@rubytech/create-maxy-code 0.1.463 → 0.1.465

package/payload/server/server.js

@@ -1422,10 +1422,10 @@ var createStreamBody = (stream2) => {
   });
   return body;
 };
-var getStats = (path2) => {
+var getStats = (path3) => {
   let stats;
   try {
-    stats = statSync(path2);
+    stats = statSync(path3);
   } catch {
   }
   return stats;
@@ -1468,21 +1468,21 @@ var serveStatic = (options = { root: "" }) => {
         return next();
       }
     }
-    let path2 = join(
+    let path3 = join(
       root,
       !optionPath && options.rewriteRequestPath ? options.rewriteRequestPath(filename, c) : filename
     );
-    let stats = getStats(path2);
+    let stats = getStats(path3);
     if (stats && stats.isDirectory()) {
       const indexFile2 = options.index ?? "index.html";
-      path2 = join(path2, indexFile2);
-      stats = getStats(path2);
+      path3 = join(path3, indexFile2);
+      stats = getStats(path3);
     }
     if (!stats) {
-      await options.onNotFound?.(path2, c);
+      await options.onNotFound?.(path3, c);
       return next();
     }
-    const mimeType = getMimeType(path2);
+    const mimeType = getMimeType(path3);
     c.header("Content-Type", mimeType || "application/octet-stream");
     if (options.precompressed && (!mimeType || COMPRESSIBLE_CONTENT_TYPE_REGEX.test(mimeType))) {
       const acceptEncodingSet = new Set(
@@ -1492,12 +1492,12 @@ var serveStatic = (options = { root: "" }) => {
         if (!acceptEncodingSet.has(encoding)) {
           continue;
         }
-        const precompressedStats = getStats(path2 + ENCODINGS[encoding]);
+        const precompressedStats = getStats(path3 + ENCODINGS[encoding]);
         if (precompressedStats) {
           c.header("Content-Encoding", encoding);
           c.header("Vary", "Accept-Encoding", { append: true });
           stats = precompressedStats;
-          path2 = path2 + ENCODINGS[encoding];
+          path3 = path3 + ENCODINGS[encoding];
           break;
         }
       }
@@ -1511,7 +1511,7 @@ var serveStatic = (options = { root: "" }) => {
       result = c.body(null);
     } else if (!range) {
       c.header("Content-Length", size.toString());
-      result = c.body(createStreamBody(createReadStream(path2)), 200);
+      result = c.body(createStreamBody(createReadStream(path3)), 200);
     } else {
       c.header("Accept-Ranges", "bytes");
       c.header("Date", stats.birthtime.toUTCString());
@@ -1522,12 +1522,12 @@ var serveStatic = (options = { root: "" }) => {
         end = size - 1;
       }
       const chunksize = end - start + 1;
-      const stream2 = createReadStream(path2, { start, end });
+      const stream2 = createReadStream(path3, { start, end });
       c.header("Content-Length", chunksize.toString());
       c.header("Content-Range", `bytes ${start}-${end}/${stats.size}`);
       result = c.body(createStreamBody(stream2), 206);
     }
-    await options.onFound?.(path2, c);
+    await options.onFound?.(path3, c);
     return result;
   };
 };
@@ -2176,7 +2176,7 @@ function listCredentialAccountIds(configDir2) {
 // app/lib/whatsapp/session.ts
 import { randomUUID } from "crypto";
 import fsSync2 from "fs";
-import fs2 from "fs/promises";
+import fs3 from "fs/promises";
 import { inspect } from "util";
 import {
   Browsers,
@@ -2187,7 +2187,63 @@ import {
   useMultiFileAuthState
 } from "@whiskeysockets/baileys";
 import { createRequire } from "module";
+
+// app/lib/whatsapp/baileys-debug-window.ts
+import fs2 from "fs";
+import path2 from "path";
 var TAG2 = "[whatsapp:session]";
+var SENTINEL_BASENAME = "baileys-debug-until";
+var STAT_INTERVAL_MS = 1e3;
+var VALID_LEVELS = /* @__PURE__ */ new Set(["trace", "debug", "info"]);
+var INACTIVE = { active: false, level: "warn" };
+var cache = /* @__PURE__ */ new Map();
+function sentinelPath(authDir) {
+  return path2.join(authDir, SENTINEL_BASENAME);
+}
+function readSentinel(authDir, nowMs) {
+  let raw;
+  try {
+    raw = fs2.readFileSync(sentinelPath(authDir), "utf-8");
+  } catch {
+    return { state: INACTIVE, deadlineMs: null };
+  }
+  const line = raw.split("\n", 1)[0].trim();
+  if (!line) return { state: INACTIVE, deadlineMs: null };
+  const tokens = line.split(/\s+/);
+  const deadlineMs = Date.parse(tokens[0]);
+  if (Number.isNaN(deadlineMs) || deadlineMs <= nowMs) {
+    return { state: INACTIVE, deadlineMs: null };
+  }
+  let level = "trace";
+  if (tokens.length > 1) {
+    if (!VALID_LEVELS.has(tokens[1])) return { state: INACTIVE, deadlineMs: null };
+    level = tokens[1];
+  }
+  return { state: { active: true, level }, deadlineMs };
+}
+function resolveDebugWindow(authDir, nowMs = Date.now()) {
+  if (!authDir) return INACTIVE;
+  const prev = cache.get(authDir);
+  if (prev && nowMs - prev.checkedAtMs < STAT_INTERVAL_MS) {
+    return prev.state;
+  }
+  const { state, deadlineMs } = readSentinel(authDir, nowMs);
+  const wasActive = prev?.state.active ?? false;
+  if (!wasActive && state.active) {
+    console.error(
+      `${TAG2} op=baileys-debug-window-open account=${path2.basename(authDir)} level=${state.level} until=${new Date(deadlineMs).toISOString()}`
+    );
+  } else if (wasActive && !state.active) {
+    console.error(
+      `${TAG2} op=baileys-debug-window-close account=${path2.basename(authDir)}`
+    );
+  }
+  cache.set(authDir, { checkedAtMs: nowMs, state });
+  return state;
+}
+
+// app/lib/whatsapp/session.ts
+var TAG3 = "[whatsapp:session]";
 var WIRE_TAG = "[whatsapp:wire]";
 var baileysPkgVersion = (() => {
   try {
@@ -2197,7 +2253,7 @@ var baileysPkgVersion = (() => {
     return "unknown";
   }
 })();
-console.error(`${TAG2} baileys package loaded version=${baileysPkgVersion}`);
+console.error(`${TAG3} baileys package loaded version=${baileysPkgVersion}`);
 var __BAILEYS_TAG = "[whatsapp:baileys]";
 var INSPECT_OPTS = {
   depth: null,
@@ -2222,7 +2278,8 @@ function bindingsToPrefix(bindings) {
   }
   return parts.join(" ");
 }
-function createBaileysLogger(bindings = {}) {
+var LEVEL_RANK = { trace: 10, debug: 20, info: 30 };
+function createBaileysLogger(bindings = {}, authDir) {
   const prefix = Object.keys(bindings).length > 0 ? bindingsToPrefix(bindings) : "";
   const emit = (level, args) => {
     const serialized = args.map(serializeArg).join(" ");
@@ -2232,23 +2289,32 @@ function createBaileysLogger(bindings = {}) {
       console.error(__BAILEYS_TAG, level, serialized);
     }
   };
+  const emitIfWindowed = (rank, level, args) => {
+    const w = resolveDebugWindow(authDir);
+    if (w.active && rank >= LEVEL_RANK[w.level]) {
+      emit(level, args);
+    }
+  };
   return {
-    level: "warn",
-    trace: () => {
-    },
-    debug: () => {
-    },
-    info: () => {
+    // Live getter: Baileys reads config.logger.level per-frame and (verified on
+    // the pinned version) never shallow-copies the logger, so the window's level
+    // reaches socket.js:449/465 as it changes. A Baileys that spread the logger
+    // would freeze this to one value — revisit on upgrade.
+    get level() {
+      return resolveDebugWindow(authDir).level;
     },
+    trace: (...args) => emitIfWindowed(LEVEL_RANK.trace, "TRACE", args),
+    debug: (...args) => emitIfWindowed(LEVEL_RANK.debug, "DEBUG", args),
+    info: (...args) => emitIfWindowed(LEVEL_RANK.info, "INFO", args),
     warn: (...args) => emit("WARN", args),
     error: (...args) => emit("ERROR", args),
     fatal: (...args) => emit("FATAL", args),
-    child: (childBindings) => createBaileysLogger({ ...bindings, ...childBindings ?? {} })
+    child: (childBindings) => createBaileysLogger({ ...bindings, ...childBindings ?? {} }, authDir)
   };
 }
 var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
-  console.error(`${TAG2} draining credential save queue\u2026`);
+  console.error(`${TAG3} draining credential save queue\u2026`);
   const timer2 = new Promise(
     (resolve37) => setTimeout(() => resolve37("timeout"), timeoutMs)
   );
@@ -2257,9 +2323,9 @@ async function drainCredsSaveQueue(timeoutMs = 5e3) {
     timer2
   ]);
   if (result === "timeout") {
-    console.error(`${TAG2} credential save queue drain timed out after ${timeoutMs}ms`);
+    console.error(`${TAG3} credential save queue drain timed out after ${timeoutMs}ms`);
   } else {
-    console.error(`${TAG2} credential save queue drained`);
+    console.error(`${TAG3} credential save queue drained`);
   }
 }
 function readCredsJsonRaw2(filePath) {
@@ -2282,53 +2348,53 @@ async function safeSaveCreds(authDir, saveCreds) {
         JSON.parse(raw);
         fsSync2.copyFileSync(credsPath, backupPath);
       } catch (err) {
-        console.warn(`${TAG2} backup pre-copy failed (parse or write) authDir=${authDir}: ${String(err)}`);
+        console.warn(`${TAG3} backup pre-copy failed (parse or write) authDir=${authDir}: ${String(err)}`);
       }
     }
   } catch (err) {
-    console.warn(`${TAG2} backup preparation failed authDir=${authDir}: ${String(err)}`);
+    console.warn(`${TAG3} backup preparation failed authDir=${authDir}: ${String(err)}`);
   }
   try {
     await Promise.resolve(saveCreds());
     const credsPath = resolveCredsPath(authDir);
     try {
-      const stats = await fs2.stat(credsPath);
+      const stats = await fs3.stat(credsPath);
       if (stats.size <= 1) {
-        console.error(`${TAG2} WARNING: creds file empty/truncated after save path=${credsPath} size=${stats.size}`);
+        console.error(`${TAG3} WARNING: creds file empty/truncated after save path=${credsPath} size=${stats.size}`);
       } else {
-        console.error(`${TAG2} creds saved and verified path=${credsPath} size=${stats.size}`);
+        console.error(`${TAG3} creds saved and verified path=${credsPath} size=${stats.size}`);
       }
     } catch (statErr) {
-      console.error(`${TAG2} creds NOT found on disk after save path=${credsPath}: ${String(statErr)}`);
+      console.error(`${TAG3} creds NOT found on disk after save path=${credsPath}: ${String(statErr)}`);
     }
   } catch (err) {
-    console.error(`${TAG2} failed saving creds to ${authDir}: ${String(err)}`);
+    console.error(`${TAG3} failed saving creds to ${authDir}: ${String(err)}`);
   }
 }
 function enqueueSaveCreds(authDir, saveCreds) {
   credsSaveQueue = credsSaveQueue.then(() => safeSaveCreds(authDir, saveCreds)).catch((err) => {
-    console.error(`${TAG2} creds save queue error: ${String(err)}`);
+    console.error(`${TAG3} creds save queue error: ${String(err)}`);
   });
 }
 async function createWaSocket(opts) {
   const { authDir, onQr, onConnectionUpdate, silent, correlationId, account, getCodeIssuedTs } = opts;
   const cid = correlationId ?? "none";
   const acct = account ?? "unknown";
-  await fs2.mkdir(authDir, { recursive: true });
+  await fs3.mkdir(authDir, { recursive: true });
   maybeRestoreCredsFromBackup(authDir);
   const { state, saveCreds } = await useMultiFileAuthState(authDir);
   const { version } = await fetchLatestBaileysVersion();
   if (!silent) {
     const preCensus = credsCensus(authDir);
     console.error(
-      `${TAG2} op=creds-pre cid=${cid} account=${acct} credsPresent=${preCensus.credsPresent} registered=${preCensus.registered} hasAccount=${preCensus.hasAccountSignature}`
+      `${TAG3} op=creds-pre cid=${cid} account=${acct} credsPresent=${preCensus.credsPresent} registered=${preCensus.registered} hasAccount=${preCensus.hasAccountSignature}`
     );
   }
   const openTs = Date.now();
   console.error(
-    `${TAG2} op=socket-open cid=${cid} account=${acct} baileysVersion=${baileysPkgVersion} waProtocolVersion=${version.join(".")} openTs=${openTs}`
+    `${TAG3} op=socket-open cid=${cid} account=${acct} baileysVersion=${baileysPkgVersion} waProtocolVersion=${version.join(".")} openTs=${openTs}`
   );
-  const baileysLogger = createBaileysLogger();
+  const baileysLogger = createBaileysLogger({}, authDir);
   const sock = makeWASocket({
     auth: {
       creds: state.creds,
@@ -2343,7 +2409,7 @@ async function createWaSocket(opts) {
     fireInitQueries: false
   });
   sock.ev.on("creds.update", () => {
-    console.error(`${TAG2} creds.update received \u2014 saving to ${authDir}`);
+    console.error(`${TAG3} creds.update received \u2014 saving to ${authDir}`);
     enqueueSaveCreds(authDir, saveCreds);
   });
   let qrSequence = 0;
@@ -2363,14 +2429,14 @@ async function createWaSocket(opts) {
         parts.push(`disconnectReason=${formatError(update.lastDisconnect.error)}`);
       }
       if (!silent && parts.length > 0) {
-        console.error(`${TAG2} connection.update ${parts.join(" ")}`);
+        console.error(`${TAG3} connection.update ${parts.join(" ")}`);
       }
       if (update.qr && !silent) {
         const now = Date.now();
         const sinceLastRefMs = lastQrTs ? now - lastQrTs : null;
         lastQrTs = now;
         console.error(
-          `${TAG2} op=qr cid=${cid} qr=#${qrSequence} sinceOpenMs=${now - openTs} sinceLastRefMs=${sinceLastRefMs ?? "n/a"}`
+          `${TAG3} op=qr cid=${cid} qr=#${qrSequence} sinceOpenMs=${now - openTs} sinceLastRefMs=${sinceLastRefMs ?? "n/a"}`
         );
       }
       if (update.isNewLogin === true && !pairSuccessLogged && !silent) {
@@ -2379,7 +2445,7 @@ async function createWaSocket(opts) {
         const sinceCodeIssuedMs = codeIssuedTs ? Date.now() - codeIssuedTs : null;
         const afterCensus = credsCensus(authDir);
         console.error(
-          `${TAG2} op=pair-success cid=${cid} account=${acct} sinceCodeIssuedMs=${sinceCodeIssuedMs ?? "n/a"} hasAccountAfter=${afterCensus.hasAccountSignature}`
+          `${TAG3} op=pair-success cid=${cid} account=${acct} sinceCodeIssuedMs=${sinceCodeIssuedMs ?? "n/a"} hasAccountAfter=${afterCensus.hasAccountSignature}`
         );
       }
       if (update.qr && onQr) {
@@ -2389,25 +2455,25 @@ async function createWaSocket(opts) {
         const status = getStatusCode(update.lastDisconnect?.error);
         if (!silent) {
           console.error(
-            `${TAG2} op=close cid=${cid} account=${acct} status=${status ?? "unknown"} reason="${formatError(update.lastDisconnect?.error)}" socketLifeMs=${Date.now() - openTs} kind=${closeKind(status, everOpen)}`
+            `${TAG3} op=close cid=${cid} account=${acct} status=${status ?? "unknown"} reason="${formatError(update.lastDisconnect?.error)}" socketLifeMs=${Date.now() - openTs} kind=${closeKind(status, everOpen)}`
           );
         }
         if (status === DisconnectReason.loggedOut && !silent) {
-          console.error(`${TAG2} session logged out (401) \u2014 re-link required`);
+          console.error(`${TAG3} session logged out (401) \u2014 re-link required`);
         }
       }
       if (update.connection === "open") {
         everOpen = true;
-        if (!silent) console.error(`${TAG2} connected`);
+        if (!silent) console.error(`${TAG3} connected`);
       }
       onConnectionUpdate?.(update);
     } catch (err) {
-      console.error(`${TAG2} connection.update handler error: ${String(err)}`);
+      console.error(`${TAG3} connection.update handler error: ${String(err)}`);
     }
   });
   if (sock.ws && typeof sock.ws.on === "function") {
     sock.ws.on("error", (err) => {
-      console.error(`${TAG2} WebSocket error: ${String(err)}`);
+      console.error(`${TAG3} WebSocket error: ${String(err)}`);
     });
     sock.ws.on("CB:message", (node) => {
       const attrs = node?.attrs ?? {};
@@ -2547,7 +2613,7 @@ function withTimeout(label, promise, timeoutMs) {
 }
 
 // app/lib/whatsapp/init-queries.ts
-var TAG3 = "[whatsapp:init]";
+var TAG4 = "[whatsapp:init]";
 var DEFAULT_QUERY_TIMEOUT_MS = 15e3;
 var INSPECT_OPTS2 = {
   depth: null,
@@ -2575,20 +2641,20 @@ async function runInitQueries(sock, ctx) {
     elapsedMs: 0
   };
   console.error(
-    `${TAG3} runInitQueries start account=${ctx.accountId} attempt=${ctx.attempt} selfPhone=${ctx.selfPhone ?? "unknown"} authDir=${ctx.authDir} queryTimeoutMs=${queryTimeoutMs}`
+    `${TAG4} runInitQueries start account=${ctx.accountId} attempt=${ctx.attempt} selfPhone=${ctx.selfPhone ?? "unknown"} authDir=${ctx.authDir} queryTimeoutMs=${queryTimeoutMs}`
   );
   console.error(
-    `${TAG3} fetchProps SKIPPED account=${ctx.accountId} reason=no-platform-consumer`
+    `${TAG4} fetchProps SKIPPED account=${ctx.accountId} reason=no-platform-consumer`
   );
   if (ctx.signal?.aborted) {
     result.aborted = true;
     result.elapsedMs = Date.now() - startedAt;
     console.error(
-      `${TAG3} runInitQueries aborted before start account=${ctx.accountId}`
+      `${TAG4} runInitQueries aborted before start account=${ctx.accountId}`
     );
     return result;
   }
-  console.error(`${TAG3} fetchBlocklist start account=${ctx.accountId}`);
+  console.error(`${TAG4} fetchBlocklist start account=${ctx.accountId}`);
   try {
     const blocklist = await withTimeout(
       "fetchBlocklist",
@@ -2598,24 +2664,24 @@ async function runInitQueries(sock, ctx) {
     const count = Array.isArray(blocklist) ? blocklist.length : 0;
     result.blocklistOk = true;
     console.error(
-      `${TAG3} fetchBlocklist ok account=${ctx.accountId} count=${count}`
+      `${TAG4} fetchBlocklist ok account=${ctx.accountId} count=${count}`
     );
   } catch (err) {
     const formatted = formatErr(err);
     result.errors.blocklist = formatted;
     console.error(
-      `${TAG3} fetchBlocklist FAILED account=${ctx.accountId}: ${formatted}`
+      `${TAG4} fetchBlocklist FAILED account=${ctx.accountId}: ${formatted}`
     );
   }
   if (ctx.signal?.aborted) {
     result.aborted = true;
     result.elapsedMs = Date.now() - startedAt;
     console.error(
-      `${TAG3} runInitQueries aborted mid-sequence account=${ctx.accountId} after=fetchBlocklist`
+      `${TAG4} runInitQueries aborted mid-sequence account=${ctx.accountId} after=fetchBlocklist`
     );
     return result;
   }
-  console.error(`${TAG3} fetchPrivacySettings start account=${ctx.accountId}`);
+  console.error(`${TAG4} fetchPrivacySettings start account=${ctx.accountId}`);
   try {
     const settings = await withTimeout(
       "fetchPrivacySettings",
@@ -2625,18 +2691,18 @@ async function runInitQueries(sock, ctx) {
     );
     result.privacySettingsOk = true;
     console.error(
-      `${TAG3} fetchPrivacySettings ok account=${ctx.accountId} keys=${settings ? Object.keys(settings).join(",") : ""}`
+      `${TAG4} fetchPrivacySettings ok account=${ctx.accountId} keys=${settings ? Object.keys(settings).join(",") : ""}`
     );
   } catch (err) {
     const formatted = formatErr(err);
     result.errors.privacySettings = formatted;
     console.error(
-      `${TAG3} fetchPrivacySettings FAILED account=${ctx.accountId}: ${formatted}`
+      `${TAG4} fetchPrivacySettings FAILED account=${ctx.accountId}: ${formatted}`
     );
   }
   result.elapsedMs = Date.now() - startedAt;
   console.error(
-    `${TAG3} runInitQueries done account=${ctx.accountId} blocklistOk=${result.blocklistOk} privacySettingsOk=${result.privacySettingsOk} elapsedMs=${result.elapsedMs}`
+    `${TAG4} runInitQueries done account=${ctx.accountId} blocklistOk=${result.blocklistOk} privacySettingsOk=${result.privacySettingsOk} elapsedMs=${result.elapsedMs}`
   );
   return result;
 }
@@ -3143,6 +3209,12 @@ function readAllConversations(platformAccountId) {
   return out;
 }
 
+// app/lib/whatsapp/echo-already-recorded.ts
+function echoAlreadyRecorded(args) {
+  const messageId = `whatsapp-live:${args.accountId}:${args.remoteJid}:${args.msgKeyId}`;
+  return args.readConversation(args.platformAccountId, args.canonicalRemoteJid).some((r) => r.messageId === messageId);
+}
+
 // app/lib/whatsapp/managed-account.ts
 function normalizeEntry(v) {
   return typeof v === "string" ? { account: v, mode: "active" } : { account: v.managesAccount, mode: v.mode ?? "active" };
@@ -3527,17 +3599,17 @@ var INBOUND_TTL_MS = 20 * 6e4;
 var INBOUND_MAX = 5e3;
 var agentSentCache = /* @__PURE__ */ new Map();
 var inboundCache = /* @__PURE__ */ new Map();
-function pruneCache(cache2, ttl, max) {
+function pruneCache(cache3, ttl, max) {
   const now = Date.now();
-  for (const [key, entry] of cache2) {
-    if (now - entry.ts > ttl) cache2.delete(key);
+  for (const [key, entry] of cache3) {
+    if (now - entry.ts > ttl) cache3.delete(key);
   }
-  if (cache2.size > max) {
-    const excess = cache2.size - max;
+  if (cache3.size > max) {
+    const excess = cache3.size - max;
     let count = 0;
-    for (const key of cache2.keys()) {
+    for (const key of cache3.keys()) {
       if (count >= excess) break;
-      cache2.delete(key);
+      cache3.delete(key);
       count++;
     }
   }
@@ -3571,7 +3643,7 @@ function isDuplicateInbound(key) {
 }
 
 // app/lib/whatsapp/inbound/self-chat.ts
-var TAG4 = "[whatsapp:self-chat]";
+var TAG5 = "[whatsapp:self-chat]";
 function normalizeJid(jid) {
   const m = jid.match(/^(\d+)(?::\d+)?@(s\.whatsapp\.net|lid)$/i);
   return m ? `${m[1]}@${m[2].toLowerCase()}` : jid;
@@ -3591,10 +3663,10 @@ function evaluateSelfChatCommand(input) {
   const connAtMs = input.lastConnectedAtMs ?? 0;
   const msgId = input.msgId ?? "?";
   console.error(
-    `${TAG4} op=seen account=${input.accountId} msgId=${msgId} tsMs=${tsMs} connAtMs=${connAtMs} fromMe=true`
+    `${TAG5} op=seen account=${input.accountId} msgId=${msgId} tsMs=${tsMs} connAtMs=${connAtMs} fromMe=true`
   );
   const skip = (reason) => {
-    console.error(`${TAG4} op=skip account=${input.accountId} msgId=${msgId} reason=${reason}`);
+    console.error(`${TAG5} op=skip account=${input.accountId} msgId=${msgId} reason=${reason}`);
     return { kind: "skip", reason };
   };
   if (input.msgId && isAgentSentMessage(input.msgId)) return skip("echo");
@@ -3602,13 +3674,13 @@ function evaluateSelfChatCommand(input) {
   if (isDuplicateInbound(`${input.accountId}:${input.remoteJid}:${input.msgId}`)) return skip("duplicate");
   if (!input.text) return skip("no-text");
   console.error(
-    `${TAG4} op=dispatch account=${input.accountId} msgId=${msgId} bytes=${Buffer.byteLength(input.text, "utf8")} agentType=admin`
+    `${TAG5} op=dispatch account=${input.accountId} msgId=${msgId} bytes=${Buffer.byteLength(input.text, "utf8")} agentType=admin`
   );
   return { kind: "dispatch", text: input.text };
 }
 
 // app/lib/whatsapp/activity.ts
-var TAG5 = "[whatsapp:activity]";
+var TAG6 = "[whatsapp:activity]";
 var RECENT_EVENTS_MAX = 200;
 var counters = /* @__PURE__ */ new Map();
 var recentEvents = [];
@@ -3636,10 +3708,10 @@ function recordActivity(event) {
       recentEvents.splice(0, recentEvents.length - RECENT_EVENTS_MAX);
     }
     console.error(
-      `${TAG5} channel-activity: direction=${direction} account=${accountId} jid=${jid}` + (messageType ? ` type=${messageType}` : "")
+      `${TAG6} channel-activity: direction=${direction} account=${accountId} jid=${jid}` + (messageType ? ` type=${messageType}` : "")
     );
   } catch (err) {
-    console.error(`${TAG5} recording failed: ${String(err)}`);
+    console.error(`${TAG6} recording failed: ${String(err)}`);
   }
 }
 function getChannelActivity(accountId) {
@@ -3660,7 +3732,7 @@ function getChannelActivity(accountId) {
 }
 
 // app/lib/whatsapp/outbound/send.ts
-var TAG6 = "[whatsapp:outbound]";
+var TAG7 = "[whatsapp:outbound]";
 function buildQuoted(q) {
   return {
     key: {
@@ -3681,14 +3753,14 @@ async function sendTextMessage(sock, to, text, opts) {
     const messageId = result?.key?.id;
     if (messageId) {
       trackAgentSentMessage(messageId);
-      console.error(`${TAG6} sent text to=${jid} id=${messageId}`);
+      console.error(`${TAG7} sent text to=${jid} id=${messageId}`);
     }
     if (opts?.accountId) {
       recordActivity({ accountId: opts.accountId, direction: "outbound", jid, messageType: "text" });
     }
     return { success: true, messageId: messageId ?? void 0 };
   } catch (err) {
-    console.error(`${TAG6} send failed to=${to}: ${String(err)}`);
+    console.error(`${TAG7} send failed to=${to}: ${String(err)}`);
     return { success: false, error: String(err) };
   }
 }
@@ -3758,20 +3830,20 @@ async function sendMediaMessage(sock, to, media, opts) {
     const messageId = result?.key?.id;
     if (messageId) {
       trackAgentSentMessage(messageId);
-      console.error(`${TAG6} sent ${media.type} to=${jid} id=${messageId}`);
+      console.error(`${TAG7} sent ${media.type} to=${jid} id=${messageId}`);
     }
     if (opts?.accountId) {
       recordActivity({ accountId: opts.accountId, direction: "outbound", jid, messageType: media.type });
     }
     return { success: true, messageId: messageId ?? void 0 };
   } catch (err) {
-    console.error(`${TAG6} send media failed to=${to}: ${String(err)}`);
+    console.error(`${TAG7} send media failed to=${to}: ${String(err)}`);
     return { success: false, error: String(err) };
   }
 }
 
 // app/lib/whatsapp/persist-message.ts
-var TAG7 = "[whatsapp-persist]";
+var TAG8 = "[whatsapp-persist]";
 var sessionWriteLocks = /* @__PURE__ */ new Map();
 async function persistWhatsAppMessage(input) {
   if (!input.body && !input.attachmentId || !input.msgKeyId) return null;
@@ -3822,14 +3894,14 @@ async function persistWhatsAppMessage(input) {
     };
     const result = await session.run(cypher, params);
     if (result.records.length === 0) {
-      console.error(`${TAG7} skip reason=conversation-not-found accountId=${input.platformAccountId} cacheKey=${input.cacheKey} messageId=${messageId}`);
+      console.error(`${TAG8} skip reason=conversation-not-found accountId=${input.platformAccountId} cacheKey=${input.cacheKey} messageId=${messageId}`);
       return null;
     }
     const rec = result.records[0];
     const senderElementId = rec.get("senderElementId");
     const senderReused = rec.get("senderReused") === true;
     console.error(
-      `${TAG7} sender-resolved telephone=${senderTelephone} nodeKind=Person elementId=${senderElementId} reused=${senderReused}`
+      `${TAG8} sender-resolved telephone=${senderTelephone} nodeKind=Person elementId=${senderElementId} reused=${senderReused}`
     );
     const diskRecord = {
       messageId,
@@ -3851,18 +3923,18 @@ async function persistWhatsAppMessage(input) {
     const { created } = appendMessage(input.platformAccountId, diskRecord, altDedupeRemoteJids);
     const ms = Date.now() - t0;
     if (!created) {
-      console.error(`${TAG7} noop reason=existing-message messageId=${messageId}`);
+      console.error(`${TAG8} noop reason=existing-message messageId=${messageId}`);
       return { messageId, created: false, senderElementId };
     }
     console.error(
-      `${TAG7} write messageId=${messageId} accountId=${input.platformAccountId} cacheKey=${input.cacheKey} fromMe=${input.fromMe} dateSent=${dateSentIso} bodyBytes=${Buffer.byteLength(input.body, "utf8")} ms=${ms}`
+      `${TAG8} write messageId=${messageId} accountId=${input.platformAccountId} cacheKey=${input.cacheKey} fromMe=${input.fromMe} dateSent=${dateSentIso} bodyBytes=${Buffer.byteLength(input.body, "utf8")} attachment=${input.attachmentId ?? "none"} ms=${ms}`
     );
     return { messageId, created: true, senderElementId };
   } catch (err) {
     const ms = Date.now() - t0;
     const reason = sanitizeReason(err);
     console.error(
-      `${TAG7} FAIL accountId=${input.platformAccountId} waname=${input.accountId} remoteJid=${input.remoteJid} msgKey=${input.msgKeyId} reason=${reason} ms=${ms}`
+      `${TAG8} FAIL accountId=${input.platformAccountId} waname=${input.accountId} remoteJid=${input.remoteJid} msgKey=${input.msgKeyId} reason=${reason} ms=${ms}`
     );
     return null;
   } finally {
@@ -3895,7 +3967,7 @@ function sanitizeReason(err) {
 }
 
 // app/lib/whatsapp/ensure-conversation.ts
-var TAG8 = "[whatsapp-persist]";
+var TAG9 = "[whatsapp-persist]";
 async function ensureWhatsAppConversation(input) {
   const t0 = Date.now();
   try {
@@ -3907,19 +3979,19 @@ async function ensureWhatsAppConversation(input) {
     const ms = Date.now() - t0;
     if (!result.sessionId) {
       console.error(
-        `${TAG8} conversation-merged FAIL cacheKey=${input.cacheKey} reason=null-sessionId ms=${ms}`
+        `${TAG9} conversation-merged FAIL cacheKey=${input.cacheKey} reason=null-sessionId ms=${ms}`
       );
       return null;
     }
     console.error(
-      `${TAG8} conversation-merged cacheKey=${input.cacheKey} agentType=${input.agentType} channel=whatsapp created=${result.created} ms=${ms}`
+      `${TAG9} conversation-merged cacheKey=${input.cacheKey} agentType=${input.agentType} channel=whatsapp created=${result.created} ms=${ms}`
     );
     return { sessionId: result.sessionId, created: result.created };
   } catch (err) {
     const ms = Date.now() - t0;
     const reason = err instanceof Error ? `${err.name}:${err.message.slice(0, 200)}` : String(err).slice(0, 200);
     console.error(
-      `${TAG8} conversation-merged FAIL cacheKey=${input.cacheKey} reason=${reason} ms=${ms}`
+      `${TAG9} conversation-merged FAIL cacheKey=${input.cacheKey} reason=${reason} ms=${ms}`
     );
     return null;
   }
@@ -3929,16 +4001,16 @@ async function ensureWhatsAppConversation(input) {
 import { readdirSync as readdirSync2, readFileSync as readFileSync5 } from "fs";
 import { resolve as resolve3 } from "path";
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-var cache = /* @__PURE__ */ new Map();
+var cache2 = /* @__PURE__ */ new Map();
 function enumerateValidAccountIds(accountsDir) {
-  const cached3 = cache.get(accountsDir);
+  const cached3 = cache2.get(accountsDir);
   if (cached3 !== void 0) return cached3;
   let names;
   try {
     names = readdirSync2(accountsDir);
   } catch (err) {
     if (err.code === "ENOENT") {
-      cache.set(accountsDir, []);
+      cache2.set(accountsDir, []);
       return [];
     }
     throw err;
@@ -3955,7 +4027,7 @@ function enumerateValidAccountIds(accountsDir) {
       if (code === "ENOENT") continue;
     }
   }
-  cache.set(accountsDir, valid);
+  cache2.set(accountsDir, valid);
   return valid;
 }
 function resolveHouseOrSoleAccountId(accountsDir) {
@@ -4553,7 +4625,7 @@ async function storeComponentArtefact(accountId, attachmentId, mimeType, content
 }
 
 // app/lib/whatsapp/inbound/media.ts
-var TAG9 = "[whatsapp:media]";
+var TAG10 = "[whatsapp:media]";
 var MEDIA_DIR = "/tmp/maxy-media";
 var DOWNLOAD_TIMEOUT_MS = 45e3;
 function deterministicAttachmentId(seed) {
@@ -4641,25 +4713,25 @@ async function downloadInboundMediaBuffer(msg, sock, opts) {
           }
         );
         if (!buffer || buffer.length === 0) {
-          console.error(`${TAG9} primary download returned empty, trying direct fallback`);
+          console.error(`${TAG10} primary download returned empty, trying direct fallback`);
           const downloadable = getDownloadableContent(content);
           if (downloadable) {
             try {
               const stream2 = await downloadContentFromMessage(downloadable.downloadable, downloadable.mediaType);
               buffer = await streamToBuffer(stream2);
             } catch (fallbackErr) {
-              console.error(`${TAG9} direct download fallback failed: ${String(fallbackErr)}`);
+              console.error(`${TAG10} direct download fallback failed: ${String(fallbackErr)}`);
             }
           }
         }
         if (!buffer || buffer.length === 0) {
-          console.error(`${TAG9} download failed: empty buffer for ${mimetype ?? "unknown"}`);
+          console.error(`${TAG10} download failed: empty buffer for ${mimetype ?? "unknown"}`);
           return void 0;
         }
         if (buffer.length > maxBytes) {
           const sizeMB = (buffer.length / (1024 * 1024)).toFixed(1);
           const limitMB = (maxBytes / (1024 * 1024)).toFixed(0);
-          console.error(`${TAG9} media too large type=${mimetype ?? "unknown"} size=${sizeMB}MB limit=${limitMB}MB`);
+          console.error(`${TAG10} media too large type=${mimetype ?? "unknown"} size=${sizeMB}MB limit=${limitMB}MB`);
           return void 0;
         }
         return {
@@ -4671,7 +4743,7 @@ async function downloadInboundMediaBuffer(msg, sock, opts) {
       timeoutMs
     );
   } catch (err) {
-    console.error(`${TAG9} media download failed type=${mimetype ?? "unknown"} error=${String(err)}`);
+    console.error(`${TAG10} media download failed type=${mimetype ?? "unknown"} error=${String(err)}`);
     return void 0;
   }
 }
@@ -4683,7 +4755,7 @@ async function downloadInboundMedia(msg, sock, opts) {
   const filePath = join6(MEDIA_DIR, `${randomUUID4()}.${ext}`);
   await writeFile2(filePath, res.buffer);
   const sizeKB = (res.buffer.length / 1024).toFixed(0);
-  console.error(`${TAG9} media downloaded type=${res.mimetype} size=${sizeKB}KB path=${filePath}`);
+  console.error(`${TAG10} media downloaded type=${res.mimetype} size=${sizeKB}KB path=${filePath}`);
   return { path: filePath, mimetype: res.mimetype, size: res.buffer.length };
 }
 async function storeInboundMediaServable(msg, sock, accountId, seed, opts) {
@@ -4692,19 +4764,27 @@ async function storeInboundMediaServable(msg, sock, accountId, seed, opts) {
     if (attachmentExists(accountId, attachmentId)) return attachmentId;
     const res = await downloadInboundMediaBufferCached(msg, sock, opts);
     if (!res) {
-      console.error(`${TAG9} servable-store skip reason=no-buffer id=${attachmentId}`);
+      console.error(`${TAG10} servable-store skip reason=no-buffer id=${attachmentId}`);
       return null;
     }
     const filename = res.filename ?? `${attachmentId}.${mimeToExt(res.mimetype)}`;
     await storeMediaBuffer(accountId, attachmentId, filename, res.mimetype, res.buffer);
-    console.error(`${TAG9} servable-store ok id=${attachmentId} mime=${res.mimetype} bytes=${res.buffer.length}`);
+    console.error(`${TAG10} servable-store ok id=${attachmentId} mime=${res.mimetype} bytes=${res.buffer.length}`);
     return attachmentId;
   } catch (err) {
-    console.error(`${TAG9} servable-store FAIL id=${attachmentId} reason=${String(err).slice(0, 120)}`);
+    console.error(`${TAG10} servable-store FAIL id=${attachmentId} reason=${String(err).slice(0, 120)}`);
     return null;
   }
 }
 
+// app/lib/whatsapp/outbound/document-limits.ts
+var WHATSAPP_DOCUMENT_MAX_BYTES = 100 * 1024 * 1024;
+
+// app/lib/whatsapp/echo-store-max-bytes.ts
+function echoStoreMaxBytes(args) {
+  return args.fromMe ? WHATSAPP_DOCUMENT_MAX_BYTES : (args.mediaMaxMb ?? 50) * 1024 * 1024;
+}
+
 // app/lib/whatsapp/inbound/bounded-queue.ts
 function createBoundedQueue(limit, opts) {
   if (!Number.isInteger(limit) || limit < 1) {
@@ -4740,7 +4820,7 @@ function createBoundedQueue(limit, opts) {
 }
 
 // app/lib/whatsapp/inbound/debounce.ts
-var TAG10 = "[whatsapp:debounce]";
+var TAG11 = "[whatsapp:debounce]";
 var STT_TAG = "[whatsapp:stt-await]";
 function createInboundDebouncer(opts) {
   const { debounceMs, buildKey, onFlush, onError } = opts;
@@ -4771,7 +4851,7 @@ function createInboundDebouncer(opts) {
     pending.delete(key);
     const batchSize = batch.entries.length;
     try {
-      console.error(`${TAG10} debounce flush key=${key} batchSize=${batchSize}`);
+      console.error(`${TAG11} debounce flush key=${key} batchSize=${batchSize}`);
       const result = onFlush(batch.entries);
       if (result && typeof result.catch === "function") {
         result.catch(onError);
@@ -4851,7 +4931,7 @@ function combineInboundBatch(entries) {
 }
 
 // app/lib/whatsapp/opening-hours.ts
-var TAG11 = "[whatsapp:hours]";
+var TAG12 = "[whatsapp:hours]";
 async function isBusinessOpen(accountId) {
   try {
     const timezone = await resolveTimezone(accountId);
@@ -4869,7 +4949,7 @@ async function isBusinessOpen(accountId) {
         { accountId, dayOfWeek, previousDayOfWeek }
       );
       if (result.records.length === 0) {
-        console.error(`${TAG11} [${accountId}] business hours check: no opening hours configured, treating as open`);
+        console.error(`${TAG12} [${accountId}] business hours check: no opening hours configured, treating as open`);
         return { open: true, reason: "no opening hours configured" };
       }
       const specs = result.records.filter((r) => r.get("opens") != null && r.get("closes") != null).map((r) => ({
@@ -4878,7 +4958,7 @@ async function isBusinessOpen(accountId) {
         closes: String(r.get("closes")).trim()
       }));
       if (specs.length === 0) {
-        console.error(`${TAG11} [${accountId}] business hours check: no opening hours configured, treating as open`);
+        console.error(`${TAG12} [${accountId}] business hours check: no opening hours configured, treating as open`);
         return { open: true, reason: "no opening hours configured" };
       }
       for (const spec of specs) {
@@ -4888,7 +4968,7 @@ async function isBusinessOpen(accountId) {
           if (spec.opens > spec.closes && currentTime < spec.closes) {
             const hoursStr = `${spec.opens}-${spec.closes} (${spec.day})`;
             console.error(
-              `${TAG11} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
+              `${TAG12} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
             );
             return {
               open: true,
@@ -4901,7 +4981,7 @@ async function isBusinessOpen(accountId) {
         } else if (isTimeInRange(currentTime, spec.opens, spec.closes)) {
           const hoursStr = `${spec.opens}-${spec.closes}`;
           console.error(
-            `${TAG11} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
+            `${TAG12} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
           );
           return {
             open: true,
@@ -4915,7 +4995,7 @@ async function isBusinessOpen(accountId) {
       const todaySpecs = specs.filter((s) => s.day === dayOfWeek);
       const allHours = todaySpecs.map((s) => `${s.opens}-${s.closes}`).join(", ") || "none today";
       console.error(
-        `${TAG11} [${accountId}] business hours check: closed (day=${dayOfWeek}, time=${currentTime}, hours=${allHours})`
+        `${TAG12} [${accountId}] business hours check: closed (day=${dayOfWeek}, time=${currentTime}, hours=${allHours})`
       );
       return {
         open: false,
@@ -4929,7 +5009,7 @@ async function isBusinessOpen(accountId) {
     }
   } catch (err) {
     console.error(
-      `${TAG11} [${accountId}] business hours check failed, treating as open: ${err instanceof Error ? err.message : String(err)}`
+      `${TAG12} [${accountId}] business hours check failed, treating as open: ${err instanceof Error ? err.message : String(err)}`
     );
     return { open: true, reason: "hours check failed (treating as open)" };
   }
@@ -4975,7 +5055,7 @@ import { execFile } from "child_process";
 import { unlink, stat } from "fs/promises";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile);
-var TAG12 = "[stt]";
+var TAG13 = "[stt]";
 var WHISPER_BINARY = process.env.WHISPER_BINARY ?? "/opt/whisper.cpp/build/bin/whisper-cli";
 var WHISPER_MODEL = process.env.WHISPER_MODEL ?? "/opt/whisper.cpp/models/ggml-base.bin";
 var WHISPER_TIMEOUT_MS = 20 * 60 * 1e3;
@@ -4994,11 +5074,11 @@ async function transcribe(audioPath, mimetype) {
     const s = await stat(audioPath);
     audioBytes = s.size;
   } catch {
-    console.error(`${TAG12} failed: file not readable path=${audioPath}`);
+    console.error(`${TAG13} failed: file not readable path=${audioPath}`);
     return void 0;
   }
   console.error(
-    `${TAG12} start provider=whisper-local audio_bytes=${audioBytes} mimetype=${mimetype} path=${audioPath}`
+    `${TAG13} start provider=whisper-local audio_bytes=${audioBytes} mimetype=${mimetype} path=${audioPath}`
   );
   const wavPath = audioPath.replace(/\.[^.]+$/, "") + ".wav";
   try {
@@ -5017,7 +5097,7 @@ async function transcribe(audioPath, mimetype) {
     ], { timeout: 3e4 });
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG12} failed: ffmpeg conversion error=${reason}`);
+    console.error(`${TAG13} failed: ffmpeg conversion error=${reason}`);
     return void 0;
   }
   try {
@@ -5033,20 +5113,20 @@ async function transcribe(audioPath, mimetype) {
     const durationMs = Date.now() - startMs;
     const { text, count: stripped } = stripSpecialTokens(stdout.trim());
     if (!text) {
-      console.error(`${TAG12} failed: whisper returned empty output duration_ms=${durationMs}`);
+      console.error(`${TAG13} failed: whisper returned empty output duration_ms=${durationMs}`);
       return void 0;
     }
     const langMatch = stderr.match(/auto-detected language:\s*(\w+)/);
     const language = langMatch?.[1] ?? "unknown";
     const words = text.split(/\s+/).filter(Boolean).length;
     console.error(
-      `${TAG12} done provider=whisper-local duration_ms=${durationMs} words=${words} stripped=${stripped} lang=${language}`
+      `${TAG13} done provider=whisper-local duration_ms=${durationMs} words=${words} stripped=${stripped} lang=${language}`
     );
     return { text, language, durationMs };
   } catch (err) {
     const durationMs = Date.now() - startMs;
     const reason = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG12} failed provider=whisper-local duration_ms=${durationMs} error=${reason}`);
+    console.error(`${TAG13} failed provider=whisper-local duration_ms=${durationMs} error=${reason}`);
     return void 0;
   } finally {
     unlink(wavPath).catch(() => {
@@ -5065,7 +5145,7 @@ var WaReplyError = class extends Error {
 };
 
 // app/lib/whatsapp/manager.ts
-var TAG13 = "[whatsapp:manager]";
+var TAG14 = "[whatsapp:manager]";
 var MAX_RECONNECT_ATTEMPTS = 10;
 var MESSAGE_STORE_MAX = 500;
 var APPEND_MEDIA_CONCURRENCY = 3;
@@ -5092,7 +5172,7 @@ function storeMessage(storeKey, entry) {
   if (entries.length > MESSAGE_STORE_MAX) {
     const trimmed = entries.length - MESSAGE_STORE_MAX;
     entries.splice(0, trimmed);
-    console.error(`${TAG13} message store trimmed for ${storeKey}: ${trimmed} oldest messages removed`);
+    console.error(`${TAG14} message store trimmed for ${storeKey}: ${trimmed} oldest messages removed`);
   }
 }
 function deriveCacheKey(input) {
@@ -5135,7 +5215,7 @@ function buildSelfChatDispatch(input) {
 }
 async function init(opts) {
   if (initialized) {
-    console.error(`${TAG13} already initialized`);
+    console.error(`${TAG14} already initialized`);
     return;
   }
   configDir = opts.configDir;
@@ -5143,20 +5223,20 @@ async function init(opts) {
   loadConfig(opts.accountConfig);
   const accountIds = listCredentialAccountIds(configDir);
   if (accountIds.length === 0) {
-    console.error(`${TAG13} init: no stored WhatsApp credentials found`);
+    console.error(`${TAG14} init: no stored WhatsApp credentials found`);
     initialized = true;
     return;
   }
-  console.error(`${TAG13} init: found ${accountIds.length} credentialed account(s): ${accountIds.join(", ")}`);
+  console.error(`${TAG14} init: found ${accountIds.length} credentialed account(s): ${accountIds.join(", ")}`);
   initialized = true;
   for (const accountId of accountIds) {
     const accountCfg = whatsAppConfig.accounts?.[accountId];
     if (accountCfg?.enabled === false) {
-      console.error(`${TAG13} skipping disabled account=${accountId}`);
+      console.error(`${TAG14} skipping disabled account=${accountId}`);
       continue;
     }
     startConnection(accountId).catch((err) => {
-      console.error(`${TAG13} failed to auto-start account=${accountId}: ${formatError(err)}`);
+      console.error(`${TAG14} failed to auto-start account=${accountId}: ${formatError(err)}`);
     });
   }
 }
@@ -5165,7 +5245,7 @@ async function startConnection(accountId) {
   const authDir = resolveAuthDir(configDir, accountId);
   const hasAuth = await authExists(authDir);
   if (!hasAuth) {
-    console.error(`${TAG13} no credentials for account=${accountId}`);
+    console.error(`${TAG14} no credentials for account=${accountId}`);
     return;
   }
   let platformAccountId;
@@ -5216,11 +5296,11 @@ async function stopConnection(accountId) {
       conn.sock.ev.removeAllListeners("creds.update");
       conn.sock.ws?.close?.();
     } catch (err) {
-      console.warn(`${TAG13} socket cleanup error during stop account=${accountId}: ${String(err)}`);
+      console.warn(`${TAG14} socket cleanup error during stop account=${accountId}: ${String(err)}`);
     }
   }
   connections.delete(accountId);
-  console.error(`${TAG13} stopped account=${accountId}`);
+  console.error(`${TAG14} stopped account=${accountId}`);
 }
 function getStatus() {
   return Array.from(connections.values()).map((conn) => ({
@@ -5299,9 +5379,9 @@ async function registerLoginSocket(accountId, sock, authDir) {
   monitorInbound(conn);
   try {
     await sock.sendPresenceUpdate("available");
-    console.error(`${TAG13} presence set to available account=${accountId}`);
+    console.error(`${TAG14} presence set to available account=${accountId}`);
   } catch (err) {
-    console.error(`${TAG13} presence update failed account=${accountId}: ${String(err)}`);
+    console.error(`${TAG14} presence update failed account=${accountId}: ${String(err)}`);
   }
   await runInitQueries(sock, {
     accountId,
@@ -5312,7 +5392,7 @@ async function registerLoginSocket(accountId, sock, authDir) {
   });
   watchForDisconnect(conn);
   attachSelfIdRefreshOnCredsUpdate(conn);
-  console.error(`${TAG13} registered login socket for account=${accountId} phone=${conn.selfPhone ?? "unknown"}`);
+  console.error(`${TAG14} registered login socket for account=${accountId} phone=${conn.selfPhone ?? "unknown"}`);
 }
 function attachSelfIdRefreshOnCredsUpdate(conn) {
   if (!conn.sock) return;
@@ -5357,7 +5437,7 @@ async function shutdown() {
   const ids = Array.from(connections.keys());
   await Promise.all(ids.map((id) => stopConnection(id)));
   initialized = false;
-  console.error(`${TAG13} shutdown complete`);
+  console.error(`${TAG14} shutdown complete`);
 }
 function loadConfig(accountConfig) {
   try {
@@ -5368,19 +5448,19 @@ function loadConfig(accountConfig) {
       if (result.ok) {
         whatsAppConfig = result.data;
         if (result.droppedKeys.length > 0) {
-          console.error(`${TAG13} config: dropped unknown keys=[${result.droppedKeys.join(",")}] preserved known config`);
+          console.error(`${TAG14} config: dropped unknown keys=[${result.droppedKeys.join(",")}] preserved known config`);
         }
       } else {
-        console.error(`${TAG13} config validation failed: ${result.error.message}`);
+        console.error(`${TAG14} config validation failed: ${result.error.message}`);
         whatsAppConfig = {};
       }
       const diskAdmin = Array.isArray(wa.adminPhones) ? wa.adminPhones : [];
       if (diskAdmin.length > 0 && (whatsAppConfig.adminPhones?.length ?? 0) === 0) {
-        console.error(`${TAG13} WARN adminPhones present on disk but empty after load`);
+        console.error(`${TAG14} WARN adminPhones present on disk but empty after load`);
       }
     }
   } catch (err) {
-    console.error(`${TAG13} config load error: ${String(err)}`);
+    console.error(`${TAG14} config load error: ${String(err)}`);
     whatsAppConfig = {};
   }
 }
@@ -5391,7 +5471,7 @@ async function connectWithReconnect(conn) {
     let cycleError = null;
     let connectedAt;
     try {
-      console.error(`${TAG13} connecting account=${conn.accountId} attempt=${conn.reconnectAttempts}`);
+      console.error(`${TAG14} connecting account=${conn.accountId} attempt=${conn.reconnectAttempts}`);
       if (conn.debouncer) {
         await conn.debouncer.destroy();
         conn.debouncer = null;
@@ -5404,7 +5484,7 @@ async function connectWithReconnect(conn) {
       conn.sock = sock;
       applySelfIdentity(conn, sock, "pre-listener");
       monitorInbound(conn);
-      console.error(`${TAG13} socket created account=${conn.accountId} \u2014 waiting for connection`);
+      console.error(`${TAG14} socket created account=${conn.accountId} \u2014 waiting for connection`);
       await waitForConnection(sock);
       connectedAt = Date.now();
       conn.connected = true;
@@ -5412,12 +5492,12 @@ async function connectWithReconnect(conn) {
       conn.lastError = void 0;
       conn.terminalReason = void 0;
       applySelfIdentity(conn, sock, "post-connect");
-      console.error(`${TAG13} connected account=${conn.accountId} phone=${conn.selfPhone ?? "unknown"}`);
+      console.error(`${TAG14} connected account=${conn.accountId} phone=${conn.selfPhone ?? "unknown"}`);
       try {
         await sock.sendPresenceUpdate("available");
-        console.error(`${TAG13} presence set to available account=${conn.accountId}`);
+        console.error(`${TAG14} presence set to available account=${conn.accountId}`);
       } catch (err) {
-        console.error(`${TAG13} presence update failed account=${conn.accountId}: ${String(err)}`);
+        console.error(`${TAG14} presence update failed account=${conn.accountId}: ${String(err)}`);
       }
       await runInitQueries(sock, {
         accountId: conn.accountId,
@@ -5440,10 +5520,10 @@ async function connectWithReconnect(conn) {
       }
       const classification = classifyDisconnect(err);
       conn.lastError = classification.message;
-      console.error(`${TAG13} disconnect account=${conn.accountId}: ${classification.kind} \u2014 ${classification.message}`);
+      console.error(`${TAG14} disconnect account=${conn.accountId}: ${classification.kind} \u2014 ${classification.message}`);
       if (!classification.shouldRetry) {
         conn.terminalReason = classification.message;
-        console.error(`${TAG13} terminal disconnect for account=${conn.accountId}, stopping reconnection`);
+        console.error(`${TAG14} terminal disconnect for account=${conn.accountId}, stopping reconnection`);
         return;
       }
     }
@@ -5456,7 +5536,7 @@ async function connectWithReconnect(conn) {
     if (decision.action === "abort") {
       const stuckReason = `GIVING UP account=${conn.accountId} attempts=${decision.finalAttempts}/${maxAttempts} uptimeMsLast=${uptimeMs} stableThresholdMs=${STABLE_UPTIME_MS} lastError=${conn.lastError ?? "(none)"}`;
       console.error(
-        `${TAG13} ${stuckReason} \u2014 re-pair via QR or restart required; WhatsApp will not reconnect automatically`
+        `${TAG14} ${stuckReason} \u2014 re-pair via QR or restart required; WhatsApp will not reconnect automatically`
       );
       conn.sessionStuckReason = stuckReason;
       conn.lastError = stuckReason;
@@ -5465,17 +5545,17 @@ async function connectWithReconnect(conn) {
     conn.reconnectAttempts = decision.nextAttempts;
     if (decision.reason === "short-lived") {
       console.error(
-        `${TAG13} short-lived session account=${conn.accountId} uptimeMs=${uptimeMs} attempt=${decision.nextAttempts}/${maxAttempts} lastError=${conn.lastError ?? "(clean disconnect)"}`
+        `${TAG14} short-lived session account=${conn.accountId} uptimeMs=${uptimeMs} attempt=${decision.nextAttempts}/${maxAttempts} lastError=${conn.lastError ?? "(clean disconnect)"}`
       );
     } else {
       console.error(
-        `${TAG13} session stable account=${conn.accountId} uptimeMs=${uptimeMs} \u2014 reconnect counter reset`
+        `${TAG14} session stable account=${conn.accountId} uptimeMs=${uptimeMs} \u2014 reconnect counter reset`
       );
     }
     if (decision.reason === "short-lived" || cycleError) {
       const delay = computeBackoff(Math.max(1, decision.nextAttempts));
       console.error(
-        `${TAG13} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
+        `${TAG14} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
       await new Promise((resolve37) => {
         const timer2 = setTimeout(resolve37, delay);
@@ -5509,11 +5589,11 @@ function watchForDisconnect(conn) {
   conn.sock.ev.on("connection.update", (update) => {
     if (update.connection === "close") {
       if (connections.get(conn.accountId) !== conn) return;
-      console.error(`${TAG13} socket disconnected for account=${conn.accountId}`);
+      console.error(`${TAG14} socket disconnected for account=${conn.accountId}`);
       conn.connected = false;
       conn.sock = null;
       connectWithReconnect(conn).catch((err) => {
-        console.error(`${TAG13} reconnection failed for account=${conn.accountId}: ${formatError(err)}`);
+        console.error(`${TAG14} reconnection failed for account=${conn.accountId}: ${formatError(err)}`);
       });
     }
   });
@@ -5539,7 +5619,7 @@ function monitorInbound(conn) {
   if (!conn.sock || !onInboundMessage) return;
   const sock = conn.sock;
   const debounceMs = whatsAppConfig.accounts?.[conn.accountId]?.debounceMs ?? whatsAppConfig.debounceMs ?? 0;
-  console.error(`${TAG13} monitorInbound started account=${conn.accountId} debounceMs=${debounceMs}`);
+  console.error(`${TAG14} monitorInbound started account=${conn.accountId} debounceMs=${debounceMs}`);
   conn.debouncer = createInboundDebouncer({
     debounceMs,
     buildKey: (payload) => {
@@ -5549,12 +5629,12 @@ function monitorInbound(conn) {
     onFlush: (entries) => {
       if (!onInboundMessage) return;
       if (entries.length > 1) {
-        console.error(`${TAG13} debounce: combining ${entries.length} messages account=${conn.accountId} from=${entries[0].senderPhone}`);
+        console.error(`${TAG14} debounce: combining ${entries.length} messages account=${conn.accountId} from=${entries[0].senderPhone}`);
       }
       onInboundMessage(combineInboundBatch(entries));
     },
     onError: (err) => {
-      console.error(`${TAG13} debounce flush error account=${conn.accountId}: ${String(err)}`);
+      console.error(`${TAG14} debounce flush error account=${conn.accountId}: ${String(err)}`);
     }
   });
   sock.ev.on("messages.upsert", async (upsert) => {
@@ -5586,7 +5666,7 @@ function monitorInbound(conn) {
           }
           const entries = messageStore.get(storeKey);
           console.error(
-            `${TAG13} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries?.length ?? 0}/${MESSAGE_STORE_MAX}) account=${conn.platformAccountId}`
+            `${TAG14} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries?.length ?? 0}/${MESSAGE_STORE_MAX}) account=${conn.platformAccountId}`
           );
           recordActivity({
             accountId: conn.accountId,
@@ -5621,9 +5701,25 @@ function monitorInbound(conn) {
                 remoteJid,
                 conn.lidMapping
               );
-              const wantsServableMedia = mediaServable && !fromMe && !!conn.sock;
+              const alreadyRecorded = fromMe && echoAlreadyRecorded({
+                readConversation,
+                platformAccountId: conn.platformAccountId,
+                canonicalRemoteJid,
+                accountId: conn.accountId,
+                remoteJid,
+                msgKeyId: msg.key.id
+              });
+              const wantsServableMedia = mediaServable && !!conn.sock && (!fromMe || !alreadyRecorded);
+              if (fromMe && mediaServable && !!conn.sock) {
+                console.error(
+                  `${TAG14} fromMe-media-echo msgKey=${msg.key.id} decision=${alreadyRecorded ? "skip" : "store"} reason=${alreadyRecorded ? "already-recorded" : "no-prior-record"}`
+                );
+              }
               const mediaSeed = `whatsapp-live:${conn.accountId}:${canonicalRemoteJid}:${msg.key.id}`;
-              const maxBytes = (whatsAppConfig.mediaMaxMb ?? 50) * 1024 * 1024;
+              const maxBytes = echoStoreMaxBytes({
+                fromMe,
+                mediaMaxMb: whatsAppConfig.mediaMaxMb
+              });
               const basePersist = {
                 accountId: conn.accountId,
                 platformAccountId: conn.platformAccountId,
@@ -5668,7 +5764,7 @@ function monitorInbound(conn) {
                 receiptDeferredToWorker = true;
                 if (!accepted) {
                   console.error(
-                    `${TAG13} append-media overflow account=${conn.platformAccountId} msgKey=${msgKeyId ?? "?"} \u2014 pending cap ${APPEND_MEDIA_MAX_PENDING} reached, text-fallback persist, inline media shed`
+                    `${TAG14} append-media overflow account=${conn.platformAccountId} msgKey=${msgKeyId ?? "?"} \u2014 pending cap ${APPEND_MEDIA_MAX_PENDING} reached, text-fallback persist, inline media shed`
                   );
                   const persisted = await persistWhatsAppMessage({
                     ...basePersist,
@@ -5739,14 +5835,16 @@ function monitorInbound(conn) {
             }));
             continue;
           }
+          const skippedSenderJid = isGroupJid(remoteJid) ? msg.key.participant ?? remoteJid : remoteJid;
+          const skippedSenderPhone = await resolveJidToE164(skippedSenderJid, conn.lidMapping) ?? skippedSenderJid;
           console.error(
-            `${TAG13} append-type message ${msg.key.id ?? "?"} stored, dispatch skipped account=${conn.accountId}`
+            `${TAG14} append-type message ${msg.key.id ?? "?"} dispatch skipped from=${skippedSenderPhone}${msg.pushName ? ` name=${msg.pushName}` : ""} account=${conn.accountId} (persistence not confirmed here)`
           );
           continue;
         }
         await handleInboundMessage(conn, msg);
       } catch (err) {
-        console.error(`${TAG13} inbound handler error account=${conn.accountId}: ${String(err)}`);
+        console.error(`${TAG14} inbound handler error account=${conn.accountId}: ${String(err)}`);
       }
     }
   });
@@ -5802,31 +5900,31 @@ async function handleInboundMessage(conn, msg) {
   const remoteJid = msg.key.remoteJid;
   if (!remoteJid) return;
   if (remoteJid === "status@broadcast") {
-    console.error(`${TAG13} drop: status broadcast account=${conn.accountId}`);
+    console.error(`${TAG14} drop: status broadcast account=${conn.accountId}`);
     return;
   }
   if (!msg.message) {
-    console.error(`${TAG13} drop: empty message account=${conn.accountId} from=${remoteJid}`);
+    console.error(`${TAG14} drop: empty message account=${conn.accountId} from=${remoteJid}`);
     return;
   }
   const dedupKey = `${conn.accountId}:${remoteJid}:${msg.key.id}`;
   if (isDuplicateInbound(dedupKey)) {
-    console.error(`${TAG13} drop: duplicate account=${conn.accountId} key=${dedupKey}`);
+    console.error(`${TAG14} drop: duplicate account=${conn.accountId} key=${dedupKey}`);
     return;
   }
   if (msg.key.fromMe) {
     if (msg.key.id && isAgentSentMessage(msg.key.id)) {
-      console.error(`${TAG13} drop: echo suppression account=${conn.accountId} msgId=${msg.key.id}`);
+      console.error(`${TAG14} drop: echo suppression account=${conn.accountId} msgId=${msg.key.id}`);
       return;
     }
     const extracted2 = extractMessage(msg);
     if (!extracted2.text) {
-      console.error(`${TAG13} owner reply skipped \u2014 no text content account=${conn.accountId}`);
+      console.error(`${TAG14} owner reply skipped \u2014 no text content account=${conn.accountId}`);
       return;
     }
     const isGroup2 = isGroupJid(remoteJid);
     const senderPhone2 = conn.selfPhone ?? "owner";
-    console.error(`${TAG13} owner reply mirrored to session from=${senderPhone2} account=${conn.accountId}`);
+    console.error(`${TAG14} owner reply mirrored to session from=${senderPhone2} account=${conn.accountId}`);
     const reply2 = async (text) => {
       const currentSock = conn.sock;
       if (!currentSock) throw new Error("WhatsApp disconnected \u2014 cannot reply");
@@ -5860,7 +5958,7 @@ async function handleInboundMessage(conn, msg) {
   }
   const extracted = extractMessage(msg);
   if (!extracted.text && !extracted.mediaType) {
-    console.error(`${TAG13} drop: no text or media account=${conn.accountId} from=${remoteJid}`);
+    console.error(`${TAG14} drop: no text or media account=${conn.accountId} from=${remoteJid}`);
     return;
   }
   let mediaResult;
@@ -5870,7 +5968,7 @@ async function handleInboundMessage(conn, msg) {
       maxBytes: maxMb * 1024 * 1024
     });
     if (!mediaResult) {
-      console.error(`${TAG13} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
+      console.error(`${TAG14} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
     }
   }
   const isGroup = isGroupJid(remoteJid);
@@ -5911,7 +6009,7 @@ async function handleInboundMessage(conn, msg) {
     });
   }
   console.error(
-    `${TAG13} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (mediaResult ? ` mediaPath=${mediaResult.path}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
+    `${TAG14} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (mediaResult ? ` mediaPath=${mediaResult.path}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
   );
   if (!accessResult.allowed && accessResult.reason === "account-manager-unresolved") {
     console.error(
@@ -5937,7 +6035,7 @@ async function handleInboundMessage(conn, msg) {
   }
   const reply = async (text) => {
     if (isGroupJid(remoteJid)) {
-      console.error(`${TAG13} op=group-reply-blocked jid=${remoteJid}`);
+      console.error(`${TAG14} op=group-reply-blocked jid=${remoteJid}`);
       throw new WaReplyError("group reply blocked \u2014 observe-only", false);
     }
     const currentSock = conn.sock;
@@ -5984,15 +6082,15 @@ async function handleInboundMessage(conn, msg) {
   if (accessResult.agentType === "public") {
     const hoursResult = await isBusinessOpen(conn.accountId);
     if (!hoursResult.open) {
-      console.error(`${TAG13} [${conn.accountId}] dispatch skipped: business closed`);
+      console.error(`${TAG14} [${conn.accountId}] dispatch skipped: business closed`);
       const afterHoursMessage = whatsAppConfig.accounts?.[conn.accountId]?.afterHoursMessage ?? whatsAppConfig.afterHoursMessage;
       if (afterHoursMessage) {
         try {
           await reply(afterHoursMessage);
-          console.error(`${TAG13} [${conn.accountId}] after-hours auto-reply sent to ${remoteJid}`);
+          console.error(`${TAG14} [${conn.accountId}] after-hours auto-reply sent to ${remoteJid}`);
         } catch (err) {
           console.error(
-            `${TAG13} [${conn.accountId}] after-hours auto-reply failed: ${err instanceof Error ? err.message : String(err)}`
+            `${TAG14} [${conn.accountId}] after-hours auto-reply failed: ${err instanceof Error ? err.message : String(err)}`
           );
         }
       }
@@ -6437,13 +6535,13 @@ function audioExtension(mimeType) {
 }
 
 // app/lib/stt/voice-note.ts
-var TAG14 = "[voice]";
+var TAG15 = "[voice]";
 async function transcribeVoiceNote(file, source) {
   const startMs = Date.now();
   const bytes = file.size;
   const mimeType = file.type;
   console.error(
-    `${TAG14} recording send source=${source} duration_ms=unknown bytes=${bytes} format=${mimeType}`
+    `${TAG15} recording send source=${source} duration_ms=unknown bytes=${bytes} format=${mimeType}`
   );
   let tempDir;
   let tempPath;
@@ -6455,7 +6553,7 @@ async function transcribeVoiceNote(file, source) {
     await writeFile3(tempPath, buffer);
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG14} failed source=${source} error=temp-file-write: ${reason}`);
+    console.error(`${TAG15} failed source=${source} error=temp-file-write: ${reason}`);
     return { ok: false, error: "Could not process voice note" };
   }
   try {
@@ -6463,7 +6561,7 @@ async function transcribeVoiceNote(file, source) {
     if (!sttResult) {
       const elapsed2 = Date.now() - startMs;
       console.error(
-        `${TAG14} failed source=${source} error=transcription-failed duration_ms=${elapsed2}`
+        `${TAG15} failed source=${source} error=transcription-failed duration_ms=${elapsed2}`
       );
       return { ok: false, error: "Could not transcribe voice note. Please try again or type your message." };
     }
@@ -6471,7 +6569,7 @@ async function transcribeVoiceNote(file, source) {
     const elapsed = Date.now() - startMs;
     const words = rawText.split(/\s+/).filter(Boolean).length;
     console.error(
-      `${TAG14} transcribed source=${source} duration_ms=${elapsed} stt_ms=${sttResult.durationMs} words=${words}`
+      `${TAG15} transcribed source=${source} duration_ms=${elapsed} stt_ms=${sttResult.durationMs} words=${words}`
     );
     return {
       ok: true,
@@ -6481,7 +6579,7 @@ async function transcribeVoiceNote(file, source) {
     const elapsed = Date.now() - startMs;
     const reason = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG14} failed source=${source} error=${reason} duration_ms=${elapsed}`
+      `${TAG15} failed source=${source} error=${reason} duration_ms=${elapsed}`
     );
     return { ok: false, error: "Voice note transcription failed. Please try again or type your message." };
   } finally {
@@ -6528,7 +6626,7 @@ function composePublicSessionTitle(input) {
 }
 
 // app/lib/webchat/persist-customer-inbound.ts
-var TAG15 = "[channel-house]";
+var TAG16 = "[channel-house]";
 async function persistCustomerWebchatInbound(input) {
   if (!input.text) return null;
   try {
@@ -6544,7 +6642,7 @@ async function persistCustomerWebchatInbound(input) {
     );
     if (!conv.sessionId) {
       console.error(
-        `${TAG15} op=persist-skip reason=conversation-merge-failed accountId=${input.houseAccountId} key=${input.sessionKey}`
+        `${TAG16} op=persist-skip reason=conversation-merge-failed accountId=${input.houseAccountId} key=${input.sessionKey}`
       );
       return null;
     }
@@ -6556,17 +6654,17 @@ async function persistCustomerWebchatInbound(input) {
     );
     if (!messageId) {
       console.error(
-        `${TAG15} op=persist-skip reason=message-write-failed accountId=${input.houseAccountId} sessionId=${conv.sessionId.slice(0, 8)}`
+        `${TAG16} op=persist-skip reason=message-write-failed accountId=${input.houseAccountId} sessionId=${conv.sessionId.slice(0, 8)}`
       );
       return null;
     }
     console.error(
-      `${TAG15} op=persist accountId=${input.houseAccountId} sessionId=${conv.sessionId.slice(0, 8)} messageId=${messageId.slice(0, 8)} bytes=${Buffer.byteLength(input.text, "utf8")}`
+      `${TAG16} op=persist accountId=${input.houseAccountId} sessionId=${conv.sessionId.slice(0, 8)} messageId=${messageId.slice(0, 8)} bytes=${Buffer.byteLength(input.text, "utf8")}`
     );
     return { sessionId: conv.sessionId, messageId };
   } catch (err) {
     console.error(
-      `${TAG15} op=persist-fail accountId=${input.houseAccountId} key=${input.sessionKey} reason=${err instanceof Error ? err.message : String(err)}`
+      `${TAG16} op=persist-fail accountId=${input.houseAccountId} key=${input.sessionKey} reason=${err instanceof Error ? err.message : String(err)}`
     );
     return null;
   }
@@ -6874,7 +6972,7 @@ function parseScheduleProvenance(v) {
 }
 
 // server/routes/channel/schedule-inject.ts
-var TAG16 = "[schedule-inject]";
+var TAG17 = "[schedule-inject]";
 function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -6884,7 +6982,7 @@ function createScheduleInjectRoutes(deps) {
     const env = c.env;
     const remoteAddr = env?.incoming?.socket?.remoteAddress ?? "";
     if (!isLoopbackAddr(remoteAddr)) {
-      console.error(`${TAG16} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+      console.error(`${TAG17} reject reason=non-loopback remoteAddr=${remoteAddr}`);
       return c.json({ ok: false, error: "schedule-inject-loopback-only" }, 403);
     }
     const xffHeader = env?.incoming?.headers?.["x-forwarded-for"];
@@ -6892,7 +6990,7 @@ function createScheduleInjectRoutes(deps) {
     if (xffRaw.length > 0) {
       const offender = xffRaw.split(",").map((t) => t.trim()).filter(Boolean).find((t) => !isLoopbackAddr(t));
       if (offender !== void 0) {
-        console.error(`${TAG16} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+        console.error(`${TAG17} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
         return c.json({ ok: false, error: "schedule-inject-loopback-only" }, 403);
       }
     }
@@ -6908,23 +7006,23 @@ function createScheduleInjectRoutes(deps) {
     const eventId = typeof body.eventId === "string" ? body.eventId : "";
     const scheduleProvenance = parseScheduleProvenance(body.scheduleProvenance);
     if (channel !== "whatsapp" && channel !== "telegram" || !destination || !prompt) {
-      console.error(`${TAG16} reject reason=bad-request channel=${String(channel)} hasDestination=${Boolean(destination)} hasPrompt=${Boolean(prompt)}`);
+      console.error(`${TAG17} reject reason=bad-request channel=${String(channel)} hasDestination=${Boolean(destination)} hasPrompt=${Boolean(prompt)}`);
       return c.json({ ok: false, error: "schedule-inject-bad-request" }, 400);
     }
     const account = deps.resolveAccount();
     if (!account) {
-      console.error(`${TAG16} reject reason=no-account eventId=${eventId}`);
+      console.error(`${TAG17} reject reason=no-account eventId=${eventId}`);
       return c.json({ ok: false, error: "no-account" }, 500);
     }
     const houseAccountId = account.accountId;
-    console.error(`${TAG16} op=received eventId=${eventId} channel=${channel} destination=${destination} account=${houseAccountId}`);
+    console.error(`${TAG17} op=received eventId=${eventId} channel=${channel} destination=${destination} account=${houseAccountId}`);
     if (channel === "whatsapp") {
       const effectiveAccount2 = deps.effectiveAccountFor(houseAccountId, account.accountDir, destination);
       if (effectiveAccount2 === null) {
-        console.error(`${TAG16} op=schedule-account-manager-reject eventId=${eventId} destination=${destination} reason=unresolved-effective-account`);
+        console.error(`${TAG17} op=schedule-account-manager-reject eventId=${eventId} destination=${destination} reason=unresolved-effective-account`);
         return c.json({ ok: false, error: "account-manager-unresolved" }, 403);
       }
-      console.error(`${TAG16} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount2}`);
+      console.error(`${TAG17} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount2}`);
       const sessionId2 = adminSessionIdFor(effectiveAccount2, normalizeTarget(destination) ?? destination);
       const reply2 = (text) => deps.sendWhatsAppText(houseAccountId, destination, text);
       try {
@@ -6946,17 +7044,17 @@ function createScheduleInjectRoutes(deps) {
           reply: reply2
         });
       } catch (err) {
-        console.error(`${TAG16} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=inject-error status=${err instanceof Error ? err.message : String(err)}`);
+        console.error(`${TAG17} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=inject-error status=${err instanceof Error ? err.message : String(err)}`);
         return c.json({ ok: false, error: "inject-error" }, 502);
       }
-      console.error(`${TAG16} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=ok status=-`);
+      console.error(`${TAG17} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=ok status=-`);
       return c.json({ ok: true }, 200);
     }
     const effectiveAccount = houseAccountId;
-    console.error(`${TAG16} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount}`);
+    console.error(`${TAG17} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount}`);
     const botToken = account.config.telegram?.adminBotToken;
     if (!botToken) {
-      console.error(`${TAG16} reject reason=no-admin-bot-token eventId=${eventId}`);
+      console.error(`${TAG17} reject reason=no-admin-bot-token eventId=${eventId}`);
       return c.json({ ok: false, error: "no-admin-bot-token" }, 400);
     }
     const chatId = Number(destination);
@@ -6975,17 +7073,17 @@ function createScheduleInjectRoutes(deps) {
         reply
       });
     } catch (err) {
-      console.error(`${TAG16} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=inject-error status=${err instanceof Error ? err.message : String(err)}`);
+      console.error(`${TAG17} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=inject-error status=${err instanceof Error ? err.message : String(err)}`);
       return c.json({ ok: false, error: "inject-error" }, 502);
     }
-    console.error(`${TAG16} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
+    console.error(`${TAG17} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
     return c.json({ ok: true }, 200);
   });
   return app63;
 }
 
 // server/index.ts
-var import_dist8 = __toESM(require_dist(), 1);
+var import_dist9 = __toESM(require_dist(), 1);
 
 // app/lib/telegram/outbound/send-text.ts
 async function sendTelegramText(botToken, chatId, text) {
@@ -7012,26 +7110,26 @@ import { randomUUID as randomUUID6 } from "crypto";
 // app/lib/whatsapp/config-persist.ts
 import { readFileSync as readFileSync11, writeFileSync as writeFileSync4, existsSync as existsSync6 } from "fs";
 import { resolve as resolve8, join as join8, dirname as dirname2, basename as basename2 } from "path";
-var TAG17 = "[whatsapp:config]";
+var TAG18 = "[whatsapp:config]";
 function configPath(accountDir) {
   return resolve8(accountDir, "account.json");
 }
 function readConfig(accountDir) {
-  const path2 = configPath(accountDir);
-  if (!existsSync6(path2)) throw new Error(`account.json not found at ${path2}`);
-  return JSON.parse(readFileSync11(path2, "utf-8"));
+  const path3 = configPath(accountDir);
+  if (!existsSync6(path3)) throw new Error(`account.json not found at ${path3}`);
+  return JSON.parse(readFileSync11(path3, "utf-8"));
 }
 function writeConfig(accountDir, config) {
-  const path2 = configPath(accountDir);
-  writeFileSync4(path2, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  const path3 = configPath(accountDir);
+  writeFileSync4(path3, JSON.stringify(config, null, 2) + "\n", "utf-8");
 }
 function reloadManagerConfig(accountDir) {
   try {
     const config = readConfig(accountDir);
     reloadConfig(config);
-    console.error(`${TAG17} reloaded manager config`);
+    console.error(`${TAG18} reloaded manager config`);
   } catch (err) {
-    console.error(`${TAG17} manager config reload failed: ${String(err)}`);
+    console.error(`${TAG18} manager config reload failed: ${String(err)}`);
   }
 }
 var E164_PATTERN = /^\+\d{7,15}$/;
@@ -7057,25 +7155,25 @@ function persistAfterPairing(accountDir, accountId, selfPhone) {
       const adminPhones = wa.adminPhones;
       if (!adminPhones.includes(normalized)) {
         adminPhones.push(normalized);
-        console.error(`${TAG17} added selfPhone=${normalized} to adminPhones`);
+        console.error(`${TAG18} added selfPhone=${normalized} to adminPhones`);
       }
     } else {
-      console.error(`${TAG17} skipping adminPhones \u2014 selfPhone is null account=${accountId}`);
+      console.error(`${TAG18} skipping adminPhones \u2014 selfPhone is null account=${accountId}`);
     }
     const parsed = WhatsAppConfigSchema.safeParse(wa);
     if (!parsed.success) {
       const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      console.error(`${TAG17} validation failed after pairing: ${msg}`);
+      console.error(`${TAG18} validation failed after pairing: ${msg}`);
       return { ok: false, error: `Validation failed: ${msg}` };
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG17} persisted after pairing account=${accountId} phone=${selfPhone ?? "null"}`);
+    console.error(`${TAG18} persisted after pairing account=${accountId} phone=${selfPhone ?? "null"}`);
     reloadManagerConfig(accountDir);
     return { ok: true };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG17} persist failed account=${accountId}: ${msg}`);
+    console.error(`${TAG18} persist failed account=${accountId}: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -7089,7 +7187,7 @@ function addAdminPhone(accountDir, phone) {
     const targetId = typeof config.accountId === "string" && config.accountId ? config.accountId : basename2(resolve8(accountDir));
     const socketOwner = resolveHouseOrSoleAccountId(dirname2(resolve8(accountDir)));
     if (targetId !== socketOwner) {
-      console.error(`${TAG17} add-admin-phone rejected accountId=${targetId} reason=not-socket-account`);
+      console.error(`${TAG18} add-admin-phone rejected accountId=${targetId} reason=not-socket-account`);
       return {
         ok: false,
         reason: "not-socket-account",
@@ -7118,12 +7216,12 @@ function addAdminPhone(accountDir, phone) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG17} added admin phone=${normalized}`);
+    console.error(`${TAG18} added admin phone=${normalized}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Added ${normalized} as admin phone. Messages from this number will route to the admin agent.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG17} addAdminPhone failed: ${msg}`);
+    console.error(`${TAG18} addAdminPhone failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -7151,12 +7249,12 @@ function removeAdminPhone(accountDir, phone) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG17} removed admin phone=${normalized}`);
+    console.error(`${TAG18} removed admin phone=${normalized}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Removed ${normalized} from admin phones. Messages from this number will now route to the public agent.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG17} removeAdminPhone failed: ${msg}`);
+    console.error(`${TAG18} removeAdminPhone failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -7251,13 +7349,13 @@ function setAccountManager(accountDir, phone, subAccountId, mode = "active") {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG17} bound account manager phone=${normalized} managesAccount=${sub} mode=${mode}`);
+    console.error(`${TAG18} bound account manager phone=${normalized} managesAccount=${sub} mode=${mode}`);
     reloadManagerConfig(accountDir);
     const behaviour = mode === "passive" ? `Their WhatsApp messages will each file one task scoped to that sub-account; the agent sends nothing back.` : `Their WhatsApp messages will reach that sub-account's admin agent; replies still go out over this account's WhatsApp device.`;
     return { ok: true, message: `Bound ${normalized} as ${mode} account manager for sub-account ${sub}. ${behaviour}` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG17} setAccountManager failed: ${msg}`);
+    console.error(`${TAG18} setAccountManager failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -7282,12 +7380,12 @@ function clearAccountManager(accountDir, phone) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG17} cleared account manager phone=${normalized}`);
+    console.error(`${TAG18} cleared account manager phone=${normalized}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Cleared the account-manager binding for ${normalized}.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG17} clearAccountManager failed: ${msg}`);
+    console.error(`${TAG18} clearAccountManager failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -7334,12 +7432,12 @@ function setPublicAgent(accountDir, slug) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG17} publicAgent set to ${trimmed}`);
+    console.error(`${TAG18} publicAgent set to ${trimmed}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Public agent set to "${trimmed}". WhatsApp messages from non-admin phones will be handled by this agent.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG17} setPublicAgent failed: ${msg}`);
+    console.error(`${TAG18} setPublicAgent failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -7380,17 +7478,17 @@ function updateConfig(accountDir, fields) {
     const parsed = WhatsAppConfigSchema.safeParse(wa);
     if (!parsed.success) {
       const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      console.error(`${TAG17} update validation failed: ${msg}`);
+      console.error(`${TAG18} update validation failed: ${msg}`);
       return { ok: false, error: `Validation failed: ${msg}` };
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG17} updated fields=[${fieldNames.join(",")}]`);
+    console.error(`${TAG18} updated fields=[${fieldNames.join(",")}]`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Updated WhatsApp config: ${fieldNames.join(", ")}.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG17} updateConfig failed: ${msg}`);
+    console.error(`${TAG18} updateConfig failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -7427,17 +7525,17 @@ function migrateRemovedConfigKeys(accountDir) {
     }
     writeConfig(accountDir, config);
     console.error(
-      `${TAG17} migration: stripped unknown keys=[${result.droppedKeys.join(",")}] from account.json`
+      `${TAG18} migration: stripped unknown keys=[${result.droppedKeys.join(",")}] from account.json`
     );
     return { dropped: result.droppedKeys };
   } catch (err) {
-    console.error(`${TAG17} migration failed: ${String(err)}`);
+    console.error(`${TAG18} migration failed: ${String(err)}`);
     return { dropped: [] };
   }
 }
 
 // app/lib/whatsapp/login.ts
-var TAG18 = "[whatsapp:login]";
+var TAG19 = "[whatsapp:login]";
 function maskPhone(digits) {
   if (digits.length <= 4) return "*".repeat(digits.length);
   return digits.slice(0, 2) + "*".repeat(digits.length - 4) + digits.slice(-2);
@@ -7448,7 +7546,7 @@ function closeSocket(sock) {
   try {
     sock.ws?.close?.();
   } catch (err) {
-    console.warn(`${TAG18} socket close error during cleanup: ${String(err)}`);
+    console.warn(`${TAG19} socket close error during cleanup: ${String(err)}`);
   }
 }
 function resetActiveLogin(accountId) {
@@ -7475,18 +7573,18 @@ async function runPostPairing(login) {
         const masked = selfPhone ? `${selfPhone.slice(0, 4)}***` : "null";
         console.error(`[whatsapp-persist] wa-persist-on-connect account=${login.accountId} phone=${masked}`);
       } else {
-        console.error(`${TAG18} wa-persist-on-connect FAILED account=${login.accountId}: ${result.error}`);
+        console.error(`${TAG19} wa-persist-on-connect FAILED account=${login.accountId}: ${result.error}`);
       }
     } catch (err) {
-      console.error(`${TAG18} wa-persist-on-connect error account=${login.accountId}: ${String(err)}`);
+      console.error(`${TAG19} wa-persist-on-connect error account=${login.accountId}: ${String(err)}`);
     }
   } else {
-    console.error(`${TAG18} wa-persist-on-connect skipped \u2014 no accountDir account=${login.accountId}`);
+    console.error(`${TAG19} wa-persist-on-connect skipped \u2014 no accountDir account=${login.accountId}`);
   }
   try {
     await registerLoginSocket(login.accountId, login.sock, login.authDir);
   } catch (err) {
-    console.error(`${TAG18} registerLoginSocket failed account=${login.accountId}: ${String(err)}`);
+    console.error(`${TAG19} registerLoginSocket failed account=${login.accountId}: ${String(err)}`);
   }
 }
 async function loginConnectionLoop(accountId, login) {
@@ -7495,7 +7593,7 @@ async function loginConnectionLoop(accountId, login) {
   const logTerminal = (outcome, errMsg) => {
     const fc = credsCensus(login.authDir);
     console.error(
-      `${TAG18} op=terminal cid=${cidShort} outcome=${outcome} credsFinal={registered=${fc.registered},account=${fc.hasAccountSignature},me=${fc.e164 ?? "null"}}` + (errMsg ? ` error="${errMsg}"` : "")
+      `${TAG19} op=terminal cid=${cidShort} outcome=${outcome} credsFinal={registered=${fc.registered},account=${fc.hasAccountSignature},me=${fc.e164 ?? "null"}}` + (errMsg ? ` error="${errMsg}"` : "")
     );
   };
   while (true) {
@@ -7505,7 +7603,7 @@ async function loginConnectionLoop(accountId, login) {
       if (current?.id === login.id) {
         await runPostPairing(current);
         current.connected = true;
-        console.error(`${TAG18} loginConnectionLoop: connected account=${accountId} attempt=${attempt} configPersisted=${current.configPersisted}`);
+        console.error(`${TAG19} loginConnectionLoop: connected account=${accountId} attempt=${attempt} configPersisted=${current.configPersisted}`);
         logTerminal("connected");
       }
       return;
@@ -7517,7 +7615,7 @@ async function loginConnectionLoop(accountId, login) {
       if (!preRetryCensus.hasAccountSignature) {
         current.error = "WhatsApp accepted the code but did not finish linking. This usually means the number has reached its linked-device limit or has a stale linked device. On the phone, open WhatsApp, Linked Devices, remove existing devices, then ask for a new code.";
         console.error(
-          `${TAG18} op=pairing-incomplete cid=${cidShort} closeKind=${closeKind(getStatusCode(err), false)} reason=no-account-signature`
+          `${TAG19} op=pairing-incomplete cid=${cidShort} closeKind=${closeKind(getStatusCode(err), false)} reason=no-account-signature`
         );
         return;
       }
@@ -7525,7 +7623,7 @@ async function loginConnectionLoop(accountId, login) {
       if (!classification.shouldRetry || attempt >= LOGIN_MAX_RECONNECTS) {
         if (attempt >= LOGIN_MAX_RECONNECTS) {
           console.error(
-            `${TAG18} login reconnect attempts exhausted (${attempt}/${LOGIN_MAX_RECONNECTS}) \u2014 surfacing error to agent`
+            `${TAG19} login reconnect attempts exhausted (${attempt}/${LOGIN_MAX_RECONNECTS}) \u2014 surfacing error to agent`
           );
           current.error = `Login failed after ${attempt} reconnect attempts: ${formatError(err)}`;
         } else {
@@ -7538,7 +7636,7 @@ async function loginConnectionLoop(accountId, login) {
       attempt++;
       const delay = LOGIN_RECONNECT_DELAYS[attempt - 1] ?? 8e3;
       console.error(
-        `${TAG18} status=${classification.statusCode ?? "unknown"} restart required \u2014 reconnecting with saved creds (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}) delay=${delay}ms`
+        `${TAG19} status=${classification.statusCode ?? "unknown"} restart required \u2014 reconnecting with saved creds (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}) delay=${delay}ms`
       );
       closeSocket(current.sock);
       await new Promise((r) => setTimeout(r, delay));
@@ -7546,14 +7644,14 @@ async function loginConnectionLoop(accountId, login) {
       if (afterDelay?.id !== login.id) return;
       const rc = credsCensus(login.authDir);
       console.error(
-        `${TAG18} op=reconnect cid=${cidShort} attempt=${attempt}/${LOGIN_MAX_RECONNECTS} withRegistered=${rc.registered} withAccount=${rc.hasAccountSignature}`
+        `${TAG19} op=reconnect cid=${cidShort} attempt=${attempt}/${LOGIN_MAX_RECONNECTS} withRegistered=${rc.registered} withAccount=${rc.hasAccountSignature}`
       );
       try {
         const newSock = await createWaSocket({ authDir: login.authDir, correlationId: cidShort, account: accountId });
         current.sock = newSock;
       } catch (sockErr) {
         console.error(
-          `${TAG18} reconnect socket creation failed (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}): ${String(sockErr)}`
+          `${TAG19} reconnect socket creation failed (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}): ${String(sockErr)}`
         );
         current.error = `Reconnection failed: ${String(sockErr)}`;
         logTerminal("error", current.error);
@@ -7570,7 +7668,7 @@ async function startLogin(opts) {
   const hasAuth = await authExists(authDir);
   const selfId = readSelfId(authDir);
   console.error(
-    `${TAG18} op=start cid=${cid} account=${accountId} force=${!!force} hasAuth=${hasAuth}` + (existing0 ? ` activeLogin={id=${existing0.id.slice(0, 8)},age=${Math.round((Date.now() - existing0.startedAt) / 1e3)}s,hasCode=${!!existing0.pairingCode}}` : " activeLogin=none")
+    `${TAG19} op=start cid=${cid} account=${accountId} force=${!!force} hasAuth=${hasAuth}` + (existing0 ? ` activeLogin={id=${existing0.id.slice(0, 8)},age=${Math.round((Date.now() - existing0.startedAt) / 1e3)}s,hasCode=${!!existing0.pairingCode}}` : " activeLogin=none")
   );
   if (hasAuth && !force) {
     const who = selfId.e164 ?? selfId.jid ?? "unknown";
@@ -7585,7 +7683,7 @@ async function startLogin(opts) {
   }
   const existing = activeLogins.get(accountId);
   if (existing && isLoginFresh(existing) && existing.pairingCode && !force) {
-    console.error(`${TAG18} startLogin account=${accountId} guard: returning existing pairing code (age=${Math.round((Date.now() - existing.startedAt) / 1e3)}s)`);
+    console.error(`${TAG19} startLogin account=${accountId} guard: returning existing pairing code (age=${Math.round((Date.now() - existing.startedAt) / 1e3)}s)`);
     return {
       pairingCode: existing.pairingCode,
       phone: existing.phone,
@@ -7593,7 +7691,7 @@ async function startLogin(opts) {
     };
   }
   if (existing) {
-    console.error(`${TAG18} startLogin account=${accountId} ${force ? "force override" : "stale/no-code"}, resetting active login`);
+    console.error(`${TAG19} startLogin account=${accountId} ${force ? "force override" : "stale/no-code"}, resetting active login`);
   }
   resetActiveLogin(accountId);
   await clearAuth(authDir);
@@ -7624,7 +7722,7 @@ async function startLogin(opts) {
         if (requested) return;
         requested = true;
         console.error(
-          `${TAG18} op=pairing-request cid=${cid} account=${accountId} qrRef=#1 sinceOpenMs=${socketOpenTs ? Date.now() - socketOpenTs : 0}`
+          `${TAG19} op=pairing-request cid=${cid} account=${accountId} qrRef=#1 sinceOpenMs=${socketOpenTs ? Date.now() - socketOpenTs : 0}`
         );
         void sock.requestPairingCode(digits).then((code) => {
           clearTimeout(codeTimer);
@@ -7633,7 +7731,7 @@ async function startLogin(opts) {
           if (current?.id !== login.id) return;
           if (!current.pairingCode) current.pairingCode = code;
           console.error(
-            `${TAG18} op=code-issued cid=${cid} account=${accountId} phone=${maskPhone(digits)} codeLen=${code.length} sinceOpenMs=${socketOpenTs ? codeIssuedTs - socketOpenTs : 0}`
+            `${TAG19} op=code-issued cid=${cid} account=${accountId} phone=${maskPhone(digits)} codeLen=${code.length} sinceOpenMs=${socketOpenTs ? codeIssuedTs - socketOpenTs : 0}`
           );
           resolveCode?.(code);
         }).catch((err) => {
@@ -7664,7 +7762,7 @@ async function startLogin(opts) {
   const ttlTimer = setTimeout(() => {
     const current = activeLogins.get(accountId);
     if (current?.id === login.id && !current.connected) {
-      console.error(`${TAG18} pairing-window-elapsed account=${accountId} (ttl sweep)`);
+      console.error(`${TAG19} pairing-window-elapsed account=${accountId} (ttl sweep)`);
       resetActiveLogin(accountId);
     }
   }, ACTIVE_LOGIN_TTL_MS);
@@ -7672,7 +7770,7 @@ async function startLogin(opts) {
     ttlTimer.unref();
   }
   loginConnectionLoop(accountId, login).catch((err) => {
-    console.error(`${TAG18} loginConnectionLoop unexpected error: ${String(err)}`);
+    console.error(`${TAG19} loginConnectionLoop unexpected error: ${String(err)}`);
     const current = activeLogins.get(accountId);
     if (current?.id === login.id) {
       current.error = `Unexpected login error: ${String(err)}`;
@@ -7697,13 +7795,13 @@ async function waitForLogin(opts) {
   const { accountId, timeoutMs = 6e4 } = opts;
   const login = activeLogins.get(accountId);
   console.error(
-    `${TAG18} waitForLogin account=${accountId} timeout=${timeoutMs}ms` + (login ? ` login={id=${login.id.slice(0, 8)},age=${Math.round((Date.now() - login.startedAt) / 1e3)}s,connected=${login.connected},hasCode=${!!login.pairingCode}}` : " login=none")
+    `${TAG19} waitForLogin account=${accountId} timeout=${timeoutMs}ms` + (login ? ` login={id=${login.id.slice(0, 8)},age=${Math.round((Date.now() - login.startedAt) / 1e3)}s,connected=${login.connected},hasCode=${!!login.pairingCode}}` : " login=none")
   );
   if (!login) {
     return { connected: false, message: "No active WhatsApp login in progress.", configPersisted: false };
   }
   if (!isLoginFresh(login)) {
-    console.error(`${TAG18} pairing-window-elapsed account=${accountId}`);
+    console.error(`${TAG19} pairing-window-elapsed account=${accountId}`);
     resetActiveLogin(accountId);
     return { connected: false, message: "The pairing window expired. Ask me to generate a new code.", configPersisted: false };
   }
@@ -7711,8 +7809,8 @@ async function waitForLogin(opts) {
   while (Date.now() < deadline) {
     if (login.connected) {
       const selfId = readSelfId(login.authDir);
-      console.error(`${TAG18} pairing-connected account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
-      console.error(`${TAG18} login complete for account=${accountId} phone=${selfId.e164 ?? "unknown"} configPersisted=${login.configPersisted}`);
+      console.error(`${TAG19} pairing-connected account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
+      console.error(`${TAG19} login complete for account=${accountId} phone=${selfId.e164 ?? "unknown"} configPersisted=${login.configPersisted}`);
       const configPersisted = login.configPersisted;
       activeLogins.delete(accountId);
       return {
@@ -7730,7 +7828,7 @@ async function waitForLogin(opts) {
     await new Promise((r) => setTimeout(r, 1e3));
   }
   const elapsed = Math.round((Date.now() - (deadline - timeoutMs)) / 1e3);
-  console.error(`${TAG18} waitForLogin poll timeout account=${accountId} elapsed=${elapsed}s \u2014 login kept alive (pairing code still valid)`);
+  console.error(`${TAG19} waitForLogin poll timeout account=${accountId} elapsed=${elapsed}s \u2014 login kept alive (pairing code still valid)`);
   return { connected: false, message: "Still waiting for you to enter the pairing code. The code is still valid \u2014 ask me to keep waiting, or request a new code.", configPersisted: false };
 }
 function listActiveLoginAccountIds() {
@@ -7752,8 +7850,7 @@ function reconcileMessageStoreAccountKeys(input) {
 import { realpathSync as realpathSync3 } from "fs";
 import { readFile, stat as stat2 } from "fs/promises";
 import { resolve as resolve9, basename as basename3 } from "path";
-var TAG19 = "[whatsapp:outbound]";
-var WHATSAPP_DOCUMENT_MAX_BYTES = 100 * 1024 * 1024;
+var TAG20 = "[whatsapp:outbound]";
 var lastDocumentOutboundAt = /* @__PURE__ */ new Map();
 var lastRouteDocumentOutboundAt = /* @__PURE__ */ new Map();
 function normalizeJid2(to) {
@@ -7786,16 +7883,16 @@ async function sendWhatsAppDocument(input) {
     const accountResolved = realpathSync3(accountDir);
     if (!resolvedPath.startsWith(accountResolved + "/")) {
       const sanitised = filePath.replace(accountDir, "<account>/");
-      console.error(`${TAG19} document REJECTED path=${sanitised} reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG20} document REJECTED path=${sanitised} reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
     }
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG19} document ENOENT path=${filePath}`);
+      console.error(`${TAG20} document ENOENT path=${filePath}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG19} document path error: ${String(err)}`);
+    console.error(`${TAG20} document path error: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   const fileStat = await stat2(resolvedPath);
@@ -7808,21 +7905,30 @@ async function sendWhatsAppDocument(input) {
   }
   const filename = basename3(resolvedPath);
   const jid = normalizeJid2(to);
-  const sock = getSocket(accountId);
-  if (!sock) {
-    console.error(`${TAG19} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=false reason=not-connected`);
-    return { ok: false, status: 503, error: `WhatsApp account "${accountId}" is not connected` };
+  const res = resolveSocket(accountId);
+  if (!res.ok) {
+    const reason = res.reason === "key-miss" ? `key-miss presentKeys=${res.presentKeys.join(",") || "none"}` : "disconnected";
+    console.error(`${TAG20} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=false reason=${reason}`);
+    if (res.reason === "key-miss") {
+      return {
+        ok: false,
+        status: 503,
+        error: `WhatsApp socket key miss: no socket is registered for accountId=${accountId} (present keys: ${res.presentKeys.join(",") || "none"}). This is an account-keying fault, not a dropped link \u2014 do not advise re-pairing.`
+      };
+    }
+    return { ok: false, status: 503, error: `WhatsApp account "${accountId}" is registered but its transport is down.` };
   }
+  const sock = res.sock;
   const buffer = Buffer.from(await readFile(resolvedPath));
   const mimetype = detectMimeType(resolvedPath);
   const result = await sendMediaMessage(
     sock,
     to,
     { type: "document", buffer, mimetype, filename, caption },
-    { accountId }
+    { accountId: res.accountId }
   );
   console.error(
-    `${TAG19} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
+    `${TAG20} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
   );
   if (result.success) {
     recordDocumentOutbound(to);
@@ -7942,7 +8048,7 @@ function serializeWhatsAppSchema() {
 // app/lib/whatsapp/status-reconcile.ts
 import { readdirSync as readdirSync4 } from "fs";
 import { join as join9 } from "path";
-var TAG20 = "[whatsapp:reconcile]";
+var TAG21 = "[whatsapp:reconcile]";
 var HALF_REGISTERED_MIN_AGE_MS = 5 * 6e4;
 function listCredsAccountIds(credsRoot) {
   try {
@@ -7968,14 +8074,14 @@ function reconcileCredsOnDisk(opts) {
       const ageMs = getAuthAgeMs(authDir);
       const abandoned = !inFlight && ageMs !== null && ageMs >= HALF_REGISTERED_MIN_AGE_MS;
       if (!abandoned) {
-        console.error(`${TAG20} op=half-registered account=${accountId} registered=true hasAccount=false inFlight=${inFlight} ageMs=${ageMs ?? "null"}`);
+        console.error(`${TAG21} op=half-registered account=${accountId} registered=true hasAccount=false inFlight=${inFlight} ageMs=${ageMs ?? "null"}`);
         entries.push({ accountId, connected: false, linkedUnconfigured: true });
         continue;
       }
-      console.error(`${TAG20} op=discard-half-registered account=${accountId} registered=true hasAccount=false ageMs=${ageMs}`);
+      console.error(`${TAG21} op=discard-half-registered account=${accountId} registered=true hasAccount=false ageMs=${ageMs}`);
       const removed = discardAuthDirSync(authDir);
       if (!removed) {
-        console.error(`${TAG20} op=discard-half-registered-failed account=${accountId} \u2014 residue persists`);
+        console.error(`${TAG21} op=discard-half-registered-failed account=${accountId} \u2014 residue persists`);
         entries.push({ accountId, connected: false, linkedUnconfigured: true });
       }
       continue;
@@ -7983,14 +8089,14 @@ function reconcileCredsOnDisk(opts) {
     const selfPhone = readSelfId(authDir).e164 ?? void 0;
     const configured = accountDir ? isAccountConfigured(accountDir, accountId) : false;
     console.error(
-      `${TAG20} wa-link-unconfigured account=${accountId} creds=present config=${configured ? "present" : "absent"}`
+      `${TAG21} wa-link-unconfigured account=${accountId} creds=present config=${configured ? "present" : "absent"}`
     );
     if (!configured && accountDir) {
       const result = persistAfterPairing(accountDir, accountId, selfPhone ?? null);
       if (result.ok) {
-        console.error(`${TAG20} self-healed account=${accountId}`);
+        console.error(`${TAG21} self-healed account=${accountId}`);
       } else {
-        console.error(`${TAG20} self-heal FAILED account=${accountId}: ${result.error}`);
+        console.error(`${TAG21} self-heal FAILED account=${accountId}: ${result.error}`);
       }
     }
     entries.push({ accountId, selfPhone, connected: false, linkedUnconfigured: !configured });
@@ -8091,7 +8197,7 @@ function authorizeRecallRead(input) {
 }
 
 // server/routes/whatsapp.ts
-var TAG21 = "[whatsapp:api]";
+var TAG22 = "[whatsapp:api]";
 var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT || "";
 function recallAttachment(storeAccountId, attachmentId) {
   if (!attachmentId) return void 0;
@@ -8136,7 +8242,7 @@ function houseSocketScopeDenial(c, op) {
   const houseAccountId = resolveAccount()?.accountId ?? "";
   const { decision, callerAccountId, houseAdminScope } = evaluateCallerScope(c, houseAccountId);
   if (decision.authorized) return null;
-  console.error(`${TAG21} op=authz-deny route=${op} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
+  console.error(`${TAG22} op=authz-deny route=${op} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
   return c.json({ ok: false, error: "Not authorized. The WhatsApp connection and its settings are house-scoped; this session may only act on its own account." }, 403);
 }
 var app2 = new Hono();
@@ -8152,7 +8258,7 @@ app2.get("/status", (c) => {
     const reconciled = reconcileCredsOnDisk({ credsRoot, accountDir, liveAccountIds: liveIds, activeLoginAccountIds: activeLoginIds });
     const accounts = [...live, ...reconciled];
     const summary = accounts.map((a) => `${a.accountId}:${a.connected ? "up" : a.linkedUnconfigured ? "linked-unconfigured" : "down"}`).join(", ");
-    console.error(`${TAG21} status accounts=${accounts.length} [${summary}]`);
+    console.error(`${TAG22} status accounts=${accounts.length} [${summary}]`);
     const reachableAccountIds = [
       .../* @__PURE__ */ new Set([...listStoredAccountIds(), ...listConnectionPlatformAccountIds()])
     ];
@@ -8161,11 +8267,11 @@ app2.get("/status", (c) => {
       reachableAccountIds
     });
     if (!storeKeyReconcile.ok) {
-      console.warn(`${TAG21} store-key-drift orphanLiveKeys=[${storeKeyReconcile.orphanLiveKeys.join(",")}] \u2014 in-memory cache keyed by a value with no disk account; read tools will miss`);
+      console.warn(`${TAG22} store-key-drift orphanLiveKeys=[${storeKeyReconcile.orphanLiveKeys.join(",")}] \u2014 in-memory cache keyed by a value with no disk account; read tools will miss`);
     }
     return c.json({ accounts, storeKeyReconcile });
   } catch (err) {
-    console.error(`${TAG21} status error: ${String(err)}`);
+    console.error(`${TAG22} status error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8183,10 +8289,10 @@ app2.post("/login/start", async (c) => {
     const authDir = join10(MAXY_DIR, "credentials", "whatsapp", accountId);
     const accountDir = resolveAccount()?.accountDir ?? null;
     const result = await startLogin({ accountId, authDir, phone, accountDir, force });
-    console.error(`${TAG21} login/start result account=${accountId} hasCode=${!!result.pairingCode}${result.selfPhone ? ` phone=${result.selfPhone}` : ""}`);
+    console.error(`${TAG22} login/start result account=${accountId} hasCode=${!!result.pairingCode}${result.selfPhone ? ` phone=${result.selfPhone}` : ""}`);
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG21} login/start error: ${String(err)}`);
+    console.error(`${TAG22} login/start error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8198,7 +8304,7 @@ app2.post("/login/wait", async (c) => {
     const accountId = validateAccountId(body.accountId);
     const timeoutMs = body.timeoutMs ?? 6e4;
     const result = await waitForLogin({ accountId, timeoutMs });
-    console.error(`${TAG21} login/wait result account=${accountId} connected=${result.connected}${result.selfPhone ? ` phone=${result.selfPhone}` : ""} configPersisted=${result.configPersisted}`);
+    console.error(`${TAG22} login/wait result account=${accountId} connected=${result.connected}${result.selfPhone ? ` phone=${result.selfPhone}` : ""} configPersisted=${result.configPersisted}`);
     return c.json({
       connected: result.connected,
       message: result.message,
@@ -8206,7 +8312,7 @@ app2.post("/login/wait", async (c) => {
       configPersisted: result.configPersisted
     });
   } catch (err) {
-    console.error(`${TAG21} login/wait error: ${String(err)}`);
+    console.error(`${TAG22} login/wait error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8219,7 +8325,7 @@ app2.post("/disconnect", async (c) => {
     await stopConnection(accountId);
     return c.json({ disconnected: true, accountId });
   } catch (err) {
-    console.error(`${TAG21} disconnect error: ${String(err)}`);
+    console.error(`${TAG22} disconnect error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8232,7 +8338,7 @@ app2.post("/reconnect", async (c) => {
     await startConnection(accountId);
     return c.json({ reconnecting: true, accountId });
   } catch (err) {
-    console.error(`${TAG21} reconnect error: ${String(err)}`);
+    console.error(`${TAG22} reconnect error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8256,7 +8362,7 @@ app2.post("/config", async (c) => {
         }
         const result = addAdminPhone(account.accountDir, phone);
         const reasonTail = !result.ok && result.reason ? ` reason=${result.reason}` : "";
-        console.error(`${TAG21} config action=add-admin-phone accountId=${account.accountId} phone=${phone} ok=${result.ok}${reasonTail}`);
+        console.error(`${TAG22} config action=add-admin-phone accountId=${account.accountId} phone=${phone} ok=${result.ok}${reasonTail}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "remove-admin-phone": {
@@ -8264,12 +8370,12 @@ app2.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "phone".' }, 400);
         }
         const result = removeAdminPhone(account.accountDir, phone);
-        console.error(`${TAG21} config action=remove-admin-phone phone=${phone} ok=${result.ok}`);
+        console.error(`${TAG22} config action=remove-admin-phone phone=${phone} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "list-admin-phones": {
         const phones = readAdminPhones(account.accountDir);
-        console.error(`${TAG21} config action=list-admin-phones count=${phones.length}`);
+        console.error(`${TAG22} config action=list-admin-phones count=${phones.length}`);
         return c.json({ ok: true, phones });
       }
       case "add-account-manager": {
@@ -8281,7 +8387,7 @@ app2.post("/config", async (c) => {
         }
         const managerMode = mode === "passive" ? "passive" : "active";
         const result = setAccountManager(account.accountDir, phone, managesAccount, managerMode);
-        console.error(`${TAG21} config action=add-account-manager phone=${phone} managesAccount=${managesAccount} mode=${managerMode} ok=${result.ok}`);
+        console.error(`${TAG22} config action=add-account-manager phone=${phone} managesAccount=${managesAccount} mode=${managerMode} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "remove-account-manager": {
@@ -8289,12 +8395,12 @@ app2.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "phone".' }, 400);
         }
         const result = clearAccountManager(account.accountDir, phone);
-        console.error(`${TAG21} config action=remove-account-manager phone=${phone} ok=${result.ok}`);
+        console.error(`${TAG22} config action=remove-account-manager phone=${phone} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "list-account-managers": {
         const accountManagers = readAccountManagers(account.accountDir);
-        console.error(`${TAG21} config action=list-account-managers count=${Object.keys(accountManagers).length}`);
+        console.error(`${TAG22} config action=list-account-managers count=${Object.keys(accountManagers).length}`);
         return c.json({ ok: true, accountManagers });
       }
       case "set-public-agent": {
@@ -8302,13 +8408,13 @@ app2.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "slug" (the agent directory name, e.g. "my-agent").' }, 400);
         }
         const result = setPublicAgent(account.accountDir, slug);
-        console.error(`${TAG21} config action=set-public-agent slug=${slug} ok=${result.ok}`);
+        console.error(`${TAG22} config action=set-public-agent slug=${slug} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "get-public-agent": {
         const targetAccount = typeof accountId === "string" && accountId.trim() ? accountId.trim() : "default";
         const resolved = resolvePublicAgent(account.accountDir, { accountId: targetAccount });
-        console.error(`${TAG21} config action=get-public-agent accountId=${targetAccount} slug=${resolved?.slug ?? "none"} source=${resolved?.source ?? "none"}`);
+        console.error(`${TAG22} config action=get-public-agent accountId=${targetAccount} slug=${resolved?.slug ?? "none"} source=${resolved?.source ?? "none"}`);
         return c.json({ ok: true, slug: resolved?.slug ?? null, source: resolved?.source ?? null });
       }
       case "list-public-agents": {
@@ -8325,26 +8431,26 @@ app2.post("/config", async (c) => {
                 const config = JSON.parse(readFileSync12(configPath2, "utf-8"));
                 agents.push({ slug: entry.name, displayName: config.displayName ?? entry.name });
               } catch {
-                console.error(`${TAG21} config action=list-public-agents error="failed to parse config.json for agent ${entry.name}" \u2014 skipping`);
+                console.error(`${TAG22} config action=list-public-agents error="failed to parse config.json for agent ${entry.name}" \u2014 skipping`);
               }
             }
           } catch (err) {
-            console.error(`${TAG21} config action=list-public-agents error="failed to scan agents directory: ${String(err)}"`);
+            console.error(`${TAG22} config action=list-public-agents error="failed to scan agents directory: ${String(err)}"`);
           }
         }
-        console.error(`${TAG21} config action=list-public-agents count=${agents.length}`);
+        console.error(`${TAG22} config action=list-public-agents count=${agents.length}`);
         return c.json({ ok: true, agents });
       }
       case "schema": {
         const text = serializeWhatsAppSchema();
-        console.error(`${TAG21} config action=schema`);
+        console.error(`${TAG22} config action=schema`);
         return c.json({ ok: true, text });
       }
       case "list-groups": {
         const groupAccountId = accountId ?? "default";
         const sock = getSocket(groupAccountId);
         if (!sock) {
-          console.error(`${TAG21} config action=list-groups error="not connected" accountId=${groupAccountId}`);
+          console.error(`${TAG22} config action=list-groups error="not connected" accountId=${groupAccountId}`);
           return c.json({ ok: false, error: `WhatsApp account "${groupAccountId}" is not connected. Connect first, then retry.` });
         }
         try {
@@ -8354,10 +8460,10 @@ app2.post("/config", async (c) => {
             name: g.subject ?? g.id,
             participantCount: Array.isArray(g.participants) ? g.participants.length : 0
           }));
-          console.error(`${TAG21} config action=list-groups count=${groups.length} accountId=${groupAccountId}`);
+          console.error(`${TAG22} config action=list-groups count=${groups.length} accountId=${groupAccountId}`);
           return c.json({ ok: true, groups });
         } catch (err) {
-          console.error(`${TAG21} config action=list-groups error="${String(err)}" accountId=${groupAccountId}`);
+          console.error(`${TAG22} config action=list-groups error="${String(err)}" accountId=${groupAccountId}`);
           return c.json({ ok: false, error: `Failed to fetch groups: ${String(err)}` });
         }
       }
@@ -8367,12 +8473,12 @@ app2.post("/config", async (c) => {
         }
         const result = updateConfig(account.accountDir, fields);
         const fieldNames = Object.keys(fields);
-        console.error(`${TAG21} config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
+        console.error(`${TAG22} config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "get-config": {
         const waConfig = getConfig(account.accountDir);
-        console.error(`${TAG21} config action=get-config`);
+        console.error(`${TAG22} config action=get-config`);
         return c.json({ ok: true, config: waConfig });
       }
       default:
@@ -8382,7 +8488,7 @@ app2.post("/config", async (c) => {
         );
     }
   } catch (err) {
-    console.error(`${TAG21} config error: ${String(err)}`);
+    console.error(`${TAG22} config error: ${String(err)}`);
     return c.json({ ok: false, error: String(err) }, 500);
   }
 });
@@ -8403,7 +8509,7 @@ app2.post("/send-document", async (c) => {
     recordRouteDocumentOutbound(to, filePath);
     return c.json({ success: true, messageId: result.messageId });
   } catch (err) {
-    console.error(`${TAG21} send-document error: ${String(err)}`);
+    console.error(`${TAG22} send-document error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8448,7 +8554,7 @@ app2.post("/send-admin", async (c) => {
     console.error(`[whatsapp:outbound] op=send-admin-ok via=${via} to=${phone}`);
     return c.json({ success: true, messageId: result.messageId });
   } catch (err) {
-    console.error(`${TAG21} send-admin error: ${String(err)}`);
+    console.error(`${TAG22} send-admin error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8458,11 +8564,11 @@ app2.get("/activity", (c) => {
     const result = getChannelActivity(accountId);
     const total = result.accounts.reduce((sum, a) => sum + a.total, 0);
     console.error(
-      `${TAG21} activity accounts=${result.accounts.length} total=${total} recentEvents=${result.recentEvents.length}` + (accountId ? ` filter=${accountId}` : "")
+      `${TAG22} activity accounts=${result.accounts.length} total=${total} recentEvents=${result.recentEvents.length}` + (accountId ? ` filter=${accountId}` : "")
     );
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG21} activity error: ${String(err)}`);
+    console.error(`${TAG22} activity error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8487,10 +8593,10 @@ app2.get("/conversations", (c) => {
       };
     });
     conversations.sort((a, b) => (b.lastMessageTimestamp ?? 0) - (a.lastMessageTimestamp ?? 0));
-    console.error(`${TAG21} conversations requested=${requestedAccountId} account=${storeAccountId} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${allConversations.size > 0} count=${conversations.length}`);
+    console.error(`${TAG22} conversations requested=${requestedAccountId} account=${storeAccountId} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${allConversations.size > 0} count=${conversations.length}`);
     return c.json({ conversations });
   } catch (err) {
-    console.error(`${TAG21} conversations error: ${String(err)}`);
+    console.error(`${TAG22} conversations error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8535,10 +8641,10 @@ app2.get("/messages", (c) => {
         ...reactions && reactions.length > 0 ? { reactions } : {}
       };
     });
-    console.error(`${TAG21} messages requested=${requestedAccountId} account=${storeAccountId} jid=${jid} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${storeMessages.length > 0} limit=${effectiveLimit ?? "all"} returned=${messages.length} withAttachments=${withAttachments}`);
+    console.error(`${TAG22} messages requested=${requestedAccountId} account=${storeAccountId} jid=${jid} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${storeMessages.length > 0} limit=${effectiveLimit ?? "all"} returned=${messages.length} withAttachments=${withAttachments}`);
     return c.json({ messages });
   } catch (err) {
-    console.error(`${TAG21} messages error: ${String(err)}`);
+    console.error(`${TAG22} messages error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8640,7 +8746,7 @@ app2.get("/conversation-graph-state", async (c) => {
       ms
     });
   } catch (err) {
-    console.error(`${TAG21} conversation-graph-state error: ${String(err)}`);
+    console.error(`${TAG22} conversation-graph-state error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -8652,12 +8758,12 @@ app2.get("/group-info", async (c) => {
       return c.json({ error: "Missing required parameter: jid" }, 400);
     }
     if (!isGroupJid(jid)) {
-      console.error(`${TAG21} group-info error="not a group JID" jid=${jid} account=${accountId}`);
+      console.error(`${TAG22} group-info error="not a group JID" jid=${jid} account=${accountId}`);
       return c.json({ error: `"${jid}" is not a group JID. Group JIDs end with @g.us.` }, 400);
     }
     const sock = getSocket(accountId);
     if (!sock) {
-      console.error(`${TAG21} group-info error="not connected" account=${accountId}`);
+      console.error(`${TAG22} group-info error="not connected" account=${accountId}`);
       return c.json({ error: `WhatsApp account "${accountId}" is not connected. Connect first, then retry.` }, 400);
     }
     const meta = await sock.groupMetadata(jid);
@@ -8670,10 +8776,10 @@ app2.get("/group-info", async (c) => {
       participantCount: meta.participants.length,
       participants: meta.participants.map((p) => ({ jid: p.id, admin: p.admin ?? null }))
     };
-    console.error(`${TAG21} group-info jid=${jid} subject="${meta.subject}" participants=${meta.participants.length} account=${accountId}`);
+    console.error(`${TAG22} group-info jid=${jid} subject="${meta.subject}" participants=${meta.participants.length} account=${accountId}`);
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG21} group-info error="${String(err)}" jid=${jid} account=${accountId}`);
+    console.error(`${TAG22} group-info error="${String(err)}" jid=${jid} account=${accountId}`);
     return c.json({ error: `Failed to fetch group info: ${String(err)}` }, 500);
   }
 });
@@ -9480,10 +9586,10 @@ async function fetchLiveSessions() {
 function loadUserTitles(accountDir) {
   const out = /* @__PURE__ */ new Map();
   if (!accountDir) return out;
-  const path2 = join14(accountDir, "session-titles.json");
+  const path3 = join14(accountDir, "session-titles.json");
   let raw;
   try {
-    raw = readFileSync15(path2, "utf8");
+    raw = readFileSync15(path3, "utf8");
   } catch {
     return out;
   }
@@ -9638,21 +9744,21 @@ app4.get("/", requireAdminSession, async (c) => {
   const adminUserIdBySession = /* @__PURE__ */ new Map();
   const channelSenderBySession = /* @__PURE__ */ new Map();
   const channelMissNoSender = [];
-  for (const { path: path2, isSubagent, archived } of jsonls) {
-    const lastSlash = path2.lastIndexOf("/");
-    const base = path2.slice(lastSlash + 1);
-    const projectDir = path2.slice(0, lastSlash);
+  for (const { path: path3, isSubagent, archived } of jsonls) {
+    const lastSlash = path3.lastIndexOf("/");
+    const base = path3.slice(lastSlash + 1);
+    const projectDir = path3.slice(0, lastSlash);
     const sessionId = base.slice(0, -".jsonl".length);
     if (seenIds.has(sessionId)) {
-      console.error(`[admin-sessions-list] duplicate-sessionId sessionId=${sessionId} path=${path2}`);
+      console.error(`[admin-sessions-list] duplicate-sessionId sessionId=${sessionId} path=${path3}`);
       continue;
     }
     seenIds.add(sessionId);
     let body;
     let mtimeMs;
     try {
-      body = readFileSync15(path2, "utf8");
-      mtimeMs = statSync4(path2).mtimeMs;
+      body = readFileSync15(path3, "utf8");
+      mtimeMs = statSync4(path3).mtimeMs;
     } catch {
       continue;
     }
@@ -10271,9 +10377,9 @@ app5.get("/conversations", requireAdminSession, async (c) => {
   const userTitles = loadUserTitles(ACCOUNTS_DIR ?? null);
   const rows = [];
   let sessionRowsExcludedUntagged = 0;
-  for (const { path: path2 } of enumerateJsonls(projectsRoot)) {
-    const sessionId = basename4(path2).replace(/\.jsonl$/, "");
-    const projectDir = dirname5(path2);
+  for (const { path: path3 } of enumerateJsonls(projectsRoot)) {
+    const sessionId = basename4(path3).replace(/\.jsonl$/, "");
+    const projectDir = dirname5(path3);
     const meta = readSidecarMeta(join16(projectDir, `${sessionId}.meta.json`));
     if (!isReaderChannelSession(meta.role, meta.channel)) continue;
     if (multiAccount) {
@@ -10282,7 +10388,7 @@ app5.get("/conversations", requireAdminSession, async (c) => {
     }
     let body = "";
     try {
-      body = readFileSync17(path2, "utf8");
+      body = readFileSync17(path3, "utf8");
     } catch {
     }
     const { title } = resolveTitle(body, sessionId, userTitles);
@@ -10365,10 +10471,10 @@ app5.get("/conversations", requireAdminSession, async (c) => {
   );
   return c.json({ conversations: [...sessionConversations, ...allStoreRows] });
 });
-function readFrom(path2, from) {
-  const end = statSync5(path2).size;
+function readFrom(path3, from) {
+  const end = statSync5(path3).size;
   if (end <= from) return { buf: Buffer.alloc(0), end: from };
-  const fd = openSync(path2, "r");
+  const fd = openSync(path3, "r");
   try {
     const buf = Buffer.alloc(end - from);
     readSync(fd, buf, 0, buf.length, from);
@@ -10703,11 +10809,11 @@ app5.get("/directive", requireAdminSession, (c) => {
   }
   const dir = directiveStoreDir(sessionId);
   if (!dir) return c.json({ error: "no account" }, 404);
-  const path2 = resolve13(join16(dir, name));
-  if (!path2.startsWith(dir + sep3)) return c.json({ error: "bad reference" }, 400);
+  const path3 = resolve13(join16(dir, name));
+  if (!path3.startsWith(dir + sep3)) return c.json({ error: "bad reference" }, 400);
   let body;
   try {
-    body = readFileSync17(path2, "utf8");
+    body = readFileSync17(path3, "utf8");
   } catch {
     return c.json({ error: "not found" }, 404);
   }
@@ -11184,7 +11290,7 @@ function resolveOpenVisitorSession(rows, visitorId, agentSlug) {
 
 // server/routes/public-reader.ts
 var app6 = new Hono();
-var TAG22 = "[public-webchat]";
+var TAG23 = "[public-webchat]";
 function parseAccessSessionId(cookieHeader) {
   if (!cookieHeader) return null;
   const part = cookieHeader.split(";").map((p) => p.trim()).find((p) => p.startsWith("__access_session="));
@@ -11211,9 +11317,9 @@ function enumeratePublicRows() {
   const cfg = claudeConfigDir();
   if (!cfg) return [];
   const rows = [];
-  for (const { path: path2 } of enumerateJsonls(join17(cfg, "projects"))) {
-    const sessionId = basename5(path2).replace(/\.jsonl$/, "");
-    const projectDir = dirname6(path2);
+  for (const { path: path3 } of enumerateJsonls(join17(cfg, "projects"))) {
+    const sessionId = basename5(path3).replace(/\.jsonl$/, "");
+    const projectDir = dirname6(path3);
     const meta = readSidecarMeta(join17(projectDir, `${sessionId}.meta.json`));
     rows.push({
       sessionId,
@@ -11232,7 +11338,7 @@ function enumeratePublicRows() {
 app6.get("/session", (c) => {
   const visitor = resolveVisitor(c);
   if (!visitor) {
-    console.error(`${TAG22} op=reader-refused reason=no-anchor path=/session`);
+    console.error(`${TAG23} op=reader-refused reason=no-anchor path=/session`);
     return c.json({ error: "gate-required" }, 401);
   }
   const rows = enumeratePublicRows();
@@ -11251,11 +11357,11 @@ app6.get("/session", (c) => {
     found = effectiveSlug ? resolveOpenVisitorSession(rows, visitor.visitorId, effectiveSlug) : null;
   }
   if (found) {
-    console.log(`${TAG22} op=session-resume anchor=${visitor.kind} key=${(found.senderId ?? "").slice(0, 8)} sessionId=${found.sessionId.slice(0, 8)}`);
+    console.log(`${TAG23} op=session-resume anchor=${visitor.kind} key=${(found.senderId ?? "").slice(0, 8)} sessionId=${found.sessionId.slice(0, 8)}`);
     return c.json({ sessionId: found.sessionId, projectDir: found.projectDir, sessionKey: found.senderId });
   }
   const sessionKey = crypto.randomUUID();
-  console.log(`${TAG22} op=session-new anchor=${visitor.kind} key=${sessionKey.slice(0, 8)}`);
+  console.log(`${TAG23} op=session-new anchor=${visitor.kind} key=${sessionKey.slice(0, 8)}`);
   return c.json({ sessionId: null, projectDir: null, sessionKey });
 });
 function publicUploadsDir(accountId, sessionId) {
@@ -11269,10 +11375,10 @@ function enrichPublicAttachments(turns, sessionAttachments, cursor) {
     if (slice.length > 0) turn.attachments = slice;
   }
 }
-function readFrom2(path2, from) {
-  const end = statSync6(path2).size;
+function readFrom2(path3, from) {
+  const end = statSync6(path3).size;
   if (end <= from) return { buf: Buffer.alloc(0), end: from };
-  const fd = openSync2(path2, "r");
+  const fd = openSync2(path3, "r");
   try {
     const buf = Buffer.alloc(end - from);
     readSync2(fd, buf, 0, buf.length, from);
@@ -11284,7 +11390,7 @@ function readFrom2(path2, from) {
 app6.get("/stream", (c) => {
   const visitor = resolveVisitor(c);
   if (!visitor) {
-    console.error(`${TAG22} op=reader-refused reason=no-anchor path=/stream`);
+    console.error(`${TAG23} op=reader-refused reason=no-anchor path=/stream`);
     return c.json({ error: "gate-required" }, 401);
   }
   const sessionId = c.req.query("sessionId") ?? "";
@@ -11302,12 +11408,12 @@ app6.get("/stream", (c) => {
   const isPublicWebchat = meta.role === "public" && meta.channel === "webchat";
   const owns = visitor.kind === "person" ? meta.personId === visitor.personId : meta.personId === null && meta.visitorId === visitor.visitorId;
   if (!(isPublicWebchat && owns)) {
-    console.error(`${TAG22} op=reader-refused reason=not-owner anchor=${visitor.kind} sessionId=${sessionId.slice(0, 8)}`);
+    console.error(`${TAG23} op=reader-refused reason=not-owner anchor=${visitor.kind} sessionId=${sessionId.slice(0, 8)}`);
     return c.json({ error: "forbidden" }, 403);
   }
   const senderShort = (meta.senderId ?? "").slice(0, 8);
   const encoder = new TextEncoder();
-  console.log(`${TAG22} op=reader-open anchor=${visitor.kind} key=${senderShort} mode=delivered-only sessionId=${sessionId.slice(0, 8)}`);
+  console.log(`${TAG23} op=reader-open anchor=${visitor.kind} key=${senderShort} mode=delivered-only sessionId=${sessionId.slice(0, 8)}`);
   const send = (controller, turn, id) => controller.enqueue(encoder.encode(`id: ${id}
 data: ${JSON.stringify(turn)}
 
@@ -11322,7 +11428,7 @@ data: ${JSON.stringify(turn)}
         const { turns, dropped } = filterDeliveredFrames(lines);
         if (uploadsDir) enrichPublicAttachments(turns, listSessionAttachmentsInDir(uploadsDir), attachmentCursor);
         for (const turn of turns) send(controller, turn, offset);
-        if (dropped > 0) console.log(`${TAG22} op=reader-filtered key=${senderShort} dropped=${dropped}`);
+        if (dropped > 0) console.log(`${TAG23} op=reader-filtered key=${senderShort} dropped=${dropped}`);
       };
       try {
         const { buf, end } = readFrom2(jsonlPath, 0);
@@ -11357,7 +11463,7 @@ data: ${JSON.stringify(turn)}
         watcher?.close();
         clearInterval(poll);
         clearInterval(heartbeat);
-        console.log(`${TAG22} op=reader-close key=${senderShort}`);
+        console.log(`${TAG23} op=reader-close key=${senderShort}`);
         try {
           controller.close();
         } catch {
@@ -11474,10 +11580,10 @@ function writeCanonicalOverrideId(accountDir, userId, sessionId) {
     }
   }
   byAdmin[userId] = sessionId;
-  const path2 = canonicalOverridePath(accountDir);
-  const tmp = `${path2}.${process.pid}.tmp`;
+  const path3 = canonicalOverridePath(accountDir);
+  const tmp = `${path3}.${process.pid}.tmp`;
   writeFileSync5(tmp, JSON.stringify({ byAdmin }, null, 2), "utf8");
-  renameSync2(tmp, path2);
+  renameSync2(tmp, path3);
 }
 
 // ../lib/models/src/index.ts
@@ -11486,7 +11592,7 @@ var SONNET_MODEL = "claude-sonnet-5";
 var HAIKU_MODEL = "claude-haiku-4-5";
 var MODEL_CONTEXT_WINDOW = {
   [OPUS_MODEL]: 1e6,
-  [SONNET_MODEL]: 2e5,
+  [SONNET_MODEL]: 1e6,
   [HAIKU_MODEL]: 2e5
 };
 function contextWindow(model) {
@@ -11536,11 +11642,11 @@ function createSidecarStore(config) {
   }
   function write(sessionsDir, id, record) {
     mkdirSync3(sessionsDir, { recursive: true });
-    const path2 = pathFor(sessionsDir, id);
-    const tmp = `${path2}.tmp.${process.pid}`;
+    const path3 = pathFor(sessionsDir, id);
+    const tmp = `${path3}.tmp.${process.pid}`;
     try {
       writeFileSync6(tmp, JSON.stringify(record), "utf8");
-      renameSync3(tmp, path2);
+      renameSync3(tmp, path3);
       return { ok: true };
     } catch (error) {
       try {
@@ -11550,10 +11656,10 @@ function createSidecarStore(config) {
       return { ok: false, error };
     }
   }
-  function readFileAt(path2) {
+  function readFileAt(path3) {
     let raw;
     try {
-      raw = readFileSync20(path2, "utf8");
+      raw = readFileSync20(path3, "utf8");
     } catch {
       return null;
     }
@@ -11576,10 +11682,10 @@ function createSidecarStore(config) {
     const out = [];
     for (const name of names) {
       if (!suffixRe.test(name)) continue;
-      const path2 = join19(sessionsDir, name);
+      const path3 = join19(sessionsDir, name);
       let raw;
       try {
-        raw = readFileSync20(path2, "utf8");
+        raw = readFileSync20(path3, "utf8");
       } catch {
         onSkip?.(name, "unreadable");
         continue;
@@ -11598,10 +11704,10 @@ function createSidecarStore(config) {
     return out;
   }
   function clear(sessionsDir, id) {
-    const path2 = pathFor(sessionsDir, id);
+    const path3 = pathFor(sessionsDir, id);
     try {
-      if (existsSync12(path2)) {
-        unlinkSync2(path2);
+      if (existsSync12(path3)) {
+        unlinkSync2(path3);
         return { ok: true, removed: true };
       }
       return { ok: true, removed: false };
@@ -11830,15 +11936,15 @@ function latestAdminWebchatSessionId(requesterUserId, primaryUserId, scopeAccoun
   const cfg = claudeConfigDir();
   if (!cfg) return null;
   let best = null;
-  for (const { path: path2, isSubagent, archived } of enumerateJsonls(join20(cfg, "projects"))) {
+  for (const { path: path3, isSubagent, archived } of enumerateJsonls(join20(cfg, "projects"))) {
     if (isSubagent || archived) continue;
-    const id = basename6(path2).slice(0, -".jsonl".length);
-    const meta = readSidecarMeta(join20(dirname7(path2), `${id}.meta.json`));
+    const id = basename6(path3).slice(0, -".jsonl".length);
+    const meta = readSidecarMeta(join20(dirname7(path3), `${id}.meta.json`));
     if (meta.role !== "admin" || meta.channel !== "webchat") continue;
     if (multiAccount && meta.accountId !== scopeAccountId) continue;
     let mtimeMs;
     try {
-      mtimeMs = statSync7(path2).mtimeMs;
+      mtimeMs = statSync7(path3).mtimeMs;
     } catch {
       continue;
     }
@@ -12235,9 +12341,9 @@ ${note}` : note;
     const cfg = claudeConfigDir();
     let projectDir = null;
     if (cfg) {
-      for (const { path: path2 } of enumerateJsonls(join20(cfg, "projects"))) {
-        if (basename6(path2) === `${sessionId}.jsonl`) {
-          projectDir = dirname7(path2);
+      for (const { path: path3 } of enumerateJsonls(join20(cfg, "projects"))) {
+        if (basename6(path3) === `${sessionId}.jsonl`) {
+          projectDir = dirname7(path3);
           break;
         }
       }
@@ -12469,7 +12575,7 @@ function routeTelegramUpdate(input) {
 }
 
 // server/routes/telegram.ts
-var TAG23 = "[telegram-inbound]";
+var TAG24 = "[telegram-inbound]";
 function configDirName() {
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? resolve16(process.cwd(), "..");
   const brandPath = join22(platformRoot5, "config", "brand.json");
@@ -12490,18 +12596,18 @@ app8.post("/", async (c) => {
   const botParam = c.req.query("bot");
   const botType = botParam === "admin" ? "admin" : botParam === "public" ? "public" : null;
   if (!botType) {
-    console.error(`${TAG23} op=reject reason=missing-bot-param`);
+    console.error(`${TAG24} op=reject reason=missing-bot-param`);
     return c.json({ ok: false }, 400);
   }
   const sp = secretPath(botType);
   if (!existsSync15(sp)) {
-    console.error(`${TAG23} op=reject reason=no-secret-file botType=${botType}`);
+    console.error(`${TAG24} op=reject reason=no-secret-file botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
   const expected = readFileSync23(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
-    console.error(`${TAG23} op=reject reason=bad-secret botType=${botType}`);
+    console.error(`${TAG24} op=reject reason=bad-secret botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
   let update;
@@ -12512,40 +12618,40 @@ app8.post("/", async (c) => {
   }
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG23} op=reject reason=no-account`);
+    console.error(`${TAG24} op=reject reason=no-account`);
     return c.json({ ok: true }, 200);
   }
   const decision = routeTelegramUpdate({ update, botType, config: account.config.telegram ?? {} });
   if (decision.kind === "ignore") {
-    console.error(`${TAG23} op=ignore reason=${decision.reason}`);
+    console.error(`${TAG24} op=ignore reason=${decision.reason}`);
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "denied") {
-    console.error(`${TAG23} op=denied reason=${decision.reason} agentType=${decision.agentType}`);
+    console.error(`${TAG24} op=denied reason=${decision.reason} agentType=${decision.agentType}`);
     return c.json({ ok: true }, 200);
   }
   const role = decision.agentType === "admin" ? "admin" : "public";
   const agentSlug = role === "admin" ? "admin" : resolveDefaultAgentSlug(account.accountDir);
   if (!agentSlug) {
-    console.error(`${TAG23} op=reject reason=no-default-agent`);
+    console.error(`${TAG24} op=reject reason=no-default-agent`);
     return c.json({ ok: true }, 200);
   }
-  console.error(`${TAG23} op=update accountId=${account.accountId} from=${decision.senderId}`);
+  console.error(`${TAG24} op=update accountId=${account.accountId} from=${decision.senderId}`);
   const botToken = botType === "admin" ? account.config.telegram?.adminBotToken : account.config.telegram?.publicBotToken;
   const { senderId, chatId, text } = decision;
   const gateway = getTelegramGateway();
   if (!gateway) {
-    console.error(`${TAG23} op=reject reason=gateway-not-ready from=${senderId}`);
+    console.error(`${TAG24} op=reject reason=gateway-not-ready from=${senderId}`);
     return c.json({ ok: true }, 200);
   }
   const reply = async (replyText) => {
     if (!botToken) {
       const reason = account.config.telegram ? "no-bot-token" : "no-telegram-config";
-      console.error(`${TAG23} op=reply-dropped reason=${reason} botType=${botType} from=${senderId}`);
+      console.error(`${TAG24} op=reply-dropped reason=${reason} botType=${botType} from=${senderId}`);
       return;
     }
     const sent = await sendTelegramText(botToken, chatId, replyText);
-    console.error(`${TAG23} op=reply-sent from=${senderId} ok=${sent.ok}${sent.ok ? "" : ` error=${sent.error}`}`);
+    console.error(`${TAG24} op=reply-sent from=${senderId} ok=${sent.ok}${sent.ok ? "" : ` error=${sent.error}`}`);
   };
   void gateway.handleInbound({
     accountId: account.accountId,
@@ -12563,7 +12669,7 @@ var telegram_default = app8;
 // server/routes/quickbooks.ts
 import { join as join23 } from "path";
 import { existsSync as existsSync16, readFileSync as readFileSync24, writeFileSync as writeFileSync8, mkdirSync as mkdirSync4, rmSync, renameSync as renameSync5 } from "fs";
-var TAG24 = "[quickbooks]";
+var TAG25 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
 function pendingPath(accountDir, state) {
@@ -12576,14 +12682,14 @@ async function completeConsent(args) {
   const { accountDir, code, realmId } = args;
   const state = args.state;
   if (!state || !STATE_RE.test(state) || !existsSync16(pendingPath(accountDir, state))) {
-    console.error(`${TAG24} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG25} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   const claimFile = `${pendingPath(accountDir, state)}.claimed`;
   try {
     renameSync5(pendingPath(accountDir, state), claimFile);
   } catch {
-    console.error(`${TAG24} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG25} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   try {
@@ -12591,14 +12697,14 @@ async function completeConsent(args) {
     try {
       pending = JSON.parse(readFileSync24(claimFile, "utf-8"));
     } catch {
-      console.error(`${TAG24} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG25} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization state could not be read.", stateValid: false };
     }
     if (Date.now() > pending.expiresAt) {
-      console.error(`${TAG24} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG25} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization request expired. Generate a new consent link.", stateValid: false };
     }
-    console.error(`${TAG24} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
+    console.error(`${TAG25} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
     if (!code || !realmId) {
       return { ok: false, status: 400, message: "Missing code or realmId in the callback.", stateValid: true };
     }
@@ -12622,12 +12728,12 @@ async function completeConsent(args) {
     });
     const text = await res.text();
     if (!res.ok) {
-      console.error(`${TAG24} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG25} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: `Token exchange failed (${res.status}). Generate a new consent link to retry.`, stateValid: true };
     }
     const body = JSON.parse(text);
     if (!body.refresh_token) {
-      console.error(`${TAG24} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG25} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: "Token exchange returned no refresh token.", stateValid: true };
     }
     const now = Date.now();
@@ -12640,7 +12746,7 @@ async function completeConsent(args) {
     mkdirSync4(join23(accountDir, "secrets"), { recursive: true });
     writeFileSync8(storePath(accountDir), JSON.stringify(store2, null, 2), { mode: 384 });
     const persisted = JSON.parse(readFileSync24(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
-    console.error(`${TAG24} op=token-exchange realmId=${realmId} persisted=${persisted}`);
+    console.error(`${TAG25} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
     rmSync(claimFile, { force: true });
@@ -12653,7 +12759,7 @@ var app9 = new Hono();
 app9.get("/callback", async (c) => {
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG24} op=callback stateValid=false realmId= reason=no-account`);
+    console.error(`${TAG25} op=callback stateValid=false realmId= reason=no-account`);
     return c.html(page("QuickBooks", "This install has no account configured."), 500);
   }
   const result = await completeConsent({
@@ -14845,10 +14951,10 @@ function extractPluginToolDescriptions(pluginDir) {
     join28(pluginDir, "mcp/src/index.ts")
   ];
   let raw = null;
-  for (const path2 of candidates) {
-    if (!existsSync25(path2)) continue;
+  for (const path3 of candidates) {
+    if (!existsSync25(path3)) continue;
     try {
-      raw = readFileSync29(path2, "utf-8");
+      raw = readFileSync29(path3, "utf-8");
       break;
     } catch {
     }
@@ -14938,11 +15044,11 @@ function readEnabledPlugins(accountId) {
     return /* @__PURE__ */ new Set();
   }
 }
-function readFrontmatter(path2) {
-  if (!existsSync25(path2)) return null;
+function readFrontmatter(path3) {
+  if (!existsSync25(path3)) return null;
   let raw;
   try {
-    raw = readFileSync29(path2, "utf-8");
+    raw = readFileSync29(path3, "utf-8");
   } catch {
     return null;
   }
@@ -15121,7 +15227,7 @@ function resolveTunnelUrl() {
   if (!state) return null;
   return `https://${hostname2}.${state.domain}`;
 }
-var TAG25 = "[claude-session-manager:wrapper]";
+var TAG26 = "[claude-session-manager:wrapper]";
 async function refuseIfClaudeAuthDead(c, route, sessionId) {
   const auth = await ensureAuth();
   if (auth.status !== "dead" && auth.status !== "missing") return null;
@@ -15139,12 +15245,12 @@ async function performSpawnWithInitialMessage(args) {
   const aboutOwner = await resolveOwnerProfileBlock(args.senderId, args.userId);
   const ownerMs = Date.now() - ownerStart;
   const aboutOwnerStatus = aboutOwner == null ? "absent" : "ok" in aboutOwner && aboutOwner.ok === false ? `unresolved:${aboutOwner.reason}` : "ok";
-  console.log(`${TAG25} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
+  console.log(`${TAG26} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
   const dormantPlugins = computeDormantPlugins(args.senderId);
   const activePlugins = computeActivePlugins(args.senderId);
   const specialistDomains = computeSpecialistDomains(args.senderId);
   const tunnelUrl = resolveTunnelUrl();
-  console.log(`${TAG25} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
+  console.log(`${TAG26} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
   const upstreamPayload = JSON.stringify({
     senderId: args.senderId,
     // Task 205 — pass userId through to the manager so it lands as
@@ -15171,24 +15277,24 @@ async function performSpawnWithInitialMessage(args) {
     // unshapely values.
     conversationNodeId: args.conversationNodeId
   });
-  console.log(`${TAG25} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
+  console.log(`${TAG26} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
   const forwardStart = Date.now();
   const upstream = await fetch(`${managerBase("claude-session-manager:wrapper")}/public-spawn`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: upstreamPayload
   }).catch((err) => {
-    console.error(`${TAG25} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
+    console.error(`${TAG26} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
     return null;
   });
   if (!upstream) return {
     response: new Response(JSON.stringify({ error: "manager-unreachable" }), { status: 503, headers: { "content-type": "application/json" } }),
     claudeSessionId: null
   };
-  console.log(`${TAG25} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
+  console.log(`${TAG26} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
   if (args.initialMessage) {
     const inputBytes = Buffer.byteLength(args.initialMessage, "utf8");
-    console.log(`${TAG25} initial-message-inlined bytes=${inputBytes}`);
+    console.log(`${TAG26} initial-message-inlined bytes=${inputBytes}`);
   }
   const bodyText = await upstream.text().catch(() => "");
   let claudeSessionId = null;
@@ -15223,7 +15329,7 @@ app19.post("/", async (c) => {
   if (refusal) return refusal;
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(`${TAG25} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
+    console.error(`${TAG26} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
     return c.json({ error: "admin-account-not-resolved" }, 500);
   }
   const userId = getUserIdForSession(cacheKey) ?? void 0;
@@ -15232,7 +15338,7 @@ app19.post("/", async (c) => {
   const permissionMode = typeof body.permissionMode === "string" ? body.permissionMode : void 0;
   const specialist = typeof body.specialist === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(body.specialist) ? body.specialist : void 0;
   const model = typeof body.model === "string" && /^[A-Za-z0-9._-]{1,64}$/.test(body.model) ? body.model : void 0;
-  console.log(`${TAG25} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
+  console.log(`${TAG26} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
   const conversationNodeId = cacheKey ? getSessionIdForSession(cacheKey) : void 0;
   const { response, claudeSessionId } = await performSpawnWithInitialMessage({
     senderId,
@@ -15251,13 +15357,13 @@ app19.post("/", async (c) => {
     claudeSessionId,
     senderId
   );
-  console.log(`${TAG25} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
+  console.log(`${TAG26} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
   return response;
 });
 var claude_sessions_default = app19;
 
 // server/routes/admin/log-ingest.ts
-var TAG26 = "[log-ingest]";
+var TAG27 = "[log-ingest]";
 var TAG_PATTERN = /^[A-Za-z0-9_:-]{1,32}$/;
 var LEVELS = /* @__PURE__ */ new Set(["debug", "info", "warn", "error"]);
 var MAX_LINE_BYTES = 4096;
@@ -15268,7 +15374,7 @@ function isLoopbackAddr2(addr) {
 app20.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr2(remoteAddr)) {
-    console.error(`${TAG26} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG27} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "log-ingest-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -15277,7 +15383,7 @@ app20.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr2(t));
     if (offender !== void 0) {
-      console.error(`${TAG26} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG27} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "log-ingest-loopback-only" }, 403);
     }
   }
@@ -15319,18 +15425,18 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
 ]);
 var app21 = new Hono();
 app21.post("/", async (c) => {
-  const TAG46 = "[admin:events]";
+  const TAG47 = "[admin:events]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG46} reject reason=body-not-json detail=${detail}`);
+    console.error(`${TAG47} reject reason=body-not-json detail=${detail}`);
     return c.json({ ok: false, detail: "Request body was not valid JSON" }, 400);
   }
   const event = typeof body.event === "string" ? body.event : "";
   if (!ALLOWED_EVENTS.has(event)) {
-    console.error(`${TAG46} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
+    console.error(`${TAG47} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
     return c.json({ ok: false, detail: `Event "${event}" is not allowed` }, 400);
   }
   const rawFields = body.fields && typeof body.fields === "object" ? body.fields : {};
@@ -20382,7 +20488,7 @@ function managerLogFollowUrl(sessionId, opts) {
 }
 
 // server/routes/admin/linkedin-ingest.ts
-var TAG27 = "[linkedin-ingest-route]";
+var TAG28 = "[linkedin-ingest-route]";
 var UUID2 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 var ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/;
 var LINKEDIN_URL = /^https:\/\/www\.linkedin\.com\//;
@@ -20486,29 +20592,29 @@ app39.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(TAG27 + " rejected status=400 reason=schema:body-not-json");
+    console.error(TAG28 + " rejected status=400 reason=schema:body-not-json");
     return c.json({ ok: false, error: "schema", reason: "body-not-json" }, 400);
   }
   const v = validate(body);
   if (!v.ok) {
-    console.error(TAG27 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
+    console.error(TAG28 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
     return c.json({ ok: false, error: v.error, reason: v.reason, missing: v.missing }, v.status);
   }
   const envelope = v.envelope;
   const cacheKey = c.var.cacheKey ?? "";
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(TAG27 + " rejected status=500 reason=admin-account-not-resolved");
+    console.error(TAG28 + " rejected status=500 reason=admin-account-not-resolved");
     return c.json({ ok: false, error: "admin-account-not-resolved" }, 500);
   }
   const payloadBytes = JSON.stringify(envelope).length;
   console.log(
-    TAG27 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
+    TAG28 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
   );
   const initialMessage = buildInitialMessage(envelope);
   const spawnStart = Date.now();
   const sessionId = randomUUID13();
-  console.log(TAG27 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
+  console.log(TAG28 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -20517,12 +20623,12 @@ app39.post("/", requireAdminSession, async (c) => {
   });
   if ("error" in spawned) {
     console.error(
-      TAG27 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
+      TAG28 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
     );
     return c.json({ ok: false, error: "dispatch-failed", upstreamStatus: spawned.status, detail: spawned.error }, 502);
   }
   console.log(
-    TAG27 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
+    TAG28 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
   );
   return c.json({ ok: true, dispatchId: envelope.dispatchId, taskId: spawned.sessionId }, 202);
 });
@@ -20530,7 +20636,7 @@ var linkedin_ingest_default = app39;
 
 // server/routes/admin/post-turn-context.ts
 import neo4j3 from "neo4j-driver";
-var TAG28 = "[post-turn-context]";
+var TAG29 = "[post-turn-context]";
 var STRIPPED_PROPERTIES2 = /* @__PURE__ */ new Set([
   "embedding",
   "passwordHash",
@@ -20572,7 +20678,7 @@ var app40 = new Hono();
 app40.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr3(remoteAddr)) {
-    console.error(`${TAG28} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG29} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "post-turn-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -20581,7 +20687,7 @@ app40.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr3(t));
     if (offender !== void 0) {
-      console.error(`${TAG28} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG29} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "post-turn-context-loopback-only" }, 403);
     }
   }
@@ -20613,7 +20719,7 @@ app40.get("/", async (c) => {
     writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
     const total = Date.now() - started;
     console.log(
-      `${TAG28} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
+      `${TAG29} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
     );
     return c.json({
       writes: writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }))
@@ -20622,7 +20728,7 @@ app40.get("/", async (c) => {
     const elapsed = Date.now() - started;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG28} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
+      `${TAG29} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `post-turn-context unavailable: ${message}` }, 503);
   } finally {
@@ -20735,7 +20841,7 @@ function formatPreviousContext(writes) {
 }
 
 // server/routes/admin/public-session-context.ts
-var TAG29 = "[public-session-context]";
+var TAG30 = "[public-session-context]";
 function isLoopbackAddr4(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -20743,7 +20849,7 @@ var app41 = new Hono();
 app41.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr4(remoteAddr)) {
-    console.error(`${TAG29} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG30} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -20752,7 +20858,7 @@ app41.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr4(t));
     if (offender !== void 0) {
-      console.error(`${TAG29} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG30} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-context-loopback-only" }, 403);
     }
   }
@@ -20766,14 +20872,14 @@ app41.get("/", async (c) => {
     const writes = await fetchSliceWrites(session, sliceToken, accountId);
     const total = Date.now() - started;
     console.log(
-      `${TAG29} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
+      `${TAG30} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
     );
     return c.json({ writes });
   } catch (err) {
     const elapsed = Date.now() - started;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG29} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
+      `${TAG30} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `public-session-context unavailable: ${message}` }, 503);
   } finally {
@@ -20792,7 +20898,7 @@ function getWebchatGateway() {
 }
 
 // server/routes/admin/public-session-exit.ts
-var TAG30 = "[public-session-exit-route]";
+var TAG31 = "[public-session-exit-route]";
 function isLoopbackAddr5(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -20800,7 +20906,7 @@ var app42 = new Hono();
 app42.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr5(remoteAddr)) {
-    console.error(`${TAG30} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG31} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-exit-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -20809,7 +20915,7 @@ app42.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr5(t));
     if (offender !== void 0) {
-      console.error(`${TAG30} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG31} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-exit-loopback-only" }, 403);
     }
   }
@@ -20823,7 +20929,7 @@ app42.post("/", async (c) => {
   if (!sessionId) return c.json({ error: "sessionId required" }, 400);
   const gateway = getWebchatGateway();
   if (!gateway) {
-    console.error(`${TAG30} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
+    console.error(`${TAG31} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
     return c.json({ error: "webchat-gateway-unset" }, 503);
   }
   gateway.handlePublicSessionExit(sessionId);
@@ -20832,7 +20938,7 @@ app42.post("/", async (c) => {
 var public_session_exit_default = app42;
 
 // server/routes/admin/access-session-evict.ts
-var TAG31 = "[access-session-evict]";
+var TAG32 = "[access-session-evict]";
 function isLoopbackAddr6(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -20840,7 +20946,7 @@ var app43 = new Hono();
 app43.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr6(remoteAddr)) {
-    console.error(`${TAG31} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG32} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "access-session-evict-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -20849,7 +20955,7 @@ app43.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr6(t));
     if (offender !== void 0) {
-      console.error(`${TAG31} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG32} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "access-session-evict-loopback-only" }, 403);
     }
   }
@@ -20862,13 +20968,13 @@ app43.post("/", async (c) => {
   const grantId = typeof body.grantId === "string" ? body.grantId.trim() : "";
   if (!grantId) return c.json({ error: "grantId required" }, 400);
   const dropped = evictAccessSessionsByGrant(grantId);
-  console.log(`${TAG31} grantId=${grantId} dropped=${dropped}`);
+  console.log(`${TAG32} grantId=${grantId} dropped=${dropped}`);
   return c.json({ ok: true, dropped });
 });
 var access_session_evict_default = app43;
 
 // server/routes/admin/enrol-person.ts
-var TAG32 = "[enrol]";
+var TAG33 = "[enrol]";
 function isLoopbackAddr7(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -20877,7 +20983,7 @@ var app44 = new Hono();
 app44.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr7(remoteAddr)) {
-    console.error(`${TAG32} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG33} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "enrol-person-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -20886,7 +20992,7 @@ app44.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr7(t));
     if (offender !== void 0) {
-      console.error(`${TAG32} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG33} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "enrol-person-loopback-only" }, 403);
     }
   }
@@ -20911,7 +21017,7 @@ app44.post("/", async (c) => {
   }
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG32} op=person result=no-account-id`);
+    console.error(`${TAG33} op=person result=no-account-id`);
     return c.json({ error: "no-account-id" }, 500);
   }
   let personId;
@@ -20919,7 +21025,7 @@ app44.post("/", async (c) => {
     personId = await enrolPerson({ accountId, phone, email, agentSlug });
   } catch (err) {
     console.error(
-      `${TAG32} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG33} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "enrol-failed" }, 500);
   }
@@ -20929,11 +21035,11 @@ app44.post("/", async (c) => {
     if (g) grant = { grantId: g.grantId, status: g.status, contactValue: g.contactValue };
   } catch (err) {
     console.error(
-      `${TAG32} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG33} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
   console.log(
-    `${TAG32} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
+    `${TAG33} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
   );
   return c.json({ personId, grant }, 200);
 });
@@ -21089,33 +21195,33 @@ var REQUIRED_KEYS = [
   "weekly"
 ];
 function readAvailabilityConfig(accountDir) {
-  const path2 = join33(accountDir, AVAILABILITY_FILENAME);
+  const path3 = join33(accountDir, AVAILABILITY_FILENAME);
   let raw;
   try {
-    raw = readFileSync33(path2, "utf-8");
+    raw = readFileSync33(path3, "utf-8");
   } catch {
-    throw new Error(`availability not configured: ${path2} not found`);
+    throw new Error(`availability not configured: ${path3} not found`);
   }
   let parsed;
   try {
     parsed = JSON.parse(raw);
   } catch (err) {
-    throw new Error(`invalid JSON in ${path2}: ${err.message}`);
+    throw new Error(`invalid JSON in ${path3}: ${err.message}`);
   }
   const cfg = parsed;
   for (const key of REQUIRED_KEYS) {
     if (cfg[key] === void 0 || cfg[key] === null) {
-      throw new Error(`availability config ${path2} missing required key: ${key}`);
+      throw new Error(`availability config ${path3} missing required key: ${key}`);
     }
   }
   if (cfg.daysAhead !== void 0 && cfg.daysAhead !== null) {
     if (typeof cfg.daysAhead !== "number" || !Number.isInteger(cfg.daysAhead) || cfg.daysAhead < 1) {
-      throw new Error(`availability config ${path2} invalid daysAhead: must be a positive integer`);
+      throw new Error(`availability config ${path3} invalid daysAhead: must be a positive integer`);
     }
   }
   if (cfg.allowMultiSlot !== void 0 && cfg.allowMultiSlot !== null) {
     if (typeof cfg.allowMultiSlot !== "boolean") {
-      throw new Error(`availability config ${path2} invalid allowMultiSlot: must be a boolean`);
+      throw new Error(`availability config ${path3} invalid allowMultiSlot: must be a boolean`);
     }
   }
   return cfg;
@@ -21487,7 +21593,7 @@ function toNum(v) {
 }
 
 // server/routes/admin/tasks-list.ts
-var TAG33 = "[task-timer]";
+var TAG34 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
 var app47 = new Hono();
@@ -21495,7 +21601,7 @@ app47.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG33} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG34} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   const session = getSession();
@@ -21533,10 +21639,10 @@ app47.get("/", requireAdminSession, async (c) => {
       if (COMPLETED.has(status)) completed.push(row);
       else if (!HIDDEN_FROM_OPEN.has(status)) open.push(row);
     }
-    console.log(`${TAG33} op=list account=${accountId} open=${open.length} completed=${completed.length}`);
+    console.log(`${TAG34} op=list account=${accountId} open=${open.length} completed=${completed.length}`);
     return c.json({ open, completed });
   } catch (err) {
-    console.error(`${TAG33} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG34} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "tasks-list-failed" }, 500);
   } finally {
     await session.close();
@@ -21546,7 +21652,7 @@ var tasks_list_default = app47;
 
 // server/routes/admin/task-timer-start.ts
 import { randomUUID as randomUUID14 } from "crypto";
-var TAG34 = "[task-timer]";
+var TAG35 = "[task-timer]";
 var app48 = new Hono();
 app48.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -21568,7 +21674,7 @@ app48.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (target.records.length === 0) {
-      console.error(`${TAG34} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
+      console.error(`${TAG35} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const open = await session.run(
@@ -21580,7 +21686,7 @@ app48.post("/", requireAdminSession, async (c) => {
     const priorEntryId = open.records[0]?.get("entryId");
     const priorStartedAt = open.records[0]?.get("startedAt");
     if (priorEntryId) {
-      console.log(`${TAG34} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
+      console.log(`${TAG35} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
       return c.json({ ok: true, running: true, entryId: priorEntryId, startedAt: priorStartedAt });
     }
     const entryId = randomUUID14();
@@ -21590,10 +21696,10 @@ app48.post("/", requireAdminSession, async (c) => {
        CREATE (te)-[:LOGGED_AGAINST]->(t)`,
       { taskId, accountId, entryId, now }
     );
-    console.log(`${TAG34} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
+    console.log(`${TAG35} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
     return c.json({ ok: true, running: true, entryId, startedAt: now });
   } catch (err) {
-    console.error(`${TAG34} op=start error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG35} op=start error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-start-failed" }, 500);
   } finally {
     await session.close();
@@ -21603,7 +21709,7 @@ var task_timer_start_default = app48;
 
 // server/routes/admin/task-timer-stop.ts
 import neo4j5 from "neo4j-driver";
-var TAG35 = "[task-timer]";
+var TAG36 = "[task-timer]";
 var app49 = new Hono();
 app49.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -21635,7 +21741,7 @@ app49.post("/", requireAdminSession, async (c) => {
         { taskId, accountId }
       );
       const secondsLogged2 = toNum(cur.records[0]?.get("secondsLogged"));
-      console.log(`${TAG35} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
+      console.log(`${TAG36} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
       return c.json({ ok: true, running: false, seconds: 0, secondsLogged: secondsLogged2 });
     }
     const seconds = secondsBetween(startedAt, now);
@@ -21658,11 +21764,11 @@ app49.post("/", requireAdminSession, async (c) => {
     const sumEntries = toNum(verify.records[0]?.get("sumEntries"));
     const sumAdjustments = toNum(verify.records[0]?.get("sumAdjustments"));
     const secondsLogged = toNum(verify.records[0]?.get("secondsLogged"));
-    console.log(`${TAG35} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
-    console.log(`${TAG35} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
+    console.log(`${TAG36} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
+    console.log(`${TAG36} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
     return c.json({ ok: true, running: false, seconds, secondsLogged });
   } catch (err) {
-    console.error(`${TAG35} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG36} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-stop-failed" }, 500);
   } finally {
     await session.close();
@@ -21671,7 +21777,7 @@ app49.post("/", requireAdminSession, async (c) => {
 var task_timer_stop_default = app49;
 
 // server/routes/admin/task-complete.ts
-var TAG36 = "[task-timer]";
+var TAG37 = "[task-timer]";
 var app50 = new Hono();
 app50.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -21698,10 +21804,10 @@ app50.post("/", requireAdminSession, async (c) => {
       return c.json({ error: "task-not-found" }, 404);
     }
     const secondsLogged = toNum(result.records[0].get("secondsLogged"));
-    console.log(`${TAG36} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
+    console.log(`${TAG37} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
     return c.json({ ok: true, status: "completed", secondsLogged });
   } catch (err) {
-    console.error(`${TAG36} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG37} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-complete-failed" }, 500);
   } finally {
     await session.close();
@@ -21712,7 +21818,7 @@ var task_complete_default = app50;
 // server/routes/admin/task-time-adjust.ts
 import { randomUUID as randomUUID15 } from "crypto";
 import neo4j6 from "neo4j-driver";
-var TAG37 = "[task-time-adjust]";
+var TAG38 = "[task-time-adjust]";
 var app51 = new Hono();
 app51.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -21722,22 +21828,22 @@ app51.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(`${TAG37} op=reject reason=bad-json`);
+    console.error(`${TAG38} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
-    console.error(`${TAG37} op=reject reason=no-task`);
+    console.error(`${TAG38} op=reject reason=no-task`);
     return c.json({ error: "taskId required" }, 400);
   }
   const newSeconds = body.newSeconds;
   if (typeof newSeconds !== "number" || !Number.isInteger(newSeconds) || newSeconds < 0) {
-    console.error(`${TAG37} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
+    console.error(`${TAG38} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
     return c.json({ error: "newSeconds must be a non-negative integer" }, 400);
   }
   const adjustmentId = randomUUID15();
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  console.log(`${TAG37} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
+  console.log(`${TAG38} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
   const session = getSession();
   try {
     const guard = await session.run(
@@ -21747,12 +21853,12 @@ app51.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (guard.records.length === 0) {
-      console.error(`${TAG37} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG38} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const openCount = toNum(guard.records[0].get("openCount"));
     if (openCount > 0) {
-      console.error(`${TAG37} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG38} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-timer-running" }, 409);
     }
     const previousSeconds = toNum(guard.records[0].get("previousSeconds"));
@@ -21778,10 +21884,10 @@ app51.post("/", requireAdminSession, async (c) => {
       }
     );
     const secondsLoggedAfter = toNum(write.records[0]?.get("secondsLoggedAfter"));
-    console.log(`${TAG37} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
+    console.log(`${TAG38} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
     return c.json({ ok: true, secondsLogged: secondsLoggedAfter });
   } catch (err) {
-    console.error(`${TAG37} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG38} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-time-adjust-failed" }, 500);
   } finally {
     await session.close();
@@ -21835,7 +21941,7 @@ app52.route("/task-time-adjust", task_time_adjust_default);
 var admin_default = app52;
 
 // server/routes/access/verify-token.ts
-var TAG38 = "[access-verify]";
+var TAG39 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
 var app53 = new Hono();
@@ -21854,39 +21960,39 @@ app53.post("/", async (c) => {
   }
   const rateMsg = checkAccessRateLimit(ip, agentSlug);
   if (rateMsg) {
-    console.error(`${TAG38} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
+    console.error(`${TAG39} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
     return c.json({ error: rateMsg }, 429);
   }
   const grant = await findGrantByMagicToken(token);
   if (!grant) {
     recordAccessFailedAttempt(ip, agentSlug);
-    console.error(`${TAG38} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
+    console.error(`${TAG39} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.agentSlug !== agentSlug) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
+      `${TAG39} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
     );
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.status === "expired" || grant.status === "revoked") {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
+      `${TAG39} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (grant.expiresAt !== null && grant.expiresAt < Date.now()) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
+      `${TAG39} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (!grant.sliceToken) {
     console.error(
-      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
+      `${TAG39} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
     );
     return c.json({ error: "grant-misconfigured" }, 500);
   }
@@ -21902,12 +22008,12 @@ app53.post("/", async (c) => {
     await consumeMagicTokenAndActivate(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG39} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "verification-failed" }, 500);
   }
   clearAccessRateLimit(ip, agentSlug);
-  console.log(`${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
+  console.log(`${TAG39} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
   console.log(
     `${MINT_TAG} grantId=${grant.grantId} sliceToken=${grant.sliceToken.slice(0, 8)} agentSlug=${agentSlug} personId=${grant.personId ?? "none"}`
   );
@@ -21983,7 +22089,7 @@ async function sendMagicLinkEmail(payload) {
 }
 
 // server/routes/access/request-magic-link.ts
-var TAG39 = "[access-request-link]";
+var TAG40 = "[access-request-link]";
 var app54 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
 app54.post("/", async (c) => {
@@ -22000,18 +22106,18 @@ app54.post("/", async (c) => {
   }
   const rateMsg = checkRequestLinkRateLimit(contactValue);
   if (rateMsg) {
-    console.error(`${TAG39} contactValue=${maskContact(contactValue)} result=rate-limited`);
+    console.error(`${TAG40} contactValue=${maskContact(contactValue)} result=rate-limited`);
     return c.json({ error: rateMsg }, 429);
   }
   recordRequestLinkAttempt(contactValue);
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG39} contactValue=${maskContact(contactValue)} result=no-account-id`);
+    console.error(`${TAG40} contactValue=${maskContact(contactValue)} result=no-account-id`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   const grant = await findActiveGrantByContact(contactValue, agentSlug, accountId);
   if (!grant) {
-    console.log(`${TAG39} contactValue=${maskContact(contactValue)} result=notfound`);
+    console.log(`${TAG40} contactValue=${maskContact(contactValue)} result=notfound`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   let token;
@@ -22019,7 +22125,7 @@ app54.post("/", async (c) => {
     token = await generateNewMagicToken(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG39} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG40} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
@@ -22051,12 +22157,12 @@ app54.post("/", async (c) => {
   });
   if (!sendResult.ok) {
     console.error(
-      `${TAG39} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
+      `${TAG40} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   console.log(
-    `${TAG39} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
+    `${TAG40} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
@@ -23118,7 +23224,7 @@ app61.get("/free-busy", async (c) => {
 var calendar_public_default = app61;
 
 // app/lib/timeentry-census.ts
-var TAG40 = "[timeentry-census]";
+var TAG41 = "[timeentry-census]";
 function reconcileTimeEntries(rows, now, horizonMs) {
   const openEntries = rows.openEntries.length;
   let oldestOpenAgeMs = 0;
@@ -23158,12 +23264,12 @@ async function runTimeEntryCensusOnce(session, now, horizonMs) {
       sumAdjustments: toNum(r.get("sumAdjustments"))
     }));
     const finding = reconcileTimeEntries({ openEntries, taskSums }, now, horizonMs);
-    const line = `${TAG40} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
+    const line = `${TAG41} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
     if (finding.alarm) console.error(`${line} alarm=true`);
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG40} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG41} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -23177,13 +23283,13 @@ function startTimeEntryCensus(openSession, opts = {}) {
     try {
       session = openSession();
     } catch (err) {
-      console.error(`${TAG40} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG41} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
       return;
     }
     try {
       await runTimeEntryCensusOnce(session, Date.now(), horizonMs);
     } catch (err) {
-      console.error(`${TAG40} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG41} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
     } finally {
       try {
         await session.close();
@@ -23555,10 +23661,10 @@ var defaultResolveName = async (_accountId, userId) => {
   const res = await loadAdminUserName(userId);
   return res.source === "neo4j" && res.joined.length > 0 ? res.joined : null;
 };
-async function readRaw2(path2) {
+async function readRaw2(path3) {
   let raw;
   try {
-    raw = await readFile6(path2, "utf8");
+    raw = await readFile6(path3, "utf8");
   } catch {
     return null;
   }
@@ -23569,11 +23675,11 @@ async function readRaw2(path2) {
     return null;
   }
 }
-async function writeRaw(path2, obj) {
-  const tmp = `${path2}.tmp.${process.pid}.${Date.now()}`;
+async function writeRaw(path3, obj) {
+  const tmp = `${path3}.tmp.${process.pid}.${Date.now()}`;
   try {
     await writeFile4(tmp, JSON.stringify(obj, null, 2), "utf8");
-    await rename3(tmp, path2);
+    await rename3(tmp, path3);
   } catch (err) {
     try {
       if (existsSync34(tmp)) await unlink3(tmp);
@@ -23618,8 +23724,8 @@ async function collectLiveSidecars(projectsRoot) {
   }
   return out;
 }
-function shortId(path2) {
-  const base = path2.slice(path2.lastIndexOf("/") + 1).replace(/\.meta\.json$/, "");
+function shortId(path3) {
+  const base = path3.slice(path3.lastIndexOf("/") + 1).replace(/\.meta\.json$/, "");
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
@@ -23662,8 +23768,8 @@ async function migrateAdminWebchatSidecars(opts = {}) {
     }
   };
   const sidecars = await collectLiveSidecars(projectsRoot);
-  for (const path2 of sidecars) {
-    const raw = await readRaw2(path2);
+  for (const path3 of sidecars) {
+    const raw = await readRaw2(path3);
     if (!raw) continue;
     if (raw.role !== ADMIN_ROLE2 || raw.channel !== WEBCHAT_CHANNEL2) continue;
     result.scanned++;
@@ -23674,21 +23780,21 @@ async function migrateAdminWebchatSidecars(opts = {}) {
     }
     if (!singleAdmin) {
       result.skippedAmbiguous++;
-      console.error(`[sidecar-backfill] skip sessionId=${shortId(path2)} reason=admin-count-not-one count=${adminCount < 0 ? "unparseable" : adminCount}`);
+      console.error(`[sidecar-backfill] skip sessionId=${shortId(path3)} reason=admin-count-not-one count=${adminCount < 0 ? "unparseable" : adminCount}`);
       continue;
     }
     raw.adminUserId = soleAdminUserId;
-    await writeRaw(path2, raw);
+    await writeRaw(path3, raw);
     result.backfilled++;
     await resolveAdminName();
-    const back = await readRaw2(path2);
+    const back = await readRaw2(path3);
     const wrote = back && back.adminUserId === soleAdminUserId;
     if (wrote && resolvedNameForAdmin) {
       result.resolvedName++;
     } else if (wrote) {
-      console.error(`[sidecar-backfill] backfilled-no-name sessionId=${shortId(path2)} userId=${soleAdminUserId.slice(0, 8)}`);
+      console.error(`[sidecar-backfill] backfilled-no-name sessionId=${shortId(path3)} userId=${soleAdminUserId.slice(0, 8)}`);
     } else {
-      console.error(`[sidecar-backfill] post-write-verify-failed sessionId=${shortId(path2)}`);
+      console.error(`[sidecar-backfill] post-write-verify-failed sessionId=${shortId(path3)}`);
     }
   }
   console.error(
@@ -25291,14 +25397,14 @@ function makeFileDelivery(opts) {
 }
 
 // app/lib/webchat/file-delivery.ts
-var TAG41 = "[webchat-adaptor]";
+var TAG42 = "[webchat-adaptor]";
 function platformRoot2() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeWebchatSendFile(entry) {
   return async (filePath) => {
     if (!entry.accountId) {
-      console.error(`${TAG41} file-delivery reject reason=no-account sender=${entry.senderId}`);
+      console.error(`${TAG42} file-delivery reject reason=no-account sender=${entry.senderId}`);
       return { ok: false, error: "no-account" };
     }
     const accountDir = resolve32(platformRoot2(), "..", "data/accounts", entry.accountId);
@@ -25306,14 +25412,14 @@ function makeWebchatSendFile(entry) {
       const resolved = realpathSync8(filePath);
       const accountResolved = realpathSync8(accountDir);
       if (!resolved.startsWith(accountResolved + "/")) {
-        console.error(`${TAG41} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
+        console.error(`${TAG42} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
         return { ok: false, error: "outside-account" };
       }
       return { ok: true };
     } catch (err) {
       const code = err.code;
       console.error(
-        `${TAG41} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
+        `${TAG42} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
       );
       return { ok: false, error: code === "ENOENT" ? "not-found" : "path-error" };
     }
@@ -25322,7 +25428,7 @@ function makeWebchatSendFile(entry) {
 function makeWebchatFileDelivery(entry) {
   return makeFileDelivery({
     entry,
-    tag: TAG41,
+    tag: TAG42,
     channel: "webchat",
     sendFile: makeWebchatSendFile(entry),
     deferUntilVerdict: true
@@ -25384,7 +25490,7 @@ function buildPublicWebchatSpawnRequest(input) {
 }
 
 // app/lib/whatsapp/inbound/file-delivery-bridge.ts
-var TAG42 = "[whatsapp-adaptor]";
+var TAG43 = "[whatsapp-adaptor]";
 var SEND_USER_FILE2 = "SendUserFile";
 var WHATSAPP_SEND_DOCUMENT = "whatsapp-send-document";
 function platformRoot3() {
@@ -25402,7 +25508,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
     });
     if (result.ok) return { ok: true };
     console.error(
-      `${TAG42} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
+      `${TAG43} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
     );
     return { ok: false, error: result.error };
   };
@@ -25410,7 +25516,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
 function makeWhatsAppFileDelivery(entry, maxyAccountId) {
   const shared = makeFileDelivery({
     entry,
-    tag: TAG42,
+    tag: TAG43,
     channel: "whatsapp",
     sendFile: makeWhatsAppSendFile(entry, maxyAccountId)
   });
@@ -25445,7 +25551,7 @@ function makeWhatsAppFileDelivery(entry, maxyAccountId) {
         if (!delivered) {
           const fileField = call.filePath !== void 0 ? ` file=${call.filePath}` : "";
           console.error(
-            `${TAG42} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+            `${TAG43} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
           );
         }
       }
@@ -25840,7 +25946,7 @@ function buildTelegramSpawnRequest(input) {
 import { realpathSync as realpathSync9 } from "fs";
 import { readFile as readFile7, stat as stat7 } from "fs/promises";
 import { resolve as resolve33, basename as basename11 } from "path";
-var TAG43 = "[telegram:outbound]";
+var TAG44 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
   const { botToken, chatId, filePath, caption, maxyAccountId, platformRoot: platformRoot5 } = input;
@@ -25856,16 +25962,16 @@ async function sendTelegramDocument(input) {
     resolvedPath = realpathSync9(filePath);
     const accountResolved = realpathSync9(accountDir);
     if (!resolvedPath.startsWith(accountResolved + "/")) {
-      console.error(`${TAG43} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG44} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
     }
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG43} document ENOENT path=${filePath}`);
+      console.error(`${TAG44} document ENOENT path=${filePath}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG43} document path error: ${String(err)}`);
+    console.error(`${TAG44} document path error: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   const fileStat = await stat7(resolvedPath);
@@ -25898,13 +26004,13 @@ async function sendTelegramDocument(input) {
     error = e instanceof Error ? e.message : String(e);
   }
   console.error(
-    `${TAG43} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok}` + (messageId !== void 0 ? ` id=${messageId}` : "")
+    `${TAG44} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok}` + (messageId !== void 0 ? ` id=${messageId}` : "")
   );
   return ok ? { ok: true, messageId } : { ok: false, status: 500, error };
 }
 
 // app/lib/telegram/outbound/file-delivery.ts
-var TAG44 = "[telegram:outbound]";
+var TAG45 = "[telegram:outbound]";
 function platformRoot4() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
@@ -25916,11 +26022,11 @@ function makeTelegramSendFile(entry) {
       botToken = (entry.role === "admin" ? tg?.adminBotToken : tg?.publicBotToken) ?? null;
     }
     if (!botToken) {
-      console.error(`${TAG44} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG45} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-bot-token" };
     }
     if (entry.replyTarget == null) {
-      console.error(`${TAG44} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG45} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-reply-target" };
     }
     const result = await sendTelegramDocument({
@@ -25937,7 +26043,7 @@ function makeTelegramSendFile(entry) {
 function makeTelegramFileDelivery(entry) {
   return makeFileDelivery({
     entry,
-    tag: TAG44,
+    tag: TAG45,
     channel: "telegram",
     sendFile: makeTelegramSendFile(entry)
   });
@@ -25987,7 +26093,7 @@ function telegramServerPath() {
 
 // app/lib/channel-pty-bridge/public-session-end-review.ts
 import { randomUUID as randomUUID16 } from "crypto";
-var TAG45 = "[public-session-review]";
+var TAG46 = "[public-session-review]";
 var CONSUMED_CAP = 500;
 var consumed = /* @__PURE__ */ new Set();
 function consumeOnce(sessionId) {
@@ -26014,7 +26120,7 @@ async function fetchJsonl(sessionId) {
     return await res.text();
   } catch (err) {
     console.error(
-      `${TAG45} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG46} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return null;
   }
@@ -26038,7 +26144,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     const res = await fetch(url);
     if (!res.ok) {
       console.error(
-        `${TAG45} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
+        `${TAG46} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
       );
       return [];
     }
@@ -26046,7 +26152,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     return Array.isArray(body.writes) ? body.writes : [];
   } catch (err) {
     console.error(
-      `${TAG45} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG46} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return [];
   }
@@ -26075,7 +26181,7 @@ function composeInitialMessage(input) {
 }
 async function dispatchReviewer(input, initialMessage) {
   const sessionId = randomUUID16();
-  console.log(`${TAG45} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
+  console.log(`${TAG46} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -26095,21 +26201,21 @@ async function firePublicSessionEndReview(input) {
   const dispatchedAt = Date.now();
   if (consumed.has(input.sessionId)) {
     console.log(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG46} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const jsonl = await fetchJsonl(input.sessionId);
   if (!jsonl) {
     console.log(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
+      `${TAG46} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
     );
     return;
   }
   const operatorTurns = countOperatorTurns(jsonl);
   if (operatorTurns === 0) {
     console.log(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
+      `${TAG46} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
     );
     return;
   }
@@ -26123,22 +26229,47 @@ async function firePublicSessionEndReview(input) {
   });
   if (!consumeOnce(input.sessionId)) {
     console.log(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG46} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const dispatched = await dispatchReviewer(input, initialMessage);
   if (!dispatched.ok) {
     console.error(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
+      `${TAG46} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
     );
     return;
   }
   console.log(
-    `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
+    `${TAG46} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
   );
 }
 
+// app/lib/whatsapp/inbound/resolve-client-graph-owner.ts
+var import_dist8 = __toESM(require_dist(), 1);
+async function resolveClientOwnerUserId(accountId, deps = {}) {
+  const listAccounts = deps.listAccounts ?? listValidAccounts;
+  const getSession4 = deps.getSession ?? getSession;
+  const resolveOwner2 = deps.resolveOwner ?? import_dist8.resolveOwnerUserId;
+  const role = listAccounts().find((a) => a.accountId === accountId)?.config.role;
+  if (role !== "client") return null;
+  const session = getSession4();
+  try {
+    return await resolveOwner2(session, accountId);
+  } catch (err) {
+    console.error(
+      `[whatsapp-native] op=graph-owner-error account=${accountId} error=${err instanceof Error ? err.message : String(err)}`
+    );
+    return null;
+  } finally {
+    await session.close().catch((err) => {
+      console.error(
+        `[whatsapp-native] op=graph-owner-close-error account=${accountId} error=${err instanceof Error ? err.message : String(err)}`
+      );
+    });
+  }
+}
+
 // app/lib/whatsapp/inbound/channel-admin-binding-drift.ts
 function findAccountManagerDrift(accountManagers, adminPhones, validAccountIds) {
   const drift = [];
@@ -26556,8 +26687,8 @@ var webchatFileFollowers = /* @__PURE__ */ new Map();
 async function fetchAccountStandingRules(accountId) {
   const session = getSession();
   try {
-    const res = await (0, import_dist8.resolveActiveRules)(session, accountId);
-    return { block: (0, import_dist8.formatStandingRulesBlock)(res.rules), ownerUserId: res.ownerUserId, source: res.source };
+    const res = await (0, import_dist9.resolveActiveRules)(session, accountId);
+    return { block: (0, import_dist9.formatStandingRulesBlock)(res.rules), ownerUserId: res.ownerUserId, source: res.source };
   } catch (err) {
     console.error(
       `[preference-inject] op=fetch-failed accountId=${accountId} error=${err instanceof Error ? err.message : String(err)}`
@@ -26658,10 +26789,19 @@ var waGateway = new WaGateway({
       console.error(`[whatsapp-native] op=account-manager-route senderId=${senderId} managesAccount=${managesAccount} effectiveAccount=${effectiveAccountId} source=gate`);
     }
     const req = buildWaSpawnRequest({ accountId: effectiveAccountId, senderId, role, personId, gatewayUrl, serverPath });
-    const userId = role === "admin" ? resolveAdminUserId({ accountId: effectiveAccountId, senderPhone: senderId }) ?? (ownerSelfPhone ? resolveOwnerUserId(effectiveAccountId) ?? void 0 : void 0) : void 0;
+    let userId = role === "admin" ? resolveAdminUserId({ accountId: effectiveAccountId, senderPhone: senderId }) ?? (ownerSelfPhone ? resolveOwnerUserId(effectiveAccountId) ?? void 0 : void 0) : void 0;
+    let graphOwnerResolved = false;
+    if (role === "admin" && userId === void 0) {
+      const graphOwner = await resolveClientOwnerUserId(effectiveAccountId);
+      if (graphOwner) {
+        userId = graphOwner;
+        graphOwnerResolved = true;
+      }
+    }
     if (role === "admin") {
       const attribution = userId ?? (ownerSelfPhone ? "owner-self-unresolved" : "unbound-empty");
-      console.error(`[whatsapp-native] op=admin-identity senderId=${senderId} userId=${attribution}`);
+      const sourceSuffix = graphOwnerResolved ? " source=graph-owner" : "";
+      console.error(`[whatsapp-native] op=admin-identity senderId=${senderId} userId=${attribution}${sourceSuffix}`);
     }
     const result = await managerRcSpawn({ ...req, userId });
     if ("error" in result) {
@@ -26874,8 +27014,8 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
 });
 app62.route("/api/channel/schedule-inject", scheduleInjectRoutes);
 app62.use("*", clientIpMiddleware);
-function allowsSameOriginFraming(path2) {
-  return path2 === "/vnc-viewer.html" || path2.startsWith("/api/admin/attachment/") || path2.startsWith("/api/public-reader/attachment/") || path2 === "/api/admin/files/download";
+function allowsSameOriginFraming(path3) {
+  return path3 === "/vnc-viewer.html" || path3.startsWith("/api/admin/attachment/") || path3.startsWith("/api/public-reader/attachment/") || path3 === "/api/admin/files/download";
 }
 app62.use("*", async (c, next) => {
   await next();
@@ -26908,12 +27048,12 @@ app62.use("*", async (c, next) => {
     await next();
     return;
   }
-  const path2 = c.req.path;
-  if (isPublicPathAllowed(path2)) {
+  const path3 = c.req.path;
+  if (isPublicPathAllowed(path3)) {
     await next();
     return;
   }
-  console.error(`[public-host] blocked path=${path2}`);
+  console.error(`[public-host] blocked path=${path3}`);
   return c.text("Not found", 404);
 });
 var lastRemoteAuthDisplayName = "";
@@ -27148,12 +27288,12 @@ console.log("[client-error-route] mounted");
 var PWA_PUBLIC_PATHS = /* @__PURE__ */ new Set(["/sw.js", ...PWA_SURFACES.map((s) => s.manifestPath)]);
 app62.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
-  const path2 = c.req.path;
-  if (path2 === "/favicon.ico" || path2.startsWith("/assets/") || path2.startsWith("/brand/") || // Public free/busy is read by the booking page (a separate Cloudflare Pages
+  const path3 = c.req.path;
+  if (path3 === "/favicon.ico" || path3.startsWith("/assets/") || path3.startsWith("/brand/") || // Public free/busy is read by the booking page (a separate Cloudflare Pages
   // origin) against the brand host with no admin cookie. It is public by
   // design — open slots only, no :Meeting detail — so it bypasses the gate
   // exactly like /brand/. The detail-leak guard lives in the route + its test.
-  path2 === "/api/calendar/free-busy" || PWA_PUBLIC_PATHS.has(path2)) {
+  path3 === "/api/calendar/free-busy" || PWA_PUBLIC_PATHS.has(path3)) {
     await next();
     return;
   }
@@ -27180,15 +27320,15 @@ app62.use("*", async (c, next) => {
   }
   const disambig = `remoteAddress="${rawRemote ?? ""}" xff="${rawXff ?? ""}" resolvedKind=${decision.client.kind}`;
   if (decision.reason === "remote-unconfigured") {
-    console.error(`[remote-auth] not configured, redirecting to setup ip=${clientIp} path=${path2} ${disambig}`);
+    console.error(`[remote-auth] not configured, redirecting to setup ip=${clientIp} path=${path3} ${disambig}`);
     return c.redirect("/__remote-auth/setup");
   }
-  const respond = isApiRequestPath(path2) ? "401" : "html";
-  console.error(`[remote-auth] login required ip=${clientIp} path=${path2} respond=${respond} ${disambig}`);
+  const respond = isApiRequestPath(path3) ? "401" : "html";
+  console.error(`[remote-auth] login required ip=${clientIp} path=${path3} respond=${respond} ${disambig}`);
   if (respond === "401") {
     return c.json({ code: "remote-auth-required" }, 401);
   }
-  return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), redirect: path2 }), 200);
+  return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), redirect: path3 }), 200);
 });
 app62.route("/api/health", health_default);
 app62.route("/api/chat", chatRoutes);
@@ -27613,11 +27753,11 @@ if (brandFaviconPath !== "/favicon.ico") {
 app62.use("/*", serveStatic({ root: "./public" }));
 app62.all("*", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
-  const path2 = c.req.path;
+  const path3 = c.req.path;
   if (isPublicHost(host)) {
-    const inAllowedList = PUBLIC_ALLOWED_EXACT.includes(path2) || PUBLIC_ALLOWED_PREFIXES.some((prefix) => path2.startsWith(prefix));
+    const inAllowedList = PUBLIC_ALLOWED_EXACT.includes(path3) || PUBLIC_ALLOWED_PREFIXES.some((prefix) => path3.startsWith(prefix));
     if (inAllowedList) {
-      console.error(`[public-host] unmatched-allowed path=${path2}`);
+      console.error(`[public-host] unmatched-allowed path=${path3}`);
       return c.json({ error: "not-found" }, 404);
     }
   }