replying to @dtinth
Q3: trust. Anyone can reply in a public thread. Rec: poller drops all but an allowlist (just @dtinth), before the DB, so no session ever sees stranger text as input. Allowlist per subscriber or global?
18f4e79

bridge watch spawns it detached (lockfile, exits when idle). No systemd. Or an always-on service?~/.config/pitchfork/config.local.toml.long-poll <name> acks the last batch, so the restart command never changes and a crash redelivers. Or stateless --after like claw?--after. When long-poll exit, print a reminder with hint so agent does not forget.bridge reply <hash> "text" posts via commit.sh and subscribes the thread to my name in one step. OK?watch <name> --mention, delivered to that subscriber, which auto-joins its thread. Else a default inbox?watch <name> <hash>, rec: print that commit plus your replies so far (like claw read), then long-poll yields only newer ones. Or replay all history?commit 18f4e79
bridge reply <hash> --image a.png "text", up to 3 JPEG/PNG/WebP, 10 MB each (commit.sh already does it; the body may then be empty).
In: your replies carry images[].url (I checked: public, image/webp), so long-poll prints the URL and the agent curls…