@rubytech/create-maxy-code 0.1.460 → 0.1.462

package/payload/server/server.js

@@ -122,10 +122,11 @@ import {
   authorizeAccess,
   listResources,
   makeHouseCfExec,
+  makeHousePagesExec,
   registerResource,
   resolveOwner,
   tooLargeMessage
-} from "./chunk-JXWFVE5X.js";
+} from "./chunk-BBSPFN45.js";
 import {
   __commonJS,
   __toESM
@@ -1535,7 +1536,7 @@ var serveStatic = (options = { root: "" }) => {
 import { readFileSync as readFileSync38, existsSync as existsSync36, watchFile, readdirSync as readdirSync21, statSync as statSync14 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash7 } from "crypto";
-import { resolve as resolve35, join as join38, basename as basename12 } from "path";
+import { resolve as resolve36, join as join38, basename as basename12 } from "path";
 import { homedir as homedir4 } from "os";
 import { monitorEventLoopDelay } from "perf_hooks";
 
@@ -2248,7 +2249,7 @@ var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
   console.error(`${TAG2} draining credential save queue\u2026`);
   const timer2 = new Promise(
-    (resolve36) => setTimeout(() => resolve36("timeout"), timeoutMs)
+    (resolve37) => setTimeout(() => resolve37("timeout"), timeoutMs)
   );
   const result = await Promise.race([
     credsSaveQueue.then(() => "drained"),
@@ -2411,11 +2412,11 @@ async function createWaSocket(opts) {
   return sock;
 }
 async function waitForConnection(sock) {
-  return new Promise((resolve36, reject) => {
+  return new Promise((resolve37, reject) => {
     const handler = (update) => {
       if (update.connection === "open") {
         sock.ev.off("connection.update", handler);
-        resolve36();
+        resolve37();
       }
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
@@ -2520,7 +2521,7 @@ import { inspect as inspect2 } from "util";
 
 // app/lib/whatsapp/with-timeout.ts
 function withTimeout(label, promise, timeoutMs) {
-  return new Promise((resolve36, reject) => {
+  return new Promise((resolve37, reject) => {
     const timer2 = setTimeout(() => {
       reject(new Error(`${label} timed out after ${timeoutMs}ms`));
     }, timeoutMs);
@@ -2528,7 +2529,7 @@ function withTimeout(label, promise, timeoutMs) {
     promise.then(
       (value) => {
         clearTimeout(timer2);
-        resolve36(value);
+        resolve37(value);
       },
       (err) => {
         clearTimeout(timer2);
@@ -3779,8 +3780,8 @@ async function persistWhatsAppMessage(input) {
   const { givenName, familyName } = splitName(input.pushName);
   const prev = sessionWriteLocks.get(input.cacheKey);
   let release;
-  const mine = new Promise((resolve36) => {
-    release = resolve36;
+  const mine = new Promise((resolve37) => {
+    release = resolve37;
   });
   const chained = (prev ?? Promise.resolve()).then(() => mine);
   sessionWriteLocks.set(input.cacheKey, chained);
@@ -5484,11 +5485,11 @@ async function connectWithReconnect(conn) {
       console.error(
         `${TAG13} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
-      await new Promise((resolve36) => {
-        const timer2 = setTimeout(resolve36, delay);
+      await new Promise((resolve37) => {
+        const timer2 = setTimeout(resolve37, delay);
         conn.abortController.signal.addEventListener("abort", () => {
           clearTimeout(timer2);
-          resolve36();
+          resolve37();
         }, { once: true });
       });
     }
@@ -5496,16 +5497,16 @@ async function connectWithReconnect(conn) {
   }
 }
 function waitForDisconnectEvent(conn) {
-  return new Promise((resolve36) => {
+  return new Promise((resolve37) => {
     if (!conn.sock) {
-      resolve36();
+      resolve37();
       return;
     }
     const sock = conn.sock;
     const handler = (update) => {
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
-        resolve36();
+        resolve37();
       }
     };
     sock.ev.on("connection.update", handler);
@@ -5873,8 +5874,8 @@ async function handleInboundMessage(conn, msg) {
     const conversationKey = isGroup ? remoteJid : senderPhone;
     const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
     let resolvePending;
-    const sttPending = new Promise((resolve36) => {
-      resolvePending = resolve36;
+    const sttPending = new Promise((resolve37) => {
+      resolvePending = resolve37;
     });
     if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
     try {
@@ -6302,20 +6303,20 @@ function buildX11Env(chromiumWrapperPath, transport = "vnc") {
 
 // server/routes/health.ts
 function checkPort(port2, timeoutMs = 500) {
-  return new Promise((resolve36) => {
+  return new Promise((resolve37) => {
     const socket = createConnection2(port2, "127.0.0.1");
     socket.setTimeout(timeoutMs);
     socket.once("connect", () => {
       socket.destroy();
-      resolve36(true);
+      resolve37(true);
     });
     socket.once("error", () => {
       socket.destroy();
-      resolve36(false);
+      resolve37(false);
     });
     socket.once("timeout", () => {
       socket.destroy();
-      resolve36(false);
+      resolve37(false);
     });
   });
 }
@@ -6780,7 +6781,7 @@ ${result.result.text}` : result.result.text;
             spawnedAt: /* @__PURE__ */ new Date()
           });
           const replyP = deps.awaitReply(session_key, webchatTurnTimeoutMs());
-          await deps.handleInbound({
+          const { spawn: spawn4 } = await deps.handleInbound({
             role: "public",
             accountId: account.accountId,
             key: session_key,
@@ -6793,6 +6794,7 @@ ${result.result.text}` : result.result.text;
               name: publicTitle
             }
           });
+          if (spawn4) await spawn4;
           const reply = await replyP;
           if ("timeout" in reply) {
             controller.enqueue(
@@ -7592,8 +7594,8 @@ async function startLogin(opts) {
   await clearAuth(authDir);
   let resolveCode = null;
   let rejectCode = null;
-  const codePromise = new Promise((resolve36, reject) => {
-    resolveCode = resolve36;
+  const codePromise = new Promise((resolve37, reject) => {
+    resolveCode = resolve37;
     rejectCode = reject;
   });
   const codeTimer = setTimeout(
@@ -7765,14 +7767,14 @@ function routeDocumentOutboundAt(to, filePath) {
   return lastRouteDocumentOutboundAt.get(routeKey(to, filePath));
 }
 async function sendWhatsAppDocument(input) {
-  const { to, filePath, caption, accountId, maxyAccountId, platformRoot: platformRoot4 } = input;
+  const { to, filePath, caption, accountId, maxyAccountId, platformRoot: platformRoot5 } = input;
   if (!to || !filePath) {
     return { ok: false, status: 400, error: "Missing required fields: to, filePath" };
   }
-  if (!maxyAccountId || !platformRoot4) {
+  if (!maxyAccountId || !platformRoot5) {
     return { ok: false, status: 400, error: "Cannot validate file path: missing account or platform context" };
   }
-  const accountDir = resolve9(platformRoot4, "..", "data/accounts", maxyAccountId);
+  const accountDir = resolve9(platformRoot5, "..", "data/accounts", maxyAccountId);
   let resolvedPath;
   try {
     resolvedPath = realpathSync3(filePath);
@@ -8733,7 +8735,8 @@ var bodyLimit = (options) => {
 
 // server/routes/storage-broker.ts
 import { join as join11, resolve as resolve11 } from "path";
-import { readdirSync as readdirSync6, readFileSync as readFileSync13, existsSync as existsSync8 } from "fs";
+import { readdirSync as readdirSync6, readFileSync as readFileSync13, existsSync as existsSync8, realpathSync as realpathSync4 } from "fs";
+import { randomUUID as randomUUID7 } from "crypto";
 var app3 = new Hono();
 function platformRoot() {
   return process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? join11(__dirname, "..", "..");
@@ -8792,6 +8795,125 @@ var d1QueryBodyLimit = bodyLimit({
     );
   }
 });
+var pagesDeployBodyLimit = bodyLimit({
+  maxSize: STORAGE_RESOURCE_NAME_MAX_BODY_BYTES,
+  onError: (c) => {
+    log("write", "pages", caller(c) ?? "none", "*", null, "deny", "publish-body-too-large");
+    return c.json(
+      {
+        error: `request body exceeds the ${(STORAGE_RESOURCE_NAME_MAX_BODY_BYTES / 1024).toFixed(
+          1
+        )} KiB (${STORAGE_RESOURCE_NAME_MAX_BODY_BYTES} bytes) limit for a Pages publish, which carries only a project name, a site folder name and an optional branch.`
+      },
+      413
+    );
+  }
+});
+function resolveSiteDir(account, site) {
+  if (!site || site === "." || site === "..") return null;
+  if (site.includes("/") || site.includes("\\") || site.includes("\0")) return null;
+  const accountsDir = resolve11(platformRoot(), "..", "data", "accounts");
+  const base = resolve11(accountsDir, account, "sites");
+  const dir = resolve11(base, site);
+  if (dir !== base && !dir.startsWith(base + "/")) return null;
+  try {
+    const realBase = realpathSync4(base);
+    const realDir = realpathSync4(dir);
+    if (!realDir.startsWith(realBase + "/")) return null;
+    return realDir;
+  } catch {
+    return null;
+  }
+}
+async function verifyDeployed(url) {
+  try {
+    const res = await fetch(`${url}?cb=${Date.now()}`, { method: "GET", redirect: "follow" });
+    return res.status;
+  } catch {
+    return null;
+  }
+}
+app3.post("/pages/deploy", pagesDeployBodyLimit, async (c) => {
+  const pub = randomUUID7().slice(0, 8);
+  const account = caller(c);
+  if (!account) {
+    log("write", "pages", "none", "*", null, "deny", "no-caller");
+    return c.json({ error: "no-caller" }, 403);
+  }
+  const parsed = await readJsonBody(c);
+  if (!parsed.ok) return parsed.res;
+  const { project, site, branch } = parsed.body;
+  if (!project || typeof project !== "string") return c.json({ error: "project-required" }, 400);
+  if (!site || typeof site !== "string") return c.json({ error: "site-required" }, 400);
+  if (branch !== void 0 && typeof branch !== "string") return c.json({ error: "branch-invalid" }, 400);
+  console.error(
+    `[pages-broker] op=request pub=${pub} caller=${account} project=${project} site=${site} branch=${branch ?? "default"}`
+  );
+  const dir = resolveSiteDir(account, site);
+  if (dir === null) {
+    console.error(`[pages-broker] op=path pub=${pub} site=${site} inside=false`);
+    log("write", "pages", account, String(site), null, "deny", "invalid-site");
+    return c.json({ error: "invalid-site" }, 400);
+  }
+  console.error(`[pages-broker] op=path pub=${pub} resolved=${dir} inside=true`);
+  const session = getSession();
+  try {
+    const owner = await resolveOwner(session, "pages", project);
+    const decision = authorizeAccess({ caller: account, owner, action: "write" });
+    console.error(
+      `[pages-broker] op=authorize pub=${pub} caller=${account} owner=${owner ?? "none"} decision=${decision.allow ? "allow" : "deny"} reason=${decision.reason}`
+    );
+    log("write", "pages", account, project, owner, decision.allow ? "allow" : "deny", decision.allow ? void 0 : decision.reason);
+    if (!decision.allow) return c.json({ error: decision.reason }, 403);
+    const started = Date.now();
+    const { url } = await (await makeHousePagesExec(platformRoot())).pagesDeploy(dir, project, branch);
+    console.error(`[pages-broker] op=deploy pub=${pub} ranMs=${Date.now() - started} url=${url}`);
+    const httpStatus = await verifyDeployed(url);
+    const verified = httpStatus === 200;
+    console.error(
+      `[pages-broker] op=complete pub=${pub} httpStatus=${httpStatus ?? "unreachable"} verified=${verified}`
+    );
+    if (!verified) {
+      return c.json({ error: "deploy-unverified", url, httpStatus }, 502);
+    }
+    return c.json({ url });
+  } catch (err) {
+    console.error(`[pages-broker] op=exit pub=${pub} result=error detail="${String(err)}"`);
+    return c.json({ error: String(err) }, 500);
+  } finally {
+    await session.close();
+  }
+});
+app3.post("/pages/adopt", nameBodyLimit("pages"), async (c) => {
+  const houseAdminScope = c.req.header("x-maxy-house-admin-scope")?.trim() || null;
+  const account = caller(c);
+  if (!houseAdminScope) {
+    log("write", "pages", account ?? "none", "*", null, "deny", "not-house-admin");
+    return c.json({ error: "not-house-admin" }, 403);
+  }
+  const parsed = await readJsonBody(c);
+  if (!parsed.ok) return parsed.res;
+  const { project, account: target } = parsed.body;
+  if (!project || typeof project !== "string") return c.json({ error: "project-required" }, 400);
+  if (!target || typeof target !== "string") return c.json({ error: "account-required" }, 400);
+  const session = getSession();
+  try {
+    const owner = await resolveOwner(session, "pages", project);
+    if (owner !== null && owner !== target) {
+      log("write", "pages", target, project, owner, "deny", "already-owned");
+      return c.json({ error: "already-owned", owner }, 409);
+    }
+    if (owner === null) {
+      await registerResource(session, { accountId: target, kind: "pages", name: project, cfResourceId: project });
+    }
+    log("write", "pages", target, project, target, "allow");
+    return c.json({ project, account: target });
+  } catch (err) {
+    return c.json({ error: String(err) }, 500);
+  } finally {
+    await session.close();
+  }
+});
 app3.get("/d1/list", async (c) => {
   const account = caller(c);
   if (!account) return c.json({ error: "no-caller" }, 403);
@@ -9061,7 +9183,7 @@ app3.post("/r2/object/delete", envelopeBodyLimit("write"), async (c) => {
 });
 var storage_broker_default = app3;
 async function runStorageAudit(root) {
-  const { reconcileStorage } = await import("./src-4F37OHLK.js");
+  const { reconcileStorage } = await import("./src-YLGAZY36.js");
   const session = getSession();
   try {
     const cf = await makeHouseCfExec(root);
@@ -9093,9 +9215,31 @@ async function runStorageAudit(root) {
     await session.close();
   }
 }
+async function runPagesAudit(root) {
+  const { reconcilePages } = await import("./src-YLGAZY36.js");
+  const session = getSession();
+  try {
+    const cf = await makeHousePagesExec(root);
+    const r = await reconcilePages({
+      cfProjects: async () => (await cf.pagesProjectList()).map((p) => p.name),
+      registeredProjects: async () => {
+        const res = await session.run(
+          "MATCH (r:StorageResource {kind: $kind}) RETURN r.name AS name",
+          { kind: "pages" }
+        );
+        return res.records.map((rec) => rec.get("name"));
+      }
+    });
+    console.error(
+      `[pages-audit] projects=${r.projects} registered=${r.registered} orphan=${r.orphans.length} phantom=${r.phantoms.length}` + r.orphans.map((n) => ` orphan:${n}`).join("") + r.phantoms.map((n) => ` phantom:${n}`).join("")
+    );
+  } finally {
+    await session.close();
+  }
+}
 
 // server/routes/whatsapp-reader.ts
-import { readFileSync as readFileSync17, watch, statSync as statSync5, openSync, readSync, closeSync, existsSync as existsSync11, readdirSync as readdirSync11, realpathSync as realpathSync4 } from "fs";
+import { readFileSync as readFileSync17, watch, statSync as statSync5, openSync, readSync, closeSync, existsSync as existsSync11, readdirSync as readdirSync11, realpathSync as realpathSync5 } from "fs";
 import { basename as basename4, dirname as dirname5, isAbsolute, join as join16, relative as relative2, resolve as resolve13, sep as sep3 } from "path";
 
 // server/routes/admin/sidebar-sessions.ts
@@ -9727,7 +9871,31 @@ function joinTextBlocks(content) {
   }
   return parts.join("");
 }
-function assistantTurns(content, ts, promoteFinal = false) {
+function erroredToolUseIds(lines) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const line of lines) {
+    if (!line || line[0] !== "{" || !line.includes("is_error")) continue;
+    let row;
+    try {
+      const parsed = JSON.parse(line);
+      if (!parsed || typeof parsed !== "object") continue;
+      row = parsed;
+    } catch {
+      continue;
+    }
+    const content = row.message?.content;
+    if (!Array.isArray(content)) continue;
+    for (const block of content) {
+      if (!block || typeof block !== "object") continue;
+      const b = block;
+      if (b.type === "tool_result" && b.is_error === true && typeof b.tool_use_id === "string") {
+        ids.add(b.tool_use_id);
+      }
+    }
+  }
+  return ids;
+}
+function assistantTurns(content, ts, promoteFinal = false, erroredIds = /* @__PURE__ */ new Set()) {
   if (!Array.isArray(content)) return [];
   const out = [];
   for (const block of content) {
@@ -9747,7 +9915,12 @@ function assistantTurns(content, ts, promoteFinal = false) {
       const input = b.input ?? {};
       const files = Array.isArray(input.files) ? input.files.filter((f) => typeof f === "string") : [];
       const caption = typeof input.caption === "string" ? input.caption : null;
-      out.push({ kind: "agent-file", files, caption, ts });
+      const refused = typeof b.id === "string" && erroredIds.has(b.id);
+      if (files.length === 0 || refused) {
+        out.push({ kind: "tool-call", name: SEND_USER_FILE_TOOL, input: b.input ?? null, ts });
+      } else {
+        out.push({ kind: "agent-file", files, caption, ts });
+      }
     } else if (b.type === "tool_use" && typeof b.name === "string") {
       out.push({ kind: "tool-call", name: b.name, input: b.input ?? null, ts });
     }
@@ -9787,6 +9960,7 @@ function renderOrSuppressChannelInbound(u, ts, out, queuedPendingSuppress) {
 }
 function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(), turnCtx = {}) {
   const out = [];
+  const erroredIds = erroredToolUseIds(lines);
   for (const line of lines) {
     if (!line || line[0] !== "{") continue;
     let row;
@@ -9811,7 +9985,7 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
       if (hasWebchatReply(msg?.content)) turnCtx.repliedThisTurn = true;
       const isEnd = msg?.stop_reason === "end_turn";
       const promoteFinal = isEnd && turnCtx.lastChannelSource === "webchat" && !turnCtx.repliedThisTurn;
-      out.push(...assistantTurns(msg?.content, ts, promoteFinal));
+      out.push(...assistantTurns(msg?.content, ts, promoteFinal, erroredIds));
       continue;
     }
     if (row.type === "queue-operation" && row.operation === "enqueue") {
@@ -10208,7 +10382,7 @@ function enrichDownloads(turn, scratchpadRoot) {
   if (turn.kind !== "agent-file") return turn;
   let scratchpadReal = null;
   try {
-    scratchpadReal = realpathSync4(scratchpadRoot);
+    scratchpadReal = realpathSync5(scratchpadRoot);
   } catch {
     scratchpadReal = null;
   }
@@ -10219,7 +10393,7 @@ function enrichDownloads(turn, scratchpadRoot) {
     }
     if (scratchpadReal) {
       try {
-        const fileReal = realpathSync4(f);
+        const fileReal = realpathSync5(f);
         if (fileReal === scratchpadReal || fileReal.startsWith(scratchpadReal + sep3)) {
           return { root: "scratchpad", path: relative2(scratchpadReal, fileReal) };
         }
@@ -11881,7 +12055,7 @@ ${note}` : note;
         console.error(`[webchat:inbound] op=send-refused kind=${kind} reason=empty-text`);
         return c.json({ error: "text required" }, 400);
       }
-      console.log(`[webchat:inbound] op=send-accepted kind=${kind} files=${stored.length} bytes=${Buffer.byteLength(text, "utf8")}`);
+      console.log(`[webchat:inbound] op=send-parsed kind=${kind} files=${stored.length} bytes=${Buffer.byteLength(text, "utf8")}`);
     }
     let deliveredIntId = null;
     if (deliverySessionId !== void 0 && await managerActivity(deliverySessionId) === "busy") {
@@ -11893,11 +12067,8 @@ ${note}` : note;
       deliveredIntId = outcome.intId;
     }
     const adminUserId = requesterUserId ?? void 0;
-    if (deliverySessionId !== void 0) {
-      await deps.handleInbound({ role: "admin", accountId: deliveryAccountId, key: deliveryKey, text, sessionId: deliverySessionId, adminUserId });
-    } else {
-      await deps.handleInbound({ role: "admin", accountId: bootstrapAccountId, key: deliveryKey, text, adminUserId });
-    }
+    const inboundStartedAt = Date.now();
+    const inbound = deliverySessionId !== void 0 ? await deps.handleInbound({ role: "admin", accountId: deliveryAccountId, key: deliveryKey, text, sessionId: deliverySessionId, adminUserId }) : await deps.handleInbound({ role: "admin", accountId: bootstrapAccountId, key: deliveryKey, text, adminUserId });
     if (deliveredIntId !== null) {
       console.log(`[webchat-interrupt] op=delivered intId=${deliveredIntId} sessionId=${deliverySessionId.slice(0, 8)}`);
     }
@@ -11914,7 +12085,9 @@ ${note}` : note;
     }
     const keyDisplay2 = deliveryKey.startsWith("session:") ? deliveryKey.slice(0, "session:".length + 8) : WEBCHAT_ADMIN_KEY;
     const baseline = jsonlSizeBytes(locateSession(turnSessionId).projectDir, turnSessionId);
-    console.error(`[webchat:inbound] op=send-accepted key=${keyDisplay2} sendId=${sendId} baselineBytes=${baseline ?? "absent"}`);
+    console.error(
+      `[webchat:inbound] op=send-accepted key=${keyDisplay2} sendId=${sendId} baselineBytes=${baseline ?? "absent"} acceptMs=${Date.now() - inboundStartedAt} spawn=${inbound.spawn !== null ? "triggered" : "none"}`
+    );
     const turnTimer = setTimeout(() => {
       const now = jsonlSizeBytes(locateSession(turnSessionId).projectDir, turnSessionId);
       const grew = now !== null && (baseline === null || now > baseline);
@@ -12293,8 +12466,8 @@ function routeTelegramUpdate(input) {
 // server/routes/telegram.ts
 var TAG23 = "[telegram-inbound]";
 function configDirName() {
-  const platformRoot4 = process.env.MAXY_PLATFORM_ROOT ?? resolve16(process.cwd(), "..");
-  const brandPath = join22(platformRoot4, "config", "brand.json");
+  const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? resolve16(process.cwd(), "..");
+  const brandPath = join22(platformRoot5, "config", "brand.json");
   if (existsSync15(brandPath)) {
     try {
       return JSON.parse(readFileSync23(brandPath, "utf-8")).configDir ?? ".maxy";
@@ -12493,7 +12666,7 @@ var quickbooks_default = app9;
 // server/routes/onboarding.ts
 import { spawn, spawnSync as spawnSync2, execFileSync as execFileSync3 } from "child_process";
 import { openSync as openSync3, closeSync as closeSync3, writeFileSync as writeFileSync10, writeSync, existsSync as existsSync18, readFileSync as readFileSync26, unlinkSync as unlinkSync3, renameSync as renameSync7 } from "fs";
-import { createHash as createHash4, randomUUID as randomUUID7 } from "crypto";
+import { createHash as createHash4, randomUUID as randomUUID8 } from "crypto";
 
 // app/lib/claude-spawn-env.ts
 function claudeBin() {
@@ -12989,7 +13162,7 @@ app10.post("/set-pin", async (c) => {
   const hash = hashPin2(body.pin);
   const account = resolveAccount();
   const existingOwnerUserId = account?.config.admins?.find((a) => a.role === "owner")?.userId;
-  const userId = existingOwnerUserId ?? randomUUID7();
+  const userId = existingOwnerUserId ?? randomUUID8();
   if (existingOwnerUserId) {
     console.log(`[set-pin] reusing existing owner userId=${userId.slice(0, 8)}\u2026 (change-PIN preserves identity)`);
   } else {
@@ -13381,7 +13554,7 @@ app11.post("/", async (c) => {
 var client_error_default = app11;
 
 // server/routes/admin/session.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 async function resolveUserIdentity(accountId, userId) {
   const result = await loadAdminUserName(userId);
   if (result.source === "neo4j") {
@@ -13395,7 +13568,7 @@ async function resolveUserIdentity(accountId, userId) {
 async function createAdminSession(accountId, thinkingView, userId, userName, role, avatar) {
   const account = resolveAccount();
   const effectiveThinkingView = thinkingView ?? account?.config.thinkingView ?? "default";
-  const signedSessionToken = randomUUID8();
+  const signedSessionToken = randomUUID9();
   const cacheKey = fingerprintSessionKey(signedSessionToken);
   registerSession(cacheKey, "admin", accountId, void 0, userId, userName ?? void 0, role);
   if (userId) setWantsPriorConversation(cacheKey);
@@ -13437,15 +13610,15 @@ function operatorRoleFor(config, userId) {
 async function buildAccountOptionList(accounts, userId) {
   const houseAccount = accounts.find((a) => a.config.role === "house");
   console.log(`[admin-accounts] op=list count=${accounts.length} house=${houseAccount?.accountId ?? "none"}`);
-  const resolve36 = async (a) => {
+  const resolve37 = async (a) => {
     const businessName = await fetchAccountName(a.accountId) || void 0;
     return { accountId: a.accountId, businessName, role: operatorRoleFor(a.config, userId), isHouse: a.config.role === "house" };
   };
   const houseOptions = await Promise.all(
-    accounts.filter((a) => a.config.role === "house").map(resolve36)
+    accounts.filter((a) => a.config.role === "house").map(resolve37)
   );
   const nonHouseOptions = await Promise.all(
-    accounts.filter((a) => a.config.role !== "house").map(resolve36)
+    accounts.filter((a) => a.config.role !== "house").map(resolve37)
   );
   const sortKey = (o) => (o.businessName || o.accountId).toLowerCase();
   nonHouseOptions.sort((x, y) => {
@@ -14929,10 +15102,10 @@ function readTunnelState(brandConfigDir) {
   }
 }
 function resolveTunnelUrl() {
-  const platformRoot4 = process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? resolve21(process.cwd(), "..");
+  const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? resolve21(process.cwd(), "..");
   let brand;
   try {
-    brand = JSON.parse(readFileSync30(resolve21(platformRoot4, "config", "brand.json"), "utf-8"));
+    brand = JSON.parse(readFileSync30(resolve21(platformRoot5, "config", "brand.json"), "utf-8"));
   } catch {
     return null;
   }
@@ -15141,18 +15314,18 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
 ]);
 var app21 = new Hono();
 app21.post("/", async (c) => {
-  const TAG45 = "[admin:events]";
+  const TAG46 = "[admin:events]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG45} reject reason=body-not-json detail=${detail}`);
+    console.error(`${TAG46} reject reason=body-not-json detail=${detail}`);
     return c.json({ ok: false, detail: "Request body was not valid JSON" }, 400);
   }
   const event = typeof body.event === "string" ? body.event : "";
   if (!ALLOWED_EVENTS.has(event)) {
-    console.error(`${TAG45} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
+    console.error(`${TAG46} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
     return c.json({ ok: false, detail: `Event "${event}" is not allowed` }, 400);
   }
   const rawFields = body.fields && typeof body.fields === "object" ? body.fields : {};
@@ -15176,8 +15349,8 @@ var events_default = app21;
 // server/routes/admin/files.ts
 import { createReadStream as createReadStream2, createWriteStream as createWriteStream2, existsSync as existsSync27 } from "fs";
 import { readdir as readdir3, readFile as readFile4, stat as stat4, mkdir as mkdir3, unlink as unlink2, rename, rmdir } from "fs/promises";
-import { realpathSync as realpathSync5 } from "fs";
-import { randomUUID as randomUUID9 } from "crypto";
+import { realpathSync as realpathSync6 } from "fs";
+import { randomUUID as randomUUID10 } from "crypto";
 import { basename as basename9, dirname as dirname11, join as join30, relative as relative4, resolve as resolve23, sep as sep6 } from "path";
 import { Readable as Readable2 } from "stream";
 
@@ -16542,8 +16715,8 @@ async function resolveUploadTarget(c, accountId, uid) {
     const info = await stat4(destDir).catch(() => null);
     if (!info || !info.isDirectory()) return { ok: false, status: 400, error: "Upload destination is not a directory" };
   }
-  const dataRootReal = realpathSync5(DATA_ROOT);
-  const destDirReal = realpathSync5(destDir);
+  const dataRootReal = realpathSync6(DATA_ROOT);
+  const destDirReal = realpathSync6(destDir);
   if (destDirReal !== dataRootReal && !destDirReal.startsWith(dataRootReal + sep6)) {
     console.error(`[data-upload] op=path-traversal-blocked uid=${uid} requested="${destRel}" resolved="${destDirReal}"`);
     return { ok: false, status: 403, error: "Upload destination escapes DATA_ROOT" };
@@ -16569,7 +16742,7 @@ app22.post("/upload", requireAdminSession, async (c) => {
   if (c.req.query("uploadId") !== void 0) {
     return handleChunkUpload(c, accountId);
   }
-  const uid = `${Date.now()}-${randomUUID9().slice(0, 8)}`;
+  const uid = `${Date.now()}-${randomUUID10().slice(0, 8)}`;
   const declaredBytes = c.req.header("content-length") ?? "unknown";
   const target = await resolveUploadTarget(c, accountId, uid);
   if (!target.ok) return c.json({ error: target.error }, target.status);
@@ -19644,9 +19817,9 @@ app34.get("/", requireAdminSession, async (c) => {
 var session_usage_default = app34;
 
 // server/routes/admin/session-rc-spawn.ts
-import { randomUUID as randomUUID10 } from "crypto";
+import { randomUUID as randomUUID11 } from "crypto";
 var ACCOUNT_UUID_RE3 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
-function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID10, adminUserId, authenticatedName, callerAccountId) {
+function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID11, adminUserId, authenticatedName, callerAccountId) {
   const operator = isOperatorHost(host, operatorDomains);
   const resumeId = typeof body.sessionId === "string" && body.sessionId.length > 0 ? body.sessionId : void 0;
   const name = typeof body.name === "string" && body.name.length > 0 ? body.name : void 0;
@@ -19701,8 +19874,8 @@ app35.post("/", requireAdminSession, async (c) => {
   const adminUserId = cacheKey ? getUserIdForSession(cacheKey) : void 0;
   const accountId = cacheKey ? getAccountIdForSession(cacheKey) : void 0;
   const authenticatedName = accountId ? await resolveAuthenticatedName(accountId, adminUserId) : void 0;
-  const plan = resolveSpawnPlan(host, getOperatorDomains(), body, randomUUID10, adminUserId, authenticatedName, accountId);
-  const spawnReqId = randomUUID10();
+  const plan = resolveSpawnPlan(host, getOperatorDomains(), body, randomUUID11, adminUserId, authenticatedName, accountId);
+  const spawnReqId = randomUUID11();
   console.log(
     `[chat-spawn] op=request spawnReqId=${spawnReqId} origin=${plan.origin} kind=${plan.kind} sessionId=${plan.kind === "new" ? "new" : plan.sessionId}`
   );
@@ -19774,8 +19947,8 @@ app35.post("/", requireAdminSession, async (c) => {
 var session_rc_spawn_default = app35;
 
 // server/routes/admin/session-reseat.ts
-import { randomUUID as randomUUID11 } from "crypto";
-function resolveReseatPlan(body, mintId = randomUUID11, adminUserId, authenticatedName) {
+import { randomUUID as randomUUID12 } from "crypto";
+function resolveReseatPlan(body, mintId = randomUUID12, adminUserId, authenticatedName) {
   const sessionId = mintId();
   const key = `session:${sessionId}`;
   const payload = {
@@ -19829,11 +20002,11 @@ app36.post("/", requireAdminSession, async (c) => {
     const authenticatedName = accountId ? await resolveAuthenticatedName(accountId, adminUserId) : void 0;
     const plan = resolveReseatPlan(
       { fromSessionId, model, ...permissionMode ? { permissionMode } : {}, ...effort ? { effort } : {} },
-      randomUUID11,
+      randomUUID12,
       adminUserId,
       authenticatedName
     );
-    const reseatReqId = randomUUID11();
+    const reseatReqId = randomUUID12();
     console.log(`[chat-reseat] op=request reseatReqId=${reseatReqId} from=${fromSessionId} to-model=${model} to-mode=${permissionMode ?? "none"} to-effort=${effort ?? "none"} new=${plan.sessionId}`);
     let res;
     try {
@@ -20076,7 +20249,7 @@ app38.get("/", async (c) => {
 var health_default2 = app38;
 
 // server/routes/admin/linkedin-ingest.ts
-import { randomUUID as randomUUID12 } from "crypto";
+import { randomUUID as randomUUID13 } from "crypto";
 
 // app/lib/channel-pty-bridge/manager-client.ts
 function managerBase2() {
@@ -20329,7 +20502,7 @@ app39.post("/", requireAdminSession, async (c) => {
   );
   const initialMessage = buildInitialMessage(envelope);
   const spawnStart = Date.now();
-  const sessionId = randomUUID12();
+  const sessionId = randomUUID13();
   console.log(TAG27 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
   const spawned = await managerRcSpawn({
     sessionId,
@@ -21367,7 +21540,7 @@ app47.get("/", requireAdminSession, async (c) => {
 var tasks_list_default = app47;
 
 // server/routes/admin/task-timer-start.ts
-import { randomUUID as randomUUID13 } from "crypto";
+import { randomUUID as randomUUID14 } from "crypto";
 var TAG34 = "[task-timer]";
 var app48 = new Hono();
 app48.post("/", requireAdminSession, async (c) => {
@@ -21405,7 +21578,7 @@ app48.post("/", requireAdminSession, async (c) => {
       console.log(`${TAG34} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
       return c.json({ ok: true, running: true, entryId: priorEntryId, startedAt: priorStartedAt });
     }
-    const entryId = randomUUID13();
+    const entryId = randomUUID14();
     await session.run(
       `MATCH (t:Task {taskId: $taskId, accountId: $accountId})
        CREATE (te:TimeEntry {entryId: $entryId, taskId: $taskId, accountId: $accountId, startedAt: $now, endedAt: null})
@@ -21532,7 +21705,7 @@ app50.post("/", requireAdminSession, async (c) => {
 var task_complete_default = app50;
 
 // server/routes/admin/task-time-adjust.ts
-import { randomUUID as randomUUID14 } from "crypto";
+import { randomUUID as randomUUID15 } from "crypto";
 import neo4j6 from "neo4j-driver";
 var TAG37 = "[task-time-adjust]";
 var app51 = new Hono();
@@ -21557,7 +21730,7 @@ app51.post("/", requireAdminSession, async (c) => {
     console.error(`${TAG37} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
     return c.json({ error: "newSeconds must be a non-negative integer" }, 400);
   }
-  const adjustmentId = randomUUID14();
+  const adjustmentId = randomUUID15();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   console.log(`${TAG37} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
   const session = getSession();
@@ -21891,7 +22064,7 @@ app55.route("/request-magic-link", request_magic_link_default);
 var access_default = app55;
 
 // server/routes/sites.ts
-import { existsSync as existsSync31, readFileSync as readFileSync34, realpathSync as realpathSync6, statSync as statSync12 } from "fs";
+import { existsSync as existsSync31, readFileSync as readFileSync34, realpathSync as realpathSync7, statSync as statSync12 } from "fs";
 import { resolve as resolve28 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
@@ -21983,8 +22156,8 @@ app56.get("/:rel{.*}", (c) => {
   let realPath;
   let realRoot;
   try {
-    realPath = realpathSync6(filePath);
-    realRoot = realpathSync6(rootDir);
+    realPath = realpathSync7(filePath);
+    realRoot = realpathSync7(rootDir);
   } catch {
     console.error(`[sites] not-found path=${reqPath} status=404`);
     return c.text("Not found", 404);
@@ -22114,9 +22287,9 @@ var cachedAttempted = false;
 function readBrandConfig() {
   if (cachedAttempted) return cached2;
   cachedAttempted = true;
-  const platformRoot4 = process.env.MAXY_PLATFORM_ROOT;
-  if (!platformRoot4) return null;
-  const brandPath = join35(platformRoot4, "config", "brand.json");
+  const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
+  if (!platformRoot5) return null;
+  const brandPath = join35(platformRoot5, "config", "brand.json");
   if (!existsSync32(brandPath)) return null;
   try {
     cached2 = JSON.parse(readFileSync36(brandPath, "utf-8"));
@@ -24453,16 +24626,16 @@ var WebchatGateway = class _WebchatGateway {
    *  The public /api/chat route awaits this to return the reply on the same SSE
    *  response, preserving the pre-756 POST→single-blob browser contract. */
   awaitReply(key, timeoutMs) {
-    return new Promise((resolve36) => {
+    return new Promise((resolve37) => {
       const timer2 = setTimeout(() => {
         this.replyAwaiters.delete(key);
-        resolve36({ timeout: true });
+        resolve37({ timeout: true });
       }, timeoutMs);
       if (timer2.unref) timer2.unref();
       this.replyAwaiters.set(key, (r) => {
         clearTimeout(timer2);
         this.replyAwaiters.delete(key);
-        resolve36(r);
+        resolve37(r);
       });
     });
   }
@@ -24473,11 +24646,11 @@ var WebchatGateway = class _WebchatGateway {
    *  terminal dialog stays answerable). */
   awaitPermissionVerdict(p, timeoutMs) {
     const k = _WebchatGateway.promptKey(p.key, p.requestId);
-    return new Promise((resolve36) => {
+    return new Promise((resolve37) => {
       this.pendingPrompts.get(k)?.resolve({ timeout: true });
       const timer2 = setTimeout(() => {
         this.pendingPrompts.delete(k);
-        resolve36({ timeout: true });
+        resolve37({ timeout: true });
       }, timeoutMs);
       if (timer2.unref) timer2.unref();
       this.pendingPrompts.set(k, {
@@ -24486,7 +24659,7 @@ var WebchatGateway = class _WebchatGateway {
         resolve: (r) => {
           clearTimeout(timer2);
           this.pendingPrompts.delete(k);
-          resolve36(r);
+          resolve37(r);
         }
       });
       console.error(`[webchat:perm] op=open key=${keyDisplay(p.key)} id=${p.requestId} tool=${p.toolName}`);
@@ -24727,7 +24900,9 @@ var WebchatGateway = class _WebchatGateway {
       this.recovering = false;
     }
   }
-  /** Handle one inbound webchat message (browser POST → here). */
+  /** Handle one inbound webchat message (browser POST → here). Resolves when
+   *  the hub holds the message; the cold-start spawn is returned as a handle
+   *  (Task 1715 — see WebchatInboundResult). */
   async handleInbound(input) {
     const bytes = Buffer.byteLength(input.text, "utf8");
     const hadSubscriber = this.hub.hasSubscriber(input.key);
@@ -24761,63 +24936,60 @@ var WebchatGateway = class _WebchatGateway {
     }
     const existing = this.publicSessions.get(input.key);
     if (existing) existing.lastActivityAt = Date.now();
+    let spawn4 = null;
     if (!hadSubscriber && !this.spawning.has(input.key)) {
       this.spawning.add(input.key);
       console.error(`[webchat:inbound] op=spawn-trigger key=${input.key} role=${input.role}`);
-      try {
-        const spawned = await this.deps.ensureChannelSession({
+      spawn4 = this.runSpawn(input);
+      spawn4.catch(() => {
+      });
+    }
+    return { spawn: spawn4 };
+  }
+  /** Task 1715 — the cold-start spawn, run off the accept's path. Rejects on a
+   *  failed spawn so the public caller's SSE still errors; logs op=spawn-failed
+   *  first, because on the admin path the 200 has already been returned and this
+   *  line is the only attribution the failure gets. */
+  async runSpawn(input) {
+    const startedAt = Date.now();
+    try {
+      const spawned = await this.deps.ensureChannelSession({
+        accountId: input.accountId,
+        key: input.key,
+        role: input.role,
+        gatewayUrl: this.deps.gatewayUrl,
+        serverPath: this.deps.serverPath,
+        // Task 800 — only present on a session-targeted launch, so the
+        // default-path call shape stays byte-identical.
+        ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
+        // The authenticated admin's userId on an admin bootstrap inbound; the
+        // default-path call shape stays byte-identical when absent.
+        ...input.adminUserId !== void 0 ? { adminUserId: input.adminUserId } : {},
+        // Task 756 — public spawn params on a role:'public' inbound.
+        ...input.public !== void 0 ? { public: input.public } : {}
+      });
+      if (input.role === "public" && input.public && spawned && "sessionId" in spawned) {
+        this.publicSessions.set(input.key, {
+          sessionId: spawned.sessionId,
           accountId: input.accountId,
-          key: input.key,
-          role: input.role,
-          gatewayUrl: this.deps.gatewayUrl,
-          serverPath: this.deps.serverPath,
-          // Task 800 — only present on a session-targeted launch, so the
-          // default-path call shape stays byte-identical.
-          ...input.sessionId !== void 0 ? { sessionId: input.sessionId } : {},
-          // The authenticated admin's userId on an admin bootstrap inbound; the
-          // default-path call shape stays byte-identical when absent.
-          ...input.adminUserId !== void 0 ? { adminUserId: input.adminUserId } : {},
-          // Task 756 — public spawn params on a role:'public' inbound.
-          ...input.public !== void 0 ? { public: input.public } : {}
+          agentSlug: input.public.agentSlug,
+          sliceToken: input.public.sliceToken,
+          personId: input.public.personId,
+          lastActivityAt: Date.now()
         });
-        if (input.role === "public" && input.public && spawned && "sessionId" in spawned) {
-          this.publicSessions.set(input.key, {
-            sessionId: spawned.sessionId,
-            accountId: input.accountId,
-            agentSlug: input.public.agentSlug,
-            sliceToken: input.public.sliceToken,
-            personId: input.public.personId,
-            lastActivityAt: Date.now()
-          });
-        }
-      } finally {
-        this.spawning.delete(input.key);
       }
+    } catch (err) {
+      const reason = (err instanceof Error ? err.message : String(err)).replace(/\s+/g, " ");
+      console.error(
+        `[webchat:inbound] op=spawn-failed key=${keyDisplay(input.key)} role=${input.role} ms=${Date.now() - startedAt} reason=${reason}`
+      );
+      throw err;
+    } finally {
+      this.spawning.delete(input.key);
     }
   }
 };
 
-// app/lib/webchat/gateway/public-spawn-request.ts
-function buildPublicWebchatSpawnRequest(input) {
-  const { agentSlug, sliceToken, personId, visitorId, name } = input.public;
-  return {
-    senderId: input.key,
-    role: "public",
-    channel: "webchat",
-    accountId: input.accountId,
-    agentSlug,
-    model: SONNET_MODEL,
-    // sliceToken/personId are present only for a gated visitor; open-mode
-    // public agents carry neither (mirrors the bridge's open-mode key).
-    ...sliceToken ? { sliceToken } : {},
-    ...personId ? { personId } : {},
-    ...visitorId ? { visitorId } : {},
-    ...input.previousContext ? { previousContext: input.previousContext } : {},
-    name,
-    webchatChannel: { key: input.key, gatewayUrl: input.gatewayUrl, serverPath: input.serverPath }
-  };
-}
-
 // app/lib/channel-pty-bridge/follower.ts
 function followerPendingMaxMs() {
   return Number(process.env.CHANNEL_PTY_FOLLOWER_PENDING_MAX_MS ?? String(3e5));
@@ -24825,6 +24997,13 @@ function followerPendingMaxMs() {
 function followerRetryMs() {
   return Number(process.env.CHANNEL_PTY_FOLLOWER_RETRY_MS ?? String(1e3));
 }
+function toolResultText(content) {
+  if (typeof content === "string") return content;
+  if (!Array.isArray(content)) return "";
+  return content.map(
+    (b) => b && typeof b === "object" && typeof b.text === "string" ? b.text : ""
+  ).join("");
+}
 function startFollower(opts) {
   const abort = new AbortController();
   const { entry, tag } = opts;
@@ -24867,6 +25046,8 @@ function startFollower(opts) {
       const decoder = new TextDecoder("utf8");
       let buffered = "";
       const fileDelivery = opts.fileDelivery ?? null;
+      const captureVerdicts = typeof fileDelivery?.onFileToolResult === "function";
+      const awaitingVerdict = /* @__PURE__ */ new Set();
       let firedFileTools = [];
       let suppressing = opts.suppressResumeReplay === true;
       let discardedTurns = 0;
@@ -24900,6 +25081,28 @@ function startFollower(opts) {
             continue;
           }
           if (event.type === "user") {
+            if (captureVerdicts && awaitingVerdict.size > 0 && !suppressing) {
+              const umsg = event.message;
+              if (umsg && Array.isArray(umsg.content)) {
+                for (const block of umsg.content) {
+                  if (block?.type !== "tool_result") continue;
+                  const id = block.tool_use_id;
+                  if (typeof id !== "string" || !awaitingVerdict.has(id)) continue;
+                  awaitingVerdict.delete(id);
+                  try {
+                    await fileDelivery.onFileToolResult({
+                      toolUseId: id,
+                      isError: block.is_error === true,
+                      text: toolResultText(block.content)
+                    });
+                  } catch (err) {
+                    console.error(
+                      `${tag} file-delivery-error sessionId=${sid} phase=tool-result message=${err instanceof Error ? err.message : String(err)}`
+                    );
+                  }
+                }
+              }
+            }
             entry.pendingTurnText = "";
             firedFileTools = [];
             continue;
@@ -24921,8 +25124,10 @@ function startFollower(opts) {
                     continue;
                   }
                   firedFileTools.push(block.name);
+                  const toolUseId = typeof block.id === "string" ? block.id : "";
+                  if (captureVerdicts && toolUseId) awaitingVerdict.add(toolUseId);
                   try {
-                    await fileDelivery.onFileToolUse({ toolName: block.name, input: block.input });
+                    await fileDelivery.onFileToolUse({ toolName: block.name, toolUseId, input: block.input });
                   } catch (err) {
                     console.error(
                       `${tag} file-delivery-error sessionId=${sid} tool=${block.name} message=${err instanceof Error ? err.message : String(err)}`
@@ -24944,9 +25149,10 @@ function startFollower(opts) {
             if (flush.trim()) {
               await fanOut(entry.subscribers, flush, opts.onError, tag);
             }
-            if (fileDelivery && firedFileTools.length > 0) {
+            if (fileDelivery && (firedFileTools.length > 0 || captureVerdicts)) {
               const fired = firedFileTools;
               firedFileTools = [];
+              awaitingVerdict.clear();
               try {
                 fileDelivery.onTurnEnd(fired);
               } catch (err) {
@@ -24984,28 +25190,55 @@ async function fanOut(subscribers, text, onError, tag) {
   );
 }
 
+// app/lib/webchat/file-delivery.ts
+import { realpathSync as realpathSync8 } from "fs";
+import { resolve as resolve32 } from "path";
+
 // app/lib/channel-pty-bridge/file-delivery.ts
 var SEND_USER_FILE = "SendUserFile";
 function makeFileDelivery(opts) {
-  const { entry, tag, channel, sendFile } = opts;
+  const { entry, tag, channel, sendFile, deferUntilVerdict = false } = opts;
   let failedFiles = [];
   let attempts = 0;
-  return {
+  const pending = /* @__PURE__ */ new Map();
+  function parseInput(input) {
+    const i = input ?? {};
+    return {
+      // A non-array `files` yields zero files. This is the observed refused-call
+      // shape: with the tool absent from the enabled set its schema is absent
+      // from the request, so the model emits a JSON-encoded string. Never parse
+      // it back — the harness refused the call.
+      files: Array.isArray(i.files) ? i.files.filter((f) => typeof f === "string") : [],
+      caption: typeof i.caption === "string" ? i.caption : void 0
+    };
+  }
+  async function forward(call) {
+    for (let i = 0; i < call.files.length; i++) {
+      attempts++;
+      const result = await sendFile(call.files[i], i === 0 ? call.caption : void 0);
+      const name = call.files[i].split("/").pop() ?? call.files[i];
+      console.error(`${tag} op=file-forward channel=${channel} file=${name} outcome=${result.ok ? "ok" : "fail"}`);
+      if (!result.ok) failedFiles.push(call.files[i]);
+    }
+  }
+  function unreconciledCall(reason, files, detail) {
+    const d = detail ? ` detail="${detail.replace(/\s+/g, " ").slice(0, 120)}"` : "";
+    console.error(
+      `${tag} file-delivery-unreconciled sender=${entry.senderId} sessionId=${entry.sessionId.slice(0, 8)} tool=${SEND_USER_FILE} reason=${reason} files=${files}${d}`
+    );
+  }
+  const handler = {
     isFileDeliveryTool(toolName) {
       return toolName === SEND_USER_FILE;
     },
     async onFileToolUse(use) {
       if (use.toolName !== SEND_USER_FILE) return;
-      const input = use.input ?? {};
-      const files = Array.isArray(input.files) ? input.files.filter((f) => typeof f === "string") : [];
-      const caption = typeof input.caption === "string" ? input.caption : void 0;
-      for (let i = 0; i < files.length; i++) {
-        attempts++;
-        const result = await sendFile(files[i], i === 0 ? caption : void 0);
-        const name = files[i].split("/").pop() ?? files[i];
-        console.error(`${tag} op=file-forward channel=${channel} file=${name} outcome=${result.ok ? "ok" : "fail"}`);
-        if (!result.ok) failedFiles.push(files[i]);
+      const call = parseInput(use.input);
+      if (deferUntilVerdict) {
+        pending.set(use.toolUseId, call);
+        return;
       }
+      await forward(call);
     },
     onTurnEnd(firedTools) {
       const failed = failedFiles;
@@ -25018,6 +25251,11 @@ function makeFileDelivery(opts) {
           `${tag} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${SEND_USER_FILE} file=${file}`
         );
       }
+      if (deferUntilVerdict) {
+        for (const call of pending.values()) unreconciledCall("no-verdict", call.files.length);
+        pending.clear();
+        return;
+      }
       if (firedTools.includes(SEND_USER_FILE) && tried === 0) {
         console.error(
           `${tag} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${SEND_USER_FILE}`
@@ -25025,13 +25263,123 @@ function makeFileDelivery(opts) {
       }
     }
   };
+  if (deferUntilVerdict) {
+    handler.onFileToolResult = async (result) => {
+      const call = pending.get(result.toolUseId);
+      if (!call) return;
+      pending.delete(result.toolUseId);
+      if (result.isError) {
+        unreconciledCall("harness-refused", call.files.length, result.text);
+        return;
+      }
+      if (call.files.length === 0) {
+        unreconciledCall("no-files", 0);
+        return;
+      }
+      await forward(call);
+    };
+  }
+  return handler;
+}
+
+// app/lib/webchat/file-delivery.ts
+var TAG41 = "[webchat-adaptor]";
+function platformRoot2() {
+  return process.env.MAXY_PLATFORM_ROOT || "";
+}
+function makeWebchatSendFile(entry) {
+  return async (filePath) => {
+    if (!entry.accountId) {
+      console.error(`${TAG41} file-delivery reject reason=no-account sender=${entry.senderId}`);
+      return { ok: false, error: "no-account" };
+    }
+    const accountDir = resolve32(platformRoot2(), "..", "data/accounts", entry.accountId);
+    try {
+      const resolved = realpathSync8(filePath);
+      const accountResolved = realpathSync8(accountDir);
+      if (!resolved.startsWith(accountResolved + "/")) {
+        console.error(`${TAG41} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
+        return { ok: false, error: "outside-account" };
+      }
+      return { ok: true };
+    } catch (err) {
+      const code = err.code;
+      console.error(
+        `${TAG41} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
+      );
+      return { ok: false, error: code === "ENOENT" ? "not-found" : "path-error" };
+    }
+  };
+}
+function makeWebchatFileDelivery(entry) {
+  return makeFileDelivery({
+    entry,
+    tag: TAG41,
+    channel: "webchat",
+    sendFile: makeWebchatSendFile(entry),
+    deferUntilVerdict: true
+  });
+}
+
+// app/lib/webchat/gateway/native-file-follower.ts
+function startWebchatNativeFileFollower(input) {
+  const entry = {
+    sessionId: input.sessionId,
+    role: "admin",
+    channel: "webchat",
+    accountId: input.accountId,
+    senderId: input.key,
+    agentSlug: "admin",
+    lastInboundAt: Date.now(),
+    writeChain: Promise.resolve(),
+    subscribers: /* @__PURE__ */ new Set(),
+    pendingTurnText: "",
+    followerAbort: null,
+    followerRunning: false,
+    sliceToken: "",
+    personId: null,
+    name: null,
+    // Webchat renders from the transcript; there is no separate reply target.
+    replyTarget: null
+  };
+  return startFollower({
+    entry,
+    tag: "[webchat-adaptor]",
+    fileDelivery: makeWebchatFileDelivery(entry),
+    // A resumed session's JSONL already holds prior SendUserFile tool_uses;
+    // suppress replay so historical calls are not re-reconciled on attach.
+    suppressResumeReplay: true,
+    onClose: input.onClose ?? (() => {
+    })
+  });
+}
+
+// app/lib/webchat/gateway/public-spawn-request.ts
+function buildPublicWebchatSpawnRequest(input) {
+  const { agentSlug, sliceToken, personId, visitorId, name } = input.public;
+  return {
+    senderId: input.key,
+    role: "public",
+    channel: "webchat",
+    accountId: input.accountId,
+    agentSlug,
+    model: SONNET_MODEL,
+    // sliceToken/personId are present only for a gated visitor; open-mode
+    // public agents carry neither (mirrors the bridge's open-mode key).
+    ...sliceToken ? { sliceToken } : {},
+    ...personId ? { personId } : {},
+    ...visitorId ? { visitorId } : {},
+    ...input.previousContext ? { previousContext: input.previousContext } : {},
+    name,
+    webchatChannel: { key: input.key, gatewayUrl: input.gatewayUrl, serverPath: input.serverPath }
+  };
 }
 
 // app/lib/whatsapp/inbound/file-delivery-bridge.ts
-var TAG41 = "[whatsapp-adaptor]";
+var TAG42 = "[whatsapp-adaptor]";
 var SEND_USER_FILE2 = "SendUserFile";
 var WHATSAPP_SEND_DOCUMENT = "whatsapp-send-document";
-function platformRoot2() {
+function platformRoot3() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeWhatsAppSendFile(entry, maxyAccountId) {
@@ -25042,11 +25390,11 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
       caption,
       accountId: entry.accountId,
       maxyAccountId,
-      platformRoot: platformRoot2()
+      platformRoot: platformRoot3()
     });
     if (result.ok) return { ok: true };
     console.error(
-      `${TAG41} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
+      `${TAG42} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
     );
     return { ok: false, error: result.error };
   };
@@ -25054,7 +25402,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
 function makeWhatsAppFileDelivery(entry, maxyAccountId) {
   const shared = makeFileDelivery({
     entry,
-    tag: TAG41,
+    tag: TAG42,
     channel: "whatsapp",
     sendFile: makeWhatsAppSendFile(entry, maxyAccountId)
   });
@@ -25089,7 +25437,7 @@ function makeWhatsAppFileDelivery(entry, maxyAccountId) {
         if (!delivered) {
           const fileField = call.filePath !== void 0 ? ` file=${call.filePath}` : "";
           console.error(
-            `${TAG41} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+            `${TAG42} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
           );
         }
       }
@@ -25480,35 +25828,35 @@ function buildTelegramSpawnRequest(input) {
 }
 
 // app/lib/telegram/outbound/send-document.ts
-import { realpathSync as realpathSync7 } from "fs";
+import { realpathSync as realpathSync9 } from "fs";
 import { readFile as readFile7, stat as stat7 } from "fs/promises";
-import { resolve as resolve32, basename as basename11 } from "path";
-var TAG42 = "[telegram:outbound]";
+import { resolve as resolve33, basename as basename11 } from "path";
+var TAG43 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
-  const { botToken, chatId, filePath, caption, maxyAccountId, platformRoot: platformRoot4 } = input;
+  const { botToken, chatId, filePath, caption, maxyAccountId, platformRoot: platformRoot5 } = input;
   if (!botToken || !filePath) {
     return { ok: false, status: 400, error: "Missing required fields: botToken, filePath" };
   }
-  if (!maxyAccountId || !platformRoot4) {
+  if (!maxyAccountId || !platformRoot5) {
     return { ok: false, status: 400, error: "Cannot validate file path: missing account or platform context" };
   }
-  const accountDir = resolve32(platformRoot4, "..", "data/accounts", maxyAccountId);
+  const accountDir = resolve33(platformRoot5, "..", "data/accounts", maxyAccountId);
   let resolvedPath;
   try {
-    resolvedPath = realpathSync7(filePath);
-    const accountResolved = realpathSync7(accountDir);
+    resolvedPath = realpathSync9(filePath);
+    const accountResolved = realpathSync9(accountDir);
     if (!resolvedPath.startsWith(accountResolved + "/")) {
-      console.error(`${TAG42} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG43} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
     }
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG42} document ENOENT path=${filePath}`);
+      console.error(`${TAG43} document ENOENT path=${filePath}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG42} document path error: ${String(err)}`);
+    console.error(`${TAG43} document path error: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   const fileStat = await stat7(resolvedPath);
@@ -25541,14 +25889,14 @@ async function sendTelegramDocument(input) {
     error = e instanceof Error ? e.message : String(e);
   }
   console.error(
-    `${TAG42} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok}` + (messageId !== void 0 ? ` id=${messageId}` : "")
+    `${TAG43} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok}` + (messageId !== void 0 ? ` id=${messageId}` : "")
   );
   return ok ? { ok: true, messageId } : { ok: false, status: 500, error };
 }
 
 // app/lib/telegram/outbound/file-delivery.ts
-var TAG43 = "[telegram:outbound]";
-function platformRoot3() {
+var TAG44 = "[telegram:outbound]";
+function platformRoot4() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeTelegramSendFile(entry) {
@@ -25559,11 +25907,11 @@ function makeTelegramSendFile(entry) {
       botToken = (entry.role === "admin" ? tg?.adminBotToken : tg?.publicBotToken) ?? null;
     }
     if (!botToken) {
-      console.error(`${TAG43} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG44} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-bot-token" };
     }
     if (entry.replyTarget == null) {
-      console.error(`${TAG43} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG44} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-reply-target" };
     }
     const result = await sendTelegramDocument({
@@ -25572,7 +25920,7 @@ function makeTelegramSendFile(entry) {
       filePath,
       caption,
       maxyAccountId: entry.accountId,
-      platformRoot: platformRoot3()
+      platformRoot: platformRoot4()
     });
     return result.ok ? { ok: true } : { ok: false, error: result.error };
   };
@@ -25580,7 +25928,7 @@ function makeTelegramSendFile(entry) {
 function makeTelegramFileDelivery(entry) {
   return makeFileDelivery({
     entry,
-    tag: TAG43,
+    tag: TAG44,
     channel: "telegram",
     sendFile: makeTelegramSendFile(entry)
   });
@@ -25620,17 +25968,17 @@ function startTelegramNativeFileFollower(input) {
 }
 
 // server/telegram-descriptor.ts
-import { resolve as resolve33, join as join37 } from "path";
+import { resolve as resolve34, join as join37 } from "path";
 function telegramGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function telegramServerPath() {
-  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve33(process.env.MAXY_PLATFORM_ROOT ?? join37(__dirname, ".."), "services/telegram-channel/dist/server.js");
+  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve34(process.env.MAXY_PLATFORM_ROOT ?? join37(__dirname, ".."), "services/telegram-channel/dist/server.js");
 }
 
 // app/lib/channel-pty-bridge/public-session-end-review.ts
-import { randomUUID as randomUUID15 } from "crypto";
-var TAG44 = "[public-session-review]";
+import { randomUUID as randomUUID16 } from "crypto";
+var TAG45 = "[public-session-review]";
 var CONSUMED_CAP = 500;
 var consumed = /* @__PURE__ */ new Set();
 function consumeOnce(sessionId) {
@@ -25657,7 +26005,7 @@ async function fetchJsonl(sessionId) {
     return await res.text();
   } catch (err) {
     console.error(
-      `${TAG44} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG45} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return null;
   }
@@ -25681,7 +26029,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     const res = await fetch(url);
     if (!res.ok) {
       console.error(
-        `${TAG44} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
+        `${TAG45} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
       );
       return [];
     }
@@ -25689,7 +26037,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     return Array.isArray(body.writes) ? body.writes : [];
   } catch (err) {
     console.error(
-      `${TAG44} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG45} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return [];
   }
@@ -25717,8 +26065,8 @@ function composeInitialMessage(input) {
   ].join("\n");
 }
 async function dispatchReviewer(input, initialMessage) {
-  const sessionId = randomUUID15();
-  console.log(`${TAG44} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
+  const sessionId = randomUUID16();
+  console.log(`${TAG45} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -25738,21 +26086,21 @@ async function firePublicSessionEndReview(input) {
   const dispatchedAt = Date.now();
   if (consumed.has(input.sessionId)) {
     console.log(
-      `${TAG44} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const jsonl = await fetchJsonl(input.sessionId);
   if (!jsonl) {
     console.log(
-      `${TAG44} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
+      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
     );
     return;
   }
   const operatorTurns = countOperatorTurns(jsonl);
   if (operatorTurns === 0) {
     console.log(
-      `${TAG44} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
+      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
     );
     return;
   }
@@ -25766,19 +26114,19 @@ async function firePublicSessionEndReview(input) {
   });
   if (!consumeOnce(input.sessionId)) {
     console.log(
-      `${TAG44} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const dispatched = await dispatchReviewer(input, initialMessage);
   if (!dispatched.ok) {
     console.error(
-      `${TAG44} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
+      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
     );
     return;
   }
   console.log(
-    `${TAG44} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
+    `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
   );
 }
 
@@ -25888,7 +26236,7 @@ function broadcastAdminShutdown(reason) {
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash6, verify as cryptoVerify } from "crypto";
 import { existsSync as existsSync35, readFileSync as readFileSync37, statSync as statSync13 } from "fs";
-import { resolve as resolve34 } from "path";
+import { resolve as resolve35 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
 function canonicalize(value) {
@@ -25923,7 +26271,7 @@ var PUBKEY_SHA256 = "8eee6bcb33545fd13b16d3199a5735ca5db5062834c7b49dfe4f23801d9
 var GRACE_DAYS = 7;
 var GRACE_MS = GRACE_DAYS * 24 * 60 * 60 * 1e3;
 function pubkeyPath(brand) {
-  return resolve34(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
+  return resolve35(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
 }
 var memo = null;
 function memoKey(mtimeMs, account) {
@@ -25935,7 +26283,7 @@ function resolveEntitlement(brand, account) {
   if (brand.commercialMode !== true) {
     return logResolved(implicitTrust(account), null);
   }
-  const entitlementPath = resolve34(brand.configDir, "entitlement.json");
+  const entitlementPath = resolve35(brand.configDir, "entitlement.json");
   if (!existsSync35(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
@@ -26195,6 +26543,7 @@ function isPublicHost(host) {
 }
 var app62 = new Hono();
 var nativeFileFollowers = /* @__PURE__ */ new Map();
+var webchatFileFollowers = /* @__PURE__ */ new Map();
 async function fetchAccountStandingRules(accountId) {
   const session = getSession();
   try {
@@ -26232,7 +26581,7 @@ async function recordPassiveDispatch(input) {
 var waGateway = new WaGateway({
   fetchStandingRules: fetchAccountStandingRules,
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve35(process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve36(process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -26247,7 +26596,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve35(process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, ".."))
+      platformRoot: resolve36(process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -26405,6 +26754,20 @@ var webchatGateway = new WebchatGateway({
       console.error(`[webchat:inbound] op=spawn-failed key=${key} error=${result.error} status=${result.status}`);
       return;
     }
+    const priorWebchatFollower = webchatFileFollowers.get(key);
+    if (priorWebchatFollower) priorWebchatFollower.abort();
+    let wac;
+    wac = startWebchatNativeFileFollower({
+      sessionId: result.sessionId,
+      key,
+      // The session's own resolved account (house or sub-account) — the
+      // file-path validation scope, exactly as passed to the spawn above.
+      accountId,
+      onClose: () => {
+        if (webchatFileFollowers.get(key) === wac) webchatFileFollowers.delete(key);
+      }
+    });
+    webchatFileFollowers.set(key, wac);
     return { sessionId: result.sessionId };
   },
   // Task-962 — the recovery pass asks the manager to respawn a wedged already-
@@ -26866,8 +27229,8 @@ app62.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] no-account slug=${slug} file=${filename}`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve35(account.accountDir, "agents", slug, "assets", filename);
-  const expectedDir = resolve35(account.accountDir, "agents", slug, "assets");
+  const filePath = resolve36(account.accountDir, "agents", slug, "assets", filename);
+  const expectedDir = resolve36(account.accountDir, "agents", slug, "assets");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
@@ -26896,8 +27259,8 @@ app62.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve35(account.accountDir, "generated", filename);
-  const expectedDir = resolve35(account.accountDir, "generated");
+  const filePath = resolve36(account.accountDir, "generated", filename);
+  const expectedDir = resolve36(account.accountDir, "generated");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
@@ -26951,11 +27314,11 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 var brandThemeColor = BRAND.defaultColors?.primary ?? "#000000";
 var brandBackgroundColor = BRAND.defaultColors?.background ?? "#ffffff";
 var brandAppIconsExist = [brandAppIcon192Path, brandAppIcon512Path, brandMaskableIconPath].every(
-  (p) => existsSync36(resolve35(process.cwd(), "public", p.replace(/^\//, "")))
+  (p) => existsSync36(resolve36(process.cwd(), "public", p.replace(/^\//, "")))
 );
 var SW_SOURCE = (() => {
   try {
-    return readFileSync38(resolve35(process.cwd(), "public", "sw.js"), "utf-8");
+    return readFileSync38(resolve36(process.cwd(), "public", "sw.js"), "utf-8");
   } catch {
     return null;
   }
@@ -27006,7 +27369,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync38(resolve35(process.cwd(), "public", file), "utf-8");
+    html = readFileSync38(resolve36(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -27124,7 +27487,7 @@ app62.use("/vnc-popout.html", logViewerFetch);
 app62.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync38(resolve35(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync38(resolve36(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -27257,7 +27620,7 @@ var httpServer = serve({ fetch: app62.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
   const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, "..");
-  const reconcileScript = resolve35(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
+  const reconcileScript = resolve36(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const RECONCILE_INTERVAL_MS = 12e4;
   const runReconcile = () => {
     if (!existsSync36(reconcileScript)) return;
@@ -27279,7 +27642,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, "..");
-  const outlookScript = resolve35(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
+  const outlookScript = resolve36(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = () => {
     if (!existsSync36(outlookScript)) return;
@@ -27301,7 +27664,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, "..");
-  const strandedAccountsDir = resolve35(auditRoot, "..", "data/accounts");
+  const strandedAccountsDir = resolve36(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
   const STRANDED_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -27311,7 +27674,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
       const now = Date.now();
       for (const name of readdirSync21(strandedAccountsDir)) {
         if (!STRANDED_UUID_RE.test(name)) continue;
-        const pendingPath2 = resolve35(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
+        const pendingPath2 = resolve36(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
         if (!existsSync36(pendingPath2)) continue;
         const ageMs = now - statSync14(pendingPath2).mtimeMs;
         if (ageMs > STRANDED_AGE_MS) {
@@ -27339,10 +27702,19 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   auditFirst.unref();
   const auditLoop = setInterval(runStorageAuditSafe, STORAGE_AUDIT_INTERVAL_MS);
   auditLoop.unref();
+  const runPagesAuditSafe = () => {
+    runPagesAudit(auditPlatformRoot).catch(
+      (err) => console.error(`[pages-audit] error="${err.message}"`)
+    );
+  };
+  const pagesAuditFirst = setTimeout(runPagesAuditSafe, 35e3);
+  pagesAuditFirst.unref();
+  const pagesAuditLoop = setInterval(runPagesAuditSafe, STORAGE_AUDIT_INTERVAL_MS);
+  pagesAuditLoop.unref();
 }
 {
   const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, "..");
-  const publishScript = resolve35(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
+  const publishScript = resolve36(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const currentAccount = () => {
     try {
@@ -27371,7 +27743,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     }
   };
   const auditSnapshotAge = (account) => {
-    const availPath = resolve35(account.accountDir, "calendar-availability.json");
+    const availPath = resolve36(account.accountDir, "calendar-availability.json");
     let hasBookingSite = false;
     try {
       if (existsSync36(availPath)) {
@@ -27381,7 +27753,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     } catch {
     }
     if (!hasBookingSite) return;
-    const statePath = resolve35(account.accountDir, "state", "booking-availability", "last-publish.json");
+    const statePath = resolve36(account.accountDir, "state", "booking-availability", "last-publish.json");
     let lastSuccessAt = null;
     if (existsSync36(statePath)) {
       try {
@@ -27410,7 +27782,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startTimeEntryCensus(() => getSession());
 {
   const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, "..");
-  const auditScript = resolve35(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
+  const auditScript = resolve36(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
   const runConnectorAudit = () => {
@@ -27679,7 +28051,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve35(process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, "..")),
+  platformRoot: resolve36(process.env.MAXY_PLATFORM_ROOT ?? join38(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     if (msg.isOwnerMirror) {