@rubytech/create-maxy-code 0.1.575 → 0.1.577

package/payload/server/server.js

@@ -757,7 +757,7 @@ var init_parse_transcript = __esm({
       webchat: "webchat",
       "webchat-channel": "webchat"
     };
-    COMPOSED_ADMIN_FRAME = /^(?:## Scheduled automation \(platform-verified\)\n[\s\S]*?\n\n)?(?:## Message provenance \(platform-verified\)\n[\s\S]*?\n\n)?(?:## Standing rules\n[\s\S]*?\n\n)?## Context\n([\s\S]*)\n\n## Instruction\n[\s\S]*$/;
+    COMPOSED_ADMIN_FRAME = /^(?:## Scheduled automation \(platform-verified\)\n[\s\S]*?\n\n)?(?:## Message provenance \(platform-verified\)\n[\s\S]*?\n\n)?(?:## Standing rules(?: \(account owner\))?\n[\s\S]*?\n\n)?## Context\n([\s\S]*)\n\n## Instruction\n[\s\S]*$/;
     SCHEDULED_MARKER_PREFIX = "## Scheduled automation (platform-verified)\n";
     UPLOAD_ANNOTATION = /(?:\n\n)?\[The operator uploaded \d+ file\(s\): [\s\S]*\]$/;
     REPLY_NOTE = /^\[In reply to an earlier message in this conversation(?:\.|: "([\s\S]*?)")\]\n\n/;
@@ -1911,8 +1911,9 @@ var require_dist2 = __commonJS({
       if (rules.length === 0)
         return "";
       const lines = rules.map((r) => `- ${r.value}`);
-      return `## Standing rules
-${lines.join("\n")}`;
+      return `## Standing rules (account owner)
+These standing rules belong to the account owner. Some of them may name the account owner in the third person. None of them says who sent this turn, so do not infer from them who is speaking.
+` + lines.join("\n");
     }
     async function resolveOwnerUserId3(session, accountId) {
       const res = await session.run(`
@@ -3018,6 +3019,40 @@ var require_keyboard = __commonJS({
   }
 });
 
+// ../lib/dispatch-read/dist/allocate.js
+var require_allocate = __commonJS({
+  "../lib/dispatch-read/dist/allocate.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.selectCandidates = selectCandidates2;
+    exports.overlaps = overlaps2;
+    function selectCandidates2(params) {
+      const { jobType, cfg, commitments } = params;
+      const type = cfg.jobTypes.find((t) => t.name === jobType);
+      if (!type) {
+        return { offered: [], excluded: [], required: "" };
+      }
+      const offered = [];
+      const excluded = [];
+      for (const worker of cfg.workers) {
+        if (!worker.qualifications.includes(type.requiredQualification)) {
+          excluded.push({ workerId: worker.workerId, reason: "missing-qualification" });
+          continue;
+        }
+        offered.push({
+          workerId: worker.workerId,
+          name: worker.name,
+          conflicts: commitments.get(worker.workerId) ?? []
+        });
+      }
+      return { offered, excluded, required: type.requiredQualification };
+    }
+    function overlaps2(a, b) {
+      return a.start < b.end && b.start < a.end;
+    }
+  }
+});
+
 // ../lib/dispatch-read/dist/session.js
 var require_session = __commonJS({
   "../lib/dispatch-read/dist/session.js"(exports) {
@@ -3217,7 +3252,7 @@ var require_read = __commonJS({
     exports.readJobList = readJobList2;
     exports.readCounts = readCounts2;
     var session_js_1 = require_session();
-    function num4(v) {
+    function num5(v) {
       if (typeof v === "number")
         return v;
       if (v && typeof v === "object" && "low" in v) {
@@ -3241,7 +3276,7 @@ var require_read = __commonJS({
         workerId: String(a.workerId),
         arrivedPressedAt: str2(a.arrivedPressedAt),
         arrivedObservedAt: str2(a.arrivedObservedAt),
-        arrivedObservedDistanceM: a.arrivedObservedDistanceM == null ? null : num4(a.arrivedObservedDistanceM)
+        arrivedObservedDistanceM: a.arrivedObservedDistanceM == null ? null : num5(a.arrivedObservedDistanceM)
       })).sort((x, y) => x.workerId < y.workerId ? -1 : x.workerId > y.workerId ? 1 : 0);
       const sole = attendances.length === 1 ? attendances[0] : null;
       return {
@@ -3334,12 +3369,12 @@ var require_read = __commonJS({
       }
       const g = r.records[0];
       return {
-        notes: num4(g.get("notes")),
-        media: num4(g.get("media")),
-        parts: num4(g.get("parts")),
-        checklistDone: num4(g.get("checklistDone")),
-        checklistTotal: num4(g.get("checklistTotal")),
-        signatures: num4(g.get("signatures"))
+        notes: num5(g.get("notes")),
+        media: num5(g.get("media")),
+        parts: num5(g.get("parts")),
+        checklistDone: num5(g.get("checklistDone")),
+        checklistTotal: num5(g.get("checklistTotal")),
+        signatures: num5(g.get("signatures"))
       };
     }
     async function readVisitsForJob3(session, accountId, jobId) {
@@ -3392,7 +3427,7 @@ var require_read = __commonJS({
           workerId,
           arrivedPressedAt: str2(g.get("ownArrivedPressedAt")),
           arrivedObservedAt: str2(g.get("ownArrivedObservedAt")),
-          arrivedObservedDistanceM: dist == null ? null : num4(dist)
+          arrivedObservedDistanceM: dist == null ? null : num5(dist)
         };
       });
     }
@@ -3517,9 +3552,9 @@ var require_read = __commonJS({
       const rad = g.get("geofenceRadiusM");
       return {
         siteId: String(g.get("siteId")),
-        latitude: lat == null ? null : num4(lat),
-        longitude: lon == null ? null : num4(lon),
-        geofenceRadiusM: rad == null ? null : num4(rad)
+        latitude: lat == null ? null : num5(lat),
+        longitude: lon == null ? null : num5(lon),
+        geofenceRadiusM: rad == null ? null : num5(rad)
       };
     }
     var DRAFT_RETURN = `d.draftId AS draftId, d.receivedAt AS receivedAt, d.source AS source,
@@ -3584,7 +3619,7 @@ var require_read = __commonJS({
         notes: g.get("notes") ?? [],
         // A count, not the references. A worker at a door needs to know whether
         // photographs exist before deciding to load them on a bad signal.
-        mediaCount: num4(g.get("mediaCount") ?? 0),
+        mediaCount: num5(g.get("mediaCount") ?? 0),
         ...projectAttendances2(g)
       }));
     }
@@ -3709,7 +3744,7 @@ var require_read = __commonJS({
             workerId,
             arrivedPressedAt: str2(g.get("ownArrivedPressedAt")),
             arrivedObservedAt: str2(g.get("ownArrivedObservedAt")),
-            arrivedObservedDistanceM: dist == null ? null : num4(dist)
+            arrivedObservedDistanceM: dist == null ? null : num5(dist)
           });
         });
       });
@@ -3749,9 +3784,9 @@ var require_read = __commonJS({
               sum(CASE WHEN overdue THEN 1 ELSE 0 END) AS overdue`, { accountId, nowIso, terminalJob: terminalJobStatuses2 });
         const g = r.records[0];
         return {
-          total: num4(g?.get("total")),
-          unallocated: num4(g?.get("unallocated")),
-          overdue: num4(g?.get("overdue"))
+          total: num5(g?.get("total")),
+          unallocated: num5(g?.get("unallocated")),
+          overdue: num5(g?.get("overdue"))
         };
       });
     }
@@ -3792,7 +3827,7 @@ var require_dist3 = __commonJS({
   "../lib/dispatch-read/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
-    exports.readWorkerDay = exports.readJobList = exports.readDay = exports.readCounts = exports.nonZuluStarts = exports.geofenceVerdict = exports.distanceM = exports.readVisitsInWindow = exports.readVisitsForJob = exports.readVisitRecordState = exports.readVisit = exports.readSiteLocation = exports.readSiteHistory = exports.readPreviousVisits = exports.readOpenVisitsForWorker = exports.readNodeId = exports.readJobs = exports.readJob = exports.readFieldVisit = exports.readDrafts = exports.readDraft = exports.readCommitments = exports.projectVisit = exports.projectJob = exports.projectFieldVisit = exports.buildJobListQuery = exports.zonedRangeBounds = exports.zonedDayStartUtc = exports.ymdInZone = exports.minutesIntoDay = exports.daysBetween = exports.currentWeekYmd = exports.addDaysYmd = exports.MAX_RANGE_DAYS = exports.resolveAccountZone = exports.withSession = exports.parseDispatchCallback = exports.dispatchCallbackData = exports.buildVisitKeyboard = exports.CALLBACK_DATA_MAX_BYTES = exports.workerForTelegramUser = exports.terminalVisitStatuses = exports.terminalJobStatuses = exports.loadDispatchConfig = exports.RECORDABLE_FIELDS = void 0;
+    exports.readWorkerDay = exports.readJobList = exports.readDay = exports.readCounts = exports.nonZuluStarts = exports.geofenceVerdict = exports.distanceM = exports.readVisitsInWindow = exports.readVisitsForJob = exports.readVisitRecordState = exports.readVisit = exports.readSiteLocation = exports.readSiteHistory = exports.readPreviousVisits = exports.readOpenVisitsForWorker = exports.readNodeId = exports.readJobs = exports.readJob = exports.readFieldVisit = exports.readDrafts = exports.readDraft = exports.readCommitments = exports.projectVisit = exports.projectJob = exports.projectFieldVisit = exports.buildJobListQuery = exports.zonedRangeBounds = exports.zonedDayStartUtc = exports.ymdInZone = exports.minutesIntoDay = exports.daysBetween = exports.currentWeekYmd = exports.addDaysYmd = exports.MAX_RANGE_DAYS = exports.resolveAccountZone = exports.withSession = exports.selectCandidates = exports.overlaps = exports.parseDispatchCallback = exports.dispatchCallbackData = exports.buildVisitKeyboard = exports.CALLBACK_DATA_MAX_BYTES = exports.workerForTelegramUser = exports.terminalVisitStatuses = exports.terminalJobStatuses = exports.loadDispatchConfig = exports.RECORDABLE_FIELDS = void 0;
     var config_js_1 = require_config();
     Object.defineProperty(exports, "RECORDABLE_FIELDS", { enumerable: true, get: function() {
       return config_js_1.RECORDABLE_FIELDS;
@@ -3822,6 +3857,13 @@ var require_dist3 = __commonJS({
     Object.defineProperty(exports, "parseDispatchCallback", { enumerable: true, get: function() {
       return keyboard_js_1.parseDispatchCallback;
     } });
+    var allocate_js_1 = require_allocate();
+    Object.defineProperty(exports, "overlaps", { enumerable: true, get: function() {
+      return allocate_js_1.overlaps;
+    } });
+    Object.defineProperty(exports, "selectCandidates", { enumerable: true, get: function() {
+      return allocate_js_1.selectCandidates;
+    } });
     var session_js_1 = require_session();
     Object.defineProperty(exports, "withSession", { enumerable: true, get: function() {
       return session_js_1.withSession;
@@ -4259,9 +4301,9 @@ var require_dist5 = __commonJS({
           try {
             await onEmpty(c);
           } catch (err) {
-            const id82 = c.elementId.slice(0, 8);
+            const id83 = c.elementId.slice(0, 8);
             const message = err instanceof Error ? err.message : String(err);
-            process.stderr.write(`[trash:empty-run] reason=onEmpty-failed elementId=${id82} labels=${c.labels.join(",")} message=${message}
+            process.stderr.write(`[trash:empty-run] reason=onEmpty-failed elementId=${id83} labels=${c.labels.join(",")} message=${message}
 `);
             continue;
           }
@@ -12706,6 +12748,32 @@ function buildVisitKeyboard(p) {
   return { rows, dropped };
 }
 
+// ../lib/dispatch-read/src/allocate.ts
+function selectCandidates(params) {
+  const { jobType, cfg, commitments } = params;
+  const type = cfg.jobTypes.find((t) => t.name === jobType);
+  if (!type) {
+    return { offered: [], excluded: [], required: "" };
+  }
+  const offered = [];
+  const excluded = [];
+  for (const worker of cfg.workers) {
+    if (!worker.qualifications.includes(type.requiredQualification)) {
+      excluded.push({ workerId: worker.workerId, reason: "missing-qualification" });
+      continue;
+    }
+    offered.push({
+      workerId: worker.workerId,
+      name: worker.name,
+      conflicts: commitments.get(worker.workerId) ?? []
+    });
+  }
+  return { offered, excluded, required: type.requiredQualification };
+}
+function overlaps(a, b) {
+  return a.start < b.end && b.start < a.end;
+}
+
 // ../lib/dispatch-read/src/session.ts
 import { readFileSync as readFileSync15 } from "fs";
 import { resolve as resolve12 } from "path";
@@ -12989,6 +13057,30 @@ async function readOpenVisitsForWorker(session, accountId, workerId, terminalSta
     };
   });
 }
+async function readCommitments(session, accountId, from, to) {
+  const r = await session.run(
+    // One row per ATTENDANCE is correct here and nowhere else: a commitment
+    // belongs to a worker, so a two-worker visit legitimately commits both.
+    `MATCH (v:Visit {accountId: $accountId})-[:HAS_ATTENDANCE]->(:Attendance)-[:BY_ENGINEER]->(e:Engineer)
+     WHERE v.startDate < $to AND coalesce(v.endDate, v.startDate) > $from
+     RETURN e.engineerId AS workerId, v.visitId AS visitId,
+            v.startDate AS start, coalesce(v.endDate, v.startDate) AS end`,
+    { accountId, from, to }
+  );
+  const out = /* @__PURE__ */ new Map();
+  for (const g of r.records) {
+    const workerId = str(g.get("workerId"));
+    if (!workerId) continue;
+    const list = out.get(workerId) ?? [];
+    list.push({
+      visitId: String(g.get("visitId")),
+      start: String(g.get("start")),
+      end: String(g.get("end"))
+    });
+    out.set(workerId, list);
+  }
+  return out;
+}
 async function readSiteLocation(session, accountId, siteId) {
   const r = await session.run(
     `MATCH (s:Site {accountId: $accountId, siteId: $siteId})
@@ -13170,6 +13262,7 @@ var ZONE_FALLBACK = "UTC";
 var EMPTY_META = {
   vocabulary: { job: "", visit: "", worker: "" },
   statuses: [],
+  transitions: [],
   zone: ""
 };
 var PORTAL_VISITS_PUSH_INTERVAL_MS = 6e4;
@@ -13185,17 +13278,28 @@ function parseVisitRows(raw) {
     const visitId = typeof o.visitId === "string" ? o.visitId : "";
     if (!visitId) continue;
     const str2 = (v) => typeof v === "string" ? v : "";
+    const cnt = (v) => typeof v === "number" && Number.isFinite(v) ? v : 0;
     out.push({
       visitId,
       ownerId: str2(o.ownerId),
       jobId: str2(o.jobId),
       status: str2(o.status),
       startDate: str2(o.startDate),
-      purpose: str2(o.purpose)
+      purpose: str2(o.purpose),
+      notes: cnt(o.notes),
+      media: cnt(o.media),
+      parts: cnt(o.parts),
+      checklistDone: cnt(o.checklistDone),
+      checklistTotal: cnt(o.checklistTotal),
+      signatures: cnt(o.signatures)
     });
   }
   return out;
 }
+function num2(v) {
+  const n = Number(v?.toNumber?.() ?? v);
+  return Number.isFinite(n) ? n : 0;
+}
 async function readVisitsForAccount(accountId) {
   const session = getSession();
   try {
@@ -13207,6 +13311,12 @@ async function readVisitsForAccount(accountId) {
       // the worker sees no job and has nothing to report but confusion, where a
       // duplicate on the account-scope list is visible and reads as what it is.
       // The duplicate is real and is Task 2551.
+      // The record counts ride the visit row (Task 2511). One projection rather
+      // than a `readVisitRecordState` call per visit: this query already runs
+      // once for the whole account, and a per-visit round trip would multiply
+      // every tick by the account's whole visit history. The six expressions
+      // are `readVisitRecordState`'s own, so the two cannot disagree about what
+      // a count means.
       `MATCH (j:Job {accountId: $accountId})-[:HAS_VISIT]->(v:Visit {accountId: $accountId})
        OPTIONAL MATCH (v)-[:HAS_ATTENDANCE]->(:Attendance)-[:BY_ENGINEER]->(e:Engineer)
        RETURN toString(v.visitId) AS visitId,
@@ -13214,7 +13324,13 @@ async function readVisitsForAccount(accountId) {
               coalesce(toString(j.jobId), '') AS jobId,
               coalesce(toString(v.status), '') AS status,
               coalesce(toString(v.startDate), '') AS startDate,
-              coalesce(toString(v.purpose), '') AS purpose`,
+              coalesce(toString(v.purpose), '') AS purpose,
+              size(coalesce(v.notes, []))         AS notes,
+              size(coalesce(v.media, []))         AS media,
+              size(coalesce(v.parts, []))         AS parts,
+              size(coalesce(v.checklistDone, [])) AS checklistDone,
+              size(coalesce(v.checklist, []))     AS checklistTotal,
+              size(coalesce(v.signatures, []))    AS signatures`,
       { accountId }
     );
     return parseVisitRows([
@@ -13225,7 +13341,13 @@ async function readVisitsForAccount(accountId) {
           jobId: rec.get("jobId"),
           status: rec.get("status"),
           startDate: rec.get("startDate"),
-          purpose: rec.get("purpose")
+          purpose: rec.get("purpose"),
+          notes: num2(rec.get("notes")),
+          media: num2(rec.get("media")),
+          parts: num2(rec.get("parts")),
+          checklistDone: num2(rec.get("checklistDone")),
+          checklistTotal: num2(rec.get("checklistTotal")),
+          signatures: num2(rec.get("signatures"))
         }))
       }
     ]);
@@ -13256,8 +13378,72 @@ async function readRosterForAccount(accountId, workers) {
     await session.close();
   }
 }
+async function readCandidatesForAccount(accountId, cfg) {
+  const session = getSession();
+  try {
+    const open3 = await session.run(
+      `MATCH (j:Job {accountId: $accountId})-[:HAS_VISIT]->(v:Visit {accountId: $accountId})
+       WHERE NOT (v)-[:HAS_ATTENDANCE]->()
+       RETURN toString(v.visitId) AS visitId,
+              coalesce(toString(j.jobType), '') AS jobType,
+              coalesce(toString(v.startDate), '') AS startDate,
+              coalesce(toString(v.endDate), toString(v.startDate), '') AS endDate`,
+      { accountId }
+    );
+    if (open3.records.length === 0) return [];
+    const windows = open3.records.map((rec) => ({
+      visitId: String(rec.get("visitId")),
+      jobType: String(rec.get("jobType")),
+      start: String(rec.get("startDate")),
+      end: String(rec.get("endDate"))
+    }));
+    const dated = windows.filter((w) => w.start !== "");
+    const from = dated.reduce((lo, w) => lo === "" || w.start < lo ? w.start : lo, "");
+    const to = dated.reduce((hi, w) => w.end > hi ? w.end : hi, "");
+    const committed = from === "" ? /* @__PURE__ */ new Map() : await readCommitments(session, accountId, from, to);
+    const out = [];
+    const nameOf = new Map(cfg.workers.map((w) => [w.workerId, w.name]));
+    for (const w of windows) {
+      const windowed = new Map(
+        [...committed].map(([workerId, list]) => [
+          workerId,
+          // A visit with no start overlaps nothing rather than everything: an
+          // undated visit is already listed separately by the page, and
+          // reporting the whole roster as clashing with it would be false.
+          w.start === "" ? [] : list.filter((c) => overlaps({ start: w.start, end: w.end }, c))
+        ])
+      );
+      const selection = selectCandidates({ jobType: w.jobType, cfg, commitments: windowed });
+      for (const c of selection.offered) {
+        out.push({
+          visitId: w.visitId,
+          workerId: c.workerId,
+          name: c.name,
+          kind: "offered",
+          reason: "",
+          conflicts: c.conflicts
+        });
+      }
+      for (const e of selection.excluded) {
+        out.push({
+          visitId: w.visitId,
+          workerId: e.workerId,
+          // The config is the authority on a worker's name, and an excluded
+          // worker is never in `selection.offered` to carry one.
+          name: nameOf.get(e.workerId) ?? "",
+          kind: "excluded",
+          reason: e.reason,
+          conflicts: []
+        });
+      }
+    }
+    return out;
+  } finally {
+    await session.close();
+  }
+}
 async function pushVisitsForAccount(opts) {
-  const { accountId, client, rows, roster, meta, log: log2 } = opts;
+  const { accountId, client, rows, roster, meta, candidates, log: log2 } = opts;
   const unbound = rows.filter((r) => r.ownerId === "").length;
   const seen = /* @__PURE__ */ new Set();
   const shared = /* @__PURE__ */ new Set();
@@ -13268,7 +13454,7 @@ async function pushVisitsForAccount(opts) {
   const unresolved = roster.filter((w) => w.ownerId === "").length;
   if (rows.length === 0 && roster.length === 0) {
     log2(`${TAG19} op=skip account=${accountId} reason=no-visits-no-roster`);
-    return { rows: 0, unbound: 0, roster: 0, unresolved: 0 };
+    return { rows: 0, unbound: 0, roster: 0, unresolved: 0, candidates: 0 };
   }
   const state = await client.query(
     "SELECT currentGeneration FROM visits_state WHERE accountId = ?",
@@ -13281,8 +13467,23 @@ async function pushVisitsForAccount(opts) {
   const next = Math.max(current, Number(staged[0]?.g ?? 0)) + 1;
   for (const row of rows) {
     await client.query(
-      "INSERT INTO visits (accountId, visitId, ownerId, jobId, status, startDate, purpose, generation) VALUES (?, ?, ?, ?, ?, ?, ?, ?)",
-      [accountId, row.visitId, row.ownerId, row.jobId, row.status, row.startDate, row.purpose, next]
+      "INSERT INTO visits (accountId, visitId, ownerId, jobId, status, startDate, purpose, notes, media, parts, checklistDone, checklistTotal, signatures, generation) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
+      [
+        accountId,
+        row.visitId,
+        row.ownerId,
+        row.jobId,
+        row.status,
+        row.startDate,
+        row.purpose,
+        row.notes,
+        row.media,
+        row.parts,
+        row.checklistDone,
+        row.checklistTotal,
+        row.signatures,
+        next
+      ]
     );
   }
   for (const w of roster) {
@@ -13293,19 +13494,26 @@ async function pushVisitsForAccount(opts) {
   }
   if (roster.length > 0) {
     await client.query(
-      "INSERT INTO dispatch_meta (accountId, vocabulary, statuses, zone, publishedAt, generation) VALUES (?, ?, ?, ?, ?, ?)",
+      "INSERT INTO dispatch_meta (accountId, vocabulary, statuses, transitions, zone, publishedAt, generation) VALUES (?, ?, ?, ?, ?, ?, ?)",
       [
         accountId,
         JSON.stringify(meta.vocabulary),
         JSON.stringify(meta.statuses),
+        JSON.stringify(meta.transitions),
         meta.zone,
         (/* @__PURE__ */ new Date()).toISOString(),
         next
       ]
     );
   }
+  for (const c of candidates) {
+    await client.query(
+      "INSERT INTO visit_candidates (accountId, visitId, workerId, name, kind, reason, conflicts, generation) VALUES (?, ?, ?, ?, ?, ?, ?, ?)",
+      [accountId, c.visitId, c.workerId, c.name, c.kind, c.reason, JSON.stringify(c.conflicts), next]
+    );
+  }
   log2(
-    `${TAG19} op=stage account=${accountId} generation=${next} rows=${rows.length} visits=${seen.size} shared=${shared.size} roster=${roster.length}`
+    `${TAG19} op=stage account=${accountId} generation=${next} rows=${rows.length} visits=${seen.size} shared=${shared.size} roster=${roster.length} candidates=${candidates.length}`
   );
   await client.query(
     "INSERT INTO visits_state (accountId, currentGeneration) VALUES (?, ?) ON CONFLICT (accountId) DO UPDATE SET currentGeneration = excluded.currentGeneration WHERE excluded.currentGeneration > visits_state.currentGeneration",
@@ -13325,6 +13533,7 @@ async function pushVisitsForAccount(opts) {
       unbound,
       roster: roster.length,
       unresolved,
+      candidates: candidates.length,
       generation: next,
       superseded: true
     };
@@ -13345,12 +13554,23 @@ async function pushVisitsForAccount(opts) {
       accountId,
       next
     ]);
+    await client.query("DELETE FROM visit_candidates WHERE accountId = ? AND generation < ?", [
+      accountId,
+      next
+    ]);
   } catch (err) {
     log2(
       `${TAG19} op=sweep account=${accountId} generation=${next} result=failed err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
-  return { rows: rows.length, unbound, roster: roster.length, unresolved, generation: next };
+  return {
+    rows: rows.length,
+    unbound,
+    roster: roster.length,
+    unresolved,
+    candidates: candidates.length,
+    generation: next
+  };
 }
 function visitsStateFilePath(platformRoot5) {
   return resolve13(platformRoot5, "..", "data", "portal-visits-state.json");
@@ -13358,17 +13578,40 @@ function visitsStateFilePath(platformRoot5) {
 function visitsDigest(rows) {
   const h = createHash3("sha256");
   for (const r of [...rows].sort((a, b) => a.visitId.localeCompare(b.visitId))) {
-    h.update(JSON.stringify([r.visitId, r.ownerId, r.jobId, r.status, r.startDate, r.purpose]));
+    h.update(
+      JSON.stringify([
+        r.visitId,
+        r.ownerId,
+        r.jobId,
+        r.status,
+        r.startDate,
+        r.purpose,
+        // Task 2511's counts are fields of a visit, so they belong in the
+        // visits half. Listed explicitly rather than spread, because the array
+        // literal is what fixes field order here rather than key insertion.
+        r.notes,
+        r.media,
+        r.parts,
+        r.checklistDone,
+        r.checklistTotal,
+        r.signatures
+      ])
+    );
   }
   return h.digest("hex");
 }
-function payloadDigest(rows, roster, meta) {
+function payloadDigest(rows, roster, meta, candidates) {
   const h = createHash3("sha256");
   h.update(visitsDigest(rows));
   for (const w of [...roster].sort((a, b) => a.workerId.localeCompare(b.workerId))) {
     h.update(JSON.stringify([w.workerId, w.ownerId, w.name, w.workingHours]));
   }
-  h.update(JSON.stringify([meta.vocabulary, meta.statuses, meta.zone]));
+  h.update(JSON.stringify([meta.vocabulary, meta.statuses, meta.transitions, meta.zone]));
+  for (const c of [...candidates].sort(
+    (a, b) => a.visitId.localeCompare(b.visitId) || a.workerId.localeCompare(b.workerId)
+  )) {
+    h.update(JSON.stringify([c.visitId, c.workerId, c.name, c.kind, c.reason, c.conflicts]));
+  }
   return h.digest("hex");
 }
 function readVisitsPushState(platformRoot5) {
@@ -13416,9 +13659,11 @@ async function runPortalVisitsPush(root) {
       const meta = cfg.present ? {
         vocabulary: cfg.value.vocabulary,
         statuses: cfg.value.statuses.visit,
+        transitions: cfg.value.statuses.visitTransitions,
         zone: await resolveAccountZone(portal.accountId) ?? ZONE_FALLBACK
       } : EMPTY_META;
-      const digest = payloadDigest(rows, roster, meta);
+      const candidates = cfg.present ? await readCandidatesForAccount(portal.accountId, cfg.value) : [];
+      const digest = payloadDigest(rows, roster, meta, candidates);
       const unresolved = roster.filter((w) => w.ownerId === "").length;
       if (state[portal.accountId]?.digest === digest && (rows.length > 0 || roster.length > 0)) {
         recordVisitsPush(root, portal.accountId, {
@@ -13443,10 +13688,11 @@ async function runPortalVisitsPush(root) {
         rows,
         roster,
         meta,
+        candidates,
         log: (l) => console.error(l)
       });
       console.error(
-        `${TAG19} op=push account=${portal.accountId} visits=${rows.length} pushed=${r.rows} roster=${r.roster} workers-unresolved=${r.unresolved} ms=${Date.now() - startedAt}`
+        `${TAG19} op=push account=${portal.accountId} visits=${rows.length} pushed=${r.rows} roster=${r.roster} workers-unresolved=${r.unresolved} transitions=${meta.transitions.length} candidates=${r.candidates} ms=${Date.now() - startedAt}`
       );
       if (r.generation !== void 0) {
         recordVisitsPush(root, portal.accountId, {
@@ -13491,12 +13737,15 @@ function parsePendingStatusRows(raw) {
       statusAt: str2(o.statusAt),
       dayHundredths: typeof o.dayHundredths === "number" ? o.dayHundredths : 0,
       workDate: str2(o.workDate),
-      workNote: str2(o.workNote)
+      workNote: str2(o.workNote),
+      assignedOwnerId: str2(o.assignedOwnerId),
+      startDate: str2(o.startDate)
     });
   }
   return out;
 }
 var WORK_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+var INSTANT_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
 function buildVisitStatusWrite(accountId, row) {
   const base = {
     accountId,
@@ -13504,6 +13753,72 @@ function buildVisitStatusWrite(accountId, row) {
     status: row.status,
     statusAt: row.statusAt
   };
+  if (row.assignedOwnerId !== "" || row.startDate !== "") {
+    if (row.startDate !== "" && !INSTANT_RE.test(row.startDate)) return { kind: "bad-instant" };
+    if (row.dayHundredths > 0) return { kind: "move-with-labour" };
+    return {
+      kind: "move",
+      // EXACTLY ONE ATTENDANCE to replace, and EXACTLY ONE ENGINEER to replace
+      // it with, or nothing runs at all.
+      //
+      // A visit two workers share cannot be re-assigned by replacing "the"
+      // attendance: whichever went, the other worker would silently lose the
+      // job and the arrival times they had already pressed. A per-worker move
+      // is Task 2551. The engineer gate is the mirror: the `portalOwnerId`
+      // binding is a property and is not unique by construction, so an id
+      // naming several must not resolve to whichever came back first. Both turn
+      // into the zero count this function already returns for a visit missing
+      // its job, so the row stays unclaimed and counted.
+      //
+      // NO `CALL` SUBQUERY, deliberately. A returning subquery replaces each
+      // outer row with the rows it yields, so one that yields nothing on a
+      // status-only or re-time-only edit would eliminate the visit before the
+      // SET ran: the re-timing would write nothing, return 0, and the row would
+      // never drain. A unit subquery does not filter, but then an unresolvable
+      // ownerId would leave the SET running and the row CLAIMED with nobody
+      // moved. Both gates therefore sit in the main query's WHERE, where they
+      // fail the whole statement, and the writes ride FOREACH over lists that
+      // are empty when this edit re-assigns nobody.
+      //
+      // The re-assignment REPLACES rather than adds, because a drag onto
+      // another worker's row means "move this", not "add a second person". The
+      // attendance key is `engineerId + '-' + visitId`, the key
+      // `dispatch-allocate` merges on, so allocating that worker to that visit
+      // afterwards is a no-op rather than a second attendance — and the delete
+      // skips an attendance already held by the incoming engineer, so
+      // re-assigning somebody to the visit they are already on keeps the
+      // arrival times they pressed instead of resetting them.
+      cypher: `MATCH (v:Visit {accountId: $accountId, visitId: $visitId})
+               OPTIONAL MATCH (v)-[:HAS_ATTENDANCE]->(a:Attendance)
+               WITH v, collect(a) AS atts
+               OPTIONAL MATCH (e:Engineer {accountId: $accountId})
+                 WHERE $assignedOwnerId <> ''
+                   AND e.portalOwnerId = $assignedOwnerId
+                   AND e.engineerId IS NOT NULL
+               WITH v, atts, collect(e) AS es
+               WHERE $assignedOwnerId = '' OR (size(atts) = 1 AND size(es) = 1)
+               SET v.status = $status, v.statusAt = $statusAt
+               FOREACH (_ IN CASE WHEN $startDate <> '' THEN [1] ELSE [] END |
+                 SET v.startDate = $startDate)
+               FOREACH (old IN [x IN atts
+                   WHERE NOT x.engineerId IN [eng IN es | eng.engineerId]] |
+                 DETACH DELETE old)
+               FOREACH (eng IN es |
+                 MERGE (a2:Attendance {
+                   accountId: $accountId,
+                   attendanceId: eng.engineerId + '-' + $visitId
+                 })
+                   ON CREATE SET a2.engineerId = eng.engineerId, a2.createdAt = $statusAt
+                 MERGE (v)-[:HAS_ATTENDANCE]->(a2)
+                 MERGE (a2)-[:BY_ENGINEER]->(eng))
+               RETURN count(v) AS n`,
+      params: {
+        ...base,
+        assignedOwnerId: row.assignedOwnerId,
+        startDate: row.startDate
+      }
+    };
+  }
   if (row.dayHundredths <= 0) {
     return {
       kind: "status",
@@ -13562,6 +13877,14 @@ async function pullVisitStatusForAccount(opts) {
       await claim(row.id);
       merged += 1;
       log2(`${TAG20} op=merged account=${accountId} id=${row.id} labour=${row.dayHundredths > 0}`);
+      const fields = ["status"];
+      if (row.workDate !== "") fields.push("workDate");
+      if (row.workNote !== "") fields.push("workNote");
+      if (row.assignedOwnerId !== "") fields.push("assignedOwnerId");
+      if (row.startDate !== "") fields.push("startDate");
+      for (const field2 of fields) {
+        log2(`${TAG20} op=applied visitId=${row.visitId} field=${field2}`);
+      }
     } catch (err) {
       failed2 += 1;
       const detail = err.message.split("\n")[0].replaceAll('"', "'").slice(0, 160);
@@ -13589,7 +13912,7 @@ async function runPortalVisitsPull(root) {
       const pending = parsePendingStatusRows(
         await cf.d1Exec(
           portal.portalDbName,
-          "SELECT id, visitId, ownerId, status, statusAt, dayHundredths, workDate, workNote FROM visit_status WHERE accountId = ? AND claimed = 0",
+          "SELECT id, visitId, ownerId, status, statusAt, dayHundredths, workDate, workNote, assignedOwnerId, startDate FROM visit_status WHERE accountId = ? AND claimed = 0",
           [portal.accountId]
         )
       );
@@ -13598,7 +13921,9 @@ async function runPortalVisitsPull(root) {
         pending,
         applyToGraph: async (accountId, row) => {
           const write = buildVisitStatusWrite(accountId, row);
-          if (write.kind === "undated") return false;
+          if (write.kind === "undated" || write.kind === "bad-instant" || write.kind === "move-with-labour") {
+            return false;
+          }
           const session = getSession();
           try {
             const res = await session.run(write.cypher, write.params);
@@ -13642,7 +13967,7 @@ function buildVisitsAuditLine(input) {
     input.d1Error !== null ? `d1:${auditErrorText(input.d1Error)}` : null,
     input.neo4jError !== null ? `neo4j:${auditErrorText(input.neo4jError)}` : null
   ].filter(Boolean).join(" | ");
-  return `${TAG21} account=${input.accountId} pushedRows=${na(input.pushedRows)} graphVisits=${na(input.graphVisits)} unboundVisits=${na(input.unboundVisits)} pendingStatusRows=${na(input.pendingStatusRows)} oldestPendingHrs=${na(input.oldestPendingHrs, 1)} unresolvedVisitIds=${na(input.unresolvedVisitIds)} labourClaims=${na(input.labourClaims)} labourCosts=${na(input.labourCosts)} undatedClaims=${na(input.undatedClaims)} lastPushAgeSec=${na(input.lastPushAgeSec)}` + (degradation ? ` degraded=${degradation} err="${reasons}"` : "");
+  return `${TAG21} account=${input.accountId} pushedRows=${na(input.pushedRows)} graphVisits=${na(input.graphVisits)} unboundVisits=${na(input.unboundVisits)} pendingStatusRows=${na(input.pendingStatusRows)} oldestPendingHrs=${na(input.oldestPendingHrs, 1)} unresolvedVisitIds=${na(input.unresolvedVisitIds)} labourClaims=${na(input.labourClaims)} labourCosts=${na(input.labourCosts)} undatedClaims=${na(input.undatedClaims)} stalePendingRows=${na(input.stalePendingRows)} lastPushAgeSec=${na(input.lastPushAgeSec)}` + (degradation ? ` degraded=${degradation} err="${reasons}"` : "");
 }
 function readLastVisitsPushAgeSec(platformRoot5, accountId, nowMs) {
   try {
@@ -13655,7 +13980,7 @@ function readLastVisitsPushAgeSec(platformRoot5, accountId, nowMs) {
     return null;
   }
 }
-var num2 = (raw, field2) => {
+var num3 = (raw, field2) => {
   const envelope = Array.isArray(raw) ? raw[0] : null;
   const results = envelope?.results;
   if (!Array.isArray(results)) {
@@ -13681,12 +14006,13 @@ async function runPortalVisitsAudit(root) {
     let unresolvedVisitIds = null;
     let labourClaims = null;
     let undatedClaims = null;
+    let stalePendingRows = null;
     let d1Error = null;
     try {
       if (!SAFE_ACCOUNT_ID3.test(portal.accountId)) {
         throw new Error(`refusing to query for unsafe accountId "${portal.accountId}"`);
       }
-      pushedRows = num2(
+      pushedRows = num3(
         await cf.d1Exec(
           portal.portalDbName,
           "SELECT COUNT(*) AS n FROM visits v JOIN visits_state s ON s.accountId = v.accountId AND s.currentGeneration = v.generation WHERE v.accountId = ?",
@@ -13694,7 +14020,7 @@ async function runPortalVisitsAudit(root) {
         ),
         "n"
       );
-      unboundVisits = num2(
+      unboundVisits = num3(
         await cf.d1Exec(
           portal.portalDbName,
           "SELECT COUNT(*) AS n FROM visits v JOIN visits_state s ON s.accountId = v.accountId AND s.currentGeneration = v.generation WHERE v.accountId = ? AND v.ownerId = ''",
@@ -13707,12 +14033,12 @@ async function runPortalVisitsAudit(root) {
         "SELECT COUNT(*) AS n, MIN(statusAt) AS oldest FROM visit_status WHERE accountId = ? AND claimed = 0",
         [portal.accountId]
       );
-      pendingStatusRows = num2(pending, "n");
+      pendingStatusRows = num3(pending, "n");
       const envelope = Array.isArray(pending) ? pending[0] : null;
       const oldest = envelope?.results?.[0]?.oldest;
       const oldestMs = typeof oldest === "string" ? Date.parse(oldest) : NaN;
       oldestPendingHrs = Number.isNaN(oldestMs) ? pendingStatusRows === 0 ? 0 : null : Math.max(0, (nowMs - oldestMs) / 36e5);
-      unresolvedVisitIds = num2(
+      unresolvedVisitIds = num3(
         await cf.d1Exec(
           portal.portalDbName,
           "SELECT COUNT(*) AS n FROM visit_status vs WHERE vs.accountId = ? AND vs.claimed = 0 AND NOT EXISTS (SELECT 1 FROM visits v JOIN visits_state s ON s.accountId = v.accountId AND s.currentGeneration = v.generation WHERE v.accountId = vs.accountId AND v.visitId = vs.visitId)",
@@ -13720,7 +14046,7 @@ async function runPortalVisitsAudit(root) {
         ),
         "n"
       );
-      labourClaims = num2(
+      labourClaims = num3(
         await cf.d1Exec(
           portal.portalDbName,
           "SELECT COUNT(*) AS n FROM visit_status WHERE accountId = ? AND claimed = 0 AND dayHundredths > 0",
@@ -13728,7 +14054,7 @@ async function runPortalVisitsAudit(root) {
         ),
         "n"
       );
-      undatedClaims = num2(
+      undatedClaims = num3(
         await cf.d1Exec(
           portal.portalDbName,
           "SELECT COUNT(*) AS n FROM visit_status WHERE accountId = ? AND claimed = 0 AND dayHundredths > 0 AND workDate NOT GLOB '[0-9][0-9][0-9][0-9]-[0-9][0-9]-[0-9][0-9]'",
@@ -13736,6 +14062,15 @@ async function runPortalVisitsAudit(root) {
         ),
         "n"
       );
+      const staleCutoff = new Date(nowMs - 2 * PORTAL_VISITS_PULL_INTERVAL_MS).toISOString();
+      stalePendingRows = num3(
+        await cf.d1Exec(
+          portal.portalDbName,
+          "SELECT COUNT(*) AS n FROM visit_status WHERE accountId = ? AND claimed = 0 AND statusAt < ?",
+          [portal.accountId, staleCutoff]
+        ),
+        "n"
+      );
     } catch (err) {
       d1Error = err.message;
     }
@@ -13774,6 +14109,7 @@ async function runPortalVisitsAudit(root) {
         labourClaims,
         labourCosts,
         undatedClaims,
+        stalePendingRows,
         lastPushAgeSec: readLastVisitsPushAgeSec(root, portal.accountId, nowMs),
         d1Error,
         neo4jError
@@ -21386,7 +21722,7 @@ init_neo4j_store();
 async function purgeAdminConversationJsonls(args) {
   const fetchImpl = args.fetchImpl ?? fetch;
   const log2 = args.logger ?? ((line) => console.log(line));
-  const id82 = args.sessionId.slice(0, 8);
+  const id83 = args.sessionId.slice(0, 8);
   const purged = [];
   for (const sessionId of args.claudeSessionIds) {
     const url = `${args.managerBase}/${encodeURIComponent(sessionId)}`;
@@ -21396,7 +21732,7 @@ async function purgeAdminConversationJsonls(args) {
     } catch (err) {
       const message2 = err instanceof Error ? err.message : String(err);
       log2(
-        `[admin-conversation-delete] sessionId=${id82} reason=jsonl-purge-failed claudeSessionId=${sessionId.slice(0, 8)} message=${message2}`
+        `[admin-conversation-delete] sessionId=${id83} reason=jsonl-purge-failed claudeSessionId=${sessionId.slice(0, 8)} message=${message2}`
       );
       return {
         ok: false,
@@ -21413,7 +21749,7 @@ async function purgeAdminConversationJsonls(args) {
     }
     if (res.status === 409) {
       log2(
-        `[admin-conversation-delete] sessionId=${id82} reason=pty-still-alive claudeSessionId=${sessionId.slice(0, 8)}`
+        `[admin-conversation-delete] sessionId=${id83} reason=pty-still-alive claudeSessionId=${sessionId.slice(0, 8)}`
       );
       return {
         ok: false,
@@ -21430,7 +21766,7 @@ async function purgeAdminConversationJsonls(args) {
     } catch {
     }
     log2(
-      `[admin-conversation-delete] sessionId=${id82} reason=jsonl-purge-failed claudeSessionId=${sessionId.slice(0, 8)} message=${message}`
+      `[admin-conversation-delete] sessionId=${id83} reason=jsonl-purge-failed claudeSessionId=${sessionId.slice(0, 8)} message=${message}`
     );
     return {
       ok: false,
@@ -21449,13 +21785,13 @@ async function cascadeAdminConversationDelete(args) {
   const started2 = Date.now();
   const fetchImpl = args.fetchImpl ?? fetch;
   const log2 = args.logger ?? ((line) => console.log(line));
-  const id82 = args.sessionId.slice(0, 8);
+  const id83 = args.sessionId.slice(0, 8);
   let claudeSessionIds;
   try {
     claudeSessionIds = args.claudeSessionIds ?? await getConversationClaudeSessionIds(args.sessionId, args.accountId);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    log2(`[admin-conversation-delete] sessionId=${id82} reason=graph-delete-failed claudeSessionIds-purged= message=transcript-resolve:${message}`);
+    log2(`[admin-conversation-delete] sessionId=${id83} reason=graph-delete-failed claudeSessionIds-purged= message=transcript-resolve:${message}`);
     return { ok: false, reason: "graph-delete-failed", claudeSessionIdsPurged: [], message };
   }
   const purgeOutcome = await purgeAdminConversationJsonls({
@@ -21486,7 +21822,7 @@ async function cascadeAdminConversationDelete(args) {
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     const csv3 = purged.map((s) => s.slice(0, 8)).join(",");
-    log2(`[admin-conversation-delete] sessionId=${id82} reason=graph-delete-failed claudeSessionIds-purged=${csv3} message=${message}`);
+    log2(`[admin-conversation-delete] sessionId=${id83} reason=graph-delete-failed claudeSessionIds-purged=${csv3} message=${message}`);
     return {
       ok: false,
       reason: "graph-delete-failed",
@@ -21499,7 +21835,7 @@ async function cascadeAdminConversationDelete(args) {
   }
   const ms = Date.now() - started2;
   const csv2 = purged.map((s) => s.slice(0, 8)).join(",");
-  log2(`[admin-conversation-delete] sessionId=${id82} claudeSessionIds=${csv2} ms=${ms}`);
+  log2(`[admin-conversation-delete] sessionId=${id83} claudeSessionIds=${csv2} ms=${ms}`);
   return { ok: true, claudeSessionIds: purged, ms };
 }
 
@@ -29716,21 +30052,21 @@ app52.get("/booking-link", requireAdminSession, (c) => {
     console.error("[calendar] op=booking-link auth-rejected reason=no-account-for-session accountId=none");
     return c.json({ error: "no account for session", reason: "no-account-for-session" }, 401);
   }
-  const id82 = account.accountId.slice(0, 8);
+  const id83 = account.accountId.slice(0, 8);
   try {
     if (!existsSync41(join50(account.accountDir, AVAILABILITY_FILENAME))) {
-      console.log(`[calendar] op=booking-link accountId=${id82} bookingDomain=none source=availability-config`);
+      console.log(`[calendar] op=booking-link accountId=${id83} bookingDomain=none source=availability-config`);
       return c.json({ bookingDomain: null });
     }
     const config = readAvailabilityConfig(account.accountDir);
     const bookingDomain = typeof config.bookingDomain === "string" && config.bookingDomain.trim() ? config.bookingDomain.trim() : null;
     console.log(
-      `[calendar] op=booking-link accountId=${id82} bookingDomain=${bookingDomain ?? "none"} source=availability-config`
+      `[calendar] op=booking-link accountId=${id83} bookingDomain=${bookingDomain ?? "none"} source=availability-config`
     );
     return c.json({ bookingDomain });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    console.error(`[calendar] op=booking-link-fail accountId=${id82} err="${message}"`);
+    console.error(`[calendar] op=booking-link-fail accountId=${id83} err="${message}"`);
     return c.json({ bookingDomain: null });
   }
 });
@@ -29750,20 +30086,20 @@ app53.get("/portal-link", requireAdminSession, (c) => {
     console.error("[data-portal] op=portal-link auth-rejected reason=no-account-for-session accountId=none");
     return c.json({ error: "no account for session", reason: "no-account-for-session" }, 401);
   }
-  const id82 = account.accountId.slice(0, 8);
+  const id83 = account.accountId.slice(0, 8);
   try {
     const path = join51(account.accountDir, PORTAL_FILENAME);
     if (!existsSync42(path)) {
-      console.log(`[data-portal] op=portal-link accountId=${id82} portalDomain=none source=data-portal-config`);
+      console.log(`[data-portal] op=portal-link accountId=${id83} portalDomain=none source=data-portal-config`);
       return c.json({ portalDomain: null });
     }
     const cfg = JSON.parse(readFileSync42(path, "utf-8"));
     const portalDomain = typeof cfg.portalDomain === "string" && cfg.portalDomain.trim() ? cfg.portalDomain.trim() : null;
-    console.log(`[data-portal] op=portal-link accountId=${id82} portalDomain=${portalDomain ?? "none"} source=data-portal-config`);
+    console.log(`[data-portal] op=portal-link accountId=${id83} portalDomain=${portalDomain ?? "none"} source=data-portal-config`);
     return c.json({ portalDomain });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    console.error(`[data-portal] op=portal-link-fail accountId=${id82} err="${message}"`);
+    console.error(`[data-portal] op=portal-link-fail accountId=${id83} err="${message}"`);
     return c.json({ portalDomain: null });
   }
 });
@@ -29785,13 +30121,13 @@ app54.get("/planner-link", requireAdminSession, (c) => {
     );
     return c.json({ error: "no account for session", reason: "no-account-for-session" }, 401);
   }
-  const id82 = account.accountId.slice(0, 8);
+  const id83 = account.accountId.slice(0, 8);
   try {
     const portalPath = join52(account.accountDir, PORTAL_FILENAME2);
     const dispatchConfigured = existsSync43(join52(account.accountDir, "dispatch", "config.json"));
     if (!existsSync43(portalPath) || !dispatchConfigured) {
       console.log(
-        `[dispatch-planner] op=planner-link accountId=${id82} plannerUrl=none portal=${existsSync43(portalPath)} dispatch=${dispatchConfigured}`
+        `[dispatch-planner] op=planner-link accountId=${id83} plannerUrl=none portal=${existsSync43(portalPath)} dispatch=${dispatchConfigured}`
       );
       return c.json({ plannerUrl: null });
     }
@@ -29799,12 +30135,12 @@ app54.get("/planner-link", requireAdminSession, (c) => {
     const domain = typeof cfg.portalDomain === "string" && cfg.portalDomain.trim() ? cfg.portalDomain.trim() : null;
     const plannerUrl = domain ? `https://${domain}/planner` : null;
     console.log(
-      `[dispatch-planner] op=planner-link accountId=${id82} plannerUrl=${plannerUrl ?? "none"}`
+      `[dispatch-planner] op=planner-link accountId=${id83} plannerUrl=${plannerUrl ?? "none"}`
     );
     return c.json({ plannerUrl });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    console.error(`[dispatch-planner] op=planner-link-fail accountId=${id82} err="${message}"`);
+    console.error(`[dispatch-planner] op=planner-link-fail accountId=${id83} err="${message}"`);
     return c.json({ plannerUrl: null });
   }
 });
@@ -30168,7 +30504,7 @@ app55.get("/", requireAdminSession, async (c) => {
   }
 });
 function mapRun(props) {
-  const num4 = (v) => {
+  const num5 = (v) => {
     if (v === null || v === void 0) return null;
     if (typeof v === "number") return v;
     if (typeof v === "object" && typeof v.toNumber === "function") {
@@ -30188,11 +30524,11 @@ function mapRun(props) {
     startedAt: props.startedAt,
     endedAt: props.endedAt ?? null,
     finishedAt: props.finishedAt ?? null,
-    ranMs: num4(props.ranMs),
-    httpStatus: num4(props.httpStatus),
+    ranMs: num5(props.ranMs),
+    httpStatus: num5(props.httpStatus),
     dispatchResult: props.dispatchResult ?? null,
     sessionKey: props.sessionKey ?? null,
-    transcriptOffset: num4(props.transcriptOffset),
+    transcriptOffset: num5(props.transcriptOffset),
     // Strict identity: an absent or null `bounded` means the boundary was never
     // established, which is the false case.
     bounded: props.bounded === true,
@@ -30385,7 +30721,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const eventId = c.req.param("eventId");
   const body = await c.req.json().catch(() => ({}));
-  const id82 = eventId.slice(0, 8);
+  const id83 = eventId.slice(0, 8);
   const setClauses = [];
   const params = { eventId, accountId };
   const fields = [];
@@ -30397,11 +30733,11 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
   const clearing = bindingTouched && body.agentChannel === null && body.agentDestination === null;
   const binding = bindingTouched && typeof body.agentChannel === "string" && body.agentChannel.length > 0 && typeof body.agentDestination === "string" && body.agentDestination.length > 0;
   if (bindingTouched && !clearing && !binding) {
-    console.error(`[admin:routines] op=patch id=${id82} fields=agentChannel+agentDestination outcome=rejected reason=partial-binding`);
+    console.error(`[admin:routines] op=patch id=${id83} fields=agentChannel+agentDestination outcome=rejected reason=partial-binding`);
     return c.json({ error: "A dispatch binding needs both a channel and a destination, or both cleared." }, 400);
   }
   if (binding && !DISPATCH_CHANNELS2.has(body.agentChannel)) {
-    console.error(`[admin:routines] op=patch id=${id82} fields=agentChannel+agentDestination outcome=rejected reason=invalid-channel channel=${body.agentChannel}`);
+    console.error(`[admin:routines] op=patch id=${id83} fields=agentChannel+agentDestination outcome=rejected reason=invalid-channel channel=${body.agentChannel}`);
     return c.json({ error: `Unknown dispatch channel "${body.agentChannel}".` }, 400);
   }
   const describing = "description" in body;
@@ -30430,7 +30766,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
       storedDescription = pre.records[0]?.get("description") ?? null;
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
-      console.error(`[admin:routines] op=patch id=${id82} outcome=rejected reason=tz-read-fail err="${message}"`);
+      console.error(`[admin:routines] op=patch id=${id83} outcome=rejected reason=tz-read-fail err="${message}"`);
       return c.json({ error: `Routine unavailable: ${message}` }, 503);
     } finally {
       await preSession.close();
@@ -30438,7 +30774,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
   }
   if (binding) {
     if (storedActionPlugin !== null) {
-      console.error(`[admin:routines] op=patch id=${id82} fields=agentChannel+agentDestination outcome=rejected reason=action-routine`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=agentChannel+agentDestination outcome=rejected reason=action-routine`);
       return c.json(
         { error: "This routine runs a tool. Binding a dispatch would stop the tool running, so it is refused; make a separate routine for the dispatch." },
         400
@@ -30446,7 +30782,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
     }
     const effectivePrompt = typeof body.agentPrompt === "string" ? body.agentPrompt : storedPrompt ?? "";
     if (effectivePrompt.trim().length === 0) {
-      console.error(`[admin:routines] op=patch id=${id82} fields=agentChannel+agentDestination outcome=rejected reason=no-prompt`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=agentChannel+agentDestination outcome=rejected reason=no-prompt`);
       return c.json({ error: "A bound routine needs an instruction, or it will fire and do nothing." }, 400);
     }
     const channel = body.agentChannel;
@@ -30456,12 +30792,12 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
       houseAccountId = channel === "whatsapp" ? resolveHouseOrSoleAccountId(ACCOUNTS_DIR) : accountId;
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
-      console.error(`[admin:routines] op=patch id=${id82} fields=agentChannel+agentDestination outcome=rejected reason=house-unresolved err="${message}"`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=agentChannel+agentDestination outcome=rejected reason=house-unresolved err="${message}"`);
       return c.json({ error: `WhatsApp destinations cannot be validated on this install: ${message}` }, 503);
     }
     const check = validateAgentDestination(ACCOUNTS_DIR, houseAccountId, accountId, channel, destination);
     if (!check.valid) {
-      console.error(`[admin:routines] op=patch id=${id82} fields=agentChannel+agentDestination outcome=rejected reason=${check.reason}`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=agentChannel+agentDestination outcome=rejected reason=${check.reason}`);
       return c.json(
         {
           error: check.reason === "cross-account" ? `That destination belongs to a different account on ${channel}.` : `That destination is not a registered admin or account manager on ${channel}.`
@@ -30478,7 +30814,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
   if (clearing) {
     const keepsRow = typeof body.recurrence === "string" || storedRecurrence !== null || storedActionPlugin !== null;
     if (!keepsRow) {
-      console.error(`[admin:routines] op=patch id=${id82} fields=agentChannel+agentDestination outcome=rejected reason=clear-would-orphan`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=agentChannel+agentDestination outcome=rejected reason=clear-would-orphan`);
       return c.json(
         { error: "Clearing the dispatch on a one-time routine would leave nothing to show. Give it a schedule first, or delete it." },
         400
@@ -30498,12 +30834,12 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
   let nextName = null;
   if (naming) {
     if (typeof body.name !== "string" || body.name.trim().length === 0) {
-      console.error(`[admin:routines] op=patch id=${id82} fields=name outcome=rejected reason=empty-name`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=name outcome=rejected reason=empty-name`);
       return c.json({ error: "A routine needs a name." }, 400);
     }
     nextName = body.name.trim();
     if (nextName.length > 200) {
-      console.error(`[admin:routines] op=patch id=${id82} fields=name outcome=rejected reason=too-long len=${nextName.length}`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=name outcome=rejected reason=too-long len=${nextName.length}`);
       return c.json({ error: "A routine name is at most 200 characters." }, 400);
     }
     setClauses.push("e.name = $name");
@@ -30516,7 +30852,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
   if (describing) {
     const raw = body.description;
     if (typeof raw !== "string" && raw !== null) {
-      console.error(`[admin:routines] op=patch id=${id82} fields=description outcome=rejected reason=not-a-string`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=description outcome=rejected reason=not-a-string`);
       return c.json({ error: "A description must be text, or null to clear it." }, 400);
     }
     nextDescription = typeof raw === "string" && raw.trim().length > 0 ? raw : null;
@@ -30537,7 +30873,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
       params.embedding = embedding;
     } else {
       embedLog = " embed=failed";
-      console.error(`[admin:routines] op=patch id=${id82} fields=${fields.join("+")} embed=failed`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=${fields.join("+")} embed=failed`);
     }
   }
   if (typeof body.recurrence === "string") {
@@ -30551,7 +30887,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
       nextRunLog = nextRun;
     } catch (err) {
       const reason = err instanceof Error ? err.message : String(err);
-      console.error(`[admin:routines] op=patch id=${id82} outcome=rejected reason=invalid-cron cron=${body.recurrence}`);
+      console.error(`[admin:routines] op=patch id=${id83} outcome=rejected reason=invalid-cron cron=${body.recurrence}`);
       return c.json({ error: `Invalid recurrence: ${reason}` }, 400);
     }
   }
@@ -30569,15 +30905,15 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
       params
     );
     if (res.records.length === 0) {
-      console.error(`[admin:routines] op=patch id=${id82} outcome=rejected reason=not-found`);
+      console.error(`[admin:routines] op=patch id=${id83} outcome=rejected reason=not-found`);
       return c.json({ error: "Routine not found" }, 404);
     }
     const nameLog = nextName === null ? "" : ` name=len:${nextName.length} operatorEdited=stamped`;
-    console.log(`[admin:routines] op=patch id=${id82} fields=${fields.join("+")} outcome=ok nextRun=${nextRunLog} cron=${params.recurrence ?? "unchanged"}${bindingLog}${nameLog}${embedLog}`);
+    console.log(`[admin:routines] op=patch id=${id83} fields=${fields.join("+")} outcome=ok nextRun=${nextRunLog} cron=${params.recurrence ?? "unchanged"}${bindingLog}${nameLog}${embedLog}`);
     return c.json({ routine: mapRoutine(res.records[0]) });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    console.error(`[admin:routines] op=patch id=${id82} outcome=rejected reason=${message}`);
+    console.error(`[admin:routines] op=patch id=${id83} outcome=rejected reason=${message}`);
     return c.json({ error: `Update failed: ${message}` }, 503);
   } finally {
     await session.close();
@@ -33931,7 +34267,7 @@ function formatConfigAuditLine(a, accountId) {
 function formatRecordCensus(f, accountId) {
   return `${RECORD_CENSUS_TAG}${accountId ? ` account=${accountId}` : ""} closedVisits=${f.closedVisits} withNote=${f.withNote} withMedia=${f.withMedia} medianRecordLagS=${f.medianRecordLagS} p90RecordLagS=${f.p90RecordLagS}`;
 }
-function num3(v) {
+function num4(v) {
   if (typeof v === "number") return v;
   if (v && typeof v === "object" && "low" in v) {
     return Number(v.low);
@@ -34027,15 +34363,15 @@ async function readCensusCounts(session, accountId, terminal, now) {
     { accountId, canonical: `^${CANONICAL_INSTANT_PATTERN}$` }
   );
   return {
-    jobs: num3(g?.get("jobs")),
-    unallocated: num3(g?.get("unallocated")),
+    jobs: num4(g?.get("jobs")),
+    unallocated: num4(g?.get("unallocated")),
     oldestUnallocatedAgeH,
-    overdue: num3(g?.get("overdue")),
-    visitsOpen: num3(vg?.get("visitsOpen")),
-    visitsOpenOver24h: num3(vg?.get("visitsOpenOver24h")),
-    intakeUnreviewed: num3(dg?.get("intakeUnreviewed")),
+    overdue: num4(g?.get("overdue")),
+    visitsOpen: num4(vg?.get("visitsOpen")),
+    visitsOpenOver24h: num4(vg?.get("visitsOpenOver24h")),
+    intakeUnreviewed: num4(dg?.get("intakeUnreviewed")),
     oldestIntakeAgeH,
-    nonCanonicalInstants: num3(nc.records[0]?.get("nonCanonicalInstants"))
+    nonCanonicalInstants: num4(nc.records[0]?.get("nonCanonicalInstants"))
   };
 }
 async function readRecordCensus(session, accountId, terminal, now) {
@@ -34053,8 +34389,8 @@ async function readRecordCensus(session, accountId, terminal, now) {
   let withMedia = 0;
   const lags = [];
   for (const g of r.records) {
-    if (num3(g.get("notes")) > 0) withNote++;
-    if (num3(g.get("media")) > 0) withMedia++;
+    if (num4(g.get("notes")) > 0) withNote++;
+    if (num4(g.get("media")) > 0) withMedia++;
     const closedAt = g.get("closedAt");
     const dueToLeaveAt = g.get("dueToLeaveAt");
     if (typeof closedAt === "string" && typeof dueToLeaveAt === "string") {
@@ -34975,8 +35311,18 @@ async function migrateSidecarAccountIds(opts = {}) {
 init_src2();
 
 // app/lib/whatsapp/gateway/inbound-hub.ts
+var HUB_SEPARATOR = "\0";
 function hubKey(accountId, senderId) {
-  return `${accountId}\0${senderId}`;
+  return `${accountId}${HUB_SEPARATOR}${senderId}`;
+}
+function decodeHubKeys(keys) {
+  const out = [];
+  for (const key2 of keys) {
+    const i = key2.indexOf(HUB_SEPARATOR);
+    if (i < 0) continue;
+    out.push({ accountId: key2.slice(0, i), senderId: key2.slice(i + HUB_SEPARATOR.length) });
+  }
+  return out;
 }
 var InboundHub = class {
   senders = /* @__PURE__ */ new Map();
@@ -35479,15 +35825,15 @@ function createWaChannelRoutes(deps) {
     }
     const interactive = body?.interactive === true;
     const finalText = typeof body?.finalText === "string" ? body.finalText : "";
-    const num4 = (v) => typeof v === "number" && Number.isFinite(v) ? v : -1;
-    const finalBytes = num4(body?.finalBytes);
-    const queueDepth = num4(body?.queueDepth);
-    const pendingTurns = num4(body?.pendingTurns);
-    const consumed2 = num4(body?.consumed);
+    const num5 = (v) => typeof v === "number" && Number.isFinite(v) ? v : -1;
+    const finalBytes = num5(body?.finalBytes);
+    const queueDepth = num5(body?.queueDepth);
+    const pendingTurns = num5(body?.pendingTurns);
+    const consumed2 = num5(body?.consumed);
     const source = typeof body?.source === "string" ? body.source : null;
     const sid = sessionId.slice(0, 8);
     console.error(
-      `[whatsapp-native] op=turn-context sessionId=${sid} cacheReadTokens=${num4(body?.cacheReadTokens)} inputTokens=${num4(body?.inputTokens)} outputTokens=${num4(body?.outputTokens)} thinkingBlocks=${num4(body?.thinkingBlocks)} thinkingChars=${num4(body?.thinkingChars)}`
+      `[whatsapp-native] op=turn-context sessionId=${sid} cacheReadTokens=${num5(body?.cacheReadTokens)} inputTokens=${num5(body?.inputTokens)} outputTokens=${num5(body?.outputTokens)} thinkingBlocks=${num5(body?.thinkingBlocks)} thinkingChars=${num5(body?.thinkingChars)}`
     );
     const role = body?.role;
     if (role !== "admin" && role !== "public") {
@@ -35968,6 +36314,14 @@ var WaGateway = class {
   liveReplyTarget(accountId, senderId) {
     return this.replies.get(hubKey(accountId, normalizeTarget(senderId) ?? senderId)) ?? null;
   }
+  /** Task 2557 — every (account, sender) this gateway currently holds a live
+   *  delivery closure for. The follower census reconciles against exactly this
+   *  set, so "should have a reader" and "can be sent to" are one fact and
+   *  cannot drift. Deriving the set from the follower registry instead would
+   *  ask the map that already lost the entry. */
+  boundTargets() {
+    return decodeHubKeys(this.replies.keys());
+  }
   async sendOutbound(accountId, senderId, text) {
     this.outboundSends++;
     const reply = this.replies.get(hubKey(accountId, senderId));
@@ -36441,12 +36795,12 @@ function createWebchatChannelRoutes(deps) {
     const finalBytes = typeof body?.finalBytes === "number" && Number.isFinite(body.finalBytes) ? body.finalBytes : 0;
     const k = key2.slice(0, 8);
     const sid = sessionId.slice(0, 8);
-    const num4 = (v) => typeof v === "number" && Number.isFinite(v) ? v : -1;
+    const num5 = (v) => typeof v === "number" && Number.isFinite(v) ? v : -1;
     console.error(
-      `[webchat-native] op=turn-context sessionId=${sid} cacheReadTokens=${num4(body?.cacheReadTokens)} inputTokens=${num4(body?.inputTokens)} outputTokens=${num4(body?.outputTokens)} thinkingBlocks=${num4(body?.thinkingBlocks)} thinkingChars=${num4(body?.thinkingChars)}`
+      `[webchat-native] op=turn-context sessionId=${sid} cacheReadTokens=${num5(body?.cacheReadTokens)} inputTokens=${num5(body?.inputTokens)} outputTokens=${num5(body?.outputTokens)} thinkingBlocks=${num5(body?.thinkingBlocks)} thinkingChars=${num5(body?.thinkingChars)}`
     );
-    const segmentStart = num4(body?.segmentStart);
-    const segmentEnd = num4(body?.segmentEnd);
+    const segmentStart = num5(body?.segmentStart);
+    const segmentEnd = num5(body?.segmentEnd);
     const resolved = deps.onTurnEnd?.(key2, role, { sessionId, segmentStart, segmentEnd }) ?? "none";
     const resolvedField = role === "public" ? ` resolved=${resolved}` : "";
     console.error(`[webchat-native] op=turn-end channel=webchat key=${k} role=${role} sessionId=${sid} trailing=${finalBytes}${resolvedField}`);
@@ -37188,7 +37542,10 @@ function startEmitter(opts) {
   const abort2 = new AbortController();
   const { entry: entry2, tag } = opts;
   const answers = new AnswerAccumulator();
+  let answersEmitted = 0;
+  let closeReason = "stream-end";
   const emitAnswer = async (answer) => {
+    answersEmitted += 1;
     if (answer.text.trim()) await fanOut2(entry2.subscribers, answer.text, opts.onError, tag);
     if (!opts.onAnswer) return;
     const guarded = { ...answer, text: guardOutbound(entry2.senderId, answer.text) };
@@ -37361,9 +37718,14 @@ function startEmitter(opts) {
       for (const answer of answers.flush()) await emitAnswer(answer);
     } catch (err) {
       if (!abort2.signal.aborted) {
+        closeReason = "error";
         opts.onError?.(`emitter-error: ${err instanceof Error ? err.message : String(err)}`);
       }
     } finally {
+      if (abort2.signal.aborted) closeReason = "aborted";
+      console.error(
+        `${tag} op=follower-closed sessionId=${entry2.sessionId.slice(0, 8)} reason=${closeReason} answers=${answersEmitted}`
+      );
       opts.onClose();
     }
   })();
@@ -37564,6 +37926,12 @@ function startWebchatNativeFileFollower(input) {
   return startEmitter({
     entry: entry2,
     tag: "[webchat-adaptor]",
+    // Task 2557 — the emitter has always had this channel and no follower ever
+    // passed one, so every cause it reported was discarded. The close line
+    // carries the outcome; this carries the cause.
+    onError: (reason) => {
+      console.error(`[webchat-adaptor] op=follower-error sessionId=${input.sessionId.slice(0, 8)} reason=${reason}`);
+    },
     fileDelivery: makeWebchatFileDelivery(entry2),
     // A resumed session's JSONL already holds prior SendUserFile tool_uses;
     // suppress replay so historical calls are not re-reconciled on attach.
@@ -37728,6 +38096,14 @@ function startNativeFileFollower(input) {
   return startEmitter({
     entry: entry2,
     tag: "[whatsapp-adaptor]",
+    // Task 2557 — the emitter has always had this channel and no follower ever
+    // passed one, so every cause it reported (`follow-status-404`,
+    // `emitter-error: …`, `subscriber-error: …`) was discarded. The close line
+    // carries the outcome; this carries the cause, and it can fire without the
+    // stream ending, so neither substitutes for the other.
+    onError: (reason) => {
+      console.error(`[whatsapp-adaptor] op=follower-error sessionId=${input.sessionId.slice(0, 8)} reason=${reason}`);
+    },
     // Task 2521 — admin-only. A public spawn has no tools (Task 2078), so a
     // handler here would reconcile a call that can never fire.
     fileDelivery: input.role === "admin" ? makeWhatsAppFileDelivery(entry2, input.maxyAccountId) : null,
@@ -37752,6 +38128,69 @@ function startNativeFileFollower(input) {
   });
 }
 
+// app/lib/channel-delivery/follower-registry.ts
+function createFollowerRegistry(start) {
+  const controllers = /* @__PURE__ */ new Map();
+  const params = /* @__PURE__ */ new Map();
+  return {
+    attach(p) {
+      controllers.get(p.senderId)?.abort();
+      params.set(p.senderId, p);
+      let ac;
+      ac = start(p, () => {
+        if (controllers.get(p.senderId) === ac) controllers.delete(p.senderId);
+      });
+      controllers.set(p.senderId, ac);
+    },
+    live: () => [...controllers.keys()],
+    paramsFor: (senderId) => params.get(senderId) ?? null
+  };
+}
+
+// app/lib/channel-delivery/follower-census.ts
+var CENSUS_MAX_REATTEMPTS = 3;
+function makeCensusState() {
+  return { attempts: /* @__PURE__ */ new Map() };
+}
+var id82 = (s) => s.slice(0, 8);
+function followerCensusTick(deps, state = makeCensusState()) {
+  const bound = deps.bound();
+  const live = new Set(deps.live());
+  for (const senderId of live) state.attempts.delete(senderId);
+  const missing = bound.filter((senderId) => !live.has(senderId));
+  console.error(
+    `[channel-follower] op=follower-census channel=${deps.channel} bound=${bound.length} attached=${live.size} missing=${missing.length} missingSenders=${missing.map(id82).join(",") || "none"}`
+  );
+  for (const senderId of missing) {
+    const used = state.attempts.get(senderId) ?? 0;
+    if (used >= CENSUS_MAX_REATTEMPTS) {
+      console.error(
+        `[channel-follower] op=follower-reattach channel=${deps.channel} sessionId=${id82(deps.paramsFor(senderId)?.sessionId ?? "none")} senderId=${id82(senderId)} outcome=skipped reason=reattach-exhausted attempts=${used}`
+      );
+      continue;
+    }
+    const p = deps.paramsFor(senderId);
+    if (!p) {
+      console.error(
+        `[channel-follower] op=follower-reattach channel=${deps.channel} sessionId=none senderId=${id82(senderId)} outcome=failed reason=no-attach-params`
+      );
+      continue;
+    }
+    try {
+      state.attempts.set(senderId, used + 1);
+      deps.attach(p);
+      console.error(
+        `[channel-follower] op=follower-reattach channel=${deps.channel} sessionId=${id82(p.sessionId)} senderId=${id82(p.senderId)} outcome=attached reason=none`
+      );
+    } catch (err) {
+      console.error(
+        `[channel-follower] op=follower-reattach channel=${deps.channel} sessionId=${id82(p.sessionId)} senderId=${id82(p.senderId)} outcome=failed reason=${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  return `${deps.channel}: ${bound.length} door(s), ${missing.length} without a reader`;
+}
+
 // app/lib/telegram/gateway/inbound-hub.ts
 var InboundHub3 = class {
   keys = /* @__PURE__ */ new Map();
@@ -37905,7 +38344,8 @@ function createTelegramChannelRoutes(deps) {
     if (typeof key2 !== "string" || typeof messageId !== "string") {
       return c.json({ error: "key and messageId required" }, 400);
     }
-    deps.onReceived?.(key2, messageId);
+    const provenance = typeof body?.provenance === "boolean" ? body.provenance : void 0;
+    deps.onReceived?.(key2, messageId, provenance);
     return c.json({ ok: true });
   });
   app81.post("/tg-channel/turn-end", async (c) => {
@@ -37919,9 +38359,9 @@ function createTelegramChannelRoutes(deps) {
     const interactive = body?.interactive === true;
     const finalText = typeof body?.finalText === "string" ? body.finalText : "";
     const sid = sessionId.slice(0, 8);
-    const num4 = (v) => typeof v === "number" && Number.isFinite(v) ? v : -1;
+    const num5 = (v) => typeof v === "number" && Number.isFinite(v) ? v : -1;
     console.error(
-      `[telegram-native] op=turn-context sessionId=${sid} cacheReadTokens=${num4(body?.cacheReadTokens)} inputTokens=${num4(body?.inputTokens)} outputTokens=${num4(body?.outputTokens)} thinkingBlocks=${num4(body?.thinkingBlocks)} thinkingChars=${num4(body?.thinkingChars)}`
+      `[telegram-native] op=turn-context sessionId=${sid} cacheReadTokens=${num5(body?.cacheReadTokens)} inputTokens=${num5(body?.inputTokens)} outputTokens=${num5(body?.outputTokens)} thinkingBlocks=${num5(body?.thinkingBlocks)} thinkingChars=${num5(body?.thinkingChars)}`
     );
     const role = body?.role;
     if (role !== "admin" && role !== "public") {
@@ -38039,6 +38479,16 @@ var TelegramGateway = class {
   }
   hub = new InboundHub3();
   replies = /* @__PURE__ */ new Map();
+  /** Task 2559 — the keys whose last inbound was `role:'admin'`. The follower
+   *  census's bound set is the doors that SHOULD have a reader, and a public
+   *  Telegram session is given none by design: the public branch of
+   *  `buildTelegramEnsureSession` returns before the attach block, because the
+   *  file follower is an admin surface. Including a public key would report it
+   *  missing on every tick for ever and stop `missing=` ever reaching zero,
+   *  which is the one signal the census exists to give. Removed on a public
+   *  inbound, because the role is read from account config on every inbound and
+   *  a bot can be flipped between the two. */
+  adminKeys = /* @__PURE__ */ new Set();
   spawning = /* @__PURE__ */ new Set();
   /** Task 2428 — keys whose channel server signalled ready while their spawn was
    *  still in flight. The harness discards a channel notification that arrives
@@ -38066,7 +38516,7 @@ var TelegramGateway = class {
         }
         this.drain(key2);
       },
-      onReceived: (key2, messageId) => {
+      onReceived: (key2, messageId, provenance) => {
         const acked = this.hub.ack(key2, messageId);
         if (acked !== null && (acked.source ?? "user") === "user") {
           noteReceived(key2, parseTelegramChannelKey(key2)?.botId ?? "unknown", messageId, Date.now());
@@ -38074,6 +38524,10 @@ var TelegramGateway = class {
         console.error(
           `[telegram-native] op=channel-received key=${key2} messageId=${messageId}${acked !== null ? "" : " note=unknown"}`
         );
+        const prov = provenance === void 0 ? "unknown" : provenance ? "yes" : "no";
+        console.error(
+          `[telegram:reframe] op=compose key=${key2} provenance=${prov} source=${acked?.source ?? "unknown"}`
+        );
       }
     });
   }
@@ -38146,6 +38600,8 @@ var TelegramGateway = class {
     const willDeliverNow = this.hub.isReady(key2);
     const source = input.source ?? "user";
     this.replies.set(key2, input.reply);
+    if (input.role === "admin") this.adminKeys.add(key2);
+    else this.adminKeys.delete(key2);
     let standingRules;
     if (input.role === "admin" && this.deps.fetchStandingRules) {
       const res = await this.deps.fetchStandingRules(input.accountId);
@@ -38157,7 +38613,21 @@ var TelegramGateway = class {
       );
     }
     this.hub.deliver(
-      { key: key2, text: input.text, media: input.media, messageId: `tg-${++this.seq}`, source, standingRules, scheduleProvenance: input.scheduleProvenance },
+      {
+        key: key2,
+        text: input.text,
+        media: input.media,
+        messageId: `tg-${++this.seq}`,
+        source,
+        // Task 2561 — passed explicitly rather than parsed out of `key`:
+        // accountId is not in the key, and the channel service imports nothing
+        // from app/lib. Without them the composer cannot name who is speaking,
+        // and the turn opens straight into rules written about the owner.
+        senderId: input.senderId,
+        accountId: input.accountId,
+        standingRules,
+        scheduleProvenance: input.scheduleProvenance
+      },
       Date.now()
     );
     const resolvedSessionId = this.sessionIdFor(input);
@@ -38197,6 +38667,18 @@ var TelegramGateway = class {
   liveReplyTarget(key2) {
     return this.replies.get(key2) ?? null;
   }
+  /** Task 2559 — every admin door this gateway currently holds a live delivery
+   *  closure for, as the `<botId>:<senderId>` channel key the follower registry
+   *  keys on. The twin of `WaGateway.boundTargets()`: the census reconciles
+   *  against exactly this set, so "should have a reader" and "can be sent to"
+   *  are one fact and cannot drift. A key `parseTelegramChannelKey` rejects is
+   *  the pre-2368 bare-sender shape, skipped rather than halved at an arbitrary
+   *  offset, which would yield a door id nothing keys on. */
+  boundTargets() {
+    return [...this.replies.keys()].filter(
+      (key2) => this.adminKeys.has(key2) && parseTelegramChannelKey(key2) !== null
+    );
+  }
   async sendOutbound(key2, text) {
     const reply = this.replies.get(key2);
     if (!reply) throw new Error(`telegram-gateway: no reply route for key ${key2}`);
@@ -38291,24 +38773,13 @@ function buildTelegramEnsureSession(deps) {
       `${TAG62} op=spawn botId=${input.botId} sessionId=${req.sessionId} targetAccountId=${input.accountId} role=admin`
     );
     noteSpawnOk2(input.botId);
-    deps.followers.get(req.channelKey)?.abort();
-    let ac;
-    ac = deps.startFileFollower({
+    deps.followers.attach({
       sessionId: req.sessionId,
       senderId: req.channelKey,
       accountId: input.accountId,
       chatId: input.chatId,
-      botToken: input.botToken,
-      // Task 2521 — resolved per answer, not captured once, so a door that goes
-      // live after this session started still receives.
-      fanTargets: () => deps.fanTargets(req.channelKey),
-      // Identity-guarded eviction: only delete if this controller is still the
-      // current one, so a stale self-close never removes a live follower.
-      onClose: () => {
-        if (deps.followers.get(req.channelKey) === ac) deps.followers.delete(req.channelKey);
-      }
+      botToken: input.botToken
     });
-    deps.followers.set(req.channelKey, ac);
   };
 }
 
@@ -38449,6 +38920,12 @@ function startTelegramNativeFileFollower(input) {
   return startEmitter({
     entry: entry2,
     tag: "[telegram-adaptor]",
+    // Task 2557 — the emitter has always had this channel and no follower ever
+    // passed one, so every cause it reported was discarded. The close line
+    // carries the outcome; this carries the cause.
+    onError: (reason) => {
+      console.error(`[telegram-adaptor] op=follower-error sessionId=${input.sessionId.slice(0, 8)} reason=${reason}`);
+    },
     fileDelivery: makeTelegramFileDelivery(entry2, input.botToken),
     // A resumed session's JSONL already holds prior SendUserFile tool_uses;
     // suppress replay so historical files are not re-sent on attach.
@@ -39367,7 +39844,27 @@ function resolveChannelOverride(accountId, channel, senderId) {
     return null;
   }
 }
-var nativeFileFollowers = /* @__PURE__ */ new Map();
+var nativeFileFollowers = createFollowerRegistry(
+  (p, onClose) => startNativeFileFollower({
+    sessionId: p.sessionId,
+    senderId: p.senderId,
+    // Task 1390 — the file-path validation scope is the sender's effective
+    // session account (the sub-account for an account-manager), not the house
+    // socket account. `accountId` stays the getSocket key.
+    accountId: p.accountId,
+    maxyAccountId: p.effectiveAccountId,
+    // Task 2521 — file delivery is admin-only; the text emitter is not.
+    role: p.role,
+    // Task 2521 — resolved per answer, not captured once, so a door that goes
+    // live after this session started still receives.
+    // Task 2531 — `effectiveAccountId`, NOT `accountId`. The reply map is keyed
+    // on the platform UUID (wa-gateway.ts:567) while `accountId` here is the
+    // Baileys credential dirname. Passing the dirname missed every lookup and
+    // delivered session 8e5bc4e8's answer to nothing.
+    fanTargets: () => whatsappFanTargets(p.effectiveAccountId, p.senderId),
+    onClose
+  })
+);
 var webchatFileFollowers = /* @__PURE__ */ new Map();
 async function fetchAccountStandingRules(accountId) {
   const session = getSession();
@@ -39598,32 +40095,13 @@ var waGateway = new WaGateway({
       console.error(`[whatsapp-native] spawn-failed senderId=${senderId} role=${role} error=${result.error} status=${result.status}`);
       return;
     }
-    const prior = nativeFileFollowers.get(senderId);
-    if (prior) prior.abort();
-    let ac;
-    ac = startNativeFileFollower({
+    nativeFileFollowers.attach({
       sessionId: req.sessionId,
       senderId,
       accountId,
-      // Task 1390 — the file-path validation scope is the sender's effective
-      // session account (the sub-account for an account-manager), not the house
-      // socket account. accountId stays the getSocket key.
-      maxyAccountId: effectiveAccountId,
-      // Task 2521 — file delivery is admin-only; the text emitter is not.
-      role,
-      // Task 2521 — resolved per answer, not captured once, so a door that goes
-      // live after this session started still receives.
-      // Task 2531 — `effectiveAccountId`, NOT `accountId`. The reply map is
-      // keyed on the platform UUID (wa-gateway.ts:567) while `accountId` here is
-      // the Baileys credential dirname (see the Task 1850 note above). Passing
-      // the dirname missed every lookup and delivered session 8e5bc4e8's answer
-      // to nothing. `accountId` stays correct on line 718: that is the socket.
-      fanTargets: () => whatsappFanTargets(effectiveAccountId, senderId),
-      onClose: () => {
-        if (nativeFileFollowers.get(senderId) === ac) nativeFileFollowers.delete(senderId);
-      }
+      effectiveAccountId,
+      role
     });
-    nativeFileFollowers.set(senderId, ac);
   }
 });
 app80.route("/", waGateway.routes());
@@ -39793,7 +40271,6 @@ setWebchatGateway(webchatGateway);
 app80.route("/", webchatGateway.routes());
 webchatGateway.startSweeper();
 webchatGateway.startPublicReaper();
-var telegramFileFollowers = /* @__PURE__ */ new Map();
 var telegramFanTargets = (key2) => {
   const account = listValidAccounts().find(
     (a) => listBotEntries(a.config.telegram).some((e) => e.id === key2.slice(0, key2.indexOf(":")))
@@ -39810,6 +40287,19 @@ var telegramFanTargets = (key2) => {
     deps: adminFanDeps("telegram", account.accountId)
   });
 };
+var telegramFileFollowers = createFollowerRegistry(
+  (p, onClose) => startTelegramNativeFileFollower({
+    sessionId: p.sessionId,
+    senderId: p.senderId,
+    accountId: p.accountId,
+    chatId: p.chatId,
+    botToken: p.botToken,
+    // Task 2521 — resolved per answer, not captured once, so a door that goes
+    // live after this session started still receives.
+    fanTargets: () => telegramFanTargets(p.senderId),
+    onClose
+  })
+);
 var telegramGateway = new TelegramGateway({
   fetchStandingRules: fetchAccountStandingRules,
   // Task 2353 — no turn-instruction resolver on this door. See the dep comment in
@@ -39830,14 +40320,39 @@ var telegramGateway = new TelegramGateway({
     managerRcSpawn,
     managerSpawn,
     resolveSessionOverride: (accountId, channelKey) => resolveChannelOverride(accountId, "telegram", channelKey),
-    startFileFollower: startTelegramNativeFileFollower,
-    fanTargets: telegramFanTargets,
     followers: telegramFileFollowers
   })
 });
 setTelegramGateway(telegramGateway);
 app80.route("/", telegramGateway.routes());
 telegramGateway.startSweeper();
+var followerCensusState = { whatsapp: makeCensusState(), telegram: makeCensusState() };
+registerLoop({
+  name: "channel-follower",
+  intervalMs: 6e4,
+  run: () => [
+    followerCensusTick(
+      {
+        channel: "whatsapp",
+        bound: () => waGateway.boundTargets().map((t) => t.senderId),
+        live: () => nativeFileFollowers.live(),
+        paramsFor: (senderId) => nativeFileFollowers.paramsFor(senderId),
+        attach: (p) => nativeFileFollowers.attach(p)
+      },
+      followerCensusState.whatsapp
+    ),
+    followerCensusTick(
+      {
+        channel: "telegram",
+        bound: () => telegramGateway.boundTargets(),
+        live: () => telegramFileFollowers.live(),
+        paramsFor: (senderId) => telegramFileFollowers.paramsFor(senderId),
+        attach: (p) => telegramFileFollowers.attach(p)
+      },
+      followerCensusState.telegram
+    )
+  ].join("; ")
+});
 var chatRoutes = createChatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
   awaitReply: (key2, timeoutMs) => webchatGateway.awaitReply(key2, timeoutMs)