@rubytech/create-maxy-code 0.1.308 → 0.1.309

package/payload/server/server.js

@@ -25,6 +25,7 @@ import {
   VISITOR_TOKEN_SECRET_FILE,
   VNC_DISPLAY,
   WEBSOCKIFY_PORT,
+  accessPasswordCollides,
   autoDeliverPremiumPlugins,
   bindVisitorToGroup,
   canAccessAdmin,
@@ -109,7 +110,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-FBGIHWWM.js";
+} from "./chunk-J6WDAWFJ.js";
 import {
   __commonJS,
   __toESM
@@ -1227,7 +1228,7 @@ var serveStatic = (options = { root: "" }) => {
 
 // server/index.ts
 import { readFileSync as readFileSync27, existsSync as existsSync28, watchFile } from "fs";
-import { resolve as resolve30, join as join24, basename as basename8 } from "path";
+import { resolve as resolve31, join as join25, basename as basename9 } from "path";
 import { homedir as homedir3 } from "os";
 import { monitorEventLoopDelay } from "perf_hooks";
 
@@ -1875,7 +1876,7 @@ var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
   console.error(`${TAG2} draining credential save queue\u2026`);
   const timer2 = new Promise(
-    (resolve31) => setTimeout(() => resolve31("timeout"), timeoutMs)
+    (resolve32) => setTimeout(() => resolve32("timeout"), timeoutMs)
   );
   const result = await Promise.race([
     credsSaveQueue.then(() => "drained"),
@@ -2003,11 +2004,11 @@ async function createWaSocket(opts) {
   return sock;
 }
 async function waitForConnection(sock) {
-  return new Promise((resolve31, reject) => {
+  return new Promise((resolve32, reject) => {
     const handler = (update) => {
       if (update.connection === "open") {
         sock.ev.off("connection.update", handler);
-        resolve31();
+        resolve32();
       }
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
@@ -2121,14 +2122,14 @@ ${inspected}`;
   return inspect2(err, INSPECT_OPTS2);
 }
 function withTimeout(label, promise, timeoutMs) {
-  return new Promise((resolve31, reject) => {
+  return new Promise((resolve32, reject) => {
     const timer2 = setTimeout(() => {
       reject(new Error(`${label} timed out after ${timeoutMs}ms`));
     }, timeoutMs);
     promise.then(
       (value) => {
         clearTimeout(timer2);
-        resolve31(value);
+        resolve32(value);
       },
       (err) => {
         clearTimeout(timer2);
@@ -3012,8 +3013,8 @@ async function persistWhatsAppMessage(input) {
   const { givenName, familyName } = splitName(input.pushName);
   const prev = sessionWriteLocks.get(input.cacheKey);
   let release;
-  const mine = new Promise((resolve31) => {
-    release = resolve31;
+  const mine = new Promise((resolve32) => {
+    release = resolve32;
   });
   const chained = (prev ?? Promise.resolve()).then(() => mine);
   sessionWriteLocks.set(input.cacheKey, chained);
@@ -4093,11 +4094,11 @@ async function connectWithReconnect(conn) {
       console.error(
         `${TAG13} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
-      await new Promise((resolve31) => {
-        const timer2 = setTimeout(resolve31, delay);
+      await new Promise((resolve32) => {
+        const timer2 = setTimeout(resolve32, delay);
         conn.abortController.signal.addEventListener("abort", () => {
           clearTimeout(timer2);
-          resolve31();
+          resolve32();
         }, { once: true });
       });
     }
@@ -4105,16 +4106,16 @@ async function connectWithReconnect(conn) {
   }
 }
 function waitForDisconnectEvent(conn) {
-  return new Promise((resolve31) => {
+  return new Promise((resolve32) => {
     if (!conn.sock) {
-      resolve31();
+      resolve32();
       return;
     }
     const sock = conn.sock;
     const handler = (update) => {
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
-        resolve31();
+        resolve32();
       }
     };
     sock.ev.on("connection.update", handler);
@@ -4374,8 +4375,8 @@ async function handleInboundMessage(conn, msg) {
     const conversationKey = isGroup ? remoteJid : senderPhone;
     const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
     let resolvePending;
-    const sttPending = new Promise((resolve31) => {
-      resolvePending = resolve31;
+    const sttPending = new Promise((resolve32) => {
+      resolvePending = resolve32;
     });
     if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
     try {
@@ -4769,20 +4770,20 @@ function buildX11Env(chromiumWrapperPath, transport = "vnc") {
 
 // server/routes/health.ts
 function checkPort(port2, timeoutMs = 500) {
-  return new Promise((resolve31) => {
+  return new Promise((resolve32) => {
     const socket = createConnection2(port2, "127.0.0.1");
     socket.setTimeout(timeoutMs);
     socket.once("connect", () => {
       socket.destroy();
-      resolve31(true);
+      resolve32(true);
     });
     socket.once("error", () => {
       socket.destroy();
-      resolve31(false);
+      resolve32(false);
     });
     socket.once("timeout", () => {
       socket.destroy();
-      resolve31(false);
+      resolve32(false);
     });
   });
 }
@@ -5175,8 +5176,8 @@ function webchatTurnTimeoutMs() {
   return Number(process.env.WEBCHAT_TURN_TIMEOUT_MS ?? String(2 * 6e4));
 }
 function createChatRoutes(deps) {
-  const app50 = new Hono();
-  app50.post("/", async (c) => {
+  const app51 = new Hono();
+  app51.post("/", async (c) => {
     console.log(`[chat-route] entered route=public method=POST`);
     const contentType = c.req.header("content-type") ?? "";
     const account = resolveAccount();
@@ -5399,7 +5400,7 @@ ${result.result.text}` : result.result.text;
       }
     });
   });
-  return app50;
+  return app51;
 }
 
 // server/routes/whatsapp.ts
@@ -5821,8 +5822,8 @@ async function startLogin(opts) {
   await clearAuth(authDir);
   let resolveCode = null;
   let rejectCode = null;
-  const codePromise = new Promise((resolve31, reject) => {
-    resolveCode = resolve31;
+  const codePromise = new Promise((resolve32, reject) => {
+    resolveCode = resolve32;
     rejectCode = reject;
   });
   const codeTimer = setTimeout(
@@ -7442,18 +7443,199 @@ app4.get("/directive", requireAdminSession, (c) => {
 });
 var whatsapp_reader_default = app4;
 
+// server/routes/public-reader.ts
+import { statSync as statSync5, openSync as openSync2, readSync as readSync2, closeSync as closeSync2, watch as watch2 } from "fs";
+import { basename as basename3, dirname as dirname2, join as join11, resolve as resolve12, sep as sep4 } from "path";
+
+// app/lib/whatsapp-reader/delivered-kinds.ts
+var PUBLIC_DELIVERED_KINDS = /* @__PURE__ */ new Set([
+  "operator-inbound",
+  "agent-reply",
+  "agent-reply-document",
+  "agent-error"
+]);
+function isDeliveredKind(kind, set) {
+  return set.has(kind);
+}
+
+// app/lib/public-reader/filter-delivered.ts
+function filterDeliveredFrames(lines) {
+  const turns = [];
+  let dropped = 0;
+  for (const turn of parseTranscript(lines)) {
+    if (isDeliveredKind(turn.kind, PUBLIC_DELIVERED_KINDS)) turns.push(turn);
+    else dropped++;
+  }
+  return { turns, dropped };
+}
+
+// app/lib/public-reader/resolve-visitor-session.ts
+function resolveVisitorSession(rows, visitorPersonId) {
+  const matches = rows.filter(
+    (r) => r.role === "public" && r.channel === "webchat" && r.personId === visitorPersonId
+  );
+  if (matches.length === 0) return null;
+  return matches.reduce(
+    (best, r) => (r.startedAt ?? "") > (best.startedAt ?? "") ? r : best
+  );
+}
+
+// server/routes/public-reader.ts
+var app5 = new Hono();
+var TAG20 = "[public-webchat]";
+function parseAccessSessionId(cookieHeader) {
+  if (!cookieHeader) return null;
+  const part = cookieHeader.split(";").map((p) => p.trim()).find((p) => p.startsWith("__access_session="));
+  return part ? part.slice("__access_session=".length) : null;
+}
+function resolveVisitor(c) {
+  const id = parseAccessSessionId(c.req.header("cookie"));
+  const session = id ? getAccessSession(id) : null;
+  return session && session.personId ? { personId: session.personId } : null;
+}
+function enumeratePublicRows() {
+  const cfg = claudeConfigDir();
+  if (!cfg) return [];
+  const rows = [];
+  for (const { path: path2 } of enumerateJsonls(join11(cfg, "projects"))) {
+    const sessionId = basename3(path2).replace(/\.jsonl$/, "");
+    const projectDir = dirname2(path2);
+    const meta = readSidecarMeta(join11(projectDir, `${sessionId}.meta.json`));
+    rows.push({
+      sessionId,
+      projectDir,
+      role: meta.role,
+      channel: meta.channel,
+      personId: meta.personId,
+      senderId: meta.senderId,
+      startedAt: meta.startedAt
+    });
+  }
+  return rows;
+}
+app5.get("/session", (c) => {
+  const visitor = resolveVisitor(c);
+  if (!visitor) {
+    console.error(`${TAG20} op=reader-refused reason=no-grant path=/session`);
+    return c.json({ error: "gate-required" }, 401);
+  }
+  const found = resolveVisitorSession(enumeratePublicRows(), visitor.personId);
+  if (found) {
+    console.log(`${TAG20} op=session-resume key=${(found.senderId ?? "").slice(0, 8)} sessionId=${found.sessionId.slice(0, 8)}`);
+    return c.json({ sessionId: found.sessionId, projectDir: found.projectDir, sessionKey: found.senderId });
+  }
+  const sessionKey = crypto.randomUUID();
+  console.log(`${TAG20} op=session-new key=${sessionKey.slice(0, 8)}`);
+  return c.json({ sessionId: null, projectDir: null, sessionKey });
+});
+function readFrom2(path2, from) {
+  const end = statSync5(path2).size;
+  if (end <= from) return { buf: Buffer.alloc(0), end: from };
+  const fd = openSync2(path2, "r");
+  try {
+    const buf = Buffer.alloc(end - from);
+    readSync2(fd, buf, 0, buf.length, from);
+    return { buf, end };
+  } finally {
+    closeSync2(fd);
+  }
+}
+app5.get("/stream", (c) => {
+  const visitor = resolveVisitor(c);
+  if (!visitor) {
+    console.error(`${TAG20} op=reader-refused reason=no-grant path=/stream`);
+    return c.json({ error: "gate-required" }, 401);
+  }
+  const sessionId = c.req.query("sessionId") ?? "";
+  const projectDir = c.req.query("projectDir") ?? "";
+  const cfg = claudeConfigDir();
+  const projectsRoot = cfg ? resolve12(join11(cfg, "projects")) : null;
+  if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId)) {
+    return c.json({ error: "bad session reference" }, 400);
+  }
+  const jsonlPath = resolve12(join11(projectDir, `${sessionId}.jsonl`));
+  if (!jsonlPath.startsWith(projectsRoot + sep4)) {
+    return c.json({ error: "bad session reference" }, 400);
+  }
+  const meta = readSidecarMeta(join11(projectDir, `${sessionId}.meta.json`));
+  if (!(meta.role === "public" && meta.channel === "webchat" && meta.personId === visitor.personId)) {
+    console.error(`${TAG20} op=reader-refused reason=not-owner sessionId=${sessionId.slice(0, 8)}`);
+    return c.json({ error: "forbidden" }, 403);
+  }
+  const senderShort = (meta.senderId ?? "").slice(0, 8);
+  const encoder = new TextEncoder();
+  console.log(`${TAG20} op=reader-open key=${senderShort} mode=delivered-only sessionId=${sessionId.slice(0, 8)}`);
+  const send = (controller, turn, id) => controller.enqueue(encoder.encode(`id: ${id}
+data: ${JSON.stringify(turn)}
+
+`));
+  const readable = new ReadableStream({
+    start(controller) {
+      let offset = 0;
+      const emit = (lines) => {
+        const { turns, dropped } = filterDeliveredFrames(lines);
+        for (const turn of turns) send(controller, turn, offset);
+        if (dropped > 0) console.log(`${TAG20} op=reader-filtered key=${senderShort} dropped=${dropped}`);
+      };
+      try {
+        const { buf, end } = readFrom2(jsonlPath, 0);
+        offset = end;
+        emit(buf.toString("utf8").split("\n"));
+      } catch {
+        controller.enqueue(encoder.encode('event: error\ndata: "read-failed"\n\n'));
+      }
+      const drain = () => {
+        try {
+          const { buf, end } = readFrom2(jsonlPath, offset);
+          if (end <= offset) return;
+          const { lines, nextOffset } = splitNewLines(buf, offset);
+          offset = nextOffset;
+          emit(lines);
+        } catch {
+        }
+      };
+      let watcher = null;
+      try {
+        watcher = watch2(jsonlPath, drain);
+      } catch {
+      }
+      const poll = setInterval(drain, 1e3);
+      const heartbeat = setInterval(() => {
+        try {
+          controller.enqueue(encoder.encode(": ping\n\n"));
+        } catch {
+        }
+      }, 2e4);
+      c.req.raw.signal.addEventListener("abort", () => {
+        watcher?.close();
+        clearInterval(poll);
+        clearInterval(heartbeat);
+        console.log(`${TAG20} op=reader-close key=${senderShort}`);
+        try {
+          controller.close();
+        } catch {
+        }
+      });
+    }
+  });
+  return new Response(readable, {
+    headers: { "Content-Type": "text/event-stream", "Cache-Control": "no-cache", Connection: "keep-alive" }
+  });
+});
+var public_reader_default = app5;
+
 // server/routes/webchat.ts
-import { basename as basename3, dirname as dirname2 } from "path";
-import { join as join12 } from "path";
+import { basename as basename4, dirname as dirname3 } from "path";
+import { join as join13 } from "path";
 import { existsSync as existsSync8, readdirSync as readdirSync7, readFileSync as readFileSync13, renameSync as renameSync2, writeFileSync as writeFileSync6 } from "fs";
 
 // server/canonical-webchat-override.ts
 import { readFileSync as readFileSync12, writeFileSync as writeFileSync5, renameSync } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 var FILE = "canonical-webchat-session.json";
 var UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 function canonicalOverridePath(accountDir) {
-  return join11(accountDir, FILE);
+  return join12(accountDir, FILE);
 }
 function readCanonicalOverrideId(accountDir) {
   try {
@@ -7488,10 +7670,10 @@ var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9
 function locateSession(sessionId) {
   const cfg = claudeConfigDir();
   if (!cfg) return { projectDir: null, channel: null };
-  for (const { path: path2 } of enumerateJsonls(join12(cfg, "projects"))) {
-    if (basename3(path2) === `${sessionId}.jsonl`) {
-      const dir = dirname2(path2);
-      const meta = readSidecarMeta(join12(dir, `${sessionId}.meta.json`));
+  for (const { path: path2 } of enumerateJsonls(join13(cfg, "projects"))) {
+    if (basename4(path2) === `${sessionId}.jsonl`) {
+      const dir = dirname3(path2);
+      const meta = readSidecarMeta(join13(dir, `${sessionId}.meta.json`));
       return { projectDir: dir, channel: meta.channel };
     }
   }
@@ -7500,7 +7682,7 @@ function locateSession(sessionId) {
 function locateSidecar(sessionId) {
   const cfg = claudeConfigDir();
   if (!cfg) return null;
-  const projectsRoot = join12(cfg, "projects");
+  const projectsRoot = join13(cfg, "projects");
   let slugs;
   try {
     slugs = readdirSync7(projectsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
@@ -7508,7 +7690,7 @@ function locateSidecar(sessionId) {
     return null;
   }
   for (const slug of slugs) {
-    const metaPath = join12(projectsRoot, slug, `${sessionId}.meta.json`);
+    const metaPath = join13(projectsRoot, slug, `${sessionId}.meta.json`);
     if (existsSync8(metaPath)) {
       return { channel: readSidecarMeta(metaPath).channel };
     }
@@ -7606,8 +7788,8 @@ async function reapplyLeversViaManager() {
   }
 }
 function createWebchatRoutes(deps) {
-  const app50 = new Hono();
-  app50.post("/send", requireAdminSession, async (c) => {
+  const app51 = new Hono();
+  app51.post("/send", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -7738,7 +7920,7 @@ ${note}` : note;
     }
     return c.json({ ok: true });
   });
-  app50.post("/settings", requireAdminSession, async (c) => {
+  app51.post("/settings", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const op = body?.op;
     const value = body?.value;
@@ -7760,7 +7942,7 @@ ${note}` : note;
       console.error(`[webchat:settings] op=${op} outcome=refused value=${value} reason=account-unresolved`);
       return c.json({ error: "account unresolved" }, 503);
     }
-    const accountJsonPath = join12(account.accountDir, "account.json");
+    const accountJsonPath = join13(account.accountDir, "account.json");
     try {
       const parsed = JSON.parse(readFileSync13(accountJsonPath, "utf8"));
       if (op === "model") parsed.adminModel = value;
@@ -7778,7 +7960,7 @@ ${note}` : note;
     console.log(`[webchat:settings] op=${op} outcome=accepted value=${value} settingsApplied=${settingsApplied}`);
     return c.json({ ok: true, settingsApplied });
   });
-  app50.get("/session", requireAdminSession, async (c) => {
+  app51.get("/session", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -7807,9 +7989,9 @@ ${note}` : note;
     const cfg = claudeConfigDir();
     let projectDir = null;
     if (cfg) {
-      for (const { path: path2 } of enumerateJsonls(join12(cfg, "projects"))) {
-        if (basename3(path2) === `${sessionId}.jsonl`) {
-          projectDir = dirname2(path2);
+      for (const { path: path2 } of enumerateJsonls(join13(cfg, "projects"))) {
+        if (basename4(path2) === `${sessionId}.jsonl`) {
+          projectDir = dirname3(path2);
           break;
         }
       }
@@ -7817,15 +7999,15 @@ ${note}` : note;
     const indicators = await fetchComposerIndicators(sessionId);
     return c.json({ sessionId, projectDir, ...indicators, ...readLevers(account) });
   });
-  return app50;
+  return app51;
 }
 
 // server/routes/webchat-greeting.ts
-import { resolve as resolve12 } from "path";
+import { resolve as resolve13 } from "path";
 
 // app/lib/claude-agent/specialist-roster.ts
 import { existsSync as existsSync9, readFileSync as readFileSync14, readdirSync as readdirSync8 } from "fs";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 function field(fm, name) {
   const m = fm.match(new RegExp(`^${name}:\\s*(.*?)\\r?$`, "m"));
   if (!m) return null;
@@ -7844,7 +8026,7 @@ function readSpecialistRoster(specialistsDir) {
     if (!file.endsWith(".md")) continue;
     let raw;
     try {
-      raw = readFileSync14(join13(specialistsDir, file), "utf-8");
+      raw = readFileSync14(join14(specialistsDir, file), "utf-8");
     } catch (err) {
       skipped.push({ file, reason: err instanceof Error ? err.message : String(err) });
       continue;
@@ -7885,8 +8067,8 @@ var TASKS_CYPHER = `
   WITH t ORDER BY coalesce(t.createdAt, '') ASC
   WITH collect({ taskId: t.taskId, name: t.name, status: t.status }) AS all
   RETURN all[0..${TASK_ITEMS_CAP}] AS items, size(all) AS total`;
-var app5 = new Hono();
-app5.get("/", requireAdminSession, async (c) => {
+var app6 = new Hono();
+app6.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -7926,7 +8108,7 @@ app5.get("/", requireAdminSession, async (c) => {
     let specialists = [];
     try {
       const roster = readSpecialistRoster(
-        resolve12(ACCOUNTS_DIR, accountId, "specialists", "agents")
+        resolve13(ACCOUNTS_DIR, accountId, "specialists", "agents")
       );
       specialists = roster.specialists;
       for (const s of roster.skipped) {
@@ -7957,15 +8139,15 @@ function r2n(value) {
   }
   return Number(value ?? 0);
 }
-var webchat_greeting_default = app5;
+var webchat_greeting_default = app6;
 
 // server/routes/telegram.ts
 import { homedir } from "os";
-import { resolve as resolve14, join as join14 } from "path";
+import { resolve as resolve15, join as join15 } from "path";
 import { existsSync as existsSync10, readFileSync as readFileSync15 } from "fs";
 
 // app/lib/channel-pty-bridge/bridge.ts
-import { resolve as resolve13 } from "path";
+import { resolve as resolve14 } from "path";
 
 // app/lib/channel-pty-bridge/manager-client.ts
 function managerBase2() {
@@ -8086,7 +8268,7 @@ function classifyTimeout(ndjson, writeAtMs) {
 
 // app/lib/channel-pty-bridge/public-session-end-review.ts
 import { randomUUID as randomUUID7 } from "crypto";
-var TAG20 = "[public-session-review]";
+var TAG21 = "[public-session-review]";
 var CONSUMED_CAP = 500;
 var consumed = /* @__PURE__ */ new Set();
 function consumeOnce(sessionId) {
@@ -8113,7 +8295,7 @@ async function fetchJsonl(sessionId) {
     return await res.text();
   } catch (err) {
     console.error(
-      `${TAG20} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG21} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return null;
   }
@@ -8137,7 +8319,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     const res = await fetch(url);
     if (!res.ok) {
       console.error(
-        `${TAG20} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
+        `${TAG21} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
       );
       return [];
     }
@@ -8145,7 +8327,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     return Array.isArray(body.writes) ? body.writes : [];
   } catch (err) {
     console.error(
-      `${TAG20} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG21} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return [];
   }
@@ -8174,7 +8356,7 @@ function composeInitialMessage(input) {
 }
 async function dispatchReviewer(input, initialMessage) {
   const sessionId = randomUUID7();
-  console.log(`${TAG20} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
+  console.log(`${TAG21} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -8194,21 +8376,21 @@ async function firePublicSessionEndReview(input) {
   const dispatchedAt = Date.now();
   if (consumed.has(input.sessionId)) {
     console.log(
-      `${TAG20} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG21} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const jsonl = await fetchJsonl(input.sessionId);
   if (!jsonl) {
     console.log(
-      `${TAG20} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
+      `${TAG21} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
     );
     return;
   }
   const operatorTurns = countOperatorTurns(jsonl);
   if (operatorTurns === 0) {
     console.log(
-      `${TAG20} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
+      `${TAG21} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
     );
     return;
   }
@@ -8222,19 +8404,19 @@ async function firePublicSessionEndReview(input) {
   });
   if (!consumeOnce(input.sessionId)) {
     console.log(
-      `${TAG20} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG21} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const dispatched = await dispatchReviewer(input, initialMessage);
   if (!dispatched.ok) {
     console.error(
-      `${TAG20} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
+      `${TAG21} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
     );
     return;
   }
   console.log(
-    `${TAG20} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
+    `${TAG21} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
   );
 }
 
@@ -8405,7 +8587,7 @@ async function fanOut(subscribers, text, onError, tag) {
 }
 
 // app/lib/whatsapp/inbound/file-delivery-bridge.ts
-var TAG21 = "[whatsapp-adaptor]";
+var TAG22 = "[whatsapp-adaptor]";
 var SEND_USER_FILE = "SendUserFile";
 var WHATSAPP_SEND_DOCUMENT = "whatsapp-send-document";
 function platformRoot() {
@@ -8440,7 +8622,7 @@ function makeWhatsAppFileDelivery(entry) {
         maxyAccountId = resolvePlatformAccountId();
       } catch (err) {
         console.error(
-          `${TAG21} file-delivery reject reason=account-unresolved sender=${entry.senderId} message=${err instanceof Error ? err.message : String(err)}`
+          `${TAG22} file-delivery reject reason=account-unresolved sender=${entry.senderId} message=${err instanceof Error ? err.message : String(err)}`
         );
         return;
       }
@@ -8457,7 +8639,7 @@ function makeWhatsAppFileDelivery(entry) {
         if (!result.ok) {
           failedFiles.push(files[i]);
           console.error(
-            `${TAG21} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
+            `${TAG22} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
           );
         }
       }
@@ -8474,7 +8656,7 @@ function makeWhatsAppFileDelivery(entry) {
       const sid = entry.sessionId.slice(0, 8);
       for (const file of failed) {
         console.error(
-          `${TAG21} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${SEND_USER_FILE} file=${file}`
+          `${TAG22} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${SEND_USER_FILE} file=${file}`
         );
       }
       const okAt = documentOutboundAt(entry.senderId);
@@ -8485,13 +8667,13 @@ function makeWhatsAppFileDelivery(entry) {
         if (!delivered) {
           const fileField = call.filePath !== void 0 ? ` file=${call.filePath}` : "";
           console.error(
-            `${TAG21} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+            `${TAG22} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
           );
         }
       }
       if (firedTools.includes(SEND_USER_FILE) && attempts === 0 && !documentWentOut) {
         console.error(
-          `${TAG21} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${SEND_USER_FILE}`
+          `${TAG22} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${SEND_USER_FILE}`
         );
       }
     }
@@ -8562,7 +8744,7 @@ async function ensureEntry(input) {
     });
   } else {
     console.error(`${tag} route role=${input.role} target=public-spawn senderId=${input.senderId}`);
-    const attachmentDir = resolve13(DATA_ROOT, "accounts", input.accountId, "uploads", "public", input.senderId);
+    const attachmentDir = resolve14(DATA_ROOT, "accounts", input.accountId, "uploads", "public", input.senderId);
     spawned = await managerSpawn({
       senderId: input.senderId,
       role: input.role,
@@ -8694,12 +8876,12 @@ async function dispatchOnce(input) {
   });
   if (!entry) return { error: "spawn-failed" };
   entry.lastInboundAt = Date.now();
-  let resolve31;
+  let resolve32;
   const turnPromise = new Promise((r) => {
-    resolve31 = r;
+    resolve32 = r;
   });
   const listener = (text) => {
-    resolve31(text);
+    resolve32(text);
   };
   entry.subscribers.add(listener);
   const writeAtMs = Date.now();
@@ -8846,11 +9028,11 @@ function routeTelegramUpdate(input) {
 }
 
 // server/routes/telegram.ts
-var TAG22 = "[telegram-inbound]";
+var TAG23 = "[telegram-inbound]";
 var DISPATCH_TIMEOUT_MS = 12e4;
 function configDirName() {
-  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve14(process.cwd(), "..");
-  const brandPath = join14(platformRoot2, "config", "brand.json");
+  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve15(process.cwd(), "..");
+  const brandPath = join15(platformRoot2, "config", "brand.json");
   if (existsSync10(brandPath)) {
     try {
       return JSON.parse(readFileSync15(brandPath, "utf-8")).configDir ?? ".maxy";
@@ -8861,7 +9043,7 @@ function configDirName() {
 }
 function secretPath(botType) {
   const filename = botType === "admin" ? ".telegram-admin-webhook-secret" : ".telegram-webhook-secret";
-  return resolve14(homedir(), configDirName(), filename);
+  return resolve15(homedir(), configDirName(), filename);
 }
 async function sendTelegram(botToken, chatId, text) {
   try {
@@ -8876,23 +9058,23 @@ async function sendTelegram(botToken, chatId, text) {
     return { ok: false, error: e instanceof Error ? e.message : String(e) };
   }
 }
-var app6 = new Hono();
-app6.post("/", async (c) => {
+var app7 = new Hono();
+app7.post("/", async (c) => {
   const botParam = c.req.query("bot");
   const botType = botParam === "admin" ? "admin" : botParam === "public" ? "public" : null;
   if (!botType) {
-    console.error(`${TAG22} op=reject reason=missing-bot-param`);
+    console.error(`${TAG23} op=reject reason=missing-bot-param`);
     return c.json({ ok: false }, 400);
   }
   const sp = secretPath(botType);
   if (!existsSync10(sp)) {
-    console.error(`${TAG22} op=reject reason=no-secret-file botType=${botType}`);
+    console.error(`${TAG23} op=reject reason=no-secret-file botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
   const expected = readFileSync15(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
-    console.error(`${TAG22} op=reject reason=bad-secret botType=${botType}`);
+    console.error(`${TAG23} op=reject reason=bad-secret botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
   let update;
@@ -8903,25 +9085,25 @@ app6.post("/", async (c) => {
   }
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG22} op=reject reason=no-account`);
+    console.error(`${TAG23} op=reject reason=no-account`);
     return c.json({ ok: true }, 200);
   }
   const decision = routeTelegramUpdate({ update, botType, config: account.config.telegram ?? {} });
   if (decision.kind === "ignore") {
-    console.error(`${TAG22} op=ignore reason=${decision.reason}`);
+    console.error(`${TAG23} op=ignore reason=${decision.reason}`);
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "denied") {
-    console.error(`${TAG22} op=denied reason=${decision.reason} agentType=${decision.agentType}`);
+    console.error(`${TAG23} op=denied reason=${decision.reason} agentType=${decision.agentType}`);
     return c.json({ ok: true }, 200);
   }
   const role = decision.agentType === "admin" ? "admin" : "public";
   const agentSlug = role === "admin" ? "admin" : resolveDefaultAgentSlug(account.accountDir);
   if (!agentSlug) {
-    console.error(`${TAG22} op=reject reason=no-default-agent`);
+    console.error(`${TAG23} op=reject reason=no-default-agent`);
     return c.json({ ok: true }, 200);
   }
-  console.error(`${TAG22} op=update accountId=${account.accountId} from=${decision.senderId}`);
+  console.error(`${TAG23} op=update accountId=${account.accountId} from=${decision.senderId}`);
   const botToken = botType === "admin" ? account.config.telegram?.adminBotToken : account.config.telegram?.publicBotToken;
   const { senderId, chatId, text } = decision;
   void (async () => {
@@ -8935,29 +9117,29 @@ app6.post("/", async (c) => {
       timeoutMs: DISPATCH_TIMEOUT_MS
     });
     if ("error" in result) {
-      console.error(`${TAG22} op=dispatch-failed from=${senderId} error=${result.error}`);
+      console.error(`${TAG23} op=dispatch-failed from=${senderId} error=${result.error}`);
       return;
     }
     if (!botToken) {
       const reason = account.config.telegram ? "no-bot-token" : "no-telegram-config";
-      console.error(`${TAG22} op=reply-dropped reason=${reason} botType=${botType}`);
+      console.error(`${TAG23} op=reply-dropped reason=${reason} botType=${botType}`);
       return;
     }
     const sent = await sendTelegram(botToken, chatId, result.turnText);
-    console.error(`${TAG22} op=reply-sent from=${senderId} ok=${sent.ok}${sent.ok ? "" : ` error=${sent.error}`}`);
+    console.error(`${TAG23} op=reply-sent from=${senderId} ok=${sent.ok}${sent.ok ? "" : ` error=${sent.error}`}`);
   })();
   return c.json({ ok: true }, 200);
 });
-var telegram_default = app6;
+var telegram_default = app7;
 
 // server/routes/onboarding.ts
 import { spawn, spawnSync as spawnSync2, execFileSync as execFileSync2 } from "child_process";
-import { openSync as openSync2, closeSync as closeSync2, writeFileSync as writeFileSync8, writeSync, existsSync as existsSync12, readFileSync as readFileSync17, unlinkSync } from "fs";
+import { openSync as openSync3, closeSync as closeSync3, writeFileSync as writeFileSync8, writeSync, existsSync as existsSync12, readFileSync as readFileSync17, unlinkSync } from "fs";
 import { createHash as createHash3, randomUUID as randomUUID8 } from "crypto";
 
 // ../lib/admins-write/src/index.ts
-import { existsSync as existsSync11, readFileSync as readFileSync16, writeFileSync as writeFileSync7, renameSync as renameSync3, mkdirSync as mkdirSync2, readdirSync as readdirSync9, statSync as statSync5 } from "fs";
-import { dirname as dirname3, join as join15 } from "path";
+import { existsSync as existsSync11, readFileSync as readFileSync16, writeFileSync as writeFileSync7, renameSync as renameSync3, mkdirSync as mkdirSync2, readdirSync as readdirSync9, statSync as statSync6 } from "fs";
+import { dirname as dirname4, join as join16 } from "path";
 function logLine(input, result) {
   const userIdShort = input.userId.slice(0, 8);
   console.error(
@@ -8965,7 +9147,7 @@ function logLine(input, result) {
   );
 }
 function writeFileAtomic(filePath, contents, mode) {
-  mkdirSync2(dirname3(filePath), { recursive: true });
+  mkdirSync2(dirname4(filePath), { recursive: true });
   const tempPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
   writeFileSync7(tempPath, contents, mode !== void 0 ? { mode } : void 0);
   renameSync3(tempPath, filePath);
@@ -8999,7 +9181,7 @@ function writeAdminEntry(input) {
     return result;
   }
   try {
-    const accountJsonPath = join15(input.accountDir, "account.json");
+    const accountJsonPath = join16(input.accountDir, "account.json");
     if (!existsSync11(accountJsonPath)) {
       throw new Error(`account.json not found at ${accountJsonPath}`);
     }
@@ -9054,13 +9236,13 @@ function checkAdminAuthInvariant(input) {
     }
     for (const entry of entries) {
       if (entry.startsWith(".")) continue;
-      const accountDir = join15(input.accountsDir, entry);
+      const accountDir = join16(input.accountsDir, entry);
       try {
-        if (!statSync5(accountDir).isDirectory()) continue;
+        if (!statSync6(accountDir).isDirectory()) continue;
       } catch {
         continue;
       }
-      const accountJsonPath = join15(accountDir, "account.json");
+      const accountJsonPath = join16(accountDir, "account.json");
       if (!existsSync11(accountJsonPath)) continue;
       let admins = [];
       try {
@@ -9135,11 +9317,11 @@ async function waitForAuthPage(timeoutMs = 2e4) {
   }
   return false;
 }
-var app7 = new Hono();
-app7.get("/claude-auth", async (c) => {
+var app8 = new Hono();
+app8.get("/claude-auth", async (c) => {
   return c.json({ authenticated: await checkAuthStatus() });
 });
-app7.post("/claude-auth", async (c) => {
+app8.post("/claude-auth", async (c) => {
   let body = {};
   try {
     body = await c.req.json();
@@ -9177,7 +9359,7 @@ app7.post("/claude-auth", async (c) => {
   }
   ensureLogDir();
   writeFileSync8(logPath("claude-auth"), "");
-  const claudeAuthLogFd = openSync2(logPath("claude-auth"), "a");
+  const claudeAuthLogFd = openSync3(logPath("claude-auth"), "a");
   const onClaudeOutput = (chunk) => writeSync(claudeAuthLogFd, chunk);
   if (process.platform === "darwin") {
     vncLog("claude-auth", { action: "start", transport: "native", platform: "darwin" });
@@ -9187,7 +9369,7 @@ app7.post("/claude-auth", async (c) => {
     claudeProc2.unref();
     claudeProc2.stdout?.on("data", onClaudeOutput);
     claudeProc2.stderr?.on("data", onClaudeOutput);
-    claudeProc2.once("close", () => closeSync2(claudeAuthLogFd));
+    claudeProc2.once("close", () => closeSync3(claudeAuthLogFd));
     return c.json({ started: true, transport: "native" });
   }
   if (transport === "vnc") {
@@ -9205,11 +9387,11 @@ app7.post("/claude-auth", async (c) => {
   claudeProc.unref();
   claudeProc.stdout?.on("data", onClaudeOutput);
   claudeProc.stderr?.on("data", onClaudeOutput);
-  claudeProc.once("close", () => closeSync2(claudeAuthLogFd));
+  claudeProc.once("close", () => closeSync3(claudeAuthLogFd));
   await waitForAuthPage(2e4);
   return c.json({ started: true, transport });
 });
-app7.post("/set-pin", async (c) => {
+app8.post("/set-pin", async (c) => {
   let existingUsers = null;
   try {
     existingUsers = readUsersFile2();
@@ -9311,7 +9493,7 @@ ${body.pin}
   }
   return c.json({ ok: true });
 });
-app7.delete("/set-pin", async (c) => {
+app8.delete("/set-pin", async (c) => {
   let users = null;
   try {
     users = readUsersFile2();
@@ -9345,12 +9527,12 @@ app7.delete("/set-pin", async (c) => {
   }
   return c.json({ ok: true });
 });
-var onboarding_default = app7;
+var onboarding_default = app8;
 
 // server/routes/client-error.ts
-import { appendFileSync, existsSync as existsSync13, renameSync as renameSync4, statSync as statSync6 } from "fs";
-import { join as join16 } from "path";
-var CLIENT_ERRORS_LOG = join16(LOG_DIR, "client-errors.log");
+import { appendFileSync, existsSync as existsSync13, renameSync as renameSync4, statSync as statSync7 } from "fs";
+import { join as join17 } from "path";
+var CLIENT_ERRORS_LOG = join17(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
 var MAX_BODY_SIZE = 8 * 1024;
 var MAX_STACK_LEN = 2e3;
@@ -9394,15 +9576,15 @@ function stackHead(stack) {
 function rotateIfNeeded() {
   try {
     if (!existsSync13(CLIENT_ERRORS_LOG)) return;
-    const stats = statSync6(CLIENT_ERRORS_LOG);
+    const stats = statSync7(CLIENT_ERRORS_LOG);
     if (stats.size < MAX_LOG_SIZE) return;
     renameSync4(CLIENT_ERRORS_LOG, CLIENT_ERRORS_LOG + ".1");
   } catch (err) {
     console.error(`[client-error] log rotation failed: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
-var app8 = new Hono();
-app8.post("/", async (c) => {
+var app9 = new Hono();
+app9.post("/", async (c) => {
   const client = resolveClientIp(
     c.env?.incoming?.socket?.remoteAddress,
     c.req.header("x-forwarded-for")
@@ -9504,7 +9686,7 @@ app8.post("/", async (c) => {
   }
   return c.json({ ok: true });
 });
-var client_error_default = app8;
+var client_error_default = app9;
 
 // server/routes/admin/session.ts
 import { randomUUID as randomUUID9 } from "crypto";
@@ -9562,8 +9744,8 @@ async function createAdminSession(accountId, thinkingView, userId, userName, rol
     sessionId: initialSessionId
   };
 }
-var app9 = new Hono();
-app9.get("/", async (c) => {
+var app10 = new Hono();
+app10.get("/", async (c) => {
   const signedSessionToken = c.req.query("session_key");
   if (!signedSessionToken) {
     return c.json({ error: "Invalid or expired admin session" }, 401);
@@ -9609,7 +9791,7 @@ app9.get("/", async (c) => {
     sessionId: getSessionIdForSession(cacheKey) ?? null
   });
 });
-app9.post("/", async (c) => {
+app10.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -9672,20 +9854,20 @@ app9.post("/", async (c) => {
   const payload = await createAdminSession(selected.accountId, selected.config.thinkingView, userId, userName, selected.role, avatar);
   return c.json(payload);
 });
-var session_default = app9;
+var session_default = app10;
 
 // server/routes/admin/logs.ts
-import { existsSync as existsSync15, readdirSync as readdirSync10, readFileSync as readFileSync18, statSync as statSync7 } from "fs";
-import { resolve as resolve15, basename as basename4 } from "path";
+import { existsSync as existsSync15, readdirSync as readdirSync10, readFileSync as readFileSync18, statSync as statSync8 } from "fs";
+import { resolve as resolve16, basename as basename5 } from "path";
 
 // app/lib/logs-read-resolve.ts
 import { existsSync as existsSync14 } from "fs";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 function resolveSessionLogPaths(filename, logDirs) {
   const tried = [filename];
   const hits = [];
   for (const dir of logDirs) {
-    const fullPath = join17(dir, filename);
+    const fullPath = join18(dir, filename);
     if (existsSync14(fullPath)) {
       hits.push({ path: fullPath, dir });
     }
@@ -9695,27 +9877,27 @@ function resolveSessionLogPaths(filename, logDirs) {
 
 // server/routes/admin/logs.ts
 var TAIL_BYTES = 8192;
-var app10 = new Hono();
-app10.get("/", async (c) => {
+var app11 = new Hono();
+app11.get("/", async (c) => {
   const fileParam = c.req.query("file");
   const typeParam = c.req.query("type");
   const sessionIdParam = c.req.query("sessionId");
   const cacheKeyParam = c.req.query("cacheKey");
   const download = c.req.query("download") === "1";
   const account = resolveAccount();
-  const accountLogDir = account ? resolve15(account.accountDir, "logs") : null;
+  const accountLogDir = account ? resolve16(account.accountDir, "logs") : null;
   const logDirs = [];
   if (accountLogDir) logDirs.push(accountLogDir);
   logDirs.push(LOG_DIR);
   if (fileParam) {
-    const safe = basename4(fileParam);
+    const safe = basename5(fileParam);
     const searched = [];
     for (const dir of logDirs) {
-      const filePath = resolve15(dir, safe);
+      const filePath = resolve16(dir, safe);
       searched.push(filePath);
       try {
         const buffer = readFileSync18(filePath);
-        const onDiskBytes = statSync7(filePath).size;
+        const onDiskBytes = statSync8(filePath).size;
         const headers = {
           "Content-Type": "text/plain; charset=utf-8",
           "Content-Length": String(buffer.byteLength)
@@ -9778,9 +9960,9 @@ app10.get("/", async (c) => {
     if (hit) {
       console.info(`[admin/logs] resolved cacheKey=${cacheKeySlice} sessionId=${sessionIdSlice} via=${primaryId === cacheKey ? "cacheKey" : primaryId === sessionKeyFromConv ? "reverse-lookup" : "sessionId-fallback"}`);
       try {
-        const filename = basename4(hit.path);
+        const filename = basename5(hit.path);
         const buffer = readFileSync18(hit.path);
-        const onDiskBytes = statSync7(hit.path).size;
+        const onDiskBytes = statSync8(hit.path).size;
         const headers = {
           "Content-Type": "text/plain; charset=utf-8",
           "Content-Length": String(buffer.byteLength)
@@ -9823,10 +10005,10 @@ app10.get("/", async (c) => {
       console.warn(`[admin/logs] readdir-fail dir=${dir} reason=${reason}`);
       continue;
     }
-    files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync7(resolve15(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
+    files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync8(resolve16(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
       seen.add(name);
       try {
-        const content = readFileSync18(resolve15(dir, name));
+        const content = readFileSync18(resolve16(dir, name));
         const tail = content.length > TAIL_BYTES ? content.subarray(content.length - TAIL_BYTES).toString("utf-8") : content.toString("utf-8");
         logs[name] = tail.trim() || "(empty)";
       } catch (err) {
@@ -9838,12 +10020,12 @@ app10.get("/", async (c) => {
   }
   return c.json({ logs });
 });
-var logs_default = app10;
+var logs_default = app11;
 
 // server/routes/admin/claude-info.ts
 import { execFileSync as execFileSync3 } from "child_process";
-var app11 = new Hono();
-app11.get("/", (c) => {
+var app12 = new Hono();
+app12.get("/", (c) => {
   let version = "unknown";
   try {
     const raw = execFileSync3("claude", ["--version"], { encoding: "utf-8", timeout: 5e3 });
@@ -9861,14 +10043,14 @@ app11.get("/", (c) => {
   const thinkingView = resolvedAccount?.config.thinkingView ?? "default";
   return c.json({ version, account, model, thinkingView });
 });
-var claude_info_default = app11;
+var claude_info_default = app12;
 
 // server/routes/admin/attachment.ts
 import { readFile as readFile2, readdir } from "fs/promises";
 import { existsSync as existsSync16 } from "fs";
-import { resolve as resolve16 } from "path";
-var app12 = new Hono();
-app12.get("/:attachmentId", requireAdminSession, async (c) => {
+import { resolve as resolve17 } from "path";
+var app13 = new Hono();
+app13.get("/:attachmentId", requireAdminSession, async (c) => {
   const attachmentId = c.req.param("attachmentId");
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
@@ -9878,11 +10060,11 @@ app12.get("/:attachmentId", requireAdminSession, async (c) => {
   if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(attachmentId)) {
     return new Response("Not found", { status: 404 });
   }
-  const dir = resolve16(DATA_ROOT, "accounts", accountId, "uploads", attachmentId);
+  const dir = resolve17(DATA_ROOT, "accounts", accountId, "uploads", attachmentId);
   if (!existsSync16(dir)) {
     return new Response("Not found", { status: 404 });
   }
-  const metaPath = resolve16(dir, `${attachmentId}.meta.json`);
+  const metaPath = resolve17(dir, `${attachmentId}.meta.json`);
   if (!existsSync16(metaPath)) {
     return new Response("Not found", { status: 404 });
   }
@@ -9897,7 +10079,7 @@ app12.get("/:attachmentId", requireAdminSession, async (c) => {
   if (!dataFile) {
     return new Response("Not found", { status: 404 });
   }
-  const filePath = resolve16(dir, dataFile);
+  const filePath = resolve17(dir, dataFile);
   const buffer = await readFile2(filePath);
   return new Response(new Uint8Array(buffer), {
     headers: {
@@ -9907,16 +10089,16 @@ app12.get("/:attachmentId", requireAdminSession, async (c) => {
     }
   });
 });
-var attachment_default = app12;
+var attachment_default = app13;
 
 // server/routes/admin/agents.ts
-import { resolve as resolve17 } from "path";
+import { resolve as resolve18 } from "path";
 import { readdirSync as readdirSync11, readFileSync as readFileSync19, existsSync as existsSync17, rmSync } from "fs";
-var app13 = new Hono();
-app13.get("/", (c) => {
+var app14 = new Hono();
+app14.get("/", (c) => {
   const account = resolveAccount();
   if (!account) return c.json({ agents: [] });
-  const agentsDir = resolve17(account.accountDir, "agents");
+  const agentsDir = resolve18(account.accountDir, "agents");
   if (!existsSync17(agentsDir)) return c.json({ agents: [] });
   const agents = [];
   try {
@@ -9924,7 +10106,7 @@ app13.get("/", (c) => {
     for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
       if (!entry.isDirectory()) continue;
       if (entry.name === "admin") continue;
-      const configPath2 = resolve17(agentsDir, entry.name, "config.json");
+      const configPath2 = resolve18(agentsDir, entry.name, "config.json");
       if (!existsSync17(configPath2)) continue;
       try {
         const config = JSON.parse(readFileSync19(configPath2, "utf-8"));
@@ -9943,7 +10125,7 @@ app13.get("/", (c) => {
   }
   return c.json({ agents });
 });
-app13.delete("/:slug", async (c) => {
+app14.delete("/:slug", async (c) => {
   const slug = c.req.param("slug");
   const account = resolveAccount();
   if (!account) return c.json({ error: "No account resolved" }, 400);
@@ -9953,7 +10135,7 @@ app13.delete("/:slug", async (c) => {
   if (slug.includes("/") || slug.includes("..") || slug.includes("\\")) {
     return c.json({ error: "Invalid agent slug" }, 400);
   }
-  const agentDir = resolve17(account.accountDir, "agents", slug);
+  const agentDir = resolve18(account.accountDir, "agents", slug);
   if (!existsSync17(agentDir)) {
     return c.json({ error: "Agent not found" }, 404);
   }
@@ -9973,7 +10155,7 @@ app13.delete("/:slug", async (c) => {
     return c.json({ error: "Failed to delete agent" }, 500);
   }
 });
-app13.post("/:slug/project", async (c) => {
+app14.post("/:slug/project", async (c) => {
   const slug = c.req.param("slug");
   const account = resolveAccount();
   if (!account) return c.json({ error: "No account resolved" }, 400);
@@ -9983,7 +10165,7 @@ app13.post("/:slug/project", async (c) => {
   if (slug.includes("/") || slug.includes("..") || slug.includes("\\")) {
     return c.json({ error: "Invalid agent slug" }, 400);
   }
-  const agentDir = resolve17(account.accountDir, "agents", slug);
+  const agentDir = resolve18(account.accountDir, "agents", slug);
   if (!existsSync17(agentDir)) {
     return c.json({ error: "Agent not found on disk" }, 404);
   }
@@ -9995,7 +10177,7 @@ app13.post("/:slug/project", async (c) => {
     return c.json({ error: `Projection failed: ${msg}` }, 500);
   }
 });
-var agents_default = app13;
+var agents_default = app14;
 
 // server/routes/admin/sessions.ts
 import crypto2 from "crypto";
@@ -10267,8 +10449,8 @@ function formatAge(updatedAtStr) {
     return "unknown";
   }
 }
-var app14 = new Hono();
-app14.get("/", requireAdminSession, async (c) => {
+var app15 = new Hono();
+app15.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -10298,7 +10480,7 @@ app14.get("/", requireAdminSession, async (c) => {
     return c.json({ error: "Failed to fetch sessions" }, 500);
   }
 });
-app14.post("/new", requireAdminSession, async (c) => {
+app15.post("/new", requireAdminSession, async (c) => {
   const oldCacheKey = c.var.cacheKey;
   console.log(`[admin-chat] new-conversation outcome=ingress cacheKey=${oldCacheKey.slice(0, 8)}`);
   const accountId = getAccountIdForSession(oldCacheKey);
@@ -10315,7 +10497,7 @@ app14.post("/new", requireAdminSession, async (c) => {
   console.log(`[admin-chat] new-conversation outcome=ok oldKey=${oldCacheKey.slice(0, 8)} newKey=${newCacheKey.slice(0, 8)}`);
   return c.json({ session_key: newSignedSessionToken, sessionId: null });
 });
-app14.post("/switch", requireAdminSession, async (c) => {
+app15.post("/switch", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -10343,7 +10525,7 @@ app14.post("/switch", requireAdminSession, async (c) => {
   console.log(`[session-switch] from=${cacheKey.slice(0, 8)} to=${targetCacheKey.slice(0, 8)} targetConvId=${targetSessionId?.slice(0, 8) ?? "none"} accountId=${accountId.slice(0, 8)}`);
   return c.json({ session_key: targetSignedSessionToken, sessionId: targetSessionId });
 });
-app14.delete("/:id", requireAdminSession, async (c) => {
+app15.delete("/:id", requireAdminSession, async (c) => {
   const sessionId = c.req.param("id");
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
@@ -10388,7 +10570,7 @@ app14.delete("/:id", requireAdminSession, async (c) => {
     500
   );
 });
-app14.post("/:id/resume", async (c) => {
+app15.post("/:id/resume", async (c) => {
   const sessionId = c.req.param("id");
   const t0 = Date.now();
   const signedSessionToken = c.req.query("session_key") ?? "";
@@ -10657,7 +10839,7 @@ app14.post("/:id/resume", async (c) => {
     }
   });
 });
-app14.put("/:id/label", requireAdminSession, async (c) => {
+app15.put("/:id/label", requireAdminSession, async (c) => {
   const sessionId = c.req.param("id");
   const cacheKey = c.var.cacheKey;
   let body;
@@ -10683,11 +10865,11 @@ app14.put("/:id/label", requireAdminSession, async (c) => {
     return c.json({ error: "Failed to rename session" }, 500);
   }
 });
-var sessions_default = app14;
+var sessions_default = app15;
 
 // app/lib/claude-agent/spawn-context.ts
-import { existsSync as existsSync19, readFileSync as readFileSync20, readdirSync as readdirSync12, statSync as statSync8 } from "fs";
-import { dirname as dirname4, resolve as resolve18, join as join18 } from "path";
+import { existsSync as existsSync19, readFileSync as readFileSync20, readdirSync as readdirSync12, statSync as statSync9 } from "fs";
+import { dirname as dirname5, resolve as resolve19, join as join19 } from "path";
 async function resolveOwnerProfileBlock(accountId, userId) {
   if (!userId) return { ok: false, reason: "missing-user-id" };
   try {
@@ -10716,8 +10898,8 @@ function frontmatterField(manifest, field2) {
 function extractPluginToolDescriptions(pluginDir) {
   const out = /* @__PURE__ */ new Map();
   const candidates = [
-    join18(pluginDir, "mcp/dist/index.js"),
-    join18(pluginDir, "mcp/src/index.ts")
+    join19(pluginDir, "mcp/dist/index.js"),
+    join19(pluginDir, "mcp/src/index.ts")
   ];
   let raw = null;
   for (const path2 of candidates) {
@@ -10772,26 +10954,26 @@ function parseSkillPathsFromFrontmatter(fm) {
 }
 function listPluginDirs() {
   const out = /* @__PURE__ */ new Map();
-  const platformPlugins = resolve18(PLATFORM_ROOT, "plugins");
+  const platformPlugins = resolve19(PLATFORM_ROOT, "plugins");
   if (existsSync19(platformPlugins)) {
     for (const name of readdirSync12(platformPlugins)) {
-      const dir = join18(platformPlugins, name);
+      const dir = join19(platformPlugins, name);
       try {
-        if (statSync8(dir).isDirectory()) out.set(name, dir);
+        if (statSync9(dir).isDirectory()) out.set(name, dir);
       } catch {
       }
     }
   }
-  const premiumRoot = resolve18(dirname4(PLATFORM_ROOT), "premium-plugins");
+  const premiumRoot = resolve19(dirname5(PLATFORM_ROOT), "premium-plugins");
   if (existsSync19(premiumRoot)) {
     for (const bundle of readdirSync12(premiumRoot)) {
-      const bundlePlugins = join18(premiumRoot, bundle, "plugins");
+      const bundlePlugins = join19(premiumRoot, bundle, "plugins");
       if (!existsSync19(bundlePlugins)) continue;
       try {
         for (const name of readdirSync12(bundlePlugins)) {
-          const dir = join18(bundlePlugins, name);
+          const dir = join19(bundlePlugins, name);
           try {
-            if (statSync8(dir).isDirectory()) out.set(name, dir);
+            if (statSync9(dir).isDirectory()) out.set(name, dir);
           } catch {
           }
         }
@@ -10802,7 +10984,7 @@ function listPluginDirs() {
   return out;
 }
 function readEnabledPlugins(accountId) {
-  const accountFile = resolve18(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
+  const accountFile = resolve19(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
   if (!existsSync19(accountFile)) return /* @__PURE__ */ new Set();
   try {
     const parsed = JSON.parse(readFileSync20(accountFile, "utf-8"));
@@ -10832,7 +11014,7 @@ function computeActivePlugins(accountId) {
   for (const name of Array.from(enabled).sort()) {
     const dir = pluginDirs.get(name);
     if (!dir) continue;
-    const fm = readFrontmatter(join18(dir, "PLUGIN.md"));
+    const fm = readFrontmatter(join19(dir, "PLUGIN.md"));
     if (!fm) continue;
     const description = frontmatterField(`---
 ${fm}
@@ -10849,7 +11031,7 @@ ${fm}
       `plugin-manifest-tool-coverage plugin=${name} tools=${tools.length} with-desc=${withDesc}`
     );
     if (toolNames.length > 0 && descMap.size === 0) {
-      const hasSource = existsSync19(join18(dir, "mcp/dist/index.js")) || existsSync19(join18(dir, "mcp/src/index.ts"));
+      const hasSource = existsSync19(join19(dir, "mcp/dist/index.js")) || existsSync19(join19(dir, "mcp/src/index.ts"));
       if (hasSource) {
         console.warn(
           `[spawn-context] WARN plugin=${name} mcp source present but tool-description regex matched zero entries \u2014 SDK upgrade may have changed the registration shape`
@@ -10859,7 +11041,7 @@ ${fm}
     const skillPaths = parseSkillPathsFromFrontmatter(fm);
     const skills = [];
     for (const relPath of skillPaths) {
-      const skillPath = join18(dir, relPath);
+      const skillPath = join19(dir, relPath);
       const skillFm = readFrontmatter(skillPath);
       if (!skillFm) continue;
       const skillName = frontmatterField(`---
@@ -10875,7 +11057,7 @@ ${skillFm}
   return out;
 }
 function computeSpecialistDomains(accountId) {
-  const specialistsDir = resolve18(PLATFORM_ROOT, "..", "data/accounts", accountId, "specialists", "agents");
+  const specialistsDir = resolve19(PLATFORM_ROOT, "..", "data/accounts", accountId, "specialists", "agents");
   if (!existsSync19(specialistsDir)) return [];
   let entries;
   try {
@@ -10888,10 +11070,10 @@ function computeSpecialistDomains(accountId) {
   const resolveDesc = (qualified) => {
     if (!qualified.startsWith("mcp__")) return void 0;
     const rest = qualified.slice(5);
-    const sep8 = rest.indexOf("__");
-    if (sep8 < 0) return void 0;
-    const plugin = rest.slice(0, sep8);
-    const tool = rest.slice(sep8 + 2);
+    const sep9 = rest.indexOf("__");
+    if (sep9 < 0) return void 0;
+    const plugin = rest.slice(0, sep9);
+    const tool = rest.slice(sep9 + 2);
     let map = descByPlugin.get(plugin);
     if (!map) {
       const dir = pluginDirs.get(plugin);
@@ -10903,7 +11085,7 @@ function computeSpecialistDomains(accountId) {
   const out = [];
   for (const file of entries.sort()) {
     if (!file.endsWith(".md")) continue;
-    const fm = readFrontmatter(join18(specialistsDir, file));
+    const fm = readFrontmatter(join19(specialistsDir, file));
     if (!fm) continue;
     const wrapped = `---
 ${fm}
@@ -10921,7 +11103,7 @@ ${fm}
   return out;
 }
 function computeDormantPlugins(accountId) {
-  const accountFile = resolve18(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
+  const accountFile = resolve19(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
   if (!existsSync19(accountFile)) return [];
   let enabled;
   try {
@@ -10936,7 +11118,7 @@ function computeDormantPlugins(accountId) {
     );
     return [];
   }
-  const pluginsDir = resolve18(PLATFORM_ROOT, "plugins");
+  const pluginsDir = resolve19(PLATFORM_ROOT, "plugins");
   if (!existsSync19(pluginsDir)) return [];
   let entries;
   try {
@@ -10947,7 +11129,7 @@ function computeDormantPlugins(accountId) {
   const out = [];
   for (const name of entries) {
     if (enabled.has(name)) continue;
-    const manifestPath = resolve18(pluginsDir, name, "PLUGIN.md");
+    const manifestPath = resolve19(pluginsDir, name, "PLUGIN.md");
     if (!existsSync19(manifestPath)) continue;
     let manifest;
     try {
@@ -10966,7 +11148,7 @@ function computeDormantPlugins(accountId) {
 
 // server/routes/admin/claude-sessions.ts
 import { existsSync as existsSync20, readFileSync as readFileSync21 } from "fs";
-import { resolve as resolve19 } from "path";
+import { resolve as resolve20 } from "path";
 function readTunnelState(brandConfigDir) {
   const statePath = `${process.env.HOME ?? ""}/${brandConfigDir}/cloudflared/tunnel.state`;
   if (!existsSync20(statePath)) return null;
@@ -10982,10 +11164,10 @@ function readTunnelState(brandConfigDir) {
   }
 }
 function resolveTunnelUrl() {
-  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? resolve19(process.cwd(), "..");
+  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? resolve20(process.cwd(), "..");
   let brand;
   try {
-    brand = JSON.parse(readFileSync21(resolve19(platformRoot2, "config", "brand.json"), "utf-8"));
+    brand = JSON.parse(readFileSync21(resolve20(platformRoot2, "config", "brand.json"), "utf-8"));
   } catch {
     return null;
   }
@@ -10996,7 +11178,7 @@ function resolveTunnelUrl() {
   if (!state) return null;
   return `https://${hostname2}.${state.domain}`;
 }
-var TAG23 = "[claude-session-manager:wrapper]";
+var TAG24 = "[claude-session-manager:wrapper]";
 async function refuseIfClaudeAuthDead(c, route, sessionId) {
   const auth = await ensureAuth();
   if (auth.status !== "dead" && auth.status !== "missing") return null;
@@ -11008,18 +11190,18 @@ async function refuseIfClaudeAuthDead(c, route, sessionId) {
     503
   );
 }
-var app15 = new Hono();
+var app16 = new Hono();
 async function performSpawnWithInitialMessage(args) {
   const ownerStart = Date.now();
   const aboutOwner = await resolveOwnerProfileBlock(args.senderId, args.userId);
   const ownerMs = Date.now() - ownerStart;
   const aboutOwnerStatus = aboutOwner == null ? "absent" : "ok" in aboutOwner && aboutOwner.ok === false ? `unresolved:${aboutOwner.reason}` : "ok";
-  console.log(`${TAG23} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
+  console.log(`${TAG24} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
   const dormantPlugins = computeDormantPlugins(args.senderId);
   const activePlugins = computeActivePlugins(args.senderId);
   const specialistDomains = computeSpecialistDomains(args.senderId);
   const tunnelUrl = resolveTunnelUrl();
-  console.log(`${TAG23} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
+  console.log(`${TAG24} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
   const upstreamPayload = JSON.stringify({
     senderId: args.senderId,
     // Task 205 — pass userId through to the manager so it lands as
@@ -11046,24 +11228,24 @@ async function performSpawnWithInitialMessage(args) {
     // unshapely values.
     conversationNodeId: args.conversationNodeId
   });
-  console.log(`${TAG23} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
+  console.log(`${TAG24} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
   const forwardStart = Date.now();
   const upstream = await fetch(`${managerBase("claude-session-manager:wrapper")}/public-spawn`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: upstreamPayload
   }).catch((err) => {
-    console.error(`${TAG23} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
+    console.error(`${TAG24} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
     return null;
   });
   if (!upstream) return {
     response: new Response(JSON.stringify({ error: "manager-unreachable" }), { status: 503, headers: { "content-type": "application/json" } }),
     claudeSessionId: null
   };
-  console.log(`${TAG23} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
+  console.log(`${TAG24} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
   if (args.initialMessage) {
     const inputBytes = Buffer.byteLength(args.initialMessage, "utf8");
-    console.log(`${TAG23} initial-message-inlined bytes=${inputBytes}`);
+    console.log(`${TAG24} initial-message-inlined bytes=${inputBytes}`);
   }
   const bodyText = await upstream.text().catch(() => "");
   let claudeSessionId = null;
@@ -11085,8 +11267,8 @@ function mintTranscriptEdge(sessionId, claudeSessionId, accountId) {
   if (!sessionId || !claudeSessionId) return;
   void linkConversationTranscript(sessionId, claudeSessionId, accountId);
 }
-app15.use("*", requireAdminSession);
-app15.post("/", async (c) => {
+app16.use("*", requireAdminSession);
+app16.post("/", async (c) => {
   const routeStart = Date.now();
   const cacheKey = c.get("cacheKey") ?? "";
   let body = {};
@@ -11098,7 +11280,7 @@ app15.post("/", async (c) => {
   if (refusal) return refusal;
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(`${TAG23} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
+    console.error(`${TAG24} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
     return c.json({ error: "admin-account-not-resolved" }, 500);
   }
   const userId = getUserIdForSession(cacheKey) ?? void 0;
@@ -11107,7 +11289,7 @@ app15.post("/", async (c) => {
   const permissionMode = typeof body.permissionMode === "string" ? body.permissionMode : void 0;
   const specialist = typeof body.specialist === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(body.specialist) ? body.specialist : void 0;
   const model = typeof body.model === "string" && /^[A-Za-z0-9._-]{1,64}$/.test(body.model) ? body.model : void 0;
-  console.log(`${TAG23} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
+  console.log(`${TAG24} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
   const conversationNodeId = cacheKey ? getSessionIdForSession(cacheKey) : void 0;
   const { response, claudeSessionId } = await performSpawnWithInitialMessage({
     senderId,
@@ -11126,24 +11308,24 @@ app15.post("/", async (c) => {
     claudeSessionId,
     senderId
   );
-  console.log(`${TAG23} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
+  console.log(`${TAG24} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
   return response;
 });
-var claude_sessions_default = app15;
+var claude_sessions_default = app16;
 
 // server/routes/admin/log-ingest.ts
-var TAG24 = "[log-ingest]";
+var TAG25 = "[log-ingest]";
 var TAG_PATTERN = /^[A-Za-z0-9_:-]{1,32}$/;
 var LEVELS = /* @__PURE__ */ new Set(["debug", "info", "warn", "error"]);
 var MAX_LINE_BYTES = 4096;
-var app16 = new Hono();
+var app17 = new Hono();
 function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-app16.post("/", async (c) => {
+app17.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr(remoteAddr)) {
-    console.error(`${TAG24} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG25} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "log-ingest-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -11152,7 +11334,7 @@ app16.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr(t));
     if (offender !== void 0) {
-      console.error(`${TAG24} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG25} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "log-ingest-loopback-only" }, 403);
     }
   }
@@ -11183,7 +11365,7 @@ app16.post("/", async (c) => {
   else console.log(formatted);
   return c.json({ ok: true }, 200);
 });
-var log_ingest_default = app16;
+var log_ingest_default = app17;
 
 // server/routes/admin/events.ts
 var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
@@ -11192,20 +11374,20 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
   "device-url:vnc-surface-shown",
   "device-url:malformed"
 ]);
-var app17 = new Hono();
-app17.post("/", async (c) => {
-  const TAG33 = "[admin:events]";
+var app18 = new Hono();
+app18.post("/", async (c) => {
+  const TAG34 = "[admin:events]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG33} reject reason=body-not-json detail=${detail}`);
+    console.error(`${TAG34} reject reason=body-not-json detail=${detail}`);
     return c.json({ ok: false, detail: "Request body was not valid JSON" }, 400);
   }
   const event = typeof body.event === "string" ? body.event : "";
   if (!ALLOWED_EVENTS.has(event)) {
-    console.error(`${TAG33} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
+    console.error(`${TAG34} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
     return c.json({ ok: false, detail: `Event "${event}" is not allowed` }, 400);
   }
   const rawFields = body.fields && typeof body.fields === "object" ? body.fields : {};
@@ -11224,13 +11406,13 @@ app17.post("/", async (c) => {
   console.error(`[${event}] ${formatted}`);
   return c.json({ ok: true });
 });
-var events_default = app17;
+var events_default = app18;
 
 // server/routes/admin/files.ts
 import { createReadStream as createReadStream2 } from "fs";
 import { readdir as readdir3, readFile as readFile4, stat as stat4, mkdir as mkdir3, writeFile as writeFile4, unlink as unlink2 } from "fs/promises";
 import { realpathSync as realpathSync4 } from "fs";
-import { basename as basename6, dirname as dirname5, join as join20, resolve as resolve21, sep as sep5 } from "path";
+import { basename as basename7, dirname as dirname6, join as join21, resolve as resolve22, sep as sep6 } from "path";
 import { Readable as Readable2 } from "stream";
 
 // ../lib/graph-trash/src/index.ts
@@ -11548,7 +11730,7 @@ async function cascadeDeleteDocument(params) {
 
 // app/lib/file-index.ts
 import * as fsp from "fs/promises";
-import { resolve as resolve20, relative as relative2, join as join19, basename as basename5, extname as extname2, sep as sep4 } from "path";
+import { resolve as resolve21, relative as relative2, join as join20, basename as basename6, extname as extname2, sep as sep5 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
@@ -11630,7 +11812,7 @@ async function extractPdf(absolute) {
   return stdout.trim();
 }
 async function ocrPdf(absolute) {
-  const outPdf = join19(tmpdir2(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
+  const outPdf = join20(tmpdir2(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
   try {
     await execFileAsync2(
       "ocrmypdf",
@@ -11686,13 +11868,13 @@ async function extractFileContent(absolute) {
   }
 }
 async function readDisplayName(absolute) {
-  const dir = absolute.slice(0, absolute.length - basename5(absolute).length);
-  const base = basename5(absolute);
+  const dir = absolute.slice(0, absolute.length - basename6(absolute).length);
+  const base = basename6(absolute);
   const dot = base.lastIndexOf(".");
   const stem = dot === -1 ? base : base.slice(0, dot);
   if (base === `${stem}.meta.json`) return null;
   try {
-    const raw = await fsp.readFile(join19(dir, `${stem}.meta.json`), "utf-8");
+    const raw = await fsp.readFile(join20(dir, `${stem}.meta.json`), "utf-8");
     const meta = JSON.parse(raw);
     const dn = meta.displayName ?? meta.filename;
     return typeof dn === "string" && dn.length > 0 ? dn : null;
@@ -11712,7 +11894,7 @@ async function walkSubtree(root, dataRoot, out) {
   let clean = true;
   for (const entry of entries) {
     if (entry.isSymbolicLink()) continue;
-    const abs = join19(root, entry.name);
+    const abs = join20(root, entry.name);
     if (entry.isDirectory()) {
       const sub = await walkSubtree(abs, dataRoot, out);
       if (!sub.clean) clean = false;
@@ -11721,7 +11903,7 @@ async function walkSubtree(root, dataRoot, out) {
         const st = await fsp.stat(abs);
         out.push({
           absolute: abs,
-          relativePath: relative2(dataRoot, abs).split(sep4).join("/"),
+          relativePath: relative2(dataRoot, abs).split(sep5).join("/"),
           sizeBytes: st.size,
           modifiedAt: st.mtime.toISOString()
         });
@@ -11824,7 +12006,7 @@ async function cascadeTrashLinkedKnowledgeDocs(session, accountId, relativePaths
   return { kds, sections, chunks };
 }
 async function buildArtifact(accountId, wf, embed2) {
-  const name = basename5(wf.absolute);
+  const name = basename6(wf.absolute);
   const { content, route } = await extractFileContent(wf.absolute);
   const displayName = await readDisplayName(wf.absolute);
   const embedInput = `${name}
@@ -11867,7 +12049,7 @@ async function reconcileFileIndex(accountId, opts) {
   return withSession(opts, async (session) => {
     const walked = [];
     const subtreeRoots = [
-      resolve20(dataRoot, "accounts", accountId)
+      resolve21(dataRoot, "accounts", accountId)
     ];
     let clean = true;
     for (const root of subtreeRoots) {
@@ -11950,7 +12132,7 @@ async function reconcileFileIndexDebounced(accountId, opts) {
 async function indexFile(accountId, relativePath, opts) {
   const dataRoot = opts?.dataRoot ?? DATA_ROOT;
   const embed2 = opts?.embed ?? embed;
-  const absolute = resolve20(dataRoot, relativePath);
+  const absolute = resolve21(dataRoot, relativePath);
   await withSession(opts, async (session) => {
     const st = await fsp.stat(absolute);
     const wf = {
@@ -11984,7 +12166,7 @@ async function dropFileIndex(accountId, relativePath, opts) {
 var UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta(absDir, baseName) {
   try {
-    const raw = await readFile4(join20(absDir, `${baseName}.meta.json`), "utf8");
+    const raw = await readFile4(join21(absDir, `${baseName}.meta.json`), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.filename === "string") {
       return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
@@ -11995,7 +12177,7 @@ async function readMeta(absDir, baseName) {
 }
 async function readAccountNames() {
   const map = /* @__PURE__ */ new Map();
-  const accountsDir = resolve21(DATA_ROOT, "accounts");
+  const accountsDir = resolve22(DATA_ROOT, "accounts");
   let names;
   try {
     names = await readdir3(accountsDir);
@@ -12004,7 +12186,7 @@ async function readAccountNames() {
   }
   for (const name of names) {
     if (!UUID_RE3.test(name)) continue;
-    const configPath2 = resolve21(accountsDir, name, "account.json");
+    const configPath2 = resolve22(accountsDir, name, "account.json");
     try {
       const raw = await readFile4(configPath2, "utf8");
       const parsed = JSON.parse(raw);
@@ -12022,7 +12204,7 @@ async function readAccountNames() {
 }
 async function enrich(absolute, entry, accountNames) {
   if (entry.kind === "directory" && UUID_RE3.test(entry.name)) {
-    const meta = await readMeta(join20(absolute, entry.name), entry.name);
+    const meta = await readMeta(join21(absolute, entry.name), entry.name);
     if (meta?.filename) {
       entry.displayName = meta.filename;
       entry.mimeType = meta.mimeType;
@@ -12108,8 +12290,8 @@ async function knowledgeDocOwnedByAccount(accountId, attachmentId) {
     await session.close();
   }
 }
-var app18 = new Hono();
-app18.get("/", requireAdminSession, async (c) => {
+var app19 = new Hono();
+app19.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -12148,7 +12330,7 @@ app18.get("/", requireAdminSession, async (c) => {
       const childRel = relPath === "" || relPath === "." ? name : `${relPath}/${name}`;
       const protectedEntry = isProtectedFromDeletion(childRel).protected;
       try {
-        const entryPath = join20(absolute, name);
+        const entryPath = join21(absolute, name);
         const s = await stat4(entryPath);
         entries.push({
           name,
@@ -12178,7 +12360,7 @@ app18.get("/", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app18.get("/download", requireAdminSession, async (c) => {
+app19.get("/download", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -12215,7 +12397,7 @@ app18.get("/download", requireAdminSession, async (c) => {
     if (!info.isFile()) {
       return c.json({ error: "Path is not a file" }, 400);
     }
-    const filename = basename6(absolute);
+    const filename = basename7(absolute);
     const mimeType = detectMimeType(absolute);
     const nodeStream = createReadStream2(absolute);
     const webStream = Readable2.toWeb(nodeStream);
@@ -12242,7 +12424,7 @@ app18.get("/download", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app18.post("/upload", requireAdminSession, async (c) => {
+app19.post("/upload", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -12272,15 +12454,15 @@ app18.post("/upload", requireAdminSession, async (c) => {
       error: `Unsupported file type: "${file.type}". Supported: ${[...SUPPORTED_MIME_TYPES].join(", ")}.`
     }, 422);
   }
-  const safeName = basename6(file.name).replace(/[\0/\\]/g, "_");
+  const safeName = basename7(file.name).replace(/[\0/\\]/g, "_");
   const finalName = `${Date.now()}-${safeName}`;
-  const destDir = resolve21(DATA_ROOT, "accounts", accountId, "uploads");
-  const destPath = resolve21(destDir, finalName);
+  const destDir = resolve22(DATA_ROOT, "accounts", accountId, "uploads");
+  const destPath = resolve22(destDir, finalName);
   try {
     await mkdir3(destDir, { recursive: true });
     const dataRootReal = realpathSync4(DATA_ROOT);
     const destDirReal = realpathSync4(destDir);
-    if (destDirReal !== dataRootReal && !destDirReal.startsWith(dataRootReal + sep5)) {
+    if (destDirReal !== dataRootReal && !destDirReal.startsWith(dataRootReal + sep6)) {
       console.error(`[data] path-traversal-blocked requested="accounts/${accountId}/uploads" resolved="${destDirReal}"`);
       return c.json({ error: "Upload destination escapes DATA_ROOT" }, 403);
     }
@@ -12303,7 +12485,7 @@ app18.post("/upload", requireAdminSession, async (c) => {
     mimeType: file.type
   });
 });
-app18.delete("/", requireAdminSession, async (c) => {
+app19.delete("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -12324,7 +12506,7 @@ app18.delete("/", requireAdminSession, async (c) => {
     console.error(`[data] account-scope-blocked endpoint="DELETE /api/admin/files" path="${relPath}" account=${accountId.slice(0, 8)}\u2026`);
     return c.json({ error: "Not found" }, 404);
   }
-  const base = basename6(absolute);
+  const base = basename7(absolute);
   const protection = isProtectedFromDeletion(relPath);
   if (protection.protected) {
     console.error(`[data] file-delete blocked path="${relPath}" reason="protected" rule="${protection.rule}"`);
@@ -12340,7 +12522,7 @@ app18.delete("/", requireAdminSession, async (c) => {
     }
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
-    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join20(dirname5(absolute), `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join21(dirname6(absolute), `${stem}.meta.json`) : null;
     await unlink2(absolute);
     if (sidecarPath) {
       try {
@@ -12379,7 +12561,7 @@ app18.delete("/", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-var files_default = app18;
+var files_default = app19;
 
 // ../lib/graph-search/src/index.ts
 var import_dist = __toESM(require_dist());
@@ -13144,8 +13326,8 @@ var DEFAULT_LIMIT = 20;
 var MAX_LIMIT = 2e3;
 var MESSAGE_FAMILY_LABELS = ["Message", "UserMessage", "AssistantMessage", "WhatsAppMessage"];
 var CONVERSATION_PARENT_LABELS = /* @__PURE__ */ new Set(["AdminConversation", "PublicConversation"]);
-var app19 = new Hono();
-app19.get("/", requireAdminSession, async (c) => {
+var app20 = new Hono();
+app20.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const q = (c.req.query("q") ?? "").trim();
   const rawLimit = c.req.query("limit");
@@ -13281,7 +13463,7 @@ app19.get("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var graph_search_default = app19;
+var graph_search_default = app20;
 
 // server/routes/admin/graph-subgraph.ts
 import neo4j2 from "neo4j-driver";
@@ -13365,8 +13547,8 @@ var STRIPPED_PROPERTIES = /* @__PURE__ */ new Set([
   "otpCode",
   "cacheKey"
 ]);
-var app20 = new Hono();
-app20.get("/", requireAdminSession, async (c) => {
+var app21 = new Hono();
+app21.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -13949,12 +14131,12 @@ function pruneNode(node, warnedClasses, conversationWarnings) {
   }
   return trashed ? { id: node.id, labels, properties, trashed: true } : { id: node.id, labels, properties };
 }
-var graph_subgraph_default = app20;
+var graph_subgraph_default = app21;
 
 // server/routes/admin/graph-delete.ts
 var ALLOWED_BY = ["graph-page", "graph-drag-trash", "graph-side-panel-trash"];
-var app21 = new Hono();
-app21.post("/", requireAdminSession, async (c) => {
+var app22 = new Hono();
+app22.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -14116,11 +14298,11 @@ app21.post("/", requireAdminSession, async (c) => {
     }
   }
 });
-var graph_delete_default = app21;
+var graph_delete_default = app22;
 
 // server/routes/admin/graph-restore.ts
-var app22 = new Hono();
-app22.post("/", requireAdminSession, async (c) => {
+var app23 = new Hono();
+app23.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -14184,11 +14366,11 @@ app22.post("/", requireAdminSession, async (c) => {
     }
   }
 });
-var graph_restore_default = app22;
+var graph_restore_default = app23;
 
 // server/routes/admin/graph-labels-in-graph.ts
-var app23 = new Hono();
-app23.get("/", requireAdminSession, async (c) => {
+var app24 = new Hono();
+app24.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -14254,11 +14436,11 @@ var LABELS_IN_GRAPH_CYPHER = `
        sum(halfEdges) AS relDegree
   RETURN label, nodeCount, relDegree
 `;
-var graph_labels_in_graph_default = app23;
+var graph_labels_in_graph_default = app24;
 
 // server/routes/admin/graph-default-view.ts
-var app24 = new Hono();
-app24.get("/", requireAdminSession, async (c) => {
+var app25 = new Hono();
+app25.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -14296,7 +14478,7 @@ app24.get("/", requireAdminSession, async (c) => {
     }
   }
 });
-app24.put("/", requireAdminSession, async (c) => {
+app25.put("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -14385,20 +14567,20 @@ var WRITE_CYPHER = `
       p.updatedAt = $updatedAt
   RETURN p.labels AS labels
 `;
-var graph_default_view_default = app24;
+var graph_default_view_default = app25;
 
 // server/routes/admin/sidebar-artefacts.ts
 import { readdir as readdir4, stat as stat5 } from "fs/promises";
-import { resolve as resolve22, relative as relative3, isAbsolute, sep as sep6, basename as basename7 } from "path";
+import { resolve as resolve23, relative as relative3, isAbsolute, sep as sep7, basename as basename8 } from "path";
 import { existsSync as existsSync21 } from "fs";
 var LIMIT = 50;
 var ADMIN_AGENT_FILES = ["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"];
 function toDataRootRelPath(absPath) {
-  if (absPath !== DATA_ROOT && !absPath.startsWith(DATA_ROOT + sep6)) return null;
+  if (absPath !== DATA_ROOT && !absPath.startsWith(DATA_ROOT + sep7)) return null;
   return relative3(DATA_ROOT, absPath);
 }
-var app25 = new Hono();
-app25.get("/", requireAdminSession, async (c) => {
+var app26 = new Hono();
+app26.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -14409,7 +14591,7 @@ app25.get("/", requireAdminSession, async (c) => {
   if (accountFiles === null) {
     return c.json({ error: "Failed to load artefacts" }, 500);
   }
-  const accountDir = resolve22(ACCOUNTS_DIR, accountId);
+  const accountDir = resolve23(ACCOUNTS_DIR, accountId);
   const agents = await fetchAgentTemplateRows(accountDir);
   const artefacts = [...accountFiles, ...agents].sort(
     (a, b) => (b.updatedAt ?? "").localeCompare(a.updatedAt ?? "")
@@ -14442,7 +14624,7 @@ async function fetchAccountFileArtefacts(accountId) {
       const modifiedAt = r.get("modifiedAt") ?? "";
       return {
         id: `account-file:${relativePath}`,
-        name: displayName ?? basename7(relativePath),
+        name: displayName ?? basename8(relativePath),
         kind: "account-file",
         updatedAt: modifiedAt,
         mimeType,
@@ -14461,8 +14643,8 @@ async function fetchAccountFileArtefacts(accountId) {
 async function fetchAgentTemplateRows(accountDir) {
   const rows = [];
   for (const filename of ADMIN_AGENT_FILES) {
-    const overridePath = resolve22(accountDir, "agents", "admin", filename);
-    const bundledPath = resolve22(PLATFORM_ROOT, "templates", "agents", "admin", filename);
+    const overridePath = resolve23(accountDir, "agents", "admin", filename);
+    const bundledPath = resolve23(PLATFORM_ROOT, "templates", "agents", "admin", filename);
     const labelStem = filename.replace(/\.md$/, "");
     const row = await readAgentTemplateRow({
       id: `agent-template:admin:${filename}`,
@@ -14475,12 +14657,12 @@ async function fetchAgentTemplateRows(accountDir) {
     });
     if (row) rows.push(row);
   }
-  const overrideDir = resolve22(accountDir, "specialists", "agents");
-  const bundledDir = resolve22(PLATFORM_ROOT, "templates", "specialists", "agents");
+  const overrideDir = resolve23(accountDir, "specialists", "agents");
+  const bundledDir = resolve23(PLATFORM_ROOT, "templates", "specialists", "agents");
   const specialistNames = await unionSpecialistFilenames(overrideDir, bundledDir);
   for (const filename of specialistNames) {
-    const overridePath = resolve22(overrideDir, filename);
-    const bundledPath = resolve22(bundledDir, filename);
+    const overridePath = resolve23(overrideDir, filename);
+    const bundledPath = resolve23(bundledDir, filename);
     const row = await readAgentTemplateRow({
       id: `agent-template:specialist:${filename}`,
       displayName: filename.replace(/\.md$/, ""),
@@ -14562,11 +14744,11 @@ function isWithin(target, root) {
   const rel = relative3(root, target);
   return !rel.startsWith("..") && !isAbsolute(rel);
 }
-var sidebar_artefacts_default = app25;
+var sidebar_artefacts_default = app26;
 
 // server/routes/admin/session-delete.ts
-var app26 = new Hono();
-app26.post("/", requireAdminSession, async (c) => {
+var app27 = new Hono();
+app27.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -14604,11 +14786,11 @@ app26.post("/", requireAdminSession, async (c) => {
   console.error(`[session-delete] sessionId=${sessionId} delete-status=${del.status}`);
   return c.json({ error: `manager-status-${del.status}` }, 502);
 });
-var session_delete_default = app26;
+var session_delete_default = app27;
 
 // server/routes/admin/session-stop.ts
-var app27 = new Hono();
-app27.post("/", requireAdminSession, async (c) => {
+var app28 = new Hono();
+app28.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -14633,11 +14815,11 @@ app27.post("/", requireAdminSession, async (c) => {
   console.error(`[session-stop] sessionId=${sessionId} manager-status=${res.status}`);
   return c.json({ error: `manager-status-${res.status}` }, 502);
 });
-var session_stop_default = app27;
+var session_stop_default = app28;
 
 // server/routes/admin/session-archive.ts
-var app28 = new Hono();
-app28.post("/", requireAdminSession, async (c) => {
+var app29 = new Hono();
+app29.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -14685,7 +14867,7 @@ app28.post("/", requireAdminSession, async (c) => {
   console.error(`[session-archive] sessionId=${sessionId.slice(0, 8)} manager-status=${res.status}`);
   return c.json({ error: `manager-status-${res.status}` }, 502);
 });
-var session_archive_default = app28;
+var session_archive_default = app29;
 
 // server/routes/admin/session-rc-spawn.ts
 import { randomUUID as randomUUID10 } from "crypto";
@@ -14719,8 +14901,8 @@ function shapeWebchatResponse(sessionId, manager) {
   const outcome = typeof manager?.outcome === "string" ? manager.outcome : "bound";
   return { sessionId, outcome, target: `/chat?session=${sessionId}` };
 }
-var app29 = new Hono();
-app29.post("/", requireAdminSession, async (c) => {
+var app30 = new Hono();
+app30.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -14773,7 +14955,7 @@ app29.post("/", requireAdminSession, async (c) => {
   }
   return c.json(parsed ?? {});
 });
-var session_rc_spawn_default = app29;
+var session_rc_spawn_default = app30;
 
 // server/routes/admin/session-reseat.ts
 import { randomUUID as randomUUID11 } from "crypto";
@@ -14814,8 +14996,9 @@ function resolveReseatPlan(body, mintId = randomUUID11, adminUserId) {
   if (adminUserId) payload.adminUserId = adminUserId;
   return { sessionId, payload };
 }
-var app30 = new Hono();
-app30.post("/", requireAdminSession, async (c) => {
+var app31 = new Hono();
+var reseatsInFlight = /* @__PURE__ */ new Set();
+app31.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -14826,57 +15009,65 @@ app30.post("/", requireAdminSession, async (c) => {
   const model = typeof body.model === "string" && isSelectableModel(body.model) ? body.model : null;
   if (fromSessionId === null) return c.json({ error: "fromSessionId must be a valid session id" }, 400);
   if (model === null) return c.json({ error: "model must be a selectable model" }, 400);
-  const cacheKey = c.get("cacheKey");
-  const adminUserId = cacheKey ? getUserIdForSession(cacheKey) : void 0;
-  const plan = resolveReseatPlan({ fromSessionId, model }, randomUUID11, adminUserId);
-  const reseatReqId = randomUUID11();
-  console.log(`[chat-reseat] op=request reseatReqId=${reseatReqId} from=${fromSessionId} to-model=${model} new=${plan.sessionId}`);
-  let res;
-  try {
-    res = await fetch(`${managerBase("session-reseat:wrapper")}/rc-spawn`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify(plan.payload)
-    });
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    console.error(`[session-reseat] manager-unreachable err=${msg}`);
-    console.log(`[chat-reseat] op=exit reseatReqId=${reseatReqId} outcome=reseat-failed`);
-    return c.json({ error: `session manager unreachable: ${msg}` }, 502);
-  }
-  const text = await res.text();
-  let parsed = null;
-  try {
-    parsed = JSON.parse(text);
-  } catch {
-  }
-  if (!res.ok) {
-    console.error(`[session-reseat] manager-error status=${res.status} body=${text.slice(0, 200)}`);
-    console.log(`[chat-reseat] op=exit reseatReqId=${reseatReqId} outcome=reseat-failed`);
-    return c.json(parsed ?? { error: text }, res.status);
+  if (reseatsInFlight.has(fromSessionId)) {
+    return c.json({ error: "re-seat already in progress for this session" }, 409);
   }
+  reseatsInFlight.add(fromSessionId);
   try {
-    const account = resolveAccount();
-    if (account) {
-      const accountId = resolvePlatformAccountId();
-      const canonicalId = adminSessionIdFor(accountId, WEBCHAT_ADMIN_KEY);
-      const currentOverride = readCanonicalOverrideId(account.accountDir);
-      if (fromSessionId === canonicalId || fromSessionId === currentOverride) {
-        writeCanonicalOverrideId(account.accountDir, plan.sessionId);
-        console.log(`[chat-reseat] op=canonical-forward reseatReqId=${reseatReqId} from=${fromSessionId} to=${plan.sessionId}`);
+    const cacheKey = c.get("cacheKey");
+    const adminUserId = cacheKey ? getUserIdForSession(cacheKey) : void 0;
+    const plan = resolveReseatPlan({ fromSessionId, model }, randomUUID11, adminUserId);
+    const reseatReqId = randomUUID11();
+    console.log(`[chat-reseat] op=request reseatReqId=${reseatReqId} from=${fromSessionId} to-model=${model} new=${plan.sessionId}`);
+    let res;
+    try {
+      res = await fetch(`${managerBase("session-reseat:wrapper")}/rc-spawn`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(plan.payload)
+      });
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      console.error(`[session-reseat] manager-unreachable err=${msg}`);
+      console.log(`[chat-reseat] op=exit reseatReqId=${reseatReqId} outcome=reseat-failed`);
+      return c.json({ error: `session manager unreachable: ${msg}` }, 502);
+    }
+    const text = await res.text();
+    let parsed = null;
+    try {
+      parsed = JSON.parse(text);
+    } catch {
+    }
+    if (!res.ok) {
+      console.error(`[session-reseat] manager-error status=${res.status} body=${text.slice(0, 200)}`);
+      console.log(`[chat-reseat] op=exit reseatReqId=${reseatReqId} outcome=reseat-failed`);
+      return c.json(parsed ?? { error: text }, res.status);
+    }
+    try {
+      const account = resolveAccount();
+      if (account) {
+        const accountId = resolvePlatformAccountId();
+        const canonicalId = adminSessionIdFor(accountId, WEBCHAT_ADMIN_KEY);
+        const currentOverride = readCanonicalOverrideId(account.accountDir);
+        if (fromSessionId === canonicalId || fromSessionId === currentOverride) {
+          writeCanonicalOverrideId(account.accountDir, plan.sessionId);
+          console.log(`[chat-reseat] op=canonical-forward reseatReqId=${reseatReqId} from=${fromSessionId} to=${plan.sessionId}`);
+        }
       }
+    } catch (err) {
+      console.error(`[session-reseat] canonical-forward-failed err=${err instanceof Error ? err.message : String(err)}`);
     }
-  } catch (err) {
-    console.error(`[session-reseat] canonical-forward-failed err=${err instanceof Error ? err.message : String(err)}`);
-  }
-  const target = `/chat?session=${plan.sessionId}`;
-  console.log(`[chat-reseat] op=acquired reseatReqId=${reseatReqId} pid=${parsed?.spawnedPid ?? "none"} new=${plan.sessionId}`);
-  console.log(`[chat-reseat] op=navigate reseatReqId=${reseatReqId} target=${target}`);
-  console.log(`[chat-reseat] op=exit reseatReqId=${reseatReqId} outcome=bound`);
-  const outcome = typeof parsed?.outcome === "string" ? parsed.outcome : "bound";
-  return c.json({ sessionId: plan.sessionId, outcome, target });
+    const target = `/chat?session=${plan.sessionId}`;
+    console.log(`[chat-reseat] op=acquired reseatReqId=${reseatReqId} pid=${parsed?.spawnedPid ?? "none"} new=${plan.sessionId}`);
+    console.log(`[chat-reseat] op=navigate reseatReqId=${reseatReqId} target=${target}`);
+    console.log(`[chat-reseat] op=exit reseatReqId=${reseatReqId} outcome=bound`);
+    const outcome = typeof parsed?.outcome === "string" ? parsed.outcome : "bound";
+    return c.json({ sessionId: plan.sessionId, outcome, target });
+  } finally {
+    reseatsInFlight.delete(fromSessionId);
+  }
 });
-var session_reseat_default = app30;
+var session_reseat_default = app31;
 
 // server/routes/admin/system-stats.ts
 import { readFile as readFile5 } from "fs/promises";
@@ -14973,8 +15164,8 @@ async function sample() {
   if (process.platform === "linux") return sampleLinux();
   return sampleOsFallback();
 }
-var app31 = new Hono();
-app31.get("/", async (c) => {
+var app32 = new Hono();
+app32.get("/", async (c) => {
   const started = Date.now();
   if (!inflight) {
     inflight = sample().finally(() => {
@@ -14997,14 +15188,14 @@ app31.get("/", async (c) => {
     return c.json({ degraded: true, reason, sampledAtMs: Date.now() });
   }
 });
-var system_stats_default = app31;
+var system_stats_default = app32;
 
 // server/routes/admin/health.ts
 import { existsSync as existsSync22, readFileSync as readFileSync22 } from "fs";
-import { resolve as resolve23, join as join21 } from "path";
-var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve23(process.cwd(), "..");
+import { resolve as resolve24, join as join22 } from "path";
+var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve24(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join21(PLATFORM_ROOT6, "config", "brand.json");
+var brandJsonPath = join22(PLATFORM_ROOT6, "config", "brand.json");
 if (existsSync22(brandJsonPath)) {
   try {
     const brand = JSON.parse(readFileSync22(brandJsonPath, "utf-8"));
@@ -15012,7 +15203,7 @@ if (existsSync22(brandJsonPath)) {
   } catch {
   }
 }
-var VERSION_FILE = resolve23(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
+var VERSION_FILE = resolve24(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
 var PROCESS_STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
 var PROBE_TIMEOUT_MS = 1e3;
 function readVersion() {
@@ -15042,8 +15233,8 @@ async function probeConversationDb() {
     });
   }
 }
-var app32 = new Hono();
-app32.get("/", async (c) => {
+var app33 = new Hono();
+app33.get("/", async (c) => {
   const version = readVersion();
   const probe = await probeConversationDb();
   const uptimeMs = Date.now() - new Date(PROCESS_STARTED_AT).getTime();
@@ -15065,11 +15256,11 @@ app32.get("/", async (c) => {
     uptimeMs
   });
 });
-var health_default2 = app32;
+var health_default2 = app33;
 
 // server/routes/admin/linkedin-ingest.ts
 import { randomUUID as randomUUID12 } from "crypto";
-var TAG25 = "[linkedin-ingest-route]";
+var TAG26 = "[linkedin-ingest-route]";
 var UUID2 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 var ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/;
 var LINKEDIN_URL = /^https:\/\/www\.linkedin\.com\//;
@@ -15167,35 +15358,35 @@ function buildInitialMessage(env) {
   }
   return header;
 }
-var app33 = new Hono();
-app33.post("/", requireAdminSession, async (c) => {
+var app34 = new Hono();
+app34.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
   } catch {
-    console.error(TAG25 + " rejected status=400 reason=schema:body-not-json");
+    console.error(TAG26 + " rejected status=400 reason=schema:body-not-json");
     return c.json({ ok: false, error: "schema", reason: "body-not-json" }, 400);
   }
   const v = validate(body);
   if (!v.ok) {
-    console.error(TAG25 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
+    console.error(TAG26 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
     return c.json({ ok: false, error: v.error, reason: v.reason, missing: v.missing }, v.status);
   }
   const envelope = v.envelope;
   const cacheKey = c.var.cacheKey ?? "";
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(TAG25 + " rejected status=500 reason=admin-account-not-resolved");
+    console.error(TAG26 + " rejected status=500 reason=admin-account-not-resolved");
     return c.json({ ok: false, error: "admin-account-not-resolved" }, 500);
   }
   const payloadBytes = JSON.stringify(envelope).length;
   console.log(
-    TAG25 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
+    TAG26 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
   );
   const initialMessage = buildInitialMessage(envelope);
   const spawnStart = Date.now();
   const sessionId = randomUUID12();
-  console.log(TAG25 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
+  console.log(TAG26 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -15204,20 +15395,20 @@ app33.post("/", requireAdminSession, async (c) => {
   });
   if ("error" in spawned) {
     console.error(
-      TAG25 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
+      TAG26 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
     );
     return c.json({ ok: false, error: "dispatch-failed", upstreamStatus: spawned.status, detail: spawned.error }, 502);
   }
   console.log(
-    TAG25 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
+    TAG26 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
   );
   return c.json({ ok: true, dispatchId: envelope.dispatchId, taskId: spawned.sessionId }, 202);
 });
-var linkedin_ingest_default = app33;
+var linkedin_ingest_default = app34;
 
 // server/routes/admin/post-turn-context.ts
 import neo4j3 from "neo4j-driver";
-var TAG26 = "[post-turn-context]";
+var TAG27 = "[post-turn-context]";
 var STRIPPED_PROPERTIES2 = /* @__PURE__ */ new Set([
   "embedding",
   "passwordHash",
@@ -15255,11 +15446,11 @@ function pruneProperties(raw) {
   }
   return out;
 }
-var app34 = new Hono();
-app34.get("/", async (c) => {
+var app35 = new Hono();
+app35.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr2(remoteAddr)) {
-    console.error(`${TAG26} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG27} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "post-turn-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -15268,7 +15459,7 @@ app34.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr2(t));
     if (offender !== void 0) {
-      console.error(`${TAG26} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG27} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "post-turn-context-loopback-only" }, 403);
     }
   }
@@ -15300,7 +15491,7 @@ app34.get("/", async (c) => {
     writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
     const total = Date.now() - started;
     console.log(
-      `${TAG26} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
+      `${TAG27} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
     );
     return c.json({
       writes: writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }))
@@ -15309,18 +15500,18 @@ app34.get("/", async (c) => {
     const elapsed = Date.now() - started;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG26} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
+      `${TAG27} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `post-turn-context unavailable: ${message}` }, 503);
   } finally {
     await session.close();
   }
 });
-var post_turn_context_default = app34;
+var post_turn_context_default = app35;
 
 // server/routes/admin/public-session-context.ts
 import neo4j4 from "neo4j-driver";
-var TAG27 = "[public-session-context]";
+var TAG28 = "[public-session-context]";
 var STRIPPED_PROPERTIES3 = /* @__PURE__ */ new Set([
   "embedding",
   "passwordHash",
@@ -15358,11 +15549,11 @@ function pruneProperties2(raw) {
   }
   return out;
 }
-var app35 = new Hono();
-app35.get("/", async (c) => {
+var app36 = new Hono();
+app36.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr3(remoteAddr)) {
-    console.error(`${TAG27} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG28} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -15371,7 +15562,7 @@ app35.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr3(t));
     if (offender !== void 0) {
-      console.error(`${TAG27} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG28} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-context-loopback-only" }, 403);
     }
   }
@@ -15402,7 +15593,7 @@ app35.get("/", async (c) => {
     writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
     const total = Date.now() - started;
     console.log(
-      `${TAG27} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
+      `${TAG28} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
     );
     return c.json({
       writes: writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }))
@@ -15411,25 +15602,25 @@ app35.get("/", async (c) => {
     const elapsed = Date.now() - started;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG27} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
+      `${TAG28} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `public-session-context unavailable: ${message}` }, 503);
   } finally {
     await session.close();
   }
 });
-var public_session_context_default = app35;
+var public_session_context_default = app36;
 
 // server/routes/admin/public-session-exit.ts
-var TAG28 = "[public-session-exit-route]";
+var TAG29 = "[public-session-exit-route]";
 function isLoopbackAddr4(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-var app36 = new Hono();
-app36.post("/", async (c) => {
+var app37 = new Hono();
+app37.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr4(remoteAddr)) {
-    console.error(`${TAG28} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG29} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-exit-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -15438,7 +15629,7 @@ app36.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr4(t));
     if (offender !== void 0) {
-      console.error(`${TAG28} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG29} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-exit-loopback-only" }, 403);
     }
   }
@@ -15453,18 +15644,18 @@ app36.post("/", async (c) => {
   handlePublicSessionExit(sessionId);
   return c.json({ ok: true });
 });
-var public_session_exit_default = app36;
+var public_session_exit_default = app37;
 
 // server/routes/admin/access-session-evict.ts
-var TAG29 = "[access-session-evict]";
+var TAG30 = "[access-session-evict]";
 function isLoopbackAddr5(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-var app37 = new Hono();
-app37.post("/", async (c) => {
+var app38 = new Hono();
+app38.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr5(remoteAddr)) {
-    console.error(`${TAG29} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG30} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "access-session-evict-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -15473,7 +15664,7 @@ app37.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr5(t));
     if (offender !== void 0) {
-      console.error(`${TAG29} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG30} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "access-session-evict-loopback-only" }, 403);
     }
   }
@@ -15486,22 +15677,22 @@ app37.post("/", async (c) => {
   const grantId = typeof body.grantId === "string" ? body.grantId.trim() : "";
   if (!grantId) return c.json({ error: "grantId required" }, 400);
   const dropped = evictAccessSessionsByGrant(grantId);
-  console.log(`${TAG29} grantId=${grantId} dropped=${dropped}`);
+  console.log(`${TAG30} grantId=${grantId} dropped=${dropped}`);
   return c.json({ ok: true, dropped });
 });
-var access_session_evict_default = app37;
+var access_session_evict_default = app38;
 
 // server/routes/admin/enrol-person.ts
-var TAG30 = "[enrol]";
+var TAG31 = "[enrol]";
 function isLoopbackAddr6(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
 var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-var app38 = new Hono();
-app38.post("/", async (c) => {
+var app39 = new Hono();
+app39.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr6(remoteAddr)) {
-    console.error(`${TAG30} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG31} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "enrol-person-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -15510,7 +15701,7 @@ app38.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr6(t));
     if (offender !== void 0) {
-      console.error(`${TAG30} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG31} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "enrol-person-loopback-only" }, 403);
     }
   }
@@ -15535,7 +15726,7 @@ app38.post("/", async (c) => {
   }
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG30} op=person result=no-account-id`);
+    console.error(`${TAG31} op=person result=no-account-id`);
     return c.json({ error: "no-account-id" }, 500);
   }
   let personId;
@@ -15543,7 +15734,7 @@ app38.post("/", async (c) => {
     personId = await enrolPerson({ accountId, phone, email, agentSlug });
   } catch (err) {
     console.error(
-      `${TAG30} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG31} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "enrol-failed" }, 500);
   }
@@ -15553,19 +15744,19 @@ app38.post("/", async (c) => {
     if (g) grant = { grantId: g.grantId, status: g.status, contactValue: g.contactValue };
   } catch (err) {
     console.error(
-      `${TAG30} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG31} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
   console.log(
-    `${TAG30} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
+    `${TAG31} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
   );
   return c.json({ personId, grant }, 200);
 });
-var enrol_person_default = app38;
+var enrol_person_default = app39;
 
 // server/routes/admin/browser.ts
-var app39 = new Hono();
-app39.post("/launch", requireAdminSession, async (c) => {
+var app40 = new Hono();
+app40.post("/launch", requireAdminSession, async (c) => {
   try {
     const transport = resolveBrowserTransport(c.req.raw, c.env?.incoming?.socket?.remoteAddress);
     console.error(`[admin/browser/launch] op=request transport=${transport}`);
@@ -15593,50 +15784,50 @@ app39.post("/launch", requireAdminSession, async (c) => {
     );
   }
 });
-var browser_default = app39;
+var browser_default = app40;
 
 // server/routes/admin/index.ts
-var app40 = new Hono();
-app40.route("/session", session_default);
-app40.route("/logs", logs_default);
-app40.route("/claude-info", claude_info_default);
-app40.route("/attachment", attachment_default);
-app40.route("/agents", agents_default);
-app40.route("/sessions", sessions_default);
-app40.route("/claude-sessions", claude_sessions_default);
-app40.route("/log-ingest", log_ingest_default);
-app40.route("/events", events_default);
-app40.route("/files", files_default);
-app40.route("/graph-search", graph_search_default);
-app40.route("/graph-subgraph", graph_subgraph_default);
-app40.route("/graph-delete", graph_delete_default);
-app40.route("/graph-restore", graph_restore_default);
-app40.route("/graph-labels-in-graph", graph_labels_in_graph_default);
-app40.route("/graph-default-view", graph_default_view_default);
-app40.route("/sidebar-artefacts", sidebar_artefacts_default);
-app40.route("/sidebar-sessions", sidebar_sessions_default);
-app40.route("/session-delete", session_delete_default);
-app40.route("/session-stop", session_stop_default);
-app40.route("/session-archive", session_archive_default);
-app40.route("/browser", browser_default);
-app40.route("/session-rc-spawn", session_rc_spawn_default);
-app40.route("/session-reseat", session_reseat_default);
-app40.route("/system-stats", system_stats_default);
-app40.route("/health-brand", health_default2);
-app40.route("/linkedin-ingest", linkedin_ingest_default);
-app40.route("/post-turn-context", post_turn_context_default);
-app40.route("/public-session-context", public_session_context_default);
-app40.route("/public-session-exit", public_session_exit_default);
-app40.route("/access-session-evict", access_session_evict_default);
-app40.route("/enrol-person", enrol_person_default);
-var admin_default = app40;
+var app41 = new Hono();
+app41.route("/session", session_default);
+app41.route("/logs", logs_default);
+app41.route("/claude-info", claude_info_default);
+app41.route("/attachment", attachment_default);
+app41.route("/agents", agents_default);
+app41.route("/sessions", sessions_default);
+app41.route("/claude-sessions", claude_sessions_default);
+app41.route("/log-ingest", log_ingest_default);
+app41.route("/events", events_default);
+app41.route("/files", files_default);
+app41.route("/graph-search", graph_search_default);
+app41.route("/graph-subgraph", graph_subgraph_default);
+app41.route("/graph-delete", graph_delete_default);
+app41.route("/graph-restore", graph_restore_default);
+app41.route("/graph-labels-in-graph", graph_labels_in_graph_default);
+app41.route("/graph-default-view", graph_default_view_default);
+app41.route("/sidebar-artefacts", sidebar_artefacts_default);
+app41.route("/sidebar-sessions", sidebar_sessions_default);
+app41.route("/session-delete", session_delete_default);
+app41.route("/session-stop", session_stop_default);
+app41.route("/session-archive", session_archive_default);
+app41.route("/browser", browser_default);
+app41.route("/session-rc-spawn", session_rc_spawn_default);
+app41.route("/session-reseat", session_reseat_default);
+app41.route("/system-stats", system_stats_default);
+app41.route("/health-brand", health_default2);
+app41.route("/linkedin-ingest", linkedin_ingest_default);
+app41.route("/post-turn-context", post_turn_context_default);
+app41.route("/public-session-context", public_session_context_default);
+app41.route("/public-session-exit", public_session_exit_default);
+app41.route("/access-session-evict", access_session_evict_default);
+app41.route("/enrol-person", enrol_person_default);
+var admin_default = app41;
 
 // server/routes/access/verify-token.ts
-var TAG31 = "[access-verify]";
+var TAG32 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
-var app41 = new Hono();
-app41.post("/", async (c) => {
+var app42 = new Hono();
+app42.post("/", async (c) => {
   const ip = c.var.clientIp || "unknown";
   let body;
   try {
@@ -15651,39 +15842,39 @@ app41.post("/", async (c) => {
   }
   const rateMsg = checkAccessRateLimit(ip, agentSlug);
   if (rateMsg) {
-    console.error(`${TAG31} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
+    console.error(`${TAG32} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
     return c.json({ error: rateMsg }, 429);
   }
   const grant = await findGrantByMagicToken(token);
   if (!grant) {
     recordAccessFailedAttempt(ip, agentSlug);
-    console.error(`${TAG31} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
+    console.error(`${TAG32} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.agentSlug !== agentSlug) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG31} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
+      `${TAG32} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
     );
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.status === "expired" || grant.status === "revoked") {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG31} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
+      `${TAG32} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (grant.expiresAt !== null && grant.expiresAt < Date.now()) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG31} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
+      `${TAG32} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (!grant.sliceToken) {
     console.error(
-      `${TAG31} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
+      `${TAG32} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
     );
     return c.json({ error: "grant-misconfigured" }, 500);
   }
@@ -15699,12 +15890,12 @@ app41.post("/", async (c) => {
     await consumeMagicTokenAndActivate(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG31} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG32} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "verification-failed" }, 500);
   }
   clearAccessRateLimit(ip, agentSlug);
-  console.log(`${TAG31} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
+  console.log(`${TAG32} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
   console.log(
     `${MINT_TAG} grantId=${grant.grantId} sliceToken=${grant.sliceToken.slice(0, 8)} agentSlug=${agentSlug} personId=${grant.personId ?? "none"}`
   );
@@ -15718,13 +15909,13 @@ app41.post("/", async (c) => {
     displayName: grant.displayName
   });
 });
-var verify_token_default = app41;
+var verify_token_default = app42;
 
 // app/lib/access-email.ts
 import { spawn as spawn2 } from "child_process";
-import { resolve as resolve24 } from "path";
-var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve24(process.cwd(), "..");
-var SEND_SCRIPT = resolve24(
+import { resolve as resolve25 } from "path";
+var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve25(process.cwd(), "..");
+var SEND_SCRIPT = resolve25(
   PLATFORM_ROOT7,
   "plugins",
   "email",
@@ -15780,10 +15971,10 @@ async function sendMagicLinkEmail(payload) {
 }
 
 // server/routes/access/request-magic-link.ts
-var TAG32 = "[access-request-link]";
-var app42 = new Hono();
+var TAG33 = "[access-request-link]";
+var app43 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
-app42.post("/", async (c) => {
+app43.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -15797,18 +15988,18 @@ app42.post("/", async (c) => {
   }
   const rateMsg = checkRequestLinkRateLimit(contactValue);
   if (rateMsg) {
-    console.error(`${TAG32} contactValue=${maskContact(contactValue)} result=rate-limited`);
+    console.error(`${TAG33} contactValue=${maskContact(contactValue)} result=rate-limited`);
     return c.json({ error: rateMsg }, 429);
   }
   recordRequestLinkAttempt(contactValue);
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG32} contactValue=${maskContact(contactValue)} result=no-account-id`);
+    console.error(`${TAG33} contactValue=${maskContact(contactValue)} result=no-account-id`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   const grant = await findActiveGrantByContact(contactValue, agentSlug, accountId);
   if (!grant) {
-    console.log(`${TAG32} contactValue=${maskContact(contactValue)} result=notfound`);
+    console.log(`${TAG33} contactValue=${maskContact(contactValue)} result=notfound`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   let token;
@@ -15816,7 +16007,7 @@ app42.post("/", async (c) => {
     token = await generateNewMagicToken(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG32} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG33} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
@@ -15848,26 +16039,26 @@ app42.post("/", async (c) => {
   });
   if (!sendResult.ok) {
     console.error(
-      `${TAG32} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
+      `${TAG33} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   console.log(
-    `${TAG32} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
+    `${TAG33} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
-var request_magic_link_default = app42;
+var request_magic_link_default = app43;
 
 // server/routes/access/index.ts
-var app43 = new Hono();
-app43.route("/verify-token", verify_token_default);
-app43.route("/request-magic-link", request_magic_link_default);
-var access_default = app43;
+var app44 = new Hono();
+app44.route("/verify-token", verify_token_default);
+app44.route("/request-magic-link", request_magic_link_default);
+var access_default = app44;
 
 // server/routes/sites.ts
-import { existsSync as existsSync23, readFileSync as readFileSync23, realpathSync as realpathSync5, statSync as statSync9 } from "fs";
-import { resolve as resolve25 } from "path";
+import { existsSync as existsSync23, readFileSync as readFileSync23, realpathSync as realpathSync5, statSync as statSync10 } from "fs";
+import { resolve as resolve26 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
   ".html": "text/html; charset=utf-8",
@@ -15898,8 +16089,8 @@ function getExt(p) {
   if (idx < p.lastIndexOf("/")) return "";
   return p.slice(idx).toLowerCase();
 }
-var app44 = new Hono();
-app44.get("/:rel{.*}", (c) => {
+var app45 = new Hono();
+app45.get("/:rel{.*}", (c) => {
   const reqPath = c.req.path;
   const rawRel = c.req.param("rel") ?? "";
   const trimmed = rawRel.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -15924,15 +16115,15 @@ app44.get("/:rel{.*}", (c) => {
     }
     segments.push(seg);
   }
-  const rootDir = resolve25(account.accountDir, "sites");
-  let filePath = segments.length === 0 ? rootDir : resolve25(rootDir, ...segments);
+  const rootDir = resolve26(account.accountDir, "sites");
+  let filePath = segments.length === 0 ? rootDir : resolve26(rootDir, ...segments);
   if (filePath !== rootDir && !filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
   let stat7;
   try {
-    stat7 = existsSync23(filePath) ? statSync9(filePath) : null;
+    stat7 = existsSync23(filePath) ? statSync10(filePath) : null;
   } catch {
     stat7 = null;
   }
@@ -15945,7 +16136,7 @@ app44.get("/:rel{.*}", (c) => {
     return c.redirect(target, 301);
   }
   if (stat7?.isDirectory()) {
-    filePath = resolve25(filePath, "index.html");
+    filePath = resolve26(filePath, "index.html");
   }
   if (!filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
@@ -16002,12 +16193,12 @@ app44.get("/:rel{.*}", (c) => {
     "X-Content-Type-Options": "nosniff"
   });
 });
-var sites_default = app44;
+var sites_default = app45;
 
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
 import { mkdirSync as mkdirSync4, readFileSync as readFileSync24, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname6 } from "path";
+import { dirname as dirname7 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
 var DEFAULT_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
@@ -16024,7 +16215,7 @@ function getSecret() {
   }
   const fresh = randomBytes(SECRET_BYTES).toString("hex");
   try {
-    mkdirSync4(dirname6(VISITOR_TOKEN_SECRET_FILE), { recursive: true, mode: 448 });
+    mkdirSync4(dirname7(VISITOR_TOKEN_SECRET_FILE), { recursive: true, mode: 448 });
     writeFileSync9(VISITOR_TOKEN_SECRET_FILE, fresh, { mode: 384, flag: "wx" });
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
@@ -16083,7 +16274,7 @@ var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
 import { existsSync as existsSync24, readFileSync as readFileSync25 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -16091,7 +16282,7 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot2 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot2) return null;
-  const brandPath = join22(platformRoot2, "config", "brand.json");
+  const brandPath = join23(platformRoot2, "config", "brand.json");
   if (!existsSync24(brandPath)) return null;
   try {
     cached2 = JSON.parse(readFileSync25(brandPath, "utf-8"));
@@ -16102,7 +16293,7 @@ function readBrandConfig() {
 }
 
 // server/routes/visitor-consent.ts
-var app45 = new Hono();
+var app46 = new Hono();
 var CONSENT_COOKIE_NAME = "mxy_consent";
 var CONSENT_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
 var DEFAULT_CONSENT_COPY = {
@@ -16147,17 +16338,17 @@ function siteSlugFromReferer(referer) {
     return "";
   }
 }
-app45.options("/consent", (c) => {
+app46.options("/consent", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app45.options("/brand-config", (c) => {
+app46.options("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app45.post("/consent", async (c) => {
+app46.post("/consent", async (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   let raw;
@@ -16197,7 +16388,7 @@ app45.post("/consent", async (c) => {
   console.log(`[consent] ${parsed.decision} site=${site} brand=${brandName} tokenBound=${tokenBound}`);
   return c.body(null, 204);
 });
-app45.get("/brand-config", (c) => {
+app46.get("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   const brand = readBrandConfig();
@@ -16207,7 +16398,7 @@ app45.get("/brand-config", (c) => {
   c.header("Cache-Control", "public, max-age=300");
   return c.json({ consent: { copy, palette } });
 });
-var visitor_consent_default = app45;
+var visitor_consent_default = app46;
 
 // server/routes/listings.ts
 function getCookie(headerValue, name) {
@@ -16228,14 +16419,14 @@ function appendConsentParams(pageUrl, token) {
     const hashIdx = pageUrl.indexOf("#");
     const hash = hashIdx >= 0 ? pageUrl.slice(hashIdx) : "";
     const base = hashIdx >= 0 ? pageUrl.slice(0, hashIdx) : pageUrl;
-    const sep8 = base.indexOf("?") >= 0 ? "&" : "?";
-    return base + sep8 + `consent=needed&v=${encodeURIComponent(token)}` + hash;
+    const sep9 = base.indexOf("?") >= 0 ? "&" : "?";
+    return base + sep9 + `consent=needed&v=${encodeURIComponent(token)}` + hash;
   }
 }
 var SAFE_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,118}[a-z0-9])?$/;
 var CHAT_SESSION_KEY_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var app46 = new Hono();
-app46.get("/:slug/click", async (c) => {
+var app47 = new Hono();
+app47.get("/:slug/click", async (c) => {
   const slug = c.req.param("slug") ?? "";
   const rawSession = c.req.query("session") ?? "";
   const sessionKey = CHAT_SESSION_KEY_RE.test(rawSession) ? rawSession : "invalid";
@@ -16299,10 +16490,10 @@ app46.get("/:slug/click", async (c) => {
   console.log(`[property-card-click] sessionKey=${sessionKey} listingSlug=${slug} consent=${consentCookie ?? "absent"} ts=${(/* @__PURE__ */ new Date()).toISOString()}`);
   return c.redirect(redirectUrl, 302);
 });
-var listings_default = app46;
+var listings_default = app47;
 
 // server/routes/visitor-event.ts
-var app47 = new Hono();
+var app48 = new Hono();
 var BOT_UA_RE = /\b(bot|crawl|spider|slurp|headlesschrome|phantomjs|googlebot|bingbot|yandex|baiduspider|ahrefsbot|semrushbot|mj12bot|dotbot|petalbot)\b/i;
 var buckets = /* @__PURE__ */ new Map();
 var RATE_LIMIT = 60;
@@ -16369,12 +16560,12 @@ function originAllowed(origin, allowlist) {
     return false;
   }
 }
-app47.options("/event", (c) => {
+app48.options("/event", (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   return c.body(null, 204);
 });
-app47.post("/event", async (c) => {
+app48.post("/event", async (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   const ua = c.req.header("user-agent") ?? "";
@@ -16579,17 +16770,17 @@ async function writeEvent(opts) {
     );
   }
 }
-var visitor_event_default = app47;
+var visitor_event_default = app48;
 
 // server/routes/session.ts
-import { resolve as resolve26 } from "path";
+import { resolve as resolve27 } from "path";
 import { existsSync as existsSync25, writeFileSync as writeFileSync10, mkdirSync as mkdirSync5 } from "fs";
 var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function writeBrandingCache(accountId, agentSlug, branding) {
   try {
-    const cacheDir = resolve26(MAXY_DIR, "branding-cache", accountId);
+    const cacheDir = resolve27(MAXY_DIR, "branding-cache", accountId);
     mkdirSync5(cacheDir, { recursive: true });
-    writeFileSync10(resolve26(cacheDir, `${agentSlug}.json`), JSON.stringify(branding), "utf-8");
+    writeFileSync10(resolve27(cacheDir, `${agentSlug}.json`), JSON.stringify(branding), "utf-8");
   } catch (err) {
     console.error(`[branding] cache write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -16601,7 +16792,7 @@ function parseVisitorCookie(cookieHeader) {
   const value = decodeURIComponent(match[1]).trim();
   return UUID_RE4.test(value) ? value : null;
 }
-function parseAccessSessionId(cookieHeader) {
+function parseAccessSessionId2(cookieHeader) {
   if (!cookieHeader) return null;
   const part = cookieHeader.split(";").map((p) => p.trim()).find((p) => p.startsWith("__access_session="));
   return part ? part.slice("__access_session=".length) : null;
@@ -16625,8 +16816,8 @@ function withVisitorCookie(response, visitorId) {
     headers
   });
 }
-var app48 = new Hono();
-app48.post("/", async (c) => {
+var app49 = new Hono();
+app49.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -16677,8 +16868,8 @@ app48.post("/", async (c) => {
   }
   let agentConfig = null;
   if (account) {
-    const agentDir = resolve26(account.accountDir, "agents", agentSlug);
-    if (!existsSync25(agentDir) || !existsSync25(resolve26(agentDir, "config.json"))) {
+    const agentDir = resolve27(account.accountDir, "agents", agentSlug);
+    if (!existsSync25(agentDir) || !existsSync25(resolve27(agentDir, "config.json"))) {
       return c.json({ error: "Agent not found" }, 404);
     }
     agentConfig = resolveAgentConfig(account.accountDir, agentSlug);
@@ -16698,7 +16889,7 @@ app48.post("/", async (c) => {
   if (branding) writeBrandingCache(accountId, agentSlug, branding);
   let accessSession = null;
   if (agentConfig && agentConfig.accessMode !== "open") {
-    const accessSessionId = parseAccessSessionId(cookieHeader);
+    const accessSessionId = parseAccessSessionId2(cookieHeader);
     accessSession = accessSessionId ? getAccessSession(accessSessionId) : null;
     if (!accessSession || accessSession.agentSlug !== agentSlug) {
       console.log(`[session] agent=${agentSlug} accessMode=${agentConfig.accessMode} \u2014 auth required`);
@@ -16837,7 +17028,7 @@ app48.post("/", async (c) => {
     newVisitorId
   );
 });
-var session_default2 = app48;
+var session_default2 = app49;
 
 // app/lib/graph-health.ts
 var import_dist4 = __toESM(require_dist3(), 1);
@@ -16958,13 +17149,13 @@ function startGraphHealthTimer() {
 
 // app/lib/file-watcher.ts
 import * as fsp2 from "fs/promises";
-import { resolve as resolve27, sep as sep7 } from "path";
+import { resolve as resolve28, sep as sep8 } from "path";
 var ACCOUNT_UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var DEFAULT_COALESCE_MS = 500;
 var ROOTS = ["accounts"];
 function _routeEvent(rootName, filename) {
   if (!filename) return null;
-  const segs = filename.split(sep7).filter(Boolean);
+  const segs = filename.split(sep8).filter(Boolean);
   if (segs.length < 2) return null;
   const accountId = segs[0];
   if (!ACCOUNT_UUID_RE2.test(accountId)) return null;
@@ -16977,7 +17168,7 @@ async function startFileWatcher(opts = {}) {
   const dropFn = opts.drop ?? dropFileIndex;
   for (const r of ROOTS) {
     try {
-      await fsp2.mkdir(resolve27(dataRoot, r), { recursive: true });
+      await fsp2.mkdir(resolve28(dataRoot, r), { recursive: true });
     } catch (err) {
       console.error(
         `[file-watcher] start-failed root="${r}" err="${err.message}" \u2014 index will be maintained by the 5-min reconcile backstop only`
@@ -16998,7 +17189,7 @@ async function startFileWatcher(opts = {}) {
     timers.set(relativePath, t);
   }
   async function runHook(relativePath, accountId) {
-    const absolute = resolve27(dataRoot, relativePath);
+    const absolute = resolve28(dataRoot, relativePath);
     let exists = false;
     try {
       const st = await fsp2.stat(absolute);
@@ -17022,7 +17213,7 @@ async function startFileWatcher(opts = {}) {
     }
   }
   async function watchRoot(rootName) {
-    const absRoot = resolve27(dataRoot, rootName);
+    const absRoot = resolve28(dataRoot, rootName);
     try {
       const iter = fsp2.watch(absRoot, { recursive: true, signal: controller.signal });
       for await (const event of iter) {
@@ -17061,7 +17252,7 @@ async function startFileWatcher(opts = {}) {
 
 // app/lib/migrate-uploads.ts
 import { mkdir as mkdir5, readdir as readdir5, rename, rm as rm3 } from "fs/promises";
-import { dirname as dirname7, relative as relative4, resolve as resolve28 } from "path";
+import { dirname as dirname8, relative as relative4, resolve as resolve29 } from "path";
 var ACCOUNT_UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function walkFiles(dir) {
   const out = [];
@@ -17072,7 +17263,7 @@ async function walkFiles(dir) {
     return out;
   }
   for (const e of entries) {
-    const abs = resolve28(dir, e.name);
+    const abs = resolve29(dir, e.name);
     if (e.isDirectory()) {
       out.push(...await walkFiles(abs));
     } else if (e.isFile()) {
@@ -17092,8 +17283,8 @@ async function relocateTree(srcDir, destDir, dataRoot, accountId, session) {
   let moved = 0;
   for (const oldAbs of files) {
     const suffix = relative4(srcDir, oldAbs);
-    const newAbs = resolve28(destDir, suffix);
-    await mkdir5(dirname7(newAbs), { recursive: true });
+    const newAbs = resolve29(destDir, suffix);
+    await mkdir5(dirname8(newAbs), { recursive: true });
     await rename(oldAbs, newAbs);
     moved++;
     const oldRel = relative4(dataRoot, oldAbs);
@@ -17119,7 +17310,7 @@ async function relocateTree(srcDir, destDir, dataRoot, accountId, session) {
 }
 async function migrateUploads(opts = {}) {
   const dataRoot = opts.dataRoot ?? DATA_ROOT;
-  const oldRoot = resolve28(dataRoot, "uploads");
+  const oldRoot = resolve29(dataRoot, "uploads");
   let topEntries;
   try {
     topEntries = await readdir5(oldRoot, { withFileTypes: true });
@@ -17140,8 +17331,8 @@ async function migrateUploads(opts = {}) {
       const name = entry.name;
       if (ACCOUNT_UUID_RE3.test(name)) {
         moved += await relocateTree(
-          resolve28(oldRoot, name),
-          resolve28(dataRoot, "accounts", name, "uploads"),
+          resolve29(oldRoot, name),
+          resolve29(dataRoot, "accounts", name, "uploads"),
           dataRoot,
           name,
           session
@@ -17153,8 +17344,8 @@ async function migrateUploads(opts = {}) {
           continue;
         }
         moved += await relocateTree(
-          resolve28(oldRoot, "public"),
-          resolve28(dataRoot, "accounts", installAccountId, "uploads", "public"),
+          resolve29(oldRoot, "public"),
+          resolve29(dataRoot, "accounts", installAccountId, "uploads", "public"),
           dataRoot,
           null,
           // public uploads carry no graph nodes
@@ -17185,7 +17376,7 @@ async function migrateUploads(opts = {}) {
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir6, readFile as readFile6, rename as rename2, writeFile as writeFile5, unlink as unlink3 } from "fs/promises";
 import { existsSync as existsSync26 } from "fs";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -17230,7 +17421,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join23(projectsRoot, slug.name);
+    const slugDir = join24(projectsRoot, slug.name);
     let entries;
     try {
       entries = await readdir6(slugDir, { withFileTypes: true });
@@ -17239,9 +17430,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry of entries) {
       if (entry.isFile() && SESSION_META_RE.test(entry.name)) {
-        out.push(join23(slugDir, entry.name));
+        out.push(join24(slugDir, entry.name));
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join23(slugDir, entry.name);
+        const subDir = join24(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir6(subDir, { withFileTypes: true });
@@ -17249,7 +17440,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join23(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join24(subDir, s.name));
         }
       }
     }
@@ -17261,7 +17452,7 @@ function shortId(path2) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join23(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join24(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -17603,8 +17794,8 @@ var streamSSE = (c, cb, onError) => {
 
 // app/lib/whatsapp/gateway/routes.ts
 function createWaChannelRoutes(deps) {
-  const app50 = new Hono();
-  app50.get("/wa-channel/inbound", (c) => {
+  const app51 = new Hono();
+  app51.get("/wa-channel/inbound", (c) => {
     const senderId = c.req.query("senderId");
     if (!senderId) return c.json({ error: "senderId required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -17622,7 +17813,7 @@ function createWaChannelRoutes(deps) {
       }
     });
   });
-  app50.post("/wa-channel/reply", async (c) => {
+  app51.post("/wa-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const text = body?.text;
@@ -17643,7 +17834,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
     return c.json({ ok: true });
   });
-  app50.post("/wa-channel/reply-document", async (c) => {
+  app51.post("/wa-channel/reply-document", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const files = body?.files;
@@ -17682,7 +17873,7 @@ function createWaChannelRoutes(deps) {
     }
     return c.json({ ok: true, results });
   });
-  app50.post("/wa-channel/ready", async (c) => {
+  app51.post("/wa-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     if (typeof senderId !== "string") {
@@ -17691,7 +17882,7 @@ function createWaChannelRoutes(deps) {
     deps.onReady?.(senderId);
     return c.json({ ok: true });
   });
-  app50.post("/wa-channel/received", async (c) => {
+  app51.post("/wa-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const waMessageId = body?.waMessageId;
@@ -17701,7 +17892,7 @@ function createWaChannelRoutes(deps) {
     deps.onReceived?.(senderId, waMessageId);
     return c.json({ ok: true });
   });
-  app50.post("/wa-channel/turn-end", async (c) => {
+  app51.post("/wa-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const sessionId = body?.sessionId;
@@ -17732,7 +17923,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=turn-end sessionId=${sid} replied=no delivered=fallback bytes=${bytes}`);
     return c.json({ ok: true, delivered: "fallback" });
   });
-  return app50;
+  return app51;
 }
 
 // app/lib/whatsapp/gateway/wa-gateway.ts
@@ -17985,8 +18176,8 @@ var InboundHub2 = class {
 
 // app/lib/webchat/gateway/routes.ts
 function createWebchatChannelRoutes(deps) {
-  const app50 = new Hono();
-  app50.get("/webchat-channel/inbound", (c) => {
+  const app51 = new Hono();
+  app51.get("/webchat-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -18004,7 +18195,7 @@ function createWebchatChannelRoutes(deps) {
       }
     });
   });
-  app50.post("/webchat-channel/reply", async (c) => {
+  app51.post("/webchat-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -18014,7 +18205,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReply?.(key, text);
     return c.json({ ok: true });
   });
-  app50.post("/webchat-channel/ready", async (c) => {
+  app51.post("/webchat-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -18023,7 +18214,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app50.post("/webchat-channel/received", async (c) => {
+  app51.post("/webchat-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -18033,7 +18224,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  return app50;
+  return app51;
 }
 
 // app/lib/webchat/gateway/webchat-gateway.ts
@@ -18068,16 +18259,16 @@ var WebchatGateway = class {
    *  The public /api/chat route awaits this to return the reply on the same SSE
    *  response, preserving the pre-756 POST→single-blob browser contract. */
   awaitReply(key, timeoutMs) {
-    return new Promise((resolve31) => {
+    return new Promise((resolve32) => {
       const timer2 = setTimeout(() => {
         this.replyAwaiters.delete(key);
-        resolve31({ timeout: true });
+        resolve32({ timeout: true });
       }, timeoutMs);
       if (timer2.unref) timer2.unref();
       this.replyAwaiters.set(key, (r) => {
         clearTimeout(timer2);
         this.replyAwaiters.delete(key);
-        resolve31(r);
+        resolve32(r);
       });
     });
   }
@@ -18346,8 +18537,8 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash5, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync27, readFileSync as readFileSync26, statSync as statSync10 } from "fs";
-import { resolve as resolve29 } from "path";
+import { existsSync as existsSync27, readFileSync as readFileSync26, statSync as statSync11 } from "fs";
+import { resolve as resolve30 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
 function canonicalize(value) {
@@ -18382,7 +18573,7 @@ var PUBKEY_SHA256 = "8eee6bcb33545fd13b16d3199a5735ca5db5062834c7b49dfe4f23801d9
 var GRACE_DAYS = 7;
 var GRACE_MS = GRACE_DAYS * 24 * 60 * 60 * 1e3;
 function pubkeyPath(brand) {
-  return resolve29(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
+  return resolve30(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
 }
 var memo = null;
 function memoKey(mtimeMs, account) {
@@ -18394,11 +18585,11 @@ function resolveEntitlement(brand, account) {
   if (brand.commercialMode !== true) {
     return logResolved(implicitTrust(account), null);
   }
-  const entitlementPath = resolve29(brand.configDir, "entitlement.json");
+  const entitlementPath = resolve30(brand.configDir, "entitlement.json");
   if (!existsSync27(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
-  const stat7 = statSync10(entitlementPath);
+  const stat7 = statSync11(entitlementPath);
   const key = memoKey(stat7.mtimeMs, account);
   if (memo && memo.key === key) {
     return memo.result;
@@ -18585,7 +18776,7 @@ function clientFrom(c) {
   );
 }
 var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT8 ? join24(PLATFORM_ROOT8, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT8 ? join25(PLATFORM_ROOT8, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync28(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
@@ -18611,7 +18802,7 @@ var brandLoginOpts = {
   bodyFont: BRAND.defaultFonts?.body,
   logoContainsName: !!BRAND.logoContainsName
 };
-var ALIAS_DOMAINS_PATH = join24(homedir3(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join25(homedir3(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync28(ALIAS_DOMAINS_PATH)) return null;
@@ -18639,11 +18830,11 @@ watchFile(ALIAS_DOMAINS_PATH, { interval: 2e3 }, () => {
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
-var app49 = new Hono();
+var app50 = new Hono();
 var nativeFileFollowers = /* @__PURE__ */ new Map();
 var waGateway = new WaGateway({
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve30(process.env.MAXY_PLATFORM_ROOT ?? join24(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve31(process.env.MAXY_PLATFORM_ROOT ?? join25(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 — file delivery on the native channel: resolve the platform
   // account + path validation here and funnel through the shared send core.
   sendDocument: async ({ senderId, accountId, filePath, caption }) => {
@@ -18659,7 +18850,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve30(process.env.MAXY_PLATFORM_ROOT ?? join24(__dirname, ".."))
+      platformRoot: resolve31(process.env.MAXY_PLATFORM_ROOT ?? join25(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -18689,7 +18880,7 @@ var waGateway = new WaGateway({
     nativeFileFollowers.set(senderId, ac);
   }
 });
-app49.route("/", waGateway.routes());
+app50.route("/", waGateway.routes());
 waGateway.startSweeper();
 var webchatGateway = new WebchatGateway({
   gatewayUrl: webchatGatewayUrl(),
@@ -18729,15 +18920,15 @@ var webchatGateway = new WebchatGateway({
   deleteSession: (sessionId) => managerDelete(sessionId),
   firePublicSessionEndReview: (input) => firePublicSessionEndReview(input)
 });
-app49.route("/", webchatGateway.routes());
+app50.route("/", webchatGateway.routes());
 webchatGateway.startSweeper();
 webchatGateway.startPublicReaper();
 var chatRoutes = createChatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
   awaitReply: (key, timeoutMs) => webchatGateway.awaitReply(key, timeoutMs)
 });
-app49.use("*", clientIpMiddleware);
-app49.use("*", async (c, next) => {
+app50.use("*", clientIpMiddleware);
+app50.use("*", async (c, next) => {
   await next();
   c.header("X-Content-Type-Options", "nosniff");
   c.header("Referrer-Policy", "strict-origin-when-cross-origin");
@@ -18747,7 +18938,7 @@ app49.use("*", async (c, next) => {
   );
 });
 var HTTP_LOG_PATHS = /* @__PURE__ */ new Set(["/vnc-viewer.html", "/vnc-popout.html"]);
-app49.use("*", async (c, next) => {
+app50.use("*", async (c, next) => {
   if (!HTTP_LOG_PATHS.has(c.req.path)) {
     await next();
     return;
@@ -18765,7 +18956,7 @@ app49.use("*", async (c, next) => {
     });
   }
 });
-app49.use("*", async (c, next) => {
+app50.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains()) || !isPublicHost(host)) {
     await next();
@@ -18796,7 +18987,7 @@ function resolveRemoteAuthOpts() {
   return brandLoginOpts;
 }
 var MAX_LOGIN_BODY = 8 * 1024;
-app49.post("/__remote-auth/login", async (c) => {
+app50.post("/__remote-auth/login", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   if (!requestIsTlsTerminated(c)) {
@@ -18841,7 +19032,7 @@ app49.post("/__remote-auth/login", async (c) => {
     }
   });
 });
-app49.get("/__remote-auth/logout", (c) => {
+app50.get("/__remote-auth/logout", (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   console.error(`[remote-auth] logout ip=${clientIp}`);
@@ -18854,7 +19045,7 @@ app49.get("/__remote-auth/logout", (c) => {
     }
   });
 });
-app49.post("/__remote-auth/change-password", async (c) => {
+app50.post("/__remote-auth/change-password", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   const rateLimited = checkRateLimit(client);
@@ -18896,6 +19087,9 @@ app49.post("/__remote-auth/change-password", async (c) => {
       redirect
     }), 200);
   }
+  if (targetUserId && await accessPasswordCollides(newPassword, USERS_FILE, targetUserId)) {
+    return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "change", changeError: "That password is already in use by another admin. Choose a different one.", redirect }), 200);
+  }
   try {
     if (targetUserId) {
       await setAccessPassword(targetUserId, newPassword, USERS_FILE);
@@ -18910,13 +19104,13 @@ app49.post("/__remote-auth/change-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "change", changeError: "Failed to save password", redirect }), 200);
   }
 });
-app49.get("/__remote-auth/setup", (c) => {
+app50.get("/__remote-auth/setup", (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "setup" }), 200);
 });
-app49.post("/__remote-auth/set-initial-password", async (c) => {
+app50.post("/__remote-auth/set-initial-password", async (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
@@ -18954,10 +19148,10 @@ app49.post("/__remote-auth/set-initial-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "setup", setupError: "Failed to save password. Please try again." }), 200);
   }
 });
-app49.get("/api/remote-auth/status", (c) => {
+app50.get("/api/remote-auth/status", (c) => {
   return c.json({ configured: isRemoteAuthConfigured() });
 });
-app49.post("/api/remote-auth/set-password", async (c) => {
+app50.post("/api/remote-auth/set-password", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -18980,6 +19174,9 @@ app49.post("/api/remote-auth/set-password", async (c) => {
       requirements
     }, 400);
   }
+  if (sessionUserId && await accessPasswordCollides(body.password, USERS_FILE, sessionUserId)) {
+    return c.json({ error: "That password is already in use by another admin. Choose a different one." }, 400);
+  }
   try {
     if (sessionUserId) {
       await setAccessPassword(sessionUserId, body.password, USERS_FILE);
@@ -18993,10 +19190,10 @@ app49.post("/api/remote-auth/set-password", async (c) => {
     return c.json({ error: "Failed to save password" }, 500);
   }
 });
-app49.route("/api/_client-error", client_error_default);
+app50.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
 var PWA_PUBLIC_PATHS = /* @__PURE__ */ new Set(["/sw.js", ...PWA_SURFACES.map((s) => s.manifestPath)]);
-app49.use("*", async (c, next) => {
+app50.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path2 = c.req.path;
   if (path2 === "/favicon.ico" || path2.startsWith("/assets/") || path2.startsWith("/brand/") || PWA_PUBLIC_PATHS.has(path2)) {
@@ -19036,17 +19233,18 @@ app49.use("*", async (c, next) => {
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), redirect: path2 }), 200);
 });
-app49.route("/api/health", health_default);
-app49.route("/api/chat", chatRoutes);
-app49.route("/api/whatsapp", whatsapp_default);
-app49.route("/api/whatsapp-reader", whatsapp_reader_default);
-app49.route("/api/webchat", createWebchatRoutes({ handleInbound: (input) => webchatGateway.handleInbound(input) }));
-app49.route("/api/webchat/greeting", webchat_greeting_default);
-app49.route("/api/telegram", telegram_default);
-app49.route("/api/onboarding", onboarding_default);
-app49.route("/api/admin", admin_default);
-app49.route("/api/access", access_default);
-app49.route("/api/session", session_default2);
+app50.route("/api/health", health_default);
+app50.route("/api/chat", chatRoutes);
+app50.route("/api/whatsapp", whatsapp_default);
+app50.route("/api/whatsapp-reader", whatsapp_reader_default);
+app50.route("/api/public-reader", public_reader_default);
+app50.route("/api/webchat", createWebchatRoutes({ handleInbound: (input) => webchatGateway.handleInbound(input) }));
+app50.route("/api/webchat/greeting", webchat_greeting_default);
+app50.route("/api/telegram", telegram_default);
+app50.route("/api/onboarding", onboarding_default);
+app50.route("/api/admin", admin_default);
+app50.route("/api/access", access_default);
+app50.route("/api/session", session_default2);
 var SAFE_SLUG_RE2 = /^[a-z][a-z0-9-]{2,49}$/;
 var SAFE_FILENAME_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var IMAGE_MIME = {
@@ -19058,7 +19256,7 @@ var IMAGE_MIME = {
   ".svg": "image/svg+xml",
   ".ico": "image/x-icon"
 };
-app49.get("/agent-assets/:slug/:filename", (c) => {
+app50.get("/agent-assets/:slug/:filename", (c) => {
   const slug = c.req.param("slug");
   const filename = c.req.param("filename");
   if (!SAFE_SLUG_RE2.test(slug)) {
@@ -19074,8 +19272,8 @@ app49.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] no-account slug=${slug} file=${filename}`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve30(account.accountDir, "agents", slug, "assets", filename);
-  const expectedDir = resolve30(account.accountDir, "agents", slug, "assets");
+  const filePath = resolve31(account.accountDir, "agents", slug, "assets", filename);
+  const expectedDir = resolve31(account.accountDir, "agents", slug, "assets");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
@@ -19093,7 +19291,7 @@ app49.get("/agent-assets/:slug/:filename", (c) => {
     "Cache-Control": "public, max-age=3600"
   });
 });
-app49.get("/generated/:filename", (c) => {
+app50.get("/generated/:filename", (c) => {
   const filename = c.req.param("filename");
   if (!SAFE_FILENAME_RE.test(filename) || filename.includes("..")) {
     console.error(`[generated] serve file=${filename} status=403`);
@@ -19104,8 +19302,8 @@ app49.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve30(account.accountDir, "generated", filename);
-  const expectedDir = resolve30(account.accountDir, "generated");
+  const filePath = resolve31(account.accountDir, "generated", filename);
+  const expectedDir = resolve31(account.accountDir, "generated");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
@@ -19123,10 +19321,10 @@ app49.get("/generated/:filename", (c) => {
     "Cache-Control": "public, max-age=86400"
   });
 });
-app49.route("/sites", sites_default);
-app49.route("/listings", listings_default);
-app49.route("/v", visitor_event_default);
-app49.route("/v", visitor_consent_default);
+app50.route("/sites", sites_default);
+app50.route("/listings", listings_default);
+app50.route("/v", visitor_event_default);
+app50.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
@@ -19148,11 +19346,11 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 })}</script>`;
 var brandThemeColor = BRAND.defaultColors?.primary ?? "#000000";
 var brandBackgroundColor = BRAND.defaultColors?.background ?? "#ffffff";
-var brandIconFsPath = resolve30(process.cwd(), "public", brandIconPath.replace(/^\//, ""));
+var brandIconFsPath = resolve31(process.cwd(), "public", brandIconPath.replace(/^\//, ""));
 var brandIconExists = existsSync28(brandIconFsPath);
 var SW_SOURCE = (() => {
   try {
-    return readFileSync27(resolve30(process.cwd(), "public", "sw.js"), "utf-8");
+    return readFileSync27(resolve31(process.cwd(), "public", "sw.js"), "utf-8");
   } catch {
     return null;
   }
@@ -19160,7 +19358,7 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT8) return "unknown";
-    const versionFile = join24(PLATFORM_ROOT8, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join25(PLATFORM_ROOT8, "config", `.${BRAND.hostname}-version`);
     if (!existsSync28(versionFile)) return "unknown";
     const content = readFileSync27(versionFile, "utf-8").trim();
     return content || "unknown";
@@ -19203,7 +19401,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync27(resolve30(process.cwd(), "public", file), "utf-8");
+    html = readFileSync27(resolve31(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -19221,11 +19419,11 @@ ${clientErrorReporterScript}
 }
 var brandedHtmlCache = /* @__PURE__ */ new Map();
 function loadBrandingCache(agentSlug) {
-  const configDir2 = join24(homedir3(), BRAND.configDir);
+  const configDir2 = join25(homedir3(), BRAND.configDir);
   try {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join24(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join25(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync28(cachePath)) return null;
     return JSON.parse(readFileSync27(cachePath, "utf-8"));
   } catch {
@@ -19237,6 +19435,9 @@ function resolveDefaultSlug() {
   if (!account) return null;
   return resolveDefaultAgentSlug(account.accountDir);
 }
+function wantsNextSurface(c) {
+  return c.req.query("surface") === "next";
+}
 function brandedPublicHtml(agentSlug) {
   const baseHtml = cachedHtml("public.html");
   if (!agentSlug) return baseHtml;
@@ -19270,7 +19471,7 @@ function escapeHtml(s) {
 function agentUnavailableHtml() {
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(BRAND.productName)}</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1.5rem;color:#222"><h1 style="font-size:1.25rem">Agent unavailable</h1><p>This agent isn't available right now. If you reached this page from a saved link, the agent may have been turned off.</p></body></html>`;
 }
-app49.get("/", (c) => {
+app50.get("/", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const klass = classifyHost(host, getOperatorDomains(), isPublicHost);
   if (klass === "operator") {
@@ -19287,19 +19488,22 @@ app49.get("/", (c) => {
       );
     }
     console.error(`[public-root] op=serve-default slug=${defaultSlug}`);
+    if (wantsNextSurface(c)) return c.html(cachedHtml("public-next.html"));
     return c.html(brandedPublicHtml(defaultSlug));
   }
   console.log(`[host-class] host=${host} class=admin served=index.html`);
   return c.html(cachedHtml("index.html"));
 });
-app49.get("/public", (c) => {
+app50.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
+  if (wantsNextSurface(c)) return c.html(cachedHtml("public-next.html"));
   return c.html(cachedHtml("public.html"));
 });
-app49.get("/public-chat", (c) => {
+app50.get("/public-chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
+  if (wantsNextSurface(c)) return c.html(cachedHtml("public-next.html"));
   return c.html(cachedHtml("public.html"));
 });
 async function logViewerFetch(c, next) {
@@ -19316,12 +19520,12 @@ async function logViewerFetch(c, next) {
     duration_ms: Date.now() - start
   });
 }
-app49.use("/vnc-viewer.html", logViewerFetch);
-app49.use("/vnc-popout.html", logViewerFetch);
-app49.get("/vnc-popout.html", (c) => {
+app50.use("/vnc-viewer.html", logViewerFetch);
+app50.use("/vnc-popout.html", logViewerFetch);
+app50.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync27(resolve30(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync27(resolve31(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -19331,7 +19535,7 @@ app49.get("/vnc-popout.html", (c) => {
   }
   return c.html(html);
 });
-app49.post("/api/vnc/client-event", async (c) => {
+app50.post("/api/vnc/client-event", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -19352,11 +19556,11 @@ app49.post("/api/vnc/client-event", async (c) => {
   });
   return c.json({ ok: true });
 });
-app49.get("/g/:slug", (c) => {
+app50.get("/g/:slug", (c) => {
   return c.html(brandedPublicHtml());
 });
 for (const pwa of PWA_SURFACES) {
-  app49.get(pwa.manifestPath, (c) => {
+  app50.get(pwa.manifestPath, (c) => {
     const manifest = buildManifest(pwa, {
       productName: BRAND.productName,
       iconPath: brandIconPath,
@@ -19370,7 +19574,7 @@ for (const pwa of PWA_SURFACES) {
     return c.body(JSON.stringify(manifest));
   });
 }
-app49.get("/sw.js", (c) => {
+app50.get("/sw.js", (c) => {
   if (SW_SOURCE == null) {
     console.error("[pwa] op=sw status=500 reason=sw-source-missing");
     return c.text("Service worker unavailable", 500);
@@ -19379,27 +19583,27 @@ app49.get("/sw.js", (c) => {
   console.log(`[pwa] op=sw status=200 ct=${SW_CONTENT_TYPE}`);
   return c.body(SW_SOURCE);
 });
-app49.get("/graph", (c) => {
+app50.get("/graph", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("graph.html"));
 });
-app49.get("/chat", (c) => {
+app50.get("/chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("chat.html"));
 });
-app49.get("/data", (c) => {
+app50.get("/data", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app49.get("/browser", (c) => {
+app50.get("/browser", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("browser.html"));
 });
-app49.get("/:slug", async (c, next) => {
+app50.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN.test(`/${slug}`)) {
     const account = resolveAccount();
@@ -19409,18 +19613,19 @@ app49.get("/:slug", async (c, next) => {
     }
     const branding = loadBrandingCache(slug);
     console.error(`[public-catchall] served path=/${slug} slug=${slug} branding=${branding ? "hit" : "miss"}`);
+    if (wantsNextSurface(c)) return c.html(cachedHtml("public-next.html"));
     return c.html(brandedPublicHtml(slug));
   }
   await next();
 });
 if (brandFaviconPath !== "/favicon.ico") {
-  app49.get("/favicon.ico", (c) => {
+  app50.get("/favicon.ico", (c) => {
     c.header("Cache-Control", "public, max-age=300");
     return c.redirect(brandFaviconPath, 302);
   });
 }
-app49.use("/*", serveStatic({ root: "./public" }));
-app49.all("*", (c) => {
+app50.use("/*", serveStatic({ root: "./public" }));
+app50.all("*", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path2 = c.req.path;
   if (isPublicHost(host)) {
@@ -19434,7 +19639,7 @@ app49.all("*", (c) => {
 });
 var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
-var httpServer = serve({ fetch: app49.fetch, port, hostname });
+var httpServer = serve({ fetch: app50.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
   const census = pwaCensus({
@@ -19488,7 +19693,7 @@ for (const m of SUBAPP_MANIFEST) {
 }
 try {
   const registered = [];
-  for (const r of app49.routes ?? []) {
+  for (const r of app50.routes ?? []) {
     if (typeof r.path !== "string" || r.path.includes(":") || r.path.includes("*")) continue;
     if (AGENT_SLUG_PATTERN.test(r.path)) {
       registered.push({ method: (r.method ?? "ALL").toUpperCase(), path: r.path });
@@ -19583,7 +19788,7 @@ try {
 } catch (err) {
   console.error(`[graph-health] account-enumeration unavailable reason=${err instanceof Error ? err.message : String(err)}`);
 }
-var configDirForWhatsApp = basename8(MAXY_DIR) || ".maxy";
+var configDirForWhatsApp = basename9(MAXY_DIR) || ".maxy";
 var bootAccount = resolveAccount();
 if (bootAccount) {
   migrateRemovedConfigKeys(bootAccount.accountDir);
@@ -19645,7 +19850,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve30(process.env.MAXY_PLATFORM_ROOT ?? join24(__dirname, "..")),
+  platformRoot: resolve31(process.env.MAXY_PLATFORM_ROOT ?? join25(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     if (msg.isOwnerMirror) {