@rubytech/create-maxy-code 0.1.370 → 0.1.372

package/payload/server/server.js

@@ -34,6 +34,7 @@ import {
   cleanupLeakedPremiumSubs,
   clearRateLimit,
   clientIpMiddleware,
+  createNewAdminConversation,
   createRemoteSession,
   deleteAgentProjection,
   deleteConversation,
@@ -107,7 +108,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-CXEC5RWB.js";
+} from "./chunk-OBZE2KCK.js";
 import {
   __commonJS,
   __toESM
@@ -1305,7 +1306,7 @@ var serveStatic = (options = { root: "" }) => {
 // server/index.ts
 import { readFileSync as readFileSync33, existsSync as existsSync32, watchFile } from "fs";
 import { spawn as spawn3 } from "child_process";
-import { resolve as resolve32, join as join32, basename as basename10 } from "path";
+import { resolve as resolve32, join as join33, basename as basename12 } from "path";
 import { homedir as homedir3 } from "os";
 import { monitorEventLoopDelay } from "perf_hooks";
 
@@ -3735,6 +3736,14 @@ var TAG12 = "[stt]";
 var WHISPER_BINARY = process.env.WHISPER_BINARY ?? "/opt/whisper.cpp/build/bin/whisper-cli";
 var WHISPER_MODEL = process.env.WHISPER_MODEL ?? "/opt/whisper.cpp/models/ggml-base.bin";
 var WHISPER_TIMEOUT_MS = 20 * 60 * 1e3;
+var SPECIAL_TOKEN_RE = /\[_[A-Z]+(?:_\d+)?_?\]/g;
+function stripSpecialTokens(input) {
+  const matches = input.match(SPECIAL_TOKEN_RE);
+  const count = matches ? matches.length : 0;
+  if (!count) return { text: input, count: 0 };
+  const text = input.replace(SPECIAL_TOKEN_RE, "").replace(/[ \t]{2,}/g, " ").trim();
+  return { text, count };
+}
 async function transcribe(audioPath, mimetype) {
   const startMs = Date.now();
   let audioBytes = 0;
@@ -3776,12 +3785,10 @@ async function transcribe(audioPath, mimetype) {
       wavPath,
       "--no-timestamps",
       "-l",
-      "auto",
-      "--print-special",
-      "false"
+      "auto"
     ], { timeout: WHISPER_TIMEOUT_MS, maxBuffer: 10 * 1024 * 1024 });
-    const text = stdout.trim();
     const durationMs = Date.now() - startMs;
+    const { text, count: stripped } = stripSpecialTokens(stdout.trim());
     if (!text) {
       console.error(`${TAG12} failed: whisper returned empty output duration_ms=${durationMs}`);
       return void 0;
@@ -3790,7 +3797,7 @@ async function transcribe(audioPath, mimetype) {
     const language = langMatch?.[1] ?? "unknown";
     const words = text.split(/\s+/).filter(Boolean).length;
     console.error(
-      `${TAG12} done provider=whisper-local duration_ms=${durationMs} words=${words} lang=${language}`
+      `${TAG12} done provider=whisper-local duration_ms=${durationMs} words=${words} stripped=${stripped} lang=${language}`
     );
     return { text, language, durationMs };
   } catch (err) {
@@ -4980,7 +4987,7 @@ import { resolve as resolve6, extname } from "path";
 
 // app/lib/data-path.ts
 import { realpathSync } from "fs";
-import { resolve as resolve5, normalize, sep as sep2, relative } from "path";
+import { resolve as resolve5, normalize, sep as sep2, relative, basename, join as join5 } from "path";
 var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT ?? resolve5(process.cwd(), "../platform");
 var DATA_ROOT = resolve5(PLATFORM_ROOT4, "..", "data");
 var CLAUDE_UPLOADS_ROOT = process.env.CLAUDE_CONFIG_DIR ? resolve5(process.env.CLAUDE_CONFIG_DIR, "uploads") : null;
@@ -5043,6 +5050,16 @@ function resolveClaudeUploadsPath(raw) {
   }
   return resolveUnderRoot(raw, CLAUDE_UPLOADS_ROOT, "CLAUDE_UPLOADS_ROOT");
 }
+function scratchpadTmpBase() {
+  return process.env.MAXY_SCRATCHPAD_BASE ?? "/tmp";
+}
+function sessionScratchpadRoot(projectDir, sessionId) {
+  const uid = typeof process.geteuid === "function" ? process.geteuid() : 0;
+  return join5(scratchpadTmpBase(), `claude-${uid}`, basename(projectDir), sessionId, "scratchpad");
+}
+function resolveScratchpadPath(raw, scratchpadRootAbs) {
+  return resolveUnderRoot(raw, scratchpadRootAbs, "scratchpad");
+}
 
 // app/lib/attachments.ts
 function uploadsDirFor(accountId, subPath, attachmentId) {
@@ -5185,7 +5202,7 @@ async function storeComponentArtefact(accountId, attachmentId, mimeType, content
 // app/lib/stt/voice-note.ts
 import { writeFile as writeFile3, mkdtemp, rm } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 
 // app/lib/stt/audio-mime.ts
 var AUDIO_MIME_TYPES = /* @__PURE__ */ new Set([
@@ -5239,9 +5256,9 @@ async function transcribeVoiceNote(file, source) {
   let tempDir;
   let tempPath;
   try {
-    tempDir = await mkdtemp(join5(tmpdir(), "voice-"));
+    tempDir = await mkdtemp(join6(tmpdir(), "voice-"));
     const ext = audioExtension(mimeType);
-    tempPath = join5(tempDir, `recording${ext}`);
+    tempPath = join6(tempDir, `recording${ext}`);
     const buffer = Buffer.from(await file.arrayBuffer());
     await writeFile3(tempPath, buffer);
   } catch (err) {
@@ -5639,7 +5656,7 @@ ${result.result.text}` : result.result.text;
 }
 
 // server/routes/whatsapp.ts
-import { join as join8, resolve as resolve9 } from "path";
+import { join as join9, resolve as resolve9 } from "path";
 import { readdirSync as readdirSync3, readFileSync as readFileSync9, existsSync as existsSync5 } from "fs";
 
 // app/lib/whatsapp/login.ts
@@ -5647,7 +5664,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 
 // app/lib/whatsapp/config-persist.ts
 import { readFileSync as readFileSync8, writeFileSync as writeFileSync4, existsSync as existsSync4 } from "fs";
-import { resolve as resolve7, join as join6 } from "path";
+import { resolve as resolve7, join as join7 } from "path";
 var TAG16 = "[whatsapp:config]";
 function configPath(accountDir) {
   return resolve7(accountDir, "account.json");
@@ -5799,7 +5816,7 @@ function setPublicAgent(accountDir, slug) {
   if (!trimmed) {
     return { ok: false, error: "Agent slug cannot be empty." };
   }
-  const agentConfigPath = join6(accountDir, "agents", trimmed, "config.json");
+  const agentConfigPath = join7(accountDir, "agents", trimmed, "config.json");
   if (!existsSync4(agentConfigPath)) {
     return { ok: false, error: `Agent "${trimmed}" not found \u2014 no config.json at ${agentConfigPath}. Check the agent slug and try again.` };
   }
@@ -6183,7 +6200,7 @@ async function waitForLogin(opts) {
 // app/lib/whatsapp/outbound/send-document.ts
 import { realpathSync as realpathSync3 } from "fs";
 import { readFile, stat as stat2 } from "fs/promises";
-import { resolve as resolve8, basename } from "path";
+import { resolve as resolve8, basename as basename2 } from "path";
 var TAG18 = "[whatsapp:outbound]";
 var WHATSAPP_DOCUMENT_MAX_BYTES = 100 * 1024 * 1024;
 var lastDocumentOutboundAt = /* @__PURE__ */ new Map();
@@ -6238,7 +6255,7 @@ async function sendWhatsAppDocument(input) {
       error: `File exceeds 100 MB limit (${(fileStat.size / 1024 / 1024).toFixed(1)} MB)`
     };
   }
-  const filename = basename(resolvedPath);
+  const filename = basename2(resolvedPath);
   const jid = normalizeJid2(to);
   const sock = getSocket(accountId);
   if (!sock) {
@@ -6373,11 +6390,11 @@ function serializeWhatsAppSchema() {
 
 // app/lib/whatsapp/status-reconcile.ts
 import { readdirSync as readdirSync2 } from "fs";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 var TAG19 = "[whatsapp:reconcile]";
 function listCredsAccountIds(credsRoot) {
   try {
-    return readdirSync2(credsRoot, { withFileTypes: true }).filter((e) => e.isDirectory() && hasCredsSync(join7(credsRoot, e.name))).map((e) => e.name);
+    return readdirSync2(credsRoot, { withFileTypes: true }).filter((e) => e.isDirectory() && hasCredsSync(join8(credsRoot, e.name))).map((e) => e.name);
   } catch {
     return [];
   }
@@ -6392,7 +6409,7 @@ function reconcileCredsOnDisk(opts) {
   const entries = [];
   for (const accountId of listCredsAccountIds(credsRoot)) {
     if (liveAccountIds.has(accountId)) continue;
-    const authDir = join7(credsRoot, accountId);
+    const authDir = join8(credsRoot, accountId);
     const selfPhone = readSelfId(authDir).e164 ?? void 0;
     const configured = accountDir ? isAccountConfigured(accountDir, accountId) : false;
     console.error(
@@ -6419,7 +6436,7 @@ app2.get("/status", (c) => {
   try {
     const live = getStatus();
     const liveIds = new Set(live.map((a) => a.accountId));
-    const credsRoot = join8(MAXY_DIR, "credentials", "whatsapp");
+    const credsRoot = join9(MAXY_DIR, "credentials", "whatsapp");
     const accountDir = resolveAccount()?.accountDir ?? null;
     const reconciled = reconcileCredsOnDisk({ credsRoot, accountDir, liveAccountIds: liveIds });
     const accounts = [...live, ...reconciled];
@@ -6440,7 +6457,7 @@ app2.post("/login/start", async (c) => {
     if (!phone) {
       return c.json({ error: 'Missing required field "phone" (E.164, e.g. +441234567890).' }, 400);
     }
-    const authDir = join8(MAXY_DIR, "credentials", "whatsapp", accountId);
+    const authDir = join9(MAXY_DIR, "credentials", "whatsapp", accountId);
     const accountDir = resolveAccount()?.accountDir ?? null;
     const result = await startLogin({ accountId, authDir, phone, accountDir, force });
     console.error(`${TAG20} login/start result account=${accountId} hasCode=${!!result.pairingCode}${result.selfPhone ? ` phone=${result.selfPhone}` : ""}`);
@@ -6854,12 +6871,12 @@ app2.get("/group-info", async (c) => {
 var whatsapp_default = app2;
 
 // server/routes/whatsapp-reader.ts
-import { readFileSync as readFileSync13, watch, statSync as statSync4, openSync, readSync, closeSync, existsSync as existsSync7, readdirSync as readdirSync7 } from "fs";
-import { basename as basename2, dirname, isAbsolute, join as join12, relative as relative2, resolve as resolve11, sep as sep3 } from "path";
+import { readFileSync as readFileSync13, watch, statSync as statSync4, openSync, readSync, closeSync, existsSync as existsSync7, readdirSync as readdirSync7, realpathSync as realpathSync4 } from "fs";
+import { basename as basename4, dirname as dirname2, isAbsolute, join as join13, relative as relative2, resolve as resolve11, sep as sep3 } from "path";
 
 // server/routes/admin/sidebar-sessions.ts
 import { readdirSync as readdirSync4, readFileSync as readFileSync10, statSync as statSync2 } from "fs";
-import { join as join9, resolve as resolve10 } from "path";
+import { basename as basename3, dirname, join as join10, resolve as resolve10 } from "path";
 
 // app/lib/whatsapp-reader/select-sessions.ts
 function isReaderChannelSession(role, channel) {
@@ -6908,6 +6925,14 @@ var app3 = new Hono();
 function claudeConfigDir() {
   return process.env.CLAUDE_CONFIG_DIR ?? null;
 }
+function findSessionProjectDir(sessionId) {
+  const cfg = claudeConfigDir();
+  if (!cfg) return null;
+  for (const { path: path2 } of enumerateJsonls(join10(cfg, "projects"))) {
+    if (basename3(path2) === `${sessionId}.jsonl`) return dirname(path2);
+  }
+  return null;
+}
 function enumerateJsonls(projectsRoot) {
   const out = [];
   let slugs;
@@ -6918,7 +6943,7 @@ function enumerateJsonls(projectsRoot) {
     throw err;
   }
   for (const slug of slugs) {
-    const slugDir = join9(projectsRoot, slug);
+    const slugDir = join10(projectsRoot, slug);
     let entries;
     try {
       entries = readdirSync4(slugDir, { withFileTypes: true });
@@ -6929,9 +6954,9 @@ function enumerateJsonls(projectsRoot) {
     }
     for (const entry of entries) {
       if (entry.isFile() && SESSION_ID_RE.test(entry.name)) {
-        out.push({ path: join9(slugDir, entry.name), isSubagent: false, archived: false });
+        out.push({ path: join10(slugDir, entry.name), isSubagent: false, archived: false });
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join9(slugDir, entry.name);
+        const subDir = join10(slugDir, entry.name);
         let subEntries;
         try {
           subEntries = readdirSync4(subDir, { withFileTypes: true });
@@ -6942,11 +6967,11 @@ function enumerateJsonls(projectsRoot) {
         }
         for (const sub of subEntries) {
           if (sub.isFile() && SESSION_ID_RE.test(sub.name)) {
-            out.push({ path: join9(subDir, sub.name), isSubagent: true, archived: false });
+            out.push({ path: join10(subDir, sub.name), isSubagent: true, archived: false });
           }
         }
       } else if (entry.isDirectory() && entry.name === "archive") {
-        const archiveDir = join9(slugDir, entry.name);
+        const archiveDir = join10(slugDir, entry.name);
         let archiveEntries;
         try {
           archiveEntries = readdirSync4(archiveDir, { withFileTypes: true });
@@ -6957,7 +6982,7 @@ function enumerateJsonls(projectsRoot) {
         }
         for (const arc of archiveEntries) {
           if (arc.isFile() && SESSION_ID_RE.test(arc.name)) {
-            out.push({ path: join9(archiveDir, arc.name), isSubagent: false, archived: true });
+            out.push({ path: join10(archiveDir, arc.name), isSubagent: false, archived: true });
           }
         }
       }
@@ -6990,7 +7015,7 @@ async function fetchLiveSessions() {
 function loadUserTitles(accountDir) {
   const out = /* @__PURE__ */ new Map();
   if (!accountDir) return out;
-  const path2 = join9(accountDir, "session-titles.json");
+  const path2 = join10(accountDir, "session-titles.json");
   let raw;
   try {
     raw = readFileSync10(path2, "utf8");
@@ -7130,7 +7155,7 @@ app3.get("/", requireAdminSession, async (c) => {
     console.error("[admin-sessions-list] CLAUDE_CONFIG_DIR not set; returning empty list");
     return c.json({ sessions: [], accountId, accounts });
   }
-  const projectsRoot = join9(configDir2, "projects");
+  const projectsRoot = join10(configDir2, "projects");
   const jsonls = enumerateJsonls(projectsRoot);
   const liveSessions = await fetchLiveSessions();
   const accountDir = accountId ? resolve10(ACCOUNTS_DIR, accountId) : null;
@@ -7166,7 +7191,7 @@ app3.get("/", requireAdminSession, async (c) => {
     const pid = live ? liveSessions.get(sessionId) ?? null : null;
     const resolved = resolveTitle(body, sessionId, userTitles);
     titleSourceCounts[resolved.source] += 1;
-    const metaPath = join9(projectDir, `${sessionId}.meta.json`);
+    const metaPath = join10(projectDir, `${sessionId}.meta.json`);
     const { bridgeIds, role, channel: sidecarChannel, personId, adminUserId, accountId: rowAccountId } = readSidecarMeta(metaPath);
     if (isReaderChannelSession(role, sidecarChannel)) {
       excludedChannelCount += 1;
@@ -7233,7 +7258,7 @@ var sidebar_sessions_default = app3;
 // app/lib/admin-identity/pin-validator.ts
 import { createHash } from "crypto";
 import { existsSync as existsSync6, readFileSync as readFileSync11, readdirSync as readdirSync5, statSync as statSync3 } from "fs";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 function hashPin(pin) {
   return createHash("sha256").update(pin).digest("hex");
 }
@@ -7315,6 +7340,11 @@ var CHANNEL_REPLY_DOCUMENT_TOOL = "mcp__channel__reply-document";
 var SEND_USER_FILE_TOOL = "SendUserFile";
 var CLI_MARKER_PREFIXES2 = ["<local-command-", "<command-name>", "<command-message>"];
 var HARNESS_LIFECYCLE_PREFIXES = ["<task-notification>"];
+var CC_IMAGE_VISION_HINT = /^\[Image:[^\]]*Multiply coordinates by [\d.]+ to map to original image\.\]$/;
+var COMPACT_SUMMARY_PREFIX = "This session is being continued from a previous conversation that ran out of context.";
+function isCompactSummaryRow(row, content) {
+  return row.isCompactSummary === true || content !== null && content.startsWith(COMPACT_SUMMARY_PREFIX);
+}
 var CHANNEL_WRAPPER2 = /^<channel\b([^>]*)>\n?([\s\S]*?)\n?<\/channel>$/;
 var SOURCE_ATTR2 = /\bsource="([^"]+)"/;
 var SOURCE_MAP = {
@@ -7490,6 +7520,10 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
       continue;
     }
     if (row.type !== "user" || !msg) continue;
+    if (isCompactSummaryRow(row, asString(msg.content))) {
+      out.push({ kind: "session-continued", ts });
+      continue;
+    }
     if (Array.isArray(msg.content)) {
       out.push(...toolResultTurns(msg.content, ts));
       continue;
@@ -7498,6 +7532,7 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
     if (text === null) continue;
     if (CLI_MARKER_PREFIXES2.some((p) => text.startsWith(p))) continue;
     if (HARNESS_LIFECYCLE_PREFIXES.some((p) => text.startsWith(p))) continue;
+    if (CC_IMAGE_VISION_HINT.test(text)) continue;
     const isChannel = row.isMeta === true && typeof row.origin === "object" && row.origin !== null && row.origin.kind === "channel" || // Native Claude Code channels (maxy-lite) journal the delivery twin as a PLAIN
     // `type:"user"` row whose content is the `<channel source="…">` wrapper, with no
     // `isMeta`/`origin` stamp. Detect it by the wrapper so it is treated as the
@@ -7517,7 +7552,7 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
 
 // app/lib/whatsapp-reader/enrich-attachments.ts
 import { readFileSync as readFileSync12, readdirSync as readdirSync6 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 var ADMIN_UPLOAD_PATH = /\/uploads\/(?!public\/)([0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12})\//gi;
 function adminAttachmentIds(text) {
   const ids = [];
@@ -7530,7 +7565,7 @@ function adminAttachmentIds(text) {
 function adminAttachmentsFromText(text, uploadsBase) {
   const out = [];
   for (const id of adminAttachmentIds(text)) {
-    const meta = readAttachmentMeta(join11(uploadsBase, id));
+    const meta = readAttachmentMeta(join12(uploadsBase, id));
     if (meta) out.push(meta);
   }
   return out;
@@ -7538,7 +7573,7 @@ function adminAttachmentsFromText(text, uploadsBase) {
 function readSidecar(dir, attachmentId) {
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync12(join11(dir, `${attachmentId}.meta.json`), "utf8"));
+    parsed = JSON.parse(readFileSync12(join12(dir, `${attachmentId}.meta.json`), "utf8"));
   } catch {
     return null;
   }
@@ -7567,7 +7602,7 @@ function listSessionAttachmentsInDir(dir) {
   }
   const sidecars = [];
   for (const name of entries) {
-    const sidecar = readSidecar(join11(dir, name), name);
+    const sidecar = readSidecar(join12(dir, name), name);
     if (sidecar) sidecars.push(sidecar);
   }
   sidecars.sort((a, b) => a.storedAt.localeCompare(b.storedAt));
@@ -7612,13 +7647,13 @@ var app4 = new Hono();
 app4.get("/conversations", requireAdminSession, async (c) => {
   const cfg = claudeConfigDir();
   if (!cfg) return c.json({ conversations: [] });
-  const projectsRoot = join12(cfg, "projects");
+  const projectsRoot = join13(cfg, "projects");
   const userTitles = loadUserTitles(ACCOUNTS_DIR ?? null);
   const rows = [];
   for (const { path: path2 } of enumerateJsonls(projectsRoot)) {
-    const sessionId = basename2(path2).replace(/\.jsonl$/, "");
-    const projectDir = dirname(path2);
-    const meta = readSidecarMeta(join12(projectDir, `${sessionId}.meta.json`));
+    const sessionId = basename4(path2).replace(/\.jsonl$/, "");
+    const projectDir = dirname2(path2);
+    const meta = readSidecarMeta(join13(projectDir, `${sessionId}.meta.json`));
     if (!isReaderChannelSession(meta.role, meta.channel)) continue;
     let body = "";
     try {
@@ -7706,11 +7741,30 @@ function resumeOffset(lastEventId, fileEnd) {
   if (!Number.isFinite(n) || n < 0) return 0;
   return Math.min(n, fileEnd);
 }
-function enrichDownloads(turn) {
+function enrichDownloads(turn, scratchpadRoot) {
   if (turn.kind !== "agent-file") return turn;
+  let scratchpadReal = null;
+  try {
+    scratchpadReal = realpathSync4(scratchpadRoot);
+  } catch {
+    scratchpadReal = null;
+  }
   const downloads = turn.files.map((f) => {
-    const rel = relative2(DATA_ROOT, f);
-    return !rel || rel.startsWith("..") || isAbsolute(rel) ? null : rel;
+    const dataRel = relative2(DATA_ROOT, f);
+    if (dataRel && !dataRel.startsWith("..") && !isAbsolute(dataRel)) {
+      return { root: "data", path: dataRel };
+    }
+    if (scratchpadReal) {
+      try {
+        const fileReal = realpathSync4(f);
+        if (fileReal === scratchpadReal || fileReal.startsWith(scratchpadReal + sep3)) {
+          return { root: "scratchpad", path: relative2(scratchpadReal, fileReal) };
+        }
+      } catch {
+      }
+    }
+    console.error(`[data] op=agent-file-unmapped path="${f}"`);
+    return null;
   });
   return { ...turn, downloads };
 }
@@ -7755,7 +7809,7 @@ function openTaskKey(turns) {
 }
 function readSubagentMeta(dir, hex) {
   try {
-    const m = JSON.parse(readFileSync13(join12(dir, `agent-${hex}.meta.json`), "utf8"));
+    const m = JSON.parse(readFileSync13(join13(dir, `agent-${hex}.meta.json`), "utf8"));
     if (typeof m.agentType === "string" && typeof m.description === "string" && typeof m.toolUseId === "string") {
       return { agentType: m.agentType, description: m.description, toolUseId: m.toolUseId };
     }
@@ -7787,7 +7841,7 @@ function runActivityTick(c) {
     let size = 0;
     let mtimeMs = 0;
     try {
-      const st = statSync4(join12(c.subagentsDir, name));
+      const st = statSync4(join13(c.subagentsDir, name));
       size = st.size;
       mtimeMs = st.mtimeMs;
     } catch {
@@ -7832,14 +7886,15 @@ app4.get("/stream", requireAdminSession, (c) => {
   const sessionId = c.req.query("sessionId") ?? "";
   const projectDir = c.req.query("projectDir") ?? "";
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve11(join12(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve11(join13(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve11(join12(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve11(join13(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep3)) {
     return c.json({ error: "bad session reference" }, 400);
   }
+  const scratchpadRoot = sessionScratchpadRoot(projectDir, sessionId);
   const encoder = new TextEncoder();
   const send = (controller, turn, id) => controller.enqueue(encoder.encode(`id: ${id}
 data: ${JSON.stringify(turn)}
@@ -7860,7 +7915,7 @@ data: ${JSON.stringify(turn)}
       let offset = resumeOffset(lastEventId, fileEnd0);
       console.log(`[wa-stream] op=open conn=${connId} sessionId=${sessionId} channel=reader resume=${offset}`);
       const sessionKey = c.req.query("session_key") ?? "";
-      const subagentsDir = resolve11(join12(projectDir, sessionId, "subagents"));
+      const subagentsDir = resolve11(join13(projectDir, sessionId, "subagents"));
       console.log(
         `[webchat-activity] op=watch-subagents key=${sessionKey} dir=${subagentsDir} exists=${existsSync7(subagentsDir)}`
       );
@@ -7887,7 +7942,7 @@ data: ${JSON.stringify(obj)}
           offset = nextOffset;
           let n = 0;
           for (const turn of parseTranscript(lines, queuedPendingSuppress)) {
-            send(controller, enrichAdminAttachments(enrichDownloads(turn)), offset);
+            send(controller, enrichAdminAttachments(enrichDownloads(turn, scratchpadRoot)), offset);
             actx.lastParentTurns.push(turn);
             if (turn.kind === "agent-error") {
               console.log(`[wa-stream] op=agent-error conn=${connId} sessionId=${sessionId} code=${turn.code} source=jsonl`);
@@ -7907,7 +7962,7 @@ data: ${JSON.stringify(obj)}
           offset = end;
           let n = 0;
           for (const turn of parseTranscript(buf.toString("utf8").split("\n"), queuedPendingSuppress)) {
-            send(controller, enrichAdminAttachments(enrichDownloads(turn)), offset);
+            send(controller, enrichAdminAttachments(enrichDownloads(turn, scratchpadRoot)), offset);
             actx.lastParentTurns.push(turn);
             if (turn.kind === "agent-error") {
               console.log(`[wa-stream] op=agent-error conn=${connId} sessionId=${sessionId} code=${turn.code} source=jsonl`);
@@ -7981,7 +8036,7 @@ app4.get("/directives", requireAdminSession, (c) => {
     const pid = Number(pidPart);
     let len = 0;
     try {
-      len = statSync4(join12(dir, name)).size;
+      len = statSync4(join13(dir, name)).size;
     } catch {
     }
     return { name, secs, pid, ts: Number.isFinite(secs) ? new Date(secs * 1e3).toISOString() : null, len };
@@ -7996,7 +8051,7 @@ app4.get("/directive", requireAdminSession, (c) => {
   }
   const dir = directiveStoreDir(sessionId);
   if (!dir) return c.json({ error: "no account" }, 404);
-  const path2 = resolve11(join12(dir, name));
+  const path2 = resolve11(join13(dir, name));
   if (!path2.startsWith(dir + sep3)) return c.json({ error: "bad reference" }, 400);
   let body;
   try {
@@ -8010,7 +8065,7 @@ var whatsapp_reader_default = app4;
 
 // server/routes/public-reader.ts
 import { statSync as statSync5, openSync as openSync2, readSync as readSync2, closeSync as closeSync2, watch as watch2, readFileSync as readFileSync14, readdirSync as readdirSync8 } from "fs";
-import { basename as basename3, dirname as dirname2, join as join13, resolve as resolve12, sep as sep4 } from "path";
+import { basename as basename5, dirname as dirname3, join as join14, resolve as resolve12, sep as sep4 } from "path";
 
 // app/lib/whatsapp-reader/delivered-kinds.ts
 var PUBLIC_DELIVERED_KINDS = /* @__PURE__ */ new Set([
@@ -8084,10 +8139,10 @@ function enumeratePublicRows() {
   const cfg = claudeConfigDir();
   if (!cfg) return [];
   const rows = [];
-  for (const { path: path2 } of enumerateJsonls(join13(cfg, "projects"))) {
-    const sessionId = basename3(path2).replace(/\.jsonl$/, "");
-    const projectDir = dirname2(path2);
-    const meta = readSidecarMeta(join13(projectDir, `${sessionId}.meta.json`));
+  for (const { path: path2 } of enumerateJsonls(join14(cfg, "projects"))) {
+    const sessionId = basename5(path2).replace(/\.jsonl$/, "");
+    const projectDir = dirname3(path2);
+    const meta = readSidecarMeta(join14(projectDir, `${sessionId}.meta.json`));
     rows.push({
       sessionId,
       projectDir,
@@ -8163,15 +8218,15 @@ app5.get("/stream", (c) => {
   const sessionId = c.req.query("sessionId") ?? "";
   const projectDir = c.req.query("projectDir") ?? "";
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve12(join13(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve12(join14(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve12(join13(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve12(join14(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep4)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const meta = readSidecarMeta(join13(projectDir, `${sessionId}.meta.json`));
+  const meta = readSidecarMeta(join14(projectDir, `${sessionId}.meta.json`));
   const isPublicWebchat = meta.role === "public" && meta.channel === "webchat";
   const owns = visitor.kind === "person" ? meta.personId === visitor.personId : meta.personId === null && meta.visitorId === visitor.visitorId;
   if (!(isPublicWebchat && owns)) {
@@ -8304,17 +8359,17 @@ app5.get("/attachment/:attachmentId", (c) => {
 var public_reader_default = app5;
 
 // server/routes/webchat.ts
-import { basename as basename4, dirname as dirname3 } from "path";
-import { join as join16 } from "path";
+import { basename as basename6, dirname as dirname4 } from "path";
+import { join as join17 } from "path";
 import { existsSync as existsSync9, readdirSync as readdirSync10, readFileSync as readFileSync17, renameSync as renameSync3, statSync as statSync6, writeFileSync as writeFileSync7 } from "fs";
 
 // server/canonical-webchat-override.ts
 import { readFileSync as readFileSync15, writeFileSync as writeFileSync5, renameSync } from "fs";
-import { join as join14 } from "path";
+import { join as join15 } from "path";
 var FILE = "canonical-webchat-session.json";
 var UUID = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 function canonicalOverridePath(accountDir) {
-  return join14(accountDir, FILE);
+  return join15(accountDir, FILE);
 }
 function readRaw(accountDir) {
   try {
@@ -8406,7 +8461,7 @@ function isNewSessionEffortLevel(value) {
 
 // ../services/claude-session-manager/src/sidecar-store.ts
 import { existsSync as existsSync8, mkdirSync as mkdirSync2, readdirSync as readdirSync9, readFileSync as readFileSync16, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync6 } from "fs";
-import { join as join15 } from "path";
+import { join as join16 } from "path";
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -8414,7 +8469,7 @@ function createSidecarStore(config) {
   const { suffix, validate: validate2 } = config;
   const suffixRe = new RegExp(`${escapeRegExp(suffix)}$`);
   function pathFor(sessionsDir, id) {
-    return join15(sessionsDir, `${id}${suffix}`);
+    return join16(sessionsDir, `${id}${suffix}`);
   }
   function write(sessionsDir, id, record) {
     mkdirSync2(sessionsDir, { recursive: true });
@@ -8458,7 +8513,7 @@ function createSidecarStore(config) {
     const out = [];
     for (const name of names) {
       if (!suffixRe.test(name)) continue;
-      const path2 = join15(sessionsDir, name);
+      const path2 = join16(sessionsDir, name);
       let raw;
       try {
         raw = readFileSync16(path2, "utf8");
@@ -8533,21 +8588,15 @@ function resolveBridgeSource(sessionsDir, forkSessionId, jsonlExists, maxDepth =
 var WEBCHAT_ADMIN_KEY = "webchat-admin";
 var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
 function locateSession(sessionId) {
-  const cfg = claudeConfigDir();
-  if (!cfg) return { projectDir: null, channel: null };
-  for (const { path: path2 } of enumerateJsonls(join16(cfg, "projects"))) {
-    if (basename4(path2) === `${sessionId}.jsonl`) {
-      const dir = dirname3(path2);
-      const meta = readSidecarMeta(join16(dir, `${sessionId}.meta.json`));
-      return { projectDir: dir, channel: meta.channel };
-    }
-  }
-  return { projectDir: null, channel: null };
+  const dir = findSessionProjectDir(sessionId);
+  if (!dir) return { projectDir: null, channel: null };
+  const meta = readSidecarMeta(join17(dir, `${sessionId}.meta.json`));
+  return { projectDir: dir, channel: meta.channel };
 }
 function locateSidecar(sessionId) {
   const cfg = claudeConfigDir();
   if (!cfg) return null;
-  const projectsRoot = join16(cfg, "projects");
+  const projectsRoot = join17(cfg, "projects");
   let slugs;
   try {
     slugs = readdirSync10(projectsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
@@ -8555,7 +8604,7 @@ function locateSidecar(sessionId) {
     return null;
   }
   for (const slug of slugs) {
-    const metaPath = join16(projectsRoot, slug, `${sessionId}.meta.json`);
+    const metaPath = join17(projectsRoot, slug, `${sessionId}.meta.json`);
     if (existsSync9(metaPath)) {
       const meta = readSidecarMeta(metaPath);
       return { channel: meta.channel, adminUserId: meta.adminUserId };
@@ -8568,7 +8617,7 @@ function readTargetOwner(sessionId) {
   if (sidecar !== null) return { found: true, owner: sidecar.adminUserId };
   const { projectDir } = locateSession(sessionId);
   if (projectDir !== null) {
-    return { found: true, owner: readSidecarMeta(join16(projectDir, `${sessionId}.meta.json`)).adminUserId };
+    return { found: true, owner: readSidecarMeta(join17(projectDir, `${sessionId}.meta.json`)).adminUserId };
   }
   return { found: false, owner: null };
 }
@@ -8582,7 +8631,7 @@ function sessionSidecarExists(sessionId) {
 function jsonlSizeBytes(projectDir, sessionId) {
   if (projectDir === null) return null;
   try {
-    return statSync6(join16(projectDir, `${sessionId}.jsonl`)).size;
+    return statSync6(join17(projectDir, `${sessionId}.jsonl`)).size;
   } catch {
     return null;
   }
@@ -8717,10 +8766,10 @@ function latestAdminWebchatSessionId(requesterUserId, primaryUserId) {
   const cfg = claudeConfigDir();
   if (!cfg) return null;
   let best = null;
-  for (const { path: path2, isSubagent, archived } of enumerateJsonls(join16(cfg, "projects"))) {
+  for (const { path: path2, isSubagent, archived } of enumerateJsonls(join17(cfg, "projects"))) {
     if (isSubagent || archived) continue;
-    const id = basename4(path2).slice(0, -".jsonl".length);
-    const meta = readSidecarMeta(join16(dirname3(path2), `${id}.meta.json`));
+    const id = basename6(path2).slice(0, -".jsonl".length);
+    const meta = readSidecarMeta(join17(dirname4(path2), `${id}.meta.json`));
     if (meta.role !== "admin" || meta.channel !== "webchat") continue;
     let mtimeMs;
     try {
@@ -8742,7 +8791,7 @@ function latestAdminWebchatSessionId(requesterUserId, primaryUserId) {
 function overrideKnownNonArchived(id) {
   const { projectDir } = locateSession(id);
   if (projectDir === null) return sessionSidecarExists(id);
-  return basename4(projectDir) !== "archive";
+  return basename6(projectDir) !== "archive";
 }
 function resolveCanonical(accountId, accountDir, requesterUserId, primaryUserId) {
   if (requesterUserId === null) {
@@ -9015,7 +9064,7 @@ ${note}` : note;
       console.error(`[webchat:settings] op=${op} outcome=refused value=${value} reason=account-unresolved`);
       return c.json({ error: "account unresolved" }, 503);
     }
-    const accountJsonPath = join16(account.accountDir, "account.json");
+    const accountJsonPath = join17(account.accountDir, "account.json");
     try {
       const parsed = JSON.parse(readFileSync17(accountJsonPath, "utf8"));
       if (op === "model") parsed.adminModel = value;
@@ -9061,7 +9110,7 @@ ${note}` : note;
         const cfg2 = claudeConfigDir();
         if (cfg2) {
           const source2 = resolveBridgeSource(
-            join16(cfg2, "sessions"),
+            join17(cfg2, "sessions"),
             target,
             (id) => locateSession(id).projectDir !== null
           );
@@ -9093,15 +9142,15 @@ ${note}` : note;
     const cfg = claudeConfigDir();
     let projectDir = null;
     if (cfg) {
-      for (const { path: path2 } of enumerateJsonls(join16(cfg, "projects"))) {
-        if (basename4(path2) === `${sessionId}.jsonl`) {
-          projectDir = dirname3(path2);
+      for (const { path: path2 } of enumerateJsonls(join17(cfg, "projects"))) {
+        if (basename6(path2) === `${sessionId}.jsonl`) {
+          projectDir = dirname4(path2);
           break;
         }
       }
     }
     if (source === "latest" && requesterUserId !== null) {
-      const owner = readSidecarMeta(join16(projectDir ?? "", `${sessionId}.meta.json`)).adminUserId;
+      const owner = readSidecarMeta(join17(projectDir ?? "", `${sessionId}.meta.json`)).adminUserId;
       if (owner !== null && owner !== requesterUserId && requesterUserId !== primaryUserId) {
         console.error(`[webchat:inbound] op=session-resolve-foreign key=${sessionId.slice(0, 8)} owner=${owner.slice(0, 8)} requester=${requesterUserId.slice(0, 8)}`);
       }
@@ -9134,7 +9183,7 @@ import { resolve as resolve13 } from "path";
 
 // app/lib/claude-agent/specialist-roster.ts
 import { existsSync as existsSync10, readFileSync as readFileSync18, readdirSync as readdirSync11 } from "fs";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 function field(fm, name) {
   const m = fm.match(new RegExp(`^${name}:\\s*(.*?)\\r?$`, "m"));
   if (!m) return null;
@@ -9153,7 +9202,7 @@ function readSpecialistRoster(specialistsDir) {
     if (!file.endsWith(".md")) continue;
     let raw;
     try {
-      raw = readFileSync18(join17(specialistsDir, file), "utf-8");
+      raw = readFileSync18(join18(specialistsDir, file), "utf-8");
     } catch (err) {
       skipped.push({ file, reason: err instanceof Error ? err.message : String(err) });
       continue;
@@ -9270,7 +9319,7 @@ var webchat_greeting_default = app6;
 
 // server/routes/telegram.ts
 import { homedir } from "os";
-import { resolve as resolve14, join as join18 } from "path";
+import { resolve as resolve14, join as join19 } from "path";
 import { existsSync as existsSync11, readFileSync as readFileSync19 } from "fs";
 
 // app/lib/telegram/gateway/instance.ts
@@ -9330,7 +9379,7 @@ function routeTelegramUpdate(input) {
 var TAG22 = "[telegram-inbound]";
 function configDirName() {
   const platformRoot3 = process.env.MAXY_PLATFORM_ROOT ?? resolve14(process.cwd(), "..");
-  const brandPath = join18(platformRoot3, "config", "brand.json");
+  const brandPath = join19(platformRoot3, "config", "brand.json");
   if (existsSync11(brandPath)) {
     try {
       return JSON.parse(readFileSync19(brandPath, "utf-8")).configDir ?? ".maxy";
@@ -9432,16 +9481,16 @@ app7.post("/", async (c) => {
 var telegram_default = app7;
 
 // server/routes/quickbooks.ts
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 import { existsSync as existsSync12, readFileSync as readFileSync20, writeFileSync as writeFileSync8, mkdirSync as mkdirSync3, rmSync, renameSync as renameSync4 } from "fs";
 var TAG23 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
 function pendingPath(accountDir, state) {
-  return join19(accountDir, "secrets", "quickbooks-pending", `${state}.json`);
+  return join20(accountDir, "secrets", "quickbooks-pending", `${state}.json`);
 }
 function storePath(accountDir) {
-  return join19(accountDir, "secrets", "quickbooks.json");
+  return join20(accountDir, "secrets", "quickbooks.json");
 }
 async function completeConsent(args) {
   const { accountDir, code, realmId } = args;
@@ -9508,7 +9557,7 @@ async function completeConsent(args) {
       refreshTokenExpiry: now + (body.x_refresh_token_expires_in ?? 864e4) * 1e3,
       lastRefresh: now
     };
-    mkdirSync3(join19(accountDir, "secrets"), { recursive: true });
+    mkdirSync3(join20(accountDir, "secrets"), { recursive: true });
     writeFileSync8(storePath(accountDir), JSON.stringify(store2, null, 2), { mode: 384 });
     const persisted = JSON.parse(readFileSync20(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
     console.error(`${TAG23} op=token-exchange realmId=${realmId} persisted=${persisted}`);
@@ -9546,7 +9595,7 @@ import { createHash as createHash3, randomUUID as randomUUID7 } from "crypto";
 
 // ../lib/admins-write/src/index.ts
 import { existsSync as existsSync13, readFileSync as readFileSync21, writeFileSync as writeFileSync9, renameSync as renameSync5, mkdirSync as mkdirSync4, readdirSync as readdirSync12, statSync as statSync7, appendFileSync } from "fs";
-import { dirname as dirname4, join as join20 } from "path";
+import { dirname as dirname5, join as join21 } from "path";
 function id8(value) {
   return value.slice(0, 8);
 }
@@ -9559,7 +9608,7 @@ function appendUsersAuditLine(audit, fields) {
   const line = `[users-audit] action=${fields.action} actor=${actor}${sess} field=${fields.field} rowsBefore=${fields.rowsBefore} rowsAfter=${fields.rowsAfter} ts=${(/* @__PURE__ */ new Date()).toISOString()}
 `;
   try {
-    mkdirSync4(dirname4(audit.logFile), { recursive: true, mode: 448 });
+    mkdirSync4(dirname5(audit.logFile), { recursive: true, mode: 448 });
     appendFileSync(audit.logFile, line, { mode: 384 });
   } catch (err) {
     console.error(
@@ -9577,7 +9626,7 @@ function logLine(input, result) {
   );
 }
 function writeFileAtomic(filePath, contents, mode) {
-  mkdirSync4(dirname4(filePath), { recursive: true });
+  mkdirSync4(dirname5(filePath), { recursive: true });
   const tempPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
   writeFileSync9(tempPath, contents, mode !== void 0 ? { mode } : void 0);
   renameSync5(tempPath, filePath);
@@ -9618,7 +9667,7 @@ function writeAdminEntry(input) {
     return result;
   }
   try {
-    const accountJsonPath = join20(input.accountDir, "account.json");
+    const accountJsonPath = join21(input.accountDir, "account.json");
     if (!existsSync13(accountJsonPath)) {
       throw new Error(`account.json not found at ${accountJsonPath}`);
     }
@@ -9666,13 +9715,13 @@ function computeAdminStoreDivergence(input) {
     }
     for (const entry of entries) {
       if (entry.startsWith(".")) continue;
-      const accountDir = join20(input.accountsDir, entry);
+      const accountDir = join21(input.accountsDir, entry);
       try {
         if (!statSync7(accountDir).isDirectory()) continue;
       } catch {
         continue;
       }
-      const accountJsonPath = join20(accountDir, "account.json");
+      const accountJsonPath = join21(accountDir, "account.json");
       if (!existsSync13(accountJsonPath)) continue;
       let admins = [];
       try {
@@ -10069,8 +10118,8 @@ var onboarding_default = app9;
 
 // server/routes/client-error.ts
 import { appendFileSync as appendFileSync2, existsSync as existsSync15, renameSync as renameSync6, statSync as statSync8 } from "fs";
-import { join as join21 } from "path";
-var CLIENT_ERRORS_LOG = join21(LOG_DIR, "client-errors.log");
+import { join as join22 } from "path";
+var CLIENT_ERRORS_LOG = join22(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
 var MAX_BODY_SIZE = 8 * 1024;
 var MAX_STACK_LEN = 2e3;
@@ -10400,16 +10449,16 @@ var session_default = app11;
 
 // server/routes/admin/logs.ts
 import { existsSync as existsSync17, readdirSync as readdirSync13, readFileSync as readFileSync23, statSync as statSync9 } from "fs";
-import { resolve as resolve15, basename as basename5 } from "path";
+import { resolve as resolve15, basename as basename7 } from "path";
 
 // app/lib/logs-read-resolve.ts
 import { existsSync as existsSync16 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 function resolveSessionLogPaths(filename, logDirs) {
   const tried = [filename];
   const hits = [];
   for (const dir of logDirs) {
-    const fullPath = join22(dir, filename);
+    const fullPath = join23(dir, filename);
     if (existsSync16(fullPath)) {
       hits.push({ path: fullPath, dir });
     }
@@ -10432,7 +10481,7 @@ app12.get("/", async (c) => {
   if (accountLogDir) logDirs.push(accountLogDir);
   logDirs.push(LOG_DIR);
   if (fileParam) {
-    const safe = basename5(fileParam);
+    const safe = basename7(fileParam);
     const searched = [];
     for (const dir of logDirs) {
       const filePath = resolve15(dir, safe);
@@ -10502,7 +10551,7 @@ app12.get("/", async (c) => {
     if (hit) {
       console.info(`[admin/logs] resolved cacheKey=${cacheKeySlice} sessionId=${sessionIdSlice} via=${primaryId === cacheKey ? "cacheKey" : primaryId === sessionKeyFromConv ? "reverse-lookup" : "sessionId-fallback"}`);
       try {
-        const filename = basename5(hit.path);
+        const filename = basename7(hit.path);
         const buffer = readFileSync23(hit.path);
         const onDiskBytes = statSync9(hit.path).size;
         const headers = {
@@ -11411,7 +11460,7 @@ var sessions_default = app16;
 
 // app/lib/claude-agent/spawn-context.ts
 import { existsSync as existsSync21, readFileSync as readFileSync25, readdirSync as readdirSync15, statSync as statSync10 } from "fs";
-import { dirname as dirname5, resolve as resolve18, join as join23 } from "path";
+import { dirname as dirname6, resolve as resolve18, join as join24 } from "path";
 async function resolveOwnerProfileBlock(accountId, userId) {
   if (!userId) return { ok: false, reason: "missing-user-id" };
   try {
@@ -11452,8 +11501,8 @@ function frontmatterField(manifest, field2) {
 function extractPluginToolDescriptions(pluginDir) {
   const out = /* @__PURE__ */ new Map();
   const candidates = [
-    join23(pluginDir, "mcp/dist/index.js"),
-    join23(pluginDir, "mcp/src/index.ts")
+    join24(pluginDir, "mcp/dist/index.js"),
+    join24(pluginDir, "mcp/src/index.ts")
   ];
   let raw = null;
   for (const path2 of candidates) {
@@ -11511,21 +11560,21 @@ function listPluginDirs() {
   const platformPlugins = resolve18(PLATFORM_ROOT, "plugins");
   if (existsSync21(platformPlugins)) {
     for (const name of readdirSync15(platformPlugins)) {
-      const dir = join23(platformPlugins, name);
+      const dir = join24(platformPlugins, name);
       try {
         if (statSync10(dir).isDirectory()) out.set(name, dir);
       } catch {
       }
     }
   }
-  const premiumRoot = resolve18(dirname5(PLATFORM_ROOT), "premium-plugins");
+  const premiumRoot = resolve18(dirname6(PLATFORM_ROOT), "premium-plugins");
   if (existsSync21(premiumRoot)) {
     for (const bundle of readdirSync15(premiumRoot)) {
-      const bundlePlugins = join23(premiumRoot, bundle, "plugins");
+      const bundlePlugins = join24(premiumRoot, bundle, "plugins");
       if (!existsSync21(bundlePlugins)) continue;
       try {
         for (const name of readdirSync15(bundlePlugins)) {
-          const dir = join23(bundlePlugins, name);
+          const dir = join24(bundlePlugins, name);
           try {
             if (statSync10(dir).isDirectory()) out.set(name, dir);
           } catch {
@@ -11568,7 +11617,7 @@ function computeActivePlugins(accountId) {
   for (const name of Array.from(enabled).sort()) {
     const dir = pluginDirs.get(name);
     if (!dir) continue;
-    const fm = readFrontmatter(join23(dir, "PLUGIN.md"));
+    const fm = readFrontmatter(join24(dir, "PLUGIN.md"));
     if (!fm) continue;
     const description = frontmatterField(`---
 ${fm}
@@ -11585,7 +11634,7 @@ ${fm}
       `plugin-manifest-tool-coverage plugin=${name} tools=${tools.length} with-desc=${withDesc}`
     );
     if (toolNames.length > 0 && descMap.size === 0) {
-      const hasSource = existsSync21(join23(dir, "mcp/dist/index.js")) || existsSync21(join23(dir, "mcp/src/index.ts"));
+      const hasSource = existsSync21(join24(dir, "mcp/dist/index.js")) || existsSync21(join24(dir, "mcp/src/index.ts"));
       if (hasSource) {
         console.warn(
           `[spawn-context] WARN plugin=${name} mcp source present but tool-description regex matched zero entries \u2014 SDK upgrade may have changed the registration shape`
@@ -11595,7 +11644,7 @@ ${fm}
     const skillPaths = parseSkillPathsFromFrontmatter(fm);
     const skills = [];
     for (const relPath of skillPaths) {
-      const skillPath = join23(dir, relPath);
+      const skillPath = join24(dir, relPath);
       const skillFm = readFrontmatter(skillPath);
       if (!skillFm) continue;
       const skillName = frontmatterField(`---
@@ -11639,7 +11688,7 @@ function computeSpecialistDomains(accountId) {
   const out = [];
   for (const file of entries.sort()) {
     if (!file.endsWith(".md")) continue;
-    const fm = readFrontmatter(join23(specialistsDir, file));
+    const fm = readFrontmatter(join24(specialistsDir, file));
     if (!fm) continue;
     const wrapped = `---
 ${fm}
@@ -11965,9 +12014,9 @@ var events_default = app19;
 // server/routes/admin/files.ts
 import { createReadStream as createReadStream2, createWriteStream as createWriteStream2, existsSync as existsSync23 } from "fs";
 import { readdir as readdir3, readFile as readFile4, stat as stat4, mkdir as mkdir3, unlink as unlink2, rename } from "fs/promises";
-import { realpathSync as realpathSync4 } from "fs";
+import { realpathSync as realpathSync5 } from "fs";
 import { randomUUID as randomUUID9 } from "crypto";
-import { basename as basename7, dirname as dirname6, join as join25, relative as relative4, resolve as resolve21, sep as sep6 } from "path";
+import { basename as basename9, dirname as dirname7, join as join26, relative as relative4, resolve as resolve21, sep as sep6 } from "path";
 import { Readable as Readable2 } from "stream";
 
 // ../lib/graph-trash/src/index.ts
@@ -12285,7 +12334,7 @@ async function cascadeDeleteDocument(params) {
 
 // app/lib/file-index.ts
 import * as fsp from "fs/promises";
-import { resolve as resolve20, relative as relative3, join as join24, basename as basename6, extname as extname2, sep as sep5 } from "path";
+import { resolve as resolve20, relative as relative3, join as join25, basename as basename8, extname as extname2, sep as sep5 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
@@ -12367,7 +12416,7 @@ async function extractPdf(absolute) {
   return stdout.trim();
 }
 async function ocrPdf(absolute) {
-  const outPdf = join24(tmpdir2(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
+  const outPdf = join25(tmpdir2(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
   try {
     await execFileAsync2(
       "ocrmypdf",
@@ -12423,13 +12472,13 @@ async function extractFileContent(absolute) {
   }
 }
 async function readDisplayName(absolute) {
-  const dir = absolute.slice(0, absolute.length - basename6(absolute).length);
-  const base = basename6(absolute);
+  const dir = absolute.slice(0, absolute.length - basename8(absolute).length);
+  const base = basename8(absolute);
   const dot = base.lastIndexOf(".");
   const stem = dot === -1 ? base : base.slice(0, dot);
   if (base === `${stem}.meta.json`) return null;
   try {
-    const raw = await fsp.readFile(join24(dir, `${stem}.meta.json`), "utf-8");
+    const raw = await fsp.readFile(join25(dir, `${stem}.meta.json`), "utf-8");
     const meta = JSON.parse(raw);
     const dn = meta.displayName ?? meta.filename;
     return typeof dn === "string" && dn.length > 0 ? dn : null;
@@ -12450,7 +12499,7 @@ async function walkSubtree(root, dataRoot, out) {
   for (const entry of entries) {
     if (entry.isSymbolicLink()) continue;
     if (entry.isDirectory() && entry.name === ".uploads-tmp") continue;
-    const abs = join24(root, entry.name);
+    const abs = join25(root, entry.name);
     if (entry.isDirectory()) {
       const sub = await walkSubtree(abs, dataRoot, out);
       if (!sub.clean) clean = false;
@@ -12562,7 +12611,7 @@ async function cascadeTrashLinkedKnowledgeDocs(session, accountId, relativePaths
   return { kds, sections, chunks };
 }
 async function buildArtifact(accountId, wf, embed2) {
-  const name = basename6(wf.absolute);
+  const name = basename8(wf.absolute);
   const { content, route } = await extractFileContent(wf.absolute);
   const displayName = await readDisplayName(wf.absolute);
   const embedInput = `${name}
@@ -12806,7 +12855,7 @@ var UPLOAD_TMP_DIR = ".uploads-tmp";
 var UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta(absDir, baseName) {
   try {
-    const raw = await readFile4(join25(absDir, `${baseName}.meta.json`), "utf8");
+    const raw = await readFile4(join26(absDir, `${baseName}.meta.json`), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.filename === "string") {
       return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
@@ -12844,7 +12893,7 @@ async function readAccountNames() {
 }
 async function enrich(absolute, entry, accountNames) {
   if (entry.kind === "directory" && UUID_RE3.test(entry.name)) {
-    const meta = await readMeta(join25(absolute, entry.name), entry.name);
+    const meta = await readMeta(join26(absolute, entry.name), entry.name);
     if (meta?.filename) {
       entry.displayName = meta.filename;
       entry.mimeType = meta.mimeType;
@@ -13008,7 +13057,7 @@ app20.get("/", requireAdminSession, async (c) => {
       const childRel = relPath === "" || relPath === "." ? name : `${relPath}/${name}`;
       const protectedEntry = isProtectedFromDeletion(childRel).protected;
       try {
-        const entryPath = join25(absolute, name);
+        const entryPath = join26(absolute, name);
         const s = await stat4(entryPath);
         entries.push({
           name,
@@ -13048,11 +13097,27 @@ app20.get("/download", requireAdminSession, async (c) => {
   const rawPath = c.req.query("path") ?? "";
   if (!rawPath) return c.json({ error: "path required" }, 400);
   const root = c.req.query("root") ?? "data";
-  if (root !== "data" && root !== "claude-uploads") {
+  if (root !== "data" && root !== "claude-uploads" && root !== "scratchpad") {
     return c.json({ error: "invalid root" }, 400);
   }
   const disposition = c.req.query("disposition") ?? "attachment";
-  const resolution = root === "claude-uploads" ? resolveClaudeUploadsPath(rawPath) : resolveDataPath(rawPath);
+  let scratchpadRoot = null;
+  if (root === "scratchpad") {
+    const sessionId = c.req.query("sessionId") ?? "";
+    if (!SESSION_ID_RE2.test(sessionId)) return c.json({ error: "bad session reference" }, 400);
+    const projectDir = findSessionProjectDir(sessionId);
+    if (!projectDir) {
+      console.error(`[data] op=scratchpad-no-session sessionId="${sessionId.slice(0, 8)}\u2026"`);
+      return c.json({ error: "Not found" }, 404);
+    }
+    const meta = readSidecarMeta(join26(projectDir, `${sessionId}.meta.json`));
+    if (!meta.accountId || meta.accountId !== accountId) {
+      console.error(`[data] account-scope-blocked root="scratchpad" sessionId="${sessionId.slice(0, 8)}\u2026" account=${accountId.slice(0, 8)}\u2026`);
+      return c.json({ error: "Not found" }, 404);
+    }
+    scratchpadRoot = sessionScratchpadRoot(projectDir, sessionId);
+  }
+  const resolution = root === "scratchpad" ? resolveScratchpadPath(rawPath, scratchpadRoot) : root === "claude-uploads" ? resolveClaudeUploadsPath(rawPath) : resolveDataPath(rawPath);
   if (!resolution.ok) {
     if (resolution.status === 403) {
       console.error(`[data] path-traversal-blocked root="${root}" requested="${rawPath}" resolved="${resolution.resolved ?? "n/a"}"`);
@@ -13067,7 +13132,7 @@ app20.get("/download", requireAdminSession, async (c) => {
       console.error(`[data] account-scope-blocked root="claude-uploads" attachmentId="${attachmentId.slice(0, 8)}\u2026" account=${accountId.slice(0, 8)}\u2026`);
       return c.json({ error: "Not found" }, 404);
     }
-  } else if (crossesForeignAccountPartition(relPath, accountId)) {
+  } else if (root === "data" && crossesForeignAccountPartition(relPath, accountId)) {
     console.error(`[data] account-scope-blocked endpoint="/api/admin/files/download" path="${relPath}" account=${accountId.slice(0, 8)}\u2026`);
     return c.json({ error: "Not found" }, 404);
   }
@@ -13076,7 +13141,7 @@ app20.get("/download", requireAdminSession, async (c) => {
     if (!info.isFile()) {
       return c.json({ error: "Path is not a file" }, 400);
     }
-    const filename = basename7(absolute);
+    const filename = basename9(absolute);
     const mimeType = detectMimeType(absolute);
     const nodeStream = createReadStream2(absolute);
     const webStream = Readable2.toWeb(nodeStream);
@@ -13132,7 +13197,7 @@ async function* walkRegularFiles(dirAbsolute) {
   const dirents = await readdir3(dirAbsolute, { withFileTypes: true });
   for (const d of dirents) {
     if (d.isSymbolicLink()) continue;
-    const child = join25(dirAbsolute, d.name);
+    const child = join26(dirAbsolute, d.name);
     if (d.isDirectory()) {
       yield* walkRegularFiles(child);
       continue;
@@ -13181,7 +13246,7 @@ app20.get("/download-zip", requireAdminSession, async (c) => {
       const info = await stat4(absolute);
       if (info.isDirectory()) {
         dirsWalked++;
-        const parentAbs = dirname6(absolute);
+        const parentAbs = dirname7(absolute);
         for await (const fileAbs of walkRegularFiles(absolute)) {
           const within = relative4(absolute, fileAbs).split(sep6).join("/");
           const fileRel = relPath === "" || relPath === "." ? within : `${relPath}/${within}`;
@@ -13192,7 +13257,7 @@ app20.get("/download-zip", requireAdminSession, async (c) => {
           if (over) return over;
         }
       } else if (info.isFile()) {
-        const over = await addFile(absolute, info.size, basename7(absolute));
+        const over = await addFile(absolute, info.size, basename9(absolute));
         if (over) return over;
       } else {
         return c.json({ error: "Path is not a file or directory" }, 400);
@@ -13221,12 +13286,12 @@ function dataUploadCeiling() {
 }
 async function resolveUploadTarget(c, accountId, uid) {
   const rawName = c.req.query("filename") ?? "";
-  const safeName = basename7(rawName).replace(/[\0/\\]/g, "_");
+  const safeName = basename9(rawName).replace(/[\0/\\]/g, "_");
   if (!safeName) return { ok: false, status: 400, error: "filename query param required" };
   const rawRelpath = c.req.query("relpath") ?? "";
   const relpath = rawRelpath !== "" ? rawRelpath : null;
   const token = c.req.query("token") ?? "";
-  const finalName = relpath ? basename7(relpath).replace(/[\0/\\]/g, "_") : `${Date.now()}-${safeName}`;
+  const finalName = relpath ? basename9(relpath).replace(/[\0/\\]/g, "_") : `${Date.now()}-${safeName}`;
   const mimeType = (c.req.header("content-type") ?? "").split(";")[0].trim();
   if (!SUPPORTED_MIME_TYPES.has(mimeType)) {
     console.error(`[data-upload] op=reject-mime uid=${uid} mime="${mimeType}" token=${token} rel="${relpath ?? ""}"`);
@@ -13235,8 +13300,8 @@ async function resolveUploadTarget(c, accountId, uid) {
   const rawDir = c.req.query("path") ?? "";
   const base = resolveOwnAccountWrite(rawDir, accountId, "POST /api/admin/files/upload");
   if (!base.ok) return { ok: false, status: base.status, error: base.error };
-  const relDir = relpath ? dirname6(relpath) : ".";
-  const destRel = relDir === "." ? base.relative : join25(base.relative, relDir);
+  const relDir = relpath ? dirname7(relpath) : ".";
+  const destRel = relDir === "." ? base.relative : join26(base.relative, relDir);
   if (crossesForeignAccountPartition(destRel, accountId)) {
     console.error(`[data] account-scope-blocked endpoint="POST /api/admin/files/upload" path="${destRel}" account=${accountId.slice(0, 8)}\u2026`);
     return { ok: false, status: 404, error: "Not found" };
@@ -13254,8 +13319,8 @@ async function resolveUploadTarget(c, accountId, uid) {
     const info = await stat4(destDir).catch(() => null);
     if (!info || !info.isDirectory()) return { ok: false, status: 400, error: "Upload destination is not a directory" };
   }
-  const dataRootReal = realpathSync4(DATA_ROOT);
-  const destDirReal = realpathSync4(destDir);
+  const dataRootReal = realpathSync5(DATA_ROOT);
+  const destDirReal = realpathSync5(destDir);
   if (destDirReal !== dataRootReal && !destDirReal.startsWith(dataRootReal + sep6)) {
     console.error(`[data-upload] op=path-traversal-blocked uid=${uid} requested="${destRel}" resolved="${destDirReal}"`);
     return { ok: false, status: 403, error: "Upload destination escapes DATA_ROOT" };
@@ -13596,7 +13661,7 @@ app20.delete("/", requireAdminSession, async (c) => {
     console.error(`[data] account-scope-blocked endpoint="DELETE /api/admin/files" path="${relPath}" account=${accountId.slice(0, 8)}\u2026`);
     return c.json({ error: "Not found" }, 404);
   }
-  const base = basename7(absolute);
+  const base = basename9(absolute);
   const protection = isProtectedFromDeletion(relPath);
   if (protection.protected) {
     console.error(`[data] file-delete blocked path="${relPath}" reason="protected" rule="${protection.rule}"`);
@@ -13612,7 +13677,7 @@ app20.delete("/", requireAdminSession, async (c) => {
     }
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
-    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join25(dirname6(absolute), `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join26(dirname7(absolute), `${stem}.meta.json`) : null;
     await unlink2(absolute);
     if (sidecarPath) {
       try {
@@ -13708,8 +13773,8 @@ app20.post("/rename", requireAdminSession, async (c) => {
     console.error(`[data] file-rename blocked path="${src.relative}" reason="protected"`);
     return c.json({ error: "Protected entry \u2014 refusing to rename" }, 403);
   }
-  const destAbs = resolve21(dirname6(src.absolute), newName);
-  const newRel = `${dirname6(src.relative)}/${newName}`.replace(/^\.\//, "");
+  const destAbs = resolve21(dirname7(src.absolute), newName);
+  const newRel = `${dirname7(src.relative)}/${newName}`.replace(/^\.\//, "");
   if (isProtectedFromRename(newRel)) {
     console.error(`[data] file-rename blocked path="${newRel}" reason="protected-target"`);
     return c.json({ error: "That name is reserved" }, 403);
@@ -15840,7 +15905,7 @@ var graph_default_view_default = app26;
 
 // server/routes/admin/sidebar-artefacts.ts
 import { readdir as readdir4, stat as stat5 } from "fs/promises";
-import { resolve as resolve22, relative as relative5, isAbsolute as isAbsolute2, sep as sep7, basename as basename8 } from "path";
+import { resolve as resolve22, relative as relative5, isAbsolute as isAbsolute2, sep as sep7, basename as basename10 } from "path";
 import { existsSync as existsSync24 } from "fs";
 var LIMIT = 50;
 var ADMIN_AGENT_FILES = ["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"];
@@ -15893,7 +15958,7 @@ async function fetchAccountFileArtefacts(accountId) {
       const modifiedAt = r.get("modifiedAt") ?? "";
       return {
         id: `account-file:${relativePath}`,
-        name: displayName ?? basename8(relativePath),
+        name: displayName ?? basename10(relativePath),
         kind: "account-file",
         updatedAt: modifiedAt,
         mimeType,
@@ -16277,6 +16342,31 @@ app32.post("/", requireAdminSession, async (c) => {
     console.log(
       `[chat-spawn] op=acquired spawnReqId=${spawnReqId} pid=${parsed?.spawnedPid ?? "none"} sessionId=${plan.sessionId}`
     );
+    if (plan.kind === "new") {
+      const convAccountId = plan.payload.targetAccountId ?? accountId;
+      if (adminUserId && convAccountId) {
+        try {
+          const ensured = await createNewAdminConversation(
+            adminUserId,
+            convAccountId,
+            `session:${plan.sessionId}`,
+            authenticatedName,
+            plan.sessionId
+          );
+          console.log(
+            `[chat-spawn] op=conversation-ensured spawnReqId=${spawnReqId} sessionId=${plan.sessionId} created=${ensured !== null}`
+          );
+        } catch (err) {
+          console.error(
+            `[chat-spawn] op=conversation-ensure-failed spawnReqId=${spawnReqId} sessionId=${plan.sessionId} err=${err instanceof Error ? err.message : String(err)}`
+          );
+        }
+      } else {
+        console.error(
+          `[chat-spawn] op=conversation-ensure-skipped spawnReqId=${spawnReqId} sessionId=${plan.sessionId} reason=missing-${!adminUserId ? "userId" : "accountId"}`
+        );
+      }
+    }
     console.log(`[chat-spawn] op=navigate spawnReqId=${spawnReqId} target=${target}`);
     console.log(`[chat-spawn] op=exit spawnReqId=${spawnReqId} outcome=bound`);
     return c.json(shapeWebchatResponse(plan.sessionId, parsed));
@@ -16521,10 +16611,10 @@ var system_stats_default = app34;
 
 // server/routes/admin/health.ts
 import { existsSync as existsSync25, readFileSync as readFileSync27 } from "fs";
-import { resolve as resolve23, join as join26 } from "path";
+import { resolve as resolve23, join as join27 } from "path";
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve23(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join26(PLATFORM_ROOT6, "config", "brand.json");
+var brandJsonPath = join27(PLATFORM_ROOT6, "config", "brand.json");
 if (existsSync25(brandJsonPath)) {
   try {
     const brand = JSON.parse(readFileSync27(brandJsonPath, "utf-8"));
@@ -17303,7 +17393,7 @@ var browser_default = app42;
 
 // server/routes/admin/calendar.ts
 import { existsSync as existsSync26 } from "fs";
-import { join as join28 } from "path";
+import { join as join29 } from "path";
 
 // server/lib/calendar-ics.ts
 var CRLF = "\r\n";
@@ -17403,7 +17493,7 @@ function countVEvents(ics) {
 
 // server/lib/calendar-availability.ts
 import { readFileSync as readFileSync28 } from "fs";
-import { join as join27 } from "path";
+import { join as join28 } from "path";
 var AVAILABILITY_FILENAME = "calendar-availability.json";
 var REQUIRED_KEYS = [
   "timezone",
@@ -17412,7 +17502,7 @@ var REQUIRED_KEYS = [
   "weekly"
 ];
 function readAvailabilityConfig(accountDir) {
-  const path2 = join27(accountDir, AVAILABILITY_FILENAME);
+  const path2 = join28(accountDir, AVAILABILITY_FILENAME);
   let raw;
   try {
     raw = readFileSync28(path2, "utf-8");
@@ -17774,7 +17864,7 @@ app43.get("/booking-link", requireAdminSession, (c) => {
       console.error('[calendar] op=booking-link-fail err="no account configured"');
       return c.json({ bookingDomain: null });
     }
-    if (!existsSync26(join28(account.accountDir, AVAILABILITY_FILENAME))) {
+    if (!existsSync26(join29(account.accountDir, AVAILABILITY_FILENAME))) {
       console.log("[calendar] op=booking-link bookingDomain=none source=availability-config");
       return c.json({ bookingDomain: null });
     }
@@ -18065,7 +18155,7 @@ app47.route("/request-magic-link", request_magic_link_default);
 var access_default = app47;
 
 // server/routes/sites.ts
-import { existsSync as existsSync27, readFileSync as readFileSync29, realpathSync as realpathSync5, statSync as statSync11 } from "fs";
+import { existsSync as existsSync27, readFileSync as readFileSync29, realpathSync as realpathSync6, statSync as statSync11 } from "fs";
 import { resolve as resolve25 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
@@ -18157,8 +18247,8 @@ app48.get("/:rel{.*}", (c) => {
   let realPath;
   let realRoot;
   try {
-    realPath = realpathSync5(filePath);
-    realRoot = realpathSync5(rootDir);
+    realPath = realpathSync6(filePath);
+    realRoot = realpathSync6(rootDir);
   } catch {
     console.error(`[sites] not-found path=${reqPath} status=404`);
     return c.text("Not found", 404);
@@ -18206,7 +18296,7 @@ var sites_default = app48;
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
 import { mkdirSync as mkdirSync6, readFileSync as readFileSync30, writeFileSync as writeFileSync11 } from "fs";
-import { dirname as dirname7 } from "path";
+import { dirname as dirname8 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
 var DEFAULT_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
@@ -18223,7 +18313,7 @@ function getSecret() {
   }
   const fresh = randomBytes(SECRET_BYTES).toString("hex");
   try {
-    mkdirSync6(dirname7(VISITOR_TOKEN_SECRET_FILE), { recursive: true, mode: 448 });
+    mkdirSync6(dirname8(VISITOR_TOKEN_SECRET_FILE), { recursive: true, mode: 448 });
     writeFileSync11(VISITOR_TOKEN_SECRET_FILE, fresh, { mode: 384, flag: "wx" });
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
@@ -18282,7 +18372,7 @@ var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
 import { existsSync as existsSync28, readFileSync as readFileSync31 } from "fs";
-import { join as join29 } from "path";
+import { join as join30 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -18290,7 +18380,7 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot3 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot3) return null;
-  const brandPath = join29(platformRoot3, "config", "brand.json");
+  const brandPath = join30(platformRoot3, "config", "brand.json");
   if (!existsSync28(brandPath)) return null;
   try {
     cached2 = JSON.parse(readFileSync31(brandPath, "utf-8"));
@@ -19331,7 +19421,7 @@ async function startFileWatcher(opts = {}) {
 
 // app/lib/migrate-uploads.ts
 import { mkdir as mkdir5, readdir as readdir5, rename as rename2, rm as rm3 } from "fs/promises";
-import { dirname as dirname8, relative as relative6, resolve as resolve28 } from "path";
+import { dirname as dirname9, relative as relative6, resolve as resolve28 } from "path";
 var ACCOUNT_UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function walkFiles(dir) {
   const out = [];
@@ -19363,7 +19453,7 @@ async function relocateTree(srcDir, destDir, dataRoot, accountId, session) {
   for (const oldAbs of files) {
     const suffix = relative6(srcDir, oldAbs);
     const newAbs = resolve28(destDir, suffix);
-    await mkdir5(dirname8(newAbs), { recursive: true });
+    await mkdir5(dirname9(newAbs), { recursive: true });
     await rename2(oldAbs, newAbs);
     moved++;
     const oldRel = relative6(dataRoot, oldAbs);
@@ -19455,7 +19545,7 @@ async function migrateUploads(opts = {}) {
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir6, readFile as readFile6, rename as rename3, writeFile as writeFile4, unlink as unlink3 } from "fs/promises";
 import { existsSync as existsSync30 } from "fs";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -19500,7 +19590,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join30(projectsRoot, slug.name);
+    const slugDir = join31(projectsRoot, slug.name);
     let entries;
     try {
       entries = await readdir6(slugDir, { withFileTypes: true });
@@ -19509,9 +19599,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry of entries) {
       if (entry.isFile() && SESSION_META_RE.test(entry.name)) {
-        out.push(join30(slugDir, entry.name));
+        out.push(join31(slugDir, entry.name));
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join30(slugDir, entry.name);
+        const subDir = join31(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir6(subDir, { withFileTypes: true });
@@ -19519,7 +19609,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join30(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join31(subDir, s.name));
         }
       }
     }
@@ -19531,7 +19621,7 @@ function shortId(path2) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join30(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join31(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -21439,9 +21529,9 @@ function buildTelegramSpawnRequest(input) {
 }
 
 // app/lib/telegram/outbound/send-document.ts
-import { realpathSync as realpathSync6 } from "fs";
+import { realpathSync as realpathSync7 } from "fs";
 import { readFile as readFile7, stat as stat7 } from "fs/promises";
-import { resolve as resolve29, basename as basename9 } from "path";
+import { resolve as resolve29, basename as basename11 } from "path";
 var TAG35 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
@@ -21455,8 +21545,8 @@ async function sendTelegramDocument(input) {
   const accountDir = resolve29(platformRoot3, "..", "data/accounts", maxyAccountId);
   let resolvedPath;
   try {
-    resolvedPath = realpathSync6(filePath);
-    const accountResolved = realpathSync6(accountDir);
+    resolvedPath = realpathSync7(filePath);
+    const accountResolved = realpathSync7(accountDir);
     if (!resolvedPath.startsWith(accountResolved + "/")) {
       console.error(`${TAG35} document REJECTED reason=outside_account_directory`);
       return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
@@ -21478,7 +21568,7 @@ async function sendTelegramDocument(input) {
       error: `File exceeds 50 MB limit (${(fileStat.size / 1024 / 1024).toFixed(1)} MB)`
     };
   }
-  const filename = basename9(resolvedPath);
+  const filename = basename11(resolvedPath);
   const buffer = Buffer.from(await readFile7(resolvedPath));
   const form = new FormData();
   form.append("chat_id", String(chatId));
@@ -21588,12 +21678,12 @@ function startTelegramNativeFileFollower(input) {
 }
 
 // server/telegram-descriptor.ts
-import { resolve as resolve30, join as join31 } from "path";
+import { resolve as resolve30, join as join32 } from "path";
 function telegramGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function telegramServerPath() {
-  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve30(process.env.MAXY_PLATFORM_ROOT ?? join31(__dirname, ".."), "services/telegram-channel/dist/server.js");
+  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve30(process.env.MAXY_PLATFORM_ROOT ?? join32(__dirname, ".."), "services/telegram-channel/dist/server.js");
 }
 
 // app/lib/channel-pty-bridge/public-session-end-review.ts
@@ -22054,7 +22144,7 @@ function clientFrom(c) {
   );
 }
 var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT8 ? join32(PLATFORM_ROOT8, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT8 ? join33(PLATFORM_ROOT8, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync32(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
@@ -22093,7 +22183,7 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join32(homedir3(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join33(homedir3(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync32(ALIAS_DOMAINS_PATH)) return null;
@@ -22125,7 +22215,7 @@ var app54 = new Hono();
 var nativeFileFollowers = /* @__PURE__ */ new Map();
 var waGateway = new WaGateway({
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve32(process.env.MAXY_PLATFORM_ROOT ?? join32(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve32(process.env.MAXY_PLATFORM_ROOT ?? join33(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 — file delivery on the native channel: resolve the platform
   // account + path validation here and funnel through the shared send core.
   sendDocument: async ({ senderId, accountId, filePath, caption }) => {
@@ -22141,7 +22231,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve32(process.env.MAXY_PLATFORM_ROOT ?? join32(__dirname, ".."))
+      platformRoot: resolve32(process.env.MAXY_PLATFORM_ROOT ?? join33(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -22745,7 +22835,7 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT8) return "unknown";
-    const versionFile = join32(PLATFORM_ROOT8, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join33(PLATFORM_ROOT8, "config", `.${BRAND.hostname}-version`);
     if (!existsSync32(versionFile)) return "unknown";
     const content = readFileSync33(versionFile, "utf-8").trim();
     return content || "unknown";
@@ -22805,11 +22895,11 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir2 = join32(homedir3(), BRAND.configDir);
+  const configDir2 = join33(homedir3(), BRAND.configDir);
   try {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join32(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join33(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync32(cachePath)) return null;
     return JSON.parse(readFileSync33(cachePath, "utf-8"));
   } catch {
@@ -23029,7 +23119,7 @@ var hostname = process.env.HOSTNAME ?? "127.0.0.1";
 var httpServer = serve({ fetch: app54.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join32(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join33(__dirname, "..");
   const reconcileScript = resolve32(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const RECONCILE_INTERVAL_MS = 12e4;
   const runReconcile = () => {
@@ -23051,7 +23141,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   loop.unref();
 }
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join32(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join33(__dirname, "..");
   const auditScript = resolve32(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
@@ -23256,7 +23346,7 @@ try {
 } catch (err) {
   console.error(`[graph-health] account-enumeration unavailable reason=${err instanceof Error ? err.message : String(err)}`);
 }
-var configDirForWhatsApp = basename10(MAXY_DIR) || ".maxy";
+var configDirForWhatsApp = basename12(MAXY_DIR) || ".maxy";
 var bootAccount = resolveAccount();
 if (bootAccount) {
   migrateRemovedConfigKeys(bootAccount.accountDir);
@@ -23318,7 +23408,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve32(process.env.MAXY_PLATFORM_ROOT ?? join32(__dirname, "..")),
+  platformRoot: resolve32(process.env.MAXY_PLATFORM_ROOT ?? join33(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     if (msg.isOwnerMirror) {