@rubytech/create-maxy-code 0.1.476 → 0.1.478

package/payload/server/server.js

@@ -97,6 +97,8 @@ import {
   runAdminUserSelfHeal,
   runUserProfileReconcile,
   safeJson,
+  sampleCpu,
+  sampleProcessCpu,
   sanitizeClientCorrId,
   serve,
   setAccessPassword,
@@ -115,7 +117,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-LBCMFD4O.js";
+} from "./chunk-XGNRSM57.js";
 import {
   D1_MAX_SQL_STATEMENT_BYTES,
   D1_QUERY_MAX_BODY_BYTES,
@@ -127,10 +129,11 @@ import {
   listResources,
   makeHouseCfExec,
   makeHousePagesExec,
+  reconcileDataPortal,
   registerResource,
   resolveOwner,
   tooLargeMessage
-} from "./chunk-56WJMBQQ.js";
+} from "./chunk-3XLLTG6R.js";
 import {
   __commonJS,
   __toESM
@@ -9635,59 +9638,148 @@ app3.post("/r2/object/delete", envelopeBodyLimit("write"), async (c) => {
 });
 var storage_broker_default = app3;
 async function runStorageAudit(root) {
-  const { reconcileStorage } = await import("./src-JYPKMWJR.js");
-  const session = getSession();
-  try {
-    const cf = await makeHouseCfExec(root);
-    const accountsDir = resolve11(root, "..", "data", "accounts");
-    const strays = (await reconcileStorage({
-      cfD1: async () => (await cf.d1List()).map((d) => d.name),
-      cfR2: async () => (await cf.r2List()).map((b) => b.name),
-      registeredNames: async (kind) => {
+  const { reconcileStorage } = await import("./src-XQ63FPRE.js");
+  const cf = await makeHouseCfExec(root);
+  const accountsDir = resolve11(root, "..", "data", "accounts");
+  const strays = (await reconcileStorage({
+    cfD1: async () => (await cf.d1List()).map((d) => d.name),
+    cfR2: async () => (await cf.r2List()).map((b) => b.name),
+    // Its own session per invocation, never one captured from the enclosing
+    // scope. reconcileStorage issues the "d1" and "r2" reads through the same
+    // Promise.all, and a Neo4j session admits one query at a time — sharing one
+    // made the second reject, which left this audit reporting nothing for 802
+    // consecutive ticks on maxy-code and 295 on sitedesk-code. Sessions come
+    // from the driver pool, so one per read is cheap; the alternative,
+    // serialising the library's fan-out, would bend it around this caller.
+    registeredNames: async (kind) => {
+      const session = getSession();
+      try {
         const res = await session.run(
           "MATCH (r:StorageResource {kind: $kind}) RETURN r.name AS name",
           { kind }
         );
         return res.records.map((rec) => rec.get("name"));
-      },
-      accountSecretsFiles: async () => {
-        if (!existsSync9(accountsDir)) return [];
-        const files = [];
-        for (const accountId of readdirSync8(accountsDir)) {
-          const p = join13(accountsDir, accountId, "secrets", "cloudflare.env");
-          if (existsSync9(p)) files.push({ accountId, path: p, contents: readFileSync15(p, "utf8") });
-        }
-        return files;
+      } finally {
+        await session.close();
       }
-    })).strays;
-    console.error(
-      `[storage-audit] strays=${strays.length}${strays.map((s) => ` ${s.kind}:${s.detail}`).join("")}`
-    );
-  } finally {
-    await session.close();
-  }
+    },
+    accountSecretsFiles: async () => {
+      if (!existsSync9(accountsDir)) return [];
+      const files = [];
+      for (const accountId of readdirSync8(accountsDir)) {
+        const p = join13(accountsDir, accountId, "secrets", "cloudflare.env");
+        if (existsSync9(p)) files.push({ accountId, path: p, contents: readFileSync15(p, "utf8") });
+      }
+      return files;
+    }
+  })).strays;
+  console.error(
+    `[storage-audit] strays=${strays.length}${strays.map((s) => ` ${s.kind}:${s.detail}`).join("")}`
+  );
 }
 async function runPagesAudit(root) {
-  const { reconcilePages } = await import("./src-JYPKMWJR.js");
-  const session = getSession();
-  try {
-    const cf = await makeHousePagesExec(root);
-    const r = await reconcilePages({
-      cfProjects: async () => (await cf.pagesProjectList()).map((p) => p.name),
-      registeredProjects: async () => {
+  const { reconcilePages } = await import("./src-XQ63FPRE.js");
+  const cf = await makeHousePagesExec(root);
+  const r = await reconcilePages({
+    cfProjects: async () => (await cf.pagesProjectList()).map((p) => p.name),
+    // Its own session per invocation, same rule as runStorageAudit above and
+    // for the same reason. This previously held one session opened in the
+    // enclosing scope, which was safe only because reconcilePages issues
+    // exactly one registry query — a property of the library, not of this
+    // caller. A second read added there would have reproduced 1813 here
+    // verbatim. The old shape also held that session open across
+    // makeHousePagesExec's network I/O, which is a pooled connection parked
+    // for the length of a Cloudflare round trip.
+    registeredProjects: async () => {
+      const session = getSession();
+      try {
         const res = await session.run(
           "MATCH (r:StorageResource {kind: $kind}) RETURN r.name AS name",
           { kind: "pages" }
         );
         return res.records.map((rec) => rec.get("name"));
+      } finally {
+        await session.close();
       }
-    });
+    }
+  });
+  console.error(
+    `[pages-audit] projects=${r.projects} registered=${r.registered} orphan=${r.orphans.length} phantom=${r.phantoms.length}` + r.orphans.map((n) => ` orphan:${n}`).join("") + r.phantoms.map((n) => ` phantom:${n}`).join("")
+  );
+}
+function parseManifestRows(raw) {
+  const envelope = Array.isArray(raw) ? raw[0] : null;
+  const results = envelope?.results;
+  if (!Array.isArray(results)) {
+    throw new Error(`unexpected d1 payload: envelope carries no results array`);
+  }
+  return results.map((r, i) => {
+    const row = r;
+    const bad = ["objectKey", "ingested", "uploadedAt"].find(
+      (f) => f === "ingested" ? typeof row[f] !== "number" : typeof row[f] !== "string"
+    );
+    if (bad) throw new Error(`unexpected d1 row: index=${i} field=${bad} type=${typeof row[bad]}`);
+    return { objectKey: row.objectKey, ingested: row.ingested, uploadedAt: row.uploadedAt };
+  });
+}
+function auditErrorText(message) {
+  return message.split("\n")[0].replaceAll('"', "'").slice(0, 160);
+}
+function discoverPortalAccounts(accountsDir) {
+  if (!existsSync9(accountsDir)) return [];
+  const found = [];
+  for (const accountId of readdirSync8(accountsDir)) {
+    const configPath2 = join13(accountsDir, accountId, "data-portal.json");
+    if (!existsSync9(configPath2)) continue;
+    try {
+      const cfg = JSON.parse(readFileSync15(configPath2, "utf-8"));
+      if (typeof cfg.portalDbName === "string" && cfg.portalDbName.length > 0 && typeof cfg.bucketName === "string" && cfg.bucketName.length > 0) {
+        found.push({ accountId, portalDbName: cfg.portalDbName, bucketName: cfg.bucketName });
+      }
+    } catch {
+    }
+  }
+  return found;
+}
+async function runDataPortalAudit(root) {
+  const portals = discoverPortalAccounts(resolve11(root, "..", "data", "accounts"));
+  if (portals.length === 0) return "portals=0 degraded=0";
+  const cf = await makeHouseCfExec(root);
+  let degraded = 0;
+  for (const portal of portals) {
+    let rows = null;
+    let d1Error = null;
+    try {
+      rows = parseManifestRows(
+        await cf.d1Query(
+          portal.portalDbName,
+          "SELECT objectKey, ingested, uploadedAt FROM manifest"
+        )
+      );
+    } catch (err) {
+      d1Error = err.message;
+    }
+    let objects = null;
+    let r2Error = null;
+    try {
+      objects = await cf.r2ObjectList(portal.bucketName);
+    } catch (err) {
+      r2Error = err.message;
+    }
+    const nowMs = Date.now();
+    const reconciled = rows !== null && objects !== null ? reconcileDataPortal(objects, rows, nowMs) : null;
+    const ageHrs = rows === null ? null : reconcileDataPortal([], rows, nowMs).oldestUningestedHrs;
+    const degradation = [d1Error !== null ? "d1" : null, r2Error !== null ? "r2" : null].filter(Boolean).join("+");
+    if (degradation) degraded += 1;
+    const reasons = [
+      d1Error !== null ? `d1:${auditErrorText(d1Error)}` : null,
+      r2Error !== null ? `r2:${auditErrorText(r2Error)}` : null
+    ].filter(Boolean).join(" | ");
     console.error(
-      `[pages-audit] projects=${r.projects} registered=${r.registered} orphan=${r.orphans.length} phantom=${r.phantoms.length}` + r.orphans.map((n) => ` orphan:${n}`).join("") + r.phantoms.map((n) => ` phantom:${n}`).join("")
+      `[data-portal-audit] account=${portal.accountId} objects=${objects?.length ?? "na"} rows=${rows?.length ?? "na"} orphanObjects=${reconciled?.orphanObjects.length ?? "na"} phantomRows=${reconciled?.phantomRows.length ?? "na"} oldestUningestedHrs=${ageHrs?.toFixed(1) ?? "na"}` + (degradation ? ` degraded=${degradation} err="${reasons}"` : "")
     );
-  } finally {
-    await session.close();
   }
+  return `portals=${portals.length} degraded=${degraded}`;
 }
 
 // server/google-pending-audit.ts
@@ -13905,12 +13997,21 @@ function checkRateLimit2(ip, cls) {
   }
   return { allow: true, blocked: 0, shouldLog: false };
 }
-setInterval(() => {
-  const now = Date.now();
-  for (const [ip, rec] of rateHits) {
-    if (now - rec.windowStart >= WINDOW_MS * 2) rateHits.delete(ip);
+registerLoop({
+  name: "client-error-rate-cleanup",
+  intervalMs: WINDOW_MS,
+  run: () => {
+    const now = Date.now();
+    let purged = 0;
+    for (const [key, rec] of rateHits) {
+      if (now - rec.windowStart >= WINDOW_MS * 2) {
+        rateHits.delete(key);
+        purged += 1;
+      }
+    }
+    return `purged ${purged}, ${rateHits.size} live`;
   }
-}, WINDOW_MS).unref();
+});
 function truncate(value, max) {
   if (typeof value !== "string") return "";
   return value.length > max ? value.slice(0, max) + "\u2026" : value;
@@ -21998,16 +22099,32 @@ app47.get("/", requireAdminSession, async (c) => {
          WHERE te.endedAt IS NULL
        WITH t, te ORDER BY te.startedAt
        WITH t, head(collect(te)) AS openTe
+       // OPTIONAL is load-bearing. Unassigned is the common state, so a plain
+       // MATCH would silently drop most of the list with nothing looking wrong.
+       OPTIONAL MATCH (t)-[:ASSIGNED_TO]->(a:AdminUser)
+       // head(collect(...)) for the same reason the TimeEntry match above uses
+       // it: a second ASSIGNED_TO edge would fan the row out, duplicating
+       // rowKey and double-counting the assignee.
+       WITH t, openTe, head(collect(a)) AS assignee
        RETURN t.taskId AS taskId, elementId(t) AS rowKey, t.name AS name, t.clientName AS clientName,
               t.propertyAddress AS propertyAddress, t.fee AS fee, t.status AS status,
               coalesce(t.secondsLogged, 0) AS secondsLogged,
-              openTe.startedAt AS runningStartedAt
+              openTe.startedAt AS runningStartedAt,
+              t.createdAt AS createdAt,
+              assignee.userId AS assigneeUserId, assignee.name AS assigneeName
        ORDER BY t.createdAt DESC`,
       { accountId }
     );
+    const totalResult = await session.run(
+      `MATCH (t:Task {accountId: $accountId}) RETURN count(t) AS total`,
+      { accountId }
+    );
+    const graphTotal = totalResult.records.length > 0 ? toNum(totalResult.records[0].get("total")) : 0;
     const open = [];
     const completed = [];
     let missingTaskId = 0;
+    let missingCreatedAt = 0;
+    let assigned = 0;
     for (const rec of result.records) {
       const status = rec.get("status") ?? "pending";
       const runningStartedAt = rec.get("runningStartedAt") ?? null;
@@ -22015,6 +22132,10 @@ app47.get("/", requireAdminSession, async (c) => {
       const rawTaskId = rec.get("taskId");
       const taskId = typeof rawTaskId === "string" && rawTaskId !== "" ? rawTaskId : null;
       if (taskId === null) missingTaskId++;
+      const createdAt = rec.get("createdAt") ?? null;
+      if (createdAt === null) missingCreatedAt++;
+      const assigneeUserId = rec.get("assigneeUserId") ?? null;
+      if (assigneeUserId !== null) assigned++;
       const row = {
         taskId,
         rowKey: rec.get("rowKey"),
@@ -22025,12 +22146,23 @@ app47.get("/", requireAdminSession, async (c) => {
         status,
         secondsLogged: toNum(rec.get("secondsLogged")),
         running: runningStartedAt !== null,
-        runningStartedAt
+        runningStartedAt,
+        createdAt,
+        assigneeUserId,
+        assigneeName: rec.get("assigneeName") ?? null
       };
       if (COMPLETED.has(status)) completed.push(row);
       else if (!HIDDEN_FROM_OPEN.has(status)) open.push(row);
     }
-    console.log(`${TAG37} op=list account=${accountId} open=${open.length} completed=${completed.length} missingTaskId=${missingTaskId}`);
+    const returned = result.records.length;
+    if (returned < graphTotal) {
+      console.error(
+        `${TAG37} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
+      );
+    }
+    console.log(
+      `${TAG37} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned}`
+    );
     return c.json({ open, completed });
   } catch (err) {
     console.error(`${TAG37} op=list error="${err instanceof Error ? err.message : String(err)}"`);
@@ -22348,7 +22480,13 @@ app52.get("/", requireAdminSession, async (c) => {
   const start = Date.now();
   let res;
   try {
-    res = await fetch(`${managerBase("activity:wrapper")}/activity`, {
+    const qs = new URLSearchParams();
+    const from = c.req.query("from");
+    const to = c.req.query("to");
+    if (from) qs.set("from", from);
+    if (to) qs.set("to", to);
+    const suffix = qs.size > 0 ? `?${qs.toString()}` : "";
+    res = await fetch(`${managerBase("activity:wrapper")}/activity${suffix}`, {
       signal: AbortSignal.timeout(3e4)
     });
   } catch (err) {
@@ -22386,6 +22524,9 @@ app52.get("/", requireAdminSession, async (c) => {
       if (name) names[a.accountId] = name;
     })
   );
+  const sampledAt = Date.now();
+  sampleCpu(sampledAt);
+  const cpu = sampleProcessCpu(sampledAt);
   const loopRows = listLoops();
   const armed2 = armedCount();
   const byState = loopRows.reduce((acc, r) => {
@@ -22393,13 +22534,27 @@ app52.get("/", requireAdminSession, async (c) => {
     return acc;
   }, {});
   console.log(
-    `${TAG42} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
+    `${TAG42} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
   );
   return c.json({
     rows,
     census,
     censusAgeMs,
-    loops: { armed: armed2, rows: loopRows },
+    // `satisfies` and not a bare literal (Task 1825). LoopsPayload is what the
+    // activity page destructures; without the check, a key renamed or dropped
+    // here still compiles and the page reads undefined, which its own
+    // vocabulary renders as a dash meaning "not measured". The check runs both
+    // ways: a key the page does not know about fails as an excess property.
+    loops: {
+      armed: armed2,
+      rows: loopRows,
+      // The server's own CPU beside what the registry can explain. The GAP is
+      // the point: loops summing to 2% against a process at 60% says the cost
+      // is somewhere else, which small numbers alone would never tell you.
+      processPct: cpu.processPct,
+      attributedPct: cpu.attributedPct,
+      unattributedPct: cpu.unattributedPct
+    },
     accounts: {
       onDisk,
       valid: valid.length,
@@ -23143,12 +23298,21 @@ function rateLimit(ip, now = Date.now()) {
   if (b.count > RATE_LIMIT) return { ok: false, resetIn: b.resetAt - now };
   return { ok: true, resetIn: b.resetAt - now };
 }
-setInterval(() => {
-  const now = Date.now();
-  for (const [ip, b] of buckets) {
-    if (now >= b.resetAt) buckets.delete(ip);
+registerLoop({
+  name: "visitor-event-rate-cleanup",
+  intervalMs: 5 * RATE_WINDOW_MS,
+  run: () => {
+    const now = Date.now();
+    let purged = 0;
+    for (const [ip, b] of buckets) {
+      if (now >= b.resetAt) {
+        buckets.delete(ip);
+        purged += 1;
+      }
+    }
+    return `purged ${purged}, ${buckets.size} live`;
   }
-}, 5 * RATE_WINDOW_MS).unref?.();
+});
 var VALID_TYPES = /* @__PURE__ */ new Set(["pageview", "click", "scroll", "dwell"]);
 var ID_RE = /^[A-Za-z0-9_-]{6,128}$/;
 function parseEvent(body) {
@@ -24976,10 +25140,28 @@ var WaGateway = class {
     }
     return events;
   }
-  /** Start the periodic reconciliation sweep in the long-lived UI process.
-   *  Returns the interval handle. */
+  /** Arm the periodic reconciliation sweep in the long-lived UI process.
+   *
+   *  Task 1814 — armed through the registry, so it appears on /activity. This
+   *  gateway is constructed once at module scope in server/index.ts and reached
+   *  everywhere else through the singleton accessor in ./instance, so the sweep
+   *  is per-install, not per-instance. Returns the registry's disarm function
+   *  rather than the interval handle; no caller reads it.
+   *
+   *  Two semantics move with it. The timer is now unref'd, where the bare
+   *  setInterval was not: a loop is a passenger of the process, never what
+   *  keeps it alive. And a throwing sweep is recorded as lastError instead of
+   *  surfacing as an uncaught timer exception, so a sweep that fails every
+   *  tick now reads as a failing row on /activity rather than a crash. */
   startSweeper(intervalMs = SWEEP_INTERVAL_MS) {
-    return setInterval(() => this.reconcile(Date.now()), intervalMs);
+    return registerLoop({
+      name: "whatsapp-native-sweep",
+      intervalMs,
+      run: () => {
+        const events = this.reconcile(Date.now());
+        return events.length > 0 ? `${events.length} terminal events` : void 0;
+      }
+    });
   }
   /** Handle one inbound admin WhatsApp message. */
   async handleInbound(input) {
@@ -25552,11 +25734,22 @@ var WebchatGateway = class _WebchatGateway {
       void this.deps.deleteSession?.(rec.sessionId);
     }
   }
-  /** Start the periodic public idle reaper in the long-lived UI process. */
+  /** Arm the periodic public idle reaper in the long-lived UI process.
+   *
+   *  Task 1814 — armed through the registry, so it appears on /activity. Like
+   *  the sweeper below, this is per-install: one gateway per server, reached
+   *  through the singleton accessor in ./instance. Returns the registry's
+   *  disarm function rather than the interval handle; no caller reads it.
+   *
+   *  This one already unref'd its handle, so only the error semantics move: a
+   *  throwing reap is recorded as lastError rather than surfacing as an
+   *  uncaught timer exception. */
   startPublicReaper(intervalMs = 6e4) {
-    const handle = setInterval(() => this.reapPublic(Date.now()), intervalMs);
-    if (handle.unref) handle.unref();
-    return handle;
+    return registerLoop({
+      name: "webchat-public-reaper",
+      intervalMs,
+      run: () => this.reapPublic(Date.now())
+    });
   }
   /** A gated public PTY exited explicitly on the manager side (operator stop,
    *  claude crash, manager DELETE), not via the idle reaper. The manager POSTs
@@ -25638,15 +25831,36 @@ var WebchatGateway = class _WebchatGateway {
     }
     return events;
   }
-  /** Start the periodic reconciliation sweep in the long-lived UI process. Each
+  /** Arm the periodic reconciliation sweep in the long-lived UI process. Each
    *  tick runs the sync sweep (drain-/inbound-undelivered) AND the async
-   *  recovery pass for queued-no-subscriber messages (Task-962). */
+   *  recovery pass for queued-no-subscriber messages (Task-962).
+   *
+   *  Task 1814 — armed through the registry, so it appears on /activity. This
+   *  gateway is constructed once at module scope in server/index.ts and reached
+   *  everywhere else through the singleton accessor in ./instance, so the sweep
+   *  is per-install, not per-instance. Returns the registry's disarm function
+   *  rather than the interval handle; no caller reads it.
+   *
+   *  Two semantics move with it. The timer is now unref'd, where the bare
+   *  setInterval was not: a loop is a passenger of the process, never what
+   *  keeps it alive. And a throwing sweep is recorded as lastError instead of
+   *  surfacing as an uncaught timer exception, so a sweep that fails every
+   *  tick now reads as a failing row on /activity rather than a crash.
+   *
+   *  recoverStalled stays fire-and-forget, exactly as it was: run() returns the
+   *  sync note, so the registry's duration covers the sweep and not the
+   *  recovery pass. */
   startSweeper(intervalMs = SWEEP_INTERVAL_MS2) {
-    return setInterval(() => {
-      const now = Date.now();
-      this.reconcile(now);
-      void this.recoverStalled(now);
-    }, intervalMs);
+    return registerLoop({
+      name: "webchat-inbound-sweep",
+      intervalMs,
+      run: () => {
+        const now = Date.now();
+        const events = this.reconcile(now);
+        void this.recoverStalled(now);
+        return events.length > 0 ? `${events.length} terminal events` : void 0;
+      }
+    });
   }
   /** Task-962 — the per-session delivery-failure marker for the /session pointer.
    *  Non-null only when redelivery was exhausted for `key`; cleared on the next
@@ -26584,9 +26798,28 @@ var TelegramGateway = class {
     }
     return events;
   }
-  /** Start the periodic reconciliation sweep in the long-lived UI process. */
+  /** Arm the periodic reconciliation sweep in the long-lived UI process.
+   *
+   *  Task 1814 — armed through the registry, so it appears on /activity. This
+   *  gateway is constructed once at module scope in server/index.ts and reached
+   *  everywhere else through the singleton accessor in ./instance, so the sweep
+   *  is per-install, not per-instance. Returns the registry's disarm function
+   *  rather than the interval handle; no caller reads it.
+   *
+   *  Two semantics move with it. The timer is now unref'd, where the bare
+   *  setInterval was not: a loop is a passenger of the process, never what
+   *  keeps it alive. And a throwing sweep is recorded as lastError instead of
+   *  surfacing as an uncaught timer exception, so a sweep that fails every
+   *  tick now reads as a failing row on /activity rather than a crash. */
   startSweeper(intervalMs = SWEEP_INTERVAL_MS3) {
-    return setInterval(() => this.reconcile(Date.now()), intervalMs);
+    return registerLoop({
+      name: "telegram-native-sweep",
+      intervalMs,
+      run: () => {
+        const events = this.reconcile(Date.now());
+        return events.length > 0 ? `${events.length} terminal events` : void 0;
+      }
+    });
   }
   /** Handle one inbound telegram message. */
   async handleInbound(input) {
@@ -28511,7 +28744,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join42(__dirname, "..");
   const reconcileScript = resolve36(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const RECONCILE_INTERVAL_MS = 12e4;
-  const runReconcile = () => {
+  const runReconcile = (ctx) => {
     if (!existsSync38(reconcileScript)) return;
     try {
       const child = spawn3(process.execPath, [reconcileScript], {
@@ -28519,6 +28752,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
         stdio: "inherit"
       });
       child.unref();
+      ctx.child(child.pid);
       child.on("error", (err) => console.error(`[calendar-reconcile] spawn-failed err="${err.message}"`));
     } catch (err) {
       console.error(`[calendar-reconcile] spawn-failed err="${err.message}"`);
@@ -28536,7 +28770,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join42(__dirname, "..");
   const outlookScript = resolve36(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
-  const runOutlookComplete = () => {
+  const runOutlookComplete = (ctx) => {
     if (!existsSync38(outlookScript)) return;
     try {
       const child = spawn3(process.execPath, [outlookScript], {
@@ -28544,6 +28778,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
         stdio: "inherit"
       });
       child.unref();
+      ctx.child(child.pid);
       child.on("error", (err) => console.error(`[outlook-complete] spawn-failed err="${err.message}"`));
     } catch (err) {
       console.error(`[outlook-complete] spawn-failed err="${err.message}"`);
@@ -28606,7 +28841,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
   const googleAuditScript = resolve36(googleRoot, "plugins/google/mcp/dist/scripts/account-audit.js");
   const GOOGLE_ACCOUNT_AUDIT_INTERVAL_MS = 36e5;
-  const runGoogleAccountAudit = () => {
+  const runGoogleAccountAudit = (ctx) => {
     if (!existsSync38(googleAuditScript)) return;
     try {
       const child = spawn3(process.execPath, [googleAuditScript], {
@@ -28614,6 +28849,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
         stdio: "inherit"
       });
       child.unref();
+      ctx.child(child.pid);
       child.on(
         "error",
         (err) => console.error(`[google-account-audit] op=spawn-failed error="${err.message}"`)
@@ -28653,6 +28889,16 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     firstRunDelayMs: 35e3,
     run: runPagesAuditSafe
   });
+  const runDataPortalAuditSafe = () => runDataPortalAudit(auditPlatformRoot).catch((err) => {
+    console.error(`[data-portal-audit] error="${err.message}"`);
+    throw err;
+  });
+  registerLoop({
+    name: "data-portal-audit",
+    intervalMs: STORAGE_AUDIT_INTERVAL_MS,
+    firstRunDelayMs: 5e4,
+    run: runDataPortalAuditSafe
+  });
 }
 {
   const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join42(__dirname, "..");
@@ -28666,7 +28912,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
       return null;
     }
   };
-  const spawnPublish = (account) => {
+  const spawnPublish = (account, ctx) => {
     if (!existsSync38(publishScript)) return;
     try {
       const child = spawn3(process.execPath, [publishScript], {
@@ -28679,6 +28925,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
         stdio: "inherit"
       });
       child.unref();
+      ctx.child(child.pid);
       child.on("error", (err) => console.error(`[calendar-availability] op=publish result=error reason=spawn-failed err="${err.message}"`));
     } catch (err) {
       console.error(`[calendar-availability] op=publish result=error reason=spawn-failed err="${err.message}"`);
@@ -28710,10 +28957,10 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     const ageMs = Number.isNaN(parsed) ? null : Date.now() - parsed;
     console.error(`[calendar-availability] op=audit accountId=${account.accountId} snapshotAgeMs=${ageMs ?? "na"}`);
   };
-  const publishTick = () => {
+  const publishTick = (ctx) => {
     const account = currentAccount();
     if (!account) return;
-    spawnPublish(account);
+    spawnPublish(account, ctx);
     auditSnapshotAge(account);
   };
   registerLoop({
@@ -28731,7 +28978,7 @@ startLedgerCensus(() => getSession());
   const auditScript = resolve36(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
-  const runConnectorAudit = () => {
+  const runConnectorAudit = (ctx) => {
     if (!existsSync38(auditScript)) return;
     try {
       const child = spawn3(process.execPath, [auditScript], {
@@ -28739,6 +28986,7 @@ startLedgerCensus(() => getSession());
         stdio: "inherit"
       });
       child.unref();
+      ctx.child(child.pid);
       child.on("error", (err) => console.error(`[connector-audit] spawn-failed err="${err.message}"`));
     } catch (err) {
       console.error(`[connector-audit] spawn-failed err="${err.message}"`);

package/payload/server/{src-JYPKMWJR.js → src-XQ63FPRE.js}

@@ -14,6 +14,7 @@ import {
   makeHouseCfExec,
   makeHousePagesExec,
   readHouseCredential,
+  reconcileDataPortal,
   reconcilePages,
   reconcileStorage,
   registerResource,
@@ -22,7 +23,7 @@ import {
   stripAccountWideTokens,
   tooLargeMessage,
   validateMapping
-} from "./chunk-56WJMBQQ.js";
+} from "./chunk-3XLLTG6R.js";
 import "./chunk-PFF6I7KP.js";
 export {
   D1_MAX_SQL_STATEMENT_BYTES,
@@ -39,6 +40,7 @@ export {
   makeHouseCfExec,
   makeHousePagesExec,
   readHouseCredential,
+  reconcileDataPortal,
   reconcilePages,
   reconcileStorage,
   registerResource,