@rubytech/create-maxy-code 0.1.497 → 0.1.498

package/payload/server/server.js

@@ -7176,8 +7176,8 @@ function webchatTurnTimeoutMs() {
   return Number(process.env.WEBCHAT_TURN_TIMEOUT_MS ?? String(2 * 6e4));
 }
 function createChatRoutes(deps) {
-  const app65 = new Hono();
-  app65.post("/", async (c) => {
+  const app66 = new Hono();
+  app66.post("/", async (c) => {
     console.log(`[chat-route] entered route=public method=POST`);
     const contentType = c.req.header("content-type") ?? "";
     const account = resolveAccount();
@@ -7441,7 +7441,7 @@ ${result.result.text}` : result.result.text;
       }
     });
   });
-  return app65;
+  return app66;
 }
 
 // app/lib/channel-pty-bridge/admin-session-id.ts
@@ -7475,8 +7475,8 @@ function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
 function createScheduleInjectRoutes(deps) {
-  const app65 = new Hono();
-  app65.post("/", async (c) => {
+  const app66 = new Hono();
+  app66.post("/", async (c) => {
     const env = c.env;
     const remoteAddr = env?.incoming?.socket?.remoteAddress ?? "";
     if (!isLoopbackAddr(remoteAddr)) {
@@ -7577,7 +7577,7 @@ function createScheduleInjectRoutes(deps) {
     console.error(`${TAG20} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
     return c.json({ ok: true }, 200);
   });
-  return app65;
+  return app66;
 }
 
 // server/index.ts
@@ -8774,6 +8774,23 @@ function filterConversationsForSubAccount(conversations, managerPhones) {
   }
   return out;
 }
+function unionThread(a, b) {
+  const seen = /* @__PURE__ */ new Set();
+  const merged = [];
+  for (const rec of [...a, ...b]) {
+    if (seen.has(rec.messageId)) continue;
+    seen.add(rec.messageId);
+    merged.push(rec);
+  }
+  return merged.sort((x, y) => Date.parse(x.dateSent) - Date.parse(y.dateSent));
+}
+function unionConversationMaps(a, b) {
+  const out = /* @__PURE__ */ new Map();
+  for (const jid of /* @__PURE__ */ new Set([...a.keys(), ...b.keys()])) {
+    out.set(jid, unionThread(a.get(jid) ?? [], b.get(jid) ?? []));
+  }
+  return out;
+}
 
 // app/lib/whatsapp/authorize-recall-read.ts
 function authorizeRecallRead(input) {
@@ -9263,7 +9280,10 @@ app2.get("/conversations", (c) => {
     const projecting = projection.managerPhones != null;
     const managerPhonesBound = projection.managerPhones?.length ?? 0;
     const allConversations = readAllConversations(storeAccountId);
-    const scoped = projection.managerPhones ? filterConversationsForSubAccount(allConversations, projection.managerPhones) : allConversations;
+    const scoped = projection.managerPhones ? unionConversationMaps(
+      filterConversationsForSubAccount(allConversations, projection.managerPhones),
+      readAllConversations(resolveReadStoreKey(requestedAccountId))
+    ) : allConversations;
     const conversations = [...scoped.entries()].map(([jid, messages]) => {
       const last = messages.length > 0 ? messages[messages.length - 1] : null;
       return {
@@ -9302,12 +9322,20 @@ app2.get("/messages", (c) => {
       projection.managerPhones,
       conversationCounterpartyPhone(jid, storeMessages[0]?.senderTelephone ?? "")
     );
-    const bounded = counterpartyBound ? storeMessages : [];
+    const ownStoreAccountId = projecting ? resolveReadStoreKey(requestedAccountId) : storeAccountId;
+    const houseThread = counterpartyBound ? storeMessages : [];
+    const ownThread = projecting ? readConversation(ownStoreAccountId, jid) : [];
+    const sourceById = /* @__PURE__ */ new Map();
+    for (const m of houseThread) if (!sourceById.has(m.messageId)) sourceById.set(m.messageId, storeAccountId);
+    for (const m of ownThread) if (!sourceById.has(m.messageId)) sourceById.set(m.messageId, ownStoreAccountId);
+    const bounded = projecting ? unionThread(houseThread, ownThread) : houseThread;
     const limited = effectiveLimit ? bounded.slice(-effectiveLimit) : bounded;
-    const threadReactions = foldReactions(readReactions(storeAccountId, jid));
+    const threadReactions = foldReactions(
+      projecting ? [...readReactions(storeAccountId, jid), ...readReactions(ownStoreAccountId, jid)] : readReactions(storeAccountId, jid)
+    );
     let withAttachments = 0;
     const messages = limited.map((m) => {
-      const attachment = recallAttachment(storeAccountId, m.attachmentId);
+      const attachment = recallAttachment(sourceById.get(m.messageId) ?? storeAccountId, m.attachmentId);
       if (attachment) withAttachments += 1;
       const reactions = threadReactions.get(m.msgKeyId);
       return {
@@ -13791,8 +13819,8 @@ async function reapplyLeversViaManager() {
 var WEBCHAT_SEND_TURN_WINDOW_MS = Number(process.env.WEBCHAT_SEND_TURN_WINDOW_MS ?? String(15e3));
 var sendSeq = 0;
 function createWebchatRoutes(deps) {
-  const app65 = new Hono();
-  app65.post("/send", requireAdminSession, async (c) => {
+  const app66 = new Hono();
+  app66.post("/send", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -13995,7 +14023,7 @@ ${note}` : note;
     if (turnTimer.unref) turnTimer.unref();
     return c.json({ ok: true });
   });
-  app65.post("/interrupt", requireAdminSession, async (c) => {
+  app66.post("/interrupt", requireAdminSession, async (c) => {
     const cacheKey = c.get("cacheKey");
     const requesterUserId = (cacheKey ? getUserIdForSession(cacheKey) : void 0) ?? null;
     const primaryUserId = resolvePrimaryAdminUserId();
@@ -14023,7 +14051,7 @@ ${note}` : note;
     }
     return c.json({ ok: true, stopped: outcome.stopped, intId: outcome.intId, deadChild: outcome.deadChild }, 200);
   });
-  app65.post("/settings", requireAdminSession, async (c) => {
+  app66.post("/settings", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const op = body?.op;
     const value = body?.value;
@@ -14063,7 +14091,7 @@ ${note}` : note;
     console.log(`[webchat:settings] op=${op} outcome=accepted value=${value} settingsApplied=${settingsApplied}`);
     return c.json({ ok: true, settingsApplied });
   });
-  app65.get("/session", requireAdminSession, async (c) => {
+  app66.get("/session", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -14141,7 +14169,7 @@ ${note}` : note;
     const indicators = await fetchComposerIndicators(sessionId);
     return c.json({ sessionId, projectDir, source, sizeBytes: jsonlSizeBytes(projectDir, sessionId), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${sessionId}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${sessionId}`) ?? null, ...indicators, ...readLevers(account) });
   });
-  app65.post("/permission-verdict", requireAdminSession, async (c) => {
+  app66.post("/permission-verdict", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const sessionId = body?.sessionId;
     const requestId = body?.request_id;
@@ -14158,7 +14186,7 @@ ${note}` : note;
     const ok = deps.resolvePermissionVerdict?.(`session:${sessionId}`, requestId, behavior) ?? false;
     return c.json({ ok });
   });
-  return app65;
+  return app66;
 }
 
 // server/routes/webchat-greeting.ts
@@ -23530,6 +23558,161 @@ app46.get("/booking-link", requireAdminSession, (c) => {
 });
 var calendar_default = app46;
 
+// server/routes/admin/routines.ts
+import cronParser from "cron-parser";
+var { parseExpression } = cronParser;
+var app47 = new Hono();
+var AUTOMATION_WHERE = "(e.recurrence IS NOT NULL OR e.agentChannel IS NOT NULL OR e.actionPlugin IS NOT NULL)";
+var ROUTINE_COLS = `e.eventId AS eventId, e.name AS name, e.eventStatus AS eventStatus,
+  e.recurrence AS recurrence, e.nextRun AS nextRun, e.lastTriggered AS lastTriggered,
+  e.timezone AS timezone, e.startDate AS startDate,
+  e.agentChannel AS agentChannel, e.agentDestination AS agentDestination, e.agentPrompt AS agentPrompt,
+  e.actionPlugin AS actionPlugin, e.actionTool AS actionTool, e.actionArgs AS actionArgs,
+  e.notes AS notes, e.lastDispatchResult AS lastDispatchResult, e.lastDispatchAt AS lastDispatchAt`;
+function mapRoutine(r) {
+  const g = (k) => r.get(k) ?? null;
+  return {
+    eventId: g("eventId"),
+    name: g("name"),
+    eventStatus: g("eventStatus"),
+    recurrence: g("recurrence"),
+    nextRun: g("nextRun"),
+    lastTriggered: g("lastTriggered"),
+    timezone: g("timezone"),
+    startDate: g("startDate"),
+    agentChannel: g("agentChannel"),
+    agentDestination: g("agentDestination"),
+    agentPrompt: g("agentPrompt"),
+    actionPlugin: g("actionPlugin"),
+    actionTool: g("actionTool"),
+    actionArgs: g("actionArgs"),
+    notes: g("notes"),
+    lastDispatchResult: g("lastDispatchResult"),
+    lastDispatchAt: g("lastDispatchAt")
+  };
+}
+app47.get("/", requireAdminSession, async (c) => {
+  const accountId = getAccountIdForSession(c.var.cacheKey);
+  if (!accountId) {
+    console.error('[admin:routines] op=list auth-rejected reason="no account for session"');
+    return c.json({ error: "Account not found for session" }, 401);
+  }
+  const session = getSession();
+  try {
+    const res = await session.run(
+      `MATCH (e:Event {accountId: $accountId})
+       WHERE ${AUTOMATION_WHERE}
+       RETURN ${ROUTINE_COLS}
+       ORDER BY e.nextRun`,
+      { accountId }
+    );
+    const routines = res.records.map(mapRoutine);
+    console.log(`[admin:routines] op=list accountId=${accountId.slice(0, 8)} count=${routines.length}`);
+    return c.json({ routines });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`[admin:routines] op=list-fail err="${message}"`);
+    return c.json({ error: `Routines unavailable: ${message}` }, 503);
+  } finally {
+    await session.close();
+  }
+});
+app47.get("/:eventId", requireAdminSession, async (c) => {
+  const accountId = getAccountIdForSession(c.var.cacheKey);
+  if (!accountId) return c.json({ error: "Account not found for session" }, 401);
+  const eventId = c.req.param("eventId");
+  const session = getSession();
+  try {
+    const res = await session.run(
+      `MATCH (e:Event {eventId: $eventId, accountId: $accountId})
+       WHERE ${AUTOMATION_WHERE}
+       RETURN ${ROUTINE_COLS}`,
+      { eventId, accountId }
+    );
+    const found = res.records.length > 0;
+    console.log(`[admin:routines] op=get id=${eventId.slice(0, 8)} found=${found}`);
+    if (!found) return c.json({ error: "Routine not found" }, 404);
+    return c.json({ routine: mapRoutine(res.records[0]) });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`[admin:routines] op=get-fail id=${eventId.slice(0, 8)} err="${message}"`);
+    return c.json({ error: `Routine unavailable: ${message}` }, 503);
+  } finally {
+    await session.close();
+  }
+});
+app47.patch("/:eventId", requireAdminSession, async (c) => {
+  const accountId = getAccountIdForSession(c.var.cacheKey);
+  if (!accountId) return c.json({ error: "Account not found for session" }, 401);
+  const eventId = c.req.param("eventId");
+  const body = await c.req.json().catch(() => ({}));
+  const setClauses = [];
+  const params = { eventId, accountId };
+  const fields = [];
+  let nextRunLog = "unchanged";
+  if (typeof body.agentPrompt === "string") {
+    setClauses.push("e.agentPrompt = $agentPrompt");
+    params.agentPrompt = body.agentPrompt;
+    fields.push("agentPrompt");
+  }
+  if (typeof body.recurrence === "string") {
+    const tzSession = getSession();
+    let timezone = null;
+    try {
+      const tzRes = await tzSession.run(
+        `MATCH (e:Event {eventId: $eventId, accountId: $accountId}) RETURN e.timezone AS timezone`,
+        { eventId, accountId }
+      );
+      timezone = tzRes.records[0]?.get("timezone") ?? null;
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      console.error(`[admin:routines] op=patch id=${eventId.slice(0, 8)} outcome=rejected reason=tz-read-fail err="${message}"`);
+      return c.json({ error: `Routine unavailable: ${message}` }, 503);
+    } finally {
+      await tzSession.close();
+    }
+    try {
+      const interval = parseExpression(body.recurrence, { currentDate: /* @__PURE__ */ new Date(), tz: timezone ?? void 0 });
+      const nextRun = interval.next().toISOString();
+      setClauses.push("e.recurrence = $recurrence", "e.nextRun = $nextRun");
+      params.recurrence = body.recurrence;
+      params.nextRun = nextRun;
+      fields.push("recurrence");
+      nextRunLog = nextRun;
+    } catch (err) {
+      const reason = err instanceof Error ? err.message : String(err);
+      console.error(`[admin:routines] op=patch id=${eventId.slice(0, 8)} outcome=rejected reason=invalid-cron cron=${body.recurrence}`);
+      return c.json({ error: `Invalid recurrence: ${reason}` }, 400);
+    }
+  }
+  if (setClauses.length === 0) return c.json({ error: "No editable fields supplied" }, 400);
+  setClauses.push("e.updatedAt = $updatedAt");
+  params.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const session = getSession();
+  try {
+    const res = await session.run(
+      `MATCH (e:Event {eventId: $eventId, accountId: $accountId})
+       WHERE ${AUTOMATION_WHERE}
+       SET ${setClauses.join(", ")}
+       RETURN ${ROUTINE_COLS}`,
+      params
+    );
+    if (res.records.length === 0) {
+      console.error(`[admin:routines] op=patch id=${eventId.slice(0, 8)} outcome=rejected reason=not-found`);
+      return c.json({ error: "Routine not found" }, 404);
+    }
+    console.log(`[admin:routines] op=patch id=${eventId.slice(0, 8)} fields=${fields.join("+")} outcome=ok nextRun=${nextRunLog} cron=${params.recurrence ?? "unchanged"}`);
+    return c.json({ routine: mapRoutine(res.records[0]) });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`[admin:routines] op=patch id=${eventId.slice(0, 8)} outcome=rejected reason=${message}`);
+    return c.json({ error: `Update failed: ${message}` }, 503);
+  } finally {
+    await session.close();
+  }
+});
+var routines_default = app47;
+
 // app/lib/time-entry-format.ts
 function secondsBetween(startIso, endIso) {
   const s = Date.parse(startIso);
@@ -23551,8 +23734,8 @@ function toNum(v) {
 var TAG39 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
-var app47 = new Hono();
-app47.get("/", requireAdminSession, async (c) => {
+var app48 = new Hono();
+app48.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -23639,13 +23822,13 @@ app47.get("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var tasks_list_default = app47;
+var tasks_list_default = app48;
 
 // server/routes/admin/task-timer-start.ts
 import { randomUUID as randomUUID14 } from "crypto";
 var TAG40 = "[task-timer]";
-var app48 = new Hono();
-app48.post("/", requireAdminSession, async (c) => {
+var app49 = new Hono();
+app49.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -23700,13 +23883,13 @@ app48.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_timer_start_default = app48;
+var task_timer_start_default = app49;
 
 // server/routes/admin/task-timer-stop.ts
 import neo4j5 from "neo4j-driver";
 var TAG41 = "[task-timer]";
-var app49 = new Hono();
-app49.post("/", requireAdminSession, async (c) => {
+var app50 = new Hono();
+app50.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -23773,12 +23956,12 @@ app49.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_timer_stop_default = app49;
+var task_timer_stop_default = app50;
 
 // server/routes/admin/task-complete.ts
 var TAG42 = "[task-timer]";
-var app50 = new Hono();
-app50.post("/", requireAdminSession, async (c) => {
+var app51 = new Hono();
+app51.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -23816,14 +23999,14 @@ app50.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_complete_default = app50;
+var task_complete_default = app51;
 
 // server/routes/admin/task-time-adjust.ts
 import { randomUUID as randomUUID15 } from "crypto";
 import neo4j6 from "neo4j-driver";
 var TAG43 = "[task-time-adjust]";
-var app51 = new Hono();
-app51.post("/", requireAdminSession, async (c) => {
+var app52 = new Hono();
+app52.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -23897,11 +24080,11 @@ app51.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_time_adjust_default = app51;
+var task_time_adjust_default = app52;
 
 // server/routes/admin/activity.ts
 import { readdirSync as readdirSync24 } from "fs";
-var app52 = new Hono();
+var app53 = new Hono();
 var TAG44 = "[activity]";
 function resolveHouseAccountId(accounts) {
   const houses = accounts.filter((a) => a.config.role === "house");
@@ -23923,7 +24106,7 @@ function countAccountDirsOnDisk() {
     return null;
   }
 }
-app52.get("/", requireAdminSession, async (c) => {
+app53.get("/", requireAdminSession, async (c) => {
   const req = requestToken();
   const cacheKey = c.var.cacheKey;
   const caller2 = getAccountIdForSession(cacheKey) ?? null;
@@ -24032,60 +24215,61 @@ app52.get("/", requireAdminSession, async (c) => {
     }
   });
 });
-var activity_default = app52;
+var activity_default = app53;
 
 // server/routes/admin/index.ts
-var app53 = new Hono();
-app53.route("/session", session_default);
-app53.route("/accounts", accounts_default);
-app53.route("/logs", logs_default);
-app53.route("/claude-info", claude_info_default);
-app53.route("/attachment", attachment_default);
-app53.route("/agents", agents_default);
-app53.route("/sessions", sessions_default);
-app53.route("/claude-sessions", claude_sessions_default);
-app53.route("/log-ingest", log_ingest_default);
-app53.route("/events", events_default);
-app53.route("/files", files_default);
-app53.route("/graph-search", graph_search_default);
-app53.route("/graph-subgraph", graph_subgraph_default);
-app53.route("/graph-delete", graph_delete_default);
-app53.route("/graph-restore", graph_restore_default);
-app53.route("/graph-labels-in-graph", graph_labels_in_graph_default);
-app53.route("/graph-default-view", graph_default_view_default);
-app53.route("/sidebar-artefacts", sidebar_artefacts_default);
-app53.route("/sidebar-sessions", sidebar_sessions_default);
-app53.route("/session-delete", session_delete_default);
-app53.route("/session-stop", session_stop_default);
-app53.route("/session-archive", session_archive_default);
-app53.route("/session-rename", session_rename_default);
-app53.route("/session-usage", session_usage_default);
-app53.route("/browser", browser_default);
-app53.route("/session-rc-spawn", session_rc_spawn_default);
-app53.route("/session-reseat", session_reseat_default);
-app53.route("/system-stats", system_stats_default);
-app53.route("/health-brand", health_default2);
-app53.route("/linkedin-ingest", linkedin_ingest_default);
-app53.route("/post-turn-context", post_turn_context_default);
-app53.route("/public-session-context", public_session_context_default);
-app53.route("/public-session-exit", public_session_exit_default);
-app53.route("/access-session-evict", access_session_evict_default);
-app53.route("/enrol-person", enrol_person_default);
-app53.route("/calendar", calendar_default);
-app53.route("/tasks-list", tasks_list_default);
-app53.route("/task-timer-start", task_timer_start_default);
-app53.route("/task-timer-stop", task_timer_stop_default);
-app53.route("/task-complete", task_complete_default);
-app53.route("/task-time-adjust", task_time_adjust_default);
-app53.route("/activity", activity_default);
-var admin_default = app53;
+var app54 = new Hono();
+app54.route("/session", session_default);
+app54.route("/accounts", accounts_default);
+app54.route("/logs", logs_default);
+app54.route("/claude-info", claude_info_default);
+app54.route("/attachment", attachment_default);
+app54.route("/agents", agents_default);
+app54.route("/sessions", sessions_default);
+app54.route("/claude-sessions", claude_sessions_default);
+app54.route("/log-ingest", log_ingest_default);
+app54.route("/events", events_default);
+app54.route("/files", files_default);
+app54.route("/graph-search", graph_search_default);
+app54.route("/graph-subgraph", graph_subgraph_default);
+app54.route("/graph-delete", graph_delete_default);
+app54.route("/graph-restore", graph_restore_default);
+app54.route("/graph-labels-in-graph", graph_labels_in_graph_default);
+app54.route("/graph-default-view", graph_default_view_default);
+app54.route("/sidebar-artefacts", sidebar_artefacts_default);
+app54.route("/sidebar-sessions", sidebar_sessions_default);
+app54.route("/session-delete", session_delete_default);
+app54.route("/session-stop", session_stop_default);
+app54.route("/session-archive", session_archive_default);
+app54.route("/session-rename", session_rename_default);
+app54.route("/session-usage", session_usage_default);
+app54.route("/browser", browser_default);
+app54.route("/session-rc-spawn", session_rc_spawn_default);
+app54.route("/session-reseat", session_reseat_default);
+app54.route("/system-stats", system_stats_default);
+app54.route("/health-brand", health_default2);
+app54.route("/linkedin-ingest", linkedin_ingest_default);
+app54.route("/post-turn-context", post_turn_context_default);
+app54.route("/public-session-context", public_session_context_default);
+app54.route("/public-session-exit", public_session_exit_default);
+app54.route("/access-session-evict", access_session_evict_default);
+app54.route("/enrol-person", enrol_person_default);
+app54.route("/calendar", calendar_default);
+app54.route("/routines", routines_default);
+app54.route("/tasks-list", tasks_list_default);
+app54.route("/task-timer-start", task_timer_start_default);
+app54.route("/task-timer-stop", task_timer_stop_default);
+app54.route("/task-complete", task_complete_default);
+app54.route("/task-time-adjust", task_time_adjust_default);
+app54.route("/activity", activity_default);
+var admin_default = app54;
 
 // server/routes/access/verify-token.ts
 var TAG45 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
-var app54 = new Hono();
-app54.post("/", async (c) => {
+var app55 = new Hono();
+app55.post("/", async (c) => {
   const ip = c.var.clientIp || "unknown";
   let body;
   try {
@@ -24167,7 +24351,7 @@ app54.post("/", async (c) => {
     displayName: grant.displayName
   });
 });
-var verify_token_default = app54;
+var verify_token_default = app55;
 
 // app/lib/access-email.ts
 import { spawn as spawn2 } from "child_process";
@@ -24230,9 +24414,9 @@ async function sendMagicLinkEmail(payload) {
 
 // server/routes/access/request-magic-link.ts
 var TAG46 = "[access-request-link]";
-var app55 = new Hono();
+var app56 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
-app55.post("/", async (c) => {
+app56.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24306,13 +24490,13 @@ app55.post("/", async (c) => {
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
-var request_magic_link_default = app55;
+var request_magic_link_default = app56;
 
 // server/routes/access/index.ts
-var app56 = new Hono();
-app56.route("/verify-token", verify_token_default);
-app56.route("/request-magic-link", request_magic_link_default);
-var access_default = app56;
+var app57 = new Hono();
+app57.route("/verify-token", verify_token_default);
+app57.route("/request-magic-link", request_magic_link_default);
+var access_default = app57;
 
 // server/routes/sites.ts
 import { existsSync as existsSync36, readFileSync as readFileSync39, realpathSync as realpathSync7, statSync as statSync14 } from "fs";
@@ -24347,8 +24531,8 @@ function getExt(p) {
   if (idx < p.lastIndexOf("/")) return "";
   return p.slice(idx).toLowerCase();
 }
-var app57 = new Hono();
-app57.get("/:rel{.*}", (c) => {
+var app58 = new Hono();
+app58.get("/:rel{.*}", (c) => {
   const reqPath = c.req.path;
   const rawRel = c.req.param("rel") ?? "";
   const trimmed = rawRel.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -24451,7 +24635,7 @@ app57.get("/:rel{.*}", (c) => {
     "X-Content-Type-Options": "nosniff"
   });
 });
-var sites_default = app57;
+var sites_default = app58;
 
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
@@ -24551,7 +24735,7 @@ function readBrandConfig() {
 }
 
 // server/routes/visitor-consent.ts
-var app58 = new Hono();
+var app59 = new Hono();
 var CONSENT_COOKIE_NAME = "mxy_consent";
 var CONSENT_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
 var DEFAULT_CONSENT_COPY = {
@@ -24596,17 +24780,17 @@ function siteSlugFromReferer(referer) {
     return "";
   }
 }
-app58.options("/consent", (c) => {
+app59.options("/consent", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app58.options("/brand-config", (c) => {
+app59.options("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app58.post("/consent", async (c) => {
+app59.post("/consent", async (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   let raw;
@@ -24646,7 +24830,7 @@ app58.post("/consent", async (c) => {
   console.log(`[consent] ${parsed.decision} site=${site} brand=${brandName} tokenBound=${tokenBound}`);
   return c.body(null, 204);
 });
-app58.get("/brand-config", (c) => {
+app59.get("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   const brand = readBrandConfig();
@@ -24656,7 +24840,7 @@ app58.get("/brand-config", (c) => {
   c.header("Cache-Control", "public, max-age=300");
   return c.json({ consent: { copy, palette } });
 });
-var visitor_consent_default = app58;
+var visitor_consent_default = app59;
 
 // server/routes/listings.ts
 function getCookie(headerValue, name) {
@@ -24683,8 +24867,8 @@ function appendConsentParams(pageUrl, token) {
 }
 var SAFE_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,118}[a-z0-9])?$/;
 var CHAT_SESSION_KEY_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var app59 = new Hono();
-app59.get("/:slug/click", async (c) => {
+var app60 = new Hono();
+app60.get("/:slug/click", async (c) => {
   const slug = c.req.param("slug") ?? "";
   const rawSession = c.req.query("session") ?? "";
   const sessionKey = CHAT_SESSION_KEY_RE.test(rawSession) ? rawSession : "invalid";
@@ -24748,10 +24932,10 @@ app59.get("/:slug/click", async (c) => {
   console.log(`[property-card-click] sessionKey=${sessionKey} listingSlug=${slug} consent=${consentCookie ?? "absent"} ts=${(/* @__PURE__ */ new Date()).toISOString()}`);
   return c.redirect(redirectUrl, 302);
 });
-var listings_default = app59;
+var listings_default = app60;
 
 // server/routes/visitor-event.ts
-var app60 = new Hono();
+var app61 = new Hono();
 var BOT_UA_RE = /\b(bot|crawl|spider|slurp|headlesschrome|phantomjs|googlebot|bingbot|yandex|baiduspider|ahrefsbot|semrushbot|mj12bot|dotbot|petalbot)\b/i;
 var buckets = /* @__PURE__ */ new Map();
 var RATE_LIMIT = 60;
@@ -24827,12 +25011,12 @@ function originAllowed(origin, allowlist) {
     return false;
   }
 }
-app60.options("/event", (c) => {
+app61.options("/event", (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   return c.body(null, 204);
 });
-app60.post("/event", async (c) => {
+app61.post("/event", async (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   const ua = c.req.header("user-agent") ?? "";
@@ -25037,7 +25221,7 @@ async function writeEvent(opts) {
     );
   }
 }
-var visitor_event_default = app60;
+var visitor_event_default = app61;
 
 // server/routes/session.ts
 import { resolve as resolve33 } from "path";
@@ -25083,8 +25267,8 @@ function withVisitorCookie(response, visitorId) {
     headers
   });
 }
-var app61 = new Hono();
-app61.post("/", async (c) => {
+var app62 = new Hono();
+app62.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -25231,7 +25415,7 @@ app61.post("/", async (c) => {
     newVisitorId
   );
 });
-var session_default2 = app61;
+var session_default2 = app62;
 
 // server/lib/calendar-slots.ts
 var WEEKDAYS = ["sun", "mon", "tue", "wed", "thu", "fri", "sat"];
@@ -25314,17 +25498,17 @@ function computeOpenSlots(config, busy, fromISO, toISO) {
 }
 
 // server/routes/calendar-public.ts
-var app62 = new Hono();
+var app63 = new Hono();
 function setCors(c) {
   c.header("Access-Control-Allow-Origin", "*");
   c.header("Access-Control-Allow-Methods", "GET, OPTIONS");
   c.header("Access-Control-Allow-Headers", "content-type");
 }
-app62.options("/free-busy", (c) => {
+app63.options("/free-busy", (c) => {
   setCors(c);
   return c.body(null, 204);
 });
-app62.get("/free-busy", async (c) => {
+app63.get("/free-busy", async (c) => {
   setCors(c);
   const from = c.req.query("from");
   const to = c.req.query("to");
@@ -25380,14 +25564,14 @@ app62.get("/free-busy", async (c) => {
     await session.close();
   }
 });
-var calendar_public_default = app62;
+var calendar_public_default = app63;
 
 // server/routes/portal-fetch.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat8, readFile as readFile8, realpath } from "fs/promises";
 import { join as join44, resolve as resolve34, sep as sep9 } from "path";
 import { Readable as Readable3 } from "stream";
-var app63 = new Hono();
+var app64 = new Hono();
 var TAG47 = "[portal-fetch]";
 async function verifySignature(secret, accountId, relPath, expiresAtMs, signature, nowMs) {
   if (!secret || !signature) return false;
@@ -25550,9 +25734,9 @@ async function handle(c, headOnly) {
     }
   });
 }
-app63.get("/fetch", (c) => handle(c, false));
-app63.on("HEAD", "/fetch", (c) => handle(c, true));
-var portal_fetch_default = app63;
+app64.get("/fetch", (c) => handle(c, false));
+app64.on("HEAD", "/fetch", (c) => handle(c, true));
+var portal_fetch_default = app64;
 
 // app/lib/timeentry-census.ts
 var TAG48 = "[timeentry-census]";
@@ -26612,8 +26796,8 @@ var streamSSE = (c, cb, onError) => {
 
 // app/lib/whatsapp/gateway/routes.ts
 function createWaChannelRoutes(deps) {
-  const app65 = new Hono();
-  app65.get("/wa-channel/inbound", (c) => {
+  const app66 = new Hono();
+  app66.get("/wa-channel/inbound", (c) => {
     const senderId = c.req.query("senderId");
     if (!senderId) return c.json({ error: "senderId required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -26631,7 +26815,7 @@ function createWaChannelRoutes(deps) {
       }
     });
   });
-  app65.post("/wa-channel/reply", async (c) => {
+  app66.post("/wa-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const text = body?.text;
@@ -26652,7 +26836,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
     return c.json({ ok: true });
   });
-  app65.post("/wa-channel/reply-document", async (c) => {
+  app66.post("/wa-channel/reply-document", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const files = body?.files;
@@ -26691,7 +26875,7 @@ function createWaChannelRoutes(deps) {
     }
     return c.json({ ok: true, results });
   });
-  app65.post("/wa-channel/ready", async (c) => {
+  app66.post("/wa-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     if (typeof senderId !== "string") {
@@ -26700,7 +26884,7 @@ function createWaChannelRoutes(deps) {
     deps.onReady?.(senderId);
     return c.json({ ok: true });
   });
-  app65.post("/wa-channel/received", async (c) => {
+  app66.post("/wa-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const waMessageId = body?.waMessageId;
@@ -26710,7 +26894,7 @@ function createWaChannelRoutes(deps) {
     deps.onReceived?.(senderId, waMessageId);
     return c.json({ ok: true });
   });
-  app65.post("/wa-channel/turn-end", async (c) => {
+  app66.post("/wa-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const sessionId = body?.sessionId;
@@ -26743,7 +26927,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=turn-end sessionId=${sid} replied=no delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app65;
+  return app66;
 }
 
 // app/lib/whatsapp/gateway/wa-gateway.ts
@@ -27161,8 +27345,8 @@ var import_dist8 = __toESM(require_dist(), 1);
 
 // app/lib/webchat/gateway/routes.ts
 function createWebchatChannelRoutes(deps) {
-  const app65 = new Hono();
-  app65.get("/webchat-channel/inbound", (c) => {
+  const app66 = new Hono();
+  app66.get("/webchat-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -27180,7 +27364,7 @@ function createWebchatChannelRoutes(deps) {
       }
     });
   });
-  app65.post("/webchat-channel/reply", async (c) => {
+  app66.post("/webchat-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -27190,7 +27374,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReply?.(key, text);
     return c.json({ ok: true });
   });
-  app65.post("/webchat-channel/connector-auth", async (c) => {
+  app66.post("/webchat-channel/connector-auth", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -27203,7 +27387,7 @@ function createWebchatChannelRoutes(deps) {
     const result = await deps.onConnectorAuth({ key, sessionId, name, completed });
     return c.json(result);
   });
-  app65.post("/webchat-channel/ready", async (c) => {
+  app66.post("/webchat-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -27212,7 +27396,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app65.post("/webchat-channel/permission-request", async (c) => {
+  app66.post("/webchat-channel/permission-request", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const requestId = body?.request_id;
@@ -27226,7 +27410,7 @@ function createWebchatChannelRoutes(deps) {
     const verdict = await deps.awaitPermissionVerdict({ key, requestId, toolName, description, inputPreview });
     return c.json(verdict);
   });
-  app65.post("/webchat-channel/received", async (c) => {
+  app66.post("/webchat-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -27236,7 +27420,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app65.post("/webchat-channel/turn-end", async (c) => {
+  app66.post("/webchat-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -27259,7 +27443,7 @@ function createWebchatChannelRoutes(deps) {
     console.error(`[webchat-native] op=turn-end channel=webchat key=${k} sessionId=${sid} replied=no delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app65;
+  return app66;
 }
 
 // app/lib/webchat/gateway/webchat-gateway.ts
@@ -28346,8 +28530,8 @@ var import_dist9 = __toESM(require_dist(), 1);
 
 // app/lib/telegram/gateway/routes.ts
 function createTelegramChannelRoutes(deps) {
-  const app65 = new Hono();
-  app65.get("/tg-channel/inbound", (c) => {
+  const app66 = new Hono();
+  app66.get("/tg-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -28365,7 +28549,7 @@ function createTelegramChannelRoutes(deps) {
       }
     });
   });
-  app65.post("/tg-channel/reply", async (c) => {
+  app66.post("/tg-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -28381,7 +28565,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=reply key=${key} bytes=${Buffer.byteLength(text, "utf8")}`);
     return c.json({ ok: true });
   });
-  app65.post("/tg-channel/ready", async (c) => {
+  app66.post("/tg-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -28390,7 +28574,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app65.post("/tg-channel/received", async (c) => {
+  app66.post("/tg-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -28400,7 +28584,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app65.post("/tg-channel/turn-end", async (c) => {
+  app66.post("/tg-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -28433,7 +28617,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=turn-end key=${key} sessionId=${sid} replied=no delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app65;
+  return app66;
 }
 
 // app/lib/telegram/gateway/telegram-gateway.ts
@@ -29338,7 +29522,7 @@ watchFile(ALIAS_DOMAINS_PATH, { interval: 2e3 }, () => {
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
-var app64 = new Hono();
+var app65 = new Hono();
 function resolveChannelOverride(accountId, channel, senderId) {
   try {
     const dir = listValidAccounts().find((a) => a.accountId === accountId)?.accountDir;
@@ -29514,7 +29698,7 @@ var waGateway = new WaGateway({
     nativeFileFollowers.set(senderId, ac);
   }
 });
-app64.route("/", waGateway.routes());
+app65.route("/", waGateway.routes());
 waGateway.startSweeper();
 function runDuplicateSenderAudit() {
   try {
@@ -29637,7 +29821,7 @@ var webchatGateway = new WebchatGateway({
   firePublicSessionEndReview: (input) => firePublicSessionEndReview(input)
 });
 setWebchatGateway(webchatGateway);
-app64.route("/", webchatGateway.routes());
+app65.route("/", webchatGateway.routes());
 webchatGateway.startSweeper();
 webchatGateway.startPublicReaper();
 var telegramFileFollowers = /* @__PURE__ */ new Map();
@@ -29681,7 +29865,7 @@ var telegramGateway = new TelegramGateway({
   }
 });
 setTelegramGateway(telegramGateway);
-app64.route("/", telegramGateway.routes());
+app65.route("/", telegramGateway.routes());
 telegramGateway.startSweeper();
 var chatRoutes = createChatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
@@ -29715,19 +29899,19 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
     return managed.account;
   }
 });
-app64.route("/api/channel/schedule-inject", scheduleInjectRoutes);
-app64.use("*", clientIpMiddleware);
+app65.route("/api/channel/schedule-inject", scheduleInjectRoutes);
+app65.use("*", clientIpMiddleware);
 function allowsSameOriginFraming(path3) {
   return path3 === "/vnc-viewer.html" || path3.startsWith("/api/admin/attachment/") || path3.startsWith("/api/public-reader/attachment/") || path3 === "/api/admin/files/download";
 }
-app64.use("*", async (c, next) => {
+app65.use("*", async (c, next) => {
   await next();
   c.header("X-Content-Type-Options", "nosniff");
   c.header("Referrer-Policy", "strict-origin-when-cross-origin");
   c.header("X-Frame-Options", allowsSameOriginFraming(c.req.path) ? "SAMEORIGIN" : "DENY");
 });
 var HTTP_LOG_PATHS = /* @__PURE__ */ new Set(["/vnc-viewer.html", "/vnc-popout.html"]);
-app64.use("*", async (c, next) => {
+app65.use("*", async (c, next) => {
   if (!HTTP_LOG_PATHS.has(c.req.path)) {
     await next();
     return;
@@ -29745,7 +29929,7 @@ app64.use("*", async (c, next) => {
     });
   }
 });
-app64.use("*", async (c, next) => {
+app65.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains()) || !isPublicHost(host)) {
     await next();
@@ -29783,7 +29967,7 @@ function resolveRemoteAuthOpts(c) {
   return { ...brandLoginOpts, origin };
 }
 var MAX_LOGIN_BODY = 8 * 1024;
-app64.post("/__remote-auth/login", async (c) => {
+app65.post("/__remote-auth/login", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   if (!requestIsTlsTerminated(c)) {
@@ -29828,7 +30012,7 @@ app64.post("/__remote-auth/login", async (c) => {
     }
   });
 });
-app64.get("/__remote-auth/logout", (c) => {
+app65.get("/__remote-auth/logout", (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   console.error(`[remote-auth] logout ip=${clientIp}`);
@@ -29841,7 +30025,7 @@ app64.get("/__remote-auth/logout", (c) => {
     }
   });
 });
-app64.post("/__remote-auth/change-password", async (c) => {
+app65.post("/__remote-auth/change-password", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   const rateLimited = checkRateLimit(client);
@@ -29900,13 +30084,13 @@ app64.post("/__remote-auth/change-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "change", changeError: "Failed to save password", redirect }), 200);
   }
 });
-app64.get("/__remote-auth/setup", (c) => {
+app65.get("/__remote-auth/setup", (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup" }), 200);
 });
-app64.post("/__remote-auth/set-initial-password", async (c) => {
+app65.post("/__remote-auth/set-initial-password", async (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
@@ -29944,10 +30128,10 @@ app64.post("/__remote-auth/set-initial-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup", setupError: "Failed to save password. Please try again." }), 200);
   }
 });
-app64.get("/api/remote-auth/status", (c) => {
+app65.get("/api/remote-auth/status", (c) => {
   return c.json({ configured: isRemoteAuthConfigured() });
 });
-app64.post("/api/remote-auth/set-password", async (c) => {
+app65.post("/api/remote-auth/set-password", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -29986,10 +30170,10 @@ app64.post("/api/remote-auth/set-password", async (c) => {
     return c.json({ error: "Failed to save password" }, 500);
   }
 });
-app64.route("/api/_client-error", client_error_default);
+app65.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
 var PWA_PUBLIC_PATHS = /* @__PURE__ */ new Set(["/sw.js", ...PWA_SURFACES.map((s) => s.manifestPath)]);
-app64.use("*", async (c, next) => {
+app65.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path3 = c.req.path;
   if (path3 === "/favicon.ico" || path3.startsWith("/assets/") || path3.startsWith("/brand/") || // Public free/busy is read by the booking page (a separate Cloudflare Pages
@@ -30033,28 +30217,28 @@ app64.use("*", async (c, next) => {
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), redirect: path3 }), 200);
 });
-app64.route("/api/health", health_default);
-app64.route("/api/chat", chatRoutes);
-app64.route("/api/whatsapp", whatsapp_default);
-app64.route("/api/storage", storage_broker_default);
-app64.route("/api/whatsapp-reader", whatsapp_reader_default);
-app64.route("/api/public-reader", public_reader_default);
-app64.route("/api/webchat", createWebchatRoutes({
+app65.route("/api/health", health_default);
+app65.route("/api/chat", chatRoutes);
+app65.route("/api/whatsapp", whatsapp_default);
+app65.route("/api/storage", storage_broker_default);
+app65.route("/api/whatsapp-reader", whatsapp_reader_default);
+app65.route("/api/public-reader", public_reader_default);
+app65.route("/api/webchat", createWebchatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
   // Task 940 — the permission relay's pointer read + verdict write.
   pendingPromptFor: (key) => webchatGateway.pendingPromptFor(key),
   deliveryFailureFor: (key) => webchatGateway.deliveryFailureFor(key),
   resolvePermissionVerdict: (key, requestId, behavior) => webchatGateway.resolvePermissionVerdict(key, requestId, behavior)
 }));
-app64.route("/api/webchat/greeting", webchat_greeting_default);
-app64.route("/api/telegram", telegram_default);
-app64.route("/api/quickbooks", quickbooks_default);
-app64.route("/api/onboarding", onboarding_default);
-app64.route("/api/admin", admin_default);
-app64.route("/api/access", access_default);
-app64.route("/api/session", session_default2);
-app64.route("/api/calendar", calendar_public_default);
-app64.route("/api/portal", portal_fetch_default);
+app65.route("/api/webchat/greeting", webchat_greeting_default);
+app65.route("/api/telegram", telegram_default);
+app65.route("/api/quickbooks", quickbooks_default);
+app65.route("/api/onboarding", onboarding_default);
+app65.route("/api/admin", admin_default);
+app65.route("/api/access", access_default);
+app65.route("/api/session", session_default2);
+app65.route("/api/calendar", calendar_public_default);
+app65.route("/api/portal", portal_fetch_default);
 var SAFE_SLUG_RE2 = /^[a-z][a-z0-9-]{2,49}$/;
 var SAFE_FILENAME_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var IMAGE_MIME = {
@@ -30066,7 +30250,7 @@ var IMAGE_MIME = {
   ".svg": "image/svg+xml",
   ".ico": "image/x-icon"
 };
-app64.get("/agent-assets/:slug/:filename", (c) => {
+app65.get("/agent-assets/:slug/:filename", (c) => {
   const slug = c.req.param("slug");
   const filename = c.req.param("filename");
   if (!SAFE_SLUG_RE2.test(slug)) {
@@ -30101,7 +30285,7 @@ app64.get("/agent-assets/:slug/:filename", (c) => {
     "Cache-Control": "public, max-age=3600"
   });
 });
-app64.get("/generated/:filename", (c) => {
+app65.get("/generated/:filename", (c) => {
   const filename = c.req.param("filename");
   if (!SAFE_FILENAME_RE.test(filename) || filename.includes("..")) {
     console.error(`[generated] serve file=${filename} status=403`);
@@ -30131,10 +30315,10 @@ app64.get("/generated/:filename", (c) => {
     "Cache-Control": "public, max-age=86400"
   });
 });
-app64.route("/sites", sites_default);
-app64.route("/listings", listings_default);
-app64.route("/v", visitor_event_default);
-app64.route("/v", visitor_consent_default);
+app65.route("/sites", sites_default);
+app65.route("/listings", listings_default);
+app65.route("/v", visitor_event_default);
+app65.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
@@ -30289,7 +30473,7 @@ function brandedPublicHtml(agentSlug) {
 function agentUnavailableHtml() {
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(BRAND.productName)}</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1.5rem;color:#222"><h1 style="font-size:1.25rem">Agent unavailable</h1><p>This agent isn't available right now. If you reached this page from a saved link, the agent may have been turned off.</p></body></html>`;
 }
-app64.get("/", (c) => {
+app65.get("/", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const klass = classifyHost(host, getOperatorDomains(), isPublicHost);
   if (klass === "operator") {
@@ -30311,12 +30495,12 @@ app64.get("/", (c) => {
   console.log(`[host-class] host=${host} class=admin served=index.html`);
   return c.html(cachedHtml("index.html"));
 });
-app64.get("/public", (c) => {
+app65.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
 });
-app64.get("/public-chat", (c) => {
+app65.get("/public-chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
@@ -30335,9 +30519,9 @@ async function logViewerFetch(c, next) {
     duration_ms: Date.now() - start
   });
 }
-app64.use("/vnc-viewer.html", logViewerFetch);
-app64.use("/vnc-popout.html", logViewerFetch);
-app64.get("/vnc-popout.html", (c) => {
+app65.use("/vnc-viewer.html", logViewerFetch);
+app65.use("/vnc-popout.html", logViewerFetch);
+app65.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
     html = readFileSync45(resolve41(process.cwd(), "public", "vnc-popout.html"), "utf-8");
@@ -30350,7 +30534,7 @@ app64.get("/vnc-popout.html", (c) => {
   }
   return c.html(html);
 });
-app64.post("/api/vnc/client-event", async (c) => {
+app65.post("/api/vnc/client-event", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -30371,11 +30555,11 @@ app64.post("/api/vnc/client-event", async (c) => {
   });
   return c.json({ ok: true });
 });
-app64.get("/g/:slug", (c) => {
+app65.get("/g/:slug", (c) => {
   return c.html(brandedPublicHtml(resolveDefaultSlug() ?? void 0));
 });
 for (const pwa of PWA_SURFACES) {
-  app64.get(pwa.manifestPath, (c) => {
+  app65.get(pwa.manifestPath, (c) => {
     const manifest = buildManifest(pwa, {
       productName: BRAND.productName,
       appIcon192: brandAppIcon192Path,
@@ -30391,7 +30575,7 @@ for (const pwa of PWA_SURFACES) {
     return c.body(JSON.stringify(manifest));
   });
 }
-app64.get("/sw.js", (c) => {
+app65.get("/sw.js", (c) => {
   if (SW_SOURCE == null) {
     console.error("[pwa] op=sw status=500 reason=sw-source-missing");
     return c.text("Service worker unavailable", 500);
@@ -30400,12 +30584,12 @@ app64.get("/sw.js", (c) => {
   console.log(`[pwa] op=sw status=200 ct=${SW_CONTENT_TYPE}`);
   return c.body(SW_SOURCE);
 });
-app64.get("/graph", (c) => {
+app65.get("/graph", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("graph.html"));
 });
-app64.get("/chat", (c) => {
+app65.get("/chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains())) {
     console.log(`[host-class] host=${host} class=operator served=operator.html`);
@@ -30414,32 +30598,37 @@ app64.get("/chat", (c) => {
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("chat.html"));
 });
-app64.get("/data", (c) => {
+app65.get("/data", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app64.get("/tasks", (c) => {
+app65.get("/tasks", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("tasks.html"));
 });
-app64.get("/activity", (c) => {
+app65.get("/activity", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("activity.html"));
 });
-app64.get("/calendar", (c) => {
+app65.get("/calendar", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("calendar.html"));
 });
-app64.get("/browser", (c) => {
+app65.get("/routines", (c) => {
+  const host = (c.req.header("host") ?? "").split(":")[0];
+  if (isPublicHost(host)) return c.text("Not found", 404);
+  return c.html(cachedHtml("routines.html"));
+});
+app65.get("/browser", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("browser.html"));
 });
-app64.get("/:slug", async (c, next) => {
+app65.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN.test(`/${slug}`)) {
     const account = resolveAccount();
@@ -30454,13 +30643,13 @@ app64.get("/:slug", async (c, next) => {
   await next();
 });
 if (brandFaviconPath !== "/favicon.ico") {
-  app64.get("/favicon.ico", (c) => {
+  app65.get("/favicon.ico", (c) => {
     c.header("Cache-Control", "public, max-age=300");
     return c.redirect(brandFaviconPath, 302);
   });
 }
-app64.use("/*", serveStatic({ root: "./public" }));
-app64.all("*", (c) => {
+app65.use("/*", serveStatic({ root: "./public" }));
+app65.all("*", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path3 = c.req.path;
   if (isPublicHost(host)) {
@@ -30474,7 +30663,7 @@ app64.all("*", (c) => {
 });
 var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
-var httpServer = serve({ fetch: app64.fetch, port, hostname });
+var httpServer = serve({ fetch: app65.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
   const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
@@ -30516,6 +30705,31 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     }
   });
 }
+{
+  const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
+  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
+  const dreamSweepScript = resolve41(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
+  registerLoop({
+    name: "dream-cycle-sweep",
+    intervalMs: DREAM_CYCLE_SWEEP_INTERVAL_MS,
+    firstRunDelayMs: 3e4,
+    detached: true,
+    run: (ctx) => {
+      if (!existsSync42(dreamSweepScript)) return;
+      try {
+        const child = spawn3(process.execPath, [dreamSweepScript], {
+          env: { ...process.env, PLATFORM_ROOT: dreamPlatformRoot },
+          stdio: "inherit"
+        });
+        child.unref();
+        ctx.child(child.pid);
+        child.on("error", (err) => console.error(`[dream-cycle-sweep] spawn-failed err="${err.message}"`));
+      } catch (err) {
+        console.error(`[dream-cycle-sweep] spawn-failed err="${err.message}"`);
+      }
+    }
+  });
+}
 {
   const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
   const outlookScript = resolve41(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
@@ -30825,7 +31039,7 @@ for (const m of SUBAPP_MANIFEST) {
 }
 try {
   const registered = [];
-  for (const r of app64.routes ?? []) {
+  for (const r of app65.routes ?? []) {
     if (typeof r.path !== "string" || r.path.includes(":") || r.path.includes("*")) continue;
     if (AGENT_SLUG_PATTERN.test(r.path)) {
       registered.push({ method: (r.method ?? "ALL").toUpperCase(), path: r.path });