@rubytech/create-sitedesk-code 0.1.520 → 0.1.521

package/payload/server/server.js

@@ -163,7 +163,6 @@ import {
   sendMediaMessage,
   sendPaused,
   sendTextMessage,
-  senderJidFromTelephone,
   sessionScratchpadRoot,
   shouldDispatchInbound,
   shutdown,
@@ -178,7 +177,7 @@ import {
   validateFilePathInAccount,
   waitForConnection,
   warnNonUuidAccount
-} from "./chunk-TIIWMF5G.js";
+} from "./chunk-AZLT4LVO.js";
 import {
   ACCOUNTS_DIR,
   BIN_DIR,
@@ -3919,7 +3918,7 @@ function createScheduleInjectRoutes(deps) {
 var import_dist9 = __toESM(require_dist(), 1);
 
 // app/lib/whatsapp/avatar-store.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync3, readdirSync as readdirSync2, statSync as statSync4 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync3, readdirSync as readdirSync2, statSync as statSync4, rmSync } from "fs";
 import { join as join6 } from "path";
 function safeName(jid) {
   if (jid.length === 0 || jid.includes("/") || jid.includes("\\") || jid.includes("..")) {
@@ -3964,30 +3963,41 @@ function writeAvatarAbsent(accountId, jid) {
   const dir = dirFor(accountId);
   const base = join6(dir, safeName(jid));
   mkdirSync2(dir, { recursive: true });
+  rmSync(`${base}.bin`, { force: true });
   const meta = { jid, state: "absent", fetchedAt: (/* @__PURE__ */ new Date()).toISOString() };
   writeFileSync3(`${base}.json`, JSON.stringify(meta));
 }
-function listAvatarJids(accountId) {
+function removeAvatar(accountId, jid) {
+  const base = join6(dirFor(accountId), safeName(jid));
+  rmSync(`${base}.bin`, { force: true });
+  rmSync(`${base}.json`, { force: true });
+}
+function listAvatarEntries(accountId) {
   const dir = dirFor(accountId);
   if (!existsSync3(dir)) return [];
   const out = [];
   for (const f of readdirSync2(dir)) {
     if (!f.endsWith(".json")) continue;
     const meta = readMeta(join6(dir, f));
-    if (meta?.jid) out.push(meta.jid);
+    if (!meta?.jid) continue;
+    let bytes = 0;
+    if (meta.state === "present") {
+      try {
+        bytes = statSync4(join6(dir, `${f.slice(0, -".json".length)}.bin`)).size;
+      } catch {
+        bytes = 0;
+      }
+    }
+    out.push({ jid: meta.jid, state: meta.state, bytes, fetchedAt: meta.fetchedAt });
   }
   return out;
 }
+function listAvatarJids(accountId) {
+  return listAvatarEntries(accountId).map((e) => e.jid);
+}
 function avatarCensus(accountId) {
-  const dir = dirFor(accountId);
-  if (!existsSync3(dir)) return { entries: 0, bytes: 0 };
-  let entries2 = 0;
-  let bytes = 0;
-  for (const f of readdirSync2(dir)) {
-    if (f.endsWith(".json")) entries2++;
-    else if (f.endsWith(".bin")) bytes += statSync4(join6(dir, f)).size;
-  }
-  return { entries: entries2, bytes };
+  const entries2 = listAvatarEntries(accountId);
+  return { entries: entries2.length, bytes: entries2.reduce((n, e) => n + e.bytes, 0) };
 }
 
 // app/lib/whatsapp/avatar-fetch.ts
@@ -4007,7 +4017,7 @@ async function defaultHttpGet(url) {
   }
 }
 async function defaultResolve(accountId) {
-  const { resolveSocket: resolveSocket2 } = await import("./manager-B6OFOXSW.js");
+  const { resolveSocket: resolveSocket2 } = await import("./manager-CQBSUJXR.js");
   return resolveSocket2(accountId);
 }
 async function fetchAvatar(accountId, jid, deps = {}) {
@@ -4055,25 +4065,66 @@ async function fetchAvatar(accountId, jid, deps = {}) {
 // app/lib/whatsapp/avatar-sweep.ts
 var TAG7 = "[wa-avatar]";
 var CENSUS_TAG = "[wa-avatar-census]";
+var AVATAR_STORE_MAX_BYTES = 16 * 1024 * 1024;
 function liveJidsForAccount(accountId) {
   const live = /* @__PURE__ */ new Set();
   for (const [remoteJid, records] of readAllConversations(accountId)) {
-    live.add(remoteJid);
-    for (const r of records) {
-      if (r.fromMe) continue;
-      const jid = senderJidFromTelephone(r.senderTelephone);
-      if (jid) live.add(jid);
-    }
+    for (const jid of avatarJidsForConversation(remoteJid, records)) live.add(jid);
   }
   return live;
 }
+function avatarJidsForConversation(remoteJid, records) {
+  const jids = /* @__PURE__ */ new Set([remoteJid]);
+  if (!isGroupJid(remoteJid)) return jids;
+  for (const r of records) {
+    if (r.fromMe) continue;
+    if (r.senderJid && isUserJid(r.senderJid)) jids.add(r.senderJid);
+  }
+  return jids;
+}
+function evictAvatars(accountId, live) {
+  let unreferenced = 0;
+  let overBound = 0;
+  let freedBytes = 0;
+  const kept = [];
+  for (const e of listAvatarEntries(accountId)) {
+    if (live.has(e.jid)) {
+      kept.push(e);
+      continue;
+    }
+    removeAvatar(accountId, e.jid);
+    unreferenced++;
+    freedBytes += e.bytes;
+  }
+  let bytes = kept.reduce((n, e) => n + e.bytes, 0);
+  if (bytes > AVATAR_STORE_MAX_BYTES) {
+    const oldestFirst = kept.filter((e) => e.state === "present").sort((a, b) => a.fetchedAt.localeCompare(b.fetchedAt));
+    for (const e of oldestFirst) {
+      if (bytes <= AVATAR_STORE_MAX_BYTES) break;
+      removeAvatar(accountId, e.jid);
+      overBound++;
+      freedBytes += e.bytes;
+      bytes -= e.bytes;
+    }
+  }
+  return { unreferenced, overBound, freedBytes };
+}
 async function sweepAvatars() {
   const started2 = Date.now();
   let jids = 0;
   let refetched = 0;
   let skipped = 0;
   let failed = 0;
+  let evicted = 0;
   for (const accountId of listStoredAccountIds()) {
+    const live = liveJidsForAccount(accountId);
+    const ev = evictAvatars(accountId, live);
+    evicted += ev.unreferenced + ev.overBound;
+    if (ev.unreferenced > 0 || ev.overBound > 0) {
+      console.log(
+        `${TAG7} op=evict account=${accountId.slice(0, 8)} unreferenced=${ev.unreferenced} overBound=${ev.overBound} freedBytes=${ev.freedBytes}`
+      );
+    }
     const cached3 = listAvatarJids(accountId);
     for (const jid of cached3) {
       jids++;
@@ -4089,11 +4140,10 @@ async function sweepAvatars() {
       else if (outcome === "failed") failed++;
       else skipped++;
     }
-    const live = liveJidsForAccount(accountId);
     const census = avatarCensus(accountId);
     console.log(`${CENSUS_TAG} account=${accountId.slice(0, 8)} entries=${census.entries} bytes=${census.bytes} live=${live.size}`);
   }
-  const note = `jids=${jids} refetched=${refetched} skipped=${skipped} failed=${failed} ms=${Date.now() - started2}`;
+  const note = `jids=${jids} refetched=${refetched} skipped=${skipped} failed=${failed} evicted=${evicted} ms=${Date.now() - started2}`;
   console.log(`${TAG7} op=sweep ${note}`);
   return note;
 }
@@ -4104,7 +4154,9 @@ var OFFENDER_CAP = 10;
 function auditGroupOutbound() {
   let convos = 0;
   let outbound = 0;
-  let unmarked = 0;
+  let operator = 0;
+  let agent = 0;
+  let unstamped = 0;
   const offenders = [];
   for (const accountId of listStoredAccountIds()) {
     for (const [remoteJid, records] of readAllConversations(accountId)) {
@@ -4113,18 +4165,20 @@ function auditGroupOutbound() {
       for (const r of records) {
         if (!r.fromMe) continue;
         outbound++;
-        if (r.origin === "operator-manual") continue;
-        unmarked++;
-        if (offenders.length < OFFENDER_CAP) offenders.push(r.msgKeyId);
+        if (r.origin === "operator-manual") operator++;
+        else if (r.origin === "agent") {
+          agent++;
+          if (offenders.length < OFFENDER_CAP) offenders.push(r.msgKeyId);
+        } else unstamped++;
       }
     }
   }
-  return { convos, outbound, unmarked, offenders };
+  return { convos, outbound, operator, agent, unstamped, offenders };
 }
 function auditGroupOutboundNote() {
   const a = auditGroupOutbound();
-  const tail = a.unmarked > 0 ? ` offenders=${a.offenders.join(",")}` : "";
-  const note = `convos=${a.convos} outbound=${a.outbound} unmarked=${a.unmarked}${tail}`;
+  const tail = a.agent > 0 ? ` offenders=${a.offenders.join(",")}` : "";
+  const note = `convos=${a.convos} outbound=${a.outbound} operator=${a.operator} agent=${a.agent} unstamped=${a.unstamped}${tail}`;
   console.log(`${TAG8} op=group-outbound-audit ${note}`);
   return note;
 }
@@ -5868,6 +5922,7 @@ app2.post("/reply", async (c) => {
         quotedId: null,
         quotedSender: null,
         scope: template.scope,
+        origin: "agent",
         createdAt: nowIso
       };
       appendMessage(storeKey, rec);
@@ -8020,12 +8075,7 @@ function resolveReplyAppendAccount(args) {
   return args.resolve(args.sendAccountId, args.counterpartyPhone) || args.sendAccountId;
 }
 function warmConversationAvatars(accountId, remoteJid, records) {
-  const jids = /* @__PURE__ */ new Set([remoteJid]);
-  for (const r of records) {
-    if (r.fromMe) continue;
-    const jid = senderJidFromTelephone(r.senderTelephone);
-    if (jid) jids.add(jid);
-  }
+  const jids = avatarJidsForConversation(remoteJid, records);
   console.log(`[wa-avatar] op=request account=${accountId.slice(0, 8)} convo=${remoteJid.slice(0, 12)} jids=${jids.size} reason=reader-open`);
   for (const jid of jids) {
     void fetchAvatar(accountId, jid).catch((e) => {
@@ -8096,6 +8146,10 @@ app4.get("/store-stream", requireAdminSession, (c) => {
       // Task 2081 — the group transcript's per-sender colour key. Stable across a
       // display-name change, which `senderName` is not.
       senderTelephone: r.senderTelephone,
+      // Task 2096 — the sender's wire JID, for the per-bubble avatar. Omitted
+      // rather than sent null when the record has none, so the client's own
+      // presence check is the whole test. Pre-2096 records have none.
+      ...r.senderJid ? { senderJid: r.senderJid } : {},
       origin: r.origin,
       msgKeyId: r.msgKeyId,
       // Task 1619 — folded inbound reactions for this bubble (omitted when none).
@@ -11727,7 +11781,7 @@ var telegram_default = app10;
 
 // server/routes/quickbooks.ts
 import { join as join28 } from "path";
-import { existsSync as existsSync21, readFileSync as readFileSync23, writeFileSync as writeFileSync9, mkdirSync as mkdirSync4, rmSync, renameSync as renameSync5 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync23, writeFileSync as writeFileSync9, mkdirSync as mkdirSync4, rmSync as rmSync2, renameSync as renameSync5 } from "fs";
 var TAG18 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
@@ -11808,7 +11862,7 @@ async function completeConsent(args) {
     console.error(`${TAG18} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
-    rmSync(claimFile, { force: true });
+    rmSync2(claimFile, { force: true });
   }
 }
 function page(title, detail) {
@@ -13243,7 +13297,7 @@ var session_upload_default = app19;
 
 // server/routes/admin/agents.ts
 import { resolve as resolve20 } from "path";
-import { readdirSync as readdirSync21, readFileSync as readFileSync28, existsSync as existsSync30, rmSync as rmSync2, renameSync as renameSync9, mkdirSync as mkdirSync6, writeFileSync as writeFileSync12 } from "fs";
+import { readdirSync as readdirSync21, readFileSync as readFileSync28, existsSync as existsSync30, rmSync as rmSync3, renameSync as renameSync9, mkdirSync as mkdirSync6, writeFileSync as writeFileSync12 } from "fs";
 import { execFileSync as execFileSync6 } from "child_process";
 
 // ../services/claude-session-manager/src/tool-surface.ts
@@ -14136,7 +14190,7 @@ app20.delete("/:slug", async (c) => {
     return c.json({ error: `Graph cleanup failed: ${msg}` }, 500);
   }
   try {
-    rmSync2(agentDir, { recursive: true, force: true });
+    rmSync3(agentDir, { recursive: true, force: true });
     console.log(`[admin/agents] op=delete accountId=${account.accountId.slice(0, 8)} slug=${slug} outcome=ok`);
     return c.json({ ok: true });
   } catch (err) {
@@ -20234,6 +20288,7 @@ function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID7, adm
   const operator = isOperatorHost(host, operatorDomains);
   const resumeId = typeof body.sessionId === "string" && body.sessionId.length > 0 ? body.sessionId : void 0;
   const name = typeof body.name === "string" && body.name.length > 0 ? body.name : void 0;
+  const rawTitle = typeof body.title === "string" ? body.title.trim() : "";
   const webchatBind = resumeId === void 0 || operator;
   const kind = resumeId === void 0 ? "new" : "resume";
   const origin = operator ? "operator" : "admin";
@@ -20264,13 +20319,25 @@ function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID7, adm
     payload.sessionId = resumeId;
     if (name) payload.name = name;
   }
-  return { webchatBind, origin, kind, sessionId, payload, model: pickedModel, effort: pickedEffort, paramsSource };
+  return {
+    webchatBind,
+    origin,
+    kind,
+    sessionId,
+    payload,
+    model: pickedModel,
+    effort: pickedEffort,
+    paramsSource,
+    // Never rides `payload`: the manager's rc-spawn takes no title. The route
+    // applies it through the rename endpoint once the session id exists.
+    title: kind === "new" && webchatBind && rawTitle.length > 0 ? rawTitle : null
+  };
 }
-function shapeWebchatResponse(sessionId, manager) {
+function shapeWebchatResponse(sessionId, manager, titleSource = "none") {
   const outcome = typeof manager?.outcome === "string" ? manager.outcome : "bound";
   const redirected = manager?.redirected === true && typeof manager?.sessionId === "string";
   const landed = redirected ? manager.sessionId : sessionId;
-  return { sessionId: landed, outcome, target: `/chat?session=${landed}` };
+  return { sessionId: landed, outcome, target: `/chat?session=${landed}`, titleSource };
 }
 var app38 = new Hono();
 app38.post("/", requireAdminSession, async (c) => {
@@ -20349,9 +20416,40 @@ app38.post("/", requireAdminSession, async (c) => {
         );
       }
     }
+    let titleSource = "none";
+    if (plan.kind === "new") {
+      if (plan.title === null) {
+        console.log(
+          `[chat-spawn] op=title spawnReqId=${spawnReqId} sessionId=${plan.sessionId} titleLen=0 source=absent outcome=skipped`
+        );
+      } else {
+        try {
+          const tRes = await fetch(`${managerBase("session-rc-spawn:title")}/${plan.sessionId}/rename`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ title: plan.title })
+          });
+          if (tRes.status === 200) {
+            titleSource = "user";
+            console.log(
+              `[chat-spawn] op=title spawnReqId=${spawnReqId} sessionId=${plan.sessionId} titleLen=${plan.title.length} source=modal outcome=applied`
+            );
+          } else {
+            const reason = (await tRes.json().catch(() => ({}))).reason ?? `status-${tRes.status}`;
+            console.error(
+              `[chat-spawn] op=title spawnReqId=${spawnReqId} sessionId=${plan.sessionId} titleLen=${plan.title.length} source=modal outcome=rejected reason=${reason}`
+            );
+          }
+        } catch (err) {
+          console.error(
+            `[chat-spawn] op=title spawnReqId=${spawnReqId} sessionId=${plan.sessionId} titleLen=${plan.title.length} source=modal outcome=failed reason=${err instanceof Error ? err.message : String(err)}`
+          );
+        }
+      }
+    }
     console.log(`[chat-spawn] op=navigate spawnReqId=${spawnReqId} target=${target}`);
     console.log(`[chat-spawn] op=exit spawnReqId=${spawnReqId} outcome=bound`);
-    return c.json(shapeWebchatResponse(plan.sessionId, parsed));
+    return c.json(shapeWebchatResponse(plan.sessionId, parsed, titleSource));
   }
   return c.json(parsed ?? {});
 });
@@ -22162,7 +22260,7 @@ app51.delete("/:eventId", requireAdminSession, async (c) => {
 var routines_default = app51;
 
 // server/routes/admin/skills.ts
-import { existsSync as existsSync39, readdirSync as readdirSync24, readFileSync as readFileSync36, rmSync as rmSync3 } from "fs";
+import { existsSync as existsSync39, readdirSync as readdirSync24, readFileSync as readFileSync36, rmSync as rmSync4 } from "fs";
 import { resolve as resolve30 } from "path";
 var app52 = new Hono();
 var NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
@@ -22268,9 +22366,9 @@ app52.delete("/:plugin/:skill", requireAdminSession, async (c) => {
     return c.json({ error: "Skill not found" }, 404);
   }
   try {
-    rmSync3(skillDir, { recursive: true, force: true });
+    rmSync4(skillDir, { recursive: true, force: true });
     const pluginDirRemoved = subdirs2(skillsDir).length === 0;
-    if (pluginDirRemoved) rmSync3(pluginDir, { recursive: true, force: true });
+    if (pluginDirRemoved) rmSync4(pluginDir, { recursive: true, force: true });
     const skillDirGone = !existsSync39(skillDir);
     if (!skillDirGone) {
       console.error(`[admin:skills] op=delete plugin=${plugin} skill=${skill} outcome=rejected reason=rm-incomplete skillDirGone=false`);
@@ -25749,6 +25847,7 @@ function createWaChannelRoutes(deps) {
       return c.json({ error: message, terminal }, 500);
     }
     console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
+    deps.onReplyDispatch?.(senderId, Date.now());
     return c.json({ ok: true });
   });
   app73.post("/wa-channel/reply-document", async (c) => {
@@ -25823,9 +25922,10 @@ function createWaChannelRoutes(deps) {
     const finalBytes = num(body?.finalBytes);
     const queueDepth = num(body?.queueDepth);
     const pendingTurns = num(body?.pendingTurns);
+    const consumed2 = num(body?.consumed);
     const sid = sessionId.slice(0, 8);
     const deliver = interactive && !replied && finalText.trim().length > 0;
-    const decision = `sessionId=${sid} replied=${replied ? "yes" : "no"} interactive=${interactive ? "yes" : "no"} finalBytes=${finalBytes} queueDepth=${queueDepth} pendingTurns=${pendingTurns}`;
+    const decision = `sessionId=${sid} replied=${replied ? "yes" : "no"} interactive=${interactive ? "yes" : "no"} finalBytes=${finalBytes} queueDepth=${queueDepth} pendingTurns=${pendingTurns} consumed=${consumed2}`;
     if (!replied && finalBytes > 0 && !deliver) {
       const op = interactive ? "turn-answer-dropped" : "turn-answer-withheld";
       console.error(
@@ -25844,6 +25944,7 @@ function createWaChannelRoutes(deps) {
         return c.json({ ok: true, delivered: "undelivered" });
       }
       console.error(`[whatsapp-native] op=turn-end ${decision} delivered=fallback bytes=${bytes}`);
+      deps.onReplyDispatch?.(senderId, Date.now());
       return c.json({ ok: true, delivered: "fallback" });
     }
     if (replied) {
@@ -25860,6 +25961,7 @@ function createWaChannelRoutes(deps) {
 var QUEUED_THRESHOLD_MS = 3e4;
 var ACK_THRESHOLD_MS = 3e4;
 var SWEEP_INTERVAL_MS = 15e3;
+var MEDIA_STANZA_STALE_MS = 12e4;
 var WaGateway = class {
   constructor(deps) {
     this.deps = deps;
@@ -25874,6 +25976,66 @@ var WaGateway = class {
   docContexts = /* @__PURE__ */ new Map();
   spawning = /* @__PURE__ */ new Set();
   seq = 0;
+  // Task 2110 — senderId -> the arrival ms of every still-unemitted non-audio
+  // media stanza for that sender, oldest first. This is the race window: a reply
+  // dispatched while the list is non-empty was composed by a turn that could not
+  // yet see an incoming file, and the window is measured from the OLDEST entry.
+  //
+  // One entry per stanza, not one per sender. Downloads finish out of order and
+  // the debouncer flushes whatever has landed, so a small file can be emitted
+  // while a large one is still downloading. Holding a single timestamp meant that
+  // first inbound closed the window and the still-blind replies that followed
+  // were never counted, with the census reading zero throughout.
+  pendingMediaStanza = /* @__PURE__ */ new Map();
+  // Counters for the per-sweep census, reset on every print.
+  mediaRaces = 0;
+  mediaRaceSenders = /* @__PURE__ */ new Set();
+  mediaStanzaExpired = 0;
+  /** Task 2110 — the WhatsApp manager reports that a non-audio media stanza for
+   *  this sender has started downloading. The gateway cannot derive this itself:
+   *  it first learns of the media when the completed inbound arrives, which is
+   *  the CLOSE of the window, not its open. Audio is excluded by the caller —
+   *  its transcript rides in as `text`, so no turn is ever blind to a voice note.
+   *  The key is canonicalised on write, the same rule handleInbound applies, so
+   *  a "+"-prefixed value and a digits-only one address one window. */
+  noteMediaStanza(senderId, atMs) {
+    const key = normalizeTarget(senderId) ?? senderId;
+    const inFlight2 = this.pendingMediaStanza.get(key);
+    if (inFlight2) inFlight2.push(atMs);
+    else this.pendingMediaStanza.set(key, [atMs]);
+  }
+  /** Task 2110 — drop every entry past the staleness cap, oldest first, counting
+   *  each into the census. Entries are appended in arrival order, so the scan
+   *  stops at the first one still inside the cap. A download that never produced
+   *  an inbound leaves its entry here; without this it would hold the window open
+   *  forever and make every later reply to that sender read as a race. */
+  expireStaleStanzas(key, inFlight2, now) {
+    while (inFlight2.length > 0 && now - inFlight2[0] > MEDIA_STANZA_STALE_MS) {
+      inFlight2.shift();
+      this.mediaStanzaExpired++;
+    }
+    if (inFlight2.length === 0) this.pendingMediaStanza.delete(key);
+  }
+  /** Task 2110 — a reply was dispatched to this sender. When a media stanza for
+   *  the same sender is in flight, the turn that composed this reply could not
+   *  see the incoming file, so the exposure is recorded whether or not the agent
+   *  actually misspoke: a steering clause has no machine-checkable
+   *  post-condition, and this counts entry into the window, never the phrasing.
+   *  A window past the staleness cap is a download that never produced an
+   *  inbound; it is dropped and counted as expired, not reported as a race. */
+  noteReplyDispatch(senderId, atMs) {
+    const key = normalizeTarget(senderId) ?? senderId;
+    const inFlight2 = this.pendingMediaStanza.get(key);
+    if (inFlight2 === void 0) return;
+    this.expireStaleStanzas(key, inFlight2, atMs);
+    if (inFlight2.length === 0) return;
+    const stanzaAt = inFlight2[0];
+    this.mediaRaces++;
+    this.mediaRaceSenders.add(key);
+    console.error(
+      `[whatsapp-native] op=media-race senderId=${key} replyAt=${new Date(atMs).toISOString()} mediaStanzaAt=${new Date(stanzaAt).toISOString()} gapMs=${atMs - stanzaAt}`
+    );
+  }
   /** Hono sub-app exposing the loopback channel routes; mount on the UI app.
    *  Task 1836 — the process-local unseated-sender census that used to live here
    *  was retired. Its quiet state was ambiguous (a UI restart emptied it, so
@@ -25895,7 +26057,8 @@ var WaGateway = class {
         console.error(
           `[whatsapp-native] op=channel-received senderId=${senderId} waMessageId=${waMessageId}${found ? "" : " note=unknown"}`
         );
-      }
+      },
+      onReplyDispatch: (senderId, atMs) => this.noteReplyDispatch(senderId, atMs)
     });
   }
   /** Run one reconciliation pass: log every terminal delivery event the sweep
@@ -25915,6 +26078,15 @@ var WaGateway = class {
         `[whatsapp-native] op=${e.kind} senderId=${e.senderId} waMessageId=${e.waMessageId} ageMs=${e.ageMs}`
       );
     }
+    for (const [key, inFlight2] of [...this.pendingMediaStanza]) {
+      this.expireStaleStanzas(key, inFlight2, now);
+    }
+    console.error(
+      `[whatsapp-native] op=media-race-census races=${this.mediaRaces} senders=${this.mediaRaceSenders.size} expired=${this.mediaStanzaExpired}`
+    );
+    this.mediaRaces = 0;
+    this.mediaRaceSenders.clear();
+    this.mediaStanzaExpired = 0;
     return events;
   }
   /** Arm the periodic reconciliation sweep in the long-lived UI process.
@@ -25946,6 +26118,14 @@ var WaGateway = class {
     if (senderId !== input.senderId) {
       console.error(`[whatsapp-native] op=sender-key raw=${input.senderId} canonical=${senderId}`);
     }
+    const arrived = input.media.filter((m) => m.type !== "audio").length;
+    if (arrived > 0) {
+      const inFlight2 = this.pendingMediaStanza.get(senderId);
+      if (inFlight2) {
+        inFlight2.splice(0, arrived);
+        if (inFlight2.length === 0) this.pendingMediaStanza.delete(senderId);
+      }
+    }
     if (input.passive) {
       const msgId = `wa-${++this.seq}`;
       await this.deps.ensureChannelSession({
@@ -30276,6 +30456,11 @@ init({
       );
     });
   },
+  // Task 2110 — the manager is the only place that sees a media stanza start
+  // downloading; the gateway first sees the media on the completed inbound,
+  // which is the race window's close. Wiring it here keeps the manager free of
+  // any gateway import, exactly as onMessage and onNotify are wired.
+  onMediaStanza: (senderId, atMs) => waGateway.noteMediaStanza(senderId, atMs),
   onMessage: async (msg) => {
     if (isObserveAccount(msg.accountId)) {
       console.error(`[whatsapp:observe] op=BREACH account=${msg.accountId} sender=${msg.senderPhone} \u2014 dispatch reached the router from an observe socket`);