4 commits

Author	SHA1	Message	Date
oliver	cbbf373b6a	Restrict delivery HTTP to loopback and fix grant races. ... Require trusted loopback requests for proactive send, accept hyphenated WhatsApp group JIDs, and serialize access-grant mutations to avoid lost concurrent updates. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-06 14:45:37 +08:00
oliver	a169b164a8	Show WA nicknames and auto-fill group subjects in access UI (4.9.1-ops.9). ... Fetch groupMetadata.subject on @mentions for group cards; render contact pushName under phone rows so admins are not staring at bare numbers. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-05 17:29:43 +08:00
oliver	93672dfd91	Fix WhatsApp access settings showing empty grant state (4.9.1-ops.6). ... Client normalizeBot dropped accessGrant/groupSessionScope, so pending, contacts, and group cards never appeared. Also record contacts only on DM/@, auto-create group buckets on @, and add one-click grant buttons. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-05 17:05:16 +08:00
oliver	9f97c44031	Add WhatsApp graded phone ACL (4.9.1-ops.4). ... Replace allowlist-only gating with phone-scoped grants: global admins, DM members, per-group admins/members, pending approval via quote YES/NO or settings UI. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-09-05 16:45:21 +08:00