forge-remote 0.1.18 → 0.1.20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forge-remote",
-  "version": "0.1.18",
+  "version": "0.1.20",
   "description": "Desktop relay for Forge Remote — monitor and control Claude Code sessions from your phone",
   "type": "module",
   "license": "UNLICENSED",

package/src/session-manager.js

@@ -3,7 +3,7 @@
 // Created by Daniel Wendel, CEO/Founder of Iron Forge Apps
 
 import { getDb, FieldValue } from "./firebase.js";
-import { readdir, realpath } from "node:fs/promises";
+import { readdir, realpath, mkdir } from "node:fs/promises";
 import { homedir } from "node:os";
 import path from "node:path";
 import { spawn, execSync } from "child_process";
@@ -490,8 +490,14 @@ export async function startNewSession(desktopId, payload) {
     );
   }
 
-  const { prompt, projectPath, model, webhookMeta, allowedTools } =
-    payload || {};
+  const {
+    prompt,
+    projectPath,
+    model,
+    webhookMeta,
+    allowedTools,
+    createIfMissing,
+  } = payload || {};
   const db = getDb();
   const resolvedModel = model || "sonnet";
   const resolvedPath = projectPath || process.cwd();
@@ -503,7 +509,12 @@ export async function startNewSession(desktopId, payload) {
   try {
     await realpath(resolvedPath);
   } catch {
-    throw new Error(`projectPath does not exist: ${resolvedPath}`);
+    if (createIfMissing) {
+      log.info(`Creating project directory: ${resolvedPath}`);
+      await mkdir(resolvedPath, { recursive: true });
+    } else {
+      throw new Error(`projectPath does not exist: ${resolvedPath}`);
+    }
   }
 
   const projectName = resolvedPath.split("/").pop();
@@ -726,7 +737,12 @@ async function runClaudeProcess(sessionId, prompt) {
   }
   session.isFirstPrompt = false;
 
-  args.push(prompt);
+  // IMPORTANT: When --allowedTools is used, it consumes all remaining
+  // positional args. So we must pass the prompt via stdin instead.
+  const promptViaStdin = !!session.webhookMeta;
+  if (!promptViaStdin) {
+    args.push(prompt);
+  }
 
   log.session(sessionId, `Spawning: ${claudeBinary} ${args.join(" ")}`);
 
@@ -741,9 +757,15 @@ async function runClaudeProcess(sessionId, prompt) {
 
   session.process = claudeProcess;
 
-  // Close stdin immediately — `-p` mode reads the prompt from args, not stdin.
-  // Leaving stdin open can cause Claude CLI to hang waiting for input.
-  claudeProcess.stdin.end();
+  // When --allowedTools is used (webhook sessions), the prompt is sent via
+  // stdin because --allowedTools is variadic and would consume the prompt
+  // if passed as a positional arg. Otherwise, close stdin immediately.
+  if (promptViaStdin) {
+    claudeProcess.stdin.write(prompt);
+    claudeProcess.stdin.end();
+  } else {
+    claudeProcess.stdin.end();
+  }
 
   log.session(sessionId, `Process started — PID ${claudeProcess.pid}`);
 

package/src/webhook-server.js

@@ -361,6 +361,21 @@ async function handleWebhookPost(req, res, webhookId, sourceIp) {
       });
     }
 
+    // When subscribed to both message and app_mention events, Slack sends
+    // separate events for the same user message. Deduplicate by using the
+    // Slack message timestamp (ts) which is identical across both events.
+    if (event.ts) {
+      const tsKey = `slack-ts:${event.channel}:${event.ts}`;
+      if (recentDeliveryIds.has(tsKey)) {
+        log.info(`Duplicate Slack message ts ignored: ${event.ts}`);
+        return sendJson(res, 200, {
+          status: "duplicate",
+          reason: "same message ts",
+        });
+      }
+      addDeliveryId(tsKey);
+    }
+
     // Flatten the Slack event into the payload for template rendering.
     // This lets templates use {{text}}, {{user}}, {{channel}} directly.
     payload = { ...payload, ...event };