@rubytech/create-maxy-code 0.1.539 → 0.1.541

package/payload/server/{chunk-BP7LH7MC.js → chunk-CKTHAHL4.js}

@@ -89,8 +89,24 @@ var TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-admin-webh
 var VISITOR_TOKEN_SECRET_FILE = resolve(MAXY_DIR, "credentials", "visitor-token-secret");
 var CLAUDE_CREDENTIALS_FILE = resolve(MAXY_DIR, ".claude", ".credentials.json");
 
-// app/lib/system-path-slugs.ts
+// ../lib/agent-slug/src/index.ts
 var SYSTEM_PATH_SLUGS = ["public", "public-chat", "chat", "graph", "data", "browser"];
+var RESERVED_AGENT_SLUGS = [
+  "admin",
+  "api",
+  "assets",
+  "agent-assets",
+  "brand",
+  "bot",
+  "privacy"
+];
+var AGENT_SLUG_PATTERN = /^[a-z][a-z0-9-]{2,49}$/;
+function checkAgentSlug(slug) {
+  if (!AGENT_SLUG_PATTERN.test(slug)) return { ok: false, reason: "shape" };
+  if (RESERVED_AGENT_SLUGS.includes(slug)) return { ok: false, reason: "reserved" };
+  if (SYSTEM_PATH_SLUGS.includes(slug)) return { ok: false, reason: "shadowed" };
+  return { ok: true };
+}
 
 // app/lib/claude-agent/account.ts
 import { resolve as resolve2 } from "path";
@@ -258,20 +274,13 @@ function readAgentFile(accountDir, agentName, filename) {
   }
   return raw;
 }
-var RESERVED_SLUGS = /* @__PURE__ */ new Set(["admin", "api", "assets", "agent-assets", "brand", "bot", "privacy"]);
-var SHADOWED_SLUGS = new Set(SYSTEM_PATH_SLUGS);
-var SLUG_PATTERN = /^[a-z][a-z0-9-]{2,49}$/;
 function validateAgentSlug(slug) {
-  if (!SLUG_PATTERN.test(slug)) return false;
-  if (RESERVED_SLUGS.has(slug)) {
-    console.error(`[agent-slug] op=reject slug=${slug} reason=reserved`);
-    return false;
+  const verdict = checkAgentSlug(slug);
+  if (verdict.ok) return true;
+  if (verdict.reason !== "shape") {
+    console.error(`[agent-slug] op=reject slug=${slug} reason=${verdict.reason}`);
   }
-  if (SHADOWED_SLUGS.has(slug)) {
-    console.error(`[agent-slug] op=reject slug=${slug} reason=shadowed`);
-    return false;
-  }
-  return true;
+  return false;
 }
 function resolveDefaultAgentSlug(accountDir) {
   const configPath = resolve2(accountDir, "account.json");
@@ -2002,7 +2011,7 @@ async function projectAgent(accountId, accountDir, slug) {
     console.error(
       `[agent-graph] project FAILED slug=${slug} account=${account8} error="${msg}"`
     );
-    return;
+    return { nodesWritten: 0 };
   }
   const agentDir = resolve3(accountDir, "agents", slug);
   const configPath = resolve3(agentDir, "config.json");
@@ -2013,7 +2022,7 @@ async function projectAgent(accountId, accountDir, slug) {
       console.error(
         `[agent-graph] project FAILED slug=${slug} account=${account8} error="config.json missing at ${configPath}"`
       );
-      return;
+      return { nodesWritten: 0 };
     }
     config = JSON.parse(readFileSync5(configPath, "utf-8"));
     for (const { filename, role } of AGENT_FILE_ROLES) {
@@ -2027,7 +2036,7 @@ async function projectAgent(accountId, accountDir, slug) {
     console.error(
       `[agent-graph] project FAILED slug=${slug} account=${account8} error="${msg}"`
     );
-    return;
+    return { nodesWritten: 0 };
   }
   const session = getSession();
   try {
@@ -2093,6 +2102,7 @@ async function projectAgent(accountId, accountDir, slug) {
     console.error(
       `[agent-graph] project slug=${slug} account=${account8} docs=${presentRoles.length} uses=${usesCount} ms=${ms}`
     );
+    return { nodesWritten: 1 + presentRoles.length };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     console.error(

package/payload/server/{chunk-IALJPXIO.js → chunk-ERIM3EFB.js}

@@ -12,7 +12,7 @@ import {
   getConversationOwner,
   isValidAccountId,
   registerLoop
-} from "./chunk-BP7LH7MC.js";
+} from "./chunk-CKTHAHL4.js";
 
 // node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {

package/payload/server/{chunk-S4FIEM3L.js → chunk-HZP7BKBF.js}

@@ -8,7 +8,10 @@ import {
   getUserTimezone,
   isValidAccountId,
   registerLoop
-} from "./chunk-BP7LH7MC.js";
+} from "./chunk-CKTHAHL4.js";
+
+// app/lib/whatsapp/manager.ts
+import { randomUUID as randomUUID5 } from "crypto";
 
 // app/lib/whatsapp/schema.ts
 import { z } from "zod";
@@ -69,7 +72,18 @@ var WhatsAppConfigSchema = z.object({
     // match a malformed row (so it can never reach a log line or the spawn
     // env), and the /rc-spawn body guard re-checks. `.strict()` stays — an
     // unknown key inside the entry IS recoverable by the tolerant parser.
-    z.object({ account: z.string(), party: z.string() }).strict()
+    z.object({
+      account: z.string(),
+      party: z.string(),
+      // Task 2292 — `.catch(undefined)`, never a bare `z.boolean()`. Once
+      // `dispatch` is a KNOWN key, a hand-edited non-boolean is an
+      // `invalid_type` issue, and the tolerant parser recovers only from
+      // `unrecognized_keys` — so a strict type here would fail the whole
+      // parse and empty routing install-wide, the exact outage class the
+      // `party` comment above describes. `.catch` keeps the declared type
+      // and reads a bad value as absent, which dispatches.
+      dispatch: z.boolean().optional().catch(void 0)
+    }).strict()
   ).optional().describe("Registered non-operator counterparties: E.164 phone \u2192 { account, party }. The sender is admitted to the PUBLIC agent on that account's own number, carrying the label; they are never granted admin, which is what separates this from accountManagers. Reached on the house number they take the normal DM policy instead. 'party' is an operator-chosen label (e.g. 'driver'), lowercase letters, digits and hyphens, 1-64 characters; the platform carries it and never interprets it. Managed via add-registered-party / remove-registered-party. A phone here must not also be in adminPhones or accountManagers. Read only from the account whose account.json the manager loads its config from (the house); add-registered-party is refused on any other account, and a map left there is inert and purged at boot."),
   allowFrom: z.array(z.string()).optional().describe("Phone numbers allowed to message the public agent when DM policy is 'allowlist'. Add '*' for open access. Does not affect admin routing \u2014 use adminPhones for that."),
   sendReadReceipts: z.boolean().optional().default(true).describe("Whether to send read receipts (blue ticks) when messages are received. Disabling may feel less responsive but preserves privacy."),
@@ -1434,95 +1448,10 @@ function formatLiveLocationPayloadLine(msg) {
   const thumbBytes = live.jpegThumbnail ? live.jpegThumbnail.length : 0;
   return `${WIRE_TAG3} op=live-location-payload msgKeyId=${msg.key?.id ?? "none"} seq=${num(live.sequenceNumber)} timeOffsetS=${num(live.timeOffset)} accuracyM=${num(live.accuracyInMeters)} speedMps=${num(live.speedInMps)} headingDeg=${num(live.degreesClockwiseFromMagneticNorth)} captionBytes=${captionBytes} thumbBytes=${thumbBytes} envDurationS=${num(msg.duration)} envFinal=${msg.finalLiveLocation ? "yes" : "no"}`;
 }
-function liveLocationTargetJid(msg) {
-  if (msg.key?.fromMe) return null;
-  const remoteJid = msg.key?.remoteJid;
-  if (!remoteJid) return null;
-  return remoteJid.endsWith("@g.us") ? msg.key?.participant ?? remoteJid : remoteJid;
-}
 function formatMessageUpdateLine(u) {
   const names = u.update ? Object.keys(u.update) : [];
   return `${WIRE_TAG3} op=message-update msgKeyId=${u.key?.id ?? "none"} fields=${names.length ? names.join(",") : "none"}`;
 }
-function formatSubscribeReplyLine(account, jid, reply) {
-  const head = `${WIRE_TAG3} op=live-location-subscribe-reply account=${account} jid=${jid}`;
-  if (!reply || typeof reply !== "object") {
-    return `${head} type=no-reply from=none children=`;
-  }
-  const node = reply;
-  const attrs = node.attrs ?? {};
-  const children = Array.isArray(node.content) ? node.content.map((c) => {
-    const child = c ?? {};
-    const ca = child.attrs ?? {};
-    const pairs = Object.keys(ca).map((k) => `${k}=${String(ca[k])}`).join(",");
-    return `${child.tag ?? "none"}${pairs ? `[${pairs}]` : ""}`;
-  }).join(" ").slice(0, 200) : "";
-  return `${head} type=${attrs.type ?? "none"} from=${attrs.from ?? "none"} children=${children}`;
-}
-
-// app/lib/whatsapp/live-location.ts
-var WIRE_TAG4 = "[whatsapp:wire]";
-var REARM_MS = 3e4;
-var SILENCE_MS = 9e4;
-var subscriptions = /* @__PURE__ */ new Map();
-var keyOf = (account, jid) => `${account}:${jid}`;
-function sendEnrolment(sock, account, jid) {
-  const node = {
-    tag: "iq",
-    attrs: { xmlns: "location", type: "get", to: "s.whatsapp.net", target: jid },
-    content: [{ tag: "subscribe", attrs: { participants: "true" } }]
-  };
-  Promise.resolve(sock.query(node)).then((reply) => {
-    console.error(formatSubscribeReplyLine(account, jid, reply));
-  }).catch((err) => {
-    console.error(
-      `${WIRE_TAG4} op=live-location-subscribe account=${account} jid=${jid} outcome=fail reason=${(err instanceof Error ? err.message : String(err)).slice(0, 120)}`
-    );
-  });
-}
-function subscribeLiveLocation(sock, account, jid) {
-  const key = keyOf(account, jid);
-  const existing = subscriptions.get(key);
-  if (existing) {
-    existing.lastSeenAt = Date.now();
-    return;
-  }
-  const timer = setInterval(() => {
-    const sub = subscriptions.get(key);
-    if (!sub) return;
-    if (Date.now() - sub.lastSeenAt >= SILENCE_MS) {
-      console.error(
-        `${WIRE_TAG4} op=live-location-subscribe account=${account} jid=${jid} outcome=stopped reason=silence`
-      );
-      stopLiveLocation(account, jid);
-      return;
-    }
-    sendEnrolment(sock, account, jid);
-  }, REARM_MS);
-  subscriptions.set(key, { timer, lastSeenAt: Date.now(), account });
-  console.error(
-    `${WIRE_TAG4} op=live-location-subscribe account=${account} jid=${jid} outcome=armed rearmMs=${REARM_MS}`
-  );
-  sendEnrolment(sock, account, jid);
-}
-function noteMessageFrom(account, jid) {
-  const sub = subscriptions.get(keyOf(account, jid));
-  if (sub) sub.lastSeenAt = Date.now();
-}
-function stopLiveLocation(account, jid) {
-  const key = keyOf(account, jid);
-  const sub = subscriptions.get(key);
-  if (!sub) return;
-  clearInterval(sub.timer);
-  subscriptions.delete(key);
-}
-function stopLiveLocationForAccount(account) {
-  for (const [key, sub] of [...subscriptions]) {
-    if (sub.account !== account) continue;
-    clearInterval(sub.timer);
-    subscriptions.delete(key);
-  }
-}
 
 // app/lib/whatsapp/inbound/reaction.ts
 function toMillis(v) {
@@ -1803,11 +1732,40 @@ function registeredPartyFor(registeredParties, phone) {
   for (const [partyPhone, entry2] of Object.entries(registeredParties)) {
     if (!entry2 || !entry2.account || typeof entry2.party !== "string") continue;
     if (!PARTY_LABEL_PATTERN.test(entry2.party)) continue;
-    if (phonesMatch(partyPhone, phone)) return { account: entry2.account, party: entry2.party };
+    if (phonesMatch(partyPhone, phone)) {
+      const dispatch = typeof entry2.dispatch === "boolean" ? entry2.dispatch : void 0;
+      return dispatch === void 0 ? { account: entry2.account, party: entry2.party } : { account: entry2.account, party: entry2.party, dispatch };
+    }
   }
   return null;
 }
 
+// app/lib/whatsapp/inbound/party-dispatch.ts
+function partyDispatchAllowed(entry2) {
+  return entry2?.dispatch !== false;
+}
+function formatPartyDispatchLine(p) {
+  return `[whatsapp:party] op=dispatch-decision inboundId=${p.inboundId ?? ""} account=${p.accountId.slice(0, 8)} sender=${p.senderPhone} party=${p.party} dispatch=${p.dispatch} spawned=${p.spawned ? 1 : 0}`;
+}
+var labelledInbounds = 0;
+function noteLabelledInbound() {
+  labelledInbounds += 1;
+}
+function readLabelledInbounds() {
+  return labelledInbounds;
+}
+function buildPartyDispatchAudit(p) {
+  const rows = Object.values(p.registeredParties);
+  return {
+    registrations: rows.length,
+    suppressed: rows.filter((r) => !partyDispatchAllowed(r)).length,
+    inbounds: readLabelledInbounds()
+  };
+}
+function formatPartyDispatchAuditLine(a) {
+  return `[whatsapp:party] op=party-dispatch-audit registrations=${a.registrations} suppressed=${a.suppressed} inbounds=${a.inbounds}`;
+}
+
 // app/lib/whatsapp/inbound/access-control.ts
 function resolveAccountConfig(config, accountConfig) {
   return {
@@ -1879,7 +1837,8 @@ function checkDmAccess(params) {
       reason: "registered-party",
       agentType: "public",
       effectiveAccountId: accountId,
-      party: party.party
+      party: party.party,
+      partyDispatch: partyDispatchAllowed(party)
     };
   }
   switch (cfg.dmPolicy) {
@@ -3922,7 +3881,8 @@ function combineInboundBatch(entries) {
   const last = entries[entries.length - 1];
   const combinedText = entries.map((e) => e.text).filter(Boolean).join("\n");
   const media = entries.flatMap((e) => e.media);
-  return { ...last, text: combinedText, media };
+  const msgIds = entries.flatMap((e) => e.msgIds ?? []);
+  return { ...last, text: combinedText, media, msgIds };
 }
 
 // app/lib/whatsapp/opening-hours.ts
@@ -4172,7 +4132,8 @@ function buildNotifyPending(args) {
 var initialized = false;
 function dispatchInboundPayload(conn, payload) {
   if (!onInboundMessage) return;
-  decideDispatch(conn, payload, { config: whatsAppConfig, emit: onInboundMessage, log: (l) => console.error(l) });
+  const dispatched = { ...payload, inboundId: randomUUID5().slice(0, 8) };
+  decideDispatch(conn, dispatched, { config: whatsAppConfig, emit: onInboundMessage, log: (l) => console.error(l) });
 }
 function isObserveAccount(accountId) {
   return !shouldDispatchInbound(whatsAppConfig, accountId);
@@ -4720,7 +4681,6 @@ function watchForDisconnect(conn) {
   if (!conn.sock) return;
   conn.sock.ev.on("connection.update", (update) => {
     if (update.connection === "close") {
-      stopLiveLocationForAccount(conn.accountId);
       if (connections.get(conn.accountId) !== conn) return;
       console.error(`${TAG17} socket disconnected for account=${conn.accountId}`);
       conn.connected = false;
@@ -4871,11 +4831,6 @@ function monitorInbound(conn) {
         const extracted = extractMessage(msg);
         const liveLocationLine = formatLiveLocationPayloadLine(msg);
         if (liveLocationLine) console.error(liveLocationLine);
-        const liveTargetJid = liveLocationTargetJid(msg);
-        if (liveTargetJid) {
-          noteMessageFrom(conn.accountId, liveTargetJid);
-          if (liveLocationLine) subscribeLiveLocation(sock, conn.accountId, liveTargetJid);
-        }
         const mediaServable = !!(extracted.mediaType && extracted.mimetype);
         if (!extracted.text && !mediaServable && msg.key.id) {
           markDeclined({
@@ -5452,6 +5407,9 @@ async function handleInboundMessage(conn, msg) {
     // Task 2234 — the gate's registered-party label, undefined for every other
     // sender. Rides to the gateway and on to the spawn env.
     party: accessResult.party,
+    // Task 2292 — the gate's per-party dispatch verdict. The router reads this,
+    // never the config, so the gate and the suppression cannot disagree.
+    partyDispatch: accessResult.partyDispatch,
     personId: accessResult.personId ?? null,
     senderPhone,
     text: extracted.text,
@@ -5468,7 +5426,11 @@ async function handleInboundMessage(conn, msg) {
     // Task 1575 — the gate's owner-self verdict. Only reason:'self-phone' is the
     // owner's own number; adminPhones/account-manager admits are other admins
     // and must not inherit the owner userId.
-    ownerSelfPhone: accessResult.reason === "self-phone"
+    ownerSelfPhone: accessResult.reason === "self-phone",
+    // Task 2281 — this stanza's own id, single-valued here. combineInboundBatch
+    // replaces it with the batch's concatenation when the debouncer merges, so
+    // one field carries both cases and no log site needs a fallback.
+    msgIds: msg.key.id ? [msg.key.id] : []
   };
   if (accessResult.agentType === "public") {
     const hoursResult = await isBusinessOpen(conn.accountId);
@@ -5556,6 +5518,10 @@ export {
   managerPhonesForAccount,
   PARTY_LABEL_PATTERN,
   registeredPartyFor,
+  formatPartyDispatchLine,
+  noteLabelledInbound,
+  buildPartyDispatchAudit,
+  formatPartyDispatchAuditLine,
   resolveAccountConfig,
   isAdminPhone,
   buildPolicyInheritance,

package/payload/server/{manager-5QV2EAZ2.js → manager-CM55K4J2.js}

@@ -30,8 +30,8 @@ import {
   startConnection,
   stopConnection,
   storeMessage
-} from "./chunk-S4FIEM3L.js";
-import "./chunk-BP7LH7MC.js";
+} from "./chunk-HZP7BKBF.js";
+import "./chunk-CKTHAHL4.js";
 import "./chunk-PFF6I7KP.js";
 export {
   buildNotifyPending,

package/payload/server/maxy-edge.js

@@ -19,12 +19,12 @@ import {
   screencastLog,
   vncLog,
   websockifyLog
-} from "./chunk-IALJPXIO.js";
+} from "./chunk-ERIM3EFB.js";
 import {
   CDP_PORT,
   LOG_DIR,
   WEBSOCKIFY_PORT
-} from "./chunk-BP7LH7MC.js";
+} from "./chunk-CKTHAHL4.js";
 import "./chunk-PFF6I7KP.js";
 
 // server/edge.ts

package/payload/server/public/activity.html

@@ -5,12 +5,12 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Activity — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/activity-ZVUTB5uZ.js"></script>
+  <script type="module" crossorigin src="/assets/activity-CpMnNr5c.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-C7TtIbR3.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-D24evn4t.js">
-  <link rel="modulepreload" crossorigin href="/assets/triangle-alert-Cy4Z0uFv.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DCkivCBS.css">
+  <link rel="modulepreload" crossorigin href="/assets/useMediaQuery-CA6dR5iz.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-DJL5DzRX.js">
+  <link rel="modulepreload" crossorigin href="/assets/triangle-alert-CR-jRJdI.js">
+  <link rel="stylesheet" crossorigin href="/assets/useMediaQuery-DpwgV1Da.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/public/agents.html

@@ -5,11 +5,11 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Agents — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/agents-Dc9SNC9N.js"></script>
+  <script type="module" crossorigin src="/assets/agents-C4LmSKjb.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-C7TtIbR3.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-D24evn4t.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DCkivCBS.css">
+  <link rel="modulepreload" crossorigin href="/assets/useMediaQuery-CA6dR5iz.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-DJL5DzRX.js">
+  <link rel="stylesheet" crossorigin href="/assets/useMediaQuery-DpwgV1Da.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/public/assets/AdminLoginScreens-DuFCjbz2.js

@@ -0,0 +1 @@
+import{o as e}from"./chunk-CltuBf4Z.js";import{H as t,J as n,K as r,Q as i,W as a,v as o}from"./useMediaQuery-CA6dR5iz.js";import{A as s}from"./useVoiceRecorder-DGhsN7nV.js";import{D as c,O as l,k as u,p as d}from"./AdminShell-DJL5DzRX.js";var f=e(i(),1);function p(e=`admin`){let[t,r]=(0,f.useState)(`loading`),[i,a]=(0,f.useState)(``),[o,c]=(0,f.useState)(``),[l,d]=(0,f.useState)(``),[p,m]=(0,f.useState)(!1),[h,g]=(0,f.useState)(!1),[_,v]=(0,f.useState)(!1),[y,b]=(0,f.useState)(!1),[x,S]=(0,f.useState)(!1),[C,w]=(0,f.useState)(null),[T,E]=(0,f.useState)(null),[D,O]=(0,f.useState)(void 0),[k,A]=(0,f.useState)(null),[j,M]=(0,f.useState)(void 0),[N,P]=(0,f.useState)(null),[F,I]=(0,f.useState)(null),[L,R]=(0,f.useState)(void 0),z=(0,f.useRef)(void 0),[B,V]=(0,f.useState)(!1),[H,U]=(0,f.useState)(!0);(0,f.useEffect)(()=>{typeof window>`u`||fetch(`/api/remote-auth/status`).then(e=>e.ok?e.json():null).then(e=>{e?.configured&&V(!0)}).catch(()=>{})},[]);let W=(0,f.useRef)(null),G=(0,f.useRef)(null);(0,f.useEffect)(()=>{async function e(){let e=null;try{e=sessionStorage.getItem(`maxy-admin-session-key`)}catch{}if(!e)return!1;try{let t=await fetch(`/api/admin/session?session_key=${encodeURIComponent(e)}`);if(t.status===401){try{sessionStorage.removeItem(`maxy-admin-session-key`)}catch{}return!1}if(!t.ok)return!1;let n=await t.json();w(n.session_key),I(n.sessionId??null),O(n.businessName),A(n.role??null),M(n.userName===void 0?null:n.userName),P(n.avatar??null);let i=s(n.thinkingView);return z.current=i,R(i),r(`chat`),!0}catch(e){return console.error(`[admin] session restore failed:`,e),!1}}async function t(n=2){try{let i=await fetch(`/api/health`);if(!i.ok){if(n>0)return await new Promise(e=>setTimeout(e,1500)),t(n-1);console.error(`[admin] health check returned ${i.status} after retries`),r(`set-pin`);return}let a=await i.json();if(!a.pin_configured){r(`set-pin`);return}U(!!a.claude_authenticated);let o=!1;try{o=new URLSearchParams(window.location.search).get(`connect`)===`claude`}catch{}if(o){try{let e=new URL(window.location.href);e.searchParams.delete(`connect`),window.history.replaceState(null,``,e.pathname+e.search+e.hash)}catch{}if(!a.claude_authenticated){r(`connect-claude`);return}}if(await e())return;r(`enter-pin`)}catch(e){if(n>0)return await new Promise(e=>setTimeout(e,1500)),t(n-1);console.error(`[admin] health check failed:`,e),r(`set-pin`)}}t()},[]),(0,f.useEffect)(()=>{t===`chat`&&C&&fetch(`/api/admin/claude-info?session_key=${encodeURIComponent(C)}`).then(e=>{if(e.ok)return e.json()}).then(e=>{e&&E(e)}).catch(()=>{})},[t,C]);let K=(0,f.useRef)(null);(0,f.useEffect)(()=>{if(t!==`chat`)return;let e=setInterval(async()=>{try{let e=await fetch(`/api/health`);if(e.ok){let t=await e.json();U(t.auth_status!==`dead`&&t.auth_status!==`missing`)}}catch{}if(C)try{let e=await fetch(`/api/admin/session?session_key=${encodeURIComponent(C)}`);if(e.status!==401)return;let t=(await e.clone().json().catch(()=>null))?.code??`unknown-401`;if(t===`remote-auth-required`){n(`heartbeat`,`/api/admin/session`);return}console.warn(`[admin-auth] outcome=heartbeat-detected-expiry code=${t}`),K.current?.()}catch{}},300*1e3);return()=>clearInterval(e)},[t,C]),(0,f.useEffect)(()=>{t===`connect-claude`&&fetch(`/api/health`).then(e=>e.ok?e.json():null).then(e=>{e?.claude_authenticated&&(U(!0),r(`enter-pin`))}).catch(()=>{})},[t]);async function q(e,t){g(!0);try{let i=await fetch(`/api/admin/session`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:e,...t?{accountId:t}:{}})});if(!i.ok){let e=await i.json().catch(()=>({}));if(i.status===401&&e?.code===`remote-auth-required`){n(`enter-pin`,`/api/admin/session`);return}d(e.error||`Invalid PIN`);return}let o=await i.json();w(o.session_key),I(o.sessionId??null),O(o.businessName),A(o.role??null),M(o.userName===void 0?null:o.userName),P(o.avatar??null);let c=s(o.thinkingView);z.current=c,R(c);try{sessionStorage.setItem(`maxy-admin-session-key`,o.session_key)}catch{}a(``),r(`chat`)}catch(e){console.error(`[admin] connection error:`,e),d(`Could not connect.`)}finally{g(!1)}}let J=(0,f.useCallback)(async e=>{if(e.preventDefault(),h)return;d(``);let t=o.trim();if(!t){d(`Please enter your name.`);return}if(i.length<4){d(`PIN must be at least 4 characters.`);return}let s=i;g(!0);try{let e=await fetch(`/api/onboarding/set-pin`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({pin:s,name:t})});if(!e.ok){let t=await e.json().catch(()=>({}));if(e.status===401&&t?.code===`remote-auth-required`){n(`set-pin`,`/api/onboarding/set-pin`);return}if(e.status===409){try{let e=await fetch(`/api/health`);if(e.ok){let n=await e.json();n.pin_configured&&n.claude_authenticated?r(`enter-pin`):n.pin_configured?r(`connect-claude`):d(t.error||`Failed to set PIN.`)}else r(`enter-pin`)}catch{r(`enter-pin`)}return}d(t.error||`Failed to set PIN.`);return}let i=await fetch(`/api/health`);if((i.ok?await i.json():null)?.claude_authenticated){await q(s);return}a(``),r(`connect-claude`)}catch(e){console.error(`[admin] connection error:`,e),d(`Could not connect.`)}finally{g(!1)}},[i,h,o]),Y=(0,f.useCallback)(async e=>{e.preventDefault(),d(``),await q(i)},[i]),X=(0,f.useCallback)(async()=>{S(!0);try{if(!await u())return console.warn(`[admin-ui] claude-disconnect not verified — credentials may persist; staying put`),!1;U(!1),w(null),A(null),M(void 0),P(null);try{sessionStorage.removeItem(`maxy-admin-session-key`)}catch{}return r(`connect-claude`),!0}finally{S(!1)}},[]),Z=(0,f.useCallback)(()=>{w(null),A(null),M(void 0),P(null);try{sessionStorage.removeItem(`maxy-admin-session-key`)}catch{}a(``),d(``),r(`enter-pin`)},[]);return(0,f.useEffect)(()=>{K.current=Z},[Z]),{appState:t,setAppState:r,pin:i,setPin:a,operatorName:o,setOperatorName:c,pinError:l,setPinError:d,showPin:p,setShowPin:m,pinLoading:h,authPolling:_,setAuthPolling:v,authLoading:y,setAuthLoading:b,disconnecting:x,cacheKey:C,setCacheKey:w,claudeInfo:T,setClaudeInfo:E,businessName:D,role:k,userName:j,userAvatar:N,sessionId:F,setSessionId:I,expandAll:L,setExpandAll:R,expandAllDefaultRef:z,remoteAuthEnabled:B,claudeConnected:H,pinInputRef:W,setPinFormRef:G,handleSetPin:J,handleLogin:Y,handleDisconnect:X,handleLogout:Z}}var m=r();function h({inputRef:e,value:t,onChange:n,onComplete:r,showPin:i,autoFocus:a}){let o=(0,f.useRef)([]);function s(e,r){r.key===`Backspace`?(r.preventDefault(),t[e]?n(t.slice(0,e)+t.slice(e+1)):e>0&&(n(t.slice(0,e-1)+t.slice(e)),o.current[e-1]?.focus())):r.key===`ArrowLeft`&&e>0?o.current[e-1]?.focus():r.key===`ArrowRight`&&e<5?o.current[e+1]?.focus():r.key===`Enter`&&(r.preventDefault(),r.currentTarget.form?.requestSubmit())}function c(e,i){let a=i.nativeEvent.data;if(!a||!/^\d$/.test(a))return;let s=t.split(``);for(s[e]=a;s.length<e;)s.push(``);let c=s.join(``).replace(/\D/g,``).slice(0,6);n(c),c.length===6?r?.(c):e<5&&o.current[e+1]?.focus()}function l(e){e.preventDefault();let t=e.clipboardData.getData(`text`).replace(/\D/g,``).slice(0,6);t&&(n(t),t.length===6?r?.(t):o.current[t.length]?.focus())}return(0,m.jsx)(`div`,{className:`pin-field`,children:Array.from({length:6}).map((n,r)=>(0,m.jsx)(`input`,{ref:t=>{o.current[r]=t,r===0&&e&&(e.current=t)},type:`text`,inputMode:`numeric`,className:`pin-box${t[r]?` pin-box-filled`:``}`,value:t[r]?i?t[r]:`•`:``,onKeyDown:e=>s(r,e),onInput:e=>c(r,e),onPaste:l,onFocus:e=>e.target.select(),autoFocus:a&&r===0,autoComplete:`off`,maxLength:1,"aria-label":`PIN digit ${r+1}`},r))})}function g(e){let{pin:n,setPin:r,showPin:i,setShowPin:o,pinLoading:s,pinError:u,pinInputRef:d,setPinFormRef:f,onSubmit:p,operatorName:g,setOperatorName:_}=e;return(0,m.jsx)(`div`,{className:`connect-page`,children:(0,m.jsxs)(`div`,{className:`connect-content`,children:[(0,m.jsx)(`img`,{src:a,alt:t.productName,className:`connect-logo connect-logo--maxy`}),!t.logoContainsName&&(0,m.jsxs)(`h1`,{className:`connect-title`,children:[`Welcome to `,t.productName]}),(0,m.jsxs)(`p`,{className:`connect-subtitle`,children:[`Tell `,t.productName,` who you are, then choose a PIN.`]}),(0,m.jsxs)(`form`,{ref:f,onSubmit:p,className:`connect-pin-form`,children:[(0,m.jsxs)(`div`,{className:`pin-input-row`,children:[(0,m.jsx)(`input`,{type:`text`,className:`connect-name-input`,placeholder:`Your full name`,value:g,onChange:e=>_(e.target.value),autoComplete:`name`,autoFocus:!0,required:!0,"aria-label":`Your full name`}),(0,m.jsx)(`div`,{style:{width:38,flexShrink:0},"aria-hidden":`true`})]}),(0,m.jsxs)(`div`,{className:`pin-input-row`,children:[(0,m.jsx)(h,{inputRef:d,value:n,onChange:r,onComplete:()=>{},showPin:i}),(0,m.jsx)(c,{variant:`send`,type:`submit`,disabled:!n||!g.trim(),loading:s,"aria-label":`Set PIN`,children:(0,m.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,m.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,m.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,m.jsx)(l,{checked:i,onChange:()=>o(e=>!e),label:`Show PIN`})]}),u&&(0,m.jsx)(`p`,{className:`admin-pin-error`,children:u})]})})}function _(e){let{pin:n,setPin:r,showPin:i,setShowPin:o,pinLoading:s,pinError:u,pinInputRef:d,onSubmit:f,remoteAuthEnabled:p,onSignOutRemote:g}=e;return(0,m.jsxs)(`div`,{className:`connect-page`,children:[p&&g&&(0,m.jsx)(`button`,{type:`button`,className:`connect-signout`,onClick:g,children:`Sign out`}),(0,m.jsxs)(`div`,{className:`connect-content`,children:[(0,m.jsx)(`img`,{src:a,alt:t.productName,className:`connect-logo connect-logo--maxy`}),!t.logoContainsName&&(0,m.jsx)(`h1`,{className:`connect-title`,children:t.productName}),(0,m.jsxs)(`form`,{onSubmit:f,className:`connect-pin-form`,children:[(0,m.jsxs)(`div`,{className:`pin-input-row`,children:[(0,m.jsx)(h,{inputRef:d,value:n,onChange:r,onComplete:()=>{},showPin:i,autoFocus:!0}),(0,m.jsx)(c,{variant:`send`,type:`submit`,disabled:!n,loading:s,children:(0,m.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,m.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,m.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]}),(0,m.jsx)(`div`,{className:`pin-options`,children:(0,m.jsx)(l,{checked:i,onChange:()=>o(e=>!e),label:`Show PIN`})})]}),u&&(0,m.jsx)(`p`,{className:`admin-pin-error`,children:u})]})]})}function v(e){let{authPolling:n,setAuthPolling:r,authLoading:i,setAuthLoading:o,pinError:s,setPinError:l,setAppState:u}=e,[p,h]=(0,f.useState)(!1),[g,_]=(0,f.useState)(!1),[v,y]=(0,f.useState)(``),[b,x]=(0,f.useState)(``),[S,C]=(0,f.useState)(``),[w,T]=(0,f.useState)(null),[E,D]=(0,f.useState)(null),[O,k]=(0,f.useState)(!1);(0,f.useEffect)(()=>{try{D(sessionStorage.getItem(`maxy-admin-session-key`))}catch{}k(!0)},[]);async function A(){C(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`paste-code`,code:b})})).json();e.accepted?(C(`Code submitted. Finishing sign-in…`),x(``)):C(e.error||`Could not submit code.`)}catch(e){console.error(`[admin] paste-code error:`,e),C(`Could not submit code.`)}}async function j(){_(!0),l(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`launch-browser`})})).json();e.launched?h(!0):e.error&&l(e.error)}catch(e){console.error(`[admin] browser launch error:`,e),l(`Could not launch browser.`)}_(!1)}async function M(){o(!0),l(``);try{let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`})).json();if(e.started){r(!0),h(!0),o(!1),y(e.transport||``);for(let e=0;e<120;e++){await new Promise(e=>setTimeout(e,2e3));let e=await(await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`wait`})})).json();if(typeof e.authTargetId==`string`&&T(e.authTargetId),e.authenticated){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),u(`enter-pin`);return}}l(`Timed out waiting for sign-in. Try again.`),r(!1)}else e.error&&l(e.error)}catch(e){console.error(`[admin] auth flow error:`,e),l(`Could not start auth flow.`)}o(!1)}async function N(){await fetch(`/api/onboarding/claude-auth`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({action:`stop`})}),r(!1),l(``)}return n||p?(0,m.jsxs)(`div`,{style:{display:`flex`,flexDirection:`column`,height:`100dvh`,overflow:`auto`},children:[(0,m.jsxs)(`header`,{className:`chat-header`,style:{paddingBottom:`12px`,flexShrink:0,position:`relative`,maxWidth:`680px`,width:`100%`,margin:`0 auto`,padding:`24px 20px 12px`},children:[n?(0,m.jsx)(`button`,{onClick:N,style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Cancel`,children:`✕`}):(0,m.jsx)(`button`,{onClick:()=>h(!1),style:{position:`absolute`,top:`12px`,right:`12px`,background:`none`,border:`none`,color:`#999`,fontSize:`13px`,cursor:`pointer`,padding:`4px 8px`},"aria-label":`Close browser`,children:`✕`}),(0,m.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`chat-logo`}),(0,m.jsx)(`h1`,{className:`chat-tagline`,children:`Connect Claude`}),(0,m.jsx)(`p`,{className:`chat-intro`,children:n?`Sign in and authorize in the browser below.`:`Open your email or prepare your accounts, then sign in.`}),!n&&(0,m.jsx)(`div`,{style:{marginTop:`12px`},children:(0,m.jsx)(c,{variant:`primary`,onClick:M,disabled:i,children:i?(0,m.jsxs)(m.Fragment,{children:[(0,m.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`})}),n&&v===`native`&&(0,m.jsxs)(`div`,{style:{marginTop:`14px`,maxWidth:`420px`,margin:`14px auto 0`,display:`flex`,flexDirection:`column`,gap:`8px`},children:[(0,m.jsx)(`label`,{style:{fontSize:`12px`,color:`#999`,lineHeight:1.4},children:`If the browser didn't finish sign-in, paste the code or full redirect URL from Claude's page:`}),(0,m.jsxs)(`div`,{style:{display:`flex`,gap:`8px`},children:[(0,m.jsx)(`input`,{type:`text`,value:b,onChange:e=>x(e.target.value),placeholder:`Paste code or redirect URL`,style:{flex:1,padding:`8px 10px`,fontSize:`13px`,border:`1px solid #ccc`,borderRadius:`6px`}}),(0,m.jsx)(c,{variant:`primary`,onClick:A,disabled:!b.trim(),children:`Submit`})]}),S&&(0,m.jsx)(`p`,{style:{fontSize:`12px`,color:`#999`,margin:0},children:S})]})]}),(0,m.jsx)(`div`,{style:{flex:1,display:`flex`,flexDirection:`column`,minHeight:0,gap:`10px`,padding:`0 0 16px`},children:O&&(0,m.jsx)(d,{preferTargetId:w,cacheKey:E,chrome:!1})}),s&&(0,m.jsx)(`p`,{className:`admin-pin-error`,style:{textAlign:`center`,padding:`0 20px 16px`},children:s})]}):(0,m.jsx)(`div`,{className:`connect-page`,children:(0,m.jsxs)(`div`,{className:`connect-content`,children:[(0,m.jsxs)(`div`,{className:`connect-logos`,children:[(0,m.jsx)(`div`,{className:`connect-logo-wrap`,children:(0,m.jsx)(`img`,{src:`/brand/claude.png`,alt:`Claude`,className:`connect-logo`})}),(0,m.jsx)(`svg`,{className:`connect-arrow`,viewBox:`0 0 48 24`,fill:`none`,xmlns:`http://www.w3.org/2000/svg`,children:(0,m.jsx)(`path`,{d:`M0 12h44m0 0l-8-8m8 8l-8 8`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`})}),(0,m.jsxs)(`div`,{className:`connect-logo-wrap`,children:[(0,m.jsx)(`img`,{src:a,alt:t.productName,className:`connect-logo connect-logo--maxy`}),!t.logoContainsName&&(0,m.jsx)(`span`,{className:`connect-logo-label`,children:t.productName})]})]}),(0,m.jsxs)(`h1`,{className:`connect-title`,children:[`Connect Claude to power `,t.productName]}),(0,m.jsx)(`p`,{className:`connect-subtitle`,children:`Sign in with your Anthropic account to get started.`}),(0,m.jsx)(c,{variant:`primary`,onClick:M,disabled:i,children:i?(0,m.jsxs)(m.Fragment,{children:[(0,m.jsx)(`span`,{className:`spin`,style:{display:`inline-block`},children:`✱`}),` Connecting…`]}):`Sign in to Claude`}),(0,m.jsx)(`p`,{style:{marginTop:`6px`,fontSize:`11px`,color:`#999`,maxWidth:`300px`,textAlign:`center`,lineHeight:`1.4`},children:`First time? You may need to sign into your email and Anthropic account in the browser before connecting.`}),(0,m.jsx)(`button`,{onClick:j,disabled:g,style:{marginTop:`12px`,background:`none`,border:`none`,color:`var(--color-primary, #666)`,fontSize:`13px`,cursor:`pointer`,textDecoration:`underline`,textUnderlineOffset:`3px`},children:g?`Launching…`:`Open browser first`}),s&&(0,m.jsx)(`p`,{className:`admin-pin-error`,children:s})]})})}function y({auth:e}){return e.appState===`loading`?(0,m.jsx)(o,{surface:`gate`}):e.appState===`set-pin`?(0,m.jsx)(g,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,setPinFormRef:e.setPinFormRef,onSubmit:e.handleSetPin,operatorName:e.operatorName,setOperatorName:e.setOperatorName}):e.appState===`connect-claude`?(0,m.jsx)(v,{authPolling:e.authPolling,setAuthPolling:e.setAuthPolling,authLoading:e.authLoading,setAuthLoading:e.setAuthLoading,pinError:e.pinError,setPinError:e.setPinError,setAppState:e.setAppState}):e.appState===`enter-pin`?(0,m.jsx)(_,{pin:e.pin,setPin:e.setPin,showPin:e.showPin,setShowPin:e.setShowPin,pinLoading:e.pinLoading,pinError:e.pinError,pinInputRef:e.pinInputRef,onSubmit:e.handleLogin,remoteAuthEnabled:e.remoteAuthEnabled,onSignOutRemote:()=>{window.location.href=`/__remote-auth/logout`}}):null}export{p as n,y as t};