@rubytech/create-realagent-code 0.1.254 → 0.1.255

package/payload/server/server.js

@@ -93,7 +93,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-M6A6EZD4.js";
+} from "./chunk-76HRO7NX.js";
 import {
   __commonJS,
   __require,
@@ -5211,6 +5211,374 @@ var require_dist3 = __commonJS({
   }
 });
 
+// ../lib/graph-write/dist/audit.js
+var require_audit = __commonJS({
+  "../lib/graph-write/dist/audit.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.auditCypherWrite = auditCypherWrite;
+    exports.formatAuditLine = formatAuditLine;
+    var EDGE_PATTERN = /\[[^\]]*?:([A-Z_][A-Za-z0-9_]*(?:\|[A-Z_][A-Za-z0-9_]*)*)[^\]]*?\]/g;
+    var CREATE_OR_MERGE_NODE = /\b(?:CREATE|MERGE)\s*\(\s*[A-Za-z_][A-Za-z0-9_]*\s*:\s*[A-Z]/g;
+    var PROVENANCE_TOKEN = /\bcreatedBy(?:Agent|Tool|Session|Source)\b/g;
+    function stripStringLiterals(cypher) {
+      return cypher.replace(/'[^']*'|"[^"]*"/g, '""');
+    }
+    function extractEdgeTypes(cleaned) {
+      const out = /* @__PURE__ */ new Set();
+      for (const m of cleaned.matchAll(EDGE_PATTERN)) {
+        for (const t of m[1].split("|")) {
+          const clean = t.trim();
+          if (clean)
+            out.add(clean);
+        }
+      }
+      return out;
+    }
+    function countCreateOrMergeNodes(cleaned) {
+      const matches = cleaned.match(CREATE_OR_MERGE_NODE);
+      return matches ? matches.length : 0;
+    }
+    function countProvenanceStamps(cleaned) {
+      const matches = cleaned.match(PROVENANCE_TOKEN);
+      return matches ? matches.length : 0;
+    }
+    function auditCypherWrite(input) {
+      const warnings = [];
+      const cleaned = stripStringLiterals(input.cypher);
+      const referencedTypes = extractEdgeTypes(cleaned);
+      for (const t of referencedTypes) {
+        if (!input.schema.relationshipTypes.has(t)) {
+          warnings.push({ kind: "unknown-type-warning", type: t });
+        }
+      }
+      if (input.nodesCreated > 0) {
+        const createOrMergeNodes = countCreateOrMergeNodes(cleaned);
+        if (createOrMergeNodes > 0) {
+          const stamps = countProvenanceStamps(cleaned);
+          if (stamps < createOrMergeNodes) {
+            warnings.push({
+              kind: "missing-provenance-warning",
+              created: createOrMergeNodes,
+              stamped: stamps
+            });
+          }
+        }
+      }
+      if (input.orphanIds.length > 0) {
+        warnings.push({ kind: "orphan-warning", orphanIds: input.orphanIds });
+      }
+      return warnings;
+    }
+    function formatAuditLine(line) {
+      const prefixField = `query="${line.cypherPrefix.replace(/"/g, "'")}"`;
+      switch (line.kind) {
+        case "accepted":
+          return `[graph-cypher-write] accepted ${prefixField} nodesCreated=${line.nodesCreated} relsCreated=${line.relsCreated} agentName=${line.agentName} sessionId=${line.sessionId}`;
+        case "orphan-warning":
+          return `[graph-cypher-write] orphan-warning ${prefixField} orphanIds=${line.orphanIds.join(",")}`;
+        case "unknown-type-warning":
+          return `[graph-cypher-write] unknown-type-warning ${prefixField} type=${line.type}`;
+        case "missing-provenance-warning":
+          return `[graph-cypher-write] missing-provenance-warning ${prefixField} created=${line.created} stamped=${line.stamped}`;
+      }
+    }
+  }
+});
+
+// ../lib/graph-write/dist/conversation-provenance.js
+var require_conversation_provenance = __commonJS({
+  "../lib/graph-write/dist/conversation-provenance.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.injectConversationProvenance = injectConversationProvenance;
+    var index_js_1 = require_dist4();
+    async function injectConversationProvenance(params) {
+      const { session, relationships, accountId, writeLabels, conversationNodeId, logNamespace, tool } = params;
+      const original = [...relationships];
+      if (!writeLabels.some((l) => index_js_1.ACTION_PROVENANCE_LABELS.has(l)))
+        return original;
+      if (!conversationNodeId)
+        return original;
+      if (hasInboundProducedEdge(original))
+        return original;
+      let lookup;
+      try {
+        lookup = await session.run(`MATCH (c:Conversation {sessionId: $cid, accountId: $accountId})
+       RETURN elementId(c) AS elementId, labels(c) AS labels LIMIT 1`, { cid: conversationNodeId, accountId });
+      } catch (err) {
+        process.stderr.write(`[${logNamespace}] [provenance-missing] tool=${tool} reason=driver-error message=${err instanceof Error ? err.message : String(err)} conversationNodeId=${conversationNodeId}
+`);
+        return original;
+      }
+      if (lookup.records.length === 0) {
+        process.stderr.write(`[${logNamespace}] [provenance-missing] tool=${tool} reason=node-not-found conversationNodeId=${conversationNodeId}
+`);
+        return original;
+      }
+      const elementId = lookup.records[0].get("elementId");
+      const labels = lookup.records[0].get("labels");
+      const sourceLabel = labels.find((l) => index_js_1.PROVENANCE_SOURCE_LABELS.has(l));
+      if (!sourceLabel) {
+        process.stderr.write(`[${logNamespace}] [provenance-missing] tool=${tool} reason=wrong-source-label labels=${labels.join(",")} conversationNodeId=${conversationNodeId}
+`);
+        return original;
+      }
+      process.stderr.write(`[${logNamespace}] [provenance-inject] tool=${tool} from=${sourceLabel}:${conversationNodeId}
+`);
+      return [
+        {
+          type: "PRODUCED",
+          direction: "incoming",
+          targetNodeId: elementId
+        },
+        ...original
+      ];
+    }
+    function hasInboundProducedEdge(relationships) {
+      return relationships.some((r) => r.type === "PRODUCED" && r.direction === "incoming");
+    }
+  }
+});
+
+// ../lib/graph-write/dist/index.js
+var require_dist4 = __commonJS({
+  "../lib/graph-write/dist/index.js"(exports) {
+    "use strict";
+    var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      var desc = Object.getOwnPropertyDescriptor(m, k);
+      if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+        desc = { enumerable: true, get: function() {
+          return m[k];
+        } };
+      }
+      Object.defineProperty(o, k2, desc);
+    }) : (function(o, m, k, k2) {
+      if (k2 === void 0) k2 = k;
+      o[k2] = m[k];
+    }));
+    var __exportStar = exports && exports.__exportStar || function(m, exports2) {
+      for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports2, p)) __createBinding(exports2, m, p);
+    };
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.DOCUMENT_ARCHIVE_LABELS = exports.VECTOR_INDEXED_LABELS = exports.PROVENANCE_SOURCE_LABELS = exports.ACTION_PROVENANCE_LABELS = void 0;
+    exports.stampCreatedBy = stampCreatedBy;
+    exports.writeNodeWithEdges = writeNodeWithEdges;
+    __exportStar(require_audit(), exports);
+    __exportStar(require_conversation_provenance(), exports);
+    exports.ACTION_PROVENANCE_LABELS = /* @__PURE__ */ new Set([
+      "Person",
+      "UserProfile",
+      "AdminUser",
+      "Organization",
+      "LocalBusiness",
+      "CloudflareTunnel",
+      "CloudflareHostname"
+    ]);
+    exports.PROVENANCE_SOURCE_LABELS = /* @__PURE__ */ new Set([
+      "Task",
+      "Conversation",
+      "Message"
+    ]);
+    function requiresActionProvenance(labels) {
+      for (const label of labels) {
+        if (exports.ACTION_PROVENANCE_LABELS.has(label))
+          return true;
+      }
+      return false;
+    }
+    exports.VECTOR_INDEXED_LABELS = /* @__PURE__ */ new Set([
+      "Question",
+      "DefinedTerm",
+      "Review",
+      "Service",
+      "Person",
+      "LocalBusiness",
+      "Organization",
+      "PriceSpecification",
+      "Task",
+      "CreativeWork",
+      "DigitalDocument",
+      "KnowledgeDocument",
+      "ConversationArchive",
+      "Section",
+      "Chunk",
+      "Project",
+      "Position",
+      "Conversation",
+      "Message",
+      "Event",
+      "Workflow",
+      "Preference",
+      "Listing",
+      "Idea",
+      "TimelineEvent",
+      "Report",
+      "FileArtifact"
+    ]);
+    exports.DOCUMENT_ARCHIVE_LABELS = /* @__PURE__ */ new Set([
+      "KnowledgeDocument",
+      "DigitalDocument",
+      "ConversationArchive"
+    ]);
+    function labelsAreIndexed(labels) {
+      for (const l of labels)
+        if (exports.VECTOR_INDEXED_LABELS.has(l))
+          return true;
+      return false;
+    }
+    function boundedEmbedText(labels, props) {
+      const PER_VALUE = 2e3;
+      const TOTAL = 8e3;
+      const docPreferred = labels.some((l) => exports.DOCUMENT_ARCHIVE_LABELS.has(l));
+      const parts = [`[${labels.join(", ")}]`];
+      for (const [k, v] of Object.entries(props)) {
+        if (v === null || v === void 0 || k === "embedding")
+          continue;
+        if (docPreferred && (k === "body" || k === "text"))
+          continue;
+        const s = String(v);
+        parts.push(`${k}: ${s.length > PER_VALUE ? s.slice(0, PER_VALUE) : s}`);
+      }
+      const joined = parts.join(" | ");
+      return joined.length > TOTAL ? joined.slice(0, TOTAL) : joined;
+    }
+    function findProvenanceCandidates(relationships) {
+      return relationships.filter((r) => r.type === "PRODUCED" && r.direction === "incoming");
+    }
+    function stampCreatedBy(props, createdBy) {
+      return {
+        ...props,
+        createdByAgent: createdBy.agent ?? "unknown",
+        createdBySession: createdBy.session ?? "unknown",
+        createdByTool: createdBy.tool ?? null,
+        createdBySource: createdBy.source ?? null
+      };
+    }
+    async function writeNodeWithEdges(params) {
+      const { session, labels, props, relationships, createdBy } = params;
+      const agentLabel = createdBy.agent ?? createdBy.source ?? "unknown";
+      const labelCsv = labels.join(",");
+      const isSystemBootstrap = (createdBy.agent ?? "") === "system";
+      if (!isSystemBootstrap) {
+        const accountId = props.accountId;
+        const expectedAccountId = params.expectedAccountId ?? process.env.ACCOUNT_ID;
+        if (typeof accountId !== "string" || !expectedAccountId || accountId !== expectedAccountId) {
+          const slice = typeof accountId === "string" ? accountId.slice(0, 8) : "missing";
+          process.stderr.write(`[graph-write] reject reason=invalid-account-id accountId=${slice} writer=${agentLabel}
+`);
+          throw new Error(`Write doctrine violated: invalid-account-id (${slice}) \u2014 accountId must equal ACCOUNT_ID set by the spawning process. See .docs/neo4j.md "Account isolation invariant".`);
+        }
+      }
+      const reviewDigestActionTool = typeof props.actionTool === "string" && props.actionTool === "review-digest-compose";
+      if (labels.includes("ReviewAlert") || reviewDigestActionTool) {
+        const actionToolField = reviewDigestActionTool ? "review-digest-compose" : "n/a";
+        process.stderr.write(`[graph-write] reject reason=removed-feature labels=${labelCsv} actionTool=${actionToolField} agent=${agentLabel}
+`);
+        throw new Error("Write doctrine violated: review-detector feature removed \u2014 `:ReviewAlert` and `:Event {actionTool:'review-digest-compose'}` writes are not allowed.");
+      }
+      if (!relationships || relationships.length < 1) {
+        process.stderr.write(`[graph-write] reject reason=zero-relationships labels=${labelCsv} agent=${agentLabel}
+`);
+        throw new Error("Write doctrine violated: a node must be created with at least one relationship. See .docs/neo4j.md (Write doctrine).");
+      }
+      const indexed = labelsAreIndexed(labels);
+      let embedded = Array.isArray(props.embedding) && props.embedding.length > 0;
+      const workingProps = { ...props };
+      if (indexed && !embedded && typeof params.embed === "function") {
+        try {
+          const vec = await params.embed(boundedEmbedText(labels, props));
+          if (Array.isArray(vec) && vec.length > 0) {
+            workingProps.embedding = vec;
+            embedded = true;
+          }
+        } catch (err) {
+          process.stderr.write(`[graph-write] warn reason=embed-failed labels=${labelCsv} agent=${agentLabel} detail=${err instanceof Error ? err.message : String(err)}
+`);
+        }
+      }
+      const labelStr = labels.map((l) => `\`${l.replace(/`/g, "")}\``).join(":");
+      const nodeProps = stampCreatedBy(workingProps, createdBy);
+      return await session.executeWrite(async (tx) => {
+        const targetIds = relationships.map((r) => r.targetNodeId);
+        const check = await tx.run(`UNWIND $ids AS id MATCH (t) WHERE elementId(t) = id RETURN elementId(t) AS id, labels(t) AS labels`, { ids: targetIds });
+        const labelsByTarget = /* @__PURE__ */ new Map();
+        for (const rec of check.records) {
+          labelsByTarget.set(rec.get("id"), rec.get("labels"));
+        }
+        const found = labelsByTarget.size;
+        const uniqueRequested = new Set(targetIds).size;
+        if (found !== uniqueRequested) {
+          process.stderr.write(`[graph-write] reject reason=unresolved-target labels=${labelCsv} agent=${agentLabel} requested=${uniqueRequested} found=${found}
+`);
+          throw new Error(`Write doctrine violated: ${uniqueRequested - found} of ${uniqueRequested} relationship target(s) did not resolve (elementId mismatch). No node created.`);
+        }
+        let provenanceSourceId = null;
+        let provenanceSourceLabel = null;
+        if (requiresActionProvenance(labels) && (createdBy.agent ?? "") !== "system") {
+          const candidates = findProvenanceCandidates(relationships);
+          const matched = candidates.map((r) => {
+            const lbls = labelsByTarget.get(r.targetNodeId);
+            if (!Array.isArray(lbls))
+              return null;
+            const sourceLabel = lbls.find((l) => exports.PROVENANCE_SOURCE_LABELS.has(l));
+            return sourceLabel ? { rel: r, sourceLabel } : null;
+          }).filter((m) => m !== null);
+          if (matched.length === 0) {
+            process.stderr.write(`[graph-write] warn reason=missing-provenance labels=${labelCsv} agent=${agentLabel}
+`);
+          } else {
+            provenanceSourceId = matched[0].rel.targetNodeId;
+            provenanceSourceLabel = matched[0].sourceLabel;
+          }
+        }
+        let nodeRes;
+        try {
+          nodeRes = await tx.run(`CREATE (n:${labelStr} $props) RETURN elementId(n) AS nodeId, labels(n) AS nodeLabels`, { props: nodeProps });
+        } catch (err) {
+          const code = err?.code ?? "";
+          if (code === "Neo.ClientError.Schema.ConstraintValidationFailed" && labels.includes("UserProfile")) {
+            const accountIdProp = nodeProps.accountId;
+            const userIdProp = nodeProps.userId;
+            const acctSlice2 = typeof accountIdProp === "string" ? accountIdProp.slice(0, 8) : "unknown";
+            const userSlice = typeof userIdProp === "string" ? userIdProp.slice(0, 8) : "unknown";
+            process.stderr.write(`[graph-write] reject reason=user-profile-uniqueness-violation accountId=${acctSlice2} userId=${userSlice} writer=${agentLabel}
+`);
+          }
+          throw err;
+        }
+        const nodeId = nodeRes.records[0].get("nodeId");
+        const nodeLabels = nodeRes.records[0].get("nodeLabels");
+        let edgesCreated = 0;
+        for (const rel of relationships) {
+          const type = rel.type.replace(/`/g, "");
+          const q = rel.direction === "outgoing" ? `MATCH (a), (b) WHERE elementId(a) = $from AND elementId(b) = $to CREATE (a)-[:\`${type}\`]->(b)` : `MATCH (a), (b) WHERE elementId(a) = $from AND elementId(b) = $to CREATE (b)-[:\`${type}\`]->(a)`;
+          const r = await tx.run(q, { from: nodeId, to: rel.targetNodeId });
+          const created = r.summary.counters.updates().relationshipsCreated;
+          if (created === 0) {
+            process.stderr.write(`[graph-write] reject reason=unresolved-target-on-create labels=${labelCsv} agent=${agentLabel} relType=${rel.type} targetId=${rel.targetNodeId}
+`);
+            throw new Error(`Write doctrine violated: relationship CREATE to target ${rel.targetNodeId} produced 0 edges (target likely deleted concurrently after pre-check). Transaction rolled back.`);
+          }
+          edgesCreated += created;
+        }
+        if (edgesCreated !== relationships.length) {
+          process.stderr.write(`[graph-write] reject reason=edge-count-mismatch labels=${labelCsv} agent=${agentLabel} requested=${relationships.length} created=${edgesCreated}
+`);
+          throw new Error(`Write doctrine violated: expected ${relationships.length} edges, created ${edgesCreated}. Transaction rolled back.`);
+        }
+        process.stderr.write(`[graph-write] accepted labels=${labelCsv} edges=${edgesCreated} createdByAgent=${createdBy.agent ?? "unknown"} createdByTool=${createdBy.tool ?? createdBy.source ?? "unknown"} producedBy=${provenanceSourceLabel ?? "none"}:${provenanceSourceId ?? "none"}
+`);
+        const acctSlice = typeof props.accountId === "string" ? props.accountId.slice(0, 8) : "none";
+        process.stderr.write(`[graph-write] op=node-written label=${labelCsv} accountId=${acctSlice} embedded=${embedded} indexed=${indexed}
+`);
+        return { nodeId, labels: nodeLabels, edgesCreated };
+      });
+    }
+  }
+});
+
 // node_modules/hono/dist/utils/mime.js
 var getMimeType = (filename, mimes = baseMimes) => {
   const regexp = /\.([a-zA-Z0-9]+?)$/;
@@ -9192,12 +9560,25 @@ import { resolve as resolve4, basename } from "path";
 var TAG15 = "[whatsapp:outbound]";
 var WHATSAPP_DOCUMENT_MAX_BYTES = 100 * 1024 * 1024;
 var lastDocumentOutboundAt = /* @__PURE__ */ new Map();
+var lastRouteDocumentOutboundAt = /* @__PURE__ */ new Map();
 function normalizeJid(to) {
   return to.includes("@") ? to : toWhatsappJid(to);
 }
+function routeKey(to, filePath) {
+  return `${normalizeJid(to)}\0${filePath}`;
+}
 function documentOutboundAt(to) {
   return lastDocumentOutboundAt.get(normalizeJid(to));
 }
+function recordDocumentOutbound(to) {
+  lastDocumentOutboundAt.set(normalizeJid(to), Date.now());
+}
+function recordRouteDocumentOutbound(to, filePath) {
+  lastRouteDocumentOutboundAt.set(routeKey(to, filePath), Date.now());
+}
+function routeDocumentOutboundAt(to, filePath) {
+  return lastRouteDocumentOutboundAt.get(routeKey(to, filePath));
+}
 async function sendWhatsAppDocument(input) {
   const { to, filePath, caption, accountId, maxyAccountId, platformRoot: platformRoot2 } = input;
   if (!to || !filePath) {
@@ -9252,7 +9633,7 @@ async function sendWhatsAppDocument(input) {
     `${TAG15} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
   );
   if (result.success) {
-    lastDocumentOutboundAt.set(jid, Date.now());
+    recordDocumentOutbound(to);
     return { ok: true, messageId: result.messageId };
   }
   return { ok: false, status: 500, error: result.error ?? "send failed" };
@@ -9269,12 +9650,21 @@ function makeWhatsAppFileDelivery(entry) {
   let turnStartedAt = null;
   let failedFiles = [];
   let sendUserFileAttempts = 0;
+  let routeCalls = [];
   return {
     isFileDeliveryTool(toolName) {
       return toolName === SEND_USER_FILE || toolName === WHATSAPP_SEND_DOCUMENT;
     },
     async onFileToolUse(use) {
       if (turnStartedAt === null) turnStartedAt = Date.now();
+      if (use.toolName === WHATSAPP_SEND_DOCUMENT) {
+        const input2 = use.input ?? {};
+        routeCalls.push({
+          to: typeof input2.to === "string" ? input2.to : void 0,
+          filePath: typeof input2.filePath === "string" ? input2.filePath : void 0
+        });
+        return;
+      }
       if (use.toolName !== SEND_USER_FILE) return;
       const input = use.input ?? {};
       const files = Array.isArray(input.files) ? input.files.filter((f) => typeof f === "string") : [];
@@ -9311,9 +9701,11 @@ function makeWhatsAppFileDelivery(entry) {
       const startedAt = turnStartedAt ?? 0;
       const failed = failedFiles;
       const attempts = sendUserFileAttempts;
+      const routes = routeCalls;
       turnStartedAt = null;
       failedFiles = [];
       sendUserFileAttempts = 0;
+      routeCalls = [];
       const sid = entry.sessionId.slice(0, 8);
       for (const file of failed) {
         console.error(
@@ -9322,10 +9714,15 @@ function makeWhatsAppFileDelivery(entry) {
       }
       const okAt = documentOutboundAt(entry.senderId);
       const documentWentOut = okAt !== void 0 && okAt >= startedAt;
-      if (firedTools.includes(WHATSAPP_SEND_DOCUMENT) && !documentWentOut) {
-        console.error(
-          `${TAG16} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}`
-        );
+      for (const call of routes) {
+        const routeAt = call.to !== void 0 && call.filePath !== void 0 ? routeDocumentOutboundAt(call.to, call.filePath) : void 0;
+        const delivered = routeAt !== void 0 && routeAt >= startedAt;
+        if (!delivered) {
+          const fileField = call.filePath !== void 0 ? ` file=${call.filePath}` : "";
+          console.error(
+            `${TAG16} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+          );
+        }
       }
       if (firedTools.includes(SEND_USER_FILE) && attempts === 0 && !documentWentOut) {
         console.error(
@@ -10813,6 +11210,7 @@ app3.post("/send-document", async (c) => {
       platformRoot: PLATFORM_ROOT4
     });
     if (!result.ok) return c.json({ error: result.error }, result.status);
+    recordRouteDocumentOutbound(to, filePath);
     return c.json({ success: true, messageId: result.messageId });
   } catch (err) {
     console.error(`${TAG19} send-document error: ${String(err)}`);
@@ -14718,6 +15116,7 @@ function buildScopeAndSliceClause(allowedScopes, sliceToken, alias = "node") {
     params: { allowedScopes }
   };
 }
+var DEFAULT_VECTOR_THRESHOLD = 0.82;
 function escapeLucene(query) {
   return query.replace(/[+\-&|!(){}[\]^"~*?:\\/]/g, "\\$&");
 }
@@ -15272,7 +15671,6 @@ function plainProperties(properties) {
 // server/routes/admin/graph-search.ts
 var DEFAULT_LIMIT = 20;
 var MAX_LIMIT = 2e3;
-var DEFAULT_VECTOR_THRESHOLD = 0.82;
 var MESSAGE_FAMILY_LABELS = ["Message", "UserMessage", "AssistantMessage", "WhatsAppMessage"];
 var CONVERSATION_PARENT_LABELS = /* @__PURE__ */ new Set(["AdminConversation", "PublicConversation"]);
 var app16 = new Hono();
@@ -15290,8 +15688,10 @@ app16.get("/", requireAdminSession, async (c) => {
   if (!q) return c.json({ error: "q (search query) required" }, 400);
   const labels = rawLabels ? rawLabels.split(",").map((s) => s.trim()).filter((s) => s.length > 0) : [];
   const wildcard = labels.includes("*");
-  if (labels.length === 0) {
-    return c.json({ error: "Select at least one filter chip before searching." }, 400);
+  const noChips = labels.length === 0;
+  const allLabels = wildcard || noChips;
+  if (noChips && !wildcard) {
+    console.error(`[graph-search] op=labels-default applied=all query="${q}"`);
   }
   const parsedLimit = rawLimit ? parseInt(rawLimit, 10) : DEFAULT_LIMIT;
   const limit = Number.isFinite(parsedLimit) && parsedLimit > 0 ? Math.min(parsedLimit, MAX_LIMIT) : DEFAULT_LIMIT;
@@ -15302,8 +15702,8 @@ app16.get("/", requireAdminSession, async (c) => {
       vectorThreshold = parsed;
     }
   }
-  const wantsBodyFulltext = !wildcard && labels.some((l) => CONVERSATION_PARENT_LABELS.has(l));
-  const forwardedLabels = wildcard ? void 0 : wantsBodyFulltext ? Array.from(/* @__PURE__ */ new Set([...labels, ...MESSAGE_FAMILY_LABELS])) : labels;
+  const wantsBodyFulltext = !allLabels && labels.some((l) => CONVERSATION_PARENT_LABELS.has(l));
+  const forwardedLabels = allLabels ? void 0 : wantsBodyFulltext ? Array.from(/* @__PURE__ */ new Set([...labels, ...MESSAGE_FAMILY_LABELS])) : labels;
   if (labels.includes("FileArtifact")) {
     await reconcileFileIndexDebounced(accountId);
   }
@@ -15378,7 +15778,7 @@ app16.get("/", requireAdminSession, async (c) => {
         `[graph-search] body-fulltext query="${q}" hits=${bodyFulltextCount} ms=${total}`
       );
     }
-    const labelsToken = wildcard ? "*" : labels.join(",");
+    const labelsToken = wildcard ? "*" : noChips ? "all" : labels.join(",");
     const expandedFlag = !wildcard && wantsBodyFulltext ? 1 : 0;
     console.error(
       `[graph-search] query="${q}" labels=${labelsToken} expanded=${expandedFlag} limit=${limit} mode=${res.mode} raw-results=${res.results.length} resolved-results=${resolvedResults.length} expand-ms=${res.expandMs} total-ms=${total}`
@@ -19248,7 +19648,15 @@ app42.post("/", async (c) => {
 var session_default2 = app42;
 
 // app/lib/graph-health.ts
+var import_dist5 = __toESM(require_dist4(), 1);
 var HOUR_MS = 60 * 60 * 1e3;
+function renderLabelTop(rows) {
+  return rows.map((b) => {
+    const labels = b.labels.join("+") || "(none)";
+    const c = typeof b.count === "number" ? b.count : b.count.toNumber?.() ?? 0;
+    return `${labels}:${c}`;
+  }).join(",");
+}
 var timer = null;
 async function runGraphHealthTick() {
   const session = getSession();
@@ -19285,6 +19693,34 @@ async function runGraphHealthTick() {
     console.error(
       `[graph-health] userprofile-multi accounts=${upAccounts} top=${upTop.length > 0 ? upTop.join(",") : "none"}`
     );
+    const indexed = [...import_dist5.VECTOR_INDEXED_LABELS];
+    const embCount = await session.run(
+      `MATCH (n) WHERE n.embedding IS NULL AND any(l IN labels(n) WHERE l IN $indexed)
+       RETURN count(n) AS total`,
+      { indexed }
+    );
+    const embTotal = embCount.records[0]?.get("total")?.toNumber?.() ?? 0;
+    const embTopRes = await session.run(
+      `MATCH (n) WHERE n.embedding IS NULL AND any(l IN labels(n) WHERE l IN $indexed)
+       WITH labels(n) AS lbls, count(*) AS c
+       ORDER BY c DESC LIMIT 5
+       RETURN collect({labels: lbls, count: c}) AS top`,
+      { indexed }
+    );
+    const embTop = embTopRes.records[0]?.get("top") ?? [];
+    console.error(`[embed-audit] null-embedding labels=${renderLabelTop(embTop) || "none"} count=${embTotal}`);
+    const acctCount = await session.run(
+      `MATCH (n) WHERE n.accountId IS NULL RETURN count(n) AS total`
+    );
+    const acctTotal = acctCount.records[0]?.get("total")?.toNumber?.() ?? 0;
+    const acctTopRes = await session.run(
+      `MATCH (n) WHERE n.accountId IS NULL
+       WITH labels(n) AS lbls, count(*) AS c
+       ORDER BY c DESC LIMIT 5
+       RETURN collect({labels: lbls, count: c}) AS top`
+    );
+    const acctTop = acctTopRes.records[0]?.get("top") ?? [];
+    console.error(`[account-audit] null-account labels=${renderLabelTop(acctTop) || "none"} count=${acctTotal}`);
   } catch (err) {
     console.error(
       `[graph-health] query failed: ${err instanceof Error ? err.message : String(err)}`
@@ -19436,15 +19872,29 @@ var TAG30 = "[whatsapp-adaptor]";
 function whatsappTurnTimeoutMs() {
   return Number(process.env.WHATSAPP_PTY_TURN_TIMEOUT_MS ?? String(5 * 6e4));
 }
+function composeTurn(input) {
+  const caption = input.text.trim();
+  const hasFileMedia = !!input.mediaPath && input.mediaType !== "audio";
+  if (!hasFileMedia) return caption;
+  const type = input.mediaType ?? "file";
+  const note = input.role === "admin" ? `[Inbound WhatsApp ${type}: ${input.mediaPath}${input.mediaMimetype ? ` (${input.mediaMimetype})` : ""}. Read this file to see what the sender shared.]` : `[The sender shared a ${type}. You cannot open shared files in this session \u2014 ask them to describe or paste the relevant content.]`;
+  return caption ? `${caption}
+
+${note}` : note;
+}
 async function dispatchToClaude(input) {
-  if (!input.text.trim()) return;
+  const hasFileMedia = !!input.mediaPath && input.mediaType !== "audio";
+  const mediaField = hasFileMedia ? `media=${input.mediaType} mediaPath=${input.mediaPath}` : input.mediaType === "audio" ? "media=audio mediaPath=transcribed" : "media=none";
+  console.error(`${TAG30} inbound-media ${mediaField} role=${input.role} senderId=${input.senderId}`);
+  const text = composeTurn(input);
+  if (!text.trim()) return;
   const result = await dispatchOnce({
     accountId: input.accountId,
     senderId: input.senderId,
     role: input.role,
     channel: "whatsapp",
     agentSlug: input.agentSlug,
-    text: input.text,
+    text,
     timeoutMs: whatsappTurnTimeoutMs()
   });
   if ("error" in result) {
@@ -20237,10 +20687,7 @@ var brandedHtmlCache = /* @__PURE__ */ new Map();
 function loadBrandingCache(agentSlug) {
   const configDir2 = join17(homedir2(), BRAND.configDir);
   try {
-    const accountJsonPath = join17(configDir2, "account.json");
-    if (!existsSync23(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync22(accountJsonPath, "utf-8"));
-    const accountId = account.accountId;
+    const accountId = getDefaultAccountId();
     if (!accountId) return null;
     const cachePath = join17(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync23(cachePath)) return null;
@@ -20250,15 +20697,9 @@ function loadBrandingCache(agentSlug) {
   }
 }
 function resolveDefaultSlug() {
-  try {
-    const configDir2 = join17(homedir2(), BRAND.configDir);
-    const accountJsonPath = join17(configDir2, "account.json");
-    if (!existsSync23(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync22(accountJsonPath, "utf-8"));
-    return account.defaultAgent || null;
-  } catch {
-    return null;
-  }
+  const account = resolveAccount();
+  if (!account) return null;
+  return resolveDefaultAgentSlug(account.accountDir);
 }
 function brandedPublicHtml(agentSlug) {
   const baseHtml = cachedHtml("public.html");
@@ -20304,6 +20745,7 @@ app43.get("/", (c) => {
         503
       );
     }
+    console.error(`[public-root] op=serve-default slug=${defaultSlug}`);
     return c.html(brandedPublicHtml(defaultSlug));
   }
   return c.html(cachedHtml("index.html"));
@@ -20584,7 +21026,7 @@ init({
   platformRoot: resolve26(process.env.MAXY_PLATFORM_ROOT ?? join17(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
-    if (msg.text && !msg.isOwnerMirror) {
+    if ((msg.text || msg.mediaPath) && !msg.isOwnerMirror) {
       try {
         void msg.composing().catch(() => {
         });
@@ -20606,6 +21048,9 @@ init({
           role: msg.agentType,
           agentSlug: agentSlugForBridge,
           text: msg.text,
+          mediaPath: msg.mediaPath,
+          mediaType: msg.mediaType,
+          mediaMimetype: msg.mediaMimetype,
           reply: msg.reply
         });
       } catch (err) {