@rubytech/create-realagent-code 0.1.253 → 0.1.255

package/payload/server/server.js

@@ -93,7 +93,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-M6A6EZD4.js";
+} from "./chunk-76HRO7NX.js";
 import {
   __commonJS,
   __require,
@@ -5211,6 +5211,374 @@ var require_dist3 = __commonJS({
   }
 });
 
+// ../lib/graph-write/dist/audit.js
+var require_audit = __commonJS({
+  "../lib/graph-write/dist/audit.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.auditCypherWrite = auditCypherWrite;
+    exports.formatAuditLine = formatAuditLine;
+    var EDGE_PATTERN = /\[[^\]]*?:([A-Z_][A-Za-z0-9_]*(?:\|[A-Z_][A-Za-z0-9_]*)*)[^\]]*?\]/g;
+    var CREATE_OR_MERGE_NODE = /\b(?:CREATE|MERGE)\s*\(\s*[A-Za-z_][A-Za-z0-9_]*\s*:\s*[A-Z]/g;
+    var PROVENANCE_TOKEN = /\bcreatedBy(?:Agent|Tool|Session|Source)\b/g;
+    function stripStringLiterals(cypher) {
+      return cypher.replace(/'[^']*'|"[^"]*"/g, '""');
+    }
+    function extractEdgeTypes(cleaned) {
+      const out = /* @__PURE__ */ new Set();
+      for (const m of cleaned.matchAll(EDGE_PATTERN)) {
+        for (const t of m[1].split("|")) {
+          const clean = t.trim();
+          if (clean)
+            out.add(clean);
+        }
+      }
+      return out;
+    }
+    function countCreateOrMergeNodes(cleaned) {
+      const matches = cleaned.match(CREATE_OR_MERGE_NODE);
+      return matches ? matches.length : 0;
+    }
+    function countProvenanceStamps(cleaned) {
+      const matches = cleaned.match(PROVENANCE_TOKEN);
+      return matches ? matches.length : 0;
+    }
+    function auditCypherWrite(input) {
+      const warnings = [];
+      const cleaned = stripStringLiterals(input.cypher);
+      const referencedTypes = extractEdgeTypes(cleaned);
+      for (const t of referencedTypes) {
+        if (!input.schema.relationshipTypes.has(t)) {
+          warnings.push({ kind: "unknown-type-warning", type: t });
+        }
+      }
+      if (input.nodesCreated > 0) {
+        const createOrMergeNodes = countCreateOrMergeNodes(cleaned);
+        if (createOrMergeNodes > 0) {
+          const stamps = countProvenanceStamps(cleaned);
+          if (stamps < createOrMergeNodes) {
+            warnings.push({
+              kind: "missing-provenance-warning",
+              created: createOrMergeNodes,
+              stamped: stamps
+            });
+          }
+        }
+      }
+      if (input.orphanIds.length > 0) {
+        warnings.push({ kind: "orphan-warning", orphanIds: input.orphanIds });
+      }
+      return warnings;
+    }
+    function formatAuditLine(line) {
+      const prefixField = `query="${line.cypherPrefix.replace(/"/g, "'")}"`;
+      switch (line.kind) {
+        case "accepted":
+          return `[graph-cypher-write] accepted ${prefixField} nodesCreated=${line.nodesCreated} relsCreated=${line.relsCreated} agentName=${line.agentName} sessionId=${line.sessionId}`;
+        case "orphan-warning":
+          return `[graph-cypher-write] orphan-warning ${prefixField} orphanIds=${line.orphanIds.join(",")}`;
+        case "unknown-type-warning":
+          return `[graph-cypher-write] unknown-type-warning ${prefixField} type=${line.type}`;
+        case "missing-provenance-warning":
+          return `[graph-cypher-write] missing-provenance-warning ${prefixField} created=${line.created} stamped=${line.stamped}`;
+      }
+    }
+  }
+});
+
+// ../lib/graph-write/dist/conversation-provenance.js
+var require_conversation_provenance = __commonJS({
+  "../lib/graph-write/dist/conversation-provenance.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.injectConversationProvenance = injectConversationProvenance;
+    var index_js_1 = require_dist4();
+    async function injectConversationProvenance(params) {
+      const { session, relationships, accountId, writeLabels, conversationNodeId, logNamespace, tool } = params;
+      const original = [...relationships];
+      if (!writeLabels.some((l) => index_js_1.ACTION_PROVENANCE_LABELS.has(l)))
+        return original;
+      if (!conversationNodeId)
+        return original;
+      if (hasInboundProducedEdge(original))
+        return original;
+      let lookup;
+      try {
+        lookup = await session.run(`MATCH (c:Conversation {sessionId: $cid, accountId: $accountId})
+       RETURN elementId(c) AS elementId, labels(c) AS labels LIMIT 1`, { cid: conversationNodeId, accountId });
+      } catch (err) {
+        process.stderr.write(`[${logNamespace}] [provenance-missing] tool=${tool} reason=driver-error message=${err instanceof Error ? err.message : String(err)} conversationNodeId=${conversationNodeId}
+`);
+        return original;
+      }
+      if (lookup.records.length === 0) {
+        process.stderr.write(`[${logNamespace}] [provenance-missing] tool=${tool} reason=node-not-found conversationNodeId=${conversationNodeId}
+`);
+        return original;
+      }
+      const elementId = lookup.records[0].get("elementId");
+      const labels = lookup.records[0].get("labels");
+      const sourceLabel = labels.find((l) => index_js_1.PROVENANCE_SOURCE_LABELS.has(l));
+      if (!sourceLabel) {
+        process.stderr.write(`[${logNamespace}] [provenance-missing] tool=${tool} reason=wrong-source-label labels=${labels.join(",")} conversationNodeId=${conversationNodeId}
+`);
+        return original;
+      }
+      process.stderr.write(`[${logNamespace}] [provenance-inject] tool=${tool} from=${sourceLabel}:${conversationNodeId}
+`);
+      return [
+        {
+          type: "PRODUCED",
+          direction: "incoming",
+          targetNodeId: elementId
+        },
+        ...original
+      ];
+    }
+    function hasInboundProducedEdge(relationships) {
+      return relationships.some((r) => r.type === "PRODUCED" && r.direction === "incoming");
+    }
+  }
+});
+
+// ../lib/graph-write/dist/index.js
+var require_dist4 = __commonJS({
+  "../lib/graph-write/dist/index.js"(exports) {
+    "use strict";
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    }));
+    var __exportStar = exports && exports.__exportStar || function(m, exports2) {
+      for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports2, p)) __createBinding(exports2, m, p);
+    };
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.DOCUMENT_ARCHIVE_LABELS = exports.VECTOR_INDEXED_LABELS = exports.PROVENANCE_SOURCE_LABELS = exports.ACTION_PROVENANCE_LABELS = void 0;
+    exports.stampCreatedBy = stampCreatedBy;
+    exports.writeNodeWithEdges = writeNodeWithEdges;
+    __exportStar(require_audit(), exports);
+    __exportStar(require_conversation_provenance(), exports);
+    exports.ACTION_PROVENANCE_LABELS = /* @__PURE__ */ new Set([
+      "Person",
+      "UserProfile",
+      "AdminUser",
+      "Organization",
+      "LocalBusiness",
+      "CloudflareTunnel",
+      "CloudflareHostname"
+    ]);
+    exports.PROVENANCE_SOURCE_LABELS = /* @__PURE__ */ new Set([
+      "Task",
+      "Conversation",
+      "Message"
+    ]);
+    function requiresActionProvenance(labels) {
+      for (const label of labels) {
+        if (exports.ACTION_PROVENANCE_LABELS.has(label))
+          return true;
+      }
+      return false;
+    }
+    exports.VECTOR_INDEXED_LABELS = /* @__PURE__ */ new Set([
+      "Question",
+      "DefinedTerm",
+      "Review",
+      "Service",
+      "Person",
+      "LocalBusiness",
+      "Organization",
+      "PriceSpecification",
+      "Task",
+      "CreativeWork",
+      "DigitalDocument",
+      "KnowledgeDocument",
+      "ConversationArchive",
+      "Section",
+      "Chunk",
+      "Project",
+      "Position",
+      "Conversation",
+      "Message",
+      "Event",
+      "Workflow",
+      "Preference",
+      "Listing",
+      "Idea",
+      "TimelineEvent",
+      "Report",
+      "FileArtifact"
+    ]);
+    exports.DOCUMENT_ARCHIVE_LABELS = /* @__PURE__ */ new Set([
+      "KnowledgeDocument",
+      "DigitalDocument",
+      "ConversationArchive"
+    ]);
+    function labelsAreIndexed(labels) {
+      for (const l of labels)
+        if (exports.VECTOR_INDEXED_LABELS.has(l))
+          return true;
+      return false;
+    }
+    function boundedEmbedText(labels, props) {
+      const PER_VALUE = 2e3;
+      const TOTAL = 8e3;
+      const docPreferred = labels.some((l) => exports.DOCUMENT_ARCHIVE_LABELS.has(l));
+      const parts = [`[${labels.join(", ")}]`];
+      for (const [k, v] of Object.entries(props)) {
+        if (v === null || v === void 0 || k === "embedding")
+          continue;
+        if (docPreferred && (k === "body" || k === "text"))
+          continue;
+        const s = String(v);
+        parts.push(`${k}: ${s.length > PER_VALUE ? s.slice(0, PER_VALUE) : s}`);
+      }
+      const joined = parts.join(" | ");
+      return joined.length > TOTAL ? joined.slice(0, TOTAL) : joined;
+    }
+    function findProvenanceCandidates(relationships) {
+      return relationships.filter((r) => r.type === "PRODUCED" && r.direction === "incoming");
+    }
+    function stampCreatedBy(props, createdBy) {
+      return {
+        ...props,
+        createdByAgent: createdBy.agent ?? "unknown",
+        createdBySession: createdBy.session ?? "unknown",
+        createdByTool: createdBy.tool ?? null,
+        createdBySource: createdBy.source ?? null
+      };
+    }
+    async function writeNodeWithEdges(params) {
+      const { session, labels, props, relationships, createdBy } = params;
+      const agentLabel = createdBy.agent ?? createdBy.source ?? "unknown";
+      const labelCsv = labels.join(",");
+      const isSystemBootstrap = (createdBy.agent ?? "") === "system";
+      if (!isSystemBootstrap) {
+        const accountId = props.accountId;
+        const expectedAccountId = params.expectedAccountId ?? process.env.ACCOUNT_ID;
+        if (typeof accountId !== "string" || !expectedAccountId || accountId !== expectedAccountId) {
+          const slice = typeof accountId === "string" ? accountId.slice(0, 8) : "missing";
+          process.stderr.write(`[graph-write] reject reason=invalid-account-id accountId=${slice} writer=${agentLabel}
+`);
+          throw new Error(`Write doctrine violated: invalid-account-id (${slice}) \u2014 accountId must equal ACCOUNT_ID set by the spawning process. See .docs/neo4j.md "Account isolation invariant".`);
+        }
+      }
+      const reviewDigestActionTool = typeof props.actionTool === "string" && props.actionTool === "review-digest-compose";
+      if (labels.includes("ReviewAlert") || reviewDigestActionTool) {
+        const actionToolField = reviewDigestActionTool ? "review-digest-compose" : "n/a";
+        process.stderr.write(`[graph-write] reject reason=removed-feature labels=${labelCsv} actionTool=${actionToolField} agent=${agentLabel}
+`);
+        throw new Error("Write doctrine violated: review-detector feature removed \u2014 `:ReviewAlert` and `:Event {actionTool:'review-digest-compose'}` writes are not allowed.");
+      }
+      if (!relationships || relationships.length < 1) {
+        process.stderr.write(`[graph-write] reject reason=zero-relationships labels=${labelCsv} agent=${agentLabel}
+`);
+        throw new Error("Write doctrine violated: a node must be created with at least one relationship. See .docs/neo4j.md (Write doctrine).");
+      }
+      const indexed = labelsAreIndexed(labels);
+      let embedded = Array.isArray(props.embedding) && props.embedding.length > 0;
+      const workingProps = { ...props };
+      if (indexed && !embedded && typeof params.embed === "function") {
+        try {
+          const vec = await params.embed(boundedEmbedText(labels, props));
+          if (Array.isArray(vec) && vec.length > 0) {
+            workingProps.embedding = vec;
+            embedded = true;
+          }
+        } catch (err) {
+          process.stderr.write(`[graph-write] warn reason=embed-failed labels=${labelCsv} agent=${agentLabel} detail=${err instanceof Error ? err.message : String(err)}
+`);
+        }
+      }
+      const labelStr = labels.map((l) => `\`${l.replace(/`/g, "")}\``).join(":");
+      const nodeProps = stampCreatedBy(workingProps, createdBy);
+      return await session.executeWrite(async (tx) => {
+        const targetIds = relationships.map((r) => r.targetNodeId);
+        const check = await tx.run(`UNWIND $ids AS id MATCH (t) WHERE elementId(t) = id RETURN elementId(t) AS id, labels(t) AS labels`, { ids: targetIds });
+        const labelsByTarget = /* @__PURE__ */ new Map();
+        for (const rec of check.records) {
+          labelsByTarget.set(rec.get("id"), rec.get("labels"));
+        }
+        const found = labelsByTarget.size;
+        const uniqueRequested = new Set(targetIds).size;
+        if (found !== uniqueRequested) {
+          process.stderr.write(`[graph-write] reject reason=unresolved-target labels=${labelCsv} agent=${agentLabel} requested=${uniqueRequested} found=${found}
+`);
+          throw new Error(`Write doctrine violated: ${uniqueRequested - found} of ${uniqueRequested} relationship target(s) did not resolve (elementId mismatch). No node created.`);
+        }
+        let provenanceSourceId = null;
+        let provenanceSourceLabel = null;
+        if (requiresActionProvenance(labels) && (createdBy.agent ?? "") !== "system") {
+          const candidates = findProvenanceCandidates(relationships);
+          const matched = candidates.map((r) => {
+            const lbls = labelsByTarget.get(r.targetNodeId);
+            if (!Array.isArray(lbls))
+              return null;
+            const sourceLabel = lbls.find((l) => exports.PROVENANCE_SOURCE_LABELS.has(l));
+            return sourceLabel ? { rel: r, sourceLabel } : null;
+          }).filter((m) => m !== null);
+          if (matched.length === 0) {
+            process.stderr.write(`[graph-write] warn reason=missing-provenance labels=${labelCsv} agent=${agentLabel}
+`);
+          } else {
+            provenanceSourceId = matched[0].rel.targetNodeId;
+            provenanceSourceLabel = matched[0].sourceLabel;
+          }
+        }
+        let nodeRes;
+        try {
+          nodeRes = await tx.run(`CREATE (n:${labelStr} $props) RETURN elementId(n) AS nodeId, labels(n) AS nodeLabels`, { props: nodeProps });
+        } catch (err) {
+          const code = err?.code ?? "";
+          if (code === "Neo.ClientError.Schema.ConstraintValidationFailed" && labels.includes("UserProfile")) {
+            const accountIdProp = nodeProps.accountId;
+            const userIdProp = nodeProps.userId;
+            const acctSlice2 = typeof accountIdProp === "string" ? accountIdProp.slice(0, 8) : "unknown";
+            const userSlice = typeof userIdProp === "string" ? userIdProp.slice(0, 8) : "unknown";
+            process.stderr.write(`[graph-write] reject reason=user-profile-uniqueness-violation accountId=${acctSlice2} userId=${userSlice} writer=${agentLabel}
+`);
+          }
+          throw err;
+        }
+        const nodeId = nodeRes.records[0].get("nodeId");
+        const nodeLabels = nodeRes.records[0].get("nodeLabels");
+        let edgesCreated = 0;
+        for (const rel of relationships) {
+          const type = rel.type.replace(/`/g, "");
+          const q = rel.direction === "outgoing" ? `MATCH (a), (b) WHERE elementId(a) = $from AND elementId(b) = $to CREATE (a)-[:\`${type}\`]->(b)` : `MATCH (a), (b) WHERE elementId(a) = $from AND elementId(b) = $to CREATE (b)-[:\`${type}\`]->(a)`;
+          const r = await tx.run(q, { from: nodeId, to: rel.targetNodeId });
+          const created = r.summary.counters.updates().relationshipsCreated;
+          if (created === 0) {
+            process.stderr.write(`[graph-write] reject reason=unresolved-target-on-create labels=${labelCsv} agent=${agentLabel} relType=${rel.type} targetId=${rel.targetNodeId}
+`);
+            throw new Error(`Write doctrine violated: relationship CREATE to target ${rel.targetNodeId} produced 0 edges (target likely deleted concurrently after pre-check). Transaction rolled back.`);
+          }
+          edgesCreated += created;
+        }
+        if (edgesCreated !== relationships.length) {
+          process.stderr.write(`[graph-write] reject reason=edge-count-mismatch labels=${labelCsv} agent=${agentLabel} requested=${relationships.length} created=${edgesCreated}
+`);
+          throw new Error(`Write doctrine violated: expected ${relationships.length} edges, created ${edgesCreated}. Transaction rolled back.`);
+        }
+        process.stderr.write(`[graph-write] accepted labels=${labelCsv} edges=${edgesCreated} createdByAgent=${createdBy.agent ?? "unknown"} createdByTool=${createdBy.tool ?? createdBy.source ?? "unknown"} producedBy=${provenanceSourceLabel ?? "none"}:${provenanceSourceId ?? "none"}
+`);
+        const acctSlice = typeof props.accountId === "string" ? props.accountId.slice(0, 8) : "none";
+        process.stderr.write(`[graph-write] op=node-written label=${labelCsv} accountId=${acctSlice} embedded=${embedded} indexed=${indexed}
+`);
+        return { nodeId, labels: nodeLabels, edgesCreated };
+      });
+    }
+  }
+});
+
 // node_modules/hono/dist/utils/mime.js
 var getMimeType = (filename, mimes = baseMimes) => {
   const regexp = /\.([a-zA-Z0-9]+?)$/;
@@ -8857,8 +9225,9 @@ async function managerDelete(sessionId) {
   await fetch(`${managerBase()}/${sessionId}`, { method: "DELETE" }).catch(() => {
   });
 }
-function managerLogFollowUrl(sessionId) {
-  return `${managerBase()}/${sessionId}/log?follow=1`;
+function managerLogFollowUrl(sessionId, opts) {
+  const base = `${managerBase()}/${sessionId}/log?follow=1`;
+  return opts?.boundary ? `${base}&boundary=1` : base;
 }
 
 // app/lib/channel-pty-bridge/admin-session-id.ts
@@ -9044,9 +9413,10 @@ function startFollower(opts) {
       let res;
       let attempt = 0;
       for (; ; ) {
-        res = await fetch(managerLogFollowUrl(entry.sessionId), {
-          signal: abort.signal
-        });
+        res = await fetch(
+          managerLogFollowUrl(entry.sessionId, { boundary: opts.suppressResumeReplay === true }),
+          { signal: abort.signal }
+        );
         console.error(`${tag} follower-connect sessionId=${sid} status=${res.status}`);
         if (res.status === 202) {
           attempt += 1;
@@ -9075,6 +9445,9 @@ function startFollower(opts) {
       let buffered = "";
       const fileDelivery = opts.fileDelivery ?? null;
       let firedFileTools = [];
+      let suppressing = opts.suppressResumeReplay === true;
+      let discardedTurns = 0;
+      let discardedFileTools = 0;
       while (!abort.signal.aborted) {
         const { value, done } = await reader.read();
         if (done) break;
@@ -9094,6 +9467,15 @@ function startFollower(opts) {
             );
             continue;
           }
+          if (event.type === "__channel_resume_boundary__") {
+            if (suppressing) {
+              suppressing = false;
+              console.error(
+                `${tag} follower-resume-boundary sessionId=${sid} discarded-head-turns=${discardedTurns} discarded-head-filetools=${discardedFileTools}`
+              );
+            }
+            continue;
+          }
           if (event.type === "user") {
             entry.pendingTurnText = "";
             firedFileTools = [];
@@ -9107,6 +9489,10 @@ function startFollower(opts) {
               if (block?.type === "text" && typeof block.text === "string") {
                 entry.pendingTurnText += block.text;
               } else if (fileDelivery && block?.type === "tool_use" && typeof block.name === "string" && fileDelivery.isFileDeliveryTool(block.name)) {
+                if (suppressing) {
+                  discardedFileTools += 1;
+                  continue;
+                }
                 firedFileTools.push(block.name);
                 try {
                   await fileDelivery.onFileToolUse({ toolName: block.name, input: block.input });
@@ -9119,6 +9505,12 @@ function startFollower(opts) {
             }
           }
           if (msg.stop_reason === "end_turn") {
+            if (suppressing) {
+              entry.pendingTurnText = "";
+              firedFileTools = [];
+              discardedTurns += 1;
+              continue;
+            }
             const flush = entry.pendingTurnText;
             entry.pendingTurnText = "";
             if (flush.trim()) {
@@ -9166,13 +9558,27 @@ import { realpathSync as realpathSync2 } from "fs";
 import { readFile, stat as stat2 } from "fs/promises";
 import { resolve as resolve4, basename } from "path";
 var TAG15 = "[whatsapp:outbound]";
+var WHATSAPP_DOCUMENT_MAX_BYTES = 100 * 1024 * 1024;
 var lastDocumentOutboundAt = /* @__PURE__ */ new Map();
+var lastRouteDocumentOutboundAt = /* @__PURE__ */ new Map();
 function normalizeJid(to) {
   return to.includes("@") ? to : toWhatsappJid(to);
 }
+function routeKey(to, filePath) {
+  return `${normalizeJid(to)}\0${filePath}`;
+}
 function documentOutboundAt(to) {
   return lastDocumentOutboundAt.get(normalizeJid(to));
 }
+function recordDocumentOutbound(to) {
+  lastDocumentOutboundAt.set(normalizeJid(to), Date.now());
+}
+function recordRouteDocumentOutbound(to, filePath) {
+  lastRouteDocumentOutboundAt.set(routeKey(to, filePath), Date.now());
+}
+function routeDocumentOutboundAt(to, filePath) {
+  return lastRouteDocumentOutboundAt.get(routeKey(to, filePath));
+}
 async function sendWhatsAppDocument(input) {
   const { to, filePath, caption, accountId, maxyAccountId, platformRoot: platformRoot2 } = input;
   if (!to || !filePath) {
@@ -9201,11 +9607,11 @@ async function sendWhatsAppDocument(input) {
     return { ok: false, status: 500, error: String(err) };
   }
   const fileStat = await stat2(resolvedPath);
-  if (fileStat.size > MAX_FILE_SIZE_BYTES) {
+  if (fileStat.size > WHATSAPP_DOCUMENT_MAX_BYTES) {
     return {
       ok: false,
       status: 400,
-      error: `File exceeds 50 MB limit (${(fileStat.size / 1024 / 1024).toFixed(1)} MB)`
+      error: `File exceeds 100 MB limit (${(fileStat.size / 1024 / 1024).toFixed(1)} MB)`
     };
   }
   const filename = basename(resolvedPath);
@@ -9227,7 +9633,7 @@ async function sendWhatsAppDocument(input) {
     `${TAG15} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
   );
   if (result.success) {
-    lastDocumentOutboundAt.set(jid, Date.now());
+    recordDocumentOutbound(to);
     return { ok: true, messageId: result.messageId };
   }
   return { ok: false, status: 500, error: result.error ?? "send failed" };
@@ -9242,12 +9648,23 @@ function platformRoot() {
 }
 function makeWhatsAppFileDelivery(entry) {
   let turnStartedAt = null;
+  let failedFiles = [];
+  let sendUserFileAttempts = 0;
+  let routeCalls = [];
   return {
     isFileDeliveryTool(toolName) {
       return toolName === SEND_USER_FILE || toolName === WHATSAPP_SEND_DOCUMENT;
     },
     async onFileToolUse(use) {
       if (turnStartedAt === null) turnStartedAt = Date.now();
+      if (use.toolName === WHATSAPP_SEND_DOCUMENT) {
+        const input2 = use.input ?? {};
+        routeCalls.push({
+          to: typeof input2.to === "string" ? input2.to : void 0,
+          filePath: typeof input2.filePath === "string" ? input2.filePath : void 0
+        });
+        return;
+      }
       if (use.toolName !== SEND_USER_FILE) return;
       const input = use.input ?? {};
       const files = Array.isArray(input.files) ? input.files.filter((f) => typeof f === "string") : [];
@@ -9263,6 +9680,7 @@ function makeWhatsAppFileDelivery(entry) {
         return;
       }
       for (let i = 0; i < files.length; i++) {
+        sendUserFileAttempts++;
         const result = await sendWhatsAppDocument({
           to: entry.senderId,
           filePath: files[i],
@@ -9272,6 +9690,7 @@ function makeWhatsAppFileDelivery(entry) {
           platformRoot: platformRoot()
         });
         if (!result.ok) {
+          failedFiles.push(files[i]);
           console.error(
             `${TAG16} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
           );
@@ -9280,13 +9699,34 @@ function makeWhatsAppFileDelivery(entry) {
     },
     onTurnEnd(firedTools) {
       const startedAt = turnStartedAt ?? 0;
+      const failed = failedFiles;
+      const attempts = sendUserFileAttempts;
+      const routes = routeCalls;
       turnStartedAt = null;
-      const okAt = documentOutboundAt(entry.senderId);
-      if (okAt !== void 0 && okAt >= startedAt) return;
+      failedFiles = [];
+      sendUserFileAttempts = 0;
+      routeCalls = [];
       const sid = entry.sessionId.slice(0, 8);
-      for (const tool of firedTools) {
+      for (const file of failed) {
+        console.error(
+          `${TAG16} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${SEND_USER_FILE} file=${file}`
+        );
+      }
+      const okAt = documentOutboundAt(entry.senderId);
+      const documentWentOut = okAt !== void 0 && okAt >= startedAt;
+      for (const call of routes) {
+        const routeAt = call.to !== void 0 && call.filePath !== void 0 ? routeDocumentOutboundAt(call.to, call.filePath) : void 0;
+        const delivered = routeAt !== void 0 && routeAt >= startedAt;
+        if (!delivered) {
+          const fileField = call.filePath !== void 0 ? ` file=${call.filePath}` : "";
+          console.error(
+            `${TAG16} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+          );
+        }
+      }
+      if (firedTools.includes(SEND_USER_FILE) && attempts === 0 && !documentWentOut) {
         console.error(
-          `${TAG16} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${tool}`
+          `${TAG16} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${SEND_USER_FILE}`
         );
       }
     }
@@ -9322,6 +9762,12 @@ async function ensureEntry(input) {
         entry: existing,
         tag,
         fileDelivery: fileDeliveryFor(existing),
+        // Task 631 — every channel attach resumes an existing session after a
+        // restart (the in-memory index is process memory and empty post-restart).
+        // Suppress replay of the pre-attach JSONL so the first inbound is answered
+        // by a fresh turn, not a historical end_turn, and historical SendUserFile
+        // is not re-sent.
+        suppressResumeReplay: true,
         onClose: () => {
           existing.followerRunning = false;
         }
@@ -9383,6 +9829,11 @@ async function ensureEntry(input) {
     entry,
     tag,
     fileDelivery: fileDeliveryFor(entry),
+    // Task 631 — see the existing-entry branch above. A fresh spawn has an
+    // empty JSONL, so the manager emits the boundary sentinel right after an
+    // empty head and the follower arms immediately; suppression is a no-op for
+    // the cold-spawn first turn and correct for any resume.
+    suppressResumeReplay: true,
     onClose: () => {
       entry.followerRunning = false;
     }
@@ -10759,6 +11210,7 @@ app3.post("/send-document", async (c) => {
       platformRoot: PLATFORM_ROOT4
     });
     if (!result.ok) return c.json({ error: result.error }, result.status);
+    recordRouteDocumentOutbound(to, filePath);
     return c.json({ success: true, messageId: result.messageId });
   } catch (err) {
     console.error(`${TAG19} send-document error: ${String(err)}`);
@@ -14664,6 +15116,7 @@ function buildScopeAndSliceClause(allowedScopes, sliceToken, alias = "node") {
     params: { allowedScopes }
   };
 }
+var DEFAULT_VECTOR_THRESHOLD = 0.82;
 function escapeLucene(query) {
   return query.replace(/[+\-&|!(){}[\]^"~*?:\\/]/g, "\\$&");
 }
@@ -15218,7 +15671,6 @@ function plainProperties(properties) {
 // server/routes/admin/graph-search.ts
 var DEFAULT_LIMIT = 20;
 var MAX_LIMIT = 2e3;
-var DEFAULT_VECTOR_THRESHOLD = 0.82;
 var MESSAGE_FAMILY_LABELS = ["Message", "UserMessage", "AssistantMessage", "WhatsAppMessage"];
 var CONVERSATION_PARENT_LABELS = /* @__PURE__ */ new Set(["AdminConversation", "PublicConversation"]);
 var app16 = new Hono();
@@ -15236,8 +15688,10 @@ app16.get("/", requireAdminSession, async (c) => {
   if (!q) return c.json({ error: "q (search query) required" }, 400);
   const labels = rawLabels ? rawLabels.split(",").map((s) => s.trim()).filter((s) => s.length > 0) : [];
   const wildcard = labels.includes("*");
-  if (labels.length === 0) {
-    return c.json({ error: "Select at least one filter chip before searching." }, 400);
+  const noChips = labels.length === 0;
+  const allLabels = wildcard || noChips;
+  if (noChips && !wildcard) {
+    console.error(`[graph-search] op=labels-default applied=all query="${q}"`);
   }
   const parsedLimit = rawLimit ? parseInt(rawLimit, 10) : DEFAULT_LIMIT;
   const limit = Number.isFinite(parsedLimit) && parsedLimit > 0 ? Math.min(parsedLimit, MAX_LIMIT) : DEFAULT_LIMIT;
@@ -15248,8 +15702,8 @@ app16.get("/", requireAdminSession, async (c) => {
       vectorThreshold = parsed;
     }
   }
-  const wantsBodyFulltext = !wildcard && labels.some((l) => CONVERSATION_PARENT_LABELS.has(l));
-  const forwardedLabels = wildcard ? void 0 : wantsBodyFulltext ? Array.from(/* @__PURE__ */ new Set([...labels, ...MESSAGE_FAMILY_LABELS])) : labels;
+  const wantsBodyFulltext = !allLabels && labels.some((l) => CONVERSATION_PARENT_LABELS.has(l));
+  const forwardedLabels = allLabels ? void 0 : wantsBodyFulltext ? Array.from(/* @__PURE__ */ new Set([...labels, ...MESSAGE_FAMILY_LABELS])) : labels;
   if (labels.includes("FileArtifact")) {
     await reconcileFileIndexDebounced(accountId);
   }
@@ -15324,7 +15778,7 @@ app16.get("/", requireAdminSession, async (c) => {
         `[graph-search] body-fulltext query="${q}" hits=${bodyFulltextCount} ms=${total}`
       );
     }
-    const labelsToken = wildcard ? "*" : labels.join(",");
+    const labelsToken = wildcard ? "*" : noChips ? "all" : labels.join(",");
     const expandedFlag = !wildcard && wantsBodyFulltext ? 1 : 0;
     console.error(
       `[graph-search] query="${q}" labels=${labelsToken} expanded=${expandedFlag} limit=${limit} mode=${res.mode} raw-results=${res.results.length} resolved-results=${resolvedResults.length} expand-ms=${res.expandMs} total-ms=${total}`
@@ -19194,7 +19648,15 @@ app42.post("/", async (c) => {
 var session_default2 = app42;
 
 // app/lib/graph-health.ts
+var import_dist5 = __toESM(require_dist4(), 1);
 var HOUR_MS = 60 * 60 * 1e3;
+function renderLabelTop(rows) {
+  return rows.map((b) => {
+    const labels = b.labels.join("+") || "(none)";
+    const c = typeof b.count === "number" ? b.count : b.count.toNumber?.() ?? 0;
+    return `${labels}:${c}`;
+  }).join(",");
+}
 var timer = null;
 async function runGraphHealthTick() {
   const session = getSession();
@@ -19231,6 +19693,34 @@ async function runGraphHealthTick() {
     console.error(
       `[graph-health] userprofile-multi accounts=${upAccounts} top=${upTop.length > 0 ? upTop.join(",") : "none"}`
     );
+    const indexed = [...import_dist5.VECTOR_INDEXED_LABELS];
+    const embCount = await session.run(
+      `MATCH (n) WHERE n.embedding IS NULL AND any(l IN labels(n) WHERE l IN $indexed)
+       RETURN count(n) AS total`,
+      { indexed }
+    );
+    const embTotal = embCount.records[0]?.get("total")?.toNumber?.() ?? 0;
+    const embTopRes = await session.run(
+      `MATCH (n) WHERE n.embedding IS NULL AND any(l IN labels(n) WHERE l IN $indexed)
+       WITH labels(n) AS lbls, count(*) AS c
+       ORDER BY c DESC LIMIT 5
+       RETURN collect({labels: lbls, count: c}) AS top`,
+      { indexed }
+    );
+    const embTop = embTopRes.records[0]?.get("top") ?? [];
+    console.error(`[embed-audit] null-embedding labels=${renderLabelTop(embTop) || "none"} count=${embTotal}`);
+    const acctCount = await session.run(
+      `MATCH (n) WHERE n.accountId IS NULL RETURN count(n) AS total`
+    );
+    const acctTotal = acctCount.records[0]?.get("total")?.toNumber?.() ?? 0;
+    const acctTopRes = await session.run(
+      `MATCH (n) WHERE n.accountId IS NULL
+       WITH labels(n) AS lbls, count(*) AS c
+       ORDER BY c DESC LIMIT 5
+       RETURN collect({labels: lbls, count: c}) AS top`
+    );
+    const acctTop = acctTopRes.records[0]?.get("top") ?? [];
+    console.error(`[account-audit] null-account labels=${renderLabelTop(acctTop) || "none"} count=${acctTotal}`);
   } catch (err) {
     console.error(
       `[graph-health] query failed: ${err instanceof Error ? err.message : String(err)}`
@@ -19382,15 +19872,29 @@ var TAG30 = "[whatsapp-adaptor]";
 function whatsappTurnTimeoutMs() {
   return Number(process.env.WHATSAPP_PTY_TURN_TIMEOUT_MS ?? String(5 * 6e4));
 }
+function composeTurn(input) {
+  const caption = input.text.trim();
+  const hasFileMedia = !!input.mediaPath && input.mediaType !== "audio";
+  if (!hasFileMedia) return caption;
+  const type = input.mediaType ?? "file";
+  const note = input.role === "admin" ? `[Inbound WhatsApp ${type}: ${input.mediaPath}${input.mediaMimetype ? ` (${input.mediaMimetype})` : ""}. Read this file to see what the sender shared.]` : `[The sender shared a ${type}. You cannot open shared files in this session \u2014 ask them to describe or paste the relevant content.]`;
+  return caption ? `${caption}
+
+${note}` : note;
+}
 async function dispatchToClaude(input) {
-  if (!input.text.trim()) return;
+  const hasFileMedia = !!input.mediaPath && input.mediaType !== "audio";
+  const mediaField = hasFileMedia ? `media=${input.mediaType} mediaPath=${input.mediaPath}` : input.mediaType === "audio" ? "media=audio mediaPath=transcribed" : "media=none";
+  console.error(`${TAG30} inbound-media ${mediaField} role=${input.role} senderId=${input.senderId}`);
+  const text = composeTurn(input);
+  if (!text.trim()) return;
   const result = await dispatchOnce({
     accountId: input.accountId,
     senderId: input.senderId,
     role: input.role,
     channel: "whatsapp",
     agentSlug: input.agentSlug,
-    text: input.text,
+    text,
     timeoutMs: whatsappTurnTimeoutMs()
   });
   if ("error" in result) {
@@ -20183,10 +20687,7 @@ var brandedHtmlCache = /* @__PURE__ */ new Map();
 function loadBrandingCache(agentSlug) {
   const configDir2 = join17(homedir2(), BRAND.configDir);
   try {
-    const accountJsonPath = join17(configDir2, "account.json");
-    if (!existsSync23(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync22(accountJsonPath, "utf-8"));
-    const accountId = account.accountId;
+    const accountId = getDefaultAccountId();
     if (!accountId) return null;
     const cachePath = join17(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync23(cachePath)) return null;
@@ -20196,15 +20697,9 @@ function loadBrandingCache(agentSlug) {
   }
 }
 function resolveDefaultSlug() {
-  try {
-    const configDir2 = join17(homedir2(), BRAND.configDir);
-    const accountJsonPath = join17(configDir2, "account.json");
-    if (!existsSync23(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync22(accountJsonPath, "utf-8"));
-    return account.defaultAgent || null;
-  } catch {
-    return null;
-  }
+  const account = resolveAccount();
+  if (!account) return null;
+  return resolveDefaultAgentSlug(account.accountDir);
 }
 function brandedPublicHtml(agentSlug) {
   const baseHtml = cachedHtml("public.html");
@@ -20250,6 +20745,7 @@ app43.get("/", (c) => {
         503
       );
     }
+    console.error(`[public-root] op=serve-default slug=${defaultSlug}`);
     return c.html(brandedPublicHtml(defaultSlug));
   }
   return c.html(cachedHtml("index.html"));
@@ -20530,7 +21026,7 @@ init({
   platformRoot: resolve26(process.env.MAXY_PLATFORM_ROOT ?? join17(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
-    if (msg.text && !msg.isOwnerMirror) {
+    if ((msg.text || msg.mediaPath) && !msg.isOwnerMirror) {
       try {
         void msg.composing().catch(() => {
         });
@@ -20552,6 +21048,9 @@ init({
           role: msg.agentType,
           agentSlug: agentSlugForBridge,
           text: msg.text,
+          mediaPath: msg.mediaPath,
+          mediaType: msg.mediaType,
+          mediaMimetype: msg.mediaMimetype,
           reply: msg.reply
         });
       } catch (err) {