1
2
3
4
5
6
7
User sends a WhatsApp message to the shared sender number
phone (WhatsApp app)
Twilio delivers the inbound
POST /v1/twilio/whatsapp/inbound · X-Twilio-Signature
sudo-api verifies the signature
defense-in-depth: Caddy also rejects /v1/internal/*
sudo-api looks up sender phone → owning account
SELECT … FROM public.family_members WHERE phone = …
sudo-api forwards to that account's hermes plugin
POST :8651/inbound · internal bearer · agent runs
hermes adapter sends the reply
Twilio REST · Messages.json
User receives the reply in WhatsApp