@rubytech/create-maxy-code 0.1.285 → 0.1.287

package/payload/server/server.js

@@ -62,6 +62,7 @@ import {
   listValidAccounts,
   loadAdminUserName,
   loadUserProfile,
+  loadWhatsappSenderName,
   persistMessage,
   projectAgent,
   reconcileEnabledPlugins,
@@ -96,7 +97,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-QHD5TKLQ.js";
+} from "./chunk-EAJMRICW.js";
 import {
   __commonJS,
   __toESM
@@ -1201,7 +1202,7 @@ var serveStatic = (options = { root: "" }) => {
 };
 
 // server/index.ts
-import { readFileSync as readFileSync24, existsSync as existsSync24, watchFile } from "fs";
+import { readFileSync as readFileSync24, existsSync as existsSync25, watchFile } from "fs";
 import { resolve as resolve27, join as join19, basename as basename7 } from "path";
 import { homedir as homedir3 } from "os";
 import { monitorEventLoopDelay } from "perf_hooks";
@@ -6861,7 +6862,7 @@ app3.get("/group-info", async (c) => {
 var whatsapp_default = app3;
 
 // server/routes/whatsapp-reader.ts
-import { readFileSync as readFileSync10, watch, statSync as statSync4, openSync, readSync, closeSync } from "fs";
+import { readFileSync as readFileSync10, watch, statSync as statSync4, openSync, readSync, closeSync, existsSync as existsSync7, readdirSync as readdirSync6 } from "fs";
 import { basename as basename2, dirname, join as join9, resolve as resolve9, sep as sep2 } from "path";
 
 // server/routes/admin/sidebar-sessions.ts
@@ -7126,7 +7127,9 @@ function selectAdminChannelSessions(rows) {
     senderId: r.senderId,
     startedAt: r.startedAt,
     channel: r.channel,
-    operatorName: null
+    operatorName: null,
+    whatsappName: null,
+    lastMessageAt: r.lastMessageAt
   }));
 }
 
@@ -7264,6 +7267,12 @@ function toolResultTurns(content, ts) {
   }
   return out;
 }
+function lastTurnTs(turns) {
+  for (let i = turns.length - 1; i >= 0; i--) {
+    if (turns[i].ts) return turns[i].ts;
+  }
+  return null;
+}
 function parseTranscript(lines) {
   const out = [];
   for (const line of lines) {
@@ -7340,6 +7349,7 @@ app5.get("/conversations", requireAdminSession, async (c) => {
     } catch {
     }
     const { title } = resolveTitle(body, sessionId, userTitles);
+    const lastMessageAt = lastTurnTs(parseTranscript(body.split("\n")));
     rows.push({
       sessionId,
       projectDir,
@@ -7347,7 +7357,8 @@ app5.get("/conversations", requireAdminSession, async (c) => {
       startedAt: meta.startedAt ?? "",
       role: meta.role,
       channel: meta.channel,
-      senderId: meta.senderId
+      senderId: meta.senderId,
+      lastMessageAt
     });
   }
   const selected = selectAdminChannelSessions(rows);
@@ -7363,11 +7374,13 @@ app5.get("/conversations", requireAdminSession, async (c) => {
   }
   const admins = account?.config.admins ?? [];
   const nameBySender = /* @__PURE__ */ new Map();
+  const whatsappNameBySender = /* @__PURE__ */ new Map();
   const distinct = [...new Set(selected.map((r) => r.senderId).filter((s) => !!s))];
   await Promise.all(
     distinct.map(async (senderId) => {
       if (!account) {
         nameBySender.set(senderId, null);
+        whatsappNameBySender.set(senderId, null);
         return;
       }
       const idRes = classifyAdminUserId(users, admins, senderId);
@@ -7375,12 +7388,22 @@ app5.get("/conversations", requireAdminSession, async (c) => {
       const { name, reason } = resolveOperatorDisplay(idRes, nameRes);
       if (reason) console.error(`[wa-reader] op=operator-unresolved senderId=${senderId} reason=${reason}`);
       nameBySender.set(senderId, name);
+      if (!name) {
+        const waName = await loadWhatsappSenderName(account.accountId, senderId);
+        if (waName) console.error(`[wa-reader] op=operator-name-fallback senderId=${senderId} source=whatsapp-pushname`);
+        whatsappNameBySender.set(senderId, waName);
+      } else {
+        whatsappNameBySender.set(senderId, null);
+      }
     })
   );
   const conversations = selected.map((r) => ({
     ...r,
-    operatorName: r.senderId ? nameBySender.get(r.senderId) ?? null : null
+    operatorName: r.senderId ? nameBySender.get(r.senderId) ?? null : null,
+    whatsappName: r.senderId ? whatsappNameBySender.get(r.senderId) ?? null : null
   }));
+  const withTimestamp = conversations.filter((conv) => conv.lastMessageAt).length;
+  console.log(`[wa-reader] op=conversations count=${conversations.length} withTimestamp=${withTimestamp}`);
   return c.json({ conversations });
 });
 function readFrom(path2, from) {
@@ -7492,12 +7515,60 @@ data: ${JSON.stringify(turn)}
     headers: { "Content-Type": "text/event-stream", "Cache-Control": "no-cache", Connection: "keep-alive" }
   });
 });
+var DIRECTIVE_NAME_RE = /^\d+-\d+\.txt$/;
+function directiveStoreDir(sessionId) {
+  const account = resolveAccount();
+  if (!account) return null;
+  return resolve9(account.accountDir, "logs", "prompt-optimiser-directives", sessionId);
+}
+app5.get("/directives", requireAdminSession, (c) => {
+  const sessionId = c.req.query("sessionId") ?? "";
+  if (!SESSION_ID_RE2.test(sessionId)) return c.json({ error: "bad session reference" }, 400);
+  const dir = directiveStoreDir(sessionId);
+  if (!dir || !existsSync7(dir)) return c.json({ entries: [] });
+  let names;
+  try {
+    names = readdirSync6(dir).filter((n) => DIRECTIVE_NAME_RE.test(n));
+  } catch {
+    return c.json({ entries: [] });
+  }
+  const entries = names.map((name) => {
+    const [secsPart, pidPart] = name.replace(/\.txt$/, "").split("-");
+    const secs = Number(secsPart);
+    const pid = Number(pidPart);
+    let len = 0;
+    try {
+      len = statSync4(join9(dir, name)).size;
+    } catch {
+    }
+    return { name, secs, pid, ts: Number.isFinite(secs) ? new Date(secs * 1e3).toISOString() : null, len };
+  }).sort((a, b) => a.secs - b.secs || a.pid - b.pid).map(({ name, ts, len }) => ({ name, ts, len }));
+  return c.json({ entries });
+});
+app5.get("/directive", requireAdminSession, (c) => {
+  const sessionId = c.req.query("sessionId") ?? "";
+  const name = c.req.query("name") ?? "";
+  if (!SESSION_ID_RE2.test(sessionId) || !DIRECTIVE_NAME_RE.test(name)) {
+    return c.json({ error: "bad reference" }, 400);
+  }
+  const dir = directiveStoreDir(sessionId);
+  if (!dir) return c.json({ error: "no account" }, 404);
+  const path2 = resolve9(join9(dir, name));
+  if (!path2.startsWith(dir + sep2)) return c.json({ error: "bad reference" }, 400);
+  let body;
+  try {
+    body = readFileSync10(path2, "utf8");
+  } catch {
+    return c.json({ error: "not found" }, 404);
+  }
+  return c.text(body);
+});
 var whatsapp_reader_default = app5;
 
 // server/routes/telegram.ts
 import { homedir } from "os";
 import { resolve as resolve10, join as join10 } from "path";
-import { existsSync as existsSync7, readFileSync as readFileSync11 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync11 } from "fs";
 
 // app/lib/telegram/access-control.ts
 function checkTelegramAccess(params) {
@@ -7549,7 +7620,7 @@ var DISPATCH_TIMEOUT_MS = 12e4;
 function configDirName() {
   const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve10(process.cwd(), "..");
   const brandPath = join10(platformRoot2, "config", "brand.json");
-  if (existsSync7(brandPath)) {
+  if (existsSync8(brandPath)) {
     try {
       return JSON.parse(readFileSync11(brandPath, "utf-8")).configDir ?? ".maxy";
     } catch {
@@ -7583,7 +7654,7 @@ app6.post("/", async (c) => {
     return c.json({ ok: false }, 400);
   }
   const sp = secretPath(botType);
-  if (!existsSync7(sp)) {
+  if (!existsSync8(sp)) {
     console.error(`${TAG21} op=reject reason=no-secret-file botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
@@ -7650,11 +7721,11 @@ var telegram_default = app6;
 
 // server/routes/onboarding.ts
 import { spawn, spawnSync as spawnSync2, execFileSync as execFileSync2 } from "child_process";
-import { openSync as openSync2, closeSync as closeSync2, writeFileSync as writeFileSync6, writeSync, existsSync as existsSync9, readFileSync as readFileSync13, unlinkSync } from "fs";
+import { openSync as openSync2, closeSync as closeSync2, writeFileSync as writeFileSync6, writeSync, existsSync as existsSync10, readFileSync as readFileSync13, unlinkSync } from "fs";
 import { createHash as createHash3, randomUUID as randomUUID7 } from "crypto";
 
 // ../lib/admins-write/src/index.ts
-import { existsSync as existsSync8, readFileSync as readFileSync12, writeFileSync as writeFileSync5, renameSync, mkdirSync as mkdirSync2, readdirSync as readdirSync6, statSync as statSync5 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync12, writeFileSync as writeFileSync5, renameSync, mkdirSync as mkdirSync2, readdirSync as readdirSync7, statSync as statSync5 } from "fs";
 import { dirname as dirname2, join as join11 } from "path";
 function logLine(input, result) {
   const userIdShort = input.userId.slice(0, 8);
@@ -7672,7 +7743,7 @@ function writeAdminEntry(input) {
   const result = { usersJsonResult: "noop", accountJsonResult: "noop" };
   try {
     let users = [];
-    if (existsSync8(input.usersFile)) {
+    if (existsSync9(input.usersFile)) {
       const raw = readFileSync12(input.usersFile, "utf-8").trim();
       if (raw) {
         const parsed = JSON.parse(raw);
@@ -7698,7 +7769,7 @@ function writeAdminEntry(input) {
   }
   try {
     const accountJsonPath = join11(input.accountDir, "account.json");
-    if (!existsSync8(accountJsonPath)) {
+    if (!existsSync9(accountJsonPath)) {
       throw new Error(`account.json not found at ${accountJsonPath}`);
     }
     const config = JSON.parse(readFileSync12(accountJsonPath, "utf-8"));
@@ -7725,7 +7796,7 @@ function checkAdminAuthInvariant(input) {
     usersWithoutAccount: []
   };
   const usersUserIds = /* @__PURE__ */ new Set();
-  if (existsSync8(input.usersFile)) {
+  if (existsSync9(input.usersFile)) {
     try {
       const raw = readFileSync12(input.usersFile, "utf-8").trim();
       if (raw) {
@@ -7740,10 +7811,10 @@ function checkAdminAuthInvariant(input) {
     }
   }
   const accountUserIds = /* @__PURE__ */ new Set();
-  if (existsSync8(input.accountsDir)) {
+  if (existsSync9(input.accountsDir)) {
     let entries;
     try {
-      entries = readdirSync6(input.accountsDir);
+      entries = readdirSync7(input.accountsDir);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       console.error(`[${input.tag}] accounts-dir unreadable accountsDir=${input.accountsDir} error=${msg}`);
@@ -7759,7 +7830,7 @@ function checkAdminAuthInvariant(input) {
         continue;
       }
       const accountJsonPath = join11(accountDir, "account.json");
-      if (!existsSync8(accountJsonPath)) continue;
+      if (!existsSync9(accountJsonPath)) continue;
       let admins = [];
       try {
         const config = JSON.parse(readFileSync12(accountJsonPath, "utf-8"));
@@ -7802,7 +7873,7 @@ function hashPin2(pin) {
   return createHash3("sha256").update(pin).digest("hex");
 }
 function readUsersFile2() {
-  if (!existsSync9(USERS_FILE)) return null;
+  if (!existsSync10(USERS_FILE)) return null;
   const raw = readFileSync13(USERS_FILE, "utf-8").trim();
   if (!raw) return [];
   return JSON.parse(raw);
@@ -7957,7 +8028,7 @@ app7.post("/set-pin", async (c) => {
   console.log(`[set-pin] wrote users.json + account.json admins: userId=${userId.slice(0, 8)}\u2026 role=owner`);
   if (process.platform === "linux") {
     let installOwner = null;
-    if (existsSync9(INSTALL_OWNER_FILE)) {
+    if (existsSync10(INSTALL_OWNER_FILE)) {
       try {
         const raw = readFileSync13(INSTALL_OWNER_FILE, "utf-8").trim();
         if (raw.length > 0) installOwner = raw;
@@ -8040,7 +8111,7 @@ app7.delete("/set-pin", async (c) => {
 var onboarding_default = app7;
 
 // server/routes/client-error.ts
-import { appendFileSync, existsSync as existsSync10, renameSync as renameSync2, statSync as statSync6 } from "fs";
+import { appendFileSync, existsSync as existsSync11, renameSync as renameSync2, statSync as statSync6 } from "fs";
 import { join as join12 } from "path";
 var CLIENT_ERRORS_LOG = join12(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
@@ -8085,7 +8156,7 @@ function stackHead(stack) {
 }
 function rotateIfNeeded() {
   try {
-    if (!existsSync10(CLIENT_ERRORS_LOG)) return;
+    if (!existsSync11(CLIENT_ERRORS_LOG)) return;
     const stats = statSync6(CLIENT_ERRORS_LOG);
     if (stats.size < MAX_LOG_SIZE) return;
     renameSync2(CLIENT_ERRORS_LOG, CLIENT_ERRORS_LOG + ".1");
@@ -8367,18 +8438,18 @@ app9.post("/", async (c) => {
 var session_default = app9;
 
 // server/routes/admin/logs.ts
-import { existsSync as existsSync12, readdirSync as readdirSync7, readFileSync as readFileSync14, statSync as statSync7 } from "fs";
+import { existsSync as existsSync13, readdirSync as readdirSync8, readFileSync as readFileSync14, statSync as statSync7 } from "fs";
 import { resolve as resolve11, basename as basename3 } from "path";
 
 // app/lib/logs-read-resolve.ts
-import { existsSync as existsSync11 } from "fs";
+import { existsSync as existsSync12 } from "fs";
 import { join as join13 } from "path";
 function resolveSessionLogPaths(filename, logDirs) {
   const tried = [filename];
   const hits = [];
   for (const dir of logDirs) {
     const fullPath = join13(dir, filename);
-    if (existsSync11(fullPath)) {
+    if (existsSync12(fullPath)) {
       hits.push({ path: fullPath, dir });
     }
   }
@@ -8506,10 +8577,10 @@ app10.get("/", async (c) => {
   const seen = /* @__PURE__ */ new Set();
   const logs = {};
   for (const dir of logDirs) {
-    if (!existsSync12(dir)) continue;
+    if (!existsSync13(dir)) continue;
     let files;
     try {
-      files = readdirSync7(dir).filter((f) => f.endsWith(".log"));
+      files = readdirSync8(dir).filter((f) => f.endsWith(".log"));
     } catch (err) {
       const reason = err instanceof Error ? err.message : String(err);
       console.warn(`[admin/logs] readdir-fail dir=${dir} reason=${reason}`);
@@ -8557,7 +8628,7 @@ var claude_info_default = app11;
 
 // server/routes/admin/attachment.ts
 import { readFile as readFile2, readdir } from "fs/promises";
-import { existsSync as existsSync13 } from "fs";
+import { existsSync as existsSync14 } from "fs";
 import { resolve as resolve12 } from "path";
 var app12 = new Hono();
 app12.get("/:attachmentId", requireAdminSession, async (c) => {
@@ -8571,11 +8642,11 @@ app12.get("/:attachmentId", requireAdminSession, async (c) => {
     return new Response("Not found", { status: 404 });
   }
   const dir = resolve12(ATTACHMENTS_ROOT, accountId, attachmentId);
-  if (!existsSync13(dir)) {
+  if (!existsSync14(dir)) {
     return new Response("Not found", { status: 404 });
   }
   const metaPath = resolve12(dir, `${attachmentId}.meta.json`);
-  if (!existsSync13(metaPath)) {
+  if (!existsSync14(metaPath)) {
     return new Response("Not found", { status: 404 });
   }
   let meta;
@@ -8603,21 +8674,21 @@ var attachment_default = app12;
 
 // server/routes/admin/agents.ts
 import { resolve as resolve13 } from "path";
-import { readdirSync as readdirSync8, readFileSync as readFileSync15, existsSync as existsSync14, rmSync } from "fs";
+import { readdirSync as readdirSync9, readFileSync as readFileSync15, existsSync as existsSync15, rmSync } from "fs";
 var app13 = new Hono();
 app13.get("/", (c) => {
   const account = resolveAccount();
   if (!account) return c.json({ agents: [] });
   const agentsDir = resolve13(account.accountDir, "agents");
-  if (!existsSync14(agentsDir)) return c.json({ agents: [] });
+  if (!existsSync15(agentsDir)) return c.json({ agents: [] });
   const agents = [];
   try {
-    const entries = readdirSync8(agentsDir, { withFileTypes: true });
+    const entries = readdirSync9(agentsDir, { withFileTypes: true });
     for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
       if (!entry.isDirectory()) continue;
       if (entry.name === "admin") continue;
       const configPath2 = resolve13(agentsDir, entry.name, "config.json");
-      if (!existsSync14(configPath2)) continue;
+      if (!existsSync15(configPath2)) continue;
       try {
         const config = JSON.parse(readFileSync15(configPath2, "utf-8"));
         agents.push({
@@ -8646,7 +8717,7 @@ app13.delete("/:slug", async (c) => {
     return c.json({ error: "Invalid agent slug" }, 400);
   }
   const agentDir = resolve13(account.accountDir, "agents", slug);
-  if (!existsSync14(agentDir)) {
+  if (!existsSync15(agentDir)) {
     return c.json({ error: "Agent not found" }, 404);
   }
   try {
@@ -8676,7 +8747,7 @@ app13.post("/:slug/project", async (c) => {
     return c.json({ error: "Invalid agent slug" }, 400);
   }
   const agentDir = resolve13(account.accountDir, "agents", slug);
-  if (!existsSync14(agentDir)) {
+  if (!existsSync15(agentDir)) {
     return c.json({ error: "Agent not found on disk" }, 404);
   }
   try {
@@ -8692,7 +8763,7 @@ var agents_default = app13;
 // server/routes/admin/sessions.ts
 import crypto2 from "crypto";
 import { resolve as resolvePath } from "path";
-import { existsSync as existsSync15, mkdirSync as mkdirSync3, createWriteStream } from "fs";
+import { existsSync as existsSync16, mkdirSync as mkdirSync3, createWriteStream } from "fs";
 
 // ../lib/admin-conversation-purge/src/index.ts
 async function purgeAdminConversationJsonls(args) {
@@ -8852,7 +8923,7 @@ function validateAndShapeAttachments(raws, conversationAccountId, sessionId, mes
     let reason = null;
     if (!a.attachmentId || !a.filename || !a.mimeType || !a.storagePath) reason = "schema-fail";
     else if (a.accountId !== conversationAccountId) reason = "account-mismatch";
-    else if (!existsSync15(a.storagePath)) reason = "missing-file";
+    else if (!existsSync16(a.storagePath)) reason = "missing-file";
     if (reason) {
       invalid++;
       try {
@@ -9378,7 +9449,7 @@ app14.put("/:id/label", requireAdminSession, async (c) => {
 var sessions_default = app14;
 
 // app/lib/claude-agent/spawn-context.ts
-import { existsSync as existsSync16, readFileSync as readFileSync16, readdirSync as readdirSync9, statSync as statSync8 } from "fs";
+import { existsSync as existsSync17, readFileSync as readFileSync16, readdirSync as readdirSync10, statSync as statSync8 } from "fs";
 import { dirname as dirname3, resolve as resolve14, join as join14 } from "path";
 async function resolveOwnerProfileBlock(accountId, userId) {
   if (!userId) return { ok: false, reason: "missing-user-id" };
@@ -9413,7 +9484,7 @@ function extractPluginToolDescriptions(pluginDir) {
   ];
   let raw = null;
   for (const path2 of candidates) {
-    if (!existsSync16(path2)) continue;
+    if (!existsSync17(path2)) continue;
     try {
       raw = readFileSync16(path2, "utf-8");
       break;
@@ -9465,8 +9536,8 @@ function parseSkillPathsFromFrontmatter(fm) {
 function listPluginDirs() {
   const out = /* @__PURE__ */ new Map();
   const platformPlugins = resolve14(PLATFORM_ROOT, "plugins");
-  if (existsSync16(platformPlugins)) {
-    for (const name of readdirSync9(platformPlugins)) {
+  if (existsSync17(platformPlugins)) {
+    for (const name of readdirSync10(platformPlugins)) {
       const dir = join14(platformPlugins, name);
       try {
         if (statSync8(dir).isDirectory()) out.set(name, dir);
@@ -9475,12 +9546,12 @@ function listPluginDirs() {
     }
   }
   const premiumRoot = resolve14(dirname3(PLATFORM_ROOT), "premium-plugins");
-  if (existsSync16(premiumRoot)) {
-    for (const bundle of readdirSync9(premiumRoot)) {
+  if (existsSync17(premiumRoot)) {
+    for (const bundle of readdirSync10(premiumRoot)) {
       const bundlePlugins = join14(premiumRoot, bundle, "plugins");
-      if (!existsSync16(bundlePlugins)) continue;
+      if (!existsSync17(bundlePlugins)) continue;
       try {
-        for (const name of readdirSync9(bundlePlugins)) {
+        for (const name of readdirSync10(bundlePlugins)) {
           const dir = join14(bundlePlugins, name);
           try {
             if (statSync8(dir).isDirectory()) out.set(name, dir);
@@ -9495,7 +9566,7 @@ function listPluginDirs() {
 }
 function readEnabledPlugins(accountId) {
   const accountFile = resolve14(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
-  if (!existsSync16(accountFile)) return /* @__PURE__ */ new Set();
+  if (!existsSync17(accountFile)) return /* @__PURE__ */ new Set();
   try {
     const parsed = JSON.parse(readFileSync16(accountFile, "utf-8"));
     return new Set(
@@ -9506,7 +9577,7 @@ function readEnabledPlugins(accountId) {
   }
 }
 function readFrontmatter(path2) {
-  if (!existsSync16(path2)) return null;
+  if (!existsSync17(path2)) return null;
   let raw;
   try {
     raw = readFileSync16(path2, "utf-8");
@@ -9541,7 +9612,7 @@ ${fm}
       `plugin-manifest-tool-coverage plugin=${name} tools=${tools.length} with-desc=${withDesc}`
     );
     if (toolNames.length > 0 && descMap.size === 0) {
-      const hasSource = existsSync16(join14(dir, "mcp/dist/index.js")) || existsSync16(join14(dir, "mcp/src/index.ts"));
+      const hasSource = existsSync17(join14(dir, "mcp/dist/index.js")) || existsSync17(join14(dir, "mcp/src/index.ts"));
       if (hasSource) {
         console.warn(
           `[spawn-context] WARN plugin=${name} mcp source present but tool-description regex matched zero entries \u2014 SDK upgrade may have changed the registration shape`
@@ -9568,10 +9639,10 @@ ${skillFm}
 }
 function computeSpecialistDomains(accountId) {
   const specialistsDir = resolve14(PLATFORM_ROOT, "..", "data/accounts", accountId, "specialists", "agents");
-  if (!existsSync16(specialistsDir)) return [];
+  if (!existsSync17(specialistsDir)) return [];
   let entries;
   try {
-    entries = readdirSync9(specialistsDir);
+    entries = readdirSync10(specialistsDir);
   } catch {
     return [];
   }
@@ -9614,7 +9685,7 @@ ${fm}
 }
 function computeDormantPlugins(accountId) {
   const accountFile = resolve14(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
-  if (!existsSync16(accountFile)) return [];
+  if (!existsSync17(accountFile)) return [];
   let enabled;
   try {
     const raw = readFileSync16(accountFile, "utf-8");
@@ -9629,10 +9700,10 @@ function computeDormantPlugins(accountId) {
     return [];
   }
   const pluginsDir = resolve14(PLATFORM_ROOT, "plugins");
-  if (!existsSync16(pluginsDir)) return [];
+  if (!existsSync17(pluginsDir)) return [];
   let entries;
   try {
-    entries = readdirSync9(pluginsDir);
+    entries = readdirSync10(pluginsDir);
   } catch {
     return [];
   }
@@ -9640,7 +9711,7 @@ function computeDormantPlugins(accountId) {
   for (const name of entries) {
     if (enabled.has(name)) continue;
     const manifestPath = resolve14(pluginsDir, name, "PLUGIN.md");
-    if (!existsSync16(manifestPath)) continue;
+    if (!existsSync17(manifestPath)) continue;
     let manifest;
     try {
       manifest = readFileSync16(manifestPath, "utf-8");
@@ -9657,11 +9728,11 @@ function computeDormantPlugins(accountId) {
 }
 
 // server/routes/admin/claude-sessions.ts
-import { existsSync as existsSync17, readFileSync as readFileSync17 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync17 } from "fs";
 import { resolve as resolve15 } from "path";
 function readTunnelState(brandConfigDir) {
   const statePath = `${process.env.HOME ?? ""}/${brandConfigDir}/cloudflared/tunnel.state`;
-  if (!existsSync17(statePath)) return null;
+  if (!existsSync18(statePath)) return null;
   try {
     const parsed = JSON.parse(readFileSync17(statePath, "utf-8"));
     const tunnelId = typeof parsed.tunnelId === "string" ? parsed.tunnelId : null;
@@ -13097,7 +13168,7 @@ var graph_default_view_default = app24;
 // server/routes/admin/sidebar-artefacts.ts
 import { readdir as readdir4, stat as stat5 } from "fs/promises";
 import { resolve as resolve19, relative as relative3, isAbsolute, sep as sep6, basename as basename6 } from "path";
-import { existsSync as existsSync18 } from "fs";
+import { existsSync as existsSync19 } from "fs";
 var LIMIT = 50;
 var ADMIN_AGENT_FILES = ["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"];
 function toDataRootRelPath(absPath) {
@@ -13203,7 +13274,7 @@ async function fetchAgentTemplateRows(accountDir) {
 async function unionSpecialistFilenames(overrideDir, bundledDir) {
   const names = /* @__PURE__ */ new Set();
   for (const dir of [overrideDir, bundledDir]) {
-    if (!existsSync18(dir)) continue;
+    if (!existsSync19(dir)) continue;
     try {
       const entries = await readdir4(dir);
       for (const entry of entries) {
@@ -13218,7 +13289,7 @@ async function unionSpecialistFilenames(overrideDir, bundledDir) {
 }
 async function readAgentTemplateRow(inp) {
   let chosenPath = null;
-  if (existsSync18(inp.overridePath)) {
+  if (existsSync19(inp.overridePath)) {
     try {
       validateFilePathInAccount(inp.overridePath, inp.overrideRoot);
       chosenPath = inp.overridePath;
@@ -13229,7 +13300,7 @@ async function readAgentTemplateRow(inp) {
       );
       return null;
     }
-  } else if (existsSync18(inp.bundledPath)) {
+  } else if (existsSync19(inp.bundledPath)) {
     if (!isWithin(inp.bundledPath, inp.bundledRoot)) {
       console.error(
         `[admin/sidebar-artefacts] agent-template-read-failed agent=${inp.displayName} kind=${inp.logName} error="bundled path outside PLATFORM_ROOT"`
@@ -13553,12 +13624,12 @@ app30.get("/", async (c) => {
 var system_stats_default = app30;
 
 // server/routes/admin/health.ts
-import { existsSync as existsSync19, readFileSync as readFileSync18 } from "fs";
+import { existsSync as existsSync20, readFileSync as readFileSync18 } from "fs";
 import { resolve as resolve20, join as join17 } from "path";
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve20(process.cwd(), "..");
 var brandHostname = "maxy";
 var brandJsonPath = join17(PLATFORM_ROOT6, "config", "brand.json");
-if (existsSync19(brandJsonPath)) {
+if (existsSync20(brandJsonPath)) {
   try {
     const brand = JSON.parse(readFileSync18(brandJsonPath, "utf-8"));
     if (brand.hostname) brandHostname = brand.hostname;
@@ -13569,7 +13640,7 @@ var VERSION_FILE = resolve20(PLATFORM_ROOT6, `config/.${brandHostname}-version`)
 var PROCESS_STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
 var PROBE_TIMEOUT_MS = 1e3;
 function readVersion() {
-  if (!existsSync19(VERSION_FILE)) return "unknown";
+  if (!existsSync20(VERSION_FILE)) return "unknown";
   return readFileSync18(VERSION_FILE, "utf-8").trim() || "unknown";
 }
 async function probeConversationDb() {
@@ -14553,7 +14624,7 @@ app41.route("/request-magic-link", request_magic_link_default);
 var access_default = app41;
 
 // server/routes/sites.ts
-import { existsSync as existsSync20, readFileSync as readFileSync20, realpathSync as realpathSync5, statSync as statSync9 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync20, realpathSync as realpathSync5, statSync as statSync9 } from "fs";
 import { resolve as resolve23 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
@@ -14619,7 +14690,7 @@ app42.get("/:rel{.*}", (c) => {
   }
   let stat7;
   try {
-    stat7 = existsSync20(filePath) ? statSync9(filePath) : null;
+    stat7 = existsSync21(filePath) ? statSync9(filePath) : null;
   } catch {
     stat7 = null;
   }
@@ -14638,7 +14709,7 @@ app42.get("/:rel{.*}", (c) => {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync20(filePath)) {
+  if (!existsSync21(filePath)) {
     console.error(`[sites] not-found path=${reqPath} status=404`);
     return c.text("Not found", 404);
   }
@@ -14769,7 +14840,7 @@ var VISITOR_COOKIE_NAME = "mxy_v";
 var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
-import { existsSync as existsSync21, readFileSync as readFileSync22 } from "fs";
+import { existsSync as existsSync22, readFileSync as readFileSync22 } from "fs";
 import { join as join18 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
@@ -14779,7 +14850,7 @@ function readBrandConfig() {
   const platformRoot2 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot2) return null;
   const brandPath = join18(platformRoot2, "config", "brand.json");
-  if (!existsSync21(brandPath)) return null;
+  if (!existsSync22(brandPath)) return null;
   try {
     cached2 = JSON.parse(readFileSync22(brandPath, "utf-8"));
     return cached2;
@@ -15270,7 +15341,7 @@ var visitor_event_default = app45;
 
 // server/routes/session.ts
 import { resolve as resolve24 } from "path";
-import { existsSync as existsSync22, writeFileSync as writeFileSync8, mkdirSync as mkdirSync5 } from "fs";
+import { existsSync as existsSync23, writeFileSync as writeFileSync8, mkdirSync as mkdirSync5 } from "fs";
 var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function writeBrandingCache(accountId, agentSlug, branding) {
   try {
@@ -15365,7 +15436,7 @@ app46.post("/", async (c) => {
   let agentConfig = null;
   if (account) {
     const agentDir = resolve24(account.accountDir, "agents", agentSlug);
-    if (!existsSync22(agentDir) || !existsSync22(resolve24(agentDir, "config.json"))) {
+    if (!existsSync23(agentDir) || !existsSync23(resolve24(agentDir, "config.json"))) {
       return c.json({ error: "Agent not found" }, 404);
     }
     agentConfig = resolveAgentConfig(account.accountDir, agentSlug);
@@ -16054,6 +16125,45 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
     return c.json({ ok: true });
   });
+  app48.post("/wa-channel/reply-document", async (c) => {
+    const body = await c.req.json().catch(() => null);
+    const senderId = body?.senderId;
+    const files = body?.files;
+    const caption = typeof body?.caption === "string" ? body.caption : void 0;
+    if (typeof senderId !== "string" || !Array.isArray(files) || files.length === 0 || !files.every((f) => typeof f === "string")) {
+      return c.json({ error: "senderId and a non-empty files string array required" }, 400);
+    }
+    const results = [];
+    for (let i = 0; i < files.length; i++) {
+      const file = files[i];
+      console.error(`[whatsapp-native] op=reply-document-request senderId=${senderId} file=${file}`);
+      let outcome;
+      try {
+        outcome = await deps.sendDocument(senderId, file, i === 0 ? caption : void 0);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        const terminal = err instanceof WaReplyError ? err.terminal : false;
+        console.error(
+          `[whatsapp-native] op=reply-document-failed senderId=${senderId} file=${file} terminal=${terminal} error=${message}`
+        );
+        return c.json({ error: message, terminal }, 403);
+      }
+      if (outcome.ok) {
+        console.error(`[whatsapp-native] op=reply-document-dispatch senderId=${senderId} file=${file}`);
+        console.error(`[whatsapp-native] op=reply-document-reconciled senderId=${senderId} file=${file}`);
+        results.push({ file, ok: true, messageId: outcome.messageId });
+      } else {
+        console.error(
+          `[whatsapp-adaptor] file-delivery-unreconciled senderId=${senderId} file=${file} reason=${outcome.error}`
+        );
+        console.error(
+          `[whatsapp-native] op=reply-document-failed senderId=${senderId} file=${file} terminal=false error=${outcome.error}`
+        );
+        results.push({ file, ok: false, error: outcome.error });
+      }
+    }
+    return c.json({ ok: true, results });
+  });
   app48.post("/wa-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
@@ -16086,6 +16196,10 @@ var WaGateway = class {
   }
   hub = new InboundHub();
   replies = /* @__PURE__ */ new Map();
+  // Per-sender document-delivery context (the Baileys accountId), set on every
+  // inbound. Its presence is the reply-only guard: a sender with no inbound has
+  // no context, so a file reply to a cold recipient is refused.
+  docContexts = /* @__PURE__ */ new Map();
   spawning = /* @__PURE__ */ new Set();
   seq = 0;
   /** Hono sub-app exposing the loopback channel routes; mount on the UI app. */
@@ -16093,6 +16207,7 @@ var WaGateway = class {
     return createWaChannelRoutes({
       hub: this.hub,
       sendOutbound: (senderId, text) => this.sendOutbound(senderId, text),
+      sendDocument: (senderId, filePath, caption) => this.sendDocument(senderId, filePath, caption),
       onReady: (senderId) => {
         const count = this.hub.markReady(senderId, Date.now());
         if (count > 0) console.error(`[whatsapp-native] op=drained senderId=${senderId} count=${count}`);
@@ -16137,6 +16252,7 @@ var WaGateway = class {
     const openable = input.media.filter((m) => m.type !== "audio");
     const mediaField = openable.length > 0 ? `media=${openable.map((m) => m.type).join(",")} mediaPaths=${openable.map((m) => m.path).join(",")}` : input.media.some((m) => m.type === "audio") ? "media=audio mediaPath=transcribed" : "media=none";
     this.replies.set(input.senderId, input.reply);
+    this.docContexts.set(input.senderId, { accountId: input.accountId });
     this.hub.deliver(
       {
         senderId: input.senderId,
@@ -16169,8 +16285,47 @@ var WaGateway = class {
     if (!reply) throw new Error(`wa-gateway: no reply route for sender ${senderId}`);
     await reply(text);
   }
+  /** Deliver a file to a sender as a WhatsApp document. Throws `WaReplyError`
+   *  (reply-only guard) when no inbound has registered a document context for
+   *  the sender — file delivery is only ever a reply on a live conversation. */
+  async sendDocument(senderId, filePath, caption) {
+    const ctx = this.docContexts.get(senderId);
+    if (!ctx) throw new WaReplyError(`no conversation for sender ${senderId}`, false);
+    return this.deps.sendDocument({ senderId, accountId: ctx.accountId, filePath, caption });
+  }
 };
 
+// app/lib/whatsapp/gateway/native-file-follower.ts
+function startNativeFileFollower(input) {
+  const entry = {
+    sessionId: input.sessionId,
+    role: "admin",
+    channel: "whatsapp",
+    accountId: input.accountId,
+    senderId: input.senderId,
+    agentSlug: "admin",
+    lastInboundAt: Date.now(),
+    writeChain: Promise.resolve(),
+    subscribers: /* @__PURE__ */ new Set(),
+    pendingTurnText: "",
+    followerAbort: null,
+    followerRunning: false,
+    sliceToken: "",
+    personId: null,
+    name: null
+  };
+  return startFollower({
+    entry,
+    tag: "[whatsapp-adaptor]",
+    fileDelivery: makeWhatsAppFileDelivery(entry),
+    // A resumed session's JSONL already holds prior SendUserFile tool_uses;
+    // suppress replay so historical files are not re-sent on attach.
+    suppressResumeReplay: true,
+    onClose: input.onClose ?? (() => {
+    })
+  });
+}
+
 // app/lib/whatsapp/inbound/channel-admin-binding-drift.ts
 function findChannelAdminBindingDrift(adminPhones, admins, users) {
   const drift = [];
@@ -16236,7 +16391,7 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash5, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync23, readFileSync as readFileSync23, statSync as statSync10 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync23, statSync as statSync10 } from "fs";
 import { resolve as resolve26 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
@@ -16285,7 +16440,7 @@ function resolveEntitlement(brand, account) {
     return logResolved(implicitTrust(account), null);
   }
   const entitlementPath = resolve26(brand.configDir, "entitlement.json");
-  if (!existsSync23(entitlementPath)) {
+  if (!existsSync24(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
   const stat7 = statSync10(entitlementPath);
@@ -16477,10 +16632,10 @@ function clientFrom(c) {
 var PLATFORM_ROOT9 = process.env.MAXY_PLATFORM_ROOT || "";
 var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join19(PLATFORM_ROOT9, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
-if (BRAND_JSON_PATH && !existsSync24(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && !existsSync25(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
-if (BRAND_JSON_PATH && existsSync24(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync25(BRAND_JSON_PATH)) {
   try {
     const parsed = JSON.parse(readFileSync24(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
@@ -16504,7 +16659,7 @@ var brandLoginOpts = {
 var ALIAS_DOMAINS_PATH = join19(homedir3(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
-    if (!existsSync24(ALIAS_DOMAINS_PATH)) return null;
+    if (!existsSync25(ALIAS_DOMAINS_PATH)) return null;
     const parsed = JSON.parse(readFileSync24(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
@@ -16530,9 +16685,29 @@ function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
 var app47 = new Hono();
+var nativeFileFollowers = /* @__PURE__ */ new Map();
 var waGateway = new WaGateway({
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
   serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve27(process.env.MAXY_PLATFORM_ROOT ?? join19(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  // Task 751 — file delivery on the native channel: resolve the platform
+  // account + path validation here and funnel through the shared send core.
+  sendDocument: async ({ senderId, accountId, filePath, caption }) => {
+    let maxyAccountId;
+    try {
+      maxyAccountId = resolvePlatformAccountId();
+    } catch (err) {
+      return { ok: false, error: `account-unresolved: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    const result = await sendWhatsAppDocument({
+      to: senderId,
+      filePath,
+      caption,
+      accountId,
+      maxyAccountId,
+      platformRoot: resolve27(process.env.MAXY_PLATFORM_ROOT ?? join19(__dirname, ".."))
+    });
+    return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
+  },
   ensureChannelSession: async ({ accountId, senderId, gatewayUrl, serverPath }) => {
     const userId = resolveAdminUserId({ accountId, senderPhone: senderId }) ?? void 0;
     console.error(`[whatsapp-native] op=admin-identity senderId=${senderId} userId=${userId ?? "owner-fallback"}`);
@@ -16549,7 +16724,20 @@ var waGateway = new WaGateway({
     });
     if ("error" in result) {
       console.error(`[whatsapp-native] spawn-failed senderId=${senderId} error=${result.error} status=${result.status}`);
+      return;
     }
+    const prior = nativeFileFollowers.get(senderId);
+    if (prior) prior.abort();
+    let ac;
+    ac = startNativeFileFollower({
+      sessionId: adminSessionIdFor(accountId, senderId),
+      senderId,
+      accountId,
+      onClose: () => {
+        if (nativeFileFollowers.get(senderId) === ac) nativeFileFollowers.delete(senderId);
+      }
+    });
+    nativeFileFollowers.set(senderId, ac);
   }
 });
 app47.route("/", waGateway.routes());
@@ -16878,7 +17066,7 @@ app47.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync24(filePath)) {
+  if (!existsSync25(filePath)) {
     console.error(`[agent-assets] serve slug=${slug} file=${filename} status=404`);
     return c.text("Not found", 404);
   }
@@ -16908,7 +17096,7 @@ app47.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync24(filePath)) {
+  if (!existsSync25(filePath)) {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
@@ -16928,7 +17116,7 @@ app47.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
-if (BRAND_JSON_PATH && existsSync24(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync25(BRAND_JSON_PATH)) {
   try {
     const fullBrand = JSON.parse(readFileSync24(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
@@ -16948,7 +17136,7 @@ function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT9) return "unknown";
     const versionFile = join19(PLATFORM_ROOT9, "config", `.${BRAND.hostname}-version`);
-    if (!existsSync24(versionFile)) return "unknown";
+    if (!existsSync25(versionFile)) return "unknown";
     const content = readFileSync24(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
@@ -17011,7 +17199,7 @@ function loadBrandingCache(agentSlug) {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
     const cachePath = join19(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
-    if (!existsSync24(cachePath)) return null;
+    if (!existsSync25(cachePath)) return null;
     return JSON.parse(readFileSync24(cachePath, "utf-8"));
   } catch {
     return null;
@@ -17256,7 +17444,7 @@ try {
 var ADMINUSER_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 async function runAdminUserReconcileTick() {
   try {
-    if (!existsSync24(USERS_FILE)) {
+    if (!existsSync25(USERS_FILE)) {
       console.error("[adminuser-self-heal] skip reason=no-users-file");
       return;
     }