feat: WhatsApp connector changes (send gate, local API default, bundle script) #1

Open
tim.lingo wants to merge 2 commits from feat/send-tools-readonly-gate into main

2 Commits

Author SHA1 Message Date
Tim Lingo 7fa204d755 feat: bundle build script + default API_BASE_URL to local bridge
scripts/build-bundle.sh cross-builds whatsapp-mcp + whatsapp-bridge (stripped, darwin/arm64) into the
Neuron app's bundled connector-servers dir. tools.go: default API_BASE_URL to http://localhost:8080/api
(was a hardcoded LAN IP) so the MCP finds the connector-launched loopback bridge. Validated: stripped
bundled whatsapp-mcp exposes 14 tools incl send_message.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-27 14:56:26 -05:00
Tim Lingo eaa92b4255 feat: read-only gate around WhatsApp send tools (connector defense-in-depth)
send_message/send_file/send_audio_message register unless WHATSAPP_READ_ONLY=true|1. Default keeps send
available (soul consent is the primary gate). Validated via stdio tools/list: default exposes 14 tools
incl send_message; read-only exposes 11 (send tools hidden).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-27 14:19:47 -05:00