@automagik/omni 2.260902.1 → 2.260902.2

package/dist/server/index.js

@@ -242901,7 +242901,7 @@ var init_sentry_scrub = __esm(() => {
 var require_package7 = __commonJS((exports, module) => {
   module.exports = {
     name: "@omni/api",
-    version: "2.260902.1",
+    version: "2.260902.2",
     type: "module",
     exports: {
       ".": {
@@ -355872,7 +355872,8 @@ function resolveClientIp(trustedProxyHeaderValue, remoteAddr) {
   if (!raw2)
     return;
   const hops = raw2.split(",").map((hop) => hop.trim()).filter(Boolean);
-  return hops.at(-1);
+  const parsed = clientIpSchema.safeParse(hops.at(-1));
+  return parsed.success ? parsed.data : undefined;
 }
 function createRateLimiter2(config4 = RATE_LIMITS.general, keyPrefix = "ratelimit") {
   return createMiddleware(async (c, next) => {
@@ -355882,6 +355883,12 @@ function createRateLimiter2(config4 = RATE_LIMITS.general, keyPrefix = "ratelimi
     const server = c.env;
     const remoteAddr = server?.remoteAddr ?? server?.requestIP?.(c.req.raw)?.address;
     const normalizedIp = resolveClientIp(trustedProxyIp, remoteAddr);
+    if (trustedProxyIp !== undefined && normalizedIp === undefined && !warnedUnparseableProxyHop) {
+      warnedUnparseableProxyHop = true;
+      log112.warn("TRUSTED_PROXY_HEADER hop is not a bare IP literal; requests share the anonymous rate-limit bucket", {
+        header: trustedProxyHeader
+      });
+    }
     const identifier = apiKey?.id ? `api:${apiKey.id}` : normalizedIp ? `ip:${normalizedIp}` : "anon";
     const key = `${keyPrefix}:${identifier}`;
     const now = Date.now();
@@ -355920,9 +355927,12 @@ function createRateLimiter2(config4 = RATE_LIMITS.general, keyPrefix = "ratelimi
     setRateLimitHeaders();
   });
 }
-var rateLimitStore, cleanupTimer, RATE_LIMITS, rateLimitMiddleware, webhookIngressRateLimitMiddleware;
+var log112, warnedUnparseableProxyHop = false, rateLimitStore, cleanupTimer, RATE_LIMITS, clientIpSchema, rateLimitMiddleware, webhookIngressRateLimitMiddleware;
 var init_rate_limit = __esm(() => {
+  init_src();
   init_factory2();
+  init_zod();
+  log112 = createLogger("api:rate-limit");
   rateLimitStore = new Map;
   cleanupTimer = setInterval(() => {
     const now = Date.now();
@@ -355939,6 +355949,7 @@ var init_rate_limit = __esm(() => {
     instances: { windowMs: 60 * 1000, maxRequests: 30 },
     general: { windowMs: 60 * 1000, maxRequests: 1000 }
   };
+  clientIpSchema = exports_external.string().ip();
   rateLimitMiddleware = createRateLimiter2(RATE_LIMITS.general);
   webhookIngressRateLimitMiddleware = createRateLimiter2(RATE_LIMITS.events, "ratelimit:webhook-ingress");
 });
@@ -356042,22 +356053,22 @@ function createWebhookAuthMiddleware(config4) {
     const token = c.req.header("x-telegram-bot-api-secret-token");
     if (!token) {
       const ip = c.req.header("x-forwarded-for") || c.req.header("x-real-ip") || "unknown";
-      log112.warn("Webhook request missing secret token", { ip });
+      log113.warn("Webhook request missing secret token", { ip });
       return c.json({ error: { code: "UNAUTHORIZED", message: "Missing webhook secret token" } }, 401);
     }
     if (token !== webhookSecret) {
       const ip = c.req.header("x-forwarded-for") || c.req.header("x-real-ip") || "unknown";
-      log112.warn("Webhook request with invalid secret token", { ip });
+      log113.warn("Webhook request with invalid secret token", { ip });
       return c.json({ error: { code: "UNAUTHORIZED", message: "Invalid webhook secret token" } }, 401);
     }
     return next();
   });
 }
-var log112;
+var log113;
 var init_webhook_auth = __esm(() => {
   init_src();
   init_factory2();
-  log112 = createLogger("api:webhook-auth");
+  log113 = createLogger("api:webhook-auth");
 });
 
 // ../api/src/plugin-state.ts
@@ -361760,7 +361771,7 @@ function registerWebhookSchemas(registry4) {
     operationId: "receiveWebhook",
     tags: ["Webhooks"],
     summary: "Receive webhook",
-    description: "Receive webhook from external system. Creates a custom event.",
+    description: "Receive webhook from external system. Creates a custom event. An empty body is accepted as an empty " + "payload; a non-empty body that is not a JSON object (malformed, array, scalar) is rejected.",
     request: {
       params: exports_external.object({ source: exports_external.string().openapi({ description: "Source name" }) }),
       body: { content: { "application/json": { schema: exports_external.record(exports_external.string(), exports_external.unknown()) } } }
@@ -361769,7 +361780,8 @@ function registerWebhookSchemas(registry4) {
       200: {
         description: "Webhook received",
         content: { "application/json": { schema: WebhookReceiveResponseSchema } }
-      }
+      },
+      400: { description: "Body is not a JSON object", content: { "application/json": { schema: ErrorSchema } } }
     }
   });
   registry4.registerPath({
@@ -361778,7 +361790,7 @@ function registerWebhookSchemas(registry4) {
     operationId: "receiveWebhookIngress",
     tags: ["Webhooks"],
     summary: "Public webhook ingress",
-    description: "Auth-exempt receiver for third-party webhook senders. Requires the source to have a signature " + "configuration; the request is verified against it (HMAC over the raw body, or token match) before any " + "event is published. Unknown, disabled, unconfigured, or badly signed requests all return the same 401.",
+    description: "Auth-exempt receiver for third-party webhook senders. Requires the source to have a signature " + "configuration; the request is verified against it (HMAC over the raw body, or token match) before any " + "event is published. Unknown, disabled, unconfigured, or badly signed requests all return the same 401. " + "A non-empty body that is not a JSON object (malformed, array, scalar) is rejected with 400.",
     security: [],
     request: {
       params: exports_external.object({ source: exports_external.string().openapi({ description: "Source name" }) }),
@@ -361789,6 +361801,7 @@ function registerWebhookSchemas(registry4) {
         description: "Webhook received",
         content: { "application/json": { schema: WebhookReceiveResponseSchema } }
       },
+      400: { description: "Body is not a JSON object", content: { "application/json": { schema: ErrorSchema } } },
       401: { description: "Verification failed", content: { "application/json": { schema: ErrorSchema } } }
     }
   });
@@ -363823,7 +363836,7 @@ async function clearAgentSession(services, db2, instanceId, from, chatId, option
   });
   const primaryDelete = await client.deleteSession?.(sessionId);
   const legacyDelete = legacySessionId !== sessionId ? await client.deleteSession?.(legacySessionId) : undefined;
-  log113.info("Agno session delete verified", {
+  log114.info("Agno session delete verified", {
     instanceId,
     sessionId,
     legacySessionId,
@@ -363845,7 +363858,7 @@ async function handleTrashEmojiMessage(services, db2, event) {
     await runTrashEmojiCleanup(services, db2, event);
   });
   if (!result.executed) {
-    log113.debug("Trash emoji event already processed (NATS redelivery skipped)", {
+    log114.debug("Trash emoji event already processed (NATS redelivery skipped)", {
       eventId: event.id,
       instanceId,
       chatId
@@ -363858,11 +363871,11 @@ async function runTrashEmojiCleanup(services, db2, event) {
   if (!instanceId)
     return;
   const tenantId = trustedTenantOf(event);
-  log113.info("Trash emoji detected, clearing session", { instanceId, chatId, from, personId });
+  log114.info("Trash emoji detected, clearing session", { instanceId, chatId, from, personId });
   try {
     const identity = await clearAgentSession(services, db2, instanceId, from, chatId, { personId, rawPayload }, tenantId);
     const { sessionId, legacySessionId, sessionStrategy, source, canonicalSessionId, environment, channelSegment } = identity;
-    log113.info("Session cleared successfully", {
+    log114.info("Session cleared successfully", {
       instanceId,
       sessionId,
       legacySessionId,
@@ -363887,11 +363900,11 @@ async function runTrashEmojiCleanup(services, db2, event) {
           await runTenantWorkDb(db2, tenantId, () => services.chats.update(dbChat.id, {
             settings: { agentPaused: false, agentResumedAt: new Date().toISOString() }
           }));
-          log113.info("Agent resumed after session clear (was paused by handoff)", { instanceId, chatId });
+          log114.info("Agent resumed after session clear (was paused by handoff)", { instanceId, chatId });
         }
       }
     } catch (disarmError) {
-      log113.warn("Failed to disarm follow-up after session clear", {
+      log114.warn("Failed to disarm follow-up after session clear", {
         instanceId,
         chatId,
         error: String(disarmError)
@@ -363899,9 +363912,9 @@ async function runTrashEmojiCleanup(services, db2, event) {
     }
     try {
       await sendMessage(services, db2, instanceId, chatId, "\u2705 Conversa limpa! Sua sess\xE3o com o assistente foi resetada.", tenantId);
-      log113.info("Sent session cleared confirmation", { instanceId, chatId });
+      log114.info("Sent session cleared confirmation", { instanceId, chatId });
     } catch (sendError) {
-      log113.error("Failed to send confirmation message", { instanceId, chatId, error: String(sendError) });
+      log114.error("Failed to send confirmation message", { instanceId, chatId, error: String(sendError) });
     }
   } catch (error3) {
     const errorMessage = error3 instanceof Error ? error3.message : String(error3);
@@ -363912,14 +363925,14 @@ async function runTrashEmojiCleanup(services, db2, event) {
       "Session clearing not supported for"
     ];
     if (skippableErrors.some((e) => errorMessage.includes(e))) {
-      log113.debug("Session clearing skipped", { instanceId, reason: errorMessage });
+      log114.debug("Session clearing skipped", { instanceId, reason: errorMessage });
       return;
     }
-    log113.error("Failed to clear session", { instanceId, chatId, error: errorMessage });
+    log114.error("Failed to clear session", { instanceId, chatId, error: errorMessage });
     try {
       await sendMessage(services, db2, instanceId, chatId, "\u274C Erro ao limpar sess\xE3o. Tente novamente.", tenantId);
     } catch (sendError) {
-      log113.error("Failed to send error message", { instanceId, chatId, error: String(sendError) });
+      log114.error("Failed to send error message", { instanceId, chatId, error: String(sendError) });
     }
   }
 }
@@ -363933,13 +363946,13 @@ async function setupSessionCleaner(eventBus, services, db2) {
       startFrom: "new",
       concurrency: 5
     });
-    log113.info("Session cleaner initialized");
+    log114.info("Session cleaner initialized");
   } catch (error3) {
-    log113.error("Failed to set up session cleaner", { error: String(error3) });
+    log114.error("Failed to set up session cleaner", { error: String(error3) });
     throw error3;
   }
 }
-var log113;
+var log114;
 var init_session_cleaner = __esm(() => {
   init_src();
   init_src5();
@@ -363949,7 +363962,7 @@ var init_session_cleaner = __esm(() => {
   init_worker_tenant_context();
   init_agent_dispatcher();
   init_loader2();
-  log113 = createLogger("session-cleaner");
+  log114 = createLogger("session-cleaner");
 });
 
 // ../api/src/routes/v2/chats.ts
@@ -365324,6 +365337,12 @@ var init_handoffs = __esm(() => {
 });
 
 // ../api/src/lib/whatsapp-business-connection.ts
+function resolveMetaApiVersion(persisted) {
+  const fromEnv = metaGraphApiVersionSchema.safeParse(process.env.META_GRAPH_API_VERSION);
+  if (fromEnv.success)
+    return fromEnv.data;
+  return persisted ?? undefined;
+}
 function applyWhatsAppBusinessConnectionOptions(options, input) {
   if (input.metaAccessToken)
     options.metaAccessToken = input.metaAccessToken;
@@ -365335,7 +365354,7 @@ function applyWhatsAppBusinessConnectionOptions(options, input) {
     options.metaAppId = input.metaAppId;
   if (input.metaBusinessId)
     options.metaBusinessId = input.metaBusinessId;
-  const apiVersion = process.env.META_GRAPH_API_VERSION ?? input.metaApiVersion;
+  const apiVersion = resolveMetaApiVersion(input.metaApiVersion);
   if (apiVersion)
     options.metaApiVersion = apiVersion;
   if (input.metaDisplayPhoneNumber)
@@ -365343,6 +365362,11 @@ function applyWhatsAppBusinessConnectionOptions(options, input) {
   if (input.metaConnectionMethod)
     options.metaConnectionMethod = input.metaConnectionMethod;
 }
+var metaGraphApiVersionSchema;
+var init_whatsapp_business_connection = __esm(() => {
+  init_zod();
+  metaGraphApiVersionSchema = exports_external.string().regex(/^v\d+\.\d+$/);
+});
 
 // ../../node_modules/.bun/qrcode-terminal@0.12.0/node_modules/qrcode-terminal/vendor/QRCode/QRMode.js
 var require_QRMode = __commonJS((exports, module) => {
@@ -366388,12 +366412,12 @@ async function printQrCodeToTerminal(qrCode, instanceId) {
   try {
     const qrTerminalModule = await Promise.resolve().then(() => __toESM(require_main(), 1));
     const qrTerminal = qrTerminalModule.default || qrTerminalModule;
-    log114.info("QR Code generated for WhatsApp", { instanceId });
+    log115.info("QR Code generated for WhatsApp", { instanceId });
     qrTerminal.generate(qrCode, { small: true });
   } catch (error3) {
-    log114.info("QR Code generated", { instanceId, qrCode: `${qrCode.substring(0, 50)}...` });
+    log115.info("QR Code generated", { instanceId, qrCode: `${qrCode.substring(0, 50)}...` });
     if (error3 instanceof Error && process.env.DEBUG) {
-      log114.debug("QR Terminal unavailable", { error: error3.message });
+      log115.debug("QR Terminal unavailable", { error: error3.message });
     }
   }
 }
@@ -366405,13 +366429,13 @@ async function setupQrCodeListener(eventBus) {
       await printQrCodeToTerminal(qrCode, instanceId);
     });
   } catch (error3) {
-    log114.warn("Failed to set up QR code listener", { error: String(error3) });
+    log115.warn("Failed to set up QR code listener", { error: String(error3) });
   }
 }
-var log114, qrCodes;
+var log115, qrCodes;
 var init_qr_store = __esm(() => {
   init_src();
-  log114 = createLogger("api:qr-store");
+  log115 = createLogger("api:qr-store");
   qrCodes = new Map;
 });
 
@@ -366435,29 +366459,29 @@ class AgentReplayService {
       agentId: instances.agentId
     }).from(instances).where(eq(instances.id, instanceId)).limit(1));
     if (!instance4) {
-      log115.warn("Instance not found for replay", { instanceId });
+      log116.warn("Instance not found for replay", { instanceId });
       return;
     }
     if (!instance4.agentId) {
-      log115.debug("Instance has no agent, skipping replay", { instanceId });
+      log116.debug("Instance has no agent, skipping replay", { instanceId });
       await this.updateLastSeenAt(instanceId, undefined, trustedTenantId);
       return;
     }
     if (!instance4.replayEnabled) {
-      log115.debug("Replay disabled for instance", { instanceId });
+      log116.debug("Replay disabled for instance", { instanceId });
       await this.updateLastSeenAt(instanceId, undefined, trustedTenantId);
       return;
     }
     const since = instance4.lastSeenAt ?? null;
     if (!since) {
-      log115.debug("No lastSeenAt recorded, skipping replay (first connect)", { instanceId });
+      log116.debug("No lastSeenAt recorded, skipping replay (first connect)", { instanceId });
       await this.updateLastSeenAt(instanceId, undefined, trustedTenantId);
       return;
     }
-    log115.info("Starting replay on reconnect", { instanceId, since: since.toISOString() });
+    log116.info("Starting replay on reconnect", { instanceId, since: since.toISOString() });
     try {
       const result = await this.replayMissedMessages({ instanceId, since }, trustedTenantId);
-      log115.info("Replay complete", {
+      log116.info("Replay complete", {
         instanceId,
         replayed: result.replayed,
         skipped: result.skipped,
@@ -366465,7 +366489,7 @@ class AgentReplayService {
       });
       await this.updateLastSeenAt(instanceId, result.until, trustedTenantId);
     } catch (error3) {
-      log115.error("Replay failed", { instanceId, error: String(error3) });
+      log116.error("Replay failed", { instanceId, error: String(error3) });
     }
   }
   async replayMissedMessages(options, trustedTenantId) {
@@ -366473,7 +366497,7 @@ class AgentReplayService {
     const now = new Date;
     const cutoff = new Date(now.getTime() - MAX_REPLAY_WINDOW_MS);
     const since = options.since && options.since > cutoff ? options.since : cutoff;
-    log115.debug("Fetching missed messages", { instanceId, since: since.toISOString(), until: now.toISOString() });
+    log116.debug("Fetching missed messages", { instanceId, since: since.toISOString(), until: now.toISOString() });
     let cursorTimestamp = since;
     let cursorId = null;
     let totalReplayed = 0;
@@ -366508,7 +366532,7 @@ class AgentReplayService {
       if (rows.length === 0)
         break;
       if (rows.length === PAGE_SIZE) {
-        log115.warn("Replay page cap hit, fetching next page", {
+        log116.warn("Replay page cap hit, fetching next page", {
           instanceId,
           limit: PAGE_SIZE,
           cursor: cursorTimestamp.toISOString()
@@ -366536,7 +366560,7 @@ class AgentReplayService {
         await this.redispatchMessage(instanceId, row);
         replayed++;
       } catch (error3) {
-        log115.warn("Failed to redispatch message during replay", {
+        log116.warn("Failed to redispatch message during replay", {
           instanceId,
           messageId: row.id,
           error: String(error3)
@@ -366593,14 +366617,14 @@ function mapMessageTypeToContentType(messageType) {
       return "text";
   }
 }
-var log115, MAX_REPLAY_WINDOW_MS;
+var log116, MAX_REPLAY_WINDOW_MS;
 var init_agent_replay = __esm(() => {
   init_src();
   init_src5();
   init_drizzle_orm();
   init_tenant_scope();
   init_worker_tenant_context();
-  log115 = createLogger("agent-replay");
+  log116 = createLogger("agent-replay");
   MAX_REPLAY_WINDOW_MS = 24 * 60 * 60 * 1000;
 });
 
@@ -366803,15 +366827,15 @@ async function connectInstanceWithPlugin(plugin10, instanceId, options) {
 async function triggerCreateConnection(channelRegistry2, channel5, instanceId, options) {
   const plugin10 = getPluginFromRegistry(channelRegistry2, channel5);
   if (!plugin10) {
-    log116.warn("No plugin found for channel", { channel: channel5 });
+    log117.warn("No plugin found for channel", { channel: channel5 });
     return;
   }
   const errorMessage = await connectInstanceWithPlugin(plugin10, instanceId, options);
   if (errorMessage) {
-    log116.error("Failed to connect instance", { instanceId, error: errorMessage });
+    log117.error("Failed to connect instance", { instanceId, error: errorMessage });
     return;
   }
-  log116.info("Triggered connection", { instanceId, channel: channel5 });
+  log117.info("Triggered connection", { instanceId, channel: channel5 });
 }
 function buildTokenPersistUpdates(channel5, body) {
   const updates = {};
@@ -366849,10 +366873,10 @@ async function handleAgentKeyProvisioning(services, instanceId, newAgentId, oldA
         await services.apiKeys.update(existingKey.id, {
           instanceIds: updated.length > 0 ? updated : null
         });
-        log116.info("Removed instance from agent key", { keyName, instanceId });
+        log117.info("Removed instance from agent key", { keyName, instanceId });
       }
     } catch (err2) {
-      log116.error("Failed to remove instance from old agent key", { oldAgentId, instanceId, error: String(err2) });
+      log117.error("Failed to remove instance from old agent key", { oldAgentId, instanceId, error: String(err2) });
     }
   }
   if (newAgentId) {
@@ -366866,7 +366890,7 @@ async function handleAgentKeyProvisioning(services, instanceId, newAgentId, oldA
           await services.apiKeys.update(existingKey.id, {
             instanceIds: [...currentIds, instanceId]
           });
-          log116.info("Added instance to existing agent key", { keyName, instanceId });
+          log117.info("Added instance to existing agent key", { keyName, instanceId });
         }
       } else {
         const agentScopes = Array.isArray(agent3.metadata?.omniScopes) ? agent3.metadata.omniScopes : [...DEFAULT_TURN_SCOPES];
@@ -366877,10 +366901,10 @@ async function handleAgentKeyProvisioning(services, instanceId, newAgentId, oldA
           instanceIds: [instanceId],
           createdBy: "system:auto-provision"
         });
-        log116.info("Created scoped agent key", { keyName, instanceId, keyId: result.key.id });
+        log117.info("Created scoped agent key", { keyName, instanceId, keyId: result.key.id });
       }
     } catch (err2) {
-      log116.error("Failed to provision agent key", { newAgentId, instanceId, error: String(err2) });
+      log117.error("Failed to provision agent key", { newAgentId, instanceId, error: String(err2) });
     }
   }
 }
@@ -367064,7 +367088,7 @@ function getCacheKey(instanceId, guildId) {
 function invalidateGuildCache(instanceId, guildId) {
   guildConfigCache.delete(getCacheKey(instanceId, guildId));
 }
-var log116, instancesRoutes, instanceAccess2, listQuerySchema12, agentReplyFilterSchema, createInstanceSchema, updateInstanceSchema, DEFAULT_AGENT_REPLY_FILTER, SENSITIVE_INSTANCE_FIELDS, pairingCodeSchema, passkeyBase64UrlSchema, passkeyCredentialSchema, connectInstanceSchema, syncRequestSchema, listContactsQuerySchema, listGroupsQuerySchema, checkNumberSchema, updateBioSchema, blockContactSchema, groupParticipantActionSchema, groupSettingSchema, groupParticipantsSchema, groupParticipantsPatchSchema, updateGroupSubjectSchema, updateGroupDescriptionSchema, updateGroupSettingsSchema, patchGroupSchema, resyncSchema, replaySchema, pairingActionSchema, guildConfigOverrideSchema, guildConfigCache, GUILD_CONFIG_TTL, presenceSchema;
+var log117, instancesRoutes, instanceAccess2, listQuerySchema12, agentReplyFilterSchema, createInstanceSchema, updateInstanceSchema, DEFAULT_AGENT_REPLY_FILTER, SENSITIVE_INSTANCE_FIELDS, pairingCodeSchema, passkeyBase64UrlSchema, passkeyCredentialSchema, connectInstanceSchema, syncRequestSchema, listContactsQuerySchema, listGroupsQuerySchema, checkNumberSchema, updateBioSchema, blockContactSchema, groupParticipantActionSchema, groupSettingSchema, groupParticipantsSchema, groupParticipantsPatchSchema, updateGroupSubjectSchema, updateGroupDescriptionSchema, updateGroupSettingsSchema, patchGroupSchema, resyncSchema, replaySchema, pairingActionSchema, guildConfigOverrideSchema, guildConfigCache, GUILD_CONFIG_TTL, presenceSchema;
 var init_instances3 = __esm(() => {
   init_dist6();
   init_src();
@@ -367072,12 +367096,13 @@ var init_instances3 = __esm(() => {
   init_zod();
   init_cache_keys();
   init_scopes();
+  init_whatsapp_business_connection();
   init_auth();
   init_agent_dispatcher();
   init_qr_store();
   init_access();
   init_agent_replay();
-  log116 = createLogger("api:instances");
+  log117 = createLogger("api:instances");
   instancesRoutes = new Hono2;
   instanceAccess2 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   listQuerySchema12 = exports_external.object({
@@ -367289,7 +367314,7 @@ var init_instances3 = __esm(() => {
       agentIdTouched: data.agentId !== undefined
     })) {
       data.agentReplyFilter = DEFAULT_AGENT_REPLY_FILTER;
-      log116.info("Agent assigned without reply filter \u2014 defaulting to mode:all onDm:true (omni#443)", {
+      log117.info("Agent assigned without reply filter \u2014 defaulting to mode:all onDm:true (omni#443)", {
         agentId: data.agentId,
         defaultFilter: DEFAULT_AGENT_REPLY_FILTER
       });
@@ -367351,7 +367376,7 @@ var init_instances3 = __esm(() => {
       agentIdTouched: data.agentId !== undefined
     })) {
       data.agentReplyFilter = DEFAULT_AGENT_REPLY_FILTER;
-      log116.info("Agent assigned without reply filter \u2014 defaulting to mode:all onDm:true (omni#443)", {
+      log117.info("Agent assigned without reply filter \u2014 defaulting to mode:all onDm:true (omni#443)", {
         instanceId: id,
         agentId: data.agentId,
         defaultFilter: DEFAULT_AGENT_REPLY_FILTER
@@ -367377,7 +367402,7 @@ var init_instances3 = __esm(() => {
       try {
         await plugin10.disconnect(id);
       } catch (error3) {
-        log116.error("Failed to disconnect instance before delete", { instanceId: id, error: String(error3) });
+        log117.error("Failed to disconnect instance before delete", { instanceId: id, error: String(error3) });
       }
     }
     await services.instances.delete(id);
@@ -367385,7 +367410,7 @@ var init_instances3 = __esm(() => {
       try {
         await plugin10.logout(id);
       } catch (error3) {
-        log116.error("Failed to clear channel auth after delete", { instanceId: id, error: String(error3) });
+        log117.error("Failed to clear channel auth after delete", { instanceId: id, error: String(error3) });
       }
     }
     return c.json({ success: true });
@@ -367616,7 +367641,7 @@ var init_instances3 = __esm(() => {
         try {
           await plugin10.disconnect(id);
         } catch (error3) {
-          log116.error("Failed to disconnect instance", { instanceId: id, error: String(error3) });
+          log117.error("Failed to disconnect instance", { instanceId: id, error: String(error3) });
         }
       }
     }
@@ -367698,13 +367723,13 @@ var init_instances3 = __esm(() => {
         try {
           await plugin10.logout(id);
         } catch (error3) {
-          log116.error("Failed to logout instance", { instanceId: id, error: String(error3) });
+          log117.error("Failed to logout instance", { instanceId: id, error: String(error3) });
         }
       } else if (plugin10) {
         try {
           await plugin10.disconnect(id);
         } catch (error3) {
-          log116.error("Failed to disconnect instance during logout", { instanceId: id, error: String(error3) });
+          log117.error("Failed to disconnect instance during logout", { instanceId: id, error: String(error3) });
         }
       }
     }
@@ -368730,7 +368755,7 @@ var init_instances3 = __esm(() => {
           ...chatJids?.length ? { chatJids } : {}
         }
       });
-      log116.info("Resync triggered", {
+      log117.info("Resync triggered", {
         instanceId: id,
         jobId: job.id,
         since: sinceDate.toISOString(),
@@ -368748,7 +368773,7 @@ var init_instances3 = __esm(() => {
       });
     } catch (error3) {
       const message2 = error3 instanceof Error ? error3.message : "Unknown error";
-      log116.error("Failed to trigger resync", { instanceId: id, error: message2 });
+      log117.error("Failed to trigger resync", { instanceId: id, error: message2 });
       return c.json({ error: { code: "RESYNC_FAILED", message: message2 } }, 500);
     }
   });
@@ -368777,7 +368802,7 @@ var init_instances3 = __esm(() => {
     const sinceDate = since ? new Date(since) : undefined;
     try {
       const result = await replayService.replayMissedMessages({ instanceId: instance4.id, since: sinceDate });
-      log116.info("Manual replay triggered", {
+      log117.info("Manual replay triggered", {
         instanceId: instance4.id,
         replayed: result.replayed,
         since: result.since.toISOString()
@@ -368793,7 +368818,7 @@ var init_instances3 = __esm(() => {
       });
     } catch (error3) {
       const message2 = error3 instanceof Error ? error3.message : "Unknown error";
-      log116.error("Manual replay failed", { instanceId: id, error: message2 });
+      log117.error("Manual replay failed", { instanceId: id, error: message2 });
       return c.json({ error: { code: "REPLAY_FAILED", message: message2 } }, 500);
     }
   });
@@ -368926,7 +368951,7 @@ var init_instances3 = __esm(() => {
         plugin10.setGuildConfig(id, guildId, newConfig);
       }
     }
-    log116.info("Guild config updated", {
+    log117.info("Guild config updated", {
       instanceId: id,
       guildId,
       apiKeyId: apiKey?.id,
@@ -368955,7 +368980,7 @@ var init_instances3 = __esm(() => {
         plugin10.removeGuildConfig(id, guildId);
       }
     }
-    log116.info("Guild config deleted", {
+    log117.info("Guild config deleted", {
       instanceId: id,
       guildId,
       apiKeyId: apiKey?.id,
@@ -369870,7 +369895,7 @@ function isValidPathComponent(component) {
 function isValidUUID(str2) {
   return /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(str2);
 }
-var log117, mediaRoutes, mediaStorage = null, ttsAudioFormatSchema, ttsRequestSchema, sttRequestSchema, imagineAspectRatioSchema, imagineRequestSchema, visionRequestSchema, filmAspectRatioSchema, imageMimeTypeSchema, imageBase64Schema, filmRequestSchema, FILM_TIMEOUT_MS, FILM_POLL_INTERVAL_MS = 5000, musicRequestSchema;
+var log118, mediaRoutes, mediaStorage = null, ttsAudioFormatSchema, ttsRequestSchema, sttRequestSchema, imagineAspectRatioSchema, imagineRequestSchema, visionRequestSchema, filmAspectRatioSchema, imageMimeTypeSchema, imageBase64Schema, filmRequestSchema, FILM_TIMEOUT_MS, FILM_POLL_INTERVAL_MS = 5000, musicRequestSchema;
 var init_media2 = __esm(() => {
   init_dist6();
   init_src();
@@ -369878,7 +369903,7 @@ var init_media2 = __esm(() => {
   init_zod();
   init_registry3();
   init_media_storage();
-  log117 = createLogger("routes:media");
+  log118 = createLogger("routes:media");
   mediaRoutes = new Hono2;
   ttsAudioFormatSchema = exports_external.enum(["mp3", "ogg", "opus", "wav", "pcm", "flac", "aac"]);
   ttsRequestSchema = exports_external.object({
@@ -369905,7 +369930,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("tts", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("TTS provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("TTS provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -369941,7 +369966,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("TTS synthesis failed", { provider: provider.name, error: message2 });
+      log118.error("TTS synthesis failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "TTS_SYNTHESIS_FAILED",
@@ -369969,7 +369994,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("stt", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("STT provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("STT provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -370013,7 +370038,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("STT transcription failed", { provider: provider.name, error: message2 });
+      log118.error("STT transcription failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "STT_TRANSCRIPTION_FAILED",
@@ -370045,7 +370070,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("imagegen", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("Imagegen provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("Imagegen provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -370083,7 +370108,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("Image generation failed", { provider: provider.name, error: message2 });
+      log118.error("Image generation failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "IMAGE_GEN_FAILED",
@@ -370108,7 +370133,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("vision", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("Vision provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("Vision provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -370147,7 +370172,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("Vision description failed", { provider: provider.name, error: message2 });
+      log118.error("Vision description failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "VISION_DESCRIBE_FAILED",
@@ -370185,7 +370210,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("videogen", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("Videogen provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("Videogen provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -370228,7 +370253,7 @@ var init_media2 = __esm(() => {
       }
       if (operation.state === "failed" || !operation.video) {
         const message2 = operation.error ?? "Video generation failed without error";
-        log117.error("Videogen operation failed", { provider: provider.name, error: message2 });
+        log118.error("Videogen operation failed", { provider: provider.name, error: message2 });
         return c.json({
           error: {
             code: "VIDEO_GEN_FAILED",
@@ -370239,7 +370264,7 @@ var init_media2 = __esm(() => {
         }, 500);
       }
       const video = operation.video;
-      log117.info("Videogen operation complete", {
+      log118.info("Videogen operation complete", {
         provider: provider.name,
         operationId: operation.operationId,
         sizeBytes: video.data.length,
@@ -370258,7 +370283,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("Videogen request failed", { provider: provider.name, error: message2 });
+      log118.error("Videogen request failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "VIDEO_GEN_FAILED",
@@ -370293,7 +370318,7 @@ var init_media2 = __esm(() => {
       provider = await providerRegistry.resolve("musicgen", body.provider);
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.warn("Musicgen provider resolution failed", { provider: body.provider, error: message2 });
+      log118.warn("Musicgen provider resolution failed", { provider: body.provider, error: message2 });
       return c.json({
         error: {
           code: "PROVIDER_NOT_AVAILABLE",
@@ -370332,7 +370357,7 @@ var init_media2 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log117.error("Music generation failed", { provider: provider.name, error: message2 });
+      log118.error("Music generation failed", { provider: provider.name, error: message2 });
       return c.json({
         error: {
           code: "MUSIC_GEN_FAILED",
@@ -370406,7 +370431,7 @@ var init_media2 = __esm(() => {
         }
       });
     } catch (err2) {
-      log117.error("Media backend read failed", { relativePath, error: String(err2) });
+      log118.error("Media backend read failed", { relativePath, error: String(err2) });
       return c.json({ error: { code: "MEDIA_BACKEND_UNAVAILABLE", message: "Media storage backend unavailable, retry later" } }, 503);
     }
   });
@@ -370475,7 +370500,7 @@ async function resolveReactionTarget(services, instanceId, resolvedTo, messageId
         recoverable: false
       });
     }
-    log118.warn("Reaction target chat not found in DB; deferring fromMe to channel plugin fallback (#386)", {
+    log119.warn("Reaction target chat not found in DB; deferring fromMe to channel plugin fallback (#386)", {
       instanceId,
       resolvedTo,
       messageId,
@@ -370485,7 +370510,7 @@ async function resolveReactionTarget(services, instanceId, resolvedTo, messageId
   }
   const target = isUUID(messageId) ? await getReactionTargetByOmniId(services, instanceId, chat2.id, messageId) : await services.messages.getByExternalId(chat2.id, messageId);
   if (!target) {
-    log118.warn("Reaction target message not found in DB; deferring fromMe to channel plugin fallback (#386)", {
+    log119.warn("Reaction target message not found in DB; deferring fromMe to channel plugin fallback (#386)", {
       instanceId,
       chatId: chat2.id,
       messageId,
@@ -370636,7 +370661,7 @@ function resolveSentByAgentId(sentBy, instance4) {
   if (sentBy !== "agent")
     return;
   if (!instance4.agentId) {
-    log118.warn("sentBy=agent could not be attributed: instance has no configured agent", { instanceId: instance4.id });
+    log119.warn("sentBy=agent could not be attributed: instance has no configured agent", { instanceId: instance4.id });
     return;
   }
   return instance4.agentId;
@@ -370745,10 +370770,10 @@ async function resolveChannelMessageId(services, messageId, instanceId) {
     return messageId;
   const message2 = await services.messages.getById(messageId);
   await verifyMessageInstanceOwnership(services, message2, instanceId);
-  log118.debug("Resolved internal UUID to external ID", { messageId, externalId: message2.externalId });
+  log119.debug("Resolved internal UUID to external ID", { messageId, externalId: message2.externalId });
   return message2.externalId;
 }
-var log118, mediaDownloadLog, messagesRoutes, MIME_BY_EXTENSION, DEFAULT_MIME_BY_MEDIA_TYPE, UUID_REGEX2, permalinkQuerySchema, MessageSourceSchema, MessageTypeSchema, MessageStatusSchema, DeliveryStatusSchema, listQuerySchema14, createMessageSchema, updateMessageSchema, recordEditSchema, addReactionSchema, removeReactionSchema, updateDeliveryStatusSchema, sentByField, MentionSchema, sendTextSchema, sendMediaSchema, sendReactionSchema, sendStickerSchema, sendContactSchema, sendLocationSchema, sendHandoffSchema, sendCloseContactSchema, messageRefSchema, _mediaStorageForDownload = null, sendTtsSchema, forwardMessageSchema, sendPresenceSchema, markMessageReadSchema, markBatchReadSchema, sendPollSchema, sendEmbedSchema, editMessageChannelSchema, deleteMessageChannelSchema, starMessageSchema;
+var log119, mediaDownloadLog, messagesRoutes, MIME_BY_EXTENSION, DEFAULT_MIME_BY_MEDIA_TYPE, UUID_REGEX2, permalinkQuerySchema, MessageSourceSchema, MessageTypeSchema, MessageStatusSchema, DeliveryStatusSchema, listQuerySchema14, createMessageSchema, updateMessageSchema, recordEditSchema, addReactionSchema, removeReactionSchema, updateDeliveryStatusSchema, sentByField, MentionSchema, sendTextSchema, sendMediaSchema, sendReactionSchema, sendStickerSchema, sendContactSchema, sendLocationSchema, sendHandoffSchema, sendCloseContactSchema, messageRefSchema, _mediaStorageForDownload = null, sendTtsSchema, forwardMessageSchema, sendPresenceSchema, markMessageReadSchema, markBatchReadSchema, sendPollSchema, sendEmbedSchema, editMessageChannelSchema, deleteMessageChannelSchema, starMessageSchema;
 var init_messages5 = __esm(() => {
   init_dist6();
   init_src2();
@@ -370764,7 +370789,7 @@ var init_messages5 = __esm(() => {
   init_media_storage();
   init_tenant_scope();
   init__close_contact_config();
-  log118 = createLogger("routes:messages");
+  log119 = createLogger("routes:messages");
   mediaDownloadLog = createLogger("routes:messages:media-download");
   messagesRoutes = new Hono2;
   MIME_BY_EXTENSION = {
@@ -371719,7 +371744,7 @@ var init_messages5 = __esm(() => {
         channelHandoffSupported: hasNativeHandoff,
         ...data.motivoHandoff ? { motivoHandoff: data.motivoHandoff } : {}
       }
-    }).catch((err2) => log118.warn("Failed to persist handoff log", { error: String(err2) }));
+    }).catch((err2) => log119.warn("Failed to persist handoff log", { error: String(err2) }));
     return c.json({
       data: {
         messageId: channelSendResult?.messageId ?? null,
@@ -371820,7 +371845,7 @@ var init_messages5 = __esm(() => {
         closedFields: data.closeFields ?? null,
         closedAt: closedAt.toISOString()
       };
-      services.eventBus.publish("chat.closed", payload, { instanceId: data.instanceId }).catch((err2) => log118.debug("Failed to publish chat.closed", { error: String(err2) }));
+      services.eventBus.publish("chat.closed", payload, { instanceId: data.instanceId }).catch((err2) => log119.debug("Failed to publish chat.closed", { error: String(err2) }));
     }
     return c.json({
       data: {
@@ -373550,7 +373575,7 @@ function makeClient(cfg) {
 function variablesToBodyParameters(variables) {
   return Object.entries(variables).map(([k2, v2]) => [Number.parseInt(k2, 10), v2]).filter(([n2]) => Number.isFinite(n2) && n2 >= 1).sort((a, b3) => a[0] - b3[0]).map(([, v2]) => v2);
 }
-var log119, templatesRoutes, instanceAccess3, idParamSchema6, templateIdParamSchema, templateNameParamSchema, listQuerySchema19, createBodySchema, sendTestBodySchema, sendByNameBodySchema;
+var log120, templatesRoutes, instanceAccess3, idParamSchema6, templateIdParamSchema, templateNameParamSchema, listQuerySchema19, createBodySchema, sendTestBodySchema, sendByNameBodySchema;
 var init_templates3 = __esm(() => {
   init_dist6();
   init_src6();
@@ -373561,7 +373586,7 @@ var init_templates3 = __esm(() => {
   init_dist2();
   init_zod();
   init_auth();
-  log119 = createLogger("routes:whatsapp-templates");
+  log120 = createLogger("routes:whatsapp-templates");
   templatesRoutes = new Hono2;
   instanceAccess3 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   idParamSchema6 = exports_external.object({
@@ -373688,7 +373713,7 @@ var init_templates3 = __esm(() => {
       });
       return c.json({ data: persisted.row }, persisted.created ? 201 : 200);
     } catch (dbErr) {
-      log119.error("[whatsapp-business] local template mirror failed after Meta create", {
+      log120.error("[whatsapp-business] local template mirror failed after Meta create", {
         instanceId,
         metaTemplateId: result.id,
         name: body.name,
@@ -374341,7 +374366,7 @@ function readMetaAppEnv() {
   return {
     appId: process.env.META_APP_ID,
     appSecret: process.env.META_APP_SECRET,
-    apiVersion: process.env.META_GRAPH_API_VERSION ?? "v25.0"
+    apiVersion: resolveMetaApiVersion(undefined) ?? "v25.0"
   };
 }
 function ensureWhatsAppBusiness(instance4) {
@@ -374387,7 +374412,7 @@ async function readProfilePhotoUpload(c) {
     fileType: blob.type || "image/jpeg"
   };
 }
-var log120, whatsappBusinessRoutes, instanceAccess4, analyticsQuerySchema2, updateProfileSchema;
+var log121, whatsappBusinessRoutes, instanceAccess4, analyticsQuerySchema2, updateProfileSchema;
 var init_whatsapp_business3 = __esm(() => {
   init_dist6();
   init_src6();
@@ -374396,8 +374421,9 @@ var init_whatsapp_business3 = __esm(() => {
   init_dist2();
   init_zod();
   init_oauth_token_cache();
+  init_whatsapp_business_connection();
   init_auth();
-  log120 = createLogger("api:whatsapp-business");
+  log121 = createLogger("api:whatsapp-business");
   whatsappBusinessRoutes = new Hono2;
   instanceAccess4 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   whatsappBusinessRoutes.use("/:id/whatsapp-business/*", instanceAccess4);
@@ -374423,7 +374449,7 @@ var init_whatsapp_business3 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log120.error("OAuth exchange failed", { error: message2 });
+      log121.error("OAuth exchange failed", { error: message2 });
       return c.json({ error: { code: "OAUTH_EXCHANGE_FAILED", message: message2 } }, 400);
     }
   });
@@ -374483,7 +374509,7 @@ var init_whatsapp_business3 = __esm(() => {
         await services.instances.update(id, { metaDisplayPhoneNumber: displayPhoneNumber });
       }
     } catch (err2) {
-      log120.warn("Failed to fetch phone_number info during connect \u2014 continuing", {
+      log121.warn("Failed to fetch phone_number info during connect \u2014 continuing", {
         instanceId: id,
         error: err2 instanceof Error ? err2.message : String(err2)
       });
@@ -374509,7 +374535,7 @@ var init_whatsapp_business3 = __esm(() => {
       });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log120.error("plugin.connect failed for whatsapp-business", { instanceId: id, error: message2 });
+      log121.error("plugin.connect failed for whatsapp-business", { instanceId: id, error: message2 });
       return c.json({ error: { code: "CONNECT_FAILED", message: message2 } }, 500);
     }
     return c.json({
@@ -374537,7 +374563,7 @@ var init_whatsapp_business3 = __esm(() => {
       return c.json({ ok: true });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log120.error("register phone number failed", { instanceId: id, error: message2 });
+      log121.error("register phone number failed", { instanceId: id, error: message2 });
       return c.json({ error: { code: "REGISTER_FAILED", message: message2 } }, 500);
     }
   });
@@ -374556,7 +374582,7 @@ var init_whatsapp_business3 = __esm(() => {
       return c.json({ subscribed: result.success });
     } catch (err2) {
       const message2 = err2 instanceof Error ? err2.message : "Unknown error";
-      log120.error("subscribe app failed", { instanceId: id, error: message2 });
+      log121.error("subscribe app failed", { instanceId: id, error: message2 });
       return c.json({ error: { code: "SUBSCRIBE_FAILED", message: message2 } }, 500);
     }
   });
@@ -374594,7 +374620,7 @@ var init_whatsapp_business3 = __esm(() => {
       try {
         await plugin10.disconnect(id);
       } catch (err2) {
-        log120.warn("plugin.disconnect failed during connection delete", {
+        log121.warn("plugin.disconnect failed during connection delete", {
           instanceId: id,
           error: err2 instanceof Error ? err2.message : String(err2)
         });
@@ -374807,7 +374833,7 @@ function flowJsonInvalid(issues) {
     issues
   };
 }
-var log121, whatsappFlowsRoutes, instanceAccess5, idParamSchema8, flowIdParamSchema, FlowCategorySchema2, createBodySchema2, updateBodySchema, sendBodySchema;
+var log122, whatsappFlowsRoutes, instanceAccess5, idParamSchema8, flowIdParamSchema, FlowCategorySchema2, createBodySchema2, updateBodySchema, sendBodySchema;
 var init_whatsapp_flows3 = __esm(() => {
   init_dist6();
   init_src6();
@@ -374820,7 +374846,7 @@ var init_whatsapp_flows3 = __esm(() => {
   init_auth();
   init_sealed_credentials();
   init_whatsapp_business3();
-  log121 = createLogger("routes:whatsapp-flows");
+  log122 = createLogger("routes:whatsapp-flows");
   whatsappFlowsRoutes = new Hono2;
   instanceAccess5 = requireInstanceAccess((c) => c.req.param("id") ?? "");
   idParamSchema8 = exports_external.object({
@@ -374931,7 +374957,7 @@ var init_whatsapp_flows3 = __esm(() => {
       }
     });
     const status = await resolved.client.getBusinessPublicKey().catch(() => null);
-    log121.info("flow encryption key registered", { instanceId });
+    log122.info("flow encryption key registered", { instanceId });
     return c.json({
       data: {
         uploaded: true,
@@ -375063,7 +375089,7 @@ var init_whatsapp_flows3 = __esm(() => {
       metadata: { flow: { ...flow, flowToken } }
     });
     if (!result.success) {
-      log121.error("flow send failed", { instanceId, to, error: result.error, errorCode: result.errorCode });
+      log122.error("flow send failed", { instanceId, to, error: result.error, errorCode: result.errorCode });
       return c.json(jsonError2(result.error ?? "Flow send failed", result.errorCode ?? "SEND_FAILED"), 500);
     }
     return c.json({ messageId: result.messageId, flowToken }, 201);
@@ -375972,12 +375998,12 @@ async function setupEventPersistence(eventBus, db2) {
           const tracker = getJourneyTracker();
           tracker.recordCheckpoint(metadata.correlationId, "T4", JOURNEY_STAGES.T4);
         }
-        log122.debug("Persisted message.received", {
+        log123.debug("Persisted message.received", {
           externalId: payload.externalId,
           instanceId: metadata.instanceId
         });
       } catch (error3) {
-        log122.error("Failed to persist message.received", {
+        log123.error("Failed to persist message.received", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -376021,12 +376047,12 @@ async function setupEventPersistence(eventBus, db2) {
           };
           await sdb.insert(omniEvents).values(newEvent).onConflictDoNothing({ target: omniEvents.id });
         });
-        log122.debug("Persisted message.sent", {
+        log123.debug("Persisted message.sent", {
           externalId: payload.externalId,
           instanceId: metadata.instanceId
         });
       } catch (error3) {
-        log122.error("Failed to persist message.sent", {
+        log123.error("Failed to persist message.sent", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -376062,11 +376088,11 @@ async function setupEventPersistence(eventBus, db2) {
             await sdb.insert(omniEvents).values(newEvent).onConflictDoNothing({ target: omniEvents.id });
           }
         });
-        log122.debug("Persisted message.delivered", {
+        log123.debug("Persisted message.delivered", {
           externalId: payload.externalId
         });
       } catch (error3) {
-        log122.error("Failed to persist message.delivered", {
+        log123.error("Failed to persist message.delivered", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -376101,11 +376127,11 @@ async function setupEventPersistence(eventBus, db2) {
             await sdb.insert(omniEvents).values(newEvent).onConflictDoNothing({ target: omniEvents.id });
           }
         });
-        log122.debug("Persisted message.read", {
+        log123.debug("Persisted message.read", {
           externalId: payload.externalId
         });
       } catch (error3) {
-        log122.error("Failed to persist message.read", {
+        log123.error("Failed to persist message.read", {
           externalId: payload.externalId,
           error: String(error3)
         });
@@ -376156,33 +376182,33 @@ async function setupEventPersistence(eventBus, db2) {
           }
           return updated.length;
         });
-        log122.debug("Persisted message.failed", {
+        log123.debug("Persisted message.failed", {
           chatId: payload.chatId,
           externalId: payload.externalId,
           updatedRows,
           error: payload.error
         });
       } catch (error3) {
-        log122.error("Failed to persist message.failed", {
+        log123.error("Failed to persist message.failed", {
           chatId: payload.chatId,
           error: String(error3)
         });
       }
     }, { ...CONSUMER_OPTIONS, durable: "event-persistence-failed" });
-    log122.info("Event persistence initialized - listening for message events");
+    log123.info("Event persistence initialized - listening for message events");
   } catch (error3) {
-    log122.error("Failed to set up event persistence", { error: String(error3) });
+    log123.error("Failed to set up event persistence", { error: String(error3) });
     throw error3;
   }
 }
-var log122, CONSUMER_OPTIONS;
+var log123, CONSUMER_OPTIONS;
 var init_event_persistence = __esm(() => {
   init_src();
   init_src5();
   init_drizzle_orm();
   init_tenant_scope();
   init_worker_tenant_context();
-  log122 = createLogger("event-persistence");
+  log123 = createLogger("event-persistence");
   CONSUMER_OPTIONS = {
     queue: "event-persistence",
     maxRetries: 3,
@@ -376266,27 +376292,27 @@ async function downloadMediaFromUrl(ctx, instanceId, messageId, mediaUrl, mimeTy
   try {
     const result = await ctx.mediaStorage.storeFromUrl(instanceId, messageId, mediaUrl, mimeType, platformTimestamp, fetchOptions, trustedTenantId);
     await runMediaDb(ctx, trustedTenantId, () => ctx.mediaStorage.updateMessageLocalPath(messageId, result.localPath));
-    log123.debug("Downloaded media from URL", { messageId, filePath: result.localPath });
+    log124.debug("Downloaded media from URL", { messageId, filePath: result.localPath });
     return result.localPath;
   } catch (error3) {
-    log123.error("Failed to download media", { error: String(error3), mediaUrl });
+    log124.error("Failed to download media", { error: String(error3), mediaUrl });
     return null;
   }
 }
 async function downloadMediaViaPlugin(ctx, instanceId, messageId, channelType, mediaRef, fallbackMimeType, platformTimestamp, trustedTenantId) {
   const plugin10 = await (ctx.resolveChannelPlugin ?? getPlugin)(channelType);
   if (!plugin10?.downloadInboundMedia) {
-    log123.warn("Channel plugin cannot materialize deferred media", { channelType, messageId });
+    log124.warn("Channel plugin cannot materialize deferred media", { channelType, messageId });
     return null;
   }
   try {
     const { buffer: buffer3, mimeType } = pluginMediaSchema.parse(await plugin10.downloadInboundMedia(instanceId, mediaRef));
     const result = await ctx.mediaStorage.storeFromBuffer(instanceId, messageId, buffer3, mimeType || fallbackMimeType, platformTimestamp, trustedTenantId);
     await runMediaDb(ctx, trustedTenantId, () => ctx.mediaStorage.updateMessageLocalPath(messageId, result.localPath));
-    log123.debug("Downloaded inbound media via plugin", { messageId, channelType, filePath: result.localPath });
+    log124.debug("Downloaded inbound media via plugin", { messageId, channelType, filePath: result.localPath });
     return result.localPath;
   } catch (error3) {
-    log123.error("Failed to download inbound media via plugin", {
+    log124.error("Failed to download inbound media via plugin", {
       error: String(error3),
       channelType,
       messageId
@@ -376304,7 +376330,7 @@ async function resolveMediaPath2(ctx, instanceId, chatId, externalId, content, m
     chat2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.chats.findByExternalIdSmart(instanceId, chatId));
   }
   if (!chat2) {
-    log123.debug("Chat not found, cannot process media", { chatId, externalId });
+    log124.debug("Chat not found, cannot process media", { chatId, externalId });
     return null;
   }
   const chatDbId = chat2.id;
@@ -376314,7 +376340,7 @@ async function resolveMediaPath2(ctx, instanceId, chatId, externalId, content, m
     message2 = await runMediaDb(ctx, trustedTenantId, () => ctx.services.messages.getByExternalId(chatDbId, externalId));
   }
   if (!message2) {
-    log123.debug("Message not found after waiting, cannot process media", { externalId });
+    log124.debug("Message not found after waiting, cannot process media", { externalId });
     return null;
   }
   let filePath = message2.mediaLocalPath;
@@ -376329,7 +376355,7 @@ async function resolveMediaPath2(ctx, instanceId, chatId, externalId, content, m
       return null;
   }
   if (!filePath) {
-    log123.debug("No media file path available", { externalId });
+    log124.debug("No media file path available", { externalId });
     return null;
   }
   return {
@@ -376352,13 +376378,13 @@ async function resolveSafeMediaContentEventId(ctx, envelope2, eventId) {
         return event?.id ?? null;
       });
     } catch (error3) {
-      log123.debug("Failed to validate media_content event FK", { eventId: id, error: String(error3) });
+      log124.debug("Failed to validate media_content event FK", { eventId: id, error: String(error3) });
       return null;
     }
     if (found)
       return found;
     if (Date.now() >= deadline) {
-      log123.debug("Skipping media_content event FK; omni_event not found", { eventId: id });
+      log124.debug("Skipping media_content event FK; omni_event not found", { eventId: id });
       return null;
     }
     await new Promise((resolve4) => setTimeout(resolve4, pollMs));
@@ -376394,7 +376420,7 @@ async function persistProcessingResult(ctx, messageId, safeEventId, result, cont
       await sdb.insert(mediaContent).values(row);
     }
   } catch (error3) {
-    log123.warn("Failed to insert media_content record (non-critical)", {
+    log124.warn("Failed to insert media_content record (non-critical)", {
       messageId,
       error: String(error3)
     });
@@ -376417,14 +376443,14 @@ async function processMessageMedia(ctx, payload, metadata, envelope2) {
   const mimeType = getMimeType2(content);
   const trustedTenantId = envelopeTenantId(envelope2);
   if (!mimeType || !ctx.mediaService.canProcess(mimeType)) {
-    log123.debug("MIME type not processable or missing", { mimeType, externalId });
+    log124.debug("MIME type not processable or missing", { mimeType, externalId });
     return;
   }
   const media = await resolveMediaPath2(ctx, instanceId, payload.chatId, externalId, content, mimeType, metadata.channelType, trustedTenantId);
   if (!media)
     return;
   const processable = await ctx.mediaStorage.materializeForProcessing(media.filePath);
-  log123.info("Processing media", { messageId: media.messageId, mimeType, filePath: processable.path });
+  log124.info("Processing media", { messageId: media.messageId, mimeType, filePath: processable.path });
   let result;
   try {
     result = await ctx.mediaService.process(processable.path, mimeType, {
@@ -376437,7 +376463,7 @@ async function processMessageMedia(ctx, payload, metadata, envelope2) {
   }
   if (!result.success) {
     const reason2 = result.errorMessage ?? "unknown";
-    log123.warn("Media processing failed", { messageId: media.messageId, error: reason2 });
+    log124.warn("Media processing failed", { messageId: media.messageId, error: reason2 });
     const processingType = result.processingType ?? inferProcessingType(content.type);
     const errorColumn = getContentFieldForType(processingType, content.type);
     if (errorColumn) {
@@ -376465,7 +376491,7 @@ async function processMessageMedia(ctx, payload, metadata, envelope2) {
   }
   const safeEventId = await resolveSafeMediaContentEventId(ctx, envelope2, eventId);
   await runConsumerInTenantContext(ctx.db, envelope2, () => persistProcessingResult(ctx, media.messageId, safeEventId, result, content.type));
-  log123.info("Media processing complete", {
+  log124.info("Media processing complete", {
     messageId: media.messageId,
     processingType: result.processingType,
     provider: result.provider,
@@ -376505,7 +376531,7 @@ async function publishMediaCrashEvents(ctx, eventId, payload, metadata, error3,
       error: reason2
     }, meta);
   } catch (publishError) {
-    log123.error("Failed to publish media failure event", { error: String(publishError) });
+    log124.error("Failed to publish media failure event", { error: String(publishError) });
   }
 }
 async function resolveMediaIdForCrash(ctx, instanceId, payload, trustedTenantId) {
@@ -376519,7 +376545,7 @@ async function resolveMediaIdForCrash(ctx, instanceId, payload, trustedTenantId)
     if (msg)
       return msg.id;
   } catch (lookupError) {
-    log123.debug("Failed to resolve DB message UUID for crash handler, falling back to externalId", {
+    log124.debug("Failed to resolve DB message UUID for crash handler, falling back to externalId", {
       error: String(lookupError),
       instanceId,
       chatId: payload.chatId
@@ -376592,7 +376618,7 @@ async function setupMediaProcessor(eventBus, db2, services) {
         channelType: metadata.channelType
       }, event);
     } catch (error3) {
-      log123.error("Failed to process media", {
+      log124.error("Failed to process media", {
         externalId: payload.externalId,
         error: String(error3)
       });
@@ -376607,14 +376633,14 @@ async function setupMediaProcessor(eventBus, db2, services) {
     concurrency: 5
   });
   setGlobalCircuitBreakerStateChangeCallback((name, from, to) => {
-    log123.warn("Circuit breaker state change", { provider: name, from, to });
+    log124.warn("Circuit breaker state change", { provider: name, from, to });
   });
   await eventBus.subscribePattern("media.health.request", async (event) => {
     const tracker = getMediaHealthTracker();
     const report = tracker.getReport();
     const correlationId = event.metadata?.correlationId ?? event.id;
     await eventBus.publishGeneric("system.media.health.response", { correlationId, report }, { source: "media-processor" });
-    log123.debug("Published media health report", {
+    log124.debug("Published media health report", {
       correlationId,
       totalRequests: report.overall.totalRequests,
       successRate: report.overall.successRate
@@ -376623,9 +376649,9 @@ async function setupMediaProcessor(eventBus, db2, services) {
     durable: "media-health-responder",
     queue: "media-health-responder"
   });
-  log123.info("Media processor initialized");
+  log124.info("Media processor initialized");
 }
-var log123, PROCESSABLE_MEDIA_TYPES, pluginMediaSchema;
+var log124, PROCESSABLE_MEDIA_TYPES, pluginMediaSchema;
 var init_media_processor = __esm(() => {
   init_src();
   init_src5();
@@ -376636,7 +376662,7 @@ var init_media_processor = __esm(() => {
   init_tenant_scope();
   init_worker_tenant_context();
   init_loader2();
-  log123 = createLogger("media-processor");
+  log124 = createLogger("media-processor");
   PROCESSABLE_MEDIA_TYPES = new Set(["audio", "image", "document", "video"]);
   pluginMediaSchema = exports_external.object({
     buffer: exports_external.instanceof(Buffer),
@@ -376667,7 +376693,7 @@ function createInflightRevocationMonitor(options) {
       try {
         admissible = await check2(tenantId);
       } catch (error3) {
-        log124.warn("Admissibility check failed \u2014 refusing in-flight work", {
+        log125.warn("Admissibility check failed \u2014 refusing in-flight work", {
           tenantId,
           error: String(error3)
         });
@@ -376681,10 +376707,10 @@ function createInflightRevocationMonitor(options) {
     }
   };
 }
-var log124, INFLIGHT_REVOCATION_CEILING_SECONDS = 30, InflightRevocationError;
+var log125, INFLIGHT_REVOCATION_CEILING_SECONDS = 30, InflightRevocationError;
 var init_inflight_revocation = __esm(() => {
   init_src();
-  log124 = createLogger("inflight-revocation");
+  log125 = createLogger("inflight-revocation");
   InflightRevocationError = class InflightRevocationError extends Error {
     code = "inflight_tenant_revoked";
     constructor(tenantId) {
@@ -376758,7 +376784,7 @@ async function setupSyncWorker(eventBus, services, channelRegistry2, database) {
     await eventBus.subscribe("sync.started", async (event) => {
       const payload = event.payload;
       const { jobId, instanceId, type, config: config4 } = payload;
-      log125.info("Processing sync job", { jobId, instanceId, type });
+      log126.info("Processing sync job", { jobId, instanceId, type });
       const jobTenantId = trustedSyncTenant(event);
       try {
         await services.syncJobs.start(jobId, jobTenantId);
@@ -376786,12 +376812,12 @@ async function setupSyncWorker(eventBus, services, channelRegistry2, database) {
           case "history-push":
             break;
           default:
-            log125.warn("Unknown sync type", { jobId, type });
+            log126.warn("Unknown sync type", { jobId, type });
             await services.syncJobs.fail(jobId, `Unknown sync type: ${type}`, jobTenantId);
         }
       } catch (error3) {
         const errorMessage = error3 instanceof Error ? error3.message : String(error3);
-        log125.error("Sync job failed", { jobId, error: errorMessage });
+        log126.error("Sync job failed", { jobId, error: errorMessage });
         await services.syncJobs.fail(jobId, errorMessage, jobTenantId);
       }
     }, {
@@ -376799,9 +376825,9 @@ async function setupSyncWorker(eventBus, services, channelRegistry2, database) {
       queue: "sync-workers",
       startFrom: "new"
     });
-    log125.info("Sync worker initialized - listening for sync.started events");
+    log126.info("Sync worker initialized - listening for sync.started events");
   } catch (error3) {
-    log125.error("Failed to set up sync worker", { error: String(error3) });
+    log126.error("Failed to set up sync worker", { error: String(error3) });
     throw error3;
   }
 }
@@ -376839,20 +376865,20 @@ async function buildWhatsAppAnchors(database, instanceId) {
       });
     }
   }
-  log125.info("Built WhatsApp anchors", { instanceId, anchorCount: anchors.length });
+  log126.info("Built WhatsApp anchors", { instanceId, anchorCount: anchors.length });
   return anchors;
 }
 function buildAnchorsForExplicitChatJids(jobId, chatJids, dbAnchors) {
-  log125.info("Using explicit chatJids for sync", { jobId, chatJids });
+  log126.info("Using explicit chatJids for sync", { jobId, chatJids });
   const anchors = [];
   for (const jid of chatJids) {
     const dbAnchor = dbAnchors.find((a) => a.chatJid === jid);
     if (dbAnchor) {
-      log125.debug("Found DB anchor for chatJid", { jobId, chatJid: jid, anchorId: dbAnchor.messageKey.id });
+      log126.debug("Found DB anchor for chatJid", { jobId, chatJid: jid, anchorId: dbAnchor.messageKey.id });
       anchors.push(dbAnchor);
       continue;
     }
-    log125.debug("No DB anchor for chatJid, will fetch recent", { jobId, chatJid: jid });
+    log126.debug("No DB anchor for chatJid, will fetch recent", { jobId, chatJid: jid });
     anchors.push({
       chatJid: jid,
       messageKey: { remoteJid: jid, id: "", fromMe: false },
@@ -376878,7 +376904,7 @@ async function discoverAnchorsFromPlugin(jobId, instanceId, plugin10, dbAnchors,
     discovered.push({ chatJid: jid, messageKey: { remoteJid: jid, id: "", fromMe: false }, timestamp: Date.now() });
   }
   if (discovered.length > 0) {
-    log125.info("Discovered chats from DB + Baileys not in anchors", {
+    log126.info("Discovered chats from DB + Baileys not in anchors", {
       jobId,
       discoveredCount: discovered.length,
       fromDb: dbExternalIds.length,
@@ -376904,7 +376930,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
   await revocation.assertAdmissible();
   let inflightRevoked = null;
   if (!("fetchHistory" in plugin10) || typeof plugin10.fetchHistory !== "function") {
-    log125.warn("Plugin does not support fetchHistory", { channelType });
+    log126.warn("Plugin does not support fetchHistory", { channelType });
     await services.syncJobs.complete(jobId, jobTenantId);
     return;
   }
@@ -376913,7 +376939,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
   let fetched = 0;
   let stored = 0;
   let duplicates = 0;
-  log125.info("Starting message sync", {
+  log126.info("Starting message sync", {
     jobId,
     instanceId,
     channelType,
@@ -376923,13 +376949,13 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
   if (channelType === "whatsapp-baileys" && config4.chatJids?.length) {
     const dbAnchors = handle ? await inSyncWorkerScope(envelope2, () => buildWhatsAppAnchors(handle, instanceId)) : [];
     anchors = await resolveWhatsAppAnchors(jobId, instanceId, config4, plugin10, dbAnchors, services, envelope2);
-    log125.info("WhatsApp per-chat active sync", { jobId, anchorCount: anchors.length, chatJids: config4.chatJids });
+    log126.info("WhatsApp per-chat active sync", { jobId, anchorCount: anchors.length, chatJids: config4.chatJids });
   } else if (channelType === "whatsapp-baileys") {
     const dbAnchors = handle ? await inSyncWorkerScope(envelope2, () => buildWhatsAppAnchors(handle, instanceId)) : [];
     const discoveredAnchors = await discoverAnchorsFromPlugin(jobId, instanceId, plugin10, dbAnchors, services, envelope2);
     anchors = [...dbAnchors, ...discoveredAnchors];
     if (anchors.length > 0) {
-      log125.info("WhatsApp default sync with DB+cache discovery", {
+      log126.info("WhatsApp default sync with DB+cache discovery", {
         jobId,
         instanceId,
         dbAnchorCount: dbAnchors.length,
@@ -376937,7 +376963,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
         totalAnchors: anchors.length
       });
     } else {
-      log125.info("WhatsApp passive sync (no prior data)", { jobId, instanceId });
+      log126.info("WhatsApp passive sync (no prior data)", { jobId, instanceId });
     }
   }
   const fetchOptions = {
@@ -377000,7 +377026,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
         else
           stored++;
       } catch (error3) {
-        log125.warn("Failed to store synced message", {
+        log126.warn("Failed to store synced message", {
           externalId: msg.externalId,
           error: String(error3)
         });
@@ -377020,7 +377046,7 @@ async function processMessageSync(jobId, instanceId, channelType, config4, servi
   }, jobTenantId);
   await queueMediaBackfillAfterSync(services, config4, instanceId, jobId, stored, jobTenantId);
   await services.syncJobs.complete(jobId, jobTenantId);
-  log125.info("Message sync completed", {
+  log126.info("Message sync completed", {
     jobId,
     fetched,
     stored,
@@ -377042,9 +377068,9 @@ async function queueMediaBackfillAfterSync(services, config4, instanceId, jobId,
       delayMaxMs: config4.delayMaxMs ?? 3000
     };
     const batch = await services.batchJobs.create(params, trustedTenantId);
-    log125.info("Queued media backfill batch after message sync", { jobId, batchJobId: batch.id, stored });
+    log126.info("Queued media backfill batch after message sync", { jobId, batchJobId: batch.id, stored });
   } catch (error3) {
-    log125.warn("Failed to queue media backfill batch after message sync", { jobId, error: String(error3) });
+    log126.warn("Failed to queue media backfill batch after message sync", { jobId, error: String(error3) });
   }
 }
 function mapContentType3(contentType) {
@@ -377093,14 +377119,14 @@ async function processContactsSync(jobId, instanceId, channelType, config4, serv
   await revocation.assertAdmissible();
   let inflightRevoked = null;
   if (!("fetchContacts" in plugin10) || typeof plugin10.fetchContacts !== "function") {
-    log125.warn("Plugin does not support fetchContacts", { channelType });
+    log126.warn("Plugin does not support fetchContacts", { channelType });
     await services.syncJobs.complete(jobId, jobTenantId);
     return;
   }
   let fetched = 0;
   let stored = 0;
   let linked = 0;
-  log125.info("Starting contacts sync", {
+  log126.info("Starting contacts sync", {
     jobId,
     instanceId,
     channelType
@@ -377150,7 +377176,7 @@ async function processContactsSync(jobId, instanceId, channelType, config4, serv
           await updateDmChatName(services, instanceId, c.platformUserId, c.name, envelope2);
         }
       } catch (error3) {
-        log125.warn("Failed to store synced contact", {
+        log126.warn("Failed to store synced contact", {
           platformUserId: c.platformUserId,
           error: String(error3)
         });
@@ -377169,7 +377195,7 @@ async function processContactsSync(jobId, instanceId, channelType, config4, serv
     duplicates: 0
   }, jobTenantId);
   await services.syncJobs.complete(jobId, jobTenantId);
-  log125.info("Contacts sync completed", {
+  log126.info("Contacts sync completed", {
     jobId,
     fetched,
     stored,
@@ -377221,7 +377247,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
   let inflightRevoked = null;
   const fetchMethod = channelType === "discord" ? "fetchGuilds" : "fetchGroups";
   if (!(fetchMethod in plugin10) || typeof plugin10[fetchMethod] !== "function") {
-    log125.warn(`Plugin does not support ${fetchMethod}`, { channelType });
+    log126.warn(`Plugin does not support ${fetchMethod}`, { channelType });
     await services.syncJobs.complete(jobId, jobTenantId);
     return;
   }
@@ -377232,7 +377258,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
   let fetched = 0;
   let stored = 0;
   let updated = 0;
-  log125.info("Starting groups sync", {
+  log126.info("Starting groups sync", {
     jobId,
     instanceId,
     channelType
@@ -377266,7 +377292,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
         else
           stored++;
       } catch (error3) {
-        log125.warn("Failed to store synced group", {
+        log126.warn("Failed to store synced group", {
           externalId: g2.externalId,
           error: String(error3)
         });
@@ -377313,7 +377339,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
         else
           stored++;
       } catch (error3) {
-        log125.warn("Failed to store synced guild", {
+        log126.warn("Failed to store synced guild", {
           externalId: g2.externalId,
           error: String(error3)
         });
@@ -377330,7 +377356,7 @@ async function processGroupsSync(jobId, instanceId, channelType, _config, servic
     duplicates: updated
   }, jobTenantId);
   await services.syncJobs.complete(jobId, jobTenantId);
-  log125.info("Groups sync completed", {
+  log126.info("Groups sync completed", {
     jobId,
     fetched,
     stored,
@@ -377454,7 +377480,7 @@ async function setupHistoryPushTracker(eventBus, services) {
     throw error3;
   }
 }
-var log125, RATE_LIMITS2, db2 = null, historyPushLog;
+var log126, RATE_LIMITS2, db2 = null, historyPushLog;
 var init_sync_worker = __esm(() => {
   init_src();
   init_src5();
@@ -377463,7 +377489,7 @@ var init_sync_worker = __esm(() => {
   init_periodic_tenant_work();
   init_tenant_scope();
   init_worker_tenant_context();
-  log125 = createLogger("sync-worker");
+  log126 = createLogger("sync-worker");
   RATE_LIMITS2 = {
     "whatsapp-baileys": 30,
     discord: 50,
@@ -377485,7 +377511,7 @@ async function resolveChatId2(services, db3, tenantId, instanceId, externalId) {
     const chat2 = await runTenantWorkDb(db3, tenantId, () => services.chats.findByExternalIdSmart(instanceId, externalId));
     return chat2?.id ?? null;
   } catch (err2) {
-    log126.warn("follow-up-hooks: failed to resolve chatId", { instanceId, externalId, error: String(err2) });
+    log127.warn("follow-up-hooks: failed to resolve chatId", { instanceId, externalId, error: String(err2) });
     return null;
   }
 }
@@ -377596,16 +377622,16 @@ async function setupFollowUpHooks(eventBus, services, db3) {
       retryDelayMs: 500,
       startFrom: "new"
     });
-    log126.info("Follow-up hooks active (message.sent/received, chat.handoff_activated, chat.archived, chat.closed)");
+    log127.info("Follow-up hooks active (message.sent/received, chat.handoff_activated, chat.archived, chat.closed)");
   } catch (error3) {
-    log126.error("Failed to set up follow-up hooks", { error: String(error3) });
+    log127.error("Failed to set up follow-up hooks", { error: String(error3) });
   }
 }
-var log126;
+var log127;
 var init_follow_up_hooks = __esm(() => {
   init_src();
   init_worker_tenant_context();
-  log126 = createLogger("follow-up-hooks");
+  log127 = createLogger("follow-up-hooks");
 });
 
 // ../api/src/plugins/instance-monitor.ts
@@ -378046,6 +378072,7 @@ var logger7, DEFAULT_CONFIG3, STALE_TRANSITION_MAX_AGE_MS;
 var init_instance_monitor = __esm(() => {
   init_src5();
   init_drizzle_orm();
+  init_whatsapp_business_connection();
   init_instance_owner_registry();
   init_periodic_tenant_work();
   init_tenant_scope();
@@ -378090,7 +378117,7 @@ async function resolveCallAgentChatIds(services, db3, ctx, trustedTenantId) {
       senderId: ctx.senderId === ctx.chatId ? chat2.externalId : ctx.senderId
     };
   } catch {
-    log127.warn("call_agent: chat UUID not resolvable, using raw value (session may diverge)", {
+    log128.warn("call_agent: chat UUID not resolvable, using raw value (session may diverge)", {
       chatId: ctx.chatId,
       instanceId: ctx.instanceId
     });
@@ -378177,7 +378204,7 @@ function buildAutomationEngineDeps(services, db3, options = {}) {
     releaseIdleTimeoutClaim: (claimToken) => releaseIdleTimeoutClaim(claimToken)
   };
 }
-var log127, UUID_RE3;
+var log128, UUID_RE3;
 var init_automation_actions = __esm(() => {
   init_src();
   init_src5();
@@ -378186,7 +378213,7 @@ var init_automation_actions = __esm(() => {
   init_tenant_scope();
   init_worker_tenant_context();
   init_loader2();
-  log127 = createLogger("automation-actions");
+  log128 = createLogger("automation-actions");
   UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 });
 
@@ -378209,7 +378236,7 @@ async function createDailySyncJobs(services, type) {
       });
       jobsCreated++;
     } catch (err2) {
-      log128.warn(`Failed to create ${type} sync job for instance`, {
+      log129.warn(`Failed to create ${type} sync job for instance`, {
         instanceId: instance4.id,
         error: String(err2)
       });
@@ -378268,7 +378295,7 @@ function setupScheduler(services, channelRegistry2) {
           recordScheduledJob("dead-letter-auto-retry", "success", durationSec);
           const pendingCount = await services.deadLetters.getPendingCount();
           deadLettersPending.set(pendingCount);
-          log128.info("Dead letter auto-retry completed", result);
+          log129.info("Dead letter auto-retry completed", result);
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("dead-letter-auto-retry", "failure", durationSec);
@@ -378290,7 +378317,7 @@ function setupScheduler(services, channelRegistry2) {
           recordScheduledJob("payload-cleanup", "success", durationSec);
           const stats = await services.payloadStore.getStats();
           payloadStorageSize.set(stats.totalSizeCompressed);
-          log128.info("Payload cleanup completed", { deleted });
+          log129.info("Payload cleanup completed", { deleted });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("payload-cleanup", "failure", durationSec);
@@ -378310,7 +378337,7 @@ function setupScheduler(services, channelRegistry2) {
           const deleted = await services.deadLetters.cleanupExpired();
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("dead-letter-cleanup", "success", durationSec);
-          log128.info("Dead letter cleanup completed", { deleted });
+          log129.info("Dead letter cleanup completed", { deleted });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("dead-letter-cleanup", "failure", durationSec);
@@ -378330,7 +378357,7 @@ function setupScheduler(services, channelRegistry2) {
           const jobsCreated = await createDailySyncJobs(services, "contacts");
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("contacts-sync-daily", "success", durationSec);
-          log128.info("Daily contacts sync jobs created", { jobsCreated });
+          log129.info("Daily contacts sync jobs created", { jobsCreated });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("contacts-sync-daily", "failure", durationSec);
@@ -378350,7 +378377,7 @@ function setupScheduler(services, channelRegistry2) {
           const jobsCreated = await createDailySyncJobs(services, "groups");
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("groups-sync-daily", "success", durationSec);
-          log128.info("Daily groups sync jobs created", { jobsCreated });
+          log129.info("Daily groups sync jobs created", { jobsCreated });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("groups-sync-daily", "failure", durationSec);
@@ -378371,7 +378398,7 @@ function setupScheduler(services, channelRegistry2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("follow-up-sweeper", "success", durationSec);
           if (stats.scanned > 0) {
-            log128.debug("Follow-up sweep tick", stats);
+            log129.debug("Follow-up sweep tick", stats);
           }
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
@@ -378394,7 +378421,7 @@ function setupScheduler(services, channelRegistry2) {
             const stats = await scheduledMessages2.sweep();
             recordScheduledJob("scheduled-message-sweeper", "success", (Date.now() - startTime3) / 1000);
             if (stats.scanned > 0) {
-              log128.debug("Scheduled-message sweep tick", { ...stats });
+              log129.debug("Scheduled-message sweep tick", { ...stats });
             }
           } catch (err2) {
             recordScheduledJob("scheduled-message-sweeper", "failure", (Date.now() - startTime3) / 1000);
@@ -378417,7 +378444,7 @@ function setupScheduler(services, channelRegistry2) {
           const instanceCount = await refreshUnreadCounts(services, channelRegistry2);
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("unread-count-refresh", "success", durationSec);
-          log128.debug("Refreshed unread counts", { instanceCount });
+          log129.debug("Refreshed unread counts", { instanceCount });
         } catch (err2) {
           const durationSec = (Date.now() - startTime3) / 1000;
           recordScheduledJob("unread-count-refresh", "failure", durationSec);
@@ -378428,7 +378455,7 @@ function setupScheduler(services, channelRegistry2) {
   });
   updateSchedulerMetrics();
   scheduler.start();
-  log128.info("Scheduler started", {
+  log129.info("Scheduler started", {
     jobs: scheduler.listJobs().map((j2) => ({
       name: j2.name,
       cron: j2.cron,
@@ -378448,16 +378475,16 @@ function updateSchedulerMetrics() {
 function stopScheduler() {
   const scheduler = getScheduler();
   scheduler.stop();
-  log128.info("Scheduler stopped");
+  log129.info("Scheduler stopped");
 }
-var log128;
+var log129;
 var init_scheduler2 = __esm(() => {
   init_src();
   init_esm5();
   init_sentry_scrub();
   init_scheduled_messages();
   init_periodic_tenant_work();
-  log128 = createLogger("scheduler:setup");
+  log129 = createLogger("scheduler:setup");
 });
 
 // ../api/src/services/agent-heartbeat.ts
@@ -378469,11 +378496,11 @@ class AgentHeartbeatConsumer {
       return;
     const { natsConnection, turnService, db: db3 } = options;
     if (natsConnection.isClosed()) {
-      log129.warn("Cannot start agent-heartbeat: NATS connection is closed");
+      log130.warn("Cannot start agent-heartbeat: NATS connection is closed");
       return;
     }
     this.subscription = natsConnection.subscribe(HEARTBEAT_SUBJECT);
-    log129.info("Agent heartbeat consumer started", { subject: HEARTBEAT_SUBJECT });
+    log130.info("Agent heartbeat consumer started", { subject: HEARTBEAT_SUBJECT });
     const sub = this.subscription;
     this.loop = (async () => {
       for await (const msg of sub) {
@@ -378481,25 +378508,25 @@ class AgentHeartbeatConsumer {
           const raw2 = sc3.decode(msg.data);
           const parsed = parseHeartbeat(raw2);
           if (!parsed) {
-            log129.warn("Discarded malformed agent heartbeat", {
+            log130.warn("Discarded malformed agent heartbeat", {
               subject: msg.subject,
               raw: raw2.slice(0, 200)
             });
             continue;
           }
           runDetachedFromTenantScope(async () => recordHeartbeatActivity(turnService, db3, parsed)).catch((error3) => {
-            log129.warn("recordActivity failed for heartbeat (turn likely closed)", {
+            log130.warn("recordActivity failed for heartbeat (turn likely closed)", {
               turnId: parsed.turnId,
               error: error3 instanceof Error ? error3.message : String(error3)
             });
           });
-          log129.debug("Agent heartbeat applied", {
+          log130.debug("Agent heartbeat applied", {
             turnId: parsed.turnId,
             instanceId: parsed.instanceId,
             chatId: parsed.chatId
           });
         } catch (error3) {
-          log129.warn("Failed to process agent heartbeat", {
+          log130.warn("Failed to process agent heartbeat", {
             subject: msg.subject,
             error: error3 instanceof Error ? error3.message : String(error3)
           });
@@ -378516,7 +378543,7 @@ class AgentHeartbeatConsumer {
       await this.loop;
     } catch {} finally {
       this.loop = null;
-      log129.info("Agent heartbeat consumer stopped");
+      log130.info("Agent heartbeat consumer stopped");
     }
   }
 }
@@ -378558,14 +378585,14 @@ async function closeAgentHeartbeat() {
   await consumer.stop();
   consumer = null;
 }
-var import_nats6, log129, sc3, HEARTBEAT_SUBJECT = "omni.agent.heartbeat.>", consumer = null;
+var import_nats6, log130, sc3, HEARTBEAT_SUBJECT = "omni.agent.heartbeat.>", consumer = null;
 var init_agent_heartbeat = __esm(() => {
   init_src();
   init_instance_owner_registry();
   init_tenant_scope();
   init_worker_tenant_context();
   import_nats6 = __toESM(require_mod4(), 1);
-  log129 = createLogger("agent-heartbeat");
+  log130 = createLogger("agent-heartbeat");
   sc3 = import_nats6.StringCodec();
 });
 
@@ -378580,7 +378607,7 @@ class TurnMonitor {
   start() {
     if (this.intervalId)
       return;
-    log130.info("Turn monitor started", {
+    log131.info("Turn monitor started", {
       pollIntervalMs: POLL_INTERVAL_MS2,
       nudgeMs: NUDGE_THRESHOLD_MS,
       defaultStalledMs: DEFAULT_STALLED_THRESHOLD_MS,
@@ -378592,7 +378619,7 @@ class TurnMonitor {
     if (this.intervalId) {
       clearInterval(this.intervalId);
       this.intervalId = null;
-      log130.info("Turn monitor stopped");
+      log131.info("Turn monitor stopped");
     }
   }
   async tick() {
@@ -378616,7 +378643,7 @@ class TurnMonitor {
         env: this.deps.env
       }, (turn, tenantId) => this.processTurn(turn, tenantId));
     } catch (error3) {
-      log130.error("Turn monitor tick failed", { error: String(error3) });
+      log131.error("Turn monitor tick failed", { error: String(error3) });
     } finally {
       this.running = false;
     }
@@ -378647,13 +378674,13 @@ class TurnMonitor {
       idleSec,
       message: `Turn idle for ${idleSec}s. Are you still working?`
     });
-    log130.info("Turn nudge emitted", { turnId, nudgeCount, idleSec });
+    log131.info("Turn nudge emitted", { turnId, nudgeCount, idleSec });
   }
   async handleStalled(turnId, instanceId, chatId, stalledAtMs, threshold, tenantId) {
     await runTenantWorkDb(this.deps.db, tenantId, () => this.deps.turnService.incrementNudge(turnId));
     const payload = { turnId, instanceId, chatId, stalledAtMs, threshold };
     publishTurnStalled(instanceId, chatId, payload);
-    log130.warn("Turn stalled \u2014 internal event emitted (no channel message sent)", payload);
+    log131.warn("Turn stalled \u2014 internal event emitted (no channel message sent)", payload);
   }
   async handleTimeout(turnId, instanceId, chatId, idleSec, nudgeCount, tenantId) {
     const closed = await runTenantWorkDb(this.deps.db, tenantId, () => this.deps.turnService.close(turnId, {
@@ -378676,16 +378703,16 @@ class TurnMonitor {
       nudgeCount,
       messagesSent: closed.messagesSent
     });
-    log130.info("Turn force-closed (timeout)", { turnId, duration, nudgeCount });
+    log131.info("Turn force-closed (timeout)", { turnId, duration, nudgeCount });
   }
 }
-var log130, NUDGE_THRESHOLD_MS = 120000, DEFAULT_STALLED_THRESHOLD_MS = 600000, TIMEOUT_THRESHOLD_MS = 1800000, POLL_INTERVAL_MS2 = 1e4;
+var log131, NUDGE_THRESHOLD_MS = 120000, DEFAULT_STALLED_THRESHOLD_MS = 600000, TIMEOUT_THRESHOLD_MS = 1800000, POLL_INTERVAL_MS2 = 1e4;
 var init_turn_monitor = __esm(() => {
   init_src();
   init_periodic_tenant_work();
   init_worker_tenant_context();
   init_turn_events();
-  log130 = createLogger("turn-monitor");
+  log131 = createLogger("turn-monitor");
 });
 
 // ../api/src/tenancy/enforcement-posture.ts
@@ -378765,7 +378792,7 @@ class TenantStreamRegistry {
       try {
         binding.close(reason2);
       } catch (err2) {
-        log131.warn("stream termination failed", {
+        log132.warn("stream termination failed", {
           tenantId,
           reason: reason2,
           error: err2 instanceof Error ? err2.message : String(err2)
@@ -378787,7 +378814,7 @@ async function sweepRevokedStreamSubscriptions(authPlaneDb, registry5, env2 = pr
     try {
       state = await readState(authPlaneDb, tenantId);
     } catch (err2) {
-      log131.warn("stream revocation read failed; terminating fail-closed", {
+      log132.warn("stream revocation read failed; terminating fail-closed", {
         tenantId,
         error: err2 instanceof Error ? err2.message : String(err2)
       });
@@ -378812,7 +378839,7 @@ function terminateSupersededEpochs(registry5, tenantId, currentEpoch) {
     try {
       binding.close("tenant_revoked");
     } catch (err2) {
-      log131.warn("stream termination failed", {
+      log132.warn("stream termination failed", {
         tenantId,
         error: err2 instanceof Error ? err2.message : String(err2)
       });
@@ -378828,17 +378855,17 @@ function startStreamRevocationSweeper(authPlaneDb, registry5, env2 = process.env
   const timer2 = setInterval(() => {
     sweepRevokedStreamSubscriptions(authPlaneDb, registry5, env2).then((stats) => {
       if (stats.terminated > 0) {
-        log131.info("terminated revoked stream subscriptions", {
+        log132.info("terminated revoked stream subscriptions", {
           terminated: stats.terminated,
           tenantsChecked: stats.tenantsChecked
         });
       }
-    }, (err2) => log131.warn("stream revocation sweep failed", { error: err2 instanceof Error ? err2.message : String(err2) }));
+    }, (err2) => log132.warn("stream revocation sweep failed", { error: err2 instanceof Error ? err2.message : String(err2) }));
   }, resolveStreamSweepIntervalMs());
   timer2.unref?.();
   return { stop: () => clearInterval(timer2) };
 }
-var log131, UUID7, STREAM_TERMINATION_CEILING_SECONDS = 30, readTenantRevocationState = async (authPlaneDb, tenantId) => {
+var log132, UUID7, STREAM_TERMINATION_CEILING_SECONDS = 30, readTenantRevocationState = async (authPlaneDb, tenantId) => {
   const [row] = await authPlaneDb.select({ status: tenants.status, revocationEpoch: tenants.revocationEpoch }).from(tenants).where(eq(tenants.id, tenantId)).limit(1);
   return row ?? null;
 };
@@ -378846,7 +378873,7 @@ var init_tenant_stream_subscriptions = __esm(() => {
   init_src();
   init_src5();
   init_drizzle_orm();
-  log131 = createLogger("tenant-stream-subscriptions");
+  log132 = createLogger("tenant-stream-subscriptions");
   UUID7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 });
 
@@ -378921,12 +378948,12 @@ function printStartupBanner(options) {
     process.stdout.write(`${line3}
 `);
   }
-  log132.info("Server ready", { host, port, version: version3 });
+  log133.info("Server ready", { host, port, version: version3 });
 }
-var log132, COLORS2, BOX, ANSI_ESCAPE_PATTERN;
+var log133, COLORS2, BOX, ANSI_ESCAPE_PATTERN;
 var init_startup_banner = __esm(() => {
   init_src();
-  log132 = createLogger("api:startup");
+  log133 = createLogger("api:startup");
   COLORS2 = {
     reset: "\x1B[0m",
     dim: "\x1B[2m",
@@ -379029,7 +379056,7 @@ class VoiceStreamRegistry {
         }
       }
     });
-    log133.info("Voice WS client connected", {
+    log134.info("Voice WS client connected", {
       sessionId: client.params.sessionId,
       format: client.params.format,
       filterUser: client.params.filterUserId ?? "all"
@@ -379118,12 +379145,12 @@ async function authorizeVoiceApiKey(validate, apiKey) {
     return false;
   }
 }
-var log133, opusCodec = null;
+var log134, opusCodec = null;
 var init_voice3 = __esm(() => {
   init_src();
   init_src3();
   init_tenant_stream_subscriptions();
-  log133 = createLogger("ws:voice");
+  log134 = createLogger("ws:voice");
 });
 
 // ../api/src/ws/voice-upgrade-authorization.ts
@@ -379449,65 +379476,65 @@ function setupShutdownHandlers(server, earlyShutdown) {
 }
 async function setupEventBusServices(eventBus, services, db3) {
   if (!eventBus) {
-    log134.warn("Skipping event bus services (no event bus)");
+    log135.warn("Skipping event bus services (no event bus)");
     return;
   }
   try {
     await setupMessagePersistence(eventBus, services);
   } catch (error3) {
-    log134.error("Failed to set up message persistence", { error: String(error3) });
+    log135.error("Failed to set up message persistence", { error: String(error3) });
   }
   try {
     await setupMediaProcessor(eventBus, db3, services);
   } catch (error3) {
-    log134.error("Failed to set up media processor", { error: String(error3) });
+    log135.error("Failed to set up media processor", { error: String(error3) });
   }
   try {
     globalDispatcherCleanup = await setupAgentResponder(eventBus, services, db3);
   } catch (error3) {
-    log134.error("Failed to set up agent dispatcher", { error: String(error3) });
+    log135.error("Failed to set up agent dispatcher", { error: String(error3) });
   }
   try {
     await services.automations.startEngine(buildAutomationEngineDeps(services, db3));
   } catch (error3) {
-    log134.error("Failed to start automation engine", { error: String(error3) });
+    log135.error("Failed to start automation engine", { error: String(error3) });
   }
   try {
     await setupSessionCleaner(eventBus, services, db3);
   } catch (error3) {
-    log134.error("Failed to set up session cleaner", { error: String(error3) });
+    log135.error("Failed to set up session cleaner", { error: String(error3) });
   }
   try {
     await setupFollowUpHooks(eventBus, services, db3);
   } catch (error3) {
-    log134.error("Failed to set up follow-up hooks", { error: String(error3) });
+    log135.error("Failed to set up follow-up hooks", { error: String(error3) });
   }
   if (globalChannelRegistry) {
     try {
       await setupSyncWorker(eventBus, services, globalChannelRegistry, db3);
     } catch (error3) {
-      log134.error("Failed to set up sync worker", { error: String(error3) });
+      log135.error("Failed to set up sync worker", { error: String(error3) });
     }
   }
   try {
     await setupHistoryPushTracker(eventBus, services);
   } catch (error3) {
-    log134.error("Failed to set up history-push tracker", { error: String(error3) });
+    log135.error("Failed to set up history-push tracker", { error: String(error3) });
   }
   try {
     await initTurnEvents(NATS_URL);
   } catch (error3) {
-    log134.error("Failed to initialize turn events", { error: String(error3) });
+    log135.error("Failed to initialize turn events", { error: String(error3) });
   }
   try {
     const turnEventsConn = getTurnEventsConnection();
     if (turnEventsConn) {
       initAgentHeartbeat({ natsConnection: turnEventsConn, turnService: services.turns, db: services.db });
     } else {
-      log134.warn("Skipping agent heartbeat consumer: no NATS connection");
+      log135.warn("Skipping agent heartbeat consumer: no NATS connection");
     }
   } catch (error3) {
-    log134.error("Failed to initialize agent heartbeat consumer", { error: String(error3) });
+    log135.error("Failed to initialize agent heartbeat consumer", { error: String(error3) });
   }
   try {
     globalTurnMonitor = new TurnMonitor({
@@ -379517,23 +379544,23 @@ async function setupEventBusServices(eventBus, services, db3) {
       authPlaneDb: services.authPlane.db
     });
     globalTurnMonitor.start();
-    log134.info("Turn monitor started");
+    log135.info("Turn monitor started");
   } catch (error3) {
-    log134.error("Failed to start turn monitor", { error: String(error3) });
+    log135.error("Failed to start turn monitor", { error: String(error3) });
   }
 }
 async function waitForDatabaseReady(db3, maxAttempts = 30) {
-  log134.info("Waiting for database readiness");
+  log135.info("Waiting for database readiness");
   for (let attempt = 1;attempt <= maxAttempts; attempt++) {
     try {
       await db3.execute(sql`SELECT 1`);
-      log134.info("Database ready", { attempt });
+      log135.info("Database ready", { attempt });
       return;
     } catch {
       if (attempt === maxAttempts) {
         throw new Error(`Database not ready after ${maxAttempts} attempts`);
       }
-      log134.warn("Database not ready, retrying...", { attempt });
+      log135.warn("Database not ready, retrying...", { attempt });
       await new Promise((resolve4) => setTimeout(resolve4, 1000));
     }
   }
@@ -379551,7 +379578,7 @@ async function runStartupMigrations(db3, enforced) {
       return;
     });
     if (enforced && scrubDdlCredential()) {
-      log134.info("DDL credential scrubbed from process environment");
+      log135.info("DDL credential scrubbed from process environment");
     }
   }
 }
@@ -379560,39 +379587,39 @@ async function verifyEnforcedRuntimeIdentity(db3, mode) {
     return;
   try {
     const identity = await assertEnforcedRuntimeIdentity(db3);
-    log134.info("Enforced runtime identity verified", {
+    log135.info("Enforced runtime identity verified", {
       currentUser: identity.currentUser,
       forcedTables: identity.enforcement.forced.length
     });
   } catch (error3) {
-    log134.error("Enforcement-mode startup refused", { error: String(error3) });
+    log135.error("Enforcement-mode startup refused", { error: String(error3) });
     await closeDb();
     throw error3;
   }
 }
 async function main() {
-  log134.info("Starting Omni API v2");
+  log135.info("Starting Omni API v2");
   enableDefaultMetrics();
   if (process.env.PGSERVE_EMBEDDED === "true") {
-    log134.warn("PGSERVE_EMBEDDED=true is set but embedded mode was removed in pgserve-singleton-no-proxy. Run `omni doctor --fix` (or `pgserve install` directly) to migrate to consumer-only pgserve. omni-api will continue using DATABASE_URL.");
+    log135.warn("PGSERVE_EMBEDDED=true is set but embedded mode was removed in pgserve-singleton-no-proxy. Run `omni doctor --fix` (or `pgserve install` directly) to migrate to consumer-only pgserve. omni-api will continue using DATABASE_URL.");
   }
   const enforcementMode = resolveEnforcementMode();
-  warnOnMixedTenancyState(enforcementMode, (message2) => log134.warn(message2));
+  warnOnMixedTenancyState(enforcementMode, (message2) => log135.warn(message2));
   const enforcedIdentities = enforcementMode === "enforced" ? resolveEnforcedBootIdentities() : null;
   const databaseUrl = enforcedIdentities ? enforcedIdentities.runtimeUrl : getDefaultDatabaseUrl();
   if (enforcementMode === "enforced") {
-    log134.info("Connecting to database", { enforcementMode });
+    log135.info("Connecting to database", { enforcementMode });
   } else {
-    log134.info("Connecting to database");
+    log135.info("Connecting to database");
   }
   const db3 = createDb({ url: databaseUrl });
   globalDbRef = db3;
   const earlyShutdown = async () => {
-    log134.info("Shutdown during startup \u2014 cleaning up");
+    log135.info("Shutdown during startup \u2014 cleaning up");
     try {
       await closeDb();
     } catch (err2) {
-      log134.error("Cleanup failed during early shutdown", { error: String(err2) });
+      log135.error("Cleanup failed during early shutdown", { error: String(err2) });
     } finally {
       process.exit(1);
     }
@@ -379605,7 +379632,7 @@ async function main() {
     await closeDb();
     throw error3;
   }
-  log134.info("Running database migrations");
+  log135.info("Running database migrations");
   const migrationStart = Date.now();
   try {
     await runStartupMigrations(db3, enforcedIdentities);
@@ -379613,26 +379640,26 @@ async function main() {
     await closeDb();
     throw error3;
   }
-  log134.info("Database migrations complete", { durationMs: Date.now() - migrationStart });
+  log135.info("Database migrations complete", { durationMs: Date.now() - migrationStart });
   await verifyEnforcedRuntimeIdentity(db3, enforcementMode);
   try {
     const driftReport = await verifyCriticalColumns(db3, API_CRITICAL_COLUMNS);
     if (!driftReport.ok) {
-      log134.error(formatDriftReport(driftReport), { drift: driftReport.drift });
+      log135.error(formatDriftReport(driftReport), { drift: driftReport.drift });
       await closeDb();
       process.exit(1);
     }
   } catch (error3) {
-    log134.error("Schema drift check failed", { error: String(error3) });
+    log135.error("Schema drift check failed", { error: String(error3) });
     await closeDb();
     process.exit(1);
   }
   try {
     const [countRow] = await db3.select({ count: sql`count(*)::int` }).from(instances);
     const rowCount = countRow?.count ?? 0;
-    log134.info("Post-migration content snapshot", { DB_ROW_COUNT_INSTANCES: rowCount });
+    log135.info("Post-migration content snapshot", { DB_ROW_COUNT_INSTANCES: rowCount });
   } catch (error3) {
-    log134.warn("Failed to read instances row count (non-fatal)", { error: String(error3) });
+    log135.warn("Failed to read instances row count (non-fatal)", { error: String(error3) });
   }
   const eventBus = await connectToNats(db3);
   if (eventBus) {
@@ -379653,9 +379680,9 @@ async function main() {
   try {
     await services.settings.seedDefaults();
   } catch (error3) {
-    log134.error("Failed to seed default settings", { error: String(error3) });
+    log135.error("Failed to seed default settings", { error: String(error3) });
   }
-  log134.info("Initializing API key");
+  log135.info("Initializing API key");
   let apiKeyInfo;
   try {
     const keyResult = await services.apiKeys.initializePrimaryKey();
@@ -379665,17 +379692,17 @@ async function main() {
       isFromEnv: keyResult.isFromEnv
     };
     if (keyResult.isNew) {
-      log134.info("Generated new primary API key");
+      log135.info("Generated new primary API key");
     } else if (keyResult.isFromEnv) {
-      log134.info("Using primary API key from environment");
+      log135.info("Using primary API key from environment");
     } else {
-      log134.info("Using existing primary API key");
+      log135.info("Using existing primary API key");
     }
   } catch (error3) {
-    log134.error("Failed to initialize primary API key", { error: String(error3) });
+    log135.error("Failed to initialize primary API key", { error: String(error3) });
   }
   await setupEventBusServices(eventBus, services, db3);
-  log134.info("Starting scheduler");
+  log135.info("Starting scheduler");
   setupScheduler(services, globalChannelRegistry);
   const server = startBunServer(app);
   printStartupBanner({
@@ -379689,7 +379716,7 @@ async function main() {
   });
   setupShutdownHandlers(server, earlyShutdown);
 }
-var import__package3, log134, natsLog, pluginLog, shutdownLog, PORT, HOST, NATS_URL, voiceStreamRegistry, globalEventBus = null, globalChannelRegistry = null, globalInstanceMonitor = null, globalDispatcherCleanup = null, globalTurnMonitor = null, globalDbRef = null, globalServicesRef = null, globalStreamSweeper = null;
+var import__package3, log135, natsLog, pluginLog, shutdownLog, PORT, HOST, NATS_URL, voiceStreamRegistry, globalEventBus = null, globalChannelRegistry = null, globalInstanceMonitor = null, globalDispatcherCleanup = null, globalTurnMonitor = null, globalDbRef = null, globalServicesRef = null, globalStreamSweeper = null;
 var init_src9 = __esm(() => {
   init_instrument2();
   init_tracing5();
@@ -379722,7 +379749,7 @@ var init_src9 = __esm(() => {
     level: process.env.LOG_LEVEL ?? "info",
     format: process.env.LOG_FORMAT ?? "auto"
   });
-  log134 = createLogger("api:startup");
+  log135 = createLogger("api:startup");
   natsLog = createLogger("api:nats");
   pluginLog = createLogger("api:plugins");
   shutdownLog = createLogger("api:shutdown");
@@ -379731,7 +379758,7 @@ var init_src9 = __esm(() => {
   NATS_URL = process.env.NATS_URL ?? "nats://localhost:4222";
   voiceStreamRegistry = new VoiceStreamRegistry;
   main().catch((error3) => {
-    log134.error("Failed to start API server", { error: String(error3) });
+    log135.error("Failed to start API server", { error: String(error3) });
     process.exit(1);
   });
 });