@rubytech/create-maxy-code 0.1.547 → 0.1.548

package/payload/server/server.js

@@ -4,10 +4,14 @@ import {
   HTTPException,
   Hono,
   HtmlEscapedCallbackPhase,
+  MANIFEST_CONTENT_TYPE,
   PUBLIC_ALLOWED_EXACT,
   PUBLIC_ALLOWED_PREFIXES,
+  PWA_SURFACES,
+  SW_CONTENT_TYPE,
   accessPasswordCollides,
   autoDeliverPremiumPlugins,
+  buildManifest,
   canAccessAdmin,
   checkRateLimit,
   classifyHost,
@@ -33,9 +37,13 @@ import {
   isOperatorHost,
   isPasswordValid,
   isPublicPathAllowed,
+  isRemoteAuthBypassPath,
   isRemoteAuthConfigured,
   migrateLegacyRemotePassword,
   parseScreencastEvent,
+  pwaCensus,
+  pwaHeadTags,
+  pwaSurfaceForShell,
   reconcileEnabledPluginsForAccounts,
   recordFailedAttempt,
   registerSession,
@@ -62,7 +70,7 @@ import {
   verifyRemotePassword,
   vncLog,
   walkPremiumBundles
-} from "./chunk-Q33KT7YJ.js";
+} from "./chunk-JOVREC6E.js";
 import {
   ACCOUNTS_ROOT,
   DATA_ROOT,
@@ -203,7 +211,7 @@ import {
   waitForConnection,
   warnNonUuidAccount,
   writeChatMetadataMerged
-} from "./chunk-MHNHG3GL.js";
+} from "./chunk-G6ULACHG.js";
 import {
   ACCOUNTS_DIR,
   AGENT_SLUG_PATTERN,
@@ -230,6 +238,7 @@ import {
   deleteAgentProjection,
   deleteConversation,
   embed,
+  embedForWrite,
   ensureConversation,
   ensureSessionConversation,
   fetchAccountName,
@@ -267,7 +276,7 @@ import {
   verifyAndGetConversationUpdatedAt,
   verifyConversationOwnership,
   writeAdminUserAndPerson
-} from "./chunk-WGMIUXXG.js";
+} from "./chunk-SKYZG6OT.js";
 import {
   D1_MAX_SQL_STATEMENT_BYTES,
   D1_QUERY_MAX_BODY_BYTES,
@@ -1827,10 +1836,10 @@ var require_dist6 = __commonJS({
 });
 
 // server/index.ts
-import { readFileSync as readFileSync47, existsSync as existsSync51, watchFile, readdirSync as readdirSync30, statSync as statSync26 } from "fs";
+import { readFileSync as readFileSync47, existsSync as existsSync51, watchFile, readdirSync as readdirSync30, statSync as statSync27 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash7 } from "crypto";
-import { resolve as resolve45, join as join54, basename as basename17 } from "path";
+import { resolve as resolve45, join as join55, basename as basename18 } from "path";
 import { homedir as homedir4 } from "os";
 
 // server/lib/route-cache-watchers.ts
@@ -2637,99 +2646,6 @@ async function resolveNotifyAccountName(accountId, fetch2) {
   return name;
 }
 
-// app/lib/pwa.ts
-var PWA_SURFACES = [
-  {
-    surface: "admin",
-    shellFile: "index.html",
-    manifestPath: "/manifest-admin.webmanifest",
-    nameSuffix: "",
-    startUrl: "/",
-    scope: "/",
-    id: "/?pwa=admin"
-  },
-  {
-    surface: "operator",
-    shellFile: "operator.html",
-    manifestPath: "/manifest-operator.webmanifest",
-    nameSuffix: " Operator",
-    startUrl: "/",
-    scope: "/",
-    id: "/?pwa=operator"
-  },
-  {
-    surface: "chat",
-    shellFile: "chat.html",
-    manifestPath: "/manifest-chat.webmanifest",
-    nameSuffix: " Chat",
-    startUrl: "/chat",
-    scope: "/chat",
-    id: "/chat?pwa=chat"
-  }
-];
-var MANIFEST_CONTENT_TYPE = "application/manifest+json";
-var SW_CONTENT_TYPE = "application/javascript";
-function pwaSurfaceForShell(file) {
-  return PWA_SURFACES.find((s) => s.shellFile === file);
-}
-function buildManifest(s, b) {
-  const name = `${b.productName}${s.nameSuffix}`;
-  return {
-    id: s.id,
-    name,
-    short_name: name,
-    start_url: s.startUrl,
-    scope: s.scope,
-    display: "standalone",
-    theme_color: b.themeColor,
-    background_color: b.backgroundColor,
-    // Explicit 192/512 `any` icons (iOS/macOS composite transparency onto black,
-    // so these are opaque) plus a wider-safe-zone `maskable` entry for Android's
-    // circular crop. background_color sets only the splash; the tile background
-    // is baked into the PNGs.
-    icons: [
-      { src: b.appIcon192, sizes: "192x192", purpose: "any" },
-      { src: b.appIcon512, sizes: "512x512", purpose: "any" },
-      { src: b.maskableIcon, sizes: "512x512", purpose: "maskable" }
-    ]
-  };
-}
-function escAttr(s) {
-  return s.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-function swRegisterScript(s) {
-  return [
-    "<script>",
-    "if('serviceWorker' in navigator){navigator.serviceWorker.register('/sw.js').catch(function(e){",
-    `try{fetch('/api/_client-error',{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({kind:'event',source:'pwa',op:'sw-register-fail',surface:'${s.surface}',scope:'${s.scope}',err:String((e&&e.message)||e)}),keepalive:true}).catch(function(){});}catch(_){}`,
-    "});}",
-    "</script>"
-  ].join("\n");
-}
-function installHeadLines(manifestPath, b) {
-  return [
-    `<link rel="manifest" href="${escAttr(manifestPath)}">`,
-    `<link rel="apple-touch-icon" href="${escAttr(b.appleTouchIcon)}">`,
-    // Both the standards-based and the legacy Apple capable meta: Chromium
-    // deprecates `apple-mobile-web-app-capable` in favour of
-    // `mobile-web-app-capable`, while iOS Safari still reads the apple one.
-    '<meta name="mobile-web-app-capable" content="yes">',
-    '<meta name="apple-mobile-web-app-capable" content="yes">',
-    `<meta name="theme-color" content="${escAttr(b.themeColor)}">`
-  ];
-}
-function pwaHeadTags(s, b) {
-  return [...installHeadLines(s.manifestPath, b), swRegisterScript(s)].join("\n");
-}
-function pwaCensus(d) {
-  const manifestLinked = PWA_SURFACES.filter((s) => {
-    const html = d.shellHtml(s.shellFile);
-    return html != null && html.includes(`"${s.manifestPath}"`);
-  }).length;
-  const iconsPresent = d.iconExists() ? PWA_SURFACES.length : 0;
-  return { surfaces: PWA_SURFACES.length, manifestLinked, iconsPresent };
-}
-
 // server/webchat-descriptor.ts
 import { resolve as resolve2, join as join4 } from "path";
 function webchatGatewayUrl() {
@@ -4157,11 +4073,11 @@ function findExistingJsonlForSessionId(claudeConfigDir2, sessionId) {
   } catch {
     return null;
   }
-  const basename18 = `${sessionId}.jsonl`;
+  const basename19 = `${sessionId}.jsonl`;
   for (const slug of slugs) {
-    const live = join7(projectsRoot, slug, basename18);
+    const live = join7(projectsRoot, slug, basename19);
     if (existsSync3(live)) return live;
-    const archived = join7(projectsRoot, slug, "archive", basename18);
+    const archived = join7(projectsRoot, slug, "archive", basename19);
     if (existsSync3(archived)) return archived;
   }
   return null;
@@ -4947,15 +4863,24 @@ function createScheduleInjectRoutes(deps) {
       console.error(`${TAG5} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=ok status=-`);
       return c.json({ ok: true, sessionKey: sessionId2, ...transcriptBoundary(sessionId2) }, 200);
     }
-    const effectiveAccount = houseAccountId;
+    const resolution = deps.telegramAccountForDestination(destination);
+    if (resolution.kind === "none") {
+      console.error(`${TAG5} op=schedule-telegram-reject eventId=${eventId} destination=${destination} reason=unresolved-effective-account`);
+      return c.json({ ok: false, error: "unresolved-effective-account" }, 403);
+    }
+    if (resolution.kind === "ambiguous") {
+      console.error(`${TAG5} op=telegram-destination-ambiguous eventId=${eventId} destination=${destination} accounts=${resolution.count} dispatched=no`);
+      return c.json({ ok: false, error: "telegram-destination-ambiguous" }, 403);
+    }
+    const effectiveAccount = resolution.accountId;
     console.error(`${TAG5} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount}`);
     if (eventAccountId === null || eventAccountId !== effectiveAccount) {
       console.error(`${TAG5} op=event-account-scope-mismatch eventId=${eventId} eventAccount=${eventAccountId ?? "-"} effectiveAccount=${effectiveAccount} destination=${destination} dispatched=no`);
       return c.json({ ok: false, error: "event-account-scope-mismatch" }, 403);
     }
-    const botToken = account.config.telegram?.adminBotToken;
+    const botToken = resolution.botToken;
     if (!botToken) {
-      console.error(`${TAG5} reject reason=no-admin-bot-token eventId=${eventId}`);
+      console.error(`${TAG5} reject reason=no-admin-bot-token eventId=${eventId} accountId=${effectiveAccount}`);
       return c.json({ ok: false, error: "no-admin-bot-token" }, 400);
     }
     const chatId = Number(destination);
@@ -4963,7 +4888,11 @@ function createScheduleInjectRoutes(deps) {
     const reply = (text) => deps.sendTelegramText(botToken, chatId, text);
     try {
       await deps.tgHandleInbound({
-        accountId: houseAccountId,
+        // Task 2365 — the resolved account, not the house. After the
+        // per-account webhook the bot IS that account's own, so transport and
+        // session scope are one account and Telegram needs no
+        // effectiveAccountId companion field the way WhatsApp does above.
+        accountId: effectiveAccount,
         senderId: destination,
         chatId: destination,
         role: "admin",
@@ -5086,7 +5015,7 @@ async function defaultHttpGet(url) {
   }
 }
 async function defaultResolve(accountId) {
-  const { resolveSocket: resolveSocket2 } = await import("./manager-W32LVPCT.js");
+  const { resolveSocket: resolveSocket2 } = await import("./manager-2VEJKVEO.js");
   return resolveSocket2(accountId);
 }
 async function fetchAvatar(accountId, jid, deps = {}) {
@@ -13044,9 +12973,9 @@ function configDirName() {
   }
   return ".maxy";
 }
-function secretPath(botType) {
-  const filename = botType === "admin" ? ".telegram-admin-webhook-secret" : ".telegram-webhook-secret";
-  return resolve17(homedir2(), configDirName(), filename);
+function secretPath(botType, accountId) {
+  const stem = botType === "admin" ? ".telegram-admin-webhook-secret" : ".telegram-webhook-secret";
+  return resolve17(homedir2(), configDirName(), `${stem}.${accountId}`);
 }
 var app10 = new Hono();
 app10.post("/", async (c) => {
@@ -13056,15 +12985,25 @@ app10.post("/", async (c) => {
     console.error(`${TAG19} op=reject reason=missing-bot-param`);
     return c.json({ ok: false }, 400);
   }
-  const sp = secretPath(botType);
+  const accountParam = c.req.query("account");
+  if (!accountParam) {
+    console.error(`${TAG19} op=reject reason=missing-account-param botType=${botType}`);
+    return c.json({ ok: false }, 401);
+  }
+  const account = listValidAccounts().find((a) => a.accountId === accountParam) ?? null;
+  if (!account) {
+    console.error(`${TAG19} op=reject reason=bad-account botType=${botType}`);
+    return c.json({ ok: false }, 401);
+  }
+  const sp = secretPath(botType, account.accountId);
   if (!existsSync21(sp)) {
-    console.error(`${TAG19} op=reject reason=no-secret-file botType=${botType}`);
+    console.error(`${TAG19} op=reject reason=no-secret-file botType=${botType} accountId=${account.accountId}`);
     return c.json({ ok: false }, 401);
   }
   const expected = readFileSync23(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
-    console.error(`${TAG19} op=reject reason=bad-secret botType=${botType}`);
+    console.error(`${TAG19} op=reject reason=bad-secret botType=${botType} accountId=${account.accountId}`);
     return c.json({ ok: false }, 401);
   }
   let update;
@@ -13073,11 +13012,6 @@ app10.post("/", async (c) => {
   } catch {
     return c.json({ ok: true }, 200);
   }
-  const account = resolveAccount();
-  if (!account) {
-    console.error(`${TAG19} op=reject reason=no-account`);
-    return c.json({ ok: true }, 200);
-  }
   const decision = routeTelegramUpdate({ update, botType, config: account.config.telegram ?? {} });
   if (decision.kind === "ignore") {
     console.error(`${TAG19} op=ignore reason=${decision.reason}`);
@@ -24070,7 +24004,7 @@ var ROUTINE_COLS = `e.eventId AS eventId, e.name AS name, e.eventStatus AS event
   e.timezone AS timezone, e.startDate AS startDate,
   e.agentChannel AS agentChannel, e.agentDestination AS agentDestination, e.agentPrompt AS agentPrompt,
   e.actionPlugin AS actionPlugin, e.actionTool AS actionTool, e.actionArgs AS actionArgs,
-  e.notes AS notes, e.routineDescription AS routineDescription,
+  e.notes AS notes, e.description AS description,
   e.lastDispatchResult AS lastDispatchResult, e.lastDispatchAt AS lastDispatchAt,
   e.suspendedInBulk AS suspendedInBulk`;
 function mapRoutine(r) {
@@ -24091,11 +24025,11 @@ function mapRoutine(r) {
     actionTool: g("actionTool"),
     actionArgs: g("actionArgs"),
     notes: g("notes"),
-    // Task 2214 — read-only on the wire. Deliberately absent from the PATCH
-    // field set below: the roster is its only writer, so a PATCH that accepted
-    // it would be discarded by the next seed, and silently accepting an edit
-    // that the next upgrade throws away is worse than refusing it.
-    routineDescription: g("routineDescription"),
+    // Task 2361 — operator-writable, and the only caption any routines surface
+    // shows. Never dispatched: agentPrompt is the text a fire sends. PATCH
+    // accepts it below and stamps operatorEdited, which is what stops the next
+    // roster version bump overwriting the operator's wording.
+    description: g("description"),
     lastDispatchResult: g("lastDispatchResult"),
     lastDispatchAt: g("lastDispatchAt"),
     // Task 2106 — on the wire so the page can gate Resume all on the set the
@@ -24391,23 +24325,29 @@ app51.patch("/:eventId", requireAdminSession, async (c) => {
     console.error(`[admin:routines] op=patch id=${id82} fields=agentChannel+agentDestination outcome=rejected reason=invalid-channel channel=${body.agentChannel}`);
     return c.json({ error: `Unknown dispatch channel "${body.agentChannel}".` }, 400);
   }
+  const describing = "description" in body;
   let timezone = null;
   let storedPrompt = null;
   let storedRecurrence = null;
   let storedActionPlugin = null;
-  if (typeof body.recurrence === "string" || binding || clearing) {
+  let storedName = null;
+  let storedDescription = null;
+  if (typeof body.recurrence === "string" || binding || clearing || describing) {
     const preSession = getSession();
     try {
       const pre = await preSession.run(
         `MATCH (e:Event {eventId: $eventId, accountId: $accountId})
          RETURN e.timezone AS timezone, e.agentPrompt AS agentPrompt,
-                e.recurrence AS recurrence, e.actionPlugin AS actionPlugin`,
+                e.recurrence AS recurrence, e.actionPlugin AS actionPlugin,
+                e.name AS name, e.description AS description`,
         { eventId, accountId }
       );
       timezone = pre.records[0]?.get("timezone") ?? null;
       storedPrompt = pre.records[0]?.get("agentPrompt") ?? null;
       storedRecurrence = pre.records[0]?.get("recurrence") ?? null;
       storedActionPlugin = pre.records[0]?.get("actionPlugin") ?? null;
+      storedName = pre.records[0]?.get("name") ?? null;
+      storedDescription = pre.records[0]?.get("description") ?? null;
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       console.error(`[admin:routines] op=patch id=${id82} outcome=rejected reason=tz-read-fail err="${message}"`);
@@ -24475,6 +24415,27 @@ app51.patch("/:eventId", requireAdminSession, async (c) => {
     setClauses.push("e.operatorEdited = $operatorEdited");
     params.operatorEdited = (/* @__PURE__ */ new Date()).toISOString();
   }
+  if (describing) {
+    const raw = body.description;
+    if (typeof raw !== "string" && raw !== null) {
+      console.error(`[admin:routines] op=patch id=${id82} fields=description outcome=rejected reason=not-a-string`);
+      return c.json({ error: "A description must be text, or null to clear it." }, 400);
+    }
+    const next = typeof raw === "string" && raw.trim().length > 0 ? raw : null;
+    setClauses.push("e.description = $description");
+    params.description = next;
+    fields.push("description");
+    setClauses.push("e.operatorEdited = $operatorEdited");
+    params.operatorEdited = (/* @__PURE__ */ new Date()).toISOString();
+    if (next !== storedDescription) {
+      const parts = [`Event: ${storedName ?? ""}`, next ?? ""].filter(Boolean);
+      const embedding = await embedForWrite(parts.join(" \u2014 "));
+      if (embedding.length > 0) {
+        setClauses.push("e.embedding = $embedding");
+        params.embedding = embedding;
+      }
+    }
+  }
   if (typeof body.recurrence === "string") {
     try {
       const interval = parseExpression(body.recurrence, { currentDate: /* @__PURE__ */ new Date(), tz: timezone ?? void 0 });
@@ -28790,18 +28751,23 @@ function createWaChannelRoutes(deps) {
     if (typeof senderId !== "string" || typeof text !== "string") {
       return c.json({ error: "senderId and text required" }, 400);
     }
+    const accountId = body?.accountId;
+    if (typeof accountId !== "string" || accountId.length === 0) {
+      console.error(`[whatsapp-native] op=reply-rejected senderId=${senderId} reason=no-account`);
+      return c.json({ error: "accountId required" }, 400);
+    }
     const bytes = Buffer.byteLength(text, "utf8");
     try {
-      await deps.sendOutbound(senderId, text);
+      await deps.sendOutbound(accountId, senderId, text);
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       const terminal = err instanceof WaReplyError ? err.terminal : false;
       console.error(
-        `[whatsapp-native] op=reply-failed senderId=${senderId} bytes=${bytes} terminal=${terminal} error=${message}`
+        `[whatsapp-native] op=reply-failed senderId=${senderId} account=${accountId} bytes=${bytes} terminal=${terminal} error=${message}`
       );
       return c.json({ error: message, terminal }, 500);
     }
-    console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
+    console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} account=${accountId} bytes=${bytes}`);
     deps.onReplyDispatch?.(senderId, Date.now());
     return c.json({ ok: true });
   });
@@ -28813,13 +28779,18 @@ function createWaChannelRoutes(deps) {
     if (typeof senderId !== "string" || !Array.isArray(files) || files.length === 0 || !files.every((f) => typeof f === "string")) {
       return c.json({ error: "senderId and a non-empty files string array required" }, 400);
     }
+    const accountId = body?.accountId;
+    if (typeof accountId !== "string" || accountId.length === 0) {
+      console.error(`[whatsapp-native] op=reply-document-rejected senderId=${senderId} reason=no-account`);
+      return c.json({ error: "accountId required" }, 400);
+    }
     const results = [];
     for (let i = 0; i < files.length; i++) {
       const file = files[i];
       console.error(`[whatsapp-native] op=reply-document-request senderId=${senderId} file=${file}`);
       let outcome;
       try {
-        outcome = await deps.sendDocument(senderId, file, i === 0 ? caption : void 0);
+        outcome = await deps.sendDocument(accountId, senderId, file, i === 0 ? caption : void 0);
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
         const terminal = err instanceof WaReplyError ? err.terminal : false;
@@ -28899,6 +28870,11 @@ function createWaChannelRoutes(deps) {
     if (typeof senderId !== "string" || typeof sessionId !== "string" || typeof replied !== "boolean") {
       return c.json({ error: "senderId, sessionId and replied required" }, 400);
     }
+    const accountId = body?.accountId;
+    if (typeof accountId !== "string" || accountId.length === 0) {
+      console.error(`[whatsapp-native] op=turn-end-rejected senderId=${senderId} reason=no-account`);
+      return c.json({ error: "accountId required" }, 400);
+    }
     const interactive = body?.interactive === true;
     const finalText = typeof body?.finalText === "string" ? body.finalText : "";
     const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : -1;
@@ -28908,6 +28884,9 @@ function createWaChannelRoutes(deps) {
     const consumed2 = num(body?.consumed);
     const source = typeof body?.source === "string" ? body.source : null;
     const sid = sessionId.slice(0, 8);
+    console.error(
+      `[whatsapp-native] op=turn-context sessionId=${sid} cacheReadTokens=${num(body?.cacheReadTokens)} inputTokens=${num(body?.inputTokens)} outputTokens=${num(body?.outputTokens)} thinkingBlocks=${num(body?.thinkingBlocks)} thinkingChars=${num(body?.thinkingChars)}`
+    );
     const deliver = interactive && !replied && finalText.trim().length > 0;
     const decision = `sessionId=${sid} replied=${replied ? "yes" : "no"} interactive=${interactive ? "yes" : "no"} source=${source ?? "unset"} finalBytes=${finalBytes} queueDepth=${queueDepth} pendingTurns=${pendingTurns} consumed=${consumed2}`;
     if (!replied && finalBytes > 0 && !deliver) {
@@ -28919,7 +28898,7 @@ function createWaChannelRoutes(deps) {
     if (deliver) {
       const bytes = Buffer.byteLength(finalText, "utf8");
       try {
-        await deps.sendOutbound(senderId, finalText);
+        await deps.sendOutbound(accountId, senderId, finalText);
       } catch (err) {
         const message = err instanceof Error ? err.message : String(err);
         console.error(
@@ -29003,6 +28982,13 @@ var WaGateway = class {
     this.deps = deps;
   }
   hub = new InboundHub();
+  // Task 2363 — keyed by (effective account, sender) through the same `hubKey`
+  // the hub uses, never by the number alone. A phone bound to two accounts holds
+  // one reply closure per account, and the last inbound used to overwrite the
+  // other account's route, so an answer composed for one account went out on the
+  // other's socket. The account is the EFFECTIVE session account, which is what
+  // `hub.deliver` below keys on and what the channel server sends back: the
+  // socket owner is not addressable by the requester.
   replies = /* @__PURE__ */ new Map();
   // Per-sender document-delivery context, set on every inbound. Its presence is
   // the reply-only guard: a sender with no inbound has no context, so a file
@@ -29034,6 +29020,16 @@ var WaGateway = class {
   mediaRaces = 0;
   mediaRaceSenders = /* @__PURE__ */ new Set();
   mediaStanzaExpired = 0;
+  // Task 2363 — the outbound-account census, reset on every print. `sends` is
+  // every sendOutbound call; `mismatched` is the subset that missed for
+  // (account, sender) while ANOTHER account held a live route for that sender.
+  // Before this task those sends succeeded on the other account's socket and
+  // emitted no error, so nothing but a reconciliation count could see them; they
+  // now throw, and this counts them at the point they are refused. A cold miss
+  // (no route under any account) is deliberately excluded — it is an ordinary
+  // reply to a sender with no conversation, not a crossed one.
+  outboundSends = 0;
+  outboundMismatched = 0;
   /** Task 2110 — the WhatsApp manager reports that a non-audio media stanza for
    *  this sender has started downloading. The gateway cannot derive this itself:
    *  it first learns of the media when the completed inbound arrives, which is
@@ -29090,8 +29086,8 @@ var WaGateway = class {
   routes() {
     return createWaChannelRoutes({
       hub: this.hub,
-      sendOutbound: (senderId, text) => this.sendOutbound(senderId, text),
-      sendDocument: (senderId, filePath, caption) => this.sendDocument(senderId, filePath, caption),
+      sendOutbound: (accountId, senderId, text) => this.sendOutbound(accountId, senderId, text),
+      sendDocument: (accountId, senderId, filePath, caption) => this.sendDocument(accountId, senderId, filePath, caption),
       onReady: (accountId, senderId) => {
         const count = this.hub.markReady(accountId, senderId, Date.now());
         if (count > 0) {
@@ -29225,7 +29221,7 @@ var WaGateway = class {
     const openable = input.media.filter((m) => m.type !== "audio");
     const mediaField = openable.length > 0 ? `media=${openable.map((m) => m.type).join(",")} mediaPaths=${openable.map((m) => m.path).join(",")}` : input.media.some((m) => m.type === "audio") ? "media=audio mediaPath=transcribed" : "media=none";
     const source = input.source ?? "user";
-    this.replies.set(senderId, input.reply);
+    this.replies.set(hubKey(input.effectiveAccountId, senderId), input.reply);
     this.docContexts.set(senderId, { accountId: input.accountId, maxyAccountId: input.effectiveAccountId });
     console.error(
       `[whatsapp-native] op=doc-context senderId=${senderId} accountId=${input.accountId} maxyAccountId=${input.effectiveAccountId}`
@@ -29336,17 +29332,41 @@ var WaGateway = class {
       input.role === "public" && input.personId ? input.personId : void 0
     );
   }
-  async sendOutbound(senderId, text) {
-    const reply = this.replies.get(senderId);
-    if (!reply) throw new Error(`wa-gateway: no reply route for sender ${senderId}`);
+  async sendOutbound(accountId, senderId, text) {
+    this.outboundSends++;
+    const reply = this.replies.get(hubKey(accountId, senderId));
+    if (!reply) {
+      const suffix = hubKey("", senderId);
+      if ([...this.replies.keys()].some((k) => k.endsWith(suffix))) {
+        this.outboundMismatched++;
+        console.error(
+          `[whatsapp-native] op=outbound-account-miss senderId=${senderId} requested=${accountId} held=other-account`
+        );
+      }
+      throw new Error(`wa-gateway: no reply route for account ${accountId} sender ${senderId}`);
+    }
     await reply(text);
   }
+  /** Task 2363 — read and reset the outbound-account census. Printed on the
+   *  duplicate-sender audit tick; see server/index.ts. */
+  takeOutboundAccountCensus() {
+    const census = { sends: this.outboundSends, mismatched: this.outboundMismatched };
+    this.outboundSends = 0;
+    this.outboundMismatched = 0;
+    return census;
+  }
   /** Deliver a file to a sender as a WhatsApp document. Throws `WaReplyError`
    *  (reply-only guard) when no inbound has registered a document context for
    *  the sender — file delivery is only ever a reply on a live conversation. */
-  async sendDocument(senderId, filePath, caption) {
+  async sendDocument(accountId, senderId, filePath, caption) {
     const ctx = this.docContexts.get(senderId);
     if (!ctx) throw new WaReplyError(`no conversation for sender ${senderId}`, false);
+    if (ctx.maxyAccountId !== accountId) {
+      console.error(
+        `[whatsapp-native] op=document-account-mismatch senderId=${senderId} requested=${accountId} context=${ctx.maxyAccountId}`
+      );
+      throw new WaReplyError(`no conversation for sender ${senderId} on account ${accountId}`, false);
+    }
     return this.deps.sendDocument({ senderId, accountId: ctx.accountId, maxyAccountId: ctx.maxyAccountId, filePath, caption });
   }
 };
@@ -29782,6 +29802,10 @@ function createWebchatChannelRoutes(deps) {
     const finalBytes = typeof body?.finalBytes === "number" && Number.isFinite(body.finalBytes) ? body.finalBytes : 0;
     const k = key.slice(0, 8);
     const sid = sessionId.slice(0, 8);
+    const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : -1;
+    console.error(
+      `[webchat-native] op=turn-context sessionId=${sid} cacheReadTokens=${num(body?.cacheReadTokens)} inputTokens=${num(body?.inputTokens)} outputTokens=${num(body?.outputTokens)} thinkingBlocks=${num(body?.thinkingBlocks)} thinkingChars=${num(body?.thinkingChars)}`
+    );
     const repliedField = role === "public" ? ` replied=${replied ? "yes" : "no"}` : "";
     console.error(`[webchat-native] op=turn-end channel=webchat key=${k} role=${role} sessionId=${sid}${repliedField} trailing=${finalBytes}`);
     if (role === "admin" && finalBytes === 0) {
@@ -30964,6 +30988,10 @@ function createTelegramChannelRoutes(deps) {
     const interactive = body?.interactive === true;
     const finalText = typeof body?.finalText === "string" ? body.finalText : "";
     const sid = sessionId.slice(0, 8);
+    const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : -1;
+    console.error(
+      `[telegram-native] op=turn-context sessionId=${sid} cacheReadTokens=${num(body?.cacheReadTokens)} inputTokens=${num(body?.inputTokens)} outputTokens=${num(body?.outputTokens)} thinkingBlocks=${num(body?.thinkingBlocks)} thinkingChars=${num(body?.thinkingChars)}`
+    );
     const deliver = interactive && !replied && finalText.trim().length > 0;
     if (deliver) {
       const bytes = Buffer.byteLength(finalText, "utf8");
@@ -31585,6 +31613,50 @@ function runPublicAddressCollisionAudit(deps) {
   );
 }
 
+// server/telegram-audit.ts
+import { statSync as statSync25 } from "fs";
+import { basename as basename17, dirname as dirname17, join as join54 } from "path";
+function buildTelegramAuditLines(input) {
+  const lines = [];
+  for (const account of input.accounts) {
+    const tg = account.telegram;
+    if (!tg) continue;
+    const botTypes = [];
+    if (tg.adminBotToken) botTypes.push("admin");
+    if (tg.publicBotToken) botTypes.push("public");
+    if (botTypes.length === 0) continue;
+    const last = input.lastInboundAt(account.accountId);
+    const age = last === null ? "never" : String(input.now - last);
+    for (const botType of botTypes) {
+      const secretFile = input.secretFileExists(botType, account.accountId) ? "present" : "absent";
+      lines.push(
+        `[telegram-audit] op=configured accountId=${account.accountId} botType=${botType} secretFile=${secretFile} lastInboundAgeMs=${age}`
+      );
+    }
+  }
+  return lines;
+}
+function newestTelegramSessionByAccount() {
+  const out = /* @__PURE__ */ new Map();
+  const cfg = claudeConfigDir();
+  if (!cfg) return out;
+  const projectsRoot = join54(cfg, "projects");
+  for (const { path } of enumerateJsonls(projectsRoot)) {
+    const sessionId = basename17(path).replace(/\.jsonl$/, "");
+    const meta = readSidecarMeta(join54(dirname17(path), `${sessionId}.meta.json`));
+    if (meta.channel !== "telegram" || !meta.accountId) continue;
+    let mtime;
+    try {
+      mtime = statSync25(path).mtimeMs;
+    } catch {
+      continue;
+    }
+    const prev = out.get(meta.accountId);
+    if (prev === void 0 || mtime > prev) out.set(meta.accountId, mtime);
+  }
+  return out;
+}
+
 // app/lib/whatsapp/recall-store-backfill.ts
 function backfillMisfiledRecords(params) {
   const { houseAccountId, isTargetAccount } = params;
@@ -31666,7 +31738,7 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash6, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync50, readFileSync as readFileSync46, statSync as statSync25 } from "fs";
+import { existsSync as existsSync50, readFileSync as readFileSync46, statSync as statSync26 } from "fs";
 import { resolve as resolve44 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
@@ -31718,7 +31790,7 @@ function resolveEntitlement(brand, account) {
   if (!existsSync50(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
-  const stat11 = statSync25(entitlementPath);
+  const stat11 = statSync26(entitlementPath);
   const key = memoKey(stat11.mtimeMs, account);
   if (memo && memo.key === key) {
     return memo.result;
@@ -31906,7 +31978,7 @@ function clientFrom(c) {
 }
 installMediaDownloadGuard();
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join54(PLATFORM_ROOT6, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join55(PLATFORM_ROOT6, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync51(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
@@ -31945,7 +32017,7 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join54(homedir4(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join55(homedir4(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync51(ALIAS_DOMAINS_PATH)) return null;
@@ -32040,7 +32112,7 @@ var waGateway = new WaGateway({
   sendToParty: (accountId, phone, text) => sendWhatsAppTextForRelay(accountId, phone, text),
   resolveSessionOverride: (accountId, senderId) => resolveChannelOverride(accountId, "whatsapp", senderId),
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve45(process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve45(process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -32055,7 +32127,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve45(process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, ".."))
+      platformRoot: resolve45(process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -32222,7 +32294,7 @@ function runDuplicateSenderAudit() {
   try {
     const configDir = process.env.CLAUDE_CONFIG_DIR;
     if (!configDir) return;
-    const projectsRoot = join54(configDir, "projects");
+    const projectsRoot = join55(configDir, "projects");
     const records = [];
     for (const { path: jsonlPath, isSubagent, archived } of enumerateJsonls(projectsRoot)) {
       if (isSubagent || archived) continue;
@@ -32233,6 +32305,10 @@ function runDuplicateSenderAudit() {
     }
     logDuplicateSenderGroups(findDuplicateSenderGroups(records));
     logCrossAccountSenderGroups(findCrossAccountSenderGroups(records));
+    const outbound = waGateway.takeOutboundAccountCensus();
+    console.error(
+      `[whatsapp-native] op=outbound-account-mismatch sends=${outbound.sends} mismatched=${outbound.mismatched}`
+    );
   } catch (err) {
     console.error(`[whatsapp-native] op=duplicate-sender-audit-error error=${err instanceof Error ? err.message : String(err)}`);
   }
@@ -32435,7 +32511,26 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
   // than returning the house id this closure used to be handed. See
   // effective-account.ts for why `resolveAccount()` was the wrong side to move,
   // and why the real dependencies are bound there rather than assembled here.
-  effectiveAccountFor: resolveScheduledEffectiveAccountForInstall
+  effectiveAccountFor: resolveScheduledEffectiveAccountForInstall,
+  // Task 2365 — the account whose own telegram.adminUsers claims this chat id.
+  // Reads the same list, through the same readChannelAdmins call, that
+  // validateAgentDestination uses (agent-dispatch-rule), so the routine picker,
+  // the save and this dispatch cannot disagree. Two claimants is reported to
+  // the route and refused there, never picked between.
+  telegramAccountForDestination: (destination) => {
+    const asNumber = Number(destination);
+    if (!Number.isInteger(asNumber)) return { kind: "none" };
+    const claimants = listValidAccounts().filter(
+      (a) => readChannelAdmins(a.accountDir, "telegram").adminUsers.includes(asNumber)
+    );
+    if (claimants.length === 0) return { kind: "none" };
+    if (claimants.length > 1) return { kind: "ambiguous", count: claimants.length };
+    return {
+      kind: "one",
+      accountId: claimants[0].accountId,
+      botToken: claimants[0].config.telegram?.adminBotToken ?? null
+    };
+  }
 });
 app76.route("/api/channel/schedule-inject", scheduleInjectRoutes);
 app76.use("*", clientIpMiddleware);
@@ -32710,15 +32805,10 @@ app76.post("/api/remote-auth/set-password", async (c) => {
 });
 app76.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
-var PWA_PUBLIC_PATHS = /* @__PURE__ */ new Set(["/sw.js", ...PWA_SURFACES.map((s) => s.manifestPath)]);
 app76.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path = c.req.path;
-  if (path === "/favicon.ico" || path.startsWith("/assets/") || path.startsWith("/brand/") || // Public free/busy is read by the booking page (a separate Cloudflare Pages
-  // origin) against the brand host with no admin cookie. It is public by
-  // design — open slots only, no :Meeting detail — so it bypasses the gate
-  // exactly like /brand/. The detail-leak guard lives in the route + its test.
-  path === "/api/calendar/free-busy" || PWA_PUBLIC_PATHS.has(path)) {
+  if (isRemoteAuthBypassPath(path)) {
     await next();
     return;
   }
@@ -32903,7 +32993,7 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT6) return "unknown";
-    const versionFile = join54(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join55(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
     if (!existsSync51(versionFile)) return "unknown";
     const content = readFileSync47(versionFile, "utf-8").trim();
     return content || "unknown";
@@ -32933,12 +33023,12 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir = join54(homedir4(), BRAND.configDir);
+  const configDir = join55(homedir4(), BRAND.configDir);
   try {
     const verdict = resolvePublicAddressFromDisk(agentSlug);
     const accountId = verdict.kind === "served" ? verdict.owner.accountId : getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join54(configDir, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join55(configDir, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync51(cachePath)) return null;
     return JSON.parse(readFileSync47(cachePath, "utf-8"));
   } catch {
@@ -33188,7 +33278,7 @@ var hostname = process.env.HOSTNAME ?? "127.0.0.1";
 var httpServer = serve({ fetch: app76.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, "..");
   const reconcileScript = resolve45(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const runReconcile = (ctx) => {
     if (!existsSync51(reconcileScript)) return;
@@ -33211,7 +33301,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     detached: true,
     run: runReconcile
   });
-  const reconcileStatePath = join54(MAXY_DIR, "booking-reconcile-state.json");
+  const reconcileStatePath = join55(MAXY_DIR, "booking-reconcile-state.json");
   registerLoop({
     name: "calendar-reconcile-liveness",
     intervalMs: 6e5,
@@ -33229,7 +33319,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
-  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, "..");
+  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, "..");
   const dreamSweepScript = resolve45(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
   registerLoop({
     name: "dream-cycle-sweep",
@@ -33253,7 +33343,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, "..");
+  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, "..");
   const outlookScript = resolve45(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
@@ -33279,7 +33369,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, "..");
+  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, "..");
   const strandedAccountsDir = resolve45(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
@@ -33292,7 +33382,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
         if (!STRANDED_UUID_RE.test(name)) continue;
         const pendingPath2 = resolve45(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
         if (!existsSync51(pendingPath2)) continue;
-        const ageMs2 = now - statSync26(pendingPath2).mtimeMs;
+        const ageMs2 = now - statSync27(pendingPath2).mtimeMs;
         if (ageMs2 > STRANDED_AGE_MS) {
           console.error(`[outlook-mcp] devicecode-stranded account=${name} ageSec=${Math.floor(ageMs2 / 1e3)}`);
         }
@@ -33309,7 +33399,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, "..");
+  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, "..");
   const googleAccountsDir = resolve45(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
@@ -33353,7 +33443,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, "..");
   const STORAGE_AUDIT_INTERVAL_MS = 3e5;
   const runStorageAuditSafe = () => runStorageAudit(auditPlatformRoot).catch((err) => {
     console.error(`[storage-audit] error="${err.message}"`);
@@ -33385,6 +33475,25 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     firstRunDelayMs: 5e4,
     run: runDataPortalAuditSafe
   });
+  const runTelegramAudit = async () => {
+    const accounts = listValidAccounts().map((a) => ({ accountId: a.accountId, telegram: a.config.telegram }));
+    const configured = accounts.some((a) => a.telegram?.adminBotToken || a.telegram?.publicBotToken);
+    if (!configured) return;
+    const lastByAccount = newestTelegramSessionByAccount();
+    const lines = buildTelegramAuditLines({
+      accounts,
+      secretFileExists: (botType, accountId) => existsSync51(secretPath(botType, accountId)),
+      lastInboundAt: (accountId) => lastByAccount.get(accountId) ?? null,
+      now: Date.now()
+    });
+    for (const line of lines) console.error(line);
+  };
+  registerLoop({
+    name: "telegram-audit",
+    intervalMs: STORAGE_AUDIT_INTERVAL_MS,
+    firstRunDelayMs: 65e3,
+    run: runTelegramAudit
+  });
   registerLoop({
     name: "portal-uploads-pull",
     intervalMs: PORTAL_UPLOADS_PULL_INTERVAL_MS,
@@ -33450,7 +33559,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, "..");
+  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, "..");
   const publishScript = resolve45(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const bookingAccounts = () => {
@@ -33527,7 +33636,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startTimeEntryCensus(() => getSession());
 startLedgerCensus(() => getSession());
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, "..");
   const auditScript = resolve45(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
@@ -33738,8 +33847,8 @@ var runIngestAuditTick = () => {
       },
       agentExists: (accountId, slug) => {
         if (!house) return false;
-        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join54(ACCOUNTS_DIR, accountId);
-        return existsSync51(join54(dir, "agents", slug, "config.json"));
+        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join55(ACCOUNTS_DIR, accountId);
+        return existsSync51(join55(dir, "agents", slug, "config.json"));
       }
     });
   } catch (err) {
@@ -33787,7 +33896,7 @@ registerLoop({
       runPublicAddressCollisionAudit({
         houseAccountId: () => resolveAccount()?.accountId ?? null,
         activeSlugs: () => listValidAccounts().map((a) => {
-          const agentsRoot = join54(a.accountDir, "agents");
+          const agentsRoot = join55(a.accountDir, "agents");
           if (!existsSync51(agentsRoot)) return { accountId: a.accountId, slugs: [] };
           const slugs = readdirSync30(agentsRoot, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).filter((slug) => isActiveAgentSlug(a.accountDir, slug));
           return { accountId: a.accountId, slugs };
@@ -33873,7 +33982,7 @@ try {
 } catch (err) {
   console.error(`[graph-health] account-enumeration unavailable reason=${err instanceof Error ? err.message : String(err)}`);
 }
-var configDirForWhatsApp = basename17(MAXY_DIR) || ".maxy";
+var configDirForWhatsApp = basename18(MAXY_DIR) || ".maxy";
 var bootAccount = resolveAccount();
 if (bootAccount) {
   migrateRemovedConfigKeys(bootAccount.accountDir);
@@ -33939,7 +34048,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve45(process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, "..")),
+  platformRoot: resolve45(process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, "..")),
   accountConfig: bootAccountConfig,
   // Task 2074 — enrich with the sub-account name and fan out to every open
   // admin SSE stream. Fire-and-forget: the manager's persist path must not