codeharbor 0.1.15 → 0.1.16

package/.env.example

@@ -38,6 +38,7 @@ MATRIX_TYPING_TIMEOUT_MS=10000
 SESSION_ACTIVE_WINDOW_MINUTES=20
 
 # Group trigger defaults.
+GROUP_DIRECT_MODE_ENABLED=false
 GROUP_TRIGGER_ALLOW_MENTION=true
 GROUP_TRIGGER_ALLOW_REPLY=true
 GROUP_TRIGGER_ALLOW_ACTIVE_WINDOW=true
@@ -78,6 +79,8 @@ ADMIN_TOKEN=
 # Each item: {"token":"...","role":"admin|viewer","actor":"ops-name"}
 # Example:
 # ADMIN_TOKENS_JSON=[{"token":"admin-secret","role":"admin","actor":"ops-admin"},{"token":"viewer-secret","role":"viewer","actor":"ops-audit"}]
+# Rotate helper:
+# ./scripts/rotate-admin-token.sh --target rbac --role admin --actor ops-admin
 ADMIN_TOKENS_JSON=
 # Optional IP allowlist (comma-separated, for example: 127.0.0.1,192.168.1.10).
 ADMIN_IP_ALLOWLIST=

package/README.md

@@ -327,6 +327,7 @@ Open these UI routes in browser:
 
 Main endpoints:
 
+- `GET /api/admin/auth/status`
 - `GET /api/admin/config/global`
 - `PUT /api/admin/config/global`
 - `GET /api/admin/config/rooms`
@@ -354,6 +355,14 @@ RBAC behavior:
 - `viewer` tokens can call read endpoints (`GET /api/admin/*`)
 - `admin` tokens can call read + write endpoints (`PUT/POST/DELETE /api/admin/*`)
 - for `ADMIN_TOKENS_JSON`, audit actor is derived from token identity (`actor` field), not `x-admin-actor`
+- Admin UI shows current permission status (role/source) after saving auth
+
+Rotate tokens quickly (repository script):
+
+```bash
+./scripts/rotate-admin-token.sh --target rbac --role admin --actor ops-admin
+./scripts/rotate-admin-token.sh --target rbac --role viewer --actor ops-audit
+```
 
 Note: `PUT /api/admin/config/global` writes to `.env` and marks changes as restart-required.
 
@@ -393,12 +402,14 @@ If any check fails, it prints actionable fix commands (for example `codeharbor i
 - Direct Message (DM)
   - all text messages are processed by default (no prefix required)
 - Group Room
+  - when `GROUP_DIRECT_MODE_ENABLED=true`, all non-empty messages are processed directly (no prefix/mention/reply required)
   - processed when **any allowed trigger** matches:
     - message mentions bot user id
     - message replies to a bot message
     - sender has an active conversation window
     - optional explicit prefix match (`MATRIX_COMMAND_PREFIX`)
 - Trigger Policy
+  - `GROUP_DIRECT_MODE_ENABLED` controls whether groups bypass trigger matching entirely
   - global defaults via `GROUP_TRIGGER_ALLOW_*`
   - per-room overrides via `ROOM_TRIGGER_POLICY_JSON`
 - Active Conversation Window

package/dist/cli.js

@@ -771,6 +771,19 @@ var AdminServer = class {
         });
         return;
       }
+      if (req.method === "GET" && url.pathname === "/api/admin/auth/status") {
+        this.sendJson(res, 200, {
+          ok: true,
+          data: {
+            authenticated: Boolean(authIdentity),
+            role: authIdentity?.role ?? null,
+            source: authIdentity?.source ?? "none",
+            actor: resolveIdentityActor(authIdentity),
+            canWrite: authIdentity ? hasRequiredAdminRole(authIdentity.role, "admin") : false
+          }
+        });
+        return;
+      }
       if (req.method === "GET" && url.pathname === "/api/admin/config/global") {
         this.sendJson(res, 200, {
           ok: true,
@@ -1010,6 +1023,12 @@ var AdminServer = class {
       envUpdates.SESSION_ACTIVE_WINDOW_MINUTES = String(value);
       updatedKeys.push("sessionActiveWindowMinutes");
     }
+    if ("groupDirectModeEnabled" in body) {
+      const value = normalizeBoolean(body.groupDirectModeEnabled, this.config.groupDirectModeEnabled);
+      this.config.groupDirectModeEnabled = value;
+      envUpdates.GROUP_DIRECT_MODE_ENABLED = String(value);
+      updatedKeys.push("groupDirectModeEnabled");
+    }
     if ("cliCompat" in body) {
       const compat = asObject(body.cliCompat, "cliCompat");
       if ("enabled" in compat) {
@@ -1205,6 +1224,7 @@ function buildGlobalConfigSnapshot(config) {
     matrixCommandPrefix: config.matrixCommandPrefix,
     codexWorkdir: config.codexWorkdir,
     rateLimiter: { ...config.rateLimiter },
+    groupDirectModeEnabled: config.groupDirectModeEnabled,
     defaultGroupTriggerPolicy: { ...config.defaultGroupTriggerPolicy },
     matrixProgressUpdates: config.matrixProgressUpdates,
     matrixProgressMinIntervalMs: config.matrixProgressMinIntervalMs,
@@ -1434,12 +1454,19 @@ function readAdminToken(req) {
   const fromHeader = normalizeHeaderValue(req.headers["x-admin-token"]);
   return fromHeader || null;
 }
+function resolveIdentityActor(identity) {
+  if (!identity || identity.source !== "scoped") {
+    return null;
+  }
+  if (identity.actor) {
+    return identity.actor;
+  }
+  return identity.role === "admin" ? "admin-token" : "viewer-token";
+}
 function resolveAuditActor(req, identity) {
-  if (identity?.source === "scoped") {
-    if (identity.actor) {
-      return identity.actor;
-    }
-    return identity.role === "admin" ? "admin-token" : "viewer-token";
+  const scopedActor = resolveIdentityActor(identity);
+  if (scopedActor) {
+    return scopedActor;
   }
   const actor = normalizeHeaderValue(req.headers["x-admin-actor"]);
   return actor || null;
@@ -1717,6 +1744,7 @@ var ADMIN_CONSOLE_HTML = `<!doctype html>
           <button id="auth-clear-btn" type="button" class="secondary">Clear Auth</button>
         </div>
         <div id="notice" class="notice">Ready.</div>
+        <p id="auth-role" class="muted">Permission: unknown</p>
       </section>
 
       <section class="panel" data-view="settings-global">
@@ -1772,6 +1800,7 @@ var ADMIN_CONSOLE_HTML = `<!doctype html>
             <input id="global-concurrency-room" type="number" min="0" />
           </label>
 
+          <label class="checkbox"><input id="global-direct-mode" type="checkbox" /><span>Group direct mode (no trigger required)</span></label>
           <label class="checkbox"><input id="global-trigger-mention" type="checkbox" /><span>Trigger: mention</span></label>
           <label class="checkbox"><input id="global-trigger-reply" type="checkbox" /><span>Trigger: reply</span></label>
           <label class="checkbox"><input id="global-trigger-window" type="checkbox" /><span>Trigger: active window</span></label>
@@ -1916,6 +1945,7 @@ var ADMIN_CONSOLE_HTML = `<!doctype html>
         var tokenInput = document.getElementById("auth-token");
         var actorInput = document.getElementById("auth-actor");
         var noticeNode = document.getElementById("notice");
+        var authRoleNode = document.getElementById("auth-role");
         var roomListBody = document.getElementById("room-list-body");
         var healthBody = document.getElementById("health-body");
         var auditBody = document.getElementById("audit-body");
@@ -1927,6 +1957,7 @@ var ADMIN_CONSOLE_HTML = `<!doctype html>
           localStorage.setItem(storageTokenKey, tokenInput.value.trim());
           localStorage.setItem(storageActorKey, actorInput.value.trim());
           showNotice("ok", "Auth settings saved to localStorage.");
+          void refreshAuthStatus();
         });
 
         document.getElementById("auth-clear-btn").addEventListener("click", function () {
@@ -1935,6 +1966,7 @@ var ADMIN_CONSOLE_HTML = `<!doctype html>
           localStorage.removeItem(storageTokenKey);
           localStorage.removeItem(storageActorKey);
           showNotice("warn", "Auth settings cleared.");
+          void refreshAuthStatus();
         });
 
         document.getElementById("global-save-btn").addEventListener("click", saveGlobal);
@@ -1959,6 +1991,7 @@ var ADMIN_CONSOLE_HTML = `<!doctype html>
         } else {
           handleRoute();
         }
+        void refreshAuthStatus();
 
         function getCurrentView() {
           return routeToView[window.location.hash] || "settings-global";
@@ -2049,6 +2082,29 @@ var ADMIN_CONSOLE_HTML = `<!doctype html>
           noticeNode.textContent = message;
         }
 
+        async function refreshAuthStatus() {
+          try {
+            var response = await apiRequest("/api/admin/auth/status", "GET");
+            var data = response.data || {};
+            if (!data.role) {
+              authRoleNode.textContent = "Permission: unauthenticated";
+              return;
+            }
+
+            var role = String(data.role).toUpperCase();
+            var source = data.source ? " (" + String(data.source) + ")" : "";
+            var actor = data.actor ? " as " + String(data.actor) : "";
+            authRoleNode.textContent = "Permission: " + role + source + actor;
+          } catch (error) {
+            var message = error && error.message ? String(error.message) : "";
+            if (/Unauthorized/i.test(message)) {
+              authRoleNode.textContent = "Permission: unauthenticated";
+              return;
+            }
+            authRoleNode.textContent = "Permission: unknown";
+          }
+        }
+
         function renderEmptyRow(body, columns, text) {
           body.innerHTML = "";
           var row = document.createElement("tr");
@@ -2080,6 +2136,7 @@ var ADMIN_CONSOLE_HTML = `<!doctype html>
             document.getElementById("global-concurrency-global").value = String(rateLimiter.maxConcurrentGlobal || 0);
             document.getElementById("global-concurrency-user").value = String(rateLimiter.maxConcurrentPerUser || 0);
             document.getElementById("global-concurrency-room").value = String(rateLimiter.maxConcurrentPerRoom || 0);
+            document.getElementById("global-direct-mode").checked = Boolean(data.groupDirectModeEnabled);
 
             document.getElementById("global-trigger-mention").checked = Boolean(trigger.allowMention);
             document.getElementById("global-trigger-reply").checked = Boolean(trigger.allowReply);
@@ -2112,6 +2169,7 @@ var ADMIN_CONSOLE_HTML = `<!doctype html>
               matrixProgressMinIntervalMs: asNumber("global-progress-interval", 2500),
               matrixTypingTimeoutMs: asNumber("global-typing-timeout", 10000),
               sessionActiveWindowMinutes: asNumber("global-active-window", 20),
+              groupDirectModeEnabled: asBool("global-direct-mode"),
               rateLimiter: {
                 windowMs: asNumber("global-rate-window", 60000),
                 maxRequestsPerUser: asNumber("global-rate-user", 20),
@@ -2535,6 +2593,7 @@ function findBreakIndex(candidate) {
 }
 
 // src/channels/matrix-channel.ts
+var LOCAL_TXN_PREFIX = "codeharbor-";
 var MatrixChannel = class {
   config;
   logger;
@@ -2575,7 +2634,7 @@ var MatrixChannel = class {
     }
     const chunks = this.splitReplies ? splitText(text, this.chunkSize) : [text];
     for (const chunk of chunks) {
-      await this.client.sendTextMessage(conversationId, chunk);
+      await this.sendRichText(conversationId, chunk, "m.text");
     }
   }
   async sendNotice(conversationId, text) {
@@ -2584,7 +2643,7 @@ var MatrixChannel = class {
     }
     const chunks = this.splitReplies ? splitText(text, this.chunkSize) : [text];
     for (const chunk of chunks) {
-      await this.client.sendNotice(conversationId, chunk);
+      await this.sendRichText(conversationId, chunk, "m.notice");
     }
   }
   async upsertProgressNotice(conversationId, text, replaceEventId) {
@@ -2596,7 +2655,10 @@ var MatrixChannel = class {
       throw new Error("Progress notice cannot be empty.");
     }
     if (!replaceEventId) {
-      const response2 = await this.client.sendNotice(conversationId, normalized);
+      const response2 = await this.sendRawEvent(
+        conversationId,
+        buildMatrixRichMessageContent(normalized, "m.notice")
+      );
       return response2.event_id;
     }
     const content = {
@@ -2611,8 +2673,7 @@ var MatrixChannel = class {
         event_id: replaceEventId
       }
     };
-    const sendEditEvent = this.client.sendEvent;
-    const response = await sendEditEvent(conversationId, import_matrix_js_sdk.EventType.RoomMessage, content);
+    const response = await this.sendRawEvent(conversationId, content);
     return response.event_id;
   }
   async setTyping(conversationId, isTyping, timeoutMs) {
@@ -2648,7 +2709,10 @@ var MatrixChannel = class {
       return;
     }
     const senderId = event.getSender();
-    if (!senderId || senderId === this.config.matrixUserId) {
+    if (!senderId) {
+      return;
+    }
+    if (senderId === this.config.matrixUserId && isLikelyLocalEcho(event)) {
       return;
     }
     const content = event.getContent();
@@ -2752,6 +2816,32 @@ var MatrixChannel = class {
       await this.joinInvitedRoom(room.roomId);
     }
   }
+  async sendRichText(conversationId, text, msgtype) {
+    const payload = buildMatrixRichMessageContent(text, msgtype);
+    await this.sendRawEvent(conversationId, payload);
+  }
+  async sendRawEvent(conversationId, content) {
+    const txnId = `${LOCAL_TXN_PREFIX}${Date.now()}-${Math.floor(Math.random() * 1e6)}`;
+    const response = await fetch(
+      `${this.config.matrixHomeserver}/_matrix/client/v3/rooms/${encodeURIComponent(conversationId)}/send/m.room.message/${encodeURIComponent(txnId)}`,
+      {
+        method: "PUT",
+        headers: {
+          Authorization: `Bearer ${this.config.matrixAccessToken}`,
+          "Content-Type": "application/json"
+        },
+        body: JSON.stringify(content)
+      }
+    );
+    if (!response.ok) {
+      throw new Error(`Matrix send failed (${response.status} ${response.statusText})`);
+    }
+    const payload = await response.json();
+    if (!payload.event_id || typeof payload.event_id !== "string") {
+      throw new Error("Matrix send failed (missing event_id)");
+    }
+    return { event_id: payload.event_id };
+  }
   async hydrateAttachments(attachments, eventId) {
     if (!this.fetchMedia || attachments.length === 0) {
       return attachments;
@@ -2822,6 +2912,17 @@ function buildRequestId(eventId) {
   const suffix = Math.random().toString(36).slice(2, 8);
   return `${eventId}:${suffix}`;
 }
+function isLikelyLocalEcho(event) {
+  const unsigned = event.getUnsigned();
+  if (!unsigned || typeof unsigned !== "object") {
+    return false;
+  }
+  const transactionId = unsigned.transaction_id;
+  if (typeof transactionId !== "string" || !transactionId) {
+    return false;
+  }
+  return transactionId.startsWith(LOCAL_TXN_PREFIX);
+}
 function isDirectRoom(room) {
   return room.getJoinedMemberCount() <= 2;
 }
@@ -2913,6 +3014,61 @@ function resolveFileExtension(fileName, mimeType) {
   }
   return ".bin";
 }
+function buildMatrixRichMessageContent(body, msgtype) {
+  return {
+    msgtype,
+    body,
+    format: "org.matrix.custom.html",
+    formatted_body: renderMatrixHtml(body, msgtype)
+  };
+}
+function renderMatrixHtml(body, msgtype) {
+  const normalized = body.replace(/\r\n/g, "\n");
+  const sections = [];
+  const codeFencePattern = /```([^\n`]*)\n?([\s\S]*?)```/g;
+  let cursor = 0;
+  let match;
+  while ((match = codeFencePattern.exec(normalized)) !== null) {
+    const before = normalized.slice(cursor, match.index);
+    const renderedBefore = renderTextSection(before);
+    if (renderedBefore) {
+      sections.push(renderedBefore);
+    }
+    const language = escapeHtml(match[1]?.trim() || "text");
+    const code = escapeHtml(match[2].replace(/\n$/, ""));
+    const label = language && language !== "text" ? `\u4EE3\u7801 (${language})` : "\u4EE3\u7801";
+    sections.push(
+      `<p><font color="#3558d1"><b>${label}</b></font></p><pre><code>${code}</code></pre>`
+    );
+    cursor = match.index + match[0].length;
+  }
+  const tail = normalized.slice(cursor);
+  const renderedTail = renderTextSection(tail);
+  if (renderedTail) {
+    sections.push(renderedTail);
+  }
+  if (sections.length === 0) {
+    sections.push("<p>(\u7A7A\u6D88\u606F)</p>");
+  }
+  const badge = msgtype === "m.notice" ? `<p><font color="#8a5a00"><b>\u{1F4E3} CodeHarbor \u63D0\u793A</b></font></p>` : `<p><font color="#1f7a5a"><b>\u{1F916} AI \u56DE\u590D</b></font></p>`;
+  return `<div>${badge}${sections.join("")}</div>`;
+}
+function renderTextSection(raw) {
+  if (!raw.trim()) {
+    return "";
+  }
+  const normalized = raw.replace(/\r\n/g, "\n").trim();
+  const paragraphs = normalized.split(/\n{2,}/);
+  const rendered = paragraphs.map((paragraph) => {
+    const escaped = escapeHtml(paragraph);
+    const inlineCode = escaped.replace(/`([^`\n]+)`/g, "<code>$1</code>");
+    return `<p>${inlineCode.replace(/\n/g, "<br/>")}</p>`;
+  }).join("");
+  return rendered;
+}
+function escapeHtml(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
 
 // src/config-service.ts
 var import_node_fs5 = __toESM(require("fs"));
@@ -4115,6 +4271,7 @@ var Orchestrator = class {
   commandPrefix;
   matrixUserId;
   sessionActiveWindowMs;
+  groupDirectModeEnabled;
   defaultGroupTriggerPolicy;
   roomTriggerPolicies;
   configService;
@@ -4152,6 +4309,7 @@ var Orchestrator = class {
     this.matrixUserId = options?.matrixUserId ?? "";
     const sessionActiveWindowMinutes = options?.sessionActiveWindowMinutes ?? 20;
     this.sessionActiveWindowMs = Math.max(1, sessionActiveWindowMinutes) * 6e4;
+    this.groupDirectModeEnabled = options?.groupDirectModeEnabled ?? false;
     this.defaultGroupTriggerPolicy = options?.defaultGroupTriggerPolicy ?? {
       allowMention: true,
       allowReply: true,
@@ -4486,7 +4644,7 @@ var Orchestrator = class {
     const prefixTriggered = prefixAllowed && this.commandPrefix.length > 0;
     const prefixedText = prefixTriggered ? extractCommandText(incomingTrimmed, this.commandPrefix) : null;
     const activeSession = message.isDirectMessage || groupPolicy?.allowActiveWindow ? this.stateStore.isSessionActive(sessionKey) : false;
-    const conversationalTrigger = message.isDirectMessage || Boolean(groupPolicy?.allowMention) && message.mentionsBot || Boolean(groupPolicy?.allowReply) && message.repliesToBot || activeSession;
+    const conversationalTrigger = message.isDirectMessage || this.groupDirectModeEnabled || Boolean(groupPolicy?.allowMention) && message.mentionsBot || Boolean(groupPolicy?.allowReply) && message.repliesToBot || activeSession;
     if (!conversationalTrigger && prefixedText === null) {
       return { kind: "ignore" };
     }
@@ -4524,7 +4682,7 @@ var Orchestrator = class {
     }
     const status = this.stateStore.getSessionStatus(sessionKey);
     const roomConfig = this.resolveRoomRuntimeConfig(message.conversationId);
-    const scope = message.isDirectMessage ? "\u79C1\u804A\uFF08\u514D\u524D\u7F00\uFF09" : "\u7FA4\u804A\uFF08\u6309\u623F\u95F4\u89E6\u53D1\u7B56\u7565\uFF09";
+    const scope = message.isDirectMessage ? "\u79C1\u804A\uFF08\u514D\u524D\u7F00\uFF09" : this.groupDirectModeEnabled ? "\u7FA4\u804A\uFF08\u9ED8\u8BA4\u76F4\u901A\uFF09" : "\u7FA4\u804A\uFF08\u6309\u623F\u95F4\u89E6\u53D1\u7B56\u7565\uFF09";
     const activeUntil = status.activeUntil ?? "\u672A\u6FC0\u6D3B";
     const metrics = this.metrics.snapshot(this.runningExecutions.size);
     const limiter = this.rateLimiter.snapshot();
@@ -5600,6 +5758,7 @@ var CodeHarborApp = class {
       commandPrefix: config.matrixCommandPrefix,
       matrixUserId: config.matrixUserId,
       sessionActiveWindowMinutes: config.sessionActiveWindowMinutes,
+      groupDirectModeEnabled: config.groupDirectModeEnabled,
       defaultGroupTriggerPolicy: config.defaultGroupTriggerPolicy,
       roomTriggerPolicies: config.roomTriggerPolicies,
       rateLimiterOptions: config.rateLimiter,
@@ -5742,6 +5901,7 @@ var configSchema = import_zod.z.object({
   MATRIX_PROGRESS_MIN_INTERVAL_MS: import_zod.z.string().default("2500").transform((v) => Number.parseInt(v, 10)).pipe(import_zod.z.number().int().positive()),
   MATRIX_TYPING_TIMEOUT_MS: import_zod.z.string().default("10000").transform((v) => Number.parseInt(v, 10)).pipe(import_zod.z.number().int().positive()),
   SESSION_ACTIVE_WINDOW_MINUTES: import_zod.z.string().default("20").transform((v) => Number.parseInt(v, 10)).pipe(import_zod.z.number().int().positive()),
+  GROUP_DIRECT_MODE_ENABLED: import_zod.z.string().default("false").transform((v) => v.toLowerCase() === "true"),
   GROUP_TRIGGER_ALLOW_MENTION: import_zod.z.string().default("true").transform((v) => v.toLowerCase() === "true"),
   GROUP_TRIGGER_ALLOW_REPLY: import_zod.z.string().default("true").transform((v) => v.toLowerCase() === "true"),
   GROUP_TRIGGER_ALLOW_ACTIVE_WINDOW: import_zod.z.string().default("true").transform((v) => v.toLowerCase() === "true"),
@@ -5796,6 +5956,7 @@ var configSchema = import_zod.z.object({
   matrixProgressMinIntervalMs: v.MATRIX_PROGRESS_MIN_INTERVAL_MS,
   matrixTypingTimeoutMs: v.MATRIX_TYPING_TIMEOUT_MS,
   sessionActiveWindowMinutes: v.SESSION_ACTIVE_WINDOW_MINUTES,
+  groupDirectModeEnabled: v.GROUP_DIRECT_MODE_ENABLED,
   defaultGroupTriggerPolicy: {
     allowMention: v.GROUP_TRIGGER_ALLOW_MENTION,
     allowReply: v.GROUP_TRIGGER_ALLOW_REPLY,
@@ -5994,6 +6155,7 @@ var CONFIG_SNAPSHOT_ENV_KEYS = [
   "MATRIX_PROGRESS_MIN_INTERVAL_MS",
   "MATRIX_TYPING_TIMEOUT_MS",
   "SESSION_ACTIVE_WINDOW_MINUTES",
+  "GROUP_DIRECT_MODE_ENABLED",
   "GROUP_TRIGGER_ALLOW_MENTION",
   "GROUP_TRIGGER_ALLOW_REPLY",
   "GROUP_TRIGGER_ALLOW_ACTIVE_WINDOW",
@@ -6059,6 +6221,7 @@ var envSnapshotSchema = import_zod2.z.object({
   MATRIX_PROGRESS_MIN_INTERVAL_MS: integerStringSchema("MATRIX_PROGRESS_MIN_INTERVAL_MS", 1),
   MATRIX_TYPING_TIMEOUT_MS: integerStringSchema("MATRIX_TYPING_TIMEOUT_MS", 1),
   SESSION_ACTIVE_WINDOW_MINUTES: integerStringSchema("SESSION_ACTIVE_WINDOW_MINUTES", 1),
+  GROUP_DIRECT_MODE_ENABLED: booleanStringSchema("GROUP_DIRECT_MODE_ENABLED").default("false"),
   GROUP_TRIGGER_ALLOW_MENTION: booleanStringSchema("GROUP_TRIGGER_ALLOW_MENTION"),
   GROUP_TRIGGER_ALLOW_REPLY: booleanStringSchema("GROUP_TRIGGER_ALLOW_REPLY"),
   GROUP_TRIGGER_ALLOW_ACTIVE_WINDOW: booleanStringSchema("GROUP_TRIGGER_ALLOW_ACTIVE_WINDOW"),
@@ -6248,6 +6411,7 @@ function buildSnapshotEnv(config) {
     MATRIX_PROGRESS_MIN_INTERVAL_MS: String(config.matrixProgressMinIntervalMs),
     MATRIX_TYPING_TIMEOUT_MS: String(config.matrixTypingTimeoutMs),
     SESSION_ACTIVE_WINDOW_MINUTES: String(config.sessionActiveWindowMinutes),
+    GROUP_DIRECT_MODE_ENABLED: String(config.groupDirectModeEnabled),
     GROUP_TRIGGER_ALLOW_MENTION: String(config.defaultGroupTriggerPolicy.allowMention),
     GROUP_TRIGGER_ALLOW_REPLY: String(config.defaultGroupTriggerPolicy.allowReply),
     GROUP_TRIGGER_ALLOW_ACTIVE_WINDOW: String(config.defaultGroupTriggerPolicy.allowActiveWindow),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeharbor",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "description": "Instant-messaging bridge for Codex CLI sessions",
   "license": "MIT",
   "main": "dist/cli.js",