@rubytech/create-maxy-code 0.1.363 → 0.1.364

package/payload/server/public/graph.html

@@ -5,7 +5,7 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Graph — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/graph-BIAaLslC.js"></script>
+  <script type="module" crossorigin src="/assets/graph-CYMIe4B_.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CAM3fms7.js">
   <link rel="modulepreload" crossorigin href="/assets/OperatorConversations-BwnO3IUP.js">
   <link rel="modulepreload" crossorigin href="/assets/graph-labels-CXt55mIP.js">

package/payload/server/server.js

@@ -6622,6 +6622,43 @@ app2.post("/send-document", async (c) => {
     return c.json({ error: String(err) }, 500);
   }
 });
+app2.post("/send-admin", async (c) => {
+  try {
+    const body = await c.req.json().catch(() => ({}));
+    const { phone, text } = body;
+    if (!phone || typeof phone !== "string") {
+      return c.json({ error: 'Missing required field "phone" (E.164 format, e.g. +441234567890).' }, 400);
+    }
+    if (!text || typeof text !== "string") {
+      return c.json({ error: 'Missing required field "text".' }, 400);
+    }
+    const account = resolveAccount();
+    if (!account) {
+      return c.json({ error: "No account configured." }, 500);
+    }
+    const adminPhones = readAdminPhones(account.accountDir);
+    if (!isAdminPhone(phone, adminPhones)) {
+      console.error(`[whatsapp:outbound] op=send-refused reason=not-admin-phone to=${phone}`);
+      return c.json(
+        { error: `Refused: ${phone} is not on the admin-phone list. Only a number registered with whatsapp-config add-admin-phone can receive an agent-initiated send.` },
+        403
+      );
+    }
+    const accountId = validateAccountId(body.accountId);
+    const sock = getSocket(accountId);
+    if (!sock) {
+      return c.json({ error: `WhatsApp account "${accountId}" is not connected.` }, 503);
+    }
+    const result = await sendTextMessage(sock, normalizeE164(phone), text, { accountId });
+    if (!result.success) {
+      return c.json({ error: result.error ?? "send failed" }, 500);
+    }
+    return c.json({ success: true, messageId: result.messageId });
+  } catch (err) {
+    console.error(`${TAG20} send-admin error: ${String(err)}`);
+    return c.json({ error: String(err) }, 500);
+  }
+});
 app2.get("/activity", (c) => {
   try {
     const accountId = c.req.query("accountId") ?? void 0;