text };
+}
+//# sourceMappingURL=notification.js.map

package/payload/platform/services/whatsapp-channel/dist/notification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.js","sourceRoot":"","sources":["../src/notification.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yEAAyE;AACzE,yEAAyE;AAWzE;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,CAAiB;IACxD,OAAO;QACL,MAAM,EAAE,8BAAuC;QAC/C,MAAM,EAAE;YACN,OAAO,EAAE,CAAC,CAAC,IAAI;YACf,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,WAAW,EAA4B;SACxF;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,CAAuB;IACvE,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAA;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,IAAY;IACjE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;AACvC,CAAC"}

package/payload/platform/services/whatsapp-channel/dist/server.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=server.d.ts.map

package/payload/platform/services/whatsapp-channel/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":""}

package/payload/platform/services/whatsapp-channel/dist/server.js

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+// Per-sender WhatsApp channel MCP server. Spawned as a stdio child of one
+// `claude` session (so it dies when that session dies — no bound port, no
+// orphan). It:
+//   - subscribes to the gateway for ITS sender's inbound (SSE) and emits each
+//     message as a notifications/claude/channel event;
+//   - exposes a `reply` tool that posts the agent's reply back to the gateway,
+//     which sends it to WhatsApp.
+//
+// Transport glue only — message shaping and the reply body are the unit-tested
+// pure helpers in ./notification. Verified end-to-end at deploy (Task 7).
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { ListToolsRequestSchema, CallToolRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { acceptsSender, buildInboundNotification, buildReplyPostBody } from './notification.js';
+function requireEnv(name) {
+    const v = process.env[name];
+    if (!v)
+        throw new Error(`whatsapp-channel: missing required env ${name}`);
+    return v;
+}
+const SENDER_ID = requireEnv('WA_CHANNEL_SENDER_ID');
+const GATEWAY_URL = requireEnv('WA_CHANNEL_GATEWAY_URL').replace(/\/$/, '');
+// Co-visibility: the operator watches the same session in claude.ai/code,
+// where the reply tool call shows but its text does not. Instruct the agent to
+// also write its answer as normal assistant text so the operator can read it
+// in the web view, AND relay that same text via the reply tool to WhatsApp.
+const INSTRUCTIONS = `Messages from the WhatsApp sender arrive as <channel source="whatsapp" sender_id="...">. ` +
+    `Always do two things with your response, in this order: (1) write your answer as a normal ` +
+    `assistant message so it is visible in the session, then (2) call the reply tool with that ` +
+    `same text to send it to WhatsApp. Do not skip either step.`;
+const mcp = new Server({ name: 'whatsapp', version: '0.1.0' }, {
+    capabilities: { experimental: { 'claude/channel': {} }, tools: {} },
+    instructions: INSTRUCTIONS,
+});
+mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: [
+        {
+            name: 'reply',
+            description: 'Send your reply text to the WhatsApp sender of this conversation.',
+            inputSchema: {
+                type: 'object',
+                properties: { text: { type: 'string', description: 'The message to send to WhatsApp' } },
+                required: ['text'],
+            },
+        },
+    ],
+}));
+mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
+    if (req.params.name !== 'reply')
+        throw new Error(`unknown tool: ${req.params.name}`);
+    const text = req.params.arguments?.text;
+    if (typeof text !== 'string')
+        throw new Error('reply: text must be a string');
+    const res = await fetch(`${GATEWAY_URL}/wa-channel/reply`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(buildReplyPostBody(SENDER_ID, text)),
+    });
+    if (!res.ok)
+        throw new Error(`reply: gateway returned ${res.status}`);
+    return { content: [{ type: 'text', text: 'sent' }] };
+});
+// Subscribe to this sender's inbound stream and emit each message as an event.
+async function subscribeInbound() {
+    const url = `${GATEWAY_URL}/wa-channel/inbound?senderId=${encodeURIComponent(SENDER_ID)}`;
+    const res = await fetch(url, { headers: { accept: 'text/event-stream' } });
+    if (!res.ok || !res.body)
+        throw new Error(`inbound subscribe failed: ${res.status}`);
+    const reader = res.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = '';
+    for (;;) {
+        const { value, done } = await reader.read();
+        if (done)
+            break;
+        buffer += decoder.decode(value, { stream: true });
+        const frames = buffer.split('\n\n');
+        buffer = frames.pop() ?? '';
+        for (const frame of frames) {
+            const dataLine = frame.split('\n').find((l) => l.startsWith('data:'));
+            if (!dataLine)
+                continue;
+            const data = dataLine.slice('data:'.length).trim();
+            if (!data)
+                continue; // ping
+            let payload;
+            try {
+                payload = JSON.parse(data);
+            }
+            catch {
+                continue;
+            }
+            if (!acceptsSender(SENDER_ID, payload))
+                continue;
+            await mcp.notification(buildInboundNotification(payload));
+        }
+    }
+}
+async function main() {
+    await mcp.connect(new StdioServerTransport());
+    // Tell the gateway this sender's channel is live so any cold-start queue drains.
+    await fetch(`${GATEWAY_URL}/wa-channel/ready`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ senderId: SENDER_ID }),
+    }).catch(() => { });
+    await subscribeInbound();
+}
+main().catch((err) => {
+    console.error(`[whatsapp-channel] fatal: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/payload/platform/services/whatsapp-channel/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA,0EAA0E;AAC1E,0EAA0E;AAC1E,eAAe;AACf,8EAA8E;AAC9E,uDAAuD;AACvD,+EAA+E;AAC/E,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAE1E,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAClG,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,kBAAkB,EAAuB,MAAM,mBAAmB,CAAA;AAEpH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAA;IACzE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,SAAS,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAA;AACpD,MAAM,WAAW,GAAG,UAAU,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAE3E,0EAA0E;AAC1E,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,YAAY,GAChB,2FAA2F;IAC3F,4FAA4F;IAC5F,4FAA4F;IAC5F,4DAA4D,CAAA;AAE9D,MAAM,GAAG,GAAG,IAAI,MAAM,CACpB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EACtC;IACE,YAAY,EAAE,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;IACnE,YAAY,EAAE,YAAY;CAC3B,CACF,CAAA;AAED,GAAG,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IACzD,KAAK,EAAE;QACL;YACE,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,mEAAmE;YAChF,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE,EAAE;gBACxF,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;KACF;CACF,CAAC,CAAC,CAAA;AAEH,GAAG,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;IACzD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACpF,MAAM,IAAI,GAAI,GAAG,CAAC,MAAM,CAAC,SAAgC,EAAE,IAAI,CAAA;IAC/D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAC7E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,mBAAmB,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;KAC1D,CAAC,CAAA;IACF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IACrE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;AACtD,CAAC,CAAC,CAAA;AAEF,+EAA+E;AAC/E,KAAK,UAAU,gBAAgB;IAC7B,MAAM,GAAG,GAAG,GAAG,WAAW,gCAAgC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAA;IACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;IAC1E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IACpF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,IAAI;YAAE,MAAK;QACf,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACnC,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA;YACrE,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YAClD,IAAI,CAAC,IAAI;gBAAE,SAAQ,CAAC,OAAO;YAC3B,IAAI,OAAuB,CAAA;YAC3B,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC;gBAAE,SAAQ;YAChD,MAAM,GAAG,CAAC,YAAY,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAC7C,iFAAiF;IACjF,MAAM,KAAK,CAAC,GAAG,WAAW,mBAAmB,EAAE;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;KAC9C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAClB,MAAM,gBAAgB,EAAE,CAAA;AAC1B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}