@rubytech/create-maxy-code 0.1.427 → 0.1.431

package/payload/server/server.js

@@ -75,6 +75,7 @@ import {
   loadUserProfile,
   migrateLegacyRemotePassword,
   persistMessage,
+  preloadEmbedModel,
   projectAgent,
   reconcileEnabledPlugins,
   recordFailedAttempt,
@@ -110,7 +111,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-3Z5WE53X.js";
+} from "./chunk-UUG6ZSO5.js";
 import {
   __commonJS,
   __toESM
@@ -3336,6 +3337,17 @@ var STORE_ROOT = () => join3(process.env.MAXY_DIR_OVERRIDE ?? MAXY_DIR, "data",
 function conversationFile(platformAccountId, remoteJid) {
   return join3(STORE_ROOT(), platformAccountId, `${remoteJid}.jsonl`);
 }
+function listStoredAccountIds() {
+  const root = STORE_ROOT();
+  if (!existsSync3(root)) return [];
+  return readdirSync(root).filter((name) => {
+    try {
+      return statSync2(join3(root, name)).isDirectory();
+    } catch {
+      return false;
+    }
+  });
+}
 function conversationFilePath(platformAccountId, remoteJid) {
   return conversationFile(platformAccountId, remoteJid);
 }
@@ -4207,6 +4219,9 @@ var whatsAppConfig = {};
 var onInboundMessage = null;
 var initialized = false;
 var messageStore = /* @__PURE__ */ new Map();
+function messageStoreKey(accountId, remoteJid) {
+  return `${accountId}:${remoteJid}`;
+}
 function storeMessage(storeKey, entry) {
   let entries = messageStore.get(storeKey);
   if (!entries) {
@@ -4360,9 +4375,12 @@ function getStatus() {
 function getSocket(accountId) {
   return connections.get(accountId)?.sock ?? null;
 }
+function findConnectionByKey(conns, accountId) {
+  return conns.find((c) => c.accountId === accountId) ?? conns.find((c) => c.platformAccountId === accountId);
+}
 function selectConnection(conns, accountId) {
   const presentKeys = conns.map((c) => c.accountId);
-  const conn = conns.find((c) => c.accountId === accountId) ?? conns.find((c) => c.platformAccountId === accountId);
+  const conn = findConnectionByKey(conns, accountId);
   if (!conn) return { ok: false, reason: "key-miss", presentKeys };
   if (!conn.sock) return { ok: false, reason: "disconnected", presentKeys };
   return { ok: true, sock: conn.sock, accountId: conn.accountId };
@@ -4370,6 +4388,16 @@ function selectConnection(conns, accountId) {
 function resolveSocket(accountId) {
   return selectConnection(Array.from(connections.values()), accountId);
 }
+function selectStoreAccountKey(conns, accountId) {
+  const conn = findConnectionByKey(conns, accountId);
+  return conn ? conn.platformAccountId : accountId;
+}
+function resolveReadStoreKey(accountId) {
+  return selectStoreAccountKey(Array.from(connections.values()), accountId);
+}
+function listConnectionPlatformAccountIds() {
+  return [...connections.values()].map((conn) => conn.platformAccountId);
+}
 async function registerLoginSocket(accountId, sock, authDir) {
   if (!configDir) throw new Error("WhatsApp manager not initialized");
   let platformAccountId;
@@ -4460,11 +4488,11 @@ function reloadConfig(accountConfig) {
   loadConfig(accountConfig);
 }
 function getMessages(accountId, jid, limit) {
-  const entries = messageStore.get(`${accountId}:${jid}`) ?? [];
+  const entries = messageStore.get(messageStoreKey(accountId, jid)) ?? [];
   return limit ? entries.slice(-limit) : entries.slice();
 }
 function listConversationJids(accountId) {
-  const prefix = `${accountId}:`;
+  const prefix = messageStoreKey(accountId, "");
   const jids = [];
   for (const key of messageStore.keys()) {
     if (key.startsWith(prefix)) {
@@ -4473,6 +4501,14 @@ function listConversationJids(accountId) {
   }
   return jids;
 }
+function listStoreAccountKeys() {
+  const accounts = /* @__PURE__ */ new Set();
+  for (const key of messageStore.keys()) {
+    const i = key.indexOf(":");
+    if (i > 0) accounts.add(key.slice(0, i));
+  }
+  return [...accounts];
+}
 async function shutdown() {
   await drainCredsSaveQueue();
   const ids = Array.from(connections.keys());
@@ -4682,7 +4718,7 @@ function monitorInbound(conn) {
           const senderJid = isGroup ? msg.key.participant ?? remoteJid : remoteJid;
           const senderPhone = await resolveJidToE164(senderJid, conn.lidMapping) ?? senderJid;
           const ts = msg.messageTimestamp ? Number(msg.messageTimestamp) : Math.floor(Date.now() / 1e3);
-          const storeKey = `${conn.accountId}:${remoteJid}`;
+          const storeKey = messageStoreKey(conn.platformAccountId, remoteJid);
           storeMessage(storeKey, {
             id: msg.key.id ?? `${remoteJid}-${ts}`,
             sender: senderPhone,
@@ -4694,7 +4730,7 @@ function monitorInbound(conn) {
           });
           const entries = messageStore.get(storeKey);
           console.error(
-            `${TAG13} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries?.length ?? 0}/${MESSAGE_STORE_MAX}) account=${conn.accountId}`
+            `${TAG13} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries?.length ?? 0}/${MESSAGE_STORE_MAX}) account=${conn.platformAccountId}`
           );
           recordActivity({
             accountId: conn.accountId,
@@ -7074,6 +7110,13 @@ function listActiveLoginAccountIds() {
   return ids;
 }
 
+// app/lib/whatsapp/store-key-reconcile.ts
+function reconcileMessageStoreAccountKeys(input) {
+  const reachable = new Set(input.reachableAccountIds);
+  const orphanLiveKeys = input.liveAccountKeys.filter((k) => !reachable.has(k));
+  return { ok: orphanLiveKeys.length === 0, orphanLiveKeys };
+}
+
 // app/lib/whatsapp/outbound/send-document.ts
 import { realpathSync as realpathSync3 } from "fs";
 import { readFile, stat as stat2 } from "fs/promises";
@@ -7454,7 +7497,17 @@ app2.get("/status", (c) => {
     const accounts = [...live, ...reconciled];
     const summary = accounts.map((a) => `${a.accountId}:${a.connected ? "up" : a.linkedUnconfigured ? "linked-unconfigured" : "down"}`).join(", ");
     console.error(`${TAG21} status accounts=${accounts.length} [${summary}]`);
-    return c.json({ accounts });
+    const reachableAccountIds = [
+      .../* @__PURE__ */ new Set([...listStoredAccountIds(), ...listConnectionPlatformAccountIds()])
+    ];
+    const storeKeyReconcile = reconcileMessageStoreAccountKeys({
+      liveAccountKeys: listStoreAccountKeys(),
+      reachableAccountIds
+    });
+    if (!storeKeyReconcile.ok) {
+      console.warn(`${TAG21} store-key-drift orphanLiveKeys=[${storeKeyReconcile.orphanLiveKeys.join(",")}] \u2014 in-memory cache keyed by a value with no disk account; read tools will miss`);
+    }
+    return c.json({ accounts, storeKeyReconcile });
   } catch (err) {
     console.error(`${TAG21} status error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
@@ -7745,9 +7798,10 @@ app2.get("/activity", (c) => {
 });
 app2.get("/conversations", (c) => {
   try {
-    const accountId = validateAccountId(c.req.query("accountId") ?? null);
-    const denial = callerScopeDenial(c, accountId);
+    const requestedAccountId = validateAccountId(c.req.query("accountId") ?? null);
+    const denial = callerScopeDenial(c, requestedAccountId);
     if (denial) return denial;
+    const accountId = resolveReadStoreKey(requestedAccountId);
     const jids = listConversationJids(accountId);
     const conversations = jids.map((jid) => {
       const messages = getMessages(accountId, jid);
@@ -7760,7 +7814,7 @@ app2.get("/conversations", (c) => {
       };
     });
     conversations.sort((a, b) => (b.lastMessageTimestamp ?? 0) - (a.lastMessageTimestamp ?? 0));
-    console.error(`${TAG21} conversations account=${accountId} count=${conversations.length}`);
+    console.error(`${TAG21} conversations requested=${requestedAccountId} account=${accountId} storeKeyFound=${jids.length > 0} count=${conversations.length}`);
     return c.json({ conversations });
   } catch (err) {
     console.error(`${TAG21} conversations error: ${String(err)}`);
@@ -7769,9 +7823,10 @@ app2.get("/conversations", (c) => {
 });
 app2.get("/messages", (c) => {
   try {
-    const accountId = validateAccountId(c.req.query("accountId") ?? null);
-    const denial = callerScopeDenial(c, accountId);
+    const requestedAccountId = validateAccountId(c.req.query("accountId") ?? null);
+    const denial = callerScopeDenial(c, requestedAccountId);
     if (denial) return denial;
+    const accountId = resolveReadStoreKey(requestedAccountId);
     const jid = c.req.query("jid");
     if (!jid) {
       return c.json({ error: "Missing required parameter: jid" }, 400);
@@ -7780,7 +7835,8 @@ app2.get("/messages", (c) => {
     const limit = limitParam ? parseInt(limitParam, 10) : void 0;
     const effectiveLimit = limit && !Number.isNaN(limit) && limit > 0 ? limit : void 0;
     const messages = getMessages(accountId, jid, effectiveLimit);
-    console.error(`${TAG21} messages account=${accountId} jid=${jid} limit=${effectiveLimit ?? "all"} returned=${messages.length}`);
+    const storeKeyFound = listConversationJids(accountId).length > 0;
+    console.error(`${TAG21} messages requested=${requestedAccountId} account=${accountId} jid=${jid} storeKeyFound=${storeKeyFound} limit=${effectiveLimit ?? "all"} returned=${messages.length}`);
     return c.json({ messages });
   } catch (err) {
     console.error(`${TAG21} messages error: ${String(err)}`);
@@ -8437,14 +8493,14 @@ function joinTextBlocks(content) {
   }
   return parts.join("");
 }
-function assistantTurns(content, ts) {
+function assistantTurns(content, ts, promoteFinal = false) {
   if (!Array.isArray(content)) return [];
   const out = [];
   for (const block of content) {
     if (!block || typeof block !== "object") continue;
     const b = block;
     if (b.type === "text" && typeof b.text === "string") {
-      out.push({ kind: "agent-text", text: b.text, ts });
+      out.push(promoteFinal && b.text.trim().length > 0 ? { kind: "agent-webchat-final", text: b.text, ts } : { kind: "agent-text", text: b.text, ts });
     } else if (b.type === "tool_use" && (b.name === WA_REPLY_TOOL || b.name === WEBCHAT_REPLY_TOOL || b.name === CHANNEL_REPLY_TOOL)) {
       const text = b.input?.text;
       out.push({ kind: "agent-reply", text: typeof text === "string" ? text : "", ts });
@@ -8495,7 +8551,7 @@ function renderOrSuppressChannelInbound(u, ts, out, queuedPendingSuppress) {
     out.push(operatorInboundTurn(u, ts));
   }
 }
-function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map()) {
+function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(), turnCtx = {}) {
   const out = [];
   for (const line of lines) {
     if (!line || line[0] !== "{") continue;
@@ -8518,23 +8574,31 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
         out.push({ kind: "agent-error", code, raw, ts });
         continue;
       }
-      out.push(...assistantTurns(msg?.content, ts));
+      const isEnd = msg?.stop_reason === "end_turn";
+      out.push(...assistantTurns(msg?.content, ts, isEnd && turnCtx.lastChannelSource === "webchat"));
       continue;
     }
     if (row.type === "queue-operation" && row.operation === "enqueue") {
       const content = asString(row.content);
-      if (content !== null && CHANNEL_WRAPPER2.test(content) && !isScheduleSource(content)) {
+      if (content !== null && CHANNEL_WRAPPER2.test(content)) {
         const u = unwrapChannel(content);
-        out.push(operatorInboundTurn(u, ts));
-        queuedPendingSuppress.set(u.text, (queuedPendingSuppress.get(u.text) ?? 0) + 1);
+        turnCtx.lastChannelSource = u.source;
+        if (!isScheduleSource(content)) {
+          out.push(operatorInboundTurn(u, ts));
+          queuedPendingSuppress.set(u.text, (queuedPendingSuppress.get(u.text) ?? 0) + 1);
+        }
       }
       continue;
     }
     if (row.type === "attachment") {
       const att = row.attachment;
       const isChannelQueued = att?.type === "queued_command" && att.isMeta === true && typeof att.origin === "object" && att.origin !== null && att.origin.kind === "channel" && typeof att.prompt === "string";
-      if (isChannelQueued && !isScheduleSource(att.prompt)) {
-        renderOrSuppressChannelInbound(unwrapChannel(att.prompt), ts, out, queuedPendingSuppress);
+      if (isChannelQueued) {
+        const u = unwrapChannel(att.prompt);
+        turnCtx.lastChannelSource = u.source;
+        if (!isScheduleSource(att.prompt)) {
+          renderOrSuppressChannelInbound(u, ts, out, queuedPendingSuppress);
+        }
       }
       continue;
     }
@@ -8559,8 +8623,10 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
     // enqueue row AND this row both render and every channel message doubles.
     CHANNEL_WRAPPER2.test(text);
     if (isChannel) {
+      const u = unwrapChannel(text);
+      turnCtx.lastChannelSource = u.source;
       if (!isScheduleSource(text)) {
-        renderOrSuppressChannelInbound(unwrapChannel(text), ts, out, queuedPendingSuppress);
+        renderOrSuppressChannelInbound(u, ts, out, queuedPendingSuppress);
       }
     } else if (row.isMeta === true) {
       out.push({ kind: "harness-internal", text, ts });
@@ -8663,6 +8729,18 @@ function pickActivity(entries, grown, nowMs, concurrencyWindowMs) {
   return { hex: newest.hex, lastEmitAt: newest.mtimeMs, count };
 }
 
+// app/admin-types.ts
+var ACCEPT_MIME = "image/jpeg,image/png,image/gif,image/webp,application/pdf,text/plain,text/markdown,text/csv,text/html,text/calendar,application/zip,application/x-zip-compressed,application/vnd.openxmlformats-officedocument.wordprocessingml.document,application/vnd.oasis.opendocument.text,text/rtf,application/rtf,audio/ogg,audio/opus,audio/mp4,audio/x-m4a,audio/mpeg,audio/webm,audio/wav,video/mp4,.docx,.odt,.rtf,.opus,.ogg,.m4a,.mp4,.mp3,.wav,.webm";
+var SUPPORTED_MIME_SET = new Set(ACCEPT_MIME.split(",").filter((t) => !t.startsWith(".")));
+var MAX_ATTACHMENTS = 5;
+var MAX_FILE_BYTES = 50 * 1024 * 1024;
+
+// app/lib/audio-attachment-mime.ts
+function isMimeAdmitted(mimeType, supportedSet) {
+  const bare = mimeType.split(";")[0].trim().toLowerCase();
+  return supportedSet.has(bare);
+}
+
 // server/routes/whatsapp-reader.ts
 var app4 = new Hono();
 app4.get("/conversations", requireAdminSession, async (c) => {
@@ -8988,6 +9066,7 @@ data: ${JSON.stringify(obj)}
         log: (line) => console.log(line)
       });
       const queuedPendingSuppress = /* @__PURE__ */ new Map();
+      const turnCtx = {};
       const drain = () => {
         try {
           const { buf, end } = readFrom(jsonlPath, offset);
@@ -8995,7 +9074,7 @@ data: ${JSON.stringify(obj)}
           const { lines, nextOffset } = splitNewLines(buf, offset);
           offset = nextOffset;
           let n = 0;
-          for (const turn of parseTranscript(lines, queuedPendingSuppress)) {
+          for (const turn of parseTranscript(lines, queuedPendingSuppress, turnCtx)) {
             send(controller, enrichAdminAttachments(enrichDownloads(turn, scratchpadRoot)), offset);
             actx.lastParentTurns.push(turn);
             if (turn.kind === "agent-error") {
@@ -9015,7 +9094,7 @@ data: ${JSON.stringify(obj)}
           const { buf, end } = readFrom(jsonlPath, 0);
           offset = end;
           let n = 0;
-          for (const turn of parseTranscript(buf.toString("utf8").split("\n"), queuedPendingSuppress)) {
+          for (const turn of parseTranscript(buf.toString("utf8").split("\n"), queuedPendingSuppress, turnCtx)) {
             send(controller, enrichAdminAttachments(enrichDownloads(turn, scratchpadRoot)), offset);
             actx.lastParentTurns.push(turn);
             if (turn.kind === "agent-error") {
@@ -9140,7 +9219,8 @@ app4.get("/store-stream", requireAdminSession, (c) => {
     text: r.body,
     ts: r.dateSent,
     fromMe: r.fromMe,
-    senderName: r.senderName
+    senderName: r.senderName,
+    origin: r.origin
   });
   const readable = new ReadableStream({
     start(controller) {
@@ -9233,6 +9313,167 @@ data: ${JSON.stringify(turn)}
     headers: { "Content-Type": "text/event-stream", "Cache-Control": "no-cache", Connection: "keep-alive" }
   });
 });
+var MANUAL_TAG = "[wa-manual-send]";
+function mediaTypeForMime(mime) {
+  if (mime.startsWith("image/")) return "image";
+  if (mime.startsWith("audio/")) return "audio";
+  if (mime.startsWith("video/")) return "video";
+  return null;
+}
+app4.post("/reply", requireAdminSession, async (c) => {
+  const sendId = process.hrtime.bigint().toString(36).slice(-8);
+  const t0 = Date.now();
+  const exit = (outcome) => console.log(`${MANUAL_TAG} op=exit sendId=${sendId} ranMs=${Date.now() - t0} outcome=${outcome}`);
+  try {
+    const ct = c.req.header("content-type") ?? "";
+    let accountIdRaw;
+    let remoteJid;
+    let text;
+    let files = [];
+    if (ct.includes("multipart/form-data")) {
+      const form = await c.req.formData();
+      accountIdRaw = form.get("accountId")?.toString();
+      remoteJid = form.get("remoteJid")?.toString();
+      const t = form.get("text")?.toString();
+      text = t && t.trim().length ? t : void 0;
+      files = form.getAll("files").filter((f) => f instanceof File);
+    } else {
+      const body = await c.req.json().catch(() => ({}));
+      accountIdRaw = typeof body.accountId === "string" ? body.accountId : void 0;
+      remoteJid = typeof body.remoteJid === "string" ? body.remoteJid : void 0;
+      text = typeof body.text === "string" && body.text.trim().length ? body.text : void 0;
+    }
+    console.log(`${MANUAL_TAG} op=request sendId=${sendId} accountId=${accountIdRaw ?? ""} remoteJid=${remoteJid ?? ""} textLen=${text?.length ?? 0} fileCount=${files.length}`);
+    if (!accountIdRaw || !remoteJid) {
+      exit("rejected");
+      return c.json({ error: "accountId and remoteJid are required" }, 400);
+    }
+    if (!text && files.length === 0) {
+      exit("rejected");
+      return c.json({ error: "nothing to send: provide text or attachments" }, 400);
+    }
+    if (files.length > MAX_ATTACHMENTS) {
+      exit("rejected");
+      return c.json({ error: `at most ${MAX_ATTACHMENTS} attachments` }, 400);
+    }
+    let accountId;
+    try {
+      accountId = validateAccountId(accountIdRaw);
+    } catch {
+      exit("rejected");
+      return c.json({ error: "invalid accountId" }, 400);
+    }
+    const validAccount = isValidAccountId(accountId);
+    console.log(`${MANUAL_TAG} op=scope sendId=${sendId} accountId=${accountId} validAccount=${validAccount}`);
+    if (!validAccount) {
+      exit("rejected");
+      return c.json({ error: "unknown account" }, 400);
+    }
+    if (isGroupJid(remoteJid)) {
+      console.log(`${MANUAL_TAG} op=reject sendId=${sendId} reason=group-send-blocked`);
+      exit("rejected");
+      return c.json({ error: "group conversations are read-only", reason: "group-send-blocked" }, 403);
+    }
+    if (!isUserJid(remoteJid)) {
+      exit("rejected");
+      return c.json({ error: "invalid remoteJid" }, 400);
+    }
+    const convo = readConversation(accountId, remoteJid);
+    const hasConversation = convo.length > 0;
+    console.log(`${MANUAL_TAG} op=guard sendId=${sendId} remoteJid=${remoteJid} hasConversation=${hasConversation}`);
+    if (!hasConversation) {
+      console.log(`${MANUAL_TAG} op=reject sendId=${sendId} reason=no-existing-conversation`);
+      exit("rejected");
+      return c.json({ error: "no existing conversation with this contact", reason: "no-existing-conversation" }, 403);
+    }
+    const template = convo[convo.length - 1];
+    for (const f of files) {
+      if (!isMimeAdmitted(f.type, SUPPORTED_MIME_SET)) {
+        exit("rejected");
+        return c.json({ error: `unsupported file type: ${f.type}` }, 400);
+      }
+      if (f.size > MAX_FILE_BYTES) {
+        exit("rejected");
+        return c.json({ error: `"${f.name}" exceeds the 50 MB limit` }, 400);
+      }
+    }
+    const res = resolveSocket(accountId);
+    if (!res.ok) {
+      console.log(`${MANUAL_TAG} op=socket sendId=${sendId} accountId=${accountId} result=${res.reason} presentKeys=${res.presentKeys.join(",") || "none"}`);
+      exit("error");
+      if (res.reason === "key-miss") return c.json({ error: `No WhatsApp socket is registered for account "${accountId}" (present: ${res.presentKeys.join(", ") || "none"}). This is an account-keying mismatch, not a dropped connection.` }, 503);
+      return c.json({ error: `WhatsApp account "${accountId}" is registered but its socket is disconnected.` }, 503);
+    }
+    console.log(`${MANUAL_TAG} op=socket sendId=${sendId} accountId=${accountId} result=ok socketAccountId=${res.accountId}`);
+    const record = (waMessageId, body) => {
+      const nowIso = (/* @__PURE__ */ new Date()).toISOString();
+      const rec = {
+        messageId: `whatsapp-live:${res.accountId}:${remoteJid}:${waMessageId}`,
+        sessionId: template.sessionId,
+        dateSent: nowIso,
+        body,
+        fromMe: true,
+        senderTelephone: template.fromMe ? template.senderTelephone : "",
+        senderName: null,
+        remoteJid,
+        msgKeyId: waMessageId,
+        quotedId: null,
+        quotedSender: null,
+        scope: template.scope,
+        origin: "operator-manual",
+        createdAt: nowIso
+      };
+      appendMessage(accountId, rec);
+      const present = readConversation(accountId, remoteJid).some((r) => r.messageId === rec.messageId);
+      console.log(`${MANUAL_TAG} op=recorded sendId=${sendId} waMessageId=${waMessageId} present=${present}`);
+    };
+    let sent = 0;
+    if (text) {
+      const r = await sendTextMessage(res.sock, remoteJid, text, { accountId: res.accountId });
+      if (!r.success) {
+        console.log(`${MANUAL_TAG} op=send-fail sendId=${sendId} kind=text error=${r.error ?? ""}`);
+        exit("error");
+        return c.json({ error: r.error ?? "send failed" }, 500);
+      }
+      console.log(`${MANUAL_TAG} op=sent sendId=${sendId} kind=text waMessageId=${r.messageId ?? ""}`);
+      if (r.messageId) record(r.messageId, text);
+      sent++;
+    }
+    for (let i = 0; i < files.length; i++) {
+      const stored = await storeAttachment(accountId, files[i]);
+      console.log(`${MANUAL_TAG} op=staged sendId=${sendId} idx=${i} bytes=${stored.sizeBytes} mime=${stored.mimeType}`);
+      const kind = mediaTypeForMime(stored.mimeType);
+      let mid;
+      if (kind) {
+        const buffer = Buffer.from(await files[i].arrayBuffer());
+        const r = await sendMediaMessage(res.sock, remoteJid, { type: kind, buffer, mimetype: stored.mimeType, filename: stored.filename, ptt: kind === "audio" }, { accountId: res.accountId });
+        if (!r.success) {
+          console.log(`${MANUAL_TAG} op=send-fail sendId=${sendId} kind=${kind} idx=${i} error=${r.error ?? ""}`);
+          exit("error");
+          return c.json({ error: r.error ?? "media send failed" }, 500);
+        }
+        mid = r.messageId;
+      } else {
+        const r = await sendWhatsAppDocument({ to: remoteJid, filePath: stored.storagePath, accountId: res.accountId, maxyAccountId: accountId, platformRoot: PLATFORM_ROOT });
+        if (!r.ok) {
+          console.log(`${MANUAL_TAG} op=send-fail sendId=${sendId} kind=document idx=${i} error=${r.error}`);
+          exit("error");
+          return c.json({ error: r.error }, r.status);
+        }
+        mid = r.messageId;
+      }
+      console.log(`${MANUAL_TAG} op=sent sendId=${sendId} kind=${kind ?? "document"} idx=${i} waMessageId=${mid ?? ""}`);
+      if (mid) record(mid, `[sent ${stored.filename}]`);
+      sent++;
+    }
+    exit("delivered");
+    return c.json({ success: true, sent });
+  } catch (err) {
+    console.error(`${MANUAL_TAG} op=error sendId=${sendId} error=${String(err)}`);
+    exit("error");
+    return c.json({ error: String(err) }, 500);
+  }
+});
 var whatsapp_reader_default = app4;
 
 // server/routes/public-reader.ts
@@ -21855,7 +22096,24 @@ function createWaChannelRoutes(deps) {
     if (typeof senderId !== "string" || typeof sessionId !== "string" || typeof replied !== "boolean") {
       return c.json({ error: "senderId, sessionId and replied required" }, 400);
     }
+    const interactive = body?.interactive === true;
+    const finalText = typeof body?.finalText === "string" ? body.finalText : "";
     const sid = sessionId.slice(0, 8);
+    const deliver = interactive && finalText.trim().length > 0;
+    if (deliver) {
+      const bytes = Buffer.byteLength(finalText, "utf8");
+      try {
+        await deps.sendOutbound(senderId, finalText);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(
+          `[whatsapp-native] op=turn-strand-anomaly senderId=${senderId} sessionId=${sid} interactive=yes bytes=${bytes} delivered=undelivered error=${message}`
+        );
+        return c.json({ ok: true, delivered: "undelivered" });
+      }
+      console.error(`[whatsapp-native] op=turn-end sessionId=${sid} replied=${replied ? "yes" : "no"} delivered=fallback bytes=${bytes}`);
+      return c.json({ ok: true, delivered: "fallback" });
+    }
     if (replied) {
       console.error(`[whatsapp-native] op=turn-end sessionId=${sid} replied=yes delivered=reply`);
       return c.json({ ok: true, delivered: "reply" });
@@ -21976,6 +22234,11 @@ var WaGateway = class {
     console.error(
       `[whatsapp-native] op=inbound senderId=${input.senderId} accountId=${input.accountId} bytes=${bytes} ${mediaField} source=${source} delivery=${willDeliverNow ? "immediate" : "queued"}`
     );
+    if (source === "schedule" && (hadSubscriber || this.spawning.has(input.senderId))) {
+      console.error(
+        `[whatsapp-native] op=coalesced-onto-live-session eventId=${input.scheduleProvenance?.eventId ?? "-"} senderId=${input.senderId} droppedSeat=${input.scheduledSessionId ?? "-"} reason=${hadSubscriber ? "live-subscriber" : "spawn-in-flight"}`
+      );
+    }
     if (!hadSubscriber && !this.spawning.has(input.senderId)) {
       this.spawning.add(input.senderId);
       console.error(`[whatsapp-native] op=spawn-trigger senderId=${input.senderId}`);
@@ -22282,17 +22545,20 @@ function createWebchatChannelRoutes(deps) {
     if (typeof key !== "string" || typeof sessionId !== "string" || typeof replied !== "boolean") {
       return c.json({ error: "key, sessionId and replied required" }, 400);
     }
+    const interactive = body?.interactive === true;
+    const finalBytes = typeof body?.finalBytes === "number" && Number.isFinite(body.finalBytes) ? body.finalBytes : 0;
     const k = key.slice(0, 8);
     const sid = sessionId.slice(0, 8);
+    if (interactive && finalBytes > 0) {
+      console.error(`[webchat-native] op=turn-end channel=webchat key=${k} sessionId=${sid} replied=${replied ? "yes" : "no"} delivered=fallback bytes=${finalBytes}`);
+      return c.json({ ok: true, delivered: "fallback" });
+    }
     if (replied) {
+      console.error(`[webchat-native] op=turn-end channel=webchat key=${k} sessionId=${sid} delivered=reply`);
       return c.json({ ok: true, delivered: "reply" });
     }
-    const finalBytes = typeof body?.finalBytes === "number" && Number.isFinite(body.finalBytes) ? body.finalBytes : 0;
-    if (finalBytes <= 0) {
-      return c.json({ ok: true, delivered: "none" });
-    }
-    console.error(`[webchat-native] op=turn-undelivered channel=webchat key=${k} sessionId=${sid} bytes=${finalBytes}`);
-    return c.json({ ok: true, delivered: "undelivered" });
+    console.error(`[webchat-native] op=turn-end channel=webchat key=${k} sessionId=${sid} delivered=none`);
+    return c.json({ ok: true, delivered: "none" });
   });
   return app61;
 }
@@ -23225,7 +23491,24 @@ function createTelegramChannelRoutes(deps) {
     if (typeof key !== "string" || typeof sessionId !== "string" || typeof replied !== "boolean") {
       return c.json({ error: "key, sessionId and replied required" }, 400);
     }
+    const interactive = body?.interactive === true;
+    const finalText = typeof body?.finalText === "string" ? body.finalText : "";
     const sid = sessionId.slice(0, 8);
+    const deliver = interactive && finalText.trim().length > 0;
+    if (deliver) {
+      const bytes = Buffer.byteLength(finalText, "utf8");
+      try {
+        await deps.sendOutbound(key, finalText);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        console.error(
+          `[telegram-native] op=turn-strand-anomaly key=${key} sessionId=${sid} interactive=yes bytes=${bytes} delivered=undelivered error=${message}`
+        );
+        return c.json({ ok: true, delivered: "undelivered" });
+      }
+      console.error(`[telegram-native] op=turn-end key=${key} sessionId=${sid} replied=${replied ? "yes" : "no"} delivered=fallback bytes=${bytes}`);
+      return c.json({ ok: true, delivered: "fallback" });
+    }
     if (replied) {
       console.error(`[telegram-native] op=turn-end key=${key} sessionId=${sid} replied=yes delivered=reply`);
       return c.json({ ok: true, delivered: "reply" });
@@ -23306,6 +23589,11 @@ var TelegramGateway = class {
     console.error(
       `[telegram-native] op=inbound key=${input.senderId} accountId=${input.accountId} botType=${input.role} bytes=${bytes} source=${source} delivery=${willDeliverNow ? "immediate" : "queued"}`
     );
+    if (source === "schedule" && (hadSubscriber || this.spawning.has(input.senderId))) {
+      console.error(
+        `[telegram-native] op=coalesced-onto-live-session eventId=${input.scheduleProvenance?.eventId ?? "-"} senderId=${input.senderId} droppedSeat=${input.scheduledSessionId ?? "-"} reason=${hadSubscriber ? "live-subscriber" : "spawn-in-flight"}`
+      );
+    }
     if (!hadSubscriber && !this.spawning.has(input.senderId)) {
       this.spawning.add(input.senderId);
       console.error(`[telegram-native] op=spawn-trigger key=${input.senderId} role=${input.role}`);
@@ -25351,6 +25639,7 @@ for (const acct of listValidAccounts()) {
   cleanupLeakedPremiumSubs(acct.accountDir, acct.config, acct.accountId);
 }
 purgeNonSocketAdminPhonesAtBoot();
+void preloadEmbedModel();
 warnOnChannelAdminBindingDrift();
 var bootEnabled = Array.isArray(bootAccountConfig?.enabledPlugins) ? bootAccountConfig.enabledPlugins : [];
 var bootDelivered = [];

package/payload/server/public/assets/AdminLoginScreens-yAIhWcGc.js

@@ -1 +0,0 @@
-import{o as e}from"./chunk-Ck5AOu5v.js";import{_ as t,b as n,h as r,w as i,y as a}from"./useSubAccountSwitcher-DADvGnr1.js";import{i as o}from"./admin-types-ClHBm0ni.js";import{b as s,y as c}from"./AdminShell-Bk1AFQ4D.js";import{t as l}from"./Checkbox-B_lfjsqd.js";var u=`admin-landing-redirected`,d=`/graph`;function f(e){return e.variant===`operator`?!1:e.appState===`chat`&&!e.alreadyRedirected}var p=e(i(),1);function m(e=`admin`){let[t,r]=(0,p.useState)(`loading`),[i,a]=(0,p.useState)(``),[c,l]=(0,p.useState)(``),[m,h]=(0,p.useState)(``),[g,_]=(0,p.useState)(!1),[v,y]=(0,p.useState)(!1),[b,x]=(0,p.useState)(!1),[S,C]=(0,p.useState)(!1),[w,T]=(0,p.useState)(!1),[E,D]=(0,p.useState)(null),[O,k]=(0,p.useState)(null),[A,j]=(0,p.useState)(void 0),[M,N]=(0,p.useState)(null),[P,F]=(0,p.useState)(void 0),[I,L]=(0,p.useState)(null),[R,z]=(0,p.useState)(null),[B,V]=(0,p.useState)(void 0),H=(0,p.useRef)(void 0),[U,W]=(0,p.useState)(!1),[G,K]=(0,p.useState)(!0);(0,p.useEffect)(()=>{typeof window>`u`||fetch(`/api/remote-auth/status`).then(e=>e.ok?e.json():null).then(e=>{e?.configured&&W(!0)}).catch(()=>{})},[]);let q=(0,p.useRef)(null),J=(0,p.useRef)(null);(0,p.useEffect)(()=>{async function e(){let e=null;try{e=sessionStorage.getItem(`maxy-admin-session-key`)}catch{}if(!e)return!1;try{let t=await fetch(`/api/admin/session?session_key=${encodeURIComponent(e)}`);if(t.status===401){try{sessionStorage.removeItem(`maxy-admin-session-key`)}catch{}return!1}if(!t.ok)return!1;let n=await t.json();D(n.session_key),z(n.sessionId??null),j(n.businessName),N(n.role??null),F(n.userName===void 0?null:n.userName),L(n.avatar??null);let i=o(n.thinkingView);return H.current=i,V(i),r(`chat`),!0}catch(e){return console.error(`[admin] session restore failed:`,e),!1}}async function t(n=2){try{let i=await fetch(`/api/health`);if(!i.ok){if(n>0)return await new Promise(e=>setTimeout(e,1500)),t(n-1);console.error(`[admin] health check returned ${i.status} after retries`),r(`set-pin`);return}let a=await i.json();if(!a.pin_configured){r(`set-pin`);return}K(!!a.claude_authenticated);let o=!1;try{o=new URLSearchParams(window.location.search).get(`connect`)===`claude`}catch{}if(o){try{let e=new URL(window.location.href);e.searchParams.delete(`connect`),window.history.replaceState(null,``,e.pathname+e.search+e.hash)}catch{}if(!a.claude_authenticated){r(`connect-claude`);return}}if(await e())return;r(`enter-pin`)}catch(e){if(n>0)return await new Promise(e=>setTimeout(e,1500)),t(n-1);console.error(`[admin] health check failed:`,e),r(`set-pin`)}}t()},[]),(0,p.useEffect)(()=>{t===`chat`&&fetch(`/api/admin/claude-info`).then(e=>{if(e.ok)return e.json()}).then(e=>{e&&k(e)}).catch(()=>{})},[t]),(0,p.useEffect)(()=>{if(typeof window>`u`)return;let n=!1;try{n=sessionStorage.getItem(u)===`1`}catch{}if(f({appState:t,alreadyRedirected:n,variant:e})){try{sessionStorage.setItem(u,`1`)}catch{}console.info(`[admin-ui] landing-redirect target=${d}`),window.location.replace(d)}},[t,e]);let Y=(0,p.useRef)(null);(0,p.useEffect)(()=>{if(t!==`chat`)return;let e=setInterval(async()=>{try{let e=await fetch(`/api/health`);if(e.ok){let t=await e.json();K(t.auth_status!==`dead`&&t.auth_status!==`missing`)}}catch{}if(E)try{let e=await fetch(`/api/admin/session?session_key=${encodeURIComponent(E)}`);if(e.status!==401)return;let t=(await e.clone().json().catch(()=>null))?.code??`unknown-401`;if(t===`remote-auth-required`){n(`heartbeat`,`/api/admin/session`);return}console.warn(`[admin-auth] outcome=heartbeat-detected-expiry code=${t}`),Y.current?.()}catch{}},300*1e3);return()=>clearInterval(e)},[t,E]),(0,p.useEffect)(()=>{t===`connect-claude`&&fetch(`/api/health`).then(e=>e.ok?e.json():null).then(e=>{e?.claude_authenticated&&(K(!0),r(`enter-pin`))}).catch(()=>{})},[t]);async function X(e,t){y(!0);try{let i=await fetch(`/api/admin/session`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:e,...t?{accountId:t}:{}})});if(!i.ok){let e=await i.json().catch(()=>({}));if(i.status===401&&e?.code===`remote-auth-required`){n(`enter-pin`,`/api/admin/session`);return}h(e.error||`Invalid PIN`);return}let s=await i.json();D(s.session_key),z(s.sessionId??null),j(s.businessName),N(s.role??null),F(s.userName===void 0?null:s.userName),L(s.avatar??null);let c=o(s.thinkingView);H.current=c,V(c);try{sessionStorage.setItem(`maxy-admin-session-key`,s.session_key)}catch{}a(``),r(`chat`)}catch(e){console.error(`[admin] connection error:`,e),h(`Could not connect.`)}finally{y(!1)}}let Z=(0,p.useCallback)(async e=>{if(e.preventDefault(),v)return;h(``);let t=c.trim();if(!t){h(`Please enter your name.`);return}if(i.length<4){h(`PIN must be at least 4 characters.`);return}let o=i;y(!0);try{let e=await fetch(`/api/onboarding/set-pin`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:o,name:t})});if(!e.ok){let t=await e.json().catch(()=>({}));if(e.status===401&&t?.code===`remote-auth-required`){n(`set-pin`,`/api/onboarding/set-pin`);return}if(e.status===409){console.log(`[admin] PIN already configured — re-checking health`);try{let e=await fetch(`/api/health`);if(e.ok){let n=await e.json();n.pin_configured&&n.claude_authenticated?r(`enter-pin`):n.pin_configured?r(`connect-claude`):h(t.error||`Failed to set PIN.`)}else r(`enter-pin`)}catch{r(`enter-pin`)}return}h(t.error||`Failed to set PIN.`);return}let i=await fetch(`/api/health`);if((i.ok?await i.json():null)?.claude_authenticated){await X(o);return}a(``),r(`connect-claude`)}catch(e){console.error(`[admin] connection error:`,e),h(`Could not connect.`)}finally{y(!1)}},[i,v,c]),Q=(0,p.useCallback)(async e=>{e.preventDefault(),h(``),await X(i)},[i]),ee=(0,p.useCallback)(async()=>{T(!0);try{if(!await s())return console.warn(`[admin-ui] claude-disconnect not verified — credentials may persist; staying put`),!1;K(!1),D(null),N(null),F(void 0),L(null);try{sessionStorage.removeItem(`maxy-admin-session-key`),sessionStorage.removeItem(u)}catch{}return r(`connect-claude`),!0}finally{T(!1)}},[]),$=(0,p.useCallback)(()=>{D(null),N(null),F(void 0),L(null);try{sessionStorage.removeItem(`maxy-admin-session-key`),sessionStorage.removeItem(u)}catch{}a(``),h(``),r(`enter-pin`)},[]);return(0,p.useEffect)(()=>{Y.current=$},[$]),{appState:t,setAppState:r,pin:i,setPin:a,operatorName:c,setOperatorName:l,pinError:m,setPinError:h,showPin:g,setShowPin:_,pinLoading:v,authPolling:b,setAuthPolling:x,authLoading:S,setAuthLoading:C,disconnecting:w,cacheKey:E,setCacheKey:D,claudeInfo:O,setClaudeInfo:k,businessName:A,role:M,userName:P,userAvatar:I,sessionId:R,setSessionId:z,expandAll:B,setExpandAll:V,expandAllDefaultRef:H,remoteAuthEnabled:U,claudeConnected:G,pinInputRef:q,setPinFormRef:J,handleSetPin:Z,handleLogin:Q,handleDisconnect:ee,handleLogout:$}}var h=a();function g({inputRef:e,value:t,onChange:n,onComplete:r,showPin:i,autoFocus:a}){let o=(0,p.useRef)([]);function s(e,r){r.key===`Backspace`?(r.preventDefault(),t[e]?n(t.slice(0,e)+t.slice(e+1)):e>0&&(n(t.slice(0,e-1)+t.slice(e)),o.current[e-1]?.focus())):r.key===`ArrowLeft`&&e>0?o.current[e-1]?.focus():r.key===`ArrowRight`&&e<5?o.current[e+1]?.focus():r.key===`Enter`&&(r.preventDefault(),r.currentTarget.form?.requestSubmit())}function c(e,i){let a=i.nativeEvent.data;if(!a||!/^\d$/.test(a))return;let s=t.split(``);for(s[e]=a;s.length<e;)s.push(``);let c=s.join(``).replace(/\D/g,``).slice(0,6);n(c),c.length===6?r?.(c):e<5&&o.current[e+1]?.focus()}function l(e){e.preventDefault();let t=e.clipboardData.getData(`text`).replace(/\D/g,``).slice(0,6);t&&(n(t),t.length===6?r?.(t):o.current[t.length]?.focus())}return(0,h.jsx)(`div`,{className:`pin-field`,children:Array.from({length:6}).map((n,r)=>(0,h.jsx)(`input`,{ref:t=>{o.current[r]=t,r===0&&e&&(e.current=t)},type:`text`,inputMode:`numeric`,className:`pin-box${t[r]?` pin-box-filled`:``}`,value:t[r]?i?t[r]:`•`:``,onKeyDown:e=>s(r,e),onInput:e=>c(r,e),onPaste:l,onFocus:e=>e.target.select(),autoFocus:a&&r===0,autoComplete:`off`,maxLength:1,"aria-label":`PIN digit ${r+1}`},r))})}function _(e){let{pin:n,setPin:i,showPin:a,setShowPin:o,pinLoading:s,pinError:u,pinInputRef:d,setPinFormRef:f,onSubmit:p,operatorName:m,setOperatorName:_}=e;return(0,h.jsx)(`div`,{className:`connect-page`,children:(0,h.jsxs)(`div`,{className:`connect-content`,children:[(0,h.jsx)(`img`,{src:t,alt:r.productName,className:`connect-logo connect-logo--maxy`}),!r.logoContainsName&&(0,h.jsxs)(`h1`,{className:`connect-title`,children:[`Welcome to `,r.productName]}),(0,h.jsxs)(`p`,{className:`connect-subtitle`,children:[`Tell `,r.productName,` who you are, then choose a PIN.`]}),(0,h.jsxs)(`form`,{ref:f,onSubmit:p,className:`connect-pin-form`,children:[(0,h.jsxs)(`div`,{className:`pin-input-row`,children:[(0,h.jsx)(`input`,{type:`text`,className:`connect-name-input`,placeholder:`Your full name`,value:m,onChange:e=>_(e.target.value),autoComplete:`name`,autoFocus:!0,required:!0,"aria-label":`Your full name`}),(0,h.jsx)(`div`,{style:{width:38,flexShrink:0},"aria-hidden":`true`})]}),(0,h.jsxs)(`div`,{className:`pin-input-row`,children:[(0,h.jsx)(g,{inputRef:d,value:n,onChange:i,onComplete:()=>{},showPin:a}),(0,h.jsx)(c,{variant:`send`,type:`submit`,disabled:!n||!m.trim(),loading:s,"aria-label":`Set PIN`,children:(0,h.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,h.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,h.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,h.jsx)(l,{checked:a,onChange:()=>o(e=>!e),label:`Show PIN`})]}),u&&(0,h.jsx)(`p`,{className:`admin-pin-error`,children:u})]})})}function v(e){let{pin:n,setPin:i,showPin:a,setShowPin:o,pinLoading:s,pinError:u,pinInputRef:d,onSubmit:f,remoteAuthEnabled:p,onSignOutRemote:m}=e;return(0,h.jsxs)(`div`,{className:`connect-page`,children:[p&&m&&(0,h.jsx)(`button`,{type:`button`,className:`connect-signout`,onClick:m,children:`Sign out`}),(0,h.jsxs)(`div`,{className:`connect-content`,children:[(0,h.jsx)(`img`,{src:t,alt:r.productName,className:`connect-logo connect-logo--maxy`}),!r.logoContainsName&&(0,h.jsx)(`h1`,{className:`connect-title`,children:r.productName}),(0,h.jsxs)(`form`,{onSubmit:f,className:`connect-pin-form`,children:[(0,h.jsxs)(`div`,{className:`pin-input-row`,children:[(0,h.jsx)(g,{inputRef:d,value:n,onChange:i,onComplete:()=>{},showPin:a,autoFocus:!0}),(0,h.jsx)(c,{variant:`send`,type:`submit`,disabled:!n,loading:s,children:(0,h.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,h.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,h.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,h.jsx)(`div`,{className:`pin-options`,children:(0,h.jsx)(l,{checked:a,onChange:()=>o(e=>!e),label:`Show PIN`})})]}),u&&(0,h.jsx)(`p`,{className:`admin-pin-error`,children:u})]})]})}function y(e){let{authPolling:n,setAuthPolling:i,authLoading:a,setAuthLoading:o,pinError:s,setPinError:l,setAppState:u}=e,[d,f]=(0,p.useState)(!1),[m,g]=(0,p.useState)(!1),[_,v]=(0,p.useState)(``),[y,b]=(0,p.useState)(``),[x,S]=(0,p.useState)(``);async function C(){S(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`paste-code`,code:y})})).json();e.accepted?(S(`Code submitted. Finishing sign-in…`),b(``)):S(e.error||`Could not submit code.`)}catch(e){console.error(`[admin] paste-code error:`,e),S(`Could not submit code.`)}}async function w(){g(!0),l(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`launch-browser`})})).json();e.launched?f(!0):e.error&&l(e.error)}catch(e){console.error(`[admin] browser launch error:`,e),l(`Could not launch browser.`)}g(!1)}async function T(){o(!0),l(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`})).json();if(e.started){i(!0),f(!0),o(!1),v(e.transport||``);for(let e=0;e<120;e++)if(await new Promise(e=>setTimeout(e,2e3)),(await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`wait`})})).json()).authenticated){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),u(`enter-pin`);return}l(`Timed out waiting for sign-in. Try again.`),i(!1)}else e.error&&l(e.error)}catch(e){console.error(`[admin] auth flow error:`,e),l(`Could not start auth flow.`)}o(!1)}async function E(){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),i(!1),l(``)}return n||d?(0,h.jsxs)(`div`,{style:{display:`flex`,flexDirection:`column`,height:`100dvh`,overflow:`auto`},children:[(0,h.jsxs)(`header`,{className:`chat-header`,style:{paddingBottom:`12px`,flexShrink:0,position:`relative`,maxWidth:`680px`,width:`100%`,margin:`0 auto`,padding:`24px 20px 12px`},children:[n?(0,h.jsx)(`button`,{onClick:E,style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Cancel`,children:`✕`}):(0,h.jsx)(`button`,{onClick:()=>f(!1),style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Close browser`,children:`✕`}),(0,h.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`chat-logo`}),(0,h.jsx)(`h1`,{className:`chat-tagline`,children:`Connect Claude`}),(0,h.jsx)(`p`,{className:`chat-intro`,children:n?`Sign in and authorize in the browser below.`:`Open your email or prepare your accounts, then sign in.`}),!n&&(0,h.jsx)(`div`,{style:{marginTop:`12px`},children:(0,h.jsx)(c,{variant:`primary`,onClick:T,disabled:a,children:a?(0,h.jsxs)(h.Fragment,{children:[(0,h.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`})}),n&&_===`native`&&(0,h.jsxs)(`div`,{style:{marginTop:`14px`,maxWidth:`420px`,margin:`14px auto 0`,display:`flex`,flexDirection:`column`,gap:`8px`},children:[(0,h.jsx)(`label`,{style:{fontSize:`12px`,color:`#999`,lineHeight:1.4},children:`If the browser didn't finish sign-in, paste the code or full redirect URL from Claude's page:`}),(0,h.jsxs)(`div`,{style:{display:`flex`,gap:`8px`},children:[(0,h.jsx)(`input`,{type:`text`,value:y,onChange:e=>b(e.target.value),placeholder:`Paste code or redirect URL`,style:{flex:1,padding:`8px 10px`,fontSize:`13px`,border:`1px solid #ccc`,borderRadius:`6px`}}),(0,h.jsx)(c,{variant:`primary`,onClick:C,disabled:!y.trim(),children:`Submit`})]}),x&&(0,h.jsx)(`p`,{style:{fontSize:`12px`,color:`#999`,margin:0},children:x})]})]}),(0,h.jsx)(`div`,{style:{flex:1,display:`flex`,flexDirection:`column`,minHeight:0,gap:`10px`,padding:`0 0 16px`},children:(0,h.jsx)(`iframe`,{src:`/vnc-viewer.html`,style:{flex:1,width:`100%`,minHeight:0,border:`none`,background:`#111`,display:`block`},title:`Claude Sign-in`})}),s&&(0,h.jsx)(`p`,{className:`admin-pin-error`,style:{textAlign:`center`,padding:`0 20px 16px`},children:s})]}):(0,h.jsx)(`div`,{className:`connect-page`,children:(0,h.jsxs)(`div`,{className:`connect-content`,children:[(0,h.jsxs)(`div`,{className:`connect-logos`,children:[(0,h.jsx)(`div`,{className:`connect-logo-wrap`,children:(0,h.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`connect-logo`})}),(0,h.jsx)(`svg`,{className:`connect-arrow`,viewBox:`0 0 48 24`,fill:`none`,xmlns:`http://www.w3.org/2000/svg`,children:(0,h.jsx)(`path`,{d:`M0 12h44m0 0l-8-8m8 8l-8 8`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`})}),(0,h.jsxs)(`div`,{className:`connect-logo-wrap`,children:[(0,h.jsx)(`img`,{src:t,alt:r.productName,className:`connect-logo connect-logo--maxy`}),!r.logoContainsName&&(0,h.jsx)(`span`,{className:`connect-logo-label`,children:r.productName})]})]}),(0,h.jsxs)(`h1`,{className:`connect-title`,children:[`Connect Claude to power `,r.productName]}),(0,h.jsx)(`p`,{className:`connect-subtitle`,children:`Sign in with your Anthropic account to get started.`}),(0,h.jsx)(c,{variant:`primary`,onClick:T,disabled:a,children:a?(0,h.jsxs)(h.Fragment,{children:[(0,h.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`}),(0,h.jsx)(`p`,{style:{marginTop:`6px`,fontSize:`11px`,color:`#999`,maxWidth:`300px`,textAlign:`center`,lineHeight:`1.4`},children:`First time? You may need to sign into your email and Anthropic account in the browser before connecting.`}),(0,h.jsx)(`button`,{onClick:w,disabled:m,style:{marginTop:`12px`,background:`none`,border:`none`,color:`var(--color-primary, #666)`,fontSize:`13px`,cursor:`pointer`,textDecoration:`underline`,textUnderlineOffset:`3px`},children:m?`Launching…`:`Open browser first`}),s&&(0,h.jsx)(`p`,{className:`admin-pin-error`,children:s})]})})}function b({auth:e}){return e.appState===`loading`?(0,h.jsx)(`div`,{className:`connect-page`}):e.appState===`set-pin`?(0,h.jsx)(_,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,setPinFormRef:e.setPinFormRef,onSubmit:e.handleSetPin,operatorName:e.operatorName,setOperatorName:e.setOperatorName}):e.appState===`connect-claude`?(0,h.jsx)(y,{authPolling:e.authPolling,setAuthPolling:e.setAuthPolling,authLoading:e.authLoading,setAuthLoading:e.setAuthLoading,pinError:e.pinError,setPinError:e.setPinError,setAppState:e.setAppState}):e.appState===`enter-pin`?(0,h.jsx)(v,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,onSubmit:e.handleLogin,remoteAuthEnabled:e.remoteAuthEnabled,onSignOutRemote:()=>{console.info(`[admin-ui] remote-auth sign-out → /__remote-auth/logout`),window.location.href=`/__remote-auth/logout`}}):null}export{m as n,b as t};