@rubytech/create-maxy-code 0.1.480 → 0.1.482

package/payload/server/server.js

@@ -1563,7 +1563,7 @@ var serveStatic = (options = { root: "" }) => {
 import { readFileSync as readFileSync42, existsSync as existsSync38, watchFile, readdirSync as readdirSync26, statSync as statSync17 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash7 } from "crypto";
-import { resolve as resolve37, join as join44, basename as basename12 } from "path";
+import { resolve as resolve38, join as join45, basename as basename12 } from "path";
 import { homedir as homedir4 } from "os";
 import { monitorEventLoopDelay } from "perf_hooks";
 
@@ -2472,7 +2472,8 @@ var WhatsAppAccountSchema = z.object({
   }).strict().optional().describe("React to incoming messages with an emoji to acknowledge receipt before the agent responds."),
   debounceMs: z.number().int().nonnegative().optional().default(2e3).describe("Wait this many milliseconds after the last message before processing, to batch rapid multi-message input into a single agent turn. Default 2000ms catches most multi-message bursts. 0 means process each message immediately."),
   publicAgent: z.string().optional().describe("Slug of the public agent that handles WhatsApp inbound from non-admin phones for this account. Overrides the top-level publicAgent when set."),
-  afterHoursMessage: z.string().optional().describe("Auto-reply text sent to public senders when the business is closed (outside opening hours). If not set, messages received outside business hours are silently skipped with no reply.")
+  afterHoursMessage: z.string().optional().describe("Auto-reply text sent to public senders when the business is closed (outside opening hours). If not set, messages received outside business hours are silently skipped with no reply."),
+  dispatchInbound: z.boolean().optional().describe("When false, this account's WhatsApp socket only observes: inbound is stored and readable but never dispatched to an agent. Default true. Set with set-dispatch-inbound.")
 }).strict().superRefine((value, ctx) => {
   if (value.dmPolicy !== "open") return;
   const allow = (value.allowFrom ?? []).map((v) => String(v).trim()).filter(Boolean);
@@ -2836,7 +2837,7 @@ var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
   console.error(`${TAG6} draining credential save queue\u2026`);
   const timer = new Promise(
-    (resolve38) => setTimeout(() => resolve38("timeout"), timeoutMs)
+    (resolve39) => setTimeout(() => resolve39("timeout"), timeoutMs)
   );
   const result = await Promise.race([
     credsSaveQueue.then(() => "drained"),
@@ -3013,11 +3014,11 @@ async function createWaSocket(opts) {
   return sock;
 }
 async function waitForConnection(sock) {
-  return new Promise((resolve38, reject) => {
+  return new Promise((resolve39, reject) => {
     const handler = (update) => {
       if (update.connection === "open") {
         sock.ev.off("connection.update", handler);
-        resolve38();
+        resolve39();
       }
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
@@ -3125,7 +3126,7 @@ function isTimeoutError(err) {
   return Boolean(err?.__maxyTimeout);
 }
 function withTimeout(label, promise, timeoutMs) {
-  return new Promise((resolve38, reject) => {
+  return new Promise((resolve39, reject) => {
     const timer = setTimeout(() => {
       const err = new Error(`${label} timed out after ${timeoutMs}ms`);
       err.__maxyTimeout = true;
@@ -3135,7 +3136,7 @@ function withTimeout(label, promise, timeoutMs) {
     promise.then(
       (value) => {
         clearTimeout(timer);
-        resolve38(value);
+        resolve39(value);
       },
       (err) => {
         clearTimeout(timer);
@@ -3622,6 +3623,18 @@ function checkGroupAccess(_params) {
   return { allowed: false, reason: "group-observe-only", agentType: "public" };
 }
 
+// app/lib/whatsapp/inbound/dispatch-mode.ts
+function shouldDispatchInbound(config, accountId) {
+  return config.accounts?.[accountId]?.dispatchInbound ?? true;
+}
+function decideDispatch(conn, payload, deps) {
+  if (shouldDispatchInbound(deps.config, conn.accountId)) {
+    deps.emit(payload);
+    return;
+  }
+  deps.log(`[whatsapp:observe] op=dispatch-suppressed account=${conn.accountId} sender=${payload.senderPhone} agentType=${payload.agentType}`);
+}
+
 // app/lib/access-gate.ts
 import neo4j from "neo4j-driver";
 import { readFileSync as readFileSync6 } from "fs";
@@ -4175,8 +4188,8 @@ async function persistWhatsAppMessage(input) {
   const { givenName, familyName } = splitName(input.pushName);
   const prev = sessionWriteLocks.get(input.cacheKey);
   let release;
-  const mine = new Promise((resolve38) => {
-    release = resolve38;
+  const mine = new Promise((resolve39) => {
+    release = resolve39;
   });
   const chained = (prev ?? Promise.resolve()).then(() => mine);
   sessionWriteLocks.set(input.cacheKey, chained);
@@ -5484,6 +5497,16 @@ var configDir = null;
 var whatsAppConfig = {};
 var onInboundMessage = null;
 var initialized = false;
+function dispatchInboundPayload(conn, payload) {
+  if (!onInboundMessage) return;
+  decideDispatch(conn, payload, { config: whatsAppConfig, emit: onInboundMessage, log: (l) => console.error(l) });
+}
+function isObserveAccount(accountId) {
+  return !shouldDispatchInbound(whatsAppConfig, accountId);
+}
+function getWhatsAppConfig() {
+  return whatsAppConfig;
+}
 var messageStore = /* @__PURE__ */ new Map();
 function messageStoreKey(accountId, remoteJid) {
   return `${accountId}:${remoteJid}`;
@@ -5903,11 +5926,11 @@ async function connectWithReconnect(conn) {
       console.error(
         `${TAG17} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
-      await new Promise((resolve38) => {
-        const timer = setTimeout(resolve38, delay);
+      await new Promise((resolve39) => {
+        const timer = setTimeout(resolve39, delay);
         conn.abortController.signal.addEventListener("abort", () => {
           clearTimeout(timer);
-          resolve38();
+          resolve39();
         }, { once: true });
       });
     }
@@ -5915,16 +5938,16 @@ async function connectWithReconnect(conn) {
   }
 }
 function waitForDisconnectEvent(conn) {
-  return new Promise((resolve38) => {
+  return new Promise((resolve39) => {
     if (!conn.sock) {
-      resolve38();
+      resolve39();
       return;
     }
     const sock = conn.sock;
     const handler = (update) => {
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
-        resolve38();
+        resolve39();
       }
     };
     sock.ev.on("connection.update", handler);
@@ -5977,7 +6000,7 @@ function monitorInbound(conn) {
       if (entries.length > 1) {
         console.error(`${TAG17} debounce: combining ${entries.length} messages account=${conn.accountId} from=${entries[0].senderPhone}`);
       }
-      onInboundMessage(combineInboundBatch(entries));
+      dispatchInboundPayload(conn, combineInboundBatch(entries));
     },
     onError: (err) => {
       console.error(`${TAG17} debounce flush error account=${conn.accountId}: ${String(err)}`);
@@ -6202,7 +6225,7 @@ function monitorInbound(conn) {
               const currentSock = conn.sock;
               if (currentSock) await sendComposing(currentSock, remoteJid);
             };
-            onInboundMessage(buildSelfChatDispatch({
+            dispatchInboundPayload(conn, buildSelfChatDispatch({
               accountId: conn.accountId,
               selfPhone: conn.selfPhone,
               remoteJid,
@@ -6311,7 +6334,7 @@ async function handleInboundMessage(conn, msg) {
       const currentSock = conn.sock;
       if (currentSock) await sendComposing(currentSock, remoteJid);
     };
-    onInboundMessage({
+    dispatchInboundPayload(conn, {
       accountId: conn.accountId,
       agentType: "admin",
       senderPhone: senderPhone2,
@@ -6358,8 +6381,8 @@ async function handleInboundMessage(conn, msg) {
     const conversationKey = isGroup ? remoteJid : senderPhone;
     const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
     let resolvePending;
-    const sttPending = new Promise((resolve38) => {
-      resolvePending = resolve38;
+    const sttPending = new Promise((resolve39) => {
+      resolvePending = resolve39;
     });
     if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
     try {
@@ -6477,7 +6500,7 @@ async function handleInboundMessage(conn, msg) {
   if (conn.debouncer) {
     conn.debouncer.enqueue(payload);
   } else {
-    onInboundMessage(payload);
+    dispatchInboundPayload(conn, payload);
   }
 }
 
@@ -6787,20 +6810,20 @@ function buildX11Env(chromiumWrapperPath, transport = "vnc") {
 
 // server/routes/health.ts
 function checkPort(port2, timeoutMs = 500) {
-  return new Promise((resolve38) => {
+  return new Promise((resolve39) => {
     const socket = createConnection2(port2, "127.0.0.1");
     socket.setTimeout(timeoutMs);
     socket.once("connect", () => {
       socket.destroy();
-      resolve38(true);
+      resolve39(true);
     });
     socket.once("error", () => {
       socket.destroy();
-      resolve38(false);
+      resolve39(false);
     });
     socket.once("timeout", () => {
       socket.destroy();
-      resolve38(false);
+      resolve39(false);
     });
   });
 }
@@ -7751,6 +7774,48 @@ function setAccountManager(accountDir, phone, subAccountId, mode = "active") {
     return { ok: false, error: msg };
   }
 }
+function setDispatchInbound(accountDir, accountId, value) {
+  const id = accountId.trim();
+  if (!id) return { ok: false, error: "Missing account id." };
+  let validIds;
+  try {
+    validIds = listValidAccounts().map((a) => a.accountId);
+  } catch (err) {
+    return { ok: false, error: `Could not read the account registry to validate the account: ${err instanceof Error ? err.message : String(err)}. Try again.` };
+  }
+  if (!validIds.includes(id)) {
+    return { ok: false, error: `Account "${id}" is not in this install's account registry.` };
+  }
+  try {
+    const config = readConfig(accountDir);
+    if (!config.whatsapp || typeof config.whatsapp !== "object") {
+      config.whatsapp = {};
+    }
+    const wa = config.whatsapp;
+    if (!wa.accounts || typeof wa.accounts !== "object") {
+      wa.accounts = {};
+    }
+    const accounts = wa.accounts;
+    if (!accounts[id] || typeof accounts[id] !== "object") {
+      accounts[id] = { name: "Main" };
+    }
+    accounts[id].dispatchInbound = value;
+    const parsed = WhatsAppConfigSchema.safeParse(wa);
+    if (!parsed.success) {
+      const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
+      return { ok: false, error: `Validation failed: ${msg}` };
+    }
+    config.whatsapp = parsed.data;
+    writeConfig(accountDir, config);
+    console.error(`${TAG21} set dispatchInbound account=${id} value=${value}`);
+    reloadManagerConfig(accountDir);
+    return { ok: true };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`${TAG21} setDispatchInbound failed: ${msg}`);
+    return { ok: false, error: msg };
+  }
+}
 function clearAccountManager(accountDir, phone) {
   const normalized = phone.trim();
   try {
@@ -8089,8 +8154,8 @@ async function startLogin(opts) {
   await clearAuth(authDir);
   let resolveCode = null;
   let rejectCode = null;
-  const codePromise = new Promise((resolve38, reject) => {
-    resolveCode = resolve38;
+  const codePromise = new Promise((resolve39, reject) => {
+    resolveCode = resolve39;
     rejectCode = reject;
   });
   const codeTimer = setTimeout(
@@ -8489,6 +8554,14 @@ function reconcileCredsOnDisk(opts) {
   return entries;
 }
 
+// app/lib/whatsapp/outbound/reply-guard.ts
+function admitReply(input) {
+  if (isGroupJid(input.remoteJid)) return { ok: false, status: 403, reason: "group-send-blocked" };
+  if (!isUserJid(input.remoteJid)) return { ok: false, status: 400, reason: "invalid-remote-jid" };
+  if (!input.hasConversation) return { ok: false, status: 403, reason: "no-existing-conversation" };
+  return { ok: true };
+}
+
 // app/lib/whatsapp-reader/select-sessions.ts
 function isReaderChannelSession(role, channel) {
   return role === "admin" && (channel === "whatsapp" || channel === "telegram") || role === "public" && (channel === "whatsapp" || channel === "webchat");
@@ -8647,6 +8720,15 @@ function houseSocketScopeDenial(c, op) {
   console.error(`${TAG25} op=authz-deny route=${op} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
   return c.json({ ok: false, error: "Not authorized. The WhatsApp connection and its settings are house-scoped; this session may only act on its own account." }, 403);
 }
+function selfOrHouseScopeDenial(c, targetAccountId, op) {
+  const { decision, callerAccountId, houseAdminScope } = evaluateCallerScope(c, targetAccountId);
+  if (decision.authorized) {
+    console.error(`${TAG25} op=authz-ok route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
+    return null;
+  }
+  console.error(`${TAG25} op=authz-deny route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
+  return c.json({ ok: false, error: "Not authorized. This session may only pair or manage its own account." }, 403);
+}
 var app2 = new Hono();
 app2.get("/status", (c) => {
   try {
@@ -8658,8 +8740,12 @@ app2.get("/status", (c) => {
     const credsRoot = join12(MAXY_DIR, "credentials", "whatsapp");
     const accountDir = resolveAccount()?.accountDir ?? null;
     const reconciled = reconcileCredsOnDisk({ credsRoot, accountDir, liveAccountIds: liveIds, activeLoginAccountIds: activeLoginIds });
-    const accounts = [...live, ...reconciled];
-    const summary = accounts.map((a) => `${a.accountId}:${a.connected ? "up" : a.linkedUnconfigured ? "linked-unconfigured" : "down"}`).join(", ");
+    const cfg = getWhatsAppConfig();
+    const accounts = [...live, ...reconciled].map((a) => ({
+      ...a,
+      dispatchInbound: shouldDispatchInbound(cfg, a.accountId)
+    }));
+    const summary = accounts.map((a) => `${a.accountId}:${a.connected ? "up" : a.linkedUnconfigured ? "linked-unconfigured" : "down"}:${a.dispatchInbound ? "dispatch" : "observe"}`).join(", ");
     console.error(`${TAG25} status accounts=${accounts.length} [${summary}]`);
     const reachableAccountIds = [
       .../* @__PURE__ */ new Set([...listStoredAccountIds(), ...listConnectionPlatformAccountIds()])
@@ -8679,10 +8765,10 @@ app2.get("/status", (c) => {
 });
 app2.post("/login/start", async (c) => {
   try {
-    const denial = houseSocketScopeDenial(c, "login/start");
-    if (denial) return denial;
     const body = await c.req.json().catch(() => ({}));
     const accountId = validateAccountId(body.accountId);
+    const denial = selfOrHouseScopeDenial(c, accountId, "login/start");
+    if (denial) return denial;
     const force = body.force ?? false;
     const phone = typeof body.phone === "string" ? body.phone.trim() : "";
     if (!phone) {
@@ -8700,10 +8786,10 @@ app2.post("/login/start", async (c) => {
 });
 app2.post("/login/wait", async (c) => {
   try {
-    const denial = houseSocketScopeDenial(c, "login/wait");
-    if (denial) return denial;
     const body = await c.req.json().catch(() => ({}));
     const accountId = validateAccountId(body.accountId);
+    const denial = selfOrHouseScopeDenial(c, accountId, "login/wait");
+    if (denial) return denial;
     const timeoutMs = body.timeoutMs ?? 6e4;
     const result = await waitForLogin({ accountId, timeoutMs });
     console.error(`${TAG25} login/wait result account=${accountId} connected=${result.connected}${result.selfPhone ? ` phone=${result.selfPhone}` : ""} configPersisted=${result.configPersisted}`);
@@ -8720,10 +8806,10 @@ app2.post("/login/wait", async (c) => {
 });
 app2.post("/disconnect", async (c) => {
   try {
-    const denial = houseSocketScopeDenial(c, "disconnect");
-    if (denial) return denial;
     const body = await c.req.json().catch(() => ({}));
     const accountId = validateAccountId(body.accountId);
+    const denial = selfOrHouseScopeDenial(c, accountId, "disconnect");
+    if (denial) return denial;
     await stopConnection(accountId);
     return c.json({ disconnected: true, accountId });
   } catch (err) {
@@ -8733,10 +8819,10 @@ app2.post("/disconnect", async (c) => {
 });
 app2.post("/reconnect", async (c) => {
   try {
-    const denial = houseSocketScopeDenial(c, "reconnect");
-    if (denial) return denial;
     const body = await c.req.json().catch(() => ({}));
     const accountId = validateAccountId(body.accountId);
+    const denial = selfOrHouseScopeDenial(c, accountId, "reconnect");
+    if (denial) return denial;
     await startConnection(accountId);
     return c.json({ reconnecting: true, accountId });
   } catch (err) {
@@ -8751,6 +8837,22 @@ app2.post("/config", async (c) => {
     if (!action || typeof action !== "string") {
       return c.json({ ok: false, error: 'Missing required field "action".' }, 400);
     }
+    if (action === "set-dispatch-inbound") {
+      if (!accountId || typeof accountId !== "string") {
+        return c.json({ ok: false, error: 'Missing required field "accountId" (the account whose socket to set).' }, 400);
+      }
+      const target = validateAccountId(accountId);
+      const scopeDenial = selfOrHouseScopeDenial(c, target, `config action=set-dispatch-inbound target=${target}`);
+      if (scopeDenial) return scopeDenial;
+      if (typeof body.dispatchInbound !== "boolean") {
+        return c.json({ ok: false, error: 'Missing required boolean field "dispatchInbound".' }, 400);
+      }
+      const acct = resolveAccount();
+      if (!acct) return c.json({ ok: false, error: "No account configured." }, 500);
+      const result = setDispatchInbound(acct.accountDir, target, body.dispatchInbound);
+      console.error(`${TAG25} config action=set-dispatch-inbound account=${target} dispatchInbound=${body.dispatchInbound} ok=${result.ok}`);
+      return c.json(result, result.ok ? 200 : 400);
+    }
     const denial = houseSocketScopeDenial(c, `config action=${action}`);
     if (denial) return denial;
     const account = resolveAccount();
@@ -8961,6 +9063,65 @@ app2.post("/send-admin", async (c) => {
     return c.json({ error: String(err) }, 500);
   }
 });
+app2.post("/reply", async (c) => {
+  const sendId = process.hrtime.bigint().toString(36).slice(-8);
+  try {
+    const body = await c.req.json().catch(() => ({}));
+    if (!body.accountId || typeof body.accountId !== "string") {
+      return c.json({ error: "accountId is required" }, 400);
+    }
+    const accountId = validateAccountId(body.accountId);
+    const denial = selfOrHouseScopeDenial(c, accountId, "reply");
+    if (denial) return denial;
+    const remoteJid = typeof body.remoteJid === "string" ? body.remoteJid : "";
+    const text = typeof body.text === "string" && body.text.trim().length ? body.text : "";
+    if (!remoteJid || !text) {
+      return c.json({ error: "accountId, remoteJid and text are required" }, 400);
+    }
+    const storeKey = resolveReadStoreKey(accountId);
+    const convo = readConversation(storeKey, remoteJid);
+    const admit = admitReply({ remoteJid, hasConversation: convo.length > 0 });
+    if (!admit.ok) {
+      console.error(`[whatsapp:observe] op=reply-refused sendId=${sendId} account=${accountId} remoteJid=${remoteJid} reason=${admit.reason}`);
+      return c.json({ error: admit.reason, reason: admit.reason }, admit.status);
+    }
+    const res = resolveSocket(accountId);
+    if (!res.ok) {
+      console.error(`[whatsapp:observe] op=reply-socket sendId=${sendId} account=${accountId} result=${res.reason} presentKeys=${res.presentKeys.join(",") || "none"}`);
+      return c.json({ error: formatSocketResolutionMessage(res, accountId), reason: res.reason }, 503);
+    }
+    const sent = await sendTextMessage(res.sock, remoteJid, text, { accountId: res.accountId });
+    if (!sent.success) {
+      console.error(`[whatsapp:observe] op=reply-send-fail sendId=${sendId} account=${accountId} error=${sent.error ?? ""}`);
+      return c.json({ error: sent.error ?? "send failed" }, 500);
+    }
+    if (sent.messageId) {
+      const template = convo[convo.length - 1];
+      const nowIso = (/* @__PURE__ */ new Date()).toISOString();
+      const rec = {
+        messageId: `whatsapp-live:${res.accountId}:${remoteJid}:${sent.messageId}`,
+        sessionId: template.sessionId,
+        dateSent: nowIso,
+        body: text,
+        fromMe: true,
+        senderTelephone: template.fromMe ? template.senderTelephone : "",
+        senderName: null,
+        remoteJid,
+        msgKeyId: sent.messageId,
+        quotedId: null,
+        quotedSender: null,
+        scope: template.scope,
+        createdAt: nowIso
+      };
+      appendMessage(storeKey, rec);
+    }
+    console.error(`[whatsapp:observe] op=reply-sent sendId=${sendId} account=${accountId} socket=${res.accountId} waMessageId=${sent.messageId ?? ""}`);
+    return c.json({ success: true, messageId: sent.messageId });
+  } catch (err) {
+    console.error(`${TAG25} reply error: ${String(err)}`);
+    return c.json({ error: String(err) }, 500);
+  }
+});
 app2.get("/activity", (c) => {
   try {
     const accountId = c.req.query("accountId") ?? void 0;
@@ -9439,6 +9600,58 @@ app3.post("/pages/adopt", nameBodyLimit("pages"), async (c) => {
     await session.close();
   }
 });
+app3.post("/pages/create", nameBodyLimit("pages"), async (c) => {
+  const pub = randomUUID7().slice(0, 8);
+  const account = caller(c);
+  if (!account) {
+    log("write", "pages", "none", "*", null, "deny", "no-caller");
+    return c.json({ error: "no-caller" }, 403);
+  }
+  const parsed = await readJsonBody(c);
+  if (!parsed.ok) return parsed.res;
+  const { project } = parsed.body;
+  if (!project || typeof project !== "string") return c.json({ error: "project-required" }, 400);
+  console.error(`[pages-broker] op=request pub=${pub} caller=${account} project=${project}`);
+  const session = getSession();
+  try {
+    const owner = await resolveOwner(session, "pages", project);
+    if (owner !== null && owner !== account) {
+      log("write", "pages", account, project, owner, "deny");
+      console.error(
+        `[pages-broker] op=create pub=${pub} project=${project} existedOnCf=unchecked created=false decision=deny reason=cross-account`
+      );
+      return c.json({ error: "cross-account" }, 403);
+    }
+    if (owner === account) {
+      log("write", "pages", account, project, account, "allow");
+      console.error(
+        `[pages-broker] op=create pub=${pub} project=${project} existedOnCf=unchecked created=false decision=allow reason=already-owned`
+      );
+      return c.json({ project, created: false });
+    }
+    const exec = await makeHousePagesExec(platformRoot());
+    const existedOnCf = (await exec.pagesProjectList()).some((p) => p.name === project);
+    if (existedOnCf) {
+      log("write", "pages", account, project, null, "deny", "exists-unregistered");
+      console.error(
+        `[pages-broker] op=create pub=${pub} project=${project} existedOnCf=true created=false decision=deny reason=exists-unregistered`
+      );
+      return c.json({ error: "exists-unregistered" }, 409);
+    }
+    await exec.pagesProjectCreate(project, "main");
+    await registerResource(session, { accountId: account, kind: "pages", name: project, cfResourceId: project });
+    log("write", "pages", account, project, account, "allow");
+    console.error(
+      `[pages-broker] op=create pub=${pub} project=${project} existedOnCf=false created=true decision=allow reason=owner`
+    );
+    return c.json({ project, created: true });
+  } catch (err) {
+    console.error(`[pages-broker] op=exit pub=${pub} result=error detail="${String(err)}"`);
+    return c.json({ error: String(err) }, 500);
+  } finally {
+    await session.close();
+  }
+});
 app3.get("/d1/list", async (c) => {
   const account = caller(c);
   if (!account) return c.json({ error: "no-caller" }, 403);
@@ -14290,15 +14503,15 @@ function operatorRoleFor(config, userId) {
 async function buildAccountOptionList(accounts, userId) {
   const houseAccount = accounts.find((a) => a.config.role === "house");
   console.log(`[admin-accounts] op=list count=${accounts.length} house=${houseAccount?.accountId ?? "none"}`);
-  const resolve38 = async (a) => {
+  const resolve39 = async (a) => {
     const businessName = await fetchAccountName(a.accountId) || void 0;
     return { accountId: a.accountId, businessName, role: operatorRoleFor(a.config, userId), isHouse: a.config.role === "house" };
   };
   const houseOptions = await Promise.all(
-    accounts.filter((a) => a.config.role === "house").map(resolve38)
+    accounts.filter((a) => a.config.role === "house").map(resolve39)
   );
   const nonHouseOptions = await Promise.all(
-    accounts.filter((a) => a.config.role !== "house").map(resolve38)
+    accounts.filter((a) => a.config.role !== "house").map(resolve39)
   );
   const sortKey = (o) => (o.businessName || o.accountId).toLowerCase();
   nonHouseOptions.sort((x, y) => {
@@ -20315,6 +20528,76 @@ function isWithin(target, root) {
 }
 var sidebar_artefacts_default = app29;
 
+// server/channel-session-override.ts
+import { readFileSync as readFileSync34, writeFileSync as writeFileSync12, renameSync as renameSync9 } from "fs";
+import { join as join35 } from "path";
+var FILE2 = "channel-session-override.json";
+var UUID2 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
+function channelOverridePath(accountDir) {
+  return join35(accountDir, FILE2);
+}
+function senderKey(channel, senderId) {
+  return `${channel}:${senderId}`;
+}
+function readRaw2(accountDir) {
+  try {
+    return JSON.parse(readFileSync34(channelOverridePath(accountDir), "utf8"));
+  } catch {
+    return null;
+  }
+}
+function readChannelOverrideId(accountDir, channel, senderId) {
+  const raw = readRaw2(accountDir);
+  if (!raw || !raw.bySender || typeof raw.bySender !== "object") return null;
+  const v = raw.bySender[senderKey(channel, senderId)];
+  return typeof v === "string" && UUID2.test(v) ? v : null;
+}
+function writeChannelOverrideId(accountDir, channel, senderId, sessionId) {
+  const raw = readRaw2(accountDir);
+  const bySender = {};
+  if (raw?.bySender && typeof raw.bySender === "object") {
+    for (const [k, v] of Object.entries(raw.bySender)) {
+      if (typeof v === "string") bySender[k] = v;
+    }
+  }
+  bySender[senderKey(channel, senderId)] = sessionId;
+  const path3 = channelOverridePath(accountDir);
+  const tmp = `${path3}.${process.pid}.tmp`;
+  writeFileSync12(tmp, JSON.stringify({ bySender }, null, 2), "utf8");
+  renameSync9(tmp, path3);
+}
+function clearChannelOverrideForSession(accountDir, sessionId) {
+  const raw = readRaw2(accountDir);
+  if (!raw?.bySender || typeof raw.bySender !== "object") return [];
+  const kept = {};
+  const cleared = [];
+  for (const [k, v] of Object.entries(raw.bySender)) {
+    if (typeof v !== "string") continue;
+    if (v === sessionId) cleared.push(k);
+    else kept[k] = v;
+  }
+  if (cleared.length === 0) return [];
+  const path3 = channelOverridePath(accountDir);
+  const tmp = `${path3}.${process.pid}.tmp`;
+  writeFileSync12(tmp, JSON.stringify({ bySender: kept }, null, 2), "utf8");
+  renameSync9(tmp, path3);
+  return cleared;
+}
+
+// server/routes/admin/clear-forward-pointers.ts
+function clearForwardPointers(sessionId) {
+  try {
+    for (const a of listValidAccounts()) {
+      const cleared = clearChannelOverrideForSession(a.accountDir, sessionId);
+      if (cleared.length > 0) {
+        console.log(`[session-lifecycle] op=channel-forward-cleared sessionId=${sessionId.slice(0, 8)} account=${a.accountId} senderKeys=${cleared.join(",")}`);
+      }
+    }
+  } catch (err) {
+    console.error(`[session-lifecycle] op=channel-forward-clear-failed sessionId=${sessionId.slice(0, 8)} err=${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+
 // server/routes/admin/session-delete.ts
 var app30 = new Hono();
 app30.post("/", requireAdminSession, async (c) => {
@@ -20347,6 +20630,7 @@ app30.post("/", requireAdminSession, async (c) => {
     return c.json({ error: "manager-unreachable" }, 502);
   }
   if (del.status === 204) {
+    clearForwardPointers(sessionId);
     console.log(`[session-delete] sessionId=${sessionId} deleted`);
     return c.json({ deleted: true });
   }
@@ -20415,6 +20699,7 @@ app32.post("/", requireAdminSession, async (c) => {
     return c.json({ error: "manager-unreachable" }, 502);
   }
   if (res.status === 200) {
+    if (mode === "archive") clearForwardPointers(sessionId);
     const dir = mode === "archive" ? "top\u2192archive" : "archive\u2192top";
     console.log(`[session-archive] sessionId=${sessionId.slice(0, 8)} moved ${dir}`);
     return c.json({ archived: mode === "archive" });
@@ -20644,49 +20929,40 @@ var session_rc_spawn_default = app35;
 // server/routes/admin/session-reseat.ts
 import { randomUUID as randomUUID12 } from "crypto";
 
-// server/channel-session-override.ts
-import { readFileSync as readFileSync34, writeFileSync as writeFileSync12, renameSync as renameSync9 } from "fs";
-import { join as join35 } from "path";
-var FILE2 = "channel-session-override.json";
-var UUID2 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
-function channelOverridePath(accountDir) {
-  return join35(accountDir, FILE2);
+// server/wa-descriptor.ts
+import { resolve as resolve26, join as join36 } from "path";
+function waGatewayUrl() {
+  return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
-function senderKey(channel, senderId) {
-  return `${channel}:${senderId}`;
+function waServerPath() {
+  return process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve26(process.env.MAXY_PLATFORM_ROOT ?? join36(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
 }
-function readRaw2(accountDir) {
-  try {
-    return JSON.parse(readFileSync34(channelOverridePath(accountDir), "utf8"));
-  } catch {
-    return null;
-  }
+function waChannelDescriptor(senderId) {
+  return { senderId, gatewayUrl: waGatewayUrl(), serverPath: waServerPath() };
 }
-function readChannelOverrideId(accountDir, channel, senderId) {
-  const raw = readRaw2(accountDir);
-  if (!raw || !raw.bySender || typeof raw.bySender !== "object") return null;
-  const v = raw.bySender[senderKey(channel, senderId)];
-  return typeof v === "string" && UUID2.test(v) ? v : null;
+
+// server/telegram-descriptor.ts
+import { resolve as resolve27, join as join37 } from "path";
+function telegramGatewayUrl() {
+  return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
-function writeChannelOverrideId(accountDir, channel, senderId, sessionId) {
-  const raw = readRaw2(accountDir);
-  const bySender = {};
-  if (raw?.bySender && typeof raw.bySender === "object") {
-    for (const [k, v] of Object.entries(raw.bySender)) {
-      if (typeof v === "string") bySender[k] = v;
-    }
-  }
-  bySender[senderKey(channel, senderId)] = sessionId;
-  const path3 = channelOverridePath(accountDir);
-  const tmp = `${path3}.${process.pid}.tmp`;
-  writeFileSync12(tmp, JSON.stringify({ bySender }, null, 2), "utf8");
-  renameSync9(tmp, path3);
+function telegramServerPath() {
+  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve27(process.env.MAXY_PLATFORM_ROOT ?? join37(__dirname, ".."), "services/telegram-channel/dist/server.js");
+}
+function telegramChannelDescriptor(senderId) {
+  return { senderId, gatewayUrl: telegramGatewayUrl(), serverPath: telegramServerPath() };
 }
 
 // server/routes/admin/session-reseat.ts
 function isAdminChannelSource(source) {
   return !!source && source.role === "admin" && (source.channel === "whatsapp" || source.channel === "telegram") && typeof source.senderId === "string" && source.senderId.length > 0;
 }
+function shouldWriteChannelForward(source) {
+  return isAdminChannelSource(source) && !!source.accountId;
+}
+function isPublicChannelSource(source) {
+  return !!source && source.role === "public" && (source.channel === "whatsapp" || source.channel === "telegram");
+}
 function resolveReseatPlan(body, mintId = randomUUID12, adminUserId, authenticatedName, source) {
   const sessionId = mintId();
   const key = `session:${sessionId}`;
@@ -20700,6 +20976,8 @@ function resolveReseatPlan(body, mintId = randomUUID12, adminUserId, authenticat
     payload.channel = source.channel;
     payload.senderId = source.senderId;
     if (source.accountId) payload.targetAccountId = source.accountId;
+    if (source.channel === "whatsapp") payload.waChannel = waChannelDescriptor(source.senderId);
+    else payload.telegramChannel = telegramChannelDescriptor(source.senderId);
   } else {
     payload.channel = "webchat";
     payload.senderId = key;
@@ -20747,6 +21025,10 @@ app36.post("/", requireAdminSession, async (c) => {
     const authenticatedName = accountId ? await resolveAuthenticatedName(accountId, adminUserId) : void 0;
     const sourceMeta = readSourceRowMeta(fromSessionId);
     const source = sourceMeta ? { channel: sourceMeta.channel, senderId: sourceMeta.senderId, role: sourceMeta.role, accountId: sourceMeta.accountId } : null;
+    if (isPublicChannelSource(source)) {
+      console.error(`[chat-reseat] op=reseat-refused from=${fromSessionId} reason=public-channel channel=${source?.channel ?? "none"}`);
+      return c.json({ error: "public channel re-seat not supported (would detach the seat)" }, 400);
+    }
     const plan = resolveReseatPlan(
       { fromSessionId, model, ...permissionMode ? { permissionMode } : {}, ...effort ? { effort } : {} },
       randomUUID12,
@@ -20799,19 +21081,21 @@ app36.post("/", requireAdminSession, async (c) => {
     if (isChannelFork) {
       const channel = plan.payload.channel;
       const senderId = plan.payload.senderId;
-      try {
-        const provenance = source?.accountId ? "source-account" : "boot-account-fallback";
-        const dir = source?.accountId ? listValidAccounts().find((a) => a.accountId === source.accountId)?.accountDir ?? null : resolveAccount()?.accountDir ?? null;
-        if (dir) {
-          writeChannelOverrideId(dir, channel, senderId, plan.sessionId);
-          console.log(`[chat-reseat] op=channel-forward reseatReqId=${reseatReqId} senderId=${senderId} from=${fromSessionId} to=${plan.sessionId} keyedOn=${provenance}`);
-        } else {
-          console.error(`[session-reseat] channel-forward-failed reason=no-account-dir accountId=${source?.accountId ?? "none"} senderId=${senderId}`);
+      if (!shouldWriteChannelForward(source)) {
+        console.error(`[chat-reseat] op=channel-forward-skipped reseatReqId=${reseatReqId} senderId=${senderId} from=${fromSessionId} reason=no-source-account`);
+      } else {
+        try {
+          const dir = listValidAccounts().find((a) => a.accountId === source.accountId)?.accountDir ?? null;
+          if (dir) {
+            writeChannelOverrideId(dir, channel, senderId, plan.sessionId);
+            console.log(`[chat-reseat] op=channel-forward reseatReqId=${reseatReqId} senderId=${senderId} from=${fromSessionId} to=${plan.sessionId} account=${source.accountId}`);
+          } else {
+            console.error(`[session-reseat] channel-forward-failed reason=no-account-dir accountId=${source.accountId} senderId=${senderId}`);
+          }
+        } catch (err) {
+          console.error(`[session-reseat] channel-forward-failed err=${err instanceof Error ? err.message : String(err)} senderId=${senderId}`);
         }
-      } catch (err) {
-        console.error(`[session-reseat] channel-forward-failed err=${err instanceof Error ? err.message : String(err)} senderId=${senderId}`);
       }
-      console.log(`[chat-reseat] op=channel-fork-unbound reseatReqId=${reseatReqId} senderId=${senderId} session=${plan.sessionId} note=binds-on-next-inbound`);
     }
     const target = `/chat?session=${plan.sessionId}`;
     console.log(`[chat-reseat] op=acquired reseatReqId=${reseatReqId} pid=${parsed?.spawnedPid ?? "none"} new=${plan.sessionId}`);
@@ -20948,10 +21232,10 @@ var system_stats_default = app37;
 
 // server/routes/admin/health.ts
 import { existsSync as existsSync31, readFileSync as readFileSync35 } from "fs";
-import { resolve as resolve26, join as join36 } from "path";
-var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve26(process.cwd(), "..");
+import { resolve as resolve28, join as join38 } from "path";
+var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve28(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join36(PLATFORM_ROOT6, "config", "brand.json");
+var brandJsonPath = join38(PLATFORM_ROOT6, "config", "brand.json");
 if (existsSync31(brandJsonPath)) {
   try {
     const brand = JSON.parse(readFileSync35(brandJsonPath, "utf-8"));
@@ -20959,7 +21243,7 @@ if (existsSync31(brandJsonPath)) {
   } catch {
   }
 }
-var VERSION_FILE = resolve26(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
+var VERSION_FILE = resolve28(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
 var PROCESS_STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
 var PROBE_TIMEOUT_MS = 1e3;
 function readVersion() {
@@ -21741,7 +22025,7 @@ var browser_default = app45;
 
 // server/routes/admin/calendar.ts
 import { existsSync as existsSync32 } from "fs";
-import { join as join38 } from "path";
+import { join as join40 } from "path";
 
 // server/lib/calendar-ics.ts
 var CRLF = "\r\n";
@@ -21841,7 +22125,7 @@ function countVEvents(ics) {
 
 // server/lib/calendar-availability.ts
 import { readFileSync as readFileSync36 } from "fs";
-import { join as join37 } from "path";
+import { join as join39 } from "path";
 var AVAILABILITY_FILENAME = "calendar-availability.json";
 var REQUIRED_KEYS = [
   "timezone",
@@ -21850,7 +22134,7 @@ var REQUIRED_KEYS = [
   "weekly"
 ];
 function readAvailabilityConfig(accountDir) {
-  const path3 = join37(accountDir, AVAILABILITY_FILENAME);
+  const path3 = join39(accountDir, AVAILABILITY_FILENAME);
   let raw;
   try {
     raw = readFileSync36(path3, "utf-8");
@@ -22212,7 +22496,7 @@ app46.get("/booking-link", requireAdminSession, (c) => {
       console.error('[calendar] op=booking-link-fail err="no account configured"');
       return c.json({ bookingDomain: null });
     }
-    if (!existsSync32(join38(account.accountDir, AVAILABILITY_FILENAME))) {
+    if (!existsSync32(join40(account.accountDir, AVAILABILITY_FILENAME))) {
       console.log("[calendar] op=booking-link bookingDomain=none source=availability-config");
       return c.json({ bookingDomain: null });
     }
@@ -22871,9 +23155,9 @@ var verify_token_default = app54;
 
 // app/lib/access-email.ts
 import { spawn as spawn2 } from "child_process";
-import { resolve as resolve27 } from "path";
-var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve27(process.cwd(), "..");
-var SEND_SCRIPT = resolve27(
+import { resolve as resolve29 } from "path";
+var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve29(process.cwd(), "..");
+var SEND_SCRIPT = resolve29(
   PLATFORM_ROOT7,
   "plugins",
   "email",
@@ -23016,7 +23300,7 @@ var access_default = app56;
 
 // server/routes/sites.ts
 import { existsSync as existsSync33, readFileSync as readFileSync37, realpathSync as realpathSync7, statSync as statSync14 } from "fs";
-import { resolve as resolve28 } from "path";
+import { resolve as resolve30 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
   ".html": "text/html; charset=utf-8",
@@ -23073,8 +23357,8 @@ app57.get("/:rel{.*}", (c) => {
     }
     segments.push(seg);
   }
-  const rootDir = resolve28(account.accountDir, "sites");
-  let filePath = segments.length === 0 ? rootDir : resolve28(rootDir, ...segments);
+  const rootDir = resolve30(account.accountDir, "sites");
+  let filePath = segments.length === 0 ? rootDir : resolve30(rootDir, ...segments);
   if (filePath !== rootDir && !filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
@@ -23094,7 +23378,7 @@ app57.get("/:rel{.*}", (c) => {
     return c.redirect(target, 301);
   }
   if (stat9?.isDirectory()) {
-    filePath = resolve28(filePath, "index.html");
+    filePath = resolve30(filePath, "index.html");
   }
   if (!filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
@@ -23232,7 +23516,7 @@ var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
 import { existsSync as existsSync34, readFileSync as readFileSync39 } from "fs";
-import { join as join39 } from "path";
+import { join as join41 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -23240,7 +23524,7 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot5) return null;
-  const brandPath = join39(platformRoot5, "config", "brand.json");
+  const brandPath = join41(platformRoot5, "config", "brand.json");
   if (!existsSync34(brandPath)) return null;
   try {
     cached2 = JSON.parse(readFileSync39(brandPath, "utf-8"));
@@ -23740,14 +24024,14 @@ async function writeEvent(opts) {
 var visitor_event_default = app60;
 
 // server/routes/session.ts
-import { resolve as resolve29 } from "path";
+import { resolve as resolve31 } from "path";
 import { existsSync as existsSync35, writeFileSync as writeFileSync14, mkdirSync as mkdirSync9 } from "fs";
 var UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function writeBrandingCache(accountId, agentSlug, branding) {
   try {
-    const cacheDir = resolve29(MAXY_DIR, "branding-cache", accountId);
+    const cacheDir = resolve31(MAXY_DIR, "branding-cache", accountId);
     mkdirSync9(cacheDir, { recursive: true });
-    writeFileSync14(resolve29(cacheDir, `${agentSlug}.json`), JSON.stringify(branding), "utf-8");
+    writeFileSync14(resolve31(cacheDir, `${agentSlug}.json`), JSON.stringify(branding), "utf-8");
   } catch (err) {
     console.error(`[branding] cache write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -23824,8 +24108,8 @@ app61.post("/", async (c) => {
   }
   let agentConfig = null;
   if (account) {
-    const agentDir = resolve29(account.accountDir, "agents", agentSlug);
-    if (!existsSync35(agentDir) || !existsSync35(resolve29(agentDir, "config.json"))) {
+    const agentDir = resolve31(account.accountDir, "agents", agentSlug);
+    if (!existsSync35(agentDir) || !existsSync35(resolve31(agentDir, "config.json"))) {
       return c.json({ error: "Agent not found" }, 404);
     }
     agentConfig = resolveAgentConfig(account.accountDir, agentSlug);
@@ -24075,7 +24359,7 @@ var calendar_public_default = app62;
 // server/routes/portal-fetch.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat6, readFile as readFile6, realpath } from "fs/promises";
-import { join as join40, resolve as resolve30, sep as sep8 } from "path";
+import { join as join42, resolve as resolve32, sep as sep8 } from "path";
 import { Readable as Readable3 } from "stream";
 
 // ../plugins/cloudflare/bin/schema-exposed-dirs.mjs
@@ -24176,7 +24460,7 @@ ${expiresAtMs}`)
   return diff === 0;
 }
 async function readAccountSecret(accountId) {
-  const path3 = resolve30(DATA_ROOT, "accounts", accountId, "secrets", "data-portal.env");
+  const path3 = resolve32(DATA_ROOT, "accounts", accountId, "secrets", "data-portal.env");
   let text;
   try {
     text = await readFile6(path3, "utf8");
@@ -24197,13 +24481,13 @@ function isValidAccountId2(value) {
 async function resolveFetchTarget(accountDir, relPath) {
   let schemaText = null;
   try {
-    schemaText = await readFile6(join40(accountDir, "SCHEMA.md"), "utf8");
+    schemaText = await readFile6(join42(accountDir, "SCHEMA.md"), "utf8");
   } catch {
     schemaText = null;
   }
   const { exposed } = resolveExposedDirs(schemaText);
   if (exposed.length === 0) return { ok: false, reason: "not-exposed" };
-  const lexical = resolve30(accountDir, relPath);
+  const lexical = resolve32(accountDir, relPath);
   let root;
   let absolute;
   try {
@@ -24241,7 +24525,7 @@ async function handle(c, headOnly) {
     console.error(`${TAG45} op=denied account=${q(accountId)} reason=secret`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
-  const target = await resolveFetchTarget(resolve30(DATA_ROOT, "accounts", accountId), relPath);
+  const target = await resolveFetchTarget(resolve32(DATA_ROOT, "accounts", accountId), relPath);
   if (!target.ok) {
     const op = target.reason === "enoent" ? "miss" : "denied";
     console.error(`${TAG45} op=${op} account=${accountId} reason=${target.reason}`);
@@ -24353,7 +24637,7 @@ function startTimeEntryCensus(openSession, opts = {}) {
 
 // app/lib/ledger-census.ts
 import { readdirSync as readdirSync25, readFileSync as readFileSync40, statSync as statSync15 } from "fs";
-import { join as join41 } from "path";
+import { join as join43 } from "path";
 
 // ../lib/ledger-core/dist/reconcile.js
 var LEDGER_INDEX_NAMES = [
@@ -24407,7 +24691,7 @@ function countWriteRejects24h(logDir, now) {
   }
   let total = 0;
   for (const name of entries) {
-    const path3 = join41(logDir, name);
+    const path3 = join43(logDir, name);
     try {
       if (now - statSync15(path3).mtimeMs > DAY_MS) continue;
       for (const line of readFileSync40(path3, "utf8").split("\n")) {
@@ -24679,7 +24963,7 @@ function startGraphHealthTimer() {
 
 // app/lib/file-watcher.ts
 import * as fsp2 from "fs/promises";
-import { resolve as resolve31, sep as sep9 } from "path";
+import { resolve as resolve33, sep as sep9 } from "path";
 var ACCOUNT_UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var DEFAULT_COALESCE_MS = 500;
 var ROOTS = ["accounts"];
@@ -24698,7 +24982,7 @@ async function startFileWatcher(opts = {}) {
   const dropFn = opts.drop ?? dropFileIndex;
   for (const r of ROOTS) {
     try {
-      await fsp2.mkdir(resolve31(dataRoot, r), { recursive: true });
+      await fsp2.mkdir(resolve33(dataRoot, r), { recursive: true });
     } catch (err) {
       console.error(
         `[file-watcher] start-failed root="${r}" err="${err.message}" \u2014 index will be maintained by the 5-min reconcile backstop only`
@@ -24719,7 +25003,7 @@ async function startFileWatcher(opts = {}) {
     timers.set(relativePath, t);
   }
   async function runHook(relativePath, accountId) {
-    const absolute = resolve31(dataRoot, relativePath);
+    const absolute = resolve33(dataRoot, relativePath);
     let exists = false;
     try {
       const st = await fsp2.stat(absolute);
@@ -24743,7 +25027,7 @@ async function startFileWatcher(opts = {}) {
     }
   }
   async function watchRoot(rootName) {
-    const absRoot = resolve31(dataRoot, rootName);
+    const absRoot = resolve33(dataRoot, rootName);
     try {
       const iter = fsp2.watch(absRoot, { recursive: true, signal: controller.signal });
       for await (const event of iter) {
@@ -24782,7 +25066,7 @@ async function startFileWatcher(opts = {}) {
 
 // app/lib/migrate-uploads.ts
 import { mkdir as mkdir5, readdir as readdir5, rename as rename2, rm as rm3 } from "fs/promises";
-import { dirname as dirname13, relative as relative6, resolve as resolve32 } from "path";
+import { dirname as dirname13, relative as relative6, resolve as resolve34 } from "path";
 var ACCOUNT_UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function walkFiles(dir) {
   const out = [];
@@ -24793,7 +25077,7 @@ async function walkFiles(dir) {
     return out;
   }
   for (const e of entries) {
-    const abs = resolve32(dir, e.name);
+    const abs = resolve34(dir, e.name);
     if (e.isDirectory()) {
       out.push(...await walkFiles(abs));
     } else if (e.isFile()) {
@@ -24813,7 +25097,7 @@ async function relocateTree(srcDir, destDir, dataRoot, accountId, session) {
   let moved = 0;
   for (const oldAbs of files) {
     const suffix = relative6(srcDir, oldAbs);
-    const newAbs = resolve32(destDir, suffix);
+    const newAbs = resolve34(destDir, suffix);
     await mkdir5(dirname13(newAbs), { recursive: true });
     await rename2(oldAbs, newAbs);
     moved++;
@@ -24840,7 +25124,7 @@ async function relocateTree(srcDir, destDir, dataRoot, accountId, session) {
 }
 async function migrateUploads(opts = {}) {
   const dataRoot = opts.dataRoot ?? DATA_ROOT;
-  const oldRoot = resolve32(dataRoot, "uploads");
+  const oldRoot = resolve34(dataRoot, "uploads");
   let topEntries;
   try {
     topEntries = await readdir5(oldRoot, { withFileTypes: true });
@@ -24861,8 +25145,8 @@ async function migrateUploads(opts = {}) {
       const name = entry.name;
       if (ACCOUNT_UUID_RE5.test(name)) {
         moved += await relocateTree(
-          resolve32(oldRoot, name),
-          resolve32(dataRoot, "accounts", name, "uploads"),
+          resolve34(oldRoot, name),
+          resolve34(dataRoot, "accounts", name, "uploads"),
           dataRoot,
           name,
           session
@@ -24874,8 +25158,8 @@ async function migrateUploads(opts = {}) {
           continue;
         }
         moved += await relocateTree(
-          resolve32(oldRoot, "public"),
-          resolve32(dataRoot, "accounts", installAccountId, "uploads", "public"),
+          resolve34(oldRoot, "public"),
+          resolve34(dataRoot, "accounts", installAccountId, "uploads", "public"),
           dataRoot,
           null,
           // public uploads carry no graph nodes
@@ -24906,7 +25190,7 @@ async function migrateUploads(opts = {}) {
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir6, readFile as readFile7, rename as rename3, writeFile as writeFile4, unlink as unlink3 } from "fs/promises";
 import { existsSync as existsSync36 } from "fs";
-import { join as join42 } from "path";
+import { join as join44 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -24951,7 +25235,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join42(projectsRoot, slug.name);
+    const slugDir = join44(projectsRoot, slug.name);
     let entries;
     try {
       entries = await readdir6(slugDir, { withFileTypes: true });
@@ -24960,9 +25244,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry of entries) {
       if (entry.isFile() && SESSION_META_RE.test(entry.name)) {
-        out.push(join42(slugDir, entry.name));
+        out.push(join44(slugDir, entry.name));
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join42(slugDir, entry.name);
+        const subDir = join44(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir6(subDir, { withFileTypes: true });
@@ -24970,7 +25254,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join42(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join44(subDir, s.name));
         }
       }
     }
@@ -24982,7 +25266,7 @@ function shortId(path3) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join42(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join44(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -25336,11 +25620,9 @@ function createWaChannelRoutes(deps) {
         void stream2.writeSSE({ data: JSON.stringify(payload) });
       });
       console.error(`[whatsapp-native] op=channel-attached senderId=${senderId}`);
-      deps.onAttached?.(senderId);
       stream2.onAbort(() => {
         deps.hub.detach(senderId);
         console.error(`[whatsapp-native] op=channel-detached senderId=${senderId}`);
-        deps.onDetached?.(senderId);
       });
       while (!stream2.aborted) {
         await stream2.sleep(15e3);
@@ -25481,31 +25763,16 @@ var WaGateway = class {
   docContexts = /* @__PURE__ */ new Map();
   spawning = /* @__PURE__ */ new Set();
   seq = 0;
-  /** Hono sub-app exposing the loopback channel routes; mount on the UI app. */
-  /** Task 1789 — senderId -> the ms at which its channel server last detached,
-   *  cleared on attach. The standing audit reads this; nothing else does. */
-  detachedAt = /* @__PURE__ */ new Map();
-  /** Seat lost. `atMs` is injected so the audit's accounting is testable. */
-  recordDetached(senderId, atMs) {
-    this.detachedAt.set(senderId, atMs);
-  }
-  /** Seat regained — the sender is no longer unseated. */
-  recordAttached(senderId) {
-    this.detachedAt.delete(senderId);
-  }
-  /** Senders with no channel server for longer than `olderThanMs`. */
-  unseatedSenders(nowMs, olderThanMs) {
-    const out = [];
-    for (const [senderId, sinceMs] of this.detachedAt) {
-      if (nowMs - sinceMs > olderThanMs) out.push({ senderId, sinceMs });
-    }
-    return out.sort((a, b) => a.senderId.localeCompare(b.senderId));
-  }
+  /** Hono sub-app exposing the loopback channel routes; mount on the UI app.
+   *  Task 1836 — the process-local unseated-sender census that used to live here
+   *  was retired. Its quiet state was ambiguous (a UI restart emptied it, so
+   *  silence meant "no detach seen since boot", not "every sender is seated") and
+   *  it grew unbounded. The genuine "no seat with pending work" signal is
+   *  InboundHub.sweep -> spawn-undelivered, which is driven by live queue state
+   *  and self-prunes. */
   routes() {
     return createWaChannelRoutes({
       hub: this.hub,
-      onAttached: (senderId) => this.recordAttached(senderId),
-      onDetached: (senderId) => this.recordDetached(senderId, Date.now()),
       sendOutbound: (senderId, text) => this.sendOutbound(senderId, text),
       sendDocument: (senderId, filePath, caption) => this.sendDocument(senderId, filePath, caption),
       onReady: (senderId) => {
@@ -25684,12 +25951,6 @@ function logDuplicateSenderGroups(groups) {
     );
   }
 }
-function logUnseatedSenders(entries, nowMs) {
-  for (const e of entries) {
-    const secs = Math.round((nowMs - e.sinceMs) / 1e3);
-    console.error(`[whatsapp-native] op=sender-unseated senderId=${e.senderId} since=${new Date(e.sinceMs).toISOString()} forSeconds=${secs}`);
-  }
-}
 
 // app/lib/whatsapp/gateway/spawn-request.ts
 function buildWaSpawnRequest(input) {
@@ -26045,16 +26306,16 @@ var WebchatGateway = class _WebchatGateway {
    *  The public /api/chat route awaits this to return the reply on the same SSE
    *  response, preserving the pre-756 POST→single-blob browser contract. */
   awaitReply(key, timeoutMs) {
-    return new Promise((resolve38) => {
+    return new Promise((resolve39) => {
       const timer = setTimeout(() => {
         this.replyAwaiters.delete(key);
-        resolve38({ timeout: true });
+        resolve39({ timeout: true });
       }, timeoutMs);
       if (timer.unref) timer.unref();
       this.replyAwaiters.set(key, (r) => {
         clearTimeout(timer);
         this.replyAwaiters.delete(key);
-        resolve38(r);
+        resolve39(r);
       });
     });
   }
@@ -26065,11 +26326,11 @@ var WebchatGateway = class _WebchatGateway {
    *  terminal dialog stays answerable). */
   awaitPermissionVerdict(p, timeoutMs) {
     const k = _WebchatGateway.promptKey(p.key, p.requestId);
-    return new Promise((resolve38) => {
+    return new Promise((resolve39) => {
       this.pendingPrompts.get(k)?.resolve({ timeout: true });
       const timer = setTimeout(() => {
         this.pendingPrompts.delete(k);
-        resolve38({ timeout: true });
+        resolve39({ timeout: true });
       }, timeoutMs);
       if (timer.unref) timer.unref();
       this.pendingPrompts.set(k, {
@@ -26078,7 +26339,7 @@ var WebchatGateway = class _WebchatGateway {
         resolve: (r) => {
           clearTimeout(timer);
           this.pendingPrompts.delete(k);
-          resolve38(r);
+          resolve39(r);
         }
       });
       console.error(`[webchat:perm] op=open key=${keyDisplay(p.key)} id=${p.requestId} tool=${p.toolName}`);
@@ -26643,7 +26904,7 @@ async function fanOut(subscribers, text, onError, tag) {
 
 // app/lib/webchat/file-delivery.ts
 import { realpathSync as realpathSync8 } from "fs";
-import { resolve as resolve33 } from "path";
+import { resolve as resolve35 } from "path";
 
 // app/lib/channel-pty-bridge/file-delivery.ts
 var SEND_USER_FILE = "SendUserFile";
@@ -26744,7 +27005,7 @@ function makeWebchatSendFile(entry) {
       console.error(`${TAG49} file-delivery reject reason=no-account sender=${entry.senderId}`);
       return { ok: false, error: "no-account" };
     }
-    const accountDir = resolve33(platformRoot2(), "..", "data/accounts", entry.accountId);
+    const accountDir = resolve35(platformRoot2(), "..", "data/accounts", entry.accountId);
     try {
       const resolved = realpathSync8(filePath);
       const accountResolved = realpathSync8(accountDir);
@@ -27311,7 +27572,7 @@ function buildTelegramSpawnRequest(input) {
 // app/lib/telegram/outbound/send-document.ts
 import { realpathSync as realpathSync9 } from "fs";
 import { readFile as readFile8, stat as stat8 } from "fs/promises";
-import { resolve as resolve34, basename as basename11 } from "path";
+import { resolve as resolve36, basename as basename11 } from "path";
 var TAG51 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
@@ -27322,7 +27583,7 @@ async function sendTelegramDocument(input) {
   if (!maxyAccountId || !platformRoot5) {
     return { ok: false, status: 400, error: "Cannot validate file path: missing account or platform context" };
   }
-  const accountDir = resolve34(platformRoot5, "..", "data/accounts", maxyAccountId);
+  const accountDir = resolve36(platformRoot5, "..", "data/accounts", maxyAccountId);
   let resolvedPath;
   try {
     resolvedPath = realpathSync9(filePath);
@@ -27448,15 +27709,6 @@ function startTelegramNativeFileFollower(input) {
   });
 }
 
-// server/telegram-descriptor.ts
-import { resolve as resolve35, join as join43 } from "path";
-function telegramGatewayUrl() {
-  return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
-}
-function telegramServerPath() {
-  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve35(process.env.MAXY_PLATFORM_ROOT ?? join43(__dirname, ".."), "services/telegram-channel/dist/server.js");
-}
-
 // app/lib/channel-pty-bridge/public-session-end-review.ts
 import { randomUUID as randomUUID16 } from "crypto";
 var TAG53 = "[public-session-review]";
@@ -27742,7 +27994,7 @@ function broadcastAdminShutdown(reason) {
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash6, verify as cryptoVerify } from "crypto";
 import { existsSync as existsSync37, readFileSync as readFileSync41, statSync as statSync16 } from "fs";
-import { resolve as resolve36 } from "path";
+import { resolve as resolve37 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
 function canonicalize(value) {
@@ -27777,7 +28029,7 @@ var PUBKEY_SHA256 = "8eee6bcb33545fd13b16d3199a5735ca5db5062834c7b49dfe4f23801d9
 var GRACE_DAYS = 7;
 var GRACE_MS = GRACE_DAYS * 24 * 60 * 60 * 1e3;
 function pubkeyPath(brand) {
-  return resolve36(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
+  return resolve37(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
 }
 var memo = null;
 function memoKey(mtimeMs, account) {
@@ -27789,7 +28041,7 @@ function resolveEntitlement(brand, account) {
   if (brand.commercialMode !== true) {
     return logResolved(implicitTrust(account), null);
   }
-  const entitlementPath = resolve36(brand.configDir, "entitlement.json");
+  const entitlementPath = resolve37(brand.configDir, "entitlement.json");
   if (!existsSync37(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
@@ -27981,7 +28233,7 @@ function clientFrom(c) {
 }
 installMediaDownloadGuard();
 var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT8 ? join44(PLATFORM_ROOT8, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT8 ? join45(PLATFORM_ROOT8, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync38(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
@@ -28020,7 +28272,7 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join44(homedir4(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join45(homedir4(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync38(ALIAS_DOMAINS_PATH)) return null;
@@ -28097,7 +28349,7 @@ var waGateway = new WaGateway({
   fetchStandingRules: fetchAccountStandingRules,
   resolveSessionOverride: (accountId, senderId) => resolveChannelOverride(accountId, "whatsapp", senderId),
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve37(process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve38(process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -28112,7 +28364,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve37(process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, ".."))
+      platformRoot: resolve38(process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -28226,7 +28478,7 @@ function runDuplicateSenderAudit() {
   try {
     const configDir2 = process.env.CLAUDE_CONFIG_DIR;
     if (!configDir2) return;
-    const projectsRoot = join44(configDir2, "projects");
+    const projectsRoot = join45(configDir2, "projects");
     const records = [];
     for (const { path: jsonlPath, isSubagent, archived } of enumerateJsonls(projectsRoot)) {
       if (isSubagent || archived) continue;
@@ -28236,8 +28488,6 @@ function runDuplicateSenderAudit() {
       records.push({ sessionId, channel: meta.channel, senderId: meta.senderId, accountId: meta.accountId });
     }
     logDuplicateSenderGroups(findDuplicateSenderGroups(records));
-    const now = Date.now();
-    logUnseatedSenders(waGateway.unseatedSenders(now, 15 * 6e4), now);
   } catch (err) {
     console.error(`[whatsapp-native] op=duplicate-sender-audit-error error=${err instanceof Error ? err.message : String(err)}`);
   }
@@ -28248,6 +28498,7 @@ registerLoop({
   firstRunDelayMs: 0,
   run: runDuplicateSenderAudit
 });
+console.log("[1789-sequel] op=cluster-complete items=[1835,1836,1837,1839]");
 var webchatGateway = new WebchatGateway({
   fetchStandingRules: fetchAccountStandingRules,
   gatewayUrl: webchatGatewayUrl(),
@@ -28789,8 +29040,8 @@ app64.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] no-account slug=${slug} file=${filename}`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve37(account.accountDir, "agents", slug, "assets", filename);
-  const expectedDir = resolve37(account.accountDir, "agents", slug, "assets");
+  const filePath = resolve38(account.accountDir, "agents", slug, "assets", filename);
+  const expectedDir = resolve38(account.accountDir, "agents", slug, "assets");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
@@ -28819,8 +29070,8 @@ app64.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve37(account.accountDir, "generated", filename);
-  const expectedDir = resolve37(account.accountDir, "generated");
+  const filePath = resolve38(account.accountDir, "generated", filename);
+  const expectedDir = resolve38(account.accountDir, "generated");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
@@ -28874,11 +29125,11 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 var brandThemeColor = BRAND.defaultColors?.primary ?? "#000000";
 var brandBackgroundColor = BRAND.defaultColors?.background ?? "#ffffff";
 var brandAppIconsExist = [brandAppIcon192Path, brandAppIcon512Path, brandMaskableIconPath].every(
-  (p) => existsSync38(resolve37(process.cwd(), "public", p.replace(/^\//, "")))
+  (p) => existsSync38(resolve38(process.cwd(), "public", p.replace(/^\//, "")))
 );
 var SW_SOURCE = (() => {
   try {
-    return readFileSync42(resolve37(process.cwd(), "public", "sw.js"), "utf-8");
+    return readFileSync42(resolve38(process.cwd(), "public", "sw.js"), "utf-8");
   } catch {
     return null;
   }
@@ -28886,7 +29137,7 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT8) return "unknown";
-    const versionFile = join44(PLATFORM_ROOT8, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join45(PLATFORM_ROOT8, "config", `.${BRAND.hostname}-version`);
     if (!existsSync38(versionFile)) return "unknown";
     const content = readFileSync42(versionFile, "utf-8").trim();
     return content || "unknown";
@@ -28929,7 +29180,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync42(resolve37(process.cwd(), "public", file), "utf-8");
+    html = readFileSync42(resolve38(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -28946,11 +29197,11 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir2 = join44(homedir4(), BRAND.configDir);
+  const configDir2 = join45(homedir4(), BRAND.configDir);
   try {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join44(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join45(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync38(cachePath)) return null;
     return JSON.parse(readFileSync42(cachePath, "utf-8"));
   } catch {
@@ -29047,7 +29298,7 @@ app64.use("/vnc-popout.html", logViewerFetch);
 app64.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync42(resolve37(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync42(resolve38(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -29184,8 +29435,8 @@ var hostname = process.env.HOSTNAME ?? "127.0.0.1";
 var httpServer = serve({ fetch: app64.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, "..");
-  const reconcileScript = resolve37(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, "..");
+  const reconcileScript = resolve38(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const RECONCILE_INTERVAL_MS = 12e4;
   const runReconcile = (ctx) => {
     if (!existsSync38(reconcileScript)) return;
@@ -29210,8 +29461,8 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, "..");
-  const outlookScript = resolve37(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
+  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, "..");
+  const outlookScript = resolve38(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
     if (!existsSync38(outlookScript)) return;
@@ -29236,8 +29487,8 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, "..");
-  const strandedAccountsDir = resolve37(auditRoot, "..", "data/accounts");
+  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, "..");
+  const strandedAccountsDir = resolve38(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
   const STRANDED_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -29247,7 +29498,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
       const now = Date.now();
       for (const name of readdirSync26(strandedAccountsDir)) {
         if (!STRANDED_UUID_RE.test(name)) continue;
-        const pendingPath2 = resolve37(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
+        const pendingPath2 = resolve38(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
         if (!existsSync38(pendingPath2)) continue;
         const ageMs = now - statSync17(pendingPath2).mtimeMs;
         if (ageMs > STRANDED_AGE_MS) {
@@ -29266,8 +29517,8 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, "..");
-  const googleAccountsDir = resolve37(googleRoot, "..", "data/accounts");
+  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, "..");
+  const googleAccountsDir = resolve38(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
     try {
@@ -29282,7 +29533,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     firstRunDelayMs: 27e3,
     run: runGooglePendingAuditSafe
   });
-  const googleAuditScript = resolve37(googleRoot, "plugins/google/mcp/dist/scripts/account-audit.js");
+  const googleAuditScript = resolve38(googleRoot, "plugins/google/mcp/dist/scripts/account-audit.js");
   const GOOGLE_ACCOUNT_AUDIT_INTERVAL_MS = 36e5;
   const runGoogleAccountAudit = (ctx) => {
     if (!existsSync38(googleAuditScript)) return;
@@ -29310,7 +29561,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, "..");
   const STORAGE_AUDIT_INTERVAL_MS = 3e5;
   const runStorageAuditSafe = () => runStorageAudit(auditPlatformRoot).catch((err) => {
     console.error(`[storage-audit] error="${err.message}"`);
@@ -29344,8 +29595,8 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, "..");
-  const publishScript = resolve37(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
+  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, "..");
+  const publishScript = resolve38(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const currentAccount = () => {
     try {
@@ -29375,7 +29626,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     }
   };
   const auditSnapshotAge = (account) => {
-    const availPath = resolve37(account.accountDir, "calendar-availability.json");
+    const availPath = resolve38(account.accountDir, "calendar-availability.json");
     let hasBookingSite = false;
     try {
       if (existsSync38(availPath)) {
@@ -29385,7 +29636,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     } catch {
     }
     if (!hasBookingSite) return;
-    const statePath = resolve37(account.accountDir, "state", "booking-availability", "last-publish.json");
+    const statePath = resolve38(account.accountDir, "state", "booking-availability", "last-publish.json");
     let lastSuccessAt = null;
     if (existsSync38(statePath)) {
       try {
@@ -29417,8 +29668,8 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startTimeEntryCensus(() => getSession());
 startLedgerCensus(() => getSession());
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, "..");
-  const auditScript = resolve37(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, "..");
+  const auditScript = resolve38(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
   const runConnectorAudit = (ctx) => {
@@ -29727,9 +29978,13 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve37(process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, "..")),
+  platformRoot: resolve38(process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
+    if (isObserveAccount(msg.accountId)) {
+      console.error(`[whatsapp:observe] op=BREACH account=${msg.accountId} sender=${msg.senderPhone} \u2014 dispatch reached the router from an observe socket`);
+      return;
+    }
     if (msg.isOwnerMirror) {
       console.error(`[whatsapp:route] skipped reason=owner-mirror senderId=${msg.senderPhone}`);
       return;