@rubytech/create-sitedesk-code 0.1.514 → 0.1.516

package/payload/server/server.js

@@ -3219,7 +3219,7 @@ var WhatsAppConfigSchema = z.object({
       z.string(),
       z.object({ managesAccount: z.string(), mode: z.enum(["active", "passive"]).optional() })
     ])
-  ).optional().describe("Account-manager bindings: E.164 phone \u2192 sub-account. The value is a bare sub-account UUID (mode 'active', the default: a full admin session) or { managesAccount, mode } where mode 'passive' selects a constrained requirement-intake spawn (only work-create, no reply). A bare string and an object without mode both resolve to 'active'. Managed via add-account-manager / remove-account-manager. A phone here must not also be in adminPhones."),
+  ).optional().describe("Account-manager bindings: E.164 phone \u2192 sub-account. The value is a bare sub-account UUID (mode 'active', the default: a full admin session) or { managesAccount, mode } where mode 'passive' selects a constrained requirement-intake spawn (only work-create, no reply). A bare string and an object without mode both resolve to 'active'. Managed via add-account-manager / remove-account-manager. A phone here must not also be in adminPhones. Read only from the account whose account.json the manager loads its config from (the house); add-account-manager is refused on any other account, and a map left there is inert and purged at boot."),
   allowFrom: z.array(z.string()).optional().describe("Phone numbers allowed to message the public agent when DM policy is 'allowlist'. Add '*' for open access. Does not affect admin routing \u2014 use adminPhones for that."),
   sendReadReceipts: z.boolean().optional().default(true).describe("Whether to send read receipts (blue ticks) when messages are received. Disabling may feel less responsive but preserves privacy."),
   mediaMaxMb: z.number().int().positive().optional().default(50).describe("Maximum file size in MB for media the agent will download and process."),
@@ -8123,7 +8123,7 @@ function createScheduleInjectRoutes(deps) {
     const houseAccountId = account.accountId;
     console.error(`${TAG21} op=received eventId=${eventId} channel=${channel} destination=${destination} account=${houseAccountId}`);
     if (channel === "whatsapp") {
-      const effectiveAccount2 = deps.effectiveAccountFor(houseAccountId, account.accountDir, destination);
+      const effectiveAccount2 = deps.effectiveAccountFor(account.accountDir, destination);
       if (effectiveAccount2 === null) {
         console.error(`${TAG21} op=schedule-account-manager-reject eventId=${eventId} destination=${destination} reason=unresolved-effective-account`);
         return c.json({ ok: false, error: "account-manager-unresolved" }, 403);
@@ -8441,6 +8441,54 @@ function purgeNonSocketAdminPhonesAtBoot() {
     purgeNonSocketAdminPhones(acct.accountDir, socketOwner);
   }
 }
+function purgeNonSocketAccountManagers(accountDir, socketOwnerId) {
+  try {
+    const config = readConfig(accountDir);
+    const wa = config.whatsapp;
+    if (!wa || typeof wa !== "object") return { removed: [] };
+    const targetId = typeof config.accountId === "string" && config.accountId ? config.accountId : basename2(resolve9(accountDir));
+    if (targetId === socketOwnerId) return { removed: [] };
+    const map = wa.accountManagers;
+    if (!map || typeof map !== "object" || Array.isArray(map)) return { removed: [] };
+    const removed = Object.entries(map).map(([phone, entry]) => ({
+      phone,
+      managesAccount: typeof entry === "string" ? entry : entry && typeof entry === "object" && typeof entry.managesAccount === "string" ? entry.managesAccount : ""
+    }));
+    if (removed.length === 0) return { removed: [] };
+    delete wa.accountManagers;
+    writeConfig(accountDir, config);
+    for (const { phone, managesAccount } of removed) {
+      console.error(`[admin-identity] op=purge-nonsocket-accountmanager accountId=${targetId} phone=${phone} managesAccount=${managesAccount} removed=true`);
+    }
+    return { removed };
+  } catch (err) {
+    console.error(`[admin-identity] purge-nonsocket-accountmanager failed dir=${accountDir}: ${String(err)}`);
+    return { removed: [] };
+  }
+}
+function purgeNonSocketAccountManagersAtBoot() {
+  let socketOwner;
+  try {
+    socketOwner = resolveHouseOrSoleAccountId(ACCOUNTS_DIR);
+  } catch (err) {
+    console.error(`[admin-identity] purge-nonsocket-accountmanager skipped \u2014 cannot resolve socket owner: ${String(err)}`);
+    return;
+  }
+  const configOwner = resolveAccount()?.accountId ?? null;
+  if (configOwner !== socketOwner) {
+    console.error(`[admin-identity] purge-nonsocket-accountmanager skipped \u2014 resolver disagreement house=${socketOwner} configLoadedFrom=${configOwner ?? "unresolved"}`);
+    return;
+  }
+  let accounts;
+  try {
+    accounts = listValidAccounts();
+  } catch {
+    return;
+  }
+  for (const acct of accounts) {
+    purgeNonSocketAccountManagers(acct.accountDir, socketOwner);
+  }
+}
 function setAccountManager(accountDir, phone, subAccountId, mode = "active") {
   const normalized = phone.trim();
   if (!E164_PATTERN.test(normalized)) {
@@ -8475,6 +8523,15 @@ function setAccountManager(accountDir, phone, subAccountId, mode = "active") {
   }
   try {
     const config = readConfig(accountDir);
+    const targetId = typeof config.accountId === "string" && config.accountId ? config.accountId : basename2(resolve9(accountDir));
+    if (targetId !== houseId) {
+      console.error(`${TAG22} set-account-manager rejected phone=${normalized} reason=not-socket-account`);
+      return {
+        ok: false,
+        reason: "not-socket-account",
+        error: `The account-manager routing table is read from ${houseId}'s account.json only, so a binding stored on ${targetId} is never consulted. Bind ${normalized} on ${houseId} instead.`
+      };
+    }
     if (!config.whatsapp || typeof config.whatsapp !== "object") {
       config.whatsapp = {};
     }
@@ -17062,6 +17119,7 @@ var session_upload_default = app17;
 // server/routes/admin/agents.ts
 import { resolve as resolve23 } from "path";
 import { readdirSync as readdirSync22, readFileSync as readFileSync33, existsSync as existsSync31, rmSync as rmSync2, renameSync as renameSync9, mkdirSync as mkdirSync7, writeFileSync as writeFileSync13 } from "fs";
+import { execFileSync as execFileSync6 } from "child_process";
 
 // ../services/claude-session-manager/src/tool-surface.ts
 import { readFileSync as readFileSync32, readdirSync as readdirSync21, statSync as statSync15, existsSync as existsSync30 } from "fs";
@@ -17490,6 +17548,20 @@ function readDisabledStore(accountDir) {
     return /* @__PURE__ */ new Set();
   }
 }
+function authoredAgentFilenames(accountDir) {
+  const pluginsDir = resolve23(accountDir, "plugins");
+  const names = /* @__PURE__ */ new Set();
+  for (const plugin of subdirs(pluginsDir)) {
+    const dir = resolve23(pluginsDir, plugin, "agents");
+    if (!existsSync31(dir)) continue;
+    try {
+      for (const entry of readdirSync22(dir)) if (entry.endsWith(".md")) names.add(entry);
+    } catch (err) {
+      console.error(`[admin/agents] op=authored-scan read-failed plugin=${plugin} error="${err}"`);
+    }
+  }
+  return names;
+}
 function shippedSourceDirs(accountDir) {
   return [
     resolve23(accountDir, ...SPECIALISTS_DIR),
@@ -17505,7 +17577,7 @@ function writeDisabledStore(accountDir, disabled) {
     { mode: 384 }
   );
 }
-function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed) {
+function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed, authoredFilenames) {
   const dirs = shippedSourceDirs(accountDir);
   const names = /* @__PURE__ */ new Set();
   for (const dir of dirs) {
@@ -17518,9 +17590,15 @@ function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed) {
   }
   const shipped = [];
   let shippedSkipped = 0;
+  let deduped = 0;
   for (const filename of [...names].sort()) {
     const source = dirs.find((d) => existsSync31(resolve23(d, filename)));
     if (!source) continue;
+    if (source === dirs[0] && authoredFilenames.has(filename)) {
+      deduped++;
+      console.log(`[admin/agents] op=list-shipped-dedup file=${filename}`);
+      continue;
+    }
     try {
       const { fm } = splitFrontmatter(readFileSync33(resolve23(source, filename), "utf-8"));
       if (!fm.name) {
@@ -17553,7 +17631,7 @@ function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed) {
       console.error(`[admin/agents] op=list-shipped-skip file=${filename} error="${err}"`);
     }
   }
-  return { shipped, shippedSkipped };
+  return { shipped, shippedSkipped, deduped };
 }
 function parseToolsLine(raw) {
   return raw ? raw.split(",").map((t) => t.trim()).filter(Boolean) : [];
@@ -17661,7 +17739,13 @@ app18.get("/", requireAdminSession, (c) => {
     }
   }
   const { specialists, specialistsSkipped } = listSpecialists(account.accountDir, riskByTool, riskSurfaceFailed !== null);
-  const { shipped, shippedSkipped } = listShipped(account.accountDir, riskByTool, disabled, riskSurfaceFailed !== null);
+  const { shipped, shippedSkipped, deduped } = listShipped(
+    account.accountDir,
+    riskByTool,
+    disabled,
+    riskSurfaceFailed !== null,
+    authoredAgentFilenames(account.accountDir)
+  );
   const rows = [...agents, ...specialists, ...shipped];
   const acct = account.accountId.slice(0, 8);
   for (const row of rows) {
@@ -17670,13 +17754,17 @@ app18.get("/", requireAdminSession, (c) => {
       `[admin/agents] op=classify account=${acct} agent=${row.slug} origin=${row.origin} risk=${row.risk} riskiestTool=${row.riskiestTool ?? "none"} tools=${row.toolCount} unresolved=${row.unresolved.length > 0 ? row.unresolved.join(",") : "none"} disabled=${row.disabled}`
     );
   }
-  console.log(`[admin/agents] op=list accountId=${acct} agents=${agents.length} specialists=${specialists.length} shipped=${shipped.length} skipped=${skipped} specialistsSkipped=${specialistsSkipped} shippedSkipped=${shippedSkipped}`);
+  console.log(`[admin/agents] op=list accountId=${acct} agents=${agents.length} specialists=${specialists.length} shipped=${shipped.length} skipped=${skipped} specialistsSkipped=${specialistsSkipped} shippedSkipped=${shippedSkipped} deduped=${deduped}`);
   return c.json({
     agents: rows,
     accountId: account.accountId,
     skipped,
     specialistsSkipped,
     shippedSkipped,
+    // How many live-directory candidates were dropped as authored duplicates.
+    // `shipped + shippedSkipped + deduped` equals the number of distinct `.md`
+    // names across the three source directories.
+    deduped,
     riskSurfaceFailed: riskSurfaceFailed !== null
   });
 });
@@ -17811,6 +17899,17 @@ async function resolveWritableAccount(c, op, slug) {
   }
   return account;
 }
+function reconcileRoutingProse(accountDir, accountId, op, slug) {
+  const script = resolve23(PLATFORM_ROOT, "scripts", "lib", "agents-md-bootstrap.sh");
+  try {
+    execFileSync6("bash", [script, accountDir], { encoding: "utf-8", timeout: 1e4 });
+    return true;
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`[admin/agents] op=agents-md-reconcile source=${op} accountId=${accountId.slice(0, 8)} slug=${slug} outcome=failed reason="${msg}"`);
+    return false;
+  }
+}
 app18.post("/:slug/disable", async (c) => {
   const slug = c.req.param("slug");
   if (SLUG_UNSAFE(slug)) return c.json({ error: "Invalid agent slug" }, 400);
@@ -17819,6 +17918,10 @@ app18.post("/:slug/disable", async (c) => {
   const filename = `${slug}.md`;
   const live = resolve23(resolved.accountDir, ...SPECIALISTS_DIR, filename);
   const quarantined = resolve23(resolved.accountDir, ...QUARANTINE_DIR, filename);
+  if (authoredAgentFilenames(resolved.accountDir).has(filename)) {
+    console.error(`[admin/agents] op=disable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} outcome=failed reason=user-created-specialist`);
+    return c.json({ error: "Only a shipped agent can be disabled" }, 404);
+  }
   if (!shippedSourceDirs(resolved.accountDir).some((d) => existsSync31(resolve23(d, filename)))) {
     console.error(`[admin/agents] op=disable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} outcome=failed reason=not-a-shipped-agent`);
     return c.json({ error: "Only a shipped agent can be disabled" }, 404);
@@ -17838,8 +17941,9 @@ app18.post("/:slug/disable", async (c) => {
     console.error(`[admin/agents] op=disable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} outcome=failed reason="${msg}"`);
     return c.json({ error: `Disable failed, disabled store unreadable or unwritable: ${msg}` }, 500);
   }
-  console.log(`[admin/agents] op=disable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} outcome=ok moved=${moved}`);
-  return c.json({ ok: true, moved });
+  const routingReconciled = reconcileRoutingProse(resolved.accountDir, resolved.accountId, "disable", slug);
+  console.log(`[admin/agents] op=disable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} outcome=ok moved=${moved} routingReconciled=${routingReconciled}`);
+  return c.json({ ok: true, moved, routingReconciled });
 });
 app18.post("/:slug/enable", async (c) => {
   const slug = c.req.param("slug");
@@ -17868,8 +17972,9 @@ app18.post("/:slug/enable", async (c) => {
     console.error(`[admin/agents] op=enable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} outcome=failed reason="${msg}"`);
     return c.json({ error: `Enable failed: ${msg}` }, 500);
   }
-  console.log(`[admin/agents] op=enable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} outcome=ok restored=${restored}`);
-  return c.json({ ok: true, restored });
+  const routingReconciled = reconcileRoutingProse(resolved.accountDir, resolved.accountId, "enable", slug);
+  console.log(`[admin/agents] op=enable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} outcome=ok restored=${restored} routingReconciled=${routingReconciled}`);
+  return c.json({ ok: true, restored, routingReconciled });
 });
 app18.delete("/:slug", async (c) => {
   const slug = c.req.param("slug");
@@ -31780,6 +31885,22 @@ function warnOnChannelAdminBindingDrift() {
   }
 }
 
+// server/routes/channel/effective-account.ts
+function resolveScheduledEffectiveAccount(deps, accountDir, destination) {
+  const managed = managedAccountFor(deps.readAccountManagers(accountDir), destination);
+  if (managed === null) return deps.resolvePlatformAccountId();
+  if (managed.mode === "passive") return null;
+  if (!deps.isValidAccountId(managed.account)) return null;
+  return managed.account;
+}
+function resolveScheduledEffectiveAccountForInstall(accountDir, destination) {
+  return resolveScheduledEffectiveAccount(
+    { readAccountManagers, resolvePlatformAccountId, isValidAccountId },
+    accountDir,
+    destination
+  );
+}
+
 // server/lib/booking-site-accounts.ts
 import { existsSync as existsSync46, readFileSync as readFileSync46 } from "fs";
 import { resolve as resolve43 } from "path";
@@ -32512,13 +32633,13 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
     const sent = await sendTelegramText(botToken, chatId, text);
     if (!sent.ok) throw new Error(sent.error ?? "telegram send failed");
   },
-  effectiveAccountFor: (accountId, accountDir, destination) => {
-    const managed = managedAccountFor(readAccountManagers(accountDir), destination);
-    if (managed === null) return accountId;
-    if (managed.mode === "passive") return null;
-    if (!isValidAccountId(managed.account)) return null;
-    return managed.account;
-  }
+  // Task 2051 — the four branches moved into their own module so they have a
+  // test, and so the non-manager branch resolves the channel account through
+  // `resolvePlatformAccountId` (the function the live inbound path uses) rather
+  // than returning the house id this closure used to be handed. See
+  // effective-account.ts for why `resolveAccount()` was the wrong side to move,
+  // and why the real dependencies are bound there rather than assembled here.
+  effectiveAccountFor: resolveScheduledEffectiveAccountForInstall
 });
 app69.route("/api/channel/schedule-inject", scheduleInjectRoutes);
 app69.use("*", clientIpMiddleware);
@@ -33820,6 +33941,7 @@ for (const acct of listValidAccounts()) {
   cleanupLeakedPremiumSubs(acct.accountDir, acct.config, acct.accountId);
 }
 purgeNonSocketAdminPhonesAtBoot();
+purgeNonSocketAccountManagersAtBoot();
 void preloadEmbedModel();
 warnOnChannelAdminBindingDrift();
 var bootEnabled = Array.isArray(bootAccountConfig?.enabledPlugins) ? bootAccountConfig.enabledPlugins : [];

package/payload/server/public/assets/chat-BFH3FM5a.js

@@ -1 +0,0 @@
-import{B as e,W as t}from"./useSubAccountSwitcher-DH0P6QMV.js";import"./useVoiceRecorder-MuZ7lpet.js";import"./AdminShell-DkrURZnF.js";import{n}from"./page-BoYc9c4a.js";import"./useCopyFeedback-L7L55nFl.js";var r=t(),i=e();(0,r.createRoot)(document.getElementById(`root`)).render((0,i.jsx)(n,{}));

package/payload/server/public/assets/chevron-left-Ux9-qLkk.js

@@ -1 +0,0 @@
-import{P as e}from"./useSubAccountSwitcher-DH0P6QMV.js";var t=e(`chevron-left`,[[`path`,{d:`m15 18-6-6 6-6`,key:`1wnfg3`}]]);export{t};

package/payload/server/public/assets/chevron-right-BwIuCfyG.js

@@ -1 +0,0 @@
-import{P as e}from"./useSubAccountSwitcher-DH0P6QMV.js";var t=e(`chevron-right`,[[`path`,{d:`m9 18 6-6-6-6`,key:`mthhwq`}]]);export{t};

package/payload/server/public/assets/clock-DhJdZRhC.js

@@ -1 +0,0 @@
-import{P as e}from"./useSubAccountSwitcher-DH0P6QMV.js";var t=e(`clock`,[[`circle`,{cx:`12`,cy:`12`,r:`10`,key:`1mglay`}],[`path`,{d:`M12 6v6l4 2`,key:`mmk7yg`}]]);export{t};

package/payload/server/public/assets/data-ChY_uSIk.js

@@ -1 +0,0 @@
-import{B as e,W as t}from"./useSubAccountSwitcher-DH0P6QMV.js";import"./useVoiceRecorder-MuZ7lpet.js";import{t as n}from"./page-D5n8ShE7.js";import"./graph-labels-BJ7puQkX.js";var r=t(),i=e();(0,r.createRoot)(document.getElementById(`root`)).render((0,i.jsx)(n,{}));

package/payload/server/public/assets/time-entry-format-Cy_T-wiD.js.br

@@ -1,3 +0,0 @@
-�
����B�����"@GzN�n?�V��VF�Ybf�|c�9����Ja���'�T�
-��s��'X`
�cQ�Al�A�_� ڢ4��o	���6N|�Ϋ7A���8�$OI%��o��7D��dG��ݮ��m5��9�u��
-�^ʠ"I��22k'�l�ûV�Li����>� ۟`;;��z�����s�~�ι�n~��>��P�_��@&��%~ p3$)H_ ���f��R*�]��������)v�P�g?�,+���95䅷6��mxJ�w1

package/payload/server/public/assets/triangle-alert-D-bSbPnX.js.br

@@ -1 +0,0 @@
-