From 1676f53f4d30ae9e01f5e0855b1030ef55d82295 Mon Sep 17 00:00:00 2001
From: Eyejoker <phj1081@gmail.com>
Date: Mon, 27 Apr 2026 02:23:32 +0900
Subject: [PATCH] feat(dashboard): send room messages from web (#33)

---
 apps/dashboard/src/App.tsx        | 106 +++++++++++-
 apps/dashboard/src/api.ts         |  11 ++
 apps/dashboard/src/i18n.ts        |  20 +++
 apps/dashboard/src/styles.css     |  40 ++++-
 src/db.ts                         |   1 +
 src/db/messages.ts                |  11 ++
 src/db/runtime-memory-messages.ts |   5 +
 src/index.ts                      |   7 +-
 src/web-dashboard-server.test.ts  | 264 +++++++++++++++++++++++++++++-
 src/web-dashboard-server.ts       | 153 ++++++++++++++++-
 10 files changed, 612 insertions(+), 6 deletions(-)

diff --git a/apps/dashboard/src/App.tsx b/apps/dashboard/src/App.tsx
index 8ef9ce0..78a752b 100644
--- a/apps/dashboard/src/App.tsx
+++ b/apps/dashboard/src/App.tsx
@@ -7,6 +7,7 @@ import {
   type StatusSnapshot,
   fetchDashboardData,
   runScheduledTaskAction,
+  sendRoomMessage,
 } from './api';
 import {
   LOCALES,
@@ -44,6 +45,10 @@ const DEFAULT_VIEW: DashboardView = 'inbox';
 const HEALTH_STALE_MS = 5 * 60_000;
 const HEALTH_DOWN_MS = 15 * 60_000;
 
+function makeClientRequestId(): string {
+  return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
+}
+
 function isDashboardView(
   value: string | null | undefined,
 ): value is DashboardView {
@@ -865,13 +870,58 @@ function HealthPanel({
   );
 }
 
+function RoomMessageForm({
+  busy,
+  onChange,
+  onSubmit,
+  t,
+  value,
+}: {
+  busy: boolean;
+  onChange: (value: string) => void;
+  onSubmit: () => void;
+  t: Messages;
+  value: string;
+}) {
+  return (
+    <form
+      className="room-compose"
+      onSubmit={(event) => {
+        event.preventDefault();
+        onSubmit();
+      }}
+    >
+      <textarea
+        aria-label={t.rooms.message}
+        maxLength={8000}
+        onChange={(event) => onChange(event.target.value)}
+        placeholder={t.rooms.messagePlaceholder}
+        rows={2}
+        value={value}
+      />
+      <button disabled={busy || !value.trim()} type="submit">
+        {busy ? t.rooms.sending : t.rooms.send}
+      </button>
+    </form>
+  );
+}
+
 function RoomPanel({
+  onSendRoomMessage,
+  roomMessageKey,
   snapshots,
   t,
 }: {
+  onSendRoomMessage: (
+    roomJid: string,
+    text: string,
+    requestId: string,
+  ) => Promise<boolean>;
+  roomMessageKey: string | null;
   snapshots: StatusSnapshot[];
   t: Messages;
 }) {
+  const [drafts, setDrafts] = useState<Record<string, string>>({});
   const entries = snapshots.flatMap((snapshot) =>
     snapshot.entries.map((entry) => ({
       ...entry,
@@ -883,6 +933,19 @@ function RoomPanel({
     return <EmptyState>{t.rooms.empty}</EmptyState>;
   }
 
+  function setDraft(jid: string, value: string) {
+    setDrafts((previous) => ({ ...previous, [jid]: value }));
+  }
+
+  async function submitRoomMessage(jid: string) {
+    const text = drafts[jid]?.trim();
+    if (!text) return;
+    const success = await onSendRoomMessage(jid, text, makeClientRequestId());
+    if (success) {
+      setDraft(jid, '');
+    }
+  }
+
   return (
     <>
       <div className="table-wrap desktop-table">
@@ -893,6 +956,7 @@ function RoomPanel({
               <th>{t.rooms.status}</th>
               <th>{t.rooms.queue}</th>
               <th>{t.rooms.elapsed}</th>
+              <th>{t.rooms.message}</th>
             </tr>
           </thead>
           <tbody>
@@ -917,6 +981,15 @@ function RoomPanel({
                   {queueLabel(entry.pendingTasks, entry.pendingMessages, t)}
                 </td>
                 <td>{formatDuration(entry.elapsedMs, t)}</td>
+                <td>
+                  <RoomMessageForm
+                    busy={roomMessageKey === entry.jid}
+                    onChange={(value) => setDraft(entry.jid, value)}
+                    onSubmit={() => void submitRoomMessage(entry.jid)}
+                    t={t}
+                    value={drafts[entry.jid] ?? ''}
+                  />
+                </td>
               </tr>
             ))}
           </tbody>
@@ -950,6 +1023,13 @@ function RoomPanel({
                 <strong>{formatDuration(entry.elapsedMs, t)}</strong>
               </span>
             </div>
+            <RoomMessageForm
+              busy={roomMessageKey === entry.jid}
+              onChange={(value) => setDraft(entry.jid, value)}
+              onSubmit={() => void submitRoomMessage(entry.jid)}
+              t={t}
+              value={drafts[entry.jid] ?? ''}
+            />
             <details className="record-details">
               <summary>{t.rooms.details}</summary>
               <p className="record-id">
@@ -1349,6 +1429,7 @@ function App() {
   const [taskActionKey, setTaskActionKey] = useState<TaskActionKey | null>(
     null,
   );
+  const [roomMessageKey, setRoomMessageKey] = useState<string | null>(null);
   const t = messages[locale];
 
   function setDashboardLocale(nextLocale: Locale) {
@@ -1397,6 +1478,24 @@ function App() {
     }
   }
 
+  async function handleRoomMessage(
+    roomJid: string,
+    text: string,
+    requestId: string,
+  ) {
+    setRoomMessageKey(roomJid);
+    try {
+      await sendRoomMessage(roomJid, text, requestId);
+      await refresh(false);
+      return true;
+    } catch (err) {
+      setError(err instanceof Error ? err.message : String(err));
+      return false;
+    } finally {
+      setRoomMessageKey(null);
+    }
+  }
+
   useEffect(() => {
     document.documentElement.lang = localeTags[locale];
   }, [locale]);
@@ -1520,7 +1619,12 @@ function App() {
                   <h2>{t.panels.rooms}</h2>
                   <span>{t.panels.queue}</span>
                 </div>
-                <RoomPanel snapshots={data.snapshots} t={t} />
+                <RoomPanel
+                  onSendRoomMessage={handleRoomMessage}
+                  roomMessageKey={roomMessageKey}
+                  snapshots={data.snapshots}
+                  t={t}
+                />
               </section>
             ) : null}
 
diff --git a/apps/dashboard/src/api.ts b/apps/dashboard/src/api.ts
index e9022be..0083b97 100644
--- a/apps/dashboard/src/api.ts
+++ b/apps/dashboard/src/api.ts
@@ -161,3 +161,14 @@ export async function runScheduledTaskAction(
     action,
   });
 }
+
+export async function sendRoomMessage(
+  roomJid: string,
+  text: string,
+  requestId: string,
+): Promise<{ ok: true; id: string; queued: boolean }> {
+  return postJson(`/api/rooms/${encodeURIComponent(roomJid)}/messages`, {
+    requestId,
+    text,
+  });
+}
diff --git a/apps/dashboard/src/i18n.ts b/apps/dashboard/src/i18n.ts
index f200730..7bb267d 100644
--- a/apps/dashboard/src/i18n.ts
+++ b/apps/dashboard/src/i18n.ts
@@ -115,6 +115,10 @@ export interface Messages {
     queue: string;
     elapsed: string;
     details: string;
+    message: string;
+    messagePlaceholder: string;
+    send: string;
+    sending: string;
   };
   usage: {
     empty: string;
@@ -331,6 +335,10 @@ export const messages = {
       queue: '큐',
       elapsed: '경과',
       details: '세부',
+      message: 'Message',
+      messagePlaceholder: 'Type request...',
+      send: 'Send',
+      sending: 'Sending',
     },
     usage: {
       empty: '사용량 스냅샷 없음. 수집기 확인.',
@@ -531,6 +539,10 @@ export const messages = {
       queue: 'queue',
       elapsed: 'elapsed',
       details: 'details',
+      message: 'message',
+      messagePlaceholder: 'Type request...',
+      send: 'Send',
+      sending: 'Sending',
     },
     usage: {
       empty: 'No usage snapshot. Check collector.',
@@ -731,6 +743,10 @@ export const messages = {
       queue: '队列',
       elapsed: '耗时',
       details: '详情',
+      message: 'Message',
+      messagePlaceholder: 'Type request...',
+      send: 'Send',
+      sending: 'Sending',
     },
     usage: {
       empty: '暂无用量快照。检查采集器。',
@@ -931,6 +947,10 @@ export const messages = {
       queue: 'キュー',
       elapsed: '経過',
       details: '詳細',
+      message: 'Message',
+      messagePlaceholder: 'Type request...',
+      send: 'Send',
+      sending: 'Sending',
     },
     usage: {
       empty: '使用量スナップショットなし。収集器を確認。',
diff --git a/apps/dashboard/src/styles.css b/apps/dashboard/src/styles.css
index 98454bd..db80f16 100644
--- a/apps/dashboard/src/styles.css
+++ b/apps/dashboard/src/styles.css
@@ -513,7 +513,7 @@ dd,
 table {
   width: 100%;
   border-collapse: collapse;
-  min-width: 720px;
+  min-width: 860px;
 }
 
 th,
@@ -1095,6 +1095,44 @@ progress::-moz-progress-bar {
   display: none;
 }
 
+.room-compose {
+  display: grid;
+  min-width: min(240px, 100%);
+  gap: 8px;
+}
+
+.room-compose textarea {
+  width: 100%;
+  min-height: 54px;
+  resize: vertical;
+  border: 1px solid rgba(43, 55, 38, 0.14);
+  border-radius: 14px;
+  padding: 10px 11px;
+  color: var(--ink);
+  background: rgba(255, 250, 240, 0.68);
+  font: inherit;
+  line-height: 1.3;
+}
+
+.room-compose textarea:focus-visible {
+  outline: 3px solid rgba(191, 95, 44, 0.22);
+}
+
+.room-compose button {
+  min-height: 38px;
+  border: 0;
+  border-radius: 999px;
+  color: #fffaf0;
+  background: var(--ink);
+  font-weight: 900;
+  cursor: pointer;
+}
+
+.room-compose button:disabled {
+  cursor: not-allowed;
+  opacity: 0.44;
+}
+
 .task-board {
   display: grid;
   gap: 12px;
diff --git a/src/db.ts b/src/db.ts
index d571488..a9566bb 100644
--- a/src/db.ts
+++ b/src/db.ts
@@ -22,6 +22,7 @@ export {
   getOpenWorkItem,
   getOpenWorkItemForChat,
   getRecentChatMessages,
+  hasMessage,
   hasRecentRestartAnnouncement,
   markWorkItemDelivered,
   markWorkItemDeliveryRetry,
diff --git a/src/db/messages.ts b/src/db/messages.ts
index 6a2df5c..d172c02 100644
--- a/src/db/messages.ts
+++ b/src/db/messages.ts
@@ -95,6 +95,17 @@ export function getAllChatsFromDatabase(database: Database): ChatInfo[] {
     .all() as ChatInfo[];
 }
 
+export function hasMessageInDatabase(
+  database: Database,
+  chatJid: string,
+  id: string,
+): boolean {
+  const row = database
+    .prepare('SELECT 1 FROM messages WHERE chat_jid = ? AND id = ? LIMIT 1')
+    .get(chatJid, id);
+  return !!row;
+}
+
 export function storeMessageInDatabase(
   database: Database,
   msg: NewMessage,
diff --git a/src/db/runtime-memory-messages.ts b/src/db/runtime-memory-messages.ts
index fd484ee..1af2edc 100644
--- a/src/db/runtime-memory-messages.ts
+++ b/src/db/runtime-memory-messages.ts
@@ -26,6 +26,7 @@ import {
   getNewMessagesBySeqFromDatabase,
   getNewMessagesFromDatabase,
   getRecentChatMessagesFromDatabase,
+  hasMessageInDatabase,
   hasRecentRestartAnnouncementInDatabase,
   storeChatMetadataInDatabase,
   storeMessageInDatabase,
@@ -141,6 +142,10 @@ export function storeMessage(msg: NewMessage): void {
   storeMessageInDatabase(requireDatabase(), msg);
 }
 
+export function hasMessage(chatJid: string, id: string): boolean {
+  return hasMessageInDatabase(requireDatabase(), chatJid, id);
+}
+
 export function getNewMessages(
   jids: string[],
   lastTimestamp: string,
diff --git a/src/index.ts b/src/index.ts
index a9dde28..4a58593 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -521,7 +521,12 @@ async function main(): Promise<void> {
     },
     purgeOnStart: true,
   });
-  webDashboardServer = startWebDashboardServer(WEB_DASHBOARD);
+  webDashboardServer = startWebDashboardServer({
+    ...WEB_DASHBOARD,
+    getRoomBindings: runtimeState.getRoomBindings,
+    enqueueMessageCheck: (chatJid, groupFolder) =>
+      queue.enqueueMessageCheck(chatJid, resolveGroupIpcPath(groupFolder)),
+  });
 
   leaseRecoveryTimer = setInterval(() => {
     const failover = getGlobalFailoverInfo();
diff --git a/src/web-dashboard-server.test.ts b/src/web-dashboard-server.test.ts
index bfeb2c5..25bb230 100644
--- a/src/web-dashboard-server.test.ts
+++ b/src/web-dashboard-server.test.ts
@@ -5,7 +5,12 @@ import path from 'path';
 import { afterEach, describe, expect, it } from 'vitest';
 
 import type { StatusSnapshot } from './status-dashboard.js';
-import type { PairedTask, ScheduledTask } from './types.js';
+import type {
+  NewMessage,
+  PairedTask,
+  RegisteredGroup,
+  ScheduledTask,
+} from './types.js';
 import { createWebDashboardHandler } from './web-dashboard-server.js';
 
 const tempDirs: string[] = [];
@@ -344,6 +349,263 @@ describe('web dashboard server handler', () => {
     expect(wrongMethod.status).toBe(405);
   });
 
+  it('injects room messages and queues room work from the web dashboard', async () => {
+    const messages: NewMessage[] = [];
+    const metadata: Array<{
+      chatJid: string;
+      timestamp: string;
+      name?: string;
+      channel?: string;
+      isGroup?: boolean;
+    }> = [];
+    const queued: Array<{ chatJid: string; groupFolder: string }> = [];
+    const rooms: Record<string, RegisteredGroup> = {
+      'dc:ops': {
+        name: '#ops',
+        folder: 'ops-room',
+        added_at: '2026-04-26T05:00:00.000Z',
+      },
+    };
+    const handler = createWebDashboardHandler({
+      readStatusSnapshots: () => [],
+      getTasks: () => [],
+      getPairedTasks: () => [],
+      getRoomBindings: () => rooms,
+      storeChatMetadata: (chatJid, timestamp, name, channel, isGroup) => {
+        metadata.push({ chatJid, timestamp, name, channel, isGroup });
+      },
+      storeMessage: (message) => {
+        messages.push(message);
+      },
+      hasMessage: () => false,
+      enqueueMessageCheck: (chatJid, groupFolder) => {
+        queued.push({ chatJid, groupFolder });
+      },
+      now: () => '2026-04-26T05:10:00.000Z',
+    });
+
+    const response = await handler(
+      new Request(
+        `http://localhost/api/rooms/${encodeURIComponent('dc:ops')}/messages`,
+        {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({
+            requestId: 'room-compose-1',
+            text: '  run a dashboard check  ',
+          }),
+        },
+      ),
+    );
+
+    expect(response.status).toBe(200);
+    await expect(response.json()).resolves.toMatchObject({
+      ok: true,
+      queued: true,
+    });
+    expect(metadata).toEqual([
+      {
+        chatJid: 'dc:ops',
+        timestamp: '2026-04-26T05:10:00.000Z',
+        name: '#ops',
+        channel: 'web-dashboard',
+        isGroup: true,
+      },
+    ]);
+    expect(messages).toHaveLength(1);
+    expect(messages[0]).toMatchObject({
+      chat_jid: 'dc:ops',
+      sender: 'web-dashboard',
+      sender_name: 'Web Dashboard',
+      content: 'run a dashboard check',
+      timestamp: '2026-04-26T05:10:00.000Z',
+      is_from_me: false,
+      is_bot_message: false,
+      message_source_kind: 'ipc_injected_human',
+    });
+    expect(messages[0]?.id).toBe('web-room-compose-1');
+    expect(queued).toEqual([{ chatJid: 'dc:ops', groupFolder: 'ops-room' }]);
+  });
+
+  it('deduplicates repeated room message request ids', async () => {
+    const messages: NewMessage[] = [];
+    const queued: Array<{ chatJid: string; groupFolder: string }> = [];
+    const existing = new Set<string>();
+    const handler = createWebDashboardHandler({
+      readStatusSnapshots: () => [],
+      getTasks: () => [],
+      getPairedTasks: () => [],
+      getRoomBindings: () => ({
+        'dc:ops': {
+          name: '#ops',
+          folder: 'ops-room',
+          added_at: '2026-04-26T05:00:00.000Z',
+        },
+      }),
+      storeChatMetadata: () => undefined,
+      storeMessage: (message) => {
+        messages.push(message);
+        existing.add(`${message.chat_jid}:${message.id}`);
+      },
+      hasMessage: (chatJid, id) => existing.has(`${chatJid}:${id}`),
+      enqueueMessageCheck: (chatJid, groupFolder) => {
+        queued.push({ chatJid, groupFolder });
+      },
+    });
+    const request = () =>
+      new Request(
+        `http://localhost/api/rooms/${encodeURIComponent('dc:ops')}/messages`,
+        {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({
+            requestId: 'same-submit',
+            text: 'repeat me',
+          }),
+        },
+      );
+
+    const first = await handler(request());
+    const second = await handler(request());
+
+    expect(first.status).toBe(200);
+    expect(second.status).toBe(200);
+    await expect(first.json()).resolves.toMatchObject({
+      id: 'web-same-submit',
+      queued: true,
+    });
+    await expect(second.json()).resolves.toMatchObject({
+      id: 'web-same-submit',
+      queued: false,
+      duplicate: true,
+    });
+    expect(messages).toHaveLength(1);
+    expect(queued).toHaveLength(1);
+  });
+
+  it('deduplicates existing room message request ids after restart', async () => {
+    const handler = createWebDashboardHandler({
+      readStatusSnapshots: () => [],
+      getTasks: () => [],
+      getPairedTasks: () => [],
+      getRoomBindings: () => ({
+        'dc:ops': {
+          name: '#ops',
+          folder: 'ops-room',
+          added_at: '2026-04-26T05:00:00.000Z',
+        },
+      }),
+      storeChatMetadata: () => {
+        throw new Error('storeChatMetadata should not be called');
+      },
+      storeMessage: () => {
+        throw new Error('storeMessage should not be called');
+      },
+      hasMessage: (chatJid, id) =>
+        chatJid === 'dc:ops' && id === 'web-previous-submit',
+      enqueueMessageCheck: () => {
+        throw new Error('enqueueMessageCheck should not be called');
+      },
+    });
+
+    const response = await handler(
+      new Request(
+        `http://localhost/api/rooms/${encodeURIComponent('dc:ops')}/messages`,
+        {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({
+            requestId: 'previous-submit',
+            text: 'repeat after restart',
+          }),
+        },
+      ),
+    );
+
+    expect(response.status).toBe(200);
+    await expect(response.json()).resolves.toMatchObject({
+      id: 'web-previous-submit',
+      queued: false,
+      duplicate: true,
+    });
+  });
+
+  it('rejects invalid room message requests', async () => {
+    const handler = createWebDashboardHandler({
+      readStatusSnapshots: () => [],
+      getTasks: () => [],
+      getPairedTasks: () => [],
+      getRoomBindings: () => ({
+        'dc:ops': {
+          name: '#ops',
+          folder: 'ops-room',
+          added_at: '2026-04-26T05:00:00.000Z',
+        },
+      }),
+      storeMessage: () => {
+        throw new Error('storeMessage should not be called');
+      },
+      enqueueMessageCheck: () => {
+        throw new Error('enqueueMessageCheck should not be called');
+      },
+    });
+
+    const empty = await handler(
+      new Request(
+        `http://localhost/api/rooms/${encodeURIComponent('dc:ops')}/messages`,
+        {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({ text: '  ' }),
+        },
+      ),
+    );
+    expect(empty.status).toBe(400);
+
+    const missing = await handler(
+      new Request(
+        `http://localhost/api/rooms/${encodeURIComponent('dc:missing')}/messages`,
+        {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({ text: 'hello' }),
+        },
+      ),
+    );
+    expect(missing.status).toBe(404);
+
+    const wrongMethod = await handler(
+      new Request(
+        `http://localhost/api/rooms/${encodeURIComponent('dc:ops')}/messages`,
+        {
+          method: 'GET',
+        },
+      ),
+    );
+    expect(wrongMethod.status).toBe(405);
+  });
+
+  it('returns 503 when room message injection is not wired', async () => {
+    const handler = createWebDashboardHandler({
+      readStatusSnapshots: () => [],
+      getTasks: () => [],
+      getPairedTasks: () => [],
+    });
+
+    const response = await handler(
+      new Request(
+        `http://localhost/api/rooms/${encodeURIComponent('dc:ops')}/messages`,
+        {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify({ text: 'hello' }),
+        },
+      ),
+    );
+
+    expect(response.status).toBe(503);
+  });
+
   it('serves Vite static assets and falls back to index for SPA routes', async () => {
     const staticDir = fs.mkdtempSync(
       path.join(os.tmpdir(), 'ejclaw-dashboard-'),
diff --git a/src/web-dashboard-server.ts b/src/web-dashboard-server.ts
index ba48805..a1f28e6 100644
--- a/src/web-dashboard-server.ts
+++ b/src/web-dashboard-server.ts
@@ -7,6 +7,9 @@ import {
   getAllOpenPairedTasks,
   getAllTasks,
   getTaskById,
+  hasMessage,
+  storeChatMetadata,
+  storeMessage,
   updateTask,
 } from './db.js';
 import { logger } from './logger.js';
@@ -14,13 +17,19 @@ import {
   readStatusSnapshots,
   type StatusSnapshot,
 } from './status-dashboard.js';
-import type { PairedTask, ScheduledTask } from './types.js';
+import type {
+  NewMessage,
+  PairedTask,
+  RegisteredGroup,
+  ScheduledTask,
+} from './types.js';
 import {
   buildWebDashboardOverview,
   sanitizeScheduledTask,
 } from './web-dashboard-data.js';
 
 const DEFAULT_STATUS_MAX_AGE_MS = 10 * 60 * 1000;
+const ROOM_MESSAGE_ID_CACHE_LIMIT = 500;
 
 export interface WebDashboardHandlerOptions {
   staticDir?: string;
@@ -34,6 +43,17 @@ export interface WebDashboardHandlerOptions {
   ) => void;
   deleteTask?: (id: string) => void;
   getPairedTasks?: () => PairedTask[];
+  getRoomBindings?: () => Record<string, RegisteredGroup>;
+  storeChatMetadata?: (
+    chatJid: string,
+    timestamp: string,
+    name?: string,
+    channel?: string,
+    isGroup?: boolean,
+  ) => void;
+  storeMessage?: (message: NewMessage) => void;
+  hasMessage?: (chatJid: string, id: string) => boolean;
+  enqueueMessageCheck?: (chatJid: string, groupFolder: string) => void;
   now?: () => string;
 }
 
@@ -125,6 +145,16 @@ function parseTaskActionPath(pathname: string): string | null {
   }
 }
 
+function parseRoomMessagePath(pathname: string): string | null {
+  const match = pathname.match(/^\/api\/rooms\/([^/]+)\/messages$/);
+  if (!match) return null;
+  try {
+    return decodeURIComponent(match[1]);
+  } catch {
+    return null;
+  }
+}
+
 function isTaskAction(value: unknown): value is TaskAction {
   return value === 'pause' || value === 'resume' || value === 'cancel';
 }
@@ -138,6 +168,42 @@ async function readTaskAction(request: Request): Promise<TaskAction | null> {
   }
 }
 
+function sanitizeRoomMessageRequestId(value: unknown): string | null {
+  if (typeof value !== 'string') return null;
+  const trimmed = value.trim();
+  if (!trimmed) return null;
+  const safe = trimmed.replace(/[^A-Za-z0-9._:-]/g, '-').slice(0, 120);
+  return safe || null;
+}
+
+async function readRoomMessageBody(
+  request: Request,
+): Promise<{ text: string; requestId: string | null } | null> {
+  try {
+    const body = (await request.json()) as {
+      text?: unknown;
+      requestId?: unknown;
+    };
+    if (typeof body.text !== 'string') return null;
+    const text = body.text.trim();
+    if (!text) return null;
+    return {
+      text: text.length > 8000 ? text.slice(0, 8000) : text,
+      requestId: sanitizeRoomMessageRequestId(body.requestId),
+    };
+  } catch {
+    return null;
+  }
+}
+
+function makeWebMessageId(): string {
+  return `web-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+}
+
+function makeWebMessageIdFromRequest(requestId: string | null): string {
+  return requestId ? `web-${requestId}` : makeWebMessageId();
+}
+
 export function createWebDashboardHandler(
   opts: WebDashboardHandlerOptions = {},
 ): (request: Request) => Response | Promise<Response> {
@@ -147,11 +213,30 @@ export function createWebDashboardHandler(
   const mutateTask = opts.updateTask ?? updateTask;
   const removeTask = opts.deleteTask ?? deleteTask;
   const loadPairedTasks = opts.getPairedTasks ?? getAllOpenPairedTasks;
+  const loadRoomBindings = opts.getRoomBindings;
+  const writeChatMetadata = opts.storeChatMetadata ?? storeChatMetadata;
+  const writeMessage = opts.storeMessage ?? storeMessage;
+  const messageExists = opts.hasMessage ?? hasMessage;
+  const enqueueMessageCheck = opts.enqueueMessageCheck;
   const statusMaxAgeMs = opts.statusMaxAgeMs ?? DEFAULT_STATUS_MAX_AGE_MS;
+  const seenRoomMessageIds: string[] = [];
+  const seenRoomMessageIdSet = new Set<string>();
+
+  function rememberRoomMessageId(id: string): boolean {
+    if (seenRoomMessageIdSet.has(id)) return false;
+    seenRoomMessageIdSet.add(id);
+    seenRoomMessageIds.push(id);
+    if (seenRoomMessageIds.length > ROOM_MESSAGE_ID_CACHE_LIMIT) {
+      const oldest = seenRoomMessageIds.shift();
+      if (oldest) seenRoomMessageIdSet.delete(oldest);
+    }
+    return true;
+  }
 
   return async (request: Request): Promise<Response> => {
     const url = new URL(request.url);
     const actionTaskId = parseTaskActionPath(url.pathname);
+    const messageRoomJid = parseRoomMessagePath(url.pathname);
 
     if (actionTaskId) {
       if (request.method !== 'POST') {
@@ -192,6 +277,64 @@ export function createWebDashboardHandler(
       });
     }
 
+    if (messageRoomJid) {
+      if (request.method !== 'POST') {
+        return jsonResponse({ error: 'Method not allowed' }, { status: 405 });
+      }
+
+      if (!loadRoomBindings || !enqueueMessageCheck) {
+        return jsonResponse(
+          { error: 'Room message injection is not configured' },
+          { status: 503 },
+        );
+      }
+
+      const body = await readRoomMessageBody(request);
+      if (!body) {
+        return jsonResponse(
+          { error: 'Message text is required' },
+          { status: 400 },
+        );
+      }
+
+      const binding = loadRoomBindings()[messageRoomJid];
+      if (!binding) {
+        return jsonResponse({ error: 'Room not found' }, { status: 404 });
+      }
+
+      const timestamp = opts.now?.() ?? new Date().toISOString();
+      const id = makeWebMessageIdFromRequest(body.requestId);
+      if (body.requestId && messageExists(messageRoomJid, id)) {
+        return jsonResponse({ ok: true, id, queued: false, duplicate: true });
+      }
+
+      if (!rememberRoomMessageId(`${messageRoomJid}:${id}`)) {
+        return jsonResponse({ ok: true, id, queued: false, duplicate: true });
+      }
+
+      writeChatMetadata(
+        messageRoomJid,
+        timestamp,
+        binding.name,
+        'web-dashboard',
+        true,
+      );
+      writeMessage({
+        id,
+        chat_jid: messageRoomJid,
+        sender: 'web-dashboard',
+        sender_name: 'Web Dashboard',
+        content: body.text,
+        timestamp,
+        is_from_me: false,
+        is_bot_message: false,
+        message_source_kind: 'ipc_injected_human',
+      });
+      enqueueMessageCheck(messageRoomJid, binding.folder);
+
+      return jsonResponse({ ok: true, id, queued: true });
+    }
+
     if (request.method !== 'GET' && request.method !== 'HEAD') {
       return jsonResponse({ error: 'Method not allowed' }, { status: 405 });
     }
@@ -242,6 +385,8 @@ export function startWebDashboardServer(
     host?: string;
     port?: number;
     staticDir?: string;
+    getRoomBindings?: () => Record<string, RegisteredGroup>;
+    enqueueMessageCheck?: (chatJid: string, groupFolder: string) => void;
   } = {},
 ): StartedWebDashboardServer | null {
   const enabled = opts.enabled ?? WEB_DASHBOARD.enabled;
@@ -253,7 +398,11 @@ export function startWebDashboardServer(
   const server = Bun.serve({
     hostname: host,
     port,
-    fetch: createWebDashboardHandler({ staticDir }),
+    fetch: createWebDashboardHandler({
+      staticDir,
+      getRoomBindings: opts.getRoomBindings,
+      enqueueMessageCheck: opts.enqueueMessageCheck,
+    }),
   });
   const url = `http://${host}:${server.port}`;