@rubytech/create-maxy-code 0.1.34 → 0.1.36

package/payload/server/server.js

@@ -595,8 +595,8 @@ var serveStatic = (options = { root: "" }) => {
 };
 
 // server/index.ts
-import { readFileSync as readFileSync19, existsSync as existsSync22, watchFile } from "fs";
-import { resolve as resolve22, join as join12, basename as basename5 } from "path";
+import { readFileSync as readFileSync20, existsSync as existsSync22, watchFile } from "fs";
+import { resolve as resolve23, join as join12, basename as basename5 } from "path";
 import { homedir as homedir4 } from "os";
 
 // app/lib/agent-slug-pattern.ts
@@ -1416,7 +1416,7 @@ var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
   console.error(`${TAG3} draining credential save queue\u2026`);
   const timer2 = new Promise(
-    (resolve23) => setTimeout(() => resolve23("timeout"), timeoutMs)
+    (resolve24) => setTimeout(() => resolve24("timeout"), timeoutMs)
   );
   const result = await Promise.race([
     credsSaveQueue.then(() => "drained"),
@@ -1544,11 +1544,11 @@ async function createWaSocket(opts) {
   return sock;
 }
 async function waitForConnection(sock) {
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve24, reject) => {
     const handler = (update) => {
       if (update.connection === "open") {
         sock.ev.off("connection.update", handler);
-        resolve23();
+        resolve24();
       }
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
@@ -1662,14 +1662,14 @@ ${inspected}`;
   return inspect2(err, INSPECT_OPTS2);
 }
 function withTimeout(label, promise, timeoutMs) {
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve24, reject) => {
     const timer2 = setTimeout(() => {
       reject(new Error(`${label} timed out after ${timeoutMs}ms`));
     }, timeoutMs);
     promise.then(
       (value) => {
         clearTimeout(timer2);
-        resolve23(value);
+        resolve24(value);
       },
       (err) => {
         clearTimeout(timer2);
@@ -2204,8 +2204,8 @@ async function persistWhatsAppMessage(input) {
   const { givenName, familyName } = splitName(input.pushName);
   const prev = sessionWriteLocks.get(input.cacheKey);
   let release;
-  const mine = new Promise((resolve23) => {
-    release = resolve23;
+  const mine = new Promise((resolve24) => {
+    release = resolve24;
   });
   const chained = (prev ?? Promise.resolve()).then(() => mine);
   sessionWriteLocks.set(input.cacheKey, chained);
@@ -3242,11 +3242,11 @@ async function connectWithReconnect(conn) {
       console.error(
         `${TAG13} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
-      await new Promise((resolve23) => {
-        const timer2 = setTimeout(resolve23, delay);
+      await new Promise((resolve24) => {
+        const timer2 = setTimeout(resolve24, delay);
         conn.abortController.signal.addEventListener("abort", () => {
           clearTimeout(timer2);
-          resolve23();
+          resolve24();
         }, { once: true });
       });
     }
@@ -3254,16 +3254,16 @@ async function connectWithReconnect(conn) {
   }
 }
 function waitForDisconnectEvent(conn) {
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     if (!conn.sock) {
-      resolve23();
+      resolve24();
       return;
     }
     const sock = conn.sock;
     const handler = (update) => {
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
-        resolve23();
+        resolve24();
       }
     };
     sock.ev.on("connection.update", handler);
@@ -3525,8 +3525,8 @@ async function handleInboundMessage(conn, msg) {
     const conversationKey = isGroup ? remoteJid : senderPhone;
     const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
     let resolvePending;
-    const sttPending = new Promise((resolve23) => {
-      resolvePending = resolve23;
+    const sttPending = new Promise((resolve24) => {
+      resolvePending = resolve24;
     });
     if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
     try {
@@ -3930,20 +3930,20 @@ function buildX11Env(chromiumWrapperPath, transport = "vnc") {
 
 // server/routes/health.ts
 function checkPort(port2, timeoutMs = 500) {
-  return new Promise((resolve23) => {
+  return new Promise((resolve24) => {
     const socket = createConnection2(port2, "127.0.0.1");
     socket.setTimeout(timeoutMs);
     socket.once("connect", () => {
       socket.destroy();
-      resolve23(true);
+      resolve24(true);
     });
     socket.once("error", () => {
       socket.destroy();
-      resolve23(false);
+      resolve24(false);
     });
     socket.once("timeout", () => {
       socket.destroy();
-      resolve23(false);
+      resolve24(false);
     });
   });
 }
@@ -5019,12 +5019,12 @@ async function dispatchOnce(input) {
   });
   if (!entry) return { error: "spawn-failed" };
   entry.lastInboundAt = Date.now();
-  let resolve23;
+  let resolve24;
   const turnPromise = new Promise((r) => {
-    resolve23 = r;
+    resolve24 = r;
   });
   const listener = (text) => {
-    resolve23(text);
+    resolve24(text);
   };
   entry.subscribers.add(listener);
   const writeOk = await writeInput(entry, input.text);
@@ -5387,8 +5387,8 @@ async function startLogin(opts) {
   resetActiveLogin(accountId);
   let resolveQr = null;
   let rejectQr = null;
-  const qrPromise = new Promise((resolve23, reject) => {
-    resolveQr = resolve23;
+  const qrPromise = new Promise((resolve24, reject) => {
+    resolveQr = resolve24;
     rejectQr = reject;
   });
   const qrTimer = setTimeout(
@@ -7957,6 +7957,23 @@ function computeDormantPlugins(accountId) {
 }
 
 // server/routes/admin/claude-sessions.ts
+import { readFileSync as readFileSync14 } from "fs";
+import { resolve as resolve12 } from "path";
+function resolveTunnelUrl() {
+  const platformRoot = process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? resolve12(process.cwd(), "..");
+  let brand;
+  try {
+    brand = JSON.parse(readFileSync14(resolve12(platformRoot, "config", "brand.json"), "utf-8"));
+  } catch {
+    return null;
+  }
+  const hostname2 = typeof brand.hostname === "string" && brand.hostname ? brand.hostname : null;
+  const configDir2 = typeof brand.configDir === "string" && brand.configDir ? brand.configDir : null;
+  if (!hostname2 || !configDir2) return null;
+  const state = readTunnelState(configDir2);
+  if (!state) return null;
+  return `https://${hostname2}.${state.domain}`;
+}
 var TAG18 = "[claude-session-manager:wrapper]";
 function managerBase2() {
   const port2 = Number(process.env.CLAUDE_SESSION_MANAGER_PORT ?? "19400");
@@ -7965,10 +7982,11 @@ function managerBase2() {
 var app15 = new Hono();
 app15.use("*", requireAdminSession);
 app15.post("/", async (c) => {
+  const routeStart = Date.now();
   const cacheKey = c.get("cacheKey") ?? "";
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(`${TAG18} reject reason=no-account-id`);
+    console.error(`${TAG18} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
     return c.json({ error: "admin-account-not-resolved" }, 500);
   }
   const userId = getUserIdForSession(cacheKey);
@@ -7980,24 +7998,38 @@ app15.post("/", async (c) => {
   const channel = typeof body.channel === "string" ? body.channel : "browser";
   const initialMessage = typeof body.initialMessage === "string" && body.initialMessage.trim() ? body.initialMessage : null;
   const permissionMode = typeof body.permissionMode === "string" ? body.permissionMode : void 0;
+  console.log(`${TAG18} spawn-request-in cacheKey-prefix=${cacheKey.slice(0, 8)} senderId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
+  const ownerStart = Date.now();
   const aboutOwner = await resolveOwnerProfileBlock(senderId, userId);
+  const ownerMs = Date.now() - ownerStart;
+  const aboutOwnerStatus = aboutOwner == null ? "absent" : "ok" in aboutOwner && aboutOwner.ok === false ? `unresolved:${aboutOwner.reason}` : "ok";
+  console.log(`${TAG18} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
+  const dormantStart = Date.now();
   const dormantPlugins = computeDormantPlugins(senderId);
+  console.log(`${TAG18} dormant-plugins-computed count=${Array.isArray(dormantPlugins) ? dormantPlugins.length : 0} ms=${Date.now() - dormantStart}`);
+  const tunnelUrl = resolveTunnelUrl();
+  console.log(`${TAG18} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
+  const forwardStart = Date.now();
+  const upstreamPayload = JSON.stringify({
+    senderId,
+    role: "admin",
+    channel,
+    permissionMode,
+    aboutOwner,
+    dormantPlugins,
+    tunnelUrl
+  });
+  console.log(`${TAG18} forward-spawn-start managerBase=${managerBase2()} bytes=${upstreamPayload.length}`);
   const upstream = await fetch(`${managerBase2()}/spawn`, {
     method: "POST",
     headers: { "content-type": "application/json" },
-    body: JSON.stringify({
-      senderId,
-      role: "admin",
-      channel,
-      permissionMode,
-      aboutOwner,
-      dormantPlugins
-    })
+    body: upstreamPayload
   }).catch((err) => {
-    console.error(`${TAG18} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)}`);
+    console.error(`${TAG18} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
     return null;
   });
   if (!upstream) return c.json({ error: "manager-unreachable" }, 503);
+  console.log(`${TAG18} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart} route-ms=${Date.now() - routeStart}`);
   let spawnedSessionId = null;
   if (upstream.ok && initialMessage) {
     const buffered = await upstream.clone().json().catch(() => null);
@@ -8046,6 +8078,7 @@ app15.post("/resume", async (c) => {
   const channel = typeof body.channel === "string" ? body.channel : "browser";
   const aboutOwner = await resolveOwnerProfileBlock(senderId, userId);
   const dormantPlugins = computeDormantPlugins(senderId);
+  const tunnelUrl = resolveTunnelUrl();
   const upstream = await fetch(`${managerBase2()}/resume`, {
     method: "POST",
     headers: { "content-type": "application/json" },
@@ -8055,7 +8088,8 @@ app15.post("/resume", async (c) => {
       channel,
       claudeSessionId: body.claudeSessionId,
       aboutOwner,
-      dormantPlugins
+      dormantPlugins,
+      tunnelUrl
     })
   }).catch((err) => {
     console.error(`${TAG18} fetch-failed op=resume message=${err instanceof Error ? err.message : String(err)}`);
@@ -8392,8 +8426,8 @@ var events_default = app19;
 
 // server/routes/admin/cloudflare.ts
 import { homedir as homedir3 } from "os";
-import { resolve as resolve13 } from "path";
-import { readFileSync as readFileSync15 } from "fs";
+import { resolve as resolve14 } from "path";
+import { readFileSync as readFileSync16 } from "fs";
 
 // app/lib/dns-label.ts
 var VALID_LABEL = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
@@ -8409,14 +8443,14 @@ function isValidDomain(value) {
 }
 
 // app/lib/alias-domains.ts
-import { existsSync as existsSync15, mkdirSync as mkdirSync4, readFileSync as readFileSync14, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync4, readFileSync as readFileSync15, writeFileSync as writeFileSync8 } from "fs";
 import { dirname as dirname2 } from "path";
-import { resolve as resolve12 } from "path";
-var ALIAS_DOMAINS_PATH = resolve12(MAXY_DIR, "alias-domains.json");
+import { resolve as resolve13 } from "path";
+var ALIAS_DOMAINS_PATH = resolve13(MAXY_DIR, "alias-domains.json");
 function readExisting() {
   if (!existsSync15(ALIAS_DOMAINS_PATH)) return /* @__PURE__ */ new Set();
   try {
-    const parsed = JSON.parse(readFileSync14(ALIAS_DOMAINS_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync15(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) return /* @__PURE__ */ new Set();
     return new Set(parsed.filter((h) => typeof h === "string"));
   } catch {
@@ -8683,7 +8717,7 @@ var CLOUDFLARE_SETUP_FORM_SCHEMA = {
 
 // server/routes/admin/cloudflare.ts
 function cloudflareStreamLogPath(accountId, correlationId) {
-  return resolve13(ACCOUNTS_DIR, accountId, "cloudflare-stream-logs", `${correlationId}.log`);
+  return resolve14(ACCOUNTS_DIR, accountId, "cloudflare-stream-logs", `${correlationId}.log`);
 }
 var SETUP_TIMEOUT_MS = 10 * 60 * 1e3;
 var DOMAINS_TIMEOUT_MS = 40 * 1e3;
@@ -8713,10 +8747,10 @@ function readDiscoveryResults(accountId) {
   return { tunnels: entry.tunnels, domains: entry.domains };
 }
 function loadBrandInfo() {
-  const platformRoot = process.env.MAXY_PLATFORM_ROOT ?? resolve13(process.cwd(), "..");
-  const brandPath = resolve13(platformRoot, "config", "brand.json");
+  const platformRoot = process.env.MAXY_PLATFORM_ROOT ?? resolve14(process.cwd(), "..");
+  const brandPath = resolve14(platformRoot, "config", "brand.json");
   try {
-    const parsed = JSON.parse(readFileSync15(brandPath, "utf-8"));
+    const parsed = JSON.parse(readFileSync16(brandPath, "utf-8"));
     const hostname2 = typeof parsed.hostname === "string" && parsed.hostname ? parsed.hostname : "maxy";
     const configDir2 = typeof parsed.configDir === "string" && parsed.configDir ? parsed.configDir : ".maxy";
     return { hostname: hostname2, configDir: configDir2 };
@@ -8844,7 +8878,7 @@ app20.get("/domains", requireAdminSession, async (c) => {
   streamLogPath = cloudflareStreamLogPath(accountId, correlationId);
   log(`phase=stream-log-resolved path=${streamLogPath}`);
   const brand = loadBrandInfo();
-  const scriptPath = resolve13(homedir3(), "list-cf-domains.sh");
+  const scriptPath = resolve14(homedir3(), "list-cf-domains.sh");
   const result = await runFormSpawn({
     scriptPath,
     args: [brand.hostname],
@@ -8935,7 +8969,7 @@ app20.get("/tunnels", requireAdminSession, async (c) => {
   if (!accountId) return err("session", "No account bound to session \u2014 refresh chat.");
   if (!correlationId) return err("session", "No active conversation for session \u2014 refresh chat.");
   streamLogPath = cloudflareStreamLogPath(accountId, correlationId);
-  const certPath = resolve13(homedir3(), brand.configDir, "cloudflared", "cert.pem");
+  const certPath = resolve14(homedir3(), brand.configDir, "cloudflared", "cert.pem");
   const { existsSync: existsSync23 } = await import("fs");
   if (!existsSync23(certPath)) {
     return err("cert", `Cloudflare origin certificate is not on disk yet (${certPath}). Complete the Cloudflare login first by submitting the form once \u2014 the OAuth flow writes cert.pem.`);
@@ -9261,17 +9295,17 @@ var cloudflare_default = app20;
 import { createReadStream as createReadStream3 } from "fs";
 import { readdir as readdir2, readFile as readFile4, stat as stat4, mkdir as mkdir3, writeFile as writeFile4, unlink as unlink2 } from "fs/promises";
 import { realpathSync as realpathSync4 } from "fs";
-import { basename as basename4, dirname as dirname4, join as join10, resolve as resolve15, sep as sep3 } from "path";
+import { basename as basename4, dirname as dirname4, join as join10, resolve as resolve16, sep as sep3 } from "path";
 import { Readable as Readable2 } from "stream";
 
 // app/lib/data-path.ts
 import { realpathSync as realpathSync3 } from "fs";
-import { resolve as resolve14, normalize, sep as sep2, relative } from "path";
-var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve14(process.cwd(), "../platform");
-var DATA_ROOT = resolve14(PLATFORM_ROOT5, "..", "data");
+import { resolve as resolve15, normalize, sep as sep2, relative } from "path";
+var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve15(process.cwd(), "../platform");
+var DATA_ROOT = resolve15(PLATFORM_ROOT5, "..", "data");
 function resolveDataPath(raw) {
   const cleaned = normalize("/" + (raw ?? "").replace(/\\/g, "/")).replace(/^\/+/, "");
-  const absolute = resolve14(DATA_ROOT, cleaned);
+  const absolute = resolve15(DATA_ROOT, cleaned);
   let dataRootReal;
   try {
     dataRootReal = realpathSync3(DATA_ROOT);
@@ -9629,7 +9663,7 @@ async function readMeta(absDir, baseName) {
 }
 async function readAccountNames() {
   const map = /* @__PURE__ */ new Map();
-  const accountsDir = resolve15(DATA_ROOT, "accounts");
+  const accountsDir = resolve16(DATA_ROOT, "accounts");
   let names;
   try {
     names = await readdir2(accountsDir);
@@ -9638,7 +9672,7 @@ async function readAccountNames() {
   }
   for (const name of names) {
     if (!UUID_RE4.test(name)) continue;
-    const configPath2 = resolve15(accountsDir, name, "account.json");
+    const configPath2 = resolve16(accountsDir, name, "account.json");
     try {
       const raw = await readFile4(configPath2, "utf8");
       const parsed = JSON.parse(raw);
@@ -9829,8 +9863,8 @@ app21.post("/upload", requireAdminSession, async (c) => {
   }
   const safeName = basename4(file.name).replace(/[\0/\\]/g, "_");
   const finalName = `${Date.now()}-${safeName}`;
-  const destDir = resolve15(DATA_ROOT, "uploads", accountId);
-  const destPath = resolve15(destDir, finalName);
+  const destDir = resolve16(DATA_ROOT, "uploads", accountId);
+  const destPath = resolve16(destDir, finalName);
   try {
     await mkdir3(destDir, { recursive: true });
     const dataRootReal = realpathSync4(DATA_ROOT);
@@ -11549,7 +11583,7 @@ var file_attach_default = app28;
 // server/routes/admin/sidebar-artefacts.ts
 import neo4j2 from "neo4j-driver";
 import { readFile as readFile5, readdir as readdir3, stat as stat5 } from "fs/promises";
-import { resolve as resolve16, relative as relative2, isAbsolute } from "path";
+import { resolve as resolve17, relative as relative2, isAbsolute } from "path";
 import { existsSync as existsSync16 } from "fs";
 var LIMIT = 50;
 var TEXT_MIME_PREFIXES = ["text/", "application/json", "application/markdown"];
@@ -11566,7 +11600,7 @@ app29.get("/", requireAdminSession, async (c) => {
   if (docs === null) {
     return c.json({ error: "Failed to load artefacts" }, 500);
   }
-  const accountDir = resolve16(ACCOUNTS_DIR, accountId);
+  const accountDir = resolve17(ACCOUNTS_DIR, accountId);
   const agents = await fetchAgentTemplateRows(accountDir);
   const artefacts = [...docs, ...agents].sort(
     (a, b) => (b.updatedAt ?? "").localeCompare(a.updatedAt ?? "")
@@ -11629,8 +11663,8 @@ async function readArtefactContent(accountId, attachmentId, mimeType, displayNam
     logSkip(displayName, "non-text-mime", mimeType);
     return { content: "", skipReason: "non-text-mime" };
   }
-  const accountDir = resolve16(ATTACHMENTS_ROOT, accountId);
-  const dir = resolve16(accountDir, attachmentId);
+  const accountDir = resolve17(ATTACHMENTS_ROOT, accountId);
+  const dir = resolve17(accountDir, attachmentId);
   try {
     validateFilePathInAccount(dir, accountDir);
   } catch {
@@ -11644,7 +11678,7 @@ async function readArtefactContent(accountId, attachmentId, mimeType, displayNam
       logSkip(displayName, "missing-on-disk", mimeType);
       return { content: "", skipReason: "missing-on-disk" };
     }
-    return { content: await readFile5(resolve16(dir, dataFile), "utf-8"), skipReason: null };
+    return { content: await readFile5(resolve17(dir, dataFile), "utf-8"), skipReason: null };
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     console.error(`[admin/sidebar-artefacts] read-failed attachmentId=${attachmentId.slice(0, 8)} error="${message}"`);
@@ -11660,8 +11694,8 @@ function logSkip(name, reason, mimeType) {
 async function fetchAgentTemplateRows(accountDir) {
   const rows = [];
   for (const filename of ADMIN_AGENT_FILES) {
-    const overridePath = resolve16(accountDir, "agents", "admin", filename);
-    const bundledPath = resolve16(PLATFORM_ROOT, "templates", "agents", "admin", filename);
+    const overridePath = resolve17(accountDir, "agents", "admin", filename);
+    const bundledPath = resolve17(PLATFORM_ROOT, "templates", "agents", "admin", filename);
     const labelStem = filename.replace(/\.md$/, "");
     const row = await readAgentTemplateRow({
       id: `agent-template:admin:${filename}`,
@@ -11675,12 +11709,12 @@ async function fetchAgentTemplateRows(accountDir) {
     });
     if (row) rows.push(row);
   }
-  const overrideDir = resolve16(accountDir, "specialists", "agents");
-  const bundledDir = resolve16(PLATFORM_ROOT, "templates", "specialists", "agents");
+  const overrideDir = resolve17(accountDir, "specialists", "agents");
+  const bundledDir = resolve17(PLATFORM_ROOT, "templates", "specialists", "agents");
   const specialistNames = await unionSpecialistFilenames(overrideDir, bundledDir);
   for (const filename of specialistNames) {
-    const overridePath = resolve16(overrideDir, filename);
-    const bundledPath = resolve16(bundledDir, filename);
+    const overridePath = resolve17(overrideDir, filename);
+    const bundledPath = resolve17(bundledDir, filename);
     const row = await readAgentTemplateRow({
       id: `agent-template:specialist:${filename}`,
       displayName: filename.replace(/\.md$/, ""),
@@ -11765,7 +11799,7 @@ var sidebar_artefacts_default = app29;
 
 // server/routes/admin/sidebar-artefact-save.ts
 import { mkdir as mkdir4, readdir as readdir4, stat as stat6, writeFile as writeFile5 } from "fs/promises";
-import { resolve as resolve17 } from "path";
+import { resolve as resolve18 } from "path";
 import { existsSync as existsSync17 } from "fs";
 var ADMIN_AGENT_FILES2 = /* @__PURE__ */ new Set(["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"]);
 var UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
@@ -11778,7 +11812,7 @@ app30.post("/", requireAdminSession, async (c) => {
   if (!body || typeof body.id !== "string" || typeof body.content !== "string") {
     return c.json({ error: "id and content required" }, 400);
   }
-  const accountDir = resolve17(ACCOUNTS_DIR, accountId);
+  const accountDir = resolve18(ACCOUNTS_DIR, accountId);
   const resolved = await resolveSavePath(body.id, accountId, accountDir);
   if (resolved.kind === "heal-race") {
     c.header("Retry-After", "2");
@@ -11823,17 +11857,17 @@ async function resolveSavePath(id, accountId, accountDir) {
     if (role !== "admin" || !ADMIN_AGENT_FILES2.has(filename)) {
       return { kind: "reject", status: 400, reason: "invalid-id" };
     }
-    const parent = resolve17(accountDir, "agents", "admin");
+    const parent = resolve18(accountDir, "agents", "admin");
     await mkdir4(parent, { recursive: true });
     try {
       validateFilePathInAccount(parent, accountDir);
     } catch {
       return { kind: "reject", status: 400, reason: "containment-rejected" };
     }
-    return { kind: "admin-template", path: resolve17(parent, filename) };
+    return { kind: "admin-template", path: resolve18(parent, filename) };
   }
   if (UUID_RE5.test(id)) {
-    const dir = resolve17(ATTACHMENTS_ROOT, accountId, id);
+    const dir = resolve18(ATTACHMENTS_ROOT, accountId, id);
     if (!existsSync17(dir)) {
       const attShort = id.slice(0, 8);
       if (isHealPending(accountId, id)) {
@@ -11866,7 +11900,7 @@ async function resolveSavePath(id, accountId, accountDir) {
       }
     }
     try {
-      validateFilePathInAccount(dir, resolve17(ATTACHMENTS_ROOT, accountId));
+      validateFilePathInAccount(dir, resolve18(ATTACHMENTS_ROOT, accountId));
     } catch {
       return { kind: "reject", status: 400, reason: "containment-rejected" };
     }
@@ -11875,7 +11909,7 @@ async function resolveSavePath(id, accountId, accountDir) {
     if (!dataFile) {
       return { kind: "reject", status: 400, reason: "not-found" };
     }
-    return { kind: "knowledge-doc", path: resolve17(dir, dataFile) };
+    return { kind: "knowledge-doc", path: resolve18(dir, dataFile) };
   }
   return { kind: "reject", status: 400, reason: "invalid-id" };
 }
@@ -11887,7 +11921,7 @@ var sidebar_artefact_save_default = app30;
 // server/routes/admin/sidebar-artefact-content.ts
 import { readFile as readFile6, readdir as readdir5 } from "fs/promises";
 import { existsSync as existsSync18 } from "fs";
-import { resolve as resolve18 } from "path";
+import { resolve as resolve19 } from "path";
 var UUID_RE6 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 var app31 = new Hono();
 app31.get("/", requireAdminSession, async (c) => {
@@ -11899,14 +11933,14 @@ app31.get("/", requireAdminSession, async (c) => {
     console.error(`[admin/sidebar-artefact-content] not-found id=${id.slice(0, 8)}`);
     return new Response("Not found", { status: 404 });
   }
-  const dir = resolve18(ATTACHMENTS_ROOT, accountId, id);
+  const dir = resolve19(ATTACHMENTS_ROOT, accountId, id);
   if (!existsSync18(dir)) {
     console.error(`[admin/sidebar-artefact-content] not-found id=${id.slice(0, 8)}`);
     return new Response("Not found", { status: 404 });
   }
   let meta;
   try {
-    meta = JSON.parse(await readFile6(resolve18(dir, `${id}.meta.json`), "utf-8"));
+    meta = JSON.parse(await readFile6(resolve19(dir, `${id}.meta.json`), "utf-8"));
   } catch {
     console.error(`[admin/sidebar-artefact-content] not-found id=${id.slice(0, 8)}`);
     return new Response("Not found", { status: 404 });
@@ -11918,7 +11952,7 @@ app31.get("/", requireAdminSession, async (c) => {
     return new Response("Not found", { status: 404 });
   }
   const start = Date.now();
-  const buffer = await readFile6(resolve18(dir, dataFile));
+  const buffer = await readFile6(resolve19(dir, dataFile));
   const ms = Date.now() - start;
   console.log(
     `[admin/sidebar-artefact-content] account=${accountId} id=${id.slice(0, 8)} mime=${meta.mimeType} bytes=${buffer.length} ms=${ms}`
@@ -11934,24 +11968,24 @@ app31.get("/", requireAdminSession, async (c) => {
 var sidebar_artefact_content_default = app31;
 
 // server/routes/admin/health.ts
-import { existsSync as existsSync19, readFileSync as readFileSync16 } from "fs";
-import { resolve as resolve19, join as join11 } from "path";
-var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve19(process.cwd(), "..");
+import { existsSync as existsSync19, readFileSync as readFileSync17 } from "fs";
+import { resolve as resolve20, join as join11 } from "path";
+var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve20(process.cwd(), "..");
 var brandHostname = "maxy";
 var brandJsonPath = join11(PLATFORM_ROOT6, "config", "brand.json");
 if (existsSync19(brandJsonPath)) {
   try {
-    const brand = JSON.parse(readFileSync16(brandJsonPath, "utf-8"));
+    const brand = JSON.parse(readFileSync17(brandJsonPath, "utf-8"));
     if (brand.hostname) brandHostname = brand.hostname;
   } catch {
   }
 }
-var VERSION_FILE = resolve19(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
+var VERSION_FILE = resolve20(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
 var PROCESS_STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
 var PROBE_TIMEOUT_MS = 1e3;
 function readVersion() {
   if (!existsSync19(VERSION_FILE)) return "unknown";
-  return readFileSync16(VERSION_FILE, "utf-8").trim() || "unknown";
+  return readFileSync17(VERSION_FILE, "utf-8").trim() || "unknown";
 }
 async function probeConversationDb() {
   let session;
@@ -12033,8 +12067,8 @@ app33.route("/health-brand", health_default2);
 var admin_default = app33;
 
 // server/routes/sites.ts
-import { existsSync as existsSync20, readFileSync as readFileSync17, realpathSync as realpathSync5, statSync as statSync7 } from "fs";
-import { resolve as resolve20 } from "path";
+import { existsSync as existsSync20, readFileSync as readFileSync18, realpathSync as realpathSync5, statSync as statSync7 } from "fs";
+import { resolve as resolve21 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
   ".html": "text/html; charset=utf-8",
@@ -12091,8 +12125,8 @@ app34.get("/:rel{.*}", (c) => {
     }
     segments.push(seg);
   }
-  const rootDir = resolve20(account.accountDir, "sites");
-  let filePath = segments.length === 0 ? rootDir : resolve20(rootDir, ...segments);
+  const rootDir = resolve21(account.accountDir, "sites");
+  let filePath = segments.length === 0 ? rootDir : resolve21(rootDir, ...segments);
   if (filePath !== rootDir && !filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
@@ -12112,7 +12146,7 @@ app34.get("/:rel{.*}", (c) => {
     return c.redirect(target, 301);
   }
   if (stat7?.isDirectory()) {
-    filePath = resolve20(filePath, "index.html");
+    filePath = resolve21(filePath, "index.html");
   }
   if (!filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
@@ -12137,7 +12171,7 @@ app34.get("/:rel{.*}", (c) => {
   }
   let body;
   try {
-    body = readFileSync17(realPath);
+    body = readFileSync18(realPath);
   } catch (err) {
     const code = err?.code;
     if (code === "EISDIR") {
@@ -12283,8 +12317,8 @@ function startReaper2() {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash3, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync21, readFileSync as readFileSync18, statSync as statSync8 } from "fs";
-import { resolve as resolve21 } from "path";
+import { existsSync as existsSync21, readFileSync as readFileSync19, statSync as statSync8 } from "fs";
+import { resolve as resolve22 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
 function canonicalize(value) {
@@ -12319,7 +12353,7 @@ var PUBKEY_SHA256 = "8eee6bcb33545fd13b16d3199a5735ca5db5062834c7b49dfe4f23801d9
 var GRACE_DAYS = 7;
 var GRACE_MS = GRACE_DAYS * 24 * 60 * 60 * 1e3;
 function pubkeyPath(brand) {
-  return resolve21(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
+  return resolve22(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
 }
 var memo = null;
 function memoKey(mtimeMs, account) {
@@ -12331,7 +12365,7 @@ function resolveEntitlement(brand, account) {
   if (brand.commercialMode !== true) {
     return logResolved(implicitTrust(account), null);
   }
-  const entitlementPath = resolve21(brand.configDir, "entitlement.json");
+  const entitlementPath = resolve22(brand.configDir, "entitlement.json");
   if (!existsSync21(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
@@ -12347,7 +12381,7 @@ function resolveEntitlement(brand, account) {
 function verifyAndResolve(brand, entitlementPath, account) {
   let pubkeyPem;
   try {
-    pubkeyPem = readFileSync18(pubkeyPath(brand), "utf-8");
+    pubkeyPem = readFileSync19(pubkeyPath(brand), "utf-8");
   } catch (err) {
     return logResolved(anonymousFallback("pubkey-missing"), {
       reason: "pubkey-missing"
@@ -12361,7 +12395,7 @@ function verifyAndResolve(brand, entitlementPath, account) {
   }
   let envelope;
   try {
-    envelope = JSON.parse(readFileSync18(entitlementPath, "utf-8"));
+    envelope = JSON.parse(readFileSync19(entitlementPath, "utf-8"));
   } catch {
     return logResolved(anonymousFallback("malformed"), { reason: "malformed" });
   }
@@ -12529,7 +12563,7 @@ if (BRAND_JSON_PATH && !existsSync22(BRAND_JSON_PATH)) {
 }
 if (BRAND_JSON_PATH && existsSync22(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync19(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync20(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -12552,7 +12586,7 @@ var ALIAS_DOMAINS_PATH2 = join12(homedir4(), BRAND.configDir, "alias-domains.jso
 function loadAliasDomains() {
   try {
     if (!existsSync22(ALIAS_DOMAINS_PATH2)) return null;
-    const parsed = JSON.parse(readFileSync19(ALIAS_DOMAINS_PATH2, "utf-8"));
+    const parsed = JSON.parse(readFileSync20(ALIAS_DOMAINS_PATH2, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -12922,8 +12956,8 @@ app35.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] no-account slug=${slug} file=${filename}`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve22(account.accountDir, "agents", slug, "assets", filename);
-  const expectedDir = resolve22(account.accountDir, "agents", slug, "assets");
+  const filePath = resolve23(account.accountDir, "agents", slug, "assets", filename);
+  const expectedDir = resolve23(account.accountDir, "agents", slug, "assets");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
@@ -12935,7 +12969,7 @@ app35.get("/agent-assets/:slug/:filename", (c) => {
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync19(filePath);
+  const body = readFileSync20(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
@@ -12952,8 +12986,8 @@ app35.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve22(account.accountDir, "generated", filename);
-  const expectedDir = resolve22(account.accountDir, "generated");
+  const filePath = resolve23(account.accountDir, "generated", filename);
+  const expectedDir = resolve23(account.accountDir, "generated");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
@@ -12965,7 +12999,7 @@ app35.get("/generated/:filename", (c) => {
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync19(filePath);
+  const body = readFileSync20(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
@@ -12977,7 +13011,7 @@ var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
 if (BRAND_JSON_PATH && existsSync22(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync19(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync20(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -12996,7 +13030,7 @@ function readInstalledVersion() {
     if (!PLATFORM_ROOT7) return "unknown";
     const versionFile = join12(PLATFORM_ROOT7, "config", `.${BRAND.hostname}-version`);
     if (!existsSync22(versionFile)) return "unknown";
-    const content = readFileSync19(versionFile, "utf-8").trim();
+    const content = readFileSync20(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -13037,7 +13071,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync19(resolve22(process.cwd(), "public", file), "utf-8");
+    html = readFileSync20(resolve23(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -13057,12 +13091,12 @@ function loadBrandingCache(agentSlug) {
   try {
     const accountJsonPath = join12(configDir2, "account.json");
     if (!existsSync22(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync19(accountJsonPath, "utf-8"));
+    const account = JSON.parse(readFileSync20(accountJsonPath, "utf-8"));
     const accountId = account.accountId;
     if (!accountId) return null;
     const cachePath = join12(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync22(cachePath)) return null;
-    return JSON.parse(readFileSync19(cachePath, "utf-8"));
+    return JSON.parse(readFileSync20(cachePath, "utf-8"));
   } catch {
     return null;
   }
@@ -13072,7 +13106,7 @@ function resolveDefaultSlug() {
     const configDir2 = join12(homedir4(), BRAND.configDir);
     const accountJsonPath = join12(configDir2, "account.json");
     if (!existsSync22(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync19(accountJsonPath, "utf-8"));
+    const account = JSON.parse(readFileSync20(accountJsonPath, "utf-8"));
     return account.defaultAgent || null;
   } catch {
     return null;
@@ -13145,7 +13179,7 @@ app35.use("/vnc-popout.html", logViewerFetch);
 app35.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync19(resolve22(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync20(resolve23(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -13194,20 +13228,6 @@ app35.get("/data", (c) => {
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app35.get("/docs/desktop-code-controls", (c) => {
-  const host = (c.req.header("host") ?? "").split(":")[0];
-  if (isPublicHost(host)) return c.text("Not found", 404);
-  const docsPath = PLATFORM_ROOT7 ? resolve22(PLATFORM_ROOT7, "..", "docs", "desktop-code-controls.md") : resolve22(process.cwd(), "docs", "desktop-code-controls.md");
-  if (!existsSync22(docsPath)) {
-    console.error(`[docs] desktop-code-controls.md missing at ${docsPath}`);
-    return c.text(`docs/desktop-code-controls.md not found at ${docsPath}`, 404);
-  }
-  const md = readFileSync19(docsPath, "utf-8");
-  const escaped = md.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-  return c.html(
-    `<!doctype html><meta charset="utf-8"><title>Desktop Code-tab controls</title><style>body{font:14px/1.55 -apple-system,system-ui,sans-serif;max-width:760px;margin:2rem auto;padding:0 1rem;color:#111}pre{white-space:pre-wrap;font:inherit}</style><pre>${escaped}</pre>`
-  );
-});
 app35.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN.test(`/${slug}`)) {
@@ -13266,7 +13286,7 @@ try {
 (async () => {
   try {
     if (!existsSync22(USERS_FILE)) return;
-    const usersRaw = readFileSync19(USERS_FILE, "utf-8").trim();
+    const usersRaw = readFileSync20(USERS_FILE, "utf-8").trim();
     if (!usersRaw) return;
     const users = JSON.parse(usersRaw);
     const userId = users[0]?.userId;
@@ -13392,7 +13412,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve22(process.env.MAXY_PLATFORM_ROOT ?? join12(__dirname, "..")),
+  platformRoot: resolve23(process.env.MAXY_PLATFORM_ROOT ?? join12(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     if (process.env.WHATSAPP_PTY_BRIDGE_ENABLED === "true" && msg.text && !msg.isOwnerMirror) {