@stackmemoryai/stackmemory 0.5.33 → 0.5.35

package/dist/hooks/schemas.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/hooks/schemas.ts"],
-  "sourcesContent": ["/**\n * Zod schemas for hook configuration validation\n * Prevents malformed or malicious configs from being loaded\n */\n\nimport { z } from 'zod';\nimport { logConfigInvalid } from './security-logger.js';\n\n// SMS/WhatsApp notification schemas\nexport const PromptOptionSchema = z.object({\n  key: z.string().max(10),\n  label: z.string().max(200),\n  action: z.string().max(500).optional(),\n});\n\nexport const PendingPromptSchema = z.object({\n  id: z.string().max(32),\n  timestamp: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n  message: z.string().max(1000),\n  options: z.array(PromptOptionSchema).max(10),\n  type: z.enum(['options', 'yesno', 'freeform']),\n  callback: z.string().max(500).optional(),\n  expiresAt: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n});\n\nexport const NotifyOnSchema = z.object({\n  taskComplete: z.boolean(),\n  reviewReady: z.boolean(),\n  error: z.boolean(),\n  custom: z.boolean(),\n  contextSync: z.boolean().optional().default(true),\n});\n\nexport const QuietHoursSchema = z.object({\n  enabled: z.boolean(),\n  start: z.string().regex(/^\\d{2}:\\d{2}$/),\n  end: z.string().regex(/^\\d{2}:\\d{2}$/),\n});\n\nexport const SMSConfigSchema = z.object({\n  enabled: z.boolean(),\n  channel: z.enum(['whatsapp', 'sms']),\n  accountSid: z.string().max(100).optional(),\n  authToken: z.string().max(100).optional(),\n  smsFromNumber: z.string().max(20).optional(),\n  smsToNumber: z.string().max(20).optional(),\n  whatsappFromNumber: z.string().max(30).optional(),\n  whatsappToNumber: z.string().max(30).optional(),\n  fromNumber: z.string().max(20).optional(),\n  toNumber: z.string().max(20).optional(),\n  webhookUrl: z.string().url().max(500).optional(),\n  notifyOn: NotifyOnSchema,\n  quietHours: QuietHoursSchema.optional(),\n  responseTimeout: z.number().int().min(30).max(3600),\n  pendingPrompts: z.array(PendingPromptSchema).max(100),\n});\n\n// Action queue schemas\nexport const PendingActionSchema = z.object({\n  id: z.string().max(32),\n  promptId: z.string().max(32),\n  response: z.string().max(1000),\n  action: z.string().max(500),\n  timestamp: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n  status: z.enum(['pending', 'running', 'completed', 'failed']),\n  result: z.string().max(10000).optional(),\n  error: z.string().max(1000).optional(),\n});\n\nexport const ActionQueueSchema = z.object({\n  actions: z.array(PendingActionSchema).max(1000),\n  lastChecked: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n});\n\n// Auto-background config schema\nexport const AutoBackgroundConfigSchema = z.object({\n  enabled: z.boolean(),\n  timeoutMs: z.number().int().min(1000).max(600000),\n  alwaysBackground: z.array(z.string().max(200)).max(100),\n  neverBackground: z.array(z.string().max(200)).max(100),\n  verbose: z.boolean().optional(),\n});\n\n// WhatsApp Sync Options schema\nexport const SyncOptionsSchema = z.object({\n  autoSyncOnClose: z.boolean(),\n  minFrameDuration: z.number().int().min(0).max(3600), // 0 to 1 hour\n  includeDecisions: z.boolean(),\n  includeFiles: z.boolean(),\n  includeTests: z.boolean(),\n  maxDigestLength: z.number().int().min(100).max(1000), // WhatsApp limit ~4096 chars\n});\n\n// WhatsApp Schedule Config schema\nexport const ScheduleConfigSchema = z.object({\n  type: z.enum(['daily', 'hourly', 'interval']),\n  time: z\n    .string()\n    .regex(/^\\d{2}:\\d{2}$/)\n    .optional(), // \"HH:MM\" for daily\n  intervalMinutes: z.number().int().min(5).max(1440).optional(), // 5 min to 24 hours\n  includeInactive: z.boolean(), // Include when no activity\n  quietHoursRespect: z.boolean(), // Respect quiet hours setting\n});\n\n// WhatsApp Schedule storage schema\nexport const ScheduleSchema = z.object({\n  id: z.string().max(32),\n  config: ScheduleConfigSchema,\n  enabled: z.boolean(),\n  lastRun: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/))\n    .optional(),\n  nextRun: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/))\n    .optional(),\n  createdAt: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n});\n\nexport const ScheduleStorageSchema = z.object({\n  schedules: z.array(ScheduleSchema).max(10),\n  lastChecked: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n});\n\n// WhatsApp Command schema\nexport const WhatsAppCommandSchema = z.object({\n  name: z.string().max(50),\n  description: z.string().max(200),\n  enabled: z.boolean(),\n  action: z.string().max(500).optional(), // Safe action to execute\n  requiresArg: z.boolean().optional(),\n  argPattern: z.string().max(100).optional(), // Regex pattern for arg validation\n});\n\nexport const WhatsAppCommandsConfigSchema = z.object({\n  enabled: z.boolean(),\n  commands: z.array(WhatsAppCommandSchema).max(50),\n});\n\n// Type exports\nexport type SMSConfigValidated = z.infer<typeof SMSConfigSchema>;\nexport type ActionQueueValidated = z.infer<typeof ActionQueueSchema>;\nexport type AutoBackgroundConfigValidated = z.infer<\n  typeof AutoBackgroundConfigSchema\n>;\nexport type SyncOptionsValidated = z.infer<typeof SyncOptionsSchema>;\nexport type ScheduleConfigValidated = z.infer<typeof ScheduleConfigSchema>;\nexport type ScheduleValidated = z.infer<typeof ScheduleSchema>;\nexport type ScheduleStorageValidated = z.infer<typeof ScheduleStorageSchema>;\nexport type WhatsAppCommandValidated = z.infer<typeof WhatsAppCommandSchema>;\nexport type WhatsAppCommandsConfigValidated = z.infer<\n  typeof WhatsAppCommandsConfigSchema\n>;\n\n/**\n * Safely parse and validate config, returning default on failure\n */\nexport function parseConfigSafe<T>(\n  schema: z.ZodSchema<T>,\n  data: unknown,\n  defaultValue: T,\n  configName: string\n): T {\n  const result = schema.safeParse(data);\n  if (result.success) {\n    return result.data;\n  }\n  const errors = result.error.issues.map(\n    (i) => `${i.path.join('.')}: ${i.message}`\n  );\n  logConfigInvalid(configName, errors);\n  console.error(`[hooks] Invalid ${configName} config:`, errors.join(', '));\n  return defaultValue;\n}\n"],
-  "mappings": ";;;;AAKA,SAAS,SAAS;AAClB,SAAS,wBAAwB;AAG1B,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACtB,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EACzB,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACrB,WAAW,EACR,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAAA,EAC7C,SAAS,EAAE,OAAO,EAAE,IAAI,GAAI;AAAA,EAC5B,SAAS,EAAE,MAAM,kBAAkB,EAAE,IAAI,EAAE;AAAA,EAC3C,MAAM,EAAE,KAAK,CAAC,WAAW,SAAS,UAAU,CAAC;AAAA,EAC7C,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACvC,WAAW,EACR,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC/C,CAAC;AAEM,MAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,cAAc,EAAE,QAAQ;AAAA,EACxB,aAAa,EAAE,QAAQ;AAAA,EACvB,OAAO,EAAE,QAAQ;AAAA,EACjB,QAAQ,EAAE,QAAQ;AAAA,EAClB,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAClD,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,SAAS,EAAE,QAAQ;AAAA,EACnB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,EACvC,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe;AACvC,CAAC;AAEM,MAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EAAE,KAAK,CAAC,YAAY,KAAK,CAAC;AAAA,EACnC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACzC,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAChD,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC9C,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACtC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC/C,UAAU;AAAA,EACV,YAAY,iBAAiB,SAAS;AAAA,EACtC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;AAAA,EAClD,gBAAgB,EAAE,MAAM,mBAAmB,EAAE,IAAI,GAAG;AACtD,CAAC;AAGM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,GAAI;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EAC1B,WAAW,EACR,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAAA,EAC7C,QAAQ,EAAE,KAAK,CAAC,WAAW,WAAW,aAAa,QAAQ,CAAC;AAAA,EAC5D,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAK,EAAE,SAAS;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,SAAS,EAAE,MAAM,mBAAmB,EAAE,IAAI,GAAI;AAAA,EAC9C,aAAa,EACV,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC/C,CAAC;AAGM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,SAAS,EAAE,QAAQ;AAAA,EACnB,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAI,EAAE,IAAI,GAAM;AAAA,EAChD,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG;AAAA,EACtD,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG;AAAA,EACrD,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAGM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,iBAAiB,EAAE,QAAQ;AAAA,EAC3B,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA;AAAA,EAClD,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,cAAc,EAAE,QAAQ;AAAA,EACxB,cAAc,EAAE,QAAQ;AAAA,EACxB,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAI;AAAA;AACrD,CAAC;AAGM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,KAAK,CAAC,SAAS,UAAU,UAAU,CAAC;AAAA,EAC5C,MAAM,EACH,OAAO,EACP,MAAM,eAAe,EACrB,SAAS;AAAA;AAAA,EACZ,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAC5D,iBAAiB,EAAE,QAAQ;AAAA;AAAA,EAC3B,mBAAmB,EAAE,QAAQ;AAAA;AAC/B,CAAC;AAGM,MAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACrB,QAAQ;AAAA,EACR,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EACN,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC,EAC1C,SAAS;AAAA,EACZ,SAAS,EACN,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC,EAC1C,SAAS;AAAA,EACZ,WAAW,EACR,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC/C,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,WAAW,EAAE,MAAM,cAAc,EAAE,IAAI,EAAE;AAAA,EACzC,aAAa,EACV,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC/C,CAAC;AAGM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EAC/B,SAAS,EAAE,QAAQ;AAAA,EACnB,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EACrC,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAC3C,CAAC;AAEM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,SAAS,EAAE,QAAQ;AAAA,EACnB,UAAU,EAAE,MAAM,qBAAqB,EAAE,IAAI,EAAE;AACjD,CAAC;AAoBM,SAAS,gBACd,QACA,MACA,cACA,YACG;AACH,QAAM,SAAS,OAAO,UAAU,IAAI;AACpC,MAAI,OAAO,SAAS;AAClB,WAAO,OAAO;AAAA,EAChB;AACA,QAAM,SAAS,OAAO,MAAM,OAAO;AAAA,IACjC,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO;AAAA,EAC1C;AACA,mBAAiB,YAAY,MAAM;AACnC,UAAQ,MAAM,mBAAmB,UAAU,YAAY,OAAO,KAAK,IAAI,CAAC;AACxE,SAAO;AACT;",
+  "sourcesContent": ["/**\n * Zod schemas for hook configuration validation\n * Prevents malformed or malicious configs from being loaded\n */\n\nimport { z } from 'zod';\nimport { logConfigInvalid } from './security-logger.js';\n\n// SMS/WhatsApp notification schemas\nexport const PromptOptionSchema = z.object({\n  key: z.string().max(10),\n  label: z.string().max(200),\n  action: z.string().max(500).optional(),\n});\n\nexport const PendingPromptSchema = z.object({\n  id: z.string().max(32),\n  timestamp: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n  message: z.string().max(1000),\n  options: z.array(PromptOptionSchema).max(10),\n  type: z.enum(['options', 'yesno', 'freeform']),\n  callback: z.string().max(500).optional(),\n  expiresAt: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n});\n\nexport const NotifyOnSchema = z.object({\n  taskComplete: z.boolean(),\n  reviewReady: z.boolean(),\n  error: z.boolean(),\n  custom: z.boolean(),\n  contextSync: z.boolean().optional().default(true),\n});\n\nexport const QuietHoursSchema = z.object({\n  enabled: z.boolean(),\n  start: z.string().regex(/^\\d{2}:\\d{2}$/),\n  end: z.string().regex(/^\\d{2}:\\d{2}$/),\n});\n\nexport const SMSConfigSchema = z.object({\n  enabled: z.boolean(),\n  channel: z.enum(['whatsapp', 'sms']),\n  accountSid: z.string().max(100).optional(),\n  authToken: z.string().max(100).optional(),\n  smsFromNumber: z.string().max(20).optional(),\n  smsToNumber: z.string().max(20).optional(),\n  whatsappFromNumber: z.string().max(30).optional(),\n  whatsappToNumber: z.string().max(30).optional(),\n  fromNumber: z.string().max(20).optional(),\n  toNumber: z.string().max(20).optional(),\n  webhookUrl: z.string().url().max(500).optional(),\n  notifyOn: NotifyOnSchema,\n  quietHours: QuietHoursSchema.optional(),\n  responseTimeout: z.number().int().min(30).max(3600),\n  pendingPrompts: z.array(PendingPromptSchema).max(100),\n});\n\n// Action queue schemas\nexport const PendingActionSchema = z.object({\n  id: z.string().max(32),\n  promptId: z.string().max(32),\n  response: z.string().max(1000),\n  action: z.string().max(500),\n  timestamp: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n  status: z.enum(['pending', 'running', 'completed', 'failed']),\n  result: z.string().max(10000).optional(),\n  error: z.string().max(1000).optional(),\n});\n\nexport const ActionQueueSchema = z.object({\n  actions: z.array(PendingActionSchema).max(1000),\n  lastChecked: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n});\n\n// Auto-background config schema\nexport const AutoBackgroundConfigSchema = z.object({\n  enabled: z.boolean(),\n  timeoutMs: z.number().int().min(1000).max(600000),\n  alwaysBackground: z.array(z.string().max(200)).max(100),\n  neverBackground: z.array(z.string().max(200)).max(100),\n  verbose: z.boolean().optional(),\n});\n\n// WhatsApp Sync Options schema\nexport const SyncOptionsSchema = z.object({\n  autoSyncOnClose: z.boolean(),\n  minFrameDuration: z.number().int().min(0).max(3600), // 0 to 1 hour\n  includeDecisions: z.boolean(),\n  includeFiles: z.boolean(),\n  includeTests: z.boolean(),\n  maxDigestLength: z.number().int().min(100).max(1000), // WhatsApp limit ~4096 chars\n});\n\n// WhatsApp Schedule Config schema\nexport const ScheduleConfigSchema = z.object({\n  type: z.enum(['daily', 'hourly', 'interval']),\n  time: z\n    .string()\n    .regex(/^\\d{2}:\\d{2}$/)\n    .optional(), // \"HH:MM\" for daily\n  intervalMinutes: z.number().int().min(5).max(1440).optional(), // 5 min to 24 hours\n  includeInactive: z.boolean(), // Include when no activity\n  quietHoursRespect: z.boolean(), // Respect quiet hours setting\n});\n\n// WhatsApp Schedule storage schema\nexport const ScheduleSchema = z.object({\n  id: z.string().max(32),\n  config: ScheduleConfigSchema,\n  enabled: z.boolean(),\n  lastRun: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/))\n    .optional(),\n  nextRun: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/))\n    .optional(),\n  createdAt: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n});\n\nexport const ScheduleStorageSchema = z.object({\n  schedules: z.array(ScheduleSchema).max(10),\n  lastChecked: z\n    .string()\n    .datetime({ offset: true })\n    .or(z.string().regex(/^\\d{4}-\\d{2}-\\d{2}T/)),\n});\n\n// WhatsApp Command schema\nexport const WhatsAppCommandSchema = z.object({\n  name: z.string().max(50),\n  description: z.string().max(200),\n  enabled: z.boolean(),\n  action: z.string().max(500).optional(), // Safe action to execute\n  requiresArg: z.boolean().optional(),\n  argPattern: z.string().max(100).optional(), // Regex pattern for arg validation\n});\n\nexport const WhatsAppCommandsConfigSchema = z.object({\n  enabled: z.boolean(),\n  commands: z.array(WhatsAppCommandSchema).max(50),\n});\n\n// Model Router schemas\nexport const ModelProviderSchema = z.enum([\n  'anthropic',\n  'qwen',\n  'openai',\n  'ollama',\n  'custom',\n]);\n\nexport const ModelConfigSchema = z.object({\n  provider: ModelProviderSchema,\n  model: z.string().max(100),\n  baseUrl: z.string().url().max(500).optional(),\n  apiKeyEnv: z.string().max(100),\n  headers: z.record(z.string().max(500)).optional(),\n  params: z.record(z.unknown()).optional(),\n});\n\nexport const ModelRouterConfigSchema = z.object({\n  enabled: z.boolean(),\n  defaultProvider: ModelProviderSchema,\n  taskRouting: z\n    .object({\n      plan: ModelProviderSchema.optional(),\n      think: ModelProviderSchema.optional(),\n      code: ModelProviderSchema.optional(),\n      review: ModelProviderSchema.optional(),\n    })\n    .optional()\n    .default({}),\n  fallback: z.object({\n    enabled: z.boolean(),\n    provider: ModelProviderSchema,\n    onRateLimit: z.boolean(),\n    onError: z.boolean(),\n    onTimeout: z.boolean(),\n    maxRetries: z.number().int().min(0).max(10),\n    retryDelayMs: z.number().int().min(100).max(30000),\n  }),\n  providers: z\n    .object({\n      anthropic: ModelConfigSchema.optional(),\n      qwen: ModelConfigSchema.optional(),\n      openai: ModelConfigSchema.optional(),\n      ollama: ModelConfigSchema.optional(),\n      custom: ModelConfigSchema.optional(),\n    })\n    .optional()\n    .default({}),\n  thinkingMode: z.object({\n    enabled: z.boolean(),\n    budget: z.number().int().min(1000).max(100000).optional(),\n    temperature: z.number().min(0).max(2).optional(),\n    topP: z.number().min(0).max(1).optional(),\n  }),\n});\n\n// Type exports\nexport type ModelRouterConfigValidated = z.infer<\n  typeof ModelRouterConfigSchema\n>;\nexport type SMSConfigValidated = z.infer<typeof SMSConfigSchema>;\nexport type ActionQueueValidated = z.infer<typeof ActionQueueSchema>;\nexport type AutoBackgroundConfigValidated = z.infer<\n  typeof AutoBackgroundConfigSchema\n>;\nexport type SyncOptionsValidated = z.infer<typeof SyncOptionsSchema>;\nexport type ScheduleConfigValidated = z.infer<typeof ScheduleConfigSchema>;\nexport type ScheduleValidated = z.infer<typeof ScheduleSchema>;\nexport type ScheduleStorageValidated = z.infer<typeof ScheduleStorageSchema>;\nexport type WhatsAppCommandValidated = z.infer<typeof WhatsAppCommandSchema>;\nexport type WhatsAppCommandsConfigValidated = z.infer<\n  typeof WhatsAppCommandsConfigSchema\n>;\n\n/**\n * Safely parse and validate config, returning default on failure\n */\nexport function parseConfigSafe<T>(\n  schema: z.ZodSchema<T>,\n  data: unknown,\n  defaultValue: T,\n  configName: string\n): T {\n  const result = schema.safeParse(data);\n  if (result.success) {\n    return result.data;\n  }\n  const errors = result.error.issues.map(\n    (i) => `${i.path.join('.')}: ${i.message}`\n  );\n  logConfigInvalid(configName, errors);\n  console.error(`[hooks] Invalid ${configName} config:`, errors.join(', '));\n  return defaultValue;\n}\n"],
+  "mappings": ";;;;AAKA,SAAS,SAAS;AAClB,SAAS,wBAAwB;AAG1B,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACtB,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EACzB,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACrB,WAAW,EACR,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAAA,EAC7C,SAAS,EAAE,OAAO,EAAE,IAAI,GAAI;AAAA,EAC5B,SAAS,EAAE,MAAM,kBAAkB,EAAE,IAAI,EAAE;AAAA,EAC3C,MAAM,EAAE,KAAK,CAAC,WAAW,SAAS,UAAU,CAAC;AAAA,EAC7C,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACvC,WAAW,EACR,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC/C,CAAC;AAEM,MAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,cAAc,EAAE,QAAQ;AAAA,EACxB,aAAa,EAAE,QAAQ;AAAA,EACvB,OAAO,EAAE,QAAQ;AAAA,EACjB,QAAQ,EAAE,QAAQ;AAAA,EAClB,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAClD,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,SAAS,EAAE,QAAQ;AAAA,EACnB,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe;AAAA,EACvC,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe;AACvC,CAAC;AAEM,MAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EAAE,KAAK,CAAC,YAAY,KAAK,CAAC;AAAA,EACnC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC3C,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACzC,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAChD,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EAC9C,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACtC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC/C,UAAU;AAAA,EACV,YAAY,iBAAiB,SAAS;AAAA,EACtC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;AAAA,EAClD,gBAAgB,EAAE,MAAM,mBAAmB,EAAE,IAAI,GAAG;AACtD,CAAC;AAGM,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,GAAI;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EAC1B,WAAW,EACR,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAAA,EAC7C,QAAQ,EAAE,KAAK,CAAC,WAAW,WAAW,aAAa,QAAQ,CAAC;AAAA,EAC5D,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAK,EAAE,SAAS;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,SAAS,EAAE,MAAM,mBAAmB,EAAE,IAAI,GAAI;AAAA,EAC9C,aAAa,EACV,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC/C,CAAC;AAGM,MAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,SAAS,EAAE,QAAQ;AAAA,EACnB,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAI,EAAE,IAAI,GAAM;AAAA,EAChD,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG;AAAA,EACtD,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG;AAAA,EACrD,SAAS,EAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAGM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,iBAAiB,EAAE,QAAQ;AAAA,EAC3B,kBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA;AAAA,EAClD,kBAAkB,EAAE,QAAQ;AAAA,EAC5B,cAAc,EAAE,QAAQ;AAAA,EACxB,cAAc,EAAE,QAAQ;AAAA,EACxB,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAI;AAAA;AACrD,CAAC;AAGM,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,KAAK,CAAC,SAAS,UAAU,UAAU,CAAC;AAAA,EAC5C,MAAM,EACH,OAAO,EACP,MAAM,eAAe,EACrB,SAAS;AAAA;AAAA,EACZ,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAC5D,iBAAiB,EAAE,QAAQ;AAAA;AAAA,EAC3B,mBAAmB,EAAE,QAAQ;AAAA;AAC/B,CAAC;AAGM,MAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACrB,QAAQ;AAAA,EACR,SAAS,EAAE,QAAQ;AAAA,EACnB,SAAS,EACN,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC,EAC1C,SAAS;AAAA,EACZ,SAAS,EACN,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC,EAC1C,SAAS;AAAA,EACZ,WAAW,EACR,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC/C,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,WAAW,EAAE,MAAM,cAAc,EAAE,IAAI,EAAE;AAAA,EACzC,aAAa,EACV,OAAO,EACP,SAAS,EAAE,QAAQ,KAAK,CAAC,EACzB,GAAG,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC/C,CAAC;AAGM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EAC/B,SAAS,EAAE,QAAQ;AAAA,EACnB,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EACrC,aAAa,EAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAC3C,CAAC;AAEM,MAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,SAAS,EAAE,QAAQ;AAAA,EACnB,UAAU,EAAE,MAAM,qBAAqB,EAAE,IAAI,EAAE;AACjD,CAAC;AAGM,MAAM,sBAAsB,EAAE,KAAK;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,UAAU;AAAA,EACV,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EACzB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC5C,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EAC7B,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,EAAE,SAAS;AAAA,EAChD,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS;AACzC,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,SAAS,EAAE,QAAQ;AAAA,EACnB,iBAAiB;AAAA,EACjB,aAAa,EACV,OAAO;AAAA,IACN,MAAM,oBAAoB,SAAS;AAAA,IACnC,OAAO,oBAAoB,SAAS;AAAA,IACpC,MAAM,oBAAoB,SAAS;AAAA,IACnC,QAAQ,oBAAoB,SAAS;AAAA,EACvC,CAAC,EACA,SAAS,EACT,QAAQ,CAAC,CAAC;AAAA,EACb,UAAU,EAAE,OAAO;AAAA,IACjB,SAAS,EAAE,QAAQ;AAAA,IACnB,UAAU;AAAA,IACV,aAAa,EAAE,QAAQ;AAAA,IACvB,SAAS,EAAE,QAAQ;AAAA,IACnB,WAAW,EAAE,QAAQ;AAAA,IACrB,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,IAC1C,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,IAAI,GAAK;AAAA,EACnD,CAAC;AAAA,EACD,WAAW,EACR,OAAO;AAAA,IACN,WAAW,kBAAkB,SAAS;AAAA,IACtC,MAAM,kBAAkB,SAAS;AAAA,IACjC,QAAQ,kBAAkB,SAAS;AAAA,IACnC,QAAQ,kBAAkB,SAAS;AAAA,IACnC,QAAQ,kBAAkB,SAAS;AAAA,EACrC,CAAC,EACA,SAAS,EACT,QAAQ,CAAC,CAAC;AAAA,EACb,cAAc,EAAE,OAAO;AAAA,IACrB,SAAS,EAAE,QAAQ;AAAA,IACnB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAI,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA,IACxD,aAAa,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAC/C,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC1C,CAAC;AACH,CAAC;AAuBM,SAAS,gBACd,QACA,MACA,cACA,YACG;AACH,QAAM,SAAS,OAAO,UAAU,IAAI;AACpC,MAAI,OAAO,SAAS;AAClB,WAAO,OAAO;AAAA,EAChB;AACA,QAAM,SAAS,OAAO,MAAM,OAAO;AAAA,IACjC,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO;AAAA,EAC1C;AACA,mBAAiB,YAAY,MAAM;AACnC,UAAQ,MAAM,mBAAmB,UAAU,YAAY,OAAO,KAAK,IAAI,CAAC;AACxE,SAAO;AACT;",
   "names": []
 }

package/dist/hooks/sms-action-runner.js

@@ -11,6 +11,45 @@ import { writeFileSecure, ensureSecureDir } from "./secure-fs.js";
 import { ActionQueueSchema, parseConfigSafe } from "./schemas.js";
 import { LinearClient } from "../integrations/linear/client.js";
 import { LinearAuthManager } from "../integrations/linear/auth.js";
+function parseCommandArgs(command) {
+  const args = [];
+  let current = "";
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+  let escaped = false;
+  for (let i = 0; i < command.length; i++) {
+    const char = command[i];
+    if (escaped) {
+      current += char;
+      escaped = false;
+      continue;
+    }
+    if (char === "\\" && !inSingleQuote) {
+      escaped = true;
+      continue;
+    }
+    if (char === "'" && !inDoubleQuote) {
+      inSingleQuote = !inSingleQuote;
+      continue;
+    }
+    if (char === '"' && !inSingleQuote) {
+      inDoubleQuote = !inDoubleQuote;
+      continue;
+    }
+    if (char === " " && !inSingleQuote && !inDoubleQuote) {
+      if (current.length > 0) {
+        args.push(current);
+        current = "";
+      }
+      continue;
+    }
+    current += char;
+  }
+  if (current.length > 0) {
+    args.push(current);
+  }
+  return args;
+}
 const SAFE_ACTION_PATTERNS = [
   // Git/GitHub CLI commands (limited to safe operations)
   { pattern: /^gh pr (view|list|status|checks) (\d+)$/ },
@@ -41,6 +80,10 @@ const SAFE_ACTION_PATTERNS = [
   { pattern: /^context$/i },
   { pattern: /^help$/i },
   { pattern: /^sync$/i },
+  // Claude Code launcher
+  { pattern: /^claude-sm$/ },
+  // Log viewing (safe read-only)
+  { pattern: /^tail -\d+ ~\/\.claude\/logs\/\*\.log$/ },
   // Custom aliases (cwm = claude worktree merge)
   { pattern: /^cwm$/ },
   // Simple echo/confirmation (no variables)
@@ -169,7 +212,10 @@ async function executeActionSafe(action, _response) {
   }
   try {
     console.log(`[sms-action] Executing safe action: ${action}`);
-    const parts = action.split(" ");
+    const parts = parseCommandArgs(action);
+    if (parts.length === 0) {
+      return { success: false, error: "Empty command" };
+    }
     const cmd = parts[0];
     const args = parts.slice(1);
     const output = execFileSync(cmd, args, {

package/dist/hooks/sms-action-runner.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/hooks/sms-action-runner.ts"],
-  "sourcesContent": ["/**\n * SMS Action Runner - Executes actions based on SMS responses\n * Bridges SMS responses to Claude Code actions\n *\n * Security: Uses allowlist-based action execution to prevent command injection\n */\n\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport { execFileSync } from 'child_process';\nimport { randomBytes } from 'crypto';\nimport { writeFileSecure, ensureSecureDir } from './secure-fs.js';\nimport { ActionQueueSchema, parseConfigSafe } from './schemas.js';\nimport { LinearClient } from '../integrations/linear/client.js';\nimport { LinearAuthManager } from '../integrations/linear/auth.js';\n\n// Allowlist of safe action patterns\nconst SAFE_ACTION_PATTERNS: Array<{\n  pattern: RegExp;\n  validate?: (match: RegExpMatchArray) => boolean;\n}> = [\n  // Git/GitHub CLI commands (limited to safe operations)\n  { pattern: /^gh pr (view|list|status|checks) (\\d+)$/ },\n  { pattern: /^gh pr review (\\d+) --approve$/ },\n  { pattern: /^gh pr merge (\\d+) --squash$/ },\n  { pattern: /^gh issue (view|list) (\\d+)?$/ },\n\n  // NPM commands (limited to safe operations)\n  { pattern: /^npm run (build|test|lint|lint:fix|test:run)$/ },\n  { pattern: /^npm (test|run build)$/ },\n\n  // StackMemory commands\n  { pattern: /^stackmemory (status|notify check|context list)$/ },\n  // Task start with optional --assign-me flag (Linear task ID is UUID format)\n  {\n    pattern: /^stackmemory task start ([a-f0-9-]{36})( --assign-me)?$/,\n  },\n  // Additional StackMemory commands for mobile/WhatsApp\n  { pattern: /^stackmemory context show$/ },\n  { pattern: /^stackmemory task list$/ },\n\n  // Git commands\n  { pattern: /^git (status|diff|log|branch)( --[a-z-]+)*$/ },\n  { pattern: /^git add -A && git commit$/ },\n  { pattern: /^gh pr create --fill$/ },\n  // Git log with line limit for mobile-friendly output\n  { pattern: /^git log --oneline -\\d{1,2}$/ },\n\n  // WhatsApp/Mobile quick commands\n  { pattern: /^status$/i },\n  { pattern: /^tasks$/i },\n  { pattern: /^context$/i },\n  { pattern: /^help$/i },\n  { pattern: /^sync$/i },\n\n  // Custom aliases (cwm = claude worktree merge)\n  { pattern: /^cwm$/ },\n\n  // Simple echo/confirmation (no variables)\n  {\n    pattern:\n      /^echo \"?(Done|OK|Confirmed|Acknowledged|Great work! Time for a coffee break\\.)\"?$/,\n  },\n];\n\n/**\n * Check if an action is in the allowlist\n */\nfunction isActionAllowed(action: string): boolean {\n  const trimmed = action.trim();\n  return SAFE_ACTION_PATTERNS.some(({ pattern, validate }) => {\n    const match = trimmed.match(pattern);\n    if (!match) return false;\n    if (validate && !validate(match)) return false;\n    return true;\n  });\n}\n\nexport interface PendingAction {\n  id: string;\n  promptId: string;\n  response: string;\n  action: string;\n  timestamp: string;\n  status: 'pending' | 'running' | 'completed' | 'failed';\n  result?: string;\n  error?: string;\n}\n\nexport interface ActionQueue {\n  actions: PendingAction[];\n  lastChecked: string;\n}\n\nconst QUEUE_PATH = join(homedir(), '.stackmemory', 'sms-action-queue.json');\n\nconst DEFAULT_QUEUE: ActionQueue = {\n  actions: [],\n  lastChecked: new Date().toISOString(),\n};\n\nexport function loadActionQueue(): ActionQueue {\n  try {\n    if (existsSync(QUEUE_PATH)) {\n      const data = JSON.parse(readFileSync(QUEUE_PATH, 'utf8'));\n      return parseConfigSafe(\n        ActionQueueSchema,\n        data,\n        DEFAULT_QUEUE,\n        'action-queue'\n      );\n    }\n  } catch {\n    // Use defaults\n  }\n  return { ...DEFAULT_QUEUE, lastChecked: new Date().toISOString() };\n}\n\nexport function saveActionQueue(queue: ActionQueue): void {\n  try {\n    ensureSecureDir(join(homedir(), '.stackmemory'));\n    writeFileSecure(QUEUE_PATH, JSON.stringify(queue, null, 2));\n  } catch {\n    // Silently fail\n  }\n}\n\nexport function queueAction(\n  promptId: string,\n  response: string,\n  action: string\n): string {\n  const queue = loadActionQueue();\n  // Use cryptographically secure random ID\n  const id = randomBytes(8).toString('hex');\n\n  queue.actions.push({\n    id,\n    promptId,\n    response,\n    action,\n    timestamp: new Date().toISOString(),\n    status: 'pending',\n  });\n\n  saveActionQueue(queue);\n  return id;\n}\n\n/**\n * Get Linear client if available\n * Returns null if credentials are missing or invalid\n */\nfunction getLinearClient(): LinearClient | null {\n  // Try API key first - must be valid format (lin_api_*)\n  const apiKey = process.env['LINEAR_API_KEY'];\n  if (apiKey && apiKey.startsWith('lin_api_')) {\n    return new LinearClient({ apiKey });\n  }\n\n  try {\n    const authManager = new LinearAuthManager();\n    const tokens = authManager.loadTokens();\n    if (tokens?.accessToken) {\n      return new LinearClient({ accessToken: tokens.accessToken });\n    }\n  } catch {\n    // Auth not available\n  }\n\n  return null;\n}\n\n/**\n * Handle special actions that require API calls instead of shell commands\n */\nasync function handleSpecialAction(action: string): Promise<{\n  handled: boolean;\n  success?: boolean;\n  output?: string;\n  error?: string;\n}> {\n  // Handle stackmemory task start command\n  const taskStartMatch = action.match(\n    /^stackmemory task start ([a-f0-9-]{36})( --assign-me)?$/\n  );\n  if (taskStartMatch) {\n    const issueId = taskStartMatch[1];\n    const client = getLinearClient();\n\n    if (!client) {\n      return {\n        handled: true,\n        success: false,\n        error:\n          'Linear not configured. Set LINEAR_API_KEY or run stackmemory linear setup.',\n      };\n    }\n\n    try {\n      const result = await client.startIssue(issueId);\n      if (result.success && result.issue) {\n        return {\n          handled: true,\n          success: true,\n          output: `Started: ${result.issue.identifier} - ${result.issue.title}`,\n        };\n      }\n      return {\n        handled: true,\n        success: false,\n        error: result.error || 'Failed to start issue',\n      };\n    } catch (err) {\n      return {\n        handled: true,\n        success: false,\n        error: err instanceof Error ? err.message : 'Unknown error',\n      };\n    }\n  }\n\n  return { handled: false };\n}\n\n/**\n * Execute an action safely using allowlist validation\n * This prevents command injection by only allowing pre-approved commands\n */\nexport async function executeActionSafe(\n  action: string,\n  _response: string\n): Promise<{ success: boolean; output?: string; error?: string }> {\n  // Check if action is in allowlist\n  if (!isActionAllowed(action)) {\n    console.error(`[sms-action] Action not in allowlist: ${action}`);\n    return {\n      success: false,\n      error: `Action not allowed. Only pre-approved commands can be executed via SMS.`,\n    };\n  }\n\n  // Check for special actions that need API calls\n  const specialResult = await handleSpecialAction(action);\n  if (specialResult.handled) {\n    return {\n      success: specialResult.success || false,\n      output: specialResult.output,\n      error: specialResult.error,\n    };\n  }\n\n  try {\n    console.log(`[sms-action] Executing safe action: ${action}`);\n\n    // Parse the action into command and args\n    const parts = action.split(' ');\n    const cmd = parts[0];\n    const args = parts.slice(1);\n\n    // Use execFileSync for commands without shell interpretation\n    // This prevents shell injection even if the allowlist is somehow bypassed\n    const output = execFileSync(cmd, args, {\n      encoding: 'utf8',\n      timeout: 60000,\n      stdio: ['pipe', 'pipe', 'pipe'],\n      shell: false, // Explicitly disable shell\n    });\n\n    return { success: true, output };\n  } catch (err) {\n    const error = err instanceof Error ? err.message : String(err);\n    return { success: false, error };\n  }\n}\n\nexport function getPendingActions(): PendingAction[] {\n  const queue = loadActionQueue();\n  return queue.actions.filter((a) => a.status === 'pending');\n}\n\nexport function markActionRunning(id: string): void {\n  const queue = loadActionQueue();\n  const action = queue.actions.find((a) => a.id === id);\n  if (action) {\n    action.status = 'running';\n    saveActionQueue(queue);\n  }\n}\n\nexport function markActionCompleted(\n  id: string,\n  result?: string,\n  error?: string\n): void {\n  const queue = loadActionQueue();\n  const action = queue.actions.find((a) => a.id === id);\n  if (action) {\n    action.status = error ? 'failed' : 'completed';\n    action.result = result;\n    action.error = error;\n    saveActionQueue(queue);\n  }\n}\n\nexport async function executeAction(action: PendingAction): Promise<{\n  success: boolean;\n  output?: string;\n  error?: string;\n}> {\n  markActionRunning(action.id);\n\n  // Use the safe execution path to prevent command injection\n  const result = await executeActionSafe(action.action, action.response);\n\n  if (result.success) {\n    markActionCompleted(action.id, result.output);\n  } else {\n    markActionCompleted(action.id, undefined, result.error);\n  }\n\n  return result;\n}\n\nexport async function processAllPendingActions(): Promise<{\n  processed: number;\n  succeeded: number;\n  failed: number;\n}> {\n  const pending = getPendingActions();\n  let succeeded = 0;\n  let failed = 0;\n\n  for (const action of pending) {\n    const result = await executeAction(action);\n    if (result.success) {\n      succeeded++;\n    } else {\n      failed++;\n    }\n  }\n\n  return { processed: pending.length, succeeded, failed };\n}\n\n// Clean up old completed actions (keep last 50)\nexport function cleanupOldActions(): number {\n  const queue = loadActionQueue();\n  const completed = queue.actions.filter(\n    (a) => a.status === 'completed' || a.status === 'failed'\n  );\n\n  if (completed.length > 50) {\n    const toRemove = completed.slice(0, completed.length - 50);\n    queue.actions = queue.actions.filter(\n      (a) => !toRemove.find((r) => r.id === a.id)\n    );\n    saveActionQueue(queue);\n    return toRemove.length;\n  }\n\n  return 0;\n}\n\n/**\n * Action Templates - Common actions for SMS responses\n *\n * SECURITY NOTE: These templates return command strings that must be\n * validated against SAFE_ACTION_PATTERNS before execution.\n * Templates that accept user input are removed to prevent injection.\n */\nexport const ACTION_TEMPLATES = {\n  // Git/PR actions (PR numbers must be validated as integers)\n  approvePR: (prNumber: string) => {\n    // Validate PR number is numeric only\n    if (!/^\\d+$/.test(prNumber)) {\n      throw new Error('Invalid PR number');\n    }\n    return `gh pr review ${prNumber} --approve`;\n  },\n  mergePR: (prNumber: string) => {\n    if (!/^\\d+$/.test(prNumber)) {\n      throw new Error('Invalid PR number');\n    }\n    return `gh pr merge ${prNumber} --squash`;\n  },\n  viewPR: (prNumber: string) => {\n    if (!/^\\d+$/.test(prNumber)) {\n      throw new Error('Invalid PR number');\n    }\n    return `gh pr view ${prNumber}`;\n  },\n\n  // Build actions (no user input)\n  rebuild: () => `npm run build`,\n  retest: () => `npm run test:run`,\n  lint: () => `npm run lint:fix`,\n\n  // Status actions (no user input)\n  status: () => `stackmemory status`,\n  checkNotifications: () => `stackmemory notify check`,\n\n  // REMOVED for security - these templates allowed arbitrary user input:\n  // - requestChanges (allowed arbitrary message)\n  // - closePR (could be used maliciously)\n  // - deploy/rollback (too dangerous for SMS)\n  // - verifyDeployment (allowed arbitrary URL)\n  // - notifySlack (allowed arbitrary message - command injection)\n  // - notifyTeam (allowed arbitrary message - command injection)\n};\n\n/**\n * Create action string from template\n */\nexport function createAction(\n  template: keyof typeof ACTION_TEMPLATES,\n  ...args: string[]\n): string {\n  const fn = ACTION_TEMPLATES[template];\n  if (typeof fn === 'function') {\n    return (fn as (...args: string[]) => string)(...args);\n  }\n  return fn;\n}\n\n/**\n * Watch for new actions and execute them\n */\nexport function startActionWatcher(intervalMs: number = 5000): NodeJS.Timeout {\n  console.log(\n    `[sms-action] Starting action watcher (interval: ${intervalMs}ms)`\n  );\n\n  return setInterval(() => {\n    const pending = getPendingActions();\n    if (pending.length > 0) {\n      console.log(`[sms-action] Found ${pending.length} pending action(s)`);\n      processAllPendingActions();\n    }\n  }, intervalMs);\n}\n\n/**\n * Integration with SMS webhook - queue action when response received\n */\nexport function handleSMSResponse(\n  promptId: string,\n  response: string,\n  action?: string\n): void {\n  if (action) {\n    const actionId = queueAction(promptId, response, action);\n    console.log(`[sms-action] Queued action ${actionId}: ${action}`);\n  }\n}\n"],
-  "mappings": ";;;;AAOA,SAAS,YAAY,oBAAoB;AACzC,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAC5B,SAAS,iBAAiB,uBAAuB;AACjD,SAAS,mBAAmB,uBAAuB;AACnD,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAGlC,MAAM,uBAGD;AAAA;AAAA,EAEH,EAAE,SAAS,0CAA0C;AAAA,EACrD,EAAE,SAAS,iCAAiC;AAAA,EAC5C,EAAE,SAAS,+BAA+B;AAAA,EAC1C,EAAE,SAAS,gCAAgC;AAAA;AAAA,EAG3C,EAAE,SAAS,gDAAgD;AAAA,EAC3D,EAAE,SAAS,yBAAyB;AAAA;AAAA,EAGpC,EAAE,SAAS,mDAAmD;AAAA;AAAA,EAE9D;AAAA,IACE,SAAS;AAAA,EACX;AAAA;AAAA,EAEA,EAAE,SAAS,6BAA6B;AAAA,EACxC,EAAE,SAAS,0BAA0B;AAAA;AAAA,EAGrC,EAAE,SAAS,8CAA8C;AAAA,EACzD,EAAE,SAAS,6BAA6B;AAAA,EACxC,EAAE,SAAS,wBAAwB;AAAA;AAAA,EAEnC,EAAE,SAAS,+BAA+B;AAAA;AAAA,EAG1C,EAAE,SAAS,YAAY;AAAA,EACvB,EAAE,SAAS,WAAW;AAAA,EACtB,EAAE,SAAS,aAAa;AAAA,EACxB,EAAE,SAAS,UAAU;AAAA,EACrB,EAAE,SAAS,UAAU;AAAA;AAAA,EAGrB,EAAE,SAAS,QAAQ;AAAA;AAAA,EAGnB;AAAA,IACE,SACE;AAAA,EACJ;AACF;AAKA,SAAS,gBAAgB,QAAyB;AAChD,QAAM,UAAU,OAAO,KAAK;AAC5B,SAAO,qBAAqB,KAAK,CAAC,EAAE,SAAS,SAAS,MAAM;AAC1D,UAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,YAAY,CAAC,SAAS,KAAK,EAAG,QAAO;AACzC,WAAO;AAAA,EACT,CAAC;AACH;AAkBA,MAAM,aAAa,KAAK,QAAQ,GAAG,gBAAgB,uBAAuB;AAE1E,MAAM,gBAA6B;AAAA,EACjC,SAAS,CAAC;AAAA,EACV,cAAa,oBAAI,KAAK,GAAE,YAAY;AACtC;AAEO,SAAS,kBAA+B;AAC7C,MAAI;AACF,QAAI,WAAW,UAAU,GAAG;AAC1B,YAAM,OAAO,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;AACxD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,EAAE,GAAG,eAAe,cAAa,oBAAI,KAAK,GAAE,YAAY,EAAE;AACnE;AAEO,SAAS,gBAAgB,OAA0B;AACxD,MAAI;AACF,oBAAgB,KAAK,QAAQ,GAAG,cAAc,CAAC;AAC/C,oBAAgB,YAAY,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC5D,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,YACd,UACA,UACA,QACQ;AACR,QAAM,QAAQ,gBAAgB;AAE9B,QAAM,KAAK,YAAY,CAAC,EAAE,SAAS,KAAK;AAExC,QAAM,QAAQ,KAAK;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,QAAQ;AAAA,EACV,CAAC;AAED,kBAAgB,KAAK;AACrB,SAAO;AACT;AAMA,SAAS,kBAAuC;AAE9C,QAAM,SAAS,QAAQ,IAAI,gBAAgB;AAC3C,MAAI,UAAU,OAAO,WAAW,UAAU,GAAG;AAC3C,WAAO,IAAI,aAAa,EAAE,OAAO,CAAC;AAAA,EACpC;AAEA,MAAI;AACF,UAAM,cAAc,IAAI,kBAAkB;AAC1C,UAAM,SAAS,YAAY,WAAW;AACtC,QAAI,QAAQ,aAAa;AACvB,aAAO,IAAI,aAAa,EAAE,aAAa,OAAO,YAAY,CAAC;AAAA,IAC7D;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO;AACT;AAKA,eAAe,oBAAoB,QAKhC;AAED,QAAM,iBAAiB,OAAO;AAAA,IAC5B;AAAA,EACF;AACA,MAAI,gBAAgB;AAClB,UAAM,UAAU,eAAe,CAAC;AAChC,UAAM,SAAS,gBAAgB;AAE/B,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,OACE;AAAA,MACJ;AAAA,IACF;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,OAAO,WAAW,OAAO;AAC9C,UAAI,OAAO,WAAW,OAAO,OAAO;AAClC,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS;AAAA,UACT,QAAQ,YAAY,OAAO,MAAM,UAAU,MAAM,OAAO,MAAM,KAAK;AAAA,QACrE;AAAA,MACF;AACA,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,OAAO,OAAO,SAAS;AAAA,MACzB;AAAA,IACF,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,OAAO,eAAe,QAAQ,IAAI,UAAU;AAAA,MAC9C;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAMA,eAAsB,kBACpB,QACA,WACgE;AAEhE,MAAI,CAAC,gBAAgB,MAAM,GAAG;AAC5B,YAAQ,MAAM,yCAAyC,MAAM,EAAE;AAC/D,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,gBAAgB,MAAM,oBAAoB,MAAM;AACtD,MAAI,cAAc,SAAS;AACzB,WAAO;AAAA,MACL,SAAS,cAAc,WAAW;AAAA,MAClC,QAAQ,cAAc;AAAA,MACtB,OAAO,cAAc;AAAA,IACvB;AAAA,EACF;AAEA,MAAI;AACF,YAAQ,IAAI,uCAAuC,MAAM,EAAE;AAG3D,UAAM,QAAQ,OAAO,MAAM,GAAG;AAC9B,UAAM,MAAM,MAAM,CAAC;AACnB,UAAM,OAAO,MAAM,MAAM,CAAC;AAI1B,UAAM,SAAS,aAAa,KAAK,MAAM;AAAA,MACrC,UAAU;AAAA,MACV,SAAS;AAAA,MACT,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,OAAO;AAAA;AAAA,IACT,CAAC;AAED,WAAO,EAAE,SAAS,MAAM,OAAO;AAAA,EACjC,SAAS,KAAK;AACZ,UAAM,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC7D,WAAO,EAAE,SAAS,OAAO,MAAM;AAAA,EACjC;AACF;AAEO,SAAS,oBAAqC;AACnD,QAAM,QAAQ,gBAAgB;AAC9B,SAAO,MAAM,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS;AAC3D;AAEO,SAAS,kBAAkB,IAAkB;AAClD,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;AACpD,MAAI,QAAQ;AACV,WAAO,SAAS;AAChB,oBAAgB,KAAK;AAAA,EACvB;AACF;AAEO,SAAS,oBACd,IACA,QACA,OACM;AACN,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;AACpD,MAAI,QAAQ;AACV,WAAO,SAAS,QAAQ,WAAW;AACnC,WAAO,SAAS;AAChB,WAAO,QAAQ;AACf,oBAAgB,KAAK;AAAA,EACvB;AACF;AAEA,eAAsB,cAAc,QAIjC;AACD,oBAAkB,OAAO,EAAE;AAG3B,QAAM,SAAS,MAAM,kBAAkB,OAAO,QAAQ,OAAO,QAAQ;AAErE,MAAI,OAAO,SAAS;AAClB,wBAAoB,OAAO,IAAI,OAAO,MAAM;AAAA,EAC9C,OAAO;AACL,wBAAoB,OAAO,IAAI,QAAW,OAAO,KAAK;AAAA,EACxD;AAEA,SAAO;AACT;AAEA,eAAsB,2BAInB;AACD,QAAM,UAAU,kBAAkB;AAClC,MAAI,YAAY;AAChB,MAAI,SAAS;AAEb,aAAW,UAAU,SAAS;AAC5B,UAAM,SAAS,MAAM,cAAc,MAAM;AACzC,QAAI,OAAO,SAAS;AAClB;AAAA,IACF,OAAO;AACL;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,WAAW,QAAQ,QAAQ,WAAW,OAAO;AACxD;AAGO,SAAS,oBAA4B;AAC1C,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,YAAY,MAAM,QAAQ;AAAA,IAC9B,CAAC,MAAM,EAAE,WAAW,eAAe,EAAE,WAAW;AAAA,EAClD;AAEA,MAAI,UAAU,SAAS,IAAI;AACzB,UAAM,WAAW,UAAU,MAAM,GAAG,UAAU,SAAS,EAAE;AACzD,UAAM,UAAU,MAAM,QAAQ;AAAA,MAC5B,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;AAAA,IAC5C;AACA,oBAAgB,KAAK;AACrB,WAAO,SAAS;AAAA,EAClB;AAEA,SAAO;AACT;AASO,MAAM,mBAAmB;AAAA;AAAA,EAE9B,WAAW,CAAC,aAAqB;AAE/B,QAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;AAC3B,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,WAAO,gBAAgB,QAAQ;AAAA,EACjC;AAAA,EACA,SAAS,CAAC,aAAqB;AAC7B,QAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;AAC3B,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,WAAO,eAAe,QAAQ;AAAA,EAChC;AAAA,EACA,QAAQ,CAAC,aAAqB;AAC5B,QAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;AAC3B,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,WAAO,cAAc,QAAQ;AAAA,EAC/B;AAAA;AAAA,EAGA,SAAS,MAAM;AAAA,EACf,QAAQ,MAAM;AAAA,EACd,MAAM,MAAM;AAAA;AAAA,EAGZ,QAAQ,MAAM;AAAA,EACd,oBAAoB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAS5B;AAKO,SAAS,aACd,aACG,MACK;AACR,QAAM,KAAK,iBAAiB,QAAQ;AACpC,MAAI,OAAO,OAAO,YAAY;AAC5B,WAAQ,GAAqC,GAAG,IAAI;AAAA,EACtD;AACA,SAAO;AACT;AAKO,SAAS,mBAAmB,aAAqB,KAAsB;AAC5E,UAAQ;AAAA,IACN,mDAAmD,UAAU;AAAA,EAC/D;AAEA,SAAO,YAAY,MAAM;AACvB,UAAM,UAAU,kBAAkB;AAClC,QAAI,QAAQ,SAAS,GAAG;AACtB,cAAQ,IAAI,sBAAsB,QAAQ,MAAM,oBAAoB;AACpE,+BAAyB;AAAA,IAC3B;AAAA,EACF,GAAG,UAAU;AACf;AAKO,SAAS,kBACd,UACA,UACA,QACM;AACN,MAAI,QAAQ;AACV,UAAM,WAAW,YAAY,UAAU,UAAU,MAAM;AACvD,YAAQ,IAAI,8BAA8B,QAAQ,KAAK,MAAM,EAAE;AAAA,EACjE;AACF;",
+  "sourcesContent": ["/**\n * SMS Action Runner - Executes actions based on SMS responses\n * Bridges SMS responses to Claude Code actions\n *\n * Security: Uses allowlist-based action execution to prevent command injection\n */\n\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport { execFileSync } from 'child_process';\nimport { randomBytes } from 'crypto';\nimport { writeFileSecure, ensureSecureDir } from './secure-fs.js';\nimport { ActionQueueSchema, parseConfigSafe } from './schemas.js';\nimport { LinearClient } from '../integrations/linear/client.js';\nimport { LinearAuthManager } from '../integrations/linear/auth.js';\n\n/**\n * Parse a command string into an array of arguments, respecting quotes\n * Handles single quotes, double quotes, and escaped characters\n *\n * Examples:\n *   'echo \"hello world\"' -> ['echo', 'hello world']\n *   \"git commit -m 'fix bug'\" -> ['git', 'commit', '-m', 'fix bug']\n *   'npm run build' -> ['npm', 'run', 'build']\n */\nfunction parseCommandArgs(command: string): string[] {\n  const args: string[] = [];\n  let current = '';\n  let inSingleQuote = false;\n  let inDoubleQuote = false;\n  let escaped = false;\n\n  for (let i = 0; i < command.length; i++) {\n    const char = command[i];\n\n    if (escaped) {\n      current += char;\n      escaped = false;\n      continue;\n    }\n\n    if (char === '\\\\' && !inSingleQuote) {\n      escaped = true;\n      continue;\n    }\n\n    if (char === \"'\" && !inDoubleQuote) {\n      inSingleQuote = !inSingleQuote;\n      continue;\n    }\n\n    if (char === '\"' && !inSingleQuote) {\n      inDoubleQuote = !inDoubleQuote;\n      continue;\n    }\n\n    if (char === ' ' && !inSingleQuote && !inDoubleQuote) {\n      if (current.length > 0) {\n        args.push(current);\n        current = '';\n      }\n      continue;\n    }\n\n    current += char;\n  }\n\n  if (current.length > 0) {\n    args.push(current);\n  }\n\n  return args;\n}\n\n// Allowlist of safe action patterns\nconst SAFE_ACTION_PATTERNS: Array<{\n  pattern: RegExp;\n  validate?: (match: RegExpMatchArray) => boolean;\n}> = [\n  // Git/GitHub CLI commands (limited to safe operations)\n  { pattern: /^gh pr (view|list|status|checks) (\\d+)$/ },\n  { pattern: /^gh pr review (\\d+) --approve$/ },\n  { pattern: /^gh pr merge (\\d+) --squash$/ },\n  { pattern: /^gh issue (view|list) (\\d+)?$/ },\n\n  // NPM commands (limited to safe operations)\n  { pattern: /^npm run (build|test|lint|lint:fix|test:run)$/ },\n  { pattern: /^npm (test|run build)$/ },\n\n  // StackMemory commands\n  { pattern: /^stackmemory (status|notify check|context list)$/ },\n  // Task start with optional --assign-me flag (Linear task ID is UUID format)\n  {\n    pattern: /^stackmemory task start ([a-f0-9-]{36})( --assign-me)?$/,\n  },\n  // Additional StackMemory commands for mobile/WhatsApp\n  { pattern: /^stackmemory context show$/ },\n  { pattern: /^stackmemory task list$/ },\n\n  // Git commands\n  { pattern: /^git (status|diff|log|branch)( --[a-z-]+)*$/ },\n  { pattern: /^git add -A && git commit$/ },\n  { pattern: /^gh pr create --fill$/ },\n  // Git log with line limit for mobile-friendly output\n  { pattern: /^git log --oneline -\\d{1,2}$/ },\n\n  // WhatsApp/Mobile quick commands\n  { pattern: /^status$/i },\n  { pattern: /^tasks$/i },\n  { pattern: /^context$/i },\n  { pattern: /^help$/i },\n  { pattern: /^sync$/i },\n\n  // Claude Code launcher\n  { pattern: /^claude-sm$/ },\n\n  // Log viewing (safe read-only)\n  { pattern: /^tail -\\d+ ~\\/\\.claude\\/logs\\/\\*\\.log$/ },\n\n  // Custom aliases (cwm = claude worktree merge)\n  { pattern: /^cwm$/ },\n\n  // Simple echo/confirmation (no variables)\n  {\n    pattern:\n      /^echo \"?(Done|OK|Confirmed|Acknowledged|Great work! Time for a coffee break\\.)\"?$/,\n  },\n];\n\n/**\n * Check if an action is in the allowlist\n */\nfunction isActionAllowed(action: string): boolean {\n  const trimmed = action.trim();\n  return SAFE_ACTION_PATTERNS.some(({ pattern, validate }) => {\n    const match = trimmed.match(pattern);\n    if (!match) return false;\n    if (validate && !validate(match)) return false;\n    return true;\n  });\n}\n\nexport interface PendingAction {\n  id: string;\n  promptId: string;\n  response: string;\n  action: string;\n  timestamp: string;\n  status: 'pending' | 'running' | 'completed' | 'failed';\n  result?: string;\n  error?: string;\n}\n\nexport interface ActionQueue {\n  actions: PendingAction[];\n  lastChecked: string;\n}\n\nconst QUEUE_PATH = join(homedir(), '.stackmemory', 'sms-action-queue.json');\n\nconst DEFAULT_QUEUE: ActionQueue = {\n  actions: [],\n  lastChecked: new Date().toISOString(),\n};\n\nexport function loadActionQueue(): ActionQueue {\n  try {\n    if (existsSync(QUEUE_PATH)) {\n      const data = JSON.parse(readFileSync(QUEUE_PATH, 'utf8'));\n      return parseConfigSafe(\n        ActionQueueSchema,\n        data,\n        DEFAULT_QUEUE,\n        'action-queue'\n      );\n    }\n  } catch {\n    // Use defaults\n  }\n  return { ...DEFAULT_QUEUE, lastChecked: new Date().toISOString() };\n}\n\nexport function saveActionQueue(queue: ActionQueue): void {\n  try {\n    ensureSecureDir(join(homedir(), '.stackmemory'));\n    writeFileSecure(QUEUE_PATH, JSON.stringify(queue, null, 2));\n  } catch {\n    // Silently fail\n  }\n}\n\nexport function queueAction(\n  promptId: string,\n  response: string,\n  action: string\n): string {\n  const queue = loadActionQueue();\n  // Use cryptographically secure random ID\n  const id = randomBytes(8).toString('hex');\n\n  queue.actions.push({\n    id,\n    promptId,\n    response,\n    action,\n    timestamp: new Date().toISOString(),\n    status: 'pending',\n  });\n\n  saveActionQueue(queue);\n  return id;\n}\n\n/**\n * Get Linear client if available\n * Returns null if credentials are missing or invalid\n */\nfunction getLinearClient(): LinearClient | null {\n  // Try API key first - must be valid format (lin_api_*)\n  const apiKey = process.env['LINEAR_API_KEY'];\n  if (apiKey && apiKey.startsWith('lin_api_')) {\n    return new LinearClient({ apiKey });\n  }\n\n  try {\n    const authManager = new LinearAuthManager();\n    const tokens = authManager.loadTokens();\n    if (tokens?.accessToken) {\n      return new LinearClient({ accessToken: tokens.accessToken });\n    }\n  } catch {\n    // Auth not available\n  }\n\n  return null;\n}\n\n/**\n * Handle special actions that require API calls instead of shell commands\n */\nasync function handleSpecialAction(action: string): Promise<{\n  handled: boolean;\n  success?: boolean;\n  output?: string;\n  error?: string;\n}> {\n  // Handle stackmemory task start command\n  const taskStartMatch = action.match(\n    /^stackmemory task start ([a-f0-9-]{36})( --assign-me)?$/\n  );\n  if (taskStartMatch) {\n    const issueId = taskStartMatch[1];\n    const client = getLinearClient();\n\n    if (!client) {\n      return {\n        handled: true,\n        success: false,\n        error:\n          'Linear not configured. Set LINEAR_API_KEY or run stackmemory linear setup.',\n      };\n    }\n\n    try {\n      const result = await client.startIssue(issueId);\n      if (result.success && result.issue) {\n        return {\n          handled: true,\n          success: true,\n          output: `Started: ${result.issue.identifier} - ${result.issue.title}`,\n        };\n      }\n      return {\n        handled: true,\n        success: false,\n        error: result.error || 'Failed to start issue',\n      };\n    } catch (err) {\n      return {\n        handled: true,\n        success: false,\n        error: err instanceof Error ? err.message : 'Unknown error',\n      };\n    }\n  }\n\n  return { handled: false };\n}\n\n/**\n * Execute an action safely using allowlist validation\n * This prevents command injection by only allowing pre-approved commands\n */\nexport async function executeActionSafe(\n  action: string,\n  _response: string\n): Promise<{ success: boolean; output?: string; error?: string }> {\n  // Check if action is in allowlist\n  if (!isActionAllowed(action)) {\n    console.error(`[sms-action] Action not in allowlist: ${action}`);\n    return {\n      success: false,\n      error: `Action not allowed. Only pre-approved commands can be executed via SMS.`,\n    };\n  }\n\n  // Check for special actions that need API calls\n  const specialResult = await handleSpecialAction(action);\n  if (specialResult.handled) {\n    return {\n      success: specialResult.success || false,\n      output: specialResult.output,\n      error: specialResult.error,\n    };\n  }\n\n  try {\n    console.log(`[sms-action] Executing safe action: ${action}`);\n\n    // Parse the action into command and args, respecting quotes\n    const parts = parseCommandArgs(action);\n    if (parts.length === 0) {\n      return { success: false, error: 'Empty command' };\n    }\n\n    const cmd = parts[0];\n    const args = parts.slice(1);\n\n    // Use execFileSync for commands without shell interpretation\n    // This prevents shell injection even if the allowlist is somehow bypassed\n    const output = execFileSync(cmd, args, {\n      encoding: 'utf8',\n      timeout: 60000,\n      stdio: ['pipe', 'pipe', 'pipe'],\n      shell: false, // Explicitly disable shell\n    });\n\n    return { success: true, output };\n  } catch (err) {\n    const error = err instanceof Error ? err.message : String(err);\n    return { success: false, error };\n  }\n}\n\nexport function getPendingActions(): PendingAction[] {\n  const queue = loadActionQueue();\n  return queue.actions.filter((a) => a.status === 'pending');\n}\n\nexport function markActionRunning(id: string): void {\n  const queue = loadActionQueue();\n  const action = queue.actions.find((a) => a.id === id);\n  if (action) {\n    action.status = 'running';\n    saveActionQueue(queue);\n  }\n}\n\nexport function markActionCompleted(\n  id: string,\n  result?: string,\n  error?: string\n): void {\n  const queue = loadActionQueue();\n  const action = queue.actions.find((a) => a.id === id);\n  if (action) {\n    action.status = error ? 'failed' : 'completed';\n    action.result = result;\n    action.error = error;\n    saveActionQueue(queue);\n  }\n}\n\nexport async function executeAction(action: PendingAction): Promise<{\n  success: boolean;\n  output?: string;\n  error?: string;\n}> {\n  markActionRunning(action.id);\n\n  // Use the safe execution path to prevent command injection\n  const result = await executeActionSafe(action.action, action.response);\n\n  if (result.success) {\n    markActionCompleted(action.id, result.output);\n  } else {\n    markActionCompleted(action.id, undefined, result.error);\n  }\n\n  return result;\n}\n\nexport async function processAllPendingActions(): Promise<{\n  processed: number;\n  succeeded: number;\n  failed: number;\n}> {\n  const pending = getPendingActions();\n  let succeeded = 0;\n  let failed = 0;\n\n  for (const action of pending) {\n    const result = await executeAction(action);\n    if (result.success) {\n      succeeded++;\n    } else {\n      failed++;\n    }\n  }\n\n  return { processed: pending.length, succeeded, failed };\n}\n\n// Clean up old completed actions (keep last 50)\nexport function cleanupOldActions(): number {\n  const queue = loadActionQueue();\n  const completed = queue.actions.filter(\n    (a) => a.status === 'completed' || a.status === 'failed'\n  );\n\n  if (completed.length > 50) {\n    const toRemove = completed.slice(0, completed.length - 50);\n    queue.actions = queue.actions.filter(\n      (a) => !toRemove.find((r) => r.id === a.id)\n    );\n    saveActionQueue(queue);\n    return toRemove.length;\n  }\n\n  return 0;\n}\n\n/**\n * Action Templates - Common actions for SMS responses\n *\n * SECURITY NOTE: These templates return command strings that must be\n * validated against SAFE_ACTION_PATTERNS before execution.\n * Templates that accept user input are removed to prevent injection.\n */\nexport const ACTION_TEMPLATES = {\n  // Git/PR actions (PR numbers must be validated as integers)\n  approvePR: (prNumber: string) => {\n    // Validate PR number is numeric only\n    if (!/^\\d+$/.test(prNumber)) {\n      throw new Error('Invalid PR number');\n    }\n    return `gh pr review ${prNumber} --approve`;\n  },\n  mergePR: (prNumber: string) => {\n    if (!/^\\d+$/.test(prNumber)) {\n      throw new Error('Invalid PR number');\n    }\n    return `gh pr merge ${prNumber} --squash`;\n  },\n  viewPR: (prNumber: string) => {\n    if (!/^\\d+$/.test(prNumber)) {\n      throw new Error('Invalid PR number');\n    }\n    return `gh pr view ${prNumber}`;\n  },\n\n  // Build actions (no user input)\n  rebuild: () => `npm run build`,\n  retest: () => `npm run test:run`,\n  lint: () => `npm run lint:fix`,\n\n  // Status actions (no user input)\n  status: () => `stackmemory status`,\n  checkNotifications: () => `stackmemory notify check`,\n\n  // REMOVED for security - these templates allowed arbitrary user input:\n  // - requestChanges (allowed arbitrary message)\n  // - closePR (could be used maliciously)\n  // - deploy/rollback (too dangerous for SMS)\n  // - verifyDeployment (allowed arbitrary URL)\n  // - notifySlack (allowed arbitrary message - command injection)\n  // - notifyTeam (allowed arbitrary message - command injection)\n};\n\n/**\n * Create action string from template\n */\nexport function createAction(\n  template: keyof typeof ACTION_TEMPLATES,\n  ...args: string[]\n): string {\n  const fn = ACTION_TEMPLATES[template];\n  if (typeof fn === 'function') {\n    return (fn as (...args: string[]) => string)(...args);\n  }\n  return fn;\n}\n\n/**\n * Watch for new actions and execute them\n */\nexport function startActionWatcher(intervalMs: number = 5000): NodeJS.Timeout {\n  console.log(\n    `[sms-action] Starting action watcher (interval: ${intervalMs}ms)`\n  );\n\n  return setInterval(() => {\n    const pending = getPendingActions();\n    if (pending.length > 0) {\n      console.log(`[sms-action] Found ${pending.length} pending action(s)`);\n      processAllPendingActions();\n    }\n  }, intervalMs);\n}\n\n/**\n * Integration with SMS webhook - queue action when response received\n */\nexport function handleSMSResponse(\n  promptId: string,\n  response: string,\n  action?: string\n): void {\n  if (action) {\n    const actionId = queueAction(promptId, response, action);\n    console.log(`[sms-action] Queued action ${actionId}: ${action}`);\n  }\n}\n"],
+  "mappings": ";;;;AAOA,SAAS,YAAY,oBAAoB;AACzC,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAC5B,SAAS,iBAAiB,uBAAuB;AACjD,SAAS,mBAAmB,uBAAuB;AACnD,SAAS,oBAAoB;AAC7B,SAAS,yBAAyB;AAWlC,SAAS,iBAAiB,SAA2B;AACnD,QAAM,OAAiB,CAAC;AACxB,MAAI,UAAU;AACd,MAAI,gBAAgB;AACpB,MAAI,gBAAgB;AACpB,MAAI,UAAU;AAEd,WAAS,IAAI,GAAG,IAAI,QAAQ,QAAQ,KAAK;AACvC,UAAM,OAAO,QAAQ,CAAC;AAEtB,QAAI,SAAS;AACX,iBAAW;AACX,gBAAU;AACV;AAAA,IACF;AAEA,QAAI,SAAS,QAAQ,CAAC,eAAe;AACnC,gBAAU;AACV;AAAA,IACF;AAEA,QAAI,SAAS,OAAO,CAAC,eAAe;AAClC,sBAAgB,CAAC;AACjB;AAAA,IACF;AAEA,QAAI,SAAS,OAAO,CAAC,eAAe;AAClC,sBAAgB,CAAC;AACjB;AAAA,IACF;AAEA,QAAI,SAAS,OAAO,CAAC,iBAAiB,CAAC,eAAe;AACpD,UAAI,QAAQ,SAAS,GAAG;AACtB,aAAK,KAAK,OAAO;AACjB,kBAAU;AAAA,MACZ;AACA;AAAA,IACF;AAEA,eAAW;AAAA,EACb;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,SAAK,KAAK,OAAO;AAAA,EACnB;AAEA,SAAO;AACT;AAGA,MAAM,uBAGD;AAAA;AAAA,EAEH,EAAE,SAAS,0CAA0C;AAAA,EACrD,EAAE,SAAS,iCAAiC;AAAA,EAC5C,EAAE,SAAS,+BAA+B;AAAA,EAC1C,EAAE,SAAS,gCAAgC;AAAA;AAAA,EAG3C,EAAE,SAAS,gDAAgD;AAAA,EAC3D,EAAE,SAAS,yBAAyB;AAAA;AAAA,EAGpC,EAAE,SAAS,mDAAmD;AAAA;AAAA,EAE9D;AAAA,IACE,SAAS;AAAA,EACX;AAAA;AAAA,EAEA,EAAE,SAAS,6BAA6B;AAAA,EACxC,EAAE,SAAS,0BAA0B;AAAA;AAAA,EAGrC,EAAE,SAAS,8CAA8C;AAAA,EACzD,EAAE,SAAS,6BAA6B;AAAA,EACxC,EAAE,SAAS,wBAAwB;AAAA;AAAA,EAEnC,EAAE,SAAS,+BAA+B;AAAA;AAAA,EAG1C,EAAE,SAAS,YAAY;AAAA,EACvB,EAAE,SAAS,WAAW;AAAA,EACtB,EAAE,SAAS,aAAa;AAAA,EACxB,EAAE,SAAS,UAAU;AAAA,EACrB,EAAE,SAAS,UAAU;AAAA;AAAA,EAGrB,EAAE,SAAS,cAAc;AAAA;AAAA,EAGzB,EAAE,SAAS,yCAAyC;AAAA;AAAA,EAGpD,EAAE,SAAS,QAAQ;AAAA;AAAA,EAGnB;AAAA,IACE,SACE;AAAA,EACJ;AACF;AAKA,SAAS,gBAAgB,QAAyB;AAChD,QAAM,UAAU,OAAO,KAAK;AAC5B,SAAO,qBAAqB,KAAK,CAAC,EAAE,SAAS,SAAS,MAAM;AAC1D,UAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,YAAY,CAAC,SAAS,KAAK,EAAG,QAAO;AACzC,WAAO;AAAA,EACT,CAAC;AACH;AAkBA,MAAM,aAAa,KAAK,QAAQ,GAAG,gBAAgB,uBAAuB;AAE1E,MAAM,gBAA6B;AAAA,EACjC,SAAS,CAAC;AAAA,EACV,cAAa,oBAAI,KAAK,GAAE,YAAY;AACtC;AAEO,SAAS,kBAA+B;AAC7C,MAAI;AACF,QAAI,WAAW,UAAU,GAAG;AAC1B,YAAM,OAAO,KAAK,MAAM,aAAa,YAAY,MAAM,CAAC;AACxD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,EAAE,GAAG,eAAe,cAAa,oBAAI,KAAK,GAAE,YAAY,EAAE;AACnE;AAEO,SAAS,gBAAgB,OAA0B;AACxD,MAAI;AACF,oBAAgB,KAAK,QAAQ,GAAG,cAAc,CAAC;AAC/C,oBAAgB,YAAY,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,EAC5D,QAAQ;AAAA,EAER;AACF;AAEO,SAAS,YACd,UACA,UACA,QACQ;AACR,QAAM,QAAQ,gBAAgB;AAE9B,QAAM,KAAK,YAAY,CAAC,EAAE,SAAS,KAAK;AAExC,QAAM,QAAQ,KAAK;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,QAAQ;AAAA,EACV,CAAC;AAED,kBAAgB,KAAK;AACrB,SAAO;AACT;AAMA,SAAS,kBAAuC;AAE9C,QAAM,SAAS,QAAQ,IAAI,gBAAgB;AAC3C,MAAI,UAAU,OAAO,WAAW,UAAU,GAAG;AAC3C,WAAO,IAAI,aAAa,EAAE,OAAO,CAAC;AAAA,EACpC;AAEA,MAAI;AACF,UAAM,cAAc,IAAI,kBAAkB;AAC1C,UAAM,SAAS,YAAY,WAAW;AACtC,QAAI,QAAQ,aAAa;AACvB,aAAO,IAAI,aAAa,EAAE,aAAa,OAAO,YAAY,CAAC;AAAA,IAC7D;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO;AACT;AAKA,eAAe,oBAAoB,QAKhC;AAED,QAAM,iBAAiB,OAAO;AAAA,IAC5B;AAAA,EACF;AACA,MAAI,gBAAgB;AAClB,UAAM,UAAU,eAAe,CAAC;AAChC,UAAM,SAAS,gBAAgB;AAE/B,QAAI,CAAC,QAAQ;AACX,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,OACE;AAAA,MACJ;AAAA,IACF;AAEA,QAAI;AACF,YAAM,SAAS,MAAM,OAAO,WAAW,OAAO;AAC9C,UAAI,OAAO,WAAW,OAAO,OAAO;AAClC,eAAO;AAAA,UACL,SAAS;AAAA,UACT,SAAS;AAAA,UACT,QAAQ,YAAY,OAAO,MAAM,UAAU,MAAM,OAAO,MAAM,KAAK;AAAA,QACrE;AAAA,MACF;AACA,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,OAAO,OAAO,SAAS;AAAA,MACzB;AAAA,IACF,SAAS,KAAK;AACZ,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS;AAAA,QACT,OAAO,eAAe,QAAQ,IAAI,UAAU;AAAA,MAC9C;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAMA,eAAsB,kBACpB,QACA,WACgE;AAEhE,MAAI,CAAC,gBAAgB,MAAM,GAAG;AAC5B,YAAQ,MAAM,yCAAyC,MAAM,EAAE;AAC/D,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,gBAAgB,MAAM,oBAAoB,MAAM;AACtD,MAAI,cAAc,SAAS;AACzB,WAAO;AAAA,MACL,SAAS,cAAc,WAAW;AAAA,MAClC,QAAQ,cAAc;AAAA,MACtB,OAAO,cAAc;AAAA,IACvB;AAAA,EACF;AAEA,MAAI;AACF,YAAQ,IAAI,uCAAuC,MAAM,EAAE;AAG3D,UAAM,QAAQ,iBAAiB,MAAM;AACrC,QAAI,MAAM,WAAW,GAAG;AACtB,aAAO,EAAE,SAAS,OAAO,OAAO,gBAAgB;AAAA,IAClD;AAEA,UAAM,MAAM,MAAM,CAAC;AACnB,UAAM,OAAO,MAAM,MAAM,CAAC;AAI1B,UAAM,SAAS,aAAa,KAAK,MAAM;AAAA,MACrC,UAAU;AAAA,MACV,SAAS;AAAA,MACT,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,OAAO;AAAA;AAAA,IACT,CAAC;AAED,WAAO,EAAE,SAAS,MAAM,OAAO;AAAA,EACjC,SAAS,KAAK;AACZ,UAAM,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC7D,WAAO,EAAE,SAAS,OAAO,MAAM;AAAA,EACjC;AACF;AAEO,SAAS,oBAAqC;AACnD,QAAM,QAAQ,gBAAgB;AAC9B,SAAO,MAAM,QAAQ,OAAO,CAAC,MAAM,EAAE,WAAW,SAAS;AAC3D;AAEO,SAAS,kBAAkB,IAAkB;AAClD,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;AACpD,MAAI,QAAQ;AACV,WAAO,SAAS;AAChB,oBAAgB,KAAK;AAAA,EACvB;AACF;AAEO,SAAS,oBACd,IACA,QACA,OACM;AACN,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE;AACpD,MAAI,QAAQ;AACV,WAAO,SAAS,QAAQ,WAAW;AACnC,WAAO,SAAS;AAChB,WAAO,QAAQ;AACf,oBAAgB,KAAK;AAAA,EACvB;AACF;AAEA,eAAsB,cAAc,QAIjC;AACD,oBAAkB,OAAO,EAAE;AAG3B,QAAM,SAAS,MAAM,kBAAkB,OAAO,QAAQ,OAAO,QAAQ;AAErE,MAAI,OAAO,SAAS;AAClB,wBAAoB,OAAO,IAAI,OAAO,MAAM;AAAA,EAC9C,OAAO;AACL,wBAAoB,OAAO,IAAI,QAAW,OAAO,KAAK;AAAA,EACxD;AAEA,SAAO;AACT;AAEA,eAAsB,2BAInB;AACD,QAAM,UAAU,kBAAkB;AAClC,MAAI,YAAY;AAChB,MAAI,SAAS;AAEb,aAAW,UAAU,SAAS;AAC5B,UAAM,SAAS,MAAM,cAAc,MAAM;AACzC,QAAI,OAAO,SAAS;AAClB;AAAA,IACF,OAAO;AACL;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,WAAW,QAAQ,QAAQ,WAAW,OAAO;AACxD;AAGO,SAAS,oBAA4B;AAC1C,QAAM,QAAQ,gBAAgB;AAC9B,QAAM,YAAY,MAAM,QAAQ;AAAA,IAC9B,CAAC,MAAM,EAAE,WAAW,eAAe,EAAE,WAAW;AAAA,EAClD;AAEA,MAAI,UAAU,SAAS,IAAI;AACzB,UAAM,WAAW,UAAU,MAAM,GAAG,UAAU,SAAS,EAAE;AACzD,UAAM,UAAU,MAAM,QAAQ;AAAA,MAC5B,CAAC,MAAM,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;AAAA,IAC5C;AACA,oBAAgB,KAAK;AACrB,WAAO,SAAS;AAAA,EAClB;AAEA,SAAO;AACT;AASO,MAAM,mBAAmB;AAAA;AAAA,EAE9B,WAAW,CAAC,aAAqB;AAE/B,QAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;AAC3B,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,WAAO,gBAAgB,QAAQ;AAAA,EACjC;AAAA,EACA,SAAS,CAAC,aAAqB;AAC7B,QAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;AAC3B,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,WAAO,eAAe,QAAQ;AAAA,EAChC;AAAA,EACA,QAAQ,CAAC,aAAqB;AAC5B,QAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;AAC3B,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,WAAO,cAAc,QAAQ;AAAA,EAC/B;AAAA;AAAA,EAGA,SAAS,MAAM;AAAA,EACf,QAAQ,MAAM;AAAA,EACd,MAAM,MAAM;AAAA;AAAA,EAGZ,QAAQ,MAAM;AAAA,EACd,oBAAoB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAS5B;AAKO,SAAS,aACd,aACG,MACK;AACR,QAAM,KAAK,iBAAiB,QAAQ;AACpC,MAAI,OAAO,OAAO,YAAY;AAC5B,WAAQ,GAAqC,GAAG,IAAI;AAAA,EACtD;AACA,SAAO;AACT;AAKO,SAAS,mBAAmB,aAAqB,KAAsB;AAC5E,UAAQ;AAAA,IACN,mDAAmD,UAAU;AAAA,EAC/D;AAEA,SAAO,YAAY,MAAM;AACvB,UAAM,UAAU,kBAAkB;AAClC,QAAI,QAAQ,SAAS,GAAG;AACtB,cAAQ,IAAI,sBAAsB,QAAQ,MAAM,oBAAoB;AACpE,+BAAyB;AAAA,IAC3B;AAAA,EACF,GAAG,UAAU;AACf;AAKO,SAAS,kBACd,UACA,UACA,QACM;AACN,MAAI,QAAQ;AACV,UAAM,WAAW,YAAY,UAAU,UAAU,MAAM;AACvD,YAAQ,IAAI,8BAA8B,QAAQ,KAAK,MAAM,EAAE;AAAA,EACjE;AACF;",
   "names": []
 }

package/dist/hooks/sms-notify.js

@@ -178,7 +178,7 @@ ${payload.message}`;
       message += "Reply with your response";
     }
   }
-  return message;
+  return appendSessionUrl(message);
 }
 function getChannelNumbers(config) {
   const channel = config.channel || "whatsapp";
@@ -335,6 +335,22 @@ function processIncomingResponse(from, body) {
 function getSessionId() {
   return process.env["CLAUDE_INSTANCE_ID"] || process.env["STACKMEMORY_SESSION_ID"] || Math.random().toString(36).substring(2, 8);
 }
+function getSessionUrl() {
+  const sessionId = process.env["CLAUDE_SESSION_ID"];
+  if (sessionId?.startsWith("session_")) {
+    return `https://claude.ai/code/${sessionId}`;
+  }
+  return process.env["CLAUDE_SESSION_URL"];
+}
+function appendSessionUrl(message) {
+  const url = getSessionUrl();
+  if (url) {
+    return `${message}
+
+Session: ${url}`;
+  }
+  return message;
+}
 async function notifyReviewReady(title, description, options) {
   const sessionId = getSessionId();
   let finalOptions = options || [];
@@ -428,14 +444,60 @@ function cleanupExpiredPrompts() {
   }
   return removed;
 }
+async function notify(message) {
+  const sessionId = getSessionId();
+  return sendNotification({
+    type: "custom",
+    title: `[Claude ${sessionId}]`,
+    message
+  });
+}
+async function notifyChoice(message, optionA, optionB) {
+  const sessionId = getSessionId();
+  return sendNotification({
+    type: "custom",
+    title: `[Claude ${sessionId}]`,
+    message,
+    prompt: {
+      type: "options",
+      options: [
+        { key: "1", label: optionA },
+        { key: "2", label: optionB }
+      ]
+    }
+  });
+}
+async function notifyYesNo(message) {
+  const sessionId = getSessionId();
+  return sendNotification({
+    type: "custom",
+    title: `[Claude ${sessionId}]`,
+    message,
+    prompt: { type: "yesno" }
+  });
+}
+async function notifyStep(step, status = "done") {
+  const sessionId = getSessionId();
+  const symbol = status === "done" ? "\u2713" : status === "failed" ? "\u2717" : "\u23F3";
+  return sendNotification({
+    type: "task_complete",
+    title: `[Claude ${sessionId}]`,
+    message: `${symbol} ${step}`
+  });
+}
 export {
   cleanupExpiredPrompts,
   getMissingConfig,
+  getSessionUrl,
   loadSMSConfig,
+  notify,
+  notifyChoice,
   notifyError,
   notifyReviewReady,
+  notifyStep,
   notifyTaskComplete,
   notifyWithYesNo,
+  notifyYesNo,
   processIncomingResponse,
   saveSMSConfig,
   sendNotification,

package/dist/hooks/sms-notify.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/hooks/sms-notify.ts"],
-  "sourcesContent": ["/**\n * SMS Notification Hook for StackMemory\n * Sends text messages when tasks are ready for review\n * Supports interactive prompts with numbered options or yes/no\n *\n * Optional feature - requires Twilio setup\n */\n\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport { config as loadDotenv } from 'dotenv';\nimport { writeFileSecure, ensureSecureDir } from './secure-fs.js';\nimport { SMSConfigSchema, parseConfigSafe } from './schemas.js';\n\nexport type MessageChannel = 'whatsapp' | 'sms';\n\nexport interface SMSConfig {\n  enabled: boolean;\n  // Preferred channel: whatsapp is cheaper for back-and-forth conversations\n  channel: MessageChannel;\n  // Twilio credentials (from env or config)\n  accountSid?: string;\n  authToken?: string;\n  // SMS numbers\n  smsFromNumber?: string;\n  smsToNumber?: string;\n  // WhatsApp numbers (Twilio prefixes with 'whatsapp:' automatically)\n  whatsappFromNumber?: string;\n  whatsappToNumber?: string;\n  // Legacy fields (backwards compatibility)\n  fromNumber?: string;\n  toNumber?: string;\n  // Webhook URL for receiving responses\n  webhookUrl?: string;\n  // Notification preferences\n  notifyOn: {\n    taskComplete: boolean;\n    reviewReady: boolean;\n    error: boolean;\n    custom: boolean;\n    contextSync: boolean;\n  };\n  // Quiet hours (don't send during these times)\n  quietHours?: {\n    enabled: boolean;\n    start: string; // \"22:00\"\n    end: string; // \"08:00\"\n  };\n  // Response timeout (seconds)\n  responseTimeout: number;\n  // Pending prompts awaiting response\n  pendingPrompts: PendingPrompt[];\n}\n\nexport interface PendingPrompt {\n  id: string;\n  timestamp: string;\n  message: string;\n  options: PromptOption[];\n  type: 'options' | 'yesno' | 'freeform';\n  callback?: string; // Command to run with response\n  expiresAt: string;\n}\n\nexport interface PromptOption {\n  key: string; // \"1\", \"2\", \"y\", \"n\", etc.\n  label: string;\n  action?: string; // Command to execute\n}\n\nexport interface NotificationPayload {\n  type: 'task_complete' | 'review_ready' | 'error' | 'custom' | 'context_sync';\n  title: string;\n  message: string;\n  prompt?: {\n    type: 'options' | 'yesno' | 'freeform';\n    options?: PromptOption[];\n    question?: string;\n  };\n  metadata?: Record<string, unknown>;\n}\n\nconst CONFIG_PATH = join(homedir(), '.stackmemory', 'sms-notify.json');\n\nconst DEFAULT_CONFIG: SMSConfig = {\n  enabled: false,\n  channel: 'whatsapp', // WhatsApp is cheaper for conversations\n  notifyOn: {\n    taskComplete: true,\n    reviewReady: true,\n    error: true,\n    custom: true,\n    contextSync: true,\n  },\n  quietHours: {\n    enabled: false,\n    start: '22:00',\n    end: '08:00',\n  },\n  responseTimeout: 300, // 5 minutes\n  pendingPrompts: [],\n};\n\nexport function loadSMSConfig(): SMSConfig {\n  // Load .env files (project, home, global)\n  loadDotenv({ path: join(process.cwd(), '.env') });\n  loadDotenv({ path: join(process.cwd(), '.env.local') });\n  loadDotenv({ path: join(homedir(), '.env') });\n  loadDotenv({ path: join(homedir(), '.stackmemory', '.env') });\n\n  try {\n    if (existsSync(CONFIG_PATH)) {\n      const data = readFileSync(CONFIG_PATH, 'utf8');\n      const parsed = JSON.parse(data);\n      // Validate with zod schema, fall back to defaults on invalid config\n      const validated = parseConfigSafe(\n        SMSConfigSchema,\n        { ...DEFAULT_CONFIG, ...parsed },\n        DEFAULT_CONFIG,\n        'sms-notify'\n      );\n      applyEnvVars(validated);\n      return validated;\n    }\n  } catch {\n    // Use defaults\n  }\n\n  // Check environment variables\n  const config = { ...DEFAULT_CONFIG };\n  applyEnvVars(config);\n  return config;\n}\n\n// Check what's missing for notifications to work\nexport function getMissingConfig(): {\n  missing: string[];\n  configured: string[];\n  ready: boolean;\n} {\n  const config = loadSMSConfig();\n  const missing: string[] = [];\n  const configured: string[] = [];\n\n  // Check credentials\n  if (config.accountSid) {\n    configured.push('TWILIO_ACCOUNT_SID');\n  } else {\n    missing.push('TWILIO_ACCOUNT_SID');\n  }\n\n  if (config.authToken) {\n    configured.push('TWILIO_AUTH_TOKEN');\n  } else {\n    missing.push('TWILIO_AUTH_TOKEN');\n  }\n\n  // Check channel-specific numbers\n  const channel = config.channel || 'whatsapp';\n\n  if (channel === 'whatsapp') {\n    const from = config.whatsappFromNumber || config.fromNumber;\n    const to = config.whatsappToNumber || config.toNumber;\n\n    if (from) {\n      configured.push('TWILIO_WHATSAPP_FROM');\n    } else {\n      missing.push('TWILIO_WHATSAPP_FROM');\n    }\n\n    if (to) {\n      configured.push('TWILIO_WHATSAPP_TO');\n    } else {\n      missing.push('TWILIO_WHATSAPP_TO');\n    }\n  } else {\n    const from = config.smsFromNumber || config.fromNumber;\n    const to = config.smsToNumber || config.toNumber;\n\n    if (from) {\n      configured.push('TWILIO_SMS_FROM');\n    } else {\n      missing.push('TWILIO_SMS_FROM');\n    }\n\n    if (to) {\n      configured.push('TWILIO_SMS_TO');\n    } else {\n      missing.push('TWILIO_SMS_TO');\n    }\n  }\n\n  return {\n    missing,\n    configured,\n    ready: missing.length === 0,\n  };\n}\n\nfunction applyEnvVars(config: SMSConfig): void {\n  // Twilio credentials\n  if (process.env['TWILIO_ACCOUNT_SID']) {\n    config.accountSid = process.env['TWILIO_ACCOUNT_SID'];\n  }\n  if (process.env['TWILIO_AUTH_TOKEN']) {\n    config.authToken = process.env['TWILIO_AUTH_TOKEN'];\n  }\n\n  // SMS numbers\n  if (process.env['TWILIO_SMS_FROM'] || process.env['TWILIO_FROM_NUMBER']) {\n    config.smsFromNumber =\n      process.env['TWILIO_SMS_FROM'] || process.env['TWILIO_FROM_NUMBER'];\n  }\n  if (process.env['TWILIO_SMS_TO'] || process.env['TWILIO_TO_NUMBER']) {\n    config.smsToNumber =\n      process.env['TWILIO_SMS_TO'] || process.env['TWILIO_TO_NUMBER'];\n  }\n\n  // WhatsApp numbers\n  if (process.env['TWILIO_WHATSAPP_FROM']) {\n    config.whatsappFromNumber = process.env['TWILIO_WHATSAPP_FROM'];\n  }\n  if (process.env['TWILIO_WHATSAPP_TO']) {\n    config.whatsappToNumber = process.env['TWILIO_WHATSAPP_TO'];\n  }\n\n  // Legacy support\n  if (process.env['TWILIO_FROM_NUMBER']) {\n    config.fromNumber = process.env['TWILIO_FROM_NUMBER'];\n  }\n  if (process.env['TWILIO_TO_NUMBER']) {\n    config.toNumber = process.env['TWILIO_TO_NUMBER'];\n  }\n\n  // Channel preference\n  if (process.env['TWILIO_CHANNEL']) {\n    config.channel = process.env['TWILIO_CHANNEL'] as MessageChannel;\n  }\n}\n\nexport function saveSMSConfig(config: SMSConfig): void {\n  try {\n    ensureSecureDir(join(homedir(), '.stackmemory'));\n    // Don't save sensitive credentials to file\n    const safeConfig = { ...config };\n    delete safeConfig.accountSid;\n    delete safeConfig.authToken;\n    writeFileSecure(CONFIG_PATH, JSON.stringify(safeConfig, null, 2));\n  } catch {\n    // Silently fail\n  }\n}\n\nfunction isQuietHours(config: SMSConfig): boolean {\n  if (!config.quietHours?.enabled) return false;\n\n  const now = new Date();\n  const currentTime = now.getHours() * 60 + now.getMinutes();\n\n  const [startH, startM] = config.quietHours.start.split(':').map(Number);\n  const [endH, endM] = config.quietHours.end.split(':').map(Number);\n\n  const startTime = startH * 60 + startM;\n  const endTime = endH * 60 + endM;\n\n  // Handle overnight quiet hours (e.g., 22:00 - 08:00)\n  if (startTime > endTime) {\n    return currentTime >= startTime || currentTime < endTime;\n  }\n\n  return currentTime >= startTime && currentTime < endTime;\n}\n\nfunction generatePromptId(): string {\n  return Math.random().toString(36).substring(2, 10);\n}\n\nfunction formatPromptMessage(payload: NotificationPayload): string {\n  let message = `${payload.title}\\n\\n${payload.message}`;\n\n  if (payload.prompt) {\n    message += '\\n\\n';\n\n    if (payload.prompt.question) {\n      message += `${payload.prompt.question}\\n`;\n    }\n\n    if (payload.prompt.type === 'yesno') {\n      message += 'Reply Y for Yes, N for No';\n    } else if (payload.prompt.type === 'options' && payload.prompt.options) {\n      payload.prompt.options.forEach((opt) => {\n        message += `${opt.key}. ${opt.label}\\n`;\n      });\n      message += '\\nReply with number to select';\n    } else if (payload.prompt.type === 'freeform') {\n      message += 'Reply with your response';\n    }\n  }\n\n  return message;\n}\n\nfunction getChannelNumbers(config: SMSConfig): {\n  from: string;\n  to: string;\n  channel: MessageChannel;\n} | null {\n  const channel = config.channel || 'whatsapp';\n\n  if (channel === 'whatsapp') {\n    // Try WhatsApp first\n    const from = config.whatsappFromNumber || config.fromNumber;\n    const to = config.whatsappToNumber || config.toNumber;\n    if (from && to) {\n      // Twilio requires 'whatsapp:' prefix for WhatsApp numbers\n      return {\n        from: from.startsWith('whatsapp:') ? from : `whatsapp:${from}`,\n        to: to.startsWith('whatsapp:') ? to : `whatsapp:${to}`,\n        channel: 'whatsapp',\n      };\n    }\n  }\n\n  // Fall back to SMS\n  const from = config.smsFromNumber || config.fromNumber;\n  const to = config.smsToNumber || config.toNumber;\n  if (from && to) {\n    return { from, to, channel: 'sms' };\n  }\n\n  return null;\n}\n\nexport async function sendNotification(\n  payload: NotificationPayload,\n  channelOverride?: MessageChannel\n): Promise<{\n  success: boolean;\n  promptId?: string;\n  channel?: MessageChannel;\n  error?: string;\n}> {\n  const config = loadSMSConfig();\n\n  if (!config.enabled) {\n    return { success: false, error: 'Notifications disabled' };\n  }\n\n  // Check notification type is enabled\n  const typeMap: Record<string, keyof typeof config.notifyOn> = {\n    task_complete: 'taskComplete',\n    review_ready: 'reviewReady',\n    error: 'error',\n    custom: 'custom',\n    context_sync: 'contextSync',\n  };\n\n  if (!config.notifyOn[typeMap[payload.type]]) {\n    return {\n      success: false,\n      error: `Notifications for ${payload.type} disabled`,\n    };\n  }\n\n  // Check quiet hours\n  if (isQuietHours(config)) {\n    return { success: false, error: 'Quiet hours active' };\n  }\n\n  // Validate credentials\n  if (!config.accountSid || !config.authToken) {\n    return {\n      success: false,\n      error:\n        'Missing Twilio credentials. Set TWILIO_ACCOUNT_SID and TWILIO_AUTH_TOKEN',\n    };\n  }\n\n  // Get channel numbers (prefer WhatsApp)\n  const originalChannel = config.channel;\n  if (channelOverride) {\n    config.channel = channelOverride;\n  }\n\n  const numbers = getChannelNumbers(config);\n  config.channel = originalChannel; // Restore\n\n  if (!numbers) {\n    return {\n      success: false,\n      error:\n        config.channel === 'whatsapp'\n          ? 'Missing WhatsApp numbers. Set TWILIO_WHATSAPP_FROM and TWILIO_WHATSAPP_TO'\n          : 'Missing SMS numbers. Set TWILIO_SMS_FROM and TWILIO_SMS_TO',\n    };\n  }\n\n  const message = formatPromptMessage(payload);\n  let promptId: string | undefined;\n\n  // Store pending prompt if interactive\n  if (payload.prompt) {\n    promptId = generatePromptId();\n    const expiresAt = new Date(\n      Date.now() + config.responseTimeout * 1000\n    ).toISOString();\n\n    const pendingPrompt: PendingPrompt = {\n      id: promptId,\n      timestamp: new Date().toISOString(),\n      message: payload.message,\n      options: payload.prompt.options || [],\n      type: payload.prompt.type,\n      expiresAt,\n    };\n\n    config.pendingPrompts.push(pendingPrompt);\n    saveSMSConfig(config);\n  }\n\n  try {\n    // Use Twilio API (same endpoint for SMS and WhatsApp)\n    const twilioUrl = `https://api.twilio.com/2010-04-01/Accounts/${config.accountSid}/Messages.json`;\n\n    const response = await fetch(twilioUrl, {\n      method: 'POST',\n      headers: {\n        Authorization:\n          'Basic ' +\n          Buffer.from(`${config.accountSid}:${config.authToken}`).toString(\n            'base64'\n          ),\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({\n        From: numbers.from,\n        To: numbers.to,\n        Body: message,\n      }),\n    });\n\n    if (!response.ok) {\n      const errorData = await response.text();\n      return {\n        success: false,\n        channel: numbers.channel,\n        error: `Twilio error: ${errorData}`,\n      };\n    }\n\n    return { success: true, promptId, channel: numbers.channel };\n  } catch (err) {\n    return {\n      success: false,\n      channel: numbers.channel,\n      error: `Failed to send ${numbers.channel}: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n}\n\n// Backwards compatible alias\nexport async function sendSMSNotification(\n  payload: NotificationPayload\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  return sendNotification(payload);\n}\n\nexport function processIncomingResponse(\n  from: string,\n  body: string\n): {\n  matched: boolean;\n  prompt?: PendingPrompt;\n  response?: string;\n  action?: string;\n} {\n  const config = loadSMSConfig();\n\n  // Normalize response\n  const response = body.trim().toLowerCase();\n\n  // Find matching pending prompt (most recent first)\n  const now = new Date();\n  const validPrompts = config.pendingPrompts.filter(\n    (p) => new Date(p.expiresAt) > now\n  );\n\n  if (validPrompts.length === 0) {\n    return { matched: false };\n  }\n\n  // Get most recent prompt\n  const prompt = validPrompts[validPrompts.length - 1];\n\n  let matchedOption: PromptOption | undefined;\n\n  if (prompt.type === 'yesno') {\n    if (response === 'y' || response === 'yes') {\n      matchedOption = { key: 'y', label: 'Yes' };\n    } else if (response === 'n' || response === 'no') {\n      matchedOption = { key: 'n', label: 'No' };\n    }\n  } else if (prompt.type === 'options') {\n    matchedOption = prompt.options.find(\n      (opt) => opt.key.toLowerCase() === response\n    );\n  } else if (prompt.type === 'freeform') {\n    matchedOption = { key: response, label: response };\n  }\n\n  // Remove processed prompt\n  config.pendingPrompts = config.pendingPrompts.filter(\n    (p) => p.id !== prompt.id\n  );\n  saveSMSConfig(config);\n\n  if (matchedOption) {\n    return {\n      matched: true,\n      prompt,\n      response: matchedOption.key,\n      action: matchedOption.action,\n    };\n  }\n\n  return { matched: false, prompt };\n}\n\n// Get session ID from environment or generate short ID\nfunction getSessionId(): string {\n  return (\n    process.env['CLAUDE_INSTANCE_ID'] ||\n    process.env['STACKMEMORY_SESSION_ID'] ||\n    Math.random().toString(36).substring(2, 8)\n  );\n}\n\n// Convenience functions for common notifications\n\nexport async function notifyReviewReady(\n  title: string,\n  description: string,\n  options?: { label: string; action?: string }[]\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n\n  // Ensure minimum 2 options\n  let finalOptions = options || [];\n  if (finalOptions.length < 2) {\n    const defaults = [\n      { label: 'Approve', action: 'echo \"Approved\"' },\n      { label: 'Request changes', action: 'echo \"Changes requested\"' },\n    ];\n    finalOptions = [...finalOptions, ...defaults].slice(\n      0,\n      Math.max(2, finalOptions.length)\n    );\n  }\n\n  const payload: NotificationPayload = {\n    type: 'review_ready',\n    title: `[Claude ${sessionId}] Review Ready: ${title}`,\n    message: description,\n    prompt: {\n      type: 'options',\n      options: finalOptions.map((opt, i) => ({\n        key: String(i + 1),\n        label: opt.label,\n        action: opt.action,\n      })),\n      question: 'What would you like to do?',\n    },\n  };\n\n  return sendSMSNotification(payload);\n}\n\nexport async function notifyWithYesNo(\n  title: string,\n  question: string,\n  yesAction?: string,\n  noAction?: string\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n  return sendSMSNotification({\n    type: 'custom',\n    title: `[Claude ${sessionId}] ${title}`,\n    message: question,\n    prompt: {\n      type: 'yesno',\n      options: [\n        { key: 'y', label: 'Yes', action: yesAction },\n        { key: 'n', label: 'No', action: noAction },\n      ],\n    },\n  });\n}\n\nexport async function notifyTaskComplete(\n  taskName: string,\n  summary: string\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n  return sendSMSNotification({\n    type: 'task_complete',\n    title: `[Claude ${sessionId}] Task Complete: ${taskName}`,\n    message: summary,\n    prompt: {\n      type: 'options',\n      options: [\n        { key: '1', label: 'Start next task', action: 'claude-sm' },\n        { key: '2', label: 'View details', action: 'stackmemory status' },\n      ],\n    },\n  });\n}\n\nexport async function notifyError(\n  error: string,\n  context?: string\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n  return sendSMSNotification({\n    type: 'error',\n    title: `[Claude ${sessionId}] Error Alert`,\n    message: context ? `${error}\\n\\nContext: ${context}` : error,\n    prompt: {\n      type: 'options',\n      options: [\n        { key: '1', label: 'Retry', action: 'claude-sm' },\n        {\n          key: '2',\n          label: 'View logs',\n          action: 'tail -50 ~/.claude/logs/*.log',\n        },\n      ],\n    },\n  });\n}\n\n// Clean up expired prompts\nexport function cleanupExpiredPrompts(): number {\n  const config = loadSMSConfig();\n  const now = new Date();\n  const before = config.pendingPrompts.length;\n\n  config.pendingPrompts = config.pendingPrompts.filter(\n    (p) => new Date(p.expiresAt) > now\n  );\n\n  const removed = before - config.pendingPrompts.length;\n  if (removed > 0) {\n    saveSMSConfig(config);\n  }\n\n  return removed;\n}\n"],
-  "mappings": ";;;;AAQA,SAAS,YAAY,oBAAoB;AACzC,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,UAAU,kBAAkB;AACrC,SAAS,iBAAiB,uBAAuB;AACjD,SAAS,iBAAiB,uBAAuB;AAsEjD,MAAM,cAAc,KAAK,QAAQ,GAAG,gBAAgB,iBAAiB;AAErE,MAAM,iBAA4B;AAAA,EAChC,SAAS;AAAA,EACT,SAAS;AAAA;AAAA,EACT,UAAU;AAAA,IACR,cAAc;AAAA,IACd,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,YAAY;AAAA,IACV,SAAS;AAAA,IACT,OAAO;AAAA,IACP,KAAK;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA;AAAA,EACjB,gBAAgB,CAAC;AACnB;AAEO,SAAS,gBAA2B;AAEzC,aAAW,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,MAAM,EAAE,CAAC;AAChD,aAAW,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,YAAY,EAAE,CAAC;AACtD,aAAW,EAAE,MAAM,KAAK,QAAQ,GAAG,MAAM,EAAE,CAAC;AAC5C,aAAW,EAAE,MAAM,KAAK,QAAQ,GAAG,gBAAgB,MAAM,EAAE,CAAC;AAE5D,MAAI;AACF,QAAI,WAAW,WAAW,GAAG;AAC3B,YAAM,OAAO,aAAa,aAAa,MAAM;AAC7C,YAAM,SAAS,KAAK,MAAM,IAAI;AAE9B,YAAM,YAAY;AAAA,QAChB;AAAA,QACA,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAAA,QAC/B;AAAA,QACA;AAAA,MACF;AACA,mBAAa,SAAS;AACtB,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AAGA,QAAM,SAAS,EAAE,GAAG,eAAe;AACnC,eAAa,MAAM;AACnB,SAAO;AACT;AAGO,SAAS,mBAId;AACA,QAAM,SAAS,cAAc;AAC7B,QAAM,UAAoB,CAAC;AAC3B,QAAM,aAAuB,CAAC;AAG9B,MAAI,OAAO,YAAY;AACrB,eAAW,KAAK,oBAAoB;AAAA,EACtC,OAAO;AACL,YAAQ,KAAK,oBAAoB;AAAA,EACnC;AAEA,MAAI,OAAO,WAAW;AACpB,eAAW,KAAK,mBAAmB;AAAA,EACrC,OAAO;AACL,YAAQ,KAAK,mBAAmB;AAAA,EAClC;AAGA,QAAM,UAAU,OAAO,WAAW;AAElC,MAAI,YAAY,YAAY;AAC1B,UAAM,OAAO,OAAO,sBAAsB,OAAO;AACjD,UAAM,KAAK,OAAO,oBAAoB,OAAO;AAE7C,QAAI,MAAM;AACR,iBAAW,KAAK,sBAAsB;AAAA,IACxC,OAAO;AACL,cAAQ,KAAK,sBAAsB;AAAA,IACrC;AAEA,QAAI,IAAI;AACN,iBAAW,KAAK,oBAAoB;AAAA,IACtC,OAAO;AACL,cAAQ,KAAK,oBAAoB;AAAA,IACnC;AAAA,EACF,OAAO;AACL,UAAM,OAAO,OAAO,iBAAiB,OAAO;AAC5C,UAAM,KAAK,OAAO,eAAe,OAAO;AAExC,QAAI,MAAM;AACR,iBAAW,KAAK,iBAAiB;AAAA,IACnC,OAAO;AACL,cAAQ,KAAK,iBAAiB;AAAA,IAChC;AAEA,QAAI,IAAI;AACN,iBAAW,KAAK,eAAe;AAAA,IACjC,OAAO;AACL,cAAQ,KAAK,eAAe;AAAA,IAC9B;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,QAAQ,WAAW;AAAA,EAC5B;AACF;AAEA,SAAS,aAAa,QAAyB;AAE7C,MAAI,QAAQ,IAAI,oBAAoB,GAAG;AACrC,WAAO,aAAa,QAAQ,IAAI,oBAAoB;AAAA,EACtD;AACA,MAAI,QAAQ,IAAI,mBAAmB,GAAG;AACpC,WAAO,YAAY,QAAQ,IAAI,mBAAmB;AAAA,EACpD;AAGA,MAAI,QAAQ,IAAI,iBAAiB,KAAK,QAAQ,IAAI,oBAAoB,GAAG;AACvE,WAAO,gBACL,QAAQ,IAAI,iBAAiB,KAAK,QAAQ,IAAI,oBAAoB;AAAA,EACtE;AACA,MAAI,QAAQ,IAAI,eAAe,KAAK,QAAQ,IAAI,kBAAkB,GAAG;AACnE,WAAO,cACL,QAAQ,IAAI,eAAe,KAAK,QAAQ,IAAI,kBAAkB;AAAA,EAClE;AAGA,MAAI,QAAQ,IAAI,sBAAsB,GAAG;AACvC,WAAO,qBAAqB,QAAQ,IAAI,sBAAsB;AAAA,EAChE;AACA,MAAI,QAAQ,IAAI,oBAAoB,GAAG;AACrC,WAAO,mBAAmB,QAAQ,IAAI,oBAAoB;AAAA,EAC5D;AAGA,MAAI,QAAQ,IAAI,oBAAoB,GAAG;AACrC,WAAO,aAAa,QAAQ,IAAI,oBAAoB;AAAA,EACtD;AACA,MAAI,QAAQ,IAAI,kBAAkB,GAAG;AACnC,WAAO,WAAW,QAAQ,IAAI,kBAAkB;AAAA,EAClD;AAGA,MAAI,QAAQ,IAAI,gBAAgB,GAAG;AACjC,WAAO,UAAU,QAAQ,IAAI,gBAAgB;AAAA,EAC/C;AACF;AAEO,SAAS,cAAc,QAAyB;AACrD,MAAI;AACF,oBAAgB,KAAK,QAAQ,GAAG,cAAc,CAAC;AAE/C,UAAM,aAAa,EAAE,GAAG,OAAO;AAC/B,WAAO,WAAW;AAClB,WAAO,WAAW;AAClB,oBAAgB,aAAa,KAAK,UAAU,YAAY,MAAM,CAAC,CAAC;AAAA,EAClE,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,aAAa,QAA4B;AAChD,MAAI,CAAC,OAAO,YAAY,QAAS,QAAO;AAExC,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,cAAc,IAAI,SAAS,IAAI,KAAK,IAAI,WAAW;AAEzD,QAAM,CAAC,QAAQ,MAAM,IAAI,OAAO,WAAW,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM;AACtE,QAAM,CAAC,MAAM,IAAI,IAAI,OAAO,WAAW,IAAI,MAAM,GAAG,EAAE,IAAI,MAAM;AAEhE,QAAM,YAAY,SAAS,KAAK;AAChC,QAAM,UAAU,OAAO,KAAK;AAG5B,MAAI,YAAY,SAAS;AACvB,WAAO,eAAe,aAAa,cAAc;AAAA,EACnD;AAEA,SAAO,eAAe,aAAa,cAAc;AACnD;AAEA,SAAS,mBAA2B;AAClC,SAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACnD;AAEA,SAAS,oBAAoB,SAAsC;AACjE,MAAI,UAAU,GAAG,QAAQ,KAAK;AAAA;AAAA,EAAO,QAAQ,OAAO;AAEpD,MAAI,QAAQ,QAAQ;AAClB,eAAW;AAEX,QAAI,QAAQ,OAAO,UAAU;AAC3B,iBAAW,GAAG,QAAQ,OAAO,QAAQ;AAAA;AAAA,IACvC;AAEA,QAAI,QAAQ,OAAO,SAAS,SAAS;AACnC,iBAAW;AAAA,IACb,WAAW,QAAQ,OAAO,SAAS,aAAa,QAAQ,OAAO,SAAS;AACtE,cAAQ,OAAO,QAAQ,QAAQ,CAAC,QAAQ;AACtC,mBAAW,GAAG,IAAI,GAAG,KAAK,IAAI,KAAK;AAAA;AAAA,MACrC,CAAC;AACD,iBAAW;AAAA,IACb,WAAW,QAAQ,OAAO,SAAS,YAAY;AAC7C,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,kBAAkB,QAIlB;AACP,QAAM,UAAU,OAAO,WAAW;AAElC,MAAI,YAAY,YAAY;AAE1B,UAAMA,QAAO,OAAO,sBAAsB,OAAO;AACjD,UAAMC,MAAK,OAAO,oBAAoB,OAAO;AAC7C,QAAID,SAAQC,KAAI;AAEd,aAAO;AAAA,QACL,MAAMD,MAAK,WAAW,WAAW,IAAIA,QAAO,YAAYA,KAAI;AAAA,QAC5D,IAAIC,IAAG,WAAW,WAAW,IAAIA,MAAK,YAAYA,GAAE;AAAA,QACpD,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAGA,QAAM,OAAO,OAAO,iBAAiB,OAAO;AAC5C,QAAM,KAAK,OAAO,eAAe,OAAO;AACxC,MAAI,QAAQ,IAAI;AACd,WAAO,EAAE,MAAM,IAAI,SAAS,MAAM;AAAA,EACpC;AAEA,SAAO;AACT;AAEA,eAAsB,iBACpB,SACA,iBAMC;AACD,QAAM,SAAS,cAAc;AAE7B,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,EAAE,SAAS,OAAO,OAAO,yBAAyB;AAAA,EAC3D;AAGA,QAAM,UAAwD;AAAA,IAC5D,eAAe;AAAA,IACf,cAAc;AAAA,IACd,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,cAAc;AAAA,EAChB;AAEA,MAAI,CAAC,OAAO,SAAS,QAAQ,QAAQ,IAAI,CAAC,GAAG;AAC3C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,qBAAqB,QAAQ,IAAI;AAAA,IAC1C;AAAA,EACF;AAGA,MAAI,aAAa,MAAM,GAAG;AACxB,WAAO,EAAE,SAAS,OAAO,OAAO,qBAAqB;AAAA,EACvD;AAGA,MAAI,CAAC,OAAO,cAAc,CAAC,OAAO,WAAW;AAC3C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OACE;AAAA,IACJ;AAAA,EACF;AAGA,QAAM,kBAAkB,OAAO;AAC/B,MAAI,iBAAiB;AACnB,WAAO,UAAU;AAAA,EACnB;AAEA,QAAM,UAAU,kBAAkB,MAAM;AACxC,SAAO,UAAU;AAEjB,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OACE,OAAO,YAAY,aACf,8EACA;AAAA,IACR;AAAA,EACF;AAEA,QAAM,UAAU,oBAAoB,OAAO;AAC3C,MAAI;AAGJ,MAAI,QAAQ,QAAQ;AAClB,eAAW,iBAAiB;AAC5B,UAAM,YAAY,IAAI;AAAA,MACpB,KAAK,IAAI,IAAI,OAAO,kBAAkB;AAAA,IACxC,EAAE,YAAY;AAEd,UAAM,gBAA+B;AAAA,MACnC,IAAI;AAAA,MACJ,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,SAAS,QAAQ;AAAA,MACjB,SAAS,QAAQ,OAAO,WAAW,CAAC;AAAA,MACpC,MAAM,QAAQ,OAAO;AAAA,MACrB;AAAA,IACF;AAEA,WAAO,eAAe,KAAK,aAAa;AACxC,kBAAc,MAAM;AAAA,EACtB;AAEA,MAAI;AAEF,UAAM,YAAY,8CAA8C,OAAO,UAAU;AAEjF,UAAM,WAAW,MAAM,MAAM,WAAW;AAAA,MACtC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eACE,WACA,OAAO,KAAK,GAAG,OAAO,UAAU,IAAI,OAAO,SAAS,EAAE,EAAE;AAAA,UACtD;AAAA,QACF;AAAA,QACF,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,IAAI,gBAAgB;AAAA,QACxB,MAAM,QAAQ;AAAA,QACd,IAAI,QAAQ;AAAA,QACZ,MAAM;AAAA,MACR,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,QAAQ;AAAA,QACjB,OAAO,iBAAiB,SAAS;AAAA,MACnC;AAAA,IACF;AAEA,WAAO,EAAE,SAAS,MAAM,UAAU,SAAS,QAAQ,QAAQ;AAAA,EAC7D,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,QAAQ;AAAA,MACjB,OAAO,kBAAkB,QAAQ,OAAO,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC/F;AAAA,EACF;AACF;AAGA,eAAsB,oBACpB,SACkE;AAClE,SAAO,iBAAiB,OAAO;AACjC;AAEO,SAAS,wBACd,MACA,MAMA;AACA,QAAM,SAAS,cAAc;AAG7B,QAAM,WAAW,KAAK,KAAK,EAAE,YAAY;AAGzC,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,eAAe,OAAO,eAAe;AAAA,IACzC,CAAC,MAAM,IAAI,KAAK,EAAE,SAAS,IAAI;AAAA,EACjC;AAEA,MAAI,aAAa,WAAW,GAAG;AAC7B,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AAGA,QAAM,SAAS,aAAa,aAAa,SAAS,CAAC;AAEnD,MAAI;AAEJ,MAAI,OAAO,SAAS,SAAS;AAC3B,QAAI,aAAa,OAAO,aAAa,OAAO;AAC1C,sBAAgB,EAAE,KAAK,KAAK,OAAO,MAAM;AAAA,IAC3C,WAAW,aAAa,OAAO,aAAa,MAAM;AAChD,sBAAgB,EAAE,KAAK,KAAK,OAAO,KAAK;AAAA,IAC1C;AAAA,EACF,WAAW,OAAO,SAAS,WAAW;AACpC,oBAAgB,OAAO,QAAQ;AAAA,MAC7B,CAAC,QAAQ,IAAI,IAAI,YAAY,MAAM;AAAA,IACrC;AAAA,EACF,WAAW,OAAO,SAAS,YAAY;AACrC,oBAAgB,EAAE,KAAK,UAAU,OAAO,SAAS;AAAA,EACnD;AAGA,SAAO,iBAAiB,OAAO,eAAe;AAAA,IAC5C,CAAC,MAAM,EAAE,OAAO,OAAO;AAAA,EACzB;AACA,gBAAc,MAAM;AAEpB,MAAI,eAAe;AACjB,WAAO;AAAA,MACL,SAAS;AAAA,MACT;AAAA,MACA,UAAU,cAAc;AAAA,MACxB,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,OAAO,OAAO;AAClC;AAGA,SAAS,eAAuB;AAC9B,SACE,QAAQ,IAAI,oBAAoB,KAChC,QAAQ,IAAI,wBAAwB,KACpC,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,CAAC;AAE7C;AAIA,eAAsB,kBACpB,OACA,aACA,SACkE;AAClE,QAAM,YAAY,aAAa;AAG/B,MAAI,eAAe,WAAW,CAAC;AAC/B,MAAI,aAAa,SAAS,GAAG;AAC3B,UAAM,WAAW;AAAA,MACf,EAAE,OAAO,WAAW,QAAQ,kBAAkB;AAAA,MAC9C,EAAE,OAAO,mBAAmB,QAAQ,2BAA2B;AAAA,IACjE;AACA,mBAAe,CAAC,GAAG,cAAc,GAAG,QAAQ,EAAE;AAAA,MAC5C;AAAA,MACA,KAAK,IAAI,GAAG,aAAa,MAAM;AAAA,IACjC;AAAA,EACF;AAEA,QAAM,UAA+B;AAAA,IACnC,MAAM;AAAA,IACN,OAAO,WAAW,SAAS,mBAAmB,KAAK;AAAA,IACnD,SAAS;AAAA,IACT,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS,aAAa,IAAI,CAAC,KAAK,OAAO;AAAA,QACrC,KAAK,OAAO,IAAI,CAAC;AAAA,QACjB,OAAO,IAAI;AAAA,QACX,QAAQ,IAAI;AAAA,MACd,EAAE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,EACF;AAEA,SAAO,oBAAoB,OAAO;AACpC;AAEA,eAAsB,gBACpB,OACA,UACA,WACA,UACkE;AAClE,QAAM,YAAY,aAAa;AAC/B,SAAO,oBAAoB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS,KAAK,KAAK;AAAA,IACrC,SAAS;AAAA,IACT,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,KAAK,KAAK,OAAO,OAAO,QAAQ,UAAU;AAAA,QAC5C,EAAE,KAAK,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,MAC5C;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,mBACpB,UACA,SACkE;AAClE,QAAM,YAAY,aAAa;AAC/B,SAAO,oBAAoB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS,oBAAoB,QAAQ;AAAA,IACvD,SAAS;AAAA,IACT,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,KAAK,KAAK,OAAO,mBAAmB,QAAQ,YAAY;AAAA,QAC1D,EAAE,KAAK,KAAK,OAAO,gBAAgB,QAAQ,qBAAqB;AAAA,MAClE;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,YACpB,OACA,SACkE;AAClE,QAAM,YAAY,aAAa;AAC/B,SAAO,oBAAoB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS;AAAA,IAC3B,SAAS,UAAU,GAAG,KAAK;AAAA;AAAA,WAAgB,OAAO,KAAK;AAAA,IACvD,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,KAAK,KAAK,OAAO,SAAS,QAAQ,YAAY;AAAA,QAChD;AAAA,UACE,KAAK;AAAA,UACL,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAGO,SAAS,wBAAgC;AAC9C,QAAM,SAAS,cAAc;AAC7B,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,SAAS,OAAO,eAAe;AAErC,SAAO,iBAAiB,OAAO,eAAe;AAAA,IAC5C,CAAC,MAAM,IAAI,KAAK,EAAE,SAAS,IAAI;AAAA,EACjC;AAEA,QAAM,UAAU,SAAS,OAAO,eAAe;AAC/C,MAAI,UAAU,GAAG;AACf,kBAAc,MAAM;AAAA,EACtB;AAEA,SAAO;AACT;",
+  "sourcesContent": ["/**\n * SMS Notification Hook for StackMemory\n * Sends text messages when tasks are ready for review\n * Supports interactive prompts with numbered options or yes/no\n *\n * Optional feature - requires Twilio setup\n */\n\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport { config as loadDotenv } from 'dotenv';\nimport { writeFileSecure, ensureSecureDir } from './secure-fs.js';\nimport { SMSConfigSchema, parseConfigSafe } from './schemas.js';\n\nexport type MessageChannel = 'whatsapp' | 'sms';\n\nexport interface SMSConfig {\n  enabled: boolean;\n  // Preferred channel: whatsapp is cheaper for back-and-forth conversations\n  channel: MessageChannel;\n  // Twilio credentials (from env or config)\n  accountSid?: string;\n  authToken?: string;\n  // SMS numbers\n  smsFromNumber?: string;\n  smsToNumber?: string;\n  // WhatsApp numbers (Twilio prefixes with 'whatsapp:' automatically)\n  whatsappFromNumber?: string;\n  whatsappToNumber?: string;\n  // Legacy fields (backwards compatibility)\n  fromNumber?: string;\n  toNumber?: string;\n  // Webhook URL for receiving responses\n  webhookUrl?: string;\n  // Notification preferences\n  notifyOn: {\n    taskComplete: boolean;\n    reviewReady: boolean;\n    error: boolean;\n    custom: boolean;\n    contextSync: boolean;\n  };\n  // Quiet hours (don't send during these times)\n  quietHours?: {\n    enabled: boolean;\n    start: string; // \"22:00\"\n    end: string; // \"08:00\"\n  };\n  // Response timeout (seconds)\n  responseTimeout: number;\n  // Pending prompts awaiting response\n  pendingPrompts: PendingPrompt[];\n}\n\nexport interface PendingPrompt {\n  id: string;\n  timestamp: string;\n  message: string;\n  options: PromptOption[];\n  type: 'options' | 'yesno' | 'freeform';\n  callback?: string; // Command to run with response\n  expiresAt: string;\n}\n\nexport interface PromptOption {\n  key: string; // \"1\", \"2\", \"y\", \"n\", etc.\n  label: string;\n  action?: string; // Command to execute\n}\n\nexport interface NotificationPayload {\n  type: 'task_complete' | 'review_ready' | 'error' | 'custom' | 'context_sync';\n  title: string;\n  message: string;\n  prompt?: {\n    type: 'options' | 'yesno' | 'freeform';\n    options?: PromptOption[];\n    question?: string;\n  };\n  metadata?: Record<string, unknown>;\n}\n\nconst CONFIG_PATH = join(homedir(), '.stackmemory', 'sms-notify.json');\n\nconst DEFAULT_CONFIG: SMSConfig = {\n  enabled: false,\n  channel: 'whatsapp', // WhatsApp is cheaper for conversations\n  notifyOn: {\n    taskComplete: true,\n    reviewReady: true,\n    error: true,\n    custom: true,\n    contextSync: true,\n  },\n  quietHours: {\n    enabled: false,\n    start: '22:00',\n    end: '08:00',\n  },\n  responseTimeout: 300, // 5 minutes\n  pendingPrompts: [],\n};\n\nexport function loadSMSConfig(): SMSConfig {\n  // Load .env files (project, home, global)\n  loadDotenv({ path: join(process.cwd(), '.env') });\n  loadDotenv({ path: join(process.cwd(), '.env.local') });\n  loadDotenv({ path: join(homedir(), '.env') });\n  loadDotenv({ path: join(homedir(), '.stackmemory', '.env') });\n\n  try {\n    if (existsSync(CONFIG_PATH)) {\n      const data = readFileSync(CONFIG_PATH, 'utf8');\n      const parsed = JSON.parse(data);\n      // Validate with zod schema, fall back to defaults on invalid config\n      const validated = parseConfigSafe(\n        SMSConfigSchema,\n        { ...DEFAULT_CONFIG, ...parsed },\n        DEFAULT_CONFIG,\n        'sms-notify'\n      );\n      applyEnvVars(validated);\n      return validated;\n    }\n  } catch {\n    // Use defaults\n  }\n\n  // Check environment variables\n  const config = { ...DEFAULT_CONFIG };\n  applyEnvVars(config);\n  return config;\n}\n\n// Check what's missing for notifications to work\nexport function getMissingConfig(): {\n  missing: string[];\n  configured: string[];\n  ready: boolean;\n} {\n  const config = loadSMSConfig();\n  const missing: string[] = [];\n  const configured: string[] = [];\n\n  // Check credentials\n  if (config.accountSid) {\n    configured.push('TWILIO_ACCOUNT_SID');\n  } else {\n    missing.push('TWILIO_ACCOUNT_SID');\n  }\n\n  if (config.authToken) {\n    configured.push('TWILIO_AUTH_TOKEN');\n  } else {\n    missing.push('TWILIO_AUTH_TOKEN');\n  }\n\n  // Check channel-specific numbers\n  const channel = config.channel || 'whatsapp';\n\n  if (channel === 'whatsapp') {\n    const from = config.whatsappFromNumber || config.fromNumber;\n    const to = config.whatsappToNumber || config.toNumber;\n\n    if (from) {\n      configured.push('TWILIO_WHATSAPP_FROM');\n    } else {\n      missing.push('TWILIO_WHATSAPP_FROM');\n    }\n\n    if (to) {\n      configured.push('TWILIO_WHATSAPP_TO');\n    } else {\n      missing.push('TWILIO_WHATSAPP_TO');\n    }\n  } else {\n    const from = config.smsFromNumber || config.fromNumber;\n    const to = config.smsToNumber || config.toNumber;\n\n    if (from) {\n      configured.push('TWILIO_SMS_FROM');\n    } else {\n      missing.push('TWILIO_SMS_FROM');\n    }\n\n    if (to) {\n      configured.push('TWILIO_SMS_TO');\n    } else {\n      missing.push('TWILIO_SMS_TO');\n    }\n  }\n\n  return {\n    missing,\n    configured,\n    ready: missing.length === 0,\n  };\n}\n\nfunction applyEnvVars(config: SMSConfig): void {\n  // Twilio credentials\n  if (process.env['TWILIO_ACCOUNT_SID']) {\n    config.accountSid = process.env['TWILIO_ACCOUNT_SID'];\n  }\n  if (process.env['TWILIO_AUTH_TOKEN']) {\n    config.authToken = process.env['TWILIO_AUTH_TOKEN'];\n  }\n\n  // SMS numbers\n  if (process.env['TWILIO_SMS_FROM'] || process.env['TWILIO_FROM_NUMBER']) {\n    config.smsFromNumber =\n      process.env['TWILIO_SMS_FROM'] || process.env['TWILIO_FROM_NUMBER'];\n  }\n  if (process.env['TWILIO_SMS_TO'] || process.env['TWILIO_TO_NUMBER']) {\n    config.smsToNumber =\n      process.env['TWILIO_SMS_TO'] || process.env['TWILIO_TO_NUMBER'];\n  }\n\n  // WhatsApp numbers\n  if (process.env['TWILIO_WHATSAPP_FROM']) {\n    config.whatsappFromNumber = process.env['TWILIO_WHATSAPP_FROM'];\n  }\n  if (process.env['TWILIO_WHATSAPP_TO']) {\n    config.whatsappToNumber = process.env['TWILIO_WHATSAPP_TO'];\n  }\n\n  // Legacy support\n  if (process.env['TWILIO_FROM_NUMBER']) {\n    config.fromNumber = process.env['TWILIO_FROM_NUMBER'];\n  }\n  if (process.env['TWILIO_TO_NUMBER']) {\n    config.toNumber = process.env['TWILIO_TO_NUMBER'];\n  }\n\n  // Channel preference\n  if (process.env['TWILIO_CHANNEL']) {\n    config.channel = process.env['TWILIO_CHANNEL'] as MessageChannel;\n  }\n}\n\nexport function saveSMSConfig(config: SMSConfig): void {\n  try {\n    ensureSecureDir(join(homedir(), '.stackmemory'));\n    // Don't save sensitive credentials to file\n    const safeConfig = { ...config };\n    delete safeConfig.accountSid;\n    delete safeConfig.authToken;\n    writeFileSecure(CONFIG_PATH, JSON.stringify(safeConfig, null, 2));\n  } catch {\n    // Silently fail\n  }\n}\n\nfunction isQuietHours(config: SMSConfig): boolean {\n  if (!config.quietHours?.enabled) return false;\n\n  const now = new Date();\n  const currentTime = now.getHours() * 60 + now.getMinutes();\n\n  const [startH, startM] = config.quietHours.start.split(':').map(Number);\n  const [endH, endM] = config.quietHours.end.split(':').map(Number);\n\n  const startTime = startH * 60 + startM;\n  const endTime = endH * 60 + endM;\n\n  // Handle overnight quiet hours (e.g., 22:00 - 08:00)\n  if (startTime > endTime) {\n    return currentTime >= startTime || currentTime < endTime;\n  }\n\n  return currentTime >= startTime && currentTime < endTime;\n}\n\nfunction generatePromptId(): string {\n  return Math.random().toString(36).substring(2, 10);\n}\n\nfunction formatPromptMessage(payload: NotificationPayload): string {\n  let message = `${payload.title}\\n\\n${payload.message}`;\n\n  if (payload.prompt) {\n    message += '\\n\\n';\n\n    if (payload.prompt.question) {\n      message += `${payload.prompt.question}\\n`;\n    }\n\n    if (payload.prompt.type === 'yesno') {\n      message += 'Reply Y for Yes, N for No';\n    } else if (payload.prompt.type === 'options' && payload.prompt.options) {\n      payload.prompt.options.forEach((opt) => {\n        message += `${opt.key}. ${opt.label}\\n`;\n      });\n      message += '\\nReply with number to select';\n    } else if (payload.prompt.type === 'freeform') {\n      message += 'Reply with your response';\n    }\n  }\n\n  // Always append session URL if available\n  return appendSessionUrl(message);\n}\n\nfunction getChannelNumbers(config: SMSConfig): {\n  from: string;\n  to: string;\n  channel: MessageChannel;\n} | null {\n  const channel = config.channel || 'whatsapp';\n\n  if (channel === 'whatsapp') {\n    // Try WhatsApp first\n    const from = config.whatsappFromNumber || config.fromNumber;\n    const to = config.whatsappToNumber || config.toNumber;\n    if (from && to) {\n      // Twilio requires 'whatsapp:' prefix for WhatsApp numbers\n      return {\n        from: from.startsWith('whatsapp:') ? from : `whatsapp:${from}`,\n        to: to.startsWith('whatsapp:') ? to : `whatsapp:${to}`,\n        channel: 'whatsapp',\n      };\n    }\n  }\n\n  // Fall back to SMS\n  const from = config.smsFromNumber || config.fromNumber;\n  const to = config.smsToNumber || config.toNumber;\n  if (from && to) {\n    return { from, to, channel: 'sms' };\n  }\n\n  return null;\n}\n\nexport async function sendNotification(\n  payload: NotificationPayload,\n  channelOverride?: MessageChannel\n): Promise<{\n  success: boolean;\n  promptId?: string;\n  channel?: MessageChannel;\n  error?: string;\n}> {\n  const config = loadSMSConfig();\n\n  if (!config.enabled) {\n    return { success: false, error: 'Notifications disabled' };\n  }\n\n  // Check notification type is enabled\n  const typeMap: Record<string, keyof typeof config.notifyOn> = {\n    task_complete: 'taskComplete',\n    review_ready: 'reviewReady',\n    error: 'error',\n    custom: 'custom',\n    context_sync: 'contextSync',\n  };\n\n  if (!config.notifyOn[typeMap[payload.type]]) {\n    return {\n      success: false,\n      error: `Notifications for ${payload.type} disabled`,\n    };\n  }\n\n  // Check quiet hours\n  if (isQuietHours(config)) {\n    return { success: false, error: 'Quiet hours active' };\n  }\n\n  // Validate credentials\n  if (!config.accountSid || !config.authToken) {\n    return {\n      success: false,\n      error:\n        'Missing Twilio credentials. Set TWILIO_ACCOUNT_SID and TWILIO_AUTH_TOKEN',\n    };\n  }\n\n  // Get channel numbers (prefer WhatsApp)\n  const originalChannel = config.channel;\n  if (channelOverride) {\n    config.channel = channelOverride;\n  }\n\n  const numbers = getChannelNumbers(config);\n  config.channel = originalChannel; // Restore\n\n  if (!numbers) {\n    return {\n      success: false,\n      error:\n        config.channel === 'whatsapp'\n          ? 'Missing WhatsApp numbers. Set TWILIO_WHATSAPP_FROM and TWILIO_WHATSAPP_TO'\n          : 'Missing SMS numbers. Set TWILIO_SMS_FROM and TWILIO_SMS_TO',\n    };\n  }\n\n  const message = formatPromptMessage(payload);\n  let promptId: string | undefined;\n\n  // Store pending prompt if interactive\n  if (payload.prompt) {\n    promptId = generatePromptId();\n    const expiresAt = new Date(\n      Date.now() + config.responseTimeout * 1000\n    ).toISOString();\n\n    const pendingPrompt: PendingPrompt = {\n      id: promptId,\n      timestamp: new Date().toISOString(),\n      message: payload.message,\n      options: payload.prompt.options || [],\n      type: payload.prompt.type,\n      expiresAt,\n    };\n\n    config.pendingPrompts.push(pendingPrompt);\n    saveSMSConfig(config);\n  }\n\n  try {\n    // Use Twilio API (same endpoint for SMS and WhatsApp)\n    const twilioUrl = `https://api.twilio.com/2010-04-01/Accounts/${config.accountSid}/Messages.json`;\n\n    const response = await fetch(twilioUrl, {\n      method: 'POST',\n      headers: {\n        Authorization:\n          'Basic ' +\n          Buffer.from(`${config.accountSid}:${config.authToken}`).toString(\n            'base64'\n          ),\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({\n        From: numbers.from,\n        To: numbers.to,\n        Body: message,\n      }),\n    });\n\n    if (!response.ok) {\n      const errorData = await response.text();\n      return {\n        success: false,\n        channel: numbers.channel,\n        error: `Twilio error: ${errorData}`,\n      };\n    }\n\n    return { success: true, promptId, channel: numbers.channel };\n  } catch (err) {\n    return {\n      success: false,\n      channel: numbers.channel,\n      error: `Failed to send ${numbers.channel}: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n}\n\n// Backwards compatible alias\nexport async function sendSMSNotification(\n  payload: NotificationPayload\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  return sendNotification(payload);\n}\n\nexport function processIncomingResponse(\n  from: string,\n  body: string\n): {\n  matched: boolean;\n  prompt?: PendingPrompt;\n  response?: string;\n  action?: string;\n} {\n  const config = loadSMSConfig();\n\n  // Normalize response\n  const response = body.trim().toLowerCase();\n\n  // Find matching pending prompt (most recent first)\n  const now = new Date();\n  const validPrompts = config.pendingPrompts.filter(\n    (p) => new Date(p.expiresAt) > now\n  );\n\n  if (validPrompts.length === 0) {\n    return { matched: false };\n  }\n\n  // Get most recent prompt\n  const prompt = validPrompts[validPrompts.length - 1];\n\n  let matchedOption: PromptOption | undefined;\n\n  if (prompt.type === 'yesno') {\n    if (response === 'y' || response === 'yes') {\n      matchedOption = { key: 'y', label: 'Yes' };\n    } else if (response === 'n' || response === 'no') {\n      matchedOption = { key: 'n', label: 'No' };\n    }\n  } else if (prompt.type === 'options') {\n    matchedOption = prompt.options.find(\n      (opt) => opt.key.toLowerCase() === response\n    );\n  } else if (prompt.type === 'freeform') {\n    matchedOption = { key: response, label: response };\n  }\n\n  // Remove processed prompt\n  config.pendingPrompts = config.pendingPrompts.filter(\n    (p) => p.id !== prompt.id\n  );\n  saveSMSConfig(config);\n\n  if (matchedOption) {\n    return {\n      matched: true,\n      prompt,\n      response: matchedOption.key,\n      action: matchedOption.action,\n    };\n  }\n\n  return { matched: false, prompt };\n}\n\n// Get session ID from environment or generate short ID\nfunction getSessionId(): string {\n  return (\n    process.env['CLAUDE_INSTANCE_ID'] ||\n    process.env['STACKMEMORY_SESSION_ID'] ||\n    Math.random().toString(36).substring(2, 8)\n  );\n}\n\n// Get Claude session URL if available\nexport function getSessionUrl(): string | undefined {\n  // Check for remote session URL in environment\n  const sessionId = process.env['CLAUDE_SESSION_ID'];\n  if (sessionId?.startsWith('session_')) {\n    return `https://claude.ai/code/${sessionId}`;\n  }\n  // Check for explicit URL\n  return process.env['CLAUDE_SESSION_URL'];\n}\n\n// Format message with session URL\nfunction appendSessionUrl(message: string): string {\n  const url = getSessionUrl();\n  if (url) {\n    return `${message}\\n\\nSession: ${url}`;\n  }\n  return message;\n}\n\n// Convenience functions for common notifications\n\nexport async function notifyReviewReady(\n  title: string,\n  description: string,\n  options?: { label: string; action?: string }[]\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n\n  // Ensure minimum 2 options\n  let finalOptions = options || [];\n  if (finalOptions.length < 2) {\n    const defaults = [\n      { label: 'Approve', action: 'echo \"Approved\"' },\n      { label: 'Request changes', action: 'echo \"Changes requested\"' },\n    ];\n    finalOptions = [...finalOptions, ...defaults].slice(\n      0,\n      Math.max(2, finalOptions.length)\n    );\n  }\n\n  const payload: NotificationPayload = {\n    type: 'review_ready',\n    title: `[Claude ${sessionId}] Review Ready: ${title}`,\n    message: description,\n    prompt: {\n      type: 'options',\n      options: finalOptions.map((opt, i) => ({\n        key: String(i + 1),\n        label: opt.label,\n        action: opt.action,\n      })),\n      question: 'What would you like to do?',\n    },\n  };\n\n  return sendSMSNotification(payload);\n}\n\nexport async function notifyWithYesNo(\n  title: string,\n  question: string,\n  yesAction?: string,\n  noAction?: string\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n  return sendSMSNotification({\n    type: 'custom',\n    title: `[Claude ${sessionId}] ${title}`,\n    message: question,\n    prompt: {\n      type: 'yesno',\n      options: [\n        { key: 'y', label: 'Yes', action: yesAction },\n        { key: 'n', label: 'No', action: noAction },\n      ],\n    },\n  });\n}\n\nexport async function notifyTaskComplete(\n  taskName: string,\n  summary: string\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n  return sendSMSNotification({\n    type: 'task_complete',\n    title: `[Claude ${sessionId}] Task Complete: ${taskName}`,\n    message: summary,\n    prompt: {\n      type: 'options',\n      options: [\n        { key: '1', label: 'Start next task', action: 'claude-sm' },\n        { key: '2', label: 'View details', action: 'stackmemory status' },\n      ],\n    },\n  });\n}\n\nexport async function notifyError(\n  error: string,\n  context?: string\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n  return sendSMSNotification({\n    type: 'error',\n    title: `[Claude ${sessionId}] Error Alert`,\n    message: context ? `${error}\\n\\nContext: ${context}` : error,\n    prompt: {\n      type: 'options',\n      options: [\n        { key: '1', label: 'Retry', action: 'claude-sm' },\n        {\n          key: '2',\n          label: 'View logs',\n          action: 'tail -50 ~/.claude/logs/*.log',\n        },\n      ],\n    },\n  });\n}\n\n// Clean up expired prompts\nexport function cleanupExpiredPrompts(): number {\n  const config = loadSMSConfig();\n  const now = new Date();\n  const before = config.pendingPrompts.length;\n\n  config.pendingPrompts = config.pendingPrompts.filter(\n    (p) => new Date(p.expiresAt) > now\n  );\n\n  const removed = before - config.pendingPrompts.length;\n  if (removed > 0) {\n    saveSMSConfig(config);\n  }\n\n  return removed;\n}\n\n// ============================================================================\n// SIMPLIFIED API - Use these for basic notifications\n// ============================================================================\n\n/**\n * Send a simple status notification\n * Always includes session URL if available\n */\nexport async function notify(\n  message: string\n): Promise<{ success: boolean; error?: string }> {\n  const sessionId = getSessionId();\n  return sendNotification({\n    type: 'custom',\n    title: `[Claude ${sessionId}]`,\n    message,\n  });\n}\n\n/**\n * Send a notification with A/B choice (1 or 2)\n * Always includes session URL if available\n */\nexport async function notifyChoice(\n  message: string,\n  optionA: string,\n  optionB: string\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n  return sendNotification({\n    type: 'custom',\n    title: `[Claude ${sessionId}]`,\n    message,\n    prompt: {\n      type: 'options',\n      options: [\n        { key: '1', label: optionA },\n        { key: '2', label: optionB },\n      ],\n    },\n  });\n}\n\n/**\n * Send a notification with Yes/No choice\n * Always includes session URL if available\n */\nexport async function notifyYesNo(\n  message: string\n): Promise<{ success: boolean; promptId?: string; error?: string }> {\n  const sessionId = getSessionId();\n  return sendNotification({\n    type: 'custom',\n    title: `[Claude ${sessionId}]`,\n    message,\n    prompt: { type: 'yesno' },\n  });\n}\n\n/**\n * Send step completion notification\n * Always includes session URL if available\n */\nexport async function notifyStep(\n  step: string,\n  status: 'done' | 'failed' | 'waiting' = 'done'\n): Promise<{ success: boolean; error?: string }> {\n  const sessionId = getSessionId();\n  const symbol = status === 'done' ? '\u2713' : status === 'failed' ? '\u2717' : '\u23F3';\n  return sendNotification({\n    type: 'task_complete',\n    title: `[Claude ${sessionId}]`,\n    message: `${symbol} ${step}`,\n  });\n}\n"],
+  "mappings": ";;;;AAQA,SAAS,YAAY,oBAAoB;AACzC,SAAS,YAAY;AACrB,SAAS,eAAe;AACxB,SAAS,UAAU,kBAAkB;AACrC,SAAS,iBAAiB,uBAAuB;AACjD,SAAS,iBAAiB,uBAAuB;AAsEjD,MAAM,cAAc,KAAK,QAAQ,GAAG,gBAAgB,iBAAiB;AAErE,MAAM,iBAA4B;AAAA,EAChC,SAAS;AAAA,EACT,SAAS;AAAA;AAAA,EACT,UAAU;AAAA,IACR,cAAc;AAAA,IACd,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,YAAY;AAAA,IACV,SAAS;AAAA,IACT,OAAO;AAAA,IACP,KAAK;AAAA,EACP;AAAA,EACA,iBAAiB;AAAA;AAAA,EACjB,gBAAgB,CAAC;AACnB;AAEO,SAAS,gBAA2B;AAEzC,aAAW,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,MAAM,EAAE,CAAC;AAChD,aAAW,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,YAAY,EAAE,CAAC;AACtD,aAAW,EAAE,MAAM,KAAK,QAAQ,GAAG,MAAM,EAAE,CAAC;AAC5C,aAAW,EAAE,MAAM,KAAK,QAAQ,GAAG,gBAAgB,MAAM,EAAE,CAAC;AAE5D,MAAI;AACF,QAAI,WAAW,WAAW,GAAG;AAC3B,YAAM,OAAO,aAAa,aAAa,MAAM;AAC7C,YAAM,SAAS,KAAK,MAAM,IAAI;AAE9B,YAAM,YAAY;AAAA,QAChB;AAAA,QACA,EAAE,GAAG,gBAAgB,GAAG,OAAO;AAAA,QAC/B;AAAA,QACA;AAAA,MACF;AACA,mBAAa,SAAS;AACtB,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AAGA,QAAM,SAAS,EAAE,GAAG,eAAe;AACnC,eAAa,MAAM;AACnB,SAAO;AACT;AAGO,SAAS,mBAId;AACA,QAAM,SAAS,cAAc;AAC7B,QAAM,UAAoB,CAAC;AAC3B,QAAM,aAAuB,CAAC;AAG9B,MAAI,OAAO,YAAY;AACrB,eAAW,KAAK,oBAAoB;AAAA,EACtC,OAAO;AACL,YAAQ,KAAK,oBAAoB;AAAA,EACnC;AAEA,MAAI,OAAO,WAAW;AACpB,eAAW,KAAK,mBAAmB;AAAA,EACrC,OAAO;AACL,YAAQ,KAAK,mBAAmB;AAAA,EAClC;AAGA,QAAM,UAAU,OAAO,WAAW;AAElC,MAAI,YAAY,YAAY;AAC1B,UAAM,OAAO,OAAO,sBAAsB,OAAO;AACjD,UAAM,KAAK,OAAO,oBAAoB,OAAO;AAE7C,QAAI,MAAM;AACR,iBAAW,KAAK,sBAAsB;AAAA,IACxC,OAAO;AACL,cAAQ,KAAK,sBAAsB;AAAA,IACrC;AAEA,QAAI,IAAI;AACN,iBAAW,KAAK,oBAAoB;AAAA,IACtC,OAAO;AACL,cAAQ,KAAK,oBAAoB;AAAA,IACnC;AAAA,EACF,OAAO;AACL,UAAM,OAAO,OAAO,iBAAiB,OAAO;AAC5C,UAAM,KAAK,OAAO,eAAe,OAAO;AAExC,QAAI,MAAM;AACR,iBAAW,KAAK,iBAAiB;AAAA,IACnC,OAAO;AACL,cAAQ,KAAK,iBAAiB;AAAA,IAChC;AAEA,QAAI,IAAI;AACN,iBAAW,KAAK,eAAe;AAAA,IACjC,OAAO;AACL,cAAQ,KAAK,eAAe;AAAA,IAC9B;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,OAAO,QAAQ,WAAW;AAAA,EAC5B;AACF;AAEA,SAAS,aAAa,QAAyB;AAE7C,MAAI,QAAQ,IAAI,oBAAoB,GAAG;AACrC,WAAO,aAAa,QAAQ,IAAI,oBAAoB;AAAA,EACtD;AACA,MAAI,QAAQ,IAAI,mBAAmB,GAAG;AACpC,WAAO,YAAY,QAAQ,IAAI,mBAAmB;AAAA,EACpD;AAGA,MAAI,QAAQ,IAAI,iBAAiB,KAAK,QAAQ,IAAI,oBAAoB,GAAG;AACvE,WAAO,gBACL,QAAQ,IAAI,iBAAiB,KAAK,QAAQ,IAAI,oBAAoB;AAAA,EACtE;AACA,MAAI,QAAQ,IAAI,eAAe,KAAK,QAAQ,IAAI,kBAAkB,GAAG;AACnE,WAAO,cACL,QAAQ,IAAI,eAAe,KAAK,QAAQ,IAAI,kBAAkB;AAAA,EAClE;AAGA,MAAI,QAAQ,IAAI,sBAAsB,GAAG;AACvC,WAAO,qBAAqB,QAAQ,IAAI,sBAAsB;AAAA,EAChE;AACA,MAAI,QAAQ,IAAI,oBAAoB,GAAG;AACrC,WAAO,mBAAmB,QAAQ,IAAI,oBAAoB;AAAA,EAC5D;AAGA,MAAI,QAAQ,IAAI,oBAAoB,GAAG;AACrC,WAAO,aAAa,QAAQ,IAAI,oBAAoB;AAAA,EACtD;AACA,MAAI,QAAQ,IAAI,kBAAkB,GAAG;AACnC,WAAO,WAAW,QAAQ,IAAI,kBAAkB;AAAA,EAClD;AAGA,MAAI,QAAQ,IAAI,gBAAgB,GAAG;AACjC,WAAO,UAAU,QAAQ,IAAI,gBAAgB;AAAA,EAC/C;AACF;AAEO,SAAS,cAAc,QAAyB;AACrD,MAAI;AACF,oBAAgB,KAAK,QAAQ,GAAG,cAAc,CAAC;AAE/C,UAAM,aAAa,EAAE,GAAG,OAAO;AAC/B,WAAO,WAAW;AAClB,WAAO,WAAW;AAClB,oBAAgB,aAAa,KAAK,UAAU,YAAY,MAAM,CAAC,CAAC;AAAA,EAClE,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,aAAa,QAA4B;AAChD,MAAI,CAAC,OAAO,YAAY,QAAS,QAAO;AAExC,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,cAAc,IAAI,SAAS,IAAI,KAAK,IAAI,WAAW;AAEzD,QAAM,CAAC,QAAQ,MAAM,IAAI,OAAO,WAAW,MAAM,MAAM,GAAG,EAAE,IAAI,MAAM;AACtE,QAAM,CAAC,MAAM,IAAI,IAAI,OAAO,WAAW,IAAI,MAAM,GAAG,EAAE,IAAI,MAAM;AAEhE,QAAM,YAAY,SAAS,KAAK;AAChC,QAAM,UAAU,OAAO,KAAK;AAG5B,MAAI,YAAY,SAAS;AACvB,WAAO,eAAe,aAAa,cAAc;AAAA,EACnD;AAEA,SAAO,eAAe,aAAa,cAAc;AACnD;AAEA,SAAS,mBAA2B;AAClC,SAAO,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,EAAE;AACnD;AAEA,SAAS,oBAAoB,SAAsC;AACjE,MAAI,UAAU,GAAG,QAAQ,KAAK;AAAA;AAAA,EAAO,QAAQ,OAAO;AAEpD,MAAI,QAAQ,QAAQ;AAClB,eAAW;AAEX,QAAI,QAAQ,OAAO,UAAU;AAC3B,iBAAW,GAAG,QAAQ,OAAO,QAAQ;AAAA;AAAA,IACvC;AAEA,QAAI,QAAQ,OAAO,SAAS,SAAS;AACnC,iBAAW;AAAA,IACb,WAAW,QAAQ,OAAO,SAAS,aAAa,QAAQ,OAAO,SAAS;AACtE,cAAQ,OAAO,QAAQ,QAAQ,CAAC,QAAQ;AACtC,mBAAW,GAAG,IAAI,GAAG,KAAK,IAAI,KAAK;AAAA;AAAA,MACrC,CAAC;AACD,iBAAW;AAAA,IACb,WAAW,QAAQ,OAAO,SAAS,YAAY;AAC7C,iBAAW;AAAA,IACb;AAAA,EACF;AAGA,SAAO,iBAAiB,OAAO;AACjC;AAEA,SAAS,kBAAkB,QAIlB;AACP,QAAM,UAAU,OAAO,WAAW;AAElC,MAAI,YAAY,YAAY;AAE1B,UAAMA,QAAO,OAAO,sBAAsB,OAAO;AACjD,UAAMC,MAAK,OAAO,oBAAoB,OAAO;AAC7C,QAAID,SAAQC,KAAI;AAEd,aAAO;AAAA,QACL,MAAMD,MAAK,WAAW,WAAW,IAAIA,QAAO,YAAYA,KAAI;AAAA,QAC5D,IAAIC,IAAG,WAAW,WAAW,IAAIA,MAAK,YAAYA,GAAE;AAAA,QACpD,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAGA,QAAM,OAAO,OAAO,iBAAiB,OAAO;AAC5C,QAAM,KAAK,OAAO,eAAe,OAAO;AACxC,MAAI,QAAQ,IAAI;AACd,WAAO,EAAE,MAAM,IAAI,SAAS,MAAM;AAAA,EACpC;AAEA,SAAO;AACT;AAEA,eAAsB,iBACpB,SACA,iBAMC;AACD,QAAM,SAAS,cAAc;AAE7B,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,EAAE,SAAS,OAAO,OAAO,yBAAyB;AAAA,EAC3D;AAGA,QAAM,UAAwD;AAAA,IAC5D,eAAe;AAAA,IACf,cAAc;AAAA,IACd,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,cAAc;AAAA,EAChB;AAEA,MAAI,CAAC,OAAO,SAAS,QAAQ,QAAQ,IAAI,CAAC,GAAG;AAC3C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OAAO,qBAAqB,QAAQ,IAAI;AAAA,IAC1C;AAAA,EACF;AAGA,MAAI,aAAa,MAAM,GAAG;AACxB,WAAO,EAAE,SAAS,OAAO,OAAO,qBAAqB;AAAA,EACvD;AAGA,MAAI,CAAC,OAAO,cAAc,CAAC,OAAO,WAAW;AAC3C,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OACE;AAAA,IACJ;AAAA,EACF;AAGA,QAAM,kBAAkB,OAAO;AAC/B,MAAI,iBAAiB;AACnB,WAAO,UAAU;AAAA,EACnB;AAEA,QAAM,UAAU,kBAAkB,MAAM;AACxC,SAAO,UAAU;AAEjB,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,MACL,SAAS;AAAA,MACT,OACE,OAAO,YAAY,aACf,8EACA;AAAA,IACR;AAAA,EACF;AAEA,QAAM,UAAU,oBAAoB,OAAO;AAC3C,MAAI;AAGJ,MAAI,QAAQ,QAAQ;AAClB,eAAW,iBAAiB;AAC5B,UAAM,YAAY,IAAI;AAAA,MACpB,KAAK,IAAI,IAAI,OAAO,kBAAkB;AAAA,IACxC,EAAE,YAAY;AAEd,UAAM,gBAA+B;AAAA,MACnC,IAAI;AAAA,MACJ,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MAClC,SAAS,QAAQ;AAAA,MACjB,SAAS,QAAQ,OAAO,WAAW,CAAC;AAAA,MACpC,MAAM,QAAQ,OAAO;AAAA,MACrB;AAAA,IACF;AAEA,WAAO,eAAe,KAAK,aAAa;AACxC,kBAAc,MAAM;AAAA,EACtB;AAEA,MAAI;AAEF,UAAM,YAAY,8CAA8C,OAAO,UAAU;AAEjF,UAAM,WAAW,MAAM,MAAM,WAAW;AAAA,MACtC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eACE,WACA,OAAO,KAAK,GAAG,OAAO,UAAU,IAAI,OAAO,SAAS,EAAE,EAAE;AAAA,UACtD;AAAA,QACF;AAAA,QACF,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,IAAI,gBAAgB;AAAA,QACxB,MAAM,QAAQ;AAAA,QACd,IAAI,QAAQ;AAAA,QACZ,MAAM;AAAA,MACR,CAAC;AAAA,IACH,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,YAAY,MAAM,SAAS,KAAK;AACtC,aAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,QAAQ;AAAA,QACjB,OAAO,iBAAiB,SAAS;AAAA,MACnC;AAAA,IACF;AAEA,WAAO,EAAE,SAAS,MAAM,UAAU,SAAS,QAAQ,QAAQ;AAAA,EAC7D,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,SAAS;AAAA,MACT,SAAS,QAAQ;AAAA,MACjB,OAAO,kBAAkB,QAAQ,OAAO,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC/F;AAAA,EACF;AACF;AAGA,eAAsB,oBACpB,SACkE;AAClE,SAAO,iBAAiB,OAAO;AACjC;AAEO,SAAS,wBACd,MACA,MAMA;AACA,QAAM,SAAS,cAAc;AAG7B,QAAM,WAAW,KAAK,KAAK,EAAE,YAAY;AAGzC,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,eAAe,OAAO,eAAe;AAAA,IACzC,CAAC,MAAM,IAAI,KAAK,EAAE,SAAS,IAAI;AAAA,EACjC;AAEA,MAAI,aAAa,WAAW,GAAG;AAC7B,WAAO,EAAE,SAAS,MAAM;AAAA,EAC1B;AAGA,QAAM,SAAS,aAAa,aAAa,SAAS,CAAC;AAEnD,MAAI;AAEJ,MAAI,OAAO,SAAS,SAAS;AAC3B,QAAI,aAAa,OAAO,aAAa,OAAO;AAC1C,sBAAgB,EAAE,KAAK,KAAK,OAAO,MAAM;AAAA,IAC3C,WAAW,aAAa,OAAO,aAAa,MAAM;AAChD,sBAAgB,EAAE,KAAK,KAAK,OAAO,KAAK;AAAA,IAC1C;AAAA,EACF,WAAW,OAAO,SAAS,WAAW;AACpC,oBAAgB,OAAO,QAAQ;AAAA,MAC7B,CAAC,QAAQ,IAAI,IAAI,YAAY,MAAM;AAAA,IACrC;AAAA,EACF,WAAW,OAAO,SAAS,YAAY;AACrC,oBAAgB,EAAE,KAAK,UAAU,OAAO,SAAS;AAAA,EACnD;AAGA,SAAO,iBAAiB,OAAO,eAAe;AAAA,IAC5C,CAAC,MAAM,EAAE,OAAO,OAAO;AAAA,EACzB;AACA,gBAAc,MAAM;AAEpB,MAAI,eAAe;AACjB,WAAO;AAAA,MACL,SAAS;AAAA,MACT;AAAA,MACA,UAAU,cAAc;AAAA,MACxB,QAAQ,cAAc;AAAA,IACxB;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,OAAO,OAAO;AAClC;AAGA,SAAS,eAAuB;AAC9B,SACE,QAAQ,IAAI,oBAAoB,KAChC,QAAQ,IAAI,wBAAwB,KACpC,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,GAAG,CAAC;AAE7C;AAGO,SAAS,gBAAoC;AAElD,QAAM,YAAY,QAAQ,IAAI,mBAAmB;AACjD,MAAI,WAAW,WAAW,UAAU,GAAG;AACrC,WAAO,0BAA0B,SAAS;AAAA,EAC5C;AAEA,SAAO,QAAQ,IAAI,oBAAoB;AACzC;AAGA,SAAS,iBAAiB,SAAyB;AACjD,QAAM,MAAM,cAAc;AAC1B,MAAI,KAAK;AACP,WAAO,GAAG,OAAO;AAAA;AAAA,WAAgB,GAAG;AAAA,EACtC;AACA,SAAO;AACT;AAIA,eAAsB,kBACpB,OACA,aACA,SACkE;AAClE,QAAM,YAAY,aAAa;AAG/B,MAAI,eAAe,WAAW,CAAC;AAC/B,MAAI,aAAa,SAAS,GAAG;AAC3B,UAAM,WAAW;AAAA,MACf,EAAE,OAAO,WAAW,QAAQ,kBAAkB;AAAA,MAC9C,EAAE,OAAO,mBAAmB,QAAQ,2BAA2B;AAAA,IACjE;AACA,mBAAe,CAAC,GAAG,cAAc,GAAG,QAAQ,EAAE;AAAA,MAC5C;AAAA,MACA,KAAK,IAAI,GAAG,aAAa,MAAM;AAAA,IACjC;AAAA,EACF;AAEA,QAAM,UAA+B;AAAA,IACnC,MAAM;AAAA,IACN,OAAO,WAAW,SAAS,mBAAmB,KAAK;AAAA,IACnD,SAAS;AAAA,IACT,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS,aAAa,IAAI,CAAC,KAAK,OAAO;AAAA,QACrC,KAAK,OAAO,IAAI,CAAC;AAAA,QACjB,OAAO,IAAI;AAAA,QACX,QAAQ,IAAI;AAAA,MACd,EAAE;AAAA,MACF,UAAU;AAAA,IACZ;AAAA,EACF;AAEA,SAAO,oBAAoB,OAAO;AACpC;AAEA,eAAsB,gBACpB,OACA,UACA,WACA,UACkE;AAClE,QAAM,YAAY,aAAa;AAC/B,SAAO,oBAAoB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS,KAAK,KAAK;AAAA,IACrC,SAAS;AAAA,IACT,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,KAAK,KAAK,OAAO,OAAO,QAAQ,UAAU;AAAA,QAC5C,EAAE,KAAK,KAAK,OAAO,MAAM,QAAQ,SAAS;AAAA,MAC5C;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,mBACpB,UACA,SACkE;AAClE,QAAM,YAAY,aAAa;AAC/B,SAAO,oBAAoB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS,oBAAoB,QAAQ;AAAA,IACvD,SAAS;AAAA,IACT,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,KAAK,KAAK,OAAO,mBAAmB,QAAQ,YAAY;AAAA,QAC1D,EAAE,KAAK,KAAK,OAAO,gBAAgB,QAAQ,qBAAqB;AAAA,MAClE;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,YACpB,OACA,SACkE;AAClE,QAAM,YAAY,aAAa;AAC/B,SAAO,oBAAoB;AAAA,IACzB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS;AAAA,IAC3B,SAAS,UAAU,GAAG,KAAK;AAAA;AAAA,WAAgB,OAAO,KAAK;AAAA,IACvD,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,KAAK,KAAK,OAAO,SAAS,QAAQ,YAAY;AAAA,QAChD;AAAA,UACE,KAAK;AAAA,UACL,OAAO;AAAA,UACP,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAGO,SAAS,wBAAgC;AAC9C,QAAM,SAAS,cAAc;AAC7B,QAAM,MAAM,oBAAI,KAAK;AACrB,QAAM,SAAS,OAAO,eAAe;AAErC,SAAO,iBAAiB,OAAO,eAAe;AAAA,IAC5C,CAAC,MAAM,IAAI,KAAK,EAAE,SAAS,IAAI;AAAA,EACjC;AAEA,QAAM,UAAU,SAAS,OAAO,eAAe;AAC/C,MAAI,UAAU,GAAG;AACf,kBAAc,MAAM;AAAA,EACtB;AAEA,SAAO;AACT;AAUA,eAAsB,OACpB,SAC+C;AAC/C,QAAM,YAAY,aAAa;AAC/B,SAAO,iBAAiB;AAAA,IACtB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS;AAAA,IAC3B;AAAA,EACF,CAAC;AACH;AAMA,eAAsB,aACpB,SACA,SACA,SACkE;AAClE,QAAM,YAAY,aAAa;AAC/B,SAAO,iBAAiB;AAAA,IACtB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS;AAAA,IAC3B;AAAA,IACA,QAAQ;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,QACP,EAAE,KAAK,KAAK,OAAO,QAAQ;AAAA,QAC3B,EAAE,KAAK,KAAK,OAAO,QAAQ;AAAA,MAC7B;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAMA,eAAsB,YACpB,SACkE;AAClE,QAAM,YAAY,aAAa;AAC/B,SAAO,iBAAiB;AAAA,IACtB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS;AAAA,IAC3B;AAAA,IACA,QAAQ,EAAE,MAAM,QAAQ;AAAA,EAC1B,CAAC;AACH;AAMA,eAAsB,WACpB,MACA,SAAwC,QACO;AAC/C,QAAM,YAAY,aAAa;AAC/B,QAAM,SAAS,WAAW,SAAS,WAAM,WAAW,WAAW,WAAM;AACrE,SAAO,iBAAiB;AAAA,IACtB,MAAM;AAAA,IACN,OAAO,WAAW,SAAS;AAAA,IAC3B,SAAS,GAAG,MAAM,IAAI,IAAI;AAAA,EAC5B,CAAC;AACH;",
   "names": ["from", "to"]
 }

package/dist/hooks/sms-webhook.js

@@ -59,10 +59,17 @@ function checkRateLimit(ip) {
 function verifyTwilioSignature(url, params, signature) {
   const authToken = process.env["TWILIO_AUTH_TOKEN"];
   if (!authToken) {
-    console.warn(
-      "[sms-webhook] TWILIO_AUTH_TOKEN not set, skipping signature verification"
+    const isDev = process.env["NODE_ENV"] === "development" || process.env["SKIP_TWILIO_VERIFICATION"] === "true";
+    if (isDev) {
+      console.warn(
+        "[sms-webhook] TWILIO_AUTH_TOKEN not set, skipping verification (dev mode)"
+      );
+      return true;
+    }
+    console.error(
+      "[sms-webhook] TWILIO_AUTH_TOKEN not set - rejecting request in production"
     );
-    return true;
+    return false;
   }
   const sortedKeys = Object.keys(params).sort();
   let data = url;