@rubytech/create-maxy-code 0.1.292 → 0.1.294

package/payload/server/server.js

@@ -97,7 +97,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-QDCBAHPI.js";
+} from "./chunk-7H4KMTMC.js";
 import {
   __commonJS,
   __toESM
@@ -7706,9 +7706,44 @@ var whatsapp_reader_default = app5;
 import { basename as basename3, dirname as dirname2 } from "path";
 import { join as join10 } from "path";
 var WEBCHAT_ADMIN_KEY = "webchat-admin";
+var NO_INDICATORS = {
+  activity: null,
+  permissionMode: null,
+  effectivePermissionMode: null,
+  model: null
+};
+var indicatorsErrorLogged = false;
+var INDICATORS_TIMEOUT_MS = 1500;
+async function fetchComposerIndicators(sessionId) {
+  let port2;
+  try {
+    port2 = requirePortEnv("CLAUDE_SESSION_MANAGER_PORT", { tag: "webchat:session" });
+  } catch {
+    return NO_INDICATORS;
+  }
+  try {
+    const res = await fetch(`http://127.0.0.1:${port2}/${sessionId}/meta`, {
+      signal: AbortSignal.timeout(INDICATORS_TIMEOUT_MS)
+    });
+    if (!res.ok) return NO_INDICATORS;
+    const body = await res.json();
+    return {
+      activity: typeof body.activity === "string" ? body.activity : null,
+      permissionMode: typeof body.permissionMode === "string" ? body.permissionMode : null,
+      effectivePermissionMode: typeof body.effectivePermissionMode === "string" ? body.effectivePermissionMode : null,
+      model: typeof body.model === "string" ? body.model : null
+    };
+  } catch (err) {
+    if (!indicatorsErrorLogged) {
+      indicatorsErrorLogged = true;
+      console.error(`[webchat:session] indicators-unavailable detail=${err instanceof Error ? err.message : String(err)} (logged once per process)`);
+    }
+    return NO_INDICATORS;
+  }
+}
 function createWebchatRoutes(deps) {
-  const app48 = new Hono();
-  app48.post("/send", requireAdminSession, async (c) => {
+  const app49 = new Hono();
+  app49.post("/send", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const text = body?.text;
     if (typeof text !== "string" || text.length === 0) {
@@ -7725,7 +7760,7 @@ function createWebchatRoutes(deps) {
     await deps.handleInbound({ role: "admin", accountId, key: WEBCHAT_ADMIN_KEY, text });
     return c.json({ ok: true });
   });
-  app48.get("/session", requireAdminSession, (c) => {
+  app49.get("/session", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -7745,10 +7780,90 @@ function createWebchatRoutes(deps) {
         }
       }
     }
-    return c.json({ sessionId, projectDir });
+    const indicators = await fetchComposerIndicators(sessionId);
+    return c.json({ sessionId, projectDir, ...indicators });
   });
-  return app48;
+  return app49;
+}
+
+// server/routes/webchat-greeting.ts
+var OUTSTANDING_TASK_STATUSES = ["pending", "active", "running"];
+var UPCOMING_EVENT_STATUSES = ["scheduled", "due"];
+var TASK_ITEMS_CAP = 5;
+var EVENTS_CYPHER = `
+  MATCH (e:Event)
+  WHERE e.accountId = $accountId
+    AND e.eventStatus IN $statuses
+    AND coalesce(e.nextRun, e.startDate) >= $now
+  RETURN e.eventId AS eventId, e.name AS name,
+         coalesce(e.nextRun, e.startDate) AS at
+  ORDER BY at ASC
+  LIMIT 5`;
+var TASKS_CYPHER = `
+  MATCH (t:Task)
+  WHERE t.accountId = $accountId
+    AND t.status IN $statuses
+  WITH t ORDER BY coalesce(t.createdAt, '') ASC
+  WITH collect({ taskId: t.taskId, name: t.name, status: t.status }) AS all
+  RETURN all[0..${TASK_ITEMS_CAP}] AS items, size(all) AS total`;
+var app6 = new Hono();
+app6.get("/", requireAdminSession, async (c) => {
+  const cacheKey = c.var.cacheKey;
+  const accountId = getAccountIdForSession(cacheKey);
+  if (!accountId) {
+    console.error("[webchat:greeting] op=read-failed reason=no-account-for-session");
+    return c.json({ ok: false });
+  }
+  const started = Date.now();
+  let session;
+  try {
+    session = getSession();
+    const { events, tasks } = await session.executeRead(
+      async (tx) => {
+        const now = (/* @__PURE__ */ new Date()).toISOString();
+        const eventsResult = await tx.run(EVENTS_CYPHER, {
+          accountId,
+          statuses: UPCOMING_EVENT_STATUSES,
+          now
+        });
+        const tasksResult = await tx.run(TASKS_CYPHER, {
+          accountId,
+          statuses: OUTSTANDING_TASK_STATUSES
+        });
+        const events2 = eventsResult.records.map((r) => ({
+          eventId: String(r.get("eventId")),
+          name: String(r.get("name")),
+          at: String(r.get("at"))
+        }));
+        const tasksRecord = tasksResult.records[0];
+        const rawTotal = tasksRecord ? r2n(tasksRecord.get("total")) : 0;
+        const tasks2 = {
+          items: tasksRecord ? tasksRecord.get("items") : [],
+          total: rawTotal
+        };
+        return { events: events2, tasks: tasks2 };
+      }
+    );
+    console.log(
+      `[webchat:greeting] op=read account=${accountId.slice(0, 8)} events=${events.length} tasks=${tasks.total} ms=${Date.now() - started}`
+    );
+    return c.json({ ok: true, events, tasks });
+  } catch (err) {
+    const detail = err instanceof Error ? err.message : String(err);
+    console.error(`[webchat:greeting] op=read-failed reason=${detail}`);
+    return c.json({ ok: false });
+  } finally {
+    await session?.close();
+  }
+});
+function r2n(value) {
+  if (typeof value === "number") return value;
+  if (value && typeof value === "object" && "low" in value) {
+    return Number(value.low);
+  }
+  return Number(value ?? 0);
 }
+var webchat_greeting_default = app6;
 
 // server/routes/telegram.ts
 import { homedir } from "os";
@@ -7830,8 +7945,8 @@ async function sendTelegram(botToken, chatId, text) {
     return { ok: false, error: e instanceof Error ? e.message : String(e) };
   }
 }
-var app6 = new Hono();
-app6.post("/", async (c) => {
+var app7 = new Hono();
+app7.post("/", async (c) => {
   const botParam = c.req.query("bot");
   const botType = botParam === "admin" ? "admin" : botParam === "public" ? "public" : null;
   if (!botType) {
@@ -7902,7 +8017,7 @@ app6.post("/", async (c) => {
   })();
   return c.json({ ok: true }, 200);
 });
-var telegram_default = app6;
+var telegram_default = app7;
 
 // server/routes/onboarding.ts
 import { spawn, spawnSync as spawnSync2, execFileSync as execFileSync2 } from "child_process";
@@ -8089,11 +8204,11 @@ async function waitForAuthPage(timeoutMs = 2e4) {
   }
   return false;
 }
-var app7 = new Hono();
-app7.get("/claude-auth", async (c) => {
+var app8 = new Hono();
+app8.get("/claude-auth", async (c) => {
   return c.json({ authenticated: await checkAuthStatus() });
 });
-app7.post("/claude-auth", async (c) => {
+app8.post("/claude-auth", async (c) => {
   let body = {};
   try {
     body = await c.req.json();
@@ -8163,7 +8278,7 @@ app7.post("/claude-auth", async (c) => {
   await waitForAuthPage(2e4);
   return c.json({ started: true, transport });
 });
-app7.post("/set-pin", async (c) => {
+app8.post("/set-pin", async (c) => {
   let existingUsers = null;
   try {
     existingUsers = readUsersFile2();
@@ -8265,7 +8380,7 @@ ${body.pin}
   }
   return c.json({ ok: true });
 });
-app7.delete("/set-pin", async (c) => {
+app8.delete("/set-pin", async (c) => {
   let users = null;
   try {
     users = readUsersFile2();
@@ -8299,7 +8414,7 @@ app7.delete("/set-pin", async (c) => {
   }
   return c.json({ ok: true });
 });
-var onboarding_default = app7;
+var onboarding_default = app8;
 
 // server/routes/client-error.ts
 import { appendFileSync, existsSync as existsSync11, renameSync as renameSync2, statSync as statSync6 } from "fs";
@@ -8355,8 +8470,8 @@ function rotateIfNeeded() {
     console.error(`[client-error] log rotation failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
-var app8 = new Hono();
-app8.post("/", async (c) => {
+var app9 = new Hono();
+app9.post("/", async (c) => {
   const client = resolveClientIp(
     c.env?.incoming?.socket?.remoteAddress,
     c.req.header("x-forwarded-for")
@@ -8458,7 +8573,7 @@ app8.post("/", async (c) => {
   }
   return c.json({ ok: true });
 });
-var client_error_default = app8;
+var client_error_default = app9;
 
 // server/routes/admin/session.ts
 import { randomUUID as randomUUID8 } from "crypto";
@@ -8516,8 +8631,8 @@ async function createAdminSession(accountId, thinkingView, userId, userName, rol
     sessionId: initialSessionId
   };
 }
-var app9 = new Hono();
-app9.get("/", async (c) => {
+var app10 = new Hono();
+app10.get("/", async (c) => {
   const signedSessionToken = c.req.query("session_key");
   if (!signedSessionToken) {
     return c.json({ error: "Invalid or expired admin session" }, 401);
@@ -8563,7 +8678,7 @@ app9.get("/", async (c) => {
     sessionId: getSessionIdForSession(cacheKey) ?? null
   });
 });
-app9.post("/", async (c) => {
+app10.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -8626,7 +8741,7 @@ app9.post("/", async (c) => {
   const payload = await createAdminSession(selected.accountId, selected.config.thinkingView, userId, userName, selected.role, avatar);
   return c.json(payload);
 });
-var session_default = app9;
+var session_default = app10;
 
 // server/routes/admin/logs.ts
 import { existsSync as existsSync13, readdirSync as readdirSync8, readFileSync as readFileSync14, statSync as statSync7 } from "fs";
@@ -8649,8 +8764,8 @@ function resolveSessionLogPaths(filename, logDirs) {
 
 // server/routes/admin/logs.ts
 var TAIL_BYTES = 8192;
-var app10 = new Hono();
-app10.get("/", async (c) => {
+var app11 = new Hono();
+app11.get("/", async (c) => {
   const fileParam = c.req.query("file");
   const typeParam = c.req.query("type");
   const sessionIdParam = c.req.query("sessionId");
@@ -8792,12 +8907,12 @@ app10.get("/", async (c) => {
   }
   return c.json({ logs });
 });
-var logs_default = app10;
+var logs_default = app11;
 
 // server/routes/admin/claude-info.ts
 import { execFileSync as execFileSync3 } from "child_process";
-var app11 = new Hono();
-app11.get("/", (c) => {
+var app12 = new Hono();
+app12.get("/", (c) => {
   let version = "unknown";
   try {
     const raw = execFileSync3("claude", ["--version"], { encoding: "utf-8", timeout: 5e3 });
@@ -8815,14 +8930,14 @@ app11.get("/", (c) => {
   const thinkingView = resolvedAccount?.config.thinkingView ?? "default";
   return c.json({ version, account, model, thinkingView });
 });
-var claude_info_default = app11;
+var claude_info_default = app12;
 
 // server/routes/admin/attachment.ts
 import { readFile as readFile2, readdir } from "fs/promises";
 import { existsSync as existsSync14 } from "fs";
 import { resolve as resolve12 } from "path";
-var app12 = new Hono();
-app12.get("/:attachmentId", requireAdminSession, async (c) => {
+var app13 = new Hono();
+app13.get("/:attachmentId", requireAdminSession, async (c) => {
   const attachmentId = c.req.param("attachmentId");
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
@@ -8861,13 +8976,13 @@ app12.get("/:attachmentId", requireAdminSession, async (c) => {
     }
   });
 });
-var attachment_default = app12;
+var attachment_default = app13;
 
 // server/routes/admin/agents.ts
 import { resolve as resolve13 } from "path";
 import { readdirSync as readdirSync9, readFileSync as readFileSync15, existsSync as existsSync15, rmSync } from "fs";
-var app13 = new Hono();
-app13.get("/", (c) => {
+var app14 = new Hono();
+app14.get("/", (c) => {
   const account = resolveAccount();
   if (!account) return c.json({ agents: [] });
   const agentsDir = resolve13(account.accountDir, "agents");
@@ -8897,7 +9012,7 @@ app13.get("/", (c) => {
   }
   return c.json({ agents });
 });
-app13.delete("/:slug", async (c) => {
+app14.delete("/:slug", async (c) => {
   const slug = c.req.param("slug");
   const account = resolveAccount();
   if (!account) return c.json({ error: "No account resolved" }, 400);
@@ -8927,7 +9042,7 @@ app13.delete("/:slug", async (c) => {
     return c.json({ error: "Failed to delete agent" }, 500);
   }
 });
-app13.post("/:slug/project", async (c) => {
+app14.post("/:slug/project", async (c) => {
   const slug = c.req.param("slug");
   const account = resolveAccount();
   if (!account) return c.json({ error: "No account resolved" }, 400);
@@ -8949,7 +9064,7 @@ app13.post("/:slug/project", async (c) => {
     return c.json({ error: `Projection failed: ${msg}` }, 500);
   }
 });
-var agents_default = app13;
+var agents_default = app14;
 
 // server/routes/admin/sessions.ts
 import crypto2 from "crypto";
@@ -9221,8 +9336,8 @@ function formatAge(updatedAtStr) {
     return "unknown";
   }
 }
-var app14 = new Hono();
-app14.get("/", requireAdminSession, async (c) => {
+var app15 = new Hono();
+app15.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -9252,7 +9367,7 @@ app14.get("/", requireAdminSession, async (c) => {
     return c.json({ error: "Failed to fetch sessions" }, 500);
   }
 });
-app14.post("/new", requireAdminSession, async (c) => {
+app15.post("/new", requireAdminSession, async (c) => {
   const oldCacheKey = c.var.cacheKey;
   console.log(`[admin-chat] new-conversation outcome=ingress cacheKey=${oldCacheKey.slice(0, 8)}`);
   const accountId = getAccountIdForSession(oldCacheKey);
@@ -9269,7 +9384,7 @@ app14.post("/new", requireAdminSession, async (c) => {
   console.log(`[admin-chat] new-conversation outcome=ok oldKey=${oldCacheKey.slice(0, 8)} newKey=${newCacheKey.slice(0, 8)}`);
   return c.json({ session_key: newSignedSessionToken, sessionId: null });
 });
-app14.post("/switch", requireAdminSession, async (c) => {
+app15.post("/switch", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -9297,7 +9412,7 @@ app14.post("/switch", requireAdminSession, async (c) => {
   console.log(`[session-switch] from=${cacheKey.slice(0, 8)} to=${targetCacheKey.slice(0, 8)} targetConvId=${targetSessionId?.slice(0, 8) ?? "none"} accountId=${accountId.slice(0, 8)}`);
   return c.json({ session_key: targetSignedSessionToken, sessionId: targetSessionId });
 });
-app14.delete("/:id", requireAdminSession, async (c) => {
+app15.delete("/:id", requireAdminSession, async (c) => {
   const sessionId = c.req.param("id");
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
@@ -9342,7 +9457,7 @@ app14.delete("/:id", requireAdminSession, async (c) => {
     500
   );
 });
-app14.post("/:id/resume", async (c) => {
+app15.post("/:id/resume", async (c) => {
   const sessionId = c.req.param("id");
   const t0 = Date.now();
   const signedSessionToken = c.req.query("session_key") ?? "";
@@ -9611,7 +9726,7 @@ app14.post("/:id/resume", async (c) => {
     }
   });
 });
-app14.put("/:id/label", requireAdminSession, async (c) => {
+app15.put("/:id/label", requireAdminSession, async (c) => {
   const sessionId = c.req.param("id");
   const cacheKey = c.var.cacheKey;
   let body;
@@ -9637,7 +9752,7 @@ app14.put("/:id/label", requireAdminSession, async (c) => {
     return c.json({ error: "Failed to rename session" }, 500);
   }
 });
-var sessions_default = app14;
+var sessions_default = app15;
 
 // app/lib/claude-agent/spawn-context.ts
 import { existsSync as existsSync17, readFileSync as readFileSync16, readdirSync as readdirSync10, statSync as statSync8 } from "fs";
@@ -9962,7 +10077,7 @@ async function refuseIfClaudeAuthDead(c, route, sessionId) {
     503
   );
 }
-var app15 = new Hono();
+var app16 = new Hono();
 async function performSpawnWithInitialMessage(args) {
   const ownerStart = Date.now();
   const aboutOwner = await resolveOwnerProfileBlock(args.senderId, args.userId);
@@ -10039,8 +10154,8 @@ function mintTranscriptEdge(sessionId, claudeSessionId, accountId) {
   if (!sessionId || !claudeSessionId) return;
   void linkConversationTranscript(sessionId, claudeSessionId, accountId);
 }
-app15.use("*", requireAdminSession);
-app15.post("/", async (c) => {
+app16.use("*", requireAdminSession);
+app16.post("/", async (c) => {
   const routeStart = Date.now();
   const cacheKey = c.get("cacheKey") ?? "";
   let body = {};
@@ -10083,18 +10198,18 @@ app15.post("/", async (c) => {
   console.log(`${TAG23} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
   return response;
 });
-var claude_sessions_default = app15;
+var claude_sessions_default = app16;
 
 // server/routes/admin/log-ingest.ts
 var TAG24 = "[log-ingest]";
 var TAG_PATTERN = /^[A-Za-z0-9_:-]{1,32}$/;
 var LEVELS = /* @__PURE__ */ new Set(["debug", "info", "warn", "error"]);
 var MAX_LINE_BYTES = 4096;
-var app16 = new Hono();
+var app17 = new Hono();
 function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-app16.post("/", async (c) => {
+app17.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr(remoteAddr)) {
     console.error(`${TAG24} reject reason=non-loopback remoteAddr=${remoteAddr}`);
@@ -10137,7 +10252,7 @@ app16.post("/", async (c) => {
   else console.log(formatted);
   return c.json({ ok: true }, 200);
 });
-var log_ingest_default = app16;
+var log_ingest_default = app17;
 
 // server/routes/admin/events.ts
 var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
@@ -10146,8 +10261,8 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
   "device-url:vnc-surface-shown",
   "device-url:malformed"
 ]);
-var app17 = new Hono();
-app17.post("/", async (c) => {
+var app18 = new Hono();
+app18.post("/", async (c) => {
   const TAG32 = "[admin:events]";
   let body;
   try {
@@ -10178,7 +10293,7 @@ app17.post("/", async (c) => {
   console.error(`[${event}] ${formatted}`);
   return c.json({ ok: true });
 });
-var events_default = app17;
+var events_default = app18;
 
 // server/routes/admin/files.ts
 import { createReadStream as createReadStream2 } from "fs";
@@ -11086,8 +11201,8 @@ async function knowledgeDocOwnedByAccount(accountId, attachmentId) {
     await session.close();
   }
 }
-var app18 = new Hono();
-app18.get("/", requireAdminSession, async (c) => {
+var app19 = new Hono();
+app19.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -11153,7 +11268,7 @@ app18.get("/", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app18.get("/download", requireAdminSession, async (c) => {
+app19.get("/download", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -11217,7 +11332,7 @@ app18.get("/download", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app18.post("/upload", requireAdminSession, async (c) => {
+app19.post("/upload", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -11278,7 +11393,7 @@ app18.post("/upload", requireAdminSession, async (c) => {
     mimeType: file.type
   });
 });
-app18.delete("/", requireAdminSession, async (c) => {
+app19.delete("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -11354,7 +11469,7 @@ app18.delete("/", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-var files_default = app18;
+var files_default = app19;
 
 // ../lib/graph-search/src/index.ts
 var import_dist = __toESM(require_dist());
@@ -12119,8 +12234,8 @@ var DEFAULT_LIMIT = 20;
 var MAX_LIMIT = 2e3;
 var MESSAGE_FAMILY_LABELS = ["Message", "UserMessage", "AssistantMessage", "WhatsAppMessage"];
 var CONVERSATION_PARENT_LABELS = /* @__PURE__ */ new Set(["AdminConversation", "PublicConversation"]);
-var app19 = new Hono();
-app19.get("/", requireAdminSession, async (c) => {
+var app20 = new Hono();
+app20.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const q = (c.req.query("q") ?? "").trim();
   const rawLimit = c.req.query("limit");
@@ -12256,7 +12371,7 @@ app19.get("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var graph_search_default = app19;
+var graph_search_default = app20;
 
 // server/routes/admin/graph-subgraph.ts
 import neo4j from "neo4j-driver";
@@ -12340,8 +12455,8 @@ var STRIPPED_PROPERTIES = /* @__PURE__ */ new Set([
   "otpCode",
   "cacheKey"
 ]);
-var app20 = new Hono();
-app20.get("/", requireAdminSession, async (c) => {
+var app21 = new Hono();
+app21.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -12924,12 +13039,12 @@ function pruneNode(node, warnedClasses, conversationWarnings) {
   }
   return trashed ? { id: node.id, labels, properties, trashed: true } : { id: node.id, labels, properties };
 }
-var graph_subgraph_default = app20;
+var graph_subgraph_default = app21;
 
 // server/routes/admin/graph-delete.ts
 var ALLOWED_BY = ["graph-page", "graph-drag-trash", "graph-side-panel-trash"];
-var app21 = new Hono();
-app21.post("/", requireAdminSession, async (c) => {
+var app22 = new Hono();
+app22.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -13091,11 +13206,11 @@ app21.post("/", requireAdminSession, async (c) => {
     }
   }
 });
-var graph_delete_default = app21;
+var graph_delete_default = app22;
 
 // server/routes/admin/graph-restore.ts
-var app22 = new Hono();
-app22.post("/", requireAdminSession, async (c) => {
+var app23 = new Hono();
+app23.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -13159,11 +13274,11 @@ app22.post("/", requireAdminSession, async (c) => {
     }
   }
 });
-var graph_restore_default = app22;
+var graph_restore_default = app23;
 
 // server/routes/admin/graph-labels-in-graph.ts
-var app23 = new Hono();
-app23.get("/", requireAdminSession, async (c) => {
+var app24 = new Hono();
+app24.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -13229,11 +13344,11 @@ var LABELS_IN_GRAPH_CYPHER = `
        sum(halfEdges) AS relDegree
   RETURN label, nodeCount, relDegree
 `;
-var graph_labels_in_graph_default = app23;
+var graph_labels_in_graph_default = app24;
 
 // server/routes/admin/graph-default-view.ts
-var app24 = new Hono();
-app24.get("/", requireAdminSession, async (c) => {
+var app25 = new Hono();
+app25.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -13271,7 +13386,7 @@ app24.get("/", requireAdminSession, async (c) => {
     }
   }
 });
-app24.put("/", requireAdminSession, async (c) => {
+app25.put("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -13360,7 +13475,7 @@ var WRITE_CYPHER = `
       p.updatedAt = $updatedAt
   RETURN p.labels AS labels
 `;
-var graph_default_view_default = app24;
+var graph_default_view_default = app25;
 
 // server/routes/admin/sidebar-artefacts.ts
 import { readdir as readdir4, stat as stat5 } from "fs/promises";
@@ -13372,8 +13487,8 @@ function toDataRootRelPath(absPath) {
   if (absPath !== DATA_ROOT && !absPath.startsWith(DATA_ROOT + sep6)) return null;
   return relative3(DATA_ROOT, absPath);
 }
-var app25 = new Hono();
-app25.get("/", requireAdminSession, async (c) => {
+var app26 = new Hono();
+app26.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -13536,11 +13651,11 @@ function isWithin(target, root) {
   const rel = relative3(root, target);
   return !rel.startsWith("..") && !isAbsolute(rel);
 }
-var sidebar_artefacts_default = app25;
+var sidebar_artefacts_default = app26;
 
 // server/routes/admin/session-delete.ts
-var app26 = new Hono();
-app26.post("/", requireAdminSession, async (c) => {
+var app27 = new Hono();
+app27.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -13578,11 +13693,11 @@ app26.post("/", requireAdminSession, async (c) => {
   console.error(`[session-delete] sessionId=${sessionId} delete-status=${del.status}`);
   return c.json({ error: `manager-status-${del.status}` }, 502);
 });
-var session_delete_default = app26;
+var session_delete_default = app27;
 
 // server/routes/admin/session-stop.ts
-var app27 = new Hono();
-app27.post("/", requireAdminSession, async (c) => {
+var app28 = new Hono();
+app28.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -13607,11 +13722,11 @@ app27.post("/", requireAdminSession, async (c) => {
   console.error(`[session-stop] sessionId=${sessionId} manager-status=${res.status}`);
   return c.json({ error: `manager-status-${res.status}` }, 502);
 });
-var session_stop_default = app27;
+var session_stop_default = app28;
 
 // server/routes/admin/session-archive.ts
-var app28 = new Hono();
-app28.post("/", requireAdminSession, async (c) => {
+var app29 = new Hono();
+app29.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -13659,11 +13774,11 @@ app28.post("/", requireAdminSession, async (c) => {
   console.error(`[session-archive] sessionId=${sessionId.slice(0, 8)} manager-status=${res.status}`);
   return c.json({ error: `manager-status-${res.status}` }, 502);
 });
-var session_archive_default = app28;
+var session_archive_default = app29;
 
 // server/routes/admin/session-rc-spawn.ts
-var app29 = new Hono();
-app29.post("/", requireAdminSession, async (c) => {
+var app30 = new Hono();
+app30.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -13697,7 +13812,7 @@ app29.post("/", requireAdminSession, async (c) => {
   }
   return c.json(parsed ?? {});
 });
-var session_rc_spawn_default = app29;
+var session_rc_spawn_default = app30;
 
 // server/routes/admin/system-stats.ts
 import { readFile as readFile5 } from "fs/promises";
@@ -13794,8 +13909,8 @@ async function sample() {
   if (process.platform === "linux") return sampleLinux();
   return sampleOsFallback();
 }
-var app30 = new Hono();
-app30.get("/", async (c) => {
+var app31 = new Hono();
+app31.get("/", async (c) => {
   const started = Date.now();
   if (!inflight) {
     inflight = sample().finally(() => {
@@ -13818,7 +13933,7 @@ app30.get("/", async (c) => {
     return c.json({ degraded: true, reason, sampledAtMs: Date.now() });
   }
 });
-var system_stats_default = app30;
+var system_stats_default = app31;
 
 // server/routes/admin/health.ts
 import { existsSync as existsSync20, readFileSync as readFileSync18 } from "fs";
@@ -13863,8 +13978,8 @@ async function probeConversationDb() {
     });
   }
 }
-var app31 = new Hono();
-app31.get("/", async (c) => {
+var app32 = new Hono();
+app32.get("/", async (c) => {
   const version = readVersion();
   const probe = await probeConversationDb();
   const uptimeMs = Date.now() - new Date(PROCESS_STARTED_AT).getTime();
@@ -13886,7 +14001,7 @@ app31.get("/", async (c) => {
     uptimeMs
   });
 });
-var health_default2 = app31;
+var health_default2 = app32;
 
 // server/routes/admin/linkedin-ingest.ts
 import { randomUUID as randomUUID9 } from "crypto";
@@ -13988,8 +14103,8 @@ function buildInitialMessage(env) {
   }
   return header;
 }
-var app32 = new Hono();
-app32.post("/", requireAdminSession, async (c) => {
+var app33 = new Hono();
+app33.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -14034,7 +14149,7 @@ app32.post("/", requireAdminSession, async (c) => {
   );
   return c.json({ ok: true, dispatchId: envelope.dispatchId, taskId: spawned.sessionId }, 202);
 });
-var linkedin_ingest_default = app32;
+var linkedin_ingest_default = app33;
 
 // server/routes/admin/post-turn-context.ts
 import neo4j2 from "neo4j-driver";
@@ -14076,8 +14191,8 @@ function pruneProperties(raw) {
   }
   return out;
 }
-var app33 = new Hono();
-app33.get("/", async (c) => {
+var app34 = new Hono();
+app34.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr2(remoteAddr)) {
     console.error(`${TAG26} reject reason=non-loopback remoteAddr=${remoteAddr}`);
@@ -14137,7 +14252,7 @@ app33.get("/", async (c) => {
     await session.close();
   }
 });
-var post_turn_context_default = app33;
+var post_turn_context_default = app34;
 
 // server/routes/admin/public-session-context.ts
 import neo4j3 from "neo4j-driver";
@@ -14179,8 +14294,8 @@ function pruneProperties2(raw) {
   }
   return out;
 }
-var app34 = new Hono();
-app34.get("/", async (c) => {
+var app35 = new Hono();
+app35.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr3(remoteAddr)) {
     console.error(`${TAG27} reject reason=non-loopback remoteAddr=${remoteAddr}`);
@@ -14239,15 +14354,15 @@ app34.get("/", async (c) => {
     await session.close();
   }
 });
-var public_session_context_default = app34;
+var public_session_context_default = app35;
 
 // server/routes/admin/public-session-exit.ts
 var TAG28 = "[public-session-exit-route]";
 function isLoopbackAddr4(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-var app35 = new Hono();
-app35.post("/", async (c) => {
+var app36 = new Hono();
+app36.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr4(remoteAddr)) {
     console.error(`${TAG28} reject reason=non-loopback remoteAddr=${remoteAddr}`);
@@ -14274,15 +14389,15 @@ app35.post("/", async (c) => {
   handlePublicSessionExit(sessionId);
   return c.json({ ok: true });
 });
-var public_session_exit_default = app35;
+var public_session_exit_default = app36;
 
 // server/routes/admin/access-session-evict.ts
 var TAG29 = "[access-session-evict]";
 function isLoopbackAddr5(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-var app36 = new Hono();
-app36.post("/", async (c) => {
+var app37 = new Hono();
+app37.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr5(remoteAddr)) {
     console.error(`${TAG29} reject reason=non-loopback remoteAddr=${remoteAddr}`);
@@ -14310,11 +14425,11 @@ app36.post("/", async (c) => {
   console.log(`${TAG29} grantId=${grantId} dropped=${dropped}`);
   return c.json({ ok: true, dropped });
 });
-var access_session_evict_default = app36;
+var access_session_evict_default = app37;
 
 // server/routes/admin/browser.ts
-var app37 = new Hono();
-app37.post("/launch", requireAdminSession, async (c) => {
+var app38 = new Hono();
+app38.post("/launch", requireAdminSession, async (c) => {
   try {
     const transport = resolveBrowserTransport(c.req.raw, c.env?.incoming?.socket?.remoteAddress);
     console.error(`[admin/browser/launch] op=request transport=${transport}`);
@@ -14342,41 +14457,41 @@ app37.post("/launch", requireAdminSession, async (c) => {
     );
   }
 });
-var browser_default = app37;
+var browser_default = app38;
 
 // server/routes/admin/index.ts
-var app38 = new Hono();
-app38.route("/session", session_default);
-app38.route("/logs", logs_default);
-app38.route("/claude-info", claude_info_default);
-app38.route("/attachment", attachment_default);
-app38.route("/agents", agents_default);
-app38.route("/sessions", sessions_default);
-app38.route("/claude-sessions", claude_sessions_default);
-app38.route("/log-ingest", log_ingest_default);
-app38.route("/events", events_default);
-app38.route("/files", files_default);
-app38.route("/graph-search", graph_search_default);
-app38.route("/graph-subgraph", graph_subgraph_default);
-app38.route("/graph-delete", graph_delete_default);
-app38.route("/graph-restore", graph_restore_default);
-app38.route("/graph-labels-in-graph", graph_labels_in_graph_default);
-app38.route("/graph-default-view", graph_default_view_default);
-app38.route("/sidebar-artefacts", sidebar_artefacts_default);
-app38.route("/sidebar-sessions", sidebar_sessions_default);
-app38.route("/session-delete", session_delete_default);
-app38.route("/session-stop", session_stop_default);
-app38.route("/session-archive", session_archive_default);
-app38.route("/browser", browser_default);
-app38.route("/session-rc-spawn", session_rc_spawn_default);
-app38.route("/system-stats", system_stats_default);
-app38.route("/health-brand", health_default2);
-app38.route("/linkedin-ingest", linkedin_ingest_default);
-app38.route("/post-turn-context", post_turn_context_default);
-app38.route("/public-session-context", public_session_context_default);
-app38.route("/public-session-exit", public_session_exit_default);
-app38.route("/access-session-evict", access_session_evict_default);
-var admin_default = app38;
+var app39 = new Hono();
+app39.route("/session", session_default);
+app39.route("/logs", logs_default);
+app39.route("/claude-info", claude_info_default);
+app39.route("/attachment", attachment_default);
+app39.route("/agents", agents_default);
+app39.route("/sessions", sessions_default);
+app39.route("/claude-sessions", claude_sessions_default);
+app39.route("/log-ingest", log_ingest_default);
+app39.route("/events", events_default);
+app39.route("/files", files_default);
+app39.route("/graph-search", graph_search_default);
+app39.route("/graph-subgraph", graph_subgraph_default);
+app39.route("/graph-delete", graph_delete_default);
+app39.route("/graph-restore", graph_restore_default);
+app39.route("/graph-labels-in-graph", graph_labels_in_graph_default);
+app39.route("/graph-default-view", graph_default_view_default);
+app39.route("/sidebar-artefacts", sidebar_artefacts_default);
+app39.route("/sidebar-sessions", sidebar_sessions_default);
+app39.route("/session-delete", session_delete_default);
+app39.route("/session-stop", session_stop_default);
+app39.route("/session-archive", session_archive_default);
+app39.route("/browser", browser_default);
+app39.route("/session-rc-spawn", session_rc_spawn_default);
+app39.route("/system-stats", system_stats_default);
+app39.route("/health-brand", health_default2);
+app39.route("/linkedin-ingest", linkedin_ingest_default);
+app39.route("/post-turn-context", post_turn_context_default);
+app39.route("/public-session-context", public_session_context_default);
+app39.route("/public-session-exit", public_session_exit_default);
+app39.route("/access-session-evict", access_session_evict_default);
+var admin_default = app39;
 
 // app/lib/access-gate.ts
 import neo4j4 from "neo4j-driver";
@@ -14590,8 +14705,8 @@ async function generateNewMagicToken(grantId) {
 var TAG30 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
-var app39 = new Hono();
-app39.post("/", async (c) => {
+var app40 = new Hono();
+app40.post("/", async (c) => {
   const ip = c.var.clientIp || "unknown";
   let body;
   try {
@@ -14673,7 +14788,7 @@ app39.post("/", async (c) => {
     displayName: grant.displayName
   });
 });
-var verify_token_default = app39;
+var verify_token_default = app40;
 
 // app/lib/access-email.ts
 import { spawn as spawn2 } from "child_process";
@@ -14736,9 +14851,9 @@ async function sendMagicLinkEmail(payload) {
 
 // server/routes/access/request-magic-link.ts
 var TAG31 = "[access-request-link]";
-var app40 = new Hono();
+var app41 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
-app40.post("/", async (c) => {
+app41.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -14812,13 +14927,13 @@ app40.post("/", async (c) => {
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
-var request_magic_link_default = app40;
+var request_magic_link_default = app41;
 
 // server/routes/access/index.ts
-var app41 = new Hono();
-app41.route("/verify-token", verify_token_default);
-app41.route("/request-magic-link", request_magic_link_default);
-var access_default = app41;
+var app42 = new Hono();
+app42.route("/verify-token", verify_token_default);
+app42.route("/request-magic-link", request_magic_link_default);
+var access_default = app42;
 
 // server/routes/sites.ts
 import { existsSync as existsSync21, readFileSync as readFileSync20, realpathSync as realpathSync5, statSync as statSync9 } from "fs";
@@ -14853,8 +14968,8 @@ function getExt(p) {
   if (idx < p.lastIndexOf("/")) return "";
   return p.slice(idx).toLowerCase();
 }
-var app42 = new Hono();
-app42.get("/:rel{.*}", (c) => {
+var app43 = new Hono();
+app43.get("/:rel{.*}", (c) => {
   const reqPath = c.req.path;
   const rawRel = c.req.param("rel") ?? "";
   const trimmed = rawRel.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -14957,7 +15072,7 @@ app42.get("/:rel{.*}", (c) => {
     "X-Content-Type-Options": "nosniff"
   });
 });
-var sites_default = app42;
+var sites_default = app43;
 
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
@@ -15057,7 +15172,7 @@ function readBrandConfig() {
 }
 
 // server/routes/visitor-consent.ts
-var app43 = new Hono();
+var app44 = new Hono();
 var CONSENT_COOKIE_NAME = "mxy_consent";
 var CONSENT_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
 var DEFAULT_CONSENT_COPY = {
@@ -15102,17 +15217,17 @@ function siteSlugFromReferer(referer) {
     return "";
   }
 }
-app43.options("/consent", (c) => {
+app44.options("/consent", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app43.options("/brand-config", (c) => {
+app44.options("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app43.post("/consent", async (c) => {
+app44.post("/consent", async (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   let raw;
@@ -15152,7 +15267,7 @@ app43.post("/consent", async (c) => {
   console.log(`[consent] ${parsed.decision} site=${site} brand=${brandName} tokenBound=${tokenBound}`);
   return c.body(null, 204);
 });
-app43.get("/brand-config", (c) => {
+app44.get("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   const brand = readBrandConfig();
@@ -15162,7 +15277,7 @@ app43.get("/brand-config", (c) => {
   c.header("Cache-Control", "public, max-age=300");
   return c.json({ consent: { copy, palette } });
 });
-var visitor_consent_default = app43;
+var visitor_consent_default = app44;
 
 // server/routes/listings.ts
 function getCookie(headerValue, name) {
@@ -15189,8 +15304,8 @@ function appendConsentParams(pageUrl, token) {
 }
 var SAFE_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,118}[a-z0-9])?$/;
 var CHAT_SESSION_KEY_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var app44 = new Hono();
-app44.get("/:slug/click", async (c) => {
+var app45 = new Hono();
+app45.get("/:slug/click", async (c) => {
   const slug = c.req.param("slug") ?? "";
   const rawSession = c.req.query("session") ?? "";
   const sessionKey = CHAT_SESSION_KEY_RE.test(rawSession) ? rawSession : "invalid";
@@ -15254,10 +15369,10 @@ app44.get("/:slug/click", async (c) => {
   console.log(`[property-card-click] sessionKey=${sessionKey} listingSlug=${slug} consent=${consentCookie ?? "absent"} ts=${(/* @__PURE__ */ new Date()).toISOString()}`);
   return c.redirect(redirectUrl, 302);
 });
-var listings_default = app44;
+var listings_default = app45;
 
 // server/routes/visitor-event.ts
-var app45 = new Hono();
+var app46 = new Hono();
 var BOT_UA_RE = /\b(bot|crawl|spider|slurp|headlesschrome|phantomjs|googlebot|bingbot|yandex|baiduspider|ahrefsbot|semrushbot|mj12bot|dotbot|petalbot)\b/i;
 var buckets = /* @__PURE__ */ new Map();
 var RATE_LIMIT = 60;
@@ -15324,12 +15439,12 @@ function originAllowed(origin, allowlist) {
     return false;
   }
 }
-app45.options("/event", (c) => {
+app46.options("/event", (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   return c.body(null, 204);
 });
-app45.post("/event", async (c) => {
+app46.post("/event", async (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   const ua = c.req.header("user-agent") ?? "";
@@ -15534,7 +15649,7 @@ async function writeEvent(opts) {
     );
   }
 }
-var visitor_event_default = app45;
+var visitor_event_default = app46;
 
 // server/routes/session.ts
 import { resolve as resolve24 } from "path";
@@ -15580,8 +15695,8 @@ function withVisitorCookie(response, visitorId) {
     headers
   });
 }
-var app46 = new Hono();
-app46.post("/", async (c) => {
+var app47 = new Hono();
+app47.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -15792,7 +15907,7 @@ app46.post("/", async (c) => {
     newVisitorId
   );
 });
-var session_default2 = app46;
+var session_default2 = app47;
 
 // app/lib/graph-health.ts
 var import_dist4 = __toESM(require_dist3(), 1);
@@ -16282,8 +16397,8 @@ var streamSSE = (c, cb, onError) => {
 
 // app/lib/whatsapp/gateway/routes.ts
 function createWaChannelRoutes(deps) {
-  const app48 = new Hono();
-  app48.get("/wa-channel/inbound", (c) => {
+  const app49 = new Hono();
+  app49.get("/wa-channel/inbound", (c) => {
     const senderId = c.req.query("senderId");
     if (!senderId) return c.json({ error: "senderId required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -16301,7 +16416,7 @@ function createWaChannelRoutes(deps) {
       }
     });
   });
-  app48.post("/wa-channel/reply", async (c) => {
+  app49.post("/wa-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const text = body?.text;
@@ -16322,7 +16437,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
     return c.json({ ok: true });
   });
-  app48.post("/wa-channel/reply-document", async (c) => {
+  app49.post("/wa-channel/reply-document", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const files = body?.files;
@@ -16361,7 +16476,7 @@ function createWaChannelRoutes(deps) {
     }
     return c.json({ ok: true, results });
   });
-  app48.post("/wa-channel/ready", async (c) => {
+  app49.post("/wa-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     if (typeof senderId !== "string") {
@@ -16370,7 +16485,7 @@ function createWaChannelRoutes(deps) {
     deps.onReady?.(senderId);
     return c.json({ ok: true });
   });
-  app48.post("/wa-channel/received", async (c) => {
+  app49.post("/wa-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const waMessageId = body?.waMessageId;
@@ -16380,7 +16495,7 @@ function createWaChannelRoutes(deps) {
     deps.onReceived?.(senderId, waMessageId);
     return c.json({ ok: true });
   });
-  return app48;
+  return app49;
 }
 
 // app/lib/whatsapp/gateway/wa-gateway.ts
@@ -16611,8 +16726,8 @@ var InboundHub2 = class {
 
 // app/lib/webchat/gateway/routes.ts
 function createWebchatChannelRoutes(deps) {
-  const app48 = new Hono();
-  app48.get("/webchat-channel/inbound", (c) => {
+  const app49 = new Hono();
+  app49.get("/webchat-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -16630,7 +16745,7 @@ function createWebchatChannelRoutes(deps) {
       }
     });
   });
-  app48.post("/webchat-channel/reply", async (c) => {
+  app49.post("/webchat-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -16640,7 +16755,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReply?.(key, Buffer.byteLength(text, "utf8"));
     return c.json({ ok: true });
   });
-  app48.post("/webchat-channel/ready", async (c) => {
+  app49.post("/webchat-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -16649,7 +16764,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app48.post("/webchat-channel/received", async (c) => {
+  app49.post("/webchat-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -16659,7 +16774,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  return app48;
+  return app49;
 }
 
 // app/lib/webchat/gateway/webchat-gateway.ts
@@ -17158,7 +17273,7 @@ watchFile(ALIAS_DOMAINS_PATH, { interval: 2e3 }, () => {
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
-var app47 = new Hono();
+var app48 = new Hono();
 var nativeFileFollowers = /* @__PURE__ */ new Map();
 var waGateway = new WaGateway({
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
@@ -17214,7 +17329,7 @@ var waGateway = new WaGateway({
     nativeFileFollowers.set(senderId, ac);
   }
 });
-app47.route("/", waGateway.routes());
+app48.route("/", waGateway.routes());
 waGateway.startSweeper();
 var webchatGateway = new WebchatGateway({
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
@@ -17237,10 +17352,10 @@ var webchatGateway = new WebchatGateway({
     }
   }
 });
-app47.route("/", webchatGateway.routes());
+app48.route("/", webchatGateway.routes());
 webchatGateway.startSweeper();
-app47.use("*", clientIpMiddleware);
-app47.use("*", async (c, next) => {
+app48.use("*", clientIpMiddleware);
+app48.use("*", async (c, next) => {
   await next();
   c.header("X-Content-Type-Options", "nosniff");
   c.header("Referrer-Policy", "strict-origin-when-cross-origin");
@@ -17250,7 +17365,7 @@ app47.use("*", async (c, next) => {
   );
 });
 var HTTP_LOG_PATHS = /* @__PURE__ */ new Set(["/vnc-viewer.html", "/vnc-popout.html"]);
-app47.use("*", async (c, next) => {
+app48.use("*", async (c, next) => {
   if (!HTTP_LOG_PATHS.has(c.req.path)) {
     await next();
     return;
@@ -17268,7 +17383,7 @@ app47.use("*", async (c, next) => {
     });
   }
 });
-app47.use("*", async (c, next) => {
+app48.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (!isPublicHost(host)) {
     await next();
@@ -17299,7 +17414,7 @@ function resolveRemoteAuthOpts() {
   return brandLoginOpts;
 }
 var MAX_LOGIN_BODY = 8 * 1024;
-app47.post("/__remote-auth/login", async (c) => {
+app48.post("/__remote-auth/login", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   if (!requestIsTlsTerminated(c)) {
@@ -17344,7 +17459,7 @@ app47.post("/__remote-auth/login", async (c) => {
     }
   });
 });
-app47.get("/__remote-auth/logout", (c) => {
+app48.get("/__remote-auth/logout", (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   console.error(`[remote-auth] logout ip=${clientIp}`);
@@ -17357,7 +17472,7 @@ app47.get("/__remote-auth/logout", (c) => {
     }
   });
 });
-app47.post("/__remote-auth/change-password", async (c) => {
+app48.post("/__remote-auth/change-password", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   const rateLimited = checkRateLimit(client);
@@ -17408,13 +17523,13 @@ app47.post("/__remote-auth/change-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "change", changeError: "Failed to save password", redirect }), 200);
   }
 });
-app47.get("/__remote-auth/setup", (c) => {
+app48.get("/__remote-auth/setup", (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "setup" }), 200);
 });
-app47.post("/__remote-auth/set-initial-password", async (c) => {
+app48.post("/__remote-auth/set-initial-password", async (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
@@ -17452,10 +17567,10 @@ app47.post("/__remote-auth/set-initial-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "setup", setupError: "Failed to save password. Please try again." }), 200);
   }
 });
-app47.get("/api/remote-auth/status", (c) => {
+app48.get("/api/remote-auth/status", (c) => {
   return c.json({ configured: isRemoteAuthConfigured() });
 });
-app47.post("/api/remote-auth/set-password", async (c) => {
+app48.post("/api/remote-auth/set-password", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -17486,9 +17601,9 @@ app47.post("/api/remote-auth/set-password", async (c) => {
     return c.json({ error: "Failed to save password" }, 500);
   }
 });
-app47.route("/api/_client-error", client_error_default);
+app48.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
-app47.use("*", async (c, next) => {
+app48.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path2 = c.req.path;
   if (path2 === "/favicon.ico" || path2.startsWith("/assets/") || path2.startsWith("/brand/")) {
@@ -17521,16 +17636,17 @@ app47.use("*", async (c, next) => {
   console.error(`[remote-auth] login required ip=${clientIp} path=${path2} ${disambig}`);
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), redirect: path2 }), 200);
 });
-app47.route("/api/health", health_default);
-app47.route("/api/chat", chat_default);
-app47.route("/api/whatsapp", whatsapp_default);
-app47.route("/api/whatsapp-reader", whatsapp_reader_default);
-app47.route("/api/webchat", createWebchatRoutes({ handleInbound: (input) => webchatGateway.handleInbound(input) }));
-app47.route("/api/telegram", telegram_default);
-app47.route("/api/onboarding", onboarding_default);
-app47.route("/api/admin", admin_default);
-app47.route("/api/access", access_default);
-app47.route("/api/session", session_default2);
+app48.route("/api/health", health_default);
+app48.route("/api/chat", chat_default);
+app48.route("/api/whatsapp", whatsapp_default);
+app48.route("/api/whatsapp-reader", whatsapp_reader_default);
+app48.route("/api/webchat", createWebchatRoutes({ handleInbound: (input) => webchatGateway.handleInbound(input) }));
+app48.route("/api/webchat/greeting", webchat_greeting_default);
+app48.route("/api/telegram", telegram_default);
+app48.route("/api/onboarding", onboarding_default);
+app48.route("/api/admin", admin_default);
+app48.route("/api/access", access_default);
+app48.route("/api/session", session_default2);
 var SAFE_SLUG_RE2 = /^[a-z][a-z0-9-]{2,49}$/;
 var SAFE_FILENAME_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var IMAGE_MIME = {
@@ -17542,7 +17658,7 @@ var IMAGE_MIME = {
   ".svg": "image/svg+xml",
   ".ico": "image/x-icon"
 };
-app47.get("/agent-assets/:slug/:filename", (c) => {
+app48.get("/agent-assets/:slug/:filename", (c) => {
   const slug = c.req.param("slug");
   const filename = c.req.param("filename");
   if (!SAFE_SLUG_RE2.test(slug)) {
@@ -17577,7 +17693,7 @@ app47.get("/agent-assets/:slug/:filename", (c) => {
     "Cache-Control": "public, max-age=3600"
   });
 });
-app47.get("/generated/:filename", (c) => {
+app48.get("/generated/:filename", (c) => {
   const filename = c.req.param("filename");
   if (!SAFE_FILENAME_RE.test(filename) || filename.includes("..")) {
     console.error(`[generated] serve file=${filename} status=403`);
@@ -17607,10 +17723,10 @@ app47.get("/generated/:filename", (c) => {
     "Cache-Control": "public, max-age=86400"
   });
 });
-app47.route("/sites", sites_default);
-app47.route("/listings", listings_default);
-app47.route("/v", visitor_event_default);
-app47.route("/v", visitor_consent_default);
+app48.route("/sites", sites_default);
+app48.route("/listings", listings_default);
+app48.route("/v", visitor_event_default);
+app48.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
@@ -17741,7 +17857,7 @@ function escapeHtml(s) {
 function agentUnavailableHtml() {
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(BRAND.productName)}</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1.5rem;color:#222"><h1 style="font-size:1.25rem">Agent unavailable</h1><p>This agent isn't available right now. If you reached this page from a saved link, the agent may have been turned off.</p></body></html>`;
 }
-app47.get("/", (c) => {
+app48.get("/", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) {
     const defaultSlug = resolveDefaultSlug();
@@ -17757,12 +17873,12 @@ app47.get("/", (c) => {
   }
   return c.html(cachedHtml("index.html"));
 });
-app47.get("/public", (c) => {
+app48.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
 });
-app47.get("/public-chat", (c) => {
+app48.get("/public-chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
@@ -17781,9 +17897,9 @@ async function logViewerFetch(c, next) {
     duration_ms: Date.now() - start
   });
 }
-app47.use("/vnc-viewer.html", logViewerFetch);
-app47.use("/vnc-popout.html", logViewerFetch);
-app47.get("/vnc-popout.html", (c) => {
+app48.use("/vnc-viewer.html", logViewerFetch);
+app48.use("/vnc-popout.html", logViewerFetch);
+app48.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
     html = readFileSync24(resolve27(process.cwd(), "public", "vnc-popout.html"), "utf-8");
@@ -17796,7 +17912,7 @@ app47.get("/vnc-popout.html", (c) => {
   }
   return c.html(html);
 });
-app47.post("/api/vnc/client-event", async (c) => {
+app48.post("/api/vnc/client-event", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -17817,35 +17933,30 @@ app47.post("/api/vnc/client-event", async (c) => {
   });
   return c.json({ ok: true });
 });
-app47.get("/g/:slug", (c) => {
+app48.get("/g/:slug", (c) => {
   return c.html(brandedPublicHtml());
 });
-app47.get("/graph", (c) => {
+app48.get("/graph", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("graph.html"));
 });
-app47.get("/chat", (c) => {
+app48.get("/chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("chat.html"));
 });
-app47.get("/sessions", (c) => {
-  const host = (c.req.header("host") ?? "").split(":")[0];
-  if (isPublicHost(host)) return c.text("Not found", 404);
-  return c.html(cachedHtml("sessions.html"));
-});
-app47.get("/data", (c) => {
+app48.get("/data", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app47.get("/browser", (c) => {
+app48.get("/browser", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("browser.html"));
 });
-app47.get("/:slug", async (c, next) => {
+app48.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN.test(`/${slug}`)) {
     const account = resolveAccount();
@@ -17860,13 +17971,13 @@ app47.get("/:slug", async (c, next) => {
   await next();
 });
 if (brandFaviconPath !== "/favicon.ico") {
-  app47.get("/favicon.ico", (c) => {
+  app48.get("/favicon.ico", (c) => {
     c.header("Cache-Control", "public, max-age=300");
     return c.redirect(brandFaviconPath, 302);
   });
 }
-app47.use("/*", serveStatic({ root: "./public" }));
-app47.all("*", (c) => {
+app48.use("/*", serveStatic({ root: "./public" }));
+app48.all("*", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path2 = c.req.path;
   if (isPublicHost(host)) {
@@ -17880,7 +17991,7 @@ app47.all("*", (c) => {
 });
 var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
-var httpServer = serve({ fetch: app47.fetch, port, hostname });
+var httpServer = serve({ fetch: app48.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startAuthHealthHeartbeat();
 {
@@ -17919,7 +18030,7 @@ for (const m of SUBAPP_MANIFEST) {
 }
 try {
   const registered = [];
-  for (const r of app47.routes ?? []) {
+  for (const r of app48.routes ?? []) {
     if (typeof r.path !== "string" || r.path.includes(":") || r.path.includes("*")) continue;
     if (AGENT_SLUG_PATTERN.test(r.path)) {
       registered.push({ method: (r.method ?? "ALL").toUpperCase(), path: r.path });