@rubytech/create-maxy-code 0.1.594 → 0.1.595

package/payload/server/server.js

@@ -363,10 +363,10 @@ var require_dist2 = __commonJS({
       } catch {
         return { newest, storeRows };
       }
-      for (const entry2 of entries2) {
-        if (!entry2.endsWith(".jsonl"))
+      for (const entry3 of entries2) {
+        if (!entry3.endsWith(".jsonl"))
           continue;
-        const stem = entry2.slice(0, -".jsonl".length);
+        const stem = entry3.slice(0, -".jsonl".length);
         const channelKey = fileStemToChannelKey3(stem);
         if (!isStorableChannelKey3(channelKey))
           continue;
@@ -375,7 +375,7 @@ var require_dist2 = __commonJS({
         const botId = channelKey.slice(0, channelKey.indexOf(":"));
         let raw;
         try {
-          raw = (0, node_fs_1.readFileSync)((0, node_path_1.join)(storeDir, entry2), "utf8");
+          raw = (0, node_fs_1.readFileSync)((0, node_path_1.join)(storeDir, entry3), "utf8");
         } catch {
           continue;
         }
@@ -604,6 +604,67 @@ var require_dist4 = __commonJS({
   }
 });
 
+// ../lib/telegram-button-labels/dist/index.js
+var require_dist5 = __commonJS({
+  "../lib/telegram-button-labels/dist/index.js"(exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.BUTTON_LABEL_TTL_MS = void 0;
+    exports.buttonLabelKey = buttonLabelKey2;
+    exports.writeButtonLabels = writeButtonLabels;
+    exports.readButtonLabel = readButtonLabel2;
+    var node_fs_1 = __require("fs");
+    var node_path_1 = __require("path");
+    var FILE4 = "telegram-button-labels.json";
+    exports.BUTTON_LABEL_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+    function isEntry(v) {
+      if (!v || typeof v !== "object" || Array.isArray(v))
+        return false;
+      const e = v;
+      return typeof e.label === "string" && typeof e.at === "number" && Number.isFinite(e.at);
+    }
+    function buttonLabelKey2(botId, chatId, data) {
+      return `${botId}:${chatId}:${data}`;
+    }
+    function readAll3(path) {
+      if (!(0, node_fs_1.existsSync)(path))
+        return {};
+      try {
+        const parsed = JSON.parse((0, node_fs_1.readFileSync)(path, "utf-8"));
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+          return {};
+        const out = {};
+        for (const [k, v] of Object.entries(parsed)) {
+          if (isEntry(v))
+            out[k] = v;
+        }
+        return out;
+      } catch {
+        return {};
+      }
+    }
+    function writeButtonLabels(storeDir, entries2, now = Date.now()) {
+      if (entries2.length === 0)
+        return;
+      const path = (0, node_path_1.join)(storeDir, FILE4);
+      const kept = {};
+      for (const [key2, entry3] of Object.entries(readAll3(path))) {
+        if (now - entry3.at < exports.BUTTON_LABEL_TTL_MS)
+          kept[key2] = entry3;
+      }
+      for (const e of entries2)
+        kept[e.key] = { label: e.label, at: now };
+      (0, node_fs_1.writeFileSync)(path, JSON.stringify(kept, null, 2) + "\n", "utf-8");
+    }
+    function readButtonLabel2(storeDir, key2, now = Date.now()) {
+      const entry3 = readAll3((0, node_path_1.join)(storeDir, FILE4))[key2];
+      if (!entry3)
+        return null;
+      return now - entry3.at >= exports.BUTTON_LABEL_TTL_MS ? null : entry3.label;
+    }
+  }
+});
+
 // ../lib/dispatch-read/dist/config.js
 var require_config = __commonJS({
   "../lib/dispatch-read/dist/config.js"(exports) {
@@ -1514,7 +1575,7 @@ var require_geo = __commonJS({
 });
 
 // ../lib/dispatch-read/dist/index.js
-var require_dist5 = __commonJS({
+var require_dist6 = __commonJS({
   "../lib/dispatch-read/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -1673,7 +1734,7 @@ var require_dist5 = __commonJS({
 });
 
 // ../lib/account-schema-regions/dist/index.js
-var require_dist6 = __commonJS({
+var require_dist7 = __commonJS({
   "../lib/account-schema-regions/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -1743,7 +1804,7 @@ var require_dist6 = __commonJS({
 });
 
 // ../lib/graph-trash/dist/index.js
-var require_dist7 = __commonJS({
+var require_dist8 = __commonJS({
   "../lib/graph-trash/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -2024,7 +2085,7 @@ var require_dist7 = __commonJS({
 });
 
 // ../lib/graph-style/dist/index.js
-var require_dist8 = __commonJS({
+var require_dist9 = __commonJS({
   "../lib/graph-style/dist/index.js"(exports) {
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
@@ -2784,7 +2845,7 @@ var require_conversation_provenance = __commonJS({
     "use strict";
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.injectConversationProvenance = injectConversationProvenance;
-    var index_js_1 = require_dist9();
+    var index_js_1 = require_dist10();
     async function injectConversationProvenance(params) {
       const { session, relationships, accountId, writeLabels, conversationNodeId, logNamespace, tool } = params;
       const original = [...relationships];
@@ -2834,7 +2895,7 @@ var require_conversation_provenance = __commonJS({
 });
 
 // ../lib/graph-write/dist/index.js
-var require_dist9 = __commonJS({
+var require_dist10 = __commonJS({
   "../lib/graph-write/dist/index.js"(exports) {
     "use strict";
     var __createBinding = exports && exports.__createBinding || (Object.create ? (function(o, m, k, k2) {
@@ -3169,26 +3230,26 @@ function keyOf(resource, accountId) {
 function generationOf(resource, key2) {
   return (keyGenerations.get(key2) ?? 0) + (resourceGenerations.get(resource) ?? 0);
 }
-function recomputeFloorMs(entry2) {
+function recomputeFloorMs(entry3) {
   return Math.min(
-    Math.max(entry2.computeMs * RECOMPUTE_FLOOR_FACTOR, MIN_RECOMPUTE_FLOOR_MS),
+    Math.max(entry3.computeMs * RECOMPUTE_FLOOR_FACTOR, MIN_RECOMPUTE_FLOOR_MS),
     MAX_RECOMPUTE_FLOOR_MS
   );
 }
 async function getOrCompute(resource, accountId, compute) {
   const key2 = keyOf(resource, accountId);
-  const entry2 = entries.get(key2);
-  if (entry2 !== void 0) {
-    const age = Date.now() - entry2.computedAt;
-    if (!entry2.dirty && age <= BACKSTOP_MS) {
-      return { value: entry2.value, state: "hit" };
+  const entry3 = entries.get(key2);
+  if (entry3 !== void 0) {
+    const age = Date.now() - entry3.computedAt;
+    if (!entry3.dirty && age <= BACKSTOP_MS) {
+      return { value: entry3.value, state: "hit" };
     }
-    const sinceAttempt = Date.now() - entry2.lastAttemptAt;
-    if (entry2.dirty && sinceAttempt < recomputeFloorMs(entry2) && age <= BACKSTOP_MS) {
-      return { value: entry2.value, state: "dirty-floor" };
+    const sinceAttempt = Date.now() - entry3.lastAttemptAt;
+    if (entry3.dirty && sinceAttempt < recomputeFloorMs(entry3) && age <= BACKSTOP_MS) {
+      return { value: entry3.value, state: "dirty-floor" };
     }
   }
-  const state = entry2 === void 0 ? "miss" : "stale-backstop";
+  const state = entry3 === void 0 ? "miss" : "stale-backstop";
   const existing = inFlight.get(key2);
   if (existing) return { value: await existing, state };
   const startedGeneration = generationOf(resource, key2);
@@ -3233,8 +3294,8 @@ function invalidate(resource, accountId, source = "action") {
       entries.delete(key2);
       return;
     }
-    const entry2 = entries.get(key2);
-    if (entry2) entry2.dirty = true;
+    const entry3 = entries.get(key2);
+    if (entry3) entry3.dirty = true;
   };
   if (accountId === null) {
     resourceGenerations.set(resource, (resourceGenerations.get(resource) ?? 0) + 1);
@@ -3427,9 +3488,9 @@ function findPollConversation(accountId, pollId) {
   const needle = `:poll:${pollId}:`;
   try {
     if (!existsSync(dir)) return null;
-    for (const entry2 of readdirSync(dir)) {
-      if (!entry2.endsWith(".jsonl")) continue;
-      const stem = entry2.slice(0, -".jsonl".length);
+    for (const entry3 of readdirSync(dir)) {
+      if (!entry3.endsWith(".jsonl")) continue;
+      const stem = entry3.slice(0, -".jsonl".length);
       if (!isStorableStem(stem)) continue;
       const channelKey = (0, import_dist2.fileStemToChannelKey)(stem);
       for (const row of readRows(accountId, channelKey)) {
@@ -3458,12 +3519,12 @@ function readConversationSummaries2(accountId) {
   const seen = /* @__PURE__ */ new Set();
   try {
     if (!existsSync(dir)) return out;
-    for (const entry2 of readdirSync(dir)) {
-      if (!entry2.endsWith(".jsonl")) continue;
-      const stem = entry2.slice(0, -".jsonl".length);
+    for (const entry3 of readdirSync(dir)) {
+      if (!entry3.endsWith(".jsonl")) continue;
+      const stem = entry3.slice(0, -".jsonl".length);
       if (!isStorableStem(stem)) continue;
       const channelKey = (0, import_dist2.fileStemToChannelKey)(stem);
-      const file = join(dir, entry2);
+      const file = join(dir, entry3);
       seen.add(file);
       let size;
       let mtimeMs;
@@ -5125,12 +5186,12 @@ function getLanIp() {
   let fallback = null;
   for (const entries2 of Object.values(nets)) {
     if (!entries2) continue;
-    for (const entry2 of entries2) {
-      if (entry2.family !== "IPv4" || entry2.internal) continue;
-      if (entry2.address.startsWith("192.168.") || entry2.address.startsWith("10.")) {
-        return entry2.address;
+    for (const entry3 of entries2) {
+      if (entry3.family !== "IPv4" || entry3.internal) continue;
+      if (entry3.address.startsWith("192.168.") || entry3.address.startsWith("10.")) {
+        return entry3.address;
       }
-      if (!fallback) fallback = entry2.address;
+      if (!fallback) fallback = entry3.address;
     }
   }
   return fallback;
@@ -6092,9 +6153,9 @@ function checkTelegramChatSend(params) {
   }
   return { allowed: false, reason: "not-in-allowChannels" };
 }
-function chatSendAllowlists(entry2) {
-  if (!entry2 || entry2.role !== "public") return { allowChannels: [], allowGroups: [] };
-  return { allowChannels: entry2.allowChannels ?? [], allowGroups: entry2.allowGroups ?? [] };
+function chatSendAllowlists(entry3) {
+  if (!entry3 || entry3.role !== "public") return { allowChannels: [], allowGroups: [] };
+  return { allowChannels: entry3.allowChannels ?? [], allowGroups: entry3.allowGroups ?? [] };
 }
 
 // app/lib/channel-pty-bridge/admin-session-id.ts
@@ -6193,7 +6254,7 @@ function parseTitleCache(raw) {
 }
 function serializeTitleCache(cache2) {
   const obj = {};
-  for (const [sessionId, entry2] of cache2) obj[sessionId] = entry2;
+  for (const [sessionId, entry3] of cache2) obj[sessionId] = entry3;
   return JSON.stringify(obj);
 }
 async function loadTitleCacheOutcome(accountDir) {
@@ -6226,7 +6287,7 @@ async function saveTitleCacheMerged(accountDir, updates, evict) {
     if (err.code !== "ENOENT") throw err;
     merged = /* @__PURE__ */ new Map();
   }
-  for (const [sessionId, entry2] of updates) merged.set(sessionId, entry2);
+  for (const [sessionId, entry3] of updates) merged.set(sessionId, entry3);
   let evicted = 0;
   if (evict !== void 0) {
     for (const sessionId of evict) {
@@ -6653,11 +6714,11 @@ function enumerateJsonlsWithSkips(projectsRoot, fileRe = SESSION_ID_RE) {
       skipped += 1;
       continue;
     }
-    for (const entry2 of entries2) {
-      if (entry2.isFile() && fileRe.test(entry2.name)) {
-        out.push({ path: join11(slugDir, entry2.name), isSubagent: false, archived: false });
-      } else if (entry2.isDirectory() && entry2.name === "subagents") {
-        const subDir = join11(slugDir, entry2.name);
+    for (const entry3 of entries2) {
+      if (entry3.isFile() && fileRe.test(entry3.name)) {
+        out.push({ path: join11(slugDir, entry3.name), isSubagent: false, archived: false });
+      } else if (entry3.isDirectory() && entry3.name === "subagents") {
+        const subDir = join11(slugDir, entry3.name);
         let subEntries;
         try {
           subEntries = readdirSync5(subDir, { withFileTypes: true });
@@ -6672,8 +6733,8 @@ function enumerateJsonlsWithSkips(projectsRoot, fileRe = SESSION_ID_RE) {
             out.push({ path: join11(subDir, sub.name), isSubagent: true, archived: false });
           }
         }
-      } else if (entry2.isDirectory() && entry2.name === "archive") {
-        const archiveDir = join11(slugDir, entry2.name);
+      } else if (entry3.isDirectory() && entry3.name === "archive") {
+        const archiveDir = join11(slugDir, entry3.name);
         let archiveEntries;
         try {
           archiveEntries = readdirSync5(archiveDir, { withFileTypes: true });
@@ -7281,7 +7342,7 @@ function createScheduleInjectRoutes(deps) {
 }
 
 // server/index.ts
-var import_dist17 = __toESM(require_dist3(), 1);
+var import_dist18 = __toESM(require_dist3(), 1);
 
 // app/lib/whatsapp/avatar-store.ts
 import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync8, writeFileSync as writeFileSync4, readdirSync as readdirSync6, statSync as statSync8, rmSync as rmSync3 } from "fs";
@@ -7518,12 +7579,12 @@ async function sweepAvatars() {
 var TAG9 = "[wa-chatmeta]";
 function diffStoredAgainstLive(stored, live) {
   const out = [];
-  for (const entry2 of stored.values()) {
-    if (!entry2.isGroup) continue;
-    const seen = live.get(entry2.jid);
+  for (const entry3 of stored.values()) {
+    if (!entry3.isGroup) continue;
+    const seen = live.get(entry3.jid);
     if (seen === void 0) continue;
-    if (seen.name !== entry2.name) {
-      out.push({ jid: entry2.jid, stored: entry2.name, live: seen.name, observedAt: seen.observedAt });
+    if (seen.name !== entry3.name) {
+      out.push({ jid: entry3.jid, stored: entry3.name, live: seen.name, observedAt: seen.observedAt });
     }
   }
   return out;
@@ -7539,13 +7600,13 @@ async function sweepChatMetadata() {
     const sock = conn.sock;
     const stored = readChatMetadata(conn.platformAccountId);
     const live = /* @__PURE__ */ new Map();
-    for (const entry2 of stored.values()) {
-      if (!entry2.isGroup) continue;
+    for (const entry3 of stored.values()) {
+      if (!entry3.isGroup) continue;
       groups += 1;
       try {
-        const meta = await sock.groupMetadata(entry2.jid);
+        const meta = await sock.groupMetadata(entry3.jid);
         if (typeof meta.subject === "string" && meta.subject.length > 0) {
-          live.set(entry2.jid, { name: meta.subject, observedAt: (/* @__PURE__ */ new Date()).toISOString() });
+          live.set(entry3.jid, { name: meta.subject, observedAt: (/* @__PURE__ */ new Date()).toISOString() });
           checked2 += 1;
         }
       } catch {
@@ -8208,9 +8269,9 @@ function purgeNonSocketAccountManagers(accountDir, socketOwnerId) {
     if (targetId === socketOwnerId) return { removed: [] };
     const map = wa.accountManagers;
     if (!map || typeof map !== "object" || Array.isArray(map)) return { removed: [] };
-    const removed = Object.entries(map).map(([phone, entry2]) => ({
+    const removed = Object.entries(map).map(([phone, entry3]) => ({
       phone,
-      managesAccount: typeof entry2 === "string" ? entry2 : entry2 && typeof entry2 === "object" && typeof entry2.managesAccount === "string" ? entry2.managesAccount : ""
+      managesAccount: typeof entry3 === "string" ? entry3 : entry3 && typeof entry3 === "object" && typeof entry3.managesAccount === "string" ? entry3.managesAccount : ""
     }));
     if (removed.length === 0) return { removed: [] };
     delete wa.accountManagers;
@@ -8513,10 +8574,10 @@ function purgeNonSocketRegisteredParties(accountDir, socketOwnerId) {
     if (targetId === socketOwnerId) return { removed: [] };
     const map = wa.registeredParties;
     if (!map || typeof map !== "object" || Array.isArray(map)) return { removed: [] };
-    const removed = Object.entries(map).map(([phone, entry2]) => ({
+    const removed = Object.entries(map).map(([phone, entry3]) => ({
       phone,
-      account: entry2 && typeof entry2 === "object" && typeof entry2.account === "string" ? entry2.account : "",
-      party: entry2 && typeof entry2 === "object" && typeof entry2.party === "string" ? entry2.party : ""
+      account: entry3 && typeof entry3 === "object" && typeof entry3.account === "string" ? entry3.account : "",
+      party: entry3 && typeof entry3 === "object" && typeof entry3.party === "string" ? entry3.party : ""
     }));
     if (removed.length === 0) return { removed: [] };
     delete wa.registeredParties;
@@ -9350,27 +9411,27 @@ function bare(value) {
 function reconcilePersonIdentities(rows) {
   const perAccount = /* @__PURE__ */ new Map();
   for (const row of rows) {
-    let entry2 = perAccount.get(row.accountId);
-    if (!entry2) {
-      entry2 = { seen: /* @__PURE__ */ new Map(), divergent: 0 };
-      perAccount.set(row.accountId, entry2);
+    let entry3 = perAccount.get(row.accountId);
+    if (!entry3) {
+      entry3 = { seen: /* @__PURE__ */ new Map(), divergent: 0 };
+      perAccount.set(row.accountId, entry3);
     }
     const p = row.phone ? bare(row.phone) : null;
     const t = row.telephone ? bare(row.telephone) : null;
-    if (p && t && p !== t) entry2.divergent += 1;
+    if (p && t && p !== t) entry3.divergent += 1;
     const key2 = p ?? t;
-    if (key2) entry2.seen.set(key2, (entry2.seen.get(key2) ?? 0) + 1);
+    if (key2) entry3.seen.set(key2, (entry3.seen.get(key2) ?? 0) + 1);
   }
   const accounts = [];
   let duplicates = 0;
   let divergent = 0;
-  for (const [accountId, entry2] of perAccount) {
+  for (const [accountId, entry3] of perAccount) {
     let dup = 0;
-    for (const count of entry2.seen.values()) if (count > 1) dup += count - 1;
+    for (const count of entry3.seen.values()) if (count > 1) dup += count - 1;
     duplicates += dup;
-    divergent += entry2.divergent;
-    if (dup > 0 || entry2.divergent > 0) {
-      accounts.push({ accountId, duplicates: dup, divergent: entry2.divergent });
+    divergent += entry3.divergent;
+    if (dup > 0 || entry3.divergent > 0) {
+      accounts.push({ accountId, duplicates: dup, divergent: entry3.divergent });
     }
   }
   return {
@@ -9392,7 +9453,7 @@ function reconcileSelfPhoneAdmins(input) {
   for (const cred of nonHouse) {
     const selfPhone = cred.selfPhone;
     if (!selfPhone) continue;
-    if (input.adminPhones.some((entry2) => phonesMatch(entry2, selfPhone))) {
+    if (input.adminPhones.some((entry3) => phonesMatch(entry3, selfPhone))) {
       matches.push({ accountId: cred.accountId, phone: selfPhone });
     }
   }
@@ -9773,11 +9834,11 @@ function authorizeRecallRead(input) {
 function buildRegisteredPartyReconcile(params) {
   const rows = [];
   const entries2 = Object.entries(params.registeredParties);
-  for (const [phone, entry2] of entries2) {
+  for (const [phone, entry3] of entries2) {
     const shadowedBy = isAdminPhone(phone, params.adminPhones) ? "adminPhones" : managedAccountFor(params.accountManagers, phone) ? "accountManagers" : null;
-    const unresolved2 = !params.isValidAccount(entry2.account);
+    const unresolved2 = !params.isValidAccount(entry3.account);
     if (shadowedBy || unresolved2) {
-      rows.push({ phone, account: entry2.account, party: entry2.party, shadowedBy, unresolved: unresolved2 });
+      rows.push({ phone, account: entry3.account, party: entry3.party, shadowedBy, unresolved: unresolved2 });
     }
   }
   const shadowed = rows.filter((r) => r.shadowedBy !== null).length;
@@ -10187,15 +10248,15 @@ app3.post("/config", async (c) => {
       const agents = [];
       if (existsSync9(agentsDir)) {
         try {
-          for (const entry2 of readdirSync8(agentsDir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
-            if (!entry2.isDirectory() || entry2.name === "admin") continue;
-            const configPath3 = resolve8(agentsDir, entry2.name, "config.json");
+          for (const entry3 of readdirSync8(agentsDir, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+            if (!entry3.isDirectory() || entry3.name === "admin") continue;
+            const configPath3 = resolve8(agentsDir, entry3.name, "config.json");
             if (!existsSync9(configPath3)) continue;
             try {
               const parsed = JSON.parse(readFileSync11(configPath3, "utf-8"));
-              agents.push({ slug: entry2.name, displayName: parsed.displayName ?? entry2.name });
+              agents.push({ slug: entry3.name, displayName: parsed.displayName ?? entry3.name });
             } catch {
-              console.error(`${TAG17} config action=list-public-agents error="failed to parse config.json for agent ${entry2.name}" \u2014 skipping`);
+              console.error(`${TAG17} config action=list-public-agents error="failed to parse config.json for agent ${entry3.name}" \u2014 skipping`);
             }
           }
         } catch (err) {
@@ -10215,8 +10276,8 @@ app3.post("/config", async (c) => {
         const listDenial = bindingScopeDenial(c, callerAccountId, "list-account-managers");
         if (listDenial) return listDenial;
         const all = readAccountManagers(acct.accountDir);
-        const boundAccountOf = (entry2) => typeof entry2 === "string" ? entry2 : entry2.managesAccount;
-        const accountManagers = houseAdmin ? all : Object.fromEntries(Object.entries(all).filter(([, entry2]) => boundAccountOf(entry2) === callerAccountId));
+        const boundAccountOf = (entry3) => typeof entry3 === "string" ? entry3 : entry3.managesAccount;
+        const accountManagers = houseAdmin ? all : Object.fromEntries(Object.entries(all).filter(([, entry3]) => boundAccountOf(entry3) === callerAccountId));
         console.error(`${TAG17} config action=list-account-managers caller=${callerAccountId || "none"} houseAdmin=${houseAdmin ? "y" : "n"} count=${Object.keys(accountManagers).length} of=${Object.keys(all).length}`);
         return c.json({ ok: true, accountManagers });
       }
@@ -10254,7 +10315,7 @@ app3.post("/config", async (c) => {
         const listDenial = bindingScopeDenial(c, callerAccountId, "list-registered-parties");
         if (listDenial) return listDenial;
         const all = readRegisteredParties(acct.accountDir);
-        const registeredParties = houseAdmin ? all : Object.fromEntries(Object.entries(all).filter(([, entry2]) => entry2.account === callerAccountId));
+        const registeredParties = houseAdmin ? all : Object.fromEntries(Object.entries(all).filter(([, entry3]) => entry3.account === callerAccountId));
         console.error(`${TAG17} config action=list-registered-parties caller=${callerAccountId || "none"} houseAdmin=${houseAdmin ? "y" : "n"} count=${Object.keys(registeredParties).length} of=${Object.keys(all).length}`);
         return c.json({ ok: true, registeredParties });
       }
@@ -12159,10 +12220,10 @@ function readState(platformRoot5) {
     return {};
   }
 }
-function recordSuccess(platformRoot5, accountId, entry2) {
+function recordSuccess(platformRoot5, accountId, entry3) {
   const path = stateFilePath(platformRoot5);
   const state = readState(platformRoot5);
-  state[accountId] = entry2;
+  state[accountId] = entry3;
   try {
     writeFileSync6(path, JSON.stringify(state, null, 1));
   } catch (err) {
@@ -13259,10 +13320,10 @@ function readVisitsPushState(platformRoot5) {
     return {};
   }
 }
-function recordVisitsPush(platformRoot5, accountId, entry2) {
+function recordVisitsPush(platformRoot5, accountId, entry3) {
   const path = visitsStateFilePath(platformRoot5);
   const state = readVisitsPushState(platformRoot5);
-  state[accountId] = entry2;
+  state[accountId] = entry3;
   try {
     writeFileSync7(path, JSON.stringify(state, null, 1));
   } catch (err) {
@@ -14906,20 +14967,20 @@ function listBotEntries(config) {
   }
   return out;
 }
-function entryAgentSlug(entry2) {
-  if (entry2.role === "admin") return "admin";
-  if (entry2.role === "unbound") return "unbound";
-  if (entry2.role === "specialist") return entry2.specialist;
-  return entry2.agent;
+function entryAgentSlug(entry3) {
+  if (entry3.role === "admin") return "admin";
+  if (entry3.role === "unbound") return "unbound";
+  if (entry3.role === "specialist") return entry3.specialist;
+  return entry3.agent;
 }
-function isBindableEntry(entry2) {
-  return entry2.role !== "unbound";
+function isBindableEntry(entry3) {
+  return entry3.role !== "unbound";
 }
 function resolveBotEntry(accounts, botId) {
   const hits = [];
   for (const a of accounts) {
-    for (const entry2 of listBotEntries(a.config.telegram)) {
-      if (entry2.id === botId) hits.push({ accountId: a.accountId, accountDir: a.accountDir, entry: entry2 });
+    for (const entry3 of listBotEntries(a.config.telegram)) {
+      if (entry3.id === botId) hits.push({ accountId: a.accountId, accountDir: a.accountDir, entry: entry3 });
     }
   }
   if (hits.length === 0) return { kind: "none" };
@@ -16964,7 +17025,7 @@ function createSidecarStore(config) {
   function readAll3(sessionsDir, onSkip) {
     let names;
     try {
-      names = readdirSync17(sessionsDir, { withFileTypes: true }).filter((entry2) => entry2.isFile()).map((entry2) => entry2.name);
+      names = readdirSync17(sessionsDir, { withFileTypes: true }).filter((entry3) => entry3.isFile()).map((entry3) => entry3.name);
     } catch {
       return [];
     }
@@ -17897,7 +17958,7 @@ async function setTelegramWebhook(botToken, webhookUrl, secretFilePath, fetchImp
   }
   return { ok: true, secret };
 }
-function writeTelegramBotEntry(accountDir, entry2) {
+function writeTelegramBotEntry(accountDir, entry3) {
   const configPath3 = join36(accountDir, "account.json");
   if (!existsSync25(configPath3)) {
     return { ok: false, error: `account.json not found at ${configPath3}` };
@@ -17910,9 +17971,9 @@ function writeTelegramBotEntry(accountDir, entry2) {
   }
   const telegram = config.telegram ?? {};
   const bots = Array.isArray(telegram.bots) ? telegram.bots : [];
-  const at = bots.findIndex((b) => b && typeof b === "object" && b.id === entry2.id);
-  if (at >= 0) bots[at] = entry2;
-  else bots.push(entry2);
+  const at = bots.findIndex((b) => b && typeof b === "object" && b.id === entry3.id);
+  if (at >= 0) bots[at] = entry3;
+  else bots.push(entry3);
   telegram.bots = bots;
   config.telegram = telegram;
   writeFileSync12(configPath3, JSON.stringify(config, null, 2) + "\n", "utf-8");
@@ -17998,34 +18059,34 @@ function getTelegramGateway() {
 
 // app/lib/telegram/access-control.ts
 function checkTelegramAccess(params) {
-  const { senderId, entry: entry2, chatId, chatType } = params;
+  const { senderId, entry: entry3, chatId, chatType } = params;
   const isGroup = chatType === "group" || chatType === "supergroup";
   const isChannel = chatType === "channel";
-  if (isChannel && entry2.role !== "public") {
+  if (isChannel && entry3.role !== "public") {
     return {
       allowed: false,
-      reason: entry2.role === "admin" ? "admin-entry-no-channels" : entry2.role === "specialist" ? "specialist-entry-no-channels" : "unbound-entry-no-channels",
-      agentType: entry2.role === "admin" ? "admin" : entry2.role === "specialist" ? "specialist" : "public"
+      reason: entry3.role === "admin" ? "admin-entry-no-channels" : entry3.role === "specialist" ? "specialist-entry-no-channels" : "unbound-entry-no-channels",
+      agentType: entry3.role === "admin" ? "admin" : entry3.role === "specialist" ? "specialist" : "public"
     };
   }
-  if (isGroup && entry2.role !== "public") {
+  if (isGroup && entry3.role !== "public") {
     return {
       allowed: false,
-      reason: entry2.role === "admin" ? "admin-entry-no-groups" : entry2.role === "specialist" ? "specialist-entry-no-groups" : "unbound-entry-no-groups",
-      agentType: entry2.role === "admin" ? "admin" : entry2.role === "specialist" ? "specialist" : "public"
+      reason: entry3.role === "admin" ? "admin-entry-no-groups" : entry3.role === "specialist" ? "specialist-entry-no-groups" : "unbound-entry-no-groups",
+      agentType: entry3.role === "admin" ? "admin" : entry3.role === "specialist" ? "specialist" : "public"
     };
   }
-  if (entry2.role === "admin") {
-    const adminUsers = entry2.adminUsers ?? [];
+  if (entry3.role === "admin") {
+    const adminUsers = entry3.adminUsers ?? [];
     if (adminUsers.includes(senderId)) {
       return { allowed: true, reason: "admin-binding", agentType: "admin" };
     }
     return { allowed: false, reason: "not-admin-user", agentType: "admin" };
   }
-  if (isGroup && entry2.role === "public") {
-    const groupPolicy = entry2.groupPolicy ?? "disabled";
+  if (isGroup && entry3.role === "public") {
+    const groupPolicy = entry3.groupPolicy ?? "disabled";
     if (groupPolicy === "allowlist") {
-      const allowGroups = entry2.allowGroups ?? [];
+      const allowGroups = entry3.allowGroups ?? [];
       if (allowGroups.includes(chatId)) {
         return { allowed: true, reason: "group-allowlist-match", agentType: "public" };
       }
@@ -18033,10 +18094,10 @@ function checkTelegramAccess(params) {
     }
     return { allowed: false, reason: "group-policy-disabled", agentType: "public" };
   }
-  if (isChannel && entry2.role === "public") {
-    const channelPolicy = entry2.channelPolicy ?? "disabled";
+  if (isChannel && entry3.role === "public") {
+    const channelPolicy = entry3.channelPolicy ?? "disabled";
     if (channelPolicy === "allowlist") {
-      const allowChannels = entry2.allowChannels ?? [];
+      const allowChannels = entry3.allowChannels ?? [];
       if (allowChannels.includes(chatId)) {
         return { allowed: true, reason: "channel-allowlist-match", agentType: "public" };
       }
@@ -18044,22 +18105,22 @@ function checkTelegramAccess(params) {
     }
     return { allowed: false, reason: "channel-policy-disabled", agentType: "public" };
   }
-  if (entry2.role === "unbound") {
+  if (entry3.role === "unbound") {
     return { allowed: false, reason: "bot-unbound", agentType: "public" };
   }
-  if (entry2.role === "specialist") {
-    const allowFrom = entry2.allowFrom ?? [];
+  if (entry3.role === "specialist") {
+    const allowFrom = entry3.allowFrom ?? [];
     if (allowFrom.includes(senderId)) {
       return { allowed: true, reason: "specialist-allowlist-match", agentType: "specialist" };
     }
     return { allowed: false, reason: "not-in-allowlist", agentType: "specialist" };
   }
-  const policy = entry2.dmPolicy ?? "disabled";
+  const policy = entry3.dmPolicy ?? "disabled";
   switch (policy) {
     case "open":
       return { allowed: true, reason: "dm-policy-open", agentType: "public" };
     case "allowlist": {
-      const allowFrom = entry2.allowFrom ?? [];
+      const allowFrom = entry3.allowFrom ?? [];
       if (allowFrom.includes(senderId)) {
         return { allowed: true, reason: "allowlist-match", agentType: "public" };
       }
@@ -19082,6 +19143,9 @@ function runTelegramNotifyReconcile(now) {
   console.error(buildTelegramKindCensusLine(readTelegramKindCensus()));
 }
 
+// server/routes/telegram.ts
+var import_dist8 = __toESM(require_dist5(), 1);
+
 // app/lib/telegram/outbound/answer-callback.ts
 async function answerTelegramCallback(botToken, callbackQueryId, text) {
   try {
@@ -19114,8 +19178,8 @@ var NOTIFY_MAX = 5e3;
 var cache = /* @__PURE__ */ new Map();
 function isTelegramNotifyDuplicate(notifyId) {
   const now = Date.now();
-  const entry2 = cache.get(notifyId);
-  if (entry2 && now - entry2.ts <= NOTIFY_TTL_MS) return true;
+  const entry3 = cache.get(notifyId);
+  if (entry3 && now - entry3.ts <= NOTIFY_TTL_MS) return true;
   for (const [key2, e] of cache) {
     if (now - e.ts > NOTIFY_TTL_MS) cache.delete(key2);
   }
@@ -19174,7 +19238,7 @@ function runTelegramNotifyPublishCensus(now) {
 }
 
 // ../lib/dispatch-write/src/lifecycle.ts
-var import_dist6 = __toESM(require_dist5());
+var import_dist6 = __toESM(require_dist6());
 function checkTransition(kind, from, to, cfg) {
   const edges = kind === "job" ? cfg.statuses.jobTransitions : cfg.statuses.visitTransitions;
   const legal = edges.some(([f, t]) => f === from && t === to);
@@ -19216,7 +19280,7 @@ function formatTransitionRefused(p) {
 }
 
 // ../lib/dispatch-write/src/write.ts
-var import_dist7 = __toESM(require_dist5());
+var import_dist7 = __toESM(require_dist6());
 function refuse(reason, message) {
   return { ok: false, reason, message };
 }
@@ -19793,8 +19857,8 @@ function liveLocationCensusLine(accountsRoot, now) {
   let expired = 0;
   let oldestAgeMs = 0;
   try {
-    for (const entry2 of readdirSync20(accountsRoot)) {
-      const path = join38(accountsRoot, entry2, LIVE_LOCATION_FILE);
+    for (const entry3 of readdirSync20(accountsRoot)) {
+      const path = join38(accountsRoot, entry3, LIVE_LOCATION_FILE);
       if (!existsSync26(path) || !statSync19(path).isFile()) continue;
       for (const rec of Object.values(readAll(path))) {
         records3 += 1;
@@ -19930,20 +19994,20 @@ async function editTelegramMessage(botToken, chatId, messageId, text, keyboard)
 // server/routes/telegram.ts
 var TAG34 = "[telegram-inbound]";
 var PROVISION_TAG = "[telegram-provision]";
-function entryActive(entry2, accountDir, botId, noteSpecialist) {
-  if (entry2.role === "admin") return true;
-  if (entry2.role === "specialist") {
+function entryActive(entry3, accountDir, botId, noteSpecialist) {
+  if (entry3.role === "admin") return true;
+  if (entry3.role === "specialist") {
     const cards = listSpecialistCardNames(join40(accountDir, "specialists", "agents"));
-    const rosterValid = cards.includes(entry2.specialist);
+    const rosterValid = cards.includes(entry3.specialist);
     noteSpecialist?.(rosterValid);
     if (rosterValid) return true;
     console.error(
-      `${TAG34} op=specialist-refused botId=${botId} specialist=${logValue2(entry2.specialist)} reason=specialist-unknown`
+      `${TAG34} op=specialist-refused botId=${botId} specialist=${logValue2(entry3.specialist)} reason=specialist-unknown`
     );
     return false;
   }
-  if (entry2.role === "unbound") return false;
-  return isActiveAgentSlug(accountDir, entry2.agent);
+  if (entry3.role === "unbound") return false;
+  return isActiveAgentSlug(accountDir, entry3.agent);
 }
 function logValue2(v) {
   return v.replace(/[\r\n]+/g, " ");
@@ -20055,9 +20119,9 @@ app11.post("/", async (c) => {
     console.error(`${TAG34} op=reject reason=duplicate-bot-id botId=${botId} accounts=${resolved.count}`);
     return c.json({ ok: false }, 401);
   }
-  const { accountId, accountDir, entry: entry2 } = resolved;
-  const agentSlug = entryAgentSlug(entry2);
-  console.error(`${TAG34} op=entry botId=${botId} accountId=${accountId} role=${entry2.role} agent=${agentSlug}`);
+  const { accountId, accountDir, entry: entry3 } = resolved;
+  const agentSlug = entryAgentSlug(entry3);
+  console.error(`${TAG34} op=entry botId=${botId} accountId=${accountId} role=${entry3.role} agent=${agentSlug}`);
   const sp = secretPath(botId);
   if (!existsSync28(sp)) {
     console.error(`${TAG34} op=secret botId=${botId} result=missing-file`);
@@ -20090,13 +20154,13 @@ app11.post("/", async (c) => {
     });
   }
   if (shape.chatType === "group" || shape.chatType === "supergroup") {
-    const allowlisted = entry2.role === "public" && (entry2.groupPolicy ?? "disabled") === "allowlist" && shape.chatId !== null && (entry2.allowGroups ?? []).includes(shape.chatId);
+    const allowlisted = entry3.role === "public" && (entry3.groupPolicy ?? "disabled") === "allowlist" && shape.chatId !== null && (entry3.allowGroups ?? []).includes(shape.chatId);
     console.error(
       `${TAG34} op=group-inbound botId=${botId} chatType=${shape.chatType} chatId=${shape.chatId ?? "none"} senderId=${shape.senderId ?? "none"} threadId=${shape.threadId ?? "none"} allowlisted=${allowlisted ? "yes" : "no"}`
     );
   }
   if (shape.chatType === "channel") {
-    const allowlisted = entry2.role === "public" && (entry2.channelPolicy ?? "disabled") === "allowlist" && shape.chatId !== null && (entry2.allowChannels ?? []).includes(shape.chatId);
+    const allowlisted = entry3.role === "public" && (entry3.channelPolicy ?? "disabled") === "allowlist" && shape.chatId !== null && (entry3.allowChannels ?? []).includes(shape.chatId);
     console.error(
       `${TAG34} op=channel-post botId=${botId} chatId=${shape.chatId ?? "none"} messageId=${shape.messageId ?? "none"} senderChat=${shape.senderChat ?? "none"} isEdit=${shape.isEdit ? "yes" : "no"} allowlisted=${allowlisted ? "yes" : "no"}`
     );
@@ -20104,7 +20168,7 @@ app11.post("/", async (c) => {
   const hostBots = update.managed_bot ? listBotEntries(accountConfig(accountDir).telegram) : [];
   const decision = routeTelegramUpdate({
     update,
-    entry: entry2,
+    entry: entry3,
     ...update.managed_bot ? { knownBotIds: hostBots.map((b) => b.id) } : {}
   });
   const raisesTurn = decision.kind === "dispatch" || // Task 2615 — a customer asking a question raises one. `business-deleted`
@@ -20134,14 +20198,14 @@ app11.post("/", async (c) => {
       );
     }
     console.error(`${TAG34} op=access botId=${botId} senderId=- allowed=false reason=${decision.reason}`);
-    if (entry2.role === "specialist") {
+    if (entry3.role === "specialist") {
       console.error(
-        `${TAG34} op=specialist-refused botId=${botId} specialist=${logValue2(entry2.specialist)} reason=${decision.reason}`
+        `${TAG34} op=specialist-refused botId=${botId} specialist=${logValue2(entry3.specialist)} reason=${decision.reason}`
       );
     }
     return c.json({ ok: true }, 200);
   }
-  if (!isBindableEntry(entry2)) {
+  if (!isBindableEntry(entry3)) {
     console.error(`${TAG34} op=ignore botId=${botId} reason=bot-unbound`);
     return c.json({ ok: true }, 200);
   }
@@ -20174,19 +20238,30 @@ app11.post("/", async (c) => {
     if (decision.allowed) {
       const cbKey = telegramChannelKey(botId, cbSubject);
       const cbAt = (/* @__PURE__ */ new Date()).toISOString();
+      let cbBody = `[button: ${decision.data ?? "no-data"}]`;
+      if (decision.data !== null) {
+        const label = (0, import_dist8.readButtonLabel)(accountDir, (0, import_dist8.buttonLabelKey)(botId, decision.chatId, decision.data));
+        if (label !== null) {
+          cbBody = label;
+        } else {
+          console.error(
+            `${TAG34} op=button-label-miss botId=${botId} chatId=${decision.chatId} data=${logValue2(decision.data)}`
+          );
+        }
+      }
       appendMessage2(accountId, {
         messageId: `telegram:${accountId}:${cbKey}:cb:${decision.callbackId}`,
         // Task 2598 — the one shared derivation, so this row names the session
         // the press actually reaches.
         sessionId: telegramAdminSessionId(accountId, cbSubject, botId),
         dateSent: cbAt,
-        body: `[button: ${decision.data ?? "no-data"}]`,
+        body: cbBody,
         fromMe: false,
         senderId: decision.senderId,
         senderName: decision.senderDisplay,
         chatId: String(decision.chatId),
         channelKey: cbKey,
-        scope: entry2.role === "admin" ? "admin" : "public",
+        scope: entry3.role === "admin" ? "admin" : "public",
         origin: "inbound",
         createdAt: cbAt
       });
@@ -20202,7 +20277,7 @@ app11.post("/", async (c) => {
               session,
               accountId,
               cfg: load.value,
-              token: entry2.token,
+              token: entry3.token,
               botId,
               updateId: decision.updateId,
               chatId: decision.chatId,
@@ -20228,22 +20303,22 @@ app11.post("/", async (c) => {
       }
     }
     const answerStartedAt = Date.now();
-    const answered4 = await answerTelegramCallback(entry2.token, decision.callbackId, answerText);
+    const answered4 = await answerTelegramCallback(entry3.token, decision.callbackId, answerText);
     const outcome = !answered4.ok ? "error" : decision.allowed ? "stored" : "refused";
     console.error(
       `${TAG34} op=callback-answered botId=${botId} callbackId=${decision.callbackId} ms=${Date.now() - answerStartedAt} outcome=${outcome}${answered4.error ? ` error=${logValue2(answered4.error)}` : ""}`
     );
     if (decision.allowed && parseDispatchCallback(decision.data) === null) {
-      const cbActive = entryActive(entry2, accountDir, botId);
+      const cbActive = entryActive(entry3, accountDir, botId);
       console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${cbActive}`);
       raiseChannelTurn({
         accountId,
         accountDir,
         botId,
-        botToken: entry2.token,
-        role: entry2.role,
+        botToken: entry3.token,
+        role: entry3.role,
         agentSlug,
-        specialist: entry2.role === "specialist" ? entry2.specialist : null,
+        specialist: entry3.role === "specialist" ? entry3.specialist : null,
         active: cbActive,
         senderId: decision.senderId,
         senderDisplay: decision.senderDisplay,
@@ -20253,7 +20328,7 @@ app11.post("/", async (c) => {
         text: `[button: ${decision.data ?? "no-data"}]`,
         channelKey: telegramChannelKey(botId, cbSubject),
         conversationSubject: cbSubject,
-        scope: entry2.role === "admin" ? "admin" : "public",
+        scope: entry3.role === "admin" ? "admin" : "public",
         sessionId: telegramAdminSessionId(accountId, cbSubject, botId)
       });
     }
@@ -20269,7 +20344,7 @@ app11.post("/", async (c) => {
     );
     if (!decision.allowed) return c.json({ ok: true }, 200);
     const pollKey = telegramChannelKey(botId, decision.senderId);
-    const pollScope = entry2.role === "admin" ? "admin" : "public";
+    const pollScope = entry3.role === "admin" ? "admin" : "public";
     const pollSession = telegramAdminSessionId(accountId, decision.senderId, botId);
     const pollAt = (/* @__PURE__ */ new Date()).toISOString();
     const pollBody = `[poll vote: poll=${decision.pollId} options=${options}]`;
@@ -20287,16 +20362,16 @@ app11.post("/", async (c) => {
       origin: "inbound",
       createdAt: pollAt
     });
-    const pollActive = entryActive(entry2, accountDir, botId);
+    const pollActive = entryActive(entry3, accountDir, botId);
     console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${pollActive}`);
     raiseChannelTurn({
       accountId,
       accountDir,
       botId,
-      botToken: entry2.token,
-      role: entry2.role,
+      botToken: entry3.token,
+      role: entry3.role,
       agentSlug,
-      specialist: entry2.role === "specialist" ? entry2.specialist : null,
+      specialist: entry3.role === "specialist" ? entry3.specialist : null,
       active: pollActive,
       senderId: decision.senderId,
       senderDisplay: decision.senderDisplay,
@@ -20320,7 +20395,7 @@ app11.post("/", async (c) => {
       `${TAG34} op=reaction-authorised botId=${botId} senderId=${decision.senderId} allowed=${decision.allowed} reason=${decision.reason}`
     );
     if (!decision.allowed) return c.json({ ok: true }, 200);
-    const rScope = entry2.role === "admin" ? "admin" : "public";
+    const rScope = entry3.role === "admin" ? "admin" : "public";
     const rSession = telegramAdminSessionId(accountId, rSubject, botId);
     const rAt = (/* @__PURE__ */ new Date()).toISOString();
     const rTarget = quotedBody === null ? `message ${decision.messageId} \u2014 not held in this conversation` : `"${quotedBody}"`;
@@ -20339,16 +20414,16 @@ app11.post("/", async (c) => {
       origin: "inbound",
       createdAt: rAt
     });
-    const rActive = entryActive(entry2, accountDir, botId);
+    const rActive = entryActive(entry3, accountDir, botId);
     console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${rActive}`);
     raiseChannelTurn({
       accountId,
       accountDir,
       botId,
-      botToken: entry2.token,
-      role: entry2.role,
+      botToken: entry3.token,
+      role: entry3.role,
       agentSlug,
-      specialist: entry2.role === "specialist" ? entry2.specialist : null,
+      specialist: entry3.role === "specialist" ? entry3.specialist : null,
       active: rActive,
       senderId: decision.senderId,
       senderDisplay: decision.senderDisplay,
@@ -20386,7 +20461,7 @@ app11.post("/", async (c) => {
     );
     if (!decision.allowed) return c.json({ ok: true }, 200);
     const sKey = telegramChannelKey(botId, decision.senderId);
-    const sScope = entry2.role === "admin" ? "admin" : "public";
+    const sScope = entry3.role === "admin" ? "admin" : "public";
     const sSession = telegramAdminSessionId(accountId, decision.senderId, botId);
     const sAt = (/* @__PURE__ */ new Date()).toISOString();
     const sBody = `[subscription ${decision.state}: payload=${decision.payload}]`;
@@ -20404,16 +20479,16 @@ app11.post("/", async (c) => {
       origin: "inbound",
       createdAt: sAt
     });
-    const sActive = entryActive(entry2, accountDir, botId);
+    const sActive = entryActive(entry3, accountDir, botId);
     console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${sActive}`);
     raiseChannelTurn({
       accountId,
       accountDir,
       botId,
-      botToken: entry2.token,
-      role: entry2.role,
+      botToken: entry3.token,
+      role: entry3.role,
       agentSlug,
-      specialist: entry2.role === "specialist" ? entry2.specialist : null,
+      specialist: entry3.role === "specialist" ? entry3.specialist : null,
       active: sActive,
       senderId: decision.senderId,
       senderDisplay: decision.senderDisplay,
@@ -20432,7 +20507,7 @@ app11.post("/", async (c) => {
       `${TAG34} op=poll-closed botId=${botId} pollId=${logValue2(decision.pollId)} options=${decision.options.length} totalVotes=${decision.totalVotes} targetHeld=${where === null ? "no" : "yes"}`
     );
     if (where === null) return c.json({ ok: true }, 200);
-    const plScope = entry2.role === "admin" ? "admin" : "public";
+    const plScope = entry3.role === "admin" ? "admin" : "public";
     const plSession = telegramAdminSessionId(accountId, where.senderId, botId);
     const plAt = (/* @__PURE__ */ new Date()).toISOString();
     const tally = decision.options.map((o) => `${o.text}:${o.votes}`).join(", ") || "no options";
@@ -20451,16 +20526,16 @@ app11.post("/", async (c) => {
       origin: "inbound",
       createdAt: plAt
     });
-    const plActive = entryActive(entry2, accountDir, botId);
+    const plActive = entryActive(entry3, accountDir, botId);
     console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${plActive}`);
     raiseChannelTurn({
       accountId,
       accountDir,
       botId,
-      botToken: entry2.token,
-      role: entry2.role,
+      botToken: entry3.token,
+      role: entry3.role,
       agentSlug,
-      specialist: entry2.role === "specialist" ? entry2.specialist : null,
+      specialist: entry3.role === "specialist" ? entry3.specialist : null,
       active: plActive,
       senderId: where.senderId,
       chatId: Number(where.chatId),
@@ -20489,7 +20564,7 @@ app11.post("/", async (c) => {
     console.error(
       `${TAG34} op=managed-bot botId=${botId} event=${event} newBotId=${newBotId} creator=${decision.creatorId ?? "none"}`
     );
-    const fetched = await getManagedBotToken(entry2.token, Number(newBotId));
+    const fetched = await getManagedBotToken(entry3.token, Number(newBotId));
     console.error(
       `${PROVISION_TAG} op=provision-token botId=${botId} newBotId=${newBotId} fetched=${fetched.ok ? "yes" : "no"} reason=${fetched.ok ? "ok" : "api-error"}`
     );
@@ -20499,7 +20574,7 @@ app11.post("/", async (c) => {
       accountDir,
       existing ? { ...existing, token: fetched.token, managed: true } : { id: newBotId, token: fetched.token, role: "unbound", managed: true }
     );
-    const restricted = await setManagedBotAccessSettings(entry2.token, Number(newBotId), true, void 0);
+    const restricted = await setManagedBotAccessSettings(entry3.token, Number(newBotId), true, void 0);
     console.error(
       `${PROVISION_TAG} op=provision-persist botId=${botId} newBotId=${newBotId} written=${persisted.ok ? "yes" : "no"} restricted=${restricted.ok ? "yes" : "no"}`
     );
@@ -20515,7 +20590,7 @@ app11.post("/", async (c) => {
         accountId,
         accountDir,
         botId,
-        botToken: entry2.token,
+        botToken: entry3.token,
         // `authorised` above already established this entry is role 'admin', so
         // the admin agent is the one that runs and it is active by construction.
         role: "admin",
@@ -20588,7 +20663,7 @@ app11.post("/", async (c) => {
       });
     }
     const bizMedia = await downloadTelegramMedia({
-      token: entry2.token,
+      token: entry3.token,
       botId,
       items: decision.media
     });
@@ -20628,7 +20703,7 @@ app11.post("/", async (c) => {
         return;
       }
       const sent = await sendTelegramText(
-        entry2.token,
+        entry3.token,
         decision.chatId,
         replyText,
         void 0,
@@ -20657,7 +20732,7 @@ app11.post("/", async (c) => {
       accountId,
       accountDir,
       botId,
-      botToken: entry2.token,
+      botToken: entry3.token,
       agentSlug,
       senderId: decision.senderId,
       // Task 2615 — load-bearing. The gateway keys the hub, the reply closure,
@@ -20707,7 +20782,7 @@ app11.post("/", async (c) => {
   console.error(`${TAG34} op=access botId=${botId} senderId=${senderId} allowed=true reason=${decision.reason}`);
   const subject = telegramConversationSubject(decision.chatType, chatId, senderId);
   const channelKey = telegramChannelKey(botId, subject);
-  const scope = entry2.role === "public" ? "public" : "admin";
+  const scope = entry3.role === "public" ? "public" : "admin";
   const sessionId = telegramAdminSessionId(accountId, subject, botId);
   const inboundAt = (/* @__PURE__ */ new Date()).toISOString();
   const editSuffix = decision.isEdit ? `:edit:${decision.editDate}` : "";
@@ -20788,10 +20863,10 @@ app11.post("/", async (c) => {
       });
     }
   }
-  const active = entryActive(entry2, accountDir, botId, (rosterValid) => {
-    if (entry2.role !== "specialist") return;
+  const active = entryActive(entry3, accountDir, botId, (rosterValid) => {
+    if (entry3.role !== "specialist") return;
     console.error(
-      `${TAG34} op=specialist-inbound botId=${botId} specialist=${logValue2(entry2.specialist)} senderId=${senderId} sessionId=${sessionId} rosterValid=${rosterValid ? "yes" : "no"}`
+      `${TAG34} op=specialist-inbound botId=${botId} specialist=${logValue2(entry3.specialist)} senderId=${senderId} sessionId=${sessionId} rosterValid=${rosterValid ? "yes" : "no"}`
     );
   });
   console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${active}`);
@@ -20806,7 +20881,7 @@ app11.post("/", async (c) => {
   }
   const replyThreadId = decision.threadId ?? void 0;
   const reply = async (replyText) => {
-    const sent = await sendTelegramText(entry2.token, chatId, replyText, replyThreadId);
+    const sent = await sendTelegramText(entry3.token, chatId, replyText, replyThreadId);
     if (sent.ok) {
       const at = (/* @__PURE__ */ new Date()).toISOString();
       appendMessage2(accountId, {
@@ -20826,7 +20901,7 @@ app11.post("/", async (c) => {
       console.error(`${TAG34} op=reply-sent botId=${botId} ok=true`);
     } else console.error(`${TAG34} op=reply-dropped botId=${botId} reason=${sent.error}`);
   };
-  const media = await downloadTelegramMedia({ token: entry2.token, botId, items: decision.media });
+  const media = await downloadTelegramMedia({ token: entry3.token, botId, items: decision.media });
   if (media.length > 0) {
     const attachmentIds = await storeTelegramServable({
       accountId,
@@ -20952,7 +21027,7 @@ app11.post("/", async (c) => {
       accountId,
       accountDir,
       botId,
-      botToken: entry2.token,
+      botToken: entry3.token,
       agentSlug,
       senderId,
       // Task 2616 — the name beside the id on the turn's provenance line.
@@ -20962,10 +21037,10 @@ app11.post("/", async (c) => {
       // room reach one channel server rather than opening five sessions whose
       // reply closures all target the same chat. A DM subject IS the sender id.
       conversationSubject: subject,
-      role: entry2.role,
+      role: entry3.role,
       personId: null,
       // Task 2619 — the card this bot runs as, null on every other role.
-      specialist: entry2.role === "specialist" ? entry2.specialist : null,
+      specialist: entry3.role === "specialist" ? entry3.specialist : null,
       chatId: String(chatId),
       text: turnText,
       media: heard.media,
@@ -21369,9 +21444,9 @@ function computeAdminStoreDivergence(input) {
       result.errors.push({ source: input.accountsDir, detail: err instanceof Error ? err.message : String(err) });
       return result;
     }
-    for (const entry2 of entries2) {
-      if (entry2.startsWith(".")) continue;
-      const accountDir = join42(input.accountsDir, entry2);
+    for (const entry3 of entries2) {
+      if (entry3.startsWith(".")) continue;
+      const accountDir = join42(input.accountsDir, entry3);
       try {
         if (!statSync20(accountDir).isDirectory()) continue;
       } catch {
@@ -23508,12 +23583,12 @@ function authoredAgentFiles(accountDir) {
     const dir = resolve28(pluginsDir, plugin, "agents");
     if (!existsSync38(dir)) continue;
     try {
-      for (const entry2 of readdirSync24(dir)) {
-        if (!entry2.endsWith(".md")) continue;
-        const path = resolve28(dir, entry2);
-        const paths = byName.get(entry2);
+      for (const entry3 of readdirSync24(dir)) {
+        if (!entry3.endsWith(".md")) continue;
+        const path = resolve28(dir, entry3);
+        const paths = byName.get(entry3);
         if (paths) paths.push(path);
-        else byName.set(entry2, [path]);
+        else byName.set(entry3, [path]);
       }
     } catch (err) {
       console.error(`[admin/agents] op=authored-scan read-failed plugin=${plugin} error="${err}"`);
@@ -23582,7 +23657,7 @@ function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed, author
   for (const dir of dirs) {
     if (!existsSync38(dir)) continue;
     try {
-      for (const entry2 of readdirSync24(dir)) if (entry2.endsWith(".md")) names.add(entry2);
+      for (const entry3 of readdirSync24(dir)) if (entry3.endsWith(".md")) names.add(entry3);
     } catch (err) {
       console.error(`[admin/agents] op=list-shipped read-failed dir=${dir} error="${err}"`);
     }
@@ -23676,19 +23751,19 @@ function listSpecialists(accountDir, riskByTool, riskSurfaceFailed) {
     } catch {
       continue;
     }
-    for (const entry2 of entries2) {
-      if (!entry2.isFile() || !entry2.name.endsWith(".md")) continue;
+    for (const entry3 of entries2) {
+      if (!entry3.isFile() || !entry3.name.endsWith(".md")) continue;
       try {
-        const { fm } = splitFrontmatter(readFileSync38(resolve28(agentsDirP, entry2.name), "utf-8"));
+        const { fm } = splitFrontmatter(readFileSync38(resolve28(agentsDirP, entry3.name), "utf-8"));
         if (!fm.name) {
           specialistsSkipped++;
-          console.error(`[admin/agents] op=list-specialist-skip plugin=${plugin} file=${entry2.name}`);
+          console.error(`[admin/agents] op=list-specialist-skip plugin=${plugin} file=${entry3.name}`);
           continue;
         }
         const specialistTools = parseToolsLine(fm.tools);
         const r = classify(specialistTools, riskByTool, riskSurfaceFailed);
         specialists.push({
-          slug: entry2.name.replace(/\.md$/, ""),
+          slug: entry3.name.replace(/\.md$/, ""),
           displayName: fm.name,
           kind: "specialist",
           origin: "specialist",
@@ -23711,11 +23786,11 @@ function listSpecialists(accountDir, riskByTool, riskSurfaceFailed) {
           // have the surface claim an agent is stopped while it is still being
           // spawned. Absence from the live dir alone is also not the test: a
           // specialist that was never activated was never switched off either.
-          disabled: existsSync38(resolve28(accountDir, ...QUARANTINE_DIR, entry2.name)) && !existsSync38(resolve28(accountDir, ...SPECIALISTS_DIR, entry2.name))
+          disabled: existsSync38(resolve28(accountDir, ...QUARANTINE_DIR, entry3.name)) && !existsSync38(resolve28(accountDir, ...SPECIALISTS_DIR, entry3.name))
         });
       } catch {
         specialistsSkipped++;
-        console.error(`[admin/agents] op=list-specialist-skip plugin=${plugin} file=${entry2.name}`);
+        console.error(`[admin/agents] op=list-specialist-skip plugin=${plugin} file=${entry3.name}`);
       }
     }
   }
@@ -23742,16 +23817,16 @@ app22.get("/", requireAdminSession, (c) => {
   if (existsSync38(agentsDir)) {
     try {
       const entries2 = readdirSync24(agentsDir, { withFileTypes: true });
-      for (const entry2 of entries2.sort((a, b) => a.name.localeCompare(b.name))) {
-        if (!entry2.isDirectory()) continue;
-        if (entry2.name === "admin") continue;
-        const configPath3 = resolve28(agentsDir, entry2.name, "config.json");
+      for (const entry3 of entries2.sort((a, b) => a.name.localeCompare(b.name))) {
+        if (!entry3.isDirectory()) continue;
+        if (entry3.name === "admin") continue;
+        const configPath3 = resolve28(agentsDir, entry3.name, "config.json");
         if (!existsSync38(configPath3)) continue;
         try {
           const config = JSON.parse(readFileSync38(configPath3, "utf-8"));
           agents.push({
-            slug: entry2.name,
-            displayName: config.displayName ?? entry2.name,
+            slug: entry3.name,
+            displayName: config.displayName ?? entry3.name,
             status: config.status ?? "unknown",
             kind: "public",
             origin: "public",
@@ -23764,7 +23839,7 @@ app22.get("/", requireAdminSession, (c) => {
           });
         } catch {
           skipped++;
-          console.error(`[admin/agents] failed to parse config.json for agent "${entry2.name}" \u2014 skipping`);
+          console.error(`[admin/agents] failed to parse config.json for agent "${entry3.name}" \u2014 skipping`);
         }
       }
     } catch (err) {
@@ -24418,7 +24493,7 @@ app23.get("/", requireAdminSession, async (c) => {
   if (!userId) return c.json({ error: "User identity required \u2014 authenticate with users.json PIN" }, 401);
   try {
     const flushed = await listAdminSessions(accountId, userId, 20);
-    const sessions3 = flushed.map((r) => ({
+    const sessions4 = flushed.map((r) => ({
       sessionId: r.sessionId,
       cacheKey: null,
       name: r.name,
@@ -24426,15 +24501,15 @@ app23.get("/", requireAdminSession, async (c) => {
       phase: "flushed",
       channel: r.channel
     })).sort((a, b) => a.updatedAt < b.updatedAt ? 1 : a.updatedAt > b.updatedAt ? -1 : 0).slice(0, 20);
-    const channelCounts = sessions3.reduce((acc, s) => {
+    const channelCounts = sessions4.reduce((acc, s) => {
       const k = s.channel ?? "unknown";
       acc[k] = (acc[k] ?? 0) + 1;
       return acc;
     }, {});
     console.error(
-      `[conversations-list] render rows=${sessions3.length} channels=${JSON.stringify(channelCounts)}`
+      `[conversations-list] render rows=${sessions4.length} channels=${JSON.stringify(channelCounts)}`
     );
-    return c.json({ sessions: sessions3 });
+    return c.json({ sessions: sessions4 });
   } catch (err) {
     console.error(`[sessions-list] Failed: ${err instanceof Error ? err.message : String(err)}`);
     return c.json({ error: "Failed to fetch sessions" }, 500);
@@ -26099,14 +26174,14 @@ async function walkSubtree(root, dataRoot, out) {
     return { clean: false };
   }
   let clean = true;
-  for (const entry2 of entries2) {
-    if (entry2.isSymbolicLink()) continue;
-    if (entry2.isDirectory() && entry2.name === ".uploads-tmp") continue;
-    const abs = join49(root, entry2.name);
-    if (entry2.isDirectory()) {
+  for (const entry3 of entries2) {
+    if (entry3.isSymbolicLink()) continue;
+    if (entry3.isDirectory() && entry3.name === ".uploads-tmp") continue;
+    const abs = join49(root, entry3.name);
+    if (entry3.isDirectory()) {
       const sub = await walkSubtree(abs, dataRoot, out);
       if (!sub.clean) clean = false;
-    } else if (entry2.isFile()) {
+    } else if (entry3.isFile()) {
       try {
         const st = await fsp.stat(abs);
         out.push({
@@ -26395,14 +26470,14 @@ function buildZip(entries2) {
   const localChunks = [];
   const centralChunks = [];
   let offset = 0;
-  for (const entry2 of entries2) {
-    const nameBytes = Buffer.from(entry2.name, "utf8");
-    const crc = crc32(entry2.data);
-    const uncompressedSize = entry2.data.length;
-    const deflated = deflateRawSync(entry2.data);
+  for (const entry3 of entries2) {
+    const nameBytes = Buffer.from(entry3.name, "utf8");
+    const crc = crc32(entry3.data);
+    const uncompressedSize = entry3.data.length;
+    const deflated = deflateRawSync(entry3.data);
     const useDeflate = deflated.length < uncompressedSize;
     const method = useDeflate ? 8 : 0;
-    const payload = useDeflate ? deflated : entry2.data;
+    const payload = useDeflate ? deflated : entry3.data;
     const compressedSize = payload.length;
     const localHeader = Buffer.alloc(30);
     localHeader.writeUInt32LE(LOCAL_SIG, 0);
@@ -26454,13 +26529,13 @@ function buildZip(entries2) {
 }
 
 // server/lib/account-root-groups.ts
-var import_dist8 = __toESM(require_dist6(), 1);
+var import_dist9 = __toESM(require_dist7(), 1);
 function classifyAccountRoot(schemaMd, rootEntries) {
-  const regions = (0, import_dist8.parseSchemaRegions)(schemaMd);
+  const regions = (0, import_dist9.parseSchemaRegions)(schemaMd);
   if (!regions.parsed) {
     return { home: [], system: [...rootEntries], unknown: [], parsed: false, reason: regions.reason };
   }
-  const homeOrder = [...regions.ontologyRoots, ...import_dist8.HOME_FIXED].filter((d, i, a) => a.indexOf(d) === i);
+  const homeOrder = [...regions.ontologyRoots, ...import_dist9.HOME_FIXED].filter((d, i, a) => a.indexOf(d) === i);
   const homeSet = new Set(homeOrder);
   const present = new Set(rootEntries);
   const home = homeOrder.filter((d) => present.has(d));
@@ -26528,47 +26603,47 @@ async function servableFilesIn(dirAbs, uuid) {
   }
   return out;
 }
-async function enrich(absolute, entry2, accountNames) {
-  if (entry2.kind === "directory" && UUID_RE3.test(entry2.name)) {
-    const dirAbs = join50(absolute, entry2.name);
-    const meta = await readMeta2(dirAbs, entry2.name);
+async function enrich(absolute, entry3, accountNames) {
+  if (entry3.kind === "directory" && UUID_RE3.test(entry3.name)) {
+    const dirAbs = join50(absolute, entry3.name);
+    const meta = await readMeta2(dirAbs, entry3.name);
     if (meta?.filename) {
-      const servable = await servableFilesIn(dirAbs, entry2.name);
+      const servable = await servableFilesIn(dirAbs, entry3.name);
       if (servable.length === 1) {
         const innerName = servable[0];
         let size = null;
-        let modifiedAt = entry2.modifiedAt;
+        let modifiedAt = entry3.modifiedAt;
         try {
           const st = await stat6(join50(dirAbs, innerName));
           size = st.size;
           modifiedAt = st.mtime.toISOString();
         } catch {
         }
-        entry2.kind = "file";
-        entry2.displayName = meta.filename;
-        entry2.mimeType = meta.mimeType;
-        entry2.sizeBytes = size;
-        entry2.modifiedAt = modifiedAt;
-        entry2.entryPath = `${entry2.name}/${innerName}`;
+        entry3.kind = "file";
+        entry3.displayName = meta.filename;
+        entry3.mimeType = meta.mimeType;
+        entry3.sizeBytes = size;
+        entry3.modifiedAt = modifiedAt;
+        entry3.entryPath = `${entry3.name}/${innerName}`;
         return "flattened";
       }
-      entry2.displayName = meta.filename;
+      entry3.displayName = meta.filename;
       return "kept-as-dir";
     }
-    const accountName = accountNames.get(entry2.name);
+    const accountName = accountNames.get(entry3.name);
     if (accountName) {
-      entry2.displayName = accountName;
+      entry3.displayName = accountName;
     }
     return null;
   }
-  if (entry2.kind === "file") {
-    const dot = entry2.name.lastIndexOf(".");
-    const base = dot === -1 ? entry2.name : entry2.name.slice(0, dot);
+  if (entry3.kind === "file") {
+    const dot = entry3.name.lastIndexOf(".");
+    const base = dot === -1 ? entry3.name : entry3.name.slice(0, dot);
     if (UUID_RE3.test(base)) {
       const meta = await readMeta2(absolute, base);
       if (meta?.filename) {
-        entry2.displayName = meta.filename;
-        entry2.mimeType = meta.mimeType;
+        entry3.displayName = meta.filename;
+        entry3.mimeType = meta.mimeType;
       }
     }
   }
@@ -27603,7 +27678,7 @@ app28.post("/rename", requireAdminSession, async (c) => {
 var files_default = app28;
 
 // ../lib/graph-search/src/index.ts
-var import_dist9 = __toESM(require_dist7());
+var import_dist10 = __toESM(require_dist8());
 import { int } from "neo4j-driver";
 
 // ../lib/graph-search/src/rrf-fusion.ts
@@ -27853,7 +27928,7 @@ async function bm25Only(session, params) {
        ${scopeClause}
        ${agentClause}
        ${labelClause}
-       AND ${(0, import_dist9.notTrashed)("node")}
+       AND ${(0, import_dist10.notTrashed)("node")}
        ${kwClause}
        RETURN node, score, labels(node) AS nodeLabels, elementId(node) AS nodeId
        ORDER BY score DESC
@@ -28015,7 +28090,7 @@ async function hybrid(session, embed2, params) {
              WHERE node.accountId = $accountId
              ${scopeClause}
              ${agentClause}
-             AND ${(0, import_dist9.notTrashed)("node")}
+             AND ${(0, import_dist10.notTrashed)("node")}
              ${keywordClause}
              RETURN node, score, labels(node) AS nodeLabels, elementId(node) AS nodeId
              ORDER BY score DESC
@@ -28114,7 +28189,7 @@ async function hybrid(session, embed2, params) {
     const propResult = await session.run(
       `MATCH (node)
        WHERE node.accountId = $accountId
-       AND ${(0, import_dist9.notTrashed)("node")}
+       AND ${(0, import_dist10.notTrashed)("node")}
        AND node.keywords IS NOT NULL
        AND ANY(kw IN $kwSubs WHERE ANY(nk IN node.keywords WHERE toLower(nk) = kw))
        ${propScope.clause}
@@ -28166,7 +28241,7 @@ async function hybrid(session, embed2, params) {
     const propResult = await session.run(
       `MATCH (node)
        WHERE node.accountId = $accountId
-       AND ${(0, import_dist9.notTrashed)("node")}
+       AND ${(0, import_dist10.notTrashed)("node")}
        AND node.keywords IS NOT NULL
        AND ANY(kw IN $kwSubs WHERE ANY(nk IN node.keywords WHERE toLower(nk) = kw))
        ${propScope.clause}
@@ -28273,7 +28348,7 @@ async function hybrid(session, embed2, params) {
       `UNWIND $nodeIds AS nid
        MATCH (n)-[r]-(related)
        WHERE elementId(n) = nid
-       AND ${(0, import_dist9.notTrashed)("related")}
+       AND ${(0, import_dist10.notTrashed)("related")}
        ${expandScopeClause}
        ${expandAgentClause}
        WITH nid, n, r, related
@@ -28501,8 +28576,8 @@ var graph_search_default = app29;
 import neo4j2 from "neo4j-driver";
 
 // app/lib/graph-labels.ts
-var import_dist10 = __toESM(require_dist8(), 1);
-var import_dist11 = __toESM(require_dist8(), 1);
+var import_dist11 = __toESM(require_dist9(), 1);
+var import_dist12 = __toESM(require_dist9(), 1);
 var HIDDEN_BY_DEFAULT_LABELS = Object.freeze(
   /* @__PURE__ */ new Set(["Chunk", "GraphPreference"])
 );
@@ -28586,14 +28661,14 @@ var EXCLUDED_EDGE_TYPES = Object.freeze(
   ])
 );
 function isKnownLabel(label) {
-  return Object.prototype.hasOwnProperty.call(import_dist11.GRAPH_LABEL_COLOURS, label);
+  return Object.prototype.hasOwnProperty.call(import_dist12.GRAPH_LABEL_COLOURS, label);
 }
 function isHiddenByDefault(label) {
   return HIDDEN_BY_DEFAULT_LABELS.has(label);
 }
 
 // server/lib/top-level-labels.ts
-var import_dist12 = __toESM(require_dist8(), 1);
+var import_dist13 = __toESM(require_dist9(), 1);
 import { readdirSync as readdirSync26, readFileSync as readFileSync41 } from "fs";
 import { join as join51, resolve as resolve33 } from "path";
 var STATIC_TOP_LEVEL_LABELS = Object.freeze(
@@ -28730,7 +28805,7 @@ function getTopLevelLabelAllowlist(opts = {}) {
   const referencesDir = opts.referencesDir ?? resolveReferencesDir();
   const { labels: derived, contributingFiles } = parseTableTopLevelLabels(referencesDir);
   const excluded = [];
-  for (const label of import_dist12.ADDITIONAL_BASE_LABELS) {
+  for (const label of import_dist13.ADDITIONAL_BASE_LABELS) {
     if (derived.delete(label)) excluded.push(label);
   }
   const derivedCount = derived.size;
@@ -29982,8 +30057,8 @@ async function unionSpecialistFilenames(overrideDir, bundledDir) {
     if (!existsSync43(dir)) continue;
     try {
       const entries2 = await readdir5(dir);
-      for (const entry2 of entries2) {
-        if (entry2.endsWith(".md")) names.add(entry2);
+      for (const entry3 of entries2) {
+        if (entry3.endsWith(".md")) names.add(entry3);
       }
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
@@ -34247,8 +34322,8 @@ function readHouseAdminUserIds(accountsDir = ACCOUNTS_DIR) {
   } catch {
     return [];
   }
-  for (const entry2 of entries2) {
-    const cfgPath = resolve42(accountsDir, entry2, "account.json");
+  for (const entry3 of entries2) {
+    const cfgPath = resolve42(accountsDir, entry3, "account.json");
     if (!existsSync50(cfgPath)) continue;
     try {
       const cfg = JSON.parse(readFileSync51(cfgPath, "utf-8"));
@@ -35596,9 +35671,9 @@ function originAllowed(origin, allowlist) {
   try {
     const u = new URL(origin);
     const host = u.host;
-    return allowlist.some((entry2) => {
-      if (entry2 === host) return true;
-      if (entry2.startsWith("*.")) return host.endsWith(entry2.slice(1));
+    return allowlist.some((entry3) => {
+      if (entry3 === host) return true;
+      if (entry3.startsWith("*.")) return host.endsWith(entry3.slice(1));
       return false;
     });
   } catch {
@@ -36875,7 +36950,7 @@ async function runConversationAudit() {
 }
 
 // app/lib/graph-health.ts
-var import_dist14 = __toESM(require_dist9(), 1);
+var import_dist15 = __toESM(require_dist10(), 1);
 var HOUR_MS2 = 60 * 60 * 1e3;
 function renderLabelTop(rows) {
   return rows.map((b) => {
@@ -36920,7 +36995,7 @@ async function runGraphHealthTick() {
     console.error(
       `[graph-health] userprofile-multi accounts=${upAccounts} top=${upTop.length > 0 ? upTop.join(",") : "none"}`
     );
-    const indexed = [...import_dist14.VECTOR_INDEXED_LABELS];
+    const indexed = [...import_dist15.VECTOR_INDEXED_LABELS];
     const embCount = await session.run(
       `MATCH (n) WHERE n.embedding IS NULL AND any(l IN labels(n) WHERE l IN $indexed)
        RETURN count(n) AS total`,
@@ -36994,7 +37069,7 @@ function startGraphHealthTimer() {
 // app/lib/shared-folder-census.ts
 import { existsSync as existsSync54, statSync as statSync29, readdirSync as readdirSync32 } from "fs";
 import { join as join65 } from "path";
-var import_dist15 = __toESM(require_dist(), 1);
+var import_dist16 = __toESM(require_dist(), 1);
 var TAG64 = "[shared-census]";
 var WIRED_SURFACES = 3;
 function countFiles(dir) {
@@ -37012,7 +37087,7 @@ function countFiles(dir) {
   return n;
 }
 function runSharedFolderCensus(dataRoot = DATA_ROOT) {
-  const root = (0, import_dist15.sharedRoot)(dataRoot);
+  const root = (0, import_dist16.sharedRoot)(dataRoot);
   const exists = existsSync54(root);
   let isDir = false;
   if (exists) {
@@ -37060,15 +37135,15 @@ function surveyBrandCredentials(home) {
     return [];
   }
   const rows = [];
-  for (const entry2 of entries2.sort()) {
-    if (!entry2.startsWith(".")) continue;
+  for (const entry3 of entries2.sort()) {
+    if (!entry3.startsWith(".")) continue;
     let raw;
     try {
-      raw = readFileSync57(join66(home, entry2, ".claude", ".credentials.json"), "utf-8");
+      raw = readFileSync57(join66(home, entry3, ".claude", ".credentials.json"), "utf-8");
     } catch {
       continue;
     }
-    rows.push({ brand: entry2.slice(1), refreshTokenLen: refreshTokenLength(raw) });
+    rows.push({ brand: entry3.slice(1), refreshTokenLen: refreshTokenLength(raw) });
   }
   return rows;
 }
@@ -37277,8 +37352,8 @@ async function migrateUploads(opts = {}) {
   let moved = 0;
   let skipped = 0;
   try {
-    for (const entry2 of topEntries) {
-      const name = entry2.name;
+    for (const entry3 of topEntries) {
+      const name = entry3.name;
       if (ACCOUNT_UUID_RE4.test(name)) {
         moved += await relocateTree(
           resolve49(oldRoot, name),
@@ -37378,11 +37453,11 @@ async function collectLiveSidecars(projectsRoot) {
     } catch {
       continue;
     }
-    for (const entry2 of entries2) {
-      if (entry2.isFile() && SESSION_META_RE.test(entry2.name)) {
-        out.push(join67(slugDir, entry2.name));
-      } else if (entry2.isDirectory() && entry2.name === "subagents") {
-        const subDir = join67(slugDir, entry2.name);
+    for (const entry3 of entries2) {
+      if (entry3.isFile() && SESSION_META_RE.test(entry3.name)) {
+        out.push(join67(slugDir, entry3.name));
+      } else if (entry3.isDirectory() && entry3.name === "subagents") {
+        const subDir = join67(slugDir, entry3.name);
         let subs;
         try {
           subs = await readdir7(subDir, { withFileTypes: true });
@@ -37532,11 +37607,11 @@ async function collectSidecars(projectsRoot) {
     } catch {
       continue;
     }
-    for (const entry2 of entries2) {
-      if (entry2.isFile() && SESSION_META_RE2.test(entry2.name)) {
-        out.push({ path: join68(slugDir, entry2.name), slug: slug.name });
-      } else if (entry2.isDirectory() && (entry2.name === "subagents" || entry2.name === "archive")) {
-        const subDir = join68(slugDir, entry2.name);
+    for (const entry3 of entries2) {
+      if (entry3.isFile() && SESSION_META_RE2.test(entry3.name)) {
+        out.push({ path: join68(slugDir, entry3.name), slug: slug.name });
+      } else if (entry3.isDirectory() && (entry3.name === "subagents" || entry3.name === "archive")) {
+        const subDir = join68(slugDir, entry3.name);
         let subs;
         try {
           subs = await readdir8(subDir, { withFileTypes: true });
@@ -38465,24 +38540,24 @@ var WaGateway = class {
     for (const h of held) {
       const key2 = hubKey(h.accountId, h.senderId);
       if (this.spawning.has(key2)) continue;
-      const entry2 = this.heldSpawnArgs.get(key2);
-      if (!entry2) {
+      const entry3 = this.heldSpawnArgs.get(key2);
+      if (!entry3) {
         console.error(
           `[whatsapp-native] op=spawn-retry-skipped senderId=${h.senderId} accountId=${h.accountId} ageMs=${h.oldestAgeMs} queued=${h.count} reason=no-args`
         );
         continue;
       }
-      entry2.attempts++;
+      entry3.attempts++;
       this.spawning.add(key2);
       calls++;
       try {
-        await this.deps.ensureChannelSession(entry2.args);
+        await this.deps.ensureChannelSession(entry3.args);
         console.error(
-          `[whatsapp-native] op=spawn-retry senderId=${h.senderId} accountId=${h.accountId} attempt=${entry2.attempts} ageMs=${h.oldestAgeMs} queued=${h.count} ok=true`
+          `[whatsapp-native] op=spawn-retry senderId=${h.senderId} accountId=${h.accountId} attempt=${entry3.attempts} ageMs=${h.oldestAgeMs} queued=${h.count} ok=true`
         );
       } catch (err) {
         console.error(
-          `[whatsapp-native] op=spawn-retry senderId=${h.senderId} accountId=${h.accountId} attempt=${entry2.attempts} ageMs=${h.oldestAgeMs} queued=${h.count} ok=false reason=${err instanceof Error ? err.message : String(err)}`
+          `[whatsapp-native] op=spawn-retry senderId=${h.senderId} accountId=${h.accountId} attempt=${entry3.attempts} ageMs=${h.oldestAgeMs} queued=${h.count} ok=false reason=${err instanceof Error ? err.message : String(err)}`
         );
       } finally {
         this.spawning.delete(key2);
@@ -39027,8 +39102,8 @@ var InboundHub2 = class {
     if (!s) return null;
     const i = s.inFlight.findIndex((e) => e.payload.messageId === messageId && e.state === "queued");
     if (i < 0) return null;
-    const [entry2] = s.inFlight.splice(i, 1);
-    return entry2.payload;
+    const [entry3] = s.inFlight.splice(i, 1);
+    return entry3.payload;
   }
   /** Whether a key currently has a live channel server attached. The gateway
    *  uses this to decide whether an inbound needs a cold-start spawn/resume. */
@@ -39360,9 +39435,9 @@ var WebchatGateway = class _WebchatGateway {
    *  false (and is a no-op) when no prompt with this key+id is open — a late or
    *  duplicate click. */
   resolvePermissionVerdict(key2, requestId, behavior) {
-    const entry2 = this.pendingPrompts.get(_WebchatGateway.promptKey(key2, requestId));
-    if (!entry2) return false;
-    entry2.resolve({ behavior });
+    const entry3 = this.pendingPrompts.get(_WebchatGateway.promptKey(key2, requestId));
+    if (!entry3) return false;
+    entry3.resolve({ behavior });
     console.error(`[webchat:perm] op=verdict key=${keyDisplay(key2)} id=${requestId} behavior=${behavior}`);
     return true;
   }
@@ -39890,6 +39965,23 @@ var AnswerAccumulator = class {
 };
 
 // app/lib/channel-delivery/emitter.ts
+var CHANNEL_WRAPPER2 = "<channel source=";
+function classifyTurnStart(event) {
+  const content = event.message?.content;
+  if (typeof content === "string") {
+    return content.trimStart().startsWith(CHANNEL_WRAPPER2) ? "inbound" : "injected";
+  }
+  if (!Array.isArray(content)) return "injected";
+  for (const block of content) {
+    if (block?.type === "tool_result") return "tool-result";
+  }
+  for (const block of content) {
+    if (block?.type === "text" && typeof block.text === "string") {
+      return block.text.trimStart().startsWith(CHANNEL_WRAPPER2) ? "inbound" : "injected";
+    }
+  }
+  return "injected";
+}
 function followerPendingMaxMs() {
   return Number(process.env.CHANNEL_PTY_FOLLOWER_PENDING_MAX_MS ?? String(3e5));
 }
@@ -39905,33 +39997,33 @@ function toolResultText(content) {
 }
 function startEmitter(opts) {
   const abort2 = new AbortController();
-  const { entry: entry2, tag } = opts;
+  const { entry: entry3, tag } = opts;
   const answers = new AnswerAccumulator();
   let answersEmitted = 0;
   let closeReason = "stream-end";
   const emitAnswer = async (answer) => {
     answersEmitted += 1;
-    if (answer.text.trim()) await fanOut2(entry2.subscribers, answer.text, opts.onError, tag);
+    if (answer.text.trim()) await fanOut2(entry3.subscribers, answer.text, opts.onError, tag);
     if (!opts.onAnswer) return;
-    const guarded = { ...answer, text: guardOutbound(entry2.senderId, answer.text) };
+    const guarded = { ...answer, text: guardOutbound(entry3.senderId, answer.text) };
     try {
       await opts.onAnswer(guarded);
     } catch (err) {
       console.error(
-        `${tag} answer-error sessionId=${entry2.sessionId.slice(0, 8)} messageId=${answer.messageId} message=${err instanceof Error ? err.message : String(err)}`
+        `${tag} answer-error sessionId=${entry3.sessionId.slice(0, 8)} messageId=${answer.messageId} message=${err instanceof Error ? err.message : String(err)}`
       );
     }
   };
   void (async () => {
     try {
-      const sid = entry2.sessionId.slice(0, 8);
+      const sid = entry3.sessionId.slice(0, 8);
       const deadline = Date.now() + followerPendingMaxMs();
       const retryMs = followerRetryMs();
       let res;
       let attempt = 0;
       for (; ; ) {
         res = await fetch(
-          managerLogFollowUrl(entry2.sessionId, { boundary: opts.suppressResumeReplay === true }),
+          managerLogFollowUrl(entry3.sessionId, { boundary: opts.suppressResumeReplay === true }),
           { signal: abort2.signal }
         );
         console.error(`${tag} follower-connect sessionId=${sid} status=${res.status}`);
@@ -39982,7 +40074,7 @@ function startEmitter(opts) {
             event = JSON.parse(line);
           } catch (err) {
             console.error(
-              `${tag} jsonl-parse-skip sessionId=${entry2.sessionId.slice(0, 8)} bytes=${line.length} message=${err instanceof Error ? err.message : String(err)}`
+              `${tag} jsonl-parse-skip sessionId=${entry3.sessionId.slice(0, 8)} bytes=${line.length} message=${err instanceof Error ? err.message : String(err)}`
             );
             continue;
           }
@@ -40035,7 +40127,7 @@ function startEmitter(opts) {
                 }
               }
             }
-            if (!suppressing) opts.onTurnStart?.();
+            if (!suppressing) opts.onTurnStart?.(classifyTurnStart(event));
             firedFileTools = [];
             continue;
           }
@@ -40100,7 +40192,7 @@ function startEmitter(opts) {
     } finally {
       if (abort2.signal.aborted) closeReason = "aborted";
       console.error(
-        `${tag} op=follower-closed sessionId=${entry2.sessionId.slice(0, 8)} reason=${closeReason} answers=${answersEmitted}`
+        `${tag} op=follower-closed sessionId=${entry3.sessionId.slice(0, 8)} reason=${closeReason} answers=${answersEmitted}`
       );
       opts.onClose();
     }
@@ -40155,7 +40247,7 @@ import { resolve as resolve50 } from "path";
 // app/lib/channel-pty-bridge/file-delivery.ts
 var SEND_USER_FILE = "SendUserFile";
 function makeFileDelivery(opts) {
-  const { entry: entry2, tag, channel, sendFile, deferUntilVerdict = false } = opts;
+  const { entry: entry3, tag, channel, sendFile, deferUntilVerdict = false } = opts;
   let failedFiles = [];
   let attempts = 0;
   const pending = /* @__PURE__ */ new Map();
@@ -40182,7 +40274,7 @@ function makeFileDelivery(opts) {
   function unreconciledCall(reason, files, detail) {
     const d = detail ? ` detail="${detail.replace(/\s+/g, " ").slice(0, 120)}"` : "";
     console.error(
-      `${tag} file-delivery-unreconciled sender=${entry2.senderId} sessionId=${entry2.sessionId.slice(0, 8)} tool=${SEND_USER_FILE} reason=${reason} files=${files}${d}`
+      `${tag} file-delivery-unreconciled sender=${entry3.senderId} sessionId=${entry3.sessionId.slice(0, 8)} tool=${SEND_USER_FILE} reason=${reason} files=${files}${d}`
     );
   }
   const handler = {
@@ -40203,10 +40295,10 @@ function makeFileDelivery(opts) {
       const tried = attempts;
       failedFiles = [];
       attempts = 0;
-      const sid = entry2.sessionId.slice(0, 8);
+      const sid = entry3.sessionId.slice(0, 8);
       for (const file of failed2) {
         console.error(
-          `${tag} file-delivery-unreconciled sender=${entry2.senderId} sessionId=${sid} tool=${SEND_USER_FILE} file=${file}`
+          `${tag} file-delivery-unreconciled sender=${entry3.senderId} sessionId=${sid} tool=${SEND_USER_FILE} file=${file}`
         );
       }
       if (deferUntilVerdict) {
@@ -40216,7 +40308,7 @@ function makeFileDelivery(opts) {
       }
       if (firedTools.includes(SEND_USER_FILE) && tried === 0) {
         console.error(
-          `${tag} file-delivery-unreconciled sender=${entry2.senderId} sessionId=${sid} tool=${SEND_USER_FILE}`
+          `${tag} file-delivery-unreconciled sender=${entry3.senderId} sessionId=${sid} tool=${SEND_USER_FILE}`
         );
       }
     }
@@ -40245,43 +40337,43 @@ var TAG66 = "[webchat-adaptor]";
 function platformRoot2() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
-function makeWebchatSendFile(entry2) {
+function makeWebchatSendFile(entry3) {
   return async (filePath) => {
-    if (!entry2.accountId) {
-      console.error(`${TAG66} file-delivery reject reason=no-account sender=${entry2.senderId}`);
+    if (!entry3.accountId) {
+      console.error(`${TAG66} file-delivery reject reason=no-account sender=${entry3.senderId}`);
       return { ok: false, error: "no-account" };
     }
-    const accountDir = resolve50(platformRoot2(), "..", "data/accounts", entry2.accountId);
+    const accountDir = resolve50(platformRoot2(), "..", "data/accounts", entry3.accountId);
     try {
       const resolved = realpathSync9(filePath);
       const accountResolved = realpathSync9(accountDir);
       if (!resolved.startsWith(accountResolved + "/")) {
-        console.error(`${TAG66} file-delivery reject reason=outside_account_directory sender=${entry2.senderId}`);
+        console.error(`${TAG66} file-delivery reject reason=outside_account_directory sender=${entry3.senderId}`);
         return { ok: false, error: "outside-account" };
       }
       return { ok: true };
     } catch (err) {
       const code = err.code;
       console.error(
-        `${TAG66} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry2.senderId}`
+        `${TAG66} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry3.senderId}`
       );
       return { ok: false, error: code === "ENOENT" ? "not-found" : "path-error" };
     }
   };
 }
-function makeWebchatFileDelivery(entry2) {
+function makeWebchatFileDelivery(entry3) {
   return makeFileDelivery({
-    entry: entry2,
+    entry: entry3,
     tag: TAG66,
     channel: "webchat",
-    sendFile: makeWebchatSendFile(entry2),
+    sendFile: makeWebchatSendFile(entry3),
     deferUntilVerdict: true
   });
 }
 
 // app/lib/webchat/gateway/native-file-follower.ts
 function startWebchatNativeFileFollower(input) {
-  const entry2 = {
+  const entry3 = {
     sessionId: input.sessionId,
     role: "admin",
     channel: "webchat",
@@ -40300,7 +40392,7 @@ function startWebchatNativeFileFollower(input) {
     replyTarget: null
   };
   return startEmitter({
-    entry: entry2,
+    entry: entry3,
     tag: "[webchat-adaptor]",
     // Task 2557 — the emitter has always had this channel and no follower ever
     // passed one, so every cause it reported was discarded. The close line
@@ -40308,7 +40400,7 @@ function startWebchatNativeFileFollower(input) {
     onError: (reason) => {
       console.error(`[webchat-adaptor] op=follower-error sessionId=${input.sessionId.slice(0, 8)} reason=${reason}`);
     },
-    fileDelivery: makeWebchatFileDelivery(entry2),
+    fileDelivery: makeWebchatFileDelivery(entry3),
     // A resumed session's JSONL already holds prior SendUserFile tool_uses;
     // suppress replay so historical calls are not re-reconciled on attach.
     suppressResumeReplay: true,
@@ -40357,29 +40449,29 @@ var WHATSAPP_SEND_DOCUMENT = "whatsapp-send-document";
 function platformRoot3() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
-function makeWhatsAppSendFile(entry2, maxyAccountId) {
+function makeWhatsAppSendFile(entry3, maxyAccountId) {
   return async (filePath, caption) => {
     const result = await sendWhatsAppDocument({
-      to: entry2.senderId,
+      to: entry3.senderId,
       filePath,
       caption,
-      accountId: entry2.accountId,
+      accountId: entry3.accountId,
       maxyAccountId,
       platformRoot: platformRoot3()
     });
     if (result.ok) return { ok: true };
     console.error(
-      `${TAG67} file-delivery reject reason=send-failed sender=${entry2.senderId} status=${result.status} message=${result.error}`
+      `${TAG67} file-delivery reject reason=send-failed sender=${entry3.senderId} status=${result.status} message=${result.error}`
     );
     return { ok: false, error: result.error };
   };
 }
-function makeWhatsAppFileDelivery(entry2, maxyAccountId) {
+function makeWhatsAppFileDelivery(entry3, maxyAccountId) {
   const shared = makeFileDelivery({
-    entry: entry2,
+    entry: entry3,
     tag: TAG67,
     channel: "whatsapp",
-    sendFile: makeWhatsAppSendFile(entry2, maxyAccountId)
+    sendFile: makeWhatsAppSendFile(entry3, maxyAccountId)
   });
   let turnStartedAt = null;
   let routeCalls = [];
@@ -40404,7 +40496,7 @@ function makeWhatsAppFileDelivery(entry2, maxyAccountId) {
       const routes = routeCalls;
       turnStartedAt = null;
       routeCalls = [];
-      const sid = entry2.sessionId.slice(0, 8);
+      const sid = entry3.sessionId.slice(0, 8);
       shared.onTurnEnd(firedTools);
       for (const call2 of routes) {
         const routeAt = call2.to !== void 0 && call2.filePath !== void 0 ? routeDocumentOutboundAt(call2.to, call2.filePath) : void 0;
@@ -40412,7 +40504,7 @@ function makeWhatsAppFileDelivery(entry2, maxyAccountId) {
         if (!delivered) {
           const fileField = call2.filePath !== void 0 ? ` file=${call2.filePath}` : "";
           console.error(
-            `${TAG67} file-delivery-unreconciled sender=${entry2.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+            `${TAG67} file-delivery-unreconciled sender=${entry3.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
           );
         }
       }
@@ -40423,7 +40515,7 @@ function makeWhatsAppFileDelivery(entry2, maxyAccountId) {
 // app/lib/whatsapp/gateway/native-file-follower.ts
 var COMPOSING_REFRESH_MS = 1e4;
 function startNativeFileFollower(input) {
-  const entry2 = {
+  const entry3 = {
     sessionId: input.sessionId,
     role: input.role,
     channel: "whatsapp",
@@ -40469,7 +40561,7 @@ function startNativeFileFollower(input) {
     void sendPaused(sock, input.senderId);
   };
   return startEmitter({
-    entry: entry2,
+    entry: entry3,
     tag: "[whatsapp-adaptor]",
     // Task 2557 — the emitter has always had this channel and no follower ever
     // passed one, so every cause it reported (`follow-status-404`,
@@ -40481,7 +40573,7 @@ function startNativeFileFollower(input) {
     },
     // Task 2521 — admin-only. A public spawn has no tools (Task 2078), so a
     // handler here would reconcile a call that can never fire.
-    fileDelivery: input.role === "admin" ? makeWhatsAppFileDelivery(entry2, input.maxyAccountId) : null,
+    fileDelivery: input.role === "admin" ? makeWhatsAppFileDelivery(entry3, input.maxyAccountId) : null,
     // A resumed session's JSONL already holds prior SendUserFile tool_uses;
     // suppress replay so historical files are not re-sent on attach.
     suppressResumeReplay: true,
@@ -41019,24 +41111,24 @@ var TelegramGateway = class {
     let calls = 0;
     for (const h of held) {
       if (this.spawning.has(h.key)) continue;
-      const entry2 = this.heldSpawnArgs.get(h.key);
-      if (!entry2) {
+      const entry3 = this.heldSpawnArgs.get(h.key);
+      if (!entry3) {
         console.error(
           `[telegram-native] op=spawn-retry-skipped key=${h.key} ageMs=${h.oldestAgeMs} queued=${h.count} reason=no-args`
         );
         continue;
       }
-      entry2.attempts++;
+      entry3.attempts++;
       this.spawning.add(h.key);
       calls++;
       try {
-        await this.deps.ensureChannelSession(entry2.args);
+        await this.deps.ensureChannelSession(entry3.args);
         console.error(
-          `[telegram-native] op=spawn-retry key=${h.key} attempt=${entry2.attempts} ageMs=${h.oldestAgeMs} queued=${h.count} ok=true`
+          `[telegram-native] op=spawn-retry key=${h.key} attempt=${entry3.attempts} ageMs=${h.oldestAgeMs} queued=${h.count} ok=true`
         );
       } catch (err) {
         console.error(
-          `[telegram-native] op=spawn-retry key=${h.key} attempt=${entry2.attempts} ageMs=${h.oldestAgeMs} queued=${h.count} ok=false reason=${err instanceof Error ? err.message : String(err)}`
+          `[telegram-native] op=spawn-retry key=${h.key} attempt=${entry3.attempts} ageMs=${h.oldestAgeMs} queued=${h.count} ok=false reason=${err instanceof Error ? err.message : String(err)}`
         );
       } finally {
         this.spawning.delete(h.key);
@@ -41489,33 +41581,33 @@ var TAG71 = "[telegram:outbound]";
 function platformRoot4() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
-function makeTelegramSendFile(entry2, botToken) {
+function makeTelegramSendFile(entry3, botToken) {
   return async (filePath, caption) => {
     if (!botToken) {
-      console.error(`${TAG71} file-delivery reject reason=no-bot-token sender=${entry2.senderId} role=${entry2.role}`);
+      console.error(`${TAG71} file-delivery reject reason=no-bot-token sender=${entry3.senderId} role=${entry3.role}`);
       return { ok: false, error: "no-bot-token" };
     }
-    if (entry2.replyTarget == null) {
-      console.error(`${TAG71} file-delivery reject reason=no-reply-target sender=${entry2.senderId} role=${entry2.role}`);
+    if (entry3.replyTarget == null) {
+      console.error(`${TAG71} file-delivery reject reason=no-reply-target sender=${entry3.senderId} role=${entry3.role}`);
       return { ok: false, error: "no-reply-target" };
     }
     const result = await sendTelegramDocument({
       botToken,
-      chatId: Number(entry2.replyTarget),
+      chatId: Number(entry3.replyTarget),
       filePath,
       caption,
-      maxyAccountId: entry2.accountId,
+      maxyAccountId: entry3.accountId,
       platformRoot: platformRoot4()
     });
     return result.ok ? { ok: true } : { ok: false, error: result.error };
   };
 }
-function makeTelegramFileDelivery(entry2, botToken) {
+function makeTelegramFileDelivery(entry3, botToken) {
   return makeFileDelivery({
-    entry: entry2,
+    entry: entry3,
     tag: TAG71,
     channel: "telegram",
-    sendFile: makeTelegramSendFile(entry2, botToken)
+    sendFile: makeTelegramSendFile(entry3, botToken)
   });
 }
 
@@ -41551,11 +41643,46 @@ function runTelegramPresenceCensus() {
   );
 }
 
+// app/lib/telegram/gateway/card-census.ts
+var sessions3 = /* @__PURE__ */ new Map();
+function entry2(sessionId) {
+  let e = sessions3.get(sessionId);
+  if (!e) {
+    e = { armed: 0, suppressed: 0, delivered: 0 };
+    sessions3.set(sessionId, e);
+  }
+  return e;
+}
+function noteCardArmed(sessionId) {
+  entry2(sessionId).armed += 1;
+}
+function noteCardSuppressed(sessionId) {
+  entry2(sessionId).suppressed += 1;
+}
+function noteCardDelivered(sessionId) {
+  const e = sessions3.get(sessionId);
+  if (e && e.armed > 0) e.delivered += 1;
+}
+function cardCensusLines() {
+  let armed2 = 0;
+  let suppressed = 0;
+  let delivered = 0;
+  for (const e of sessions3.values()) {
+    armed2 += e.armed;
+    suppressed += e.suppressed;
+    delivered += e.delivered;
+  }
+  const silent = Math.max(0, armed2 - suppressed - delivered);
+  return [
+    `[telegram-card-suppression-census] sessions=${sessions3.size} armed=${armed2} suppressed=${suppressed} silent-turns=${silent}`
+  ];
+}
+
 // app/lib/telegram/gateway/native-file-follower.ts
 var TELEGRAM_CARD_TOOL = "mcp__telegram__telegram-card";
 var CHAT_ACTION_REFRESH_MS = 4e3;
 function startTelegramNativeFileFollower(input) {
-  const entry2 = {
+  const entry3 = {
     sessionId: input.sessionId,
     role: "admin",
     channel: "telegram",
@@ -41599,7 +41726,8 @@ function startTelegramNativeFileFollower(input) {
     stopHeartbeat();
     lastChatActionAt = Number.NEGATIVE_INFINITY;
   };
-  const onTurnStart = () => {
+  const onTurnStart = (kind) => {
+    if (kind === "inbound") cardSentThisTurn = false;
     if (turnOpen) return;
     turnOpen = true;
     stopHeartbeat();
@@ -41612,7 +41740,6 @@ function startTelegramNativeFileFollower(input) {
   };
   const onTurnComplete = () => {
     turnOpen = false;
-    cardSentThisTurn = false;
     if (input.backgroundActive?.() === true) return;
     stopHeartbeat();
     lastChatActionAt = Number.NEGATIVE_INFINITY;
@@ -41626,7 +41753,7 @@ function startTelegramNativeFileFollower(input) {
     background: () => input.backgroundActive?.() === true
   });
   return startEmitter({
-    entry: entry2,
+    entry: entry3,
     tag: "[telegram-adaptor]",
     // Task 2557 — the emitter has always had this channel and no follower ever
     // passed one, so every cause it reported was discarded. The close line
@@ -41634,7 +41761,7 @@ function startTelegramNativeFileFollower(input) {
     onError: (reason) => {
       console.error(`[telegram-adaptor] op=follower-error sessionId=${input.sessionId.slice(0, 8)} reason=${reason}`);
     },
-    fileDelivery: makeTelegramFileDelivery(entry2, input.botToken),
+    fileDelivery: makeTelegramFileDelivery(entry3, input.botToken),
     // A resumed session's JSONL already holds prior SendUserFile tool_uses;
     // suppress replay so historical files are not re-sent on attach.
     suppressResumeReplay: true,
@@ -41652,14 +41779,19 @@ function startTelegramNativeFileFollower(input) {
     // before it reaches the optional answerCallbackQuery, so there is no card
     // call that posts nothing and no bare acknowledgement to keep the text for.
     onToolUse: (name) => {
-      if (name === TELEGRAM_CARD_TOOL) cardSentThisTurn = true;
+      if (name !== TELEGRAM_CARD_TOOL) return;
+      cardSentThisTurn = true;
+      noteCardArmed(input.sessionId);
+      console.error(
+        `[telegram-public] op=card-armed sessionId=${input.sessionId.slice(0, 8)} tool=${name}`
+      );
     },
     // Task 2521 — the answer reaches every bound door through the one fan-out.
     // Ungated by design: whatever woke the turn, the reader and the chats show
     // the same thing. Task 2666 adds the one exception above.
     onAnswer: async (answer) => {
       if (cardSentThisTurn) {
-        cardSentThisTurn = false;
+        noteCardSuppressed(input.sessionId);
         console.error(
           `[telegram-public] op=text-suppressed sessionId=${input.sessionId.slice(0, 8)} messageId=${answer.messageId} reason=card-sent`
         );
@@ -41670,6 +41802,7 @@ function startTelegramNativeFileFollower(input) {
       noteAnswer(input.sessionId, answer.messageId);
       const { line, reached } = await fanOut({ targets, segments: segmentText(answer.text) });
       noteSent(input.sessionId, answer.messageId, reached);
+      noteCardDelivered(input.sessionId);
       console.error(`${line} messageId=${answer.messageId} sessionId=${input.sessionId.slice(0, 8)}`);
     },
     // Task 2603 — the interval must not outlive the reader. The emitter reaches
@@ -41955,11 +42088,11 @@ async function firePublicSessionEndReview(input) {
 }
 
 // app/lib/whatsapp/inbound/resolve-client-graph-owner.ts
-var import_dist16 = __toESM(require_dist3(), 1);
+var import_dist17 = __toESM(require_dist3(), 1);
 async function resolveClientOwnerUserId(accountId, deps = {}) {
   const listAccounts = deps.listAccounts ?? listValidAccounts;
   const getSession3 = deps.getSession ?? getSession;
-  const resolveOwner2 = deps.resolveOwner ?? import_dist16.resolveOwnerUserId;
+  const resolveOwner2 = deps.resolveOwner ?? import_dist17.resolveOwnerUserId;
   const role = listAccounts().find((a) => a.accountId === accountId)?.config.role;
   if (role !== "client") return null;
   const session = getSession3();
@@ -41982,8 +42115,8 @@ async function resolveClientOwnerUserId(accountId, deps = {}) {
 // app/lib/whatsapp/inbound/channel-admin-binding-drift.ts
 function findAccountManagerDrift(accountManagers, validAccountIds) {
   const drift = [];
-  for (const [phone, entry2] of Object.entries(accountManagers)) {
-    const managesAccount = typeof entry2 === "string" ? entry2 : entry2.managesAccount;
+  for (const [phone, entry3] of Object.entries(accountManagers)) {
+    const managesAccount = typeof entry3 === "string" ? entry3 : entry3.managesAccount;
     if (!validAccountIds.includes(managesAccount)) {
       drift.push({ phone, managesAccount, reason: "not-in-registry" });
     }
@@ -42089,50 +42222,50 @@ import { join as join71 } from "path";
 function buildTelegramAuditLines(input) {
   const lines = [];
   const entries2 = input.accounts.flatMap(
-    (a) => listBotEntries(a.telegram).map((entry2) => ({ accountId: a.accountId, accountDir: a.accountDir, entry: entry2 }))
+    (a) => listBotEntries(a.telegram).map((entry3) => ({ accountId: a.accountId, accountDir: a.accountDir, entry: entry3 }))
   );
   if (entries2.length === 0) return lines;
   const byId = /* @__PURE__ */ new Map();
-  for (const { entry: entry2 } of entries2) byId.set(entry2.id, (byId.get(entry2.id) ?? 0) + 1);
+  for (const { entry: entry3 } of entries2) byId.set(entry3.id, (byId.get(entry3.id) ?? 0) + 1);
   for (const [botId, count] of byId) {
     if (count > 1) lines.push(`[telegram-audit] op=duplicate-bot-id botId=${botId} accounts=${count}`);
   }
-  for (const { accountId, accountDir, entry: entry2 } of entries2) {
-    if (entry2.role === "public" && !input.agentActive(accountDir, entry2.agent)) {
+  for (const { accountId, accountDir, entry: entry3 } of entries2) {
+    if (entry3.role === "public" && !input.agentActive(accountDir, entry3.agent)) {
       lines.push(
-        `[telegram-audit] op=entry-agent-inactive accountId=${accountId} botId=${entry2.id} agent=${entry2.agent}`
+        `[telegram-audit] op=entry-agent-inactive accountId=${accountId} botId=${entry3.id} agent=${entry3.agent}`
       );
     }
-    if (!input.secretFileExists(entry2.id)) {
-      lines.push(`[telegram-audit] op=secret-orphan botId=${entry2.id} side=entry`);
+    if (!input.secretFileExists(entry3.id)) {
+      lines.push(`[telegram-audit] op=secret-orphan botId=${entry3.id} side=entry`);
     }
   }
   const known = new Set(entries2.map((e) => e.entry.id));
   for (const botId of input.secretFilesOnDisk) {
     if (!known.has(botId)) lines.push(`[telegram-audit] op=secret-orphan botId=${botId} side=file`);
   }
-  for (const { accountId, entry: entry2 } of entries2) {
-    const last = input.lastActivityByBot(entry2.id);
+  for (const { accountId, entry: entry3 } of entries2) {
+    const last = input.lastActivityByBot(entry3.id);
     const spawnAge = last === null ? "never" : String(input.now - last.spawnMs);
     const turnAge = last === null || last.turnMs === null ? "never" : String(input.now - last.turnMs);
-    const agent = entryAgentSlug(entry2);
-    const secretFile = input.secretFileExists(entry2.id) ? "present" : "absent";
+    const agent = entryAgentSlug(entry3);
+    const secretFile = input.secretFileExists(entry3.id) ? "present" : "absent";
     lines.push(
-      `[telegram-audit] op=configured botId=${entry2.id} accountId=${accountId} agent=${agent} secretFile=${secretFile} lastSpawnAgeMs=${spawnAge} lastTurnAgeMs=${turnAge}`
+      `[telegram-audit] op=configured botId=${entry3.id} accountId=${accountId} agent=${agent} secretFile=${secretFile} lastSpawnAgeMs=${spawnAge} lastTurnAgeMs=${turnAge}`
     );
   }
   let bound = 0;
   let rosterOk = 0;
   let rosterMissing = 0;
-  for (const { accountId, accountDir, entry: entry2 } of entries2) {
-    if (entry2.role !== "specialist") continue;
+  for (const { accountId, accountDir, entry: entry3 } of entries2) {
+    if (entry3.role !== "specialist") continue;
     bound++;
-    if (input.specialistCards(accountDir).includes(entry2.specialist)) {
+    if (input.specialistCards(accountDir).includes(entry3.specialist)) {
       rosterOk++;
     } else {
       rosterMissing++;
       lines.push(
-        `[telegram-audit] op=specialist-binding-missing accountId=${accountId} botId=${entry2.id} specialist=${entry2.specialist}`
+        `[telegram-audit] op=specialist-binding-missing accountId=${accountId} botId=${entry3.id} specialist=${entry3.specialist}`
       );
     }
   }
@@ -42152,9 +42285,9 @@ function buildManagedBotCensusLine(input) {
   const byId = new Map(input.probes.map((p) => [p.botId, p]));
   let webhookOk = 0;
   let unrestricted = 0;
-  for (const entry2 of managed) {
-    const probe = byId.get(entry2.id);
-    if (probe && probe.webhookUrl && webhookPointsHere(probe.webhookUrl, entry2.id)) webhookOk += 1;
+  for (const entry3 of managed) {
+    const probe = byId.get(entry3.id);
+    if (probe && probe.webhookUrl && webhookPointsHere(probe.webhookUrl, entry3.id)) webhookOk += 1;
     if (probe?.isAccessRestricted === false) unrestricted += 1;
   }
   return `[telegram-audit] op=managed-bot-census bots=${entries2.length} managed=${managed.length} webhookOk=${webhookOk} webhookStale=${managed.length - webhookOk} unrestricted=${unrestricted}`;
@@ -42227,19 +42360,19 @@ function buildGroupCensusLine(c) {
 async function runTelegramGroupCensus(accounts, deps) {
   const counts = { bots: 0, groups: 0, present: 0, absent: 0, privacyOff: 0 };
   for (const account of accounts) {
-    for (const entry2 of listBotEntries(account.telegram)) {
-      if (entry2.role !== "public") continue;
-      if ((entry2.groupPolicy ?? "disabled") !== "allowlist") continue;
+    for (const entry3 of listBotEntries(account.telegram)) {
+      if (entry3.role !== "public") continue;
+      if ((entry3.groupPolicy ?? "disabled") !== "allowlist") continue;
       counts.bots += 1;
       try {
-        const me = await deps.getMe(entry2.token);
+        const me = await deps.getMe(entry3.token);
         if (me.can_read_all_group_messages === true) counts.privacyOff += 1;
       } catch {
       }
-      for (const chatId of entry2.allowGroups ?? []) {
+      for (const chatId of entry3.allowGroups ?? []) {
         counts.groups += 1;
         try {
-          const m = await deps.getChatMember(entry2.token, chatId);
+          const m = await deps.getChatMember(entry3.token, chatId);
           if (typeof m.status === "string" && PRESENT_STATUSES.has(m.status)) counts.present += 1;
           else counts.absent += 1;
         } catch {
@@ -42261,14 +42394,14 @@ function buildChannelCensusLine(c) {
 async function runTelegramChannelCensus(accounts, deps) {
   const counts = { bots: 0, channels: 0, admin: 0, notAdmin: 0, noPostRight: 0 };
   for (const account of accounts) {
-    for (const entry2 of listBotEntries(account.telegram)) {
-      if (entry2.role !== "public") continue;
-      if ((entry2.channelPolicy ?? "disabled") !== "allowlist") continue;
+    for (const entry3 of listBotEntries(account.telegram)) {
+      if (entry3.role !== "public") continue;
+      if ((entry3.channelPolicy ?? "disabled") !== "allowlist") continue;
       counts.bots += 1;
-      for (const chatId of entry2.allowChannels ?? []) {
+      for (const chatId of entry3.allowChannels ?? []) {
         counts.channels += 1;
         try {
-          const m = await deps.getChatMember(entry2.token, chatId);
+          const m = await deps.getChatMember(entry3.token, chatId);
           if (typeof m.status === "string" && ADMIN_STATUSES.has(m.status)) {
             counts.admin += 1;
             if (m.status === "administrator" && m.can_post_messages !== true) {
@@ -42593,17 +42726,17 @@ function broadcastAdminShutdown(reason) {
   const done = encoder.encode(`data: [DONE]
 
 `);
-  for (const entry2 of activeAdminSSEControllers) {
+  for (const entry3 of activeAdminSSEControllers) {
     try {
-      entry2.controller.enqueue(frame);
+      entry3.controller.enqueue(frame);
     } catch {
     }
     try {
-      entry2.controller.enqueue(done);
+      entry3.controller.enqueue(done);
     } catch {
     }
     try {
-      entry2.controller.close();
+      entry3.controller.close();
     } catch {
     }
   }
@@ -42960,8 +43093,8 @@ var webchatFileFollowers = /* @__PURE__ */ new Map();
 async function fetchAccountStandingRules(accountId) {
   const session = getSession();
   try {
-    const res = await (0, import_dist17.resolveActiveRules)(session, accountId);
-    return { block: (0, import_dist17.formatStandingRulesBlock)(res.rules), ownerUserId: res.ownerUserId, source: res.source };
+    const res = await (0, import_dist18.resolveActiveRules)(session, accountId);
+    return { block: (0, import_dist18.formatStandingRulesBlock)(res.rules), ownerUserId: res.ownerUserId, source: res.source };
   } catch (err) {
     console.error(
       `[preference-inject] op=fetch-failed accountId=${accountId} error=${err instanceof Error ? err.message : String(err)}`
@@ -42997,6 +43130,7 @@ registerLoop({
   run: () => {
     const lines = parityCensusLines();
     for (const line of lines) console.error(line);
+    for (const line of cardCensusLines()) console.error(line);
     const missing = lines.filter((l) => !l.includes("missing=0")).length;
     return `${lines.length} session(s), ${missing} with a missing answer`;
   }
@@ -43533,15 +43667,15 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
       const entries2 = listBotEntries(a.config.telegram);
       for (const bot of readChannelAdmins(a.accountDir, "telegram").byBot) {
         if (!bot.adminUsers.includes(asNumber)) continue;
-        const entry2 = entries2.find((e) => e.id === bot.botId);
-        if (!entry2) continue;
+        const entry3 = entries2.find((e) => e.id === bot.botId);
+        if (!entry3) continue;
         hits.push({
           accountId: a.accountId,
           botId: bot.botId,
-          botToken: entry2.token,
+          botToken: entry3.token,
           // Task 2617 — read off the entry this resolver just chose, so the
           // outbound gate below decides on the same entry the token came from.
-          ...chatSendAllowlists(entry2)
+          ...chatSendAllowlists(entry3)
         });
       }
     }
@@ -44627,24 +44761,24 @@ registerLoop({
       const managed = accounts.flatMap((a) => {
         const bots = listBotEntries(a.telegram);
         const admin = bots.find((b) => b.role === "admin");
-        return bots.filter((e) => e.managed === true).map((entry2) => ({ entry: entry2, managingToken: admin?.token ?? null }));
+        return bots.filter((e) => e.managed === true).map((entry3) => ({ entry: entry3, managingToken: admin?.token ?? null }));
       });
       const probes2 = [];
-      for (const { entry: entry2, managingToken } of managed) {
+      for (const { entry: entry3, managingToken } of managed) {
         let webhookUrl = null;
         let isAccessRestricted = null;
         try {
-          webhookUrl = (await getTelegramWebhookInfo(entry2.token)).url;
+          webhookUrl = (await getTelegramWebhookInfo(entry3.token)).url;
         } catch {
         }
         if (managingToken) {
           try {
-            const got = await getManagedBotAccessSettings(managingToken, Number(entry2.id));
+            const got = await getManagedBotAccessSettings(managingToken, Number(entry3.id));
             if (got.ok) isAccessRestricted = got.isAccessRestricted;
           } catch {
           }
         }
-        probes2.push({ botId: entry2.id, webhookUrl, isAccessRestricted });
+        probes2.push({ botId: entry3.id, webhookUrl, isAccessRestricted });
       }
       console.error(buildManagedBotCensusLine({ accounts, probes: probes2 }));
     }