@rubytech/create-sitedesk-code 0.1.521 → 0.1.522

package/payload/server/{chunk-AZLT4LVO.js → chunk-K7CJGZPU.js}

@@ -332,32 +332,32 @@ function ledgerFilePath(account) {
   }
   return join(root, `${account}.jsonl`);
 }
-function appendStanza(entry) {
+function appendStanza(entry2) {
   try {
     const row = {
-      msgId: entry.msgId,
-      from: entry.from,
-      type: entry.type,
+      msgId: entry2.msgId,
+      from: entry2.from,
+      type: entry2.type,
       ts: (/* @__PURE__ */ new Date()).toISOString()
     };
-    appendFileSync(ledgerFilePath(entry.account), JSON.stringify(row) + "\n");
+    appendFileSync(ledgerFilePath(entry2.account), JSON.stringify(row) + "\n");
   } catch (err) {
     console.error(
-      `${TAG3} FAIL op=append msgId=${entry.msgId} err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG3} FAIL op=append msgId=${entry2.msgId} err=${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
-function markDeclined(entry) {
+function markDeclined(entry2) {
   try {
     const row = {
-      declined: entry.msgId,
-      reason: entry.reason,
+      declined: entry2.msgId,
+      reason: entry2.reason,
       ts: (/* @__PURE__ */ new Date()).toISOString()
     };
-    appendFileSync(ledgerFilePath(entry.account), JSON.stringify(row) + "\n");
+    appendFileSync(ledgerFilePath(entry2.account), JSON.stringify(row) + "\n");
   } catch (err) {
     console.error(
-      `${TAG3} FAIL op=decline msgId=${entry.msgId} err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG3} FAIL op=decline msgId=${entry2.msgId} err=${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
@@ -375,36 +375,36 @@ function readDeclined(account) {
   }
   return out;
 }
-function appendNotifyEligible(entry) {
+function appendNotifyEligible(entry2) {
   try {
     const row = {
-      notifyEligible: entry.msgId,
-      upsertType: entry.upsertType,
-      fromMe: entry.fromMe,
-      allowed: entry.allowed,
-      reason: entry.reason,
-      passive: entry.passive,
-      persistAccount: entry.persistAccount,
+      notifyEligible: entry2.msgId,
+      upsertType: entry2.upsertType,
+      fromMe: entry2.fromMe,
+      allowed: entry2.allowed,
+      reason: entry2.reason,
+      passive: entry2.passive,
+      persistAccount: entry2.persistAccount,
       ts: (/* @__PURE__ */ new Date()).toISOString()
     };
-    appendFileSync(ledgerFilePath(entry.account), JSON.stringify(row) + "\n");
+    appendFileSync(ledgerFilePath(entry2.account), JSON.stringify(row) + "\n");
   } catch (err) {
     console.error(
-      `${TAG3} FAIL op=append-notify-eligible msgId=${entry.msgId} err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG3} FAIL op=append-notify-eligible msgId=${entry2.msgId} err=${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
-function appendNotifyPublished(entry) {
+function appendNotifyPublished(entry2) {
   try {
     const row = {
-      notifyPublished: entry.msgId,
-      subscribers: entry.subscribers,
+      notifyPublished: entry2.msgId,
+      subscribers: entry2.subscribers,
       ts: (/* @__PURE__ */ new Date()).toISOString()
     };
-    appendFileSync(ledgerFilePath(entry.account), JSON.stringify(row) + "\n");
+    appendFileSync(ledgerFilePath(entry2.account), JSON.stringify(row) + "\n");
   } catch (err) {
     console.error(
-      `${TAG3} FAIL op=append-notify-published msgId=${entry.msgId} err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG3} FAIL op=append-notify-published msgId=${entry2.msgId} err=${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
@@ -1218,16 +1218,16 @@ function toMillis(v) {
   if (typeof v.low === "number") return (v.low >>> 0) + (v.high ?? 0) * 4294967296;
   return null;
 }
-function readReactionEntry(entry) {
-  const targetMsgKeyId = entry.key?.id ?? void 0;
+function readReactionEntry(entry2) {
+  const targetMsgKeyId = entry2.key?.id ?? void 0;
   if (!targetMsgKeyId) return null;
-  const chatJid = entry.key?.remoteJid ?? entry.reaction?.key?.remoteJid ?? void 0;
+  const chatJid = entry2.key?.remoteJid ?? entry2.reaction?.key?.remoteJid ?? void 0;
   if (!chatJid) return null;
   const isGroup = isGroupJid(chatJid);
-  const reactorKey = entry.reaction?.key;
+  const reactorKey = entry2.reaction?.key;
   const reactorJid = isGroup ? reactorKey?.participant ?? void 0 : reactorKey?.remoteJid ?? chatJid;
   if (!reactorJid) return null;
-  const emoji = entry.reaction?.text ?? "";
+  const emoji = entry2.reaction?.text ?? "";
   return {
     targetMsgKeyId,
     chatJid,
@@ -1236,7 +1236,7 @@ function readReactionEntry(entry) {
     emoji,
     removed: !emoji,
     fromMe: !!reactorKey?.fromMe,
-    timestampMs: toMillis(entry.reaction?.senderTimestampMs)
+    timestampMs: toMillis(entry2.reaction?.senderTimestampMs)
   };
 }
 
@@ -1381,7 +1381,7 @@ function summariseRecords(records) {
   return {
     first: sorted[0],
     last: sorted[sorted.length - 1],
-    firstNamedSender: sorted.find((r) => r.senderName)?.senderName ?? null
+    firstNamedSender: sorted.find((r) => !r.fromMe && r.senderName)?.senderName ?? null
   };
 }
 function readConversationSummaries(platformAccountId) {
@@ -1393,10 +1393,10 @@ function readConversationSummaries(platformAccountId) {
   let bytesRead = 0;
   try {
     if (!existsSync3(dir)) return out;
-    for (const entry of readdirSync2(dir)) {
-      if (!entry.endsWith(".jsonl")) continue;
-      const remoteJid = entry.slice(0, -".jsonl".length);
-      const file = join2(dir, entry);
+    for (const entry2 of readdirSync2(dir)) {
+      if (!entry2.endsWith(".jsonl")) continue;
+      const remoteJid = entry2.slice(0, -".jsonl".length);
+      const file = join2(dir, entry2);
       seen.add(file);
       let size;
       let mtimeMs;
@@ -1445,9 +1445,9 @@ function readAllConversations(platformAccountId) {
   const out = /* @__PURE__ */ new Map();
   try {
     if (!existsSync3(dir)) return out;
-    for (const entry of readdirSync2(dir)) {
-      if (!entry.endsWith(".jsonl")) continue;
-      const remoteJid = entry.slice(0, -".jsonl".length);
+    for (const entry2 of readdirSync2(dir)) {
+      if (!entry2.endsWith(".jsonl")) continue;
+      const remoteJid = entry2.slice(0, -".jsonl".length);
       out.set(remoteJid, readConversation(platformAccountId, remoteJid));
     }
   } catch (err) {
@@ -1468,16 +1468,16 @@ function normalizeEntry(v) {
   return typeof v === "string" ? { account: v, mode: "active" } : { account: v.managesAccount, mode: v.mode ?? "active" };
 }
 function managedAccountFor(accountManagers, phone) {
-  for (const [managerPhone, entry] of Object.entries(accountManagers)) {
-    const { account, mode } = normalizeEntry(entry);
+  for (const [managerPhone, entry2] of Object.entries(accountManagers)) {
+    const { account, mode } = normalizeEntry(entry2);
     if (account && phonesMatch(managerPhone, phone)) return { account, mode };
   }
   return null;
 }
 function managerPhonesForAccount(accountManagers, subAccountId) {
   const phones = [];
-  for (const [managerPhone, entry] of Object.entries(accountManagers)) {
-    const { account } = normalizeEntry(entry);
+  for (const [managerPhone, entry2] of Object.entries(accountManagers)) {
+    const { account } = normalizeEntry(entry2);
     if (account && account === subAccountId) phones.push(managerPhone);
   }
   return phones;
@@ -1498,7 +1498,7 @@ function resolveAccountConfig(config, accountConfig) {
 function isAdminPhone(phone, adminPhones) {
   const normalized = normalizeE164(phone);
   if (!normalized) return false;
-  return adminPhones.some((entry) => phonesMatch(entry, normalized));
+  return adminPhones.some((entry2) => phonesMatch(entry2, normalized));
 }
 function checkDmAccess(params) {
   const { senderPhone, selfPhone, accountId } = params;
@@ -1520,9 +1520,9 @@ function checkDmAccess(params) {
     case "open":
       return { allowed: true, reason: "dm-policy-open", agentType: "public", effectiveAccountId: accountId };
     case "allowlist": {
-      const inList = cfg.allowFrom.some((entry) => {
-        if (entry === "*") return true;
-        return phonesMatch(entry, senderPhone);
+      const inList = cfg.allowFrom.some((entry2) => {
+        if (entry2 === "*") return true;
+        return phonesMatch(entry2, senderPhone);
       });
       if (inList) {
         return { allowed: true, reason: "allowlist-match", agentType: "public", effectiveAccountId: accountId };
@@ -1597,8 +1597,8 @@ var NOTIFY_MAX = 5e3;
 var notifyCache = /* @__PURE__ */ new Map();
 function isNotifyDuplicate(msgKeyId) {
   const now = Date.now();
-  const entry = notifyCache.get(msgKeyId);
-  if (entry && now - entry.ts <= NOTIFY_TTL_MS) return true;
+  const entry2 = notifyCache.get(msgKeyId);
+  if (entry2 && now - entry2.ts <= NOTIFY_TTL_MS) return true;
   for (const [key, e] of notifyCache) {
     if (now - e.ts > NOTIFY_TTL_MS) notifyCache.delete(key);
   }
@@ -1675,15 +1675,15 @@ var ACCESS_LOCKOUT_MS = 15 * 60 * 1e3;
 var ACCESS_WINDOW_MS = 15 * 60 * 1e3;
 function checkAccessRateLimit(ip, agentSlug) {
   const key = `${ip}:${agentSlug}`;
-  const entry = rateLimitMap.get(key);
-  if (!entry) return null;
+  const entry2 = rateLimitMap.get(key);
+  if (!entry2) return null;
   const now = Date.now();
-  if (entry.lockedUntil && now < entry.lockedUntil) {
-    const remainingMs = entry.lockedUntil - now;
+  if (entry2.lockedUntil && now < entry2.lockedUntil) {
+    const remainingMs = entry2.lockedUntil - now;
     const remainingS = Math.ceil(remainingMs / 1e3);
     return `Too many attempts. Try again in ${remainingS}s`;
   }
-  if (now - entry.firstAttempt > ACCESS_WINDOW_MS) {
+  if (now - entry2.firstAttempt > ACCESS_WINDOW_MS) {
     rateLimitMap.delete(key);
     return null;
   }
@@ -1692,14 +1692,14 @@ function checkAccessRateLimit(ip, agentSlug) {
 function recordAccessFailedAttempt(ip, agentSlug) {
   const key = `${ip}:${agentSlug}`;
   const now = Date.now();
-  const entry = rateLimitMap.get(key);
-  if (!entry || now - entry.firstAttempt > ACCESS_WINDOW_MS) {
+  const entry2 = rateLimitMap.get(key);
+  if (!entry2 || now - entry2.firstAttempt > ACCESS_WINDOW_MS) {
     rateLimitMap.set(key, { attempts: 1, firstAttempt: now });
     return;
   }
-  entry.attempts++;
-  if (entry.attempts >= ACCESS_MAX_ATTEMPTS) {
-    entry.lockedUntil = now + ACCESS_LOCKOUT_MS;
+  entry2.attempts++;
+  if (entry2.attempts >= ACCESS_MAX_ATTEMPTS) {
+    entry2.lockedUntil = now + ACCESS_LOCKOUT_MS;
   }
 }
 function clearAccessRateLimit(ip, agentSlug) {
@@ -1709,15 +1709,15 @@ var contactRateMap = /* @__PURE__ */ new Map();
 var REQUEST_LINK_MAX = 3;
 var REQUEST_LINK_WINDOW_MS = 60 * 60 * 1e3;
 function checkRequestLinkRateLimit(contactValue) {
-  const entry = contactRateMap.get(contactValue);
-  if (!entry) return null;
+  const entry2 = contactRateMap.get(contactValue);
+  if (!entry2) return null;
   const now = Date.now();
-  if (now - entry.windowStart > REQUEST_LINK_WINDOW_MS) {
+  if (now - entry2.windowStart > REQUEST_LINK_WINDOW_MS) {
     contactRateMap.delete(contactValue);
     return null;
   }
-  if (entry.count >= REQUEST_LINK_MAX) {
-    const remainingMs = REQUEST_LINK_WINDOW_MS - (now - entry.windowStart);
+  if (entry2.count >= REQUEST_LINK_MAX) {
+    const remainingMs = REQUEST_LINK_WINDOW_MS - (now - entry2.windowStart);
     const remainingM = Math.ceil(remainingMs / 6e4);
     return `Too many requests. Try again in ${remainingM} minute(s)`;
   }
@@ -1725,12 +1725,12 @@ function checkRequestLinkRateLimit(contactValue) {
 }
 function recordRequestLinkAttempt(contactValue) {
   const now = Date.now();
-  const entry = contactRateMap.get(contactValue);
-  if (!entry || now - entry.windowStart > REQUEST_LINK_WINDOW_MS) {
+  const entry2 = contactRateMap.get(contactValue);
+  if (!entry2 || now - entry2.windowStart > REQUEST_LINK_WINDOW_MS) {
     contactRateMap.set(contactValue, { count: 1, windowStart: now });
     return;
   }
-  entry.count++;
+  entry2.count++;
 }
 function maskContact(value) {
   if (value.includes("@")) {
@@ -1919,8 +1919,8 @@ var agentSentCache = /* @__PURE__ */ new Map();
 var inboundCache = /* @__PURE__ */ new Map();
 function pruneCache(cache3, ttl, max) {
   const now = Date.now();
-  for (const [key, entry] of cache3) {
-    if (now - entry.ts > ttl) cache3.delete(key);
+  for (const [key, entry2] of cache3) {
+    if (now - entry2.ts > ttl) cache3.delete(key);
   }
   if (cache3.size > max) {
     const excess = cache3.size - max;
@@ -1937,22 +1937,22 @@ function trackAgentSentMessage(messageId) {
   agentSentCache.set(messageId, { ts: Date.now() });
 }
 function isAgentSentMessage(messageId) {
-  const entry = agentSentCache.get(messageId);
-  if (!entry) return false;
-  if (Date.now() - entry.ts > AGENT_SENT_TTL_MS) {
+  const entry2 = agentSentCache.get(messageId);
+  if (!entry2) return false;
+  if (Date.now() - entry2.ts > AGENT_SENT_TTL_MS) {
     agentSentCache.delete(messageId);
     return false;
   }
   return true;
 }
 function isDuplicateInbound(key) {
-  const entry = inboundCache.get(key);
-  if (!entry) {
+  const entry2 = inboundCache.get(key);
+  if (!entry2) {
     pruneCache(inboundCache, INBOUND_TTL_MS, INBOUND_MAX);
     inboundCache.set(key, { ts: Date.now() });
     return false;
   }
-  if (Date.now() - entry.ts > INBOUND_TTL_MS) {
+  if (Date.now() - entry2.ts > INBOUND_TTL_MS) {
     inboundCache.delete(key);
     inboundCache.set(key, { ts: Date.now() });
     return false;
@@ -2013,7 +2013,7 @@ function recordActivity(event) {
     }
     acct[direction]++;
     acct.lastEventAt = now;
-    const entry = {
+    const entry2 = {
       channel: "whatsapp",
       accountId,
       direction,
@@ -2021,7 +2021,7 @@ function recordActivity(event) {
       timestamp: now,
       messageType
     };
-    recentEvents.push(entry);
+    recentEvents.push(entry2);
     if (recentEvents.length > RECENT_EVENTS_MAX) {
       recentEvents.splice(0, recentEvents.length - RECENT_EVENTS_MAX);
     }
@@ -2295,6 +2295,216 @@ function sanitizeReason(err) {
   return `${err.name}:${msg}`;
 }
 
+// app/lib/whatsapp/chat-metadata-store.ts
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3, renameSync, statSync as statSync2 } from "fs";
+import { dirname as dirname2, join as join4 } from "path";
+
+// app/lib/data-path.ts
+import { realpathSync } from "fs";
+import { resolve as resolve2, normalize, sep, relative, basename, join as join3 } from "path";
+var PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve2(process.cwd(), "../platform");
+var DATA_ROOT = resolve2(PLATFORM_ROOT2, "..", "data");
+var CLAUDE_UPLOADS_ROOT = process.env.CLAUDE_CONFIG_DIR ? resolve2(process.env.CLAUDE_CONFIG_DIR, "uploads") : null;
+var ACCOUNT_PARTITION_DIRS = /* @__PURE__ */ new Set(["accounts"]);
+var ACCOUNT_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function crossesForeignAccountPartition(relPath, accountId) {
+  const segs = relPath.split("/").filter(Boolean);
+  if (segs.length < 2) return false;
+  if (!ACCOUNT_PARTITION_DIRS.has(segs[0])) return false;
+  const owner = segs[1];
+  if (!ACCOUNT_UUID_RE.test(owner)) return false;
+  return owner !== accountId;
+}
+function isWithinOwnAccountPartition(relPath, accountId) {
+  const segs = relPath.split("/").filter(Boolean);
+  return segs.length >= 2 && segs[0] === "accounts" && segs[1] === accountId;
+}
+function resolveUnderRoot(raw, rootAbs, rootLabel) {
+  const cleaned = normalize("/" + (raw ?? "").replace(/\\/g, "/")).replace(/^\/+/, "");
+  const absolute = resolve2(rootAbs, cleaned);
+  let rootReal;
+  try {
+    rootReal = realpathSync(rootAbs);
+  } catch (err) {
+    return {
+      ok: false,
+      status: 500,
+      error: `${rootLabel} not accessible: ${err instanceof Error ? err.message : String(err)}`
+    };
+  }
+  let resolvedReal;
+  try {
+    resolvedReal = realpathSync(absolute);
+  } catch (err) {
+    const code = err.code;
+    if (code === "ENOENT") {
+      if (absolute !== rootReal && !absolute.startsWith(rootReal + sep)) {
+        return { ok: false, status: 403, error: `Path escapes ${rootLabel}`, resolved: absolute };
+      }
+      return { ok: false, status: 404, error: "Not found" };
+    }
+    return {
+      ok: false,
+      status: 500,
+      error: err instanceof Error ? err.message : String(err)
+    };
+  }
+  if (resolvedReal !== rootReal && !resolvedReal.startsWith(rootReal + sep)) {
+    return { ok: false, status: 403, error: `Path escapes ${rootLabel}`, resolved: resolvedReal };
+  }
+  const relPath = relative(rootReal, resolvedReal) || ".";
+  return { ok: true, absolute: resolvedReal, dataRootReal: rootReal, relative: relPath };
+}
+function resolveDataPath(raw) {
+  return resolveUnderRoot(raw, DATA_ROOT, "DATA_ROOT");
+}
+function resolveClaudeUploadsPath(raw) {
+  if (!CLAUDE_UPLOADS_ROOT) {
+    return { ok: false, status: 404, error: "Not found" };
+  }
+  return resolveUnderRoot(raw, CLAUDE_UPLOADS_ROOT, "CLAUDE_UPLOADS_ROOT");
+}
+function scratchpadTmpBase() {
+  return process.env.MAXY_SCRATCHPAD_BASE ?? "/tmp";
+}
+function sessionScratchpadRoot(projectDir, sessionId) {
+  const uid = typeof process.geteuid === "function" ? process.geteuid() : 0;
+  return join3(scratchpadTmpBase(), `claude-${uid}`, basename(projectDir), sessionId, "scratchpad");
+}
+function resolveScratchpadPath(raw, scratchpadRootAbs) {
+  return resolveUnderRoot(raw, scratchpadRootAbs, "scratchpad");
+}
+
+// app/lib/whatsapp/chat-metadata-store.ts
+var SOURCE_RANK = { contact: 3, group: 2, chat: 1 };
+function isSource(v) {
+  return v === "contact" || v === "group" || v === "chat";
+}
+function preferEntry(existing, incoming) {
+  if (existing === void 0) return incoming;
+  const a = SOURCE_RANK[existing.source];
+  const b = SOURCE_RANK[incoming.source];
+  if (b > a) return incoming;
+  if (b < a) return existing;
+  return incoming.updatedAt > existing.updatedAt ? incoming : existing;
+}
+function parseChatMetadata(raw) {
+  const out = /* @__PURE__ */ new Map();
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return out;
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return out;
+  for (const [jid, value] of Object.entries(parsed)) {
+    if (value === null || typeof value !== "object") continue;
+    const v = value;
+    if (typeof v.name !== "string" || v.name.length === 0) continue;
+    if (!isSource(v.source)) continue;
+    if (typeof v.updatedAt !== "string") continue;
+    out.set(jid, {
+      jid,
+      name: v.name,
+      source: v.source,
+      isGroup: v.isGroup === true,
+      updatedAt: v.updatedAt
+    });
+  }
+  return out;
+}
+function serializeChatMetadata(map) {
+  const obj = {};
+  for (const [jid, entry2] of map) obj[jid] = entry2;
+  return JSON.stringify(obj);
+}
+function chatMetadataPath(accountId) {
+  return join4(DATA_ROOT, "accounts", accountId, "chat-metadata.json");
+}
+var readCache = /* @__PURE__ */ new Map();
+function readChatMetadata(accountId) {
+  const path3 = chatMetadataPath(accountId);
+  try {
+    if (!existsSync4(path3)) return /* @__PURE__ */ new Map();
+    const st = statSync2(path3);
+    const cached = readCache.get(path3);
+    if (cached && cached.size === st.size && cached.mtimeMs === st.mtimeMs) return cached.map;
+    const map = parseChatMetadata(readFileSync5(path3, "utf8"));
+    readCache.set(path3, { size: st.size, mtimeMs: st.mtimeMs, map });
+    return map;
+  } catch (err) {
+    console.error(
+      `[wa-chatmeta] op=read outcome=fail account=${accountId.slice(0, 8)} reason=${(err instanceof Error ? err.message : String(err)).slice(0, 100)}`
+    );
+    return /* @__PURE__ */ new Map();
+  }
+}
+function writeChatMetadataMerged(accountId, updates) {
+  if (updates.length === 0) return -1;
+  const path3 = chatMetadataPath(accountId);
+  try {
+    mkdirSync3(dirname2(path3), { recursive: true });
+    let merged = /* @__PURE__ */ new Map();
+    if (existsSync4(path3)) merged = parseChatMetadata(readFileSync5(path3, "utf8"));
+    for (const entry2 of updates) merged.set(entry2.jid, preferEntry(merged.get(entry2.jid), entry2));
+    const tmp = `${path3}.tmp`;
+    writeFileSync3(tmp, serializeChatMetadata(merged), "utf8");
+    renameSync(tmp, path3);
+    return parseChatMetadata(readFileSync5(path3, "utf8")).size;
+  } catch (err) {
+    console.error(
+      `[wa-chatmeta] op=persist outcome=fail account=${accountId.slice(0, 8)} reason=${(err instanceof Error ? err.message : String(err)).slice(0, 100)}`
+    );
+    return -1;
+  }
+}
+
+// app/lib/whatsapp/chat-metadata-events.ts
+var NON_CHAT_JIDS = /* @__PURE__ */ new Set(["status@broadcast"]);
+function isGroupJid2(jid) {
+  return jid.endsWith("@g.us");
+}
+function entry(jid, name, source, nowIso) {
+  return { jid, name, source, isGroup: isGroupJid2(jid), updatedAt: nowIso };
+}
+function conversationKey(jid, phoneNumber) {
+  if (!jid.endsWith("@lid")) return jid;
+  if (typeof phoneNumber !== "string") return jid;
+  const trimmed = phoneNumber.trim();
+  return trimmed.endsWith("@s.whatsapp.net") ? trimmed : jid;
+}
+function usable(jid, name, phoneNumber) {
+  if (typeof jid !== "string" || jid.length === 0) return null;
+  if (NON_CHAT_JIDS.has(jid)) return null;
+  const trimmed = typeof name === "string" ? name.trim() : "";
+  if (trimmed.length === 0) return null;
+  return { jid: conversationKey(jid, phoneNumber), name: trimmed };
+}
+function chatEntriesFromChats(chats, nowIso) {
+  const out = [];
+  for (const c of chats) {
+    const ok = usable(c.id, c.name, c.phoneNumber);
+    if (ok) out.push(entry(ok.jid, ok.name, "chat", nowIso));
+  }
+  return out;
+}
+function chatEntriesFromContacts(contacts, nowIso) {
+  const out = [];
+  for (const c of contacts) {
+    const ok = usable(c.id, c.name, c.phoneNumber);
+    if (ok) out.push(entry(ok.jid, ok.name, isGroupJid2(ok.jid) ? "chat" : "contact", nowIso));
+  }
+  return out;
+}
+function groupEntriesFromUpdates(updates, nowIso) {
+  const out = [];
+  for (const g of updates) {
+    const ok = usable(g.id, g.subject);
+    if (ok) out.push(entry(ok.jid, ok.name, "group", nowIso));
+  }
+  return out;
+}
+
 // app/lib/whatsapp/ensure-conversation.ts
 var TAG10 = "[whatsapp-persist]";
 async function ensureWhatsAppConversation(input) {
@@ -2327,8 +2537,8 @@ async function ensureWhatsAppConversation(input) {
 }
 
 // ../lib/account-enumeration/src/index.ts
-import { readdirSync as readdirSync3, readFileSync as readFileSync5 } from "fs";
-import { resolve as resolve2 } from "path";
+import { readdirSync as readdirSync3, readFileSync as readFileSync6 } from "fs";
+import { resolve as resolve3 } from "path";
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var cache2 = /* @__PURE__ */ new Map();
 function enumerateValidAccountIds(accountsDir) {
@@ -2347,9 +2557,9 @@ function enumerateValidAccountIds(accountsDir) {
   const valid = [];
   for (const name of names) {
     if (!UUID_RE.test(name)) continue;
-    const configPath = resolve2(accountsDir, name, "account.json");
+    const configPath = resolve3(accountsDir, name, "account.json");
     try {
-      JSON.parse(readFileSync5(configPath, "utf-8"));
+      JSON.parse(readFileSync6(configPath, "utf-8"));
       valid.push(name);
     } catch (err) {
       const code = err.code;
@@ -2363,9 +2573,9 @@ function resolveHouseOrSoleAccountId(accountsDir) {
   const valid = enumerateValidAccountIds(accountsDir);
   const houses = [];
   for (const id of valid) {
-    const configPath = resolve2(accountsDir, id, "account.json");
+    const configPath = resolve3(accountsDir, id, "account.json");
     try {
-      const cfg = JSON.parse(readFileSync5(configPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync6(configPath, "utf-8"));
       if (cfg.role === "house") houses.push(id);
     } catch {
     }
@@ -2383,7 +2593,7 @@ function getAccountsDirFromEnv() {
       "[graph-write] MAXY_PLATFORM_ROOT not set \u2014 cannot enforce accountId gate. Set MAXY_PLATFORM_ROOT in the spawning process or pass `accountsDir` explicitly."
     );
   }
-  return resolve2(root, "..", "data/accounts");
+  return resolve3(root, "..", "data/accounts");
 }
 function validateAccountIdEnv(envValue, diskIds) {
   if (!envValue) {
@@ -2399,8 +2609,8 @@ function validateAccountIdEnv(envValue, diskIds) {
 }
 
 // app/lib/whatsapp/platform-account-id.ts
-import { readFileSync as readFileSync6 } from "fs";
-import { resolve as resolve3 } from "path";
+import { readFileSync as readFileSync7 } from "fs";
+import { resolve as resolve4 } from "path";
 var cachedHouseId = null;
 var cachedHouseAccountsDir = null;
 function resolveHouseId(accountsDir) {
@@ -2411,10 +2621,10 @@ function resolveHouseId(accountsDir) {
   return cachedHouseId;
 }
 function readChannelRoutingOverride(accountsDir, houseId) {
-  const configPath = resolve3(accountsDir, houseId, "account.json");
+  const configPath = resolve4(accountsDir, houseId, "account.json");
   let raw;
   try {
-    raw = readFileSync6(configPath, "utf-8");
+    raw = readFileSync7(configPath, "utf-8");
   } catch {
     return null;
   }
@@ -2455,8 +2665,8 @@ function warnNonUuidAccount(caller, accountId) {
 }
 
 // app/lib/managed-service.ts
-import { join as join3 } from "path";
-import { readFileSync as readFileSync7 } from "fs";
+import { join as join5 } from "path";
+import { readFileSync as readFileSync8 } from "fs";
 function isHouseManagedService(accountsDir = ACCOUNTS_DIR) {
   let houseId;
   try {
@@ -2466,7 +2676,7 @@ function isHouseManagedService(accountsDir = ACCOUNTS_DIR) {
   }
   try {
     const cfg = JSON.parse(
-      readFileSync7(join3(accountsDir, houseId, "account.json"), "utf-8")
+      readFileSync8(join5(accountsDir, houseId, "account.json"), "utf-8")
     );
     return cfg.managedService === true;
   } catch {
@@ -2480,7 +2690,7 @@ function isCustomerTurnSuppressed(role, managedService) {
 // app/lib/whatsapp/inbound/media.ts
 import { randomUUID as randomUUID4, createHash } from "crypto";
 import { writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 import {
   downloadMediaMessage,
   downloadContentFromMessage,
@@ -2490,85 +2700,9 @@ import {
 // app/lib/attachments.ts
 import { randomUUID as randomUUID3 } from "crypto";
 import { mkdir, writeFile } from "fs/promises";
-import { realpathSync as realpathSync2, existsSync as existsSync4, readFileSync as readFileSync8, readdirSync as readdirSync4 } from "fs";
+import { realpathSync as realpathSync2, existsSync as existsSync5, readFileSync as readFileSync9, readdirSync as readdirSync4 } from "fs";
 import { resolve as resolve5, extname } from "path";
 
-// app/lib/data-path.ts
-import { realpathSync } from "fs";
-import { resolve as resolve4, normalize, sep, relative, basename, join as join4 } from "path";
-var PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve4(process.cwd(), "../platform");
-var DATA_ROOT = resolve4(PLATFORM_ROOT2, "..", "data");
-var CLAUDE_UPLOADS_ROOT = process.env.CLAUDE_CONFIG_DIR ? resolve4(process.env.CLAUDE_CONFIG_DIR, "uploads") : null;
-var ACCOUNT_PARTITION_DIRS = /* @__PURE__ */ new Set(["accounts"]);
-var ACCOUNT_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function crossesForeignAccountPartition(relPath, accountId) {
-  const segs = relPath.split("/").filter(Boolean);
-  if (segs.length < 2) return false;
-  if (!ACCOUNT_PARTITION_DIRS.has(segs[0])) return false;
-  const owner = segs[1];
-  if (!ACCOUNT_UUID_RE.test(owner)) return false;
-  return owner !== accountId;
-}
-function isWithinOwnAccountPartition(relPath, accountId) {
-  const segs = relPath.split("/").filter(Boolean);
-  return segs.length >= 2 && segs[0] === "accounts" && segs[1] === accountId;
-}
-function resolveUnderRoot(raw, rootAbs, rootLabel) {
-  const cleaned = normalize("/" + (raw ?? "").replace(/\\/g, "/")).replace(/^\/+/, "");
-  const absolute = resolve4(rootAbs, cleaned);
-  let rootReal;
-  try {
-    rootReal = realpathSync(rootAbs);
-  } catch (err) {
-    return {
-      ok: false,
-      status: 500,
-      error: `${rootLabel} not accessible: ${err instanceof Error ? err.message : String(err)}`
-    };
-  }
-  let resolvedReal;
-  try {
-    resolvedReal = realpathSync(absolute);
-  } catch (err) {
-    const code = err.code;
-    if (code === "ENOENT") {
-      if (absolute !== rootReal && !absolute.startsWith(rootReal + sep)) {
-        return { ok: false, status: 403, error: `Path escapes ${rootLabel}`, resolved: absolute };
-      }
-      return { ok: false, status: 404, error: "Not found" };
-    }
-    return {
-      ok: false,
-      status: 500,
-      error: err instanceof Error ? err.message : String(err)
-    };
-  }
-  if (resolvedReal !== rootReal && !resolvedReal.startsWith(rootReal + sep)) {
-    return { ok: false, status: 403, error: `Path escapes ${rootLabel}`, resolved: resolvedReal };
-  }
-  const relPath = relative(rootReal, resolvedReal) || ".";
-  return { ok: true, absolute: resolvedReal, dataRootReal: rootReal, relative: relPath };
-}
-function resolveDataPath(raw) {
-  return resolveUnderRoot(raw, DATA_ROOT, "DATA_ROOT");
-}
-function resolveClaudeUploadsPath(raw) {
-  if (!CLAUDE_UPLOADS_ROOT) {
-    return { ok: false, status: 404, error: "Not found" };
-  }
-  return resolveUnderRoot(raw, CLAUDE_UPLOADS_ROOT, "CLAUDE_UPLOADS_ROOT");
-}
-function scratchpadTmpBase() {
-  return process.env.MAXY_SCRATCHPAD_BASE ?? "/tmp";
-}
-function sessionScratchpadRoot(projectDir, sessionId) {
-  const uid = typeof process.geteuid === "function" ? process.geteuid() : 0;
-  return join4(scratchpadTmpBase(), `claude-${uid}`, basename(projectDir), sessionId, "scratchpad");
-}
-function resolveScratchpadPath(raw, scratchpadRootAbs) {
-  return resolveUnderRoot(raw, scratchpadRootAbs, "scratchpad");
-}
-
 // app/lib/doc-to-text.ts
 import { unzipSync, strFromU8 } from "fflate";
 var DOCX = "application/vnd.openxmlformats-officedocument.wordprocessingml.document";
@@ -2589,10 +2723,10 @@ function bareMime(mimeType) {
 function unescapeXml(s) {
   return s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, '"').replace(/&apos;/g, "'").replace(/&amp;/g, "&");
 }
-function unzipEntry(buffer, entry) {
+function unzipEntry(buffer, entry2) {
   const files = unzipSync(new Uint8Array(buffer));
-  const bytes = files[entry];
-  if (!bytes) throw new Error(`zip entry not found: ${entry}`);
+  const bytes = files[entry2];
+  if (!bytes) throw new Error(`zip entry not found: ${entry2}`);
   return strFromU8(bytes);
 }
 function docxToText(buffer) {
@@ -2814,14 +2948,14 @@ async function storeMediaBuffer(accountId, attachmentId, filename, mimeType, buf
   return writeAttachment(accountId, "", filename, mimeType, buffer.byteLength, buffer, attachmentId);
 }
 function attachmentExists(accountId, attachmentId) {
-  return existsSync4(resolve5(uploadsDirFor(accountId, "", attachmentId), `${attachmentId}.meta.json`));
+  return existsSync5(resolve5(uploadsDirFor(accountId, "", attachmentId), `${attachmentId}.meta.json`));
 }
 function resolveStoredAttachment(accountId, attachmentId) {
   if (!ATTACHMENT_ID_RE.test(attachmentId)) return null;
   const dir = uploadsDirFor(accountId, "", attachmentId);
   let meta;
   try {
-    meta = JSON.parse(readFileSync8(resolve5(dir, `${attachmentId}.meta.json`), "utf8"));
+    meta = JSON.parse(readFileSync9(resolve5(dir, `${attachmentId}.meta.json`), "utf8"));
   } catch {
     return null;
   }
@@ -3171,7 +3305,7 @@ async function downloadInboundMedia(msg, sock, opts) {
   if (!res) return void 0;
   await mkdir2(MEDIA_DIR, { recursive: true });
   const ext = mimeToExt(res.mimetype);
-  const filePath = join5(MEDIA_DIR, `${randomUUID4()}.${ext}`);
+  const filePath = join6(MEDIA_DIR, `${randomUUID4()}.${ext}`);
   await writeFile2(filePath, res.buffer);
   const sizeKB = (res.buffer.length / 1024).toFixed(0);
   console.error(`${TAG12} media downloaded type=${res.mimetype} size=${sizeKB}KB path=${filePath}`);
@@ -3607,13 +3741,13 @@ var messageStore = /* @__PURE__ */ new Map();
 function messageStoreKey(accountId, remoteJid) {
   return `${accountId}:${remoteJid}`;
 }
-function storeMessage(storeKey, entry) {
+function storeMessage(storeKey, entry2) {
   let entries = messageStore.get(storeKey);
   if (!entries) {
     entries = [];
     messageStore.set(storeKey, entries);
   }
-  entries.push(entry);
+  entries.push(entry2);
   if (entries.length > MESSAGE_STORE_MAX) {
     const trimmed = entries.length - MESSAGE_STORE_MAX;
     entries.splice(0, trimmed);
@@ -3870,6 +4004,7 @@ async function registerLoginSocket(accountId, sock, authDir) {
   applySelfIdentity(conn, sock, "register");
   connections.set(accountId, conn);
   monitorInbound(conn);
+  monitorChatMetadata(conn);
   try {
     await sock.sendPresenceUpdate("available");
     console.error(`${TAG16} presence set to available account=${accountId}`);
@@ -3991,6 +4126,7 @@ async function connectWithReconnect(conn) {
       conn.sock = sock;
       applySelfIdentity(conn, sock, "pre-listener");
       monitorInbound(conn);
+      monitorChatMetadata(conn);
       console.error(`${TAG16} socket created account=${conn.accountId} \u2014 waiting for connection`);
       await waitForConnection(sock);
       connectedAt = Date.now();
@@ -4122,6 +4258,95 @@ function applySelfIdentity(conn, sock, phase) {
     );
   }
 }
+function monitorChatMetadata(conn) {
+  if (!conn.sock) return;
+  const sock = conn.sock;
+  const account = conn.platformAccountId;
+  const canonicalise = async (entries) => {
+    const out = [];
+    for (const e of entries) {
+      if (!e.jid.endsWith("@lid")) {
+        out.push(e);
+        continue;
+      }
+      const { canonical, resolved } = await resolveCanonicalConversationJid(e.jid, conn.lidMapping);
+      if (resolved === "lid2pn") {
+        console.error(`${TAG16} [wa-chatmeta] op=canonical raw=${e.jid} canonical=${canonical}`);
+        out.push({ ...e, jid: canonical });
+      } else {
+        out.push(e);
+      }
+    }
+    return out;
+  };
+  const persist = (kind, entries, perJid) => {
+    if (entries.length === 0) return;
+    if (perJid) {
+      for (const e of entries) {
+        console.error(
+          `${TAG16} [wa-chatmeta] op=event kind=${kind} jid=${e.jid} name=${e.name.length} source=${e.source}`
+        );
+      }
+    }
+    const total = writeChatMetadataMerged(account, entries);
+    console.error(
+      `${TAG16} [wa-chatmeta] op=persist kind=${kind} account=${account.slice(0, 8)} updates=${entries.length} outcome=${total < 0 ? "fail" : "ok"} entries=${total}`
+    );
+  };
+  sock.ev.on("messaging-history.set", ({ chats, contacts }) => {
+    const nowIso = (/* @__PURE__ */ new Date()).toISOString();
+    const chatEntries = chatEntriesFromChats(chats ?? [], nowIso);
+    const contactEntries = chatEntriesFromContacts(contacts ?? [], nowIso);
+    console.error(
+      `${TAG16} [wa-chatmeta] op=history-set account=${account.slice(0, 8)} chats=${chats?.length ?? 0} contacts=${contacts?.length ?? 0} groups=${chatEntries.filter((e) => e.isGroup).length} named=${chatEntries.length + contactEntries.length}`
+    );
+    void canonicalise([...chatEntries, ...contactEntries]).then((e) => persist("history-set", e, false));
+  });
+  sock.ev.on("chats.upsert", (chats) => {
+    void canonicalise(chatEntriesFromChats(chats ?? [], (/* @__PURE__ */ new Date()).toISOString())).then((e) => persist("chats.upsert", e, true));
+  });
+  sock.ev.on("chats.update", (chats) => {
+    void canonicalise(chatEntriesFromChats(chats ?? [], (/* @__PURE__ */ new Date()).toISOString())).then((e) => persist("chats.update", e, true));
+  });
+  sock.ev.on("contacts.upsert", (contacts) => {
+    void canonicalise(chatEntriesFromContacts(contacts ?? [], (/* @__PURE__ */ new Date()).toISOString())).then((e) => persist("contacts.upsert", e, true));
+  });
+  sock.ev.on("contacts.update", (contacts) => {
+    void canonicalise(chatEntriesFromContacts(contacts ?? [], (/* @__PURE__ */ new Date()).toISOString())).then((e) => persist("contacts.update", e, true));
+  });
+  sock.ev.on("groups.update", (updates) => {
+    persist("groups.update", groupEntriesFromUpdates(updates ?? [], (/* @__PURE__ */ new Date()).toISOString()), true);
+  });
+  const groupFetchAttempted = /* @__PURE__ */ new Set();
+  sock.ev.on("messages.upsert", async (upsert) => {
+    for (const msg of upsert.messages ?? []) {
+      const jid = msg.key?.remoteJid;
+      if (!jid || !jid.endsWith("@g.us")) continue;
+      if (groupFetchAttempted.has(jid)) continue;
+      if (readChatMetadata(account).get(jid)?.source === "group") continue;
+      groupFetchAttempted.add(jid);
+      const startedAt = Date.now();
+      try {
+        const meta = await sock.groupMetadata(jid);
+        console.error(
+          `${TAG16} [wa-chatmeta] op=group-fetch jid=${jid} ms=${Date.now() - startedAt} outcome=ok`
+        );
+        persist(
+          "group-fetch",
+          groupEntriesFromUpdates([{ id: jid, subject: meta.subject }], (/* @__PURE__ */ new Date()).toISOString()),
+          true
+        );
+      } catch (err) {
+        console.error(
+          `${TAG16} [wa-chatmeta] op=group-fetch jid=${jid} ms=${Date.now() - startedAt} outcome=fail reason=${(err instanceof Error ? err.message : String(err)).slice(0, 100)}`
+        );
+      }
+    }
+  });
+}
+function listConnections() {
+  return [...connections.values()];
+}
 function monitorInbound(conn) {
   if (!conn.sock || !onInboundMessage) return;
   const sock = conn.sock;
@@ -4130,8 +4355,8 @@ function monitorInbound(conn) {
   conn.debouncer = createInboundDebouncer({
     debounceMs,
     buildKey: (payload) => {
-      const conversationKey = payload.isGroup ? payload.groupJid : payload.senderPhone;
-      return `${payload.accountId}:${conversationKey ?? payload.senderPhone}:${payload.senderPhone}`;
+      const conversationKey2 = payload.isGroup ? payload.groupJid : payload.senderPhone;
+      return `${payload.accountId}:${conversationKey2 ?? payload.senderPhone}:${payload.senderPhone}`;
     },
     onFlush: (entries) => {
       if (!onInboundMessage) return;
@@ -4480,9 +4705,9 @@ function monitorInbound(conn) {
   });
   console.error(`[whatsapp-reaction] op=subscribed account=${conn.platformAccountId}`);
   sock.ev.on("messages.reaction", async (reactions) => {
-    for (const entry of reactions) {
+    for (const entry2 of reactions) {
       try {
-        const sig = readReactionEntry(entry);
+        const sig = readReactionEntry(entry2);
         if (!sig) continue;
         if (sig.fromMe) continue;
         const reactorTelephone = await resolveJidToE164(sig.reactorJid, conn.lidMapping) ?? sig.reactorJid;
@@ -4653,8 +4878,8 @@ async function handleInboundMessage(conn, msg) {
     }
   }
   if (extracted.mediaType === "audio" && mediaResult?.path) {
-    const conversationKey = isGroup ? remoteJid : senderPhone;
-    const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
+    const conversationKey2 = isGroup ? remoteJid : senderPhone;
+    const debounceKey = `${conn.accountId}:${conversationKey2}:${senderPhone}`;
     let resolvePending;
     const sttPending = new Promise((resolve6) => {
       resolvePending = resolve6;
@@ -4795,6 +5020,7 @@ export {
   managerPhonesForAccount,
   isAdminPhone,
   shouldDispatchInbound,
+  formatSenderPhone,
   checkAccessRateLimit,
   recordAccessFailedAttempt,
   clearAccessRateLimit,
@@ -4813,10 +5039,6 @@ export {
   sendComposing,
   sendPaused,
   sendMediaMessage,
-  resolvePlatformAccountId,
-  warnNonUuidAccount,
-  isHouseManagedService,
-  isCustomerTurnSuppressed,
   DATA_ROOT,
   crossesForeignAccountPartition,
   isWithinOwnAccountPartition,
@@ -4824,6 +5046,13 @@ export {
   resolveClaudeUploadsPath,
   sessionScratchpadRoot,
   resolveScratchpadPath,
+  readChatMetadata,
+  writeChatMetadataMerged,
+  groupEntriesFromUpdates,
+  resolvePlatformAccountId,
+  warnNonUuidAccount,
+  isHouseManagedService,
+  isCustomerTurnSuppressed,
   SUPPORTED_MIME_TYPES,
   MAX_FILE_SIZE_BYTES,
   MAX_FILES_PER_MESSAGE,
@@ -4866,5 +5095,6 @@ export {
   getMessages,
   listConversationJids,
   listStoreAccountKeys,
-  shutdown
+  shutdown,
+  listConnections
 };