npm - @rubytech/create-maxy-code - Versions diffs - 0.1.506 → 0.1.507 - Mend

@rubytech/create-maxy-code 0.1.506 → 0.1.507

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (104) hide show

package/payload/server/server.js CHANGED Viewed

@@ -118,7 +118,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-5ADBNEJA.js";
+} from "./chunk-2WAXM5N2.js";
 import {
   D1_MAX_SQL_STATEMENT_BYTES,
   D1_QUERY_MAX_BODY_BYTES,
@@ -225,7 +225,16 @@ var require_dist2 = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.HOME_FIXED = void 0;
     exports.parseSchemaRegions = parseSchemaRegions2;
-    exports.HOME_FIXED = Object.freeze(["projects", "contacts", "documents"]);
+    exports.HOME_FIXED = Object.freeze([
+      "projects",
+      "contacts",
+      "documents",
+      "output",
+      "generated",
+      "extracted",
+      "sites",
+      "uploads"
+    ]);
     var ONT_START2 = "<!-- ontology-buckets:start -->";
     var ONT_END2 = "<!-- ontology-buckets:end -->";
     var PLUGIN_START = "<!-- plugin-owned-dirs:start -->";
@@ -1921,6 +1930,12 @@ function invalidate(resource, accountId, source = "action") {
     keyGenerations.set(key, (keyGenerations.get(key) ?? 0) + 1);
     markOrDrop(key);
   }
+  notifyAny(resource, accountId);
+}
+function notify(resource, accountId) {
+  notifyAny(resource, accountId);
+}
+function notifyAny(resource, accountId) {
   pendingNotifications.set(`${resource}::${accountId ?? "*"}`, { resource, accountId });
   if (notifyTimer === null) {
     notifyTimer = setTimeout(flushNotifications, NOTIFY_COALESCE_MS);
@@ -2277,11 +2292,102 @@ function attachRouteCacheWatchers() {
   }
 }
+// server/lib/manager-events-subscriber.ts
+var TAG = "[webchat-pointer]";
+var TURN_EVENTS = /* @__PURE__ */ new Set(["row-updated", "row-created"]);
+var MAX_BACKOFF_MS = 3e4;
+var STABLE_CONNECTION_MS = 3e4;
+var lastStatusBySession = /* @__PURE__ */ new Map();
+function handleManagerFrame(raw) {
+  const lines = raw.split("\n");
+  const eventLine = lines.find((l) => l.startsWith("event: "));
+  const dataLine = lines.find((l) => l.startsWith("data: "));
+  if (!eventLine || !dataLine) return null;
+  if (!TURN_EVENTS.has(eventLine.slice("event: ".length).trim())) return null;
+  let body;
+  try {
+    body = JSON.parse(dataLine.slice("data: ".length));
+  } catch {
+    console.error(`${TAG} op=skip reason=unparseable-frame`);
+    return null;
+  }
+  const sessionId = String(body.sessionId ?? "unknown").slice(0, 8);
+  const accountId = typeof body.accountId === "string" && body.accountId ? body.accountId : null;
+  if (!accountId) {
+    console.error(`${TAG} op=skip reason=no-account sessionId=${sessionId}`);
+    return null;
+  }
+  const status = String(body.status ?? "unknown");
+  const fullSessionId = String(body.sessionId ?? "");
+  if (fullSessionId && lastStatusBySession.get(fullSessionId) === status) {
+    return null;
+  }
+  if (fullSessionId) lastStatusBySession.set(fullSessionId, status);
+  console.log(
+    `${TAG} op=event sessionId=${sessionId} accountId=${accountId.slice(0, 8)} activity=${status}`
+  );
+  notify("webchat-pointer", accountId);
+  return { resource: "webchat-pointer", accountId };
+}
+var connections = 0;
+var started = false;
+var abort = null;
+function startManagerEventsSubscriber() {
+  if (started) return;
+  started = true;
+  abort = new AbortController();
+  void connectLoop(abort.signal);
+}
+async function connectLoop(signal) {
+  let backoffMs = 1e3;
+  for (; ; ) {
+    if (signal.aborted) return;
+    let port2;
+    try {
+      port2 = requirePortEnv("CLAUDE_SESSION_MANAGER_PORT", { tag: "webchat-pointer" });
+    } catch {
+      console.error(`${TAG} op=drop reason=manager-port-unset`);
+      return;
+    }
+    const connectedAt = Date.now();
+    try {
+      const res = await fetch(`http://127.0.0.1:${port2}/events`, { signal });
+      if (!res.ok || !res.body) throw new Error(`status ${res.status}`);
+      connections += 1;
+      console.log(`${TAG} op=subscribe upstream-count=${connections}`);
+      const reader = res.body.getReader();
+      const decoder = new TextDecoder();
+      let buffer = "";
+      for (; ; ) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        buffer += decoder.decode(value, { stream: true });
+        let cut = buffer.indexOf("\n\n");
+        while (cut !== -1) {
+          handleManagerFrame(buffer.slice(0, cut));
+          buffer = buffer.slice(cut + 2);
+          cut = buffer.indexOf("\n\n");
+        }
+      }
+      connections -= 1;
+    } catch (err) {
+      if (connections > 0) connections -= 1;
+      if (signal.aborted) return;
+      console.error(`${TAG} op=drop reason=${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (signal.aborted) return;
+    if (Date.now() - connectedAt >= STABLE_CONNECTION_MS) backoffMs = 1e3;
+    console.log(`${TAG} op=reconnect inMs=${backoffMs} upstream-count=${connections}`);
+    await new Promise((r) => setTimeout(r, backoffMs));
+    backoffMs = Math.min(backoffMs * 2, MAX_BACKOFF_MS);
+  }
+}
 // server/index.ts
 import { monitorEventLoopDelay } from "perf_hooks";
 // app/lib/whatsapp/inbound/media-download-guard.ts
-var TAG = "[media-guard]";
+var TAG2 = "[media-guard]";
 var inFlight2 = 0;
 var containedCount = 0;
 function containedSinceBoot() {
@@ -2311,13 +2417,13 @@ function handleEscapedMediaError(err, channel) {
   if (undiciFrame && inFlight2 > 0) {
     containedCount += 1;
     console.error(
-      `${TAG} op=contained channel=${channel} inFlight=${inFlight2} err=${err instanceof Error ? err.message : String(err)} cause=${causeCode(err)}
+      `${TAG2} op=contained channel=${channel} inFlight=${inFlight2} err=${err instanceof Error ? err.message : String(err)} cause=${causeCode(err)}
 ${stack}`
     );
     return true;
   }
   console.error(
-    `${TAG} op=escaped channel=${channel} inFlight=${inFlight2} undiciFrame=${undiciFrame} err=${err instanceof Error ? err.message : String(err)} cause=${causeCode(err)} contained=false`
+    `${TAG2} op=escaped channel=${channel} inFlight=${inFlight2} undiciFrame=${undiciFrame} err=${err instanceof Error ? err.message : String(err)} cause=${causeCode(err)} contained=false`
   );
   return false;
 }
@@ -2342,7 +2448,7 @@ function installMediaDownloadGuard() {
     );
     process.exit(1);
   });
-  console.error(`${TAG} op=installed`);
+  console.error(`${TAG2} op=installed`);
 }
 // app/lib/whatsapp/ingest-audit.ts
@@ -2352,7 +2458,7 @@ import { join as join4 } from "path";
 // app/lib/whatsapp/ingest-ledger.ts
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, appendFileSync as appendFileSync2, readFileSync as readFileSync3, writeFileSync, readdirSync as readdirSync3 } from "fs";
 import { join as join3 } from "path";
-var TAG2 = "[wa-ingest-ledger]";
+var TAG3 = "[wa-ingest-ledger]";
 var LEDGER_ROOT = () => join3(process.env.MAXY_DIR_OVERRIDE ?? MAXY_DIR, "data", "whatsapp-ingest-ledger");
 var ensuredRoots = /* @__PURE__ */ new Set();
 function ledgerFilePath(account) {
@@ -2374,7 +2480,7 @@ function appendStanza(entry) {
     appendFileSync2(ledgerFilePath(entry.account), JSON.stringify(row) + "\n");
   } catch (err) {
     console.error(
-      `${TAG2} FAIL op=append msgId=${entry.msgId} err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG3} FAIL op=append msgId=${entry.msgId} err=${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
@@ -2388,7 +2494,7 @@ function markDeclined(entry) {
     appendFileSync2(ledgerFilePath(entry.account), JSON.stringify(row) + "\n");
   } catch (err) {
     console.error(
-      `${TAG2} FAIL op=decline msgId=${entry.msgId} err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG3} FAIL op=decline msgId=${entry.msgId} err=${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
@@ -2449,7 +2555,7 @@ function listLedgerAccounts() {
 }
 // app/lib/whatsapp/ingest-audit.ts
-var TAG3 = "[wa-ingest-audit]";
+var TAG4 = "[wa-ingest-audit]";
 var DEFAULT_GRACE_MS = 10 * 60 * 1e3;
 var DEFAULT_RETAIN_MS = 24 * 60 * 60 * 1e3;
 var idCache = /* @__PURE__ */ new Map();
@@ -2551,7 +2657,7 @@ function runIngestAudit(opts) {
   }
   result.oldestUnpersistedMin = Math.round(oldestUnpersistedAgeMs / 6e4);
   console.error(
-    `${TAG3} op=reconcile stanzas=${result.stanzas} persisted=${result.persisted} unpersisted=${result.unpersisted.length} ids=${result.unpersisted.join(",") || "none"} oldestUnpersistedMin=${result.oldestUnpersistedMin} skippedStatus=${result.skippedStatus} skippedReaction=${result.skippedReaction} declined=${result.declined} contained=${containedSinceBoot()} inFlight=${mediaDownloadsInFlight()} guard=${guardInstalled() ? "installed" : "absent"}`
+    `${TAG4} op=reconcile stanzas=${result.stanzas} persisted=${result.persisted} unpersisted=${result.unpersisted.length} ids=${result.unpersisted.join(",") || "none"} oldestUnpersistedMin=${result.oldestUnpersistedMin} skippedStatus=${result.skippedStatus} skippedReaction=${result.skippedReaction} declined=${result.declined} contained=${containedSinceBoot()} inFlight=${mediaDownloadsInFlight()} guard=${guardInstalled() ? "installed" : "absent"}`
   );
   return result;
 }
@@ -3044,7 +3150,7 @@ import fsSync from "fs";
 import fs from "fs/promises";
 import path from "path";
 import os from "os";
-var TAG4 = "[whatsapp:auth]";
+var TAG5 = "[whatsapp:auth]";
 function resolveAuthDir(configDir2, accountId) {
   return path.join(os.homedir(), configDir2, "credentials", "whatsapp", accountId);
 }
@@ -3076,7 +3182,7 @@ async function authExists(authDir) {
     JSON.parse(raw);
     return true;
   } catch (err) {
-    console.warn(`${TAG4} credential validation failed path=${credsPath}: ${String(err)}`);
+    console.warn(`${TAG5} credential validation failed path=${credsPath}: ${String(err)}`);
     return false;
   }
 }
@@ -3103,9 +3209,9 @@ function maybeRestoreCredsFromBackup(authDir) {
     if (!backupRaw) return;
     JSON.parse(backupRaw);
     fsSync.copyFileSync(backupPath, credsPath);
-    console.error(`${TAG4} restored corrupted creds.json from backup in ${authDir}`);
+    console.error(`${TAG5} restored corrupted creds.json from backup in ${authDir}`);
   } catch (err) {
-    console.warn(`${TAG4} credential restore failed authDir=${authDir}: ${String(err)}`);
+    console.warn(`${TAG5} credential restore failed authDir=${authDir}: ${String(err)}`);
   }
 }
 function readSelfId(authDir) {
@@ -3128,7 +3234,7 @@ function readSelfId(authDir) {
     }
     return { e164, jid, lid };
   } catch (err) {
-    console.warn(`${TAG4} readSelfId failed authDir=${authDir}: ${String(err)}`);
+    console.warn(`${TAG5} readSelfId failed authDir=${authDir}: ${String(err)}`);
     return { e164: null, jid: null, lid: null };
   }
 }
@@ -3162,21 +3268,21 @@ async function clearAuth(authDir) {
   try {
     await fs.access(authDir);
   } catch {
-    console.error(`${TAG4} no auth dir found at ${authDir}`);
+    console.error(`${TAG5} no auth dir found at ${authDir}`);
     return false;
   }
   await fs.rm(authDir, { recursive: true, force: true });
-  console.error(`${TAG4} cleared credentials at ${authDir}`);
+  console.error(`${TAG5} cleared credentials at ${authDir}`);
   return true;
 }
 function discardAuthDirSync(authDir) {
   try {
     if (!fsSync.existsSync(authDir)) return false;
     fsSync.rmSync(authDir, { recursive: true, force: true });
-    console.error(`${TAG4} discarded credential dir ${authDir}`);
+    console.error(`${TAG5} discarded credential dir ${authDir}`);
     return true;
   } catch (err) {
-    console.warn(`${TAG4} discardAuthDirSync failed authDir=${authDir}: ${String(err)}`);
+    console.warn(`${TAG5} discardAuthDirSync failed authDir=${authDir}: ${String(err)}`);
     return false;
   }
 }
@@ -3208,7 +3314,7 @@ import { createRequire } from "module";
 // app/lib/whatsapp/baileys-debug-window.ts
 import fs2 from "fs";
 import path2 from "path";
-var TAG5 = "[whatsapp:session]";
+var TAG6 = "[whatsapp:session]";
 var SENTINEL_BASENAME = "baileys-debug-until";
 var STAT_INTERVAL_MS = 1e3;
 var VALID_LEVELS = /* @__PURE__ */ new Set(["trace", "debug", "info"]);
@@ -3248,11 +3354,11 @@ function resolveDebugWindow(authDir, nowMs = Date.now()) {
   const wasActive = prev?.state.active ?? false;
   if (!wasActive && state.active) {
     console.error(
-      `${TAG5} op=baileys-debug-window-open account=${path2.basename(authDir)} level=${state.level} until=${new Date(deadlineMs).toISOString()}`
+      `${TAG6} op=baileys-debug-window-open account=${path2.basename(authDir)} level=${state.level} until=${new Date(deadlineMs).toISOString()}`
     );
   } else if (wasActive && !state.active) {
     console.error(
-      `${TAG5} op=baileys-debug-window-close account=${path2.basename(authDir)}`
+      `${TAG6} op=baileys-debug-window-close account=${path2.basename(authDir)}`
     );
   }
   cache2.set(authDir, { checkedAtMs: nowMs, state });
@@ -3260,7 +3366,7 @@ function resolveDebugWindow(authDir, nowMs = Date.now()) {
 }
 // app/lib/whatsapp/session.ts
-var TAG6 = "[whatsapp:session]";
+var TAG7 = "[whatsapp:session]";
 var WIRE_TAG = "[whatsapp:wire]";
 var baileysPkgVersion = (() => {
   try {
@@ -3270,7 +3376,7 @@ var baileysPkgVersion = (() => {
     return "unknown";
   }
 })();
-console.error(`${TAG6} baileys package loaded version=${baileysPkgVersion}`);
+console.error(`${TAG7} baileys package loaded version=${baileysPkgVersion}`);
 var __BAILEYS_TAG = "[whatsapp:baileys]";
 var INSPECT_OPTS = {
   depth: null,
@@ -3331,7 +3437,7 @@ function createBaileysLogger(bindings = {}, authDir) {
 }
 var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
-  console.error(`${TAG6} draining credential save queue\u2026`);
+  console.error(`${TAG7} draining credential save queue\u2026`);
   const timer = new Promise(
     (resolve46) => setTimeout(() => resolve46("timeout"), timeoutMs)
   );
@@ -3340,9 +3446,9 @@ async function drainCredsSaveQueue(timeoutMs = 5e3) {
     timer
   ]);
   if (result === "timeout") {
-    console.error(`${TAG6} credential save queue drain timed out after ${timeoutMs}ms`);
+    console.error(`${TAG7} credential save queue drain timed out after ${timeoutMs}ms`);
   } else {
-    console.error(`${TAG6} credential save queue drained`);
+    console.error(`${TAG7} credential save queue drained`);
   }
 }
 function readCredsJsonRaw2(filePath) {
@@ -3365,11 +3471,11 @@ async function safeSaveCreds(authDir, saveCreds) {
         JSON.parse(raw);
         fsSync2.copyFileSync(credsPath, backupPath);
       } catch (err) {
-        console.warn(`${TAG6} backup pre-copy failed (parse or write) authDir=${authDir}: ${String(err)}`);
+        console.warn(`${TAG7} backup pre-copy failed (parse or write) authDir=${authDir}: ${String(err)}`);
       }
     }
   } catch (err) {
-    console.warn(`${TAG6} backup preparation failed authDir=${authDir}: ${String(err)}`);
+    console.warn(`${TAG7} backup preparation failed authDir=${authDir}: ${String(err)}`);
   }
   try {
     await Promise.resolve(saveCreds());
@@ -3377,20 +3483,20 @@ async function safeSaveCreds(authDir, saveCreds) {
     try {
       const stats = await fs3.stat(credsPath);
       if (stats.size <= 1) {
-        console.error(`${TAG6} WARNING: creds file empty/truncated after save path=${credsPath} size=${stats.size}`);
+        console.error(`${TAG7} WARNING: creds file empty/truncated after save path=${credsPath} size=${stats.size}`);
       } else {
-        console.error(`${TAG6} creds saved and verified path=${credsPath} size=${stats.size}`);
+        console.error(`${TAG7} creds saved and verified path=${credsPath} size=${stats.size}`);
       }
     } catch (statErr) {
-      console.error(`${TAG6} creds NOT found on disk after save path=${credsPath}: ${String(statErr)}`);
+      console.error(`${TAG7} creds NOT found on disk after save path=${credsPath}: ${String(statErr)}`);
     }
   } catch (err) {
-    console.error(`${TAG6} failed saving creds to ${authDir}: ${String(err)}`);
+    console.error(`${TAG7} failed saving creds to ${authDir}: ${String(err)}`);
   }
 }
 function enqueueSaveCreds(authDir, saveCreds) {
   credsSaveQueue = credsSaveQueue.then(() => safeSaveCreds(authDir, saveCreds)).catch((err) => {
-    console.error(`${TAG6} creds save queue error: ${String(err)}`);
+    console.error(`${TAG7} creds save queue error: ${String(err)}`);
   });
 }
 async function createWaSocket(opts) {
@@ -3404,12 +3510,12 @@ async function createWaSocket(opts) {
   if (!silent) {
     const preCensus = credsCensus(authDir);
     console.error(
-      `${TAG6} op=creds-pre cid=${cid} account=${acct} credsPresent=${preCensus.credsPresent} registered=${preCensus.registered} hasAccount=${preCensus.hasAccountSignature}`
+      `${TAG7} op=creds-pre cid=${cid} account=${acct} credsPresent=${preCensus.credsPresent} registered=${preCensus.registered} hasAccount=${preCensus.hasAccountSignature}`
     );
   }
   const openTs = Date.now();
   console.error(
-    `${TAG6} op=socket-open cid=${cid} account=${acct} baileysVersion=${baileysPkgVersion} waProtocolVersion=${version.join(".")} openTs=${openTs}`
+    `${TAG7} op=socket-open cid=${cid} account=${acct} baileysVersion=${baileysPkgVersion} waProtocolVersion=${version.join(".")} openTs=${openTs}`
   );
   const baileysLogger = createBaileysLogger({}, authDir);
   const sock = makeWASocket({
@@ -3426,7 +3532,7 @@ async function createWaSocket(opts) {
     fireInitQueries: false
   });
   sock.ev.on("creds.update", () => {
-    console.error(`${TAG6} creds.update received \u2014 saving to ${authDir}`);
+    console.error(`${TAG7} creds.update received \u2014 saving to ${authDir}`);
     enqueueSaveCreds(authDir, saveCreds);
   });
   let qrSequence = 0;
@@ -3446,14 +3552,14 @@ async function createWaSocket(opts) {
         parts.push(`disconnectReason=${formatError(update.lastDisconnect.error)}`);
       }
       if (!silent && parts.length > 0) {
-        console.error(`${TAG6} connection.update ${parts.join(" ")}`);
+        console.error(`${TAG7} connection.update ${parts.join(" ")}`);
       }
       if (update.qr && !silent) {
         const now = Date.now();
         const sinceLastRefMs = lastQrTs ? now - lastQrTs : null;
         lastQrTs = now;
         console.error(
-          `${TAG6} op=qr cid=${cid} qr=#${qrSequence} sinceOpenMs=${now - openTs} sinceLastRefMs=${sinceLastRefMs ?? "n/a"}`
+          `${TAG7} op=qr cid=${cid} qr=#${qrSequence} sinceOpenMs=${now - openTs} sinceLastRefMs=${sinceLastRefMs ?? "n/a"}`
         );
       }
       if (update.isNewLogin === true && !pairSuccessLogged && !silent) {
@@ -3462,7 +3568,7 @@ async function createWaSocket(opts) {
         const sinceCodeIssuedMs = codeIssuedTs ? Date.now() - codeIssuedTs : null;
         const afterCensus = credsCensus(authDir);
         console.error(
-          `${TAG6} op=pair-success cid=${cid} account=${acct} sinceCodeIssuedMs=${sinceCodeIssuedMs ?? "n/a"} hasAccountAfter=${afterCensus.hasAccountSignature}`
+          `${TAG7} op=pair-success cid=${cid} account=${acct} sinceCodeIssuedMs=${sinceCodeIssuedMs ?? "n/a"} hasAccountAfter=${afterCensus.hasAccountSignature}`
         );
       }
       if (update.qr && onQr) {
@@ -3472,25 +3578,25 @@ async function createWaSocket(opts) {
         const status = getStatusCode(update.lastDisconnect?.error);
         if (!silent) {
           console.error(
-            `${TAG6} op=close cid=${cid} account=${acct} status=${status ?? "unknown"} reason="${formatError(update.lastDisconnect?.error)}" socketLifeMs=${Date.now() - openTs} kind=${closeKind(status, everOpen)}`
+            `${TAG7} op=close cid=${cid} account=${acct} status=${status ?? "unknown"} reason="${formatError(update.lastDisconnect?.error)}" socketLifeMs=${Date.now() - openTs} kind=${closeKind(status, everOpen)}`
           );
         }
         if (status === DisconnectReason.loggedOut && !silent) {
-          console.error(`${TAG6} session logged out (401) \u2014 re-link required`);
+          console.error(`${TAG7} session logged out (401) \u2014 re-link required`);
         }
       }
       if (update.connection === "open") {
         everOpen = true;
-        if (!silent) console.error(`${TAG6} connected`);
+        if (!silent) console.error(`${TAG7} connected`);
       }
       onConnectionUpdate?.(update);
     } catch (err) {
-      console.error(`${TAG6} connection.update handler error: ${String(err)}`);
+      console.error(`${TAG7} connection.update handler error: ${String(err)}`);
     }
   });
   if (sock.ws && typeof sock.ws.on === "function") {
     sock.ws.on("error", (err) => {
-      console.error(`${TAG6} WebSocket error: ${String(err)}`);
+      console.error(`${TAG7} WebSocket error: ${String(err)}`);
     });
     sock.ws.on("CB:message", (node) => {
       const attrs = node?.attrs ?? {};
@@ -3643,7 +3749,7 @@ function withTimeout(label, promise, timeoutMs) {
 }
 // app/lib/whatsapp/init-queries.ts
-var TAG7 = "[whatsapp:init]";
+var TAG8 = "[whatsapp:init]";
 var DEFAULT_QUERY_TIMEOUT_MS = 15e3;
 var INSPECT_OPTS2 = {
   depth: null,
@@ -3671,20 +3777,20 @@ async function runInitQueries(sock, ctx) {
     elapsedMs: 0
   };
   console.error(
-    `${TAG7} runInitQueries start account=${ctx.accountId} attempt=${ctx.attempt} selfPhone=${ctx.selfPhone ?? "unknown"} authDir=${ctx.authDir} queryTimeoutMs=${queryTimeoutMs}`
+    `${TAG8} runInitQueries start account=${ctx.accountId} attempt=${ctx.attempt} selfPhone=${ctx.selfPhone ?? "unknown"} authDir=${ctx.authDir} queryTimeoutMs=${queryTimeoutMs}`
   );
   console.error(
-    `${TAG7} fetchProps SKIPPED account=${ctx.accountId} reason=no-platform-consumer`
+    `${TAG8} fetchProps SKIPPED account=${ctx.accountId} reason=no-platform-consumer`
   );
   if (ctx.signal?.aborted) {
     result.aborted = true;
     result.elapsedMs = Date.now() - startedAt;
     console.error(
-      `${TAG7} runInitQueries aborted before start account=${ctx.accountId}`
+      `${TAG8} runInitQueries aborted before start account=${ctx.accountId}`
     );
     return result;
   }
-  console.error(`${TAG7} fetchBlocklist start account=${ctx.accountId}`);
+  console.error(`${TAG8} fetchBlocklist start account=${ctx.accountId}`);
   try {
     const blocklist = await withTimeout(
       "fetchBlocklist",
@@ -3694,24 +3800,24 @@ async function runInitQueries(sock, ctx) {
     const count = Array.isArray(blocklist) ? blocklist.length : 0;
     result.blocklistOk = true;
     console.error(
-      `${TAG7} fetchBlocklist ok account=${ctx.accountId} count=${count}`
+      `${TAG8} fetchBlocklist ok account=${ctx.accountId} count=${count}`
     );
   } catch (err) {
     const formatted = formatErr(err);
     result.errors.blocklist = formatted;
     console.error(
-      `${TAG7} fetchBlocklist FAILED account=${ctx.accountId}: ${formatted}`
+      `${TAG8} fetchBlocklist FAILED account=${ctx.accountId}: ${formatted}`
     );
   }
   if (ctx.signal?.aborted) {
     result.aborted = true;
     result.elapsedMs = Date.now() - startedAt;
     console.error(
-      `${TAG7} runInitQueries aborted mid-sequence account=${ctx.accountId} after=fetchBlocklist`
+      `${TAG8} runInitQueries aborted mid-sequence account=${ctx.accountId} after=fetchBlocklist`
     );
     return result;
   }
-  console.error(`${TAG7} fetchPrivacySettings start account=${ctx.accountId}`);
+  console.error(`${TAG8} fetchPrivacySettings start account=${ctx.accountId}`);
   try {
     const settings = await withTimeout(
       "fetchPrivacySettings",
@@ -3721,18 +3827,18 @@ async function runInitQueries(sock, ctx) {
     );
     result.privacySettingsOk = true;
     console.error(
-      `${TAG7} fetchPrivacySettings ok account=${ctx.accountId} keys=${settings ? Object.keys(settings).join(",") : ""}`
+      `${TAG8} fetchPrivacySettings ok account=${ctx.accountId} keys=${settings ? Object.keys(settings).join(",") : ""}`
     );
   } catch (err) {
     const formatted = formatErr(err);
     result.errors.privacySettings = formatted;
     console.error(
-      `${TAG7} fetchPrivacySettings FAILED account=${ctx.accountId}: ${formatted}`
+      `${TAG8} fetchPrivacySettings FAILED account=${ctx.accountId}: ${formatted}`
     );
   }
   result.elapsedMs = Date.now() - startedAt;
   console.error(
-    `${TAG7} runInitQueries done account=${ctx.accountId} blocklistOk=${result.blocklistOk} privacySettingsOk=${result.privacySettingsOk} elapsedMs=${result.elapsedMs}`
+    `${TAG8} runInitQueries done account=${ctx.accountId} blocklistOk=${result.blocklistOk} privacySettingsOk=${result.privacySettingsOk} elapsedMs=${result.elapsedMs}`
   );
   return result;
 }
@@ -4474,7 +4580,7 @@ function isDuplicateInbound(key) {
 }
 // app/lib/whatsapp/inbound/self-chat.ts
-var TAG8 = "[whatsapp:self-chat]";
+var TAG9 = "[whatsapp:self-chat]";
 function normalizeJid(jid) {
   const m = jid.match(/^(\d+)(?::\d+)?@(s\.whatsapp\.net|lid)$/i);
   return m ? `${m[1]}@${m[2].toLowerCase()}` : jid;
@@ -4494,10 +4600,10 @@ function evaluateSelfChatCommand(input) {
   const connAtMs = input.lastConnectedAtMs ?? 0;
   const msgId = input.msgId ?? "?";
   console.error(
-    `${TAG8} op=seen account=${input.accountId} msgId=${msgId} tsMs=${tsMs} connAtMs=${connAtMs} fromMe=true`
+    `${TAG9} op=seen account=${input.accountId} msgId=${msgId} tsMs=${tsMs} connAtMs=${connAtMs} fromMe=true`
   );
   const skip = (reason) => {
-    console.error(`${TAG8} op=skip account=${input.accountId} msgId=${msgId} reason=${reason}`);
+    console.error(`${TAG9} op=skip account=${input.accountId} msgId=${msgId} reason=${reason}`);
     return { kind: "skip", reason };
   };
   if (input.msgId && isAgentSentMessage(input.msgId)) return skip("echo");
@@ -4505,13 +4611,13 @@ function evaluateSelfChatCommand(input) {
   if (isDuplicateInbound(`${input.accountId}:${input.remoteJid}:${input.msgId}`)) return skip("duplicate");
   if (!input.text) return skip("no-text");
   console.error(
-    `${TAG8} op=dispatch account=${input.accountId} msgId=${msgId} bytes=${Buffer.byteLength(input.text, "utf8")} agentType=admin`
+    `${TAG9} op=dispatch account=${input.accountId} msgId=${msgId} bytes=${Buffer.byteLength(input.text, "utf8")} agentType=admin`
   );
   return { kind: "dispatch", text: input.text };
 }
 // app/lib/whatsapp/activity.ts
-var TAG9 = "[whatsapp:activity]";
+var TAG10 = "[whatsapp:activity]";
 var RECENT_EVENTS_MAX = 200;
 var counters = /* @__PURE__ */ new Map();
 var recentEvents = [];
@@ -4539,10 +4645,10 @@ function recordActivity(event) {
       recentEvents.splice(0, recentEvents.length - RECENT_EVENTS_MAX);
     }
     console.error(
-      `${TAG9} channel-activity: direction=${direction} account=${accountId} jid=${jid}` + (messageType ? ` type=${messageType}` : "")
+      `${TAG10} channel-activity: direction=${direction} account=${accountId} jid=${jid}` + (messageType ? ` type=${messageType}` : "")
     );
   } catch (err) {
-    console.error(`${TAG9} recording failed: ${String(err)}`);
+    console.error(`${TAG10} recording failed: ${String(err)}`);
   }
 }
 function getChannelActivity(accountId) {
@@ -4563,7 +4669,7 @@ function getChannelActivity(accountId) {
 }
 // app/lib/whatsapp/outbound/send.ts
-var TAG10 = "[whatsapp:outbound]";
+var TAG11 = "[whatsapp:outbound]";
 function buildQuoted(q2) {
   return {
     key: {
@@ -4584,14 +4690,14 @@ async function sendTextMessage(sock, to, text, opts) {
     const messageId = result?.key?.id;
     if (messageId) {
       trackAgentSentMessage(messageId);
-      console.error(`${TAG10} sent text to=${jid} id=${messageId}`);
+      console.error(`${TAG11} sent text to=${jid} id=${messageId}`);
     }
     if (opts?.accountId) {
       recordActivity({ accountId: opts.accountId, direction: "outbound", jid, messageType: "text" });
     }
     return { success: true, messageId: messageId ?? void 0 };
   } catch (err) {
-    console.error(`${TAG10} send failed to=${to}: ${String(err)}`);
+    console.error(`${TAG11} send failed to=${to}: ${String(err)}`);
     return { success: false, error: String(err) };
   }
 }
@@ -4668,20 +4774,20 @@ async function sendMediaMessage(sock, to, media, opts) {
     const messageId = result?.key?.id;
     if (messageId) {
       trackAgentSentMessage(messageId);
-      console.error(`${TAG10} sent ${media.type} to=${jid} id=${messageId}`);
+      console.error(`${TAG11} sent ${media.type} to=${jid} id=${messageId}`);
     }
     if (opts?.accountId) {
       recordActivity({ accountId: opts.accountId, direction: "outbound", jid, messageType: media.type });
     }
     return { success: true, messageId: messageId ?? void 0 };
   } catch (err) {
-    console.error(`${TAG10} send media failed to=${to}: ${String(err)}`);
+    console.error(`${TAG11} send media failed to=${to}: ${String(err)}`);
     return { success: false, error: String(err) };
   }
 }
 // app/lib/whatsapp/persist-message.ts
-var TAG11 = "[whatsapp-persist]";
+var TAG12 = "[whatsapp-persist]";
 var sessionWriteLocks = /* @__PURE__ */ new Map();
 async function persistWhatsAppMessage(input) {
   if (!input.body && !input.attachmentId || !input.msgKeyId) return null;
@@ -4732,14 +4838,14 @@ async function persistWhatsAppMessage(input) {
     };
     const result = await session.run(cypher, params);
     if (result.records.length === 0) {
-      console.error(`${TAG11} skip reason=conversation-not-found accountId=${input.platformAccountId} cacheKey=${input.cacheKey} messageId=${messageId}`);
+      console.error(`${TAG12} skip reason=conversation-not-found accountId=${input.platformAccountId} cacheKey=${input.cacheKey} messageId=${messageId}`);
       return null;
     }
     const rec = result.records[0];
     const senderElementId = rec.get("senderElementId");
     const senderReused = rec.get("senderReused") === true;
     console.error(
-      `${TAG11} sender-resolved telephone=${senderTelephone} nodeKind=Person elementId=${senderElementId} reused=${senderReused}`
+      `${TAG12} sender-resolved telephone=${senderTelephone} nodeKind=Person elementId=${senderElementId} reused=${senderReused}`
     );
     const diskRecord = {
       messageId,
@@ -4761,18 +4867,18 @@ async function persistWhatsAppMessage(input) {
     const { created } = appendMessage(input.platformAccountId, diskRecord, altDedupeRemoteJids);
     const ms = Date.now() - t0;
     if (!created) {
-      console.error(`${TAG11} noop reason=existing-message messageId=${messageId}`);
+      console.error(`${TAG12} noop reason=existing-message messageId=${messageId}`);
       return { messageId, created: false, senderElementId };
     }
     console.error(
-      `${TAG11} write messageId=${messageId} accountId=${input.platformAccountId} cacheKey=${input.cacheKey} fromMe=${input.fromMe} dateSent=${dateSentIso} bodyBytes=${Buffer.byteLength(input.body, "utf8")} attachment=${input.attachmentId ?? "none"} ms=${ms}`
+      `${TAG12} write messageId=${messageId} accountId=${input.platformAccountId} cacheKey=${input.cacheKey} fromMe=${input.fromMe} dateSent=${dateSentIso} bodyBytes=${Buffer.byteLength(input.body, "utf8")} attachment=${input.attachmentId ?? "none"} ms=${ms}`
     );
     return { messageId, created: true, senderElementId };
   } catch (err) {
     const ms = Date.now() - t0;
     const reason = sanitizeReason(err);
     console.error(
-      `${TAG11} FAIL accountId=${input.platformAccountId} waname=${input.accountId} remoteJid=${input.remoteJid} msgKey=${input.msgKeyId} reason=${reason} ms=${ms}`
+      `${TAG12} FAIL accountId=${input.platformAccountId} waname=${input.accountId} remoteJid=${input.remoteJid} msgKey=${input.msgKeyId} reason=${reason} ms=${ms}`
     );
     return null;
   } finally {
@@ -4805,7 +4911,7 @@ function sanitizeReason(err) {
 }
 // app/lib/whatsapp/ensure-conversation.ts
-var TAG12 = "[whatsapp-persist]";
+var TAG13 = "[whatsapp-persist]";
 async function ensureWhatsAppConversation(input) {
   const t0 = Date.now();
   try {
@@ -4817,19 +4923,19 @@ async function ensureWhatsAppConversation(input) {
     const ms = Date.now() - t0;
     if (!result.sessionId) {
       console.error(
-        `${TAG12} conversation-merged FAIL cacheKey=${input.cacheKey} reason=null-sessionId ms=${ms}`
+        `${TAG13} conversation-merged FAIL cacheKey=${input.cacheKey} reason=null-sessionId ms=${ms}`
       );
       return null;
     }
     console.error(
-      `${TAG12} conversation-merged cacheKey=${input.cacheKey} agentType=${input.agentType} channel=whatsapp accountId=${input.platformAccountId} connectionAccountId=${input.connectionAccountId ?? input.platformAccountId} created=${result.created} ms=${ms}`
+      `${TAG13} conversation-merged cacheKey=${input.cacheKey} agentType=${input.agentType} channel=whatsapp accountId=${input.platformAccountId} connectionAccountId=${input.connectionAccountId ?? input.platformAccountId} created=${result.created} ms=${ms}`
     );
     return { sessionId: result.sessionId, created: result.created };
   } catch (err) {
     const ms = Date.now() - t0;
     const reason = err instanceof Error ? `${err.name}:${err.message.slice(0, 200)}` : String(err).slice(0, 200);
     console.error(
-      `${TAG12} conversation-merged FAIL cacheKey=${input.cacheKey} reason=${reason} ms=${ms}`
+      `${TAG13} conversation-merged FAIL cacheKey=${input.cacheKey} reason=${reason} ms=${ms}`
     );
     return null;
   }
@@ -5391,7 +5497,7 @@ async function storeComponentArtefact(accountId, attachmentId, mimeType, content
 }
 // app/lib/whatsapp/inbound/media.ts
-var TAG13 = "[whatsapp:media]";
+var TAG14 = "[whatsapp:media]";
 var MEDIA_DIR = "/tmp/maxy-media";
 var DOWNLOAD_TIMEOUT_MS = 45e3;
 var DETACHED_GRACE_MS = 3e5;
@@ -5481,25 +5587,25 @@ async function downloadInboundMediaBuffer(msg, sock, opts) {
           }
         );
         if (!buffer || buffer.length === 0) {
-          console.error(`${TAG13} primary download returned empty, trying direct fallback`);
+          console.error(`${TAG14} primary download returned empty, trying direct fallback`);
           const downloadable = getDownloadableContent(content);
           if (downloadable) {
             try {
               const stream2 = await downloadContentFromMessage(downloadable.downloadable, downloadable.mediaType);
               buffer = await streamToBuffer(stream2);
             } catch (fallbackErr) {
-              console.error(`${TAG13} direct download fallback failed: ${String(fallbackErr)}`);
+              console.error(`${TAG14} direct download fallback failed: ${String(fallbackErr)}`);
             }
           }
         }
         if (!buffer || buffer.length === 0) {
-          console.error(`${TAG13} download failed: empty buffer for ${mimetype ?? "unknown"}`);
+          console.error(`${TAG14} download failed: empty buffer for ${mimetype ?? "unknown"}`);
           return void 0;
         }
         if (buffer.length > maxBytes) {
           const sizeMB = (buffer.length / (1024 * 1024)).toFixed(1);
           const limitMB = (maxBytes / (1024 * 1024)).toFixed(0);
-          console.error(`${TAG13} media too large type=${mimetype ?? "unknown"} size=${sizeMB}MB limit=${limitMB}MB`);
+          console.error(`${TAG14} media too large type=${mimetype ?? "unknown"} size=${sizeMB}MB limit=${limitMB}MB`);
           return void 0;
         }
         return {
@@ -5513,7 +5619,7 @@ async function downloadInboundMediaBuffer(msg, sock, opts) {
     endMediaDownload();
     return settled;
   } catch (err) {
-    console.error(`${TAG13} media download failed type=${mimetype ?? "unknown"} error=${String(err)}`);
+    console.error(`${TAG14} media download failed type=${mimetype ?? "unknown"} error=${String(err)}`);
     if (isTimeoutError(err)) {
       const t = setTimeout(endMediaDownload, DETACHED_GRACE_MS);
       t.unref?.();
@@ -5531,7 +5637,7 @@ async function downloadInboundMedia(msg, sock, opts) {
   const filePath = join8(MEDIA_DIR, `${randomUUID4()}.${ext}`);
   await writeFile2(filePath, res.buffer);
   const sizeKB = (res.buffer.length / 1024).toFixed(0);
-  console.error(`${TAG13} media downloaded type=${res.mimetype} size=${sizeKB}KB path=${filePath}`);
+  console.error(`${TAG14} media downloaded type=${res.mimetype} size=${sizeKB}KB path=${filePath}`);
   return { path: filePath, mimetype: res.mimetype, size: res.buffer.length };
 }
 async function storeInboundMediaServable(msg, sock, accountId, seed, opts) {
@@ -5540,15 +5646,15 @@ async function storeInboundMediaServable(msg, sock, accountId, seed, opts) {
     if (attachmentExists(accountId, attachmentId)) return attachmentId;
     const res = await downloadInboundMediaBufferCached(msg, sock, opts);
     if (!res) {
-      console.error(`${TAG13} servable-store skip reason=no-buffer id=${attachmentId}`);
+      console.error(`${TAG14} servable-store skip reason=no-buffer id=${attachmentId}`);
       return null;
     }
     const filename = res.filename ?? `${attachmentId}.${mimeToExt(res.mimetype)}`;
     await storeMediaBuffer(accountId, attachmentId, filename, res.mimetype, res.buffer);
-    console.error(`${TAG13} servable-store ok id=${attachmentId} mime=${res.mimetype} bytes=${res.buffer.length}`);
+    console.error(`${TAG14} servable-store ok id=${attachmentId} mime=${res.mimetype} bytes=${res.buffer.length}`);
     return attachmentId;
   } catch (err) {
-    console.error(`${TAG13} servable-store FAIL id=${attachmentId} reason=${String(err).slice(0, 120)}`);
+    console.error(`${TAG14} servable-store FAIL id=${attachmentId} reason=${String(err).slice(0, 120)}`);
     return null;
   }
 }
@@ -5596,7 +5702,7 @@ function createBoundedQueue(limit, opts) {
 }
 // app/lib/whatsapp/inbound/debounce.ts
-var TAG14 = "[whatsapp:debounce]";
+var TAG15 = "[whatsapp:debounce]";
 var STT_TAG = "[whatsapp:stt-await]";
 function createInboundDebouncer(opts) {
   const { debounceMs, buildKey, onFlush, onError } = opts;
@@ -5627,7 +5733,7 @@ function createInboundDebouncer(opts) {
     pending.delete(key);
     const batchSize = batch.entries.length;
     try {
-      console.error(`${TAG14} debounce flush key=${key} batchSize=${batchSize}`);
+      console.error(`${TAG15} debounce flush key=${key} batchSize=${batchSize}`);
       const result = onFlush(batch.entries);
       if (result && typeof result.catch === "function") {
         result.catch(onError);
@@ -5707,7 +5813,7 @@ function combineInboundBatch(entries2) {
 }
 // app/lib/whatsapp/opening-hours.ts
-var TAG15 = "[whatsapp:hours]";
+var TAG16 = "[whatsapp:hours]";
 async function isBusinessOpen(accountId) {
   try {
     const timezone = await resolveTimezone(accountId);
@@ -5725,7 +5831,7 @@ async function isBusinessOpen(accountId) {
         { accountId, dayOfWeek, previousDayOfWeek }
       );
       if (result.records.length === 0) {
-        console.error(`${TAG15} [${accountId}] business hours check: no opening hours configured, treating as open`);
+        console.error(`${TAG16} [${accountId}] business hours check: no opening hours configured, treating as open`);
         return { open: true, reason: "no opening hours configured" };
       }
       const specs = result.records.filter((r) => r.get("opens") != null && r.get("closes") != null).map((r) => ({
@@ -5734,7 +5840,7 @@ async function isBusinessOpen(accountId) {
         closes: String(r.get("closes")).trim()
       }));
       if (specs.length === 0) {
-        console.error(`${TAG15} [${accountId}] business hours check: no opening hours configured, treating as open`);
+        console.error(`${TAG16} [${accountId}] business hours check: no opening hours configured, treating as open`);
         return { open: true, reason: "no opening hours configured" };
       }
       for (const spec of specs) {
@@ -5744,7 +5850,7 @@ async function isBusinessOpen(accountId) {
           if (spec.opens > spec.closes && currentTime < spec.closes) {
             const hoursStr = `${spec.opens}-${spec.closes} (${spec.day})`;
             console.error(
-              `${TAG15} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
+              `${TAG16} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
             );
             return {
               open: true,
@@ -5757,7 +5863,7 @@ async function isBusinessOpen(accountId) {
         } else if (isTimeInRange(currentTime, spec.opens, spec.closes)) {
           const hoursStr = `${spec.opens}-${spec.closes}`;
           console.error(
-            `${TAG15} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
+            `${TAG16} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
           );
           return {
             open: true,
@@ -5771,7 +5877,7 @@ async function isBusinessOpen(accountId) {
       const todaySpecs = specs.filter((s) => s.day === dayOfWeek);
       const allHours = todaySpecs.map((s) => `${s.opens}-${s.closes}`).join(", ") || "none today";
       console.error(
-        `${TAG15} [${accountId}] business hours check: closed (day=${dayOfWeek}, time=${currentTime}, hours=${allHours})`
+        `${TAG16} [${accountId}] business hours check: closed (day=${dayOfWeek}, time=${currentTime}, hours=${allHours})`
       );
       return {
         open: false,
@@ -5785,7 +5891,7 @@ async function isBusinessOpen(accountId) {
     }
   } catch (err) {
     console.error(
-      `${TAG15} [${accountId}] business hours check failed, treating as open: ${err instanceof Error ? err.message : String(err)}`
+      `${TAG16} [${accountId}] business hours check failed, treating as open: ${err instanceof Error ? err.message : String(err)}`
     );
     return { open: true, reason: "hours check failed (treating as open)" };
   }
@@ -5831,7 +5937,7 @@ import { execFile } from "child_process";
 import { unlink, stat } from "fs/promises";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile);
-var TAG16 = "[stt]";
+var TAG17 = "[stt]";
 var WHISPER_BINARY = process.env.WHISPER_BINARY ?? "/opt/whisper.cpp/build/bin/whisper-cli";
 var WHISPER_MODEL = process.env.WHISPER_MODEL ?? "/opt/whisper.cpp/models/ggml-base.bin";
 var WHISPER_TIMEOUT_MS = 20 * 60 * 1e3;
@@ -5850,11 +5956,11 @@ async function transcribe(audioPath, mimetype) {
     const s = await stat(audioPath);
     audioBytes = s.size;
   } catch {
-    console.error(`${TAG16} failed: file not readable path=${audioPath}`);
+    console.error(`${TAG17} failed: file not readable path=${audioPath}`);
     return void 0;
   }
   console.error(
-    `${TAG16} start provider=whisper-local audio_bytes=${audioBytes} mimetype=${mimetype} path=${audioPath}`
+    `${TAG17} start provider=whisper-local audio_bytes=${audioBytes} mimetype=${mimetype} path=${audioPath}`
   );
   const wavPath = audioPath.replace(/\.[^.]+$/, "") + ".wav";
   try {
@@ -5873,7 +5979,7 @@ async function transcribe(audioPath, mimetype) {
     ], { timeout: 3e4 });
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG16} failed: ffmpeg conversion error=${reason}`);
+    console.error(`${TAG17} failed: ffmpeg conversion error=${reason}`);
     return void 0;
   }
   try {
@@ -5889,20 +5995,20 @@ async function transcribe(audioPath, mimetype) {
     const durationMs = Date.now() - startMs;
     const { text, count: stripped } = stripSpecialTokens(stdout.trim());
     if (!text) {
-      console.error(`${TAG16} failed: whisper returned empty output duration_ms=${durationMs}`);
+      console.error(`${TAG17} failed: whisper returned empty output duration_ms=${durationMs}`);
       return void 0;
     }
     const langMatch = stderr.match(/auto-detected language:\s*(\w+)/);
     const language = langMatch?.[1] ?? "unknown";
     const words = text.split(/\s+/).filter(Boolean).length;
     console.error(
-      `${TAG16} done provider=whisper-local duration_ms=${durationMs} words=${words} stripped=${stripped} lang=${language}`
+      `${TAG17} done provider=whisper-local duration_ms=${durationMs} words=${words} stripped=${stripped} lang=${language}`
     );
     return { text, language, durationMs };
   } catch (err) {
     const durationMs = Date.now() - startMs;
     const reason = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG16} failed provider=whisper-local duration_ms=${durationMs} error=${reason}`);
+    console.error(`${TAG17} failed provider=whisper-local duration_ms=${durationMs} error=${reason}`);
     return void 0;
   } finally {
     unlink(wavPath).catch(() => {
@@ -5921,7 +6027,7 @@ var WaReplyError = class extends Error {
 };
 // app/lib/whatsapp/manager.ts
-var TAG17 = "[whatsapp:manager]";
+var TAG18 = "[whatsapp:manager]";
 var MAX_RECONNECT_ATTEMPTS = 10;
 var MESSAGE_STORE_MAX = 500;
 var APPEND_MEDIA_CONCURRENCY = 3;
@@ -5929,7 +6035,7 @@ var APPEND_MEDIA_MAX_PENDING = 24;
 var appendMediaQueue = createBoundedQueue(APPEND_MEDIA_CONCURRENCY, {
   maxPending: APPEND_MEDIA_MAX_PENDING
 });
-var connections = /* @__PURE__ */ new Map();
+var connections2 = /* @__PURE__ */ new Map();
 var configDir = null;
 var whatsAppConfig = {};
 var onInboundMessage = null;
@@ -5958,7 +6064,7 @@ function storeMessage(storeKey, entry) {
   if (entries2.length > MESSAGE_STORE_MAX) {
     const trimmed = entries2.length - MESSAGE_STORE_MAX;
     entries2.splice(0, trimmed);
-    console.error(`${TAG17} message store trimmed for ${storeKey}: ${trimmed} oldest messages removed`);
+    console.error(`${TAG18} message store trimmed for ${storeKey}: ${trimmed} oldest messages removed`);
   }
 }
 function deriveCacheKey(input) {
@@ -6001,7 +6107,7 @@ function buildSelfChatDispatch(input) {
 }
 async function init(opts) {
   if (initialized) {
-    console.error(`${TAG17} already initialized`);
+    console.error(`${TAG18} already initialized`);
     return;
   }
   configDir = opts.configDir;
@@ -6009,20 +6115,20 @@ async function init(opts) {
   loadConfig(opts.accountConfig);
   const accountIds = listCredentialAccountIds(configDir);
   if (accountIds.length === 0) {
-    console.error(`${TAG17} init: no stored WhatsApp credentials found`);
+    console.error(`${TAG18} init: no stored WhatsApp credentials found`);
     initialized = true;
     return;
   }
-  console.error(`${TAG17} init: found ${accountIds.length} credentialed account(s): ${accountIds.join(", ")}`);
+  console.error(`${TAG18} init: found ${accountIds.length} credentialed account(s): ${accountIds.join(", ")}`);
   initialized = true;
   for (const accountId of accountIds) {
     const accountCfg = whatsAppConfig.accounts?.[accountId];
     if (accountCfg?.enabled === false) {
-      console.error(`${TAG17} skipping disabled account=${accountId}`);
+      console.error(`${TAG18} skipping disabled account=${accountId}`);
       continue;
     }
     startConnection(accountId).catch((err) => {
-      console.error(`${TAG17} failed to auto-start account=${accountId}: ${formatError(err)}`);
+      console.error(`${TAG18} failed to auto-start account=${accountId}: ${formatError(err)}`);
     });
   }
 }
@@ -6031,7 +6137,7 @@ async function startConnection(accountId) {
   const authDir = resolveAuthDir(configDir, accountId);
   const hasAuth = await authExists(authDir);
   if (!hasAuth) {
-    console.error(`${TAG17} no credentials for account=${accountId}`);
+    console.error(`${TAG18} no credentials for account=${accountId}`);
     return;
   }
   let platformAccountId;
@@ -6063,11 +6169,11 @@ async function startConnection(accountId) {
     debouncer: null,
     lidMapping: null
   };
-  connections.set(accountId, conn);
+  connections2.set(accountId, conn);
   await connectWithReconnect(conn);
 }
 async function stopConnection(accountId) {
-  const conn = connections.get(accountId);
+  const conn = connections2.get(accountId);
   if (!conn) return;
   conn.abortController.abort();
   if (conn.debouncer) {
@@ -6082,14 +6188,14 @@ async function stopConnection(accountId) {
       conn.sock.ev.removeAllListeners("creds.update");
       conn.sock.ws?.close?.();
     } catch (err) {
-      console.warn(`${TAG17} socket cleanup error during stop account=${accountId}: ${String(err)}`);
+      console.warn(`${TAG18} socket cleanup error during stop account=${accountId}: ${String(err)}`);
     }
   }
-  connections.delete(accountId);
-  console.error(`${TAG17} stopped account=${accountId}`);
+  connections2.delete(accountId);
+  console.error(`${TAG18} stopped account=${accountId}`);
 }
 function getStatus() {
-  return Array.from(connections.values()).map((conn) => ({
+  return Array.from(connections2.values()).map((conn) => ({
     accountId: conn.accountId,
     accountName: conn.accountName,
     connected: conn.connected,
@@ -6113,14 +6219,14 @@ function selectConnection(conns, accountId) {
   return { ok: true, sock: conn.sock, accountId: conn.accountId };
 }
 function resolveSocket(accountId) {
-  return selectConnection(Array.from(connections.values()), accountId);
+  return selectConnection(Array.from(connections2.values()), accountId);
 }
 function selectStoreAccountKey(conns, accountId) {
   const conn = findConnectionByKey(conns, accountId);
   return conn ? conn.platformAccountId : accountId;
 }
 function resolveReadStoreKey(accountId) {
-  return selectStoreAccountKey(Array.from(connections.values()), accountId);
+  return selectStoreAccountKey(Array.from(connections2.values()), accountId);
 }
 function resolveInboundPersistAccount(args) {
   const result = args.accessResult;
@@ -6130,7 +6236,7 @@ function resolveInboundPersistAccount(args) {
   return args.connPlatformAccountId;
 }
 function resolveConversationPersistAccount(sendAccountId, counterpartyPhone) {
-  const conn = findConnectionByKey(Array.from(connections.values()), sendAccountId);
+  const conn = findConnectionByKey(Array.from(connections2.values()), sendAccountId);
   if (!conn) return sendAccountId;
   const access = checkDmAccess({
     senderPhone: counterpartyPhone,
@@ -6146,7 +6252,7 @@ function resolveConversationPersistAccount(sendAccountId, counterpartyPhone) {
   });
 }
 function listConnectionPlatformAccountIds() {
-  return [...connections.values()].map((conn) => conn.platformAccountId);
+  return [...connections2.values()].map((conn) => conn.platformAccountId);
 }
 async function registerLoginSocket(accountId, sock, authDir) {
   if (!configDir) throw new Error("WhatsApp manager not initialized");
@@ -6181,13 +6287,13 @@ async function registerLoginSocket(accountId, sock, authDir) {
     lidMapping: null
   };
   applySelfIdentity(conn, sock, "register");
-  connections.set(accountId, conn);
+  connections2.set(accountId, conn);
   monitorInbound(conn);
   try {
     await sock.sendPresenceUpdate("available");
-    console.error(`${TAG17} presence set to available account=${accountId}`);
+    console.error(`${TAG18} presence set to available account=${accountId}`);
   } catch (err) {
-    console.error(`${TAG17} presence update failed account=${accountId}: ${String(err)}`);
+    console.error(`${TAG18} presence update failed account=${accountId}: ${String(err)}`);
   }
   await runInitQueries(sock, {
     accountId,
@@ -6198,7 +6304,7 @@ async function registerLoginSocket(accountId, sock, authDir) {
   });
   watchForDisconnect(conn);
   attachSelfIdRefreshOnCredsUpdate(conn);
-  console.error(`${TAG17} registered login socket for account=${accountId} phone=${conn.selfPhone ?? "unknown"}`);
+  console.error(`${TAG18} registered login socket for account=${accountId} phone=${conn.selfPhone ?? "unknown"}`);
 }
 function attachSelfIdRefreshOnCredsUpdate(conn) {
   if (!conn.sock) return;
@@ -6240,10 +6346,10 @@ function listStoreAccountKeys() {
 }
 async function shutdown() {
   await drainCredsSaveQueue();
-  const ids = Array.from(connections.keys());
+  const ids = Array.from(connections2.keys());
   await Promise.all(ids.map((id) => stopConnection(id)));
   initialized = false;
-  console.error(`${TAG17} shutdown complete`);
+  console.error(`${TAG18} shutdown complete`);
 }
 function loadConfig(accountConfig) {
   try {
@@ -6254,19 +6360,19 @@ function loadConfig(accountConfig) {
       if (result.ok) {
         whatsAppConfig = result.data;
         if (result.droppedKeys.length > 0) {
-          console.error(`${TAG17} config: dropped unknown keys=[${result.droppedKeys.join(",")}] preserved known config`);
+          console.error(`${TAG18} config: dropped unknown keys=[${result.droppedKeys.join(",")}] preserved known config`);
         }
       } else {
-        console.error(`${TAG17} config validation failed: ${result.error.message}`);
+        console.error(`${TAG18} config validation failed: ${result.error.message}`);
         whatsAppConfig = {};
       }
       const diskAdmin = Array.isArray(wa.adminPhones) ? wa.adminPhones : [];
       if (diskAdmin.length > 0 && (whatsAppConfig.adminPhones?.length ?? 0) === 0) {
-        console.error(`${TAG17} WARN adminPhones present on disk but empty after load`);
+        console.error(`${TAG18} WARN adminPhones present on disk but empty after load`);
       }
     }
   } catch (err) {
-    console.error(`${TAG17} config load error: ${String(err)}`);
+    console.error(`${TAG18} config load error: ${String(err)}`);
     whatsAppConfig = {};
   }
 }
@@ -6277,7 +6383,7 @@ async function connectWithReconnect(conn) {
     let cycleError = null;
     let connectedAt;
     try {
-      console.error(`${TAG17} connecting account=${conn.accountId} attempt=${conn.reconnectAttempts}`);
+      console.error(`${TAG18} connecting account=${conn.accountId} attempt=${conn.reconnectAttempts}`);
       if (conn.debouncer) {
         await conn.debouncer.destroy();
         conn.debouncer = null;
@@ -6290,7 +6396,7 @@ async function connectWithReconnect(conn) {
       conn.sock = sock;
       applySelfIdentity(conn, sock, "pre-listener");
       monitorInbound(conn);
-      console.error(`${TAG17} socket created account=${conn.accountId} \u2014 waiting for connection`);
+      console.error(`${TAG18} socket created account=${conn.accountId} \u2014 waiting for connection`);
       await waitForConnection(sock);
       connectedAt = Date.now();
       conn.connected = true;
@@ -6298,12 +6404,12 @@ async function connectWithReconnect(conn) {
       conn.lastError = void 0;
       conn.terminalReason = void 0;
       applySelfIdentity(conn, sock, "post-connect");
-      console.error(`${TAG17} connected account=${conn.accountId} phone=${conn.selfPhone ?? "unknown"}`);
+      console.error(`${TAG18} connected account=${conn.accountId} phone=${conn.selfPhone ?? "unknown"}`);
       try {
         await sock.sendPresenceUpdate("available");
-        console.error(`${TAG17} presence set to available account=${conn.accountId}`);
+        console.error(`${TAG18} presence set to available account=${conn.accountId}`);
       } catch (err) {
-        console.error(`${TAG17} presence update failed account=${conn.accountId}: ${String(err)}`);
+        console.error(`${TAG18} presence update failed account=${conn.accountId}: ${String(err)}`);
       }
       await runInitQueries(sock, {
         accountId: conn.accountId,
@@ -6326,10 +6432,10 @@ async function connectWithReconnect(conn) {
       }
       const classification = classifyDisconnect(err);
       conn.lastError = classification.message;
-      console.error(`${TAG17} disconnect account=${conn.accountId}: ${classification.kind} \u2014 ${classification.message}`);
+      console.error(`${TAG18} disconnect account=${conn.accountId}: ${classification.kind} \u2014 ${classification.message}`);
       if (!classification.shouldRetry) {
         conn.terminalReason = classification.message;
-        console.error(`${TAG17} terminal disconnect for account=${conn.accountId}, stopping reconnection`);
+        console.error(`${TAG18} terminal disconnect for account=${conn.accountId}, stopping reconnection`);
         return;
       }
     }
@@ -6342,7 +6448,7 @@ async function connectWithReconnect(conn) {
     if (decision.action === "abort") {
       const stuckReason = `GIVING UP account=${conn.accountId} attempts=${decision.finalAttempts}/${maxAttempts} uptimeMsLast=${uptimeMs} stableThresholdMs=${STABLE_UPTIME_MS} lastError=${conn.lastError ?? "(none)"}`;
       console.error(
-        `${TAG17} ${stuckReason} \u2014 re-pair via QR or restart required; WhatsApp will not reconnect automatically`
+        `${TAG18} ${stuckReason} \u2014 re-pair via QR or restart required; WhatsApp will not reconnect automatically`
       );
       conn.sessionStuckReason = stuckReason;
       conn.lastError = stuckReason;
@@ -6351,17 +6457,17 @@ async function connectWithReconnect(conn) {
     conn.reconnectAttempts = decision.nextAttempts;
     if (decision.reason === "short-lived") {
       console.error(
-        `${TAG17} short-lived session account=${conn.accountId} uptimeMs=${uptimeMs} attempt=${decision.nextAttempts}/${maxAttempts} lastError=${conn.lastError ?? "(clean disconnect)"}`
+        `${TAG18} short-lived session account=${conn.accountId} uptimeMs=${uptimeMs} attempt=${decision.nextAttempts}/${maxAttempts} lastError=${conn.lastError ?? "(clean disconnect)"}`
       );
     } else {
       console.error(
-        `${TAG17} session stable account=${conn.accountId} uptimeMs=${uptimeMs} \u2014 reconnect counter reset`
+        `${TAG18} session stable account=${conn.accountId} uptimeMs=${uptimeMs} \u2014 reconnect counter reset`
       );
     }
     if (decision.reason === "short-lived" || cycleError) {
       const delay = computeBackoff(Math.max(1, decision.nextAttempts));
       console.error(
-        `${TAG17} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
+        `${TAG18} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
       await new Promise((resolve46) => {
         const timer = setTimeout(resolve46, delay);
@@ -6394,12 +6500,12 @@ function watchForDisconnect(conn) {
   if (!conn.sock) return;
   conn.sock.ev.on("connection.update", (update) => {
     if (update.connection === "close") {
-      if (connections.get(conn.accountId) !== conn) return;
-      console.error(`${TAG17} socket disconnected for account=${conn.accountId}`);
+      if (connections2.get(conn.accountId) !== conn) return;
+      console.error(`${TAG18} socket disconnected for account=${conn.accountId}`);
       conn.connected = false;
       conn.sock = null;
       connectWithReconnect(conn).catch((err) => {
-        console.error(`${TAG17} reconnection failed for account=${conn.accountId}: ${formatError(err)}`);
+        console.error(`${TAG18} reconnection failed for account=${conn.accountId}: ${formatError(err)}`);
       });
     }
   });
@@ -6425,7 +6531,7 @@ function monitorInbound(conn) {
   if (!conn.sock || !onInboundMessage) return;
   const sock = conn.sock;
   const debounceMs = whatsAppConfig.accounts?.[conn.accountId]?.debounceMs ?? whatsAppConfig.debounceMs ?? 0;
-  console.error(`${TAG17} monitorInbound started account=${conn.accountId} debounceMs=${debounceMs}`);
+  console.error(`${TAG18} monitorInbound started account=${conn.accountId} debounceMs=${debounceMs}`);
   conn.debouncer = createInboundDebouncer({
     debounceMs,
     buildKey: (payload) => {
@@ -6435,12 +6541,12 @@ function monitorInbound(conn) {
     onFlush: (entries2) => {
       if (!onInboundMessage) return;
       if (entries2.length > 1) {
-        console.error(`${TAG17} debounce: combining ${entries2.length} messages account=${conn.accountId} from=${entries2[0].senderPhone}`);
+        console.error(`${TAG18} debounce: combining ${entries2.length} messages account=${conn.accountId} from=${entries2[0].senderPhone}`);
       }
       dispatchInboundPayload(conn, combineInboundBatch(entries2));
     },
     onError: (err) => {
-      console.error(`${TAG17} debounce flush error account=${conn.accountId}: ${String(err)}`);
+      console.error(`${TAG18} debounce flush error account=${conn.accountId}: ${String(err)}`);
     }
   });
   sock.ev.on("messages.upsert", async (upsert) => {
@@ -6494,7 +6600,7 @@ function monitorInbound(conn) {
           }
           const entries2 = messageStore.get(storeKey);
           console.error(
-            `${TAG17} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries2?.length ?? 0}/${MESSAGE_STORE_MAX}) storeAccount=${persistAccountId} socketOwner=${conn.platformAccountId}`
+            `${TAG18} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries2?.length ?? 0}/${MESSAGE_STORE_MAX}) storeAccount=${persistAccountId} socketOwner=${conn.platformAccountId}`
           );
           recordActivity({
             accountId: conn.accountId,
@@ -6548,7 +6654,7 @@ function monitorInbound(conn) {
               const wantsServableMedia = mediaServable && !!conn.sock && (!fromMe || !alreadyRecorded);
               if (fromMe && mediaServable && !!conn.sock) {
                 console.error(
-                  `${TAG17} fromMe-media-echo msgKey=${msg.key.id} decision=${alreadyRecorded ? "skip" : "store"} reason=${alreadyRecorded ? "already-recorded" : "no-prior-record"}`
+                  `${TAG18} fromMe-media-echo msgKey=${msg.key.id} decision=${alreadyRecorded ? "skip" : "store"} reason=${alreadyRecorded ? "already-recorded" : "no-prior-record"}`
                 );
               }
               const mediaSeed = `whatsapp-live:${conn.accountId}:${canonicalRemoteJid}:${msg.key.id}`;
@@ -6600,7 +6706,7 @@ function monitorInbound(conn) {
                 receiptDeferredToWorker = true;
                 if (!accepted) {
                   console.error(
-                    `${TAG17} append-media overflow account=${conn.platformAccountId} msgKey=${msgKeyId ?? "?"} \u2014 pending cap ${APPEND_MEDIA_MAX_PENDING} reached, text-fallback persist, inline media shed`
+                    `${TAG18} append-media overflow account=${conn.platformAccountId} msgKey=${msgKeyId ?? "?"} \u2014 pending cap ${APPEND_MEDIA_MAX_PENDING} reached, text-fallback persist, inline media shed`
                   );
                   const persisted = await persistWhatsAppMessage({
                     ...basePersist,
@@ -6676,13 +6782,13 @@ function monitorInbound(conn) {
           const skippedSenderJid = isGroupJid(remoteJid) ? msg.key.participant ?? remoteJid : remoteJid;
           const skippedSenderPhone = await resolveJidToE164(skippedSenderJid, conn.lidMapping) ?? skippedSenderJid;
           console.error(
-            `${TAG17} append-type message ${msg.key.id ?? "?"} dispatch skipped from=${skippedSenderPhone}${msg.pushName ? ` name=${msg.pushName}` : ""} account=${conn.accountId} (persistence not confirmed here)`
+            `${TAG18} append-type message ${msg.key.id ?? "?"} dispatch skipped from=${skippedSenderPhone}${msg.pushName ? ` name=${msg.pushName}` : ""} account=${conn.accountId} (persistence not confirmed here)`
           );
           continue;
         }
         await handleInboundMessage(conn, msg);
       } catch (err) {
-        console.error(`${TAG17} inbound handler error account=${conn.accountId}: ${String(err)}`);
+        console.error(`${TAG18} inbound handler error account=${conn.accountId}: ${String(err)}`);
       }
     }
   });
@@ -6738,31 +6844,31 @@ async function handleInboundMessage(conn, msg) {
   const remoteJid = msg.key.remoteJid;
   if (!remoteJid) return;
   if (remoteJid === "status@broadcast") {
-    console.error(`${TAG17} drop: status broadcast account=${conn.accountId}`);
+    console.error(`${TAG18} drop: status broadcast account=${conn.accountId}`);
     return;
   }
   if (!msg.message) {
-    console.error(`${TAG17} drop: empty message account=${conn.accountId} from=${remoteJid}`);
+    console.error(`${TAG18} drop: empty message account=${conn.accountId} from=${remoteJid}`);
     return;
   }
   const dedupKey = `${conn.accountId}:${remoteJid}:${msg.key.id}`;
   if (isDuplicateInbound(dedupKey)) {
-    console.error(`${TAG17} drop: duplicate account=${conn.accountId} key=${dedupKey}`);
+    console.error(`${TAG18} drop: duplicate account=${conn.accountId} key=${dedupKey}`);
     return;
   }
   if (msg.key.fromMe) {
     if (msg.key.id && isAgentSentMessage(msg.key.id)) {
-      console.error(`${TAG17} drop: echo suppression account=${conn.accountId} msgId=${msg.key.id}`);
+      console.error(`${TAG18} drop: echo suppression account=${conn.accountId} msgId=${msg.key.id}`);
       return;
     }
     const extracted2 = extractMessage(msg);
     if (!extracted2.text) {
-      console.error(`${TAG17} owner reply skipped \u2014 no text content account=${conn.accountId}`);
+      console.error(`${TAG18} owner reply skipped \u2014 no text content account=${conn.accountId}`);
       return;
     }
     const isGroup2 = isGroupJid(remoteJid);
     const senderPhone2 = conn.selfPhone ?? "owner";
-    console.error(`${TAG17} owner reply mirrored to session from=${senderPhone2} account=${conn.accountId}`);
+    console.error(`${TAG18} owner reply mirrored to session from=${senderPhone2} account=${conn.accountId}`);
     const reply2 = async (text) => {
       const currentSock = conn.sock;
       if (!currentSock) throw new Error("WhatsApp disconnected \u2014 cannot reply");
@@ -6796,7 +6902,7 @@ async function handleInboundMessage(conn, msg) {
   }
   const extracted = extractMessage(msg);
   if (!extracted.text && !extracted.mediaType) {
-    console.error(`${TAG17} drop: no text or media account=${conn.accountId} from=${remoteJid}`);
+    console.error(`${TAG18} drop: no text or media account=${conn.accountId} from=${remoteJid}`);
     return;
   }
   const isGroup = isGroupJid(remoteJid);
@@ -6820,7 +6926,7 @@ async function handleInboundMessage(conn, msg) {
     });
   }
   console.error(
-    `${TAG17} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
+    `${TAG18} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
   );
   if (!accessResult.allowed && accessResult.reason === "account-manager-unresolved") {
     console.error(
@@ -6851,7 +6957,7 @@ async function handleInboundMessage(conn, msg) {
       maxBytes: maxMb * 1024 * 1024
     });
     if (!mediaResult) {
-      console.error(`${TAG17} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
+      console.error(`${TAG18} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
     }
   }
   if (extracted.mediaType === "audio" && mediaResult?.path) {
@@ -6873,7 +6979,7 @@ async function handleInboundMessage(conn, msg) {
   }
   const reply = async (text) => {
     if (isGroupJid(remoteJid)) {
-      console.error(`${TAG17} op=group-reply-blocked jid=${remoteJid}`);
+      console.error(`${TAG18} op=group-reply-blocked jid=${remoteJid}`);
       throw new WaReplyError("group reply blocked \u2014 observe-only", false);
     }
     const currentSock = conn.sock;
@@ -6920,15 +7026,15 @@ async function handleInboundMessage(conn, msg) {
   if (accessResult.agentType === "public") {
     const hoursResult = await isBusinessOpen(conn.accountId);
     if (!hoursResult.open) {
-      console.error(`${TAG17} [${conn.accountId}] dispatch skipped: business closed`);
+      console.error(`${TAG18} [${conn.accountId}] dispatch skipped: business closed`);
       const afterHoursMessage = whatsAppConfig.accounts?.[conn.accountId]?.afterHoursMessage ?? whatsAppConfig.afterHoursMessage;
       if (afterHoursMessage) {
         try {
           await reply(afterHoursMessage);
-          console.error(`${TAG17} [${conn.accountId}] after-hours auto-reply sent to ${remoteJid}`);
+          console.error(`${TAG18} [${conn.accountId}] after-hours auto-reply sent to ${remoteJid}`);
         } catch (err) {
           console.error(
-            `${TAG17} [${conn.accountId}] after-hours auto-reply failed: ${err instanceof Error ? err.message : String(err)}`
+            `${TAG18} [${conn.accountId}] after-hours auto-reply failed: ${err instanceof Error ? err.message : String(err)}`
           );
         }
       }
@@ -7373,13 +7479,13 @@ function audioExtension(mimeType) {
 }
 // app/lib/stt/voice-note.ts
-var TAG18 = "[voice]";
+var TAG19 = "[voice]";
 async function transcribeVoiceNote(file, source) {
   const startMs = Date.now();
   const bytes = file.size;
   const mimeType = file.type;
   console.error(
-    `${TAG18} recording send source=${source} duration_ms=unknown bytes=${bytes} format=${mimeType}`
+    `${TAG19} recording send source=${source} duration_ms=unknown bytes=${bytes} format=${mimeType}`
   );
   let tempDir;
   let tempPath;
@@ -7391,7 +7497,7 @@ async function transcribeVoiceNote(file, source) {
     await writeFile3(tempPath, buffer);
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG18} failed source=${source} error=temp-file-write: ${reason}`);
+    console.error(`${TAG19} failed source=${source} error=temp-file-write: ${reason}`);
     return { ok: false, error: "Could not process voice note" };
   }
   try {
@@ -7399,7 +7505,7 @@ async function transcribeVoiceNote(file, source) {
     if (!sttResult) {
       const elapsed2 = Date.now() - startMs;
       console.error(
-        `${TAG18} failed source=${source} error=transcription-failed duration_ms=${elapsed2}`
+        `${TAG19} failed source=${source} error=transcription-failed duration_ms=${elapsed2}`
       );
       return { ok: false, error: "Could not transcribe voice note. Please try again or type your message." };
     }
@@ -7407,7 +7513,7 @@ async function transcribeVoiceNote(file, source) {
     const elapsed = Date.now() - startMs;
     const words = rawText.split(/\s+/).filter(Boolean).length;
     console.error(
-      `${TAG18} transcribed source=${source} duration_ms=${elapsed} stt_ms=${sttResult.durationMs} words=${words}`
+      `${TAG19} transcribed source=${source} duration_ms=${elapsed} stt_ms=${sttResult.durationMs} words=${words}`
     );
     return {
       ok: true,
@@ -7417,7 +7523,7 @@ async function transcribeVoiceNote(file, source) {
     const elapsed = Date.now() - startMs;
     const reason = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG18} failed source=${source} error=${reason} duration_ms=${elapsed}`
+      `${TAG19} failed source=${source} error=${reason} duration_ms=${elapsed}`
     );
     return { ok: false, error: "Voice note transcription failed. Please try again or type your message." };
   } finally {
@@ -7464,7 +7570,7 @@ function composePublicSessionTitle(input) {
 }
 // app/lib/webchat/persist-customer-inbound.ts
-var TAG19 = "[channel-house]";
+var TAG20 = "[channel-house]";
 async function persistCustomerWebchatInbound(input) {
   if (!input.text) return null;
   try {
@@ -7480,7 +7586,7 @@ async function persistCustomerWebchatInbound(input) {
     );
     if (!conv.sessionId) {
       console.error(
-        `${TAG19} op=persist-skip reason=conversation-merge-failed accountId=${input.houseAccountId} key=${input.sessionKey}`
+        `${TAG20} op=persist-skip reason=conversation-merge-failed accountId=${input.houseAccountId} key=${input.sessionKey}`
       );
       return null;
     }
@@ -7492,17 +7598,17 @@ async function persistCustomerWebchatInbound(input) {
     );
     if (!messageId) {
       console.error(
-        `${TAG19} op=persist-skip reason=message-write-failed accountId=${input.houseAccountId} sessionId=${conv.sessionId.slice(0, 8)}`
+        `${TAG20} op=persist-skip reason=message-write-failed accountId=${input.houseAccountId} sessionId=${conv.sessionId.slice(0, 8)}`
       );
       return null;
     }
     console.error(
-      `${TAG19} op=persist accountId=${input.houseAccountId} sessionId=${conv.sessionId.slice(0, 8)} messageId=${messageId.slice(0, 8)} bytes=${Buffer.byteLength(input.text, "utf8")}`
+      `${TAG20} op=persist accountId=${input.houseAccountId} sessionId=${conv.sessionId.slice(0, 8)} messageId=${messageId.slice(0, 8)} bytes=${Buffer.byteLength(input.text, "utf8")}`
     );
     return { sessionId: conv.sessionId, messageId };
   } catch (err) {
     console.error(
-      `${TAG19} op=persist-fail accountId=${input.houseAccountId} key=${input.sessionKey} reason=${err instanceof Error ? err.message : String(err)}`
+      `${TAG20} op=persist-fail accountId=${input.houseAccountId} key=${input.sessionKey} reason=${err instanceof Error ? err.message : String(err)}`
     );
     return null;
   }
@@ -7810,7 +7916,7 @@ function parseScheduleProvenance(v) {
 }
 // server/routes/channel/schedule-inject.ts
-var TAG20 = "[schedule-inject]";
+var TAG21 = "[schedule-inject]";
 function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -7820,7 +7926,7 @@ function createScheduleInjectRoutes(deps) {
     const env = c.env;
     const remoteAddr = env?.incoming?.socket?.remoteAddress ?? "";
     if (!isLoopbackAddr(remoteAddr)) {
-      console.error(`${TAG20} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+      console.error(`${TAG21} reject reason=non-loopback remoteAddr=${remoteAddr}`);
       return c.json({ ok: false, error: "schedule-inject-loopback-only" }, 403);
     }
     const xffHeader = env?.incoming?.headers?.["x-forwarded-for"];
@@ -7828,7 +7934,7 @@ function createScheduleInjectRoutes(deps) {
     if (xffRaw.length > 0) {
       const offender = xffRaw.split(",").map((t) => t.trim()).filter(Boolean).find((t) => !isLoopbackAddr(t));
       if (offender !== void 0) {
-        console.error(`${TAG20} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+        console.error(`${TAG21} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
         return c.json({ ok: false, error: "schedule-inject-loopback-only" }, 403);
       }
     }
@@ -7844,23 +7950,23 @@ function createScheduleInjectRoutes(deps) {
     const eventId = typeof body.eventId === "string" ? body.eventId : "";
     const scheduleProvenance = parseScheduleProvenance(body.scheduleProvenance);
     if (channel !== "whatsapp" && channel !== "telegram" || !destination || !prompt) {
-      console.error(`${TAG20} reject reason=bad-request channel=${String(channel)} hasDestination=${Boolean(destination)} hasPrompt=${Boolean(prompt)}`);
+      console.error(`${TAG21} reject reason=bad-request channel=${String(channel)} hasDestination=${Boolean(destination)} hasPrompt=${Boolean(prompt)}`);
       return c.json({ ok: false, error: "schedule-inject-bad-request" }, 400);
     }
     const account = deps.resolveAccount();
     if (!account) {
-      console.error(`${TAG20} reject reason=no-account eventId=${eventId}`);
+      console.error(`${TAG21} reject reason=no-account eventId=${eventId}`);
       return c.json({ ok: false, error: "no-account" }, 500);
     }
     const houseAccountId = account.accountId;
-    console.error(`${TAG20} op=received eventId=${eventId} channel=${channel} destination=${destination} account=${houseAccountId}`);
+    console.error(`${TAG21} op=received eventId=${eventId} channel=${channel} destination=${destination} account=${houseAccountId}`);
     if (channel === "whatsapp") {
       const effectiveAccount2 = deps.effectiveAccountFor(houseAccountId, account.accountDir, destination);
       if (effectiveAccount2 === null) {
-        console.error(`${TAG20} op=schedule-account-manager-reject eventId=${eventId} destination=${destination} reason=unresolved-effective-account`);
+        console.error(`${TAG21} op=schedule-account-manager-reject eventId=${eventId} destination=${destination} reason=unresolved-effective-account`);
         return c.json({ ok: false, error: "account-manager-unresolved" }, 403);
       }
-      console.error(`${TAG20} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount2}`);
+      console.error(`${TAG21} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount2}`);
       const sessionId2 = adminSessionIdFor(effectiveAccount2, normalizeTarget(destination) ?? destination);
       const reply2 = (text) => deps.sendWhatsAppText(houseAccountId, destination, text);
       try {
@@ -7882,17 +7988,17 @@ function createScheduleInjectRoutes(deps) {
           reply: reply2
         });
       } catch (err) {
-        console.error(`${TAG20} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=inject-error status=${err instanceof Error ? err.message : String(err)}`);
+        console.error(`${TAG21} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=inject-error status=${err instanceof Error ? err.message : String(err)}`);
         return c.json({ ok: false, error: "inject-error" }, 502);
       }
-      console.error(`${TAG20} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=ok status=-`);
+      console.error(`${TAG21} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=ok status=-`);
       return c.json({ ok: true }, 200);
     }
     const effectiveAccount = houseAccountId;
-    console.error(`${TAG20} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount}`);
+    console.error(`${TAG21} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount}`);
     const botToken = account.config.telegram?.adminBotToken;
     if (!botToken) {
-      console.error(`${TAG20} reject reason=no-admin-bot-token eventId=${eventId}`);
+      console.error(`${TAG21} reject reason=no-admin-bot-token eventId=${eventId}`);
       return c.json({ ok: false, error: "no-admin-bot-token" }, 400);
     }
     const chatId = Number(destination);
@@ -7911,10 +8017,10 @@ function createScheduleInjectRoutes(deps) {
         reply
       });
     } catch (err) {
-      console.error(`${TAG20} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=inject-error status=${err instanceof Error ? err.message : String(err)}`);
+      console.error(`${TAG21} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=inject-error status=${err instanceof Error ? err.message : String(err)}`);
       return c.json({ ok: false, error: "inject-error" }, 502);
     }
-    console.error(`${TAG20} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
+    console.error(`${TAG21} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
     return c.json({ ok: true }, 200);
   });
   return app70;
@@ -7971,7 +8077,7 @@ import { randomUUID as randomUUID6 } from "crypto";
 // app/lib/whatsapp/config-persist.ts
 import { readFileSync as readFileSync13, writeFileSync as writeFileSync5, existsSync as existsSync7 } from "fs";
 import { resolve as resolve9, join as join10, dirname as dirname2, basename as basename2 } from "path";
-var TAG21 = "[whatsapp:config]";
+var TAG22 = "[whatsapp:config]";
 function configPath(accountDir) {
   return resolve9(accountDir, "account.json");
 }
@@ -7988,9 +8094,9 @@ function reloadManagerConfig(accountDir) {
   try {
     const config = readConfig(accountDir);
     reloadConfig(config);
-    console.error(`${TAG21} reloaded manager config`);
+    console.error(`${TAG22} reloaded manager config`);
   } catch (err) {
-    console.error(`${TAG21} manager config reload failed: ${String(err)}`);
+    console.error(`${TAG22} manager config reload failed: ${String(err)}`);
   }
 }
 var E164_PATTERN = /^\+\d{7,15}$/;
@@ -8016,25 +8122,25 @@ function persistAfterPairing(accountDir, accountId, selfPhone) {
       const adminPhones = wa.adminPhones;
       if (!adminPhones.includes(normalized)) {
         adminPhones.push(normalized);
-        console.error(`${TAG21} added selfPhone=${normalized} to adminPhones`);
+        console.error(`${TAG22} added selfPhone=${normalized} to adminPhones`);
       }
     } else {
-      console.error(`${TAG21} skipping adminPhones \u2014 selfPhone is null account=${accountId}`);
+      console.error(`${TAG22} skipping adminPhones \u2014 selfPhone is null account=${accountId}`);
     }
     const parsed = WhatsAppConfigSchema.safeParse(wa);
     if (!parsed.success) {
       const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      console.error(`${TAG21} validation failed after pairing: ${msg}`);
+      console.error(`${TAG22} validation failed after pairing: ${msg}`);
       return { ok: false, error: `Validation failed: ${msg}` };
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG21} persisted after pairing account=${accountId} phone=${selfPhone ?? "null"}`);
+    console.error(`${TAG22} persisted after pairing account=${accountId} phone=${selfPhone ?? "null"}`);
     reloadManagerConfig(accountDir);
     return { ok: true };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG21} persist failed account=${accountId}: ${msg}`);
+    console.error(`${TAG22} persist failed account=${accountId}: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -8048,7 +8154,7 @@ function addAdminPhone(accountDir, phone) {
     const targetId = typeof config.accountId === "string" && config.accountId ? config.accountId : basename2(resolve9(accountDir));
     const socketOwner = resolveHouseOrSoleAccountId(dirname2(resolve9(accountDir)));
     if (targetId !== socketOwner) {
-      console.error(`${TAG21} add-admin-phone rejected accountId=${targetId} reason=not-socket-account`);
+      console.error(`${TAG22} add-admin-phone rejected accountId=${targetId} reason=not-socket-account`);
       return {
         ok: false,
         reason: "not-socket-account",
@@ -8077,12 +8183,12 @@ function addAdminPhone(accountDir, phone) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG21} added admin phone=${normalized}`);
+    console.error(`${TAG22} added admin phone=${normalized}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Added ${normalized} as admin phone. Messages from this number will route to the admin agent.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG21} addAdminPhone failed: ${msg}`);
+    console.error(`${TAG22} addAdminPhone failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -8110,12 +8216,12 @@ function removeAdminPhone(accountDir, phone) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG21} removed admin phone=${normalized}`);
+    console.error(`${TAG22} removed admin phone=${normalized}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Removed ${normalized} from admin phones. Messages from this number will now route to the public agent.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG21} removeAdminPhone failed: ${msg}`);
+    console.error(`${TAG22} removeAdminPhone failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -8210,13 +8316,13 @@ function setAccountManager(accountDir, phone, subAccountId, mode = "active") {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG21} bound account manager phone=${normalized} managesAccount=${sub} mode=${mode}`);
+    console.error(`${TAG22} bound account manager phone=${normalized} managesAccount=${sub} mode=${mode}`);
     reloadManagerConfig(accountDir);
     const behaviour = mode === "passive" ? `Their WhatsApp messages will each file one task scoped to that sub-account; the agent sends nothing back.` : `Their WhatsApp messages will reach that sub-account's admin agent; replies still go out over this account's WhatsApp device.`;
     return { ok: true, message: `Bound ${normalized} as ${mode} account manager for sub-account ${sub}. ${behaviour}` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG21} setAccountManager failed: ${msg}`);
+    console.error(`${TAG22} setAccountManager failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -8253,12 +8359,12 @@ function setDispatchInbound(accountDir, accountId, value) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG21} set dispatchInbound account=${id} value=${value}`);
+    console.error(`${TAG22} set dispatchInbound account=${id} value=${value}`);
     reloadManagerConfig(accountDir);
     return { ok: true };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG21} setDispatchInbound failed: ${msg}`);
+    console.error(`${TAG22} setDispatchInbound failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -8283,12 +8389,12 @@ function clearAccountManager(accountDir, phone) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG21} cleared account manager phone=${normalized}`);
+    console.error(`${TAG22} cleared account manager phone=${normalized}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Cleared the account-manager binding for ${normalized}.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG21} clearAccountManager failed: ${msg}`);
+    console.error(`${TAG22} clearAccountManager failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -8335,12 +8441,12 @@ function setPublicAgent(accountDir, slug) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG21} publicAgent set to ${trimmed}`);
+    console.error(`${TAG22} publicAgent set to ${trimmed}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Public agent set to "${trimmed}". WhatsApp messages from non-admin phones will be handled by this agent.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG21} setPublicAgent failed: ${msg}`);
+    console.error(`${TAG22} setPublicAgent failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -8381,17 +8487,17 @@ function updateConfig(accountDir, fields) {
     const parsed = WhatsAppConfigSchema.safeParse(wa);
     if (!parsed.success) {
       const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      console.error(`${TAG21} update validation failed: ${msg}`);
+      console.error(`${TAG22} update validation failed: ${msg}`);
       return { ok: false, error: `Validation failed: ${msg}` };
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG21} updated fields=[${fieldNames.join(",")}]`);
+    console.error(`${TAG22} updated fields=[${fieldNames.join(",")}]`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Updated WhatsApp config: ${fieldNames.join(", ")}.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG21} updateConfig failed: ${msg}`);
+    console.error(`${TAG22} updateConfig failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -8428,17 +8534,17 @@ function migrateRemovedConfigKeys(accountDir) {
     }
     writeConfig(accountDir, config);
     console.error(
-      `${TAG21} migration: stripped unknown keys=[${result.droppedKeys.join(",")}] from account.json`
+      `${TAG22} migration: stripped unknown keys=[${result.droppedKeys.join(",")}] from account.json`
     );
     return { dropped: result.droppedKeys };
   } catch (err) {
-    console.error(`${TAG21} migration failed: ${String(err)}`);
+    console.error(`${TAG22} migration failed: ${String(err)}`);
     return { dropped: [] };
   }
 }
 // app/lib/whatsapp/login.ts
-var TAG22 = "[whatsapp:login]";
+var TAG23 = "[whatsapp:login]";
 function maskPhone(digits) {
   if (digits.length <= 4) return "*".repeat(digits.length);
   return digits.slice(0, 2) + "*".repeat(digits.length - 4) + digits.slice(-2);
@@ -8449,7 +8555,7 @@ function closeSocket(sock) {
   try {
     sock.ws?.close?.();
   } catch (err) {
-    console.warn(`${TAG22} socket close error during cleanup: ${String(err)}`);
+    console.warn(`${TAG23} socket close error during cleanup: ${String(err)}`);
   }
 }
 function resetActiveLogin(accountId) {
@@ -8476,18 +8582,18 @@ async function runPostPairing(login) {
         const masked = selfPhone ? `${selfPhone.slice(0, 4)}***` : "null";
         console.error(`[whatsapp-persist] wa-persist-on-connect account=${login.accountId} phone=${masked}`);
       } else {
-        console.error(`${TAG22} wa-persist-on-connect FAILED account=${login.accountId}: ${result.error}`);
+        console.error(`${TAG23} wa-persist-on-connect FAILED account=${login.accountId}: ${result.error}`);
       }
     } catch (err) {
-      console.error(`${TAG22} wa-persist-on-connect error account=${login.accountId}: ${String(err)}`);
+      console.error(`${TAG23} wa-persist-on-connect error account=${login.accountId}: ${String(err)}`);
     }
   } else {
-    console.error(`${TAG22} wa-persist-on-connect skipped \u2014 no accountDir account=${login.accountId}`);
+    console.error(`${TAG23} wa-persist-on-connect skipped \u2014 no accountDir account=${login.accountId}`);
   }
   try {
     await registerLoginSocket(login.accountId, login.sock, login.authDir);
   } catch (err) {
-    console.error(`${TAG22} registerLoginSocket failed account=${login.accountId}: ${String(err)}`);
+    console.error(`${TAG23} registerLoginSocket failed account=${login.accountId}: ${String(err)}`);
   }
 }
 async function loginConnectionLoop(accountId, login) {
@@ -8496,7 +8602,7 @@ async function loginConnectionLoop(accountId, login) {
   const logTerminal = (outcome, errMsg) => {
     const fc = credsCensus(login.authDir);
     console.error(
-      `${TAG22} op=terminal cid=${cidShort} outcome=${outcome} credsFinal={registered=${fc.registered},account=${fc.hasAccountSignature},me=${fc.e164 ?? "null"}}` + (errMsg ? ` error="${errMsg}"` : "")
+      `${TAG23} op=terminal cid=${cidShort} outcome=${outcome} credsFinal={registered=${fc.registered},account=${fc.hasAccountSignature},me=${fc.e164 ?? "null"}}` + (errMsg ? ` error="${errMsg}"` : "")
     );
   };
   while (true) {
@@ -8506,7 +8612,7 @@ async function loginConnectionLoop(accountId, login) {
       if (current?.id === login.id) {
         await runPostPairing(current);
         current.connected = true;
-        console.error(`${TAG22} loginConnectionLoop: connected account=${accountId} attempt=${attempt} configPersisted=${current.configPersisted}`);
+        console.error(`${TAG23} loginConnectionLoop: connected account=${accountId} attempt=${attempt} configPersisted=${current.configPersisted}`);
         logTerminal("connected");
       }
       return;
@@ -8518,7 +8624,7 @@ async function loginConnectionLoop(accountId, login) {
       if (!preRetryCensus.hasAccountSignature) {
         current.error = "WhatsApp accepted the code but did not finish linking. This usually means the number has reached its linked-device limit or has a stale linked device. On the phone, open WhatsApp, Linked Devices, remove existing devices, then ask for a new code.";
         console.error(
-          `${TAG22} op=pairing-incomplete cid=${cidShort} closeKind=${closeKind(getStatusCode(err), false)} reason=no-account-signature`
+          `${TAG23} op=pairing-incomplete cid=${cidShort} closeKind=${closeKind(getStatusCode(err), false)} reason=no-account-signature`
         );
         return;
       }
@@ -8526,7 +8632,7 @@ async function loginConnectionLoop(accountId, login) {
       if (!classification.shouldRetry || attempt >= LOGIN_MAX_RECONNECTS) {
         if (attempt >= LOGIN_MAX_RECONNECTS) {
           console.error(
-            `${TAG22} login reconnect attempts exhausted (${attempt}/${LOGIN_MAX_RECONNECTS}) \u2014 surfacing error to agent`
+            `${TAG23} login reconnect attempts exhausted (${attempt}/${LOGIN_MAX_RECONNECTS}) \u2014 surfacing error to agent`
           );
           current.error = `Login failed after ${attempt} reconnect attempts: ${formatError(err)}`;
         } else {
@@ -8539,7 +8645,7 @@ async function loginConnectionLoop(accountId, login) {
       attempt++;
       const delay = LOGIN_RECONNECT_DELAYS[attempt - 1] ?? 8e3;
       console.error(
-        `${TAG22} status=${classification.statusCode ?? "unknown"} restart required \u2014 reconnecting with saved creds (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}) delay=${delay}ms`
+        `${TAG23} status=${classification.statusCode ?? "unknown"} restart required \u2014 reconnecting with saved creds (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}) delay=${delay}ms`
       );
       closeSocket(current.sock);
       await new Promise((r) => setTimeout(r, delay));
@@ -8547,14 +8653,14 @@ async function loginConnectionLoop(accountId, login) {
       if (afterDelay?.id !== login.id) return;
       const rc = credsCensus(login.authDir);
       console.error(
-        `${TAG22} op=reconnect cid=${cidShort} attempt=${attempt}/${LOGIN_MAX_RECONNECTS} withRegistered=${rc.registered} withAccount=${rc.hasAccountSignature}`
+        `${TAG23} op=reconnect cid=${cidShort} attempt=${attempt}/${LOGIN_MAX_RECONNECTS} withRegistered=${rc.registered} withAccount=${rc.hasAccountSignature}`
       );
       try {
         const newSock = await createWaSocket({ authDir: login.authDir, correlationId: cidShort, account: accountId });
         current.sock = newSock;
       } catch (sockErr) {
         console.error(
-          `${TAG22} reconnect socket creation failed (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}): ${String(sockErr)}`
+          `${TAG23} reconnect socket creation failed (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}): ${String(sockErr)}`
         );
         current.error = `Reconnection failed: ${String(sockErr)}`;
         logTerminal("error", current.error);
@@ -8571,7 +8677,7 @@ async function startLogin(opts) {
   const hasAuth = await authExists(authDir);
   const selfId = readSelfId(authDir);
   console.error(
-    `${TAG22} op=start cid=${cid} account=${accountId} force=${!!force} hasAuth=${hasAuth}` + (existing0 ? ` activeLogin={id=${existing0.id.slice(0, 8)},age=${Math.round((Date.now() - existing0.startedAt) / 1e3)}s,hasCode=${!!existing0.pairingCode}}` : " activeLogin=none")
+    `${TAG23} op=start cid=${cid} account=${accountId} force=${!!force} hasAuth=${hasAuth}` + (existing0 ? ` activeLogin={id=${existing0.id.slice(0, 8)},age=${Math.round((Date.now() - existing0.startedAt) / 1e3)}s,hasCode=${!!existing0.pairingCode}}` : " activeLogin=none")
   );
   if (hasAuth && !force) {
     const who = selfId.e164 ?? selfId.jid ?? "unknown";
@@ -8586,7 +8692,7 @@ async function startLogin(opts) {
   }
   const existing = activeLogins.get(accountId);
   if (existing && isLoginFresh(existing) && existing.pairingCode && !force) {
-    console.error(`${TAG22} startLogin account=${accountId} guard: returning existing pairing code (age=${Math.round((Date.now() - existing.startedAt) / 1e3)}s)`);
+    console.error(`${TAG23} startLogin account=${accountId} guard: returning existing pairing code (age=${Math.round((Date.now() - existing.startedAt) / 1e3)}s)`);
     return {
       pairingCode: existing.pairingCode,
       phone: existing.phone,
@@ -8594,7 +8700,7 @@ async function startLogin(opts) {
     };
   }
   if (existing) {
-    console.error(`${TAG22} startLogin account=${accountId} ${force ? "force override" : "stale/no-code"}, resetting active login`);
+    console.error(`${TAG23} startLogin account=${accountId} ${force ? "force override" : "stale/no-code"}, resetting active login`);
   }
   resetActiveLogin(accountId);
   await clearAuth(authDir);
@@ -8625,7 +8731,7 @@ async function startLogin(opts) {
         if (requested) return;
         requested = true;
         console.error(
-          `${TAG22} op=pairing-request cid=${cid} account=${accountId} qrRef=#1 sinceOpenMs=${socketOpenTs ? Date.now() - socketOpenTs : 0}`
+          `${TAG23} op=pairing-request cid=${cid} account=${accountId} qrRef=#1 sinceOpenMs=${socketOpenTs ? Date.now() - socketOpenTs : 0}`
         );
         void sock.requestPairingCode(digits).then((code) => {
           clearTimeout(codeTimer);
@@ -8634,7 +8740,7 @@ async function startLogin(opts) {
           if (current?.id !== login.id) return;
           if (!current.pairingCode) current.pairingCode = code;
           console.error(
-            `${TAG22} op=code-issued cid=${cid} account=${accountId} phone=${maskPhone(digits)} codeLen=${code.length} sinceOpenMs=${socketOpenTs ? codeIssuedTs - socketOpenTs : 0}`
+            `${TAG23} op=code-issued cid=${cid} account=${accountId} phone=${maskPhone(digits)} codeLen=${code.length} sinceOpenMs=${socketOpenTs ? codeIssuedTs - socketOpenTs : 0}`
           );
           resolveCode?.(code);
         }).catch((err) => {
@@ -8665,7 +8771,7 @@ async function startLogin(opts) {
   const ttlTimer = setTimeout(() => {
     const current = activeLogins.get(accountId);
     if (current?.id === login.id && !current.connected) {
-      console.error(`${TAG22} pairing-window-elapsed account=${accountId} (ttl sweep)`);
+      console.error(`${TAG23} pairing-window-elapsed account=${accountId} (ttl sweep)`);
       resetActiveLogin(accountId);
     }
   }, ACTIVE_LOGIN_TTL_MS);
@@ -8673,7 +8779,7 @@ async function startLogin(opts) {
     ttlTimer.unref();
   }
   loginConnectionLoop(accountId, login).catch((err) => {
-    console.error(`${TAG22} loginConnectionLoop unexpected error: ${String(err)}`);
+    console.error(`${TAG23} loginConnectionLoop unexpected error: ${String(err)}`);
     const current = activeLogins.get(accountId);
     if (current?.id === login.id) {
       current.error = `Unexpected login error: ${String(err)}`;
@@ -8698,13 +8804,13 @@ async function waitForLogin(opts) {
   const { accountId, timeoutMs = 6e4 } = opts;
   const login = activeLogins.get(accountId);
   console.error(
-    `${TAG22} waitForLogin account=${accountId} timeout=${timeoutMs}ms` + (login ? ` login={id=${login.id.slice(0, 8)},age=${Math.round((Date.now() - login.startedAt) / 1e3)}s,connected=${login.connected},hasCode=${!!login.pairingCode}}` : " login=none")
+    `${TAG23} waitForLogin account=${accountId} timeout=${timeoutMs}ms` + (login ? ` login={id=${login.id.slice(0, 8)},age=${Math.round((Date.now() - login.startedAt) / 1e3)}s,connected=${login.connected},hasCode=${!!login.pairingCode}}` : " login=none")
   );
   if (!login) {
     return { connected: false, message: "No active WhatsApp login in progress.", configPersisted: false };
   }
   if (!isLoginFresh(login)) {
-    console.error(`${TAG22} pairing-window-elapsed account=${accountId}`);
+    console.error(`${TAG23} pairing-window-elapsed account=${accountId}`);
     resetActiveLogin(accountId);
     return { connected: false, message: "The pairing window expired. Ask me to generate a new code.", configPersisted: false };
   }
@@ -8712,8 +8818,8 @@ async function waitForLogin(opts) {
   while (Date.now() < deadline) {
     if (login.connected) {
       const selfId = readSelfId(login.authDir);
-      console.error(`${TAG22} pairing-connected account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
-      console.error(`${TAG22} login complete for account=${accountId} phone=${selfId.e164 ?? "unknown"} configPersisted=${login.configPersisted}`);
+      console.error(`${TAG23} pairing-connected account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
+      console.error(`${TAG23} login complete for account=${accountId} phone=${selfId.e164 ?? "unknown"} configPersisted=${login.configPersisted}`);
       const configPersisted = login.configPersisted;
       activeLogins.delete(accountId);
       return {
@@ -8731,7 +8837,7 @@ async function waitForLogin(opts) {
     await new Promise((r) => setTimeout(r, 1e3));
   }
   const elapsed = Math.round((Date.now() - (deadline - timeoutMs)) / 1e3);
-  console.error(`${TAG22} waitForLogin poll timeout account=${accountId} elapsed=${elapsed}s \u2014 login kept alive (pairing code still valid)`);
+  console.error(`${TAG23} waitForLogin poll timeout account=${accountId} elapsed=${elapsed}s \u2014 login kept alive (pairing code still valid)`);
   return { connected: false, message: "Still waiting for you to enter the pairing code. The code is still valid \u2014 ask me to keep waiting, or request a new code.", configPersisted: false };
 }
 function listActiveLoginAccountIds() {
@@ -8753,7 +8859,7 @@ function reconcileMessageStoreAccountKeys(input) {
 import { realpathSync as realpathSync3 } from "fs";
 import { readFile, stat as stat2 } from "fs/promises";
 import { resolve as resolve10, basename as basename3 } from "path";
-var TAG23 = "[whatsapp:outbound]";
+var TAG24 = "[whatsapp:outbound]";
 var lastDocumentOutboundAt = /* @__PURE__ */ new Map();
 var lastRouteDocumentOutboundAt = /* @__PURE__ */ new Map();
 function normalizeJid2(to) {
@@ -8786,10 +8892,10 @@ async function sendWhatsAppDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG23} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG24} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 500, error: `Account directory not resolvable for ${maxyAccountId}` };
     }
-    console.error(`${TAG23} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG24} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   let resolvedPath;
@@ -8798,15 +8904,15 @@ async function sendWhatsAppDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG23} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG24} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG23} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG24} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   if (!resolvedPath.startsWith(accountResolved + "/")) {
     const sanitised = filePath.replace(accountDir, "<account>/");
-    console.error(`${TAG23} document REJECTED path=${sanitised} reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+    console.error(`${TAG24} document REJECTED path=${sanitised} reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
     return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
   }
   const fileStat = await stat2(resolvedPath);
@@ -8822,7 +8928,7 @@ async function sendWhatsAppDocument(input) {
   const res = resolveSocket(accountId);
   if (!res.ok) {
     const reason = formatSocketResolutionReason(res);
-    console.error(`${TAG23} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=false reason=${reason}`);
+    console.error(`${TAG24} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=false reason=${reason}`);
     return { ok: false, status: 503, error: formatSocketResolutionMessage(res, accountId) };
   }
   const sock = res.sock;
@@ -8835,7 +8941,7 @@ async function sendWhatsAppDocument(input) {
     { accountId: res.accountId }
   );
   console.error(
-    `${TAG23} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
+    `${TAG24} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
   );
   if (result.success) {
     recordDocumentOutbound(to);
@@ -8955,7 +9061,7 @@ function serializeWhatsAppSchema() {
 // app/lib/whatsapp/status-reconcile.ts
 import { readdirSync as readdirSync6 } from "fs";
 import { join as join11 } from "path";
-var TAG24 = "[whatsapp:reconcile]";
+var TAG25 = "[whatsapp:reconcile]";
 var HALF_REGISTERED_MIN_AGE_MS = 5 * 6e4;
 function listCredsAccountIds(credsRoot) {
   try {
@@ -8981,14 +9087,14 @@ function reconcileCredsOnDisk(opts) {
       const ageMs2 = getAuthAgeMs(authDir);
       const abandoned = !inFlight3 && ageMs2 !== null && ageMs2 >= HALF_REGISTERED_MIN_AGE_MS;
       if (!abandoned) {
-        console.error(`${TAG24} op=half-registered account=${accountId} registered=true hasAccount=false inFlight=${inFlight3} ageMs=${ageMs2 ?? "null"}`);
+        console.error(`${TAG25} op=half-registered account=${accountId} registered=true hasAccount=false inFlight=${inFlight3} ageMs=${ageMs2 ?? "null"}`);
         entries2.push({ accountId, connected: false, linkedUnconfigured: true });
         continue;
       }
-      console.error(`${TAG24} op=discard-half-registered account=${accountId} registered=true hasAccount=false ageMs=${ageMs2}`);
+      console.error(`${TAG25} op=discard-half-registered account=${accountId} registered=true hasAccount=false ageMs=${ageMs2}`);
       const removed = discardAuthDirSync(authDir);
       if (!removed) {
-        console.error(`${TAG24} op=discard-half-registered-failed account=${accountId} \u2014 residue persists`);
+        console.error(`${TAG25} op=discard-half-registered-failed account=${accountId} \u2014 residue persists`);
         entries2.push({ accountId, connected: false, linkedUnconfigured: true });
       }
       continue;
@@ -8996,14 +9102,14 @@ function reconcileCredsOnDisk(opts) {
     const selfPhone = readSelfId(authDir).e164 ?? void 0;
     const configured = accountDir ? isAccountConfigured(accountDir, accountId) : false;
     console.error(
-      `${TAG24} wa-link-unconfigured account=${accountId} creds=present config=${configured ? "present" : "absent"}`
+      `${TAG25} wa-link-unconfigured account=${accountId} creds=present config=${configured ? "present" : "absent"}`
     );
     if (!configured && accountDir) {
       const result = persistAfterPairing(accountDir, accountId, selfPhone ?? null);
       if (result.ok) {
-        console.error(`${TAG24} self-healed account=${accountId}`);
+        console.error(`${TAG25} self-healed account=${accountId}`);
       } else {
-        console.error(`${TAG24} self-heal FAILED account=${accountId}: ${result.error}`);
+        console.error(`${TAG25} self-heal FAILED account=${accountId}: ${result.error}`);
       }
     }
     entries2.push({ accountId, selfPhone, connected: false, linkedUnconfigured: !configured });
@@ -9146,7 +9252,7 @@ function authorizeRecallRead(input) {
 }
 // server/routes/whatsapp.ts
-var TAG25 = "[whatsapp:api]";
+var TAG26 = "[whatsapp:api]";
 var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT || "";
 function recallAttachment(storeAccountId, attachmentId) {
   if (!attachmentId) return void 0;
@@ -9191,16 +9297,16 @@ function houseSocketScopeDenial(c, op) {
   const houseAccountId = resolveAccount()?.accountId ?? "";
   const { decision, callerAccountId, houseAdminScope } = evaluateCallerScope(c, houseAccountId);
   if (decision.authorized) return null;
-  console.error(`${TAG25} op=authz-deny route=${op} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
+  console.error(`${TAG26} op=authz-deny route=${op} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
   return c.json({ ok: false, error: "Not authorized. The WhatsApp connection and its settings are house-scoped; this session may only act on its own account." }, 403);
 }
 function selfOrHouseScopeDenial(c, targetAccountId, op) {
   const { decision, callerAccountId, houseAdminScope } = evaluateCallerScope(c, targetAccountId);
   if (decision.authorized) {
-    console.error(`${TAG25} op=authz-ok route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
+    console.error(`${TAG26} op=authz-ok route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
     return null;
   }
-  console.error(`${TAG25} op=authz-deny route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
+  console.error(`${TAG26} op=authz-deny route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
   return c.json({ ok: false, error: "Not authorized. This session may only pair or manage its own account." }, 403);
 }
 var app2 = new Hono();
@@ -9220,7 +9326,7 @@ app2.get("/status", (c) => {
       dispatchInbound: shouldDispatchInbound(cfg, a.accountId)
     }));
     const summary = accounts.map((a) => `${a.accountId}:${a.connected ? "up" : a.linkedUnconfigured ? "linked-unconfigured" : "down"}:${a.dispatchInbound ? "dispatch" : "observe"}`).join(", ");
-    console.error(`${TAG25} status accounts=${accounts.length} [${summary}]`);
+    console.error(`${TAG26} status accounts=${accounts.length} [${summary}]`);
     const reachableAccountIds = [
       .../* @__PURE__ */ new Set([...listStoredAccountIds(), ...listConnectionPlatformAccountIds()])
     ];
@@ -9229,11 +9335,11 @@ app2.get("/status", (c) => {
       reachableAccountIds
     });
     if (!storeKeyReconcile.ok) {
-      console.warn(`${TAG25} store-key-drift orphanLiveKeys=[${storeKeyReconcile.orphanLiveKeys.join(",")}] \u2014 in-memory cache keyed by a value with no disk account; read tools will miss`);
+      console.warn(`${TAG26} store-key-drift orphanLiveKeys=[${storeKeyReconcile.orphanLiveKeys.join(",")}] \u2014 in-memory cache keyed by a value with no disk account; read tools will miss`);
     }
     return c.json({ accounts, storeKeyReconcile });
   } catch (err) {
-    console.error(`${TAG25} status error: ${String(err)}`);
+    console.error(`${TAG26} status error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9251,10 +9357,10 @@ app2.post("/login/start", async (c) => {
     const authDir = join12(MAXY_DIR, "credentials", "whatsapp", accountId);
     const accountDir = resolveAccount()?.accountDir ?? null;
     const result = await startLogin({ accountId, authDir, phone, accountDir, force });
-    console.error(`${TAG25} login/start result account=${accountId} hasCode=${!!result.pairingCode}${result.selfPhone ? ` phone=${result.selfPhone}` : ""}`);
+    console.error(`${TAG26} login/start result account=${accountId} hasCode=${!!result.pairingCode}${result.selfPhone ? ` phone=${result.selfPhone}` : ""}`);
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG25} login/start error: ${String(err)}`);
+    console.error(`${TAG26} login/start error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9266,7 +9372,7 @@ app2.post("/login/wait", async (c) => {
     if (denial) return denial;
     const timeoutMs = body.timeoutMs ?? 6e4;
     const result = await waitForLogin({ accountId, timeoutMs });
-    console.error(`${TAG25} login/wait result account=${accountId} connected=${result.connected}${result.selfPhone ? ` phone=${result.selfPhone}` : ""} configPersisted=${result.configPersisted}`);
+    console.error(`${TAG26} login/wait result account=${accountId} connected=${result.connected}${result.selfPhone ? ` phone=${result.selfPhone}` : ""} configPersisted=${result.configPersisted}`);
     return c.json({
       connected: result.connected,
       message: result.message,
@@ -9274,7 +9380,7 @@ app2.post("/login/wait", async (c) => {
       configPersisted: result.configPersisted
     });
   } catch (err) {
-    console.error(`${TAG25} login/wait error: ${String(err)}`);
+    console.error(`${TAG26} login/wait error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9287,7 +9393,7 @@ app2.post("/disconnect", async (c) => {
     await stopConnection(accountId);
     return c.json({ disconnected: true, accountId });
   } catch (err) {
-    console.error(`${TAG25} disconnect error: ${String(err)}`);
+    console.error(`${TAG26} disconnect error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9300,7 +9406,7 @@ app2.post("/reconnect", async (c) => {
     await startConnection(accountId);
     return c.json({ reconnecting: true, accountId });
   } catch (err) {
-    console.error(`${TAG25} reconnect error: ${String(err)}`);
+    console.error(`${TAG26} reconnect error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9324,7 +9430,7 @@ app2.post("/config", async (c) => {
       const acct = resolveAccount();
       if (!acct) return c.json({ ok: false, error: "No account configured." }, 500);
       const result = setDispatchInbound(acct.accountDir, target, body.dispatchInbound);
-      console.error(`${TAG25} config action=set-dispatch-inbound account=${target} dispatchInbound=${body.dispatchInbound} ok=${result.ok}`);
+      console.error(`${TAG26} config action=set-dispatch-inbound account=${target} dispatchInbound=${body.dispatchInbound} ok=${result.ok}`);
       return c.json(result, result.ok ? 200 : 400);
     }
     const denial = houseSocketScopeDenial(c, `config action=${action}`);
@@ -9340,7 +9446,7 @@ app2.post("/config", async (c) => {
         }
         const result = addAdminPhone(account.accountDir, phone);
         const reasonTail = !result.ok && result.reason ? ` reason=${result.reason}` : "";
-        console.error(`${TAG25} config action=add-admin-phone accountId=${account.accountId} phone=${phone} ok=${result.ok}${reasonTail}`);
+        console.error(`${TAG26} config action=add-admin-phone accountId=${account.accountId} phone=${phone} ok=${result.ok}${reasonTail}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "remove-admin-phone": {
@@ -9348,12 +9454,12 @@ app2.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "phone".' }, 400);
         }
         const result = removeAdminPhone(account.accountDir, phone);
-        console.error(`${TAG25} config action=remove-admin-phone phone=${phone} ok=${result.ok}`);
+        console.error(`${TAG26} config action=remove-admin-phone phone=${phone} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "list-admin-phones": {
         const phones = readAdminPhones(account.accountDir);
-        console.error(`${TAG25} config action=list-admin-phones count=${phones.length}`);
+        console.error(`${TAG26} config action=list-admin-phones count=${phones.length}`);
         return c.json({ ok: true, phones });
       }
       case "add-account-manager": {
@@ -9365,7 +9471,7 @@ app2.post("/config", async (c) => {
         }
         const managerMode = mode === "passive" ? "passive" : "active";
         const result = setAccountManager(account.accountDir, phone, managesAccount, managerMode);
-        console.error(`${TAG25} config action=add-account-manager phone=${phone} managesAccount=${managesAccount} mode=${managerMode} ok=${result.ok}`);
+        console.error(`${TAG26} config action=add-account-manager phone=${phone} managesAccount=${managesAccount} mode=${managerMode} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "remove-account-manager": {
@@ -9373,12 +9479,12 @@ app2.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "phone".' }, 400);
         }
         const result = clearAccountManager(account.accountDir, phone);
-        console.error(`${TAG25} config action=remove-account-manager phone=${phone} ok=${result.ok}`);
+        console.error(`${TAG26} config action=remove-account-manager phone=${phone} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "list-account-managers": {
         const accountManagers = readAccountManagers(account.accountDir);
-        console.error(`${TAG25} config action=list-account-managers count=${Object.keys(accountManagers).length}`);
+        console.error(`${TAG26} config action=list-account-managers count=${Object.keys(accountManagers).length}`);
         return c.json({ ok: true, accountManagers });
       }
       case "set-public-agent": {
@@ -9386,13 +9492,13 @@ app2.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "slug" (the agent directory name, e.g. "my-agent").' }, 400);
         }
         const result = setPublicAgent(account.accountDir, slug);
-        console.error(`${TAG25} config action=set-public-agent slug=${slug} ok=${result.ok}`);
+        console.error(`${TAG26} config action=set-public-agent slug=${slug} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "get-public-agent": {
         const targetAccount = typeof accountId === "string" && accountId.trim() ? accountId.trim() : "default";
         const resolved = resolvePublicAgent(account.accountDir, { accountId: targetAccount });
-        console.error(`${TAG25} config action=get-public-agent accountId=${targetAccount} slug=${resolved?.slug ?? "none"} source=${resolved?.source ?? "none"}`);
+        console.error(`${TAG26} config action=get-public-agent accountId=${targetAccount} slug=${resolved?.slug ?? "none"} source=${resolved?.source ?? "none"}`);
         return c.json({ ok: true, slug: resolved?.slug ?? null, source: resolved?.source ?? null });
       }
       case "list-public-agents": {
@@ -9409,26 +9515,26 @@ app2.post("/config", async (c) => {
                 const config = JSON.parse(readFileSync14(configPath2, "utf-8"));
                 agents.push({ slug: entry.name, displayName: config.displayName ?? entry.name });
               } catch {
-                console.error(`${TAG25} config action=list-public-agents error="failed to parse config.json for agent ${entry.name}" \u2014 skipping`);
+                console.error(`${TAG26} config action=list-public-agents error="failed to parse config.json for agent ${entry.name}" \u2014 skipping`);
               }
             }
           } catch (err) {
-            console.error(`${TAG25} config action=list-public-agents error="failed to scan agents directory: ${String(err)}"`);
+            console.error(`${TAG26} config action=list-public-agents error="failed to scan agents directory: ${String(err)}"`);
           }
         }
-        console.error(`${TAG25} config action=list-public-agents count=${agents.length}`);
+        console.error(`${TAG26} config action=list-public-agents count=${agents.length}`);
         return c.json({ ok: true, agents });
       }
       case "schema": {
         const text = serializeWhatsAppSchema();
-        console.error(`${TAG25} config action=schema`);
+        console.error(`${TAG26} config action=schema`);
         return c.json({ ok: true, text });
       }
       case "list-groups": {
         const groupAccountId = accountId ?? "default";
         const groupRes = resolveSocket(groupAccountId);
         if (!groupRes.ok) {
-          console.error(`${TAG25} config action=list-groups error="${formatSocketResolutionReason(groupRes)}" accountId=${groupAccountId}`);
+          console.error(`${TAG26} config action=list-groups error="${formatSocketResolutionReason(groupRes)}" accountId=${groupAccountId}`);
           return c.json({ ok: false, error: formatSocketResolutionMessage(groupRes, groupAccountId) });
         }
         const sock = groupRes.sock;
@@ -9439,10 +9545,10 @@ app2.post("/config", async (c) => {
             name: g.subject ?? g.id,
             participantCount: Array.isArray(g.participants) ? g.participants.length : 0
           }));
-          console.error(`${TAG25} config action=list-groups count=${groups.length} accountId=${groupAccountId}`);
+          console.error(`${TAG26} config action=list-groups count=${groups.length} accountId=${groupAccountId}`);
           return c.json({ ok: true, groups });
         } catch (err) {
-          console.error(`${TAG25} config action=list-groups error="${String(err)}" accountId=${groupAccountId}`);
+          console.error(`${TAG26} config action=list-groups error="${String(err)}" accountId=${groupAccountId}`);
           return c.json({ ok: false, error: `Failed to fetch groups: ${String(err)}` });
         }
       }
@@ -9452,12 +9558,12 @@ app2.post("/config", async (c) => {
         }
         const result = updateConfig(account.accountDir, fields);
         const fieldNames = Object.keys(fields);
-        console.error(`${TAG25} config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
+        console.error(`${TAG26} config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "get-config": {
         const waConfig = getConfig(account.accountDir);
-        console.error(`${TAG25} config action=get-config`);
+        console.error(`${TAG26} config action=get-config`);
         return c.json({ ok: true, config: waConfig });
       }
       default:
@@ -9467,7 +9573,7 @@ app2.post("/config", async (c) => {
         );
     }
   } catch (err) {
-    console.error(`${TAG25} config error: ${String(err)}`);
+    console.error(`${TAG26} config error: ${String(err)}`);
     return c.json({ ok: false, error: String(err) }, 500);
   }
 });
@@ -9488,7 +9594,7 @@ app2.post("/send-document", async (c) => {
     recordRouteDocumentOutbound(to, filePath);
     return c.json({ success: true, messageId: result.messageId });
   } catch (err) {
-    console.error(`${TAG25} send-document error: ${String(err)}`);
+    console.error(`${TAG26} send-document error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9533,7 +9639,7 @@ app2.post("/send-admin", async (c) => {
     console.error(`[whatsapp:outbound] op=send-admin-ok via=${via} to=${phone}`);
     return c.json({ success: true, messageId: result.messageId });
   } catch (err) {
-    console.error(`${TAG25} send-admin error: ${String(err)}`);
+    console.error(`${TAG26} send-admin error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9592,7 +9698,7 @@ app2.post("/reply", async (c) => {
     console.error(`[whatsapp:observe] op=reply-sent sendId=${sendId} account=${accountId} socket=${res.accountId} waMessageId=${sent.messageId ?? ""}`);
     return c.json({ success: true, messageId: sent.messageId });
   } catch (err) {
-    console.error(`${TAG25} reply error: ${String(err)}`);
+    console.error(`${TAG26} reply error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9602,11 +9708,11 @@ app2.get("/activity", (c) => {
     const result = getChannelActivity(accountId);
     const total = result.accounts.reduce((sum, a) => sum + a.total, 0);
     console.error(
-      `${TAG25} activity accounts=${result.accounts.length} total=${total} recentEvents=${result.recentEvents.length}` + (accountId ? ` filter=${accountId}` : "")
+      `${TAG26} activity accounts=${result.accounts.length} total=${total} recentEvents=${result.recentEvents.length}` + (accountId ? ` filter=${accountId}` : "")
     );
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG25} activity error: ${String(err)}`);
+    console.error(`${TAG26} activity error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9634,10 +9740,10 @@ app2.get("/conversations", (c) => {
       };
     });
     conversations.sort((a, b) => (b.lastMessageTimestamp ?? 0) - (a.lastMessageTimestamp ?? 0));
-    console.error(`${TAG25} conversations requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${allConversations.size > 0} count=${conversations.length}`);
+    console.error(`${TAG26} conversations requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${allConversations.size > 0} count=${conversations.length}`);
     return c.json({ conversations });
   } catch (err) {
-    console.error(`${TAG25} conversations error: ${String(err)}`);
+    console.error(`${TAG26} conversations error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9690,10 +9796,10 @@ app2.get("/messages", (c) => {
         ...reactions && reactions.length > 0 ? { reactions } : {}
       };
     });
-    console.error(`${TAG25} messages requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} jid=${jid} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${storeMessages.length > 0} limit=${effectiveLimit ?? "all"} returned=${messages.length} withAttachments=${withAttachments}`);
+    console.error(`${TAG26} messages requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} jid=${jid} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${storeMessages.length > 0} limit=${effectiveLimit ?? "all"} returned=${messages.length} withAttachments=${withAttachments}`);
     return c.json({ messages });
   } catch (err) {
-    console.error(`${TAG25} messages error: ${String(err)}`);
+    console.error(`${TAG26} messages error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9795,7 +9901,7 @@ app2.get("/conversation-graph-state", async (c) => {
       ms
     });
   } catch (err) {
-    console.error(`${TAG25} conversation-graph-state error: ${String(err)}`);
+    console.error(`${TAG26} conversation-graph-state error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -9807,12 +9913,12 @@ app2.get("/group-info", async (c) => {
       return c.json({ error: "Missing required parameter: jid" }, 400);
     }
     if (!isGroupJid(jid)) {
-      console.error(`${TAG25} group-info error="not a group JID" jid=${jid} account=${accountId}`);
+      console.error(`${TAG26} group-info error="not a group JID" jid=${jid} account=${accountId}`);
       return c.json({ error: `"${jid}" is not a group JID. Group JIDs end with @g.us.` }, 400);
     }
     const res = resolveSocket(accountId);
     if (!res.ok) {
-      console.error(`${TAG25} group-info error="${formatSocketResolutionReason(res)}" account=${accountId}`);
+      console.error(`${TAG26} group-info error="${formatSocketResolutionReason(res)}" account=${accountId}`);
       return c.json({ error: formatSocketResolutionMessage(res, accountId) }, 400);
     }
     const sock = res.sock;
@@ -9826,10 +9932,10 @@ app2.get("/group-info", async (c) => {
       participantCount: meta.participants.length,
       participants: meta.participants.map((p) => ({ jid: p.id, admin: p.admin ?? null }))
     };
-    console.error(`${TAG25} group-info jid=${jid} subject="${meta.subject}" participants=${meta.participants.length} account=${accountId}`);
+    console.error(`${TAG26} group-info jid=${jid} subject="${meta.subject}" participants=${meta.participants.length} account=${accountId}`);
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG25} group-info error="${String(err)}" jid=${jid} account=${accountId}`);
+    console.error(`${TAG26} group-info error="${String(err)}" jid=${jid} account=${accountId}`);
     return c.json({ error: `Failed to fetch group info: ${String(err)}` }, 500);
   }
 });
@@ -10033,12 +10139,12 @@ app3.post("/pages/deploy", pagesDeployBodyLimit, async (c) => {
     console.error(
       `[pages-broker] op=project-ensure pub=${pub} project=${project} existed=${existed} created=${!existed}`
     );
-    const started = Date.now();
+    const started2 = Date.now();
     const { url, excluded, uploadDir, uploadDirSource } = await exec.pagesDeploy(dir, project, branch);
     console.error(
       `[pages-broker] op=stage pub=${pub} upload=${uploadDir} uploadFrom=${uploadDirSource} excluded=${excluded.length > 0 ? excluded.join(",") : "none"}`
     );
-    console.error(`[pages-broker] op=deploy pub=${pub} ranMs=${Date.now() - started} url=${url}`);
+    console.error(`[pages-broker] op=deploy pub=${pub} ranMs=${Date.now() - started2} url=${url}`);
     const httpStatus = await verifyDeployed(url);
     const verified = httpStatus === 200;
     console.error(
@@ -10697,7 +10803,7 @@ function resolveExposedDirs(schemaText, exposeFolders = []) {
 }
 // server/portal-uploads-pull.ts
-var TAG26 = "[portal-pull]";
+var TAG27 = "[portal-pull]";
 var PORTAL_UPLOADS_PULL_INTERVAL_MS = 6e4;
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function safeSegment(s) {
@@ -10758,17 +10864,17 @@ async function pullAccount(opts) {
     }
     const dest = resolveDestination(accountDir, row, exposed);
     const idField = dest.ok || dest.reason !== "bad-fileid" ? ` fileId=${row.fileId}` : "";
-    const head = `${TAG26} op=claim account=${accountId}${idField} bytes=${row.size}`;
+    const head = `${TAG27} op=claim account=${accountId}${idField} bytes=${row.size}`;
     if (!dest.ok) {
       failed++;
       log2(
-        `${TAG26} op=route account=${accountId}${idField} target="${row.targetPath}" result=refused reason=${dest.reason}`
+        `${TAG27} op=route account=${accountId}${idField} target="${row.targetPath}" result=refused reason=${dest.reason}`
       );
       log2(`${head} result=${dest.reason}`);
       continue;
     }
     log2(
-      `${TAG26} op=route account=${accountId}${idField} target="${row.targetPath}" result=${row.targetPath ? "exposed" : "default"}`
+      `${TAG27} op=route account=${accountId}${idField} target="${row.targetPath}" result=${row.targetPath ? "exposed" : "default"}`
     );
     let bytes;
     try {
@@ -10781,7 +10887,7 @@ async function pullAccount(opts) {
     const finalPath = nextFreePath(dest.final);
     if (finalPath !== dest.final) {
       log2(
-        `${TAG26} op=collision account=${accountId}${idField} suffix="${basename4(finalPath)}" result=suffixed`
+        `${TAG27} op=collision account=${accountId}${idField} suffix="${basename4(finalPath)}" result=suffixed`
       );
     }
     const relPath = relative2(resolve13(accountDir), finalPath).split(sep3).join("/");
@@ -10825,7 +10931,7 @@ async function pullAccount(opts) {
       deleteErr = err instanceof Error ? err.message : String(err);
     }
     log2(
-      `${TAG26} op=move account=${accountId}${idField} r2Deleted=${r2Deleted}` + (deleteErr ? ` err="${deleteErr}"` : "")
+      `${TAG27} op=move account=${accountId}${idField} r2Deleted=${r2Deleted}` + (deleteErr ? ` err="${deleteErr}"` : "")
     );
     pulled++;
     log2(`${head} result=written`);
@@ -10835,10 +10941,10 @@ async function pullAccount(opts) {
 async function withdrawRow(opts) {
   const { accountDir, accountId, dbName, exposed, row, cf, log: log2 } = opts;
   if (!UUID.test(row.fileId)) {
-    log2(`${TAG26} op=delete-propagate account=${accountId} result=bad-fileid`);
+    log2(`${TAG27} op=delete-propagate account=${accountId} result=bad-fileid`);
     return false;
   }
-  const head = `${TAG26} op=delete-propagate account=${accountId} fileId=${row.fileId}`;
+  const head = `${TAG27} op=delete-propagate account=${accountId} fileId=${row.fileId}`;
   const segments = row.devicePath.split("/");
   if (!row.devicePath || !segments.every(safeSegment) || !exposedOrOwnUploads(segments, exposed, row.ownerId)) {
     log2(`${head} removed=false result=bad-path`);
@@ -10937,7 +11043,7 @@ async function runPortalUploadsPull(root) {
         await cf.d1Query(portal.portalDbName, PENDING_SELECT)
       );
       if (malformed > 0) {
-        console.error(`${TAG26} op=malformed account=${portal.accountId} rows=${malformed}`);
+        console.error(`${TAG27} op=malformed account=${portal.accountId} rows=${malformed}`);
       }
       if (rows.length === 0) continue;
       const accountDir = join14(accountsRoot, portal.accountId);
@@ -10957,12 +11063,12 @@ async function runPortalUploadsPull(root) {
       failedTotal += r.failed;
       withdrawnTotal += r.withdrawn;
       console.error(
-        `${TAG26} op=done account=${portal.accountId} pulled=${r.pulled} withdrawn=${r.withdrawn} failed=${r.failed}`
+        `${TAG27} op=done account=${portal.accountId} pulled=${r.pulled} withdrawn=${r.withdrawn} failed=${r.failed}`
       );
     } catch (err) {
       failedTotal++;
       console.error(
-        `${TAG26} op=failed account=${portal.accountId} err="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG27} op=failed account=${portal.accountId} err="${err instanceof Error ? err.message : String(err)}"`
       );
     }
   }
@@ -11037,7 +11143,7 @@ function createD1Client(opts) {
 }
 // ../plugins/cloudflare/bin/portal-index-push.mjs
-var TAG27 = "[portal-index]";
+var TAG28 = "[portal-index]";
 function readEnvFile(path3) {
   const out = {};
   if (!existsSync11(path3)) return out;
@@ -11102,17 +11208,17 @@ async function pushAccount(opts) {
   const exposeFolders = Array.isArray(opts.exposeFolders) ? opts.exposeFolders : [];
   const r = resolveExposedDirs(schemaText, exposeFolders);
   log2(
-    `${TAG27} op=resolve account=${accountId} schemaPresent=${r.schemaPresent} allowed=${r.allowed.length} domainBuckets=${r.domainBuckets.join(",") || "none"} extraFolders=${exposeFolders.length} exposed=${r.exposed.join(",") || "none"}`
+    `${TAG28} op=resolve account=${accountId} schemaPresent=${r.schemaPresent} allowed=${r.allowed.length} domainBuckets=${r.domainBuckets.join(",") || "none"} extraFolders=${exposeFolders.length} exposed=${r.exposed.join(",") || "none"}`
   );
   for (const c of r.collisions) {
-    log2(`${TAG27} op=collision account=${accountId} dir=${c} claimedBy=plugin-owned`);
+    log2(`${TAG28} op=collision account=${accountId} dir=${c} claimedBy=plugin-owned`);
   }
   if (opts.previousExposed) {
     const added = r.exposed.filter((d) => !opts.previousExposed.includes(d));
     const removed = opts.previousExposed.filter((d) => !r.exposed.includes(d));
     if (added.length || removed.length) {
       log2(
-        `${TAG27} op=exposed-changed account=${accountId} added=${added.join(",") || "none"} removed=${removed.join(",") || "none"}`
+        `${TAG28} op=exposed-changed account=${accountId} added=${added.join(",") || "none"} removed=${removed.join(",") || "none"}`
       );
     }
   }
@@ -11136,7 +11242,7 @@ async function pushAccount(opts) {
       accountId,
       next
     ]);
-    log2(`${TAG27} op=stage-clear account=${accountId} generation=${next} cleared=${orphanCount}`);
+    log2(`${TAG28} op=stage-clear account=${accountId} generation=${next} cleared=${orphanCount}`);
   }
   for (const row of rows) {
     await client.query(
@@ -11144,12 +11250,12 @@ async function pushAccount(opts) {
       [accountId, row.relPath, row.sizeBytes, row.modifiedAt, nowIso, row.isDir ? 1 : 0, next]
     );
   }
-  log2(`${TAG27} op=stage account=${accountId} generation=${next} inserted=${rows.length}`);
+  log2(`${TAG28} op=stage account=${accountId} generation=${next} inserted=${rows.length}`);
   await client.query(
     "INSERT INTO directory_state (accountId, currentGeneration) VALUES (?, ?) ON CONFLICT (accountId) DO UPDATE SET currentGeneration = excluded.currentGeneration",
     [accountId, next]
   );
-  log2(`${TAG27} op=flip account=${accountId} generation=${next}`);
+  log2(`${TAG28} op=flip account=${accountId} generation=${next}`);
   try {
     await client.query("DELETE FROM directory WHERE accountId = ? AND generation != ?", [
       accountId,
@@ -11157,7 +11263,7 @@ async function pushAccount(opts) {
     ]);
   } catch (err) {
     log2(
-      `${TAG27} op=sweep account=${accountId} generation=${next} result=failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG28} op=sweep account=${accountId} generation=${next} result=failed err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
   const check = await client.query(
@@ -11165,7 +11271,7 @@ async function pushAccount(opts) {
     [accountId]
   );
   const after = Number(check[0]?.n ?? -1);
-  log2(`${TAG27} op=verify account=${accountId} rowsAfter=${after} expected=${rows.length}`);
+  log2(`${TAG28} op=verify account=${accountId} rowsAfter=${after} expected=${rows.length}`);
   return { exposed: r.exposed, rows: rows.length, schemaPresent: true, generation: next };
 }
 function stateFilePath(platformRoot5) {
@@ -11186,7 +11292,7 @@ function recordSuccess(platformRoot5, accountId, entry) {
     writeFileSync6(path3, JSON.stringify(state, null, 1));
   } catch (err) {
     console.error(
-      `${TAG27} op=state-write-failed account=${accountId} path="${path3}" err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG28} op=state-write-failed account=${accountId} path="${path3}" err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
 }
@@ -11210,7 +11316,7 @@ async function portalAccounts(accountsRoot) {
         const exposeFolders = Array.isArray(cfg?.exposeFolders) ? cfg.exposeFolders.filter((f) => typeof f === "string") : [];
         out.push({ accountDir, accountId, dbName: cfg.portalDbName, exposeFolders });
       } else {
-        console.error(`${TAG27} op=skip account=${accountId} reason=no-portalDbName`);
+        console.error(`${TAG28} op=skip account=${accountId} reason=no-portalDbName`);
       }
     } catch {
     }
@@ -11238,7 +11344,7 @@ function resolveCloudflareCredentials(platformRoot5) {
 async function pushAllAccounts(platformRoot5) {
   const accountsRoot = resolve14(platformRoot5, "..", "data", "accounts");
   const targets = await portalAccounts(accountsRoot);
-  console.error(`${TAG27} op=enumerate accountsRoot="${accountsRoot}" accounts=${targets.length}`);
+  console.error(`${TAG28} op=enumerate accountsRoot="${accountsRoot}" accounts=${targets.length}`);
   if (targets.length === 0) return { accounts: 0, pushed: 0, failed: 0 };
   const cred = resolveCloudflareCredentials(platformRoot5);
   if ("error" in cred) {
@@ -11272,11 +11378,11 @@ async function runTargets(platformRoot5, cred, targets) {
         });
       }
       pushed++;
-      console.error(`${TAG27} op=done account=${t.accountId} rows=${r.rows}`);
+      console.error(`${TAG28} op=done account=${t.accountId} rows=${r.rows}`);
     } catch (err) {
       failed++;
       console.error(
-        `${TAG27} op=failed account=${t.accountId} err="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG28} op=failed account=${t.accountId} err="${err instanceof Error ? err.message : String(err)}"`
       );
     }
   }
@@ -11285,7 +11391,7 @@ async function runTargets(platformRoot5, cred, targets) {
 async function main() {
   const platformRoot5 = process.env.PLATFORM_ROOT;
   if (!platformRoot5) {
-    console.error(`${TAG27} op=usage reason=no-platform-root PLATFORM_ROOT is required`);
+    console.error(`${TAG28} op=usage reason=no-platform-root PLATFORM_ROOT is required`);
     process.exit(1);
   }
   if (process.argv.includes("--all-accounts")) {
@@ -11293,7 +11399,7 @@ async function main() {
       const r2 = await pushAllAccounts(platformRoot5);
       if (r2.failed > 0) process.exit(1);
     } catch (err) {
-      console.error(`${TAG27} op=skip reason=${err instanceof Error ? err.message : String(err)}`);
+      console.error(`${TAG28} op=skip reason=${err instanceof Error ? err.message : String(err)}`);
       process.exit(1);
     }
     return;
@@ -11302,12 +11408,12 @@ async function main() {
   const accountId = arg("--account");
   const dbName = arg("--db");
   if (!accountDir || !accountId || !dbName) {
-    console.error(`${TAG27} op=usage --account-dir <dir> --account <id> --db <name>`);
+    console.error(`${TAG28} op=usage --account-dir <dir> --account <id> --db <name>`);
     process.exit(1);
   }
   const cred = resolveCloudflareCredentials(platformRoot5);
   if ("error" in cred) {
-    console.error(`${TAG27} op=skip reason=${cred.error}`);
+    console.error(`${TAG28} op=skip reason=${cred.error}`);
     process.exit(1);
   }
   const r = await runTargets(platformRoot5, cred, [
@@ -13529,7 +13635,7 @@ function resolveOpenVisitorSession(rows, visitorId, agentSlug) {
 // server/routes/public-reader.ts
 var app6 = new Hono();
-var TAG28 = "[public-webchat]";
+var TAG29 = "[public-webchat]";
 function parseAccessSessionId(cookieHeader) {
   if (!cookieHeader) return null;
   const part = cookieHeader.split(";").map((p) => p.trim()).find((p) => p.startsWith("__access_session="));
@@ -13577,7 +13683,7 @@ function enumeratePublicRows() {
 app6.get("/session", (c) => {
   const visitor = resolveVisitor(c);
   if (!visitor) {
-    console.error(`${TAG28} op=reader-refused reason=no-anchor path=/session`);
+    console.error(`${TAG29} op=reader-refused reason=no-anchor path=/session`);
     return c.json({ error: "gate-required" }, 401);
   }
   const rows = enumeratePublicRows();
@@ -13596,11 +13702,11 @@ app6.get("/session", (c) => {
     found = effectiveSlug ? resolveOpenVisitorSession(rows, visitor.visitorId, effectiveSlug) : null;
   }
   if (found) {
-    console.log(`${TAG28} op=session-resume anchor=${visitor.kind} key=${(found.senderId ?? "").slice(0, 8)} sessionId=${found.sessionId.slice(0, 8)}`);
+    console.log(`${TAG29} op=session-resume anchor=${visitor.kind} key=${(found.senderId ?? "").slice(0, 8)} sessionId=${found.sessionId.slice(0, 8)}`);
     return c.json({ sessionId: found.sessionId, projectDir: found.projectDir, sessionKey: found.senderId });
   }
   const sessionKey = crypto.randomUUID();
-  console.log(`${TAG28} op=session-new anchor=${visitor.kind} key=${sessionKey.slice(0, 8)}`);
+  console.log(`${TAG29} op=session-new anchor=${visitor.kind} key=${sessionKey.slice(0, 8)}`);
   return c.json({ sessionId: null, projectDir: null, sessionKey });
 });
 function publicUploadsDir(accountId, sessionId) {
@@ -13629,7 +13735,7 @@ function readFrom2(path3, from) {
 app6.get("/stream", (c) => {
   const visitor = resolveVisitor(c);
   if (!visitor) {
-    console.error(`${TAG28} op=reader-refused reason=no-anchor path=/stream`);
+    console.error(`${TAG29} op=reader-refused reason=no-anchor path=/stream`);
     return c.json({ error: "gate-required" }, 401);
   }
   const sessionId = c.req.query("sessionId") ?? "";
@@ -13647,12 +13753,12 @@ app6.get("/stream", (c) => {
   const isPublicWebchat = meta.role === "public" && meta.channel === "webchat";
   const owns = visitor.kind === "person" ? meta.personId === visitor.personId : meta.personId === null && meta.visitorId === visitor.visitorId;
   if (!(isPublicWebchat && owns)) {
-    console.error(`${TAG28} op=reader-refused reason=not-owner anchor=${visitor.kind} sessionId=${sessionId.slice(0, 8)}`);
+    console.error(`${TAG29} op=reader-refused reason=not-owner anchor=${visitor.kind} sessionId=${sessionId.slice(0, 8)}`);
     return c.json({ error: "forbidden" }, 403);
   }
   const senderShort = (meta.senderId ?? "").slice(0, 8);
   const encoder = new TextEncoder();
-  console.log(`${TAG28} op=reader-open anchor=${visitor.kind} key=${senderShort} mode=delivered-only sessionId=${sessionId.slice(0, 8)}`);
+  console.log(`${TAG29} op=reader-open anchor=${visitor.kind} key=${senderShort} mode=delivered-only sessionId=${sessionId.slice(0, 8)}`);
   const send = (controller, turn, id) => controller.enqueue(encoder.encode(`id: ${id}
 data: ${JSON.stringify(turn)}
@@ -13667,7 +13773,7 @@ data: ${JSON.stringify(turn)}
         const { turns, dropped } = filterDeliveredFrames(lines);
         if (uploadsDir) enrichPublicAttachments(turns, listSessionAttachmentsInDir(uploadsDir), attachmentCursor);
         for (const turn of turns) send(controller, turn, offset);
-        if (dropped > 0) console.log(`${TAG28} op=reader-filtered key=${senderShort} dropped=${dropped}`);
+        if (dropped > 0) console.log(`${TAG29} op=reader-filtered key=${senderShort} dropped=${dropped}`);
       };
       try {
         const { buf, end } = readFrom2(jsonlPath, 0);
@@ -13702,7 +13808,7 @@ data: ${JSON.stringify(turn)}
         watcher?.close();
         clearInterval(poll);
         clearInterval(heartbeat);
-        console.log(`${TAG28} op=reader-close key=${senderShort}`);
+        console.log(`${TAG29} op=reader-close key=${senderShort}`);
         try {
           controller.close();
         } catch {
@@ -14684,7 +14790,7 @@ app7.get("/", requireAdminSession, async (c) => {
     console.error("[webchat:greeting] op=read-failed reason=no-account-for-session");
     return c.json({ ok: false });
   }
-  const started = Date.now();
+  const started2 = Date.now();
   let session;
   try {
     session = getSession();
@@ -14730,7 +14836,7 @@ app7.get("/", requireAdminSession, async (c) => {
       console.error(`[webchat:greeting] op=specialists-read-failed reason=${detail}`);
     }
     console.log(
-      `[webchat:greeting] op=read account=${accountId.slice(0, 8)} events=${events.length} tasks=${tasks.total} specialists=${specialists.length} ms=${Date.now() - started}`
+      `[webchat:greeting] op=read account=${accountId.slice(0, 8)} events=${events.length} tasks=${tasks.total} specialists=${specialists.length} ms=${Date.now() - started2}`
     );
     return c.json({ ok: true, events, tasks, specialists });
   } catch (err) {
@@ -14809,7 +14915,7 @@ function routeTelegramUpdate(input) {
 }
 // server/routes/telegram.ts
-var TAG29 = "[telegram-inbound]";
+var TAG30 = "[telegram-inbound]";
 function configDirName() {
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? resolve20(process.cwd(), "..");
   const brandPath = join27(platformRoot5, "config", "brand.json");
@@ -14830,18 +14936,18 @@ app8.post("/", async (c) => {
   const botParam = c.req.query("bot");
   const botType = botParam === "admin" ? "admin" : botParam === "public" ? "public" : null;
   if (!botType) {
-    console.error(`${TAG29} op=reject reason=missing-bot-param`);
+    console.error(`${TAG30} op=reject reason=missing-bot-param`);
     return c.json({ ok: false }, 400);
   }
   const sp = secretPath(botType);
   if (!existsSync21(sp)) {
-    console.error(`${TAG29} op=reject reason=no-secret-file botType=${botType}`);
+    console.error(`${TAG30} op=reject reason=no-secret-file botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
   const expected = readFileSync27(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
-    console.error(`${TAG29} op=reject reason=bad-secret botType=${botType}`);
+    console.error(`${TAG30} op=reject reason=bad-secret botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
   let update;
@@ -14852,40 +14958,40 @@ app8.post("/", async (c) => {
   }
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG29} op=reject reason=no-account`);
+    console.error(`${TAG30} op=reject reason=no-account`);
     return c.json({ ok: true }, 200);
   }
   const decision = routeTelegramUpdate({ update, botType, config: account.config.telegram ?? {} });
   if (decision.kind === "ignore") {
-    console.error(`${TAG29} op=ignore reason=${decision.reason}`);
+    console.error(`${TAG30} op=ignore reason=${decision.reason}`);
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "denied") {
-    console.error(`${TAG29} op=denied reason=${decision.reason} agentType=${decision.agentType}`);
+    console.error(`${TAG30} op=denied reason=${decision.reason} agentType=${decision.agentType}`);
     return c.json({ ok: true }, 200);
   }
   const role = decision.agentType === "admin" ? "admin" : "public";
   const agentSlug = role === "admin" ? "admin" : resolveDefaultAgentSlug(account.accountDir);
   if (!agentSlug) {
-    console.error(`${TAG29} op=reject reason=no-default-agent`);
+    console.error(`${TAG30} op=reject reason=no-default-agent`);
     return c.json({ ok: true }, 200);
   }
-  console.error(`${TAG29} op=update accountId=${account.accountId} from=${decision.senderId}`);
+  console.error(`${TAG30} op=update accountId=${account.accountId} from=${decision.senderId}`);
   const botToken = botType === "admin" ? account.config.telegram?.adminBotToken : account.config.telegram?.publicBotToken;
   const { senderId, chatId, text } = decision;
   const gateway = getTelegramGateway();
   if (!gateway) {
-    console.error(`${TAG29} op=reject reason=gateway-not-ready from=${senderId}`);
+    console.error(`${TAG30} op=reject reason=gateway-not-ready from=${senderId}`);
     return c.json({ ok: true }, 200);
   }
   const reply = async (replyText) => {
     if (!botToken) {
       const reason = account.config.telegram ? "no-bot-token" : "no-telegram-config";
-      console.error(`${TAG29} op=reply-dropped reason=${reason} botType=${botType} from=${senderId}`);
+      console.error(`${TAG30} op=reply-dropped reason=${reason} botType=${botType} from=${senderId}`);
       return;
     }
     const sent = await sendTelegramText(botToken, chatId, replyText);
-    console.error(`${TAG29} op=reply-sent from=${senderId} ok=${sent.ok}${sent.ok ? "" : ` error=${sent.error}`}`);
+    console.error(`${TAG30} op=reply-sent from=${senderId} ok=${sent.ok}${sent.ok ? "" : ` error=${sent.error}`}`);
   };
   void gateway.handleInbound({
     accountId: account.accountId,
@@ -14903,7 +15009,7 @@ var telegram_default = app8;
 // server/routes/quickbooks.ts
 import { join as join28 } from "path";
 import { existsSync as existsSync22, readFileSync as readFileSync28, writeFileSync as writeFileSync10, mkdirSync as mkdirSync5, rmSync, renameSync as renameSync5 } from "fs";
-var TAG30 = "[quickbooks]";
+var TAG31 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
 function pendingPath(accountDir, state) {
@@ -14916,14 +15022,14 @@ async function completeConsent(args) {
   const { accountDir, code, realmId } = args;
   const state = args.state;
   if (!state || !STATE_RE.test(state) || !existsSync22(pendingPath(accountDir, state))) {
-    console.error(`${TAG30} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG31} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   const claimFile = `${pendingPath(accountDir, state)}.claimed`;
   try {
     renameSync5(pendingPath(accountDir, state), claimFile);
   } catch {
-    console.error(`${TAG30} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG31} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   try {
@@ -14931,14 +15037,14 @@ async function completeConsent(args) {
     try {
       pending = JSON.parse(readFileSync28(claimFile, "utf-8"));
     } catch {
-      console.error(`${TAG30} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG31} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization state could not be read.", stateValid: false };
     }
     if (Date.now() > pending.expiresAt) {
-      console.error(`${TAG30} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG31} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization request expired. Generate a new consent link.", stateValid: false };
     }
-    console.error(`${TAG30} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
+    console.error(`${TAG31} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
     if (!code || !realmId) {
       return { ok: false, status: 400, message: "Missing code or realmId in the callback.", stateValid: true };
     }
@@ -14962,12 +15068,12 @@ async function completeConsent(args) {
     });
     const text = await res.text();
     if (!res.ok) {
-      console.error(`${TAG30} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG31} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: `Token exchange failed (${res.status}). Generate a new consent link to retry.`, stateValid: true };
     }
     const body = JSON.parse(text);
     if (!body.refresh_token) {
-      console.error(`${TAG30} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG31} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: "Token exchange returned no refresh token.", stateValid: true };
     }
     const now = Date.now();
@@ -14980,7 +15086,7 @@ async function completeConsent(args) {
     mkdirSync5(join28(accountDir, "secrets"), { recursive: true });
     writeFileSync10(storePath(accountDir), JSON.stringify(store2, null, 2), { mode: 384 });
     const persisted = JSON.parse(readFileSync28(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
-    console.error(`${TAG30} op=token-exchange realmId=${realmId} persisted=${persisted}`);
+    console.error(`${TAG31} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
     rmSync(claimFile, { force: true });
@@ -14993,7 +15099,7 @@ var app9 = new Hono();
 app9.get("/callback", async (c) => {
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG30} op=callback stateValid=false realmId= reason=no-account`);
+    console.error(`${TAG31} op=callback stateValid=false realmId= reason=no-account`);
     return c.html(page("QuickBooks", "This install has no account configured."), 500);
   }
   const result = await completeConsent({
@@ -16769,7 +16875,7 @@ async function purgeAdminConversationJsonls(args) {
 // app/lib/admin-conversation-cascade.ts
 async function cascadeAdminConversationDelete(args) {
-  const started = Date.now();
+  const started2 = Date.now();
   const fetchImpl = args.fetchImpl ?? fetch;
   const log2 = args.logger ?? ((line) => console.log(line));
   const id82 = args.sessionId.slice(0, 8);
@@ -16820,7 +16926,7 @@ async function cascadeAdminConversationDelete(args) {
   if (!found) {
     return { ok: false, reason: "conversation-not-found" };
   }
-  const ms = Date.now() - started;
+  const ms = Date.now() - started2;
   const csv = purged.map((s) => s.slice(0, 8)).join(",");
   log2(`[admin-conversation-delete] sessionId=${id82} claudeSessionIds=${csv} ms=${ms}`);
   return { ok: true, claudeSessionIds: purged, ms };
@@ -17744,7 +17850,7 @@ function resolveTunnelUrl() {
   if (!state) return null;
   return `https://${hostname2}.${state.domain}`;
 }
-var TAG31 = "[claude-session-manager:wrapper]";
+var TAG32 = "[claude-session-manager:wrapper]";
 async function refuseIfClaudeAuthDead(c, route, sessionId) {
   const auth = await ensureAuth();
   if (auth.status !== "dead" && auth.status !== "missing") return null;
@@ -17762,12 +17868,12 @@ async function performSpawnWithInitialMessage(args) {
   const aboutOwner = await resolveOwnerProfileBlock(args.senderId, args.userId);
   const ownerMs = Date.now() - ownerStart;
   const aboutOwnerStatus = aboutOwner == null ? "absent" : "ok" in aboutOwner && aboutOwner.ok === false ? `unresolved:${aboutOwner.reason}` : "ok";
-  console.log(`${TAG31} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
+  console.log(`${TAG32} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
   const dormantPlugins = computeDormantPlugins(args.senderId);
   const activePlugins = computeActivePlugins(args.senderId);
   const specialistDomains = computeSpecialistDomains(args.senderId);
   const tunnelUrl = resolveTunnelUrl();
-  console.log(`${TAG31} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
+  console.log(`${TAG32} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
   const upstreamPayload = JSON.stringify({
     senderId: args.senderId,
     // Task 205 — pass userId through to the manager so it lands as
@@ -17794,24 +17900,24 @@ async function performSpawnWithInitialMessage(args) {
     // unshapely values.
     conversationNodeId: args.conversationNodeId
   });
-  console.log(`${TAG31} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
+  console.log(`${TAG32} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
   const forwardStart = Date.now();
   const upstream = await fetch(`${managerBase("claude-session-manager:wrapper")}/public-spawn`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: upstreamPayload
   }).catch((err) => {
-    console.error(`${TAG31} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
+    console.error(`${TAG32} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
     return null;
   });
   if (!upstream) return {
     response: new Response(JSON.stringify({ error: "manager-unreachable" }), { status: 503, headers: { "content-type": "application/json" } }),
     claudeSessionId: null
   };
-  console.log(`${TAG31} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
+  console.log(`${TAG32} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
   if (args.initialMessage) {
     const inputBytes = Buffer.byteLength(args.initialMessage, "utf8");
-    console.log(`${TAG31} initial-message-inlined bytes=${inputBytes}`);
+    console.log(`${TAG32} initial-message-inlined bytes=${inputBytes}`);
   }
   const bodyText = await upstream.text().catch(() => "");
   let claudeSessionId = null;
@@ -17846,7 +17952,7 @@ app20.post("/", async (c) => {
   if (refusal) return refusal;
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(`${TAG31} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
+    console.error(`${TAG32} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
     return c.json({ error: "admin-account-not-resolved" }, 500);
   }
   const userId = getUserIdForSession(cacheKey) ?? void 0;
@@ -17855,7 +17961,7 @@ app20.post("/", async (c) => {
   const permissionMode = typeof body.permissionMode === "string" ? body.permissionMode : void 0;
   const specialist = typeof body.specialist === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(body.specialist) ? body.specialist : void 0;
   const model = typeof body.model === "string" && /^[A-Za-z0-9._-]{1,64}$/.test(body.model) ? body.model : void 0;
-  console.log(`${TAG31} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
+  console.log(`${TAG32} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
   const conversationNodeId = cacheKey ? getSessionIdForSession(cacheKey) : void 0;
   const { response, claudeSessionId } = await performSpawnWithInitialMessage({
     senderId,
@@ -17874,13 +17980,13 @@ app20.post("/", async (c) => {
     claudeSessionId,
     senderId
   );
-  console.log(`${TAG31} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
+  console.log(`${TAG32} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
   return response;
 });
 var claude_sessions_default = app20;
 // server/routes/admin/log-ingest.ts
-var TAG32 = "[log-ingest]";
+var TAG33 = "[log-ingest]";
 var TAG_PATTERN = /^[A-Za-z0-9_:-]{1,32}$/;
 var LEVELS = /* @__PURE__ */ new Set(["debug", "info", "warn", "error"]);
 var MAX_LINE_BYTES = 4096;
@@ -17891,7 +17997,7 @@ function isLoopbackAddr2(addr) {
 app21.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr2(remoteAddr)) {
-    console.error(`${TAG32} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG33} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "log-ingest-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -17900,7 +18006,7 @@ app21.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr2(t));
     if (offender !== void 0) {
-      console.error(`${TAG32} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG33} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "log-ingest-loopback-only" }, 403);
     }
   }
@@ -17942,18 +18048,18 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
 ]);
 var app22 = new Hono();
 app22.post("/", async (c) => {
-  const TAG58 = "[admin:events]";
+  const TAG59 = "[admin:events]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG58} reject reason=body-not-json detail=${detail}`);
+    console.error(`${TAG59} reject reason=body-not-json detail=${detail}`);
     return c.json({ ok: false, detail: "Request body was not valid JSON" }, 400);
   }
   const event = typeof body.event === "string" ? body.event : "";
   if (!ALLOWED_EVENTS.has(event)) {
-    console.error(`${TAG58} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
+    console.error(`${TAG59} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
     return c.json({ ok: false, detail: `Event "${event}" is not allowed` }, 400);
   }
   const rawFields = body.fields && typeof body.fields === "object" ? body.fields : {};
@@ -20800,7 +20906,7 @@ app24.get("/", requireAdminSession, async (c) => {
   if (labels.includes("FileArtifact")) {
     void reconcileFileIndexDebounced(accountId);
   }
-  const started = Date.now();
+  const started2 = Date.now();
   const session = getSession();
   try {
     const res = await hybrid(session, embed, {
@@ -20811,7 +20917,7 @@ app24.get("/", requireAdminSession, async (c) => {
       degradeOnEmbedFailure: true,
       vectorThreshold
     });
-    const total = Date.now() - started;
+    const total = Date.now() - started2;
     if (res.embedError) {
       console.error(`[graph-search] embed-unavailable err="${res.embedError}" \u2014 bm25-only`);
       console.error(`[graph-search] embed-degraded query="${q2}" results=${res.results.length}`);
@@ -20895,7 +21001,7 @@ app24.get("/", requireAdminSession, async (c) => {
       threshold: res.threshold
     });
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(`[graph-search] neo4j-unreachable query="${q2}" ms=${elapsed} err="${message}"`);
     return c.json({ error: `Graph search unavailable: ${message}` }, 503);
@@ -21212,7 +21318,7 @@ async function handleDefault(c, accountId) {
       );
     }
   }
-  const started = Date.now();
+  const started2 = Date.now();
   const session = getSession();
   try {
     const countCypher = includeTrashed ? DEFAULT_COUNT_CYPHER_INCLUDE_TRASHED : DEFAULT_COUNT_CYPHER;
@@ -21231,7 +21337,7 @@ async function handleDefault(c, accountId) {
       const rawEdges = record?.get("edges") ?? [];
       return { overLimit: false, matched, rawNodes, rawEdges };
     });
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     if (result.overLimit) {
       console.error(
         `[graph-page] load rejected reason=ceiling-exceeded account=${accountId} labels=${labels.join(",")} matched=${result.matched} ceiling=${CEILING} ms=${elapsed}`
@@ -21254,7 +21360,7 @@ async function handleDefault(c, accountId) {
     );
     return c.json({ nodes, edges });
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(`[graph-page] error stage=fetch reason="${message}" ms=${elapsed}`);
     return c.json({ error: `Graph data unavailable: ${message}` }, 503);
@@ -21269,7 +21375,7 @@ async function handleDefaultTopLevel(c, accountId, flags) {
   const { includeTrashed, includeAgentActions } = flags;
   const labels = [...getTopLevelLabelAllowlist()].filter((l) => !HIDDEN_BY_DEFAULT_LABELS.has(l));
   const agentActionLabels = [...AGENT_ACTION_LABELS];
-  const started = Date.now();
+  const started2 = Date.now();
   const session = getSession();
   try {
     const countCypher = includeTrashed ? DEFAULT_COUNT_CYPHER_INCLUDE_TRASHED : DEFAULT_COUNT_CYPHER;
@@ -21290,7 +21396,7 @@ async function handleDefaultTopLevel(c, accountId, flags) {
       const rawEdges = record?.get("edges") ?? [];
       return { total, rawNodes, rawEdges };
     });
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const warnedClasses = /* @__PURE__ */ new Set();
     const conversationWarnings = { loggedMissingMessageCount: false };
     const nodes = result.rawNodes.map((n) => pruneNode(n, warnedClasses, conversationWarnings));
@@ -21307,7 +21413,7 @@ async function handleDefaultTopLevel(c, accountId, flags) {
     );
     return c.json({ nodes, edges, total: result.total, truncated });
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(`[graph-page] error stage=fetch-top-level reason="${message}" ms=${elapsed}`);
     return c.json({ error: `Graph data unavailable: ${message}` }, 503);
@@ -21341,7 +21447,7 @@ async function handleNeighbourhood(c, accountId) {
   const rawLimit = c.req.query("limit");
   const parsedLimit = rawLimit ? parseInt(rawLimit, 10) : NEIGHBOURHOOD_SEARCH_DEFAULT_LIMIT;
   const searchLimit = Number.isFinite(parsedLimit) && parsedLimit > 0 ? Math.min(parsedLimit, NEIGHBOURHOOD_SEARCH_MAX_LIMIT) : NEIGHBOURHOOD_SEARCH_DEFAULT_LIMIT;
-  const started = Date.now();
+  const started2 = Date.now();
   const session = getSession();
   try {
     let allowedIds = null;
@@ -21393,7 +21499,7 @@ async function handleNeighbourhood(c, accountId) {
     const record = result.records[0];
     const rawNodes = record?.get("nodes") ?? [];
     const rawEdges = record?.get("edges") ?? [];
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     if (rawNodes.length === 0) {
       console.error(
         `[graph-page] load rejected reason=not-found account=${accountId} elementId=${elementId} ms=${elapsed}`
@@ -21435,7 +21541,7 @@ async function handleNeighbourhood(c, accountId) {
     }
     return c.json({ nodes, edges });
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(`[graph-page] error stage=fetch reason="${message}" ms=${elapsed}`);
     return c.json({ error: `Graph data unavailable: ${message}` }, 503);
@@ -21855,7 +21961,7 @@ app26.post("/", requireAdminSession, async (c) => {
     }
     by = body.by;
   }
-  const started = Date.now();
+  const started2 = Date.now();
   const session = getSession();
   try {
     const lookup = await session.run(
@@ -21865,7 +21971,7 @@ app26.post("/", requireAdminSession, async (c) => {
       { elementId, accountId }
     );
     if (lookup.records.length === 0) {
-      const elapsed2 = Date.now() - started;
+      const elapsed2 = Date.now() - started2;
       console.error(
         `[graph-page] delete account=${accountId} elementId=${elementId} by=${by} labels= route=trash result=not-found ms=${elapsed2}`
       );
@@ -21875,7 +21981,7 @@ app26.post("/", requireAdminSession, async (c) => {
     const sessionId = lookup.records[0].get("sessionId");
     if (preflightLabels.includes("AdminConversation")) {
       if (!sessionId) {
-        const elapsed3 = Date.now() - started;
+        const elapsed3 = Date.now() - started2;
         console.error(
           `[graph-page] delete account=${accountId} elementId=${elementId} by=${by} labels=${preflightLabels.join(",")} route=cascade result=error ms=${elapsed3} err="AdminConversation node has no sessionId"`
         );
@@ -21891,7 +21997,7 @@ app26.post("/", requireAdminSession, async (c) => {
         accountId,
         managerBase: managerBaseUrl
       });
-      const elapsed2 = Date.now() - started;
+      const elapsed2 = Date.now() - started2;
       const labelSummary2 = preflightLabels.join(",");
       if (outcome.ok) {
         console.error(
@@ -21968,7 +22074,7 @@ app26.post("/", requireAdminSession, async (c) => {
       elementId,
       by
     });
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const labelSummary = (result.labels.length > 0 ? result.labels : preflightLabels).join(",");
     console.error(
       `[graph-page] delete account=${accountId} elementId=${elementId} by=${by} labels=${labelSummary} route=trash result=ok ms=${elapsed}`
@@ -21982,7 +22088,7 @@ app26.post("/", requireAdminSession, async (c) => {
     };
     return c.json(response);
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
       `[graph-page] delete account=${accountId} elementId=${elementId} by=${by} labels= result=error ms=${elapsed} err="${message}"`
@@ -22014,7 +22120,7 @@ app27.post("/", requireAdminSession, async (c) => {
   if (!elementId) {
     return c.json({ error: "elementId required" }, 400);
   }
-  const started = Date.now();
+  const started2 = Date.now();
   const session = getSession();
   try {
     const lookup = await session.run(
@@ -22024,7 +22130,7 @@ app27.post("/", requireAdminSession, async (c) => {
       { elementId, accountId }
     );
     if (lookup.records.length === 0) {
-      const elapsed2 = Date.now() - started;
+      const elapsed2 = Date.now() - started2;
       console.error(
         `[graph-page] restore account=${accountId} elementId=${elementId} labels= result=not-found ms=${elapsed2}`
       );
@@ -22032,7 +22138,7 @@ app27.post("/", requireAdminSession, async (c) => {
     }
     const preflightLabels = (lookup.records[0].get("labels") ?? []).filter((l) => l !== "Trashed");
     const result = await restoreNode({ session, accountId, elementId });
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const labelSummary = (result.labels.length > 0 ? result.labels : preflightLabels).join(",");
     console.error(
       `[graph-page] restore account=${accountId} elementId=${elementId} labels=${labelSummary} result=ok ms=${elapsed}`
@@ -22044,7 +22150,7 @@ app27.post("/", requireAdminSession, async (c) => {
     };
     return c.json(response);
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     if (message.includes("already holds")) {
       console.error(
@@ -22075,7 +22181,7 @@ app28.get("/", requireAdminSession, async (c) => {
     return c.json({ error: "Account not found for session" }, 401);
   }
   const includeAgentActions = c.req.query("includeAgentActions") === "1";
-  const started = Date.now();
+  const started2 = Date.now();
   const session = getSession();
   try {
     const allowedSet = new Set(getTopLevelLabelAllowlist());
@@ -22094,14 +22200,14 @@ app28.get("/", requireAdminSession, async (c) => {
       if (b.relDegree !== a.relDegree) return b.relDegree - a.relDegree;
       return a.label.localeCompare(b.label);
     });
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const summary = labels.map((l) => `${l.label}:${l.nodeCount}:${l.relDegree}`).join(",");
     console.error(
       `[graph-page] labels-in-graph account=${accountId} agentActions=${includeAgentActions} labels=${summary} ms=${elapsed}`
     );
     return c.json({ labels });
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
       `[graph-page] labels-in-graph-rejected account=${accountId} reason="${message}" ms=${elapsed}`
@@ -22145,7 +22251,7 @@ app29.get("/", requireAdminSession, async (c) => {
     console.error('[graph-page] default-view-rejected reason="missing account or user context"');
     return c.json({ error: "Account and user context required for default view" }, 401);
   }
-  const started = Date.now();
+  const started2 = Date.now();
   const session = getSession();
   try {
     const result = await session.executeRead(async (tx) => {
@@ -22156,13 +22262,13 @@ app29.get("/", requireAdminSession, async (c) => {
     const rawIncludeTrashed = record?.get("includeTrashed");
     const labels = Array.isArray(rawLabels) ? rawLabels : [];
     const includeTrashed = rawIncludeTrashed === true;
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     console.error(
       `[graph-page] default-view-load account=${accountId} labels=${labels.join(",")} includeTrashed=${includeTrashed ? 1 : 0} ms=${elapsed}`
     );
     return c.json({ labels, includeTrashed });
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
       `[graph-page] default-view-rejected op=load account=${accountId} reason="${message}" ms=${elapsed}`
@@ -23126,7 +23232,7 @@ async function sample() {
 }
 var app38 = new Hono();
 app38.get("/", async (c) => {
-  const started = Date.now();
+  const started2 = Date.now();
   if (!inflight) {
     inflight = sample().finally(() => {
       inflight = null;
@@ -23134,7 +23240,7 @@ app38.get("/", async (c) => {
   }
   try {
     const snap = await inflight;
-    const ms = Date.now() - started;
+    const ms = Date.now() - started2;
     const fmt = (n) => n === null ? "null" : n.toFixed(3);
     console.log(
       `[system-stats] poll cpuPct=${fmt(snap.cpuPct)} memUsedPct=${fmt(snap.memUsedPct)} loadAvg1=${snap.loadAvg1.toFixed(2)} swapUsedPct=${fmt(snap.swapUsedPct)} platform=${snap.platform} ms=${ms}`
@@ -23347,7 +23453,7 @@ function managerLogFollowUrl(sessionId, opts) {
 }
 // server/routes/admin/linkedin-ingest.ts
-var TAG33 = "[linkedin-ingest-route]";
+var TAG34 = "[linkedin-ingest-route]";
 var UUID4 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 var ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/;
 var LINKEDIN_URL = /^https:\/\/www\.linkedin\.com\//;
@@ -23451,29 +23557,29 @@ app40.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(TAG33 + " rejected status=400 reason=schema:body-not-json");
+    console.error(TAG34 + " rejected status=400 reason=schema:body-not-json");
     return c.json({ ok: false, error: "schema", reason: "body-not-json" }, 400);
   }
   const v = validate(body);
   if (!v.ok) {
-    console.error(TAG33 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
+    console.error(TAG34 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
     return c.json({ ok: false, error: v.error, reason: v.reason, missing: v.missing }, v.status);
   }
   const envelope = v.envelope;
   const cacheKey = c.var.cacheKey ?? "";
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(TAG33 + " rejected status=500 reason=admin-account-not-resolved");
+    console.error(TAG34 + " rejected status=500 reason=admin-account-not-resolved");
     return c.json({ ok: false, error: "admin-account-not-resolved" }, 500);
   }
   const payloadBytes = JSON.stringify(envelope).length;
   console.log(
-    TAG33 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
+    TAG34 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
   );
   const initialMessage = buildInitialMessage(envelope);
   const spawnStart = Date.now();
   const sessionId = randomUUID13();
-  console.log(TAG33 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
+  console.log(TAG34 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -23482,12 +23588,12 @@ app40.post("/", requireAdminSession, async (c) => {
   });
   if ("error" in spawned) {
     console.error(
-      TAG33 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
+      TAG34 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
     );
     return c.json({ ok: false, error: "dispatch-failed", upstreamStatus: spawned.status, detail: spawned.error }, 502);
   }
   console.log(
-    TAG33 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
+    TAG34 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
   );
   return c.json({ ok: true, dispatchId: envelope.dispatchId, taskId: spawned.sessionId }, 202);
 });
@@ -23495,7 +23601,7 @@ var linkedin_ingest_default = app40;
 // server/routes/admin/post-turn-context.ts
 import neo4j3 from "neo4j-driver";
-var TAG34 = "[post-turn-context]";
+var TAG35 = "[post-turn-context]";
 var STRIPPED_PROPERTIES2 = /* @__PURE__ */ new Set([
   "embedding",
   "passwordHash",
@@ -23537,7 +23643,7 @@ var app41 = new Hono();
 app41.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr3(remoteAddr)) {
-    console.error(`${TAG34} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG35} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "post-turn-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -23546,7 +23652,7 @@ app41.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr3(t));
     if (offender !== void 0) {
-      console.error(`${TAG34} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG35} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "post-turn-context-loopback-only" }, 403);
     }
   }
@@ -23555,7 +23661,7 @@ app41.get("/", async (c) => {
   if (!sessionId) return c.json({ error: "sessionId required" }, 400);
   if (!accountId) return c.json({ error: "accountId required" }, 400);
   const session = getSession();
-  const started = Date.now();
+  const started2 = Date.now();
   try {
     const cypher = `
       MATCH (c:Conversation {sessionId: $sessionId, accountId: $accountId})
@@ -23576,18 +23682,18 @@ app41.get("/", async (c) => {
       sortKey: String(r.get("sortKey") ?? "")
     }));
     writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
-    const total = Date.now() - started;
+    const total = Date.now() - started2;
     console.log(
-      `${TAG34} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
+      `${TAG35} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
     );
     return c.json({
       writes: writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }))
     });
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG34} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
+      `${TAG35} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `post-turn-context unavailable: ${message}` }, 503);
   } finally {
@@ -23700,7 +23806,7 @@ function formatPreviousContext(writes) {
 }
 // server/routes/admin/public-session-context.ts
-var TAG35 = "[public-session-context]";
+var TAG36 = "[public-session-context]";
 function isLoopbackAddr4(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -23708,7 +23814,7 @@ var app42 = new Hono();
 app42.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr4(remoteAddr)) {
-    console.error(`${TAG35} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG36} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -23717,7 +23823,7 @@ app42.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr4(t));
     if (offender !== void 0) {
-      console.error(`${TAG35} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG36} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-context-loopback-only" }, 403);
     }
   }
@@ -23726,19 +23832,19 @@ app42.get("/", async (c) => {
   if (!sliceToken) return c.json({ error: "sliceToken required" }, 400);
   if (!accountId) return c.json({ error: "accountId required" }, 400);
   const session = getSession();
-  const started = Date.now();
+  const started2 = Date.now();
   try {
     const writes = await fetchSliceWrites(session, sliceToken, accountId);
-    const total = Date.now() - started;
+    const total = Date.now() - started2;
     console.log(
-      `${TAG35} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
+      `${TAG36} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
     );
     return c.json({ writes });
   } catch (err) {
-    const elapsed = Date.now() - started;
+    const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG35} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
+      `${TAG36} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `public-session-context unavailable: ${message}` }, 503);
   } finally {
@@ -23757,7 +23863,7 @@ function getWebchatGateway() {
 }
 // server/routes/admin/public-session-exit.ts
-var TAG36 = "[public-session-exit-route]";
+var TAG37 = "[public-session-exit-route]";
 function isLoopbackAddr5(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -23765,7 +23871,7 @@ var app43 = new Hono();
 app43.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr5(remoteAddr)) {
-    console.error(`${TAG36} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG37} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-exit-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -23774,7 +23880,7 @@ app43.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr5(t));
     if (offender !== void 0) {
-      console.error(`${TAG36} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG37} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-exit-loopback-only" }, 403);
     }
   }
@@ -23788,7 +23894,7 @@ app43.post("/", async (c) => {
   if (!sessionId) return c.json({ error: "sessionId required" }, 400);
   const gateway = getWebchatGateway();
   if (!gateway) {
-    console.error(`${TAG36} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
+    console.error(`${TAG37} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
     return c.json({ error: "webchat-gateway-unset" }, 503);
   }
   gateway.handlePublicSessionExit(sessionId);
@@ -23797,7 +23903,7 @@ app43.post("/", async (c) => {
 var public_session_exit_default = app43;
 // server/routes/admin/access-session-evict.ts
-var TAG37 = "[access-session-evict]";
+var TAG38 = "[access-session-evict]";
 function isLoopbackAddr6(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -23805,7 +23911,7 @@ var app44 = new Hono();
 app44.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr6(remoteAddr)) {
-    console.error(`${TAG37} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG38} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "access-session-evict-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -23814,7 +23920,7 @@ app44.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr6(t));
     if (offender !== void 0) {
-      console.error(`${TAG37} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG38} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "access-session-evict-loopback-only" }, 403);
     }
   }
@@ -23827,13 +23933,13 @@ app44.post("/", async (c) => {
   const grantId = typeof body.grantId === "string" ? body.grantId.trim() : "";
   if (!grantId) return c.json({ error: "grantId required" }, 400);
   const dropped = evictAccessSessionsByGrant(grantId);
-  console.log(`${TAG37} grantId=${grantId} dropped=${dropped}`);
+  console.log(`${TAG38} grantId=${grantId} dropped=${dropped}`);
   return c.json({ ok: true, dropped });
 });
 var access_session_evict_default = app44;
 // server/routes/admin/enrol-person.ts
-var TAG38 = "[enrol]";
+var TAG39 = "[enrol]";
 function isLoopbackAddr7(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -23842,7 +23948,7 @@ var app45 = new Hono();
 app45.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr7(remoteAddr)) {
-    console.error(`${TAG38} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG39} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "enrol-person-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -23851,7 +23957,7 @@ app45.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr7(t));
     if (offender !== void 0) {
-      console.error(`${TAG38} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG39} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "enrol-person-loopback-only" }, 403);
     }
   }
@@ -23876,7 +23982,7 @@ app45.post("/", async (c) => {
   }
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG38} op=person result=no-account-id`);
+    console.error(`${TAG39} op=person result=no-account-id`);
     return c.json({ error: "no-account-id" }, 500);
   }
   let personId;
@@ -23884,7 +23990,7 @@ app45.post("/", async (c) => {
     personId = await enrolPerson({ accountId, phone, email, agentSlug });
   } catch (err) {
     console.error(
-      `${TAG38} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG39} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "enrol-failed" }, 500);
   }
@@ -23894,11 +24000,11 @@ app45.post("/", async (c) => {
     if (g) grant = { grantId: g.grantId, status: g.status, contactValue: g.contactValue };
   } catch (err) {
     console.error(
-      `${TAG38} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG39} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
   console.log(
-    `${TAG38} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
+    `${TAG39} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
   );
   return c.json({ personId, grant }, 200);
 });
@@ -24760,7 +24866,7 @@ function toNum(v) {
 }
 // server/routes/admin/tasks-list.ts
-var TAG39 = "[task-timer]";
+var TAG40 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
 var app50 = new Hono();
@@ -24768,12 +24874,12 @@ app50.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG39} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG40} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   const cacheStart = Date.now();
   const cached3 = await getOrCompute("tasks-list", accountId, () => computeTaskList(accountId));
-  console.log(`${TAG39} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
+  console.log(`${TAG40} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
   if (cached3.value === null) {
     return c.json({ error: "tasks-list-failed" }, 500);
   }
@@ -24856,15 +24962,15 @@ async function computeTaskList(accountId) {
     const returned = result.records.length;
     if (returned < graphTotal) {
       console.error(
-        `${TAG39} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
+        `${TAG40} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
       );
     }
     console.log(
-      `${TAG39} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned}`
+      `${TAG40} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned}`
     );
     return { open, completed };
   } catch (err) {
-    console.error(`${TAG39} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG40} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   } finally {
     await session.close();
@@ -24874,7 +24980,7 @@ var tasks_list_default = app50;
 // server/routes/admin/task-timer-start.ts
 import { randomUUID as randomUUID14 } from "crypto";
-var TAG40 = "[task-timer]";
+var TAG41 = "[task-timer]";
 var app51 = new Hono();
 app51.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -24889,7 +24995,7 @@ app51.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG40} op=timer-start rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG41} op=timer-start rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -24900,7 +25006,7 @@ app51.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (target.records.length === 0) {
-      console.error(`${TAG40} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
+      console.error(`${TAG41} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const open = await session.run(
@@ -24912,7 +25018,7 @@ app51.post("/", requireAdminSession, async (c) => {
     const priorEntryId = open.records[0]?.get("entryId");
     const priorStartedAt = open.records[0]?.get("startedAt");
     if (priorEntryId) {
-      console.log(`${TAG40} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
+      console.log(`${TAG41} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: true, entryId: priorEntryId, startedAt: priorStartedAt });
     }
@@ -24923,11 +25029,11 @@ app51.post("/", requireAdminSession, async (c) => {
        CREATE (te)-[:LOGGED_AGAINST]->(t)`,
       { taskId, accountId, entryId, now }
     );
-    console.log(`${TAG40} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
+    console.log(`${TAG41} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: true, entryId, startedAt: now });
   } catch (err) {
-    console.error(`${TAG40} op=start error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG41} op=start error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-start-failed" }, 500);
   } finally {
     await session.close();
@@ -24937,7 +25043,7 @@ var task_timer_start_default = app51;
 // server/routes/admin/task-timer-stop.ts
 import neo4j5 from "neo4j-driver";
-var TAG41 = "[task-timer]";
+var TAG42 = "[task-timer]";
 var app52 = new Hono();
 app52.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -24952,7 +25058,7 @@ app52.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG41} op=timer-stop rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG42} op=timer-stop rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -24973,7 +25079,7 @@ app52.post("/", requireAdminSession, async (c) => {
         { taskId, accountId }
       );
       const secondsLogged2 = toNum(cur.records[0]?.get("secondsLogged"));
-      console.log(`${TAG41} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
+      console.log(`${TAG42} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: false, seconds: 0, secondsLogged: secondsLogged2 });
     }
@@ -24997,12 +25103,12 @@ app52.post("/", requireAdminSession, async (c) => {
     const sumEntries = toNum(verify.records[0]?.get("sumEntries"));
     const sumAdjustments = toNum(verify.records[0]?.get("sumAdjustments"));
     const secondsLogged = toNum(verify.records[0]?.get("secondsLogged"));
-    console.log(`${TAG41} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
-    console.log(`${TAG41} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
+    console.log(`${TAG42} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
+    console.log(`${TAG42} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: false, seconds, secondsLogged });
   } catch (err) {
-    console.error(`${TAG41} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG42} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-stop-failed" }, 500);
   } finally {
     await session.close();
@@ -25011,7 +25117,7 @@ app52.post("/", requireAdminSession, async (c) => {
 var task_timer_stop_default = app52;
 // server/routes/admin/task-complete.ts
-var TAG42 = "[task-timer]";
+var TAG43 = "[task-timer]";
 var app53 = new Hono();
 app53.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -25026,7 +25132,7 @@ app53.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG42} op=complete rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG43} op=complete rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -25042,11 +25148,11 @@ app53.post("/", requireAdminSession, async (c) => {
       return c.json({ error: "task-not-found" }, 404);
     }
     const secondsLogged = toNum(result.records[0].get("secondsLogged"));
-    console.log(`${TAG42} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
+    console.log(`${TAG43} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, status: "completed", secondsLogged });
   } catch (err) {
-    console.error(`${TAG42} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG43} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-complete-failed" }, 500);
   } finally {
     await session.close();
@@ -25057,7 +25163,7 @@ var task_complete_default = app53;
 // server/routes/admin/task-time-adjust.ts
 import { randomUUID as randomUUID15 } from "crypto";
 import neo4j6 from "neo4j-driver";
-var TAG43 = "[task-time-adjust]";
+var TAG44 = "[task-time-adjust]";
 var app54 = new Hono();
 app54.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -25067,23 +25173,23 @@ app54.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(`${TAG43} op=reject reason=bad-json`);
+    console.error(`${TAG44} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG43} op=time-adjust rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG44} op=time-adjust rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const newSeconds = body.newSeconds;
   if (typeof newSeconds !== "number" || !Number.isInteger(newSeconds) || newSeconds < 0) {
-    console.error(`${TAG43} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
+    console.error(`${TAG44} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
     return c.json({ error: "newSeconds must be a non-negative integer" }, 400);
   }
   const adjustmentId = randomUUID15();
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  console.log(`${TAG43} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
+  console.log(`${TAG44} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
   const session = getSession();
   try {
     const guard = await session.run(
@@ -25093,12 +25199,12 @@ app54.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (guard.records.length === 0) {
-      console.error(`${TAG43} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG44} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const openCount = toNum(guard.records[0].get("openCount"));
     if (openCount > 0) {
-      console.error(`${TAG43} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG44} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-timer-running" }, 409);
     }
     const previousSeconds = toNum(guard.records[0].get("previousSeconds"));
@@ -25124,11 +25230,11 @@ app54.post("/", requireAdminSession, async (c) => {
       }
     );
     const secondsLoggedAfter = toNum(write.records[0]?.get("secondsLoggedAfter"));
-    console.log(`${TAG43} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
+    console.log(`${TAG44} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, secondsLogged: secondsLoggedAfter });
   } catch (err) {
-    console.error(`${TAG43} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG44} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-time-adjust-failed" }, 500);
   } finally {
     await session.close();
@@ -25221,7 +25327,7 @@ async function resolveAssignableAdmins(accountId, accountsDir = ACCOUNTS_DIR) {
 }
 // server/routes/admin/task-assign.ts
-var TAG44 = "[task-assign]";
+var TAG45 = "[task-assign]";
 var app55 = new Hono();
 app55.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -25236,7 +25342,7 @@ app55.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG44} op=assign rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG45} op=assign rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const rawAssignee = body.assigneeUserId;
@@ -25248,7 +25354,7 @@ app55.post("/", requireAdminSession, async (c) => {
     const { ids } = await resolveAllowedAssigneeIds(accountId);
     if (!ids.has(assigneeUserId)) {
       console.error(
-        `${TAG44} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
+        `${TAG45} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
       );
       return c.json({ error: "assignee-not-in-roster" }, 403);
     }
@@ -25270,7 +25376,7 @@ app55.post("/", requireAdminSession, async (c) => {
         `MATCH (t:Task {taskId: $taskId, accountId: $accountId}) SET t.updatedAt = $now`,
         { taskId, accountId, now }
       );
-      console.log(`${TAG44} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
+      console.log(`${TAG45} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, assigneeUserId: null, assigneeName: null });
     }
@@ -25286,7 +25392,7 @@ app55.post("/", requireAdminSession, async (c) => {
     );
     if (set.records.length === 0) {
       console.error(
-        `${TAG44} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
+        `${TAG45} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
       );
       return c.json({ error: "assignee-no-admin-node" }, 409);
     }
@@ -25294,12 +25400,12 @@ app55.post("/", requireAdminSession, async (c) => {
     const family = set.records[0].get("familyName") ?? null;
     const assigneeName = given && given.trim().length > 0 ? family && family.trim().length > 0 ? `${given.trim()} ${family.trim()}` : given.trim() : null;
     console.log(
-      `${TAG44} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
+      `${TAG45} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
     );
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, assigneeUserId, assigneeName });
   } catch (err) {
-    console.error(`${TAG44} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG45} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-assign-failed" }, 500);
   } finally {
     await session.close();
@@ -25308,21 +25414,21 @@ app55.post("/", requireAdminSession, async (c) => {
 var task_assign_default = app55;
 // server/routes/admin/admin-users-list.ts
-var TAG45 = "[admin-users]";
+var TAG46 = "[admin-users]";
 var app56 = new Hono();
 app56.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG45} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG46} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   try {
     const users = await resolveAssignableAdmins(accountId);
-    console.log(`${TAG45} op=list account=${accountId} count=${users.length}`);
+    console.log(`${TAG46} op=list account=${accountId} count=${users.length}`);
     return c.json({ ok: true, users });
   } catch (err) {
-    console.error(`${TAG45} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG46} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "admin-users-list-failed" }, 500);
   }
 });
@@ -25331,7 +25437,7 @@ var admin_users_list_default = app56;
 // server/routes/admin/activity.ts
 import { readdirSync as readdirSync26 } from "fs";
 var app57 = new Hono();
-var TAG46 = "[activity]";
+var TAG47 = "[activity]";
 function resolveHouseAccountId(accounts) {
   const houses = accounts.filter((a) => a.config.role === "house");
   if (houses.length === 1) return { accountId: houses[0].accountId, reason: "house" };
@@ -25360,19 +25466,19 @@ app57.get("/", requireAdminSession, async (c) => {
   const house = resolveHouseAccountId(valid);
   const isHouse = caller2 !== null && house.accountId !== null && caller2 === house.accountId;
   console.log(
-    `${TAG46} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
+    `${TAG47} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
   );
   if (!isHouse) {
     const reason = house.accountId === null ? house.reason : "not-house";
     console.error(
-      `${TAG46} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
+      `${TAG47} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
     );
     return c.json({ error: "house-only" }, 403);
   }
-  console.log(`${TAG46} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
+  console.log(`${TAG47} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
   const onDisk = countAccountDirsOnDisk();
   console.log(
-    `${TAG46} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
+    `${TAG47} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
   );
   const start = Date.now();
   let res;
@@ -25388,17 +25494,17 @@ app57.get("/", requireAdminSession, async (c) => {
     });
   } catch (err) {
     console.error(
-      `${TAG46} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG47} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
     );
     return c.json({ error: "manager-unreachable" }, 502);
   }
   if (res.status !== 200) {
-    console.error(`${TAG46} op=manager-fail req=${req} reason=status status=${res.status}`);
+    console.error(`${TAG47} op=manager-fail req=${req} reason=status status=${res.status}`);
     return c.json({ error: `manager-status-${res.status}` }, 502);
   }
   const body = await res.json().catch(() => null);
   if (!body || !Array.isArray(body.rows)) {
-    console.error(`${TAG46} op=manager-fail req=${req} reason=bad-json`);
+    console.error(`${TAG47} op=manager-fail req=${req} reason=bad-json`);
     return c.json({ error: "manager-bad-json" }, 502);
   }
   const rows = body.rows;
@@ -25409,10 +25515,10 @@ app57.get("/", requireAdminSession, async (c) => {
   const ageNull = rows.filter((r) => r.ageMs === null).length;
   const sidecarNull = rows.filter((r) => r.sidecarMissing).length;
   console.log(
-    `${TAG46} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
+    `${TAG47} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
   );
   console.log(
-    `${TAG46} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
+    `${TAG47} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
   );
   const names = {};
   await Promise.all(
@@ -25431,7 +25537,7 @@ app57.get("/", requireAdminSession, async (c) => {
     return acc;
   }, {});
   console.log(
-    `${TAG46} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
+    `${TAG47} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
   );
   return c.json({
     rows,
@@ -25515,7 +25621,7 @@ app58.route("/activity", activity_default);
 var admin_default = app58;
 // server/routes/access/verify-token.ts
-var TAG47 = "[access-verify]";
+var TAG48 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
 var app59 = new Hono();
@@ -25534,39 +25640,39 @@ app59.post("/", async (c) => {
   }
   const rateMsg = checkAccessRateLimit(ip, agentSlug);
   if (rateMsg) {
-    console.error(`${TAG47} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
+    console.error(`${TAG48} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
     return c.json({ error: rateMsg }, 429);
   }
   const grant = await findGrantByMagicToken(token);
   if (!grant) {
     recordAccessFailedAttempt(ip, agentSlug);
-    console.error(`${TAG47} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
+    console.error(`${TAG48} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.agentSlug !== agentSlug) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
+      `${TAG48} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
     );
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.status === "expired" || grant.status === "revoked") {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
+      `${TAG48} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (grant.expiresAt !== null && grant.expiresAt < Date.now()) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
+      `${TAG48} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (!grant.sliceToken) {
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
+      `${TAG48} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
     );
     return c.json({ error: "grant-misconfigured" }, 500);
   }
@@ -25582,12 +25688,12 @@ app59.post("/", async (c) => {
     await consumeMagicTokenAndActivate(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG48} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "verification-failed" }, 500);
   }
   clearAccessRateLimit(ip, agentSlug);
-  console.log(`${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
+  console.log(`${TAG48} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
   console.log(
     `${MINT_TAG} grantId=${grant.grantId} sliceToken=${grant.sliceToken.slice(0, 8)} agentSlug=${agentSlug} personId=${grant.personId ?? "none"}`
   );
@@ -25663,7 +25769,7 @@ async function sendMagicLinkEmail(payload) {
 }
 // server/routes/access/request-magic-link.ts
-var TAG48 = "[access-request-link]";
+var TAG49 = "[access-request-link]";
 var app60 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
 app60.post("/", async (c) => {
@@ -25680,18 +25786,18 @@ app60.post("/", async (c) => {
   }
   const rateMsg = checkRequestLinkRateLimit(contactValue);
   if (rateMsg) {
-    console.error(`${TAG48} contactValue=${maskContact(contactValue)} result=rate-limited`);
+    console.error(`${TAG49} contactValue=${maskContact(contactValue)} result=rate-limited`);
     return c.json({ error: rateMsg }, 429);
   }
   recordRequestLinkAttempt(contactValue);
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG48} contactValue=${maskContact(contactValue)} result=no-account-id`);
+    console.error(`${TAG49} contactValue=${maskContact(contactValue)} result=no-account-id`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   const grant = await findActiveGrantByContact(contactValue, agentSlug, accountId);
   if (!grant) {
-    console.log(`${TAG48} contactValue=${maskContact(contactValue)} result=notfound`);
+    console.log(`${TAG49} contactValue=${maskContact(contactValue)} result=notfound`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   let token;
@@ -25699,7 +25805,7 @@ app60.post("/", async (c) => {
     token = await generateNewMagicToken(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG48} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG49} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
@@ -25731,12 +25837,12 @@ app60.post("/", async (c) => {
   });
   if (!sendResult.ok) {
     console.error(
-      `${TAG48} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
+      `${TAG49} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   console.log(
-    `${TAG48} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
+    `${TAG49} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
@@ -26822,7 +26928,7 @@ import { stat as stat8, readFile as readFile9, realpath } from "fs/promises";
 import { join as join44, resolve as resolve38, sep as sep10 } from "path";
 import { Readable as Readable3 } from "stream";
 var app68 = new Hono();
-var TAG49 = "[portal-fetch]";
+var TAG50 = "[portal-fetch]";
 async function verifySignature(secret, accountId, relPath, expiresAtMs, signature, nowMs) {
   if (!secret || !signature) return false;
   if (!Number.isFinite(expiresAtMs) || expiresAtMs <= nowMs) return false;
@@ -26877,14 +26983,14 @@ async function readAccountSecret(accountId) {
   try {
     text = await readFile9(path3, "utf8");
   } catch {
-    console.error(`${TAG49} op=no-secret account="${accountId}" path="${path3}"`);
+    console.error(`${TAG50} op=no-secret account="${accountId}" path="${path3}"`);
     return "";
   }
   for (const line of text.split("\n")) {
     const m = line.match(/^PORTAL_FETCH_SECRET=(.*)$/);
     if (m) return m[1].trim();
   }
-  console.error(`${TAG49} op=no-secret account="${accountId}" reason=key-absent path="${path3}"`);
+  console.error(`${TAG50} op=no-secret account="${accountId}" reason=key-absent path="${path3}"`);
   return "";
 }
 function isValidAccountId2(value) {
@@ -26944,16 +27050,16 @@ async function handle(c, headOnly) {
   const sig = c.req.query("sig") ?? "";
   const owner = c.req.query("owner") ?? "";
   console.log(
-    `${TAG49} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
+    `${TAG50} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
   );
   if (!isValidAccountId2(accountId)) {
-    console.error(`${TAG49} op=denied account=${q(accountId)} reason=account-id`);
+    console.error(`${TAG50} op=denied account=${q(accountId)} reason=account-id`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const secret = await readAccountSecret(accountId);
   const verified = owner ? await verifyOwnUploadSignature(secret, accountId, owner, relPath, exp, sig, Date.now()) : await verifySignature(secret, accountId, relPath, exp, sig, Date.now());
   if (!verified) {
-    console.error(`${TAG49} op=denied account=${q(accountId)} reason=secret`);
+    console.error(`${TAG50} op=denied account=${q(accountId)} reason=secret`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const target = await resolveFetchTarget(
@@ -26963,14 +27069,14 @@ async function handle(c, headOnly) {
   );
   if (!target.ok) {
     const op = target.reason === "enoent" ? "miss" : "denied";
-    console.error(`${TAG49} op=${op} account=${accountId} reason=${target.reason}`);
+    console.error(`${TAG50} op=${op} account=${accountId} reason=${target.reason}`);
     return c.json({ ok: false, error: "not found" }, 404);
   }
   if (headOnly) {
-    console.log(`${TAG49} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
+    console.log(`${TAG50} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
     return c.body(null, 200);
   }
-  console.log(`${TAG49} op=served account=${accountId} bytes=${target.sizeBytes}`);
+  console.log(`${TAG50} op=served account=${accountId} bytes=${target.sizeBytes}`);
   return new Response(Readable3.toWeb(createReadStream3(target.absolute)), {
     status: 200,
     headers: {
@@ -26989,7 +27095,7 @@ app68.on("HEAD", "/fetch", (c) => handle(c, true));
 var portal_fetch_default = app68;
 // app/lib/timeentry-census.ts
-var TAG50 = "[timeentry-census]";
+var TAG51 = "[timeentry-census]";
 function reconcileTimeEntries(rows, now, horizonMs) {
   const openEntries = rows.openEntries.length;
   let oldestOpenAgeMs = 0;
@@ -27029,12 +27135,12 @@ async function runTimeEntryCensusOnce(session, now, horizonMs) {
       sumAdjustments: toNum(r.get("sumAdjustments"))
     }));
     const finding = reconcileTimeEntries({ openEntries, taskSums }, now, horizonMs);
-    const line = `${TAG50} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
+    const line = `${TAG51} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
     if (finding.alarm) console.error(`${line} alarm=true`);
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG50} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG51} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -27048,13 +27154,13 @@ function startTimeEntryCensus(openSession, opts = {}) {
     try {
       session = openSession();
     } catch (err) {
-      console.error(`${TAG50} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG51} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
       return;
     }
     try {
       await runTimeEntryCensusOnce(session, Date.now(), horizonMs);
     } catch (err) {
-      console.error(`${TAG50} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG51} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
     } finally {
       try {
         await session.close();
@@ -27115,7 +27221,7 @@ function formatCensusLine(f) {
 }
 // app/lib/ledger-census.ts
-var TAG51 = "[ledger-census]";
+var TAG52 = "[ledger-census]";
 var DAY_MS = 864e5;
 function countWriteRejects24h(logDir, now) {
   let entries2;
@@ -27191,7 +27297,7 @@ async function runLedgerCensusOnce(session, now) {
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG51} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG52} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -27204,7 +27310,7 @@ function startLedgerCensus(openSession, opts = {}) {
       session = openSession();
     } catch (err) {
       console.error(
-        `${TAG51} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG52} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
       return;
     }
@@ -27212,7 +27318,7 @@ function startLedgerCensus(openSession, opts = {}) {
       await runLedgerCensusOnce(session, Date.now());
     } catch (err) {
       console.error(
-        `${TAG51} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG52} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
     } finally {
       try {
@@ -27230,7 +27336,7 @@ function startLedgerCensus(openSession, opts = {}) {
 }
 // app/lib/conversation-audit.ts
-var TAG52 = "[conversation-audit]";
+var TAG53 = "[conversation-audit]";
 async function runConversationAudit() {
   const session = getSession();
   try {
@@ -27267,12 +27373,12 @@ async function runConversationAudit() {
       multiAnchored: Number(multiRec?.get("multiAnchored") ?? 0)
     };
     console.error(
-      `${TAG52} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
+      `${TAG53} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
     );
     return result;
   } catch (err) {
     const reason = err instanceof Error ? `${err.name}:${err.message.slice(0, 200)}` : String(err).slice(0, 200);
-    console.error(`${TAG52} op=failed reason=${reason}`);
+    console.error(`${TAG53} op=failed reason=${reason}`);
     return null;
   } finally {
     await session.close();
@@ -28769,10 +28875,12 @@ var WebchatGateway = class _WebchatGateway {
         resolve: (r) => {
           clearTimeout(timer);
           this.pendingPrompts.delete(k);
+          this.deps.onPointerChange?.(p.key);
           resolve46(r);
         }
       });
       console.error(`[webchat:perm] op=open key=${keyDisplay(p.key)} id=${p.requestId} tool=${p.toolName}`);
+      this.deps.onPointerChange?.(p.key);
     });
   }
   /** Task 940 — the operator's Allow/Deny answer for an open prompt. Returns
@@ -29147,7 +29255,7 @@ function toolResultText(content) {
   ).join("");
 }
 function startFollower(opts) {
-  const abort = new AbortController();
+  const abort2 = new AbortController();
   const { entry, tag } = opts;
   void (async () => {
     try {
@@ -29159,14 +29267,14 @@ function startFollower(opts) {
       for (; ; ) {
         res = await fetch(
           managerLogFollowUrl(entry.sessionId, { boundary: opts.suppressResumeReplay === true }),
-          { signal: abort.signal }
+          { signal: abort2.signal }
         );
         console.error(`${tag} follower-connect sessionId=${sid} status=${res.status}`);
         if (res.status === 202) {
           attempt += 1;
           await res.body?.cancel().catch(() => {
           });
-          if (abort.signal.aborted) return;
+          if (abort2.signal.aborted) return;
           if (Date.now() >= deadline) {
             console.error(`${tag} follower-give-up sessionId=${sid} reason=pending-timeout attempts=${attempt}`);
             opts.onError?.("follow-pending-timeout");
@@ -29174,7 +29282,7 @@ function startFollower(opts) {
           }
           console.error(`${tag} follower-retry sessionId=${sid} attempt=${attempt} reason=pending`);
           await new Promise((r) => setTimeout(r, retryMs));
-          if (abort.signal.aborted) return;
+          if (abort2.signal.aborted) return;
           continue;
         }
         break;
@@ -29194,7 +29302,7 @@ function startFollower(opts) {
       let suppressing = opts.suppressResumeReplay === true;
       let discardedTurns = 0;
       let discardedFileTools = 0;
-      while (!abort.signal.aborted) {
+      while (!abort2.signal.aborted) {
         const { value, done } = await reader.read();
         if (done) break;
         buffered += decoder.decode(value, { stream: true });
@@ -29310,14 +29418,14 @@ function startFollower(opts) {
         }
       }
     } catch (err) {
-      if (!abort.signal.aborted) {
+      if (!abort2.signal.aborted) {
         opts.onError?.(`follower-error: ${err instanceof Error ? err.message : String(err)}`);
       }
     } finally {
       opts.onClose();
     }
   })();
-  return abort;
+  return abort2;
 }
 async function fanOut(subscribers, text, onError, tag) {
   const callbacks = Array.from(subscribers);
@@ -29425,14 +29533,14 @@ function makeFileDelivery(opts) {
 }
 // app/lib/webchat/file-delivery.ts
-var TAG53 = "[webchat-adaptor]";
+var TAG54 = "[webchat-adaptor]";
 function platformRoot2() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeWebchatSendFile(entry) {
   return async (filePath) => {
     if (!entry.accountId) {
-      console.error(`${TAG53} file-delivery reject reason=no-account sender=${entry.senderId}`);
+      console.error(`${TAG54} file-delivery reject reason=no-account sender=${entry.senderId}`);
       return { ok: false, error: "no-account" };
     }
     const accountDir = resolve41(platformRoot2(), "..", "data/accounts", entry.accountId);
@@ -29440,14 +29548,14 @@ function makeWebchatSendFile(entry) {
       const resolved = realpathSync9(filePath);
       const accountResolved = realpathSync9(accountDir);
       if (!resolved.startsWith(accountResolved + "/")) {
-        console.error(`${TAG53} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
+        console.error(`${TAG54} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
         return { ok: false, error: "outside-account" };
       }
       return { ok: true };
     } catch (err) {
       const code = err.code;
       console.error(
-        `${TAG53} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
+        `${TAG54} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
       );
       return { ok: false, error: code === "ENOENT" ? "not-found" : "path-error" };
     }
@@ -29456,7 +29564,7 @@ function makeWebchatSendFile(entry) {
 function makeWebchatFileDelivery(entry) {
   return makeFileDelivery({
     entry,
-    tag: TAG53,
+    tag: TAG54,
     channel: "webchat",
     sendFile: makeWebchatSendFile(entry),
     deferUntilVerdict: true
@@ -29518,7 +29626,7 @@ function buildPublicWebchatSpawnRequest(input) {
 }
 // app/lib/whatsapp/inbound/file-delivery-bridge.ts
-var TAG54 = "[whatsapp-adaptor]";
+var TAG55 = "[whatsapp-adaptor]";
 var SEND_USER_FILE2 = "SendUserFile";
 var WHATSAPP_SEND_DOCUMENT = "whatsapp-send-document";
 function platformRoot3() {
@@ -29536,7 +29644,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
     });
     if (result.ok) return { ok: true };
     console.error(
-      `${TAG54} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
+      `${TAG55} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
     );
     return { ok: false, error: result.error };
   };
@@ -29544,7 +29652,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
 function makeWhatsAppFileDelivery(entry, maxyAccountId) {
   const shared = makeFileDelivery({
     entry,
-    tag: TAG54,
+    tag: TAG55,
     channel: "whatsapp",
     sendFile: makeWhatsAppSendFile(entry, maxyAccountId)
   });
@@ -29579,7 +29687,7 @@ function makeWhatsAppFileDelivery(entry, maxyAccountId) {
         if (!delivered) {
           const fileField = call.filePath !== void 0 ? ` file=${call.filePath}` : "";
           console.error(
-            `${TAG54} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+            `${TAG55} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
           );
         }
       }
@@ -30000,7 +30108,7 @@ function buildTelegramSpawnRequest(input) {
 import { realpathSync as realpathSync10 } from "fs";
 import { readFile as readFile11, stat as stat10 } from "fs/promises";
 import { resolve as resolve42, basename as basename13 } from "path";
-var TAG55 = "[telegram:outbound]";
+var TAG56 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
   const { botToken, chatId, filePath, caption, maxyAccountId, platformRoot: platformRoot5 } = input;
@@ -30017,10 +30125,10 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG55} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG56} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 500, error: `Account directory not resolvable for ${maxyAccountId}` };
     }
-    console.error(`${TAG55} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG56} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   let resolvedPath;
@@ -30029,14 +30137,14 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG55} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG56} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG55} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG56} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   if (!resolvedPath.startsWith(accountResolved + "/")) {
-    console.error(`${TAG55} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+    console.error(`${TAG56} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
     return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
   }
   const fileStat = await stat10(resolvedPath);
@@ -30069,13 +30177,13 @@ async function sendTelegramDocument(input) {
     error = e instanceof Error ? e.message : String(e);
   }
   console.error(
-    `${TAG55} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok}` + (messageId !== void 0 ? ` id=${messageId}` : "")
+    `${TAG56} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok}` + (messageId !== void 0 ? ` id=${messageId}` : "")
   );
   return ok ? { ok: true, messageId } : { ok: false, status: 500, error };
 }
 // app/lib/telegram/outbound/file-delivery.ts
-var TAG56 = "[telegram:outbound]";
+var TAG57 = "[telegram:outbound]";
 function platformRoot4() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
@@ -30087,11 +30195,11 @@ function makeTelegramSendFile(entry) {
       botToken = (entry.role === "admin" ? tg?.adminBotToken : tg?.publicBotToken) ?? null;
     }
     if (!botToken) {
-      console.error(`${TAG56} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG57} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-bot-token" };
     }
     if (entry.replyTarget == null) {
-      console.error(`${TAG56} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG57} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-reply-target" };
     }
     const result = await sendTelegramDocument({
@@ -30108,7 +30216,7 @@ function makeTelegramSendFile(entry) {
 function makeTelegramFileDelivery(entry) {
   return makeFileDelivery({
     entry,
-    tag: TAG56,
+    tag: TAG57,
     channel: "telegram",
     sendFile: makeTelegramSendFile(entry)
   });
@@ -30149,7 +30257,7 @@ function startTelegramNativeFileFollower(input) {
 // app/lib/channel-pty-bridge/public-session-end-review.ts
 import { randomUUID as randomUUID16 } from "crypto";
-var TAG57 = "[public-session-review]";
+var TAG58 = "[public-session-review]";
 var CONSUMED_CAP = 500;
 var consumed = /* @__PURE__ */ new Set();
 function consumeOnce(sessionId) {
@@ -30176,7 +30284,7 @@ async function fetchJsonl(sessionId) {
     return await res.text();
   } catch (err) {
     console.error(
-      `${TAG57} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG58} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return null;
   }
@@ -30200,7 +30308,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     const res = await fetch(url);
     if (!res.ok) {
       console.error(
-        `${TAG57} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
+        `${TAG58} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
       );
       return [];
     }
@@ -30208,7 +30316,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     return Array.isArray(body.writes) ? body.writes : [];
   } catch (err) {
     console.error(
-      `${TAG57} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG58} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return [];
   }
@@ -30237,7 +30345,7 @@ function composeInitialMessage(input) {
 }
 async function dispatchReviewer(input, initialMessage) {
   const sessionId = randomUUID16();
-  console.log(`${TAG57} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
+  console.log(`${TAG58} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -30257,21 +30365,21 @@ async function firePublicSessionEndReview(input) {
   const dispatchedAt = Date.now();
   if (consumed.has(input.sessionId)) {
     console.log(
-      `${TAG57} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const jsonl = await fetchJsonl(input.sessionId);
   if (!jsonl) {
     console.log(
-      `${TAG57} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
+      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
     );
     return;
   }
   const operatorTurns = countOperatorTurns(jsonl);
   if (operatorTurns === 0) {
     console.log(
-      `${TAG57} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
+      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
     );
     return;
   }
@@ -30285,19 +30393,19 @@ async function firePublicSessionEndReview(input) {
   });
   if (!consumeOnce(input.sessionId)) {
     console.log(
-      `${TAG57} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const dispatched = await dispatchReviewer(input, initialMessage);
   if (!dispatched.ok) {
     console.error(
-      `${TAG57} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
+      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
     );
     return;
   }
   console.log(
-    `${TAG57} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
+    `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
   );
 }
@@ -30752,6 +30860,7 @@ watchFile(ALIAS_DOMAINS_PATH, { interval: 2e3 }, () => {
   console.log(`[alias-domains] reloaded ${updated.size} alias domain(s): ${[...updated].join(", ")}`);
 });
 attachRouteCacheWatchers();
+startManagerEventsSubscriber();
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
@@ -30959,6 +31068,13 @@ registerLoop({
 });
 console.log("[1789-sequel] op=cluster-complete items=[1835,1836,1837,1839]");
 var webchatGateway = new WebchatGateway({
+  // Task 1997 — a permission prompt opening or closing changes the pointer with
+  // no filesystem event behind it, so it is pushed here. Scoped to the key's own
+  // account; an unresolvable key is skipped rather than broadcast install-wide.
+  onPointerChange: (key) => {
+    const acct = getAccountIdForSession(key);
+    if (acct) notify("webchat-pointer", acct);
+  },
   fetchStandingRules: fetchAccountStandingRules,
   gatewayUrl: webchatGatewayUrl(),
   serverPath: webchatServerPath(),