@rubytech/create-maxy-code 0.1.315 → 0.1.317

package/payload/server/server.js

@@ -27,9 +27,7 @@ import {
   WEBSOCKIFY_PORT,
   accessPasswordCollides,
   autoDeliverPremiumPlugins,
-  bindVisitorToGroup,
   canAccessAdmin,
-  checkGroupMembership,
   checkRateLimit,
   classifyHost,
   cleanupLeakedPremiumSubs,
@@ -42,7 +40,6 @@ import {
   emitMissingOnResolve,
   ensureConversation,
   fetchBranding,
-  findGroupBySlug,
   findMissingPlugins,
   findRecentConversation,
   fingerprintSessionKey,
@@ -50,7 +47,6 @@ import {
   getAgentSessionIdForConversation,
   getConversationClaudeSessionIds,
   getDefaultAccountId,
-  getGroupParticipants,
   getOperatorDomains,
   getRecentMessages,
   getRoleForSession,
@@ -110,7 +106,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-Q7EWROVN.js";
+} from "./chunk-NCRJQEZ3.js";
 import {
   __commonJS,
   __toESM
@@ -532,63 +528,63 @@ var require_dist2 = __commonJS({
     }
     function pickShortLabel(node) {
       const props = node.properties;
-      const primaryLabel = node.labels[0];
-      if (primaryLabel === "ToolCall") {
+      const primaryLabel2 = node.labels[0];
+      if (primaryLabel2 === "ToolCall") {
         const v = props.toolName;
         if (typeof v === "string" && v.length > 0) {
           return v.length > 24 ? v.slice(0, 24) + "\u2026" : v;
         }
-      } else if (primaryLabel === "WorkflowRun") {
+      } else if (primaryLabel2 === "WorkflowRun") {
         const v = props.startedAt;
         if (typeof v === "string" && v.length > 0) {
           const ts = formatRunTimestamp(v);
           if (ts)
             return ts;
         }
-      } else if (primaryLabel === "WorkflowStep") {
+      } else if (primaryLabel2 === "WorkflowStep") {
         const v = props.label;
         if (typeof v === "string" && v.length > 0) {
           return v.length > 24 ? v.slice(0, 24) + "\u2026" : v;
         }
-      } else if (primaryLabel === "Person") {
+      } else if (primaryLabel2 === "Person") {
         const given = typeof props.givenName === "string" ? props.givenName : "";
         const family = typeof props.familyName === "string" ? props.familyName : "";
         const full = [given, family].filter((s) => s.length > 0).join(" ");
         if (full.length > 0) {
           return full.length > 24 ? full.slice(0, 24) + "\u2026" : full;
         }
-      } else if (primaryLabel === "Agent") {
+      } else if (primaryLabel2 === "Agent") {
         const dn = typeof props.displayName === "string" ? props.displayName : "";
         const slug = typeof props.slug === "string" ? props.slug : "";
         const v = dn.length > 0 ? dn : slug;
         if (v.length > 0) {
           return v.length > 24 ? v.slice(0, 24) + "\u2026" : v;
         }
-      } else if (primaryLabel === "Job") {
+      } else if (primaryLabel2 === "Job") {
         const client = typeof props.client === "string" ? props.client : "";
         const jobId = typeof props.jobId === "string" ? props.jobId : "";
         const composed = [client, jobId.length > 0 ? `#${jobId}` : ""].filter((s) => s.length > 0).join(" ");
         if (composed.length > 0) {
           return composed.length > 24 ? composed.slice(0, 24) + "\u2026" : composed;
         }
-      } else if (primaryLabel === "QuoteDocument") {
+      } else if (primaryLabel2 === "QuoteDocument") {
         const ref = typeof props.ref === "string" ? props.ref : "";
         if (ref.length > 0) {
           return ref.length > 24 ? ref.slice(0, 24) + "\u2026" : ref;
         }
-      } else if (primaryLabel === "InboundInvoice") {
+      } else if (primaryLabel2 === "InboundInvoice") {
         const supplier = typeof props.supplier === "string" ? props.supplier : "";
         const conf = typeof props.confirmationNumber === "string" ? props.confirmationNumber : "";
         const composed = [supplier, conf.length > 0 ? `#${conf}` : ""].filter((s) => s.length > 0).join(" ");
         if (composed.length > 0) {
           return composed.length > 24 ? composed.slice(0, 24) + "\u2026" : composed;
         }
-      } else if (primaryLabel === "WhatsAppGroup") {
+      } else if (primaryLabel2 === "WhatsAppGroup") {
         const clientName = typeof props.clientName === "string" ? props.clientName : "";
         if (clientName.length > 0) {
           return clientName.length > 24 ? clientName.slice(0, 24) + "\u2026" : clientName;
         }
-      } else if (primaryLabel === "Message") {
+      } else if (primaryLabel2 === "Message") {
         const role = typeof props.role === "string" ? props.role : "";
         const roleShort = role === "user" ? "user" : role === "assistant" ? "asst" : role === "system" ? "sys" : role === "tool" ? "tool" : null;
         const createdAt = typeof props.createdAt === "string" ? props.createdAt : "";
@@ -604,60 +600,60 @@ var require_dist2 = __commonJS({
           return v.length > 24 ? v.slice(0, 24) + "\u2026" : v;
         }
       }
-      if (primaryLabel === "Conversation") {
+      if (primaryLabel2 === "Conversation") {
         const id = typeof props.sessionId === "string" ? props.sessionId : null;
         if (id)
           return `Conv ${id.slice(0, 8)}`;
       }
-      return primaryLabel ?? "\u2026";
+      return primaryLabel2 ?? "\u2026";
     }
     function pickDisplayName(node) {
       const props = node.properties;
-      const primaryLabel = node.labels[0];
-      if (primaryLabel === "ToolCall") {
+      const primaryLabel2 = node.labels[0];
+      if (primaryLabel2 === "ToolCall") {
         const v = props.toolName;
         if (typeof v === "string" && v.length > 0)
           return v;
-      } else if (primaryLabel === "WorkflowRun") {
+      } else if (primaryLabel2 === "WorkflowRun") {
         const v = props.startedAt;
         if (typeof v === "string" && v.length > 0) {
           const ts = formatRunTimestamp(v);
           if (ts)
             return ts;
         }
-      } else if (primaryLabel === "WorkflowStep") {
+      } else if (primaryLabel2 === "WorkflowStep") {
         const v = props.label;
         if (typeof v === "string" && v.length > 0)
           return v;
-      } else if (primaryLabel === "Person") {
+      } else if (primaryLabel2 === "Person") {
         const given = typeof props.givenName === "string" ? props.givenName : "";
         const family = typeof props.familyName === "string" ? props.familyName : "";
         const full = [given, family].filter((s) => s.length > 0).join(" ");
         if (full.length > 0)
           return full;
-      } else if (primaryLabel === "Agent") {
+      } else if (primaryLabel2 === "Agent") {
         const dn = typeof props.displayName === "string" ? props.displayName : "";
         const slug = typeof props.slug === "string" ? props.slug : "";
         const v = dn.length > 0 ? dn : slug;
         if (v.length > 0)
           return v;
-      } else if (primaryLabel === "Job") {
+      } else if (primaryLabel2 === "Job") {
         const client = typeof props.client === "string" ? props.client : "";
         const jobId = typeof props.jobId === "string" ? props.jobId : "";
         const composed = [client, jobId.length > 0 ? `#${jobId}` : ""].filter((s) => s.length > 0).join(" ");
         if (composed.length > 0)
           return composed;
-      } else if (primaryLabel === "QuoteDocument") {
+      } else if (primaryLabel2 === "QuoteDocument") {
         const ref = typeof props.ref === "string" ? props.ref : "";
         if (ref.length > 0)
           return ref;
-      } else if (primaryLabel === "InboundInvoice") {
+      } else if (primaryLabel2 === "InboundInvoice") {
         const supplier = typeof props.supplier === "string" ? props.supplier : "";
         const conf = typeof props.confirmationNumber === "string" ? props.confirmationNumber : "";
         const composed = [supplier, conf.length > 0 ? `#${conf}` : ""].filter((s) => s.length > 0).join(" ");
         if (composed.length > 0)
           return composed;
-      } else if (primaryLabel === "WhatsAppGroup") {
+      } else if (primaryLabel2 === "WhatsAppGroup") {
         const clientName = typeof props.clientName === "string" ? props.clientName : "";
         if (clientName.length > 0)
           return clientName;
@@ -667,12 +663,12 @@ var require_dist2 = __commonJS({
         if (typeof v === "string" && v.length > 0)
           return v;
       }
-      if (primaryLabel === "Conversation") {
+      if (primaryLabel2 === "Conversation") {
         const id = typeof props.sessionId === "string" ? props.sessionId : null;
         if (id)
           return `Conv ${id.slice(0, 8)}`;
       }
-      return primaryLabel ?? "\u2026";
+      return primaryLabel2 ?? "\u2026";
     }
   }
 });
@@ -6891,7 +6887,6 @@ function resolveTitle(body, sessionId, userTitles) {
   const channel = stripped.channel;
   if (userTitle) return { title: trimToTitle(userTitle), source: "user", channel };
   if (aiTitle) return { title: trimToTitle(aiTitle), source: "ai", channel };
-  if (stripped.inner) return { title: trimToTitle(stripped.inner), source: "first-message", channel };
   return { title: sessionId.slice(0, 8), source: "prefix", channel };
 }
 app3.get("/", requireAdminSession, async (c) => {
@@ -6971,7 +6966,7 @@ app3.get("/", requireAdminSession, async (c) => {
   if (accountId) {
     await Promise.all(
       rows.map(async (row) => {
-        if (row.titleSource !== "first-message" && row.titleSource !== "prefix") return;
+        if (row.titleSource !== "prefix") return;
         const pid = personIdBySession.get(row.sessionId);
         if (pid) {
           const name = await loadPersonNameByElementId(accountId, pid);
@@ -7954,18 +7949,37 @@ var UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-f
 function canonicalOverridePath(accountDir) {
   return join13(accountDir, FILE);
 }
-function readCanonicalOverrideId(accountDir) {
+function readRaw(accountDir) {
   try {
-    const raw = JSON.parse(readFileSync14(canonicalOverridePath(accountDir), "utf8"));
-    return typeof raw.sessionId === "string" && UUID.test(raw.sessionId) ? raw.sessionId : null;
+    return JSON.parse(readFileSync14(canonicalOverridePath(accountDir), "utf8"));
   } catch {
     return null;
   }
 }
-function writeCanonicalOverrideId(accountDir, sessionId) {
+function readCanonicalOverrideId(accountDir, userId, primaryUserId) {
+  const raw = readRaw(accountDir);
+  if (!raw) return null;
+  if (raw.byAdmin && typeof raw.byAdmin === "object") {
+    const v = raw.byAdmin[userId];
+    return typeof v === "string" && UUID.test(v) ? v : null;
+  }
+  if (typeof raw.sessionId === "string" && UUID.test(raw.sessionId) && primaryUserId !== null && userId === primaryUserId) {
+    return raw.sessionId;
+  }
+  return null;
+}
+function writeCanonicalOverrideId(accountDir, userId, sessionId) {
+  const raw = readRaw(accountDir);
+  const byAdmin = {};
+  if (raw?.byAdmin && typeof raw.byAdmin === "object") {
+    for (const [k, v] of Object.entries(raw.byAdmin)) {
+      if (typeof v === "string") byAdmin[k] = v;
+    }
+  }
+  byAdmin[userId] = sessionId;
   const path2 = canonicalOverridePath(accountDir);
   const tmp = `${path2}.${process.pid}.tmp`;
-  writeFileSync5(tmp, JSON.stringify({ sessionId }, null, 2), "utf8");
+  writeFileSync5(tmp, JSON.stringify({ byAdmin }, null, 2), "utf8");
   renameSync(tmp, path2);
 }
 
@@ -7981,6 +7995,33 @@ function adminSessionIdFor(accountId, senderId, personId) {
   return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20, 32)}`;
 }
 
+// ../lib/models/src/index.ts
+var OPUS_MODEL = "claude-opus-4-8[1m]";
+var SONNET_MODEL = "claude-sonnet-4-6";
+var HAIKU_MODEL = "claude-haiku-4-5";
+var MODEL_CONTEXT_WINDOW = {
+  [OPUS_MODEL]: 1e6,
+  [SONNET_MODEL]: 2e5,
+  [HAIKU_MODEL]: 2e5
+};
+var MODEL_DISPLAY_NAMES = {
+  [OPUS_MODEL]: "Opus 4.8 (1M context)",
+  [SONNET_MODEL]: "Sonnet 4.6",
+  [HAIKU_MODEL]: "Haiku 4.5"
+};
+var SELECTABLE_MODELS = [OPUS_MODEL, SONNET_MODEL, HAIKU_MODEL];
+function isSelectableModel(id) {
+  return SELECTABLE_MODELS.includes(id);
+}
+var PERMISSION_MODES = ["default", "acceptEdits", "plan", "auto", "bypassPermissions"];
+function isPermissionMode(value) {
+  return PERMISSION_MODES.includes(value);
+}
+var EFFORT_LEVELS = ["low", "medium", "high", "xhigh"];
+function isEffortLevel(value) {
+  return EFFORT_LEVELS.includes(value);
+}
+
 // ../services/claude-session-manager/src/sidecar-store.ts
 import { existsSync as existsSync8, mkdirSync as mkdirSync2, readdirSync as readdirSync9, readFileSync as readFileSync15, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync6 } from "fs";
 import { join as join14 } from "path";
@@ -8134,11 +8175,25 @@ function locateSidecar(sessionId) {
   for (const slug of slugs) {
     const metaPath = join15(projectsRoot, slug, `${sessionId}.meta.json`);
     if (existsSync9(metaPath)) {
-      return { channel: readSidecarMeta(metaPath).channel };
+      const meta = readSidecarMeta(metaPath);
+      return { channel: meta.channel, adminUserId: meta.adminUserId };
     }
   }
   return null;
 }
+function readTargetOwner(sessionId) {
+  const sidecar = locateSidecar(sessionId);
+  if (sidecar !== null) return { found: true, owner: sidecar.adminUserId };
+  const { projectDir } = locateSession(sessionId);
+  if (projectDir !== null) {
+    return { found: true, owner: readSidecarMeta(join15(projectDir, `${sessionId}.meta.json`)).adminUserId };
+  }
+  return { found: false, owner: null };
+}
+function ownedByRequester(owner, requesterUserId, primaryUserId) {
+  if (requesterUserId === null) return false;
+  return owner === requesterUserId || owner === null && requesterUserId === primaryUserId;
+}
 function sessionSidecarExists(sessionId) {
   return locateSidecar(sessionId) !== null;
 }
@@ -8189,8 +8244,6 @@ async function fetchComposerIndicators(sessionId) {
   }
 }
 var MODEL_ID_PATTERN = /^claude-[a-z0-9][a-z0-9.-]*(\[1m\])?$/;
-var EFFORT_LEVELS = /* @__PURE__ */ new Set(["low", "medium", "high", "xhigh"]);
-var PERMISSION_MODE_VALUES = /* @__PURE__ */ new Set(["default", "acceptEdits", "plan", "auto", "bypassPermissions"]);
 function readLevers(preResolved) {
   let account = preResolved;
   if (account === void 0) {
@@ -8206,11 +8259,20 @@ function readLevers(preResolved) {
   const mode = account.config.adminPermissionMode;
   return {
     leverModel: typeof model === "string" && MODEL_ID_PATTERN.test(model) ? model : null,
-    leverEffort: typeof effort === "string" && EFFORT_LEVELS.has(effort) ? effort : null,
-    leverMode: typeof mode === "string" && PERMISSION_MODE_VALUES.has(mode) ? mode : null
+    leverEffort: typeof effort === "string" && isEffortLevel(effort) ? effort : null,
+    leverMode: typeof mode === "string" && isPermissionMode(mode) ? mode : null
   };
 }
-function latestAdminWebchatSessionId() {
+function resolvePrimaryAdminUserId() {
+  try {
+    const users = readUsersFile(USERS_FILE);
+    return users && users.length > 0 ? users[0].userId : null;
+  } catch {
+    return null;
+  }
+}
+function latestAdminWebchatSessionId(requesterUserId, primaryUserId) {
+  if (requesterUserId === null) return null;
   const cfg = claudeConfigDir();
   if (!cfg) return null;
   let best = null;
@@ -8225,6 +8287,13 @@ function latestAdminWebchatSessionId() {
     } catch {
       continue;
     }
+    const owned = meta.adminUserId === requesterUserId || meta.adminUserId === null && requesterUserId === primaryUserId;
+    if (!owned) {
+      if (best === null || mtimeMs > best.mtimeMs) {
+        console.error(`[webchat:inbound] op=owner-skip candidate=${id.slice(0, 8)} owner=${meta.adminUserId ? meta.adminUserId.slice(0, 8) : "none"} requester=${requesterUserId.slice(0, 8)}`);
+      }
+      continue;
+    }
     if (best === null || mtimeMs > best.mtimeMs) best = { id, mtimeMs };
   }
   return best === null ? null : best.id;
@@ -8234,14 +8303,17 @@ function overrideKnownNonArchived(id) {
   if (projectDir === null) return sessionSidecarExists(id);
   return basename4(projectDir) !== "archive";
 }
-function resolveCanonical(accountId, accountDir) {
-  const latest = latestAdminWebchatSessionId();
+function resolveCanonical(accountId, accountDir, requesterUserId, primaryUserId) {
+  if (requesterUserId === null) {
+    return { sessionId: adminSessionIdFor(accountId, WEBCHAT_ADMIN_KEY), source: "canonical-empty" };
+  }
+  const latest = latestAdminWebchatSessionId(requesterUserId, primaryUserId);
   if (latest !== null) return { sessionId: latest, source: "latest" };
   if (accountDir) {
-    const override = readCanonicalOverrideId(accountDir);
+    const override = readCanonicalOverrideId(accountDir, requesterUserId, primaryUserId);
     if (override && overrideKnownNonArchived(override)) return { sessionId: override, source: "override" };
   }
-  return { sessionId: adminSessionIdFor(accountId, WEBCHAT_ADMIN_KEY), source: "canonical-empty" };
+  return { sessionId: adminSessionIdFor(accountId, WEBCHAT_ADMIN_KEY, requesterUserId), source: "canonical-empty" };
 }
 var REAPPLY_TIMEOUT_MS = 1500;
 async function reapplyLeversViaManager() {
@@ -8274,6 +8346,9 @@ function createWebchatRoutes(deps) {
       console.error(`[webchat:inbound] op=send-refused reason=account-unresolved detail=${detail}`);
       return c.json({ error: "account unresolved" }, 503);
     }
+    const cacheKey = c.get("cacheKey");
+    const requesterUserId = (cacheKey ? getUserIdForSession(cacheKey) : void 0) ?? null;
+    const primaryUserId = resolvePrimaryAdminUserId();
     let text;
     let target;
     let files = [];
@@ -8314,10 +8389,18 @@ function createWebchatRoutes(deps) {
     }
     let deliveryKey = WEBCHAT_ADMIN_KEY;
     let deliverySessionId;
+    const explicitTarget = target !== void 0;
     if (target === void 0) {
-      const latest = latestAdminWebchatSessionId();
+      const latest = latestAdminWebchatSessionId(requesterUserId, primaryUserId);
       if (latest !== null) target = latest;
     }
+    if (explicitTarget && target !== void 0) {
+      const t = readTargetOwner(target);
+      if (t.found && !ownedByRequester(t.owner, requesterUserId, primaryUserId)) {
+        console.error(`[webchat:inbound] op=send-refused key=session:${target.slice(0, 8)} reason=foreign-target requester=${requesterUserId ? requesterUserId.slice(0, 8) : "none"}`);
+        return c.json({ error: "session not found" }, 404);
+      }
+    }
     if (target !== void 0) {
       let { projectDir, channel } = locateSession(target);
       if (projectDir === null) {
@@ -8393,10 +8476,11 @@ ${note}` : note;
       }
       console.log(`[webchat:inbound] op=send-accepted kind=${kind} files=${stored.length} bytes=${Buffer.byteLength(text, "utf8")}`);
     }
+    const adminUserId = requesterUserId ?? void 0;
     if (deliverySessionId !== void 0) {
-      await deps.handleInbound({ role: "admin", accountId, key: deliveryKey, text, sessionId: deliverySessionId });
+      await deps.handleInbound({ role: "admin", accountId, key: deliveryKey, text, sessionId: deliverySessionId, adminUserId });
     } else {
-      await deps.handleInbound({ role: "admin", accountId, key: deliveryKey, text });
+      await deps.handleInbound({ role: "admin", accountId, key: deliveryKey, text, adminUserId });
     }
     const sendId = ++sendSeq;
     let turnSessionId = deliverySessionId;
@@ -8407,7 +8491,7 @@ ${note}` : note;
       } catch {
         canonAccount = null;
       }
-      turnSessionId = resolveCanonical(accountId, canonAccount?.accountDir ?? null).sessionId;
+      turnSessionId = resolveCanonical(accountId, canonAccount?.accountDir ?? null, requesterUserId, primaryUserId).sessionId;
     }
     const keyDisplay2 = deliveryKey.startsWith("session:") ? deliveryKey.slice(0, "session:".length + 8) : WEBCHAT_ADMIN_KEY;
     const baseline = jsonlSizeBytes(locateSession(turnSessionId).projectDir, turnSessionId);
@@ -8432,7 +8516,7 @@ ${note}` : note;
       console.error(`[webchat:settings] op=${String(op)} outcome=refused reason=unknown-op`);
       return c.json({ error: "op must be model, effort, or mode" }, 400);
     }
-    if (typeof value !== "string" || op === "model" && !MODEL_ID_PATTERN.test(value) || op === "effort" && !EFFORT_LEVELS.has(value) || op === "mode" && !PERMISSION_MODE_VALUES.has(value)) {
+    if (typeof value !== "string" || op === "model" && !MODEL_ID_PATTERN.test(value) || op === "effort" && !isEffortLevel(value) || op === "mode" && !isPermissionMode(value)) {
       console.error(`[webchat:settings] op=${op} outcome=refused value=${JSON.stringify(value)} reason=invalid-value`);
       return c.json({ error: `invalid ${op} value` }, 400);
     }
@@ -8473,11 +8557,19 @@ ${note}` : note;
       console.error(`[webchat:inbound] op=session-refused reason=account-unresolved detail=${detail}`);
       return c.json({ error: "account unresolved" }, 503);
     }
+    const cacheKey = c.get("cacheKey");
+    const requesterUserId = (cacheKey ? getUserIdForSession(cacheKey) : void 0) ?? null;
+    const primaryUserId = resolvePrimaryAdminUserId();
     const target = c.req.query("session");
     if (target !== void 0) {
       if (!UUID_PATTERN.test(target)) {
         return c.json({ error: "invalid session id" }, 400);
       }
+      const owned = readTargetOwner(target);
+      if (owned.found && !ownedByRequester(owned.owner, requesterUserId, primaryUserId)) {
+        console.error(`[webchat:inbound] op=session-target-foreign key=session:${target.slice(0, 8)} requester=${requesterUserId ? requesterUserId.slice(0, 8) : "none"}`);
+        return c.json({ error: "session not found" }, 404);
+      }
       const { projectDir: projectDir2, channel } = locateSession(target);
       let resolvedProjectDir = projectDir2;
       let transcriptSessionId = target;
@@ -8498,7 +8590,7 @@ ${note}` : note;
       }
       const known = resolvedProjectDir !== null || sessionSidecarExists(target);
       const indicators2 = await fetchComposerIndicators(target);
-      return c.json({ sessionId: target, projectDir: resolvedProjectDir, transcriptSessionId, channelBinding: conflictingBinding(channel), known, sizeBytes: jsonlSizeBytes(projectDir2, target), ...indicators2, ...readLevers() });
+      return c.json({ sessionId: target, projectDir: resolvedProjectDir, transcriptSessionId, channelBinding: conflictingBinding(channel), known, sizeBytes: jsonlSizeBytes(projectDir2, target), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${target}`) ?? null, ...indicators2, ...readLevers() });
     }
     let account;
     try {
@@ -8506,11 +8598,14 @@ ${note}` : note;
     } catch {
       account = null;
     }
-    const { sessionId, source } = resolveCanonical(accountId, account?.accountDir ?? null);
-    if (source === "latest" && account?.accountDir) {
-      writeCanonicalOverrideId(account.accountDir, sessionId);
+    const { sessionId, source } = resolveCanonical(accountId, account?.accountDir ?? null, requesterUserId, primaryUserId);
+    if (requesterUserId === null) {
+      console.error(`[webchat:inbound] op=session-resolve-no-identity key=${sessionId.slice(0, 8)}`);
+    }
+    if (source === "latest" && account?.accountDir && requesterUserId !== null) {
+      writeCanonicalOverrideId(account.accountDir, requesterUserId, sessionId);
     }
-    console.log(`[webchat:inbound] op=session-resolve key=${sessionId.slice(0, 8)} source=${source}`);
+    console.log(`[webchat:inbound] op=session-resolve key=${sessionId.slice(0, 8)} source=${source} admin=${requesterUserId ? requesterUserId.slice(0, 8) : "none"}`);
     const cfg = claudeConfigDir();
     let projectDir = null;
     if (cfg) {
@@ -8521,8 +8616,31 @@ ${note}` : note;
         }
       }
     }
+    if (source === "latest" && requesterUserId !== null) {
+      const owner = readSidecarMeta(join15(projectDir ?? "", `${sessionId}.meta.json`)).adminUserId;
+      if (owner !== null && owner !== requesterUserId && requesterUserId !== primaryUserId) {
+        console.error(`[webchat:inbound] op=session-resolve-foreign key=${sessionId.slice(0, 8)} owner=${owner.slice(0, 8)} requester=${requesterUserId.slice(0, 8)}`);
+      }
+    }
     const indicators = await fetchComposerIndicators(sessionId);
-    return c.json({ sessionId, projectDir, sizeBytes: jsonlSizeBytes(projectDir, sessionId), ...indicators, ...readLevers(account) });
+    return c.json({ sessionId, projectDir, sizeBytes: jsonlSizeBytes(projectDir, sessionId), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${sessionId}`) ?? null, ...indicators, ...readLevers(account) });
+  });
+  app53.post("/permission-verdict", requireAdminSession, async (c) => {
+    const body = await c.req.json().catch(() => null);
+    const sessionId = body?.sessionId;
+    const requestId = body?.request_id;
+    const behavior = body?.behavior;
+    if (typeof sessionId !== "string" || !UUID_PATTERN.test(sessionId)) {
+      return c.json({ error: "invalid session id" }, 400);
+    }
+    if (typeof requestId !== "string" || requestId.length === 0) {
+      return c.json({ error: "request_id required" }, 400);
+    }
+    if (behavior !== "allow" && behavior !== "deny") {
+      return c.json({ error: "behavior must be allow or deny" }, 400);
+    }
+    const ok = deps.resolvePermissionVerdict?.(`session:${sessionId}`, requestId, behavior) ?? false;
+    return c.json({ ok });
   });
   return app53;
 }
@@ -8705,7 +8823,8 @@ async function managerSpawn(opts) {
       personId: opts.personId,
       visitorId: opts.visitorId,
       name: opts.name,
-      webchatChannel: opts.webchatChannel
+      webchatChannel: opts.webchatChannel,
+      previousContext: opts.previousContext
     })
   }).catch((err) => ({ __throw: err instanceof Error ? err.message : String(err) }));
   if ("__throw" in res) {
@@ -8732,6 +8851,7 @@ async function managerRcSpawn(opts) {
       sliceToken: opts.sliceToken,
       personId: opts.personId,
       userId: opts.userId,
+      adminUserId: opts.adminUserId,
       waChannel: opts.waChannel,
       webchatChannel: opts.webchatChannel,
       role: opts.role,
@@ -16086,29 +16206,6 @@ var session_rc_spawn_default = app32;
 
 // server/routes/admin/session-reseat.ts
 import { randomUUID as randomUUID12 } from "crypto";
-
-// ../lib/models/src/index.ts
-var OPUS_MODEL = "claude-opus-4-8[1m]";
-var SONNET_MODEL = "claude-sonnet-4-6";
-var HAIKU_MODEL = "claude-haiku-4-5";
-var MODEL_CONTEXT_WINDOW = {
-  [OPUS_MODEL]: 1e6,
-  [SONNET_MODEL]: 2e5,
-  [HAIKU_MODEL]: 2e5
-};
-var MODEL_DISPLAY_NAMES = {
-  [OPUS_MODEL]: "Opus 4.8 (1M context)",
-  [SONNET_MODEL]: "Sonnet 4.6",
-  [HAIKU_MODEL]: "Haiku 4.5"
-};
-var SELECTABLE_MODELS = [OPUS_MODEL, SONNET_MODEL, HAIKU_MODEL];
-function isSelectableModel(id) {
-  return SELECTABLE_MODELS.includes(id);
-}
-
-// server/routes/admin/session-reseat.ts
-var RESEAT_PERMISSION_MODES = /* @__PURE__ */ new Set(["default", "acceptEdits", "plan", "auto", "bypassPermissions"]);
-var RESEAT_EFFORT_LEVELS = /* @__PURE__ */ new Set(["low", "medium", "high", "xhigh"]);
 function resolveReseatPlan(body, mintId = randomUUID12, adminUserId, authenticatedName) {
   const sessionId = mintId();
   const key = `session:${sessionId}`;
@@ -16141,8 +16238,8 @@ app33.post("/", requireAdminSession, async (c) => {
   const model = typeof body.model === "string" && isSelectableModel(body.model) ? body.model : null;
   if (fromSessionId === null) return c.json({ error: "fromSessionId must be a valid session id" }, 400);
   if (model === null) return c.json({ error: "model must be a selectable model" }, 400);
-  const permissionMode = typeof body.permissionMode === "string" ? RESEAT_PERMISSION_MODES.has(body.permissionMode) ? body.permissionMode : null : void 0;
-  const effort = typeof body.effort === "string" ? RESEAT_EFFORT_LEVELS.has(body.effort) ? body.effort : null : void 0;
+  const permissionMode = typeof body.permissionMode === "string" ? isPermissionMode(body.permissionMode) ? body.permissionMode : null : void 0;
+  const effort = typeof body.effort === "string" ? isEffortLevel(body.effort) ? body.effort : null : void 0;
   if (permissionMode === null) return c.json({ error: "permissionMode must be a composer-writable mode" }, 400);
   if (effort === null) return c.json({ error: "effort must be an accepted level" }, 400);
   if (reseatsInFlight.has(fromSessionId)) {
@@ -16152,6 +16249,13 @@ app33.post("/", requireAdminSession, async (c) => {
   try {
     const cacheKey = c.get("cacheKey");
     const adminUserId = cacheKey ? getUserIdForSession(cacheKey) : void 0;
+    {
+      const ownerInfo = readTargetOwner(fromSessionId);
+      if (!(ownerInfo.found && ownedByRequester(ownerInfo.owner, adminUserId ?? null, resolvePrimaryAdminUserId()))) {
+        console.error(`[chat-reseat] op=reseat-refused from=${fromSessionId.slice(0, 8)} reason=foreign-source requester=${adminUserId ? adminUserId.slice(0, 8) : "none"}`);
+        return c.json({ error: "session not found" }, 404);
+      }
+    }
     const accountId = cacheKey ? getAccountIdForSession(cacheKey) : void 0;
     const authenticatedName = accountId ? await resolveAuthenticatedName(accountId, adminUserId) : void 0;
     const plan = resolveReseatPlan(
@@ -16188,12 +16292,13 @@ app33.post("/", requireAdminSession, async (c) => {
     }
     try {
       const account = resolveAccount();
-      if (account) {
+      if (account && adminUserId) {
         const accountId2 = resolvePlatformAccountId();
-        const canonicalId = adminSessionIdFor(accountId2, WEBCHAT_ADMIN_KEY);
-        const currentOverride = readCanonicalOverrideId(account.accountDir);
+        const primaryUserId = resolvePrimaryAdminUserId();
+        const canonicalId = adminSessionIdFor(accountId2, WEBCHAT_ADMIN_KEY, adminUserId);
+        const currentOverride = readCanonicalOverrideId(account.accountDir, adminUserId, primaryUserId);
         if (fromSessionId === canonicalId || fromSessionId === currentOverride) {
-          writeCanonicalOverrideId(account.accountDir, plan.sessionId);
+          writeCanonicalOverrideId(account.accountDir, adminUserId, plan.sessionId);
           console.log(`[chat-reseat] op=canonical-forward reseatReqId=${reseatReqId} from=${fromSessionId} to=${plan.sessionId}`);
         }
       }
@@ -16652,9 +16757,8 @@ app37.get("/", async (c) => {
 });
 var post_turn_context_default = app37;
 
-// server/routes/admin/public-session-context.ts
+// app/lib/slice-writes.ts
 import neo4j4 from "neo4j-driver";
-var TAG32 = "[public-session-context]";
 var STRIPPED_PROPERTIES3 = /* @__PURE__ */ new Set([
   "embedding",
   "passwordHash",
@@ -16662,9 +16766,6 @@ var STRIPPED_PROPERTIES3 = /* @__PURE__ */ new Set([
   "otpCode",
   "cacheKey"
 ]);
-function isLoopbackAddr3(addr) {
-  return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
-}
 function convertValue2(value) {
   if (neo4j4.isDateTime(value) || neo4j4.isDate(value) || neo4j4.isLocalDateTime(value) || neo4j4.isLocalTime(value) || neo4j4.isTime(value) || neo4j4.isDuration(value)) {
     return value.toString();
@@ -16692,6 +16793,78 @@ function pruneProperties2(raw) {
   }
   return out;
 }
+async function fetchSliceWrites(session, sliceToken, accountId) {
+  const cypher = `
+    MATCH (n)
+    WHERE n.sliceToken = $sliceToken AND n.accountId = $accountId
+    RETURN elementId(n) AS elementId,
+           labels(n) AS labels,
+           properties(n) AS properties,
+           coalesce(n.createdAt, n.observedAt, '') AS sortKey
+  `;
+  const res = await session.executeRead((tx) => tx.run(cypher, { sliceToken, accountId }));
+  const writes = res.records.map((r) => ({
+    elementId: r.get("elementId"),
+    labels: r.get("labels"),
+    properties: pruneProperties2(r.get("properties")),
+    sortKey: String(r.get("sortKey") ?? "")
+  }));
+  writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
+  return writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }));
+}
+var STRUCTURAL_KEYS = /* @__PURE__ */ new Set([
+  "accountId",
+  "scope",
+  "sliceToken",
+  "preferenceId",
+  "ideaId",
+  "createdAt",
+  "updatedAt",
+  "observedAt",
+  "sessionId",
+  "createdByAgent",
+  "createdBySession",
+  "confidence",
+  "notApplicable"
+]);
+function primaryLabel(labels) {
+  return labels.find((l) => l.length > 0) ?? "Node";
+}
+function renderWrite(write) {
+  const label = primaryLabel(write.labels);
+  const props = write.properties;
+  const parts = [];
+  if (label === "Person") {
+    const name = [props.givenName, props.familyName].filter((v) => typeof v === "string" && v.length > 0).join(" ");
+    if (name) parts.push(name);
+  }
+  const kv = [];
+  for (const [k, v] of Object.entries(props)) {
+    if (STRUCTURAL_KEYS.has(k)) continue;
+    if (label === "Person" && (k === "givenName" || k === "familyName")) continue;
+    if (v === null || v === void 0 || v === "") continue;
+    const val = String(v).slice(0, 200);
+    kv.push(`${k}=${val}`);
+  }
+  const tail = [parts.join(" "), kv.join("; ")].filter((s) => s.length > 0).join(" \u2014 ");
+  if (tail.length === 0) return null;
+  return `- ${label}: ${tail}`;
+}
+function formatPreviousContext(writes) {
+  if (writes.length === 0) return null;
+  const lines = writes.filter((w) => w.properties.scope === "user").map(renderWrite).filter((l) => l !== null);
+  if (lines.length === 0) return null;
+  return [
+    "What you already know about this visitor from earlier conversations:",
+    ...lines
+  ].join("\n");
+}
+
+// server/routes/admin/public-session-context.ts
+var TAG32 = "[public-session-context]";
+function isLoopbackAddr3(addr) {
+  return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
+}
 var app38 = new Hono();
 app38.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
@@ -16716,31 +16889,12 @@ app38.get("/", async (c) => {
   const session = getSession();
   const started = Date.now();
   try {
-    const cypher = `
-      MATCH (n)
-      WHERE n.sliceToken = $sliceToken AND n.accountId = $accountId
-      RETURN elementId(n) AS elementId,
-             labels(n) AS labels,
-             properties(n) AS properties,
-             coalesce(n.createdAt, n.observedAt, '') AS sortKey
-    `;
-    const res = await session.executeRead(
-      (tx) => tx.run(cypher, { sliceToken, accountId })
-    );
-    const writes = res.records.map((r) => ({
-      elementId: r.get("elementId"),
-      labels: r.get("labels"),
-      properties: pruneProperties2(r.get("properties")),
-      sortKey: String(r.get("sortKey") ?? "")
-    }));
-    writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
+    const writes = await fetchSliceWrites(session, sliceToken, accountId);
     const total = Date.now() - started;
     console.log(
       `${TAG32} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
     );
-    return c.json({
-      writes: writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }))
-    });
+    return c.json({ writes });
   } catch (err) {
     const elapsed = Date.now() - started;
     const message = err instanceof Error ? err.message : String(err);
@@ -17979,19 +18133,8 @@ app51.post("/", async (c) => {
   const account = resolveAccount();
   const cookieHeader = c.req.header("cookie");
   const visitorId = parseVisitorCookie2(cookieHeader);
-  const groupSlug = body.group_slug && typeof body.group_slug === "string" ? body.group_slug : null;
-  let groupInfo = null;
-  if (groupSlug) {
-    groupInfo = await findGroupBySlug(groupSlug, accountId).catch(() => null);
-    if (!groupInfo) {
-      console.error(`[session] group not found: slug=${groupSlug} account=${accountId.slice(0, 8)}\u2026`);
-      return c.json({ error: "Group not found" }, 404);
-    }
-  }
   let agentSlug = null;
-  if (groupInfo) {
-    agentSlug = groupInfo.agentSlug;
-  } else if (body.agent) {
+  if (body.agent) {
     if (!validateAgentSlug(body.agent)) {
       return c.json({ error: "Invalid agent name" }, 400);
     }
@@ -18024,11 +18167,6 @@ app51.post("/", async (c) => {
     ...agentConfig.imageShape ? { agentImageShape: agentConfig.imageShape } : {},
     ...agentConfig.showAgentName ? { showAgentName: agentConfig.showAgentName } : {}
   } : {};
-  const groupFields = groupInfo ? {
-    group: true,
-    groupName: groupInfo.groupName,
-    groupSlug
-  } : {};
   const branding = await fetchBranding(accountId).catch(() => null);
   if (branding) writeBrandingCache(accountId, agentSlug, branding);
   let accessSession = null;
@@ -18041,7 +18179,6 @@ app51.post("/", async (c) => {
         Response.json({
           auth_required: true,
           agent_id: agentSlug,
-          ...groupFields,
           ...branding ? { branding } : {},
           ...agentIdentity
         }),
@@ -18066,7 +18203,6 @@ app51.post("/", async (c) => {
           agent_id: agentSlug,
           resumed,
           ...resumed ? { messages: uiMessages } : {},
-          ...groupFields,
           ...branding ? { branding } : {},
           ...agentIdentity
         });
@@ -18077,56 +18213,10 @@ app51.post("/", async (c) => {
       session_key: body.session_key,
       agent_id: agentSlug,
       resumed: false,
-      ...groupFields,
       ...branding ? { branding } : {},
       ...agentIdentity
     });
   }
-  if (groupInfo && visitorId) {
-    let memberName = await checkGroupMembership(groupInfo.sessionId, visitorId).catch(() => null);
-    if (!memberName && accessSession) {
-      const contactValue = accessSession.contactValue;
-      const isEmail = contactValue?.includes("@");
-      const bindResult = await bindVisitorToGroup(
-        groupInfo.sessionId,
-        visitorId,
-        isEmail ? contactValue : void 0,
-        !isEmail ? contactValue : void 0
-      ).catch(() => null);
-      memberName = bindResult?.displayName ?? null;
-    }
-    if (memberName) {
-      const neo4jMessages = await getRecentMessages(groupInfo.sessionId).catch(() => []);
-      const uiMessages = neo4jMessages.filter((m) => m.content !== GREETING_DIRECTIVE).map((m) => ({
-        role: m.role === "user" ? "visitor" : "maxy",
-        content: m.content,
-        timestamp: new Date(m.createdAt).getTime() || Date.now()
-      }));
-      const participants = await getGroupParticipants(groupInfo.sessionId).catch(() => []);
-      const cacheKey2 = crypto.randomUUID();
-      const resumed = uiMessages.length > 0;
-      console.log(`[session] cold-resume group=${groupSlug} visitor=${visitorId.slice(0, 8)}\u2026 messages=${uiMessages.length}`);
-      return withVisitorCookie(
-        Response.json({
-          session_key: cacheKey2,
-          agent_id: agentSlug,
-          resumed,
-          ...resumed ? { messages: uiMessages } : {},
-          ...groupFields,
-          participants: participants.map((p) => ({ displayName: p.displayName, joinedAt: p.joinedAt })),
-          ...branding ? { branding } : {},
-          ...agentIdentity
-        }),
-        visitorId
-      );
-    }
-    console.log(`[session] group cold-resume denied: visitor=${visitorId.slice(0, 8)}\u2026 not a member of group=${groupSlug}`);
-    return c.json({ error: "Not a member of this group" }, 403);
-  }
-  if (groupInfo) {
-    console.error(`[session] group=${groupSlug} requires visitor cookie`);
-    return c.json({ error: "Groups require member authentication" }, 400);
-  }
   if (visitorId) {
     const recent = await findRecentConversation(visitorId, accountId, agentSlug).catch(() => null);
     if (recent) {
@@ -18528,7 +18618,7 @@ var defaultResolveName = async (accountId, userId) => {
   const res = await loadAdminUserName(accountId, userId);
   return res.source === "neo4j" && res.joined.length > 0 ? res.joined : null;
 };
-async function readRaw(path2) {
+async function readRaw2(path2) {
   let raw;
   try {
     raw = await readFile7(path2, "utf8");
@@ -18636,7 +18726,7 @@ async function migrateAdminWebchatSidecars(opts = {}) {
   };
   const sidecars = await collectLiveSidecars(projectsRoot);
   for (const path2 of sidecars) {
-    const raw = await readRaw(path2);
+    const raw = await readRaw2(path2);
     if (!raw) continue;
     if (raw.role !== ADMIN_ROLE2 || raw.channel !== WEBCHAT_CHANNEL2) continue;
     result.scanned++;
@@ -18654,7 +18744,7 @@ async function migrateAdminWebchatSidecars(opts = {}) {
     await writeRaw(path2, raw);
     result.backfilled++;
     await resolveAdminName();
-    const back = await readRaw(path2);
+    const back = await readRaw2(path2);
     const wrote = back && back.adminUserId === soleAdminUserId;
     if (wrote && resolvedNameForAdmin) {
       result.resolvedName++;
@@ -19358,6 +19448,20 @@ function createWebchatChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
+  app53.post("/webchat-channel/permission-request", async (c) => {
+    const body = await c.req.json().catch(() => null);
+    const key = body?.key;
+    const requestId = body?.request_id;
+    const toolName = body?.tool_name;
+    const description = body?.description;
+    const inputPreview = body?.input_preview;
+    if (typeof key !== "string" || typeof requestId !== "string" || typeof toolName !== "string" || typeof description !== "string" || typeof inputPreview !== "string") {
+      return c.json({ error: "key, request_id, tool_name, description, input_preview required" }, 400);
+    }
+    if (!deps.awaitPermissionVerdict) return c.json({ timeout: true });
+    const verdict = await deps.awaitPermissionVerdict({ key, requestId, toolName, description, inputPreview });
+    return c.json(verdict);
+  });
   app53.post("/webchat-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
@@ -19378,10 +19482,13 @@ var SWEEP_INTERVAL_MS2 = 15e3;
 function channelIdleMs() {
   return Number(process.env.CHANNEL_PTY_IDLE_MS ?? String(5 * 6e4));
 }
+function permissionVerdictTtlMs() {
+  return Number(process.env.WEBCHAT_PERMISSION_TTL_MS ?? String(5 * 6e4));
+}
 function keyDisplay(key) {
   return key.startsWith("session:") ? key.slice(0, "session:".length + 8) : key.slice(0, 8);
 }
-var WebchatGateway = class {
+var WebchatGateway = class _WebchatGateway {
   constructor(deps) {
     this.deps = deps;
   }
@@ -19394,6 +19501,12 @@ var WebchatGateway = class {
    *  /webchat-channel/reply resolves it. Admin webchat registers none (its
    *  browser reader tails the JSONL), so handleReply is a no-op there. */
   replyAwaiters = /* @__PURE__ */ new Map();
+  /** Task 940 — open permission prompts awaiting an operator verdict, keyed
+   *  `${key}::${requestId}`. The channel server registers one via a held-open
+   *  POST (awaitPermissionVerdict); the /chat Allow/Deny button resolves it
+   *  (resolvePermissionVerdict); the session pointer surfaces the oldest open
+   *  one for that key (pendingPromptFor). */
+  pendingPrompts = /* @__PURE__ */ new Map();
   /** Task 756 — live public sessions, for the idle reaper + session-end review.
    *  Admin sessions are never recorded here (they never reap). */
   publicSessions = /* @__PURE__ */ new Map();
@@ -19416,6 +19529,54 @@ var WebchatGateway = class {
       });
     });
   }
+  /** Task 940 — register an open permission prompt and hold for the operator's
+   *  verdict. Resolves with `{behavior}` when resolvePermissionVerdict fires for
+   *  this key+id, or `{timeout:true}` after `timeoutMs` (the channel server's
+   *  held-open POST returns either; on timeout it emits no verdict and the local
+   *  terminal dialog stays answerable). */
+  awaitPermissionVerdict(p, timeoutMs) {
+    const k = _WebchatGateway.promptKey(p.key, p.requestId);
+    return new Promise((resolve34) => {
+      this.pendingPrompts.get(k)?.resolve({ timeout: true });
+      const timer2 = setTimeout(() => {
+        this.pendingPrompts.delete(k);
+        resolve34({ timeout: true });
+      }, timeoutMs);
+      if (timer2.unref) timer2.unref();
+      this.pendingPrompts.set(k, {
+        ...p,
+        at: Date.now(),
+        resolve: (r) => {
+          clearTimeout(timer2);
+          this.pendingPrompts.delete(k);
+          resolve34(r);
+        }
+      });
+      console.error(`[webchat:perm] op=open key=${keyDisplay(p.key)} id=${p.requestId} tool=${p.toolName}`);
+    });
+  }
+  /** Task 940 — the operator's Allow/Deny answer for an open prompt. Returns
+   *  false (and is a no-op) when no prompt with this key+id is open — a late or
+   *  duplicate click. */
+  resolvePermissionVerdict(key, requestId, behavior) {
+    const entry = this.pendingPrompts.get(_WebchatGateway.promptKey(key, requestId));
+    if (!entry) return false;
+    entry.resolve({ behavior });
+    console.error(`[webchat:perm] op=verdict key=${keyDisplay(key)} id=${requestId} behavior=${behavior}`);
+    return true;
+  }
+  /** Task 940 — the oldest open prompt for `key`, for the session pointer's
+   *  Allow/Deny card. null when none is open. */
+  pendingPromptFor(key) {
+    let oldest = null;
+    for (const p of this.pendingPrompts.values()) {
+      if (p.key === key && (!oldest || p.at < oldest.at)) oldest = p;
+    }
+    return oldest ? { requestId: oldest.requestId, toolName: oldest.toolName, description: oldest.description, inputPreview: oldest.inputPreview } : null;
+  }
+  static promptKey(key, requestId) {
+    return `${key}::${requestId}`;
+  }
   /** Stamp the op=reply lifeline and resolve any held-open awaiter for `key`.
    *  Called by the /reply route's onReply. The first reply after registration
    *  wins; a later reply for the same key finds no awaiter and only logs. */
@@ -19478,7 +19639,8 @@ var WebchatGateway = class {
           `[webchat:inbound] op=channel-received key=${key} messageId=${messageId}${found ? "" : " note=unknown"}`
         );
       },
-      onReply: (key, text) => this.handleReply(key, text)
+      onReply: (key, text) => this.handleReply(key, text),
+      awaitPermissionVerdict: (p) => this.awaitPermissionVerdict(p, permissionVerdictTtlMs())
     });
   }
   /** Run one reconciliation pass: log every terminal delivery event the sweep
@@ -19526,6 +19688,9 @@ var WebchatGateway = class {
           // Task 800 — only present on a session-targeted launch, so the
           // default-path call shape stays byte-identical.
           ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
+          // The authenticated admin's userId on an admin bootstrap inbound; the
+          // default-path call shape stays byte-identical when absent.
+          ...input.adminUserId !== void 0 ? { adminUserId: input.adminUserId } : {},
           // Task 756 — public spawn params on a role:'public' inbound.
           ...input.public !== void 0 ? { public: input.public } : {}
         });
@@ -19560,6 +19725,7 @@ function buildPublicWebchatSpawnRequest(input) {
     ...sliceToken ? { sliceToken } : {},
     ...personId ? { personId } : {},
     ...visitorId ? { visitorId } : {},
+    ...input.previousContext ? { previousContext: input.previousContext } : {},
     name,
     webchatChannel: { key: input.key, gatewayUrl: input.gatewayUrl, serverPath: input.serverPath }
   };
@@ -20032,14 +20198,27 @@ waGateway.startSweeper();
 var webchatGateway = new WebchatGateway({
   gatewayUrl: webchatGatewayUrl(),
   serverPath: webchatServerPath(),
-  ensureChannelSession: async ({ accountId, key, role, gatewayUrl, serverPath, sessionId, public: pub }) => {
+  ensureChannelSession: async ({ accountId, key, role, adminUserId, gatewayUrl, serverPath, sessionId, public: pub }) => {
     if (role === "public") {
       if (!pub) {
         console.error(`[webchat:inbound] op=spawn-refused key=${key} role=public reason=missing-public-params`);
         return;
       }
+      let previousContext;
+      if (pub.sliceToken) {
+        const session = getSession();
+        try {
+          const writes = await fetchSliceWrites(session, pub.sliceToken, accountId);
+          previousContext = formatPreviousContext(writes) ?? void 0;
+          console.log(`[webchat:inbound] op=slice-readback key=${key} writes=${writes.length} injected=${previousContext ? "yes" : "no"}`);
+        } catch (err) {
+          console.error(`[webchat:inbound] op=slice-readback-failed key=${key} err=${err instanceof Error ? err.message : String(err)}`);
+        } finally {
+          await session.close();
+        }
+      }
       const result2 = await managerSpawn(
-        buildPublicWebchatSpawnRequest({ accountId, key, gatewayUrl, serverPath, public: pub })
+        buildPublicWebchatSpawnRequest({ accountId, key, gatewayUrl, serverPath, previousContext, public: pub })
       );
       if ("error" in result2) {
         console.error(`[webchat:inbound] op=spawn-failed key=${key} role=public error=${result2.error} status=${result2.status}`);
@@ -20048,10 +20227,11 @@ var webchatGateway = new WebchatGateway({
       return { sessionId: result2.sessionId };
     }
     const result = await managerRcSpawn({
-      sessionId: sessionId ?? adminSessionIdFor(accountId, key),
+      sessionId: sessionId ?? adminSessionIdFor(accountId, key, adminUserId),
       role: "admin",
       channel: "webchat",
       senderId: key,
+      adminUserId,
       webchatChannel: { key, gatewayUrl, serverPath },
       logContext: `channel=webchat key=${key} role=${role}`
     });
@@ -20385,7 +20565,12 @@ app52.route("/api/chat", chatRoutes);
 app52.route("/api/whatsapp", whatsapp_default);
 app52.route("/api/whatsapp-reader", whatsapp_reader_default);
 app52.route("/api/public-reader", public_reader_default);
-app52.route("/api/webchat", createWebchatRoutes({ handleInbound: (input) => webchatGateway.handleInbound(input) }));
+app52.route("/api/webchat", createWebchatRoutes({
+  handleInbound: (input) => webchatGateway.handleInbound(input),
+  // Task 940 — the permission relay's pointer read + verdict write.
+  pendingPromptFor: (key) => webchatGateway.pendingPromptFor(key),
+  resolvePermissionVerdict: (key, requestId, behavior) => webchatGateway.resolvePermissionVerdict(key, requestId, behavior)
+}));
 app52.route("/api/webchat/greeting", webchat_greeting_default);
 app52.route("/api/telegram", telegram_default);
 app52.route("/api/quickbooks", quickbooks_default);
@@ -20565,7 +20750,6 @@ ${clientErrorReporterScript}
   }
   return html;
 }
-var brandedHtmlCache = /* @__PURE__ */ new Map();
 function loadBrandingCache(agentSlug) {
   const configDir2 = join28(homedir3(), BRAND.configDir);
   try {
@@ -20583,36 +20767,6 @@ function resolveDefaultSlug() {
   if (!account) return null;
   return resolveDefaultAgentSlug(account.accountDir);
 }
-function wantsNextSurface(c) {
-  return c.req.query("surface") === "next";
-}
-function brandedPublicHtml(agentSlug) {
-  const baseHtml = cachedHtml("public.html");
-  if (!agentSlug) return baseHtml;
-  const cached3 = brandedHtmlCache.get(agentSlug);
-  const branding = loadBrandingCache(agentSlug);
-  if (!branding) return baseHtml;
-  const brandHash = JSON.stringify(branding).length;
-  if (cached3 && cached3.mtime === brandHash) return cached3.html;
-  const title = escapeHtml(branding.name);
-  const description = branding.tagline ? escapeHtml(branding.tagline) : "";
-  const themeColor = branding.primaryColor || "";
-  const ogImage = branding.logoUrl || "";
-  const favicon = branding.faviconUrl || "";
-  const metaTags = [
-    `  <title>${title}</title>`,
-    favicon ? `  <link rel="icon" href="${escapeHtml(favicon)}">` : `  <link rel="icon" href="${escapeHtml(brandFaviconPath)}">`,
-    themeColor ? `  <meta name="theme-color" content="${escapeHtml(themeColor)}">` : "",
-    `  <meta property="og:title" content="${title}">`,
-    description ? `  <meta property="og:description" content="${description}">` : "",
-    ogImage ? `  <meta property="og:image" content="${escapeHtml(ogImage)}">` : "",
-    '  <meta property="og:type" content="website">'
-  ].filter(Boolean).join("\n");
-  const html = baseHtml.replace(`  <title>${escapeHtml(BRAND.productName)}</title>
-  <link rel="icon" href="${escapeHtml(brandFaviconPath)}">`, metaTags);
-  brandedHtmlCache.set(agentSlug, { html, mtime: brandHash });
-  return html;
-}
 function escapeHtml(s) {
   return s.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
@@ -20636,8 +20790,7 @@ app52.get("/", (c) => {
       );
     }
     console.error(`[public-root] op=serve-default slug=${defaultSlug}`);
-    if (wantsNextSurface(c)) return c.html(cachedHtml("public-next.html"));
-    return c.html(brandedPublicHtml(defaultSlug));
+    return c.html(cachedHtml("public.html"));
   }
   console.log(`[host-class] host=${host} class=admin served=index.html`);
   return c.html(cachedHtml("index.html"));
@@ -20645,13 +20798,11 @@ app52.get("/", (c) => {
 app52.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
-  if (wantsNextSurface(c)) return c.html(cachedHtml("public-next.html"));
   return c.html(cachedHtml("public.html"));
 });
 app52.get("/public-chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
-  if (wantsNextSurface(c)) return c.html(cachedHtml("public-next.html"));
   return c.html(cachedHtml("public.html"));
 });
 async function logViewerFetch(c, next) {
@@ -20705,7 +20856,7 @@ app52.post("/api/vnc/client-event", async (c) => {
   return c.json({ ok: true });
 });
 app52.get("/g/:slug", (c) => {
-  return c.html(brandedPublicHtml());
+  return c.html(cachedHtml("public.html"));
 });
 for (const pwa of PWA_SURFACES) {
   app52.get(pwa.manifestPath, (c) => {
@@ -20761,8 +20912,7 @@ app52.get("/:slug", async (c, next) => {
     }
     const branding = loadBrandingCache(slug);
     console.error(`[public-catchall] served path=/${slug} slug=${slug} branding=${branding ? "hit" : "miss"}`);
-    if (wantsNextSurface(c)) return c.html(cachedHtml("public-next.html"));
-    return c.html(brandedPublicHtml(slug));
+    return c.html(cachedHtml("public.html"));
   }
   await next();
 });