@rubytech/create-maxy-code 0.1.462 → 0.1.464

package/payload/server/public/chat.html

@@ -5,7 +5,7 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Chat — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/chat-CufidiBQ.js"></script>
+  <script type="module" crossorigin src="/assets/chat-DYT5H81o.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-Ck5AOu5v.js">
   <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CU-lOxTd.js">
   <link rel="modulepreload" crossorigin href="/assets/useSelectionMode-DDmLmPph.js">
@@ -17,7 +17,7 @@
   <link rel="modulepreload" crossorigin href="/assets/useCopyFeedback-rOWd_lzl.js">
   <link rel="modulepreload" crossorigin href="/assets/chevron-left-BnpVBu51.js">
   <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-D_5cETGt.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-84Fdwiu_.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-BoPorLg-.js">
   <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-pu0jjLCz.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>

package/payload/server/public/operator.html

@@ -5,7 +5,7 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Operator — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/operator-Cj0B_usT.js"></script>
+  <script type="module" crossorigin src="/assets/operator-gm2eP4r6.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-Ck5AOu5v.js">
   <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CU-lOxTd.js">
   <link rel="modulepreload" crossorigin href="/assets/useSelectionMode-DDmLmPph.js">
@@ -19,7 +19,7 @@
   <link rel="modulepreload" crossorigin href="/assets/useCopyFeedback-rOWd_lzl.js">
   <link rel="modulepreload" crossorigin href="/assets/chevron-left-BnpVBu51.js">
   <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-D_5cETGt.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-84Fdwiu_.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-BoPorLg-.js">
   <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-pu0jjLCz.css">
   <link rel="stylesheet" crossorigin href="/assets/AdminLoginScreens-CWMpccrR.css">
   <link rel="stylesheet" href="/brand-defaults.css">

package/payload/server/public/public.html

@@ -5,7 +5,7 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/public-BkNW9e9T.js"></script>
+  <script type="module" crossorigin src="/assets/public-DqJk6qgW.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-Ck5AOu5v.js">
   <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CU-lOxTd.js">
   <link rel="modulepreload" crossorigin href="/assets/useSelectionMode-DDmLmPph.js">
@@ -17,7 +17,7 @@
   <link rel="modulepreload" crossorigin href="/assets/useCopyFeedback-rOWd_lzl.js">
   <link rel="modulepreload" crossorigin href="/assets/chevron-left-BnpVBu51.js">
   <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-D_5cETGt.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-84Fdwiu_.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-BoPorLg-.js">
   <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-pu0jjLCz.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>

package/payload/server/server.js

@@ -2188,6 +2188,7 @@ import {
 } from "@whiskeysockets/baileys";
 import { createRequire } from "module";
 var TAG2 = "[whatsapp:session]";
+var WIRE_TAG = "[whatsapp:wire]";
 var baileysPkgVersion = (() => {
   try {
     const req = createRequire(import.meta.url);
@@ -2408,6 +2409,12 @@ async function createWaSocket(opts) {
     sock.ws.on("error", (err) => {
       console.error(`${TAG2} WebSocket error: ${String(err)}`);
     });
+    sock.ws.on("CB:message", (node) => {
+      const attrs = node?.attrs ?? {};
+      console.error(
+        `${WIRE_TAG} op=stanza msgId=${attrs.id ?? "none"} from=${attrs.from ?? "none"} type=${attrs.type ?? "none"} offline=${attrs.offline ?? "none"} account=${acct}`
+      );
+    });
   }
   return sock;
 }
@@ -3136,6 +3143,12 @@ function readAllConversations(platformAccountId) {
   return out;
 }
 
+// app/lib/whatsapp/echo-already-recorded.ts
+function echoAlreadyRecorded(args) {
+  const messageId = `whatsapp-live:${args.accountId}:${args.remoteJid}:${args.msgKeyId}`;
+  return args.readConversation(args.platformAccountId, args.canonicalRemoteJid).some((r) => r.messageId === messageId);
+}
+
 // app/lib/whatsapp/managed-account.ts
 function normalizeEntry(v) {
   return typeof v === "string" ? { account: v, mode: "active" } : { account: v.managesAccount, mode: v.mode ?? "active" };
@@ -3848,7 +3861,7 @@ async function persistWhatsAppMessage(input) {
       return { messageId, created: false, senderElementId };
     }
     console.error(
-      `${TAG7} write messageId=${messageId} accountId=${input.platformAccountId} cacheKey=${input.cacheKey} fromMe=${input.fromMe} dateSent=${dateSentIso} bodyBytes=${Buffer.byteLength(input.body, "utf8")} ms=${ms}`
+      `${TAG7} write messageId=${messageId} accountId=${input.platformAccountId} cacheKey=${input.cacheKey} fromMe=${input.fromMe} dateSent=${dateSentIso} bodyBytes=${Buffer.byteLength(input.body, "utf8")} attachment=${input.attachmentId ?? "none"} ms=${ms}`
     );
     return { messageId, created: true, senderElementId };
   } catch (err) {
@@ -5271,14 +5284,6 @@ async function registerLoginSocket(accountId, sock, authDir) {
     throw err;
   }
   await stopConnection(accountId);
-  const selfId = readSelfId(authDir);
-  const rawLidMapping = sock.signalRepository?.lidMapping ?? null;
-  const lidMapping = withSelfLidShortcut(rawLidMapping, selfId.lid, selfId.jid);
-  if (selfId.lid) {
-    console.error(`[whatsapp:lid] resolved self-lid accountId=${accountId} selfLid=${selfId.lid} source=creds`);
-  } else {
-    console.error(`[whatsapp:lid] FAIL self-lid-resolution accountId=${accountId} reason=creds-missing-lid`);
-  }
   const conn = {
     accountId,
     platformAccountId,
@@ -5286,16 +5291,18 @@ async function registerLoginSocket(accountId, sock, authDir) {
     authDir,
     sock,
     connected: true,
-    selfPhone: selfId.e164,
-    selfJid: selfId.jid,
-    selfLid: selfId.lid,
+    selfPhone: null,
+    selfJid: null,
+    selfLid: null,
     reconnectAttempts: 0,
     lastConnectedAt: Date.now(),
     abortController: new AbortController(),
     debouncer: null,
-    lidMapping
+    lidMapping: null
   };
+  applySelfIdentity(conn, sock, "register");
   connections.set(accountId, conn);
+  monitorInbound(conn);
   try {
     await sock.sendPresenceUpdate("available");
     console.error(`${TAG13} presence set to available account=${accountId}`);
@@ -5309,10 +5316,9 @@ async function registerLoginSocket(accountId, sock, authDir) {
     attempt: 0,
     signal: conn.abortController.signal
   });
-  monitorInbound(conn);
   watchForDisconnect(conn);
   attachSelfIdRefreshOnCredsUpdate(conn);
-  console.error(`${TAG13} registered login socket for account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
+  console.error(`${TAG13} registered login socket for account=${accountId} phone=${conn.selfPhone ?? "unknown"}`);
 }
 function attachSelfIdRefreshOnCredsUpdate(conn) {
   if (!conn.sock) return;
@@ -5392,30 +5398,27 @@ async function connectWithReconnect(conn) {
     let connectedAt;
     try {
       console.error(`${TAG13} connecting account=${conn.accountId} attempt=${conn.reconnectAttempts}`);
+      if (conn.debouncer) {
+        await conn.debouncer.destroy();
+        conn.debouncer = null;
+      }
       const sock = await createWaSocket({
         authDir: conn.authDir,
-        silent: true
+        silent: true,
+        account: conn.accountId
       });
       conn.sock = sock;
+      applySelfIdentity(conn, sock, "pre-listener");
+      monitorInbound(conn);
       console.error(`${TAG13} socket created account=${conn.accountId} \u2014 waiting for connection`);
       await waitForConnection(sock);
-      const selfId = readSelfId(conn.authDir);
       connectedAt = Date.now();
       conn.connected = true;
-      conn.selfPhone = selfId.e164;
-      conn.selfJid = selfId.jid;
-      conn.selfLid = selfId.lid;
       conn.lastConnectedAt = connectedAt;
       conn.lastError = void 0;
       conn.terminalReason = void 0;
-      const rawLidMapping = sock.signalRepository?.lidMapping ?? null;
-      conn.lidMapping = withSelfLidShortcut(rawLidMapping, selfId.lid, selfId.jid);
-      if (selfId.lid) {
-        console.error(`[whatsapp:lid] resolved self-lid accountId=${conn.accountId} selfLid=${selfId.lid} source=creds`);
-      } else {
-        console.error(`[whatsapp:lid] FAIL self-lid-resolution accountId=${conn.accountId} reason=creds-missing-lid`);
-      }
-      console.error(`${TAG13} connected account=${conn.accountId} phone=${selfId.e164 ?? "unknown"}`);
+      applySelfIdentity(conn, sock, "post-connect");
+      console.error(`${TAG13} connected account=${conn.accountId} phone=${conn.selfPhone ?? "unknown"}`);
       try {
         await sock.sendPresenceUpdate("available");
         console.error(`${TAG13} presence set to available account=${conn.accountId}`);
@@ -5429,11 +5432,6 @@ async function connectWithReconnect(conn) {
         attempt: conn.reconnectAttempts,
         signal: conn.abortController.signal
       });
-      if (conn.debouncer) {
-        await conn.debouncer.destroy();
-        conn.debouncer = null;
-      }
-      monitorInbound(conn);
       attachSelfIdRefreshOnCredsUpdate(conn);
       await waitForDisconnectEvent(conn);
       uptimeMs = Date.now() - connectedAt;
@@ -5526,6 +5524,23 @@ function watchForDisconnect(conn) {
     }
   });
 }
+function applySelfIdentity(conn, sock, phase) {
+  const selfId = readSelfId(conn.authDir);
+  conn.selfPhone = selfId.e164;
+  conn.selfJid = selfId.jid;
+  conn.selfLid = selfId.lid;
+  const rawLidMapping = sock.signalRepository?.lidMapping ?? null;
+  conn.lidMapping = withSelfLidShortcut(rawLidMapping, selfId.lid, selfId.jid);
+  if (selfId.lid) {
+    console.error(
+      `[whatsapp:lid] resolved self-lid accountId=${conn.accountId} selfLid=${selfId.lid} source=creds phase=${phase}`
+    );
+  } else {
+    console.error(
+      `[whatsapp:lid] FAIL self-lid-resolution accountId=${conn.accountId} reason=creds-missing-lid phase=${phase}`
+    );
+  }
+}
 function monitorInbound(conn) {
   if (!conn.sock || !onInboundMessage) return;
   const sock = conn.sock;
@@ -5612,7 +5627,20 @@ function monitorInbound(conn) {
                 remoteJid,
                 conn.lidMapping
               );
-              const wantsServableMedia = mediaServable && !fromMe && !!conn.sock;
+              const alreadyRecorded = fromMe && echoAlreadyRecorded({
+                readConversation,
+                platformAccountId: conn.platformAccountId,
+                canonicalRemoteJid,
+                accountId: conn.accountId,
+                remoteJid,
+                msgKeyId: msg.key.id
+              });
+              const wantsServableMedia = mediaServable && !!conn.sock && (!fromMe || !alreadyRecorded);
+              if (fromMe && mediaServable && !!conn.sock) {
+                console.error(
+                  `${TAG13} fromMe-media-echo msgKey=${msg.key.id} decision=${alreadyRecorded ? "skip" : "store"} reason=${alreadyRecorded ? "already-recorded" : "no-prior-record"}`
+                );
+              }
               const mediaSeed = `whatsapp-live:${conn.accountId}:${canonicalRemoteJid}:${msg.key.id}`;
               const maxBytes = (whatsAppConfig.mediaMaxMb ?? 50) * 1024 * 1024;
               const basePersist = {
@@ -5730,8 +5758,10 @@ function monitorInbound(conn) {
             }));
             continue;
           }
+          const skippedSenderJid = isGroupJid(remoteJid) ? msg.key.participant ?? remoteJid : remoteJid;
+          const skippedSenderPhone = await resolveJidToE164(skippedSenderJid, conn.lidMapping) ?? skippedSenderJid;
           console.error(
-            `${TAG13} append-type message ${msg.key.id ?? "?"} stored, dispatch skipped account=${conn.accountId}`
+            `${TAG13} append-type message ${msg.key.id ?? "?"} dispatch skipped from=${skippedSenderPhone}${msg.pushName ? ` name=${msg.pushName}` : ""} account=${conn.accountId} (persistence not confirmed here)`
           );
           continue;
         }
@@ -6866,7 +6896,6 @@ function parseScheduleProvenance(v) {
 
 // server/routes/channel/schedule-inject.ts
 var TAG16 = "[schedule-inject]";
-var UUID_V4 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -6899,7 +6928,6 @@ function createScheduleInjectRoutes(deps) {
     const prompt = typeof body.prompt === "string" ? body.prompt : "";
     const eventId = typeof body.eventId === "string" ? body.eventId : "";
     const scheduleProvenance = parseScheduleProvenance(body.scheduleProvenance);
-    const overrideSessionId = typeof body.sessionId === "string" && UUID_V4.test(body.sessionId) ? body.sessionId : void 0;
     if (channel !== "whatsapp" && channel !== "telegram" || !destination || !prompt) {
       console.error(`${TAG16} reject reason=bad-request channel=${String(channel)} hasDestination=${Boolean(destination)} hasPrompt=${Boolean(prompt)}`);
       return c.json({ ok: false, error: "schedule-inject-bad-request" }, 400);
@@ -6918,7 +6946,7 @@ function createScheduleInjectRoutes(deps) {
         return c.json({ ok: false, error: "account-manager-unresolved" }, 403);
       }
       console.error(`${TAG16} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount2}`);
-      const sessionId2 = overrideSessionId ?? adminSessionIdFor(effectiveAccount2, destination);
+      const sessionId2 = adminSessionIdFor(effectiveAccount2, normalizeTarget(destination) ?? destination);
       const reply2 = (text) => deps.sendWhatsAppText(houseAccountId, destination, text);
       try {
         await deps.waHandleInbound({
@@ -6936,7 +6964,6 @@ function createScheduleInjectRoutes(deps) {
           media: [],
           source: "schedule",
           scheduleProvenance,
-          scheduledSessionId: overrideSessionId,
           reply: reply2
         });
       } catch (err) {
@@ -6954,7 +6981,7 @@ function createScheduleInjectRoutes(deps) {
       return c.json({ ok: false, error: "no-admin-bot-token" }, 400);
     }
     const chatId = Number(destination);
-    const sessionId = overrideSessionId ?? adminSessionIdFor(effectiveAccount, destination);
+    const sessionId = adminSessionIdFor(effectiveAccount, destination);
     const reply = (text) => deps.sendTelegramText(botToken, chatId, text);
     try {
       await deps.tgHandleInbound({
@@ -6966,7 +6993,6 @@ function createScheduleInjectRoutes(deps) {
         text: prompt,
         source: "schedule",
         scheduleProvenance,
-        scheduledSessionId: overrideSessionId,
         reply
       });
     } catch (err) {
@@ -6980,7 +7006,7 @@ function createScheduleInjectRoutes(deps) {
 }
 
 // server/index.ts
-var import_dist8 = __toESM(require_dist(), 1);
+var import_dist9 = __toESM(require_dist(), 1);
 
 // app/lib/telegram/outbound/send-text.ts
 async function sendTelegramText(botToken, chatId, text) {
@@ -7803,18 +7829,27 @@ async function sendWhatsAppDocument(input) {
   }
   const filename = basename3(resolvedPath);
   const jid = normalizeJid2(to);
-  const sock = getSocket(accountId);
-  if (!sock) {
-    console.error(`${TAG19} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=false reason=not-connected`);
-    return { ok: false, status: 503, error: `WhatsApp account "${accountId}" is not connected` };
+  const res = resolveSocket(accountId);
+  if (!res.ok) {
+    const reason = res.reason === "key-miss" ? `key-miss presentKeys=${res.presentKeys.join(",") || "none"}` : "disconnected";
+    console.error(`${TAG19} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=false reason=${reason}`);
+    if (res.reason === "key-miss") {
+      return {
+        ok: false,
+        status: 503,
+        error: `WhatsApp socket key miss: no socket is registered for accountId=${accountId} (present keys: ${res.presentKeys.join(",") || "none"}). This is an account-keying fault, not a dropped link \u2014 do not advise re-pairing.`
+      };
+    }
+    return { ok: false, status: 503, error: `WhatsApp account "${accountId}" is registered but its transport is down.` };
   }
+  const sock = res.sock;
   const buffer = Buffer.from(await readFile(resolvedPath));
   const mimetype = detectMimeType(resolvedPath);
   const result = await sendMediaMessage(
     sock,
     to,
     { type: "document", buffer, mimetype, filename, caption },
-    { accountId }
+    { accountId: res.accountId }
   );
   console.error(
     `${TAG19} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
@@ -24211,14 +24246,14 @@ var WaGateway = class {
       },
       Date.now()
     );
+    const resolvedSessionId = adminSessionIdFor(
+      input.effectiveAccountId,
+      senderId,
+      input.role === "public" && input.personId ? input.personId : void 0
+    );
     console.error(
-      `[whatsapp-native] op=inbound senderId=${senderId} accountId=${input.accountId} bytes=${bytes} ${mediaField} source=${source} delivery=${willDeliverNow ? "immediate" : "queued"}`
+      `[whatsapp-native] op=inbound senderId=${senderId} accountId=${input.accountId} bytes=${bytes} ${mediaField} source=${source} delivery=${willDeliverNow ? "immediate" : "queued"} sessionId=${resolvedSessionId}`
     );
-    if (source === "schedule" && (hadSubscriber || this.spawning.has(senderId))) {
-      console.error(
-        `[whatsapp-native] op=coalesced-onto-live-session eventId=${input.scheduleProvenance?.eventId ?? "-"} senderId=${senderId} droppedSeat=${input.scheduledSessionId ?? "-"} reason=${hadSubscriber ? "live-subscriber" : "spawn-in-flight"}`
-      );
-    }
     if (!hadSubscriber && !this.spawning.has(senderId)) {
       this.spawning.add(senderId);
       console.error(`[whatsapp-native] op=spawn-trigger senderId=${senderId}`);
@@ -24231,8 +24266,6 @@ var WaGateway = class {
           personId: input.personId ?? null,
           gatewayUrl: this.deps.gatewayUrl,
           serverPath: this.deps.serverPath,
-          // Task 1526 — a scheduled firing's per-firing seat id; absent on real inbound.
-          sessionIdOverride: input.scheduledSessionId,
           // Task 1575 — the gate's owner-self verdict; drives owner attribution
           // for an unbound owner self-phone at the spawn site.
           ownerSelfPhone: input.ownerSelfPhone
@@ -24286,7 +24319,12 @@ function logDuplicateSenderGroups(groups) {
 function buildWaSpawnRequest(input) {
   const personId = input.role === "public" && input.personId ? input.personId : void 0;
   return {
-    sessionId: input.sessionIdOverride && input.sessionIdOverride.length > 0 ? input.sessionIdOverride : adminSessionIdFor(input.accountId, input.senderId, personId),
+    // Task 1746 — the deterministic per-sender id is the ONLY id a sender's
+    // session ever has. Task 1526's per-firing seat override used to replace it
+    // on a scheduled cold start, which spawned a second session for the sender;
+    // that session then attached under the sender's own hub key and swallowed
+    // their real messages until it detached, splitting the conversation in two.
+    sessionId: adminSessionIdFor(input.accountId, input.senderId, personId),
     role: input.role,
     channel: "whatsapp",
     personId,
@@ -25773,14 +25811,14 @@ var TelegramGateway = class {
       { key: input.senderId, text: input.text, messageId: `tg-${++this.seq}`, source, standingRules, scheduleProvenance: input.scheduleProvenance },
       Date.now()
     );
+    const resolvedSessionId = adminSessionIdFor(
+      input.accountId,
+      input.senderId,
+      input.role === "public" && input.personId ? input.personId : void 0
+    );
     console.error(
-      `[telegram-native] op=inbound key=${input.senderId} accountId=${input.accountId} botType=${input.role} bytes=${bytes} source=${source} delivery=${willDeliverNow ? "immediate" : "queued"}`
+      `[telegram-native] op=inbound key=${input.senderId} accountId=${input.accountId} botType=${input.role} bytes=${bytes} source=${source} delivery=${willDeliverNow ? "immediate" : "queued"} sessionId=${resolvedSessionId}`
     );
-    if (source === "schedule" && (hadSubscriber || this.spawning.has(input.senderId))) {
-      console.error(
-        `[telegram-native] op=coalesced-onto-live-session eventId=${input.scheduleProvenance?.eventId ?? "-"} senderId=${input.senderId} droppedSeat=${input.scheduledSessionId ?? "-"} reason=${hadSubscriber ? "live-subscriber" : "spawn-in-flight"}`
-      );
-    }
     if (!hadSubscriber && !this.spawning.has(input.senderId)) {
       this.spawning.add(input.senderId);
       console.error(`[telegram-native] op=spawn-trigger key=${input.senderId} role=${input.role}`);
@@ -25792,9 +25830,7 @@ var TelegramGateway = class {
           personId: input.personId ?? null,
           chatId: input.chatId,
           gatewayUrl: this.deps.gatewayUrl,
-          serverPath: this.deps.serverPath,
-          // Task 1526 — a scheduled firing's per-firing seat id; absent on real inbound.
-          sessionIdOverride: input.scheduledSessionId
+          serverPath: this.deps.serverPath
         });
       } finally {
         this.spawning.delete(input.senderId);
@@ -25812,7 +25848,10 @@ var TelegramGateway = class {
 function buildTelegramSpawnRequest(input) {
   const personId = input.role === "public" && input.personId ? input.personId : void 0;
   return {
-    sessionId: input.sessionIdOverride && input.sessionIdOverride.length > 0 ? input.sessionIdOverride : adminSessionIdFor(input.accountId, input.senderId, personId),
+    // Task 1746 — the deterministic per-sender id is the ONLY id a sender's
+    // session ever has. Mirror of the WhatsApp builder; see its comment for why
+    // Task 1526's per-firing override was removed.
+    sessionId: adminSessionIdFor(input.accountId, input.senderId, personId),
     role: input.role,
     channel: "telegram",
     personId,
@@ -26130,6 +26169,31 @@ async function firePublicSessionEndReview(input) {
   );
 }
 
+// app/lib/whatsapp/inbound/resolve-client-graph-owner.ts
+var import_dist8 = __toESM(require_dist(), 1);
+async function resolveClientOwnerUserId(accountId, deps = {}) {
+  const listAccounts = deps.listAccounts ?? listValidAccounts;
+  const getSession4 = deps.getSession ?? getSession;
+  const resolveOwner2 = deps.resolveOwner ?? import_dist8.resolveOwnerUserId;
+  const role = listAccounts().find((a) => a.accountId === accountId)?.config.role;
+  if (role !== "client") return null;
+  const session = getSession4();
+  try {
+    return await resolveOwner2(session, accountId);
+  } catch (err) {
+    console.error(
+      `[whatsapp-native] op=graph-owner-error account=${accountId} error=${err instanceof Error ? err.message : String(err)}`
+    );
+    return null;
+  } finally {
+    await session.close().catch((err) => {
+      console.error(
+        `[whatsapp-native] op=graph-owner-close-error account=${accountId} error=${err instanceof Error ? err.message : String(err)}`
+      );
+    });
+  }
+}
+
 // app/lib/whatsapp/inbound/channel-admin-binding-drift.ts
 function findAccountManagerDrift(accountManagers, adminPhones, validAccountIds) {
   const drift = [];
@@ -26547,8 +26611,8 @@ var webchatFileFollowers = /* @__PURE__ */ new Map();
 async function fetchAccountStandingRules(accountId) {
   const session = getSession();
   try {
-    const res = await (0, import_dist8.resolveActiveRules)(session, accountId);
-    return { block: (0, import_dist8.formatStandingRulesBlock)(res.rules), ownerUserId: res.ownerUserId, source: res.source };
+    const res = await (0, import_dist9.resolveActiveRules)(session, accountId);
+    return { block: (0, import_dist9.formatStandingRulesBlock)(res.rules), ownerUserId: res.ownerUserId, source: res.source };
   } catch (err) {
     console.error(
       `[preference-inject] op=fetch-failed accountId=${accountId} error=${err instanceof Error ? err.message : String(err)}`
@@ -26600,7 +26664,7 @@ var waGateway = new WaGateway({
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
-  ensureChannelSession: async ({ accountId, effectiveAccountId, senderId, role, personId, gatewayUrl, serverPath, passive, text, msgId, sessionIdOverride, ownerSelfPhone }) => {
+  ensureChannelSession: async ({ accountId, effectiveAccountId, senderId, role, personId, gatewayUrl, serverPath, passive, text, msgId, ownerSelfPhone }) => {
     if (passive) {
       const phoneHash = createHash7("sha256").update(senderId).digest("hex").slice(0, 12);
       const prompt = (text ?? "").trim();
@@ -26648,11 +26712,20 @@ var waGateway = new WaGateway({
       const managesAccount = effectiveAccountId !== accountId ? effectiveAccountId : "none";
       console.error(`[whatsapp-native] op=account-manager-route senderId=${senderId} managesAccount=${managesAccount} effectiveAccount=${effectiveAccountId} source=gate`);
     }
-    const req = buildWaSpawnRequest({ accountId: effectiveAccountId, senderId, role, personId, gatewayUrl, serverPath, sessionIdOverride });
-    const userId = role === "admin" ? resolveAdminUserId({ accountId: effectiveAccountId, senderPhone: senderId }) ?? (ownerSelfPhone ? resolveOwnerUserId(effectiveAccountId) ?? void 0 : void 0) : void 0;
+    const req = buildWaSpawnRequest({ accountId: effectiveAccountId, senderId, role, personId, gatewayUrl, serverPath });
+    let userId = role === "admin" ? resolveAdminUserId({ accountId: effectiveAccountId, senderPhone: senderId }) ?? (ownerSelfPhone ? resolveOwnerUserId(effectiveAccountId) ?? void 0 : void 0) : void 0;
+    let graphOwnerResolved = false;
+    if (role === "admin" && userId === void 0) {
+      const graphOwner = await resolveClientOwnerUserId(effectiveAccountId);
+      if (graphOwner) {
+        userId = graphOwner;
+        graphOwnerResolved = true;
+      }
+    }
     if (role === "admin") {
       const attribution = userId ?? (ownerSelfPhone ? "owner-self-unresolved" : "unbound-empty");
-      console.error(`[whatsapp-native] op=admin-identity senderId=${senderId} userId=${attribution}`);
+      const sourceSuffix = graphOwnerResolved ? " source=graph-owner" : "";
+      console.error(`[whatsapp-native] op=admin-identity senderId=${senderId} userId=${attribution}${sourceSuffix}`);
     }
     const result = await managerRcSpawn({ ...req, userId });
     if ("error" in result) {
@@ -26804,8 +26877,8 @@ var telegramGateway = new TelegramGateway({
   fetchStandingRules: fetchAccountStandingRules,
   gatewayUrl: telegramGatewayUrl(),
   serverPath: telegramServerPath(),
-  ensureChannelSession: async ({ accountId, senderId, role, personId, chatId, gatewayUrl, serverPath, sessionIdOverride }) => {
-    const req = buildTelegramSpawnRequest({ accountId, senderId, role, personId, gatewayUrl, serverPath, sessionIdOverride });
+  ensureChannelSession: async ({ accountId, senderId, role, personId, chatId, gatewayUrl, serverPath }) => {
+    const req = buildTelegramSpawnRequest({ accountId, senderId, role, personId, gatewayUrl, serverPath });
     const result = await managerRcSpawn(req);
     if ("error" in result) {
       console.error(`[telegram-native] spawn-failed senderId=${senderId} role=${role} error=${result.error} status=${result.status}`);

package/payload/platform/lib/mcp-stderr-tee/dist/index.d.ts

@@ -1,69 +0,0 @@
-/**
- * MCP server stderr tee — per-conversation stream-log capture.
- *
- * Claude Code spawns MCP servers as child processes and consumes their stderr
- * internally. The platform cannot intercept at the spawn level. Each server
- * must tee its own stderr so diagnostic output is retrievable.
- *
- * This module owns ONE destination: the per-conversation stream log. The raw
- * per-server sink belongs to mcp-spawn-tee (`mcp-<name>-<SESSION_ID>.log`),
- * which is every spawned caller's real parent and writes with appendFileSync.
- * Task 1721 retired this module's own raw file: it was date-named after the
- * process's boot day, no reader parsed that date, and mcp-spawn-tee wrote the
- * same path, so every line landed twice.
- *
- * ┌─────────────────────────┐
- * │ MCP server process      │
- * │                         │
- * │ console.error("[x] ..") │
- * │           │             │
- * │           ▼             │
- * │ patched stderr.write()  │
- * │     │                   │
- * │     ├──► original stderr (consumed by Claude Code — opaque)
- * │     │
- * │     └──► $STREAM_LOG_PATH                      (per-line, prefixed)
- * │           "[<iso>] [mcp:{name}] <line>"
- * └─────────────────────────┘
- *
- * $STREAM_LOG_PATH is meant to be set by the spawner to the per-conversation
- * stream log file. The MCP server code itself knows nothing about
- * conversations — it just trusts the spawner's path. This is the scope
- * boundary intended: the tee is attached per spawn, not per MCP-server process
- * lifetime. Servers spawned for conversation A write to conversation A's file;
- * servers for B write to B's file.
- *
- * NOTE: no spawner actually sets it. `pty-spawner.ts` and `rc-daemon.ts`'s
- * `buildRcChildEnv` stamp LOG_DIR and SESSION_ID but not STREAM_LOG_PATH, and
- * the only assignment in the repo is `plugins/memory/mcp/scripts/boot-smoke.sh`
- * (a smoke harness). So in production this module takes its skip path and
- * patches nothing. The raw bytes are not lost — mcp-spawn-tee writes them to
- * the per-session sink regardless. Whether to wire this up or retire the module
- * is Task 1736. Do not read the paragraph above as a description of live
- * behaviour until that lands.
- *
- * Every decision is logged via `[mcp-tee-*]` markers on both the target file
- * and the original stderr so an investigator can confirm from the stream log
- * which tees were wired up, which were skipped, and why.
- */
-/**
- * Patch process.stderr.write to tee to:
- *   1. The per-conversation stream log at `STREAM_LOG_PATH` — per-line, prefixed.
- *   2. The original stderr (consumed by Claude Code) — always preserved.
- *
- * STREAM_LOG_PATH absent → skip the stream-log destination (older spawner or
- *   standalone invocation) and leave stderr entirely unpatched. A
- *   `[mcp-tee-skip]` marker is written to original stderr so the skip is
- *   visible to journalctl-level readers.
- *
- * This module writes NO raw per-server file and holds NO write stream. Task
- * 1721 moved the raw sink to mcp-spawn-tee, which is every spawned caller's
- * real parent: the two modules were writing the same per-date file, so every
- * line landed twice, and the held stream was the sole reason Task 1706 could
- * not age-purge these logs.
- *
- * Safe to call once at MCP server module load. Refused on second call to
- * prevent stacking patches.
- */
-export declare function initStderrTee(serverName: string): void;
-//# sourceMappingURL=index.d.ts.map

package/payload/platform/lib/mcp-stderr-tee/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAeH;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAmHtD"}