@rubytech/create-maxy-code 0.1.569 → 0.1.570

package/payload/server/server.js

@@ -2501,8 +2501,8 @@ async function reapplyLeversViaManager() {
   }
 }
 function createWebchatRoutes(deps) {
-  const app78 = new Hono();
-  app78.post("/send", requireAdminSession, async (c) => {
+  const app79 = new Hono();
+  app79.post("/send", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -2705,7 +2705,7 @@ ${note}` : note;
     if (turnTimer.unref) turnTimer.unref();
     return c.json({ ok: true });
   });
-  app78.post("/interrupt", requireAdminSession, async (c) => {
+  app79.post("/interrupt", requireAdminSession, async (c) => {
     const cacheKey = c.get("cacheKey");
     const requesterUserId = (cacheKey ? getUserIdForSession(cacheKey) : void 0) ?? null;
     const primaryUserId = resolvePrimaryAdminUserId();
@@ -2733,7 +2733,7 @@ ${note}` : note;
     }
     return c.json({ ok: true, stopped: outcome.stopped, intId: outcome.intId, deadChild: outcome.deadChild }, 200);
   });
-  app78.post("/settings", requireAdminSession, async (c) => {
+  app79.post("/settings", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const op = body?.op;
     const value = body?.value;
@@ -2769,7 +2769,7 @@ ${note}` : note;
     console.log(`[webchat:settings] op=${op} outcome=accepted accountId=${account.accountId.slice(0, 8)} value=${value} settingsApplied=${settingsApplied}`);
     return c.json({ ok: true, settingsApplied });
   });
-  app78.get("/session", requireAdminSession, async (c) => {
+  app79.get("/session", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -2842,7 +2842,7 @@ ${note}` : note;
     const indicators = await fetchComposerIndicators(sessionId);
     return c.json({ sessionId, projectDir, source, sizeBytes: jsonlSizeBytes(projectDir, sessionId), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${sessionId}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${sessionId}`) ?? null, ...indicators, ...readLevers(account) });
   });
-  app78.post("/permission-verdict", requireAdminSession, async (c) => {
+  app79.post("/permission-verdict", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const sessionId = body?.sessionId;
     const requestId = body?.request_id;
@@ -2859,7 +2859,7 @@ ${note}` : note;
     const ok2 = deps.resolvePermissionVerdict?.(`session:${sessionId}`, requestId, behavior) ?? false;
     return c.json({ ok: ok2 });
   });
-  return app78;
+  return app79;
 }
 var UUID_PATTERN, NO_INDICATORS, indicatorsErrorLogged, INDICATORS_TIMEOUT_MS, INTERRUPT_TIMEOUT_MS, MODEL_ID_PATTERN, REAPPLY_TIMEOUT_MS, WEBCHAT_SEND_TURN_WINDOW_MS, sendSeq;
 var init_webchat = __esm({
@@ -4367,7 +4367,7 @@ init_dist();
 import { readFileSync as readFileSync51, existsSync as existsSync54, watchFile, readdirSync as readdirSync32, statSync as statSync30 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash8 } from "crypto";
-import { resolve as resolve49, join as join59, basename as basename17 } from "path";
+import { resolve as resolve49, join as join60, basename as basename17 } from "path";
 import { homedir as homedir5 } from "os";
 
 // server/lib/route-cache-watchers.ts
@@ -4825,11 +4825,11 @@ function staticCacheHeaders(root) {
 }
 
 // server/lib/static-mounts.ts
-function mountStaticFiles(app78, root) {
-  app78.use("/*", staticCacheHeaders(root));
-  app78.use("/assets/*", assetsVary);
-  app78.use("/assets/*", serveStatic({ root, precompressed: true }));
-  app78.use("/*", serveStatic({ root }));
+function mountStaticFiles(app79, root) {
+  app79.use("/*", staticCacheHeaders(root));
+  app79.use("/assets/*", assetsVary);
+  app79.use("/assets/*", serveStatic({ root, precompressed: true }));
+  app79.use("/*", serveStatic({ root }));
 }
 var assetsVary = async (c, next) => {
   await next();
@@ -6170,8 +6170,8 @@ function resolveServingAccount(requestedSlug) {
   return { ok: true, account: { accountId: house.accountId, accountDir: house.accountDir }, agentSlug };
 }
 function createChatRoutes(deps) {
-  const app78 = new Hono();
-  app78.post("/", async (c) => {
+  const app79 = new Hono();
+  app79.post("/", async (c) => {
     console.log(`[chat-route] entered route=public method=POST`);
     const contentType = c.req.header("content-type") ?? "";
     let message;
@@ -6435,7 +6435,7 @@ ${result.result.text}` : result.result.text;
       }
     });
   });
-  return app78;
+  return app79;
 }
 
 // server/routes/channel/schedule-inject.ts
@@ -6652,8 +6652,8 @@ function transcriptBoundary(sessionKey) {
   }
 }
 function createScheduleInjectRoutes(deps) {
-  const app78 = new Hono();
-  app78.post("/", async (c) => {
+  const app79 = new Hono();
+  app79.post("/", async (c) => {
     const env = c.env;
     const remoteAddr = env?.incoming?.socket?.remoteAddress ?? "";
     if (!isLoopbackAddr(remoteAddr)) {
@@ -6799,7 +6799,7 @@ function createScheduleInjectRoutes(deps) {
     console.error(`${TAG6} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
     return c.json({ ok: true, sessionKey: sessionId, ...transcriptBoundary(sessionId) }, 200);
   });
-  return app78;
+  return app79;
 }
 
 // server/index.ts
@@ -15436,9 +15436,9 @@ app11.post("/", async (c) => {
 var telegram_default = app11;
 
 // server/telegram-mount.ts
-function mountTelegramRoutes(app78, telegramRoutes) {
-  app78.route("/api/telegram", telegramRoutes);
-  app78.route("/api/telegram/", telegramRoutes);
+function mountTelegramRoutes(app79, telegramRoutes) {
+  app79.route("/api/telegram", telegramRoutes);
+  app79.route("/api/telegram/", telegramRoutes);
 }
 
 // server/routes/quickbooks.ts
@@ -19349,6 +19349,99 @@ app24.post("/", async (c) => {
 });
 var log_ingest_default = app24;
 
+// server/routes/admin/session-blocked.ts
+init_dist();
+init_sidebar_sessions();
+init_claude_agent();
+init_account_scope();
+import { join as join40 } from "path";
+init_channel_key();
+var TAG28 = "[blocked-tool-notify]";
+function isLoopbackAddr3(addr) {
+  return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
+}
+function blockedNotificationText(p) {
+  const where = p.agentId === "\u2014" ? "this session" : `background subagent ${p.agentId}`;
+  return `A tool call is blocked awaiting approval and nothing can answer it from here.
+
+Session: ${p.sessionId.slice(0, 8)}
+Tool: ${p.tool}
+Raised in: ${where}
+Blocked for: ${Math.round(p.blockedForMs / 1e3)}s
+
+Answer the permission card in the session's PTY or in Claude Desktop. Some checks (dangerousRemoval) ignore bypass-permissions mode, so no setting will clear it.`;
+}
+async function sendWhatsApp(account, to, text) {
+  const res = resolveSocket(account.accountId);
+  if (!res.ok) {
+    console.error(`${TAG28} op=socket-unavailable accountId=${account.accountId} reason=${res.reason}`);
+    return false;
+  }
+  const sent = await sendTextMessage(res.sock, to, text, { accountId: res.accountId });
+  if (!sent.success) console.error(`${TAG28} op=send-failed to=${to} error=${sent.error ?? "unknown"}`);
+  return sent.success === true;
+}
+var app25 = new Hono();
+app25.post("/", async (c) => {
+  const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
+  if (!isLoopbackAddr3(remoteAddr)) {
+    console.error(`${TAG28} op=reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    return c.json({ error: "session-blocked-loopback-only" }, 403);
+  }
+  let body = {};
+  try {
+    body = await c.req.json();
+  } catch {
+    return c.json({ error: "body-not-json" }, 400);
+  }
+  const sessionId = typeof body.sessionId === "string" ? body.sessionId : "";
+  const agentId = typeof body.agentId === "string" ? body.agentId : "\u2014";
+  const tool = typeof body.tool === "string" ? body.tool : "";
+  const blockedForMs = typeof body.blockedForMs === "number" ? body.blockedForMs : 0;
+  if (!sessionId) return c.json({ error: "sessionId-required" }, 400);
+  if (!tool) return c.json({ error: "tool-required" }, 400);
+  const text = blockedNotificationText({ sessionId, agentId, tool, blockedForMs });
+  const projectDir = findSessionProjectDir(sessionId);
+  const meta = projectDir ? readSidecarMeta(join40(projectDir, `${sessionId}.meta.json`)) : { role: null, channel: null, senderId: null, accountId: null };
+  const account = validateAccountId2(meta.accountId ?? "");
+  if (!account) {
+    console.error(
+      `${TAG28} op=account-unresolved sessionId=${sessionId.slice(0, 8)} sidecarAccountId=${meta.accountId ?? "none"}`
+    );
+    return c.json({ delivered: false, channel: "none" }, 200);
+  }
+  if (meta.role === "admin" && meta.channel === "whatsapp" && meta.senderId) {
+    const delivered2 = await sendWhatsApp(account, meta.senderId, text);
+    console.error(`${TAG28} op=notify sessionId=${sessionId.slice(0, 8)} channel=whatsapp delivered=${delivered2}`);
+    return c.json({ delivered: delivered2, channel: "whatsapp" }, 200);
+  }
+  if (meta.role === "admin" && meta.channel === "telegram" && meta.senderId) {
+    const parsed = parseTelegramChannelKey(meta.senderId);
+    if (parsed) {
+      const resolved = resolveBotEntry(listValidAccounts(), parsed.botId);
+      const chatId = Number(parsed.senderId);
+      if (resolved.kind === "one" && Number.isFinite(chatId)) {
+        const res = await sendTelegramText(resolved.entry.token, chatId, text);
+        console.error(`${TAG28} op=notify sessionId=${sessionId.slice(0, 8)} channel=telegram delivered=${res.ok}`);
+        return c.json({ delivered: res.ok, channel: "telegram" }, 200);
+      }
+      console.error(
+        `${TAG28} op=telegram-unresolved sessionId=${sessionId.slice(0, 8)} botId=${parsed.botId} kind=${resolved.kind}`
+      );
+    }
+  }
+  const phones = readAdminPhones(account.accountDir);
+  let delivered = false;
+  for (const phone of phones) {
+    if (await sendWhatsApp(account, phone, text)) delivered = true;
+  }
+  console.error(
+    `${TAG28} op=notify sessionId=${sessionId.slice(0, 8)} channel=house-admin phones=${phones.length} delivered=${delivered}`
+  );
+  return c.json({ delivered, channel: "house-admin" }, 200);
+});
+var session_blocked_default = app25;
+
 // server/routes/admin/events.ts
 init_dist();
 init_helpers();
@@ -19380,20 +19473,20 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
   "channel-notify:desktop-capability",
   "channel-notify:desktop-outcome"
 ]);
-var app25 = new Hono();
-app25.post("/", async (c) => {
-  const TAG59 = "[admin:events]";
+var app26 = new Hono();
+app26.post("/", async (c) => {
+  const TAG60 = "[admin:events]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG59} reject reason=body-not-json detail=${detail}`);
+    console.error(`${TAG60} reject reason=body-not-json detail=${detail}`);
     return c.json({ ok: false, detail: "Request body was not valid JSON" }, 400);
   }
   const event = typeof body.event === "string" ? body.event : "";
   if (!ALLOWED_EVENTS.has(event)) {
-    console.error(`${TAG59} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
+    console.error(`${TAG60} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
     return c.json({ ok: false, detail: `Event "${event}" is not allowed` }, 400);
   }
   const rawFields = body.fields && typeof body.fields === "object" ? body.fields : {};
@@ -19426,7 +19519,7 @@ data: ${JSON.stringify(frame)}
 function shouldDeliver(eventAccountId, subscriberAccountId) {
   return eventAccountId === null || eventAccountId === subscriberAccountId;
 }
-app25.get("/", requireAdminSession, async (c) => {
+app26.get("/", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const encoder = new TextEncoder();
@@ -19507,7 +19600,7 @@ app25.get("/", requireAdminSession, async (c) => {
     }
   });
 });
-var events_default = app25;
+var events_default = app26;
 
 // server/routes/admin/files.ts
 init_dist();
@@ -19519,7 +19612,7 @@ import { createReadStream as createReadStream2, createWriteStream as createWrite
 import { readdir as readdir4, readFile as readFile9, stat as stat6, mkdir as mkdir2, unlink as unlink3, rename as rename3, rmdir } from "fs/promises";
 import { realpathSync as realpathSync7 } from "fs";
 import { randomUUID as randomUUID6 } from "crypto";
-import { basename as basename13, dirname as dirname15, join as join41, relative as relative6, resolve as resolve28, sep as sep9 } from "path";
+import { basename as basename13, dirname as dirname15, join as join42, relative as relative6, resolve as resolve28, sep as sep9 } from "path";
 import { Readable as Readable2 } from "stream";
 init_attachments();
 
@@ -19843,7 +19936,7 @@ async function cascadeDeleteDocument(params) {
 init_data_path();
 init_neo4j_store();
 import * as fsp from "fs/promises";
-import { resolve as resolve27, relative as relative5, join as join40, basename as basename12, extname, sep as sep8 } from "path";
+import { resolve as resolve27, relative as relative5, join as join41, basename as basename12, extname, sep as sep8 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 import { execFile } from "child_process";
 import { promisify } from "util";
@@ -19925,7 +20018,7 @@ async function extractPdf(absolute) {
   return stdout.trim();
 }
 async function ocrPdf(absolute) {
-  const outPdf = join40(tmpdir3(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
+  const outPdf = join41(tmpdir3(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
   try {
     await execFileAsync(
       "ocrmypdf",
@@ -19987,7 +20080,7 @@ async function readDisplayName(absolute) {
   const stem = dot === -1 ? base : base.slice(0, dot);
   if (base === `${stem}.meta.json`) return null;
   try {
-    const raw = await fsp.readFile(join40(dir, `${stem}.meta.json`), "utf-8");
+    const raw = await fsp.readFile(join41(dir, `${stem}.meta.json`), "utf-8");
     const meta = JSON.parse(raw);
     const dn = meta.displayName ?? meta.filename;
     return typeof dn === "string" && dn.length > 0 ? dn : null;
@@ -20008,7 +20101,7 @@ async function walkSubtree(root, dataRoot, out) {
   for (const entry of entries2) {
     if (entry.isSymbolicLink()) continue;
     if (entry.isDirectory() && entry.name === ".uploads-tmp") continue;
-    const abs = join40(root, entry.name);
+    const abs = join41(root, entry.name);
     if (entry.isDirectory()) {
       const sub = await walkSubtree(abs, dataRoot, out);
       if (!sub.clean) clean = false;
@@ -20384,7 +20477,7 @@ var UPLOAD_TMP_DIR = ".uploads-tmp";
 var UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta2(absDir, baseName) {
   try {
-    const raw = await readFile9(join41(absDir, `${baseName}.meta.json`), "utf8");
+    const raw = await readFile9(join42(absDir, `${baseName}.meta.json`), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.filename === "string") {
       return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
@@ -20439,7 +20532,7 @@ async function servableFilesIn(dirAbs, uuid) {
 }
 async function enrich(absolute, entry, accountNames) {
   if (entry.kind === "directory" && UUID_RE3.test(entry.name)) {
-    const dirAbs = join41(absolute, entry.name);
+    const dirAbs = join42(absolute, entry.name);
     const meta = await readMeta2(dirAbs, entry.name);
     if (meta?.filename) {
       const servable = await servableFilesIn(dirAbs, entry.name);
@@ -20448,7 +20541,7 @@ async function enrich(absolute, entry, accountNames) {
         let size = null;
         let modifiedAt = entry.modifiedAt;
         try {
-          const st = await stat6(join41(dirAbs, innerName));
+          const st = await stat6(join42(dirAbs, innerName));
           size = st.size;
           modifiedAt = st.mtime.toISOString();
         } catch {
@@ -20616,8 +20709,8 @@ async function knowledgeDocOwnedByAccount(accountId, attachmentId) {
     await session.close();
   }
 }
-var app26 = new Hono();
-app26.get("/", requireAdminSession, async (c) => {
+var app27 = new Hono();
+app27.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -20657,7 +20750,7 @@ app26.get("/", requireAdminSession, async (c) => {
       const childRel = relPath === "" || relPath === "." ? name : `${relPath}/${name}`;
       const protectedEntry = isProtectedFromDeletion(childRel).protected;
       try {
-        const entryPath = join41(absolute, name);
+        const entryPath = join42(absolute, name);
         const s = await stat6(entryPath);
         entries2.push({
           name,
@@ -20686,7 +20779,7 @@ app26.get("/", requireAdminSession, async (c) => {
     const displayPath = buildDisplayPath(relPath, accountNames);
     if (groupReq || isAccountRoot(relPath)) {
       const acctId = relPath.split("/")[1] ?? accountId;
-      const schemaMd = await readFile9(join41(absolute, "SCHEMA.md"), "utf8").catch(() => null);
+      const schemaMd = await readFile9(join42(absolute, "SCHEMA.md"), "utf8").catch(() => null);
       const groups = classifyAccountRoot(schemaMd, entries2.map((e) => e.name));
       console.error(
         `[data-schema] op=classify account=${acctId} status=${groups.parsed ? "ok" : "parse-failed"} reason=${groups.reason} entries=${entries2.length} home=${groups.home.join(",") || "none"} system=${groups.system.length} unknown=${groups.unknown.join(",") || "none"}`
@@ -20724,7 +20817,7 @@ app26.get("/", requireAdminSession, async (c) => {
       for (const name of homeDirs) {
         const base = byName.get(name);
         try {
-          const dirents = await readdir4(join41(absolute, name), { withFileTypes: true });
+          const dirents = await readdir4(join42(absolute, name), { withFileTypes: true });
           const visible = dirents.filter((d) => !d.name.startsWith("."));
           visible.sort((a, b) => {
             const ad = a.isDirectory() ? 0 : 1;
@@ -20766,7 +20859,7 @@ app26.get("/", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app26.get("/download", requireAdminSession, async (c) => {
+app27.get("/download", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -20789,7 +20882,7 @@ app26.get("/download", requireAdminSession, async (c) => {
       console.error(`[data] op=scratchpad-no-session sessionId="${sessionId.slice(0, 8)}\u2026"`);
       return c.json({ error: "Not found" }, 404);
     }
-    const meta = readSidecarMeta(join41(projectDir, `${sessionId}.meta.json`));
+    const meta = readSidecarMeta(join42(projectDir, `${sessionId}.meta.json`));
     if (!meta.accountId || meta.accountId !== accountId) {
       console.error(`[data] account-scope-blocked root="scratchpad" sessionId="${sessionId.slice(0, 8)}\u2026" account=${accountId.slice(0, 8)}\u2026`);
       return c.json({ error: "Not found" }, 404);
@@ -20884,7 +20977,7 @@ async function* walkRegularFiles(dirAbsolute) {
   const dirents = await readdir4(dirAbsolute, { withFileTypes: true });
   for (const d of dirents) {
     if (d.isSymbolicLink()) continue;
-    const child = join41(dirAbsolute, d.name);
+    const child = join42(dirAbsolute, d.name);
     if (d.isDirectory()) {
       yield* walkRegularFiles(child);
       continue;
@@ -20892,7 +20985,7 @@ async function* walkRegularFiles(dirAbsolute) {
     if (d.isFile()) yield child;
   }
 }
-app26.get("/download-zip", requireAdminSession, async (c) => {
+app27.get("/download-zip", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -20994,7 +21087,7 @@ async function resolveUploadTarget(c, accountId, uid) {
   const base = resolveSharedOrOwnAccountWrite(rawDir, accountId, "POST /api/admin/files/upload");
   if (!base.ok) return { ok: false, status: base.status, error: base.error };
   const relDir = relpath ? dirname15(relpath) : ".";
-  const destRel = relDir === "." ? base.relative : join41(base.relative, relDir);
+  const destRel = relDir === "." ? base.relative : join42(base.relative, relDir);
   if ((0, import_dist.isSharedPath)(destRel)) {
     const gate = gateSharedWrite(base.absolute, destRel, accountId, "POST /api/admin/files/upload");
     if (!gate.ok) return { ok: false, status: gate.status, error: gate.error };
@@ -21034,7 +21127,7 @@ async function logUploadsTmpCensus(accountId) {
   }
   console.error(`[uploads-tmp-census] dir=${accountId} live=${live}`);
 }
-app26.post("/upload", requireAdminSession, async (c) => {
+app27.post("/upload", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -21338,7 +21431,7 @@ async function sweepStaleUploadTemps() {
   if (removed > 0) console.error(`[data-upload] op=sweep removed=${removed}`);
   return removed;
 }
-app26.delete("/", requireAdminSession, async (c) => {
+app27.delete("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -21380,7 +21473,7 @@ app26.delete("/", requireAdminSession, async (c) => {
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
     const containerDir = dirname15(absolute);
-    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join41(containerDir, `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join42(containerDir, `${stem}.meta.json`) : null;
     const isAttachmentContainer = UUID_RE3.test(stem) && basename13(containerDir) === stem;
     await unlink3(absolute);
     if (sidecarPath) {
@@ -21390,7 +21483,7 @@ app26.delete("/", requireAdminSession, async (c) => {
       }
     }
     if (isAttachmentContainer) {
-      await unlink3(join41(containerDir, `${stem}${EXTRACTED_TEXT_SUFFIX}`)).catch(() => {
+      await unlink3(join42(containerDir, `${stem}${EXTRACTED_TEXT_SUFFIX}`)).catch(() => {
       });
       await rmdir(containerDir).catch(() => {
       });
@@ -21426,7 +21519,7 @@ app26.delete("/", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app26.post("/folder", requireAdminSession, async (c) => {
+app27.post("/folder", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -21461,7 +21554,7 @@ app26.post("/folder", requireAdminSession, async (c) => {
   console.error(`[data] folder-create path="${newRel}"`);
   return c.json({ path: newRel });
 });
-app26.post("/rename", requireAdminSession, async (c) => {
+app27.post("/rename", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -21511,7 +21604,7 @@ app26.post("/rename", requireAdminSession, async (c) => {
   });
   return c.json({ path: newRel });
 });
-var files_default = app26;
+var files_default = app27;
 
 // server/routes/admin/graph-search.ts
 init_dist();
@@ -22275,8 +22368,8 @@ var DEFAULT_LIMIT = 20;
 var MAX_LIMIT = 2e3;
 var MESSAGE_FAMILY_LABELS = ["Message", "UserMessage", "AssistantMessage"];
 var CONVERSATION_PARENT_LABELS = /* @__PURE__ */ new Set(["AdminConversation", "PublicConversation"]);
-var app27 = new Hono();
-app27.get("/", requireAdminSession, async (c) => {
+var app28 = new Hono();
+app28.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const q2 = (c.req.query("q") ?? "").trim();
   const rawLimit = c.req.query("limit");
@@ -22412,7 +22505,7 @@ app27.get("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var graph_search_default = app27;
+var graph_search_default = app28;
 
 // server/routes/admin/graph-subgraph.ts
 init_dist();
@@ -22516,7 +22609,7 @@ function isHiddenByDefault(label) {
 // server/lib/top-level-labels.ts
 var import_dist6 = __toESM(require_dist5(), 1);
 import { readdirSync as readdirSync24, readFileSync as readFileSync36 } from "fs";
-import { join as join42, resolve as resolve29 } from "path";
+import { join as join43, resolve as resolve29 } from "path";
 var STATIC_TOP_LEVEL_LABELS = Object.freeze(
   /* @__PURE__ */ new Set([
     // Base-schema infra (schema-base.md has no top-level section).
@@ -22620,7 +22713,7 @@ function parseTopLevelLabels(content) {
 }
 function resolveReferencesDir() {
   if (process.env.MAXY_PLATFORM_ROOT) {
-    return join42(process.env.MAXY_PLATFORM_ROOT, "plugins", "memory", "references");
+    return join43(process.env.MAXY_PLATFORM_ROOT, "plugins", "memory", "references");
   }
   return resolve29(import.meta.dirname, "../../../plugins/memory/references");
 }
@@ -22630,7 +22723,7 @@ function parseTableTopLevelLabels(referencesDir) {
   try {
     const fileNames = readdirSync24(referencesDir).filter((f) => f.startsWith("schema-") && f.endsWith(".md")).sort();
     for (const fileName of fileNames) {
-      const content = readFileSync36(join42(referencesDir, fileName), "utf-8");
+      const content = readFileSync36(join43(referencesDir, fileName), "utf-8");
       const parsed = parseTopLevelLabels(content);
       if (parsed.length > 0) contributingFiles.push(fileName);
       for (const label of parsed) labels.add(label);
@@ -22675,8 +22768,8 @@ var STRIPPED_PROPERTIES = /* @__PURE__ */ new Set([
   "otpCode",
   "cacheKey"
 ]);
-var app28 = new Hono();
-app28.get("/", requireAdminSession, async (c) => {
+var app29 = new Hono();
+app29.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -23347,7 +23440,7 @@ function pruneNode(node, warnedClasses, conversationWarnings) {
   }
   return trashed ? { id: node.id, labels, properties, trashed: true } : { id: node.id, labels, properties };
 }
-var graph_subgraph_default = app28;
+var graph_subgraph_default = app29;
 
 // server/routes/admin/graph-delete.ts
 init_dist();
@@ -23355,8 +23448,8 @@ init_helpers();
 init_claude_agent();
 init_neo4j_store();
 var ALLOWED_BY = ["graph-page", "graph-drag-trash", "graph-side-panel-trash"];
-var app29 = new Hono();
-app29.post("/", requireAdminSession, async (c) => {
+var app30 = new Hono();
+app30.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -23518,15 +23611,15 @@ app29.post("/", requireAdminSession, async (c) => {
     }
   }
 });
-var graph_delete_default = app29;
+var graph_delete_default = app30;
 
 // server/routes/admin/graph-restore.ts
 init_dist();
 init_helpers();
 init_claude_agent();
 init_neo4j_store();
-var app30 = new Hono();
-app30.post("/", requireAdminSession, async (c) => {
+var app31 = new Hono();
+app31.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -23590,15 +23683,15 @@ app30.post("/", requireAdminSession, async (c) => {
     }
   }
 });
-var graph_restore_default = app30;
+var graph_restore_default = app31;
 
 // server/routes/admin/graph-labels-in-graph.ts
 init_dist();
 init_helpers();
 init_claude_agent();
 init_neo4j_store();
-var app31 = new Hono();
-app31.get("/", requireAdminSession, async (c) => {
+var app32 = new Hono();
+app32.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -23664,15 +23757,15 @@ var LABELS_IN_GRAPH_CYPHER = `
        sum(halfEdges) AS relDegree
   RETURN label, nodeCount, relDegree
 `;
-var graph_labels_in_graph_default = app31;
+var graph_labels_in_graph_default = app32;
 
 // server/routes/admin/graph-default-view.ts
 init_dist();
 init_helpers();
 init_claude_agent();
 init_neo4j_store();
-var app32 = new Hono();
-app32.get("/", requireAdminSession, async (c) => {
+var app33 = new Hono();
+app33.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -23710,7 +23803,7 @@ app32.get("/", requireAdminSession, async (c) => {
     }
   }
 });
-app32.put("/", requireAdminSession, async (c) => {
+app33.put("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -23799,7 +23892,7 @@ var WRITE_CYPHER = `
       p.updatedAt = $updatedAt
   RETURN p.labels AS labels
 `;
-var graph_default_view_default = app32;
+var graph_default_view_default = app33;
 
 // server/routes/admin/sidebar-artefacts.ts
 init_dist();
@@ -23819,8 +23912,8 @@ function toDataRootRelPath(absPath) {
   if (absPath !== DATA_ROOT && !absPath.startsWith(DATA_ROOT + sep10)) return null;
   return relative7(DATA_ROOT, absPath);
 }
-var app33 = new Hono();
-app33.get("/", requireAdminSession, async (c) => {
+var app34 = new Hono();
+app34.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -23989,7 +24082,7 @@ function isWithin(target, root) {
   const rel = relative7(root, target);
   return !rel.startsWith("..") && !isAbsolute4(rel);
 }
-var sidebar_artefacts_default = app33;
+var sidebar_artefacts_default = app34;
 
 // server/routes/admin/index.ts
 init_sidebar_sessions();
@@ -24014,8 +24107,8 @@ function clearForwardPointers(sessionId) {
 }
 
 // server/routes/admin/session-delete.ts
-var app34 = new Hono();
-app34.post("/", requireAdminSession, async (c) => {
+var app35 = new Hono();
+app35.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24054,13 +24147,13 @@ app34.post("/", requireAdminSession, async (c) => {
   console.error(`[session-delete] sessionId=${sessionId} delete-status=${del.status}`);
   return c.json({ error: `manager-status-${del.status}` }, 502);
 });
-var session_delete_default = app34;
+var session_delete_default = app35;
 
 // server/routes/admin/session-stop.ts
 init_dist();
 init_helpers();
-var app35 = new Hono();
-app35.post("/", requireAdminSession, async (c) => {
+var app36 = new Hono();
+app36.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24085,13 +24178,13 @@ app35.post("/", requireAdminSession, async (c) => {
   console.error(`[session-stop] sessionId=${sessionId} manager-status=${res.status}`);
   return c.json({ error: `manager-status-${res.status}` }, 502);
 });
-var session_stop_default = app35;
+var session_stop_default = app36;
 
 // server/routes/admin/session-archive.ts
 init_dist();
 init_helpers();
-var app36 = new Hono();
-app36.post("/", requireAdminSession, async (c) => {
+var app37 = new Hono();
+app37.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24140,13 +24233,13 @@ app36.post("/", requireAdminSession, async (c) => {
   console.error(`[session-archive] sessionId=${sessionId.slice(0, 8)} manager-status=${res.status}`);
   return c.json({ error: `manager-status-${res.status}` }, 502);
 });
-var session_archive_default = app36;
+var session_archive_default = app37;
 
 // server/routes/admin/session-rename.ts
 init_dist();
 init_helpers();
-var app37 = new Hono();
-app37.post("/", requireAdminSession, async (c) => {
+var app38 = new Hono();
+app38.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24185,13 +24278,13 @@ app37.post("/", requireAdminSession, async (c) => {
   console.error(`[session-rename] sessionId=${sessionId.slice(0, 8)} manager-status=${res.status}`);
   return c.json({ error: `manager-status-${res.status}` }, 502);
 });
-var session_rename_default = app37;
+var session_rename_default = app38;
 
 // server/routes/admin/session-usage.ts
 init_dist();
 init_helpers();
-var app38 = new Hono();
-app38.get("/", requireAdminSession, async (c) => {
+var app39 = new Hono();
+app39.get("/", requireAdminSession, async (c) => {
   const sessionId = c.req.query("sessionId") ?? "";
   if (!SESSION_ID_RE2.test(sessionId)) {
     return c.json({ error: "sessionId must be a v4 UUID" }, 400);
@@ -24217,7 +24310,7 @@ app38.get("/", requireAdminSession, async (c) => {
   console.error(`[session-usage] sessionId=${sessionId.slice(0, 8)} manager-status=${res.status}`);
   return c.json({ error: `manager-status-${res.status}` }, 502);
 });
-var session_usage_default = app38;
+var session_usage_default = app39;
 
 // server/routes/admin/session-rc-spawn.ts
 init_dist();
@@ -24284,8 +24377,8 @@ function shapeWebchatResponse(sessionId, manager, titleSource = "none") {
   const landed = redirected ? manager.sessionId : sessionId;
   return { sessionId: landed, outcome, target: `/chat?session=${landed}`, titleSource };
 }
-var app39 = new Hono();
-app39.post("/", requireAdminSession, async (c) => {
+var app40 = new Hono();
+app40.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24401,7 +24494,7 @@ app39.post("/", requireAdminSession, async (c) => {
   }
   return c.json(parsed ?? {});
 });
-var session_rc_spawn_default = app39;
+var session_rc_spawn_default = app40;
 
 // server/routes/admin/session-reseat.ts
 init_dist();
@@ -24410,24 +24503,24 @@ init_session_store();
 import { randomUUID as randomUUID8 } from "crypto";
 
 // server/wa-descriptor.ts
-import { resolve as resolve31, join as join43 } from "path";
+import { resolve as resolve31, join as join44 } from "path";
 function waGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function waServerPath() {
-  return process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve31(process.env.MAXY_PLATFORM_ROOT ?? join43(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
+  return process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve31(process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
 }
 function waChannelDescriptor(senderId) {
   return { senderId, gatewayUrl: waGatewayUrl(), serverPath: waServerPath() };
 }
 
 // server/telegram-descriptor.ts
-import { resolve as resolve32, join as join44 } from "path";
+import { resolve as resolve32, join as join45 } from "path";
 function telegramGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function telegramServerPath() {
-  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve32(process.env.MAXY_PLATFORM_ROOT ?? join44(__dirname, ".."), "services/telegram-channel/dist/server.js");
+  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve32(process.env.MAXY_PLATFORM_ROOT ?? join45(__dirname, ".."), "services/telegram-channel/dist/server.js");
 }
 function telegramChannelDescriptor(senderId) {
   return { senderId, gatewayUrl: telegramGatewayUrl(), serverPath: telegramServerPath() };
@@ -24477,9 +24570,9 @@ function resolveReseatPlan(body, mintId = randomUUID8, adminUserId, authenticate
   if (authenticatedName) payload.authenticatedName = authenticatedName;
   return { sessionId, payload };
 }
-var app40 = new Hono();
+var app41 = new Hono();
 var reseatsInFlight = /* @__PURE__ */ new Set();
-app40.post("/", requireAdminSession, async (c) => {
+app41.post("/", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24596,7 +24689,7 @@ app40.post("/", requireAdminSession, async (c) => {
     reseatsInFlight.delete(fromSessionId);
   }
 });
-var session_reseat_default = app40;
+var session_reseat_default = app41;
 
 // server/routes/admin/system-stats.ts
 init_dist();
@@ -24694,8 +24787,8 @@ async function sample() {
   if (process.platform === "linux") return sampleLinux();
   return sampleOsFallback();
 }
-var app41 = new Hono();
-app41.get("/", async (c) => {
+var app42 = new Hono();
+app42.get("/", async (c) => {
   const started2 = Date.now();
   if (!inflight) {
     inflight = sample().finally(() => {
@@ -24718,16 +24811,16 @@ app41.get("/", async (c) => {
     return c.json({ degraded: true, reason, sampledAtMs: Date.now() });
   }
 });
-var system_stats_default = app41;
+var system_stats_default = app42;
 
 // server/routes/admin/health.ts
 init_dist();
 init_neo4j_store();
 import { existsSync as existsSync38, readFileSync as readFileSync37 } from "fs";
-import { resolve as resolve33, join as join45 } from "path";
+import { resolve as resolve33, join as join46 } from "path";
 var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT ?? resolve33(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join45(PLATFORM_ROOT4, "config", "brand.json");
+var brandJsonPath = join46(PLATFORM_ROOT4, "config", "brand.json");
 if (existsSync38(brandJsonPath)) {
   try {
     const brand = JSON.parse(readFileSync37(brandJsonPath, "utf-8"));
@@ -24765,8 +24858,8 @@ async function probeConversationDb() {
     });
   }
 }
-var app42 = new Hono();
-app42.get("/", async (c) => {
+var app43 = new Hono();
+app43.get("/", async (c) => {
   const version = readVersion();
   const probe = await probeConversationDb();
   const uptimeMs = Date.now() - new Date(PROCESS_STARTED_AT).getTime();
@@ -24788,7 +24881,7 @@ app42.get("/", async (c) => {
     uptimeMs
   });
 });
-var health_default2 = app42;
+var health_default2 = app43;
 
 // server/routes/admin/linkedin-ingest.ts
 init_dist();
@@ -24989,7 +25082,7 @@ function managerLogFollowUrl(sessionId, opts) {
 }
 
 // server/routes/admin/linkedin-ingest.ts
-var TAG28 = "[linkedin-ingest-route]";
+var TAG29 = "[linkedin-ingest-route]";
 var UUID4 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 var ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/;
 var LINKEDIN_URL = /^https:\/\/www\.linkedin\.com\//;
@@ -25108,34 +25201,34 @@ var requireIngestToken = async (c, next) => {
   console.log(`${AUTH_TAG} outcome=accept accountId=${accountId.slice(0, 8)} path=${c.req.path}`);
   await next();
 };
-var app43 = new Hono();
-app43.post("/", requireIngestToken, async (c) => {
+var app44 = new Hono();
+app44.post("/", requireIngestToken, async (c) => {
   let body;
   try {
     body = await c.req.json();
   } catch {
-    console.error(TAG28 + " rejected status=400 reason=schema:body-not-json");
+    console.error(TAG29 + " rejected status=400 reason=schema:body-not-json");
     return c.json({ ok: false, error: "schema", reason: "body-not-json" }, 400);
   }
   const v = validate2(body);
   if (!v.ok) {
-    console.error(TAG28 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
+    console.error(TAG29 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
     return c.json({ ok: false, error: v.error, reason: v.reason, missing: v.missing }, v.status);
   }
   const envelope = v.envelope;
   const senderId = c.var.ingestAccountId ?? "";
   if (!senderId) {
-    console.error(TAG28 + " rejected status=500 reason=admin-account-not-resolved");
+    console.error(TAG29 + " rejected status=500 reason=admin-account-not-resolved");
     return c.json({ ok: false, error: "admin-account-not-resolved" }, 500);
   }
   const payloadBytes = JSON.stringify(envelope).length;
   console.log(
-    TAG28 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
+    TAG29 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
   );
   const initialMessage = buildInitialMessage(envelope);
   const spawnStart = Date.now();
   const sessionId = randomUUID9();
-  console.log(TAG28 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
+  console.log(TAG29 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -25148,22 +25241,22 @@ app43.post("/", requireIngestToken, async (c) => {
   });
   if ("error" in spawned) {
     console.error(
-      TAG28 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
+      TAG29 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
     );
     return c.json({ ok: false, error: "dispatch-failed", upstreamStatus: spawned.status, detail: spawned.error }, 502);
   }
   console.log(
-    TAG28 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
+    TAG29 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
   );
   return c.json({ ok: true, dispatchId: envelope.dispatchId, taskId: spawned.sessionId }, 202);
 });
-var linkedin_ingest_default = app43;
+var linkedin_ingest_default = app44;
 
 // server/routes/admin/post-turn-context.ts
 init_dist();
 init_neo4j_store();
 import neo4j2 from "neo4j-driver";
-var TAG29 = "[post-turn-context]";
+var TAG30 = "[post-turn-context]";
 var STRIPPED_PROPERTIES2 = /* @__PURE__ */ new Set([
   "embedding",
   "passwordHash",
@@ -25171,7 +25264,7 @@ var STRIPPED_PROPERTIES2 = /* @__PURE__ */ new Set([
   "otpCode",
   "cacheKey"
 ]);
-function isLoopbackAddr3(addr) {
+function isLoopbackAddr4(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
 function convertValue(value) {
@@ -25201,20 +25294,20 @@ function pruneProperties(raw) {
   }
   return out;
 }
-var app44 = new Hono();
-app44.get("/", async (c) => {
+var app45 = new Hono();
+app45.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
-  if (!isLoopbackAddr3(remoteAddr)) {
-    console.error(`${TAG29} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+  if (!isLoopbackAddr4(remoteAddr)) {
+    console.error(`${TAG30} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "post-turn-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
   const xffRaw = Array.isArray(xffHeader) ? xffHeader.join(",") : typeof xffHeader === "string" ? xffHeader : "";
   if (xffRaw.length > 0) {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
-    const offender = tokens.find((t) => !isLoopbackAddr3(t));
+    const offender = tokens.find((t) => !isLoopbackAddr4(t));
     if (offender !== void 0) {
-      console.error(`${TAG29} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG30} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "post-turn-context-loopback-only" }, 403);
     }
   }
@@ -25246,7 +25339,7 @@ app44.get("/", async (c) => {
     writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
     const total = Date.now() - started2;
     console.log(
-      `${TAG29} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
+      `${TAG30} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
     );
     return c.json({
       writes: writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }))
@@ -25255,14 +25348,14 @@ app44.get("/", async (c) => {
     const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG29} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
+      `${TAG30} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `post-turn-context unavailable: ${message}` }, 503);
   } finally {
     await session.close();
   }
 });
-var post_turn_context_default = app44;
+var post_turn_context_default = app45;
 
 // server/routes/admin/public-session-context.ts
 init_dist();
@@ -25372,24 +25465,24 @@ function formatPreviousContext(writes) {
 }
 
 // server/routes/admin/public-session-context.ts
-var TAG30 = "[public-session-context]";
-function isLoopbackAddr4(addr) {
+var TAG31 = "[public-session-context]";
+function isLoopbackAddr5(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-var app45 = new Hono();
-app45.get("/", async (c) => {
+var app46 = new Hono();
+app46.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
-  if (!isLoopbackAddr4(remoteAddr)) {
-    console.error(`${TAG30} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+  if (!isLoopbackAddr5(remoteAddr)) {
+    console.error(`${TAG31} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
   const xffRaw = Array.isArray(xffHeader) ? xffHeader.join(",") : typeof xffHeader === "string" ? xffHeader : "";
   if (xffRaw.length > 0) {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
-    const offender = tokens.find((t) => !isLoopbackAddr4(t));
+    const offender = tokens.find((t) => !isLoopbackAddr5(t));
     if (offender !== void 0) {
-      console.error(`${TAG30} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG31} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-context-loopback-only" }, 403);
     }
   }
@@ -25403,21 +25496,21 @@ app45.get("/", async (c) => {
     const writes = await fetchSliceWrites(session, sliceToken, accountId);
     const total = Date.now() - started2;
     console.log(
-      `${TAG30} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
+      `${TAG31} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
     );
     return c.json({ writes });
   } catch (err) {
     const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG30} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
+      `${TAG31} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `public-session-context unavailable: ${message}` }, 503);
   } finally {
     await session.close();
   }
 });
-var public_session_context_default = app45;
+var public_session_context_default = app46;
 
 // server/routes/admin/public-session-exit.ts
 init_dist();
@@ -25432,24 +25525,24 @@ function getWebchatGateway() {
 }
 
 // server/routes/admin/public-session-exit.ts
-var TAG31 = "[public-session-exit-route]";
-function isLoopbackAddr5(addr) {
+var TAG32 = "[public-session-exit-route]";
+function isLoopbackAddr6(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-var app46 = new Hono();
-app46.post("/", async (c) => {
+var app47 = new Hono();
+app47.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
-  if (!isLoopbackAddr5(remoteAddr)) {
-    console.error(`${TAG31} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+  if (!isLoopbackAddr6(remoteAddr)) {
+    console.error(`${TAG32} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-exit-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
   const xffRaw = Array.isArray(xffHeader) ? xffHeader.join(",") : typeof xffHeader === "string" ? xffHeader : "";
   if (xffRaw.length > 0) {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
-    const offender = tokens.find((t) => !isLoopbackAddr5(t));
+    const offender = tokens.find((t) => !isLoopbackAddr6(t));
     if (offender !== void 0) {
-      console.error(`${TAG31} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG32} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-exit-loopback-only" }, 403);
     }
   }
@@ -25463,34 +25556,34 @@ app46.post("/", async (c) => {
   if (!sessionId) return c.json({ error: "sessionId required" }, 400);
   const gateway = getWebchatGateway();
   if (!gateway) {
-    console.error(`${TAG31} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
+    console.error(`${TAG32} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
     return c.json({ error: "webchat-gateway-unset" }, 503);
   }
   gateway.handlePublicSessionExit(sessionId);
   return c.json({ ok: true });
 });
-var public_session_exit_default = app46;
+var public_session_exit_default = app47;
 
 // server/routes/admin/access-session-evict.ts
 init_dist();
-var TAG32 = "[access-session-evict]";
-function isLoopbackAddr6(addr) {
+var TAG33 = "[access-session-evict]";
+function isLoopbackAddr7(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
-var app47 = new Hono();
-app47.post("/", async (c) => {
+var app48 = new Hono();
+app48.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
-  if (!isLoopbackAddr6(remoteAddr)) {
-    console.error(`${TAG32} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+  if (!isLoopbackAddr7(remoteAddr)) {
+    console.error(`${TAG33} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "access-session-evict-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
   const xffRaw = Array.isArray(xffHeader) ? xffHeader.join(",") : typeof xffHeader === "string" ? xffHeader : "";
   if (xffRaw.length > 0) {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
-    const offender = tokens.find((t) => !isLoopbackAddr6(t));
+    const offender = tokens.find((t) => !isLoopbackAddr7(t));
     if (offender !== void 0) {
-      console.error(`${TAG32} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG33} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "access-session-evict-loopback-only" }, 403);
     }
   }
@@ -25503,33 +25596,33 @@ app47.post("/", async (c) => {
   const grantId = typeof body.grantId === "string" ? body.grantId.trim() : "";
   if (!grantId) return c.json({ error: "grantId required" }, 400);
   const dropped = evictAccessSessionsByGrant(grantId);
-  console.log(`${TAG32} grantId=${grantId} dropped=${dropped}`);
+  console.log(`${TAG33} grantId=${grantId} dropped=${dropped}`);
   return c.json({ ok: true, dropped });
 });
-var access_session_evict_default = app47;
+var access_session_evict_default = app48;
 
 // server/routes/admin/enrol-person.ts
 init_dist();
 init_normalize();
-var TAG33 = "[enrol]";
-function isLoopbackAddr7(addr) {
+var TAG34 = "[enrol]";
+function isLoopbackAddr8(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
 var EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
-var app48 = new Hono();
-app48.post("/", async (c) => {
+var app49 = new Hono();
+app49.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
-  if (!isLoopbackAddr7(remoteAddr)) {
-    console.error(`${TAG33} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+  if (!isLoopbackAddr8(remoteAddr)) {
+    console.error(`${TAG34} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "enrol-person-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
   const xffRaw = Array.isArray(xffHeader) ? xffHeader.join(",") : typeof xffHeader === "string" ? xffHeader : "";
   if (xffRaw.length > 0) {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
-    const offender = tokens.find((t) => !isLoopbackAddr7(t));
+    const offender = tokens.find((t) => !isLoopbackAddr8(t));
     if (offender !== void 0) {
-      console.error(`${TAG33} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG34} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "enrol-person-loopback-only" }, 403);
     }
   }
@@ -25554,7 +25647,7 @@ app48.post("/", async (c) => {
   }
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG33} op=person result=no-account-id`);
+    console.error(`${TAG34} op=person result=no-account-id`);
     return c.json({ error: "no-account-id" }, 500);
   }
   let personId;
@@ -25562,7 +25655,7 @@ app48.post("/", async (c) => {
     personId = await enrolPerson({ accountId, phone, email, agentSlug });
   } catch (err) {
     console.error(
-      `${TAG33} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG34} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "enrol-failed" }, 500);
   }
@@ -25572,22 +25665,22 @@ app48.post("/", async (c) => {
     if (g) grant = { grantId: g.grantId, status: g.status, contactValue: g.contactValue };
   } catch (err) {
     console.error(
-      `${TAG33} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG34} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
   console.log(
-    `${TAG33} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
+    `${TAG34} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
   );
   return c.json({ personId, grant }, 200);
 });
-var enrol_person_default = app48;
+var enrol_person_default = app49;
 
 // server/routes/admin/browser.ts
 init_dist();
 init_helpers();
 init_paths();
-var app49 = new Hono();
-app49.post("/launch", requireAdminSession, async (c) => {
+var app50 = new Hono();
+app50.post("/launch", requireAdminSession, async (c) => {
   try {
     if (process.platform !== "linux") {
       console.error("[admin/browser/launch] op=skipped platform=darwin reason=no-display-stack");
@@ -25622,7 +25715,7 @@ app49.post("/launch", requireAdminSession, async (c) => {
     );
   }
 });
-app49.get("/screencast-targets", requireAdminSession, async (c) => {
+app50.get("/screencast-targets", requireAdminSession, async (c) => {
   const result = await fetchPageTargets({
     fetchImpl: fetch,
     cdpPort: CDP_PORT,
@@ -25635,7 +25728,7 @@ app49.get("/screencast-targets", requireAdminSession, async (c) => {
   screencastLog("targets", { count: result.targets.length, cdpPort: CDP_PORT });
   return c.json({ ok: true, targets: result.targets });
 });
-app49.post("/screencast-event", requireAdminSession, async (c) => {
+app50.post("/screencast-event", requireAdminSession, async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -25649,7 +25742,7 @@ app49.post("/screencast-event", requireAdminSession, async (c) => {
   screencastLog(parsed.op, parsed.detail);
   return c.json({ ok: true });
 });
-app49.post("/tabs", requireAdminSession, async (c) => {
+app50.post("/tabs", requireAdminSession, async (c) => {
   tabsLog("create");
   const result = await createPageTarget({ fetchImpl: fetch, cdpPort: CDP_PORT, platform: process.platform });
   if (!result.ok) {
@@ -25659,7 +25752,7 @@ app49.post("/tabs", requireAdminSession, async (c) => {
   tabsLog("created", { targetId: result.id });
   return c.json({ ok: true, id: result.id });
 });
-app49.delete("/tabs/:id", requireAdminSession, async (c) => {
+app50.delete("/tabs/:id", requireAdminSession, async (c) => {
   const targetId = c.req.param("id");
   tabsLog("close", { targetId });
   const result = await closePageTarget(
@@ -25673,7 +25766,7 @@ app49.delete("/tabs/:id", requireAdminSession, async (c) => {
   tabsLog("closed", { targetId });
   return c.json({ ok: true });
 });
-var browser_default = app49;
+var browser_default = app50;
 
 // server/routes/admin/calendar.ts
 init_dist();
@@ -25683,7 +25776,7 @@ init_account_scope();
 init_neo4j_store();
 import { existsSync as existsSync40 } from "fs";
 import { randomUUID as randomUUID10 } from "crypto";
-import { join as join47 } from "path";
+import { join as join48 } from "path";
 
 // server/lib/calendar-ics.ts
 var CRLF = "\r\n";
@@ -25784,7 +25877,7 @@ function countVEvents(ics) {
 
 // server/lib/calendar-availability.ts
 import { readFileSync as readFileSync39 } from "fs";
-import { join as join46 } from "path";
+import { join as join47 } from "path";
 var AVAILABILITY_FILENAME = "calendar-availability.json";
 var REQUIRED_KEYS = [
   "timezone",
@@ -25793,7 +25886,7 @@ var REQUIRED_KEYS = [
   "weekly"
 ];
 function readAvailabilityConfig(accountDir) {
-  const path = join46(accountDir, AVAILABILITY_FILENAME);
+  const path = join47(accountDir, AVAILABILITY_FILENAME);
   let raw;
   try {
     raw = readFileSync39(path, "utf-8");
@@ -25906,7 +25999,7 @@ function computeOpenSlots(config, busy, fromISO, toISO) {
 }
 
 // server/routes/admin/calendar.ts
-var app50 = new Hono();
+var app51 = new Hono();
 function normalizeAttendees(raw) {
   if (!Array.isArray(raw)) return [];
   return raw.map((a) => {
@@ -25987,7 +26080,7 @@ var GET_UNION = `MATCH (m:Meeting {accountId: $accountId})
               'task' AS kind, null AS privateNote,
               t.description AS description, null AS timezone,
               [] AS attendees`;
-app50.get("/meetings", requireAdminSession, async (c) => {
+app51.get("/meetings", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -26015,7 +26108,7 @@ app50.get("/meetings", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.get("/free-busy", requireAdminSession, async (c) => {
+app51.get("/free-busy", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const account = accountDirForSession(cacheKey);
   if (!account) {
@@ -26065,7 +26158,7 @@ app50.get("/free-busy", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.post("/meetings", requireAdminSession, async (c) => {
+app51.post("/meetings", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -26114,7 +26207,7 @@ function icsFilename(title) {
   const slug = (title ?? "").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60);
   return `${slug || "meeting"}.ics`;
 }
-app50.get("/meetings/:id/ics", requireAdminSession, async (c) => {
+app51.get("/meetings/:id/ics", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -26173,7 +26266,7 @@ app50.get("/meetings/:id/ics", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.patch("/meetings/:id", requireAdminSession, async (c) => {
+app51.patch("/meetings/:id", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -26217,7 +26310,7 @@ app50.patch("/meetings/:id", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.post("/meetings/:id/attendees", requireAdminSession, async (c) => {
+app51.post("/meetings/:id/attendees", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -26267,7 +26360,7 @@ app50.post("/meetings/:id/attendees", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.delete("/meetings/:id/attendees", requireAdminSession, async (c) => {
+app51.delete("/meetings/:id/attendees", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -26313,7 +26406,7 @@ app50.delete("/meetings/:id/attendees", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.delete("/meetings/:id", requireAdminSession, async (c) => {
+app51.delete("/meetings/:id", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -26343,7 +26436,7 @@ app50.delete("/meetings/:id", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.get("/booking-link", requireAdminSession, (c) => {
+app51.get("/booking-link", requireAdminSession, (c) => {
   const account = accountDirForSession(c.var.cacheKey);
   if (!account) {
     console.error("[calendar] op=booking-link auth-rejected reason=no-account-for-session accountId=none");
@@ -26351,7 +26444,7 @@ app50.get("/booking-link", requireAdminSession, (c) => {
   }
   const id82 = account.accountId.slice(0, 8);
   try {
-    if (!existsSync40(join47(account.accountDir, AVAILABILITY_FILENAME))) {
+    if (!existsSync40(join48(account.accountDir, AVAILABILITY_FILENAME))) {
       console.log(`[calendar] op=booking-link accountId=${id82} bookingDomain=none source=availability-config`);
       return c.json({ bookingDomain: null });
     }
@@ -26367,17 +26460,17 @@ app50.get("/booking-link", requireAdminSession, (c) => {
     return c.json({ bookingDomain: null });
   }
 });
-var calendar_default = app50;
+var calendar_default = app51;
 
 // server/routes/admin/data-portal.ts
 init_dist();
 init_helpers();
 init_account_scope();
 import { existsSync as existsSync41, readFileSync as readFileSync40 } from "fs";
-import { join as join48 } from "path";
-var app51 = new Hono();
+import { join as join49 } from "path";
+var app52 = new Hono();
 var PORTAL_FILENAME = "data-portal.json";
-app51.get("/portal-link", requireAdminSession, (c) => {
+app52.get("/portal-link", requireAdminSession, (c) => {
   const account = accountDirForSession(c.var.cacheKey);
   if (!account) {
     console.error("[data-portal] op=portal-link auth-rejected reason=no-account-for-session accountId=none");
@@ -26385,7 +26478,7 @@ app51.get("/portal-link", requireAdminSession, (c) => {
   }
   const id82 = account.accountId.slice(0, 8);
   try {
-    const path = join48(account.accountDir, PORTAL_FILENAME);
+    const path = join49(account.accountDir, PORTAL_FILENAME);
     if (!existsSync41(path)) {
       console.log(`[data-portal] op=portal-link accountId=${id82} portalDomain=none source=data-portal-config`);
       return c.json({ portalDomain: null });
@@ -26400,7 +26493,7 @@ app51.get("/portal-link", requireAdminSession, (c) => {
     return c.json({ portalDomain: null });
   }
 });
-var data_portal_default = app51;
+var data_portal_default = app52;
 
 // server/routes/admin/routines.ts
 init_dist();
@@ -26558,7 +26651,7 @@ function dispatchGapReason(fields) {
 
 // server/routes/admin/routines.ts
 var { parseExpression } = cronParser;
-var app52 = new Hono();
+var app53 = new Hono();
 var AUTOMATION_WHERE = "(e.recurrence IS NOT NULL OR e.agentChannel IS NOT NULL OR e.actionPlugin IS NOT NULL)";
 var DISPATCH_CHANNELS2 = /* @__PURE__ */ new Set(["whatsapp", "telegram"]);
 var ROUTINE_COLS = `e.eventId AS eventId, e.name AS name, e.eventStatus AS eventStatus,
@@ -26681,7 +26774,7 @@ function planResume(row, now) {
   }
   return { ok: true, nextRun: null };
 }
-app52.get("/", requireAdminSession, async (c) => {
+app53.get("/", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
     console.error('[admin:routines] op=list auth-rejected reason="no account for session"');
@@ -26831,7 +26924,7 @@ function runsCsvFilename(name, eventId, date) {
   const slug = clean(name ?? "").slice(0, 48).replace(/-+$/, "");
   return `${slug || clean(eventId.slice(0, 8)) || "routine"}-runs-${date}.csv`;
 }
-app52.get("/:eventId/runs", requireAdminSession, async (c) => {
+app53.get("/:eventId/runs", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
     console.error('[admin:routines] op=runs auth-rejected reason="no account for session"');
@@ -26866,7 +26959,7 @@ app52.get("/:eventId/runs", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app52.get("/:eventId/runs.csv", requireAdminSession, async (c) => {
+app53.get("/:eventId/runs.csv", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   const eventId = c.req.param("eventId");
   if (!accountId) {
@@ -26913,7 +27006,7 @@ app52.get("/:eventId/runs.csv", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app52.get("/:eventId", requireAdminSession, async (c) => {
+app53.get("/:eventId", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const eventId = c.req.param("eventId");
@@ -26937,7 +27030,7 @@ app52.get("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app52.patch("/:eventId", requireAdminSession, async (c) => {
+app53.patch("/:eventId", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const eventId = c.req.param("eventId");
@@ -27140,7 +27233,7 @@ app52.patch("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app52.post("/suspend-all", requireAdminSession, async (c) => {
+app53.post("/suspend-all", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -27168,7 +27261,7 @@ app52.post("/suspend-all", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app52.post("/resume-all", requireAdminSession, async (c) => {
+app53.post("/resume-all", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const session = getSession();
@@ -27235,7 +27328,7 @@ app52.post("/resume-all", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app52.post("/:eventId/suspend", requireAdminSession, async (c) => {
+app53.post("/:eventId/suspend", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const eventId = c.req.param("eventId");
@@ -27267,7 +27360,7 @@ app52.post("/:eventId/suspend", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app52.post("/:eventId/resume", requireAdminSession, async (c) => {
+app53.post("/:eventId/resume", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const eventId = c.req.param("eventId");
@@ -27345,7 +27438,7 @@ app52.post("/:eventId/resume", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app52.delete("/:eventId", requireAdminSession, async (c) => {
+app53.delete("/:eventId", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
     console.error('[admin:routines] op=delete auth-rejected reason="no account for session"');
@@ -27378,7 +27471,7 @@ app52.delete("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var routines_default = app52;
+var routines_default = app53;
 
 // server/routes/admin/skills.ts
 init_dist();
@@ -27387,7 +27480,7 @@ init_account_scope();
 init_route_cache();
 import { existsSync as existsSync42, readdirSync as readdirSync26, readFileSync as readFileSync42, rmSync as rmSync6 } from "fs";
 import { resolve as resolve36 } from "path";
-var app53 = new Hono();
+var app54 = new Hono();
 var NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
 function splitSkillMd(text) {
   const m = text.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
@@ -27416,7 +27509,7 @@ function subdirs2(dir) {
     return [];
   }
 }
-app53.get("/", requireAdminSession, async (c) => {
+app54.get("/", requireAdminSession, async (c) => {
   const acct = accountDirForSession(c.var.cacheKey);
   if (!acct) {
     console.error('[admin:skills] op=list auth-rejected reason="no account for session"');
@@ -27449,7 +27542,7 @@ app53.get("/", requireAdminSession, async (c) => {
   console.log(`[admin:skills] op=list accountId=${acct.accountId.slice(0, 8)} plugins=${value.pluginCount} skills=${value.skills.length} cache=${state}`);
   return c.json({ skills: value.skills });
 });
-app53.get("/:plugin/:skill", requireAdminSession, async (c) => {
+app54.get("/:plugin/:skill", requireAdminSession, async (c) => {
   const acct = accountDirForSession(c.var.cacheKey);
   if (!acct) return c.json({ error: "Account not found for session" }, 401);
   const plugin = c.req.param("plugin");
@@ -27474,7 +27567,7 @@ app53.get("/:plugin/:skill", requireAdminSession, async (c) => {
     return c.json({ error: `Skill unavailable: ${message}` }, 503);
   }
 });
-app53.delete("/:plugin/:skill", requireAdminSession, async (c) => {
+app54.delete("/:plugin/:skill", requireAdminSession, async (c) => {
   const acct = accountDirForSession(c.var.cacheKey);
   if (!acct) return c.json({ error: "Account not found for session" }, 401);
   const plugin = c.req.param("plugin");
@@ -27507,7 +27600,7 @@ app53.delete("/:plugin/:skill", requireAdminSession, async (c) => {
     return c.json({ error: `Delete failed: ${message}` }, 503);
   }
 });
-var skills_default = app53;
+var skills_default = app54;
 
 // server/routes/admin/tasks-list.ts
 init_dist();
@@ -27515,7 +27608,7 @@ init_helpers();
 init_claude_agent();
 init_route_cache();
 init_neo4j_store();
-import { basename as basename15, join as join49 } from "path";
+import { basename as basename15, join as join50 } from "path";
 
 // app/lib/time-entry-format.ts
 function secondsBetween(startIso, endIso) {
@@ -27536,20 +27629,20 @@ function toNum(v) {
 
 // server/routes/admin/tasks-list.ts
 init_sidebar_sessions();
-var TAG34 = "[task-timer]";
+var TAG35 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
-var app54 = new Hono();
-app54.get("/", requireAdminSession, async (c) => {
+var app55 = new Hono();
+app55.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG34} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG35} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   const cacheStart = Date.now();
   const cached3 = await getOrCompute("tasks-list", accountId, () => computeTaskList(accountId));
-  console.log(`${TAG34} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
+  console.log(`${TAG35} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
   if (cached3.value === null) {
     return c.json({ error: "tasks-list-failed" }, 500);
   }
@@ -27650,13 +27743,13 @@ async function computeTaskList(accountId) {
       orphans = orphanResult.records.length > 0 ? toNum(orphanResult.records[0].get("orphans")) : 0;
     } catch (err) {
       console.error(
-        `${TAG34} op=session-orphans-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG35} op=session-orphans-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
       );
       orphans = -1;
     }
     if (orphans > 0) {
       console.error(
-        `${TAG34} op=session-orphans account=${accountId} orphans=${orphans} detail="task marked for a session spawn that never linked; the spawned session is unreachable from its row"`
+        `${TAG35} op=session-orphans account=${accountId} orphans=${orphans} detail="task marked for a session spawn that never linked; the spawned session is unreachable from its row"`
       );
     }
     let orphanEntries = 0;
@@ -27675,14 +27768,14 @@ async function computeTaskList(accountId) {
       orphanAdjustments = orphanTime.records.length > 0 ? toNum(orphanTime.records[0].get("orphanAdjustments")) : 0;
     } catch (err) {
       console.error(
-        `${TAG34} op=orphan-time-records-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG35} op=orphan-time-records-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
       );
       orphanEntries = -1;
       orphanAdjustments = -1;
     }
     if (orphanEntries > 0 || orphanAdjustments > 0) {
       console.error(
-        `${TAG34} op=orphan-time-records account=${accountId} orphanEntries=${orphanEntries} orphanAdjustments=${orphanAdjustments} detail="time records whose task no longer exists; something removed the task without its records"`
+        `${TAG35} op=orphan-time-records account=${accountId} orphanEntries=${orphanEntries} orphanAdjustments=${orphanAdjustments} detail="time records whose task no longer exists; something removed the task without its records"`
       );
     }
     const linkedIds = [...open3, ...completed].map((r) => r.sessionId).filter((s) => s !== null);
@@ -27692,10 +27785,10 @@ async function computeTaskList(accountId) {
       dangling = 0;
     } else if (cfg !== null) {
       try {
-        const walk = enumerateJsonlsWithSkips(join49(cfg, "projects"));
+        const walk = enumerateJsonlsWithSkips(join50(cfg, "projects"));
         if (walk.skipped > 0) {
           console.error(
-            `${TAG34} op=session-dangling-census-incomplete account=${accountId} skipped=${walk.skipped} detail="a slug the walk could not read contributes no session ids, so its links cannot be judged"`
+            `${TAG35} op=session-dangling-census-incomplete account=${accountId} skipped=${walk.skipped} detail="a slug the walk could not read contributes no session ids, so its links cannot be judged"`
           );
           dangling = null;
         } else {
@@ -27704,34 +27797,34 @@ async function computeTaskList(accountId) {
         }
       } catch (err) {
         console.error(
-          `${TAG34} op=session-dangling-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+          `${TAG35} op=session-dangling-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
         );
         dangling = null;
       }
     }
     if (dangling !== null && dangling > 0) {
       console.error(
-        `${TAG34} op=session-dangling account=${accountId} dangling=${dangling} linked=${linkedIds.length} detail="a task links a session with no JSONL on disk; clicking it will not resume"`
+        `${TAG35} op=session-dangling account=${accountId} dangling=${dangling} linked=${linkedIds.length} detail="a task links a session with no JSONL on disk; clicking it will not resume"`
       );
     }
     const returned = result.records.length;
     if (returned < graphTotal) {
       console.error(
-        `${TAG34} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
+        `${TAG35} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
       );
     }
     console.log(
-      `${TAG34} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open3.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned} sessionLinked=${sessionLinked} sessionOrphans=${orphans < 0 ? "n/a" : orphans} sessionDangling=${dangling === null ? "n/a" : dangling}`
+      `${TAG35} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open3.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned} sessionLinked=${sessionLinked} sessionOrphans=${orphans < 0 ? "n/a" : orphans} sessionDangling=${dangling === null ? "n/a" : dangling}`
     );
     return { open: open3, completed };
   } catch (err) {
-    console.error(`${TAG34} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG35} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   } finally {
     await session.close();
   }
 }
-var tasks_list_default = app54;
+var tasks_list_default = app55;
 
 // server/routes/admin/task-timer-start.ts
 init_dist();
@@ -27740,9 +27833,9 @@ init_claude_agent();
 init_route_cache();
 init_neo4j_store();
 import { randomUUID as randomUUID11 } from "crypto";
-var TAG35 = "[task-timer]";
-var app55 = new Hono();
-app55.post("/", requireAdminSession, async (c) => {
+var TAG36 = "[task-timer]";
+var app56 = new Hono();
+app56.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -27755,7 +27848,7 @@ app55.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG35} op=timer-start rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG36} op=timer-start rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -27766,7 +27859,7 @@ app55.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (target.records.length === 0) {
-      console.error(`${TAG35} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
+      console.error(`${TAG36} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const open3 = await session.run(
@@ -27778,7 +27871,7 @@ app55.post("/", requireAdminSession, async (c) => {
     const priorEntryId = open3.records[0]?.get("entryId");
     const priorStartedAt = open3.records[0]?.get("startedAt");
     if (priorEntryId) {
-      console.log(`${TAG35} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
+      console.log(`${TAG36} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: true, entryId: priorEntryId, startedAt: priorStartedAt });
     }
@@ -27789,17 +27882,17 @@ app55.post("/", requireAdminSession, async (c) => {
        CREATE (te)-[:LOGGED_AGAINST]->(t)`,
       { taskId, accountId, entryId, now }
     );
-    console.log(`${TAG35} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
+    console.log(`${TAG36} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: true, entryId, startedAt: now });
   } catch (err) {
-    console.error(`${TAG35} op=start error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG36} op=start error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-start-failed" }, 500);
   } finally {
     await session.close();
   }
 });
-var task_timer_start_default = app55;
+var task_timer_start_default = app56;
 
 // server/routes/admin/task-timer-stop.ts
 init_dist();
@@ -27808,9 +27901,9 @@ init_claude_agent();
 init_route_cache();
 init_neo4j_store();
 import neo4j4 from "neo4j-driver";
-var TAG36 = "[task-timer]";
-var app56 = new Hono();
-app56.post("/", requireAdminSession, async (c) => {
+var TAG37 = "[task-timer]";
+var app57 = new Hono();
+app57.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -27823,7 +27916,7 @@ app56.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG36} op=timer-stop rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG37} op=timer-stop rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -27844,7 +27937,7 @@ app56.post("/", requireAdminSession, async (c) => {
         { taskId, accountId }
       );
       const secondsLogged2 = toNum(cur.records[0]?.get("secondsLogged"));
-      console.log(`${TAG36} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
+      console.log(`${TAG37} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: false, seconds: 0, secondsLogged: secondsLogged2 });
     }
@@ -27868,18 +27961,18 @@ app56.post("/", requireAdminSession, async (c) => {
     const sumEntries = toNum(verify.records[0]?.get("sumEntries"));
     const sumAdjustments = toNum(verify.records[0]?.get("sumAdjustments"));
     const secondsLogged = toNum(verify.records[0]?.get("secondsLogged"));
-    console.log(`${TAG36} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
-    console.log(`${TAG36} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
+    console.log(`${TAG37} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
+    console.log(`${TAG37} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: false, seconds, secondsLogged });
   } catch (err) {
-    console.error(`${TAG36} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG37} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-stop-failed" }, 500);
   } finally {
     await session.close();
   }
 });
-var task_timer_stop_default = app56;
+var task_timer_stop_default = app57;
 
 // server/routes/admin/task-complete.ts
 init_dist();
@@ -27887,9 +27980,9 @@ init_helpers();
 init_claude_agent();
 init_route_cache();
 init_neo4j_store();
-var TAG37 = "[task-timer]";
-var app57 = new Hono();
-app57.post("/", requireAdminSession, async (c) => {
+var TAG38 = "[task-timer]";
+var app58 = new Hono();
+app58.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -27902,7 +27995,7 @@ app57.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG37} op=complete rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG38} op=complete rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -27918,17 +28011,17 @@ app57.post("/", requireAdminSession, async (c) => {
       return c.json({ error: "task-not-found" }, 404);
     }
     const secondsLogged = toNum(result.records[0].get("secondsLogged"));
-    console.log(`${TAG37} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
+    console.log(`${TAG38} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, status: "completed", secondsLogged });
   } catch (err) {
-    console.error(`${TAG37} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG38} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-complete-failed" }, 500);
   } finally {
     await session.close();
   }
 });
-var task_complete_default = app57;
+var task_complete_default = app58;
 
 // server/routes/admin/task-time-adjust.ts
 init_dist();
@@ -27938,9 +28031,9 @@ init_route_cache();
 init_neo4j_store();
 import { randomUUID as randomUUID12 } from "crypto";
 import neo4j5 from "neo4j-driver";
-var TAG38 = "[task-time-adjust]";
-var app58 = new Hono();
-app58.post("/", requireAdminSession, async (c) => {
+var TAG39 = "[task-time-adjust]";
+var app59 = new Hono();
+app59.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -27948,23 +28041,23 @@ app58.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(`${TAG38} op=reject reason=bad-json`);
+    console.error(`${TAG39} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG38} op=time-adjust rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG39} op=time-adjust rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const newSeconds = body.newSeconds;
   if (typeof newSeconds !== "number" || !Number.isInteger(newSeconds) || newSeconds < 0) {
-    console.error(`${TAG38} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
+    console.error(`${TAG39} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
     return c.json({ error: "newSeconds must be a non-negative integer" }, 400);
   }
   const adjustmentId = randomUUID12();
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  console.log(`${TAG38} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
+  console.log(`${TAG39} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
   const session = getSession();
   try {
     const guard = await session.run(
@@ -27974,12 +28067,12 @@ app58.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (guard.records.length === 0) {
-      console.error(`${TAG38} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG39} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const openCount = toNum(guard.records[0].get("openCount"));
     if (openCount > 0) {
-      console.error(`${TAG38} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG39} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-timer-running" }, 409);
     }
     const previousSeconds = toNum(guard.records[0].get("previousSeconds"));
@@ -28005,17 +28098,17 @@ app58.post("/", requireAdminSession, async (c) => {
       }
     );
     const secondsLoggedAfter = toNum(write.records[0]?.get("secondsLoggedAfter"));
-    console.log(`${TAG38} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
+    console.log(`${TAG39} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, secondsLogged: secondsLoggedAfter });
   } catch (err) {
-    console.error(`${TAG38} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG39} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-time-adjust-failed" }, 500);
   } finally {
     await session.close();
   }
 });
-var task_time_adjust_default = app58;
+var task_time_adjust_default = app59;
 
 // server/routes/admin/task-delete.ts
 init_dist();
@@ -28024,9 +28117,9 @@ init_claude_agent();
 init_route_cache();
 init_neo4j_store();
 import { randomUUID as randomUUID13 } from "crypto";
-var TAG39 = "[task-delete]";
-var app59 = new Hono();
-app59.post("/", requireAdminSession, async (c) => {
+var TAG40 = "[task-delete]";
+var app60 = new Hono();
+app60.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -28034,18 +28127,18 @@ app59.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(`${TAG39} op=reject reason=bad-json`);
+    console.error(`${TAG40} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
   const deletionId = randomUUID13();
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG39} op=reject reason=${reason} deletionId=${deletionId} accountId=${accountId}`);
+    console.error(`${TAG40} op=reject reason=${reason} deletionId=${deletionId} accountId=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   console.log(
-    `${TAG39} op=request deletionId=${deletionId} taskId=${taskId} accountId=${accountId} confirmed=${body.confirmed === true}`
+    `${TAG40} op=request deletionId=${deletionId} taskId=${taskId} accountId=${accountId} confirmed=${body.confirmed === true}`
   );
   const session = getSession();
   try {
@@ -28061,18 +28154,18 @@ app59.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (guard.records.length === 0) {
-      console.error(`${TAG39} op=reject reason=no-task deletionId=${deletionId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG40} op=reject reason=no-task deletionId=${deletionId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const timeEntries = toNum(guard.records[0].get("timeEntries"));
     const openCount = toNum(guard.records[0].get("openCount"));
     const adjustments = toNum(guard.records[0].get("adjustments"));
     console.log(
-      `${TAG39} op=guard deletionId=${deletionId} taskId=${taskId} openCount=${openCount} timeEntries=${timeEntries} adjustments=${adjustments}`
+      `${TAG40} op=guard deletionId=${deletionId} taskId=${taskId} openCount=${openCount} timeEntries=${timeEntries} adjustments=${adjustments}`
     );
     if (openCount > 0) {
       console.error(
-        `${TAG39} op=reject reason=running deletionId=${deletionId} taskId=${taskId} openCount=${openCount}`
+        `${TAG40} op=reject reason=running deletionId=${deletionId} taskId=${taskId} openCount=${openCount}`
       );
       return c.json({ error: "task-timer-running" }, 409);
     }
@@ -28108,25 +28201,25 @@ app59.post("/", requireAdminSession, async (c) => {
     const adjustmentsLeft = toNum(after.records[0]?.get("adjustmentsLeft"));
     const remaining = taskLeft + entriesLeft + adjustmentsLeft;
     console.log(
-      `${TAG39} op=persisted deletionId=${deletionId} taskId=${taskId} tasksDeleted=${tasksDeleted} timeEntriesDeleted=${timeEntriesDeleted} adjustmentsDeleted=${adjustmentsDeleted} remaining=${remaining}`
+      `${TAG40} op=persisted deletionId=${deletionId} taskId=${taskId} tasksDeleted=${tasksDeleted} timeEntriesDeleted=${timeEntriesDeleted} adjustmentsDeleted=${adjustmentsDeleted} remaining=${remaining}`
     );
     if (remaining > 0) {
       console.error(
-        `${TAG39} op=incomplete deletionId=${deletionId} taskId=${taskId} taskLeft=${taskLeft} entriesLeft=${entriesLeft} adjustmentsLeft=${adjustmentsLeft} detail="the delete returned but rows for this taskId survive"`
+        `${TAG40} op=incomplete deletionId=${deletionId} taskId=${taskId} taskLeft=${taskLeft} entriesLeft=${entriesLeft} adjustmentsLeft=${adjustmentsLeft} detail="the delete returned but rows for this taskId survive"`
       );
     }
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, tasksDeleted, timeEntriesDeleted, adjustmentsDeleted, remaining });
   } catch (err) {
     console.error(
-      `${TAG39} op=error deletionId=${deletionId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG40} op=error deletionId=${deletionId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "task-delete-failed" }, 500);
   } finally {
     await session.close();
   }
 });
-var task_delete_default = app59;
+var task_delete_default = app60;
 
 // server/routes/admin/task-assign.ts
 init_dist();
@@ -28222,9 +28315,9 @@ async function resolveAssignableAdmins(accountId, accountsDir = ACCOUNTS_DIR) {
 }
 
 // server/routes/admin/task-assign.ts
-var TAG40 = "[task-assign]";
-var app60 = new Hono();
-app60.post("/", requireAdminSession, async (c) => {
+var TAG41 = "[task-assign]";
+var app61 = new Hono();
+app61.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -28237,7 +28330,7 @@ app60.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG40} op=assign rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG41} op=assign rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const rawAssignee = body.assigneeUserId;
@@ -28249,7 +28342,7 @@ app60.post("/", requireAdminSession, async (c) => {
     const { ids } = await resolveAllowedAssigneeIds(accountId);
     if (!ids.has(assigneeUserId)) {
       console.error(
-        `${TAG40} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
+        `${TAG41} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
       );
       return c.json({ error: "assignee-not-in-roster" }, 403);
     }
@@ -28271,7 +28364,7 @@ app60.post("/", requireAdminSession, async (c) => {
         `MATCH (t:Task {taskId: $taskId, accountId: $accountId}) SET t.updatedAt = $now`,
         { taskId, accountId, now }
       );
-      console.log(`${TAG40} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
+      console.log(`${TAG41} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, assigneeUserId: null, assigneeName: null });
     }
@@ -28287,7 +28380,7 @@ app60.post("/", requireAdminSession, async (c) => {
     );
     if (set.records.length === 0) {
       console.error(
-        `${TAG40} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
+        `${TAG41} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
       );
       return c.json({ error: "assignee-no-admin-node" }, 409);
     }
@@ -28295,31 +28388,31 @@ app60.post("/", requireAdminSession, async (c) => {
     const family = set.records[0].get("familyName") ?? null;
     const assigneeName = given && given.trim().length > 0 ? family && family.trim().length > 0 ? `${given.trim()} ${family.trim()}` : given.trim() : null;
     console.log(
-      `${TAG40} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
+      `${TAG41} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
     );
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, assigneeUserId, assigneeName });
   } catch (err) {
-    console.error(`${TAG40} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG41} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-assign-failed" }, 500);
   } finally {
     await session.close();
   }
 });
-var task_assign_default = app60;
+var task_assign_default = app61;
 
 // server/routes/admin/task-session-open.ts
 init_dist();
 init_helpers();
 init_claude_agent();
 init_neo4j_store();
-var TAG41 = "[task-session]";
-var app61 = new Hono();
-app61.post("/", requireAdminSession, async (c) => {
+var TAG42 = "[task-session]";
+var app62 = new Hono();
+app62.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG41} op=request auth-rejected reason="no account for session"`);
+    console.error(`${TAG42} op=request auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   let body;
@@ -28331,7 +28424,7 @@ app61.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG41} op=request rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG42} op=request rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const session = getSession();
@@ -28345,14 +28438,14 @@ app61.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (found.records.length === 0) {
-      console.error(`${TAG41} op=request taskId=${taskId} account=${accountId} result=task-not-found`);
+      console.error(`${TAG42} op=request taskId=${taskId} account=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const title = found.records[0].get("name") ?? "";
     const sessionId = found.records[0].get("sessionId") ?? null;
     const description = found.records[0].get("description") ?? "";
     const notes = found.records[0].get("notes") ?? "";
-    console.log(`${TAG41} op=request taskId=${taskId} account=${accountId} linked=${sessionId ?? "none"}`);
+    console.log(`${TAG42} op=request taskId=${taskId} account=${accountId} linked=${sessionId ?? "none"}`);
     if (sessionId !== null) return c.json({ sessionId, title, description, notes });
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const stamped = await session.run(
@@ -28362,16 +28455,16 @@ app61.post("/", requireAdminSession, async (c) => {
       { taskId, accountId, now }
     );
     const at = stamped.records[0]?.get("at") ?? void 0;
-    console.log(`${TAG41} op=marker taskId=${taskId} stamped=${at !== void 0}`);
+    console.log(`${TAG42} op=marker taskId=${taskId} stamped=${at !== void 0}`);
     return c.json({ sessionId: null, title, description, notes });
   } catch (err) {
-    console.error(`${TAG41} op=request taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG42} op=request taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-session-open-failed" }, 500);
   } finally {
     await session.close();
   }
 });
-var task_session_open_default = app61;
+var task_session_open_default = app62;
 
 // server/routes/admin/task-session-link.ts
 init_dist();
@@ -28379,13 +28472,13 @@ init_helpers();
 init_claude_agent();
 init_neo4j_store();
 init_route_cache();
-var TAG42 = "[task-session]";
-var app62 = new Hono();
-app62.post("/", requireAdminSession, async (c) => {
+var TAG43 = "[task-session]";
+var app63 = new Hono();
+app63.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG42} op=link auth-rejected reason="no account for session"`);
+    console.error(`${TAG43} op=link auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   let body;
@@ -28397,12 +28490,12 @@ app62.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG42} op=link rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG43} op=link rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const sessionId = typeof body.sessionId === "string" && body.sessionId.length > 0 ? body.sessionId : "";
   if (!sessionId) {
-    console.error(`${TAG42} op=link rejected reason=missing-sessionId taskId=${taskId} account=${accountId}`);
+    console.error(`${TAG43} op=link rejected reason=missing-sessionId taskId=${taskId} account=${accountId}`);
     return c.json({ error: "sessionId required" }, 400);
   }
   const session = getSession();
@@ -28416,13 +28509,13 @@ app62.post("/", requireAdminSession, async (c) => {
       { taskId, accountId, sessionId }
     );
     if (state.records.length === 0) {
-      console.error(`${TAG42} op=link taskId=${taskId} account=${accountId} result=task-not-found`);
+      console.error(`${TAG43} op=link taskId=${taskId} account=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const conversationExists = state.records[0].get("conversationExists") === true;
     const priorSessionIds = (state.records[0].get("priorSessionIds") ?? []).filter((s) => typeof s === "string");
     if (!conversationExists) {
-      console.error(`${TAG42} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=conversation-absent`);
+      console.error(`${TAG43} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=conversation-absent`);
       return c.json({ linked: false, created: false, repointedFrom: null });
     }
     const stale = priorSessionIds.filter((s) => s !== sessionId);
@@ -28448,49 +28541,49 @@ app62.post("/", requireAdminSession, async (c) => {
     const repointedFrom = stale.length > 0 ? stale[0] : null;
     if (!linked) {
       console.error(
-        `${TAG42} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=edge-absent-after-merge linkedTo=${linkedTo ?? "none"}`
+        `${TAG43} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=edge-absent-after-merge linkedTo=${linkedTo ?? "none"}`
       );
       return c.json({ linked: false, created: false, repointedFrom });
     }
     console.log(
-      `${TAG42} op=link taskId=${taskId} sessionId=${sessionId} created=${created} repointedFrom=${repointedFrom ?? "none"}`
+      `${TAG43} op=link taskId=${taskId} sessionId=${sessionId} created=${created} repointedFrom=${repointedFrom ?? "none"}`
     );
     invalidate("tasks-list", accountId);
     return c.json({ linked: true, created, repointedFrom });
   } catch (err) {
     console.error(
-      `${TAG42} op=link-failed taskId=${taskId} sessionId=${sessionId} reason="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG43} op=link-failed taskId=${taskId} sessionId=${sessionId} reason="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "task-session-link-failed" }, 500);
   } finally {
     await session.close();
   }
 });
-var task_session_link_default = app62;
+var task_session_link_default = app63;
 
 // server/routes/admin/admin-users-list.ts
 init_dist();
 init_helpers();
 init_claude_agent();
-var TAG43 = "[admin-users]";
-var app63 = new Hono();
-app63.get("/", requireAdminSession, async (c) => {
+var TAG44 = "[admin-users]";
+var app64 = new Hono();
+app64.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG43} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG44} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   try {
     const users = await resolveAssignableAdmins(accountId);
-    console.log(`${TAG43} op=list account=${accountId} count=${users.length}`);
+    console.log(`${TAG44} op=list account=${accountId} count=${users.length}`);
     return c.json({ ok: true, users });
   } catch (err) {
-    console.error(`${TAG43} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG44} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "admin-users-list-failed" }, 500);
   }
 });
-var admin_users_list_default = app63;
+var admin_users_list_default = app64;
 
 // server/routes/admin/dispatch-destinations.ts
 init_dist();
@@ -28500,7 +28593,7 @@ init_account();
 init_neo4j_store();
 init_src2();
 import { resolve as resolve38 } from "path";
-var TAG44 = "[admin:routines]";
+var TAG45 = "[admin:routines]";
 function scopeFor(d, houseDir, houseAccountId) {
   if (d.channel !== "whatsapp") return null;
   if (d.label === "Account manager") return boundSubAccountFor(houseDir, d.destination);
@@ -28514,11 +28607,11 @@ function telephoneVariants(destination) {
 function scrubDigitRuns(message) {
   return message.replace(/\d{7,}/g, "<redacted>");
 }
-var app64 = new Hono();
-app64.get("/", requireAdminSession, async (c) => {
+var app65 = new Hono();
+app65.get("/", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
-    console.error(`${TAG44} op=destinations auth-rejected reason="no account for session"`);
+    console.error(`${TAG45} op=destinations auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   let houseAccountId = null;
@@ -28526,7 +28619,7 @@ app64.get("/", requireAdminSession, async (c) => {
     houseAccountId = resolveHouseOrSoleAccountId(ACCOUNTS_DIR);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG44} op=destinations account=${accountId.slice(0, 8)} outcome=house-unresolved reason="${message}"`);
+    console.error(`${TAG45} op=destinations account=${accountId.slice(0, 8)} outcome=house-unresolved reason="${message}"`);
   }
   const destinations = listDispatchDestinations({ accountsDir: ACCOUNTS_DIR, houseAccountId, accountId });
   const houseDir = houseAccountId === null ? null : resolve38(ACCOUNTS_DIR, houseAccountId);
@@ -28577,11 +28670,11 @@ app64.get("/", requireAdminSession, async (c) => {
   const scopes = [...byScope.keys()];
   const nameScope = scopes.length === 0 ? "none" : scopes.every((s) => s === houseAccountId) ? "house" : scopes.some((s) => s === houseAccountId) ? "mixed" : "account";
   console.log(
-    `${TAG44} op=destinations account=${accountId.slice(0, 8)} count=${destinations.length} named=${named} unnamed=${destinations.length - named} nameScope=${nameScope}` + (houseAccountId === null ? " outcome=house-unresolved" : "") + (namesUnresolved === null ? "" : ` outcome=names-unresolved reason="${namesUnresolved}"`)
+    `${TAG45} op=destinations account=${accountId.slice(0, 8)} count=${destinations.length} named=${named} unnamed=${destinations.length - named} nameScope=${nameScope}` + (houseAccountId === null ? " outcome=house-unresolved" : "") + (namesUnresolved === null ? "" : ` outcome=names-unresolved reason="${namesUnresolved}"`)
   );
   return c.json({ destinations });
 });
-var dispatch_destinations_default = app64;
+var dispatch_destinations_default = app65;
 
 // server/routes/admin/activity.ts
 init_dist();
@@ -28591,8 +28684,8 @@ init_account();
 import { readdirSync as readdirSync28 } from "fs";
 init_neo4j_store();
 init_loop_registry();
-var app65 = new Hono();
-var TAG45 = "[activity]";
+var app66 = new Hono();
+var TAG46 = "[activity]";
 function resolveHouseAccountId2(accounts) {
   const houses = accounts.filter((a) => a.config.role === "house");
   if (houses.length === 1) return { accountId: houses[0].accountId, reason: "house" };
@@ -28613,7 +28706,7 @@ function countAccountDirsOnDisk() {
     return null;
   }
 }
-app65.get("/", requireAdminSession, async (c) => {
+app66.get("/", requireAdminSession, async (c) => {
   const req = requestToken();
   const cacheKey = c.var.cacheKey;
   const caller2 = getAccountIdForSession(cacheKey) ?? null;
@@ -28621,19 +28714,19 @@ app65.get("/", requireAdminSession, async (c) => {
   const house = resolveHouseAccountId2(valid);
   const isHouse = caller2 !== null && house.accountId !== null && caller2 === house.accountId;
   console.log(
-    `${TAG45} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
+    `${TAG46} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
   );
   if (!isHouse) {
     const reason = house.accountId === null ? house.reason : "not-house";
     console.error(
-      `${TAG45} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
+      `${TAG46} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
     );
     return c.json({ error: "house-only" }, 403);
   }
-  console.log(`${TAG45} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
+  console.log(`${TAG46} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
   const onDisk = countAccountDirsOnDisk();
   console.log(
-    `${TAG45} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
+    `${TAG46} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
   );
   const start = Date.now();
   let res;
@@ -28649,17 +28742,17 @@ app65.get("/", requireAdminSession, async (c) => {
     });
   } catch (err) {
     console.error(
-      `${TAG45} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG46} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
     );
     return c.json({ error: "manager-unreachable" }, 502);
   }
   if (res.status !== 200) {
-    console.error(`${TAG45} op=manager-fail req=${req} reason=status status=${res.status}`);
+    console.error(`${TAG46} op=manager-fail req=${req} reason=status status=${res.status}`);
     return c.json({ error: `manager-status-${res.status}` }, 502);
   }
   const body = await res.json().catch(() => null);
   if (!body || !Array.isArray(body.rows)) {
-    console.error(`${TAG45} op=manager-fail req=${req} reason=bad-json`);
+    console.error(`${TAG46} op=manager-fail req=${req} reason=bad-json`);
     return c.json({ error: "manager-bad-json" }, 502);
   }
   const rows = body.rows;
@@ -28670,10 +28763,10 @@ app65.get("/", requireAdminSession, async (c) => {
   const ageNull = rows.filter((r) => r.ageMs === null).length;
   const sidecarNull = rows.filter((r) => r.sidecarMissing).length;
   console.log(
-    `${TAG45} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
+    `${TAG46} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
   );
   console.log(
-    `${TAG45} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
+    `${TAG46} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
   );
   const names = {};
   await Promise.all(
@@ -28692,7 +28785,7 @@ app65.get("/", requireAdminSession, async (c) => {
     return acc;
   }, {});
   console.log(
-    `${TAG45} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
+    `${TAG46} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
   );
   return c.json({
     rows,
@@ -28722,74 +28815,75 @@ app65.get("/", requireAdminSession, async (c) => {
     }
   });
 });
-var activity_default = app65;
+var activity_default = app66;
 
 // server/routes/admin/index.ts
-var app66 = new Hono();
-app66.route("/session", session_default);
-app66.route("/accounts", accounts_default);
-app66.route("/logs", logs_default);
-app66.route("/claude-info", claude_info_default);
-app66.route("/attachment", attachment_default);
-app66.route("/session-upload", session_upload_default);
-app66.route("/agents", agents_default);
-app66.route("/sessions", sessions_default);
-app66.route("/claude-sessions", claude_sessions_default);
-app66.route("/log-ingest", log_ingest_default);
-app66.route("/events", events_default);
-app66.route("/files", files_default);
-app66.route("/graph-search", graph_search_default);
-app66.route("/graph-subgraph", graph_subgraph_default);
-app66.route("/graph-delete", graph_delete_default);
-app66.route("/graph-restore", graph_restore_default);
-app66.route("/graph-labels-in-graph", graph_labels_in_graph_default);
-app66.route("/graph-default-view", graph_default_view_default);
-app66.route("/sidebar-artefacts", sidebar_artefacts_default);
-app66.route("/sidebar-sessions", sidebar_sessions_default);
-app66.route("/session-delete", session_delete_default);
-app66.route("/session-stop", session_stop_default);
-app66.route("/session-archive", session_archive_default);
-app66.route("/session-rename", session_rename_default);
-app66.route("/session-usage", session_usage_default);
-app66.route("/browser", browser_default);
-app66.route("/session-rc-spawn", session_rc_spawn_default);
-app66.route("/session-reseat", session_reseat_default);
-app66.route("/system-stats", system_stats_default);
-app66.route("/health-brand", health_default2);
-app66.route("/linkedin-ingest", linkedin_ingest_default);
-app66.route("/post-turn-context", post_turn_context_default);
-app66.route("/public-session-context", public_session_context_default);
-app66.route("/public-session-exit", public_session_exit_default);
-app66.route("/access-session-evict", access_session_evict_default);
-app66.route("/enrol-person", enrol_person_default);
-app66.route("/calendar", calendar_default);
-app66.route("/data-portal", data_portal_default);
-app66.route("/routines", routines_default);
-app66.route("/skills", skills_default);
-app66.route("/tasks-list", tasks_list_default);
-app66.route("/task-timer-start", task_timer_start_default);
-app66.route("/task-timer-stop", task_timer_stop_default);
-app66.route("/task-complete", task_complete_default);
-app66.route("/task-time-adjust", task_time_adjust_default);
-app66.route("/task-delete", task_delete_default);
-app66.route("/task-assign", task_assign_default);
-app66.route("/task-session-open", task_session_open_default);
-app66.route("/task-session-link", task_session_link_default);
-app66.route("/admin-users-list", admin_users_list_default);
-app66.route("/dispatch-destinations", dispatch_destinations_default);
-app66.route("/activity", activity_default);
-var admin_default = app66;
+var app67 = new Hono();
+app67.route("/session", session_default);
+app67.route("/accounts", accounts_default);
+app67.route("/logs", logs_default);
+app67.route("/claude-info", claude_info_default);
+app67.route("/attachment", attachment_default);
+app67.route("/session-upload", session_upload_default);
+app67.route("/agents", agents_default);
+app67.route("/sessions", sessions_default);
+app67.route("/claude-sessions", claude_sessions_default);
+app67.route("/log-ingest", log_ingest_default);
+app67.route("/session-blocked", session_blocked_default);
+app67.route("/events", events_default);
+app67.route("/files", files_default);
+app67.route("/graph-search", graph_search_default);
+app67.route("/graph-subgraph", graph_subgraph_default);
+app67.route("/graph-delete", graph_delete_default);
+app67.route("/graph-restore", graph_restore_default);
+app67.route("/graph-labels-in-graph", graph_labels_in_graph_default);
+app67.route("/graph-default-view", graph_default_view_default);
+app67.route("/sidebar-artefacts", sidebar_artefacts_default);
+app67.route("/sidebar-sessions", sidebar_sessions_default);
+app67.route("/session-delete", session_delete_default);
+app67.route("/session-stop", session_stop_default);
+app67.route("/session-archive", session_archive_default);
+app67.route("/session-rename", session_rename_default);
+app67.route("/session-usage", session_usage_default);
+app67.route("/browser", browser_default);
+app67.route("/session-rc-spawn", session_rc_spawn_default);
+app67.route("/session-reseat", session_reseat_default);
+app67.route("/system-stats", system_stats_default);
+app67.route("/health-brand", health_default2);
+app67.route("/linkedin-ingest", linkedin_ingest_default);
+app67.route("/post-turn-context", post_turn_context_default);
+app67.route("/public-session-context", public_session_context_default);
+app67.route("/public-session-exit", public_session_exit_default);
+app67.route("/access-session-evict", access_session_evict_default);
+app67.route("/enrol-person", enrol_person_default);
+app67.route("/calendar", calendar_default);
+app67.route("/data-portal", data_portal_default);
+app67.route("/routines", routines_default);
+app67.route("/skills", skills_default);
+app67.route("/tasks-list", tasks_list_default);
+app67.route("/task-timer-start", task_timer_start_default);
+app67.route("/task-timer-stop", task_timer_stop_default);
+app67.route("/task-complete", task_complete_default);
+app67.route("/task-time-adjust", task_time_adjust_default);
+app67.route("/task-delete", task_delete_default);
+app67.route("/task-assign", task_assign_default);
+app67.route("/task-session-open", task_session_open_default);
+app67.route("/task-session-link", task_session_link_default);
+app67.route("/admin-users-list", admin_users_list_default);
+app67.route("/dispatch-destinations", dispatch_destinations_default);
+app67.route("/activity", activity_default);
+var admin_default = app67;
 
 // server/routes/access/index.ts
 init_dist();
 
 // server/routes/access/verify-token.ts
 init_dist();
-var TAG46 = "[access-verify]";
+var TAG47 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
-var app67 = new Hono();
-app67.post("/", async (c) => {
+var app68 = new Hono();
+app68.post("/", async (c) => {
   const ip = c.var.clientIp || "unknown";
   let body;
   try {
@@ -28804,39 +28898,39 @@ app67.post("/", async (c) => {
   }
   const rateMsg = checkAccessRateLimit(ip, agentSlug);
   if (rateMsg) {
-    console.error(`${TAG46} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
+    console.error(`${TAG47} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
     return c.json({ error: rateMsg }, 429);
   }
   const grant = await findGrantByMagicToken(token);
   if (!grant) {
     recordAccessFailedAttempt(ip, agentSlug);
-    console.error(`${TAG46} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
+    console.error(`${TAG47} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.agentSlug !== agentSlug) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG46} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
+      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
     );
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.status === "expired" || grant.status === "revoked") {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG46} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
+      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (grant.expiresAt !== null && grant.expiresAt < Date.now()) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG46} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
+      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (!grant.sliceToken) {
     console.error(
-      `${TAG46} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
+      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
     );
     return c.json({ error: "grant-misconfigured" }, 500);
   }
@@ -28852,12 +28946,12 @@ app67.post("/", async (c) => {
     await consumeMagicTokenAndActivate(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG46} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "verification-failed" }, 500);
   }
   clearAccessRateLimit(ip, agentSlug);
-  console.log(`${TAG46} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
+  console.log(`${TAG47} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
   console.log(
     `${MINT_TAG} grantId=${grant.grantId} sliceToken=${grant.sliceToken.slice(0, 8)} agentSlug=${agentSlug} personId=${grant.personId ?? "none"}`
   );
@@ -28871,7 +28965,7 @@ app67.post("/", async (c) => {
     displayName: grant.displayName
   });
 });
-var verify_token_default = app67;
+var verify_token_default = app68;
 
 // server/routes/access/request-magic-link.ts
 init_dist();
@@ -28936,10 +29030,10 @@ async function sendMagicLinkEmail(payload) {
 }
 
 // server/routes/access/request-magic-link.ts
-var TAG47 = "[access-request-link]";
-var app68 = new Hono();
+var TAG48 = "[access-request-link]";
+var app69 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
-app68.post("/", async (c) => {
+app69.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -28953,18 +29047,18 @@ app68.post("/", async (c) => {
   }
   const rateMsg = checkRequestLinkRateLimit(contactValue);
   if (rateMsg) {
-    console.error(`${TAG47} contactValue=${maskContact(contactValue)} result=rate-limited`);
+    console.error(`${TAG48} contactValue=${maskContact(contactValue)} result=rate-limited`);
     return c.json({ error: rateMsg }, 429);
   }
   recordRequestLinkAttempt(contactValue);
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG47} contactValue=${maskContact(contactValue)} result=no-account-id`);
+    console.error(`${TAG48} contactValue=${maskContact(contactValue)} result=no-account-id`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   const grant = await findActiveGrantByContact(contactValue, agentSlug, accountId);
   if (!grant) {
-    console.log(`${TAG47} contactValue=${maskContact(contactValue)} result=notfound`);
+    console.log(`${TAG48} contactValue=${maskContact(contactValue)} result=notfound`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   let token;
@@ -28972,7 +29066,7 @@ app68.post("/", async (c) => {
     token = await generateNewMagicToken(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG47} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG48} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
@@ -29004,22 +29098,22 @@ app68.post("/", async (c) => {
   });
   if (!sendResult.ok) {
     console.error(
-      `${TAG47} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
+      `${TAG48} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   console.log(
-    `${TAG47} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
+    `${TAG48} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
-var request_magic_link_default = app68;
+var request_magic_link_default = app69;
 
 // server/routes/access/index.ts
-var app69 = new Hono();
-app69.route("/verify-token", verify_token_default);
-app69.route("/request-magic-link", request_magic_link_default);
-var access_default = app69;
+var app70 = new Hono();
+app70.route("/verify-token", verify_token_default);
+app70.route("/request-magic-link", request_magic_link_default);
+var access_default = app70;
 
 // server/routes/sites.ts
 init_dist();
@@ -29056,8 +29150,8 @@ function getExt(p) {
   if (idx < p.lastIndexOf("/")) return "";
   return p.slice(idx).toLowerCase();
 }
-var app70 = new Hono();
-app70.get("/:rel{.*}", (c) => {
+var app71 = new Hono();
+app71.get("/:rel{.*}", (c) => {
   const reqPath = c.req.path;
   const rawRel = c.req.param("rel") ?? "";
   const trimmed = rawRel.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -29160,7 +29254,7 @@ app70.get("/:rel{.*}", (c) => {
     "X-Content-Type-Options": "nosniff"
   });
 });
-var sites_default = app70;
+var sites_default = app71;
 
 // server/routes/listings.ts
 init_dist();
@@ -29250,7 +29344,7 @@ init_dist();
 
 // app/lib/brand-config.ts
 import { existsSync as existsSync45, readFileSync as readFileSync46 } from "fs";
-import { join as join50 } from "path";
+import { join as join51 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -29258,7 +29352,7 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot5) return null;
-  const brandPath = join50(platformRoot5, "config", "brand.json");
+  const brandPath = join51(platformRoot5, "config", "brand.json");
   if (!existsSync45(brandPath)) return null;
   try {
     cached2 = JSON.parse(readFileSync46(brandPath, "utf-8"));
@@ -29269,7 +29363,7 @@ function readBrandConfig() {
 }
 
 // server/routes/visitor-consent.ts
-var app71 = new Hono();
+var app72 = new Hono();
 var CONSENT_COOKIE_NAME = "mxy_consent";
 var CONSENT_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
 var DEFAULT_CONSENT_COPY = {
@@ -29314,17 +29408,17 @@ function siteSlugFromReferer(referer) {
     return "";
   }
 }
-app71.options("/consent", (c) => {
+app72.options("/consent", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app71.options("/brand-config", (c) => {
+app72.options("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app71.post("/consent", async (c) => {
+app72.post("/consent", async (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   let raw;
@@ -29364,7 +29458,7 @@ app71.post("/consent", async (c) => {
   console.log(`[consent] ${parsed.decision} site=${site} brand=${brandName} tokenBound=${tokenBound}`);
   return c.body(null, 204);
 });
-app71.get("/brand-config", (c) => {
+app72.get("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   const brand = readBrandConfig();
@@ -29374,7 +29468,7 @@ app71.get("/brand-config", (c) => {
   c.header("Cache-Control", "public, max-age=300");
   return c.json({ consent: { copy, palette } });
 });
-var visitor_consent_default = app71;
+var visitor_consent_default = app72;
 
 // server/routes/listings.ts
 function getCookie(headerValue, name) {
@@ -29401,8 +29495,8 @@ function appendConsentParams(pageUrl, token) {
 }
 var SAFE_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,118}[a-z0-9])?$/;
 var CHAT_SESSION_KEY_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var app72 = new Hono();
-app72.get("/:slug/click", async (c) => {
+var app73 = new Hono();
+app73.get("/:slug/click", async (c) => {
   const slug = c.req.param("slug") ?? "";
   const rawSession = c.req.query("session") ?? "";
   const sessionKey = CHAT_SESSION_KEY_RE.test(rawSession) ? rawSession : "invalid";
@@ -29466,14 +29560,14 @@ app72.get("/:slug/click", async (c) => {
   console.log(`[property-card-click] sessionKey=${sessionKey} listingSlug=${slug} consent=${consentCookie ?? "absent"} ts=${(/* @__PURE__ */ new Date()).toISOString()}`);
   return c.redirect(redirectUrl, 302);
 });
-var listings_default = app72;
+var listings_default = app73;
 
 // server/routes/visitor-event.ts
 init_dist();
 init_claude_agent();
 init_neo4j_store();
 init_loop_registry();
-var app73 = new Hono();
+var app74 = new Hono();
 var BOT_UA_RE = /\b(bot|crawl|spider|slurp|headlesschrome|phantomjs|googlebot|bingbot|yandex|baiduspider|ahrefsbot|semrushbot|mj12bot|dotbot|petalbot)\b/i;
 var buckets = /* @__PURE__ */ new Map();
 var RATE_LIMIT = 60;
@@ -29549,12 +29643,12 @@ function originAllowed(origin, allowlist) {
     return false;
   }
 }
-app73.options("/event", (c) => {
+app74.options("/event", (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   return c.body(null, 204);
 });
-app73.post("/event", async (c) => {
+app74.post("/event", async (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   const ua = c.req.header("user-agent") ?? "";
@@ -29759,7 +29853,7 @@ async function writeEvent(opts) {
     );
   }
 }
-var visitor_event_default = app73;
+var visitor_event_default = app74;
 
 // server/routes/session.ts
 init_dist();
@@ -29809,8 +29903,8 @@ function withVisitorCookie(response, visitorId) {
     headers
   });
 }
-var app74 = new Hono();
-app74.post("/", async (c) => {
+var app75 = new Hono();
+app75.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -29961,23 +30055,23 @@ app74.post("/", async (c) => {
     newVisitorId
   );
 });
-var session_default2 = app74;
+var session_default2 = app75;
 
 // server/routes/calendar-public.ts
 init_dist();
 init_claude_agent();
 init_neo4j_store();
-var app75 = new Hono();
+var app76 = new Hono();
 function setCors(c) {
   c.header("Access-Control-Allow-Origin", "*");
   c.header("Access-Control-Allow-Methods", "GET, OPTIONS");
   c.header("Access-Control-Allow-Headers", "content-type");
 }
-app75.options("/free-busy", (c) => {
+app76.options("/free-busy", (c) => {
   setCors(c);
   return c.body(null, 204);
 });
-app75.get("/free-busy", async (c) => {
+app76.get("/free-busy", async (c) => {
   setCors(c);
   const from = c.req.query("from");
   const to = c.req.query("to");
@@ -30033,18 +30127,18 @@ app75.get("/free-busy", async (c) => {
     await session.close();
   }
 });
-var calendar_public_default = app75;
+var calendar_public_default = app76;
 
 // server/routes/portal-fetch.ts
 init_dist();
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat8, readFile as readFile11, realpath } from "fs/promises";
-import { join as join51, resolve as resolve42, sep as sep11 } from "path";
+import { join as join52, resolve as resolve42, sep as sep11 } from "path";
 import { Readable as Readable3 } from "stream";
 init_data_path();
 init_attachments();
-var app76 = new Hono();
-var TAG48 = "[portal-fetch]";
+var app77 = new Hono();
+var TAG49 = "[portal-fetch]";
 async function verifySignature(secret, accountId, relPath, expiresAtMs, signature, nowMs) {
   if (!secret || !signature) return false;
   if (!Number.isFinite(expiresAtMs) || expiresAtMs <= nowMs) return false;
@@ -30099,14 +30193,14 @@ async function readAccountSecret(accountId) {
   try {
     text = await readFile11(path, "utf8");
   } catch {
-    console.error(`${TAG48} op=no-secret account="${accountId}" path="${path}"`);
+    console.error(`${TAG49} op=no-secret account="${accountId}" path="${path}"`);
     return "";
   }
   for (const line of text.split("\n")) {
     const m = line.match(/^PORTAL_FETCH_SECRET=(.*)$/);
     if (m) return m[1].trim();
   }
-  console.error(`${TAG48} op=no-secret account="${accountId}" reason=key-absent path="${path}"`);
+  console.error(`${TAG49} op=no-secret account="${accountId}" reason=key-absent path="${path}"`);
   return "";
 }
 function isValidAccountId2(value) {
@@ -30114,7 +30208,7 @@ function isValidAccountId2(value) {
 }
 async function readExposeFolders2(accountDir) {
   try {
-    const cfg = JSON.parse(await readFile11(join51(accountDir, "data-portal.json"), "utf8"));
+    const cfg = JSON.parse(await readFile11(join52(accountDir, "data-portal.json"), "utf8"));
     return Array.isArray(cfg?.exposeFolders) ? cfg.exposeFolders.filter((f) => typeof f === "string") : [];
   } catch {
     return [];
@@ -30123,7 +30217,7 @@ async function readExposeFolders2(accountDir) {
 async function resolveFetchTarget(accountDir, relPath, ownerId) {
   let schemaText = null;
   try {
-    schemaText = await readFile11(join51(accountDir, "SCHEMA.md"), "utf8");
+    schemaText = await readFile11(join52(accountDir, "SCHEMA.md"), "utf8");
   } catch {
     schemaText = null;
   }
@@ -30166,16 +30260,16 @@ async function handle(c, headOnly) {
   const sig = c.req.query("sig") ?? "";
   const owner = c.req.query("owner") ?? "";
   console.log(
-    `${TAG48} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
+    `${TAG49} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
   );
   if (!isValidAccountId2(accountId)) {
-    console.error(`${TAG48} op=denied account=${q(accountId)} reason=account-id`);
+    console.error(`${TAG49} op=denied account=${q(accountId)} reason=account-id`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const secret = await readAccountSecret(accountId);
   const verified = owner ? await verifyOwnUploadSignature(secret, accountId, owner, relPath, exp, sig, Date.now()) : await verifySignature(secret, accountId, relPath, exp, sig, Date.now());
   if (!verified) {
-    console.error(`${TAG48} op=denied account=${q(accountId)} reason=secret`);
+    console.error(`${TAG49} op=denied account=${q(accountId)} reason=secret`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const target = await resolveFetchTarget(
@@ -30185,14 +30279,14 @@ async function handle(c, headOnly) {
   );
   if (!target.ok) {
     const op = target.reason === "enoent" ? "miss" : "denied";
-    console.error(`${TAG48} op=${op} account=${accountId} reason=${target.reason}`);
+    console.error(`${TAG49} op=${op} account=${accountId} reason=${target.reason}`);
     return c.json({ ok: false, error: "not found" }, 404);
   }
   if (headOnly) {
-    console.log(`${TAG48} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
+    console.log(`${TAG49} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
     return c.body(null, 200);
   }
-  console.log(`${TAG48} op=served account=${accountId} bytes=${target.sizeBytes}`);
+  console.log(`${TAG49} op=served account=${accountId} bytes=${target.sizeBytes}`);
   return new Response(Readable3.toWeb(createReadStream3(target.absolute)), {
     status: 200,
     headers: {
@@ -30206,16 +30300,16 @@ async function handle(c, headOnly) {
     }
   });
 }
-app76.get("/fetch", (c) => handle(c, false));
-app76.on("HEAD", "/fetch", (c) => handle(c, true));
-var portal_fetch_default = app76;
+app77.get("/fetch", (c) => handle(c, false));
+app77.on("HEAD", "/fetch", (c) => handle(c, true));
+var portal_fetch_default = app77;
 
 // server/index.ts
 init_remote_auth();
 
 // app/lib/timeentry-census.ts
 init_loop_registry();
-var TAG49 = "[timeentry-census]";
+var TAG50 = "[timeentry-census]";
 function reconcileTimeEntries(rows, now, horizonMs) {
   const openEntries = rows.openEntries.length;
   let oldestOpenAgeMs = 0;
@@ -30255,12 +30349,12 @@ async function runTimeEntryCensusOnce(session, now, horizonMs) {
       sumAdjustments: toNum(r.get("sumAdjustments"))
     }));
     const finding = reconcileTimeEntries({ openEntries, taskSums }, now, horizonMs);
-    const line = `${TAG49} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
+    const line = `${TAG50} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
     if (finding.alarm) console.error(`${line} alarm=true`);
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG49} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG50} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -30274,13 +30368,13 @@ function startTimeEntryCensus(openSession, opts = {}) {
     try {
       session = openSession();
     } catch (err) {
-      console.error(`${TAG49} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG50} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
       return;
     }
     try {
       await runTimeEntryCensusOnce(session, Date.now(), horizonMs);
     } catch (err) {
-      console.error(`${TAG49} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG50} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
     } finally {
       try {
         await session.close();
@@ -30302,7 +30396,7 @@ init_neo4j_store();
 // app/lib/ledger-census.ts
 init_loop_registry();
 import { readdirSync as readdirSync29, readFileSync as readFileSync47, statSync as statSync26 } from "fs";
-import { join as join52 } from "path";
+import { join as join53 } from "path";
 
 // ../lib/ledger-core/dist/reconcile.js
 var LEDGER_INDEX_NAMES = [
@@ -30345,7 +30439,7 @@ function formatCensusLine(f) {
 }
 
 // app/lib/ledger-census.ts
-var TAG50 = "[ledger-census]";
+var TAG51 = "[ledger-census]";
 var DAY_MS = 864e5;
 function countWriteRejects24h(logDir, now) {
   let entries2;
@@ -30356,7 +30450,7 @@ function countWriteRejects24h(logDir, now) {
   }
   let total = 0;
   for (const name of entries2) {
-    const path = join52(logDir, name);
+    const path = join53(logDir, name);
     try {
       if (now - statSync26(path).mtimeMs > DAY_MS) continue;
       for (const line of readFileSync47(path, "utf8").split("\n")) {
@@ -30421,7 +30515,7 @@ async function runLedgerCensusOnce(session, now) {
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG50} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG51} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -30434,7 +30528,7 @@ function startLedgerCensus(openSession, opts = {}) {
       session = openSession();
     } catch (err) {
       console.error(
-        `${TAG50} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG51} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
       return;
     }
@@ -30442,7 +30536,7 @@ function startLedgerCensus(openSession, opts = {}) {
       await runLedgerCensusOnce(session, Date.now());
     } catch (err) {
       console.error(
-        `${TAG50} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG51} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
     } finally {
       try {
@@ -30465,7 +30559,7 @@ init_neo4j_store();
 
 // app/lib/conversation-audit.ts
 init_neo4j_store();
-var TAG51 = "[conversation-audit]";
+var TAG52 = "[conversation-audit]";
 async function runConversationAudit() {
   const session = getSession();
   try {
@@ -30502,12 +30596,12 @@ async function runConversationAudit() {
       multiAnchored: Number(multiRec?.get("multiAnchored") ?? 0)
     };
     console.error(
-      `${TAG51} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
+      `${TAG52} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
     );
     return result;
   } catch (err) {
     const reason = err instanceof Error ? `${err.name}:${err.message.slice(0, 200)}` : String(err).slice(0, 200);
-    console.error(`${TAG51} op=failed reason=${reason}`);
+    console.error(`${TAG52} op=failed reason=${reason}`);
     return null;
   } finally {
     await session.close();
@@ -30642,8 +30736,8 @@ init_loop_registry();
 init_data_path();
 var import_dist9 = __toESM(require_dist(), 1);
 import { existsSync as existsSync47, statSync as statSync27, readdirSync as readdirSync30 } from "fs";
-import { join as join53 } from "path";
-var TAG52 = "[shared-census]";
+import { join as join54 } from "path";
+var TAG53 = "[shared-census]";
 var WIRED_SURFACES = 3;
 function countFiles(dir) {
   let n = 0;
@@ -30654,7 +30748,7 @@ function countFiles(dir) {
     return 0;
   }
   for (const e of entries2) {
-    if (e.isDirectory()) n += countFiles(join53(dir, e.name));
+    if (e.isDirectory()) n += countFiles(join54(dir, e.name));
     else if (e.isFile()) n++;
   }
   return n;
@@ -30671,8 +30765,8 @@ function runSharedFolderCensus(dataRoot = DATA_ROOT) {
     }
   }
   const files = isDir ? countFiles(root) : 0;
-  console.error(`${TAG52} op=root exists=${exists} isDir=${isDir} files=${files}`);
-  console.error(`${TAG52} op=wiring surfaces=${WIRED_SURFACES}/3`);
+  console.error(`${TAG53} op=root exists=${exists} isDir=${isDir} files=${files}`);
+  console.error(`${TAG53} op=wiring surfaces=${WIRED_SURFACES}/3`);
   return `shared root ${exists ? "present" : "ABSENT"}, ${files} file(s)`;
 }
 function startSharedFolderCensus() {
@@ -30921,7 +31015,7 @@ init_account();
 init_neo4j_store();
 import { readdir as readdir7, readFile as readFile12, rename as rename5, writeFile as writeFile4, unlink as unlink4 } from "fs/promises";
 import { existsSync as existsSync48 } from "fs";
-import { join as join54 } from "path";
+import { join as join55 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -30966,7 +31060,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join54(projectsRoot, slug.name);
+    const slugDir = join55(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir7(slugDir, { withFileTypes: true });
@@ -30975,9 +31069,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE.test(entry.name)) {
-        out.push(join54(slugDir, entry.name));
+        out.push(join55(slugDir, entry.name));
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join54(slugDir, entry.name);
+        const subDir = join55(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir7(subDir, { withFileTypes: true });
@@ -30985,7 +31079,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join54(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join55(subDir, s.name));
         }
       }
     }
@@ -30997,7 +31091,7 @@ function shortId(path) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join54(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join55(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -31075,7 +31169,7 @@ async function migrateAdminWebchatSidecars(opts = {}) {
 init_account();
 import { readdir as readdir8, readFile as readFile13, rename as rename6, writeFile as writeFile5, unlink as unlink5 } from "fs/promises";
 import { existsSync as existsSync49 } from "fs";
-import { join as join55 } from "path";
+import { join as join56 } from "path";
 var SESSION_META_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
 function projectSlugForCwd(cwd) {
   return cwd.replace(/\//g, "-");
@@ -31121,7 +31215,7 @@ async function collectSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join55(projectsRoot, slug.name);
+    const slugDir = join56(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir8(slugDir, { withFileTypes: true });
@@ -31130,9 +31224,9 @@ async function collectSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE2.test(entry.name)) {
-        out.push({ path: join55(slugDir, entry.name), slug: slug.name });
+        out.push({ path: join56(slugDir, entry.name), slug: slug.name });
       } else if (entry.isDirectory() && (entry.name === "subagents" || entry.name === "archive")) {
-        const subDir = join55(slugDir, entry.name);
+        const subDir = join56(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir8(subDir, { withFileTypes: true });
@@ -31141,7 +31235,7 @@ async function collectSidecars(projectsRoot) {
         }
         for (const s of subs) {
           if (s.isFile() && SESSION_META_RE2.test(s.name)) {
-            out.push({ path: join55(subDir, s.name), slug: slug.name });
+            out.push({ path: join56(subDir, s.name), slug: slug.name });
           }
         }
       }
@@ -31150,7 +31244,7 @@ async function collectSidecars(projectsRoot) {
   return out;
 }
 async function migrateSidecarAccountIds(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join55(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join56(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const accounts = opts.accounts ?? listValidAccounts();
   const result = {
     scanned: 0,
@@ -31617,8 +31711,8 @@ function runDeliveryCensus(now) {
 // app/lib/whatsapp/gateway/routes.ts
 var PARTY_PHONE_PATTERN = /^[+0-9][0-9 ()\-.]{4,31}$/;
 function createWaChannelRoutes(deps) {
-  const app78 = new Hono();
-  app78.get("/wa-channel/inbound", (c) => {
+  const app79 = new Hono();
+  app79.get("/wa-channel/inbound", (c) => {
     const senderId = c.req.query("senderId");
     const accountId = c.req.query("accountId");
     if (!senderId) return c.json({ error: "senderId required" }, 400);
@@ -31641,7 +31735,7 @@ function createWaChannelRoutes(deps) {
       }
     });
   });
-  app78.post("/wa-channel/ready", async (c) => {
+  app79.post("/wa-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const accountId = body?.accountId;
@@ -31655,7 +31749,7 @@ function createWaChannelRoutes(deps) {
     deps.onReady?.(accountId, senderId);
     return c.json({ ok: true });
   });
-  app78.post("/wa-channel/received", async (c) => {
+  app79.post("/wa-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const accountId = body?.accountId;
@@ -31672,7 +31766,7 @@ function createWaChannelRoutes(deps) {
     deps.onReceived?.(accountId, senderId, waMessageId, { provenance, source });
     return c.json({ ok: true });
   });
-  app78.post("/wa-channel/turn-observed", async (c) => {
+  app79.post("/wa-channel/turn-observed", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const accountId = body?.accountId;
@@ -31688,7 +31782,7 @@ function createWaChannelRoutes(deps) {
     deps.onTurnObserved?.(accountId, senderId, waMessageId, observed);
     return c.json({ ok: true });
   });
-  app78.post("/wa-channel/turn-end", async (c) => {
+  app79.post("/wa-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const sessionId = body?.sessionId;
@@ -31770,7 +31864,7 @@ function createWaChannelRoutes(deps) {
     noteTurnEnd("whatsapp", role, "record", Date.now());
     return c.json({ ok: true, delivered: "record", segments: segments.length, reached, notReached });
   });
-  app78.post("/wa-channel/send-party", async (c) => {
+  app79.post("/wa-channel/send-party", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const accountId = body?.accountId;
@@ -31822,7 +31916,7 @@ function createWaChannelRoutes(deps) {
     log2("sent", party.party);
     return c.json({ ok: true });
   });
-  return app78;
+  return app79;
 }
 
 // app/lib/whatsapp/gateway/wa-gateway.ts
@@ -32574,8 +32668,8 @@ var InboundHub2 = class {
 // app/lib/webchat/gateway/routes.ts
 init_dist();
 function createWebchatChannelRoutes(deps) {
-  const app78 = new Hono();
-  app78.get("/webchat-channel/inbound", (c) => {
+  const app79 = new Hono();
+  app79.get("/webchat-channel/inbound", (c) => {
     const key2 = c.req.query("key");
     if (!key2) return c.json({ error: "key required" }, 400);
     const role = c.req.query("role");
@@ -32600,7 +32694,7 @@ function createWebchatChannelRoutes(deps) {
       }
     });
   });
-  app78.post("/webchat-channel/connector-auth", async (c) => {
+  app79.post("/webchat-channel/connector-auth", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key2 = body?.key;
     const sessionId = body?.sessionId;
@@ -32613,7 +32707,7 @@ function createWebchatChannelRoutes(deps) {
     const result = await deps.onConnectorAuth({ key: key2, sessionId, name, completed });
     return c.json(result);
   });
-  app78.post("/webchat-channel/ready", async (c) => {
+  app79.post("/webchat-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key2 = body?.key;
     if (typeof key2 !== "string") {
@@ -32622,7 +32716,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReady?.(key2);
     return c.json({ ok: true });
   });
-  app78.post("/webchat-channel/permission-request", async (c) => {
+  app79.post("/webchat-channel/permission-request", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key2 = body?.key;
     const requestId = body?.request_id;
@@ -32636,7 +32730,7 @@ function createWebchatChannelRoutes(deps) {
     const verdict = await deps.awaitPermissionVerdict({ key: key2, requestId, toolName, description, inputPreview });
     return c.json(verdict);
   });
-  app78.post("/webchat-channel/received", async (c) => {
+  app79.post("/webchat-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key2 = body?.key;
     const messageId = body?.messageId;
@@ -32646,7 +32740,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReceived?.(key2, messageId);
     return c.json({ ok: true });
   });
-  app78.post("/webchat-channel/turn-end", async (c) => {
+  app79.post("/webchat-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key2 = body?.key;
     const sessionId = body?.sessionId;
@@ -32671,12 +32765,12 @@ function createWebchatChannelRoutes(deps) {
     }
     return c.json({ ok: true });
   });
-  return app78;
+  return app79;
 }
 
 // app/lib/webchat/gateway/resolve-turn-answer.ts
 import { existsSync as existsSync50, openSync as openSync9, readSync as readSync8, closeSync as closeSync9, readdirSync as readdirSync31 } from "fs";
-import { join as join56 } from "path";
+import { join as join57 } from "path";
 function resolveTurnAnswer(p) {
   if (!SESSION_ID_RE2.test(p.sessionId)) return "";
   const path = findJsonl(p.projectsRoot, p.sessionId);
@@ -32712,7 +32806,7 @@ function findJsonl(projectsRoot, sessionId) {
     return null;
   }
   for (const slug of slugs) {
-    const live = join56(projectsRoot, slug, `${sessionId}.jsonl`);
+    const live = join57(projectsRoot, slug, `${sessionId}.jsonl`);
     if (existsSync50(live)) return live;
   }
   return null;
@@ -33510,14 +33604,14 @@ function makeFileDelivery(opts) {
 }
 
 // app/lib/webchat/file-delivery.ts
-var TAG53 = "[webchat-adaptor]";
+var TAG54 = "[webchat-adaptor]";
 function platformRoot2() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeWebchatSendFile(entry) {
   return async (filePath) => {
     if (!entry.accountId) {
-      console.error(`${TAG53} file-delivery reject reason=no-account sender=${entry.senderId}`);
+      console.error(`${TAG54} file-delivery reject reason=no-account sender=${entry.senderId}`);
       return { ok: false, error: "no-account" };
     }
     const accountDir = resolve45(platformRoot2(), "..", "data/accounts", entry.accountId);
@@ -33525,14 +33619,14 @@ function makeWebchatSendFile(entry) {
       const resolved = realpathSync9(filePath);
       const accountResolved = realpathSync9(accountDir);
       if (!resolved.startsWith(accountResolved + "/")) {
-        console.error(`${TAG53} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
+        console.error(`${TAG54} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
         return { ok: false, error: "outside-account" };
       }
       return { ok: true };
     } catch (err) {
       const code = err.code;
       console.error(
-        `${TAG53} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
+        `${TAG54} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
       );
       return { ok: false, error: code === "ENOENT" ? "not-found" : "path-error" };
     }
@@ -33541,7 +33635,7 @@ function makeWebchatSendFile(entry) {
 function makeWebchatFileDelivery(entry) {
   return makeFileDelivery({
     entry,
-    tag: TAG53,
+    tag: TAG54,
     channel: "webchat",
     sendFile: makeWebchatSendFile(entry),
     deferUntilVerdict: true
@@ -33605,7 +33699,7 @@ function buildPublicWebchatSpawnRequest(input) {
 }
 
 // app/lib/whatsapp/inbound/file-delivery-bridge.ts
-var TAG54 = "[whatsapp-adaptor]";
+var TAG55 = "[whatsapp-adaptor]";
 var SEND_USER_FILE2 = "SendUserFile";
 var WHATSAPP_SEND_DOCUMENT = "whatsapp-send-document";
 function platformRoot3() {
@@ -33623,7 +33717,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
     });
     if (result.ok) return { ok: true };
     console.error(
-      `${TAG54} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
+      `${TAG55} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
     );
     return { ok: false, error: result.error };
   };
@@ -33631,7 +33725,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
 function makeWhatsAppFileDelivery(entry, maxyAccountId) {
   const shared = makeFileDelivery({
     entry,
-    tag: TAG54,
+    tag: TAG55,
     channel: "whatsapp",
     sendFile: makeWhatsAppSendFile(entry, maxyAccountId)
   });
@@ -33666,7 +33760,7 @@ function makeWhatsAppFileDelivery(entry, maxyAccountId) {
         if (!delivered) {
           const fileField = call.filePath !== void 0 ? ` file=${call.filePath}` : "";
           console.error(
-            `${TAG54} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+            `${TAG55} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
           );
         }
       }
@@ -33855,8 +33949,8 @@ var InboundHub3 = class {
 // app/lib/telegram/gateway/routes.ts
 init_dist();
 function createTelegramChannelRoutes(deps) {
-  const app78 = new Hono();
-  app78.get("/tg-channel/inbound", (c) => {
+  const app79 = new Hono();
+  app79.get("/tg-channel/inbound", (c) => {
     const key2 = c.req.query("key");
     if (!key2) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -33874,7 +33968,7 @@ function createTelegramChannelRoutes(deps) {
       }
     });
   });
-  app78.post("/tg-channel/ready", async (c) => {
+  app79.post("/tg-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key2 = body?.key;
     if (typeof key2 !== "string") {
@@ -33883,7 +33977,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReady?.(key2);
     return c.json({ ok: true });
   });
-  app78.post("/tg-channel/received", async (c) => {
+  app79.post("/tg-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key2 = body?.key;
     const messageId = body?.messageId;
@@ -33893,7 +33987,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReceived?.(key2, messageId);
     return c.json({ ok: true });
   });
-  app78.post("/tg-channel/turn-end", async (c) => {
+  app79.post("/tg-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key2 = body?.key;
     const sessionId = body?.sessionId;
@@ -33964,7 +34058,7 @@ function createTelegramChannelRoutes(deps) {
     noteTurnEnd("telegram", role, "record", Date.now());
     return c.json({ ok: true, delivered: "record", segments: segments.length, reached, notReached });
   });
-  return app78;
+  return app79;
 }
 
 // app/lib/telegram/gateway/telegram-gateway.ts
@@ -34268,7 +34362,7 @@ function buildTelegramSpawnRequest(input) {
 }
 
 // server/telegram-ensure-session.ts
-var TAG55 = "[telegram-inbound]";
+var TAG56 = "[telegram-inbound]";
 function buildTelegramEnsureSession(deps) {
   return async (input) => {
     const req = buildTelegramSpawnRequest({
@@ -34302,10 +34396,10 @@ function buildTelegramEnsureSession(deps) {
         return;
       }
       console.error(
-        `${TAG55} op=telegram-spawn-door botId=${input.botId} role=public door=rc agent=${input.agentSlug}`
+        `${TAG56} op=telegram-spawn-door botId=${input.botId} role=public door=rc agent=${input.agentSlug}`
       );
       console.error(
-        `${TAG55} op=spawn botId=${input.botId} sessionId=${result2.sessionId} targetAccountId=${input.accountId} role=public`
+        `${TAG56} op=spawn botId=${input.botId} sessionId=${result2.sessionId} targetAccountId=${input.accountId} role=public`
       );
       noteSpawnOk2(input.botId);
       return;
@@ -34319,7 +34413,7 @@ function buildTelegramEnsureSession(deps) {
       return;
     }
     console.error(
-      `${TAG55} op=spawn botId=${input.botId} sessionId=${req.sessionId} targetAccountId=${input.accountId} role=admin`
+      `${TAG56} op=spawn botId=${input.botId} sessionId=${req.sessionId} targetAccountId=${input.accountId} role=admin`
     );
     noteSpawnOk2(input.botId);
     deps.followers.get(req.channelKey)?.abort();
@@ -34345,7 +34439,7 @@ init_attachments();
 import { realpathSync as realpathSync10 } from "fs";
 import { readFile as readFile14, stat as stat10 } from "fs/promises";
 import { resolve as resolve46, basename as basename16 } from "path";
-var TAG56 = "[telegram:outbound]";
+var TAG57 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
   const { botToken, chatId, filePath, caption, maxyAccountId, platformRoot: platformRoot5 } = input;
@@ -34362,10 +34456,10 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG56} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG57} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 500, error: `Account directory not resolvable for ${maxyAccountId}` };
     }
-    console.error(`${TAG56} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG57} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   let resolvedPath;
@@ -34374,14 +34468,14 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG56} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG57} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG56} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG57} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   if (!resolvedPath.startsWith(accountResolved + "/")) {
-    console.error(`${TAG56} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+    console.error(`${TAG57} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
     return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
   }
   const fileStat = await stat10(resolvedPath);
@@ -34414,24 +34508,24 @@ async function sendTelegramDocument(input) {
     error = e instanceof Error ? e.message : String(e);
   }
   console.error(
-    `${TAG56} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok2}` + (messageId !== void 0 ? ` id=${messageId}` : "")
+    `${TAG57} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok2}` + (messageId !== void 0 ? ` id=${messageId}` : "")
   );
   return ok2 ? { ok: true, messageId } : { ok: false, status: 500, error };
 }
 
 // app/lib/telegram/outbound/file-delivery.ts
-var TAG57 = "[telegram:outbound]";
+var TAG58 = "[telegram:outbound]";
 function platformRoot4() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeTelegramSendFile(entry, botToken) {
   return async (filePath, caption) => {
     if (!botToken) {
-      console.error(`${TAG57} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG58} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-bot-token" };
     }
     if (entry.replyTarget == null) {
-      console.error(`${TAG57} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG58} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-reply-target" };
     }
     const result = await sendTelegramDocument({
@@ -34448,7 +34542,7 @@ function makeTelegramSendFile(entry, botToken) {
 function makeTelegramFileDelivery(entry, botToken) {
   return makeFileDelivery({
     entry,
-    tag: TAG57,
+    tag: TAG58,
     channel: "telegram",
     sendFile: makeTelegramSendFile(entry, botToken)
   });
@@ -34537,7 +34631,7 @@ init_webchat();
 // app/lib/channel-pty-bridge/public-session-end-review.ts
 init_src3();
 import { randomUUID as randomUUID14 } from "crypto";
-var TAG58 = "[public-session-review]";
+var TAG59 = "[public-session-review]";
 var CONSUMED_CAP = 500;
 var consumed = /* @__PURE__ */ new Set();
 function consumeOnce(sessionId) {
@@ -34564,7 +34658,7 @@ async function fetchJsonl(sessionId) {
     return await res.text();
   } catch (err) {
     console.error(
-      `${TAG58} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG59} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return null;
   }
@@ -34588,7 +34682,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     const res = await fetch(url);
     if (!res.ok) {
       console.error(
-        `${TAG58} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
+        `${TAG59} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
       );
       return [];
     }
@@ -34596,7 +34690,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     return Array.isArray(body.writes) ? body.writes : [];
   } catch (err) {
     console.error(
-      `${TAG58} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG59} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return [];
   }
@@ -34625,7 +34719,7 @@ function composeInitialMessage(input) {
 }
 async function dispatchReviewer(input, initialMessage) {
   const sessionId = randomUUID14();
-  console.log(`${TAG58} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
+  console.log(`${TAG59} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -34649,21 +34743,21 @@ async function firePublicSessionEndReview(input) {
   const dispatchedAt = Date.now();
   if (consumed.has(input.sessionId)) {
     console.log(
-      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const jsonl = await fetchJsonl(input.sessionId);
   if (!jsonl) {
     console.log(
-      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
+      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
     );
     return;
   }
   const operatorTurns = countOperatorTurns(jsonl);
   if (operatorTurns === 0) {
     console.log(
-      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
+      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
     );
     return;
   }
@@ -34677,19 +34771,19 @@ async function firePublicSessionEndReview(input) {
   });
   if (!consumeOnce(input.sessionId)) {
     console.log(
-      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const dispatched = await dispatchReviewer(input, initialMessage);
   if (!dispatched.ok) {
     console.error(
-      `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
+      `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
     );
     return;
   }
   console.log(
-    `${TAG58} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
+    `${TAG59} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
   );
 }
 
@@ -34841,7 +34935,7 @@ init_account();
 
 // server/telegram-audit.ts
 import { statSync as statSync28 } from "fs";
-import { join as join57 } from "path";
+import { join as join58 } from "path";
 init_channel_key();
 init_sidebar_sessions();
 function buildTelegramAuditLines(input) {
@@ -34907,7 +35001,7 @@ function countTelegramSessionsForAccount(accountId) {
 function* walkTelegramSidecars() {
   const cfg = claudeConfigDir();
   if (!cfg) return;
-  const projectsRoot = join57(cfg, "projects");
+  const projectsRoot = join58(cfg, "projects");
   for (const { path } of enumerateSessionSidecars(projectsRoot)) {
     const meta = readSidecarMeta(path);
     if (meta.channel !== "telegram" || !meta.accountId) continue;
@@ -34934,11 +35028,11 @@ function* walkTelegramSidecars() {
 
 // server/telegram-migrate.ts
 import { readFileSync as readFileSync48, writeFileSync as writeFileSync19, existsSync as existsSync51, renameSync as renameSync11, mkdirSync as mkdirSync11 } from "fs";
-import { dirname as dirname18, join as join58 } from "path";
+import { dirname as dirname18, join as join59 } from "path";
 function migrateTelegramTwoSlot(input) {
   const out = [];
   for (const account of input.accounts) {
-    const configPath3 = join58(account.accountDir, "account.json");
+    const configPath3 = join59(account.accountDir, "account.json");
     let config;
     try {
       config = JSON.parse(readFileSync48(configPath3, "utf-8"));
@@ -35335,7 +35429,7 @@ function clientFrom(c) {
 }
 installMediaDownloadGuard();
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join59(PLATFORM_ROOT6, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join60(PLATFORM_ROOT6, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync54(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
@@ -35374,7 +35468,7 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join59(homedir5(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join60(homedir5(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync54(ALIAS_DOMAINS_PATH)) return null;
@@ -35404,7 +35498,7 @@ startManagerEventsSubscriber();
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
-var app77 = new Hono();
+var app78 = new Hono();
 function resolveChannelOverride(accountId, channel, senderId) {
   try {
     const dir = listValidAccounts().find((a) => a.accountId === accountId)?.accountDir;
@@ -35479,7 +35573,7 @@ var waGateway = new WaGateway({
     deps: adminFanDeps("whatsapp", accountId)
   }),
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve49(process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve49(process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -35494,7 +35588,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve49(process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, ".."))
+      platformRoot: resolve49(process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -35648,7 +35742,7 @@ var waGateway = new WaGateway({
     nativeFileFollowers.set(senderId, ac);
   }
 });
-app77.route("/", waGateway.routes());
+app78.route("/", waGateway.routes());
 waGateway.startSweeper();
 registerLoop({
   name: "whatsapp-link-census",
@@ -35661,7 +35755,7 @@ function runDuplicateSenderAudit() {
   try {
     const configDir = process.env.CLAUDE_CONFIG_DIR;
     if (!configDir) return;
-    const projectsRoot = join59(configDir, "projects");
+    const projectsRoot = join60(configDir, "projects");
     const records2 = [];
     for (const { path: jsonlPath, isSubagent, archived } of enumerateJsonls(projectsRoot)) {
       if (isSubagent || archived) continue;
@@ -35713,7 +35807,7 @@ var webchatGateway = new WebchatGateway({
   // rather than hanging the POST.
   publicProjectsRoot: () => {
     const cfg = claudeConfigDir();
-    return cfg ? join59(cfg, "projects") : "";
+    return cfg ? join60(cfg, "projects") : "";
   },
   gatewayUrl: webchatGatewayUrl(),
   serverPath: webchatServerPath(),
@@ -35809,7 +35903,7 @@ var webchatGateway = new WebchatGateway({
   firePublicSessionEndReview: (input) => firePublicSessionEndReview(input)
 });
 setWebchatGateway(webchatGateway);
-app77.route("/", webchatGateway.routes());
+app78.route("/", webchatGateway.routes());
 webchatGateway.startSweeper();
 webchatGateway.startPublicReaper();
 var telegramFileFollowers = /* @__PURE__ */ new Map();
@@ -35856,7 +35950,7 @@ var telegramGateway = new TelegramGateway({
   })
 });
 setTelegramGateway(telegramGateway);
-app77.route("/", telegramGateway.routes());
+app78.route("/", telegramGateway.routes());
 telegramGateway.startSweeper();
 var chatRoutes = createChatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
@@ -35925,19 +36019,19 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
   // which is the split this task removes.
   resolveTelegramAdminUserId: (accountId, chatId) => resolveTelegramAdminUserId({ accountId, chatId })
 });
-app77.route("/api/channel/schedule-inject", scheduleInjectRoutes);
-app77.use("*", clientIpMiddleware);
+app78.route("/api/channel/schedule-inject", scheduleInjectRoutes);
+app78.use("*", clientIpMiddleware);
 function allowsSameOriginFraming(path) {
   return path === "/vnc-viewer.html" || path.startsWith("/api/admin/attachment/") || path.startsWith("/api/public-reader/attachment/") || path === "/api/admin/files/download" || path === "/api/admin/session-upload";
 }
-app77.use("*", async (c, next) => {
+app78.use("*", async (c, next) => {
   await next();
   c.header("X-Content-Type-Options", "nosniff");
   c.header("Referrer-Policy", "strict-origin-when-cross-origin");
   c.header("X-Frame-Options", allowsSameOriginFraming(c.req.path) ? "SAMEORIGIN" : "DENY");
 });
 var HTTP_LOG_PATHS = /* @__PURE__ */ new Set(["/vnc-viewer.html", "/vnc-popout.html"]);
-app77.use("*", async (c, next) => {
+app78.use("*", async (c, next) => {
   if (!HTTP_LOG_PATHS.has(c.req.path)) {
     await next();
     return;
@@ -35955,7 +36049,7 @@ app77.use("*", async (c, next) => {
     });
   }
 });
-app77.use("*", async (c, next) => {
+app78.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains()) || !isPublicHost(host)) {
     await next();
@@ -35993,7 +36087,7 @@ function resolveRemoteAuthOpts(c) {
   return { ...brandLoginOpts, origin };
 }
 var MAX_LOGIN_BODY = 8 * 1024;
-app77.post("/__remote-auth/login", async (c) => {
+app78.post("/__remote-auth/login", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   if (!requestIsTlsTerminated(c)) {
@@ -36038,7 +36132,7 @@ app77.post("/__remote-auth/login", async (c) => {
     }
   });
 });
-app77.get("/__remote-auth/logout", (c) => {
+app78.get("/__remote-auth/logout", (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   console.error(`[remote-auth] logout ip=${clientIp}`);
@@ -36051,7 +36145,7 @@ app77.get("/__remote-auth/logout", (c) => {
     }
   });
 });
-app77.post("/__remote-auth/change-password", async (c) => {
+app78.post("/__remote-auth/change-password", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   const rateLimited = checkRateLimit(client);
@@ -36110,13 +36204,13 @@ app77.post("/__remote-auth/change-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "change", changeError: "Failed to save password", redirect }), 200);
   }
 });
-app77.get("/__remote-auth/setup", (c) => {
+app78.get("/__remote-auth/setup", (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup" }), 200);
 });
-app77.post("/__remote-auth/set-initial-password", async (c) => {
+app78.post("/__remote-auth/set-initial-password", async (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
@@ -36154,10 +36248,10 @@ app77.post("/__remote-auth/set-initial-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup", setupError: "Failed to save password. Please try again." }), 200);
   }
 });
-app77.get("/api/remote-auth/status", (c) => {
+app78.get("/api/remote-auth/status", (c) => {
   return c.json({ configured: isRemoteAuthConfigured() });
 });
-app77.post("/api/remote-auth/set-password", async (c) => {
+app78.post("/api/remote-auth/set-password", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -36196,9 +36290,9 @@ app77.post("/api/remote-auth/set-password", async (c) => {
     return c.json({ error: "Failed to save password" }, 500);
   }
 });
-app77.route("/api/_client-error", client_error_default);
+app78.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
-app77.use("*", async (c, next) => {
+app78.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path = c.req.path;
   if (isRemoteAuthBypassPath(path)) {
@@ -36238,31 +36332,31 @@ app77.use("*", async (c, next) => {
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), redirect: path }), 200);
 });
-app77.route("/api/health", health_default);
-app77.route("/api/chat", chatRoutes);
-app77.route("/api/whatsapp", whatsapp_default);
-app77.route("/api/storage", storage_broker_default);
-app77.route("/api/whatsapp-reader", whatsapp_reader_default);
-app77.route("/api/telegram-reader", telegram_reader_default);
-app77.route("/api/session-reader", session_reader_default);
-app77.route("/api/operator-conversations", operator_conversations_default);
-app77.route("/api/public-reader", public_reader_default);
-app77.route("/api/webchat", createWebchatRoutes({
+app78.route("/api/health", health_default);
+app78.route("/api/chat", chatRoutes);
+app78.route("/api/whatsapp", whatsapp_default);
+app78.route("/api/storage", storage_broker_default);
+app78.route("/api/whatsapp-reader", whatsapp_reader_default);
+app78.route("/api/telegram-reader", telegram_reader_default);
+app78.route("/api/session-reader", session_reader_default);
+app78.route("/api/operator-conversations", operator_conversations_default);
+app78.route("/api/public-reader", public_reader_default);
+app78.route("/api/webchat", createWebchatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
   // Task 940 — the permission relay's pointer read + verdict write.
   pendingPromptFor: (key2) => webchatGateway.pendingPromptFor(key2),
   deliveryFailureFor: (key2) => webchatGateway.deliveryFailureFor(key2),
   resolvePermissionVerdict: (key2, requestId, behavior) => webchatGateway.resolvePermissionVerdict(key2, requestId, behavior)
 }));
-app77.route("/api/webchat/greeting", webchat_greeting_default);
-mountTelegramRoutes(app77, telegram_default);
-app77.route("/api/quickbooks", quickbooks_default);
-app77.route("/api/onboarding", onboarding_default);
-app77.route("/api/admin", admin_default);
-app77.route("/api/access", access_default);
-app77.route("/api/session", session_default2);
-app77.route("/api/calendar", calendar_public_default);
-app77.route("/api/portal", portal_fetch_default);
+app78.route("/api/webchat/greeting", webchat_greeting_default);
+mountTelegramRoutes(app78, telegram_default);
+app78.route("/api/quickbooks", quickbooks_default);
+app78.route("/api/onboarding", onboarding_default);
+app78.route("/api/admin", admin_default);
+app78.route("/api/access", access_default);
+app78.route("/api/session", session_default2);
+app78.route("/api/calendar", calendar_public_default);
+app78.route("/api/portal", portal_fetch_default);
 var SAFE_SLUG_RE2 = /^[a-z][a-z0-9-]{2,49}$/;
 var SAFE_FILENAME_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var IMAGE_MIME = {
@@ -36274,7 +36368,7 @@ var IMAGE_MIME = {
   ".svg": "image/svg+xml",
   ".ico": "image/x-icon"
 };
-app77.get("/agent-assets/:slug/:filename", (c) => {
+app78.get("/agent-assets/:slug/:filename", (c) => {
   const slug = c.req.param("slug");
   const filename = c.req.param("filename");
   if (!SAFE_SLUG_RE2.test(slug)) {
@@ -36309,7 +36403,7 @@ app77.get("/agent-assets/:slug/:filename", (c) => {
     "Cache-Control": "public, max-age=3600"
   });
 });
-app77.get("/generated/:filename", (c) => {
+app78.get("/generated/:filename", (c) => {
   const filename = c.req.param("filename");
   if (!SAFE_FILENAME_RE.test(filename) || filename.includes("..")) {
     console.error(`[generated] serve file=${filename} status=403`);
@@ -36339,10 +36433,10 @@ app77.get("/generated/:filename", (c) => {
     "Cache-Control": "public, max-age=86400"
   });
 });
-app77.route("/sites", sites_default);
-app77.route("/listings", listings_default);
-app77.route("/v", visitor_event_default);
-app77.route("/v", visitor_consent_default);
+app78.route("/sites", sites_default);
+app78.route("/listings", listings_default);
+app78.route("/v", visitor_event_default);
+app78.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
@@ -36387,7 +36481,7 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT6) return "unknown";
-    const versionFile = join59(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join60(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
     if (!existsSync54(versionFile)) return "unknown";
     const content = readFileSync51(versionFile, "utf-8").trim();
     return content || "unknown";
@@ -36417,12 +36511,12 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir = join59(homedir5(), BRAND.configDir);
+  const configDir = join60(homedir5(), BRAND.configDir);
   try {
     const verdict = resolvePublicAddressFromDisk(agentSlug);
     const accountId = verdict.kind === "served" ? verdict.owner.accountId : getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join59(configDir, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join60(configDir, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync54(cachePath)) return null;
     return JSON.parse(readFileSync51(cachePath, "utf-8"));
   } catch {
@@ -36468,7 +36562,7 @@ function brandedPublicHtml(agentSlug) {
 function agentUnavailableHtml() {
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(BRAND.productName)}</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1.5rem;color:#222"><h1 style="font-size:1.25rem">Agent unavailable</h1><p>This agent isn't available right now. If you reached this page from a saved link, the agent may have been turned off.</p></body></html>`;
 }
-app77.get("/", (c) => {
+app78.get("/", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const klass = classifyHost(host, getOperatorDomains(), isPublicHost);
   if (klass === "operator") {
@@ -36490,12 +36584,12 @@ app77.get("/", (c) => {
   console.log(`[host-class] host=${host} class=admin served=index.html`);
   return c.html(cachedHtml("index.html"));
 });
-app77.get("/public", (c) => {
+app78.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
 });
-app77.get("/public-chat", (c) => {
+app78.get("/public-chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
@@ -36514,9 +36608,9 @@ async function logViewerFetch(c, next) {
     duration_ms: Date.now() - start
   });
 }
-app77.use("/vnc-viewer.html", logViewerFetch);
-app77.use("/vnc-popout.html", logViewerFetch);
-app77.get("/vnc-popout.html", (c) => {
+app78.use("/vnc-viewer.html", logViewerFetch);
+app78.use("/vnc-popout.html", logViewerFetch);
+app78.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
     html = readFileSync51(resolve49(process.cwd(), "public", "vnc-popout.html"), "utf-8");
@@ -36529,7 +36623,7 @@ app77.get("/vnc-popout.html", (c) => {
   }
   return c.html(html);
 });
-app77.post("/api/vnc/client-event", async (c) => {
+app78.post("/api/vnc/client-event", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -36550,11 +36644,11 @@ app77.post("/api/vnc/client-event", async (c) => {
   });
   return c.json({ ok: true });
 });
-app77.get("/g/:slug", (c) => {
+app78.get("/g/:slug", (c) => {
   return c.html(brandedPublicHtml(resolveDefaultSlug() ?? void 0));
 });
 for (const pwa of PWA_SURFACES) {
-  app77.get(pwa.manifestPath, (c) => {
+  app78.get(pwa.manifestPath, (c) => {
     const manifest = buildManifest(pwa, {
       productName: BRAND.productName,
       appIcon192: brandAppIcon192Path,
@@ -36570,7 +36664,7 @@ for (const pwa of PWA_SURFACES) {
     return c.body(JSON.stringify(manifest));
   });
 }
-app77.get("/sw.js", (c) => {
+app78.get("/sw.js", (c) => {
   if (SW_SOURCE == null) {
     console.error("[pwa] op=sw status=500 reason=sw-source-missing");
     return c.text("Service worker unavailable", 500);
@@ -36579,12 +36673,12 @@ app77.get("/sw.js", (c) => {
   console.log(`[pwa] op=sw status=200 ct=${SW_CONTENT_TYPE}`);
   return c.body(SW_SOURCE);
 });
-app77.get("/graph", (c) => {
+app78.get("/graph", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("graph.html"));
 });
-app77.get("/chat", (c) => {
+app78.get("/chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains())) {
     console.log(`[host-class] host=${host} class=operator served=operator.html`);
@@ -36593,47 +36687,47 @@ app77.get("/chat", (c) => {
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("chat.html"));
 });
-app77.get("/data", (c) => {
+app78.get("/data", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app77.get("/tasks", (c) => {
+app78.get("/tasks", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("tasks.html"));
 });
-app77.get("/activity", (c) => {
+app78.get("/activity", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("activity.html"));
 });
-app77.get("/calendar", (c) => {
+app78.get("/calendar", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("calendar.html"));
 });
-app77.get("/routines", (c) => {
+app78.get("/routines", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("routines.html"));
 });
-app77.get("/skills", (c) => {
+app78.get("/skills", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("skills.html"));
 });
-app77.get("/agents", (c) => {
+app78.get("/agents", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("agents.html"));
 });
-app77.get("/browser", (c) => {
+app78.get("/browser", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("browser.html"));
 });
-app77.get("/:slug", async (c, next) => {
+app78.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN2.test(`/${slug}`)) {
     const verdict = validateAgentSlug(slug) ? resolvePublicAddressFromDisk(slug) : { kind: "none" };
@@ -36649,13 +36743,13 @@ app77.get("/:slug", async (c, next) => {
   await next();
 });
 if (brandFaviconPath !== "/favicon.ico") {
-  app77.get("/favicon.ico", (c) => {
+  app78.get("/favicon.ico", (c) => {
     c.header("Cache-Control", "public, max-age=300");
     return c.redirect(brandFaviconPath, 302);
   });
 }
-mountStaticFiles(app77, "./public");
-app77.all("*", (c) => {
+mountStaticFiles(app78, "./public");
+app78.all("*", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path = c.req.path;
   if (isPublicHost(host)) {
@@ -36669,10 +36763,10 @@ app77.all("*", (c) => {
 });
 var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
-var httpServer = serve({ fetch: app77.fetch, port, hostname });
+var httpServer = serve({ fetch: app78.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
   const reconcileScript = resolve49(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const runReconcile = (ctx) => {
     if (!existsSync54(reconcileScript)) return;
@@ -36695,7 +36789,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     detached: true,
     run: runReconcile
   });
-  const reconcileStatePath = join59(MAXY_DIR, "booking-reconcile-state.json");
+  const reconcileStatePath = join60(MAXY_DIR, "booking-reconcile-state.json");
   registerLoop({
     name: "calendar-reconcile-liveness",
     intervalMs: 6e5,
@@ -36713,7 +36807,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
-  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, "..");
+  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
   const dreamSweepScript = resolve49(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
   registerLoop({
     name: "dream-cycle-sweep",
@@ -36737,7 +36831,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, "..");
+  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
   const outlookScript = resolve49(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
@@ -36763,7 +36857,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, "..");
+  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
   const strandedAccountsDir = resolve49(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
@@ -36793,7 +36887,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, "..");
+  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
   const googleAccountsDir = resolve49(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
@@ -36837,7 +36931,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
   const STORAGE_AUDIT_INTERVAL_MS = 3e5;
   const runStorageAuditSafe = () => runStorageAudit(auditPlatformRoot).catch((err) => {
     console.error(`[storage-audit] error="${err.message}"`);
@@ -37039,7 +37133,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, "..");
+  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
   const publishScript = resolve49(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const bookingAccounts = () => {
@@ -37116,7 +37210,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startTimeEntryCensus(() => getSession());
 startLedgerCensus(() => getSession());
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..");
   const auditScript = resolve49(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
@@ -37202,7 +37296,7 @@ for (const m of SUBAPP_MANIFEST) {
 }
 try {
   const registered = [];
-  for (const r of app77.routes ?? []) {
+  for (const r of app78.routes ?? []) {
     if (typeof r.path !== "string" || r.path.includes(":") || r.path.includes("*")) continue;
     if (AGENT_SLUG_PATTERN2.test(r.path)) {
       registered.push({ method: (r.method ?? "ALL").toUpperCase(), path: r.path });
@@ -37328,8 +37422,8 @@ var runIngestAuditTick = () => {
       },
       agentExists: (accountId, slug) => {
         if (!house) return false;
-        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join59(ACCOUNTS_DIR, accountId);
-        return existsSync54(join59(dir, "agents", slug, "config.json"));
+        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join60(ACCOUNTS_DIR, accountId);
+        return existsSync54(join60(dir, "agents", slug, "config.json"));
       }
     });
   } catch (err) {
@@ -37377,7 +37471,7 @@ registerLoop({
       runPublicAddressCollisionAudit({
         houseAccountId: () => resolveAccount()?.accountId ?? null,
         activeSlugs: () => listValidAccounts().map((a) => {
-          const agentsRoot = join59(a.accountDir, "agents");
+          const agentsRoot = join60(a.accountDir, "agents");
           if (!existsSync54(agentsRoot)) return { accountId: a.accountId, slugs: [] };
           const slugs = readdirSync32(agentsRoot, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).filter((slug) => isActiveAgentSlug(a.accountDir, slug));
           return { accountId: a.accountId, slugs };
@@ -37561,7 +37655,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve49(process.env.MAXY_PLATFORM_ROOT ?? join59(__dirname, "..")),
+  platformRoot: resolve49(process.env.MAXY_PLATFORM_ROOT ?? join60(__dirname, "..")),
   accountConfig: bootAccountConfig,
   // Task 2074 — enrich with the sub-account name and fan out to every open
   // admin SSE stream. Fire-and-forget: the manager's persist path must not