metame-cli 1.4.3 → 1.4.5

package/README.md

@@ -205,6 +205,8 @@ metame daemon install-launchd   # Auto-start on boot + crash recovery
 
 Done. Open Telegram, message your bot.
 
+> **First message?** New chats aren't whitelisted yet. The bot will reply with a one-step setup command — just send `/bind personal ~/` and you're in.
+
 ---
 
 ## Core Capabilities
@@ -341,7 +343,7 @@ All agents share your cognitive profile (`~/.claude_profile.yaml`) — they all
 ## Security
 
 - All data stays on your machine. No cloud, no telemetry.
-- `allowed_chat_ids` whitelist — unauthorized users are silently ignored.
+- `allowed_chat_ids` whitelist — unauthorized users get a one-step `/bind` guide instead of silent rejection.
 - `operator_ids` for shared groups — non-operators get read-only mode.
 - `~/.metame/` directory is mode 700.
 - Bot tokens stored locally, never transmitted.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "metame-cli",
-    "version": "1.4.3",
+    "version": "1.4.5",
     "description": "The Cognitive Profile Layer for Claude Code. Knows how you think, not just what you said.",
     "main": "index.js",
     "bin": {

package/scripts/daemon.js

@@ -1126,9 +1126,10 @@ async function startTelegramBridge(config, executeTaskByName) {
           // Exception: /bind and /agent bind/new are allowed from any chat so users can self-register new groups
           const allowedIds = (loadConfig().telegram && loadConfig().telegram.allowed_chat_ids) || [];
           const trimmedText = msg.text && msg.text.trim();
-          const isBindCmd = trimmedText && (trimmedText.startsWith('/agent bind') || trimmedText.startsWith('/agent new'));
+          const isBindCmd = trimmedText && (trimmedText.startsWith('/bind') || trimmedText.startsWith('/agent bind') || trimmedText.startsWith('/agent new'));
           if (!allowedIds.includes(chatId) && !isBindCmd) {
             log('WARN', `Rejected message from unauthorized chat: ${chatId}`);
+            bot.sendMessage(chatId, `⚠️ This chat (ID: ${chatId}) is not authorized.\n\nTo get started, send:\n/bind personal ~/\n\nThis will register this chat and bind it to your home directory.`).catch(() => {});
             continue;
           }
 
@@ -1997,6 +1998,11 @@ async function handleCommand(bot, chatId, text, config, executeTaskByName, sende
     }
   }
 
+  // /bind <name> [cwd] → alias for /agent bind <name> [cwd]
+  if (text === '/bind' || text.startsWith('/bind ')) {
+    text = '/agent bind' + text.slice(5);
+  }
+
   if (text === '/agent' || text.startsWith('/agent ')) {
     const agentArg = text === '/agent' ? '' : text.slice(7).trim();
     const agentParts = agentArg.split(/\s+/);
@@ -4604,9 +4610,10 @@ async function startFeishuBridge(config, executeTaskByName) {
       const liveCfg = loadConfig();
       const allowedIds = (liveCfg.feishu && liveCfg.feishu.allowed_chat_ids) || [];
       const trimmedText = text && text.trim();
-      const isBindCmd = trimmedText && (trimmedText.startsWith('/agent bind') || trimmedText.startsWith('/agent new'));
+      const isBindCmd = trimmedText && (trimmedText.startsWith('/bind') || trimmedText.startsWith('/agent bind') || trimmedText.startsWith('/agent new'));
       if (!allowedIds.includes(chatId) && !isBindCmd) {
         log('WARN', `Feishu: rejected message from ${chatId}`);
+        bot.sendMessage(chatId, `⚠️ 此会话 (ID: ${chatId}) 未授权。\n\n发送以下命令注册：\n/bind personal ~/\n\n这会将此会话绑定到你的主目录。`).catch(() => {});
         return;
       }