niahere 0.3.3 → 0.3.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "niahere",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "A personal AI assistant daemon — chat, scheduled jobs, persona system, extensible via skills.",
   "type": "module",
   "scripts": {

package/src/channels/slack/attachments.ts

@@ -135,7 +135,10 @@ export class SlackAttachmentCache {
   }
 
   private async download(url: string): Promise<Buffer> {
-    const resp = await fetch(url, { headers: { Authorization: `Bearer ${this.botToken}` } });
+    const resp = await fetch(url, {
+      headers: { Authorization: `Bearer ${this.botToken}` },
+      signal: AbortSignal.timeout(30_000),
+    });
     if (!resp.ok) throw new Error(`Slack file download failed: ${resp.status}`);
     return Buffer.from(await resp.arrayBuffer());
   }

package/src/channels/telegram.ts

@@ -184,11 +184,7 @@ class TelegramChannel implements Channel {
       const { result, messageId } = await state.engine.send(text, {}, attachments);
       const reply = result.trim() || "(no response)";
       try {
-        try {
-          await bot.api.sendMessage(chatId, reply, { parse_mode: "MarkdownV2" });
-        } catch {
-          await bot.api.sendMessage(chatId, reply);
-        }
+        await bot.api.sendMessage(chatId, reply);
         if (messageId) await Message.updateDeliveryStatus(messageId, "sent").catch(() => {});
         log.info({ chatId, chars: result.length }, "telegram reply sent");
       } catch (sendErr) {
@@ -266,7 +262,7 @@ class TelegramChannel implements Channel {
     const file = await this.bot.api.getFile(fileId);
     const token = getConfig().channels.telegram.bot_token!;
     const url = `https://api.telegram.org/file/bot${token}/${file.file_path}`;
-    const resp = await fetch(url);
+    const resp = await fetch(url, { signal: AbortSignal.timeout(30_000) });
     if (!resp.ok) throw new Error(`Download failed: ${resp.status}`);
     return Buffer.from(await resp.arrayBuffer());
   }

package/src/channels/twilio/rest.ts

@@ -33,6 +33,7 @@ async function twilioPost<T = unknown>(creds: TwilioCreds, suffix: string, body:
     method: "POST",
     headers: { Authorization: basicAuth(creds), "Content-Type": "application/x-www-form-urlencoded" },
     body: body.toString(),
+    signal: AbortSignal.timeout(15_000),
   });
   if (!resp.ok) {
     const text = await resp.text().catch(() => "");

package/src/chat/engine.ts

@@ -27,6 +27,7 @@ import { isRetryableApiError, sleep } from "../utils/retry";
 import { registerActiveHandle, unregisterActiveHandle } from "../core/active-handles";
 import { resolveJobPrompt } from "../core/job-prompt";
 import { getSdkSkillsSetting } from "../core/skills";
+import { getSdkHooks } from "../core/sdk-hooks";
 
 const IDLE_TIMEOUT = 10 * 60 * 1000; // 10 minutes
 const LONG_RUNNING_WARN = 30 * 60 * 1000; // 30 minutes
@@ -332,6 +333,7 @@ export async function createChatEngine(opts: EngineOptions): Promise<ChatEngine>
       includePartialMessages: true,
       settingSources: ["project", "user"],
       skills: getSdkSkillsSetting(),
+      hooks: getSdkHooks(),
     };
     const model = resolveSdkModel(contextModel);
     if (model) {

package/src/core/alive.ts

@@ -107,6 +107,7 @@ async function notifyUser(message: string): Promise<void> {
         method: "POST",
         headers: { Authorization: `Bearer ${slToken}`, "Content-Type": "application/json" },
         body: JSON.stringify({ channel: slRecipient, text: message }),
+        signal: AbortSignal.timeout(10_000),
       });
       if (resp.ok) {
         log.info("alive: notified user via slack");

package/src/core/runner.ts

@@ -18,6 +18,7 @@ import { log } from "../utils/log";
 import { isRetryableApiError, sleep } from "../utils/retry";
 import { registerActiveHandle, unregisterActiveHandle } from "./active-handles";
 import { getSdkSkillsSetting } from "./skills";
+import { getSdkHooks } from "./sdk-hooks";
 
 export { buildWorkingMemory } from "./job-prompt";
 
@@ -121,6 +122,7 @@ export async function runJobWithClaude(
     permissionMode: "bypassPermissions",
     sessionId,
     skills: getSdkSkillsSetting(),
+    hooks: getSdkHooks(),
   };
 
   if (model && model !== "default") {

package/src/core/sdk-hooks.ts

@@ -0,0 +1,43 @@
+import type {
+  HookCallbackMatcher,
+  HookEvent,
+  HookJSONOutput,
+  PreToolUseHookInput,
+} from "@anthropic-ai/claude-agent-sdk";
+
+const GH_MERGE_PATTERN = /(?:^|[\s;&|(])gh\s+pr\s+merge(?:\s|$)/;
+
+const STAMP_WARNING_CONTEXT = [
+  "PreToolUse warning: this Bash command merges a GitHub PR.",
+  "If the user only wants to APPROVE the PR (LGTM), use the gh-stamp skill",
+  '(`gh pr comment <pr> --body "LGTM, Stamped ✅"`) instead of merging.',
+  "Confirm intent before proceeding.",
+].join(" ");
+
+const STAMP_WARNING_MESSAGE =
+  "Heads up: about to run `gh pr merge`. Did you mean to STAMP (LGTM approval) instead? See the gh-stamp skill.";
+
+const warnOnGhMerge: HookCallbackMatcher = {
+  matcher: "Bash",
+  hooks: [
+    async (input): Promise<HookJSONOutput> => {
+      if (input.hook_event_name !== "PreToolUse") return {};
+      const command = (input as PreToolUseHookInput).tool_input as { command?: unknown } | undefined;
+      const cmd = command?.command;
+      if (typeof cmd !== "string" || !GH_MERGE_PATTERN.test(cmd)) return {};
+      return {
+        systemMessage: STAMP_WARNING_MESSAGE,
+        hookSpecificOutput: {
+          hookEventName: "PreToolUse",
+          additionalContext: STAMP_WARNING_CONTEXT,
+        },
+      };
+    },
+  ],
+};
+
+export function getSdkHooks(): Partial<Record<HookEvent, HookCallbackMatcher[]>> {
+  return {
+    PreToolUse: [warnOnGhMerge],
+  };
+}

package/src/db/models/session.ts

@@ -98,7 +98,10 @@ export async function setSummary(id: string, summary: string): Promise<void> {
   await sql`UPDATE sessions SET summary = ${summary} WHERE id = ${id}`;
 }
 
-export async function getRecentSummaries(room: string, limit = 3): Promise<Array<{ summary: string; updatedAt: string }>> {
+export async function getRecentSummaries(
+  room: string,
+  limit = 3,
+): Promise<Array<{ summary: string; updatedAt: string }>> {
   const sql = getSql();
   // Match summaries from sessions in the same channel (e.g. slack-dm-U...-*)
   // by extracting the room prefix (everything before the last -N index)
@@ -171,17 +174,16 @@ export async function accumulateMetadata(id: string, resultMeta: Record<string,
   `;
 }
 
+/** Max numeric suffix among rooms matching `${prefix}-N`. Used by rotateRoom() to allocate idx+1 without collisions. */
 export async function getLatestRoomIndex(prefix: string): Promise<number> {
   const sql = getSql();
   const pattern = `^${escapeRegex(prefix)}-\\d+$`;
-  const rows = await sql`
-    SELECT room FROM sessions
-    WHERE room ~ ${pattern}
-    ORDER BY updated_at DESC
-    LIMIT 1
-  `;
-  if (rows.length === 0) return 0;
-  const parts = rows[0].room.split("-");
-  const idx = parseInt(parts[parts.length - 1], 10);
-  return isNaN(idx) ? 0 : idx;
+  const rows = await sql`SELECT room FROM sessions WHERE room ~ ${pattern}`;
+  let max = 0;
+  for (const row of rows) {
+    const parts = (row.room as string).split("-");
+    const idx = parseInt(parts[parts.length - 1], 10);
+    if (!isNaN(idx) && idx > max) max = idx;
+  }
+  return max;
 }