@rubytech/create-maxy-code 0.1.499 → 0.1.501

package/payload/server/server.js

@@ -503,7 +503,7 @@ var require_dist3 = __commonJS({
   "../lib/graph-style/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.FALLBACK_LABEL_SHAPE = exports.EXTERNAL_LABEL_SHAPES = exports.ALL_GRAPH_LABELS = exports.ADDITIONAL_BASE_LABELS = exports.FALLBACK_LABEL_COLOUR = exports.GRAPH_LABEL_COLOURS = void 0;
+    exports.CODE_EMITTED_NODE_LABELS = exports.FALLBACK_LABEL_SHAPE = exports.EXTERNAL_LABEL_SHAPES = exports.ALL_GRAPH_LABELS = exports.ADDITIONAL_BASE_LABELS = exports.FALLBACK_LABEL_COLOUR = exports.GRAPH_LABEL_COLOURS = void 0;
     exports.pickDisplayLabel = pickDisplayLabel2;
     exports.colourForLabel = colourForLabel2;
     exports.shapeForLabel = shapeForLabel2;
@@ -531,11 +531,12 @@ var require_dist3 = __commonJS({
       // JobLogic service-delivery ontology (Task 1084; supersedes the Task 650/773
       // homegrown set). Muted brick-red / earthy family — the service register sits
       // apart from people-terracotta, viewing-amber, and task-rose bands so
-      // sitedesk legends read as their own group. Top-level (operator-entry)
-      // labels only; child labels (QuoteLine, Milestone, Valuation, VariationNote,
-      // JobCost, Contact, PurchaseOrderLine, InvoiceLine, InvoicePayment, Credit)
-      // intentionally stay fallback-grey. :Engineer is an additional label on
-      // Person and takes the Person colour; :Supplier is an additional label on
+      // sitedesk legends read as their own group. These are the top-level
+      // (operator-entry) labels; the child labels (QuoteLine, Milestone, Valuation,
+      // VariationNote, JobCost, Contact, PurchaseOrderLine, InvoiceLine,
+      // InvoicePayment, Credit) are coloured in the Task 1965 block appended at the
+      // end of this object, not here. :Engineer is an additional label on Person
+      // and takes the Person colour; :Supplier is an additional label on
       // Organization and takes the tobacco Organization colour. All hexes here are
       // pairwise-unique across the registry.
       Job: "#8C3B2E",
@@ -633,7 +634,82 @@ var require_dist3 = __commonJS({
       // SHAPE_BY_LABEL assigns shapes by index position in ALL_GRAPH_LABELS
       // (this object's key order), so a mid-table insert would silently change
       // the rendered shape of every label after it.
-      CashEntry: "#7D5A2B"
+      CashEntry: "#7D5A2B",
+      // --- Task 1965: colour every node type that can appear in the graph ---
+      // Appended at the END so SHAPE_BY_LABEL indices for the labels above are
+      // unchanged. Grouped by family band; each hex is pairwise-unique across the
+      // whole registry (except the pre-existing UserMessage/Preference twin).
+      // Ledger / money children (brown-gold, beside Invoice and CashEntry).
+      InvoiceLine: "#7A5326",
+      InvoicePayment: "#8A6230",
+      QuoteLine: "#9A7038",
+      PurchaseOrderLine: "#A67E42",
+      JobCost: "#6A4A22",
+      Credit: "#B48A48",
+      Retainer: "#C29A55",
+      Sale: "#8E5E2A",
+      Valuation: "#A06A34",
+      Order: "#B87C3E",
+      DiningOrder: "#C9954E",
+      // Documents / content (steel-blue, hue-adjacent to the business slates).
+      Content: "#58708C",
+      Report: "#6D8299",
+      Page: "#849AAF",
+      Post: "#93A7BA",
+      VariationNote: "#47617B",
+      FileArtifact: "#A9BBCC",
+      // Marketing (bright teal-green, apart from workflow and research teals).
+      SocialPost: "#2FA69A",
+      Campaign: "#3FB8A0",
+      BrandDeal: "#57C2AE",
+      Recommendation: "#74CDBB",
+      // CRM people (terracotta, beside Person and Customer).
+      Contact: "#C97E52",
+      Lead: "#A85E38",
+      Position: "#96522E",
+      Audience: "#E0B088",
+      // Places / transport / retail (forest-emerald, apart from knowledge moss).
+      PostalAddress: "#2E8B57",
+      Room: "#3A9B63",
+      StoreLocation: "#46A96F",
+      Vehicle: "#54B77B",
+      Route: "#62C187",
+      Stop: "#2A7A4C",
+      Shipment: "#6FCB93",
+      Reservation: "#7ED4A0",
+      TableReservation: "#8CDBAC",
+      Menu: "#1F6B41",
+      MenuItem: "#98E0B6",
+      Product: "#34925E",
+      StockMovement: "#4CA574",
+      // Work / delivery (indigo, apart from the strategy indigo band).
+      Milestone: "#4A5FA8",
+      Deliverable: "#6274C0",
+      TimeEntry: "#8189CE",
+      Engagement: "#9AA0DA",
+      Case: "#3B4E92",
+      Meeting: "#5566B4",
+      // Idea (amber).
+      Idea: "#E0A82E",
+      // Web analytics (sky-cyan, apart from the research teal).
+      Session: "#2AA7C4",
+      PageView: "#3DB4CE",
+      Click: "#55C0D6",
+      ScrollMilestone: "#70CCDE",
+      TimelineEvent: "#1E93B0",
+      AnonVisitor: "#88D6E6",
+      AEOAudit: "#46B0CB",
+      // WhatsApp transport (brand green).
+      WhatsAppConversation: "#128C7E",
+      WhatsAppMessage: "#1FA894",
+      // Cloudflare / chain infra (grey-blue).
+      CloudflareHostname: "#5B6E82",
+      CloudflareTunnel: "#6E8296",
+      Chain: "#47586A",
+      ChainLink: "#8496AA",
+      // Voice (violet).
+      VoiceProfile: "#9B59B6",
+      VoiceEdit: "#B07CC9"
     };
     exports.FALLBACK_LABEL_COLOUR = "#94A3B8";
     exports.ADDITIONAL_BASE_LABELS = Object.freeze(/* @__PURE__ */ new Set(["Applicant", "Engineer", "GuestProfile", "Supplier"]));
@@ -669,6 +745,7 @@ var require_dist3 = __commonJS({
     function shapeForLabel2(label) {
       return SHAPE_BY_LABEL[label] ?? exports.FALLBACK_LABEL_SHAPE;
     }
+    exports.CODE_EMITTED_NODE_LABELS = Object.freeze(/* @__PURE__ */ new Set(["FileArtifact"]));
     var LABEL_ICONS = {
       LocalBusiness: '<path d="M15 21v-5a1 1 0 0 0-1-1h-4a1 1 0 0 0-1 1v5"></path><path d="M17.774 10.31a1.12 1.12 0 0 0-1.549 0 2.5 2.5 0 0 1-3.451 0 1.12 1.12 0 0 0-1.548 0 2.5 2.5 0 0 1-3.452 0 1.12 1.12 0 0 0-1.549 0 2.5 2.5 0 0 1-3.77-3.248l2.889-4.184A2 2 0 0 1 7 2h10a2 2 0 0 1 1.653.873l2.895 4.192a2.5 2.5 0 0 1-3.774 3.244"></path><path d="M4 10.95V19a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2v-8.05"></path>',
       Service: '<path d="M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.106-3.105c.32-.322.863-.22.983.218a6 6 0 0 1-8.259 7.057l-7.91 7.91a1 1 0 0 1-2.999-3l7.91-7.91a6 6 0 0 1 7.057-8.259c.438.12.54.662.219.984z"></path>',
@@ -732,7 +809,68 @@ var require_dist3 = __commonJS({
       Source: '<path d="M12 7v14"></path><path d="M3 18a1 1 0 0 1-1-1V4a1 1 0 0 1 1-1h5a4 4 0 0 1 4 4 4 4 0 0 1 4-4h5a1 1 0 0 1 1 1v13a1 1 0 0 1-1 1h-6a3 3 0 0 0-3 3 3 3 0 0 0-3-3z"></path>',
       Finding: '<path d="M15 14c.2-1 .7-1.7 1.5-2.5 1-.9 1.5-2.2 1.5-3.5A6 6 0 0 0 6 8c0 1 .2 2.2 1.5 3.5.7.7 1.3 1.5 1.5 2.5"></path><path d="M9 18h6"></path><path d="M10 22h4"></path>',
       Hypothesis: '<path d="M14 2v6a2 2 0 0 0 .245.96l5.51 10.08A2 2 0 0 1 18 22H6a2 2 0 0 1-1.755-2.96l5.51-10.08A2 2 0 0 0 10 8V2"></path><path d="M6.453 15h11.094"></path><path d="M8.5 2h7"></path>',
-      CashEntry: '<rect width="20" height="12" x="2" y="6" rx="2"></rect><circle cx="12" cy="12" r="2"></circle><path d="M6 12h.01"></path><path d="M18 12h.01"></path>'
+      CashEntry: '<rect width="20" height="12" x="2" y="6" rx="2"></rect><circle cx="12" cy="12" r="2"></circle><path d="M6 12h.01"></path><path d="M18 12h.01"></path>',
+      // --- Task 1965: glyphs for the 60 previously-uncovered node labels ---
+      InvoiceLine: '<path d="M13 16H8" /><path d="M14 8H8" /><path d="M16 12H8" /><path d="M4 3a1 1 0 0 1 1-1 1.3 1.3 0 0 1 .7.2l.933.6a1.3 1.3 0 0 0 1.4 0l.934-.6a1.3 1.3 0 0 1 1.4 0l.933.6a1.3 1.3 0 0 0 1.4 0l.933-.6a1.3 1.3 0 0 1 1.4 0l.934.6a1.3 1.3 0 0 0 1.4 0l.933-.6A1.3 1.3 0 0 1 19 2a1 1 0 0 1 1 1v18a1 1 0 0 1-1 1 1.3 1.3 0 0 1-.7-.2l-.933-.6a1.3 1.3 0 0 0-1.4 0l-.934.6a1.3 1.3 0 0 1-1.4 0l-.933-.6a1.3 1.3 0 0 0-1.4 0l-.933.6a1.3 1.3 0 0 1-1.4 0l-.934-.6a1.3 1.3 0 0 0-1.4 0l-.933.6a1.3 1.3 0 0 1-.7.2 1 1 0 0 1-1-1z" />',
+      InvoicePayment: '<path d="M11 15h2a2 2 0 1 0 0-4h-3c-.6 0-1.1.2-1.4.6L3 17" /><path d="m7 21 1.6-1.4c.3-.4.8-.6 1.4-.6h4c1.1 0 2.1-.4 2.8-1.2l4.6-4.4a2 2 0 0 0-2.75-2.91l-4.2 3.9" /><path d="m2 16 6 6" /><circle cx="16" cy="9" r="2.9" /><circle cx="6" cy="5" r="3" />',
+      QuoteLine: '<path d="M3 5h.01" /><path d="M3 12h.01" /><path d="M3 19h.01" /><path d="M8 5h13" /><path d="M8 12h13" /><path d="M8 19h13" />',
+      PurchaseOrderLine: '<path d="M11 5h10" /><path d="M11 12h10" /><path d="M11 19h10" /><path d="M4 4h1v5" /><path d="M4 9h2" /><path d="M6.5 20H3.4c0-1 2.6-1.925 2.6-3.5a1.5 1.5 0 0 0-2.6-1.02" />',
+      JobCost: '<rect width="20" height="12" x="2" y="6" rx="2" /><circle cx="12" cy="12" r="2" /><path d="M6 12h.01M18 12h.01" />',
+      Credit: '<path d="M3.85 8.62a4 4 0 0 1 4.78-4.77 4 4 0 0 1 6.74 0 4 4 0 0 1 4.78 4.78 4 4 0 0 1 0 6.74 4 4 0 0 1-4.77 4.78 4 4 0 0 1-6.75 0 4 4 0 0 1-4.78-4.77 4 4 0 0 1 0-6.76Z" /><path d="M16 8h-6a2 2 0 1 0 0 4h4a2 2 0 1 1 0 4H8" /><path d="M12 18V6" />',
+      Retainer: '<path d="M19 7V4a1 1 0 0 0-1-1H5a2 2 0 0 0 0 4h15a1 1 0 0 1 1 1v4h-3a2 2 0 0 0 0 4h3a1 1 0 0 0 1-1v-2a1 1 0 0 0-1-1" /><path d="M3 5v14a2 2 0 0 0 2 2h15a1 1 0 0 0 1-1v-4" />',
+      Sale: '<path d="M12 17V7" /><path d="M16 8h-6a2 2 0 0 0 0 4h4a2 2 0 0 1 0 4H8" /><path d="M4 3a1 1 0 0 1 1-1 1.3 1.3 0 0 1 .7.2l.933.6a1.3 1.3 0 0 0 1.4 0l.934-.6a1.3 1.3 0 0 1 1.4 0l.933.6a1.3 1.3 0 0 0 1.4 0l.933-.6a1.3 1.3 0 0 1 1.4 0l.934.6a1.3 1.3 0 0 0 1.4 0l.933-.6A1.3 1.3 0 0 1 19 2a1 1 0 0 1 1 1v18a1 1 0 0 1-1 1 1.3 1.3 0 0 1-.7-.2l-.933-.6a1.3 1.3 0 0 0-1.4 0l-.934.6a1.3 1.3 0 0 1-1.4 0l-.933-.6a1.3 1.3 0 0 0-1.4 0l-.933.6a1.3 1.3 0 0 1-1.4 0l-.934-.6a1.3 1.3 0 0 0-1.4 0l-.933.6a1.3 1.3 0 0 1-.7.2 1 1 0 0 1-1-1z" />',
+      Valuation: '<path d="M12 3v18" /><path d="m19 8 3 8a5 5 0 0 1-6 0zV7" /><path d="M3 7h1a17 17 0 0 0 8-2 17 17 0 0 0 8 2h1" /><path d="m5 8 3 8a5 5 0 0 1-6 0zV7" /><path d="M7 21h10" />',
+      Order: '<path d="M16 10a4 4 0 0 1-8 0" /><path d="M3.103 6.034h17.794" /><path d="M3.4 5.467a2 2 0 0 0-.4 1.2V20a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2V6.667a2 2 0 0 0-.4-1.2l-2-2.667A2 2 0 0 0 17 2H7a2 2 0 0 0-1.6.8z" />',
+      DiningOrder: '<path d="M3 2v7c0 1.1.9 2 2 2h4a2 2 0 0 0 2-2V2" /><path d="M7 2v20" /><path d="M21 15V2a5 5 0 0 0-5 5v6c0 1.1.9 2 2 2h3Zm0 0v7" />',
+      Content: '<path d="M15 18h-5" /><path d="M18 14h-8" /><path d="M4 22h16a2 2 0 0 0 2-2V4a2 2 0 0 0-2-2H8a2 2 0 0 0-2 2v16a2 2 0 0 1-4 0v-9a2 2 0 0 1 2-2h2" /><rect width="8" height="4" x="10" y="6" rx="1" />',
+      Report: '<rect width="8" height="4" x="8" y="2" rx="1" ry="1" /><path d="M16 4h2a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2H6a2 2 0 0 1-2-2V6a2 2 0 0 1 2-2h2" /><path d="M12 11h4" /><path d="M12 16h4" /><path d="M8 11h.01" /><path d="M8 16h.01" />',
+      Page: '<path d="M6 22a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.704.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2z" /><path d="M14 2v5a1 1 0 0 0 1 1h5" />',
+      Post: '<path d="M12 3H5a2 2 0 0 0-2 2v14a2 2 0 0 0 2 2h14a2 2 0 0 0 2-2v-7" /><path d="M18.375 2.625a1 1 0 0 1 3 3l-9.013 9.014a2 2 0 0 1-.853.505l-2.873.84a.5.5 0 0 1-.62-.62l.84-2.873a2 2 0 0 1 .506-.852z" />',
+      SocialPost: '<path d="M11 6a13 13 0 0 0 8.4-2.8A1 1 0 0 1 21 4v12a1 1 0 0 1-1.6.8A13 13 0 0 0 11 14H5a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2z" /><path d="M6 14a12 12 0 0 0 2.4 7.2 2 2 0 0 0 3.2-2.4A8 8 0 0 1 10 14" /><path d="M8 6v8" />',
+      VariationNote: '<path d="M6 22a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h8a2.4 2.4 0 0 1 1.704.706l3.588 3.588A2.4 2.4 0 0 1 20 8v12a2 2 0 0 1-2 2z" /><path d="M9 10h6" /><path d="M12 13V7" /><path d="M9 17h6" />',
+      Contact: '<path d="M16 2v2" /><path d="M17.915 22a6 6 0 0 0-12 0" /><path d="M8 2v2" /><circle cx="12" cy="12" r="4" /><rect x="3" y="4" width="18" height="18" rx="2" />',
+      Lead: '<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2" /><circle cx="9" cy="7" r="4" /><line x1="19" x2="19" y1="8" y2="14" /><line x1="22" x2="16" y1="11" y2="11" />',
+      Position: '<path d="M16 20V4a2 2 0 0 0-2-2h-4a2 2 0 0 0-2 2v16" /><rect width="20" height="14" x="2" y="6" rx="2" />',
+      Audience: '<path d="M18 21a8 8 0 0 0-16 0" /><circle cx="10" cy="8" r="5" /><path d="M22 20c0-3.37-2-6.5-4-8a5 5 0 0 0-.45-8.3" />',
+      PostalAddress: '<path d="M18 8c0 3.613-3.869 7.429-5.393 8.795a1 1 0 0 1-1.214 0C9.87 15.429 6 11.613 6 8a6 6 0 0 1 12 0" /><circle cx="12" cy="8" r="2" /><path d="M8.714 14h-3.71a1 1 0 0 0-.948.683l-2.004 6A1 1 0 0 0 3 22h18a1 1 0 0 0 .948-1.316l-2-6a1 1 0 0 0-.949-.684h-3.712" />',
+      Room: '<path d="M11 20H2" /><path d="M11 4.562v16.157a1 1 0 0 0 1.242.97L19 20V5.562a2 2 0 0 0-1.515-1.94l-4-1A2 2 0 0 0 11 4.561z" /><path d="M11 4H8a2 2 0 0 0-2 2v14" /><path d="M14 12h.01" /><path d="M22 20h-3" />',
+      StoreLocation: '<path d="M15 21v-5a1 1 0 0 0-1-1h-4a1 1 0 0 0-1 1v5" /><path d="M17.774 10.31a1.12 1.12 0 0 0-1.549 0 2.5 2.5 0 0 1-3.451 0 1.12 1.12 0 0 0-1.548 0 2.5 2.5 0 0 1-3.452 0 1.12 1.12 0 0 0-1.549 0 2.5 2.5 0 0 1-3.77-3.248l2.889-4.184A2 2 0 0 1 7 2h10a2 2 0 0 1 1.653.873l2.895 4.192a2.5 2.5 0 0 1-3.774 3.244" /><path d="M4 10.95V19a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2v-8.05" />',
+      Vehicle: '<path d="M19 17h2c.6 0 1-.4 1-1v-3c0-.9-.7-1.7-1.5-1.9C18.7 10.6 16 10 16 10s-1.3-1.4-2.2-2.3c-.5-.4-1.1-.7-1.8-.7H5c-.6 0-1.1.4-1.4.9l-1.4 2.9A3.7 3.7 0 0 0 2 12v4c0 .6.4 1 1 1h2" /><circle cx="7" cy="17" r="2" /><path d="M9 17h6" /><circle cx="17" cy="17" r="2" />',
+      Route: '<circle cx="6" cy="19" r="3" /><path d="M9 19h8.5a3.5 3.5 0 0 0 0-7h-11a3.5 3.5 0 0 1 0-7H15" /><circle cx="18" cy="5" r="3" />',
+      Stop: '<path d="M20 10c0 4.993-5.539 10.193-7.399 11.799a1 1 0 0 1-1.202 0C9.539 20.193 4 14.993 4 10a8 8 0 0 1 16 0" /><circle cx="12" cy="10" r="3" />',
+      Shipment: '<path d="M11 21.73a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73z" /><path d="M12 22V12" /><polyline points="3.29 7 12 12 20.71 7" /><path d="m7.5 4.27 9 5.15" />',
+      Reservation: '<path d="M8 2v4" /><path d="M16 2v4" /><rect width="18" height="18" x="3" y="4" rx="2" /><path d="M3 10h18" /><path d="m9 16 2 2 4-4" />',
+      TableReservation: '<path d="m16 2-2.3 2.3a3 3 0 0 0 0 4.2l1.8 1.8a3 3 0 0 0 4.2 0L22 8" /><path d="M15 15 3.3 3.3a4.2 4.2 0 0 0 0 6l7.3 7.3c.7.7 2 .7 2.8 0L15 15Zm0 0 7 7" /><path d="m2.1 21.8 6.4-6.3" /><path d="m19 5-7 7" />',
+      Menu: '<path d="M12 5v16" /><path d="M20.001 19A2 2 0 0022 17V5a2 2 0 00-1.999-2L16 3.002A5 5 0 0012 5a5 5 0 00-4-2H4a2 2 0 00-2 2v12a2 2 0 001.999 2H8a5 5 0 014 2 5 5 0 014-2z" />',
+      MenuItem: '<path d="M7 21h10" /><path d="M12 21a9 9 0 0 0 9-9H3a9 9 0 0 0 9 9Z" /><path d="M11.38 12a2.4 2.4 0 0 1-.4-4.77 2.4 2.4 0 0 1 3.2-2.77 2.4 2.4 0 0 1 3.47-.63 2.4 2.4 0 0 1 3.37 3.37 2.4 2.4 0 0 1-1.1 3.7 2.51 2.51 0 0 1 .03 1.1" /><path d="m13 12 4-4" /><path d="M10.9 7.25A3.99 3.99 0 0 0 4 10c0 .73.2 1.41.54 2" />',
+      Product: '<path d="M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z" /><path d="m3.3 7 8.7 5 8.7-5" /><path d="M12 22V12" />',
+      StockMovement: '<path d="m16 3 4 4-4 4" /><path d="M20 7H4" /><path d="m8 21-4-4 4-4" /><path d="M4 17h16" />',
+      Milestone: '<path d="M4 22V4a1 1 0 0 1 .4-.8A6 6 0 0 1 8 2c3 0 5 2 7.333 2q2 0 3.067-.8A1 1 0 0 1 20 4v10a1 1 0 0 1-.4.8A6 6 0 0 1 16 16c-3 0-5-2-8-2a6 6 0 0 0-4 1.528" />',
+      Deliverable: '<path d="M12 22V12" /><path d="m16 17 2 2 4-4" /><path d="M21 11.127V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.729l7 4a2 2 0 0 0 2 .001l1.32-.753" /><path d="M3.29 7 12 12l8.71-5" /><path d="m7.5 4.27 8.997 5.148" />',
+      TimeEntry: '<line x1="10" x2="14" y1="2" y2="2" /><line x1="12" x2="15" y1="14" y2="11" /><circle cx="12" cy="14" r="8" />',
+      Engagement: '<path d="m11 17 2 2a1 1 0 1 0 3-3" /><path d="m14 14 2.5 2.5a1 1 0 1 0 3-3l-3.88-3.88a3 3 0 0 0-4.24 0l-.88.88a1 1 0 1 1-3-3l2.81-2.81a5.79 5.79 0 0 1 7.06-.87l.47.28a2 2 0 0 0 1.42.25L21 4" /><path d="m21 3 1 11h-2" /><path d="M3 3 2 14l6.5 6.5a1 1 0 1 0 3-3" /><path d="M3 4h8" />',
+      Case: '<path d="M20 20a2 2 0 0 0 2-2V8a2 2 0 0 0-2-2h-7.9a2 2 0 0 1-1.69-.9L9.6 3.9A2 2 0 0 0 7.93 3H4a2 2 0 0 0-2 2v13a2 2 0 0 0 2 2Z" />',
+      Meeting: '<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2" /><path d="M16 3.128a4 4 0 0 1 0 7.744" /><path d="M22 21v-2a4 4 0 0 0-3-3.87" /><circle cx="9" cy="7" r="4" />',
+      Idea: '<path d="M15 14c.2-1 .7-1.7 1.5-2.5 1-.9 1.5-2.2 1.5-3.5A6 6 0 0 0 6 8c0 1 .2 2.2 1.5 3.5.7.7 1.3 1.5 1.5 2.5" /><path d="M9 18h6" /><path d="M10 22h4" />',
+      Campaign: '<path d="M12 15v5s3.03-.55 4-2c1.08-1.62 0-5 0-5" /><path d="M4.5 16.5c-1.5 1.26-2 5-2 5s3.74-.5 5-2c.71-.84.7-2.13-.09-2.91a2.18 2.18 0 0 0-2.91-.09" /><path d="M9 12a22 22 0 0 1 2-3.95A12.88 12.88 0 0 1 22 2c0 2.72-.78 7.5-6 11a22.4 22.4 0 0 1-4 2z" /><path d="M9 12H4s.55-3.03 2-4c1.62-1.08 5 .05 5 .05" />',
+      BrandDeal: '<path d="M3.85 8.62a4 4 0 0 1 4.78-4.77 4 4 0 0 1 6.74 0 4 4 0 0 1 4.78 4.78 4 4 0 0 1 0 6.74 4 4 0 0 1-4.77 4.78 4 4 0 0 1-6.75 0 4 4 0 0 1-4.78-4.77 4 4 0 0 1 0-6.76Z" /><path d="m9 12 2 2 4-4" />',
+      Recommendation: '<path d="M15 5.88 14 10h5.83a2 2 0 0 1 1.92 2.56l-2.33 8A2 2 0 0 1 17.5 22H4a2 2 0 0 1-2-2v-8a2 2 0 0 1 2-2h2.76a2 2 0 0 0 1.79-1.11L12 2a3.13 3.13 0 0 1 3 3.88Z" /><path d="M7 10v12" />',
+      Session: '<rect width="20" height="14" x="2" y="3" rx="2" /><line x1="8" x2="16" y1="21" y2="21" /><line x1="12" x2="12" y1="17" y2="21" />',
+      PageView: '<path d="M2.062 12.348a1 1 0 0 1 0-.696 10.75 10.75 0 0 1 19.876 0 1 1 0 0 1 0 .696 10.75 10.75 0 0 1-19.876 0" /><circle cx="12" cy="12" r="3" />',
+      Click: '<path d="M14 4.1 12 6" /><path d="m5.1 8-2.9-.8" /><path d="m6 12-1.9 2" /><path d="M7.2 2.2 8 5.1" /><path d="M9.037 9.69a.498.498 0 0 1 .653-.653l11 4.5a.5.5 0 0 1-.074.949l-4.349 1.041a1 1 0 0 0-.74.739l-1.04 4.35a.5.5 0 0 1-.95.074z" />',
+      ScrollMilestone: '<path d="m7 6 5 5 5-5" /><path d="m7 13 5 5 5-5" />',
+      TimelineEvent: '<path d="M3 12a9 9 0 1 0 9-9 9.75 9.75 0 0 0-6.74 2.74L3 8" /><path d="M3 3v5h5" /><path d="M12 7v5l4 2" />',
+      AnonVisitor: '<path d="M9 10h.01" /><path d="M15 10h.01" /><path d="M12 2a8 8 0 0 0-8 8v12l3-3 2.5 2.5L12 19l2.5 2.5L17 19l3 3V10a8 8 0 0 0-8-8z" />',
+      AEOAudit: '<path d="m8 11 2 2 4-4" /><circle cx="11" cy="11" r="8" /><path d="m21 21-4.3-4.3" />',
+      WhatsAppConversation: '<path d="M2.992 16.342a2 2 0 0 1 .094 1.167l-1.065 3.29a1 1 0 0 0 1.236 1.168l3.413-.998a2 2 0 0 1 1.099.092 10 10 0 1 0-4.777-4.719" />',
+      WhatsAppMessage: '<path d="M22 17a2 2 0 0 1-2 2H6.828a2 2 0 0 0-1.414.586l-2.202 2.202A.71.71 0 0 1 2 21.286V5a2 2 0 0 1 2-2h16a2 2 0 0 1 2 2z" /><path d="M7 11h10" /><path d="M7 15h6" /><path d="M7 7h8" />',
+      CloudflareHostname: '<circle cx="12" cy="12" r="10" /><path d="M12 2a14.5 14.5 0 0 0 0 20 14.5 14.5 0 0 0 0-20" /><path d="M2 12h20" />',
+      CloudflareTunnel: '<rect x="16" y="16" width="6" height="6" rx="1" /><rect x="2" y="16" width="6" height="6" rx="1" /><rect x="9" y="2" width="6" height="6" rx="1" /><path d="M5 16v-3a1 1 0 0 1 1-1h12a1 1 0 0 1 1 1v3" /><path d="M12 12V8" />',
+      Chain: '<path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71" /><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71" />',
+      ChainLink: '<path d="M9 17H7A5 5 0 0 1 7 7h2" /><path d="M15 7h2a5 5 0 1 1 0 10h-2" /><line x1="8" x2="16" y1="12" y2="12" />',
+      FileArtifact: '<path d="M13.659 22H18a2 2 0 0 0 2-2V8a2.4 2.4 0 0 0-.706-1.706l-3.588-3.588A2.4 2.4 0 0 0 14 2H6a2 2 0 0 0-2 2v11.5" /><path d="M14 2v5a1 1 0 0 0 1 1h5" /><path d="M8 12v-1" /><path d="M8 18v-2" /><path d="M8 7V6" /><circle cx="8" cy="20" r="2" />',
+      VoiceProfile: '<path d="M12 19v3" /><path d="M19 10v2a7 7 0 0 1-14 0v-2" /><rect x="9" y="2" width="6" height="13" rx="3" />',
+      VoiceEdit: '<path d="M2 10v3" /><path d="M6 6v11" /><path d="M10 3v18" /><path d="M14 8v7" /><path d="M18 5v13" /><path d="M22 10v3" />'
     };
     function iconForLabel2(label) {
       return Object.prototype.hasOwnProperty.call(LABEL_ICONS, label) ? LABEL_ICONS[label] : null;
@@ -1615,10 +1753,10 @@ var serveStatic = (options = { root: "" }) => {
 };
 
 // server/index.ts
-import { readFileSync as readFileSync45, existsSync as existsSync42, watchFile, readdirSync as readdirSync26, statSync as statSync17 } from "fs";
+import { readFileSync as readFileSync46, existsSync as existsSync43, watchFile, readdirSync as readdirSync27, statSync as statSync18 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash7 } from "crypto";
-import { resolve as resolve41, join as join47, basename as basename13 } from "path";
+import { resolve as resolve42, join as join47, basename as basename13 } from "path";
 import { homedir as homedir4 } from "os";
 import { monitorEventLoopDelay } from "perf_hooks";
 
@@ -2892,7 +3030,7 @@ var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
   console.error(`${TAG6} draining credential save queue\u2026`);
   const timer = new Promise(
-    (resolve42) => setTimeout(() => resolve42("timeout"), timeoutMs)
+    (resolve43) => setTimeout(() => resolve43("timeout"), timeoutMs)
   );
   const result = await Promise.race([
     credsSaveQueue.then(() => "drained"),
@@ -3069,11 +3207,11 @@ async function createWaSocket(opts) {
   return sock;
 }
 async function waitForConnection(sock) {
-  return new Promise((resolve42, reject) => {
+  return new Promise((resolve43, reject) => {
     const handler = (update) => {
       if (update.connection === "open") {
         sock.ev.off("connection.update", handler);
-        resolve42();
+        resolve43();
       }
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
@@ -3181,7 +3319,7 @@ function isTimeoutError(err) {
   return Boolean(err?.__maxyTimeout);
 }
 function withTimeout(label, promise, timeoutMs) {
-  return new Promise((resolve42, reject) => {
+  return new Promise((resolve43, reject) => {
     const timer = setTimeout(() => {
       const err = new Error(`${label} timed out after ${timeoutMs}ms`);
       err.__maxyTimeout = true;
@@ -3191,7 +3329,7 @@ function withTimeout(label, promise, timeoutMs) {
     promise.then(
       (value) => {
         clearTimeout(timer);
-        resolve42(value);
+        resolve43(value);
       },
       (err) => {
         clearTimeout(timer);
@@ -4256,8 +4394,8 @@ async function persistWhatsAppMessage(input) {
   const { givenName, familyName } = splitName(input.pushName);
   const prev = sessionWriteLocks.get(input.cacheKey);
   let release;
-  const mine = new Promise((resolve42) => {
-    release = resolve42;
+  const mine = new Promise((resolve43) => {
+    release = resolve43;
   });
   const chained = (prev ?? Promise.resolve()).then(() => mine);
   sessionWriteLocks.set(input.cacheKey, chained);
@@ -5994,11 +6132,11 @@ async function connectWithReconnect(conn) {
       console.error(
         `${TAG17} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
-      await new Promise((resolve42) => {
-        const timer = setTimeout(resolve42, delay);
+      await new Promise((resolve43) => {
+        const timer = setTimeout(resolve43, delay);
         conn.abortController.signal.addEventListener("abort", () => {
           clearTimeout(timer);
-          resolve42();
+          resolve43();
         }, { once: true });
       });
     }
@@ -6006,16 +6144,16 @@ async function connectWithReconnect(conn) {
   }
 }
 function waitForDisconnectEvent(conn) {
-  return new Promise((resolve42) => {
+  return new Promise((resolve43) => {
     if (!conn.sock) {
-      resolve42();
+      resolve43();
       return;
     }
     const sock = conn.sock;
     const handler = (update) => {
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
-        resolve42();
+        resolve43();
       }
     };
     sock.ev.on("connection.update", handler);
@@ -6125,7 +6263,7 @@ function monitorInbound(conn) {
           }
           const entries = messageStore.get(storeKey);
           console.error(
-            `${TAG17} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries?.length ?? 0}/${MESSAGE_STORE_MAX}) account=${conn.platformAccountId}`
+            `${TAG17} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries?.length ?? 0}/${MESSAGE_STORE_MAX}) storeAccount=${persistAccountId} socketOwner=${conn.platformAccountId}`
           );
           recordActivity({
             accountId: conn.accountId,
@@ -6489,8 +6627,8 @@ async function handleInboundMessage(conn, msg) {
     const conversationKey = isGroup ? remoteJid : senderPhone;
     const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
     let resolvePending;
-    const sttPending = new Promise((resolve42) => {
-      resolvePending = resolve42;
+    const sttPending = new Promise((resolve43) => {
+      resolvePending = resolve43;
     });
     if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
     try {
@@ -6879,20 +7017,20 @@ function buildX11Env(chromiumWrapperPath, transport = "vnc") {
 
 // server/routes/health.ts
 function checkPort(port2, timeoutMs = 500) {
-  return new Promise((resolve42) => {
+  return new Promise((resolve43) => {
     const socket = createConnection2(port2, "127.0.0.1");
     socket.setTimeout(timeoutMs);
     socket.once("connect", () => {
       socket.destroy();
-      resolve42(true);
+      resolve43(true);
     });
     socket.once("error", () => {
       socket.destroy();
-      resolve42(false);
+      resolve43(false);
     });
     socket.once("timeout", () => {
       socket.destroy();
-      resolve42(false);
+      resolve43(false);
     });
   });
 }
@@ -7147,8 +7285,8 @@ function webchatTurnTimeoutMs() {
   return Number(process.env.WEBCHAT_TURN_TIMEOUT_MS ?? String(2 * 6e4));
 }
 function createChatRoutes(deps) {
-  const app66 = new Hono();
-  app66.post("/", async (c) => {
+  const app67 = new Hono();
+  app67.post("/", async (c) => {
     console.log(`[chat-route] entered route=public method=POST`);
     const contentType = c.req.header("content-type") ?? "";
     const account = resolveAccount();
@@ -7412,7 +7550,7 @@ ${result.result.text}` : result.result.text;
       }
     });
   });
-  return app66;
+  return app67;
 }
 
 // app/lib/channel-pty-bridge/admin-session-id.ts
@@ -7446,8 +7584,8 @@ function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
 function createScheduleInjectRoutes(deps) {
-  const app66 = new Hono();
-  app66.post("/", async (c) => {
+  const app67 = new Hono();
+  app67.post("/", async (c) => {
     const env = c.env;
     const remoteAddr = env?.incoming?.socket?.remoteAddress ?? "";
     if (!isLoopbackAddr(remoteAddr)) {
@@ -7548,7 +7686,7 @@ function createScheduleInjectRoutes(deps) {
     console.error(`${TAG20} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
     return c.json({ ok: true }, 200);
   });
-  return app66;
+  return app67;
 }
 
 // server/index.ts
@@ -8231,8 +8369,8 @@ async function startLogin(opts) {
   await clearAuth(authDir);
   let resolveCode = null;
   let rejectCode = null;
-  const codePromise = new Promise((resolve42, reject) => {
-    resolveCode = resolve42;
+  const codePromise = new Promise((resolve43, reject) => {
+    resolveCode = resolve43;
     rejectCode = reject;
   });
   const codeTimer = setTimeout(
@@ -8814,9 +8952,9 @@ function evaluateCallerScope(c, requestedAccountId) {
 }
 function callerScopeDenial(c, requestedAccountId) {
   const { decision, callerAccountId, houseAdminScope } = evaluateCallerScope(c, requestedAccountId);
-  if (decision.authorized) return null;
+  if (decision.authorized) return { denial: null, callerAccountId };
   console.error(`[whatsapp-read-tool] op=authz-deny requested=${requestedAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
-  return c.json({ error: decision.reason }, 403);
+  return { denial: c.json({ error: decision.reason }, 403), callerAccountId };
 }
 function houseSocketScopeDenial(c, op) {
   const houseAccountId = resolveAccount()?.accountId ?? "";
@@ -9244,7 +9382,7 @@ app2.get("/activity", (c) => {
 app2.get("/conversations", (c) => {
   try {
     const requestedAccountId = validateAccountId(c.req.query("accountId") ?? null);
-    const denial = callerScopeDenial(c, requestedAccountId);
+    const { denial, callerAccountId } = callerScopeDenial(c, requestedAccountId);
     if (denial) return denial;
     const projection = projectionFor(requestedAccountId);
     const storeAccountId = resolveReadStoreKey(projection.storeAccountId);
@@ -9265,7 +9403,7 @@ app2.get("/conversations", (c) => {
       };
     });
     conversations.sort((a, b) => (b.lastMessageTimestamp ?? 0) - (a.lastMessageTimestamp ?? 0));
-    console.error(`${TAG25} conversations requested=${requestedAccountId} account=${storeAccountId} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${allConversations.size > 0} count=${conversations.length}`);
+    console.error(`${TAG25} conversations requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${allConversations.size > 0} count=${conversations.length}`);
     return c.json({ conversations });
   } catch (err) {
     console.error(`${TAG25} conversations error: ${String(err)}`);
@@ -9275,7 +9413,7 @@ app2.get("/conversations", (c) => {
 app2.get("/messages", (c) => {
   try {
     const requestedAccountId = validateAccountId(c.req.query("accountId") ?? null);
-    const denial = callerScopeDenial(c, requestedAccountId);
+    const { denial, callerAccountId } = callerScopeDenial(c, requestedAccountId);
     if (denial) return denial;
     const jid = c.req.query("jid");
     if (!jid) {
@@ -9321,7 +9459,7 @@ app2.get("/messages", (c) => {
         ...reactions && reactions.length > 0 ? { reactions } : {}
       };
     });
-    console.error(`${TAG25} messages requested=${requestedAccountId} account=${storeAccountId} jid=${jid} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${storeMessages.length > 0} limit=${effectiveLimit ?? "all"} returned=${messages.length} withAttachments=${withAttachments}`);
+    console.error(`${TAG25} messages requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} jid=${jid} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${storeMessages.length > 0} limit=${effectiveLimit ?? "all"} returned=${messages.length} withAttachments=${withAttachments}`);
     return c.json({ messages });
   } catch (err) {
     console.error(`${TAG25} messages error: ${String(err)}`);
@@ -9334,7 +9472,7 @@ app2.get("/conversation-graph-state", async (c) => {
     const jid = c.req.query("jid");
     const accountIdQuery = c.req.query("accountId");
     const t0 = Date.now();
-    const denial = callerScopeDenial(c, validateAccountId(accountIdQuery ?? null));
+    const { denial } = callerScopeDenial(c, validateAccountId(accountIdQuery ?? null));
     if (denial) return denial;
     if (!directCacheKey && !jid) {
       const requestedAccountId = validateAccountId(accountIdQuery ?? null);
@@ -11623,6 +11761,7 @@ function unwrapChannel(text) {
   return source ? { text: inner, source } : { text: inner };
 }
 var COMPOSED_ADMIN_FRAME = /^(?:## Scheduled automation \(platform-verified\)\n[\s\S]*?\n\n)?(?:## Standing rules\n[\s\S]*?\n\n)?## Context\n([\s\S]*)\n\n## Instruction\n[\s\S]*$/;
+var SCHEDULED_MARKER_PREFIX = "## Scheduled automation (platform-verified)\n";
 var UPLOAD_ANNOTATION = /(?:\n\n)?\[The operator uploaded \d+ file\(s\): [\s\S]*\]$/;
 function rawFromComposedAdminFrame(text) {
   const context = text.match(COMPOSED_ADMIN_FRAME)?.[1];
@@ -11638,6 +11777,7 @@ function uploadCountOf(text) {
 function operatorInboundTurn(u, ts) {
   const rawBody = rawFromComposedAdminFrame(u.text);
   const uploadCount = uploadCountOf(u.text);
+  const scheduled = rawBody !== void 0 && u.text.startsWith(SCHEDULED_MARKER_PREFIX);
   const text = rawBody === void 0 ? u.text.replace(PUBLIC_UPLOAD_ANNOTATION, "") : u.text;
   return {
     kind: "operator-inbound",
@@ -11645,7 +11785,8 @@ function operatorInboundTurn(u, ts) {
     ts,
     ...u.source ? { source: u.source } : {},
     ...rawBody !== void 0 ? { rawBody } : {},
-    ...uploadCount !== void 0 ? { uploadCount } : {}
+    ...uploadCount !== void 0 ? { uploadCount } : {},
+    ...scheduled ? { scheduled: true } : {}
   };
 }
 function asString(content) {
@@ -11654,16 +11795,6 @@ function asString(content) {
 function tsOf(row) {
   return typeof row.timestamp === "string" ? row.timestamp : null;
 }
-function hasWebchatReply(content) {
-  if (!Array.isArray(content)) return false;
-  for (const block of content) {
-    if (block && typeof block === "object") {
-      const b = block;
-      if (b.type === "tool_use" && b.name === WEBCHAT_REPLY_TOOL) return true;
-    }
-  }
-  return false;
-}
 function joinTextBlocks(content) {
   if (!Array.isArray(content)) return "";
   const parts = [];
@@ -11786,9 +11917,8 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
         out.push({ kind: "agent-error", code, raw, ts });
         continue;
       }
-      if (hasWebchatReply(msg?.content)) turnCtx.repliedThisTurn = true;
       const isEnd = msg?.stop_reason === "end_turn";
-      const promoteFinal = isEnd && turnCtx.lastChannelSource === "webchat" && !turnCtx.repliedThisTurn;
+      const promoteFinal = isEnd && turnCtx.lastChannelSource === "webchat";
       out.push(...assistantTurns(msg?.content, ts, promoteFinal, erroredIds));
       continue;
     }
@@ -11797,7 +11927,6 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
       if (content !== null && CHANNEL_WRAPPER2.test(content)) {
         const u = unwrapChannel(content);
         turnCtx.lastChannelSource = u.source;
-        turnCtx.repliedThisTurn = false;
         if (!isScheduleSource(content)) {
           out.push(operatorInboundTurn(u, ts));
           queuedPendingSuppress.set(u.text, (queuedPendingSuppress.get(u.text) ?? 0) + 1);
@@ -11811,7 +11940,6 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
       if (isChannelQueued) {
         const u = unwrapChannel(att.prompt);
         turnCtx.lastChannelSource = u.source;
-        turnCtx.repliedThisTurn = false;
         if (!isScheduleSource(att.prompt)) {
           renderOrSuppressChannelInbound(u, ts, out, queuedPendingSuppress);
         }
@@ -11841,7 +11969,6 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
     if (isChannel) {
       const u = unwrapChannel(text);
       turnCtx.lastChannelSource = u.source;
-      turnCtx.repliedThisTurn = false;
       if (!isScheduleSource(text)) {
         renderOrSuppressChannelInbound(u, ts, out, queuedPendingSuppress);
       }
@@ -13818,8 +13945,8 @@ async function reapplyLeversViaManager() {
 var WEBCHAT_SEND_TURN_WINDOW_MS = Number(process.env.WEBCHAT_SEND_TURN_WINDOW_MS ?? String(15e3));
 var sendSeq = 0;
 function createWebchatRoutes(deps) {
-  const app66 = new Hono();
-  app66.post("/send", requireAdminSession, async (c) => {
+  const app67 = new Hono();
+  app67.post("/send", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -14022,7 +14149,7 @@ ${note}` : note;
     if (turnTimer.unref) turnTimer.unref();
     return c.json({ ok: true });
   });
-  app66.post("/interrupt", requireAdminSession, async (c) => {
+  app67.post("/interrupt", requireAdminSession, async (c) => {
     const cacheKey = c.get("cacheKey");
     const requesterUserId = (cacheKey ? getUserIdForSession(cacheKey) : void 0) ?? null;
     const primaryUserId = resolvePrimaryAdminUserId();
@@ -14050,7 +14177,7 @@ ${note}` : note;
     }
     return c.json({ ok: true, stopped: outcome.stopped, intId: outcome.intId, deadChild: outcome.deadChild }, 200);
   });
-  app66.post("/settings", requireAdminSession, async (c) => {
+  app67.post("/settings", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const op = body?.op;
     const value = body?.value;
@@ -14090,7 +14217,7 @@ ${note}` : note;
     console.log(`[webchat:settings] op=${op} outcome=accepted value=${value} settingsApplied=${settingsApplied}`);
     return c.json({ ok: true, settingsApplied });
   });
-  app66.get("/session", requireAdminSession, async (c) => {
+  app67.get("/session", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -14168,7 +14295,7 @@ ${note}` : note;
     const indicators = await fetchComposerIndicators(sessionId);
     return c.json({ sessionId, projectDir, source, sizeBytes: jsonlSizeBytes(projectDir, sessionId), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${sessionId}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${sessionId}`) ?? null, ...indicators, ...readLevers(account) });
   });
-  app66.post("/permission-verdict", requireAdminSession, async (c) => {
+  app67.post("/permission-verdict", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const sessionId = body?.sessionId;
     const requestId = body?.request_id;
@@ -14185,7 +14312,7 @@ ${note}` : note;
     const ok = deps.resolvePermissionVerdict?.(`session:${sessionId}`, requestId, behavior) ?? false;
     return c.json({ ok });
   });
-  return app66;
+  return app67;
 }
 
 // server/routes/webchat-greeting.ts
@@ -15541,15 +15668,15 @@ function operatorRoleFor(config, userId) {
 async function buildAccountOptionList(accounts, userId) {
   const houseAccount = accounts.find((a) => a.config.role === "house");
   console.log(`[admin-accounts] op=list count=${accounts.length} house=${houseAccount?.accountId ?? "none"}`);
-  const resolve42 = async (a) => {
+  const resolve43 = async (a) => {
     const businessName = await fetchAccountName(a.accountId) || void 0;
     return { accountId: a.accountId, businessName, role: operatorRoleFor(a.config, userId), isHouse: a.config.role === "house" };
   };
   const houseOptions = await Promise.all(
-    accounts.filter((a) => a.config.role === "house").map(resolve42)
+    accounts.filter((a) => a.config.role === "house").map(resolve43)
   );
   const nonHouseOptions = await Promise.all(
-    accounts.filter((a) => a.config.role !== "house").map(resolve42)
+    accounts.filter((a) => a.config.role !== "house").map(resolve43)
   );
   const sortKey = (o) => (o.businessName || o.accountId).toLowerCase();
   nonHouseOptions.sort((x, y) => {
@@ -16821,7 +16948,7 @@ function parseSkillPathsFromFrontmatter(fm) {
   }
   return out;
 }
-function listPluginDirs() {
+function listPluginDirs(accountPluginsDir) {
   const out = /* @__PURE__ */ new Map();
   const platformPlugins = resolve22(PLATFORM_ROOT, "plugins");
   if (existsSync30(platformPlugins)) {
@@ -16850,8 +16977,38 @@ function listPluginDirs() {
       }
     }
   }
+  if (accountPluginsDir && existsSync30(accountPluginsDir)) {
+    try {
+      for (const name of readdirSync22(accountPluginsDir)) {
+        if (out.has(name)) continue;
+        const dir = join33(accountPluginsDir, name);
+        try {
+          if (statSync13(dir).isDirectory()) out.set(name, dir);
+        } catch {
+        }
+      }
+    } catch {
+    }
+  }
   return out;
 }
+function accountPluginsDirFor(accountId) {
+  return resolve22(PLATFORM_ROOT, "..", "data/accounts", accountId, "plugins");
+}
+function listAccountPluginNames(accountPluginsDir) {
+  if (!existsSync30(accountPluginsDir)) return [];
+  try {
+    return readdirSync22(accountPluginsDir).filter((name) => {
+      try {
+        return statSync13(join33(accountPluginsDir, name)).isDirectory();
+      } catch {
+        return false;
+      }
+    });
+  } catch {
+    return [];
+  }
+}
 function readEnabledPlugins(accountId) {
   const accountFile = resolve22(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
   if (!existsSync30(accountFile)) return /* @__PURE__ */ new Set();
@@ -16877,10 +17034,13 @@ function readFrontmatter(path3) {
 }
 function computeActivePlugins(accountId) {
   const enabled = readEnabledPlugins(accountId);
-  if (enabled.size === 0) return [];
-  const pluginDirs = listPluginDirs();
+  const accountPluginsDir = accountPluginsDirFor(accountId);
+  const accountPluginNames = listAccountPluginNames(accountPluginsDir);
+  const emitNames = Array.from(/* @__PURE__ */ new Set([...enabled, ...accountPluginNames])).sort();
+  if (emitNames.length === 0) return [];
+  const pluginDirs = listPluginDirs(accountPluginsDir);
   const out = [];
-  for (const name of Array.from(enabled).sort()) {
+  for (const name of emitNames) {
     const dir = pluginDirs.get(name);
     if (!dir) continue;
     const fm = readFrontmatter(join33(dir, "PLUGIN.md"));
@@ -16934,7 +17094,7 @@ function computeSpecialistDomains(accountId) {
   } catch {
     return [];
   }
-  const pluginDirs = listPluginDirs();
+  const pluginDirs = listPluginDirs(accountPluginsDirFor(accountId));
   const descByPlugin = /* @__PURE__ */ new Map();
   const resolveDesc = (qualified) => {
     if (!qualified.startsWith("mcp__")) return void 0;
@@ -23710,8 +23870,163 @@ app47.patch("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
+app47.delete("/:eventId", requireAdminSession, async (c) => {
+  const accountId = getAccountIdForSession(c.var.cacheKey);
+  if (!accountId) {
+    console.error('[admin:routines] op=delete auth-rejected reason="no account for session"');
+    return c.json({ error: "Account not found for session" }, 401);
+  }
+  const eventId = c.req.param("eventId");
+  const session = getSession();
+  try {
+    const res = await session.run(
+      `MATCH (e:Event {eventId: $eventId, accountId: $accountId})
+       WHERE ${AUTOMATION_WHERE}
+       WITH e, e.name AS name
+       DETACH DELETE e
+       RETURN name`,
+      { eventId, accountId }
+    );
+    const found = res.records.length > 0;
+    console.log(`[admin:routines] op=delete id=${eventId.slice(0, 8)} found=${found ? 1 : 0}`);
+    return c.json({ found });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`[admin:routines] op=delete-fail id=${eventId.slice(0, 8)} err="${message}"`);
+    return c.json({ error: `Delete failed: ${message}` }, 503);
+  } finally {
+    await session.close();
+  }
+});
 var routines_default = app47;
 
+// server/routes/admin/skills.ts
+import { existsSync as existsSync36, readdirSync as readdirSync24, readFileSync as readFileSync39, rmSync as rmSync3 } from "fs";
+import { resolve as resolve31 } from "path";
+var app48 = new Hono();
+var NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
+function splitSkillMd(text) {
+  const m = text.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
+  const fm = { name: "", description: "", publicEmbed: false };
+  if (!m) return { frontmatter: fm, body: text };
+  for (const line of m[1].split(/\r?\n/)) {
+    const kv = line.match(/^([A-Za-z][\w-]*):[ \t]*(.*)$/);
+    if (!kv) continue;
+    const [, key, rawVal] = kv;
+    const val = stripQuotes(rawVal.trim());
+    if (key === "name") fm.name = val;
+    else if (key === "description") fm.description = val;
+    else if (key === "publicEmbed") fm.publicEmbed = val === "true";
+  }
+  return { frontmatter: fm, body: text.slice(m[0].length) };
+}
+function stripQuotes(s) {
+  if (s.startsWith('"') && s.endsWith('"') || s.startsWith("'") && s.endsWith("'")) return s.slice(1, -1);
+  return s;
+}
+function accountDirForSession(cacheKey) {
+  const accountId = getAccountIdForSession(cacheKey);
+  if (!accountId) return null;
+  const match = listValidAccounts().find((a) => a.accountId === accountId);
+  return match ? { accountId, accountDir: match.accountDir } : null;
+}
+function subdirs(dir) {
+  if (!existsSync36(dir)) return [];
+  try {
+    return readdirSync24(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+  } catch {
+    return [];
+  }
+}
+app48.get("/", requireAdminSession, async (c) => {
+  const acct = accountDirForSession(c.var.cacheKey);
+  if (!acct) {
+    console.error('[admin:skills] op=list auth-rejected reason="no account for session"');
+    return c.json({ error: "Account not found for session" }, 401);
+  }
+  const pluginsDir = resolve31(acct.accountDir, "plugins");
+  const skills = [];
+  let pluginCount = 0;
+  for (const plugin of subdirs(pluginsDir)) {
+    pluginCount++;
+    const skillsDir = resolve31(pluginsDir, plugin, "skills");
+    for (const skill of subdirs(skillsDir)) {
+      const skillMd = resolve31(skillsDir, skill, "SKILL.md");
+      if (!existsSync36(skillMd)) continue;
+      try {
+        const { frontmatter } = splitSkillMd(readFileSync39(skillMd, "utf-8"));
+        const refsDir = resolve31(skillsDir, skill, "references");
+        const refCount = existsSync36(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).length : 0;
+        skills.push({ plugin, skill, description: frontmatter.description, refCount });
+      } catch (err) {
+        console.error(`[admin:skills] op=list-skip plugin=${plugin} skill=${skill} reason="${err instanceof Error ? err.message : String(err)}"`);
+      }
+    }
+  }
+  skills.sort((a, b) => a.plugin.localeCompare(b.plugin) || a.skill.localeCompare(b.skill));
+  console.log(`[admin:skills] op=list accountId=${acct.accountId.slice(0, 8)} plugins=${pluginCount} skills=${skills.length}`);
+  return c.json({ skills });
+});
+app48.get("/:plugin/:skill", requireAdminSession, async (c) => {
+  const acct = accountDirForSession(c.var.cacheKey);
+  if (!acct) return c.json({ error: "Account not found for session" }, 401);
+  const plugin = c.req.param("plugin");
+  const skill = c.req.param("skill");
+  if (!NAME_RE.test(plugin) || !NAME_RE.test(skill)) {
+    console.error(`[admin:skills] op=get outcome=rejected reason=invalid-name plugin="${plugin}" skill="${skill}"`);
+    return c.json({ error: "Invalid plugin or skill name" }, 400);
+  }
+  const skillDir = resolve31(acct.accountDir, "plugins", plugin, "skills", skill);
+  const skillMd = resolve31(skillDir, "SKILL.md");
+  const found = existsSync36(skillMd);
+  console.log(`[admin:skills] op=get plugin=${plugin} skill=${skill} found=${found}`);
+  if (!found) return c.json({ error: "Skill not found" }, 404);
+  try {
+    const { frontmatter, body } = splitSkillMd(readFileSync39(skillMd, "utf-8"));
+    const refsDir = resolve31(skillDir, "references");
+    const references = existsSync36(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name).sort() : [];
+    return c.json({ skill: { plugin, skill, frontmatter, body, references } });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`[admin:skills] op=get-fail plugin=${plugin} skill=${skill} err="${message}"`);
+    return c.json({ error: `Skill unavailable: ${message}` }, 503);
+  }
+});
+app48.delete("/:plugin/:skill", requireAdminSession, async (c) => {
+  const acct = accountDirForSession(c.var.cacheKey);
+  if (!acct) return c.json({ error: "Account not found for session" }, 401);
+  const plugin = c.req.param("plugin");
+  const skill = c.req.param("skill");
+  if (!NAME_RE.test(plugin) || !NAME_RE.test(skill)) {
+    console.error(`[admin:skills] op=delete outcome=rejected reason=invalid-name plugin="${plugin}" skill="${skill}"`);
+    return c.json({ error: "Invalid plugin or skill name" }, 400);
+  }
+  const pluginDir = resolve31(acct.accountDir, "plugins", plugin);
+  const skillsDir = resolve31(pluginDir, "skills");
+  const skillDir = resolve31(skillsDir, skill);
+  if (!existsSync36(resolve31(skillDir, "SKILL.md"))) {
+    console.error(`[admin:skills] op=delete outcome=rejected reason=not-found plugin=${plugin} skill=${skill}`);
+    return c.json({ error: "Skill not found" }, 404);
+  }
+  try {
+    rmSync3(skillDir, { recursive: true, force: true });
+    const pluginDirRemoved = subdirs(skillsDir).length === 0;
+    if (pluginDirRemoved) rmSync3(pluginDir, { recursive: true, force: true });
+    const skillDirGone = !existsSync36(skillDir);
+    if (!skillDirGone) {
+      console.error(`[admin:skills] op=delete plugin=${plugin} skill=${skill} outcome=rejected reason=rm-incomplete skillDirGone=false`);
+      return c.json({ error: "Delete did not remove the skill directory" }, 503);
+    }
+    console.log(`[admin:skills] op=delete plugin=${plugin} skill=${skill} outcome=ok skillDirGone=${skillDirGone} pluginDirRemoved=${pluginDirRemoved}`);
+    return c.json({ ok: true, skillDirGone, pluginDirRemoved });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`[admin:skills] op=delete plugin=${plugin} skill=${skill} outcome=rejected reason=rm-error err="${message}"`);
+    return c.json({ error: `Delete failed: ${message}` }, 503);
+  }
+});
+var skills_default = app48;
+
 // app/lib/time-entry-format.ts
 function secondsBetween(startIso, endIso) {
   const s = Date.parse(startIso);
@@ -23733,8 +24048,8 @@ function toNum(v) {
 var TAG39 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
-var app48 = new Hono();
-app48.get("/", requireAdminSession, async (c) => {
+var app49 = new Hono();
+app49.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -23821,13 +24136,13 @@ app48.get("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var tasks_list_default = app48;
+var tasks_list_default = app49;
 
 // server/routes/admin/task-timer-start.ts
 import { randomUUID as randomUUID14 } from "crypto";
 var TAG40 = "[task-timer]";
-var app49 = new Hono();
-app49.post("/", requireAdminSession, async (c) => {
+var app50 = new Hono();
+app50.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -23882,13 +24197,13 @@ app49.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_timer_start_default = app49;
+var task_timer_start_default = app50;
 
 // server/routes/admin/task-timer-stop.ts
 import neo4j5 from "neo4j-driver";
 var TAG41 = "[task-timer]";
-var app50 = new Hono();
-app50.post("/", requireAdminSession, async (c) => {
+var app51 = new Hono();
+app51.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -23955,12 +24270,12 @@ app50.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_timer_stop_default = app50;
+var task_timer_stop_default = app51;
 
 // server/routes/admin/task-complete.ts
 var TAG42 = "[task-timer]";
-var app51 = new Hono();
-app51.post("/", requireAdminSession, async (c) => {
+var app52 = new Hono();
+app52.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -23998,14 +24313,14 @@ app51.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_complete_default = app51;
+var task_complete_default = app52;
 
 // server/routes/admin/task-time-adjust.ts
 import { randomUUID as randomUUID15 } from "crypto";
 import neo4j6 from "neo4j-driver";
 var TAG43 = "[task-time-adjust]";
-var app52 = new Hono();
-app52.post("/", requireAdminSession, async (c) => {
+var app53 = new Hono();
+app53.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -24079,11 +24394,11 @@ app52.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_time_adjust_default = app52;
+var task_time_adjust_default = app53;
 
 // server/routes/admin/activity.ts
-import { readdirSync as readdirSync24 } from "fs";
-var app53 = new Hono();
+import { readdirSync as readdirSync25 } from "fs";
+var app54 = new Hono();
 var TAG44 = "[activity]";
 function resolveHouseAccountId(accounts) {
   const houses = accounts.filter((a) => a.config.role === "house");
@@ -24098,14 +24413,14 @@ function requestToken() {
 var short = (id) => id ? id.slice(0, 8) : "unset";
 function countAccountDirsOnDisk() {
   try {
-    return readdirSync24(ACCOUNTS_DIR, { withFileTypes: true }).filter(
+    return readdirSync25(ACCOUNTS_DIR, { withFileTypes: true }).filter(
       (e) => e.isDirectory() && !e.name.startsWith(".")
     ).length;
   } catch {
     return null;
   }
 }
-app53.get("/", requireAdminSession, async (c) => {
+app54.get("/", requireAdminSession, async (c) => {
   const req = requestToken();
   const cacheKey = c.var.cacheKey;
   const caller2 = getAccountIdForSession(cacheKey) ?? null;
@@ -24214,61 +24529,62 @@ app53.get("/", requireAdminSession, async (c) => {
     }
   });
 });
-var activity_default = app53;
+var activity_default = app54;
 
 // server/routes/admin/index.ts
-var app54 = new Hono();
-app54.route("/session", session_default);
-app54.route("/accounts", accounts_default);
-app54.route("/logs", logs_default);
-app54.route("/claude-info", claude_info_default);
-app54.route("/attachment", attachment_default);
-app54.route("/agents", agents_default);
-app54.route("/sessions", sessions_default);
-app54.route("/claude-sessions", claude_sessions_default);
-app54.route("/log-ingest", log_ingest_default);
-app54.route("/events", events_default);
-app54.route("/files", files_default);
-app54.route("/graph-search", graph_search_default);
-app54.route("/graph-subgraph", graph_subgraph_default);
-app54.route("/graph-delete", graph_delete_default);
-app54.route("/graph-restore", graph_restore_default);
-app54.route("/graph-labels-in-graph", graph_labels_in_graph_default);
-app54.route("/graph-default-view", graph_default_view_default);
-app54.route("/sidebar-artefacts", sidebar_artefacts_default);
-app54.route("/sidebar-sessions", sidebar_sessions_default);
-app54.route("/session-delete", session_delete_default);
-app54.route("/session-stop", session_stop_default);
-app54.route("/session-archive", session_archive_default);
-app54.route("/session-rename", session_rename_default);
-app54.route("/session-usage", session_usage_default);
-app54.route("/browser", browser_default);
-app54.route("/session-rc-spawn", session_rc_spawn_default);
-app54.route("/session-reseat", session_reseat_default);
-app54.route("/system-stats", system_stats_default);
-app54.route("/health-brand", health_default2);
-app54.route("/linkedin-ingest", linkedin_ingest_default);
-app54.route("/post-turn-context", post_turn_context_default);
-app54.route("/public-session-context", public_session_context_default);
-app54.route("/public-session-exit", public_session_exit_default);
-app54.route("/access-session-evict", access_session_evict_default);
-app54.route("/enrol-person", enrol_person_default);
-app54.route("/calendar", calendar_default);
-app54.route("/routines", routines_default);
-app54.route("/tasks-list", tasks_list_default);
-app54.route("/task-timer-start", task_timer_start_default);
-app54.route("/task-timer-stop", task_timer_stop_default);
-app54.route("/task-complete", task_complete_default);
-app54.route("/task-time-adjust", task_time_adjust_default);
-app54.route("/activity", activity_default);
-var admin_default = app54;
+var app55 = new Hono();
+app55.route("/session", session_default);
+app55.route("/accounts", accounts_default);
+app55.route("/logs", logs_default);
+app55.route("/claude-info", claude_info_default);
+app55.route("/attachment", attachment_default);
+app55.route("/agents", agents_default);
+app55.route("/sessions", sessions_default);
+app55.route("/claude-sessions", claude_sessions_default);
+app55.route("/log-ingest", log_ingest_default);
+app55.route("/events", events_default);
+app55.route("/files", files_default);
+app55.route("/graph-search", graph_search_default);
+app55.route("/graph-subgraph", graph_subgraph_default);
+app55.route("/graph-delete", graph_delete_default);
+app55.route("/graph-restore", graph_restore_default);
+app55.route("/graph-labels-in-graph", graph_labels_in_graph_default);
+app55.route("/graph-default-view", graph_default_view_default);
+app55.route("/sidebar-artefacts", sidebar_artefacts_default);
+app55.route("/sidebar-sessions", sidebar_sessions_default);
+app55.route("/session-delete", session_delete_default);
+app55.route("/session-stop", session_stop_default);
+app55.route("/session-archive", session_archive_default);
+app55.route("/session-rename", session_rename_default);
+app55.route("/session-usage", session_usage_default);
+app55.route("/browser", browser_default);
+app55.route("/session-rc-spawn", session_rc_spawn_default);
+app55.route("/session-reseat", session_reseat_default);
+app55.route("/system-stats", system_stats_default);
+app55.route("/health-brand", health_default2);
+app55.route("/linkedin-ingest", linkedin_ingest_default);
+app55.route("/post-turn-context", post_turn_context_default);
+app55.route("/public-session-context", public_session_context_default);
+app55.route("/public-session-exit", public_session_exit_default);
+app55.route("/access-session-evict", access_session_evict_default);
+app55.route("/enrol-person", enrol_person_default);
+app55.route("/calendar", calendar_default);
+app55.route("/routines", routines_default);
+app55.route("/skills", skills_default);
+app55.route("/tasks-list", tasks_list_default);
+app55.route("/task-timer-start", task_timer_start_default);
+app55.route("/task-timer-stop", task_timer_stop_default);
+app55.route("/task-complete", task_complete_default);
+app55.route("/task-time-adjust", task_time_adjust_default);
+app55.route("/activity", activity_default);
+var admin_default = app55;
 
 // server/routes/access/verify-token.ts
 var TAG45 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
-var app55 = new Hono();
-app55.post("/", async (c) => {
+var app56 = new Hono();
+app56.post("/", async (c) => {
   const ip = c.var.clientIp || "unknown";
   let body;
   try {
@@ -24350,13 +24666,13 @@ app55.post("/", async (c) => {
     displayName: grant.displayName
   });
 });
-var verify_token_default = app55;
+var verify_token_default = app56;
 
 // app/lib/access-email.ts
 import { spawn as spawn2 } from "child_process";
-import { resolve as resolve31 } from "path";
-var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve31(process.cwd(), "..");
-var SEND_SCRIPT = resolve31(
+import { resolve as resolve32 } from "path";
+var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve32(process.cwd(), "..");
+var SEND_SCRIPT = resolve32(
   PLATFORM_ROOT7,
   "plugins",
   "email",
@@ -24413,9 +24729,9 @@ async function sendMagicLinkEmail(payload) {
 
 // server/routes/access/request-magic-link.ts
 var TAG46 = "[access-request-link]";
-var app56 = new Hono();
+var app57 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
-app56.post("/", async (c) => {
+app57.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24489,17 +24805,17 @@ app56.post("/", async (c) => {
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
-var request_magic_link_default = app56;
+var request_magic_link_default = app57;
 
 // server/routes/access/index.ts
-var app57 = new Hono();
-app57.route("/verify-token", verify_token_default);
-app57.route("/request-magic-link", request_magic_link_default);
-var access_default = app57;
+var app58 = new Hono();
+app58.route("/verify-token", verify_token_default);
+app58.route("/request-magic-link", request_magic_link_default);
+var access_default = app58;
 
 // server/routes/sites.ts
-import { existsSync as existsSync36, readFileSync as readFileSync39, realpathSync as realpathSync7, statSync as statSync14 } from "fs";
-import { resolve as resolve32 } from "path";
+import { existsSync as existsSync37, readFileSync as readFileSync40, realpathSync as realpathSync7, statSync as statSync15 } from "fs";
+import { resolve as resolve33 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
   ".html": "text/html; charset=utf-8",
@@ -24530,8 +24846,8 @@ function getExt(p) {
   if (idx < p.lastIndexOf("/")) return "";
   return p.slice(idx).toLowerCase();
 }
-var app58 = new Hono();
-app58.get("/:rel{.*}", (c) => {
+var app59 = new Hono();
+app59.get("/:rel{.*}", (c) => {
   const reqPath = c.req.path;
   const rawRel = c.req.param("rel") ?? "";
   const trimmed = rawRel.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -24556,15 +24872,15 @@ app58.get("/:rel{.*}", (c) => {
     }
     segments.push(seg);
   }
-  const rootDir = resolve32(account.accountDir, "sites");
-  let filePath = segments.length === 0 ? rootDir : resolve32(rootDir, ...segments);
+  const rootDir = resolve33(account.accountDir, "sites");
+  let filePath = segments.length === 0 ? rootDir : resolve33(rootDir, ...segments);
   if (filePath !== rootDir && !filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
   let stat11;
   try {
-    stat11 = existsSync36(filePath) ? statSync14(filePath) : null;
+    stat11 = existsSync37(filePath) ? statSync15(filePath) : null;
   } catch {
     stat11 = null;
   }
@@ -24577,13 +24893,13 @@ app58.get("/:rel{.*}", (c) => {
     return c.redirect(target, 301);
   }
   if (stat11?.isDirectory()) {
-    filePath = resolve32(filePath, "index.html");
+    filePath = resolve33(filePath, "index.html");
   }
   if (!filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync36(filePath)) {
+  if (!existsSync37(filePath)) {
     console.error(`[sites] not-found path=${reqPath} status=404`);
     return c.text("Not found", 404);
   }
@@ -24602,7 +24918,7 @@ app58.get("/:rel{.*}", (c) => {
   }
   let body;
   try {
-    body = readFileSync39(realPath);
+    body = readFileSync40(realPath);
   } catch (err) {
     const code = err?.code;
     if (code === "EISDIR") {
@@ -24634,11 +24950,11 @@ app58.get("/:rel{.*}", (c) => {
     "X-Content-Type-Options": "nosniff"
   });
 });
-var sites_default = app58;
+var sites_default = app59;
 
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync40, writeFileSync as writeFileSync14 } from "fs";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync41, writeFileSync as writeFileSync14 } from "fs";
 import { dirname as dirname13 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
@@ -24647,7 +24963,7 @@ var cachedSecret = null;
 function getSecret() {
   if (cachedSecret) return cachedSecret;
   try {
-    const hex2 = readFileSync40(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+    const hex2 = readFileSync41(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
     if (hex2.length === SECRET_BYTES * 2) {
       cachedSecret = Buffer.from(hex2, "hex");
       return cachedSecret;
@@ -24661,7 +24977,7 @@ function getSecret() {
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
   }
-  const hex = readFileSync40(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+  const hex = readFileSync41(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
   cachedSecret = Buffer.from(hex, "hex");
   return cachedSecret;
 }
@@ -24714,7 +25030,7 @@ var VISITOR_COOKIE_NAME = "mxy_v";
 var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
-import { existsSync as existsSync37, readFileSync as readFileSync41 } from "fs";
+import { existsSync as existsSync38, readFileSync as readFileSync42 } from "fs";
 import { join as join43 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
@@ -24724,9 +25040,9 @@ function readBrandConfig() {
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot5) return null;
   const brandPath = join43(platformRoot5, "config", "brand.json");
-  if (!existsSync37(brandPath)) return null;
+  if (!existsSync38(brandPath)) return null;
   try {
-    cached2 = JSON.parse(readFileSync41(brandPath, "utf-8"));
+    cached2 = JSON.parse(readFileSync42(brandPath, "utf-8"));
     return cached2;
   } catch {
     return null;
@@ -24734,7 +25050,7 @@ function readBrandConfig() {
 }
 
 // server/routes/visitor-consent.ts
-var app59 = new Hono();
+var app60 = new Hono();
 var CONSENT_COOKIE_NAME = "mxy_consent";
 var CONSENT_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
 var DEFAULT_CONSENT_COPY = {
@@ -24779,17 +25095,17 @@ function siteSlugFromReferer(referer) {
     return "";
   }
 }
-app59.options("/consent", (c) => {
+app60.options("/consent", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app59.options("/brand-config", (c) => {
+app60.options("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app59.post("/consent", async (c) => {
+app60.post("/consent", async (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   let raw;
@@ -24829,7 +25145,7 @@ app59.post("/consent", async (c) => {
   console.log(`[consent] ${parsed.decision} site=${site} brand=${brandName} tokenBound=${tokenBound}`);
   return c.body(null, 204);
 });
-app59.get("/brand-config", (c) => {
+app60.get("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   const brand = readBrandConfig();
@@ -24839,7 +25155,7 @@ app59.get("/brand-config", (c) => {
   c.header("Cache-Control", "public, max-age=300");
   return c.json({ consent: { copy, palette } });
 });
-var visitor_consent_default = app59;
+var visitor_consent_default = app60;
 
 // server/routes/listings.ts
 function getCookie(headerValue, name) {
@@ -24866,8 +25182,8 @@ function appendConsentParams(pageUrl, token) {
 }
 var SAFE_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,118}[a-z0-9])?$/;
 var CHAT_SESSION_KEY_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var app60 = new Hono();
-app60.get("/:slug/click", async (c) => {
+var app61 = new Hono();
+app61.get("/:slug/click", async (c) => {
   const slug = c.req.param("slug") ?? "";
   const rawSession = c.req.query("session") ?? "";
   const sessionKey = CHAT_SESSION_KEY_RE.test(rawSession) ? rawSession : "invalid";
@@ -24931,10 +25247,10 @@ app60.get("/:slug/click", async (c) => {
   console.log(`[property-card-click] sessionKey=${sessionKey} listingSlug=${slug} consent=${consentCookie ?? "absent"} ts=${(/* @__PURE__ */ new Date()).toISOString()}`);
   return c.redirect(redirectUrl, 302);
 });
-var listings_default = app60;
+var listings_default = app61;
 
 // server/routes/visitor-event.ts
-var app61 = new Hono();
+var app62 = new Hono();
 var BOT_UA_RE = /\b(bot|crawl|spider|slurp|headlesschrome|phantomjs|googlebot|bingbot|yandex|baiduspider|ahrefsbot|semrushbot|mj12bot|dotbot|petalbot)\b/i;
 var buckets = /* @__PURE__ */ new Map();
 var RATE_LIMIT = 60;
@@ -25010,12 +25326,12 @@ function originAllowed(origin, allowlist) {
     return false;
   }
 }
-app61.options("/event", (c) => {
+app62.options("/event", (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   return c.body(null, 204);
 });
-app61.post("/event", async (c) => {
+app62.post("/event", async (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   const ua = c.req.header("user-agent") ?? "";
@@ -25220,17 +25536,17 @@ async function writeEvent(opts) {
     );
   }
 }
-var visitor_event_default = app61;
+var visitor_event_default = app62;
 
 // server/routes/session.ts
-import { resolve as resolve33 } from "path";
-import { existsSync as existsSync38, writeFileSync as writeFileSync15, mkdirSync as mkdirSync9 } from "fs";
+import { resolve as resolve34 } from "path";
+import { existsSync as existsSync39, writeFileSync as writeFileSync15, mkdirSync as mkdirSync9 } from "fs";
 var UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function writeBrandingCache(accountId, agentSlug, branding) {
   try {
-    const cacheDir = resolve33(MAXY_DIR, "branding-cache", accountId);
+    const cacheDir = resolve34(MAXY_DIR, "branding-cache", accountId);
     mkdirSync9(cacheDir, { recursive: true });
-    writeFileSync15(resolve33(cacheDir, `${agentSlug}.json`), JSON.stringify(branding), "utf-8");
+    writeFileSync15(resolve34(cacheDir, `${agentSlug}.json`), JSON.stringify(branding), "utf-8");
   } catch (err) {
     console.error(`[branding] cache write failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -25266,8 +25582,8 @@ function withVisitorCookie(response, visitorId) {
     headers
   });
 }
-var app62 = new Hono();
-app62.post("/", async (c) => {
+var app63 = new Hono();
+app63.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -25307,8 +25623,8 @@ app62.post("/", async (c) => {
   }
   let agentConfig = null;
   if (account) {
-    const agentDir = resolve33(account.accountDir, "agents", agentSlug);
-    if (!existsSync38(agentDir) || !existsSync38(resolve33(agentDir, "config.json"))) {
+    const agentDir = resolve34(account.accountDir, "agents", agentSlug);
+    if (!existsSync39(agentDir) || !existsSync39(resolve34(agentDir, "config.json"))) {
       return c.json({ error: "Agent not found" }, 404);
     }
     agentConfig = resolveAgentConfig(account.accountDir, agentSlug);
@@ -25414,7 +25730,7 @@ app62.post("/", async (c) => {
     newVisitorId
   );
 });
-var session_default2 = app62;
+var session_default2 = app63;
 
 // server/lib/calendar-slots.ts
 var WEEKDAYS = ["sun", "mon", "tue", "wed", "thu", "fri", "sat"];
@@ -25497,17 +25813,17 @@ function computeOpenSlots(config, busy, fromISO, toISO) {
 }
 
 // server/routes/calendar-public.ts
-var app63 = new Hono();
+var app64 = new Hono();
 function setCors(c) {
   c.header("Access-Control-Allow-Origin", "*");
   c.header("Access-Control-Allow-Methods", "GET, OPTIONS");
   c.header("Access-Control-Allow-Headers", "content-type");
 }
-app63.options("/free-busy", (c) => {
+app64.options("/free-busy", (c) => {
   setCors(c);
   return c.body(null, 204);
 });
-app63.get("/free-busy", async (c) => {
+app64.get("/free-busy", async (c) => {
   setCors(c);
   const from = c.req.query("from");
   const to = c.req.query("to");
@@ -25563,14 +25879,14 @@ app63.get("/free-busy", async (c) => {
     await session.close();
   }
 });
-var calendar_public_default = app63;
+var calendar_public_default = app64;
 
 // server/routes/portal-fetch.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat8, readFile as readFile8, realpath } from "fs/promises";
-import { join as join44, resolve as resolve34, sep as sep9 } from "path";
+import { join as join44, resolve as resolve35, sep as sep9 } from "path";
 import { Readable as Readable3 } from "stream";
-var app64 = new Hono();
+var app65 = new Hono();
 var TAG47 = "[portal-fetch]";
 async function verifySignature(secret, accountId, relPath, expiresAtMs, signature, nowMs) {
   if (!secret || !signature) return false;
@@ -25621,7 +25937,7 @@ ${expiresAtMs}`)
   return diff === 0;
 }
 async function readAccountSecret(accountId) {
-  const path3 = resolve34(DATA_ROOT, "accounts", accountId, "secrets", "data-portal.env");
+  const path3 = resolve35(DATA_ROOT, "accounts", accountId, "secrets", "data-portal.env");
   let text;
   try {
     text = await readFile8(path3, "utf8");
@@ -25657,7 +25973,7 @@ async function resolveFetchTarget(accountDir, relPath, ownerId) {
   const exposeFolders = await readExposeFolders2(accountDir);
   const { exposed } = resolveExposedDirs(schemaText, exposeFolders);
   if (exposed.length === 0 && !ownerId) return { ok: false, reason: "not-exposed" };
-  const lexical = resolve34(accountDir, relPath);
+  const lexical = resolve35(accountDir, relPath);
   let root;
   let absolute;
   try {
@@ -25706,7 +26022,7 @@ async function handle(c, headOnly) {
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const target = await resolveFetchTarget(
-    resolve34(DATA_ROOT, "accounts", accountId),
+    resolve35(DATA_ROOT, "accounts", accountId),
     relPath,
     owner || void 0
   );
@@ -25733,9 +26049,9 @@ async function handle(c, headOnly) {
     }
   });
 }
-app64.get("/fetch", (c) => handle(c, false));
-app64.on("HEAD", "/fetch", (c) => handle(c, true));
-var portal_fetch_default = app64;
+app65.get("/fetch", (c) => handle(c, false));
+app65.on("HEAD", "/fetch", (c) => handle(c, true));
+var portal_fetch_default = app65;
 
 // app/lib/timeentry-census.ts
 var TAG48 = "[timeentry-census]";
@@ -25820,7 +26136,7 @@ function startTimeEntryCensus(openSession, opts = {}) {
 }
 
 // app/lib/ledger-census.ts
-import { readdirSync as readdirSync25, readFileSync as readFileSync42, statSync as statSync15 } from "fs";
+import { readdirSync as readdirSync26, readFileSync as readFileSync43, statSync as statSync16 } from "fs";
 import { join as join45 } from "path";
 
 // ../lib/ledger-core/dist/reconcile.js
@@ -25869,7 +26185,7 @@ var DAY_MS = 864e5;
 function countWriteRejects24h(logDir, now) {
   let entries;
   try {
-    entries = readdirSync25(logDir).filter((f) => f.startsWith("mcp-ledger-") && f.endsWith(".log"));
+    entries = readdirSync26(logDir).filter((f) => f.startsWith("mcp-ledger-") && f.endsWith(".log"));
   } catch {
     return 0;
   }
@@ -25877,8 +26193,8 @@ function countWriteRejects24h(logDir, now) {
   for (const name of entries) {
     const path3 = join45(logDir, name);
     try {
-      if (now - statSync15(path3).mtimeMs > DAY_MS) continue;
-      for (const line of readFileSync42(path3, "utf8").split("\n")) {
+      if (now - statSync16(path3).mtimeMs > DAY_MS) continue;
+      for (const line of readFileSync43(path3, "utf8").split("\n")) {
         if (line.includes("[graph-write] reject")) total += 1;
       }
     } catch {
@@ -26147,7 +26463,7 @@ function startGraphHealthTimer() {
 
 // app/lib/file-watcher.ts
 import * as fsp2 from "fs/promises";
-import { resolve as resolve35, sep as sep10 } from "path";
+import { resolve as resolve36, sep as sep10 } from "path";
 var ACCOUNT_UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var DEFAULT_COALESCE_MS = 500;
 var ROOTS = ["accounts"];
@@ -26166,7 +26482,7 @@ async function startFileWatcher(opts = {}) {
   const dropFn = opts.drop ?? dropFileIndex;
   for (const r of ROOTS) {
     try {
-      await fsp2.mkdir(resolve35(dataRoot, r), { recursive: true });
+      await fsp2.mkdir(resolve36(dataRoot, r), { recursive: true });
     } catch (err) {
       console.error(
         `[file-watcher] start-failed root="${r}" err="${err.message}" \u2014 index will be maintained by the 5-min reconcile backstop only`
@@ -26187,7 +26503,7 @@ async function startFileWatcher(opts = {}) {
     timers.set(relativePath, t);
   }
   async function runHook(relativePath, accountId) {
-    const absolute = resolve35(dataRoot, relativePath);
+    const absolute = resolve36(dataRoot, relativePath);
     let exists = false;
     try {
       const st = await fsp2.stat(absolute);
@@ -26211,7 +26527,7 @@ async function startFileWatcher(opts = {}) {
     }
   }
   async function watchRoot(rootName) {
-    const absRoot = resolve35(dataRoot, rootName);
+    const absRoot = resolve36(dataRoot, rootName);
     try {
       const iter = fsp2.watch(absRoot, { recursive: true, signal: controller.signal });
       for await (const event of iter) {
@@ -26250,7 +26566,7 @@ async function startFileWatcher(opts = {}) {
 
 // app/lib/migrate-uploads.ts
 import { mkdir as mkdir6, readdir as readdir6, rename as rename3, rm as rm3 } from "fs/promises";
-import { dirname as dirname14, relative as relative7, resolve as resolve36 } from "path";
+import { dirname as dirname14, relative as relative7, resolve as resolve37 } from "path";
 var ACCOUNT_UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function walkFiles(dir) {
   const out = [];
@@ -26261,7 +26577,7 @@ async function walkFiles(dir) {
     return out;
   }
   for (const e of entries) {
-    const abs = resolve36(dir, e.name);
+    const abs = resolve37(dir, e.name);
     if (e.isDirectory()) {
       out.push(...await walkFiles(abs));
     } else if (e.isFile()) {
@@ -26281,7 +26597,7 @@ async function relocateTree(srcDir, destDir, dataRoot, accountId, session) {
   let moved = 0;
   for (const oldAbs of files) {
     const suffix = relative7(srcDir, oldAbs);
-    const newAbs = resolve36(destDir, suffix);
+    const newAbs = resolve37(destDir, suffix);
     await mkdir6(dirname14(newAbs), { recursive: true });
     await rename3(oldAbs, newAbs);
     moved++;
@@ -26308,7 +26624,7 @@ async function relocateTree(srcDir, destDir, dataRoot, accountId, session) {
 }
 async function migrateUploads(opts = {}) {
   const dataRoot = opts.dataRoot ?? DATA_ROOT;
-  const oldRoot = resolve36(dataRoot, "uploads");
+  const oldRoot = resolve37(dataRoot, "uploads");
   let topEntries;
   try {
     topEntries = await readdir6(oldRoot, { withFileTypes: true });
@@ -26329,8 +26645,8 @@ async function migrateUploads(opts = {}) {
       const name = entry.name;
       if (ACCOUNT_UUID_RE5.test(name)) {
         moved += await relocateTree(
-          resolve36(oldRoot, name),
-          resolve36(dataRoot, "accounts", name, "uploads"),
+          resolve37(oldRoot, name),
+          resolve37(dataRoot, "accounts", name, "uploads"),
           dataRoot,
           name,
           session
@@ -26342,8 +26658,8 @@ async function migrateUploads(opts = {}) {
           continue;
         }
         moved += await relocateTree(
-          resolve36(oldRoot, "public"),
-          resolve36(dataRoot, "accounts", installAccountId, "uploads", "public"),
+          resolve37(oldRoot, "public"),
+          resolve37(dataRoot, "accounts", installAccountId, "uploads", "public"),
           dataRoot,
           null,
           // public uploads carry no graph nodes
@@ -26373,7 +26689,7 @@ async function migrateUploads(opts = {}) {
 
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir7, readFile as readFile9, rename as rename4, writeFile as writeFile5, unlink as unlink4 } from "fs/promises";
-import { existsSync as existsSync39 } from "fs";
+import { existsSync as existsSync40 } from "fs";
 import { join as join46 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
@@ -26403,7 +26719,7 @@ async function writeRaw(path3, obj) {
     await rename4(tmp, path3);
   } catch (err) {
     try {
-      if (existsSync39(tmp)) await unlink4(tmp);
+      if (existsSync40(tmp)) await unlink4(tmp);
     } catch {
     }
     throw err;
@@ -26792,8 +27108,8 @@ var streamSSE = (c, cb, onError) => {
 
 // app/lib/whatsapp/gateway/routes.ts
 function createWaChannelRoutes(deps) {
-  const app66 = new Hono();
-  app66.get("/wa-channel/inbound", (c) => {
+  const app67 = new Hono();
+  app67.get("/wa-channel/inbound", (c) => {
     const senderId = c.req.query("senderId");
     if (!senderId) return c.json({ error: "senderId required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -26811,7 +27127,7 @@ function createWaChannelRoutes(deps) {
       }
     });
   });
-  app66.post("/wa-channel/reply", async (c) => {
+  app67.post("/wa-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const text = body?.text;
@@ -26832,7 +27148,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
     return c.json({ ok: true });
   });
-  app66.post("/wa-channel/reply-document", async (c) => {
+  app67.post("/wa-channel/reply-document", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const files = body?.files;
@@ -26871,7 +27187,7 @@ function createWaChannelRoutes(deps) {
     }
     return c.json({ ok: true, results });
   });
-  app66.post("/wa-channel/ready", async (c) => {
+  app67.post("/wa-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     if (typeof senderId !== "string") {
@@ -26880,7 +27196,7 @@ function createWaChannelRoutes(deps) {
     deps.onReady?.(senderId);
     return c.json({ ok: true });
   });
-  app66.post("/wa-channel/received", async (c) => {
+  app67.post("/wa-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const waMessageId = body?.waMessageId;
@@ -26890,7 +27206,7 @@ function createWaChannelRoutes(deps) {
     deps.onReceived?.(senderId, waMessageId);
     return c.json({ ok: true });
   });
-  app66.post("/wa-channel/turn-end", async (c) => {
+  app67.post("/wa-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const sessionId = body?.sessionId;
@@ -26901,7 +27217,7 @@ function createWaChannelRoutes(deps) {
     const interactive = body?.interactive === true;
     const finalText = typeof body?.finalText === "string" ? body.finalText : "";
     const sid = sessionId.slice(0, 8);
-    const deliver = interactive && finalText.trim().length > 0;
+    const deliver = interactive && !replied && finalText.trim().length > 0;
     if (deliver) {
       const bytes = Buffer.byteLength(finalText, "utf8");
       try {
@@ -26923,7 +27239,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=turn-end sessionId=${sid} replied=no delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app66;
+  return app67;
 }
 
 // app/lib/whatsapp/gateway/wa-gateway.ts
@@ -27338,8 +27654,8 @@ var InboundHub2 = class {
 
 // app/lib/webchat/gateway/routes.ts
 function createWebchatChannelRoutes(deps) {
-  const app66 = new Hono();
-  app66.get("/webchat-channel/inbound", (c) => {
+  const app67 = new Hono();
+  app67.get("/webchat-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -27357,7 +27673,7 @@ function createWebchatChannelRoutes(deps) {
       }
     });
   });
-  app66.post("/webchat-channel/reply", async (c) => {
+  app67.post("/webchat-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -27367,7 +27683,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReply?.(key, text);
     return c.json({ ok: true });
   });
-  app66.post("/webchat-channel/connector-auth", async (c) => {
+  app67.post("/webchat-channel/connector-auth", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -27380,7 +27696,7 @@ function createWebchatChannelRoutes(deps) {
     const result = await deps.onConnectorAuth({ key, sessionId, name, completed });
     return c.json(result);
   });
-  app66.post("/webchat-channel/ready", async (c) => {
+  app67.post("/webchat-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -27389,7 +27705,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app66.post("/webchat-channel/permission-request", async (c) => {
+  app67.post("/webchat-channel/permission-request", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const requestId = body?.request_id;
@@ -27403,7 +27719,7 @@ function createWebchatChannelRoutes(deps) {
     const verdict = await deps.awaitPermissionVerdict({ key, requestId, toolName, description, inputPreview });
     return c.json(verdict);
   });
-  app66.post("/webchat-channel/received", async (c) => {
+  app67.post("/webchat-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -27413,7 +27729,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app66.post("/webchat-channel/turn-end", async (c) => {
+  app67.post("/webchat-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -27421,22 +27737,13 @@ function createWebchatChannelRoutes(deps) {
     if (typeof key !== "string" || typeof sessionId !== "string" || typeof replied !== "boolean") {
       return c.json({ error: "key, sessionId and replied required" }, 400);
     }
-    const interactive = body?.interactive === true;
     const finalBytes = typeof body?.finalBytes === "number" && Number.isFinite(body.finalBytes) ? body.finalBytes : 0;
     const k = key.slice(0, 8);
     const sid = sessionId.slice(0, 8);
-    if (replied) {
-      console.error(`[webchat-native] op=turn-end channel=webchat key=${k} sessionId=${sid} replied=yes delivered=reply bytes=${finalBytes}`);
-      return c.json({ ok: true, delivered: "reply" });
-    }
-    if (interactive && finalBytes > 0) {
-      console.error(`[webchat-native] op=turn-end channel=webchat key=${k} sessionId=${sid} replied=no delivered=fallback bytes=${finalBytes}`);
-      return c.json({ ok: true, delivered: "fallback" });
-    }
-    console.error(`[webchat-native] op=turn-end channel=webchat key=${k} sessionId=${sid} replied=no delivered=none`);
-    return c.json({ ok: true, delivered: "none" });
+    console.error(`[webchat-native] op=turn-end channel=webchat key=${k} sessionId=${sid} replied=${replied ? "yes" : "no"} trailing=${finalBytes}`);
+    return c.json({ ok: true });
   });
-  return app66;
+  return app67;
 }
 
 // app/lib/webchat/gateway/webchat-gateway.ts
@@ -27494,16 +27801,16 @@ var WebchatGateway = class _WebchatGateway {
    *  The public /api/chat route awaits this to return the reply on the same SSE
    *  response, preserving the pre-756 POST→single-blob browser contract. */
   awaitReply(key, timeoutMs) {
-    return new Promise((resolve42) => {
+    return new Promise((resolve43) => {
       const timer = setTimeout(() => {
         this.replyAwaiters.delete(key);
-        resolve42({ timeout: true });
+        resolve43({ timeout: true });
       }, timeoutMs);
       if (timer.unref) timer.unref();
       this.replyAwaiters.set(key, (r) => {
         clearTimeout(timer);
         this.replyAwaiters.delete(key);
-        resolve42(r);
+        resolve43(r);
       });
     });
   }
@@ -27514,11 +27821,11 @@ var WebchatGateway = class _WebchatGateway {
    *  terminal dialog stays answerable). */
   awaitPermissionVerdict(p, timeoutMs) {
     const k = _WebchatGateway.promptKey(p.key, p.requestId);
-    return new Promise((resolve42) => {
+    return new Promise((resolve43) => {
       this.pendingPrompts.get(k)?.resolve({ timeout: true });
       const timer = setTimeout(() => {
         this.pendingPrompts.delete(k);
-        resolve42({ timeout: true });
+        resolve43({ timeout: true });
       }, timeoutMs);
       if (timer.unref) timer.unref();
       this.pendingPrompts.set(k, {
@@ -27527,7 +27834,7 @@ var WebchatGateway = class _WebchatGateway {
         resolve: (r) => {
           clearTimeout(timer);
           this.pendingPrompts.delete(k);
-          resolve42(r);
+          resolve43(r);
         }
       });
       console.error(`[webchat:perm] op=open key=${keyDisplay(p.key)} id=${p.requestId} tool=${p.toolName}`);
@@ -28092,7 +28399,7 @@ async function fanOut(subscribers, text, onError, tag) {
 
 // app/lib/webchat/file-delivery.ts
 import { realpathSync as realpathSync8 } from "fs";
-import { resolve as resolve37 } from "path";
+import { resolve as resolve38 } from "path";
 
 // app/lib/channel-pty-bridge/file-delivery.ts
 var SEND_USER_FILE = "SendUserFile";
@@ -28193,7 +28500,7 @@ function makeWebchatSendFile(entry) {
       console.error(`${TAG51} file-delivery reject reason=no-account sender=${entry.senderId}`);
       return { ok: false, error: "no-account" };
     }
-    const accountDir = resolve37(platformRoot2(), "..", "data/accounts", entry.accountId);
+    const accountDir = resolve38(platformRoot2(), "..", "data/accounts", entry.accountId);
     try {
       const resolved = realpathSync8(filePath);
       const accountResolved = realpathSync8(accountDir);
@@ -28520,8 +28827,8 @@ var InboundHub3 = class {
 
 // app/lib/telegram/gateway/routes.ts
 function createTelegramChannelRoutes(deps) {
-  const app66 = new Hono();
-  app66.get("/tg-channel/inbound", (c) => {
+  const app67 = new Hono();
+  app67.get("/tg-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -28539,7 +28846,7 @@ function createTelegramChannelRoutes(deps) {
       }
     });
   });
-  app66.post("/tg-channel/reply", async (c) => {
+  app67.post("/tg-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -28555,7 +28862,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=reply key=${key} bytes=${Buffer.byteLength(text, "utf8")}`);
     return c.json({ ok: true });
   });
-  app66.post("/tg-channel/ready", async (c) => {
+  app67.post("/tg-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -28564,7 +28871,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app66.post("/tg-channel/received", async (c) => {
+  app67.post("/tg-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -28574,7 +28881,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app66.post("/tg-channel/turn-end", async (c) => {
+  app67.post("/tg-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -28585,7 +28892,7 @@ function createTelegramChannelRoutes(deps) {
     const interactive = body?.interactive === true;
     const finalText = typeof body?.finalText === "string" ? body.finalText : "";
     const sid = sessionId.slice(0, 8);
-    const deliver = interactive && finalText.trim().length > 0;
+    const deliver = interactive && !replied && finalText.trim().length > 0;
     if (deliver) {
       const bytes = Buffer.byteLength(finalText, "utf8");
       try {
@@ -28607,7 +28914,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=turn-end key=${key} sessionId=${sid} replied=no delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app66;
+  return app67;
 }
 
 // app/lib/telegram/gateway/telegram-gateway.ts
@@ -28757,7 +29064,7 @@ function buildTelegramSpawnRequest(input) {
 // app/lib/telegram/outbound/send-document.ts
 import { realpathSync as realpathSync9 } from "fs";
 import { readFile as readFile10, stat as stat10 } from "fs/promises";
-import { resolve as resolve38, basename as basename12 } from "path";
+import { resolve as resolve39, basename as basename12 } from "path";
 var TAG53 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
@@ -28768,7 +29075,7 @@ async function sendTelegramDocument(input) {
   if (!maxyAccountId || !platformRoot5) {
     return { ok: false, status: 400, error: "Cannot validate file path: missing account or platform context" };
   }
-  const accountDir = resolve38(platformRoot5, "..", "data/accounts", maxyAccountId);
+  const accountDir = resolve39(platformRoot5, "..", "data/accounts", maxyAccountId);
   let accountResolved;
   try {
     accountResolved = realpathSync9(accountDir);
@@ -29160,14 +29467,14 @@ function warnOnChannelAdminBindingDrift() {
 }
 
 // server/lib/booking-site-accounts.ts
-import { existsSync as existsSync40, readFileSync as readFileSync43 } from "fs";
-import { resolve as resolve39 } from "path";
+import { existsSync as existsSync41, readFileSync as readFileSync44 } from "fs";
+import { resolve as resolve40 } from "path";
 function listBookingSiteAccounts(accounts) {
   return accounts.filter((a) => {
-    const availPath = resolve39(a.accountDir, "calendar-availability.json");
-    if (!existsSync40(availPath)) return false;
+    const availPath = resolve40(a.accountDir, "calendar-availability.json");
+    if (!existsSync41(availPath)) return false;
     try {
-      const cfg = JSON.parse(readFileSync43(availPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync44(availPath, "utf-8"));
       return typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
     } catch {
       return false;
@@ -29205,8 +29512,8 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash6, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync41, readFileSync as readFileSync44, statSync as statSync16 } from "fs";
-import { resolve as resolve40 } from "path";
+import { existsSync as existsSync42, readFileSync as readFileSync45, statSync as statSync17 } from "fs";
+import { resolve as resolve41 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
 function canonicalize(value) {
@@ -29241,7 +29548,7 @@ var PUBKEY_SHA256 = "8eee6bcb33545fd13b16d3199a5735ca5db5062834c7b49dfe4f23801d9
 var GRACE_DAYS = 7;
 var GRACE_MS = GRACE_DAYS * 24 * 60 * 60 * 1e3;
 function pubkeyPath(brand) {
-  return resolve40(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
+  return resolve41(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
 }
 var memo = null;
 function memoKey(mtimeMs, account) {
@@ -29253,11 +29560,11 @@ function resolveEntitlement(brand, account) {
   if (brand.commercialMode !== true) {
     return logResolved(implicitTrust(account), null);
   }
-  const entitlementPath = resolve40(brand.configDir, "entitlement.json");
-  if (!existsSync41(entitlementPath)) {
+  const entitlementPath = resolve41(brand.configDir, "entitlement.json");
+  if (!existsSync42(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
-  const stat11 = statSync16(entitlementPath);
+  const stat11 = statSync17(entitlementPath);
   const key = memoKey(stat11.mtimeMs, account);
   if (memo && memo.key === key) {
     return memo.result;
@@ -29269,7 +29576,7 @@ function resolveEntitlement(brand, account) {
 function verifyAndResolve(brand, entitlementPath, account) {
   let pubkeyPem;
   try {
-    pubkeyPem = readFileSync44(pubkeyPath(brand), "utf-8");
+    pubkeyPem = readFileSync45(pubkeyPath(brand), "utf-8");
   } catch (err) {
     return logResolved(anonymousFallback("pubkey-missing"), {
       reason: "pubkey-missing"
@@ -29283,7 +29590,7 @@ function verifyAndResolve(brand, entitlementPath, account) {
   }
   let envelope;
   try {
-    envelope = JSON.parse(readFileSync44(entitlementPath, "utf-8"));
+    envelope = JSON.parse(readFileSync45(entitlementPath, "utf-8"));
   } catch {
     return logResolved(anonymousFallback("malformed"), { reason: "malformed" });
   }
@@ -29447,12 +29754,12 @@ installMediaDownloadGuard();
 var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT || "";
 var BRAND_JSON_PATH = PLATFORM_ROOT8 ? join47(PLATFORM_ROOT8, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
-if (BRAND_JSON_PATH && !existsSync42(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && !existsSync43(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
-if (BRAND_JSON_PATH && existsSync42(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync43(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync45(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync46(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -29487,8 +29794,8 @@ var brandLoginOpts = {
 var ALIAS_DOMAINS_PATH = join47(homedir4(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
-    if (!existsSync42(ALIAS_DOMAINS_PATH)) return null;
-    const parsed = JSON.parse(readFileSync45(ALIAS_DOMAINS_PATH, "utf-8"));
+    if (!existsSync43(ALIAS_DOMAINS_PATH)) return null;
+    const parsed = JSON.parse(readFileSync46(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -29512,7 +29819,7 @@ watchFile(ALIAS_DOMAINS_PATH, { interval: 2e3 }, () => {
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
-var app65 = new Hono();
+var app66 = new Hono();
 function resolveChannelOverride(accountId, channel, senderId) {
   try {
     const dir = listValidAccounts().find((a) => a.accountId === accountId)?.accountDir;
@@ -29561,7 +29868,7 @@ var waGateway = new WaGateway({
   fetchStandingRules: fetchAccountStandingRules,
   resolveSessionOverride: (accountId, senderId) => resolveChannelOverride(accountId, "whatsapp", senderId),
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve41(process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve42(process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -29576,7 +29883,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve41(process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, ".."))
+      platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -29688,7 +29995,7 @@ var waGateway = new WaGateway({
     nativeFileFollowers.set(senderId, ac);
   }
 });
-app65.route("/", waGateway.routes());
+app66.route("/", waGateway.routes());
 waGateway.startSweeper();
 function runDuplicateSenderAudit() {
   try {
@@ -29811,7 +30118,7 @@ var webchatGateway = new WebchatGateway({
   firePublicSessionEndReview: (input) => firePublicSessionEndReview(input)
 });
 setWebchatGateway(webchatGateway);
-app65.route("/", webchatGateway.routes());
+app66.route("/", webchatGateway.routes());
 webchatGateway.startSweeper();
 webchatGateway.startPublicReaper();
 var telegramFileFollowers = /* @__PURE__ */ new Map();
@@ -29855,7 +30162,7 @@ var telegramGateway = new TelegramGateway({
   }
 });
 setTelegramGateway(telegramGateway);
-app65.route("/", telegramGateway.routes());
+app66.route("/", telegramGateway.routes());
 telegramGateway.startSweeper();
 var chatRoutes = createChatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
@@ -29889,19 +30196,19 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
     return managed.account;
   }
 });
-app65.route("/api/channel/schedule-inject", scheduleInjectRoutes);
-app65.use("*", clientIpMiddleware);
+app66.route("/api/channel/schedule-inject", scheduleInjectRoutes);
+app66.use("*", clientIpMiddleware);
 function allowsSameOriginFraming(path3) {
   return path3 === "/vnc-viewer.html" || path3.startsWith("/api/admin/attachment/") || path3.startsWith("/api/public-reader/attachment/") || path3 === "/api/admin/files/download";
 }
-app65.use("*", async (c, next) => {
+app66.use("*", async (c, next) => {
   await next();
   c.header("X-Content-Type-Options", "nosniff");
   c.header("Referrer-Policy", "strict-origin-when-cross-origin");
   c.header("X-Frame-Options", allowsSameOriginFraming(c.req.path) ? "SAMEORIGIN" : "DENY");
 });
 var HTTP_LOG_PATHS = /* @__PURE__ */ new Set(["/vnc-viewer.html", "/vnc-popout.html"]);
-app65.use("*", async (c, next) => {
+app66.use("*", async (c, next) => {
   if (!HTTP_LOG_PATHS.has(c.req.path)) {
     await next();
     return;
@@ -29919,7 +30226,7 @@ app65.use("*", async (c, next) => {
     });
   }
 });
-app65.use("*", async (c, next) => {
+app66.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains()) || !isPublicHost(host)) {
     await next();
@@ -29957,7 +30264,7 @@ function resolveRemoteAuthOpts(c) {
   return { ...brandLoginOpts, origin };
 }
 var MAX_LOGIN_BODY = 8 * 1024;
-app65.post("/__remote-auth/login", async (c) => {
+app66.post("/__remote-auth/login", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   if (!requestIsTlsTerminated(c)) {
@@ -30002,7 +30309,7 @@ app65.post("/__remote-auth/login", async (c) => {
     }
   });
 });
-app65.get("/__remote-auth/logout", (c) => {
+app66.get("/__remote-auth/logout", (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   console.error(`[remote-auth] logout ip=${clientIp}`);
@@ -30015,7 +30322,7 @@ app65.get("/__remote-auth/logout", (c) => {
     }
   });
 });
-app65.post("/__remote-auth/change-password", async (c) => {
+app66.post("/__remote-auth/change-password", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   const rateLimited = checkRateLimit(client);
@@ -30074,13 +30381,13 @@ app65.post("/__remote-auth/change-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "change", changeError: "Failed to save password", redirect }), 200);
   }
 });
-app65.get("/__remote-auth/setup", (c) => {
+app66.get("/__remote-auth/setup", (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup" }), 200);
 });
-app65.post("/__remote-auth/set-initial-password", async (c) => {
+app66.post("/__remote-auth/set-initial-password", async (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
@@ -30118,10 +30425,10 @@ app65.post("/__remote-auth/set-initial-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup", setupError: "Failed to save password. Please try again." }), 200);
   }
 });
-app65.get("/api/remote-auth/status", (c) => {
+app66.get("/api/remote-auth/status", (c) => {
   return c.json({ configured: isRemoteAuthConfigured() });
 });
-app65.post("/api/remote-auth/set-password", async (c) => {
+app66.post("/api/remote-auth/set-password", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -30160,10 +30467,10 @@ app65.post("/api/remote-auth/set-password", async (c) => {
     return c.json({ error: "Failed to save password" }, 500);
   }
 });
-app65.route("/api/_client-error", client_error_default);
+app66.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
 var PWA_PUBLIC_PATHS = /* @__PURE__ */ new Set(["/sw.js", ...PWA_SURFACES.map((s) => s.manifestPath)]);
-app65.use("*", async (c, next) => {
+app66.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path3 = c.req.path;
   if (path3 === "/favicon.ico" || path3.startsWith("/assets/") || path3.startsWith("/brand/") || // Public free/busy is read by the booking page (a separate Cloudflare Pages
@@ -30207,28 +30514,28 @@ app65.use("*", async (c, next) => {
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), redirect: path3 }), 200);
 });
-app65.route("/api/health", health_default);
-app65.route("/api/chat", chatRoutes);
-app65.route("/api/whatsapp", whatsapp_default);
-app65.route("/api/storage", storage_broker_default);
-app65.route("/api/whatsapp-reader", whatsapp_reader_default);
-app65.route("/api/public-reader", public_reader_default);
-app65.route("/api/webchat", createWebchatRoutes({
+app66.route("/api/health", health_default);
+app66.route("/api/chat", chatRoutes);
+app66.route("/api/whatsapp", whatsapp_default);
+app66.route("/api/storage", storage_broker_default);
+app66.route("/api/whatsapp-reader", whatsapp_reader_default);
+app66.route("/api/public-reader", public_reader_default);
+app66.route("/api/webchat", createWebchatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
   // Task 940 — the permission relay's pointer read + verdict write.
   pendingPromptFor: (key) => webchatGateway.pendingPromptFor(key),
   deliveryFailureFor: (key) => webchatGateway.deliveryFailureFor(key),
   resolvePermissionVerdict: (key, requestId, behavior) => webchatGateway.resolvePermissionVerdict(key, requestId, behavior)
 }));
-app65.route("/api/webchat/greeting", webchat_greeting_default);
-app65.route("/api/telegram", telegram_default);
-app65.route("/api/quickbooks", quickbooks_default);
-app65.route("/api/onboarding", onboarding_default);
-app65.route("/api/admin", admin_default);
-app65.route("/api/access", access_default);
-app65.route("/api/session", session_default2);
-app65.route("/api/calendar", calendar_public_default);
-app65.route("/api/portal", portal_fetch_default);
+app66.route("/api/webchat/greeting", webchat_greeting_default);
+app66.route("/api/telegram", telegram_default);
+app66.route("/api/quickbooks", quickbooks_default);
+app66.route("/api/onboarding", onboarding_default);
+app66.route("/api/admin", admin_default);
+app66.route("/api/access", access_default);
+app66.route("/api/session", session_default2);
+app66.route("/api/calendar", calendar_public_default);
+app66.route("/api/portal", portal_fetch_default);
 var SAFE_SLUG_RE2 = /^[a-z][a-z0-9-]{2,49}$/;
 var SAFE_FILENAME_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var IMAGE_MIME = {
@@ -30240,7 +30547,7 @@ var IMAGE_MIME = {
   ".svg": "image/svg+xml",
   ".ico": "image/x-icon"
 };
-app65.get("/agent-assets/:slug/:filename", (c) => {
+app66.get("/agent-assets/:slug/:filename", (c) => {
   const slug = c.req.param("slug");
   const filename = c.req.param("filename");
   if (!SAFE_SLUG_RE2.test(slug)) {
@@ -30256,26 +30563,26 @@ app65.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] no-account slug=${slug} file=${filename}`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve41(account.accountDir, "agents", slug, "assets", filename);
-  const expectedDir = resolve41(account.accountDir, "agents", slug, "assets");
+  const filePath = resolve42(account.accountDir, "agents", slug, "assets", filename);
+  const expectedDir = resolve42(account.accountDir, "agents", slug, "assets");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync42(filePath)) {
+  if (!existsSync43(filePath)) {
     console.error(`[agent-assets] serve slug=${slug} file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync45(filePath);
+  const body = readFileSync46(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
   });
 });
-app65.get("/generated/:filename", (c) => {
+app66.get("/generated/:filename", (c) => {
   const filename = c.req.param("filename");
   if (!SAFE_FILENAME_RE.test(filename) || filename.includes("..")) {
     console.error(`[generated] serve file=${filename} status=403`);
@@ -30286,35 +30593,35 @@ app65.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve41(account.accountDir, "generated", filename);
-  const expectedDir = resolve41(account.accountDir, "generated");
+  const filePath = resolve42(account.accountDir, "generated", filename);
+  const expectedDir = resolve42(account.accountDir, "generated");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync42(filePath)) {
+  if (!existsSync43(filePath)) {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync45(filePath);
+  const body = readFileSync46(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
   });
 });
-app65.route("/sites", sites_default);
-app65.route("/listings", listings_default);
-app65.route("/v", visitor_event_default);
-app65.route("/v", visitor_consent_default);
+app66.route("/sites", sites_default);
+app66.route("/listings", listings_default);
+app66.route("/v", visitor_event_default);
+app66.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
-if (BRAND_JSON_PATH && existsSync42(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync43(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync45(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync46(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -30341,11 +30648,11 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 var brandThemeColor = BRAND.defaultColors?.primary ?? "#000000";
 var brandBackgroundColor = BRAND.defaultColors?.background ?? "#ffffff";
 var brandAppIconsExist = [brandAppIcon192Path, brandAppIcon512Path, brandMaskableIconPath].every(
-  (p) => existsSync42(resolve41(process.cwd(), "public", p.replace(/^\//, "")))
+  (p) => existsSync43(resolve42(process.cwd(), "public", p.replace(/^\//, "")))
 );
 var SW_SOURCE = (() => {
   try {
-    return readFileSync45(resolve41(process.cwd(), "public", "sw.js"), "utf-8");
+    return readFileSync46(resolve42(process.cwd(), "public", "sw.js"), "utf-8");
   } catch {
     return null;
   }
@@ -30354,8 +30661,8 @@ function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT8) return "unknown";
     const versionFile = join47(PLATFORM_ROOT8, "config", `.${BRAND.hostname}-version`);
-    if (!existsSync42(versionFile)) return "unknown";
-    const content = readFileSync45(versionFile, "utf-8").trim();
+    if (!existsSync43(versionFile)) return "unknown";
+    const content = readFileSync46(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -30396,7 +30703,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync45(resolve41(process.cwd(), "public", file), "utf-8");
+    html = readFileSync46(resolve42(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -30418,8 +30725,8 @@ function loadBrandingCache(agentSlug) {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
     const cachePath = join47(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
-    if (!existsSync42(cachePath)) return null;
-    return JSON.parse(readFileSync45(cachePath, "utf-8"));
+    if (!existsSync43(cachePath)) return null;
+    return JSON.parse(readFileSync46(cachePath, "utf-8"));
   } catch {
     return null;
   }
@@ -30463,7 +30770,7 @@ function brandedPublicHtml(agentSlug) {
 function agentUnavailableHtml() {
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(BRAND.productName)}</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1.5rem;color:#222"><h1 style="font-size:1.25rem">Agent unavailable</h1><p>This agent isn't available right now. If you reached this page from a saved link, the agent may have been turned off.</p></body></html>`;
 }
-app65.get("/", (c) => {
+app66.get("/", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const klass = classifyHost(host, getOperatorDomains(), isPublicHost);
   if (klass === "operator") {
@@ -30485,12 +30792,12 @@ app65.get("/", (c) => {
   console.log(`[host-class] host=${host} class=admin served=index.html`);
   return c.html(cachedHtml("index.html"));
 });
-app65.get("/public", (c) => {
+app66.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
 });
-app65.get("/public-chat", (c) => {
+app66.get("/public-chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
@@ -30509,12 +30816,12 @@ async function logViewerFetch(c, next) {
     duration_ms: Date.now() - start
   });
 }
-app65.use("/vnc-viewer.html", logViewerFetch);
-app65.use("/vnc-popout.html", logViewerFetch);
-app65.get("/vnc-popout.html", (c) => {
+app66.use("/vnc-viewer.html", logViewerFetch);
+app66.use("/vnc-popout.html", logViewerFetch);
+app66.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync45(resolve41(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync46(resolve42(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -30524,7 +30831,7 @@ app65.get("/vnc-popout.html", (c) => {
   }
   return c.html(html);
 });
-app65.post("/api/vnc/client-event", async (c) => {
+app66.post("/api/vnc/client-event", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -30545,11 +30852,11 @@ app65.post("/api/vnc/client-event", async (c) => {
   });
   return c.json({ ok: true });
 });
-app65.get("/g/:slug", (c) => {
+app66.get("/g/:slug", (c) => {
   return c.html(brandedPublicHtml(resolveDefaultSlug() ?? void 0));
 });
 for (const pwa of PWA_SURFACES) {
-  app65.get(pwa.manifestPath, (c) => {
+  app66.get(pwa.manifestPath, (c) => {
     const manifest = buildManifest(pwa, {
       productName: BRAND.productName,
       appIcon192: brandAppIcon192Path,
@@ -30565,7 +30872,7 @@ for (const pwa of PWA_SURFACES) {
     return c.body(JSON.stringify(manifest));
   });
 }
-app65.get("/sw.js", (c) => {
+app66.get("/sw.js", (c) => {
   if (SW_SOURCE == null) {
     console.error("[pwa] op=sw status=500 reason=sw-source-missing");
     return c.text("Service worker unavailable", 500);
@@ -30574,12 +30881,12 @@ app65.get("/sw.js", (c) => {
   console.log(`[pwa] op=sw status=200 ct=${SW_CONTENT_TYPE}`);
   return c.body(SW_SOURCE);
 });
-app65.get("/graph", (c) => {
+app66.get("/graph", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("graph.html"));
 });
-app65.get("/chat", (c) => {
+app66.get("/chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains())) {
     console.log(`[host-class] host=${host} class=operator served=operator.html`);
@@ -30588,37 +30895,42 @@ app65.get("/chat", (c) => {
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("chat.html"));
 });
-app65.get("/data", (c) => {
+app66.get("/data", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app65.get("/tasks", (c) => {
+app66.get("/tasks", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("tasks.html"));
 });
-app65.get("/activity", (c) => {
+app66.get("/activity", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("activity.html"));
 });
-app65.get("/calendar", (c) => {
+app66.get("/calendar", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("calendar.html"));
 });
-app65.get("/routines", (c) => {
+app66.get("/routines", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("routines.html"));
 });
-app65.get("/browser", (c) => {
+app66.get("/skills", (c) => {
+  const host = (c.req.header("host") ?? "").split(":")[0];
+  if (isPublicHost(host)) return c.text("Not found", 404);
+  return c.html(cachedHtml("skills.html"));
+});
+app66.get("/browser", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("browser.html"));
 });
-app65.get("/:slug", async (c, next) => {
+app66.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN.test(`/${slug}`)) {
     const account = resolveAccount();
@@ -30633,13 +30945,13 @@ app65.get("/:slug", async (c, next) => {
   await next();
 });
 if (brandFaviconPath !== "/favicon.ico") {
-  app65.get("/favicon.ico", (c) => {
+  app66.get("/favicon.ico", (c) => {
     c.header("Cache-Control", "public, max-age=300");
     return c.redirect(brandFaviconPath, 302);
   });
 }
-app65.use("/*", serveStatic({ root: "./public" }));
-app65.all("*", (c) => {
+app66.use("/*", serveStatic({ root: "./public" }));
+app66.all("*", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path3 = c.req.path;
   if (isPublicHost(host)) {
@@ -30653,13 +30965,13 @@ app65.all("*", (c) => {
 });
 var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
-var httpServer = serve({ fetch: app65.fetch, port, hostname });
+var httpServer = serve({ fetch: app66.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
   const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
-  const reconcileScript = resolve41(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
+  const reconcileScript = resolve42(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const runReconcile = (ctx) => {
-    if (!existsSync42(reconcileScript)) return;
+    if (!existsSync43(reconcileScript)) return;
     try {
       const child = spawn3(process.execPath, [reconcileScript], {
         env: { ...process.env, PLATFORM_ROOT: reconcilePlatformRoot },
@@ -30698,14 +31010,14 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
   const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
   const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
-  const dreamSweepScript = resolve41(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
+  const dreamSweepScript = resolve42(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
   registerLoop({
     name: "dream-cycle-sweep",
     intervalMs: DREAM_CYCLE_SWEEP_INTERVAL_MS,
     firstRunDelayMs: 3e4,
     detached: true,
     run: (ctx) => {
-      if (!existsSync42(dreamSweepScript)) return;
+      if (!existsSync43(dreamSweepScript)) return;
       try {
         const child = spawn3(process.execPath, [dreamSweepScript], {
           env: { ...process.env, PLATFORM_ROOT: dreamPlatformRoot },
@@ -30722,10 +31034,10 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
-  const outlookScript = resolve41(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
+  const outlookScript = resolve42(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
-    if (!existsSync42(outlookScript)) return;
+    if (!existsSync43(outlookScript)) return;
     try {
       const child = spawn3(process.execPath, [outlookScript], {
         env: { ...process.env, PLATFORM_ROOT: outlookPlatformRoot },
@@ -30748,19 +31060,19 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
-  const strandedAccountsDir = resolve41(auditRoot, "..", "data/accounts");
+  const strandedAccountsDir = resolve42(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
   const STRANDED_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
   const runStrandedAudit = () => {
     try {
-      if (!existsSync42(strandedAccountsDir)) return;
+      if (!existsSync43(strandedAccountsDir)) return;
       const now = Date.now();
-      for (const name of readdirSync26(strandedAccountsDir)) {
+      for (const name of readdirSync27(strandedAccountsDir)) {
         if (!STRANDED_UUID_RE.test(name)) continue;
-        const pendingPath2 = resolve41(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
-        if (!existsSync42(pendingPath2)) continue;
-        const ageMs2 = now - statSync17(pendingPath2).mtimeMs;
+        const pendingPath2 = resolve42(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
+        if (!existsSync43(pendingPath2)) continue;
+        const ageMs2 = now - statSync18(pendingPath2).mtimeMs;
         if (ageMs2 > STRANDED_AGE_MS) {
           console.error(`[outlook-mcp] devicecode-stranded account=${name} ageSec=${Math.floor(ageMs2 / 1e3)}`);
         }
@@ -30778,7 +31090,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
-  const googleAccountsDir = resolve41(googleRoot, "..", "data/accounts");
+  const googleAccountsDir = resolve42(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
     try {
@@ -30793,10 +31105,10 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     firstRunDelayMs: 27e3,
     run: runGooglePendingAuditSafe
   });
-  const googleAuditScript = resolve41(googleRoot, "plugins/google/mcp/dist/scripts/account-audit.js");
+  const googleAuditScript = resolve42(googleRoot, "plugins/google/mcp/dist/scripts/account-audit.js");
   const GOOGLE_ACCOUNT_AUDIT_INTERVAL_MS = 36e5;
   const runGoogleAccountAudit = (ctx) => {
-    if (!existsSync42(googleAuditScript)) return;
+    if (!existsSync43(googleAuditScript)) return;
     try {
       const child = spawn3(process.execPath, [googleAuditScript], {
         env: { ...process.env, PLATFORM_ROOT: googleRoot },
@@ -30868,7 +31180,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
-  const publishScript = resolve41(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
+  const publishScript = resolve42(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const bookingAccounts = () => {
     try {
@@ -30879,7 +31191,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     }
   };
   const spawnPublish = (account, ctx) => {
-    if (!existsSync42(publishScript)) return;
+    if (!existsSync43(publishScript)) return;
     try {
       const child = spawn3(process.execPath, [publishScript], {
         env: {
@@ -30898,21 +31210,21 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     }
   };
   const auditSnapshotAge = (account) => {
-    const availPath = resolve41(account.accountDir, "calendar-availability.json");
+    const availPath = resolve42(account.accountDir, "calendar-availability.json");
     let hasBookingSite = false;
     try {
-      if (existsSync42(availPath)) {
-        const cfg = JSON.parse(readFileSync45(availPath, "utf-8"));
+      if (existsSync43(availPath)) {
+        const cfg = JSON.parse(readFileSync46(availPath, "utf-8"));
         hasBookingSite = typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
       }
     } catch {
     }
     if (!hasBookingSite) return;
-    const statePath = resolve41(account.accountDir, "state", "booking-availability", "last-publish.json");
+    const statePath = resolve42(account.accountDir, "state", "booking-availability", "last-publish.json");
     let lastSuccessAt = null;
-    if (existsSync42(statePath)) {
+    if (existsSync43(statePath)) {
       try {
-        const rec = JSON.parse(readFileSync45(statePath, "utf-8"));
+        const rec = JSON.parse(readFileSync46(statePath, "utf-8"));
         lastSuccessAt = rec.lastSuccessAt ?? null;
       } catch {
         console.error(`[calendar-availability] op=audit accountId=${account.accountId} snapshotAgeMs=na reason=bad-state-file`);
@@ -30945,11 +31257,11 @@ startTimeEntryCensus(() => getSession());
 startLedgerCensus(() => getSession());
 {
   const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..");
-  const auditScript = resolve41(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
+  const auditScript = resolve42(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
   const runConnectorAudit = (ctx) => {
-    if (!existsSync42(auditScript)) return;
+    if (!existsSync43(auditScript)) return;
     try {
       const child = spawn3(process.execPath, [auditScript], {
         env: { ...process.env, PLATFORM_ROOT: auditPlatformRoot, LOG_DIR: auditLogDir },
@@ -31029,7 +31341,7 @@ for (const m of SUBAPP_MANIFEST) {
 }
 try {
   const registered = [];
-  for (const r of app65.routes ?? []) {
+  for (const r of app66.routes ?? []) {
     if (typeof r.path !== "string" || r.path.includes(":") || r.path.includes("*")) continue;
     if (AGENT_SLUG_PATTERN.test(r.path)) {
       registered.push({ method: (r.method ?? "ALL").toUpperCase(), path: r.path });
@@ -31069,11 +31381,11 @@ try {
 var ADMINUSER_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 async function runAdminUserReconcileTick() {
   try {
-    if (!existsSync42(USERS_FILE)) {
+    if (!existsSync43(USERS_FILE)) {
       console.error("[adminuser-self-heal] skip reason=no-users-file");
       return;
     }
-    const usersRaw = readFileSync45(USERS_FILE, "utf-8").trim();
+    const usersRaw = readFileSync46(USERS_FILE, "utf-8").trim();
     if (!usersRaw) {
       console.error("[adminuser-self-heal] skip reason=empty-users-file");
       return;
@@ -31120,8 +31432,8 @@ registerLoop({
 });
 var USERS_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 function countUsersRows() {
-  if (!existsSync42(USERS_FILE)) return 0;
-  const raw = readFileSync45(USERS_FILE, "utf-8").trim();
+  if (!existsSync43(USERS_FILE)) return 0;
+  const raw = readFileSync46(USERS_FILE, "utf-8").trim();
   if (!raw) return 0;
   const users = JSON.parse(raw);
   return users.filter((u) => typeof u.userId === "string").length;
@@ -31254,7 +31566,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve41(process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..")),
+  platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join47(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     if (isObserveAccount(msg.accountId)) {