@rubytech/create-maxy-code 0.1.3 → 0.1.5

package/payload/server/server.js

@@ -1,4 +1,5 @@
 import {
+  ACCOUNTS_DIR,
   BIN_DIR,
   BRAND_NAME,
   CDP_PORT,
@@ -8,6 +9,7 @@ import {
   Hono,
   LOG_DIR,
   MAXY_DIR,
+  PLATFORM_ROOT,
   RFB_PORT,
   TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE,
   TELEGRAM_WEBHOOK_SECRET_FILE,
@@ -15,6 +17,8 @@ import {
   VNC_DISPLAY,
   WEBSOCKIFY_PORT,
   agentLogStream,
+  appendStreamLogLine,
+  autoDeliverPremiumPlugins,
   browserViewerLog,
   canAccessAdmin,
   checkRateLimit,
@@ -24,21 +28,23 @@ import {
   compactSession,
   completeGrantSetup,
   createRemoteSession,
+  emitMissingOnResolve,
   findMissingPlugins,
   fingerprintSessionKey,
   getAccountIdForSession,
   getAgentNameForSession,
+  getBundleMtimeIso,
   getConversationIdForSession,
   getDefaultAccountId,
   getGrantForSession,
   getGroupSlugForSession,
   getRoleForSession,
+  getSessionKeyByConversationId,
   getSessionMessages,
   getStreamLogHandle,
   getUserIdForSession,
   getUserNameForSession,
   getVisitorIdForSession,
-  hasStubAccountDir,
   hashPassword,
   httpLog,
   invokeAgent,
@@ -47,7 +53,7 @@ import {
   isRemoteAuthConfigured,
   launchAction,
   listAdminSessionsInProgress,
-  mintAdminSessionToken,
+  reconcileEnabledPlugins,
   recordFailedAttempt,
   registerGrantSession,
   registerResumedSession,
@@ -69,6 +75,7 @@ import {
   setWantsPriorConversation,
   sigtermFlushStreamLogs,
   streamLogPathFor,
+  stripAttachmentMetaSuffix,
   tryCookieBridgeForConversation,
   unregisterSession,
   validateAgentSlug,
@@ -77,8 +84,9 @@ import {
   verifyPassword,
   verifyRemotePassword,
   vncLog,
-  waitForExit
-} from "./chunk-6YL26HQW.js";
+  waitForExit,
+  walkPremiumBundles
+} from "./chunk-IDKWGLM5.js";
 import {
   CLOUDFLARE_TASK_DIAGNOSTICS,
   appendCloudflareSteps,
@@ -642,8 +650,8 @@ var serveStatic = (options = { root: "" }) => {
 };
 
 // server/index.ts
-import { readFileSync as readFileSync23, existsSync as existsSync26, watchFile } from "fs";
-import { resolve as resolve26, join as join14, basename as basename5 } from "path";
+import { readFileSync as readFileSync22, existsSync as existsSync25, watchFile } from "fs";
+import { resolve as resolve25, join as join13, basename as basename5 } from "path";
 import { homedir as homedir5 } from "os";
 
 // app/lib/agent-slug-pattern.ts
@@ -1625,7 +1633,7 @@ var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
   console.error(`${TAG3} draining credential save queue\u2026`);
   const timer2 = new Promise(
-    (resolve27) => setTimeout(() => resolve27("timeout"), timeoutMs)
+    (resolve26) => setTimeout(() => resolve26("timeout"), timeoutMs)
   );
   const result = await Promise.race([
     credsSaveQueue.then(() => "drained"),
@@ -1753,11 +1761,11 @@ async function createWaSocket(opts) {
   return sock;
 }
 async function waitForConnection(sock) {
-  return new Promise((resolve27, reject) => {
+  return new Promise((resolve26, reject) => {
     const handler = (update) => {
       if (update.connection === "open") {
         sock.ev.off("connection.update", handler);
-        resolve27();
+        resolve26();
       }
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
@@ -1871,14 +1879,14 @@ ${inspected}`;
   return inspect2(err, INSPECT_OPTS2);
 }
 function withTimeout(label, promise, timeoutMs) {
-  return new Promise((resolve27, reject) => {
+  return new Promise((resolve26, reject) => {
     const timer2 = setTimeout(() => {
       reject(new Error(`${label} timed out after ${timeoutMs}ms`));
     }, timeoutMs);
     promise.then(
       (value) => {
         clearTimeout(timer2);
-        resolve27(value);
+        resolve26(value);
       },
       (err) => {
         clearTimeout(timer2);
@@ -2413,8 +2421,8 @@ async function persistWhatsAppMessage(input) {
   const { givenName, familyName } = splitName(input.pushName);
   const prev = sessionWriteLocks.get(input.cacheKey);
   let release;
-  const mine = new Promise((resolve27) => {
-    release = resolve27;
+  const mine = new Promise((resolve26) => {
+    release = resolve26;
   });
   const chained = (prev ?? Promise.resolve()).then(() => mine);
   sessionWriteLocks.set(input.cacheKey, chained);
@@ -2598,11 +2606,6 @@ async function ensureWhatsAppConversation(input) {
   }
 }
 
-// app/lib/claude-agent/account.ts
-var ACCOUNTS_DIR = "";
-var PLATFORM_ROOT = "";
-var resolveAccount2 = (..._args) => null;
-
 // ../lib/account-enumeration/src/index.ts
 import { readdirSync, readFileSync as readFileSync4 } from "fs";
 import { resolve as resolve3 } from "path";
@@ -3456,11 +3459,11 @@ async function connectWithReconnect(conn) {
       console.error(
         `${TAG13} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
-      await new Promise((resolve27) => {
-        const timer2 = setTimeout(resolve27, delay);
+      await new Promise((resolve26) => {
+        const timer2 = setTimeout(resolve26, delay);
         conn.abortController.signal.addEventListener("abort", () => {
           clearTimeout(timer2);
-          resolve27();
+          resolve26();
         }, { once: true });
       });
     }
@@ -3468,16 +3471,16 @@ async function connectWithReconnect(conn) {
   }
 }
 function waitForDisconnectEvent(conn) {
-  return new Promise((resolve27) => {
+  return new Promise((resolve26) => {
     if (!conn.sock) {
-      resolve27();
+      resolve26();
       return;
     }
     const sock = conn.sock;
     const handler = (update) => {
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
-        resolve27();
+        resolve26();
       }
     };
     sock.ev.on("connection.update", handler);
@@ -3739,8 +3742,8 @@ async function handleInboundMessage(conn, msg) {
     const conversationKey = isGroup ? remoteJid : senderPhone;
     const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
     let resolvePending;
-    const sttPending = new Promise((resolve27) => {
-      resolvePending = resolve27;
+    const sttPending = new Promise((resolve26) => {
+      resolvePending = resolve26;
     });
     if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
     try {
@@ -4157,20 +4160,20 @@ async function probeApiKey() {
   return result.status;
 }
 function checkPort(port2, timeoutMs = 500) {
-  return new Promise((resolve27) => {
+  return new Promise((resolve26) => {
     const socket = createConnection2(port2, "127.0.0.1");
     socket.setTimeout(timeoutMs);
     socket.once("connect", () => {
       socket.destroy();
-      resolve27(true);
+      resolve26(true);
     });
     socket.once("error", () => {
       socket.destroy();
-      resolve27(false);
+      resolve26(false);
     });
     socket.once("timeout", () => {
       socket.destroy();
-      resolve27(false);
+      resolve26(false);
     });
   });
 }
@@ -6697,8 +6700,8 @@ async function startLogin(opts) {
   resetActiveLogin(accountId);
   let resolveQr = null;
   let rejectQr = null;
-  const qrPromise = new Promise((resolve27, reject) => {
-    resolveQr = resolve27;
+  const qrPromise = new Promise((resolve26, reject) => {
+    resolveQr = resolve26;
     rejectQr = reject;
   });
   const qrTimer = setTimeout(
@@ -7659,17 +7662,6 @@ app8.post("/set-pin", async (c) => {
   if (existingUsers !== null && existingUsers.length > 0) {
     return c.json({ error: "PIN is already configured." }, 409);
   }
-  const stubCheck = hasStubAccountDir();
-  if (stubCheck.stub) {
-    console.error(
-      `[onboarding] set-pin REFUSED reason=stub-account-dirs dirs=${stubCheck.dirs.join(",")}`
-    );
-    return c.json({
-      error: `Onboarding refused: data/accounts/ contains ${stubCheck.dirs.length} directory/ies without account.json (${stubCheck.dirs.join(", ")}). Resolve the stub before setting up.`,
-      code: "STUB_ACCOUNT_DIR",
-      dirs: stubCheck.dirs
-    }, 409);
-  }
   let body;
   try {
     body = await c.req.json();
@@ -7996,6 +7988,7 @@ var client_error_default = app9;
 import { readFileSync as readFileSync14, readdirSync as readdirSync4, statSync as statSync4, writeFileSync as writeFileSync10, existsSync as existsSync12 } from "fs";
 import { join as join9 } from "path";
 import { createHash as createHash2 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 var deprecationLogged = /* @__PURE__ */ new Set();
 function hashPin2(pin) {
   return createHash2("sha256").update(pin).digest("hex");
@@ -8071,7 +8064,7 @@ async function resolveUserIdentity(accountId, userId) {
 async function createAdminSession(accountId, thinkingView, userId, userName, role, avatar) {
   const account = resolveAccount();
   const effectiveThinkingView = thinkingView ?? account?.config.thinkingView ?? "default";
-  const signedSessionToken = userId ? mintAdminSessionToken({ accountId, userId }) : crypto.randomUUID();
+  const signedSessionToken = randomUUID7();
   const cacheKey = fingerprintSessionKey(signedSessionToken);
   registerSession(cacheKey, "admin", accountId, void 0, userId, userName, role);
   if (userId) setWantsPriorConversation(cacheKey);
@@ -8373,9 +8366,6 @@ app13.post("/", requireAdminSession, async (c) => {
 });
 var new_session_submit_default = app13;
 
-// app/lib/claude-agent/stream-log-writer.ts
-var appendStreamLogLine = (..._args) => null;
-
 // server/routes/admin/failure-report.ts
 var SESSION_KEY_RE = /^sk_[0-9a-f]{16}$/i;
 var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -8544,12 +8534,6 @@ function resolveSessionLogPaths(filename, logDirs) {
   return { hits, tried };
 }
 
-// app/lib/claude-agent/session-store.ts
-var getSessionKeyByConversationId = (..._args) => null;
-
-// app/lib/claude-agent/logging.ts
-var emitMissingOnResolve = (..._args) => null;
-
 // server/routes/admin/logs.ts
 var TAIL_BYTES = 8192;
 var app17 = new Hono();
@@ -8859,9 +8843,6 @@ import crypto2 from "crypto";
 import { resolve as resolvePath } from "path";
 import { existsSync as existsSync17 } from "fs";
 
-// app/lib/claude-agent/summary-helpers.ts
-var stripAttachmentMetaSuffix = (..._args) => null;
-
 // app/lib/synthetic-marker.ts
 var CLOUDFLARE_MARKER_PREFIX = "Cloudflare setup completed (actionId: ";
 var COMPONENT_DONE_PREFIX = '{"_componentDone"';
@@ -10081,9 +10062,6 @@ var CLOUDFLARE_SETUP_FORM_SCHEMA = {
   secretFields: ["password", "session_key", "messageId"]
 };
 
-// app/lib/claude-agent/spawn-env.ts
-var getBundleMtimeIso = (..._args) => null;
-
 // server/routes/admin/cloudflare.ts
 var SETUP_TIMEOUT_MS = 10 * 60 * 1e3;
 var DOMAINS_TIMEOUT_MS = 40 * 1e3;
@@ -10336,8 +10314,8 @@ app27.get("/tunnels", requireAdminSession, async (c) => {
   if (!correlationId) return err("session", "No active conversation for session \u2014 refresh chat.");
   streamLogPath = streamLogPathFor(accountId, correlationId).streamLogPath;
   const certPath = resolve16(homedir4(), brand.configDir, "cloudflared", "cert.pem");
-  const { existsSync: existsSync27 } = await import("fs");
-  if (!existsSync27(certPath)) {
+  const { existsSync: existsSync26 } = await import("fs");
+  if (!existsSync26(certPath)) {
     return err("cert", `Cloudflare origin certificate is not on disk yet (${certPath}). Complete the Cloudflare login first by submitting the form once \u2014 the OAuth flow writes cert.pem.`);
   }
   const result = await runFormSpawn({
@@ -10477,7 +10455,7 @@ app27.post("/setup", requireAdminSession, async (c) => {
   } catch (e) {
     log(`retry-decision lookup-failed reason="${e instanceof Error ? e.message : String(e)}" branch=proceed`);
   }
-  const account = resolveAccount2();
+  const account = resolveAccount();
   if (!account) {
     return err("script", "No account on disk for this device \u2014 re-run installer.");
   }
@@ -13660,152 +13638,10 @@ function startGraphHealthTimer() {
   if (typeof timer.unref === "function") timer.unref();
 }
 
-// app/lib/claude-agent/plugin-manifest.ts
-import { resolve as resolve24, join as join13 } from "path";
-import {
-  readFileSync as readFileSync21,
-  writeFileSync as writeFileSync12,
-  readdirSync as readdirSync7,
-  existsSync as existsSync24,
-  statSync as statSync8,
-  cpSync
-} from "fs";
-function readBundleSubPlugins(bundlePath) {
-  if (!existsSync24(bundlePath)) return [];
-  let raw;
-  try {
-    raw = readFileSync21(bundlePath, "utf-8");
-  } catch {
-    return [];
-  }
-  const fm = raw.match(/^---\n([\s\S]*?)\n---/);
-  if (!fm) return [];
-  const subs = [];
-  let inPlugins = false;
-  for (const line of fm[1].split("\n")) {
-    if (/^plugins:/.test(line)) {
-      inPlugins = true;
-      continue;
-    }
-    if (inPlugins) {
-      const m = line.match(/^\s+- (.+)/);
-      if (m) subs.push(m[1].trim());
-      else break;
-    }
-  }
-  return subs;
-}
-function walkPremiumBundles() {
-  if (BRAND_NAME === "maxy") return [];
-  const stagingRoot = resolve24(PLATFORM_ROOT, "../premium-plugins");
-  if (!existsSync24(stagingRoot)) return [];
-  let entries;
-  try {
-    entries = readdirSync7(stagingRoot);
-  } catch {
-    return [];
-  }
-  const result = [];
-  for (const bundle of entries) {
-    const bundleDir = resolve24(stagingRoot, bundle);
-    try {
-      if (!statSync8(bundleDir).isDirectory()) continue;
-    } catch {
-      continue;
-    }
-    const declared = readBundleSubPlugins(join13(bundleDir, "BUNDLE.md"));
-    result.push({ bundle, subs: declared.length > 0 ? declared : [bundle] });
-  }
-  return result;
-}
-function autoDeliverPremiumPlugins() {
-  const TAG20 = "[premium-auto-deliver]";
-  const bundles = walkPremiumBundles();
-  if (bundles.length === 0) return;
-  const stagingRoot = resolve24(PLATFORM_ROOT, "../premium-plugins");
-  const pluginsDir = resolve24(PLATFORM_ROOT, "plugins");
-  for (const { bundle, subs } of bundles) {
-    const stagingDir = resolve24(stagingRoot, bundle);
-    const bundlePath = join13(stagingDir, "BUNDLE.md");
-    const isBundle = existsSync24(bundlePath);
-    if (isBundle) {
-      let delivered = 0;
-      let skipped = 0;
-      for (const sub of subs) {
-        const target = resolve24(pluginsDir, sub);
-        if (existsSync24(resolve24(target, "PLUGIN.md"))) {
-          skipped++;
-          continue;
-        }
-        const source = resolve24(stagingDir, "plugins", sub);
-        if (!existsSync24(source)) {
-          console.log(`${TAG20} ${bundle}/${sub}: source missing in staging, skipping`);
-          continue;
-        }
-        try {
-          cpSync(source, target, { recursive: true });
-          delivered++;
-        } catch (err) {
-          console.log(`${TAG20} ${bundle}/${sub}: copy failed: ${err instanceof Error ? err.message : String(err)}`);
-        }
-      }
-      console.log(`${TAG20} ${bundle} (bundle): ${delivered} delivered, ${skipped} already present`);
-    } else {
-      const target = resolve24(pluginsDir, bundle);
-      if (existsSync24(resolve24(target, "PLUGIN.md"))) {
-        console.log(`${TAG20} ${bundle}: already present, skipping`);
-      } else {
-        try {
-          cpSync(stagingDir, target, { recursive: true });
-          console.log(`${TAG20} ${bundle} (standalone): delivered`);
-        } catch (err) {
-          console.log(`${TAG20} ${bundle}: copy failed: ${err instanceof Error ? err.message : String(err)}`);
-        }
-      }
-    }
-  }
-}
-function reconcileEnabledPlugins(accountDir, config) {
-  const TAG20 = "[premium-auto-deliver]";
-  if (!accountDir || !config) return;
-  const bundles = walkPremiumBundles();
-  const pluginsDir = resolve24(PLATFORM_ROOT, "plugins");
-  const bundleNames = [];
-  const allSubs = [];
-  for (const { bundle, subs } of bundles) {
-    bundleNames.push(bundle);
-    for (const sub of subs) {
-      if (!existsSync24(resolve24(pluginsDir, sub, "PLUGIN.md"))) continue;
-      allSubs.push(sub);
-    }
-  }
-  const current = Array.isArray(config.enabledPlugins) ? config.enabledPlugins : [];
-  const currentSet = new Set(current);
-  const added = [];
-  for (const sub of allSubs) {
-    if (currentSet.has(sub)) continue;
-    currentSet.add(sub);
-    added.push(sub);
-  }
-  console.log(`${TAG20} brand=${BRAND_NAME} bundles=[${bundleNames.join(",")}] subs=[${allSubs.join(",")}] stamped=${added.length}`);
-  if (added.length === 0) return;
-  const merged = [...currentSet];
-  const configPath2 = resolve24(accountDir, "account.json");
-  try {
-    const raw = readFileSync21(configPath2, "utf-8");
-    const parsed = JSON.parse(raw);
-    parsed.enabledPlugins = merged;
-    writeFileSync12(configPath2, JSON.stringify(parsed, null, 2) + "\n");
-    config.enabledPlugins = merged;
-  } catch (err) {
-    console.error(`${TAG20} enabled-stamp write failed: ${err instanceof Error ? err.message : String(err)}`);
-  }
-}
-
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash3, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync25, readFileSync as readFileSync22, statSync as statSync9 } from "fs";
-import { resolve as resolve25 } from "path";
+import { existsSync as existsSync24, readFileSync as readFileSync21, statSync as statSync8 } from "fs";
+import { resolve as resolve24 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
 function canonicalize(value) {
@@ -13840,7 +13676,7 @@ var PUBKEY_SHA256 = "8eee6bcb33545fd13b16d3199a5735ca5db5062834c7b49dfe4f23801d9
 var GRACE_DAYS = 7;
 var GRACE_MS = GRACE_DAYS * 24 * 60 * 60 * 1e3;
 function pubkeyPath(brand) {
-  return resolve25(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
+  return resolve24(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
 }
 var memo = null;
 function memoKey(mtimeMs, account) {
@@ -13852,11 +13688,11 @@ function resolveEntitlement(brand, account) {
   if (brand.commercialMode !== true) {
     return logResolved(implicitTrust(account), null);
   }
-  const entitlementPath = resolve25(brand.configDir, "entitlement.json");
-  if (!existsSync25(entitlementPath)) {
+  const entitlementPath = resolve24(brand.configDir, "entitlement.json");
+  if (!existsSync24(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
-  const stat7 = statSync9(entitlementPath);
+  const stat7 = statSync8(entitlementPath);
   const key = memoKey(stat7.mtimeMs, account);
   if (memo && memo.key === key) {
     return memo.result;
@@ -13868,7 +13704,7 @@ function resolveEntitlement(brand, account) {
 function verifyAndResolve(brand, entitlementPath, account) {
   let pubkeyPem;
   try {
-    pubkeyPem = readFileSync22(pubkeyPath(brand), "utf-8");
+    pubkeyPem = readFileSync21(pubkeyPath(brand), "utf-8");
   } catch (err) {
     return logResolved(anonymousFallback("pubkey-missing"), {
       reason: "pubkey-missing"
@@ -13882,7 +13718,7 @@ function verifyAndResolve(brand, entitlementPath, account) {
   }
   let envelope;
   try {
-    envelope = JSON.parse(readFileSync22(entitlementPath, "utf-8"));
+    envelope = JSON.parse(readFileSync21(entitlementPath, "utf-8"));
   } catch {
     return logResolved(anonymousFallback("malformed"), { reason: "malformed" });
   }
@@ -14043,14 +13879,14 @@ function clientFrom(c) {
   );
 }
 var PLATFORM_ROOT9 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join14(PLATFORM_ROOT9, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join13(PLATFORM_ROOT9, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", domain: "getmaxy.com" };
-if (BRAND_JSON_PATH && !existsSync26(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && !existsSync25(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
-if (BRAND_JSON_PATH && existsSync26(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync25(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync23(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync22(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -14069,11 +13905,11 @@ var brandLoginOpts = {
   bodyFont: BRAND.defaultFonts?.body,
   logoContainsName: !!BRAND.logoContainsName
 };
-var ALIAS_DOMAINS_PATH2 = join14(homedir5(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH2 = join13(homedir5(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
-    if (!existsSync26(ALIAS_DOMAINS_PATH2)) return null;
-    const parsed = JSON.parse(readFileSync23(ALIAS_DOMAINS_PATH2, "utf-8"));
+    if (!existsSync25(ALIAS_DOMAINS_PATH2)) return null;
+    const parsed = JSON.parse(readFileSync22(ALIAS_DOMAINS_PATH2, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -14447,20 +14283,20 @@ app42.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] no-account slug=${slug} file=${filename}`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve26(account.accountDir, "agents", slug, "assets", filename);
-  const expectedDir = resolve26(account.accountDir, "agents", slug, "assets");
+  const filePath = resolve25(account.accountDir, "agents", slug, "assets", filename);
+  const expectedDir = resolve25(account.accountDir, "agents", slug, "assets");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync26(filePath)) {
+  if (!existsSync25(filePath)) {
     console.error(`[agent-assets] serve slug=${slug} file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync23(filePath);
+  const body = readFileSync22(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
@@ -14477,20 +14313,20 @@ app42.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve26(account.accountDir, "generated", filename);
-  const expectedDir = resolve26(account.accountDir, "generated");
+  const filePath = resolve25(account.accountDir, "generated", filename);
+  const expectedDir = resolve25(account.accountDir, "generated");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync26(filePath)) {
+  if (!existsSync25(filePath)) {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync23(filePath);
+  const body = readFileSync22(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
@@ -14500,9 +14336,9 @@ app42.route("/sites", sites_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
-if (BRAND_JSON_PATH && existsSync26(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync25(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync23(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync22(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -14519,9 +14355,9 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT9) return "unknown";
-    const versionFile = join14(PLATFORM_ROOT9, "config", `.${BRAND.hostname}-version`);
-    if (!existsSync26(versionFile)) return "unknown";
-    const content = readFileSync23(versionFile, "utf-8").trim();
+    const versionFile = join13(PLATFORM_ROOT9, "config", `.${BRAND.hostname}-version`);
+    if (!existsSync25(versionFile)) return "unknown";
+    const content = readFileSync22(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -14562,7 +14398,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync23(resolve26(process.cwd(), "public", file), "utf-8");
+    html = readFileSync22(resolve25(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -14578,26 +14414,26 @@ ${clientErrorReporterScript}
 }
 var brandedHtmlCache = /* @__PURE__ */ new Map();
 function loadBrandingCache(agentSlug) {
-  const configDir2 = join14(homedir5(), BRAND.configDir);
+  const configDir2 = join13(homedir5(), BRAND.configDir);
   try {
-    const accountJsonPath = join14(configDir2, "account.json");
-    if (!existsSync26(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync23(accountJsonPath, "utf-8"));
+    const accountJsonPath = join13(configDir2, "account.json");
+    if (!existsSync25(accountJsonPath)) return null;
+    const account = JSON.parse(readFileSync22(accountJsonPath, "utf-8"));
     const accountId = account.accountId;
     if (!accountId) return null;
-    const cachePath = join14(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
-    if (!existsSync26(cachePath)) return null;
-    return JSON.parse(readFileSync23(cachePath, "utf-8"));
+    const cachePath = join13(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
+    if (!existsSync25(cachePath)) return null;
+    return JSON.parse(readFileSync22(cachePath, "utf-8"));
   } catch {
     return null;
   }
 }
 function resolveDefaultSlug() {
   try {
-    const configDir2 = join14(homedir5(), BRAND.configDir);
-    const accountJsonPath = join14(configDir2, "account.json");
-    if (!existsSync26(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync23(accountJsonPath, "utf-8"));
+    const configDir2 = join13(homedir5(), BRAND.configDir);
+    const accountJsonPath = join13(configDir2, "account.json");
+    if (!existsSync25(accountJsonPath)) return null;
+    const account = JSON.parse(readFileSync22(accountJsonPath, "utf-8"));
     return account.defaultAgent || null;
   } catch {
     return null;
@@ -14670,7 +14506,7 @@ app42.use("/vnc-popout.html", logViewerFetch);
 app42.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync23(resolve26(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync22(resolve25(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -14780,8 +14616,8 @@ try {
 }
 (async () => {
   try {
-    if (!existsSync26(USERS_FILE)) return;
-    const usersRaw = readFileSync23(USERS_FILE, "utf-8").trim();
+    if (!existsSync25(USERS_FILE)) return;
+    const usersRaw = readFileSync22(USERS_FILE, "utf-8").trim();
     if (!usersRaw) return;
     const users = JSON.parse(usersRaw);
     const userId = users[0]?.userId;
@@ -14907,7 +14743,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve26(process.env.MAXY_PLATFORM_ROOT ?? join14(__dirname, "..")),
+  platformRoot: resolve25(process.env.MAXY_PLATFORM_ROOT ?? join13(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     try {