@rubytech/create-maxy 1.0.473 → 1.0.474

package/payload/server/public/assets/public-DEZaIlO-.js

@@ -0,0 +1,5 @@
+import{C as e,D as t,S as n,T as r,_ as i,a,b as o,d as s,f as c,h as l,i as u,j as d,k as f,m as p,n as m,p as h,r as g,s as _,t as v,u as y,v as b,w as x,x as S,y as C}from"./ChatInput-DgjefIvo.js";var w=t(),T=d(f(),1),E=`image/jpeg,image/png,image/gif,image/webp,application/pdf,text/plain,text/markdown,text/csv,text/html`,D=new Set(E.split(`,`)),O=20*1024*1024,k=typeof window<`u`&&/^(localhost|127\.0\.0\.1|[a-z0-9-]+\.local)(:|$)/.test(window.location.hostname);function A(){let e=crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=[...e].map(e=>e.toString(16).padStart(2,`0`)).join(``);return`${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}function j(){let e=window.location.pathname.match(/^\/([a-z][a-z0-9-]{2,49})$/);return e?e[1]:void 0}function M(e){return[{key:`length`,label:`At least 8 characters`,met:e.length>=8},{key:`number`,label:`Contains a number`,met:/\d/.test(e)},{key:`special`,label:`Contains a special character`,met:/[^A-Za-z0-9]/.test(e)},{key:`whitespace`,label:`No leading or trailing spaces`,met:e.length>0&&e===e.trim()}]}function N(e,t){if(t===`phone`)return e.length>4?e.slice(0,e.length-4).replace(/\d/g,`•`)+` `+e.slice(-4):e;let n=e.indexOf(`@`);return n<=2?e:e.slice(0,2)+`•••`+e.slice(n)}function P(e){let[t,n]=(0,T.useState)(null),[r,i]=(0,T.useState)(null),[a,o]=(0,T.useState)(`loading`),[s,c]=(0,T.useState)(``),[l,u]=(0,T.useState)(null),[d,f]=(0,T.useState)(null),[p,m]=(0,T.useState)(!1),[h,g]=(0,T.useState)(null),_=(0,T.useMemo)(()=>j(),[]),v=(0,T.useRef)(_||``),y=(0,T.useRef)(null),b=(0,T.useRef)(null),x=(0,T.useRef)(!1),S=(0,T.useRef)(null),[C,w]=(0,T.useState)(`sign-in`),[E,D]=(0,T.useState)(null),O=(0,T.useRef)(null),M=(0,T.useRef)(null);(0,T.useEffect)(()=>{try{let e=sessionStorage.getItem(`maxy_session`);e&&(M.current=e)}catch{}},[]);let N=(0,T.useCallback)(t=>{y.current=t,n(t);try{sessionStorage.setItem(`maxy_session`,t)}catch{}o(`chat`),e(t)},[e]),P=(0,T.useCallback)(()=>{y.current=null;try{sessionStorage.removeItem(`maxy_session`)}catch{}n(null),o(`auth-required`),w(`sign-in`)},[]),F=(0,T.useCallback)(async e=>{try{let t=v.current,n=await fetch(`/api/access/verify-token`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({token:e,agentSlug:t})}),r=await n.json();n.ok?(O.current=r.session_key,D(r.grant),w(`set-password`),window.history.replaceState({},``,window.location.pathname)):w(`link-expired`)}catch{w(`sign-in`)}},[]);return{sessionId:t,sessionKeyRef:y,sessionError:r,pageState:a,setPageState:o,agentDisplayName:s,agentImage:l,agentImageShape:d,showAgentName:p,agentSlug:_,branding:h,resolvedSlugRef:v,ensureSession:(0,T.useCallback)(async()=>{if(y.current)return y.current;if(b.current)return b.current;let e=(async()=>{try{let e=M.current,t=await fetch(`/api/session`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({session_id:A(),..._?{agent:_}:{},...e?{session_key:e}:{}})});if(!t.ok){let e=await t.json().catch(()=>({error:``}));return k&&console.error(`[session] POST /api/session failed: ${t.status} ${t.statusText}`,e),t.status===404?i(e.error||`Agent not found`):t.status===503&&i(e.error||`Service unavailable`),null}let r=await t.json();if(r.auth_required){r.agent_id&&(v.current=r.agent_id),c(r.displayName||``),r.agentImage&&u(r.agentImage),r.agentImageShape&&f(r.agentImageShape),r.showAgentName&&m(r.showAgentName),r.branding&&g(r.branding),o(`auth-required`);let e=new URLSearchParams(window.location.search).get(`token`);return e?F(e):w(`sign-in`),null}y.current=r.session_key,n(r.session_key),r.displayName&&c(r.displayName),r.agentImage&&u(r.agentImage),r.agentImageShape&&f(r.agentImageShape),r.showAgentName&&m(r.showAgentName),r.branding&&g(r.branding),o(`chat`),r.resumed&&r.messages&&(x.current=!0,S.current=r.messages);try{sessionStorage.setItem(`maxy_session`,r.session_key)}catch{}return r.session_key}catch(e){return k&&console.error(`[session] fetch /api/session threw:`,e),i(`Unable to connect. Please check your connection and try again.`),null}finally{b.current=null}})();return b.current=e,e},[_,F]),enterChat:N,enterGate:P,resumedRef:x,resumeMessagesRef:S,gateState:C,setGateState:w,grantInfo:E,setGrantInfo:D,gateSessionKeyRef:O}}function F({sessionKeyRef:e,ensureSession:t,sessionError:n,pageState:r,inputRef:a}){let[o,s]=(0,T.useState)([]),[c,l]=(0,T.useState)(!1),u=(0,T.useRef)(!1),d=e=>{u.current=e,l(e)},f=(0,T.useCallback)(async o=>{if(!u.current){d(!0),s([{role:`maxy`,content:``,timestamp:Date.now()}]);try{let n=await fetch(`/api/chat`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({greeting:!0,session_key:o})});if(n.status===401){e.current=null;try{sessionStorage.removeItem(`maxy_session`)}catch{}k&&console.warn(`[greeting] stale session, retrying with fresh session`);let r=await t();if(!r)return;n=await fetch(`/api/chat`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({greeting:!0,session_key:r})})}if(!n.ok){let e=await n.json().catch(()=>({}));throw Error(e.error||`Something went wrong`)}let r=``,a=``,c=()=>{a&&(r+=a,a=``,s(e=>{let t=[...e];return t[0]={...t[0],content:r},t}))},l=setInterval(c,60);try{for await(let e of i(n)){if(e.error)throw Object.assign(Error(e.error),{fromSSE:!0});e.text&&(a+=e.text),e.type===`component`&&(c(),s(t=>{let n=[...t],r={...n[0]},i=[...r.components||[]];return i.push({name:e.name,data:e.data,submitted:!1}),n[0]={...r,components:i},n}))}}finally{clearInterval(l),c()}}catch(e){if(k&&console.error(`[chat] greeting failed:`,e),r===`auth-required`)return;let t=e instanceof Error?e.message:String(e);s([{role:`maxy`,content:e instanceof Error&&e.fromSSE?t:n??`I'm having trouble connecting right now. Try refreshing the page.`,timestamp:Date.now()}])}finally{d(!1),r===`chat`&&a.current?.focus()}}},[e,t,n,r,a]),p=(0,T.useCallback)(async(o,c)=>{let l=c?.hidden??!1,f=c?.files??[];if(!o&&f.length===0||u.current)return;d(!0);let p=f.map(e=>({filename:e.name,mimeType:e.type})),m={role:`visitor`,content:o,attachments:p.length>0?p:void 0,timestamp:Date.now(),hidden:l},h;s(e=>{let t=[...e,m,{role:`maxy`,content:``,timestamp:Date.now()}];return h=t.length-1,t});try{let n=await t();if(!n)throw Error(`session`);let r=e=>{if(f.length>0){let t=new FormData;t.append(`message`,o),t.append(`session_key`,e);for(let e of f)t.append(`attachments`,e);return{body:t,headers:{}}}return{body:JSON.stringify({message:o,session_key:e}),headers:{"Content-Type":`application/json`}}},{body:a,headers:c}=r(n),l=await fetch(`/api/chat`,{method:`POST`,headers:c,body:a});if(l.status===401){e.current=null;try{sessionStorage.removeItem(`maxy_session`)}catch{}k&&console.warn(`[session-expired] stale key cleared, retrying with fresh session`);let n=await t();if(!n)throw Error(`session`);({body:a,headers:c}=r(n)),l=await fetch(`/api/chat`,{method:`POST`,headers:c,body:a})}if(!l.ok){let e=await l.json().catch(()=>({}));throw Error(e.error||`Something went wrong`)}let u=``,d=``,p=()=>{d&&(u+=d,d=``,s(e=>{let t=[...e];return t[h]={...t[h],content:u},t}))},m=setInterval(p,60);try{for await(let e of i(l)){if(e.error)throw Object.assign(Error(e.error),{fromSSE:!0});e.text&&(d+=e.text),e.type===`component`&&(p(),s(t=>{let n=[...t],r={...n[h]},i=[...r.components||[]];return i.push({name:e.name,data:e.data,submitted:!1}),n[h]={...r,components:i},n}))}}finally{clearInterval(m),p()}}catch(e){if(k&&console.error(`[chat] sendMessage failed:`,e),r===`auth-required`)return;let t=e instanceof Error?e.message:String(e),i=e instanceof Error&&e.fromSSE;s(e=>{let r=[...e];return r[h]={...r[h],content:i?t:t===`session`?n??`I'm having trouble connecting right now. Try refreshing the page.`:`Sorry, I hit a snag. Try again in a moment.`},r})}finally{d(!1),r===`chat`&&a.current?.focus()}},[e,t,n,r,a]);return{messages:o,setMessages:s,isStreaming:c,sendMessage:p,sendGreeting:f,handleComponentSubmit:(0,T.useCallback)((e,t,n)=>{s(n=>{let r=[...n],i={...r[e]},a=[...i.components||[]];return a[t]={...a[t],submitted:!0},r[e]={...i,components:a},r}),p(n,{hidden:!0})},[p])}}var I=c();function L({value:e,onChange:t,onComplete:n,disabled:r}){let i=(0,T.useRef)([]);function a(n,r){r.key===`Backspace`?(r.preventDefault(),e[n]?t(e.slice(0,n)+e.slice(n+1)):n>0&&(t(e.slice(0,n-1)+e.slice(n)),i.current[n-1]?.focus())):r.key===`ArrowLeft`&&n>0?i.current[n-1]?.focus():r.key===`ArrowRight`&&n<5&&i.current[n+1]?.focus()}function o(r,a){let o=a.nativeEvent.data;if(!o||!/^\d$/.test(o))return;let s=e.split(``);for(s[r]=o;s.length<r;)s.push(``);let c=s.join(``).replace(/\D/g,``).slice(0,6);t(c),c.length===6?n(c):r<5&&i.current[r+1]?.focus()}function s(e){e.preventDefault();let r=e.clipboardData.getData(`text`).replace(/\D/g,``).slice(0,6);r&&(t(r),r.length===6?n(r):i.current[r.length]?.focus())}return(0,I.jsx)(`div`,{className:`gate-otp-field`,children:Array.from({length:6}).map((t,n)=>(0,I.jsx)(`input`,{ref:e=>{i.current[n]=e},type:`text`,inputMode:`numeric`,className:`pin-box${e[n]?` pin-box-filled`:``}`,value:e[n]||``,onKeyDown:e=>a(n,e),onInput:e=>o(n,e),onPaste:s,onFocus:e=>e.target.select(),autoFocus:n===0,autoComplete:`off`,maxLength:1,disabled:r,"aria-label":`Code digit ${n+1}`},n))})}function R({gateState:e,setGateState:t,grantInfo:n,setGrantInfo:r,gateSessionKeyRef:i,resolvedSlugRef:a,onAuthenticated:o}){let[c,l]=(0,T.useState)(``),[u,d]=(0,T.useState)(``),[f,p]=(0,T.useState)(``),[m,h]=(0,T.useState)(!1),[g,_]=(0,T.useState)(``),[v,b]=(0,T.useState)(``),[x,S]=(0,T.useState)(!1),[C,w]=(0,T.useState)(null),[E,D]=(0,T.useState)(null),[O,k]=(0,T.useState)(!1);async function A(e){if(e.preventDefault(),!O){w(null),k(!0);try{let e=a.current,n=await fetch(`/api/access/login`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({contact:c,password:u,agentSlug:e})}),i=await n.json();n.ok?o(i.session_key):n.status===401?i.error?.includes(`setup not complete`)||i.error?.includes(`invitation link`)?(t(`private-agent`),w(null)):w(i.error||`Invalid credentials`):n.status===403?(t(`access-expired`),i.expiresAt&&r(e=>e?{...e,expiresAt:i.expiresAt}:{displayName:null,contactValue:c,contactMethod:`email`,expiresAt:i.expiresAt,status:`expired`})):n.status===429?w(i.error||`Too many attempts. Please try again later.`):w(i.error||`Something went wrong`)}catch{w(`Unable to connect. Please try again.`)}finally{k(!1)}}}async function j(e){if(!O){w(null),k(!0);try{let n=a.current,o=await fetch(`/api/access/verify-otp`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({phone:v,code:e,agentSlug:n})}),s=await o.json();o.ok?(i.current=s.session_key,r(s.grant),t(`set-password`)):o.status===429?t(`otp-failed`):(w(s.error||`Invalid code`),_(``))}catch{w(`Unable to connect. Please try again.`)}finally{k(!1)}}}async function P(e){if(e.preventDefault(),!O){if(w(null),u!==f){w(`Passwords do not match`);return}if(!M(u).every(e=>e.met)){w(`Password does not meet requirements`);return}k(!0);try{let e=i.current;if(!e){w(`Session expired. Please use your invitation link again.`);return}let t=await fetch(`/api/access/create-credentials`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({session_key:e,password:u})}),n=await t.json();t.ok?o(n.session_key):t.status===400&&n.requirements?w(n.requirements.filter(e=>!e.met).map(e=>e.label).join(`, `)):w(n.error||`Something went wrong`)}catch{w(`Unable to connect. Please try again.`)}finally{k(!1)}}}async function F(e){if(e.preventDefault(),!(O||!c)){w(null),k(!0);try{let e=a.current,t=await fetch(`/api/access/forgot-password`,{method:`POST`,headers:{"Content-Type":`application/json`},body:JSON.stringify({contact:c,agentSlug:e})});t.status===429?w((await t.json()).error||`Too many attempts. Please try again later.`):(D(`If an account exists, a reset link has been sent.`),setTimeout(()=>{S(!1),D(null)},4e3))}catch{w(`Unable to connect. Please try again.`)}finally{k(!1)}}}switch(e){case`set-password`:{let e=M(u),t=e.every(e=>e.met),r=u===f,i=t&&r&&f.length>0;return(0,I.jsx)(`div`,{className:`gate-wrap`,children:(0,I.jsxs)(`div`,{className:`gate-card`,children:[n?.expiresAt&&(0,I.jsxs)(`div`,{className:`gate-expiry-badge`,children:[`Access until `,new Date(n.expiresAt).toLocaleDateString(`en-GB`,{day:`numeric`,month:`short`,year:`numeric`})]}),(0,I.jsxs)(`h2`,{className:`gate-title`,children:[`Welcome, `,n?.displayName||`there`]}),(0,I.jsx)(`p`,{className:`gate-subtitle`,children:`Create a password to access this agent in the future.`}),(0,I.jsxs)(`form`,{className:`gate-form`,onSubmit:P,children:[(0,I.jsxs)(`div`,{className:`gate-field`,children:[(0,I.jsx)(`label`,{htmlFor:`gate-display-name`,children:`Display name`}),(0,I.jsx)(`input`,{id:`gate-display-name`,type:`text`,value:n?.displayName||``,disabled:!0})]}),(0,I.jsxs)(`div`,{className:`gate-field gate-pw-row`,children:[(0,I.jsx)(`label`,{htmlFor:`gate-pw`,children:`Password`}),(0,I.jsx)(`div`,{className:`gate-pw-toggle`,children:(0,I.jsx)(s,{checked:m,onChange:h,label:`Show`})}),(0,I.jsx)(`input`,{id:`gate-pw`,type:m?`text`:`password`,value:u,onChange:e=>d(e.target.value),placeholder:`Your password`,autoFocus:!0,autoComplete:`new-password`}),u.length>0&&(0,I.jsx)(`div`,{className:`gate-strength`,children:e.map(e=>(0,I.jsxs)(`span`,{className:`gate-strength-item${e.met?` met`:``}`,children:[e.met?`✓`:`○`,` `,e.label]},e.key))})]}),(0,I.jsxs)(`div`,{className:`gate-field`,children:[(0,I.jsx)(`label`,{htmlFor:`gate-pw-confirm`,children:`Confirm password`}),(0,I.jsx)(`input`,{id:`gate-pw-confirm`,type:m?`text`:`password`,value:f,onChange:e=>p(e.target.value),placeholder:`Confirm your password`,autoComplete:`new-password`}),f.length>0&&!r&&(0,I.jsx)(`div`,{className:`gate-error`,children:`Passwords do not match`})]}),C&&(0,I.jsx)(`div`,{className:`gate-error`,children:C}),(0,I.jsx)(`div`,{className:`gate-submit`,children:(0,I.jsx)(y,{variant:`primary`,type:`submit`,fullWidth:!0,disabled:!i||O,loading:O,children:`Create account & enter chat`})})]})]})})}case`enter-otp`:return(0,I.jsx)(`div`,{className:`gate-wrap`,children:(0,I.jsxs)(`div`,{className:`gate-card`,children:[(0,I.jsx)(`h2`,{className:`gate-title`,children:`Enter your code`}),(0,I.jsxs)(`p`,{className:`gate-subtitle`,children:[`Enter the 6-digit code sent to `,N(v,`phone`)]}),(0,I.jsx)(L,{value:g,onChange:_,onComplete:j,disabled:O}),C&&(0,I.jsx)(`div`,{className:`gate-error`,children:C}),O&&(0,I.jsxs)(`div`,{className:`gate-loading`,children:[(0,I.jsx)(`span`,{className:`spinner`}),`Verifying...`]}),(0,I.jsx)(`div`,{className:`gate-resend`,children:(0,I.jsx)(`button`,{type:`button`,className:`gate-link`,onClick:()=>{t(`sign-in`),_(``),w(null)},children:`Use a different number`})})]})});case`sign-in`:case`private-agent`:return(0,I.jsx)(`div`,{className:`gate-wrap`,children:(0,I.jsxs)(`div`,{className:`gate-card`,children:[(0,I.jsx)(`h2`,{className:`gate-title`,children:e===`private-agent`?`Private Agent`:`Welcome back`}),(0,I.jsx)(`p`,{className:`gate-subtitle`,children:e===`private-agent`?`This agent is invitation-only. If you have an account, sign in below.`:`Sign in to continue your conversation.`}),x?(0,I.jsxs)(`form`,{className:`gate-form`,onSubmit:F,children:[(0,I.jsxs)(`div`,{className:`gate-field`,children:[(0,I.jsx)(`label`,{htmlFor:`gate-forgot-contact`,children:`Email or phone`}),(0,I.jsx)(`input`,{id:`gate-forgot-contact`,type:`text`,value:c,onChange:e=>l(e.target.value),placeholder:`you@example.com`,autoFocus:!0,autoComplete:`email`})]}),C&&(0,I.jsx)(`div`,{className:`gate-error`,children:C}),E&&(0,I.jsx)(`div`,{className:`gate-success`,children:E}),(0,I.jsx)(`div`,{className:`gate-submit`,children:(0,I.jsx)(y,{variant:`primary`,type:`submit`,fullWidth:!0,disabled:!c.trim()||O,loading:O,children:`Send reset link`})}),(0,I.jsx)(`div`,{className:`gate-actions`,children:(0,I.jsx)(`button`,{type:`button`,className:`gate-link`,onClick:()=>{S(!1),w(null),D(null)},children:`Back to sign in`})})]}):(0,I.jsxs)(`form`,{className:`gate-form`,onSubmit:A,children:[(0,I.jsxs)(`div`,{className:`gate-field`,children:[(0,I.jsx)(`label`,{htmlFor:`gate-contact`,children:`Email or phone`}),(0,I.jsx)(`input`,{id:`gate-contact`,type:`text`,value:c,onChange:e=>l(e.target.value),placeholder:`you@example.com`,autoFocus:!0,autoComplete:`email`})]}),(0,I.jsxs)(`div`,{className:`gate-field gate-pw-row`,children:[(0,I.jsx)(`label`,{htmlFor:`gate-login-pw`,children:`Password`}),(0,I.jsx)(`div`,{className:`gate-pw-toggle`,children:(0,I.jsx)(s,{checked:m,onChange:h,label:`Show`})}),(0,I.jsx)(`input`,{id:`gate-login-pw`,type:m?`text`:`password`,value:u,onChange:e=>d(e.target.value),placeholder:`Your password`,autoComplete:`current-password`})]}),C&&(0,I.jsx)(`div`,{className:`gate-error`,children:C}),(0,I.jsx)(`div`,{className:`gate-submit`,children:(0,I.jsx)(y,{variant:`primary`,type:`submit`,fullWidth:!0,disabled:!c.trim()||!u||O,loading:O,children:`Sign in`})}),(0,I.jsx)(`div`,{className:`gate-actions`,children:(0,I.jsx)(`button`,{type:`button`,className:`gate-link`,onClick:()=>{S(!0),w(null)},children:`Forgot password?`})})]}),e===`private-agent`&&(0,I.jsx)(`p`,{className:`gate-hint`,children:`No account? You need an invitation from the agent owner.`})]})});case`access-expired`:return(0,I.jsx)(`div`,{className:`gate-wrap`,children:(0,I.jsxs)(`div`,{className:`gate-card`,children:[(0,I.jsx)(`div`,{className:`gate-icon`,children:`⏰`}),(0,I.jsx)(`h2`,{className:`gate-title`,children:`Access expired`}),(0,I.jsxs)(`p`,{className:`gate-subtitle`,children:[n?.expiresAt?`Your access expired on ${new Date(n.expiresAt).toLocaleDateString(`en-GB`,{day:`numeric`,month:`long`,year:`numeric`})}.`:`Your access to this agent has expired.`,` `,`Contact the agent owner to renew.`]}),(0,I.jsx)(`div`,{className:`gate-actions`,children:(0,I.jsx)(y,{variant:`secondary`,onClick:()=>{t(`sign-in`),w(null),d(``)},children:`Sign in with a different account`})})]})});case`link-expired`:return(0,I.jsx)(`div`,{className:`gate-wrap`,children:(0,I.jsxs)(`div`,{className:`gate-card`,children:[(0,I.jsx)(`div`,{className:`gate-icon`,children:`⚠️`}),(0,I.jsx)(`h2`,{className:`gate-title`,children:`Link expired`}),(0,I.jsx)(`p`,{className:`gate-subtitle`,children:`This invitation link has expired or has already been used. If you already set your password, sign in below. Otherwise, ask the agent owner to send a new invitation.`}),(0,I.jsx)(`div`,{className:`gate-actions`,children:(0,I.jsx)(y,{variant:`primary`,onClick:()=>{t(`sign-in`),w(null)},children:`Go to sign in`})})]})});case`otp-failed`:return(0,I.jsx)(`div`,{className:`gate-wrap`,children:(0,I.jsxs)(`div`,{className:`gate-card`,children:[(0,I.jsx)(`div`,{className:`gate-icon`,children:`⛔`}),(0,I.jsx)(`h2`,{className:`gate-title`,children:`Too many attempts`}),(0,I.jsx)(`p`,{className:`gate-subtitle`,children:`You've entered the wrong code too many times. Ask the agent owner to send a new code.`}),(0,I.jsx)(`div`,{className:`gate-actions`,children:(0,I.jsx)(y,{variant:`secondary`,onClick:()=>{t(`sign-in`),w(null),_(``)},children:`Back to sign in`})})]})})}}var z={"single-select":a,"multi-select":u};function B({name:e,data:t,onSubmit:n,submitted:r}){let i=z[e];return i?(0,I.jsx)(i,{data:t,onSubmit:n,submitted:r}):(console.warn(`[PublicComponentRenderer] Unknown component: "${e}". Registered: ${Object.keys(z).join(`, `)}`),(0,I.jsx)(`div`,{className:`component-card component-card--error`,children:(0,I.jsxs)(`p`,{style:{fontFamily:`var(--font-body)`,fontSize:12,color:`var(--text-secondary)`},children:[`Component “`,e,`” is not available. This may require a platform update.`]})}))}function V({messages:t,isStreaming:i,sessionError:a,selectionMode:o,selectedItems:c,toggleSelectItem:l,onComponentSubmit:u,remainingSuggestions:d,onSuggestionClick:f,isAtBottom:p,setIsAtBottom:m}){let[h,v]=(0,T.useState)(new Set),[b,x]=(0,T.useState)(new Set),S=(0,T.useRef)(null),C=(0,T.useRef)(null),w=(0,T.useRef)(null),E=(0,T.useRef)(!1),D=(0,T.useRef)(!1),O=(0,T.useRef)(!1),k=(0,T.useRef)(0),A=(0,T.useRef)(!1),j=(0,T.useRef)(new Map);A.current=i,(0,T.useEffect)(()=>{i&&!E.current&&p&&(D.current=!0)},[i,p]),(0,T.useEffect)(()=>{if(!D.current&&!p){E.current=i,O.current=!1;return}if(E.current&&!i&&w.current&&C.current){let e=w.current;if(e.offsetHeight>C.current.clientHeight){D.current=!1,O.current=!0,e.scrollIntoView({behavior:`smooth`,block:`start`}),E.current=i;return}}(p||D.current)&&!O.current&&S.current?.scrollIntoView({behavior:`smooth`}),E.current=i},[t,p,i]),(0,T.useEffect)(()=>{let e=C.current;if(!e)return;let t=()=>{let t=e.scrollTop;A.current&&t<k.current&&(D.current=!1),k.current=t,m(e.scrollHeight-e.scrollTop-e.clientHeight<80)};return e.addEventListener(`scroll`,t,{passive:!0}),t(),()=>e.removeEventListener(`scroll`,t)},[m]),(0,T.useEffect)(()=>{function e(){x(e=>{let t=new Set;return j.current.forEach((n,r)=>{n.isConnected&&(h.has(r)?e.has(r)&&t.add(r):n.scrollHeight>n.clientHeight+2&&t.add(r))}),e.size===t.size&&[...e].every(e=>t.has(e))?e:t})}e();let t=new ResizeObserver(e);return j.current.forEach(e=>t.observe(e)),()=>t.disconnect()},[t.length,h]);let M=t.reduce((e,t,n)=>t.role===`maxy`&&!t.hidden?n:e,-1);return(0,I.jsxs)(`div`,{className:`chat-messages-wrap`,children:[o&&(0,I.jsx)(`div`,{className:`selection-overlay-band`}),(0,I.jsxs)(`div`,{className:`chat-messages`,ref:C,children:[a&&t.length===0&&(0,I.jsx)(`div`,{className:`session-error`,children:(0,I.jsx)(`p`,{children:a})}),t.map((a,d)=>{if(a.hidden)return null;let f=i&&d===t.length-1,p=`${a.timestamp}_${a.role}`,m=c.has(p);return(0,I.jsxs)(`div`,{ref:d===M?w:void 0,className:`message ${a.role}${m?` selected`:``}`,children:[o&&!f&&(0,I.jsx)(`div`,{className:`message-select-check`,children:(0,I.jsx)(s,{checked:m,onChange:()=>l(p)})}),(0,I.jsxs)(`div`,{className:`bubble`,children:[a.role===`visitor`&&a.content?(()=>{let e=h.has(d),t=b.has(d);return(0,I.jsxs)(I.Fragment,{children:[(0,I.jsx)(`div`,{ref:e=>{e?j.current.set(d,e):j.current.delete(d)},className:e?`bubble-content`:`bubble-content clamped${t?` overflowing`:``}`,children:a.content}),t&&(0,I.jsx)(`div`,{className:`bubble-expand`,children:(0,I.jsx)(y,{variant:`icon`,className:e?`expanded`:``,onClick:()=>v(e=>{let t=new Set(e);return t.has(d)?t.delete(d):t.add(d),t}),"aria-label":e?`Collapse message`:`Expand message`,children:(0,I.jsx)(r,{size:14})})})]})})():a.content?(0,I.jsx)(_,{content:a.content,timestamp:g(a.timestamp)}):(0,I.jsxs)(`span`,{className:`typing-indicator`,children:[(0,I.jsx)(`span`,{className:`typing-dot`}),(0,I.jsx)(`span`,{className:`typing-dot`}),(0,I.jsx)(`span`,{className:`typing-dot`})]}),a.attachments&&a.attachments.length>0&&(0,I.jsx)(`div`,{className:`message-attachments`,children:a.attachments.map((t,r)=>(0,I.jsxs)(`span`,{className:`message-attachment-chip no-action`,children:[t.mimeType===`application/pdf`?(0,I.jsx)(n,{size:12}):t.mimeType.startsWith(`text/`)?(0,I.jsx)(e,{size:12}):null,(0,I.jsx)(`span`,{children:t.filename})]},r))}),a.role===`visitor`&&(0,I.jsx)(`span`,{className:`message-timestamp`,children:g(a.timestamp)})]}),a.role===`maxy`&&a.components&&a.components.length>0&&(0,I.jsx)(`div`,{className:`public-components`,children:a.components.map((e,t)=>(0,I.jsx)(`div`,{className:`public-component-enter`,children:(0,I.jsx)(B,{name:e.name,data:e.data,onSubmit:e=>u(d,t,e),submitted:e.submitted})},t))})]},d)}),!i&&d.length>0&&(0,I.jsx)(`div`,{className:`chat-suggestions`,children:d.map(e=>(0,I.jsx)(y,{variant:`suggestion`,onClick:()=>f(e),children:e},e))}),(0,I.jsx)(`div`,{ref:S})]}),!p&&(0,I.jsx)(`button`,{className:`scroll-to-bottom`,onClick:()=>S.current?.scrollIntoView({behavior:`smooth`}),"aria-label":`Scroll to bottom`,children:(0,I.jsx)(r,{size:18})})]})}function H({selectedItems:e,messages:t,copySelected:n,exitSelection:r,showCopyToast:i}){let[a,o]=(0,T.useState)(!1),s=(0,T.useRef)(null),c=(0,T.useRef)(!1);function l(e){let n=e.lastIndexOf(`_`),r=e.slice(0,n),i=e.slice(n+1),a=parseInt(r,10);return t.find(e=>e.timestamp===a&&e.role===i)?.content??``}function u(e,t){return parseInt(e.slice(0,e.lastIndexOf(`_`)),10)-parseInt(t.slice(0,t.lastIndexOf(`_`)),10)}function d(){let e=[...t].sort((e,t)=>e.timestamp-t.timestamp),n=[];for(let t of e){if(t.hidden||!t.content)continue;let e=t.role===`visitor`?`Visitor`:`Maxy`;n.push(`${e}:\n${t.content}`)}return n.join(`
+
+---
+
+`)}T.useEffect(()=>{if(!a)return;let e=e=>{e.target.closest(`.selection-copy-wrap`)||o(!1)};return document.addEventListener(`pointerdown`,e),()=>document.removeEventListener(`pointerdown`,e)},[a]);function f(){s.current!==null&&(clearTimeout(s.current),s.current=null)}return(0,I.jsx)(`div`,{className:`chat-input-area`,children:(0,I.jsxs)(`div`,{className:`selection-bar`,children:[(0,I.jsxs)(`span`,{className:`selection-count`,children:[e.size,` Selected`]}),(0,I.jsxs)(`div`,{className:`selection-copy-wrap`,children:[(0,I.jsxs)(`button`,{type:`button`,className:`selection-copy`,onPointerDown:()=>{if(a){o(!1);return}c.current=!1,s.current=setTimeout(()=>{c.current=!0,o(!0),s.current=null},500)},onPointerUp:f,onPointerLeave:f,onPointerCancel:f,onClick:async()=>{c.current||await n(l,u)},children:[(0,I.jsx)(x,{size:18}),(0,I.jsx)(`span`,{children:`Copy`})]}),a&&(0,I.jsx)(`div`,{className:`copy-menu`,children:(0,I.jsx)(`button`,{type:`button`,className:`copy-menu-item`,onClick:async()=>{let e=d();e&&i(await b(e)),r()},children:`Copy all`})})]}),(0,I.jsx)(`button`,{type:`button`,className:`selection-cancel`,onClick:r,children:`Cancel`})]})})}function U({input:t,setInput:r,isStreaming:i,pendingFiles:a,setPendingFiles:o,attachError:s,setAttachError:c,isDragOver:l,setIsDragOver:u,inputRef:d,onSubmit:f}){let p=(0,T.useRef)(null);function h(e){c(null);let t=e.find(e=>!D.has(e.type));if(t){c(`Unsupported file type: "${t.type}". Supported: images, PDF, plain text, markdown, CSV.`);return}let n=e.find(e=>e.size>O);if(n){c(`"${n.name}" exceeds the 20 MB limit.`);return}o(t=>[...t,...e].slice(0,5))}function g(e){e.preventDefault(),u(!0)}function _(){u(!1)}function b(e){e.preventDefault(),u(!1),h([...e.dataTransfer.files])}return(0,I.jsxs)(`div`,{className:`chat-input-area`,children:[(0,I.jsx)(`input`,{ref:p,type:`file`,multiple:!0,accept:E,style:{display:`none`},onChange:e=>{e.target.files&&h([...e.target.files]),e.target.value=``}}),a.length>0&&(0,I.jsx)(`div`,{className:`attachment-strip`,children:a.map((t,r)=>(0,I.jsxs)(`div`,{className:`attachment-chip`,children:[t.type.startsWith(`image/`)?(0,I.jsx)(`img`,{src:URL.createObjectURL(t),alt:t.name,className:`attachment-chip-thumb`}):t.type===`application/pdf`?(0,I.jsx)(n,{size:14}):(0,I.jsx)(e,{size:14}),(0,I.jsx)(`span`,{className:`attachment-chip-name`,children:t.name}),(0,I.jsx)(`button`,{type:`button`,className:`attachment-chip-remove`,onClick:()=>o(e=>e.filter((e,t)=>t!==r)),"aria-label":`Remove ${t.name}`,children:`×`})]},r))}),s&&(0,I.jsx)(`p`,{className:`attach-error`,children:s}),(0,I.jsx)(m,{inputRef:d}),(0,I.jsxs)(`form`,{className:`chat-form${l?` drag-over`:``}`,onSubmit:f,onDragOver:g,onDragLeave:_,onDrop:b,onPaste:e=>{let t=e.clipboardData?.items;if(!t)return;let n=[];for(let e of t){if(e.kind!==`file`)continue;let t=e.getAsFile();if(!t)continue;let r=t.type.split(`/`)[1]?.replace(`jpeg`,`jpg`)||`png`;n.push(new File([t],`pasted-image-${Date.now()}.${r}`,{type:t.type}))}n.length>0&&h(n)},children:[(0,I.jsx)(y,{variant:`icon`,type:`button`,onClick:()=>p.current?.click(),disabled:i,"aria-label":`Attach file`,children:(0,I.jsx)(S,{size:14})}),(0,I.jsx)(v,{ref:d,value:t,onChange:r,placeholder:`Type a message...`}),(0,I.jsx)(y,{variant:`send`,type:`submit`,disabled:i||!t.trim()&&a.length===0,"aria-label":`Send message`,children:(0,I.jsxs)(`svg`,{viewBox:`0 0 24 24`,fill:`none`,stroke:`currentColor`,strokeWidth:`2`,strokeLinecap:`round`,strokeLinejoin:`round`,children:[(0,I.jsx)(`line`,{x1:`5`,y1:`12`,x2:`19`,y2:`12`}),(0,I.jsx)(`polyline`,{points:`12 5 19 12 12 19`})]})})]})]})}var W=[];function G(){let[e,t]=(0,T.useState)(``),[n,r]=(0,T.useState)([]),[i,a]=(0,T.useState)(!1),[s,c]=(0,T.useState)(null),[u,d]=(0,T.useState)(W),[f,m]=(0,T.useState)(!0),g=(0,T.useRef)(null),{selectionMode:_,selectedItems:v,copyToast:y,exitSelection:b,enterSelection:x,toggleSelectItem:S,copySelected:w,showCopyToast:E}=C(),D=(0,T.useRef)(()=>{}),O=P((0,T.useCallback)(e=>{D.current(e)},[])),{sessionId:k,sessionKeyRef:A,sessionError:j,pageState:M,agentDisplayName:N,agentImage:L,agentImageShape:z,showAgentName:B,branding:G,ensureSession:K,resumedRef:q,resumeMessagesRef:J}=O,{messages:Y,setMessages:X,isStreaming:Z,sendMessage:ee,sendGreeting:Q,handleComponentSubmit:te}=F({sessionKeyRef:A,ensureSession:K,sessionError:j,pageState:M,inputRef:g});(0,T.useEffect)(()=>{D.current=Q},[Q]),(0,T.useEffect)(()=>{let e=!1;return(async()=>{let t=await K();if(!e&&t){if(q.current&&J.current&&J.current.length>0){X(J.current.map(e=>({role:e.role,content:e.content,timestamp:e.timestamp}))),J.current=null;return}Q(t)}})(),()=>{e=!0}},[]),(0,T.useEffect)(()=>{M===`chat`&&g.current?.focus()},[M]),(0,T.useEffect)(()=>{if(!G)return;let e=document.documentElement;if(G.primaryColor&&(e.style.setProperty(`--sage`,G.primaryColor),e.style.setProperty(`--sage-hover`,G.primaryColor),e.style.setProperty(`--sage-subtle`,G.primaryColor+`14`),e.style.setProperty(`--sage-glow`,G.primaryColor+`26`)),G.accentColor&&e.style.setProperty(`--visitor-bubble`,G.accentColor),G.backgroundColor&&e.style.setProperty(`--bg`,G.backgroundColor),document.title=G.name,G.primaryColor){let e=document.querySelector(`meta[name="theme-color"]`);e||(e=document.createElement(`meta`),e.name=`theme-color`,document.head.appendChild(e)),e.content=G.primaryColor}if(G.faviconUrl){let e=document.querySelector(`link[rel="icon"]`);e||(e=document.createElement(`link`),e.rel=`icon`,document.head.appendChild(e)),e.href=G.faviconUrl}},[G]),(0,T.useEffect)(()=>{function e(e){e.key===`Escape`&&_&&b()}return window.addEventListener(`keydown`,e),()=>window.removeEventListener(`keydown`,e)},[_,b]);function $(e){if(!e&&n.length===0||Z)return;X(e=>e.map(e=>e.components?.some(e=>!e.submitted)?{...e,components:e.components.map(e=>e.submitted?e:{...e,submitted:!0})}:e)),d(t=>t.filter(t=>t!==e)),m(!0);let i=[...n];t(``),r([]),c(null),ee(e,{files:i})}function ne(t){t.preventDefault(),$(e.trim()),g.current?.resetHeight()}return(0,I.jsxs)(`div`,{className:`chat-page`,children:[(0,I.jsxs)(`header`,{className:`chat-header`,children:[(0,I.jsx)(`img`,{src:L||G?.logoUrl||l,alt:G?.name||h.productName,className:`chat-logo${L&&z===`circle`?` chat-logo--circle`:``}${L&&z===`rounded`?` chat-logo--rounded`:``}`,onError:e=>{e.target.src=G?.logoUrl||l}}),(0,I.jsxs)(`div`,{className:`chat-header-text`,children:[B!==`none`&&(0,I.jsx)(`h1`,{className:`chat-tagline`,children:B&&N||G?.name||h.productName}),(0,I.jsx)(`p`,{className:`chat-intro`,children:G?.tagline||``})]}),M===`chat`&&!_&&(0,I.jsx)(`button`,{className:`chat-header-select`,onClick:x,title:`Select messages`,"aria-label":`Select messages`,children:(0,I.jsx)(o,{size:16})})]}),M===`loading`&&(0,I.jsx)(`div`,{className:`gate-wrap`,children:(0,I.jsx)(`div`,{className:`gate-loading`,children:(0,I.jsx)(`span`,{className:`spinner`})})}),M===`auth-required`&&(0,I.jsx)(R,{gateState:O.gateState,setGateState:O.setGateState,grantInfo:O.grantInfo,setGrantInfo:O.setGrantInfo,gateSessionKeyRef:O.gateSessionKeyRef,resolvedSlugRef:O.resolvedSlugRef,onAuthenticated:O.enterChat}),M===`chat`&&(0,I.jsxs)(I.Fragment,{children:[(0,I.jsx)(V,{messages:Y,isStreaming:Z,sessionError:j,selectionMode:_,selectedItems:v,toggleSelectItem:S,onComponentSubmit:te,remainingSuggestions:u,onSuggestionClick:$,isAtBottom:f,setIsAtBottom:m}),_?(0,I.jsx)(H,{selectedItems:v,messages:Y,copySelected:w,exitSelection:b,showCopyToast:E}):(0,I.jsx)(U,{input:e,setInput:t,isStreaming:Z,pendingFiles:n,setPendingFiles:r,attachError:s,setAttachError:c,isDragOver:i,setIsDragOver:a,inputRef:g,onSubmit:ne})]}),y&&(0,I.jsx)(`span`,{className:`copy-toast${y===`failed`?` copy-toast-failed`:``}`,children:y===`copied`?`Copied`:`Copy failed`}),(0,I.jsxs)(`footer`,{className:`chat-footer`,children:[(0,I.jsxs)(`a`,{href:p,children:[h.domain,` `,`↗`]}),k&&(0,I.jsxs)(`span`,{style:{opacity:.35,fontSize:`10px`,fontFamily:`monospace`,marginLeft:`1rem`},children:[`Session · `,k.slice(0,8)]})]})]})}(0,w.createRoot)(document.getElementById(`root`)).render((0,I.jsx)(G,{}));

package/payload/server/public/index.html

@@ -5,9 +5,9 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/admin-BEbxw46k.js"></script>
-  <link rel="modulepreload" crossorigin href="/assets/ChatInput-Dnp1FLis.js">
-  <link rel="stylesheet" crossorigin href="/assets/ChatInput-BEwQxFL9.css">
+  <script type="module" crossorigin src="/assets/admin-CW4uB1GJ.js"></script>
+  <link rel="modulepreload" crossorigin href="/assets/ChatInput-DgjefIvo.js">
+  <link rel="stylesheet" crossorigin href="/assets/ChatInput-BZayQkAS.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/public/public.html

@@ -5,9 +5,9 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/public-OdyNuhVE.js"></script>
-  <link rel="modulepreload" crossorigin href="/assets/ChatInput-Dnp1FLis.js">
-  <link rel="stylesheet" crossorigin href="/assets/ChatInput-BEwQxFL9.css">
+  <script type="module" crossorigin src="/assets/public-DEZaIlO-.js"></script>
+  <link rel="modulepreload" crossorigin href="/assets/ChatInput-DgjefIvo.js">
+  <link rel="stylesheet" crossorigin href="/assets/ChatInput-BZayQkAS.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/server.js

@@ -2851,7 +2851,7 @@ var serveStatic = (options = { root: "" }) => {
 };
 
 // server/index.ts
-import { readFileSync as readFileSync20, existsSync as existsSync20, watchFile } from "fs";
+import { readFileSync as readFileSync19, existsSync as existsSync19, watchFile } from "fs";
 import { resolve as resolve18, join as join9, basename as basename4 } from "path";
 import { homedir as homedir3 } from "os";
 
@@ -7612,7 +7612,8 @@ var SUPPORTED_MIME_TYPES = /* @__PURE__ */ new Set([
   "application/pdf",
   "text/plain",
   "text/markdown",
-  "text/csv"
+  "text/csv",
+  "text/html"
 ]);
 var MAX_FILE_SIZE_BYTES = 20 * 1024 * 1024;
 var MAX_FILES_PER_MESSAGE = 5;
@@ -25599,8 +25600,6 @@ async function POST19(req) {
 }
 
 // app/api/admin/chat/route.ts
-import { existsSync as existsSync14, readFileSync as readFileSync14, writeFileSync as writeFileSync9, mkdirSync as mkdirSync6 } from "fs";
-import { dirname as dirname2 } from "path";
 function isComponentDone(parsed) {
   return typeof parsed === "object" && parsed !== null && parsed._componentDone === true && typeof parsed.component === "string" && typeof parsed.payload === "string";
 }
@@ -25625,60 +25624,6 @@ ${inner.content}`;
   }
   return payload;
 }
-var VOLATILE_STATE_FILE = "/tmp/maxy-agent-create-state.json";
-function advanceGateIfNeeded(envelope, accountDir, logFn) {
-  if (!existsSync14(VOLATILE_STATE_FILE)) return;
-  const { component, payload } = envelope;
-  let gateFlag = null;
-  let agentSlug = "";
-  if (component === "document-editor") {
-    try {
-      const inner = typeof payload === "string" ? JSON.parse(payload) : payload;
-      if (typeof inner === "object" && inner !== null && typeof inner.filePath === "string") {
-        const match2 = inner.filePath.match(/agents\/([^/]+)\/(SOUL\.md|KNOWLEDGE\.md)$/);
-        if (match2 && match2[1] !== "admin") {
-          agentSlug = match2[1];
-          gateFlag = match2[2] === "SOUL.md" ? "soul" : "knowledge";
-        }
-      }
-    } catch {
-    }
-  } else if (component === "form") {
-    gateFlag = "config";
-  }
-  if (!gateFlag) return;
-  let state;
-  try {
-    state = JSON.parse(readFileSync14(VOLATILE_STATE_FILE, "utf-8"));
-  } catch (err) {
-    logFn(`ERROR \u2014 failed to read state file for advancement: ${err instanceof Error ? err.message : String(err)}`);
-    return;
-  }
-  const gates = state.gates;
-  if (!gates || typeof gates !== "object") {
-    logFn("WARNING \u2014 state file has unexpected structure, skipping advancement");
-    return;
-  }
-  if (!state.slug && agentSlug) {
-    state.slug = agentSlug;
-  }
-  if (gates[gateFlag] === true) return;
-  gates[gateFlag] = true;
-  try {
-    writeFileSync9(VOLATILE_STATE_FILE, JSON.stringify(state));
-  } catch (err) {
-    logFn(`ERROR \u2014 failed to write volatile state after advancement: ${err instanceof Error ? err.message : String(err)}`);
-  }
-  const durablePath = `${accountDir}/.claude/agent-create-state.json`;
-  try {
-    mkdirSync6(dirname2(durablePath), { recursive: true });
-    writeFileSync9(durablePath, JSON.stringify(state));
-  } catch (err) {
-    logFn(`WARNING \u2014 failed to write durable state after advancement: ${err instanceof Error ? err.message : String(err)}`);
-  }
-  const pending = Object.entries(gates).filter(([, v]) => !v).map(([k]) => k);
-  logFn(`${gateFlag} gate advanced (route-level). Pending: ${pending.length > 0 ? pending.join(", ") : "none"}`);
-}
 async function POST20(req) {
   const contentType = req.headers.get("content-type") ?? "";
   let message;
@@ -25822,9 +25767,6 @@ async function POST20(req) {
     if (isComponentDone(parsed)) {
       const componentLog = agentLogStream("component-lifecycle", account.accountDir);
       const ts = (/* @__PURE__ */ new Date()).toISOString().slice(11, 23);
-      const logFn = (msg) => componentLog.write(`[${ts}] [agent-creation-approval:route] ${msg}
-`);
-      advanceGateIfNeeded(parsed, account.accountDir, logFn);
       message = transformComponentDone(parsed);
       componentLog.write(`[${ts}] [component:${parsed.component}] componentDone \u2192 transformed
 `);
@@ -25942,7 +25884,7 @@ async function POST21(req) {
 }
 
 // app/api/admin/logs/route.ts
-import { existsSync as existsSync15, readdirSync as readdirSync3, readFileSync as readFileSync15, statSync as statSync3 } from "fs";
+import { existsSync as existsSync14, readdirSync as readdirSync3, readFileSync as readFileSync14, statSync as statSync3 } from "fs";
 import { resolve as resolve12, basename as basename3 } from "path";
 var TAIL_BYTES = 8192;
 async function GET4(request) {
@@ -25958,7 +25900,7 @@ async function GET4(request) {
       if (!dir) continue;
       const filePath = resolve12(dir, safe);
       try {
-        const content = readFileSync15(filePath, "utf-8");
+        const content = readFileSync14(filePath, "utf-8");
         const headers = { "Content-Type": "text/plain; charset=utf-8" };
         if (download) headers["Content-Disposition"] = `attachment; filename="${safe}"`;
         return new Response(content, { headers });
@@ -25984,7 +25926,7 @@ async function GET4(request) {
       if (!dir) continue;
       const filePath = resolve12(dir, fileName);
       try {
-        const content = readFileSync15(filePath, "utf-8");
+        const content = readFileSync14(filePath, "utf-8");
         const headers = { "Content-Type": "text/plain; charset=utf-8" };
         if (download) headers["Content-Disposition"] = `attachment; filename="${fileName}"`;
         return new Response(content, { headers });
@@ -25996,7 +25938,7 @@ async function GET4(request) {
   const seen = /* @__PURE__ */ new Set();
   const logs = {};
   for (const dir of [accountLogDir, LOG_DIR]) {
-    if (!dir || !existsSync15(dir)) continue;
+    if (!dir || !existsSync14(dir)) continue;
     let files;
     try {
       files = readdirSync3(dir).filter((f) => f.endsWith(".log"));
@@ -26006,7 +25948,7 @@ async function GET4(request) {
     files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync3(resolve12(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
       seen.add(name);
       try {
-        const content = readFileSync15(resolve12(dir, name));
+        const content = readFileSync14(resolve12(dir, name));
         const tail = content.length > TAIL_BYTES ? content.subarray(content.length - TAIL_BYTES).toString("utf-8") : content.toString("utf-8");
         logs[name] = tail.trim() || "(empty)";
       } catch {
@@ -26041,7 +25983,7 @@ async function GET5() {
 
 // app/api/admin/attachment/[attachmentId]/route.ts
 import { readFile as readFile3, readdir } from "fs/promises";
-import { existsSync as existsSync16 } from "fs";
+import { existsSync as existsSync15 } from "fs";
 import { resolve as resolve13 } from "path";
 async function GET6(req, attachmentId) {
   const sessionKey = new URL(req.url).searchParams.get("session_key") ?? "";
@@ -26056,11 +25998,11 @@ async function GET6(req, attachmentId) {
     return new Response("Not found", { status: 404 });
   }
   const dir = resolve13(ATTACHMENTS_ROOT, accountId, attachmentId);
-  if (!existsSync16(dir)) {
+  if (!existsSync15(dir)) {
     return new Response("Not found", { status: 404 });
   }
   const metaPath = resolve13(dir, `${attachmentId}.meta.json`);
-  if (!existsSync16(metaPath)) {
+  if (!existsSync15(metaPath)) {
     return new Response("Not found", { status: 404 });
   }
   let meta3;
@@ -26086,7 +26028,7 @@ async function GET6(req, attachmentId) {
 }
 
 // app/api/admin/account/route.ts
-import { readFileSync as readFileSync16, writeFileSync as writeFileSync10 } from "fs";
+import { readFileSync as readFileSync15, writeFileSync as writeFileSync9 } from "fs";
 import { resolve as resolve14 } from "path";
 var VALID_CONTEXT_MODES = ["managed", "claude-code"];
 async function PATCH(req) {
@@ -26112,10 +26054,10 @@ async function PATCH(req) {
   }
   const configPath2 = resolve14(account.accountDir, "account.json");
   try {
-    const raw2 = readFileSync16(configPath2, "utf-8");
+    const raw2 = readFileSync15(configPath2, "utf-8");
     const config2 = JSON.parse(raw2);
     config2.contextMode = contextMode;
-    writeFileSync10(configPath2, JSON.stringify(config2, null, 2) + "\n", "utf-8");
+    writeFileSync9(configPath2, JSON.stringify(config2, null, 2) + "\n", "utf-8");
     console.error(`[account-update] contextMode=${contextMode}`);
     return Response.json({ ok: true, contextMode });
   } catch (err) {
@@ -26126,14 +26068,14 @@ async function PATCH(req) {
 
 // app/api/admin/agents/route.ts
 import { resolve as resolve15 } from "path";
-import { readdirSync as readdirSync4, readFileSync as readFileSync17, existsSync as existsSync17 } from "fs";
+import { readdirSync as readdirSync4, readFileSync as readFileSync16, existsSync as existsSync16 } from "fs";
 async function GET7() {
   const account = resolveAccount();
   if (!account) {
     return Response.json({ agents: [] });
   }
   const agentsDir = resolve15(account.accountDir, "agents");
-  if (!existsSync17(agentsDir)) {
+  if (!existsSync16(agentsDir)) {
     return Response.json({ agents: [] });
   }
   const agents = [];
@@ -26143,9 +26085,9 @@ async function GET7() {
       if (!entry.isDirectory()) continue;
       if (entry.name === "admin") continue;
       const configPath2 = resolve15(agentsDir, entry.name, "config.json");
-      if (!existsSync17(configPath2)) continue;
+      if (!existsSync16(configPath2)) continue;
       try {
-        const config2 = JSON.parse(readFileSync17(configPath2, "utf-8"));
+        const config2 = JSON.parse(readFileSync16(configPath2, "utf-8"));
         agents.push({
           slug: entry.name,
           displayName: config2.displayName ?? entry.name,
@@ -26163,15 +26105,15 @@ async function GET7() {
 }
 
 // app/api/admin/version/route.ts
-import { readFileSync as readFileSync18, existsSync as existsSync18 } from "fs";
+import { readFileSync as readFileSync17, existsSync as existsSync17 } from "fs";
 import { resolve as resolve16, join as join7 } from "path";
 var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve16(process.cwd(), "..");
 var brandHostname = "maxy";
 var brandNpmPackage = "@rubytech/create-maxy";
 var brandJsonPath = join7(PLATFORM_ROOT7, "config", "brand.json");
-if (existsSync18(brandJsonPath)) {
+if (existsSync17(brandJsonPath)) {
   try {
-    const brand = JSON.parse(readFileSync18(brandJsonPath, "utf-8"));
+    const brand = JSON.parse(readFileSync17(brandJsonPath, "utf-8"));
     if (brand.hostname) brandHostname = brand.hostname;
     if (brand.npm?.packageName) brandNpmPackage = brand.npm.packageName;
   } catch {
@@ -26184,8 +26126,8 @@ var CACHE_TTL_MS = 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 5e3;
 var latestCache = null;
 function readInstalled() {
-  if (!existsSync18(VERSION_FILE)) return "unknown";
-  const content = readFileSync18(VERSION_FILE, "utf-8").trim();
+  if (!existsSync17(VERSION_FILE)) return "unknown";
+  const content = readFileSync17(VERSION_FILE, "utf-8").trim();
   return content || "unknown";
 }
 async function fetchLatest() {
@@ -26239,15 +26181,15 @@ async function GET8() {
 
 // app/api/admin/version/upgrade/route.ts
 import { spawn as spawn4 } from "child_process";
-import { existsSync as existsSync19, statSync as statSync4, writeFileSync as writeFileSync11, readFileSync as readFileSync19, openSync as openSync2, closeSync as closeSync2 } from "fs";
+import { existsSync as existsSync18, statSync as statSync4, writeFileSync as writeFileSync10, readFileSync as readFileSync18, openSync as openSync2, closeSync as closeSync2 } from "fs";
 import { resolve as resolve17, join as join8 } from "path";
 var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT ?? resolve17(process.cwd(), "..");
 var upgradePkg = "@rubytech/create-maxy";
 var upgradeHostname = "maxy";
 var brandPath = join8(PLATFORM_ROOT8, "config", "brand.json");
-if (existsSync19(brandPath)) {
+if (existsSync18(brandPath)) {
   try {
-    const brand = JSON.parse(readFileSync19(brandPath, "utf-8"));
+    const brand = JSON.parse(readFileSync18(brandPath, "utf-8"));
     if (brand.npm?.packageName) upgradePkg = brand.npm.packageName;
     if (brand.hostname) upgradeHostname = brand.hostname;
   } catch {
@@ -26257,7 +26199,7 @@ var LOCK_FILE = `/tmp/${upgradeHostname}-upgrade.lock`;
 var LOG_FILE = `/tmp/${upgradeHostname}-upgrade.log`;
 var LOCK_MAX_AGE_MS = 3 * 60 * 1e3;
 function isLockFresh() {
-  if (!existsSync19(LOCK_FILE)) return false;
+  if (!existsSync18(LOCK_FILE)) return false;
   try {
     const stat3 = statSync4(LOCK_FILE);
     return Date.now() - stat3.mtimeMs < LOCK_MAX_AGE_MS;
@@ -26283,7 +26225,7 @@ async function POST22(req) {
     return Response.json({ ok: false, error: "upgrade already in progress" }, { status: 409 });
   }
   try {
-    writeFileSync11(LOCK_FILE, String(Date.now()));
+    writeFileSync10(LOCK_FILE, String(Date.now()));
   } catch (err) {
     console.error("[admin/version/upgrade] failed to write lock file:", err);
   }
@@ -26413,12 +26355,12 @@ async function POST23() {
 var PLATFORM_ROOT9 = process.env.MAXY_PLATFORM_ROOT || "";
 var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join9(PLATFORM_ROOT9, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", domain: "getmaxy.com" };
-if (BRAND_JSON_PATH && !existsSync20(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && !existsSync19(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
-if (BRAND_JSON_PATH && existsSync20(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync19(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync20(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync19(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -26433,8 +26375,8 @@ var brandLoginOpts = {
 var ALIAS_DOMAINS_PATH = join9(homedir3(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
-    if (!existsSync20(ALIAS_DOMAINS_PATH)) return null;
-    const parsed = JSON.parse(readFileSync20(ALIAS_DOMAINS_PATH, "utf-8"));
+    if (!existsSync19(ALIAS_DOMAINS_PATH)) return null;
+    const parsed = JSON.parse(readFileSync19(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -26805,14 +26747,14 @@ app.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync20(filePath)) {
+  if (!existsSync19(filePath)) {
     console.error(`[agent-assets] serve slug=${slug} file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync20(filePath);
+  const body = readFileSync19(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
@@ -26821,9 +26763,9 @@ app.get("/agent-assets/:slug/:filename", (c) => {
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
-if (BRAND_JSON_PATH && existsSync20(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync19(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync20(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync19(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -26840,7 +26782,7 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 function cachedHtml(file2) {
   let html = htmlCache.get(file2);
   if (!html) {
-    html = readFileSync20(resolve18(process.cwd(), "public", file2), "utf-8");
+    html = readFileSync19(resolve18(process.cwd(), "public", file2), "utf-8");
     html = html.replace("</head>", `${brandScript}
 </head>`);
     htmlCache.set(file2, html);
@@ -26852,13 +26794,13 @@ function loadBrandingCache(agentSlug) {
   const configDir2 = join9(homedir3(), BRAND.configDir);
   try {
     const accountJsonPath = join9(configDir2, "account.json");
-    if (!existsSync20(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync20(accountJsonPath, "utf-8"));
+    if (!existsSync19(accountJsonPath)) return null;
+    const account = JSON.parse(readFileSync19(accountJsonPath, "utf-8"));
     const accountId = account.accountId;
     if (!accountId) return null;
     const cachePath = join9(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
-    if (!existsSync20(cachePath)) return null;
-    return JSON.parse(readFileSync20(cachePath, "utf-8"));
+    if (!existsSync19(cachePath)) return null;
+    return JSON.parse(readFileSync19(cachePath, "utf-8"));
   } catch {
     return null;
   }
@@ -26867,8 +26809,8 @@ function resolveDefaultSlug() {
   try {
     const configDir2 = join9(homedir3(), BRAND.configDir);
     const accountJsonPath = join9(configDir2, "account.json");
-    if (!existsSync20(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync20(accountJsonPath, "utf-8"));
+    if (!existsSync19(accountJsonPath)) return null;
+    const account = JSON.parse(readFileSync19(accountJsonPath, "utf-8"));
     return account.defaultAgent || null;
   } catch {
     return null;

package/payload/platform/plugins/admin/hooks/agent-creation-approval.sh

@@ -1,161 +0,0 @@
-#!/usr/bin/env bash
-# UserPromptSubmit hook — agent creation gate advancement.
-#
-# Advances gates when the user approves a component during agent creation.
-# The UI wraps all component completions in a _componentDone envelope:
-#
-#   {"_componentDone": true, "component": "<name>", "payload": "<original msg>"}
-#
-# Gate advancement rules:
-#   _componentDone + component="document-editor" + payload.filePath matching
-#     agents/{non-admin}/SOUL.md → gates.soul = true
-#   _componentDone + component="document-editor" + payload.filePath matching
-#     agents/{non-admin}/KNOWLEDGE.md → gates.knowledge = true
-#   _componentDone + component="form" (during active creation) → gates.config = true
-#
-# This hook fires on the user's response (after they click Approve or Submit),
-# not when the agent renders a component. Gate enforcement (blocking writes)
-# is handled by agent-creation-gate.sh (PreToolUse).
-#
-# Exit 0 always — UserPromptSubmit hooks must never block user messages
-# for gate advancement purposes.
-# Env: AGENT_CREATE_STATE_FILE (override volatile path, for testing)
-#      ACCOUNT_DIR (account directory for durable state)
-#      GATE_LOG_FILE (override log path, for testing)
-
-if [ -n "$GATE_LOG_FILE" ]; then
-  GATE_LOG="$GATE_LOG_FILE"
-elif [ -n "$ACCOUNT_DIR" ]; then
-  mkdir -p "$ACCOUNT_DIR/logs"
-  GATE_LOG="$ACCOUNT_DIR/logs/maxy-gate.log"
-else
-  # UserPromptSubmit hooks must never block — exit 0 on misconfiguration
-  exit 0
-fi
-STATE_FILE="${AGENT_CREATE_STATE_FILE:-/tmp/maxy-agent-create-state.json}"
-ACCOUNT_DIR="${ACCOUNT_DIR:-}"
-DURABLE_STATE="${ACCOUNT_DIR:+$ACCOUNT_DIR/.claude/agent-create-state.json}"
-
-# Fast path: no state file → no agent creation in progress, skip stdin read entirely
-[[ -f "$STATE_FILE" ]] || exit 0
-
-# Read stdin (user prompt JSON from Claude Code hook protocol)
-INPUT=$(cat)
-
-export _HOOK_INPUT="$INPUT"
-export _STATE_FILE="$STATE_FILE"
-export _DURABLE_STATE="${DURABLE_STATE:-}"
-export _GATE_LOG="$GATE_LOG"
-
-python3 -c '
-import os, sys, json, re
-
-hook_input_raw = os.environ.get("_HOOK_INPUT", "")
-state_file = os.environ.get("_STATE_FILE", "/tmp/maxy-agent-create-state.json")
-durable_file = os.environ.get("_DURABLE_STATE", "")
-log_file = os.environ.get("_GATE_LOG", "/tmp/maxy-gate.log")
-
-def log(msg):
-    try:
-        with open(log_file, "a") as lf:
-            lf.write("agent-creation-approval: %s\n" % msg)
-    except OSError:
-        pass
-
-# Parse hook input — UserPromptSubmit provides {"prompt": "..."} on stdin
-try:
-    hook_input = json.loads(hook_input_raw)
-except Exception as e:
-    log("ERROR — failed to parse UserPromptSubmit input: %s" % e)
-    sys.exit(0)
-
-if not isinstance(hook_input, dict):
-    sys.exit(0)
-
-prompt = hook_input.get("prompt", "")
-if not isinstance(prompt, str) or not prompt:
-    sys.exit(0)
-
-# --- Detect _componentDone wrapper ---
-try:
-    msg = json.loads(prompt)
-except (json.JSONDecodeError, TypeError):
-    # Not JSON — not a wrapped component message, nothing to advance
-    sys.exit(0)
-
-if not isinstance(msg, dict) or not msg.get("_componentDone"):
-    sys.exit(0)
-
-component = msg.get("component", "")
-payload_raw = msg.get("payload", "")
-
-# --- Determine which gate to advance ---
-gate_flag = ""
-agent_slug = ""
-
-if component == "document-editor":
-    # Parse payload for filePath
-    try:
-        payload = json.loads(payload_raw) if isinstance(payload_raw, str) else payload_raw
-    except (json.JSONDecodeError, TypeError):
-        payload = {}
-    if isinstance(payload, dict):
-        file_path = payload.get("filePath", "")
-        if isinstance(file_path, str):
-            m = re.search(r"agents/([^/]+)/(SOUL\.md|KNOWLEDGE\.md)$", file_path)
-            if m and m.group(1) != "admin":
-                agent_slug = m.group(1)
-                gate_flag = "soul" if m.group(2) == "SOUL.md" else "knowledge"
-
-elif component == "form":
-    # Any form submission during active creation advances the config gate.
-    # The state file existing is sufficient context — the workflow presents
-    # exactly one form (the agent config form) during creation.
-    gate_flag = "config"
-
-if not gate_flag:
-    sys.exit(0)
-
-# --- Read and advance the gate ---
-try:
-    with open(state_file) as f:
-        state = json.load(f)
-except Exception as e:
-    log("ERROR — failed to read state file for advancement: %s" % e)
-    sys.exit(0)
-
-if not isinstance(state, dict) or not isinstance(state.get("gates"), dict):
-    log("WARNING — state file has unexpected structure, skipping advancement")
-    sys.exit(0)
-
-# Populate slug from document-editor filePath if empty
-if not state.get("slug") and agent_slug:
-    state["slug"] = agent_slug
-
-# Already advanced — idempotent
-if state["gates"].get(gate_flag) is True:
-    sys.exit(0)
-
-state["gates"][gate_flag] = True
-
-# Write updated state
-try:
-    with open(state_file, "w") as f:
-        json.dump(state, f)
-except OSError as e:
-    log("ERROR — failed to write volatile state after advancement: %s" % e)
-
-if durable_file:
-    try:
-        durable_dir = os.path.dirname(durable_file)
-        os.makedirs(durable_dir, exist_ok=True)
-        with open(durable_file, "w") as f:
-            json.dump(state, f)
-    except OSError as e:
-        log("WARNING — failed to write durable state after advancement: %s" % e)
-
-pending = [k for k, v in state.get("gates", {}).items() if not v]
-log("%s gate advanced (user approval detected). Pending: %s" % (gate_flag, ", ".join(pending) if pending else "none"))
-' 2>>"$GATE_LOG" || true
-
-exit 0