forge-remote 0.1.18 → 0.1.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forge-remote",
-  "version": "0.1.18",
+  "version": "0.1.19",
   "description": "Desktop relay for Forge Remote — monitor and control Claude Code sessions from your phone",
   "type": "module",
   "license": "UNLICENSED",

package/src/session-manager.js

@@ -726,7 +726,12 @@ async function runClaudeProcess(sessionId, prompt) {
   }
   session.isFirstPrompt = false;
 
-  args.push(prompt);
+  // IMPORTANT: When --allowedTools is used, it consumes all remaining
+  // positional args. So we must pass the prompt via stdin instead.
+  const promptViaStdin = !!session.webhookMeta;
+  if (!promptViaStdin) {
+    args.push(prompt);
+  }
 
   log.session(sessionId, `Spawning: ${claudeBinary} ${args.join(" ")}`);
 
@@ -741,9 +746,15 @@ async function runClaudeProcess(sessionId, prompt) {
 
   session.process = claudeProcess;
 
-  // Close stdin immediately — `-p` mode reads the prompt from args, not stdin.
-  // Leaving stdin open can cause Claude CLI to hang waiting for input.
-  claudeProcess.stdin.end();
+  // When --allowedTools is used (webhook sessions), the prompt is sent via
+  // stdin because --allowedTools is variadic and would consume the prompt
+  // if passed as a positional arg. Otherwise, close stdin immediately.
+  if (promptViaStdin) {
+    claudeProcess.stdin.write(prompt);
+    claudeProcess.stdin.end();
+  } else {
+    claudeProcess.stdin.end();
+  }
 
   log.session(sessionId, `Process started — PID ${claudeProcess.pid}`);
 

package/src/webhook-server.js

@@ -361,6 +361,21 @@ async function handleWebhookPost(req, res, webhookId, sourceIp) {
       });
     }
 
+    // When subscribed to both message and app_mention events, Slack sends
+    // separate events for the same user message. Deduplicate by using the
+    // Slack message timestamp (ts) which is identical across both events.
+    if (event.ts) {
+      const tsKey = `slack-ts:${event.channel}:${event.ts}`;
+      if (recentDeliveryIds.has(tsKey)) {
+        log.info(`Duplicate Slack message ts ignored: ${event.ts}`);
+        return sendJson(res, 200, {
+          status: "duplicate",
+          reason: "same message ts",
+        });
+      }
+      addDeliveryId(tsKey);
+    }
+
     // Flatten the Slack event into the payload for template rendering.
     // This lets templates use {{text}}, {{user}}, {{channel}} directly.
     payload = { ...payload, ...event };