@rubytech/create-maxy-code 0.1.266 → 0.1.268

package/payload/platform/services/whatsapp-channel/dist/notification.js

@@ -0,0 +1,36 @@
+// Pure helpers for the WhatsApp channel server. No MCP SDK import here, so
+// these can be unit-tested without the SDK installed and so the server's
+// transport wiring (server.ts) stays separable from its message shaping.
+/**
+ * Shape an inbound WhatsApp payload as a Claude Code channel notification.
+ * `content` becomes the `<channel>` body; each `meta` entry becomes a tag
+ * attribute, so keys must be identifier-safe ([A-Za-z0-9_]) — hyphenated
+ * keys are silently dropped by Claude Code.
+ */
+export function buildInboundNotification(p) {
+    return {
+        method: 'notifications/claude/channel',
+        params: {
+            content: p.text,
+            meta: { sender_id: p.senderId, wa_message_id: p.waMessageId },
+        },
+    };
+}
+/**
+ * Defence in depth: this server serves exactly one sender. Even though the
+ * gateway only streams that sender's messages, refuse anything else before
+ * it reaches the session.
+ */
+export function acceptsSender(mySenderId, p) {
+    return p.senderId === mySenderId;
+}
+/**
+ * Build the body for POST /wa-channel/reply. The reply tool exposes only
+ * `text` to the model; the senderId is the server's fixed sender (from spawn
+ * env), never trusted from the model, so a compromised turn cannot redirect a
+ * reply to a different WhatsApp recipient.
+ */
+export function buildReplyPostBody(mySenderId, text) {
+    return { senderId: mySenderId, text };
+}
+//# sourceMappingURL=notification.js.map

package/payload/platform/services/whatsapp-channel/dist/notification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notification.js","sourceRoot":"","sources":["../src/notification.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,yEAAyE;AACzE,yEAAyE;AAWzE;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,CAAiB;IACxD,OAAO;QACL,MAAM,EAAE,8BAAuC;QAC/C,MAAM,EAAE;YACN,OAAO,EAAE,CAAC,CAAC,IAAI;YACf,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,WAAW,EAA4B;SACxF;KACF,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,CAAuB;IACvE,OAAO,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAA;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,IAAY;IACjE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;AACvC,CAAC"}

package/payload/platform/services/whatsapp-channel/dist/server.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=server.d.ts.map

package/payload/platform/services/whatsapp-channel/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":""}

package/payload/platform/services/whatsapp-channel/dist/server.js

@@ -0,0 +1,114 @@
+#!/usr/bin/env node
+// Per-sender WhatsApp channel MCP server. Spawned as a stdio child of one
+// `claude` session (so it dies when that session dies — no bound port, no
+// orphan). It:
+//   - subscribes to the gateway for ITS sender's inbound (SSE) and emits each
+//     message as a notifications/claude/channel event;
+//   - exposes a `reply` tool that posts the agent's reply back to the gateway,
+//     which sends it to WhatsApp.
+//
+// Transport glue only — message shaping and the reply body are the unit-tested
+// pure helpers in ./notification. Verified end-to-end at deploy (Task 7).
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { ListToolsRequestSchema, CallToolRequestSchema } from '@modelcontextprotocol/sdk/types.js';
+import { acceptsSender, buildInboundNotification, buildReplyPostBody } from './notification.js';
+function requireEnv(name) {
+    const v = process.env[name];
+    if (!v)
+        throw new Error(`whatsapp-channel: missing required env ${name}`);
+    return v;
+}
+const SENDER_ID = requireEnv('WA_CHANNEL_SENDER_ID');
+const GATEWAY_URL = requireEnv('WA_CHANNEL_GATEWAY_URL').replace(/\/$/, '');
+// Co-visibility: the operator watches the same session in claude.ai/code,
+// where the reply tool call shows but its text does not. Instruct the agent to
+// also write its answer as normal assistant text so the operator can read it
+// in the web view, AND relay that same text via the reply tool to WhatsApp.
+const INSTRUCTIONS = `Messages from the WhatsApp sender arrive as <channel source="whatsapp" sender_id="...">. ` +
+    `Always do two things with your response, in this order: (1) write your answer as a normal ` +
+    `assistant message so it is visible in the session, then (2) call the reply tool with that ` +
+    `same text to send it to WhatsApp. Do not skip either step.`;
+const mcp = new Server({ name: 'whatsapp', version: '0.1.0' }, {
+    capabilities: { experimental: { 'claude/channel': {} }, tools: {} },
+    instructions: INSTRUCTIONS,
+});
+mcp.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: [
+        {
+            name: 'reply',
+            description: 'Send your reply text to the WhatsApp sender of this conversation.',
+            inputSchema: {
+                type: 'object',
+                properties: { text: { type: 'string', description: 'The message to send to WhatsApp' } },
+                required: ['text'],
+            },
+        },
+    ],
+}));
+mcp.setRequestHandler(CallToolRequestSchema, async (req) => {
+    if (req.params.name !== 'reply')
+        throw new Error(`unknown tool: ${req.params.name}`);
+    const text = req.params.arguments?.text;
+    if (typeof text !== 'string')
+        throw new Error('reply: text must be a string');
+    const res = await fetch(`${GATEWAY_URL}/wa-channel/reply`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify(buildReplyPostBody(SENDER_ID, text)),
+    });
+    if (!res.ok)
+        throw new Error(`reply: gateway returned ${res.status}`);
+    return { content: [{ type: 'text', text: 'sent' }] };
+});
+// Subscribe to this sender's inbound stream and emit each message as an event.
+async function subscribeInbound() {
+    const url = `${GATEWAY_URL}/wa-channel/inbound?senderId=${encodeURIComponent(SENDER_ID)}`;
+    const res = await fetch(url, { headers: { accept: 'text/event-stream' } });
+    if (!res.ok || !res.body)
+        throw new Error(`inbound subscribe failed: ${res.status}`);
+    const reader = res.body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = '';
+    for (;;) {
+        const { value, done } = await reader.read();
+        if (done)
+            break;
+        buffer += decoder.decode(value, { stream: true });
+        const frames = buffer.split('\n\n');
+        buffer = frames.pop() ?? '';
+        for (const frame of frames) {
+            const dataLine = frame.split('\n').find((l) => l.startsWith('data:'));
+            if (!dataLine)
+                continue;
+            const data = dataLine.slice('data:'.length).trim();
+            if (!data)
+                continue; // ping
+            let payload;
+            try {
+                payload = JSON.parse(data);
+            }
+            catch {
+                continue;
+            }
+            if (!acceptsSender(SENDER_ID, payload))
+                continue;
+            await mcp.notification(buildInboundNotification(payload));
+        }
+    }
+}
+async function main() {
+    await mcp.connect(new StdioServerTransport());
+    // Tell the gateway this sender's channel is live so any cold-start queue drains.
+    await fetch(`${GATEWAY_URL}/wa-channel/ready`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ senderId: SENDER_ID }),
+    }).catch(() => { });
+    await subscribeInbound();
+}
+main().catch((err) => {
+    console.error(`[whatsapp-channel] fatal: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/payload/platform/services/whatsapp-channel/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA,0EAA0E;AAC1E,0EAA0E;AAC1E,eAAe;AACf,8EAA8E;AAC9E,uDAAuD;AACvD,+EAA+E;AAC/E,kCAAkC;AAClC,EAAE;AACF,+EAA+E;AAC/E,0EAA0E;AAE1E,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAA;AAClG,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,kBAAkB,EAAuB,MAAM,mBAAmB,CAAA;AAEpH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC3B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,CAAC,CAAA;IACzE,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,SAAS,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAA;AACpD,MAAM,WAAW,GAAG,UAAU,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAE3E,0EAA0E;AAC1E,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,YAAY,GAChB,2FAA2F;IAC3F,4FAA4F;IAC5F,4FAA4F;IAC5F,4DAA4D,CAAA;AAE9D,MAAM,GAAG,GAAG,IAAI,MAAM,CACpB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EACtC;IACE,YAAY,EAAE,EAAE,YAAY,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;IACnE,YAAY,EAAE,YAAY;CAC3B,CACF,CAAA;AAED,GAAG,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IACzD,KAAK,EAAE;QACL;YACE,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,mEAAmE;YAChF,WAAW,EAAE;gBACX,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE,EAAE;gBACxF,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;SACF;KACF;CACF,CAAC,CAAC,CAAA;AAEH,GAAG,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;IACzD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IACpF,MAAM,IAAI,GAAI,GAAG,CAAC,MAAM,CAAC,SAAgC,EAAE,IAAI,CAAA;IAC/D,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAC7E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,mBAAmB,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;KAC1D,CAAC,CAAA;IACF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IACrE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;AACtD,CAAC,CAAC,CAAA;AAEF,+EAA+E;AAC/E,KAAK,UAAU,gBAAgB;IAC7B,MAAM,GAAG,GAAG,GAAG,WAAW,gCAAgC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAA;IACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAA;IAC1E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IACpF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;IACnC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QAC3C,IAAI,IAAI;YAAE,MAAK;QACf,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACnC,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;QAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAA;YACrE,IAAI,CAAC,QAAQ;gBAAE,SAAQ;YACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YAClD,IAAI,CAAC,IAAI;gBAAE,SAAQ,CAAC,OAAO;YAC3B,IAAI,OAAuB,CAAA;YAC3B,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC;gBAAE,SAAQ;YAChD,MAAM,GAAG,CAAC,YAAY,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3D,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAA;IAC7C,iFAAiF;IACjF,MAAM,KAAK,CAAC,GAAG,WAAW,mBAAmB,EAAE;QAC7C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;KAC9C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAClB,MAAM,gBAAgB,EAAE,CAAA;AAC1B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC9F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/payload/platform/services/whatsapp-channel/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "@maxy/whatsapp-channel",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "main": "dist/server.js",
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/server.js",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.0.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "@types/node": "^22.0.0",
+    "vitest": "^4.1.2"
+  }
+}

package/payload/server/{chunk-SOLVVUST.js → chunk-W4EM7RK4.js}

@@ -5590,6 +5590,8 @@ var clientIpMiddleware = async (c, next) => {
 };
 
 export {
+  HtmlEscapedCallbackPhase,
+  resolveCallback,
   Hono2 as Hono,
   getRequestListener,
   serve,

package/payload/server/maxy-edge.js

@@ -14,7 +14,7 @@ import {
   sanitizeClientCorrId,
   vncLog,
   websockifyLog
-} from "./chunk-SOLVVUST.js";
+} from "./chunk-W4EM7RK4.js";
 import "./chunk-PFF6I7KP.js";
 
 // server/edge.ts

package/payload/server/server.js

@@ -9,6 +9,7 @@ import {
   COMMERCIAL_MODE,
   GREETING_DIRECTIVE,
   Hono,
+  HtmlEscapedCallbackPhase,
   INSTALL_OWNER_FILE,
   LOG_DIR,
   MAXY_DIR,
@@ -71,6 +72,7 @@ import {
   requirePortEnv,
   resolveAccount,
   resolveAgentConfig,
+  resolveCallback,
   resolveClientIp,
   resolveDefaultAgentSlug,
   resolveUserAccounts,
@@ -93,7 +95,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-SOLVVUST.js";
+} from "./chunk-W4EM7RK4.js";
 import {
   __commonJS,
   __toESM
@@ -1105,24 +1107,24 @@ var pr54206Applied = () => {
   return major >= 23 || major === 22 && minor >= 7 || major === 20 && minor >= 18;
 };
 var useReadableToWeb = pr54206Applied();
-var createStreamBody = (stream) => {
+var createStreamBody = (stream2) => {
   if (useReadableToWeb) {
-    return Readable.toWeb(stream);
+    return Readable.toWeb(stream2);
   }
   const body = new ReadableStream({
     start(controller) {
-      stream.on("data", (chunk) => {
+      stream2.on("data", (chunk) => {
         controller.enqueue(chunk);
       });
-      stream.on("error", (err) => {
+      stream2.on("error", (err) => {
         controller.error(err);
       });
-      stream.on("end", () => {
+      stream2.on("end", () => {
         controller.close();
       });
     },
     cancel() {
-      stream.destroy();
+      stream2.destroy();
     }
   });
   return body;
@@ -1227,10 +1229,10 @@ var serveStatic = (options = { root: "" }) => {
         end = size - 1;
       }
       const chunksize = end - start + 1;
-      const stream = createReadStream(path2, { start, end });
+      const stream2 = createReadStream(path2, { start, end });
       c.header("Content-Length", chunksize.toString());
       c.header("Content-Range", `bytes ${start}-${end}/${stats.size}`);
-      result = c.body(createStreamBody(stream), 206);
+      result = c.body(createStreamBody(stream2), 206);
     }
     await options.onFound?.(path2, c);
     return result;
@@ -2892,9 +2894,9 @@ function getDownloadableContent(message) {
   if (msg.stickerMessage) return { downloadable: msg.stickerMessage, mediaType: "sticker" };
   return void 0;
 }
-async function streamToBuffer(stream) {
+async function streamToBuffer(stream2) {
   const chunks = [];
-  for await (const chunk of stream) {
+  for await (const chunk of stream2) {
     chunks.push(Buffer.from(chunk));
   }
   return Buffer.concat(chunks);
@@ -2925,8 +2927,8 @@ async function downloadInboundMedia(msg, sock, opts) {
       const downloadable = getDownloadableContent(content);
       if (downloadable) {
         try {
-          const stream = await downloadContentFromMessage(downloadable.downloadable, downloadable.mediaType);
-          buffer = await streamToBuffer(stream);
+          const stream2 = await downloadContentFromMessage(downloadable.downloadable, downloadable.mediaType);
+          buffer = await streamToBuffer(stream2);
         } catch (fallbackErr) {
           console.error(`${TAG8} direct download fallback failed: ${String(fallbackErr)}`);
         }
@@ -4671,7 +4673,8 @@ async function managerRcSpawn(opts) {
       initialMessage: opts.initialMessage,
       closeAfterTurn: opts.closeAfterTurn,
       sliceToken: opts.sliceToken,
-      personId: opts.personId
+      personId: opts.personId,
+      waChannel: opts.waChannel
     })
   }).catch((err) => ({ __throw: err instanceof Error ? err.message : String(err) }));
   if ("__throw" in res) {
@@ -15567,6 +15570,300 @@ function startReaper2() {
   startReaper();
 }
 
+// app/lib/whatsapp/gateway/inbound-hub.ts
+var InboundHub = class {
+  senders = /* @__PURE__ */ new Map();
+  state(senderId) {
+    let s = this.senders.get(senderId);
+    if (!s) {
+      s = { subscriber: null, queue: [] };
+      this.senders.set(senderId, s);
+    }
+    return s;
+  }
+  /** Route an inbound message to its sender. Delivers immediately if that
+   *  sender's channel server is attached; otherwise queues it (cold start). */
+  deliver(payload) {
+    const s = this.state(payload.senderId);
+    if (s.subscriber) {
+      s.subscriber(payload);
+    } else {
+      s.queue.push(payload);
+    }
+  }
+  /** A sender's channel server connected. Drain any queued messages to it in
+   *  arrival order, then route live. Replaces any prior subscriber. */
+  attach(senderId, subscriber) {
+    const s = this.state(senderId);
+    s.subscriber = subscriber;
+    if (s.queue.length > 0) {
+      const pending = s.queue;
+      s.queue = [];
+      for (const payload of pending) subscriber(payload);
+    }
+  }
+  /** A sender's channel server disconnected (session ended/restarting).
+   *  Subsequent messages queue again until re-attach, so nothing is lost
+   *  across a restart. */
+  detach(senderId) {
+    const s = this.senders.get(senderId);
+    if (s) s.subscriber = null;
+  }
+  /** Whether a sender currently has a live channel server. The gateway uses
+   *  this to decide whether an inbound needs a cold-start spawn/resume. */
+  hasSubscriber(senderId) {
+    return this.senders.get(senderId)?.subscriber != null;
+  }
+};
+
+// node_modules/hono/dist/utils/stream.js
+var StreamingApi = class {
+  writer;
+  encoder;
+  writable;
+  abortSubscribers = [];
+  responseReadable;
+  /**
+   * Whether the stream has been aborted.
+   */
+  aborted = false;
+  /**
+   * Whether the stream has been closed normally.
+   */
+  closed = false;
+  constructor(writable, _readable) {
+    this.writable = writable;
+    this.writer = writable.getWriter();
+    this.encoder = new TextEncoder();
+    const reader = _readable.getReader();
+    this.abortSubscribers.push(async () => {
+      await reader.cancel();
+    });
+    this.responseReadable = new ReadableStream({
+      async pull(controller) {
+        const { done, value } = await reader.read();
+        done ? controller.close() : controller.enqueue(value);
+      },
+      cancel: () => {
+        this.abort();
+      }
+    });
+  }
+  async write(input) {
+    try {
+      if (typeof input === "string") {
+        input = this.encoder.encode(input);
+      }
+      await this.writer.write(input);
+    } catch {
+    }
+    return this;
+  }
+  async writeln(input) {
+    await this.write(input + "\n");
+    return this;
+  }
+  sleep(ms) {
+    return new Promise((res) => setTimeout(res, ms));
+  }
+  async close() {
+    try {
+      await this.writer.close();
+    } catch {
+    }
+    this.closed = true;
+  }
+  async pipe(body) {
+    this.writer.releaseLock();
+    await body.pipeTo(this.writable, { preventClose: true });
+    this.writer = this.writable.getWriter();
+  }
+  onAbort(listener) {
+    this.abortSubscribers.push(listener);
+  }
+  /**
+   * Abort the stream.
+   * You can call this method when stream is aborted by external event.
+   */
+  abort() {
+    if (!this.aborted) {
+      this.aborted = true;
+      this.abortSubscribers.forEach((subscriber) => subscriber());
+    }
+  }
+};
+
+// node_modules/hono/dist/helper/streaming/utils.js
+var isOldBunVersion = () => {
+  const version = typeof Bun !== "undefined" ? Bun.version : void 0;
+  if (version === void 0) {
+    return false;
+  }
+  const result = version.startsWith("1.1") || version.startsWith("1.0") || version.startsWith("0.");
+  isOldBunVersion = () => result;
+  return result;
+};
+
+// node_modules/hono/dist/helper/streaming/sse.js
+var SSEStreamingApi = class extends StreamingApi {
+  constructor(writable, readable) {
+    super(writable, readable);
+  }
+  async writeSSE(message) {
+    const data = await resolveCallback(message.data, HtmlEscapedCallbackPhase.Stringify, false, {});
+    const dataLines = data.split(/\r\n|\r|\n/).map((line) => {
+      return `data: ${line}`;
+    }).join("\n");
+    for (const key of ["event", "id", "retry"]) {
+      if (message[key] && /[\r\n]/.test(message[key])) {
+        throw new Error(`${key} must not contain "\\r" or "\\n"`);
+      }
+    }
+    const sseData = [
+      message.event && `event: ${message.event}`,
+      dataLines,
+      message.id && `id: ${message.id}`,
+      message.retry && `retry: ${message.retry}`
+    ].filter(Boolean).join("\n") + "\n\n";
+    await this.write(sseData);
+  }
+};
+var run = async (stream2, cb, onError) => {
+  try {
+    await cb(stream2);
+  } catch (e) {
+    if (e instanceof Error && onError) {
+      await onError(e, stream2);
+      await stream2.writeSSE({
+        event: "error",
+        data: e.message
+      });
+    } else {
+      console.error(e);
+    }
+  } finally {
+    stream2.close();
+  }
+};
+var contextStash = /* @__PURE__ */ new WeakMap();
+var streamSSE = (c, cb, onError) => {
+  const { readable, writable } = new TransformStream();
+  const stream2 = new SSEStreamingApi(writable, readable);
+  if (isOldBunVersion()) {
+    c.req.raw.signal.addEventListener("abort", () => {
+      if (!stream2.closed) {
+        stream2.abort();
+      }
+    });
+  }
+  contextStash.set(stream2.responseReadable, c);
+  c.header("Transfer-Encoding", "chunked");
+  c.header("Content-Type", "text/event-stream");
+  c.header("Cache-Control", "no-cache");
+  c.header("Connection", "keep-alive");
+  run(stream2, cb, onError);
+  return c.newResponse(stream2.responseReadable);
+};
+
+// app/lib/whatsapp/gateway/routes.ts
+function createWaChannelRoutes(deps) {
+  const app45 = new Hono();
+  app45.get("/wa-channel/inbound", (c) => {
+    const senderId = c.req.query("senderId");
+    if (!senderId) return c.json({ error: "senderId required" }, 400);
+    return streamSSE(c, async (stream2) => {
+      deps.hub.attach(senderId, (payload) => {
+        void stream2.writeSSE({ data: JSON.stringify(payload) });
+      });
+      console.error(`[whatsapp-native] op=channel-attached senderId=${senderId}`);
+      stream2.onAbort(() => {
+        deps.hub.detach(senderId);
+        console.error(`[whatsapp-native] op=channel-detached senderId=${senderId}`);
+      });
+      while (!stream2.aborted) {
+        await stream2.sleep(15e3);
+        await stream2.writeSSE({ data: "", event: "ping" });
+      }
+    });
+  });
+  app45.post("/wa-channel/reply", async (c) => {
+    const body = await c.req.json().catch(() => null);
+    const senderId = body?.senderId;
+    const text = body?.text;
+    if (typeof senderId !== "string" || typeof text !== "string") {
+      return c.json({ error: "senderId and text required" }, 400);
+    }
+    const bytes = Buffer.byteLength(text, "utf8");
+    try {
+      await deps.sendOutbound(senderId, text);
+    } catch (err) {
+      console.error(
+        `[whatsapp-native] op=reply-failed senderId=${senderId} bytes=${bytes} error=${err instanceof Error ? err.message : String(err)}`
+      );
+      return c.json({ error: "send-failed" }, 500);
+    }
+    console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
+    return c.json({ ok: true });
+  });
+  app45.post("/wa-channel/ready", async (c) => {
+    const body = await c.req.json().catch(() => null);
+    const senderId = body?.senderId;
+    if (typeof senderId !== "string") {
+      return c.json({ error: "senderId required" }, 400);
+    }
+    deps.onReady?.(senderId);
+    return c.json({ ok: true });
+  });
+  return app45;
+}
+
+// app/lib/whatsapp/gateway/wa-gateway.ts
+var WaGateway = class {
+  constructor(deps) {
+    this.deps = deps;
+  }
+  hub = new InboundHub();
+  replies = /* @__PURE__ */ new Map();
+  spawning = /* @__PURE__ */ new Set();
+  seq = 0;
+  /** Hono sub-app exposing the loopback channel routes; mount on the UI app. */
+  routes() {
+    return createWaChannelRoutes({
+      hub: this.hub,
+      sendOutbound: (senderId, text) => this.sendOutbound(senderId, text)
+    });
+  }
+  /** Handle one inbound admin WhatsApp message. */
+  async handleInbound(input) {
+    const bytes = Buffer.byteLength(input.text, "utf8");
+    const hadSubscriber = this.hub.hasSubscriber(input.senderId);
+    this.replies.set(input.senderId, input.reply);
+    this.hub.deliver({ senderId: input.senderId, text: input.text, waMessageId: `wa-${++this.seq}` });
+    console.error(
+      `[whatsapp-native] op=inbound senderId=${input.senderId} accountId=${input.accountId} bytes=${bytes} delivery=${hadSubscriber ? "immediate" : "queued"}`
+    );
+    if (!hadSubscriber && !this.spawning.has(input.senderId)) {
+      this.spawning.add(input.senderId);
+      console.error(`[whatsapp-native] op=spawn-trigger senderId=${input.senderId}`);
+      try {
+        await this.deps.ensureChannelSession({
+          accountId: input.accountId,
+          senderId: input.senderId,
+          gatewayUrl: this.deps.gatewayUrl,
+          serverPath: this.deps.serverPath
+        });
+      } finally {
+        this.spawning.delete(input.senderId);
+      }
+    }
+  }
+  async sendOutbound(senderId, text) {
+    const reply = this.replies.get(senderId);
+    if (!reply) throw new Error(`wa-gateway: no reply route for sender ${senderId}`);
+    await reply(text);
+  }
+};
+
 // app/lib/admin-sse-registry.ts
 var activeAdminSSEControllers = /* @__PURE__ */ new Set();
 function broadcastAdminShutdown(reason) {
@@ -16524,6 +16821,23 @@ app44.all("*", (c) => {
 });
 var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
+var waNativeGatewayUrl = `http://127.0.0.1:${port}`;
+var waChannelServerPath = process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve26(process.env.MAXY_PLATFORM_ROOT ?? join18(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
+var waGateway = new WaGateway({
+  gatewayUrl: waNativeGatewayUrl,
+  serverPath: waChannelServerPath,
+  ensureChannelSession: async ({ accountId, senderId, gatewayUrl, serverPath }) => {
+    const result = await managerRcSpawn({
+      sessionId: adminSessionIdFor(accountId, senderId),
+      waChannel: { senderId, gatewayUrl, serverPath },
+      logContext: `channel=whatsapp-native senderId=${senderId}`
+    });
+    if ("error" in result) {
+      console.error(`[whatsapp-native] spawn-failed senderId=${senderId} error=${result.error} status=${result.status}`);
+    }
+  }
+});
+app44.route("/", waGateway.routes());
 var httpServer = serve({ fetch: app44.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startAuthHealthHeartbeat();
@@ -16702,6 +17016,23 @@ init({
   platformRoot: resolve26(process.env.MAXY_PLATFORM_ROOT ?? join18(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
+    if (process.env.MAXY_WA_NATIVE_CHANNEL === "1" && msg.agentType === "admin" && !msg.isOwnerMirror && msg.text) {
+      try {
+        void msg.composing().catch(() => {
+        });
+        await waGateway.handleInbound({
+          accountId: msg.accountId,
+          senderId: msg.senderPhone,
+          text: msg.text,
+          reply: msg.reply
+        });
+      } catch (err) {
+        console.error(
+          `[whatsapp-native] reject senderId=${msg.senderPhone} message=${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+      return;
+    }
     if ((msg.text || msg.mediaPath) && !msg.isOwnerMirror) {
       try {
         void msg.composing().catch(() => {