@rubytech/create-maxy-code 0.1.293 → 0.1.295

package/payload/server/server.js

@@ -1214,8 +1214,8 @@ var serveStatic = (options = { root: "" }) => {
 };
 
 // server/index.ts
-import { readFileSync as readFileSync24, existsSync as existsSync25, watchFile } from "fs";
-import { resolve as resolve27, join as join20, basename as basename8 } from "path";
+import { readFileSync as readFileSync26, existsSync as existsSync26, watchFile } from "fs";
+import { resolve as resolve28, join as join21, basename as basename8 } from "path";
 import { homedir as homedir3 } from "os";
 import { monitorEventLoopDelay } from "perf_hooks";
 
@@ -1794,7 +1794,7 @@ var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
   console.error(`${TAG2} draining credential save queue\u2026`);
   const timer2 = new Promise(
-    (resolve28) => setTimeout(() => resolve28("timeout"), timeoutMs)
+    (resolve29) => setTimeout(() => resolve29("timeout"), timeoutMs)
   );
   const result = await Promise.race([
     credsSaveQueue.then(() => "drained"),
@@ -1922,11 +1922,11 @@ async function createWaSocket(opts) {
   return sock;
 }
 async function waitForConnection(sock) {
-  return new Promise((resolve28, reject) => {
+  return new Promise((resolve29, reject) => {
     const handler = (update) => {
       if (update.connection === "open") {
         sock.ev.off("connection.update", handler);
-        resolve28();
+        resolve29();
       }
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
@@ -2040,14 +2040,14 @@ ${inspected}`;
   return inspect2(err, INSPECT_OPTS2);
 }
 function withTimeout(label, promise, timeoutMs) {
-  return new Promise((resolve28, reject) => {
+  return new Promise((resolve29, reject) => {
     const timer2 = setTimeout(() => {
       reject(new Error(`${label} timed out after ${timeoutMs}ms`));
     }, timeoutMs);
     promise.then(
       (value) => {
         clearTimeout(timer2);
-        resolve28(value);
+        resolve29(value);
       },
       (err) => {
         clearTimeout(timer2);
@@ -2646,8 +2646,8 @@ async function persistWhatsAppMessage(input) {
   const { givenName, familyName } = splitName(input.pushName);
   const prev = sessionWriteLocks.get(input.cacheKey);
   let release;
-  const mine = new Promise((resolve28) => {
-    release = resolve28;
+  const mine = new Promise((resolve29) => {
+    release = resolve29;
   });
   const chained = (prev ?? Promise.resolve()).then(() => mine);
   sessionWriteLocks.set(input.cacheKey, chained);
@@ -3727,11 +3727,11 @@ async function connectWithReconnect(conn) {
       console.error(
         `${TAG13} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
-      await new Promise((resolve28) => {
-        const timer2 = setTimeout(resolve28, delay);
+      await new Promise((resolve29) => {
+        const timer2 = setTimeout(resolve29, delay);
         conn.abortController.signal.addEventListener("abort", () => {
           clearTimeout(timer2);
-          resolve28();
+          resolve29();
         }, { once: true });
       });
     }
@@ -3739,16 +3739,16 @@ async function connectWithReconnect(conn) {
   }
 }
 function waitForDisconnectEvent(conn) {
-  return new Promise((resolve28) => {
+  return new Promise((resolve29) => {
     if (!conn.sock) {
-      resolve28();
+      resolve29();
       return;
     }
     const sock = conn.sock;
     const handler = (update) => {
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
-        resolve28();
+        resolve29();
       }
     };
     sock.ev.on("connection.update", handler);
@@ -4008,8 +4008,8 @@ async function handleInboundMessage(conn, msg) {
     const conversationKey = isGroup ? remoteJid : senderPhone;
     const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
     let resolvePending;
-    const sttPending = new Promise((resolve28) => {
-      resolvePending = resolve28;
+    const sttPending = new Promise((resolve29) => {
+      resolvePending = resolve29;
     });
     if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
     try {
@@ -4400,20 +4400,20 @@ function buildX11Env(chromiumWrapperPath, transport = "vnc") {
 
 // server/routes/health.ts
 function checkPort(port2, timeoutMs = 500) {
-  return new Promise((resolve28) => {
+  return new Promise((resolve29) => {
     const socket = createConnection2(port2, "127.0.0.1");
     socket.setTimeout(timeoutMs);
     socket.once("connect", () => {
       socket.destroy();
-      resolve28(true);
+      resolve29(true);
     });
     socket.once("error", () => {
       socket.destroy();
-      resolve28(false);
+      resolve29(false);
     });
     socket.once("timeout", () => {
       socket.destroy();
-      resolve28(false);
+      resolve29(false);
     });
   });
 }
@@ -4529,6 +4529,16 @@ async function writeAttachment(scope, filename, mimeType, sizeBytes, buffer) {
   await writeFile2(metaPath, JSON.stringify(meta, null, 2));
   return { attachmentId, filename, storagePath, metaPath, mimeType, sizeBytes };
 }
+async function storeAttachment(accountId, file) {
+  assertSupportedMime(file.type);
+  if (file.size > MAX_FILE_SIZE_BYTES) {
+    throw new Error(
+      `File "${file.name}" exceeds the 50 MB limit (${(file.size / 1024 / 1024).toFixed(1)} MB).`
+    );
+  }
+  const buffer = Buffer.from(await file.arrayBuffer());
+  return writeAttachment(accountId, file.name, file.type, file.size, buffer);
+}
 async function storePublicAttachment(sessionId, file, buffer) {
   assertSupportedMime(file.type);
   if (file.size > MAX_FILE_SIZE_BYTES) {
@@ -5510,12 +5520,12 @@ async function dispatchOnce(input) {
   });
   if (!entry) return { error: "spawn-failed" };
   entry.lastInboundAt = Date.now();
-  let resolve28;
+  let resolve29;
   const turnPromise = new Promise((r) => {
-    resolve28 = r;
+    resolve29 = r;
   });
   const listener = (text) => {
-    resolve28(text);
+    resolve29(text);
   };
   entry.subscribers.add(listener);
   const writeAtMs = Date.now();
@@ -6301,8 +6311,8 @@ async function startLogin(opts) {
   await clearAuth(authDir);
   let resolveCode = null;
   let rejectCode = null;
-  const codePromise = new Promise((resolve28, reject) => {
-    resolveCode = resolve28;
+  const codePromise = new Promise((resolve29, reject) => {
+    resolveCode = resolve29;
     rejectCode = reject;
   });
   const codeTimer = setTimeout(
@@ -7705,15 +7715,97 @@ var whatsapp_reader_default = app5;
 // server/routes/webchat.ts
 import { basename as basename3, dirname as dirname2 } from "path";
 import { join as join10 } from "path";
+import { readFileSync as readFileSync11, renameSync, writeFileSync as writeFileSync5 } from "fs";
 var WEBCHAT_ADMIN_KEY = "webchat-admin";
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function locateSession(sessionId) {
+  const cfg = claudeConfigDir();
+  if (!cfg) return { projectDir: null, channel: null };
+  for (const { path: path2 } of enumerateJsonls(join10(cfg, "projects"))) {
+    if (basename3(path2) === `${sessionId}.jsonl`) {
+      const dir = dirname2(path2);
+      const meta = readSidecarMeta(join10(dir, `${sessionId}.meta.json`));
+      return { projectDir: dir, channel: meta.channel };
+    }
+  }
+  return { projectDir: null, channel: null };
+}
+function conflictingBinding(channel) {
+  return channel !== null && channel !== "webchat" ? channel : null;
+}
+var NO_INDICATORS = {
+  activity: null,
+  permissionMode: null,
+  effectivePermissionMode: null,
+  model: null
+};
+var indicatorsErrorLogged = false;
+var INDICATORS_TIMEOUT_MS = 1500;
+async function fetchComposerIndicators(sessionId) {
+  let port2;
+  try {
+    port2 = requirePortEnv("CLAUDE_SESSION_MANAGER_PORT", { tag: "webchat:session" });
+  } catch {
+    return NO_INDICATORS;
+  }
+  try {
+    const res = await fetch(`http://127.0.0.1:${port2}/${sessionId}/meta`, {
+      signal: AbortSignal.timeout(INDICATORS_TIMEOUT_MS)
+    });
+    if (!res.ok) return NO_INDICATORS;
+    const body = await res.json();
+    return {
+      activity: typeof body.activity === "string" ? body.activity : null,
+      permissionMode: typeof body.permissionMode === "string" ? body.permissionMode : null,
+      effectivePermissionMode: typeof body.effectivePermissionMode === "string" ? body.effectivePermissionMode : null,
+      model: typeof body.model === "string" ? body.model : null
+    };
+  } catch (err) {
+    if (!indicatorsErrorLogged) {
+      indicatorsErrorLogged = true;
+      console.error(`[webchat:session] indicators-unavailable detail=${err instanceof Error ? err.message : String(err)} (logged once per process)`);
+    }
+    return NO_INDICATORS;
+  }
+}
+var MODEL_ID_PATTERN = /^claude-[a-z0-9][a-z0-9.-]*(\[1m\])?$/;
+var EFFORT_LEVELS = /* @__PURE__ */ new Set(["low", "medium", "high", "xhigh"]);
+function readLevers() {
+  let account;
+  try {
+    account = resolveAccount();
+  } catch {
+    return { leverModel: null, leverEffort: null };
+  }
+  if (!account) return { leverModel: null, leverEffort: null };
+  const model = account.config.adminModel;
+  const effort = account.config.effort;
+  return {
+    leverModel: typeof model === "string" && MODEL_ID_PATTERN.test(model) ? model : null,
+    leverEffort: typeof effort === "string" && EFFORT_LEVELS.has(effort) ? effort : null
+  };
+}
+var REAPPLY_TIMEOUT_MS = 1500;
+async function reapplyLeversViaManager() {
+  let port2;
+  try {
+    port2 = requirePortEnv("CLAUDE_SESSION_MANAGER_PORT", { tag: "webchat:settings" });
+  } catch {
+    return false;
+  }
+  try {
+    const res = await fetch(`http://127.0.0.1:${port2}/reapply-levers`, {
+      method: "POST",
+      signal: AbortSignal.timeout(REAPPLY_TIMEOUT_MS)
+    });
+    return res.ok;
+  } catch {
+    return false;
+  }
+}
 function createWebchatRoutes(deps) {
   const app49 = new Hono();
   app49.post("/send", requireAdminSession, async (c) => {
-    const body = await c.req.json().catch(() => null);
-    const text = body?.text;
-    if (typeof text !== "string" || text.length === 0) {
-      return c.json({ error: "text required" }, 400);
-    }
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -7722,10 +7814,161 @@ function createWebchatRoutes(deps) {
       console.error(`[webchat:inbound] op=send-refused reason=account-unresolved detail=${detail}`);
       return c.json({ error: "account unresolved" }, 503);
     }
-    await deps.handleInbound({ role: "admin", accountId, key: WEBCHAT_ADMIN_KEY, text });
+    let text;
+    let target;
+    let files = [];
+    const contentType = c.req.header("content-type") ?? "";
+    const isMultipart = contentType.startsWith("multipart/form-data");
+    if (isMultipart) {
+      let formData;
+      try {
+        formData = await c.req.formData();
+      } catch {
+        console.error("[webchat:inbound] op=send-refused kind=multipart reason=invalid-body");
+        return c.json({ error: "invalid multipart body" }, 400);
+      }
+      const typed = formData.get("text");
+      text = typeof typed === "string" ? typed : "";
+      files = formData.getAll("attachments").filter((f) => f instanceof File);
+      const rawTarget = formData.get("session");
+      if (rawTarget !== null) {
+        if (typeof rawTarget !== "string" || !UUID_PATTERN.test(rawTarget)) {
+          return c.json({ error: "invalid session id" }, 400);
+        }
+        target = rawTarget;
+      }
+    } else {
+      const body = await c.req.json().catch(() => null);
+      const typed = body?.text;
+      if (typeof typed !== "string" || typed.length === 0) {
+        return c.json({ error: "text required" }, 400);
+      }
+      text = typed;
+      const rawTarget = body?.session;
+      if (rawTarget !== void 0) {
+        if (typeof rawTarget !== "string" || !UUID_PATTERN.test(rawTarget)) {
+          return c.json({ error: "invalid session id" }, 400);
+        }
+        target = rawTarget;
+      }
+    }
+    let deliveryKey = WEBCHAT_ADMIN_KEY;
+    let deliverySessionId;
+    if (target !== void 0) {
+      const { projectDir, channel } = locateSession(target);
+      if (projectDir === null) {
+        return c.json({ error: "session not found" }, 404);
+      }
+      const binding = conflictingBinding(channel);
+      if (binding !== null) {
+        console.error(`[webchat:inbound] op=send-refused key=session:${target.slice(0, 8)} reason=channel-conflict binding=${binding}`);
+        return c.json({ error: "channel-conflict", binding }, 409);
+      }
+      deliveryKey = `session:${target}`;
+      deliverySessionId = target;
+    }
+    if (isMultipart) {
+      const kind = files.some((f) => isAudioMime(f.type)) ? "voice" : "files";
+      if (files.length > MAX_FILES_PER_MESSAGE) {
+        console.error(`[webchat:inbound] op=send-refused kind=${kind} reason=too-many-files count=${files.length}`);
+        return c.json({ error: `Maximum ${MAX_FILES_PER_MESSAGE} files per message.` }, 422);
+      }
+      const audioFile = files.find((f) => isAudioMime(f.type));
+      const regularFiles = files.filter((f) => !isAudioMime(f.type));
+      if (audioFile) {
+        if (audioFile.size > MAX_FILE_SIZE_BYTES) {
+          console.error(`[webchat:inbound] op=send-refused kind=voice reason=oversize bytes=${audioFile.size}`);
+          return c.json({ error: "Recording too long. Try a shorter voice note." }, 422);
+        }
+        const result = await transcribeVoiceNote(audioFile, "admin");
+        if (!result.ok) {
+          console.error(`[webchat:inbound] op=send-refused kind=voice reason=stt-failed detail=${result.error}`);
+          return c.json({ error: result.error }, 422);
+        }
+        text = result.result.text;
+      }
+      for (const file of regularFiles) {
+        try {
+          assertSupportedMime(file.type);
+          if (file.size > MAX_FILE_SIZE_BYTES) {
+            throw new Error(`File "${file.name}" exceeds the 50 MB limit (${(file.size / 1024 / 1024).toFixed(1)} MB).`);
+          }
+        } catch (err) {
+          const detail = err instanceof Error ? err.message : "invalid file";
+          console.error(`[webchat:inbound] op=send-refused kind=files reason=file-rejected detail=${detail}`);
+          return c.json({ error: detail }, 422);
+        }
+      }
+      const stored = [];
+      try {
+        for (const file of regularFiles) {
+          stored.push(await storeAttachment(accountId, file));
+        }
+      } catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        console.error(`[webchat:inbound] op=send-refused kind=files reason=store-failed detail=${detail}`);
+        return c.json({ error: "failed to store attachment" }, 500);
+      }
+      if (stored.length > 0) {
+        const listing = stored.map((s) => `${s.filename} (${s.storagePath})`).join(", ");
+        const note = `[The operator uploaded ${stored.length} file(s): ${listing}]`;
+        text = text.length > 0 ? `${text}
+
+${note}` : note;
+      }
+      if (text.length === 0) {
+        console.error(`[webchat:inbound] op=send-refused kind=${kind} reason=empty-text`);
+        return c.json({ error: "text required" }, 400);
+      }
+      console.log(`[webchat:inbound] op=send-accepted kind=${kind} files=${stored.length} bytes=${Buffer.byteLength(text, "utf8")}`);
+    }
+    if (deliverySessionId !== void 0) {
+      await deps.handleInbound({ role: "admin", accountId, key: deliveryKey, text, sessionId: deliverySessionId });
+    } else {
+      await deps.handleInbound({ role: "admin", accountId, key: deliveryKey, text });
+    }
     return c.json({ ok: true });
   });
-  app49.get("/session", requireAdminSession, (c) => {
+  app49.post("/settings", requireAdminSession, async (c) => {
+    const body = await c.req.json().catch(() => null);
+    const op = body?.op;
+    const value = body?.value;
+    if (op !== "model" && op !== "effort") {
+      console.error(`[webchat:settings] op=${String(op)} outcome=refused reason=unknown-op`);
+      return c.json({ error: "op must be model or effort" }, 400);
+    }
+    if (typeof value !== "string" || op === "model" && !MODEL_ID_PATTERN.test(value) || op === "effort" && !EFFORT_LEVELS.has(value)) {
+      console.error(`[webchat:settings] op=${op} outcome=refused value=${JSON.stringify(value)} reason=invalid-value`);
+      return c.json({ error: `invalid ${op} value` }, 400);
+    }
+    let account;
+    try {
+      account = resolveAccount();
+    } catch {
+      account = null;
+    }
+    if (!account) {
+      console.error(`[webchat:settings] op=${op} outcome=refused value=${value} reason=account-unresolved`);
+      return c.json({ error: "account unresolved" }, 503);
+    }
+    const accountJsonPath = join10(account.accountDir, "account.json");
+    try {
+      const parsed = JSON.parse(readFileSync11(accountJsonPath, "utf8"));
+      if (op === "model") parsed.adminModel = value;
+      else parsed.effort = value;
+      const tmp = `${accountJsonPath}.${process.pid}.tmp`;
+      writeFileSync5(tmp, JSON.stringify(parsed, null, 2), "utf8");
+      renameSync(tmp, accountJsonPath);
+    } catch (err) {
+      const detail = err instanceof Error ? err.message : String(err);
+      console.error(`[webchat:settings] op=${op} outcome=refused value=${value} reason=write-failed detail=${detail}`);
+      return c.json({ error: "persist failed" }, 500);
+    }
+    const settingsApplied = await reapplyLeversViaManager();
+    console.log(`[webchat:settings] op=${op} outcome=accepted value=${value} settingsApplied=${settingsApplied}`);
+    return c.json({ ok: true, settingsApplied });
+  });
+  app49.get("/session", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -7734,6 +7977,15 @@ function createWebchatRoutes(deps) {
       console.error(`[webchat:inbound] op=session-refused reason=account-unresolved detail=${detail}`);
       return c.json({ error: "account unresolved" }, 503);
     }
+    const target = c.req.query("session");
+    if (target !== void 0) {
+      if (!UUID_PATTERN.test(target)) {
+        return c.json({ error: "invalid session id" }, 400);
+      }
+      const { projectDir: projectDir2, channel } = locateSession(target);
+      const indicators2 = await fetchComposerIndicators(target);
+      return c.json({ sessionId: target, projectDir: projectDir2, channelBinding: conflictingBinding(channel), ...indicators2 });
+    }
     const sessionId = adminSessionIdFor(accountId, WEBCHAT_ADMIN_KEY);
     const cfg = claudeConfigDir();
     let projectDir = null;
@@ -7745,11 +7997,57 @@ function createWebchatRoutes(deps) {
         }
       }
     }
-    return c.json({ sessionId, projectDir });
+    const indicators = await fetchComposerIndicators(sessionId);
+    return c.json({ sessionId, projectDir, ...indicators, ...readLevers() });
   });
   return app49;
 }
 
+// server/routes/webchat-greeting.ts
+import { resolve as resolve10 } from "path";
+
+// app/lib/claude-agent/specialist-roster.ts
+import { existsSync as existsSync8, readFileSync as readFileSync12, readdirSync as readdirSync7 } from "fs";
+import { join as join11 } from "path";
+function field(fm, name) {
+  const m = fm.match(new RegExp(`^${name}:\\s*(.*?)\\r?$`, "m"));
+  if (!m) return null;
+  let value = m[1].trim();
+  if (value.startsWith('"') && value.endsWith('"') || value.startsWith("'") && value.endsWith("'")) {
+    value = value.slice(1, -1);
+  }
+  return value || null;
+}
+function readSpecialistRoster(specialistsDir) {
+  if (!existsSync8(specialistsDir)) return { specialists: [], skipped: [] };
+  const entries = readdirSync7(specialistsDir);
+  const specialists = [];
+  const skipped = [];
+  for (const file of entries.sort()) {
+    if (!file.endsWith(".md")) continue;
+    let raw;
+    try {
+      raw = readFileSync12(join11(specialistsDir, file), "utf-8");
+    } catch (err) {
+      skipped.push({ file, reason: err instanceof Error ? err.message : String(err) });
+      continue;
+    }
+    const fm = raw.match(/^---\r?\n([\s\S]*?)\r?\n---/);
+    if (!fm) {
+      skipped.push({ file, reason: "no-frontmatter" });
+      continue;
+    }
+    const name = field(fm[1], "name");
+    if (!name) {
+      skipped.push({ file, reason: "missing-name" });
+      continue;
+    }
+    const summary = field(fm[1], "summary") ?? field(fm[1], "description") ?? "";
+    specialists.push({ name, summary });
+  }
+  return { specialists, skipped };
+}
+
 // server/routes/webchat-greeting.ts
 var OUTSTANDING_TASK_STATUSES = ["pending", "active", "running"];
 var UPCOMING_EVENT_STATUSES = ["scheduled", "due"];
@@ -7808,10 +8106,25 @@ app6.get("/", requireAdminSession, async (c) => {
         return { events: events2, tasks: tasks2 };
       }
     );
+    let specialists = [];
+    try {
+      const roster = readSpecialistRoster(
+        resolve10(ACCOUNTS_DIR, accountId, "specialists", "agents")
+      );
+      specialists = roster.specialists;
+      for (const s of roster.skipped) {
+        console.warn(
+          `[webchat:greeting] op=specialist-skipped file=${s.file} reason=${s.reason}`
+        );
+      }
+    } catch (err) {
+      const detail = err instanceof Error ? err.message : String(err);
+      console.error(`[webchat:greeting] op=specialists-read-failed reason=${detail}`);
+    }
     console.log(
-      `[webchat:greeting] op=read account=${accountId.slice(0, 8)} events=${events.length} tasks=${tasks.total} ms=${Date.now() - started}`
+      `[webchat:greeting] op=read account=${accountId.slice(0, 8)} events=${events.length} tasks=${tasks.total} specialists=${specialists.length} ms=${Date.now() - started}`
     );
-    return c.json({ ok: true, events, tasks });
+    return c.json({ ok: true, events, tasks, specialists });
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
     console.error(`[webchat:greeting] op=read-failed reason=${detail}`);
@@ -7831,8 +8144,8 @@ var webchat_greeting_default = app6;
 
 // server/routes/telegram.ts
 import { homedir } from "os";
-import { resolve as resolve10, join as join11 } from "path";
-import { existsSync as existsSync8, readFileSync as readFileSync11 } from "fs";
+import { resolve as resolve11, join as join12 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync13 } from "fs";
 
 // app/lib/telegram/access-control.ts
 function checkTelegramAccess(params) {
@@ -7882,11 +8195,11 @@ function routeTelegramUpdate(input) {
 var TAG22 = "[telegram-inbound]";
 var DISPATCH_TIMEOUT_MS = 12e4;
 function configDirName() {
-  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve10(process.cwd(), "..");
-  const brandPath = join11(platformRoot2, "config", "brand.json");
-  if (existsSync8(brandPath)) {
+  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve11(process.cwd(), "..");
+  const brandPath = join12(platformRoot2, "config", "brand.json");
+  if (existsSync9(brandPath)) {
     try {
-      return JSON.parse(readFileSync11(brandPath, "utf-8")).configDir ?? ".maxy";
+      return JSON.parse(readFileSync13(brandPath, "utf-8")).configDir ?? ".maxy";
     } catch {
     }
   }
@@ -7894,7 +8207,7 @@ function configDirName() {
 }
 function secretPath(botType) {
   const filename = botType === "admin" ? ".telegram-admin-webhook-secret" : ".telegram-webhook-secret";
-  return resolve10(homedir(), configDirName(), filename);
+  return resolve11(homedir(), configDirName(), filename);
 }
 async function sendTelegram(botToken, chatId, text) {
   try {
@@ -7918,11 +8231,11 @@ app7.post("/", async (c) => {
     return c.json({ ok: false }, 400);
   }
   const sp = secretPath(botType);
-  if (!existsSync8(sp)) {
+  if (!existsSync9(sp)) {
     console.error(`${TAG22} op=reject reason=no-secret-file botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
-  const expected = readFileSync11(sp, "utf-8").trim();
+  const expected = readFileSync13(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
     console.error(`${TAG22} op=reject reason=bad-secret botType=${botType}`);
@@ -7985,12 +8298,12 @@ var telegram_default = app7;
 
 // server/routes/onboarding.ts
 import { spawn, spawnSync as spawnSync2, execFileSync as execFileSync2 } from "child_process";
-import { openSync as openSync2, closeSync as closeSync2, writeFileSync as writeFileSync6, writeSync, existsSync as existsSync10, readFileSync as readFileSync13, unlinkSync } from "fs";
+import { openSync as openSync2, closeSync as closeSync2, writeFileSync as writeFileSync7, writeSync, existsSync as existsSync11, readFileSync as readFileSync15, unlinkSync } from "fs";
 import { createHash as createHash3, randomUUID as randomUUID7 } from "crypto";
 
 // ../lib/admins-write/src/index.ts
-import { existsSync as existsSync9, readFileSync as readFileSync12, writeFileSync as writeFileSync5, renameSync, mkdirSync as mkdirSync2, readdirSync as readdirSync7, statSync as statSync5 } from "fs";
-import { dirname as dirname3, join as join12 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync14, writeFileSync as writeFileSync6, renameSync as renameSync2, mkdirSync as mkdirSync2, readdirSync as readdirSync8, statSync as statSync5 } from "fs";
+import { dirname as dirname3, join as join13 } from "path";
 function logLine(input, result) {
   const userIdShort = input.userId.slice(0, 8);
   console.error(
@@ -8000,15 +8313,15 @@ function logLine(input, result) {
 function writeFileAtomic(filePath, contents, mode) {
   mkdirSync2(dirname3(filePath), { recursive: true });
   const tempPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
-  writeFileSync5(tempPath, contents, mode !== void 0 ? { mode } : void 0);
-  renameSync(tempPath, filePath);
+  writeFileSync6(tempPath, contents, mode !== void 0 ? { mode } : void 0);
+  renameSync2(tempPath, filePath);
 }
 function writeAdminEntry(input) {
   const result = { usersJsonResult: "noop", accountJsonResult: "noop" };
   try {
     let users = [];
-    if (existsSync9(input.usersFile)) {
-      const raw = readFileSync12(input.usersFile, "utf-8").trim();
+    if (existsSync10(input.usersFile)) {
+      const raw = readFileSync14(input.usersFile, "utf-8").trim();
       if (raw) {
         const parsed = JSON.parse(raw);
         if (!Array.isArray(parsed)) {
@@ -8032,11 +8345,11 @@ function writeAdminEntry(input) {
     return result;
   }
   try {
-    const accountJsonPath = join12(input.accountDir, "account.json");
-    if (!existsSync9(accountJsonPath)) {
+    const accountJsonPath = join13(input.accountDir, "account.json");
+    if (!existsSync10(accountJsonPath)) {
       throw new Error(`account.json not found at ${accountJsonPath}`);
     }
-    const config = JSON.parse(readFileSync12(accountJsonPath, "utf-8"));
+    const config = JSON.parse(readFileSync14(accountJsonPath, "utf-8"));
     const admins = config.admins ?? [];
     if (admins.some((a) => a.userId === input.userId)) {
       result.accountJsonResult = "noop";
@@ -8060,9 +8373,9 @@ function checkAdminAuthInvariant(input) {
     usersWithoutAccount: []
   };
   const usersUserIds = /* @__PURE__ */ new Set();
-  if (existsSync9(input.usersFile)) {
+  if (existsSync10(input.usersFile)) {
     try {
-      const raw = readFileSync12(input.usersFile, "utf-8").trim();
+      const raw = readFileSync14(input.usersFile, "utf-8").trim();
       if (raw) {
         const users = JSON.parse(raw);
         for (const u of users) {
@@ -8075,10 +8388,10 @@ function checkAdminAuthInvariant(input) {
     }
   }
   const accountUserIds = /* @__PURE__ */ new Set();
-  if (existsSync9(input.accountsDir)) {
+  if (existsSync10(input.accountsDir)) {
     let entries;
     try {
-      entries = readdirSync7(input.accountsDir);
+      entries = readdirSync8(input.accountsDir);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       console.error(`[${input.tag}] accounts-dir unreadable accountsDir=${input.accountsDir} error=${msg}`);
@@ -8087,17 +8400,17 @@ function checkAdminAuthInvariant(input) {
     }
     for (const entry of entries) {
       if (entry.startsWith(".")) continue;
-      const accountDir = join12(input.accountsDir, entry);
+      const accountDir = join13(input.accountsDir, entry);
       try {
         if (!statSync5(accountDir).isDirectory()) continue;
       } catch {
         continue;
       }
-      const accountJsonPath = join12(accountDir, "account.json");
-      if (!existsSync9(accountJsonPath)) continue;
+      const accountJsonPath = join13(accountDir, "account.json");
+      if (!existsSync10(accountJsonPath)) continue;
       let admins = [];
       try {
-        const config = JSON.parse(readFileSync12(accountJsonPath, "utf-8"));
+        const config = JSON.parse(readFileSync14(accountJsonPath, "utf-8"));
         admins = config.admins ?? [];
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -8137,8 +8450,8 @@ function hashPin2(pin) {
   return createHash3("sha256").update(pin).digest("hex");
 }
 function readUsersFile2() {
-  if (!existsSync10(USERS_FILE)) return null;
-  const raw = readFileSync13(USERS_FILE, "utf-8").trim();
+  if (!existsSync11(USERS_FILE)) return null;
+  const raw = readFileSync15(USERS_FILE, "utf-8").trim();
   if (!raw) return [];
   return JSON.parse(raw);
 }
@@ -8191,7 +8504,7 @@ app8.post("/claude-auth", async (c) => {
     } catch (err) {
       logoutError = err instanceof Error ? err.message : String(err);
     }
-    const credentialsPresent = existsSync10(CLAUDE_CREDENTIALS_FILE);
+    const credentialsPresent = existsSync11(CLAUDE_CREDENTIALS_FILE);
     const ranMs = Date.now() - start;
     console.log(`[onboarding] op=claude-logout credentialsPresent=${credentialsPresent} ranMs=${ranMs} logoutError=${logoutError ? JSON.stringify(logoutError.slice(0, 120)) : "none"}`);
     return c.json({ logged_out: !credentialsPresent });
@@ -8209,7 +8522,7 @@ app8.post("/claude-auth", async (c) => {
     return c.json({ launched: cdpReady });
   }
   ensureLogDir();
-  writeFileSync6(logPath("claude-auth"), "");
+  writeFileSync7(logPath("claude-auth"), "");
   const claudeAuthLogFd = openSync2(logPath("claude-auth"), "a");
   const onClaudeOutput = (chunk) => writeSync(claudeAuthLogFd, chunk);
   if (process.platform === "darwin") {
@@ -8298,9 +8611,9 @@ app8.post("/set-pin", async (c) => {
   console.log(`[set-pin] wrote users.json + account.json admins: userId=${userId.slice(0, 8)}\u2026 role=owner`);
   if (process.platform === "linux") {
     let installOwner = null;
-    if (existsSync10(INSTALL_OWNER_FILE)) {
+    if (existsSync11(INSTALL_OWNER_FILE)) {
       try {
-        const raw = readFileSync13(INSTALL_OWNER_FILE, "utf-8").trim();
+        const raw = readFileSync15(INSTALL_OWNER_FILE, "utf-8").trim();
         if (raw.length > 0) installOwner = raw;
       } catch (err) {
         console.error(`[set-pin] install-owner-read-failed path=${INSTALL_OWNER_FILE} error=${err instanceof Error ? err.message : String(err)}`);
@@ -8373,7 +8686,7 @@ app8.delete("/set-pin", async (c) => {
     unlinkSync(USERS_FILE);
     console.log(`[set-pin] cleared users.json (last entry removed): userId=${matchedUser.userId.slice(0, 8)}\u2026`);
   } else {
-    writeFileSync6(USERS_FILE, JSON.stringify(remaining), { mode: 384 });
+    writeFileSync7(USERS_FILE, JSON.stringify(remaining), { mode: 384 });
     console.log(`[set-pin] removed entry from users.json: userId=${matchedUser.userId.slice(0, 8)}\u2026 remaining=${remaining.length}`);
   }
   return c.json({ ok: true });
@@ -8381,9 +8694,9 @@ app8.delete("/set-pin", async (c) => {
 var onboarding_default = app8;
 
 // server/routes/client-error.ts
-import { appendFileSync, existsSync as existsSync11, renameSync as renameSync2, statSync as statSync6 } from "fs";
-import { join as join13 } from "path";
-var CLIENT_ERRORS_LOG = join13(LOG_DIR, "client-errors.log");
+import { appendFileSync, existsSync as existsSync12, renameSync as renameSync3, statSync as statSync6 } from "fs";
+import { join as join14 } from "path";
+var CLIENT_ERRORS_LOG = join14(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
 var MAX_BODY_SIZE = 8 * 1024;
 var MAX_STACK_LEN = 2e3;
@@ -8426,10 +8739,10 @@ function stackHead(stack) {
 }
 function rotateIfNeeded() {
   try {
-    if (!existsSync11(CLIENT_ERRORS_LOG)) return;
+    if (!existsSync12(CLIENT_ERRORS_LOG)) return;
     const stats = statSync6(CLIENT_ERRORS_LOG);
     if (stats.size < MAX_LOG_SIZE) return;
-    renameSync2(CLIENT_ERRORS_LOG, CLIENT_ERRORS_LOG + ".1");
+    renameSync3(CLIENT_ERRORS_LOG, CLIENT_ERRORS_LOG + ".1");
   } catch (err) {
     console.error(`[client-error] log rotation failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -8708,18 +9021,18 @@ app10.post("/", async (c) => {
 var session_default = app10;
 
 // server/routes/admin/logs.ts
-import { existsSync as existsSync13, readdirSync as readdirSync8, readFileSync as readFileSync14, statSync as statSync7 } from "fs";
-import { resolve as resolve11, basename as basename4 } from "path";
+import { existsSync as existsSync14, readdirSync as readdirSync9, readFileSync as readFileSync16, statSync as statSync7 } from "fs";
+import { resolve as resolve12, basename as basename4 } from "path";
 
 // app/lib/logs-read-resolve.ts
-import { existsSync as existsSync12 } from "fs";
-import { join as join14 } from "path";
+import { existsSync as existsSync13 } from "fs";
+import { join as join15 } from "path";
 function resolveSessionLogPaths(filename, logDirs) {
   const tried = [filename];
   const hits = [];
   for (const dir of logDirs) {
-    const fullPath = join14(dir, filename);
-    if (existsSync12(fullPath)) {
+    const fullPath = join15(dir, filename);
+    if (existsSync13(fullPath)) {
       hits.push({ path: fullPath, dir });
     }
   }
@@ -8736,7 +9049,7 @@ app11.get("/", async (c) => {
   const cacheKeyParam = c.req.query("cacheKey");
   const download = c.req.query("download") === "1";
   const account = resolveAccount();
-  const accountLogDir = account ? resolve11(account.accountDir, "logs") : null;
+  const accountLogDir = account ? resolve12(account.accountDir, "logs") : null;
   const logDirs = [];
   if (accountLogDir) logDirs.push(accountLogDir);
   logDirs.push(LOG_DIR);
@@ -8744,10 +9057,10 @@ app11.get("/", async (c) => {
     const safe = basename4(fileParam);
     const searched = [];
     for (const dir of logDirs) {
-      const filePath = resolve11(dir, safe);
+      const filePath = resolve12(dir, safe);
       searched.push(filePath);
       try {
-        const buffer = readFileSync14(filePath);
+        const buffer = readFileSync16(filePath);
         const onDiskBytes = statSync7(filePath).size;
         const headers = {
           "Content-Type": "text/plain; charset=utf-8",
@@ -8812,7 +9125,7 @@ app11.get("/", async (c) => {
       console.info(`[admin/logs] resolved cacheKey=${cacheKeySlice} sessionId=${sessionIdSlice} via=${primaryId === cacheKey ? "cacheKey" : primaryId === sessionKeyFromConv ? "reverse-lookup" : "sessionId-fallback"}`);
       try {
         const filename = basename4(hit.path);
-        const buffer = readFileSync14(hit.path);
+        const buffer = readFileSync16(hit.path);
         const onDiskBytes = statSync7(hit.path).size;
         const headers = {
           "Content-Type": "text/plain; charset=utf-8",
@@ -8847,19 +9160,19 @@ app11.get("/", async (c) => {
   const seen = /* @__PURE__ */ new Set();
   const logs = {};
   for (const dir of logDirs) {
-    if (!existsSync13(dir)) continue;
+    if (!existsSync14(dir)) continue;
     let files;
     try {
-      files = readdirSync8(dir).filter((f) => f.endsWith(".log"));
+      files = readdirSync9(dir).filter((f) => f.endsWith(".log"));
     } catch (err) {
       const reason = err instanceof Error ? err.message : String(err);
       console.warn(`[admin/logs] readdir-fail dir=${dir} reason=${reason}`);
       continue;
     }
-    files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync7(resolve11(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
+    files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync7(resolve12(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
       seen.add(name);
       try {
-        const content = readFileSync14(resolve11(dir, name));
+        const content = readFileSync16(resolve12(dir, name));
         const tail = content.length > TAIL_BYTES ? content.subarray(content.length - TAIL_BYTES).toString("utf-8") : content.toString("utf-8");
         logs[name] = tail.trim() || "(empty)";
       } catch (err) {
@@ -8898,8 +9211,8 @@ var claude_info_default = app12;
 
 // server/routes/admin/attachment.ts
 import { readFile as readFile2, readdir } from "fs/promises";
-import { existsSync as existsSync14 } from "fs";
-import { resolve as resolve12 } from "path";
+import { existsSync as existsSync15 } from "fs";
+import { resolve as resolve13 } from "path";
 var app13 = new Hono();
 app13.get("/:attachmentId", requireAdminSession, async (c) => {
   const attachmentId = c.req.param("attachmentId");
@@ -8911,12 +9224,12 @@ app13.get("/:attachmentId", requireAdminSession, async (c) => {
   if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(attachmentId)) {
     return new Response("Not found", { status: 404 });
   }
-  const dir = resolve12(ATTACHMENTS_ROOT, accountId, attachmentId);
-  if (!existsSync14(dir)) {
+  const dir = resolve13(ATTACHMENTS_ROOT, accountId, attachmentId);
+  if (!existsSync15(dir)) {
     return new Response("Not found", { status: 404 });
   }
-  const metaPath = resolve12(dir, `${attachmentId}.meta.json`);
-  if (!existsSync14(metaPath)) {
+  const metaPath = resolve13(dir, `${attachmentId}.meta.json`);
+  if (!existsSync15(metaPath)) {
     return new Response("Not found", { status: 404 });
   }
   let meta;
@@ -8930,7 +9243,7 @@ app13.get("/:attachmentId", requireAdminSession, async (c) => {
   if (!dataFile) {
     return new Response("Not found", { status: 404 });
   }
-  const filePath = resolve12(dir, dataFile);
+  const filePath = resolve13(dir, dataFile);
   const buffer = await readFile2(filePath);
   return new Response(new Uint8Array(buffer), {
     headers: {
@@ -8943,24 +9256,24 @@ app13.get("/:attachmentId", requireAdminSession, async (c) => {
 var attachment_default = app13;
 
 // server/routes/admin/agents.ts
-import { resolve as resolve13 } from "path";
-import { readdirSync as readdirSync9, readFileSync as readFileSync15, existsSync as existsSync15, rmSync } from "fs";
+import { resolve as resolve14 } from "path";
+import { readdirSync as readdirSync10, readFileSync as readFileSync17, existsSync as existsSync16, rmSync } from "fs";
 var app14 = new Hono();
 app14.get("/", (c) => {
   const account = resolveAccount();
   if (!account) return c.json({ agents: [] });
-  const agentsDir = resolve13(account.accountDir, "agents");
-  if (!existsSync15(agentsDir)) return c.json({ agents: [] });
+  const agentsDir = resolve14(account.accountDir, "agents");
+  if (!existsSync16(agentsDir)) return c.json({ agents: [] });
   const agents = [];
   try {
-    const entries = readdirSync9(agentsDir, { withFileTypes: true });
+    const entries = readdirSync10(agentsDir, { withFileTypes: true });
     for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
       if (!entry.isDirectory()) continue;
       if (entry.name === "admin") continue;
-      const configPath2 = resolve13(agentsDir, entry.name, "config.json");
-      if (!existsSync15(configPath2)) continue;
+      const configPath2 = resolve14(agentsDir, entry.name, "config.json");
+      if (!existsSync16(configPath2)) continue;
       try {
-        const config = JSON.parse(readFileSync15(configPath2, "utf-8"));
+        const config = JSON.parse(readFileSync17(configPath2, "utf-8"));
         agents.push({
           slug: entry.name,
           displayName: config.displayName ?? entry.name,
@@ -8986,8 +9299,8 @@ app14.delete("/:slug", async (c) => {
   if (slug.includes("/") || slug.includes("..") || slug.includes("\\")) {
     return c.json({ error: "Invalid agent slug" }, 400);
   }
-  const agentDir = resolve13(account.accountDir, "agents", slug);
-  if (!existsSync15(agentDir)) {
+  const agentDir = resolve14(account.accountDir, "agents", slug);
+  if (!existsSync16(agentDir)) {
     return c.json({ error: "Agent not found" }, 404);
   }
   try {
@@ -9016,8 +9329,8 @@ app14.post("/:slug/project", async (c) => {
   if (slug.includes("/") || slug.includes("..") || slug.includes("\\")) {
     return c.json({ error: "Invalid agent slug" }, 400);
   }
-  const agentDir = resolve13(account.accountDir, "agents", slug);
-  if (!existsSync15(agentDir)) {
+  const agentDir = resolve14(account.accountDir, "agents", slug);
+  if (!existsSync16(agentDir)) {
     return c.json({ error: "Agent not found on disk" }, 404);
   }
   try {
@@ -9033,7 +9346,7 @@ var agents_default = app14;
 // server/routes/admin/sessions.ts
 import crypto2 from "crypto";
 import { resolve as resolvePath } from "path";
-import { existsSync as existsSync16, mkdirSync as mkdirSync3, createWriteStream } from "fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync3, createWriteStream } from "fs";
 
 // ../lib/admin-conversation-purge/src/index.ts
 async function purgeAdminConversationJsonls(args) {
@@ -9193,7 +9506,7 @@ function validateAndShapeAttachments(raws, conversationAccountId, sessionId, mes
     let reason = null;
     if (!a.attachmentId || !a.filename || !a.mimeType || !a.storagePath) reason = "schema-fail";
     else if (a.accountId !== conversationAccountId) reason = "account-mismatch";
-    else if (!existsSync16(a.storagePath)) reason = "missing-file";
+    else if (!existsSync17(a.storagePath)) reason = "missing-file";
     if (reason) {
       invalid++;
       try {
@@ -9719,8 +10032,8 @@ app15.put("/:id/label", requireAdminSession, async (c) => {
 var sessions_default = app15;
 
 // app/lib/claude-agent/spawn-context.ts
-import { existsSync as existsSync17, readFileSync as readFileSync16, readdirSync as readdirSync10, statSync as statSync8 } from "fs";
-import { dirname as dirname4, resolve as resolve14, join as join15 } from "path";
+import { existsSync as existsSync18, readFileSync as readFileSync18, readdirSync as readdirSync11, statSync as statSync8 } from "fs";
+import { dirname as dirname4, resolve as resolve15, join as join16 } from "path";
 async function resolveOwnerProfileBlock(accountId, userId) {
   if (!userId) return { ok: false, reason: "missing-user-id" };
   try {
@@ -9734,10 +10047,10 @@ async function resolveOwnerProfileBlock(accountId, userId) {
     return { ok: false, reason: "neo4j-unreachable" };
   }
 }
-function frontmatterField(manifest, field) {
+function frontmatterField(manifest, field2) {
   const fm = manifest.match(/^---\r?\n([\s\S]*?)\r?\n---/);
   if (!fm) return null;
-  const re = new RegExp(`^${field}:\\s*(.*?)\\r?$`, "m");
+  const re = new RegExp(`^${field2}:\\s*(.*?)\\r?$`, "m");
   const m = fm[1].match(re);
   if (!m) return null;
   let value = m[1].trim();
@@ -9749,14 +10062,14 @@ function frontmatterField(manifest, field) {
 function extractPluginToolDescriptions(pluginDir) {
   const out = /* @__PURE__ */ new Map();
   const candidates = [
-    join15(pluginDir, "mcp/dist/index.js"),
-    join15(pluginDir, "mcp/src/index.ts")
+    join16(pluginDir, "mcp/dist/index.js"),
+    join16(pluginDir, "mcp/src/index.ts")
   ];
   let raw = null;
   for (const path2 of candidates) {
-    if (!existsSync17(path2)) continue;
+    if (!existsSync18(path2)) continue;
     try {
-      raw = readFileSync16(path2, "utf-8");
+      raw = readFileSync18(path2, "utf-8");
       break;
     } catch {
     }
@@ -9805,24 +10118,24 @@ function parseSkillPathsFromFrontmatter(fm) {
 }
 function listPluginDirs() {
   const out = /* @__PURE__ */ new Map();
-  const platformPlugins = resolve14(PLATFORM_ROOT, "plugins");
-  if (existsSync17(platformPlugins)) {
-    for (const name of readdirSync10(platformPlugins)) {
-      const dir = join15(platformPlugins, name);
+  const platformPlugins = resolve15(PLATFORM_ROOT, "plugins");
+  if (existsSync18(platformPlugins)) {
+    for (const name of readdirSync11(platformPlugins)) {
+      const dir = join16(platformPlugins, name);
       try {
         if (statSync8(dir).isDirectory()) out.set(name, dir);
       } catch {
       }
     }
   }
-  const premiumRoot = resolve14(dirname4(PLATFORM_ROOT), "premium-plugins");
-  if (existsSync17(premiumRoot)) {
-    for (const bundle of readdirSync10(premiumRoot)) {
-      const bundlePlugins = join15(premiumRoot, bundle, "plugins");
-      if (!existsSync17(bundlePlugins)) continue;
+  const premiumRoot = resolve15(dirname4(PLATFORM_ROOT), "premium-plugins");
+  if (existsSync18(premiumRoot)) {
+    for (const bundle of readdirSync11(premiumRoot)) {
+      const bundlePlugins = join16(premiumRoot, bundle, "plugins");
+      if (!existsSync18(bundlePlugins)) continue;
       try {
-        for (const name of readdirSync10(bundlePlugins)) {
-          const dir = join15(bundlePlugins, name);
+        for (const name of readdirSync11(bundlePlugins)) {
+          const dir = join16(bundlePlugins, name);
           try {
             if (statSync8(dir).isDirectory()) out.set(name, dir);
           } catch {
@@ -9835,10 +10148,10 @@ function listPluginDirs() {
   return out;
 }
 function readEnabledPlugins(accountId) {
-  const accountFile = resolve14(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
-  if (!existsSync17(accountFile)) return /* @__PURE__ */ new Set();
+  const accountFile = resolve15(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
+  if (!existsSync18(accountFile)) return /* @__PURE__ */ new Set();
   try {
-    const parsed = JSON.parse(readFileSync16(accountFile, "utf-8"));
+    const parsed = JSON.parse(readFileSync18(accountFile, "utf-8"));
     return new Set(
       Array.isArray(parsed.enabledPlugins) ? parsed.enabledPlugins.filter((p) => typeof p === "string") : []
     );
@@ -9847,10 +10160,10 @@ function readEnabledPlugins(accountId) {
   }
 }
 function readFrontmatter(path2) {
-  if (!existsSync17(path2)) return null;
+  if (!existsSync18(path2)) return null;
   let raw;
   try {
-    raw = readFileSync16(path2, "utf-8");
+    raw = readFileSync18(path2, "utf-8");
   } catch {
     return null;
   }
@@ -9865,7 +10178,7 @@ function computeActivePlugins(accountId) {
   for (const name of Array.from(enabled).sort()) {
     const dir = pluginDirs.get(name);
     if (!dir) continue;
-    const fm = readFrontmatter(join15(dir, "PLUGIN.md"));
+    const fm = readFrontmatter(join16(dir, "PLUGIN.md"));
     if (!fm) continue;
     const description = frontmatterField(`---
 ${fm}
@@ -9882,7 +10195,7 @@ ${fm}
       `plugin-manifest-tool-coverage plugin=${name} tools=${tools.length} with-desc=${withDesc}`
     );
     if (toolNames.length > 0 && descMap.size === 0) {
-      const hasSource = existsSync17(join15(dir, "mcp/dist/index.js")) || existsSync17(join15(dir, "mcp/src/index.ts"));
+      const hasSource = existsSync18(join16(dir, "mcp/dist/index.js")) || existsSync18(join16(dir, "mcp/src/index.ts"));
       if (hasSource) {
         console.warn(
           `[spawn-context] WARN plugin=${name} mcp source present but tool-description regex matched zero entries \u2014 SDK upgrade may have changed the registration shape`
@@ -9892,7 +10205,7 @@ ${fm}
     const skillPaths = parseSkillPathsFromFrontmatter(fm);
     const skills = [];
     for (const relPath of skillPaths) {
-      const skillPath = join15(dir, relPath);
+      const skillPath = join16(dir, relPath);
       const skillFm = readFrontmatter(skillPath);
       if (!skillFm) continue;
       const skillName = frontmatterField(`---
@@ -9908,11 +10221,11 @@ ${skillFm}
   return out;
 }
 function computeSpecialistDomains(accountId) {
-  const specialistsDir = resolve14(PLATFORM_ROOT, "..", "data/accounts", accountId, "specialists", "agents");
-  if (!existsSync17(specialistsDir)) return [];
+  const specialistsDir = resolve15(PLATFORM_ROOT, "..", "data/accounts", accountId, "specialists", "agents");
+  if (!existsSync18(specialistsDir)) return [];
   let entries;
   try {
-    entries = readdirSync10(specialistsDir);
+    entries = readdirSync11(specialistsDir);
   } catch {
     return [];
   }
@@ -9936,7 +10249,7 @@ function computeSpecialistDomains(accountId) {
   const out = [];
   for (const file of entries.sort()) {
     if (!file.endsWith(".md")) continue;
-    const fm = readFrontmatter(join15(specialistsDir, file));
+    const fm = readFrontmatter(join16(specialistsDir, file));
     if (!fm) continue;
     const wrapped = `---
 ${fm}
@@ -9954,11 +10267,11 @@ ${fm}
   return out;
 }
 function computeDormantPlugins(accountId) {
-  const accountFile = resolve14(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
-  if (!existsSync17(accountFile)) return [];
+  const accountFile = resolve15(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
+  if (!existsSync18(accountFile)) return [];
   let enabled;
   try {
-    const raw = readFileSync16(accountFile, "utf-8");
+    const raw = readFileSync18(accountFile, "utf-8");
     const parsed = JSON.parse(raw);
     enabled = new Set(
       Array.isArray(parsed.enabledPlugins) ? parsed.enabledPlugins.filter((p) => typeof p === "string") : []
@@ -9969,22 +10282,22 @@ function computeDormantPlugins(accountId) {
     );
     return [];
   }
-  const pluginsDir = resolve14(PLATFORM_ROOT, "plugins");
-  if (!existsSync17(pluginsDir)) return [];
+  const pluginsDir = resolve15(PLATFORM_ROOT, "plugins");
+  if (!existsSync18(pluginsDir)) return [];
   let entries;
   try {
-    entries = readdirSync10(pluginsDir);
+    entries = readdirSync11(pluginsDir);
   } catch {
     return [];
   }
   const out = [];
   for (const name of entries) {
     if (enabled.has(name)) continue;
-    const manifestPath = resolve14(pluginsDir, name, "PLUGIN.md");
-    if (!existsSync17(manifestPath)) continue;
+    const manifestPath = resolve15(pluginsDir, name, "PLUGIN.md");
+    if (!existsSync18(manifestPath)) continue;
     let manifest;
     try {
-      manifest = readFileSync16(manifestPath, "utf-8");
+      manifest = readFileSync18(manifestPath, "utf-8");
     } catch {
       continue;
     }
@@ -9998,13 +10311,13 @@ function computeDormantPlugins(accountId) {
 }
 
 // server/routes/admin/claude-sessions.ts
-import { existsSync as existsSync18, readFileSync as readFileSync17 } from "fs";
-import { resolve as resolve15 } from "path";
+import { existsSync as existsSync19, readFileSync as readFileSync19 } from "fs";
+import { resolve as resolve16 } from "path";
 function readTunnelState(brandConfigDir) {
   const statePath = `${process.env.HOME ?? ""}/${brandConfigDir}/cloudflared/tunnel.state`;
-  if (!existsSync18(statePath)) return null;
+  if (!existsSync19(statePath)) return null;
   try {
-    const parsed = JSON.parse(readFileSync17(statePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync19(statePath, "utf-8"));
     const tunnelId = typeof parsed.tunnelId === "string" ? parsed.tunnelId : null;
     const tunnelName = typeof parsed.tunnelName === "string" ? parsed.tunnelName : null;
     const domain = typeof parsed.domain === "string" ? parsed.domain : null;
@@ -10015,10 +10328,10 @@ function readTunnelState(brandConfigDir) {
   }
 }
 function resolveTunnelUrl() {
-  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? resolve15(process.cwd(), "..");
+  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? resolve16(process.cwd(), "..");
   let brand;
   try {
-    brand = JSON.parse(readFileSync17(resolve15(platformRoot2, "config", "brand.json"), "utf-8"));
+    brand = JSON.parse(readFileSync19(resolve16(platformRoot2, "config", "brand.json"), "utf-8"));
   } catch {
     return null;
   }
@@ -10263,15 +10576,15 @@ var events_default = app18;
 import { createReadStream as createReadStream2 } from "fs";
 import { readdir as readdir3, readFile as readFile4, stat as stat4, mkdir as mkdir3, writeFile as writeFile4, unlink as unlink2 } from "fs/promises";
 import { realpathSync as realpathSync4 } from "fs";
-import { basename as basename6, dirname as dirname5, join as join17, resolve as resolve18, sep as sep5 } from "path";
+import { basename as basename6, dirname as dirname5, join as join18, resolve as resolve19, sep as sep5 } from "path";
 import { Readable as Readable2 } from "stream";
 
 // app/lib/data-path.ts
 import { realpathSync as realpathSync3 } from "fs";
-import { resolve as resolve16, normalize, sep as sep3, relative } from "path";
-var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve16(process.cwd(), "../platform");
-var DATA_ROOT = resolve16(PLATFORM_ROOT5, "..", "data");
-var CLAUDE_UPLOADS_ROOT = process.env.CLAUDE_CONFIG_DIR ? resolve16(process.env.CLAUDE_CONFIG_DIR, "uploads") : null;
+import { resolve as resolve17, normalize, sep as sep3, relative } from "path";
+var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve17(process.cwd(), "../platform");
+var DATA_ROOT = resolve17(PLATFORM_ROOT5, "..", "data");
+var CLAUDE_UPLOADS_ROOT = process.env.CLAUDE_CONFIG_DIR ? resolve17(process.env.CLAUDE_CONFIG_DIR, "uploads") : null;
 var ACCOUNT_PARTITION_DIRS = /* @__PURE__ */ new Set(["uploads", "accounts"]);
 var ACCOUNT_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function crossesForeignAccountPartition(relPath, accountId) {
@@ -10284,7 +10597,7 @@ function crossesForeignAccountPartition(relPath, accountId) {
 }
 function resolveUnderRoot(raw, rootAbs, rootLabel) {
   const cleaned = normalize("/" + (raw ?? "").replace(/\\/g, "/")).replace(/^\/+/, "");
-  const absolute = resolve16(rootAbs, cleaned);
+  const absolute = resolve17(rootAbs, cleaned);
   let rootReal;
   try {
     rootReal = realpathSync3(rootAbs);
@@ -10643,7 +10956,7 @@ async function cascadeDeleteDocument(params) {
 
 // app/lib/file-index.ts
 import * as fsp from "fs/promises";
-import { resolve as resolve17, relative as relative2, join as join16, basename as basename5, extname as extname2, sep as sep4 } from "path";
+import { resolve as resolve18, relative as relative2, join as join17, basename as basename5, extname as extname2, sep as sep4 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
@@ -10714,7 +11027,7 @@ async function extractPdf(absolute) {
   return stdout.trim();
 }
 async function ocrPdf(absolute) {
-  const outPdf = join16(tmpdir2(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
+  const outPdf = join17(tmpdir2(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
   try {
     await execFileAsync2(
       "ocrmypdf",
@@ -10776,7 +11089,7 @@ async function readDisplayName(absolute) {
   const stem = dot === -1 ? base : base.slice(0, dot);
   if (base === `${stem}.meta.json`) return null;
   try {
-    const raw = await fsp.readFile(join16(dir, `${stem}.meta.json`), "utf-8");
+    const raw = await fsp.readFile(join17(dir, `${stem}.meta.json`), "utf-8");
     const meta = JSON.parse(raw);
     const dn = meta.displayName ?? meta.filename;
     return typeof dn === "string" && dn.length > 0 ? dn : null;
@@ -10796,7 +11109,7 @@ async function walkSubtree(root, dataRoot, out) {
   let clean = true;
   for (const entry of entries) {
     if (entry.isSymbolicLink()) continue;
-    const abs = join16(root, entry.name);
+    const abs = join17(root, entry.name);
     if (entry.isDirectory()) {
       const sub = await walkSubtree(abs, dataRoot, out);
       if (!sub.clean) clean = false;
@@ -10951,8 +11264,8 @@ async function reconcileFileIndex(accountId, opts) {
   return withSession(opts, async (session) => {
     const walked = [];
     const subtreeRoots = [
-      resolve17(dataRoot, "uploads", accountId),
-      resolve17(dataRoot, "accounts", accountId)
+      resolve18(dataRoot, "uploads", accountId),
+      resolve18(dataRoot, "accounts", accountId)
     ];
     let clean = true;
     for (const root of subtreeRoots) {
@@ -11033,7 +11346,7 @@ async function reconcileFileIndexDebounced(accountId, opts) {
 async function indexFile(accountId, relativePath, opts) {
   const dataRoot = opts?.dataRoot ?? DATA_ROOT;
   const embed2 = opts?.embed ?? embed;
-  const absolute = resolve17(dataRoot, relativePath);
+  const absolute = resolve18(dataRoot, relativePath);
   await withSession(opts, async (session) => {
     const st = await fsp.stat(absolute);
     const wf = {
@@ -11067,7 +11380,7 @@ async function dropFileIndex(accountId, relativePath, opts) {
 var UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta(absDir, baseName) {
   try {
-    const raw = await readFile4(join17(absDir, `${baseName}.meta.json`), "utf8");
+    const raw = await readFile4(join18(absDir, `${baseName}.meta.json`), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.filename === "string") {
       return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
@@ -11078,7 +11391,7 @@ async function readMeta(absDir, baseName) {
 }
 async function readAccountNames() {
   const map = /* @__PURE__ */ new Map();
-  const accountsDir = resolve18(DATA_ROOT, "accounts");
+  const accountsDir = resolve19(DATA_ROOT, "accounts");
   let names;
   try {
     names = await readdir3(accountsDir);
@@ -11087,7 +11400,7 @@ async function readAccountNames() {
   }
   for (const name of names) {
     if (!UUID_RE3.test(name)) continue;
-    const configPath2 = resolve18(accountsDir, name, "account.json");
+    const configPath2 = resolve19(accountsDir, name, "account.json");
     try {
       const raw = await readFile4(configPath2, "utf8");
       const parsed = JSON.parse(raw);
@@ -11105,7 +11418,7 @@ async function readAccountNames() {
 }
 async function enrich(absolute, entry, accountNames) {
   if (entry.kind === "directory" && UUID_RE3.test(entry.name)) {
-    const meta = await readMeta(join17(absolute, entry.name), entry.name);
+    const meta = await readMeta(join18(absolute, entry.name), entry.name);
     if (meta?.filename) {
       entry.displayName = meta.filename;
       entry.mimeType = meta.mimeType;
@@ -11203,7 +11516,7 @@ app19.get("/", requireAdminSession, async (c) => {
         continue;
       }
       try {
-        const entryPath = join17(absolute, name);
+        const entryPath = join18(absolute, name);
         const s = await stat4(entryPath);
         entries.push({
           name,
@@ -11328,8 +11641,8 @@ app19.post("/upload", requireAdminSession, async (c) => {
   }
   const safeName = basename6(file.name).replace(/[\0/\\]/g, "_");
   const finalName = `${Date.now()}-${safeName}`;
-  const destDir = resolve18(DATA_ROOT, "uploads", accountId);
-  const destPath = resolve18(destDir, finalName);
+  const destDir = resolve19(DATA_ROOT, "uploads", accountId);
+  const destPath = resolve19(destDir, finalName);
   try {
     await mkdir3(destDir, { recursive: true });
     const dataRootReal = realpathSync4(DATA_ROOT);
@@ -11394,7 +11707,7 @@ app19.delete("/", requireAdminSession, async (c) => {
     }
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
-    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join17(dirname5(absolute), `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join18(dirname5(absolute), `${stem}.meta.json`) : null;
     await unlink2(absolute);
     if (sidecarPath) {
       try {
@@ -13443,8 +13756,8 @@ var graph_default_view_default = app25;
 
 // server/routes/admin/sidebar-artefacts.ts
 import { readdir as readdir4, stat as stat5 } from "fs/promises";
-import { resolve as resolve19, relative as relative3, isAbsolute, sep as sep6, basename as basename7 } from "path";
-import { existsSync as existsSync19 } from "fs";
+import { resolve as resolve20, relative as relative3, isAbsolute, sep as sep6, basename as basename7 } from "path";
+import { existsSync as existsSync20 } from "fs";
 var LIMIT = 50;
 var ADMIN_AGENT_FILES = ["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"];
 function toDataRootRelPath(absPath) {
@@ -13463,7 +13776,7 @@ app26.get("/", requireAdminSession, async (c) => {
   if (accountFiles === null) {
     return c.json({ error: "Failed to load artefacts" }, 500);
   }
-  const accountDir = resolve19(ACCOUNTS_DIR, accountId);
+  const accountDir = resolve20(ACCOUNTS_DIR, accountId);
   const agents = await fetchAgentTemplateRows(accountDir);
   const artefacts = [...accountFiles, ...agents].sort(
     (a, b) => (b.updatedAt ?? "").localeCompare(a.updatedAt ?? "")
@@ -13514,8 +13827,8 @@ async function fetchAccountFileArtefacts(accountId) {
 async function fetchAgentTemplateRows(accountDir) {
   const rows = [];
   for (const filename of ADMIN_AGENT_FILES) {
-    const overridePath = resolve19(accountDir, "agents", "admin", filename);
-    const bundledPath = resolve19(PLATFORM_ROOT, "templates", "agents", "admin", filename);
+    const overridePath = resolve20(accountDir, "agents", "admin", filename);
+    const bundledPath = resolve20(PLATFORM_ROOT, "templates", "agents", "admin", filename);
     const labelStem = filename.replace(/\.md$/, "");
     const row = await readAgentTemplateRow({
       id: `agent-template:admin:${filename}`,
@@ -13528,12 +13841,12 @@ async function fetchAgentTemplateRows(accountDir) {
     });
     if (row) rows.push(row);
   }
-  const overrideDir = resolve19(accountDir, "specialists", "agents");
-  const bundledDir = resolve19(PLATFORM_ROOT, "templates", "specialists", "agents");
+  const overrideDir = resolve20(accountDir, "specialists", "agents");
+  const bundledDir = resolve20(PLATFORM_ROOT, "templates", "specialists", "agents");
   const specialistNames = await unionSpecialistFilenames(overrideDir, bundledDir);
   for (const filename of specialistNames) {
-    const overridePath = resolve19(overrideDir, filename);
-    const bundledPath = resolve19(bundledDir, filename);
+    const overridePath = resolve20(overrideDir, filename);
+    const bundledPath = resolve20(bundledDir, filename);
     const row = await readAgentTemplateRow({
       id: `agent-template:specialist:${filename}`,
       displayName: filename.replace(/\.md$/, ""),
@@ -13550,7 +13863,7 @@ async function fetchAgentTemplateRows(accountDir) {
 async function unionSpecialistFilenames(overrideDir, bundledDir) {
   const names = /* @__PURE__ */ new Set();
   for (const dir of [overrideDir, bundledDir]) {
-    if (!existsSync19(dir)) continue;
+    if (!existsSync20(dir)) continue;
     try {
       const entries = await readdir4(dir);
       for (const entry of entries) {
@@ -13565,7 +13878,7 @@ async function unionSpecialistFilenames(overrideDir, bundledDir) {
 }
 async function readAgentTemplateRow(inp) {
   let chosenPath = null;
-  if (existsSync19(inp.overridePath)) {
+  if (existsSync20(inp.overridePath)) {
     try {
       validateFilePathInAccount(inp.overridePath, inp.overrideRoot);
       chosenPath = inp.overridePath;
@@ -13576,7 +13889,7 @@ async function readAgentTemplateRow(inp) {
       );
       return null;
     }
-  } else if (existsSync19(inp.bundledPath)) {
+  } else if (existsSync20(inp.bundledPath)) {
     if (!isWithin(inp.bundledPath, inp.bundledRoot)) {
       console.error(
         `[admin/sidebar-artefacts] agent-template-read-failed agent=${inp.displayName} kind=${inp.logName} error="bundled path outside PLATFORM_ROOT"`
@@ -13900,24 +14213,24 @@ app31.get("/", async (c) => {
 var system_stats_default = app31;
 
 // server/routes/admin/health.ts
-import { existsSync as existsSync20, readFileSync as readFileSync18 } from "fs";
-import { resolve as resolve20, join as join18 } from "path";
-var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve20(process.cwd(), "..");
+import { existsSync as existsSync21, readFileSync as readFileSync20 } from "fs";
+import { resolve as resolve21, join as join19 } from "path";
+var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve21(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join18(PLATFORM_ROOT6, "config", "brand.json");
-if (existsSync20(brandJsonPath)) {
+var brandJsonPath = join19(PLATFORM_ROOT6, "config", "brand.json");
+if (existsSync21(brandJsonPath)) {
   try {
-    const brand = JSON.parse(readFileSync18(brandJsonPath, "utf-8"));
+    const brand = JSON.parse(readFileSync20(brandJsonPath, "utf-8"));
     if (brand.hostname) brandHostname = brand.hostname;
   } catch {
   }
 }
-var VERSION_FILE = resolve20(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
+var VERSION_FILE = resolve21(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
 var PROCESS_STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
 var PROBE_TIMEOUT_MS = 1e3;
 function readVersion() {
-  if (!existsSync20(VERSION_FILE)) return "unknown";
-  return readFileSync18(VERSION_FILE, "utf-8").trim() || "unknown";
+  if (!existsSync21(VERSION_FILE)) return "unknown";
+  return readFileSync20(VERSION_FILE, "utf-8").trim() || "unknown";
 }
 async function probeConversationDb() {
   let session;
@@ -14459,16 +14772,16 @@ var admin_default = app39;
 
 // app/lib/access-gate.ts
 import neo4j4 from "neo4j-driver";
-import { readFileSync as readFileSync19 } from "fs";
-import { resolve as resolve21 } from "path";
+import { readFileSync as readFileSync21 } from "fs";
+import { resolve as resolve22 } from "path";
 import { randomUUID as randomUUID10 } from "crypto";
-var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve21(process.cwd(), "..");
+var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve22(process.cwd(), "..");
 var driver = null;
 function readPassword() {
   if (process.env.NEO4J_PASSWORD) return process.env.NEO4J_PASSWORD;
-  const passwordFile = resolve21(PLATFORM_ROOT7, "config/.neo4j-password");
+  const passwordFile = resolve22(PLATFORM_ROOT7, "config/.neo4j-password");
   try {
-    return readFileSync19(passwordFile, "utf-8").trim();
+    return readFileSync21(passwordFile, "utf-8").trim();
   } catch {
     throw new Error(
       `Neo4j password not found. Expected at ${passwordFile} or in NEO4J_PASSWORD env var.`
@@ -14756,9 +15069,9 @@ var verify_token_default = app40;
 
 // app/lib/access-email.ts
 import { spawn as spawn2 } from "child_process";
-import { resolve as resolve22 } from "path";
-var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT ?? resolve22(process.cwd(), "..");
-var SEND_SCRIPT = resolve22(
+import { resolve as resolve23 } from "path";
+var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT ?? resolve23(process.cwd(), "..");
+var SEND_SCRIPT = resolve23(
   PLATFORM_ROOT8,
   "plugins",
   "email",
@@ -14900,8 +15213,8 @@ app42.route("/request-magic-link", request_magic_link_default);
 var access_default = app42;
 
 // server/routes/sites.ts
-import { existsSync as existsSync21, readFileSync as readFileSync20, realpathSync as realpathSync5, statSync as statSync9 } from "fs";
-import { resolve as resolve23 } from "path";
+import { existsSync as existsSync22, readFileSync as readFileSync22, realpathSync as realpathSync5, statSync as statSync9 } from "fs";
+import { resolve as resolve24 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
   ".html": "text/html; charset=utf-8",
@@ -14958,15 +15271,15 @@ app43.get("/:rel{.*}", (c) => {
     }
     segments.push(seg);
   }
-  const rootDir = resolve23(account.accountDir, "sites");
-  let filePath = segments.length === 0 ? rootDir : resolve23(rootDir, ...segments);
+  const rootDir = resolve24(account.accountDir, "sites");
+  let filePath = segments.length === 0 ? rootDir : resolve24(rootDir, ...segments);
   if (filePath !== rootDir && !filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
   let stat7;
   try {
-    stat7 = existsSync21(filePath) ? statSync9(filePath) : null;
+    stat7 = existsSync22(filePath) ? statSync9(filePath) : null;
   } catch {
     stat7 = null;
   }
@@ -14979,13 +15292,13 @@ app43.get("/:rel{.*}", (c) => {
     return c.redirect(target, 301);
   }
   if (stat7?.isDirectory()) {
-    filePath = resolve23(filePath, "index.html");
+    filePath = resolve24(filePath, "index.html");
   }
   if (!filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync21(filePath)) {
+  if (!existsSync22(filePath)) {
     console.error(`[sites] not-found path=${reqPath} status=404`);
     return c.text("Not found", 404);
   }
@@ -15004,7 +15317,7 @@ app43.get("/:rel{.*}", (c) => {
   }
   let body;
   try {
-    body = readFileSync20(realPath);
+    body = readFileSync22(realPath);
   } catch (err) {
     const code = err?.code;
     if (code === "EISDIR") {
@@ -15040,7 +15353,7 @@ var sites_default = app43;
 
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync21, writeFileSync as writeFileSync7 } from "fs";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync23, writeFileSync as writeFileSync8 } from "fs";
 import { dirname as dirname6 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
@@ -15049,7 +15362,7 @@ var cachedSecret = null;
 function getSecret() {
   if (cachedSecret) return cachedSecret;
   try {
-    const hex2 = readFileSync21(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+    const hex2 = readFileSync23(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
     if (hex2.length === SECRET_BYTES * 2) {
       cachedSecret = Buffer.from(hex2, "hex");
       return cachedSecret;
@@ -15059,11 +15372,11 @@ function getSecret() {
   const fresh = randomBytes(SECRET_BYTES).toString("hex");
   try {
     mkdirSync4(dirname6(VISITOR_TOKEN_SECRET_FILE), { recursive: true, mode: 448 });
-    writeFileSync7(VISITOR_TOKEN_SECRET_FILE, fresh, { mode: 384, flag: "wx" });
+    writeFileSync8(VISITOR_TOKEN_SECRET_FILE, fresh, { mode: 384, flag: "wx" });
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
   }
-  const hex = readFileSync21(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+  const hex = readFileSync23(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
   cachedSecret = Buffer.from(hex, "hex");
   return cachedSecret;
 }
@@ -15116,8 +15429,8 @@ var VISITOR_COOKIE_NAME = "mxy_v";
 var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
-import { existsSync as existsSync22, readFileSync as readFileSync22 } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync23, readFileSync as readFileSync24 } from "fs";
+import { join as join20 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -15125,10 +15438,10 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot2 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot2) return null;
-  const brandPath = join19(platformRoot2, "config", "brand.json");
-  if (!existsSync22(brandPath)) return null;
+  const brandPath = join20(platformRoot2, "config", "brand.json");
+  if (!existsSync23(brandPath)) return null;
   try {
-    cached2 = JSON.parse(readFileSync22(brandPath, "utf-8"));
+    cached2 = JSON.parse(readFileSync24(brandPath, "utf-8"));
     return cached2;
   } catch {
     return null;
@@ -15616,14 +15929,14 @@ async function writeEvent(opts) {
 var visitor_event_default = app46;
 
 // server/routes/session.ts
-import { resolve as resolve24 } from "path";
-import { existsSync as existsSync23, writeFileSync as writeFileSync8, mkdirSync as mkdirSync5 } from "fs";
+import { resolve as resolve25 } from "path";
+import { existsSync as existsSync24, writeFileSync as writeFileSync9, mkdirSync as mkdirSync5 } from "fs";
 var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function writeBrandingCache(accountId, agentSlug, branding) {
   try {
-    const cacheDir = resolve24(MAXY_DIR, "branding-cache", accountId);
+    const cacheDir = resolve25(MAXY_DIR, "branding-cache", accountId);
     mkdirSync5(cacheDir, { recursive: true });
-    writeFileSync8(resolve24(cacheDir, `${agentSlug}.json`), JSON.stringify(branding), "utf-8");
+    writeFileSync9(resolve25(cacheDir, `${agentSlug}.json`), JSON.stringify(branding), "utf-8");
   } catch (err) {
     console.error(`[branding] cache write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -15711,8 +16024,8 @@ app47.post("/", async (c) => {
   }
   let agentConfig = null;
   if (account) {
-    const agentDir = resolve24(account.accountDir, "agents", agentSlug);
-    if (!existsSync23(agentDir) || !existsSync23(resolve24(agentDir, "config.json"))) {
+    const agentDir = resolve25(account.accountDir, "agents", agentSlug);
+    if (!existsSync24(agentDir) || !existsSync24(resolve25(agentDir, "config.json"))) {
       return c.json({ error: "Agent not found" }, 404);
     }
     agentConfig = resolveAgentConfig(account.accountDir, agentSlug);
@@ -15992,7 +16305,7 @@ function startGraphHealthTimer() {
 
 // app/lib/file-watcher.ts
 import * as fsp2 from "fs/promises";
-import { resolve as resolve25, sep as sep7 } from "path";
+import { resolve as resolve26, sep as sep7 } from "path";
 var ACCOUNT_UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var DEFAULT_COALESCE_MS = 500;
 var ROOTS = ["uploads", "accounts"];
@@ -16011,7 +16324,7 @@ async function startFileWatcher(opts = {}) {
   const dropFn = opts.drop ?? dropFileIndex;
   for (const r of ROOTS) {
     try {
-      await fsp2.mkdir(resolve25(dataRoot, r), { recursive: true });
+      await fsp2.mkdir(resolve26(dataRoot, r), { recursive: true });
     } catch (err) {
       console.error(
         `[file-watcher] start-failed root="${r}" err="${err.message}" \u2014 index will be maintained by the 5-min reconcile backstop only`
@@ -16032,7 +16345,7 @@ async function startFileWatcher(opts = {}) {
     timers.set(relativePath, t);
   }
   async function runHook(relativePath, accountId) {
-    const absolute = resolve25(dataRoot, relativePath);
+    const absolute = resolve26(dataRoot, relativePath);
     let exists = false;
     try {
       const st = await fsp2.stat(absolute);
@@ -16056,7 +16369,7 @@ async function startFileWatcher(opts = {}) {
     }
   }
   async function watchRoot(rootName) {
-    const absRoot = resolve25(dataRoot, rootName);
+    const absRoot = resolve26(dataRoot, rootName);
     try {
       const iter = fsp2.watch(absRoot, { recursive: true, signal: controller.signal });
       for await (const event of iter) {
@@ -16745,6 +17058,9 @@ function createWebchatChannelRoutes(deps) {
 var QUEUED_THRESHOLD_MS2 = 3e4;
 var ACK_THRESHOLD_MS2 = 3e4;
 var SWEEP_INTERVAL_MS2 = 15e3;
+function keyDisplay(key) {
+  return key.startsWith("session:") ? key.slice(0, "session:".length + 8) : key.slice(0, 8);
+}
 var WebchatGateway = class {
   constructor(deps) {
     this.deps = deps;
@@ -16807,7 +17123,7 @@ var WebchatGateway = class {
     );
     if (willDeliverNow) this.lastDeliveredAt.set(input.key, Date.now());
     console.error(
-      `[webchat:inbound] op=received key=${input.key.slice(0, 8)} role=${input.role} bytes=${bytes} delivery=${willDeliverNow ? "immediate" : "queued"}`
+      `[webchat:inbound] op=received key=${keyDisplay(input.key)} role=${input.role} bytes=${bytes} delivery=${willDeliverNow ? "immediate" : "queued"}`
     );
     if (!hadSubscriber && !this.spawning.has(input.key)) {
       this.spawning.add(input.key);
@@ -16818,7 +17134,10 @@ var WebchatGateway = class {
           key: input.key,
           role: input.role,
           gatewayUrl: this.deps.gatewayUrl,
-          serverPath: this.deps.serverPath
+          serverPath: this.deps.serverPath,
+          // Task 800 — only present on a session-targeted launch, so the
+          // default-path call shape stays byte-identical.
+          ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {}
         });
       } finally {
         this.spawning.delete(input.key);
@@ -16944,8 +17263,8 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash5, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync24, readFileSync as readFileSync23, statSync as statSync10 } from "fs";
-import { resolve as resolve26 } from "path";
+import { existsSync as existsSync25, readFileSync as readFileSync25, statSync as statSync10 } from "fs";
+import { resolve as resolve27 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
 function canonicalize(value) {
@@ -16980,7 +17299,7 @@ var PUBKEY_SHA256 = "8eee6bcb33545fd13b16d3199a5735ca5db5062834c7b49dfe4f23801d9
 var GRACE_DAYS = 7;
 var GRACE_MS = GRACE_DAYS * 24 * 60 * 60 * 1e3;
 function pubkeyPath(brand) {
-  return resolve26(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
+  return resolve27(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
 }
 var memo = null;
 function memoKey(mtimeMs, account) {
@@ -16992,8 +17311,8 @@ function resolveEntitlement(brand, account) {
   if (brand.commercialMode !== true) {
     return logResolved(implicitTrust(account), null);
   }
-  const entitlementPath = resolve26(brand.configDir, "entitlement.json");
-  if (!existsSync24(entitlementPath)) {
+  const entitlementPath = resolve27(brand.configDir, "entitlement.json");
+  if (!existsSync25(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
   const stat7 = statSync10(entitlementPath);
@@ -17008,7 +17327,7 @@ function resolveEntitlement(brand, account) {
 function verifyAndResolve(brand, entitlementPath, account) {
   let pubkeyPem;
   try {
-    pubkeyPem = readFileSync23(pubkeyPath(brand), "utf-8");
+    pubkeyPem = readFileSync25(pubkeyPath(brand), "utf-8");
   } catch (err) {
     return logResolved(anonymousFallback("pubkey-missing"), {
       reason: "pubkey-missing"
@@ -17022,7 +17341,7 @@ function verifyAndResolve(brand, entitlementPath, account) {
   }
   let envelope;
   try {
-    envelope = JSON.parse(readFileSync23(entitlementPath, "utf-8"));
+    envelope = JSON.parse(readFileSync25(entitlementPath, "utf-8"));
   } catch {
     return logResolved(anonymousFallback("malformed"), { reason: "malformed" });
   }
@@ -17183,14 +17502,14 @@ function clientFrom(c) {
   );
 }
 var PLATFORM_ROOT9 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join20(PLATFORM_ROOT9, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join21(PLATFORM_ROOT9, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
-if (BRAND_JSON_PATH && !existsSync25(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && !existsSync26(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
-if (BRAND_JSON_PATH && existsSync25(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync26(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync24(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync26(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -17209,11 +17528,11 @@ var brandLoginOpts = {
   bodyFont: BRAND.defaultFonts?.body,
   logoContainsName: !!BRAND.logoContainsName
 };
-var ALIAS_DOMAINS_PATH = join20(homedir3(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join21(homedir3(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
-    if (!existsSync25(ALIAS_DOMAINS_PATH)) return null;
-    const parsed = JSON.parse(readFileSync24(ALIAS_DOMAINS_PATH, "utf-8"));
+    if (!existsSync26(ALIAS_DOMAINS_PATH)) return null;
+    const parsed = JSON.parse(readFileSync26(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -17241,7 +17560,7 @@ var app48 = new Hono();
 var nativeFileFollowers = /* @__PURE__ */ new Map();
 var waGateway = new WaGateway({
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve27(process.env.MAXY_PLATFORM_ROOT ?? join20(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve28(process.env.MAXY_PLATFORM_ROOT ?? join21(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 — file delivery on the native channel: resolve the platform
   // account + path validation here and funnel through the shared send core.
   sendDocument: async ({ senderId, accountId, filePath, caption }) => {
@@ -17257,7 +17576,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve27(process.env.MAXY_PLATFORM_ROOT ?? join20(__dirname, ".."))
+      platformRoot: resolve28(process.env.MAXY_PLATFORM_ROOT ?? join21(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -17297,14 +17616,14 @@ app48.route("/", waGateway.routes());
 waGateway.startSweeper();
 var webchatGateway = new WebchatGateway({
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WEBCHAT_CHANNEL_SERVER_PATH ?? resolve27(process.env.MAXY_PLATFORM_ROOT ?? join20(__dirname, ".."), "services/webchat-channel/dist/server.js"),
-  ensureChannelSession: async ({ accountId, key, role, gatewayUrl, serverPath }) => {
+  serverPath: process.env.MAXY_WEBCHAT_CHANNEL_SERVER_PATH ?? resolve28(process.env.MAXY_PLATFORM_ROOT ?? join21(__dirname, ".."), "services/webchat-channel/dist/server.js"),
+  ensureChannelSession: async ({ accountId, key, role, gatewayUrl, serverPath, sessionId }) => {
     if (role !== "admin") {
       console.error(`[webchat:inbound] op=spawn-refused key=${key} role=${role} reason=public-path-not-wired`);
       return;
     }
     const result = await managerRcSpawn({
-      sessionId: adminSessionIdFor(accountId, key),
+      sessionId: sessionId ?? adminSessionIdFor(accountId, key),
       role: "admin",
       channel: "webchat",
       senderId: key,
@@ -17638,20 +17957,20 @@ app48.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] no-account slug=${slug} file=${filename}`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve27(account.accountDir, "agents", slug, "assets", filename);
-  const expectedDir = resolve27(account.accountDir, "agents", slug, "assets");
+  const filePath = resolve28(account.accountDir, "agents", slug, "assets", filename);
+  const expectedDir = resolve28(account.accountDir, "agents", slug, "assets");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync25(filePath)) {
+  if (!existsSync26(filePath)) {
     console.error(`[agent-assets] serve slug=${slug} file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync24(filePath);
+  const body = readFileSync26(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
@@ -17668,20 +17987,20 @@ app48.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve27(account.accountDir, "generated", filename);
-  const expectedDir = resolve27(account.accountDir, "generated");
+  const filePath = resolve28(account.accountDir, "generated", filename);
+  const expectedDir = resolve28(account.accountDir, "generated");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync25(filePath)) {
+  if (!existsSync26(filePath)) {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync24(filePath);
+  const body = readFileSync26(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
@@ -17694,9 +18013,9 @@ app48.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
-if (BRAND_JSON_PATH && existsSync25(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync26(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync24(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync26(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -17713,9 +18032,9 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT9) return "unknown";
-    const versionFile = join20(PLATFORM_ROOT9, "config", `.${BRAND.hostname}-version`);
-    if (!existsSync25(versionFile)) return "unknown";
-    const content = readFileSync24(versionFile, "utf-8").trim();
+    const versionFile = join21(PLATFORM_ROOT9, "config", `.${BRAND.hostname}-version`);
+    if (!existsSync26(versionFile)) return "unknown";
+    const content = readFileSync26(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -17756,7 +18075,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync24(resolve27(process.cwd(), "public", file), "utf-8");
+    html = readFileSync26(resolve28(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -17772,13 +18091,13 @@ ${clientErrorReporterScript}
 }
 var brandedHtmlCache = /* @__PURE__ */ new Map();
 function loadBrandingCache(agentSlug) {
-  const configDir2 = join20(homedir3(), BRAND.configDir);
+  const configDir2 = join21(homedir3(), BRAND.configDir);
   try {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join20(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
-    if (!existsSync25(cachePath)) return null;
-    return JSON.parse(readFileSync24(cachePath, "utf-8"));
+    const cachePath = join21(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
+    if (!existsSync26(cachePath)) return null;
+    return JSON.parse(readFileSync26(cachePath, "utf-8"));
   } catch {
     return null;
   }
@@ -17866,7 +18185,7 @@ app48.use("/vnc-popout.html", logViewerFetch);
 app48.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync24(resolve27(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync26(resolve28(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -18022,11 +18341,11 @@ try {
 var ADMINUSER_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 async function runAdminUserReconcileTick() {
   try {
-    if (!existsSync25(USERS_FILE)) {
+    if (!existsSync26(USERS_FILE)) {
       console.error("[adminuser-self-heal] skip reason=no-users-file");
       return;
     }
-    const usersRaw = readFileSync24(USERS_FILE, "utf-8").trim();
+    const usersRaw = readFileSync26(USERS_FILE, "utf-8").trim();
     if (!usersRaw) {
       console.error("[adminuser-self-heal] skip reason=empty-users-file");
       return;
@@ -18136,7 +18455,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve27(process.env.MAXY_PLATFORM_ROOT ?? join20(__dirname, "..")),
+  platformRoot: resolve28(process.env.MAXY_PLATFORM_ROOT ?? join21(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     if (msg.isOwnerMirror) {