fix(auto-reply): prevent sender spoofing in group prompts

src/auto-reply/templating.ts

@@ -17,6 +17,15 @@ export type MsgContext = {
    * Should use real newlines (`\n`), not escaped `\\n`.
    */
   BodyForAgent?: string;
+  /**
+   * Recent chat history for context (untrusted user content). Prefer passing this
+   * as structured context blocks in the user prompt rather than rendering plaintext envelopes.
+   */
+  InboundHistory?: Array<{
+    sender: string;
+    body: string;
+    timestamp?: number;
+  }>;
   /**
    * Raw message body without structural context (history, sender labels).
    * Legacy alias for CommandBody. Falls back to Body if not set.