@rubytech/create-maxy-code 0.1.600 → 0.1.602

package/payload/server/server.js

@@ -71,6 +71,11 @@ import {
   vncLog,
   walkPremiumBundles
 } from "./chunk-MNN2RWJR.js";
+import {
+  audioExtension,
+  isAudioMime,
+  isVideoMime
+} from "./chunk-KUVNCAE4.js";
 import {
   ACCOUNTS_ROOT,
   DATA_ROOT,
@@ -210,13 +215,12 @@ import {
   storeMediaBuffer,
   storePublicAttachment,
   toWhatsappJid,
-  transcribe,
   validateAccountIdEnv,
   validateFilePathInAccount,
   waitForConnection,
   warnNonUuidAccount,
   writeChatMetadataMerged
-} from "./chunk-34FPJYHN.js";
+} from "./chunk-GI5AVCRG.js";
 import {
   ACCOUNTS_DIR,
   AGENT_SLUG_PATTERN,
@@ -282,6 +286,10 @@ import {
   verifyConversationOwnership,
   writeAdminUserAndPerson
 } from "./chunk-6AQYMT6C.js";
+import {
+  extractVideo,
+  transcribe
+} from "./chunk-CYU75QAV.js";
 import {
   D1_MAX_SQL_STATEMENT_BYTES,
   D1_QUERY_MAX_BODY_BYTES,
@@ -4252,6 +4260,74 @@ var TELEGRAM_CARD_TOOLS = /* @__PURE__ */ new Set([
   "mcp__telegram__telegram-card",
   "mcp__plugin_telegram_telegram__telegram-card"
 ]);
+var TELEGRAM_MEDIA_SEND_TOOLS = /* @__PURE__ */ new Set([
+  "mcp__telegram__telegram-media-send",
+  "mcp__plugin_telegram_telegram__telegram-media-send"
+]);
+var TELEGRAM_ASK_TOOLS = /* @__PURE__ */ new Set([
+  "mcp__telegram__telegram-ask",
+  "mcp__plugin_telegram_telegram__telegram-ask"
+]);
+var TELEGRAM_API_TOOLS = /* @__PURE__ */ new Set([
+  "mcp__telegram__telegram-api",
+  "mcp__plugin_telegram_telegram__telegram-api"
+]);
+var TELEGRAM_API_TRANSMIT_METHODS = /* @__PURE__ */ new Set(["sendMessage", "editMessageText"]);
+var TELEGRAM_SEND_TOOLS = /* @__PURE__ */ new Set([
+  ...TELEGRAM_CARD_TOOLS,
+  ...TELEGRAM_MEDIA_SEND_TOOLS,
+  ...TELEGRAM_ASK_TOOLS,
+  ...TELEGRAM_API_TOOLS
+]);
+function chatIdOf(value) {
+  if (typeof value === "string") return value;
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  return "";
+}
+function cardOutcome(text, isError) {
+  const v = /card-result: outcome=(\w+)/.exec(text)?.[1];
+  if (v === "edited" || v === "unchanged" || v === "sent") return v;
+  if (v === "none") return "failed";
+  return isError ? "failed" : "sent";
+}
+function pendingSendOf(name, input) {
+  const i = input ?? {};
+  if (TELEGRAM_CARD_TOOLS.has(name)) {
+    return {
+      kind: "telegram-card",
+      text: typeof i.text === "string" ? i.text : "",
+      buttons: parseCardButtonsFromInput(input),
+      chatId: chatIdOf(i.chatId),
+      ts: null
+    };
+  }
+  if (TELEGRAM_MEDIA_SEND_TOOLS.has(name) || TELEGRAM_ASK_TOOLS.has(name)) {
+    const kind = typeof i.kind === "string" ? i.kind : "";
+    const text = TELEGRAM_MEDIA_SEND_TOOLS.has(name) ? typeof i.caption === "string" ? i.caption : "" : typeof i.question === "string" ? i.question : "";
+    return {
+      kind: "telegram-send",
+      label: kind,
+      text,
+      chatId: chatIdOf(i.chatId),
+      edit: kind.startsWith("edit") || kind.startsWith("stop"),
+      ts: null
+    };
+  }
+  if (TELEGRAM_API_TOOLS.has(name)) {
+    const method = typeof i.method === "string" ? i.method : "";
+    if (!TELEGRAM_API_TRANSMIT_METHODS.has(method)) return null;
+    const params = i.params ?? {};
+    return {
+      kind: "telegram-send",
+      label: method,
+      text: typeof params.text === "string" ? params.text : "",
+      chatId: chatIdOf(params.chat_id),
+      edit: method === "editMessageText",
+      ts: null
+    };
+  }
+  return null;
+}
 function parseCardButtonsFromInput(input) {
   const rows = input?.buttons;
   if (!Array.isArray(rows)) return [];
@@ -4396,7 +4472,29 @@ function erroredToolUseIds(lines) {
   }
   return ids;
 }
-function assistantTurns(content, ts, promoteFinal = false, erroredIds = /* @__PURE__ */ new Set(), uuid) {
+function answeredToolUseIds(lines) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const line of lines) {
+    if (!line || line[0] !== "{" || !line.includes("tool_use_id")) continue;
+    let row;
+    try {
+      const parsed = JSON.parse(line);
+      if (!parsed || typeof parsed !== "object") continue;
+      row = parsed;
+    } catch {
+      continue;
+    }
+    const content = row.message?.content;
+    if (!Array.isArray(content)) continue;
+    for (const block of content) {
+      if (!block || typeof block !== "object") continue;
+      const b = block;
+      if (b.type === "tool_result" && typeof b.tool_use_id === "string") ids.add(b.tool_use_id);
+    }
+  }
+  return ids;
+}
+function assistantTurns(content, ts, promoteFinal = false, erroredIds = /* @__PURE__ */ new Set(), uuid, answeredIds = /* @__PURE__ */ new Set(), pending = /* @__PURE__ */ new Map(), fullRead = true) {
   if (!Array.isArray(content)) return [];
   const out = [];
   for (const block of content) {
@@ -4430,21 +4528,21 @@ function assistantTurns(content, ts, promoteFinal = false, erroredIds = /* @__PU
       } else {
         out.push({ kind: "agent-file", files, caption, ts });
       }
-    } else if (b.type === "tool_use" && typeof b.name === "string" && TELEGRAM_CARD_TOOLS.has(b.name)) {
-      const input = b.input ?? {};
-      out.push({
-        kind: "telegram-card",
-        text: typeof input.text === "string" ? input.text : "",
-        buttons: parseCardButtonsFromInput(b.input),
-        ts
-      });
+    } else if (b.type === "tool_use" && typeof b.name === "string" && TELEGRAM_SEND_TOOLS.has(b.name)) {
+      const send = pendingSendOf(b.name, b.input);
+      const id = typeof b.id === "string" ? b.id : null;
+      if (send !== null && id !== null && (answeredIds.has(id) || !fullRead)) {
+        pending.set(id, { ...send, ts });
+      } else {
+        out.push({ kind: "tool-call", name: b.name, input: b.input ?? null, ts });
+      }
     } else if (b.type === "tool_use" && typeof b.name === "string") {
       out.push({ kind: "tool-call", name: b.name, input: b.input ?? null, ts });
     }
   }
   return out;
 }
-function toolResultTurns(content, ts) {
+function toolResultTurns(content, ts, pending = /* @__PURE__ */ new Map()) {
   if (!Array.isArray(content)) return [];
   const out = [];
   for (const block of content) {
@@ -4455,6 +4553,15 @@ function toolResultTurns(content, ts) {
       (c) => c && typeof c === "object" && typeof c.text === "string" ? c.text : ""
     ).join("") : "";
     out.push({ kind: "tool-result", text, isError: b.is_error === true, ts });
+    const id = b.tool_use_id;
+    if (typeof id !== "string") continue;
+    const send = pending.get(id);
+    if (send === void 0) continue;
+    pending.delete(id);
+    const outcome = send.kind === "telegram-card" ? cardOutcome(text, b.is_error === true) : b.is_error === true ? "failed" : send.edit ? "edited" : "sent";
+    out.push(
+      send.kind === "telegram-card" ? { kind: "telegram-card", text: send.text, buttons: send.buttons, chatId: send.chatId, outcome, ts: send.ts } : { kind: "telegram-send", label: send.label, text: send.text, chatId: send.chatId, outcome, ts: send.ts }
+    );
   }
   return out;
 }
@@ -4479,9 +4586,11 @@ function renderOrSuppressChannelInbound(u, ts, out, queuedPendingSuppress, uuid,
     out.push(operatorInboundTurn(u, ts, uuid, census));
   }
 }
-function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(), turnCtx = {}) {
+function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(), turnCtx = {}, fullRead = true) {
   const out = [];
+  const pendingSends = turnCtx.pendingTelegramSends ??= /* @__PURE__ */ new Map();
   const erroredIds = erroredToolUseIds(lines);
+  const answeredIds = lines.some((l) => l.includes("telegram-")) ? answeredToolUseIds(lines) : /* @__PURE__ */ new Set();
   for (const line of lines) {
     if (!line || line[0] !== "{") continue;
     let row;
@@ -4505,7 +4614,7 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
       }
       const isEnd = msg?.stop_reason === "end_turn";
       const promoteFinal = isEnd && turnCtx.lastChannelSource !== void 0;
-      out.push(...assistantTurns(msg?.content, ts, promoteFinal, erroredIds, asString(row.uuid) ?? void 0));
+      out.push(...assistantTurns(msg?.content, ts, promoteFinal, erroredIds, asString(row.uuid) ?? void 0, answeredIds, pendingSends, fullRead));
       continue;
     }
     if (row.type === "queue-operation" && row.operation === "enqueue") {
@@ -4538,7 +4647,7 @@ function parseTranscript(lines, queuedPendingSuppress = /* @__PURE__ */ new Map(
       continue;
     }
     if (Array.isArray(msg.content)) {
-      out.push(...toolResultTurns(msg.content, ts));
+      out.push(...toolResultTurns(msg.content, ts, pendingSends));
       continue;
     }
     const text = asString(msg.content);
@@ -5650,48 +5759,6 @@ function logPublicAddress(slug, verdict) {
 import { writeFile, mkdtemp, rm } from "fs/promises";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join7 } from "path";
-
-// app/lib/stt/audio-mime.ts
-var AUDIO_MIME_TYPES = /* @__PURE__ */ new Set([
-  "audio/ogg",
-  "audio/opus",
-  "audio/webm",
-  "audio/mp4",
-  "audio/x-m4a",
-  "audio/mpeg",
-  "audio/wav",
-  "video/mp4"
-]);
-function normalizeMime(mimeType) {
-  return mimeType.split(";")[0].trim().toLowerCase();
-}
-function isAudioMime(mimeType) {
-  return AUDIO_MIME_TYPES.has(normalizeMime(mimeType));
-}
-function audioExtension(mimeType) {
-  switch (normalizeMime(mimeType)) {
-    case "audio/ogg":
-      return ".ogg";
-    case "audio/opus":
-      return ".opus";
-    case "audio/webm":
-      return ".webm";
-    case "audio/mp4":
-      return ".m4a";
-    case "audio/x-m4a":
-      return ".m4a";
-    case "audio/mpeg":
-      return ".mp3";
-    case "audio/wav":
-      return ".wav";
-    case "video/mp4":
-      return ".mp4";
-    default:
-      return ".audio";
-  }
-}
-
-// app/lib/stt/voice-note.ts
 var TAG4 = "[voice]";
 async function transcribeVoiceNote(file, source) {
   const startMs = Date.now();
@@ -7487,7 +7554,7 @@ async function defaultHttpGet(url) {
   }
 }
 async function defaultResolve(accountId) {
-  const { resolveSocket: resolveSocket2 } = await import("./manager-7BXVB76I.js");
+  const { resolveSocket: resolveSocket2 } = await import("./manager-VDHT3YYI.js");
   return resolveSocket2(accountId);
 }
 async function fetchAvatar(accountId, jid, deps = {}) {
@@ -15841,7 +15908,7 @@ data: ${JSON.stringify(obj)}
           const { lines, nextOffset } = splitNewLines(buf, offset);
           offset = nextOffset;
           let n = 0;
-          for (const turn of parseTranscript(lines, queuedPendingSuppress, turnCtx)) {
+          for (const turn of parseTranscript(lines, queuedPendingSuppress, turnCtx, false)) {
             send(controller, enrichAdminAttachments(enrichDownloads(turn, scratchpadRoot), sessionId), offset);
             actx.lastParentTurns.push(turn);
             if (turn.kind === "agent-error") {
@@ -16987,6 +17054,19 @@ async function authorizeAccountWrite(c, accountId) {
   return { ok: true, via: "session" };
 }
 
+// app/lib/video/webchat-video.ts
+var TAG26 = "[video]";
+async function extractWebchatVideo(file, extractImpl = extractVideo) {
+  if (!isVideoMime(file.mimeType)) return void 0;
+  try {
+    return await extractImpl(file.storagePath, file.mimeType);
+  } catch (err) {
+    const reason = err instanceof Error ? err.message : String(err);
+    console.error(`${TAG26} webchat extract failed error=${reason} path=${file.storagePath}`);
+    return void 0;
+  }
+}
+
 // ../lib/models/src/index.ts
 var OPUS_MODEL = "claude-opus-5[1m]";
 var SONNET_MODEL = "claude-sonnet-5";
@@ -17422,6 +17502,18 @@ async function reapplyLeversViaManager() {
 }
 var WEBCHAT_SEND_TURN_WINDOW_MS = Number(process.env.WEBCHAT_SEND_TURN_WINDOW_MS ?? String(15e3));
 var sendSeq = 0;
+var transcribingKeys = /* @__PURE__ */ new Map();
+function markTranscribing(key2) {
+  transcribingKeys.set(key2, (transcribingKeys.get(key2) ?? 0) + 1);
+}
+function clearTranscribing(key2) {
+  const left = (transcribingKeys.get(key2) ?? 1) - 1;
+  if (left > 0) transcribingKeys.set(key2, left);
+  else transcribingKeys.delete(key2);
+}
+function isTranscribing(key2) {
+  return (transcribingKeys.get(key2) ?? 0) > 0;
+}
 function createWebchatRoutes(deps) {
   const app81 = new Hono();
   app81.post("/send", requireAdminSession, async (c) => {
@@ -17532,13 +17624,17 @@ function createWebchatRoutes(deps) {
       deliveryKey = `session:${deliverySessionId}`;
       deliveryAccountId = bootstrapAccountId;
     }
+    let audioFile;
+    let kind = "files";
+    const stored = [];
+    const sendId = sendIdFromResolve ?? ++sendSeq;
     if (isMultipart) {
-      const kind = files.some((f) => isAudioMime(f.type)) ? "voice" : "files";
+      kind = files.some((f) => isAudioMime(f.type)) ? "voice" : "files";
       if (files.length > MAX_FILES_PER_MESSAGE) {
         console.error(`[webchat:inbound] op=send-refused kind=${kind} reason=too-many-files count=${files.length}`);
         return c.json({ error: `Maximum ${MAX_FILES_PER_MESSAGE} files per message.` }, 422);
       }
-      const audioFile = files.find((f) => isAudioMime(f.type));
+      audioFile = files.find((f) => isAudioMime(f.type));
       const regularFiles = files.filter((f) => !isAudioMime(f.type));
       for (const file of regularFiles) {
         try {
@@ -17552,7 +17648,6 @@ function createWebchatRoutes(deps) {
           return c.json({ error: detail }, 422);
         }
       }
-      const stored = [];
       if (audioFile) {
         if (audioFile.size > MAX_FILE_SIZE_BYTES) {
           console.error(`[webchat:inbound] op=send-refused kind=voice reason=oversize bytes=${audioFile.size}`);
@@ -17565,14 +17660,6 @@ function createWebchatRoutes(deps) {
           console.error(`[webchat:inbound] op=send-refused kind=voice reason=audio-store-failed detail=${detail}`);
           return c.json({ error: "failed to store voice recording" }, 500);
         }
-        const result = await transcribeVoiceNote(audioFile, "admin");
-        if (result.ok) {
-          text = text.length > 0 ? `${text}
-
-${result.result.text}` : result.result.text;
-        } else {
-          console.error(`[webchat:inbound] op=stt-failed kind=voice detail=${result.error}`);
-        }
       }
       try {
         for (const file of regularFiles) {
@@ -17588,51 +17675,87 @@ ${result.result.text}` : result.result.text;
         const ext = dot >= 0 ? s.filename.slice(dot).toLowerCase() : "";
         console.log(`[attach-ingest] mime=${s.mimeType} ext=${ext} converted=${!!s.readableTextPath} path=${s.storagePath}`);
       }
-      if (stored.length > 0) {
-        const listing = stored.map((s) => `${s.filename} (${s.readableTextPath ?? s.storagePath})`).join(", ");
-        const note = `[The operator uploaded ${stored.length} file(s): ${listing}]`;
-        text = text.length > 0 ? `${text}
-
-${note}` : note;
-      }
-      if (text.length === 0) {
+      if (text.length === 0 && stored.length === 0) {
         console.error(`[webchat:inbound] op=send-refused kind=${kind} reason=empty-text`);
         return c.json({ error: "text required" }, 400);
       }
-      console.log(`[webchat:inbound] op=send-parsed kind=${kind} files=${stored.length} bytes=${Buffer.byteLength(text, "utf8")}`);
-    }
-    if (target !== void 0 && await managerActivity(deliverySessionId) === "busy") {
-      console.log(`[webchat:inbound] op=queued-busy sessionId=${deliverySessionId.slice(0, 8)} key=${deliveryKey}`);
     }
-    const adminUserId = requesterUserId ?? void 0;
-    const inboundStartedAt = Date.now();
-    const sendId = sendIdFromResolve ?? ++sendSeq;
-    const replyContext = resolveQuoted(deliverySessionId, quotedUuid, sendId);
-    const inbound = await deps.handleInbound({
-      role: "admin",
-      accountId: deliveryAccountId,
-      key: deliveryKey,
-      text,
-      sessionId: deliverySessionId,
-      adminUserId,
-      ...replyContext ? { replyContext } : {}
-    });
-    const turnSessionId = deliverySessionId;
     const keyDisplay2 = deliveryKey.slice(0, "session:".length + 8);
-    const baseline = jsonlSizeBytes(locateSession(turnSessionId).projectDir, turnSessionId);
-    console.error(
-      `[webchat:inbound] op=send-accepted key=${keyDisplay2} sendId=${sendId} baselineBytes=${baseline ?? "absent"} acceptMs=${Date.now() - inboundStartedAt} spawn=${inbound.spawn !== null ? "triggered" : "none"}`
-    );
-    const turnTimer = setTimeout(() => {
-      const now = jsonlSizeBytes(locateSession(turnSessionId).projectDir, turnSessionId);
-      const grew = now !== null && (baseline === null || now > baseline);
-      if (grew) {
-        console.error(`[webchat:inbound] op=send-turned key=${keyDisplay2} sendId=${sendId} bytes=${now}`);
-      } else {
-        console.error(`[webchat:inbound] op=send-no-turn key=${keyDisplay2} sendId=${sendId} baselineBytes=${baseline ?? "absent"}`);
+    const completeSend = async () => {
+      if (isMultipart) {
+        if (audioFile) {
+          const result = await transcribeVoiceNote(audioFile, "admin");
+          if (result.ok) {
+            text = text.length > 0 ? `${text}
+
+${result.result.text}` : result.result.text;
+          } else {
+            console.error(`[webchat:inbound] op=stt-failed kind=voice detail=${result.error}`);
+          }
+        }
+        if (stored.length > 0) {
+          const listing = stored.map((s) => `${s.filename} (${s.readableTextPath ?? s.storagePath})`).join(", ");
+          const note = `[The operator uploaded ${stored.length} file(s): ${listing}]`;
+          text = text.length > 0 ? `${text}
+
+${note}` : note;
+        }
+        for (const s of stored) {
+          const timeline = await extractWebchatVideo(s);
+          if (timeline) text = `${text}
+
+${timeline}`;
+        }
+        console.log(`[webchat:inbound] op=send-parsed kind=${kind} files=${stored.length} bytes=${Buffer.byteLength(text, "utf8")}`);
       }
-    }, WEBCHAT_SEND_TURN_WINDOW_MS);
-    if (turnTimer.unref) turnTimer.unref();
+      if (target !== void 0 && await managerActivity(deliverySessionId) === "busy") {
+        console.log(`[webchat:inbound] op=queued-busy sessionId=${deliverySessionId.slice(0, 8)} key=${deliveryKey}`);
+      }
+      const adminUserId = requesterUserId ?? void 0;
+      const inboundStartedAt = Date.now();
+      const replyContext = resolveQuoted(deliverySessionId, quotedUuid, sendId);
+      const inbound = await deps.handleInbound({
+        role: "admin",
+        accountId: deliveryAccountId,
+        key: deliveryKey,
+        text,
+        sessionId: deliverySessionId,
+        adminUserId,
+        ...replyContext ? { replyContext } : {}
+      });
+      const turnSessionId = deliverySessionId;
+      const baseline = jsonlSizeBytes(locateSession(turnSessionId).projectDir, turnSessionId);
+      console.error(
+        `[webchat:inbound] op=send-accepted key=${keyDisplay2} sendId=${sendId} baselineBytes=${baseline ?? "absent"} acceptMs=${Date.now() - inboundStartedAt} spawn=${inbound.spawn !== null ? "triggered" : "none"}`
+      );
+      const turnTimer = setTimeout(() => {
+        const now = jsonlSizeBytes(locateSession(turnSessionId).projectDir, turnSessionId);
+        const grew = now !== null && (baseline === null || now > baseline);
+        if (grew) {
+          console.error(`[webchat:inbound] op=send-turned key=${keyDisplay2} sendId=${sendId} bytes=${now}`);
+        } else {
+          console.error(`[webchat:inbound] op=send-no-turn key=${keyDisplay2} sendId=${sendId} baselineBytes=${baseline ?? "absent"}`);
+        }
+      }, WEBCHAT_SEND_TURN_WINDOW_MS);
+      if (turnTimer.unref) turnTimer.unref();
+    };
+    const deferred = audioFile !== void 0 || stored.some((s) => isVideoMime(s.mimeType));
+    if (deferred) {
+      markTranscribing(deliveryKey);
+      notify("webchat-pointer", deliveryAccountId);
+      const stagedBytes = stored.reduce((n, s) => n + s.sizeBytes, 0);
+      console.log(`[webchat:inbound] op=send-staged kind=${kind} key=${keyDisplay2} bytes=${stagedBytes}`);
+      void completeSend().catch((err) => {
+        const detail = err instanceof Error ? err.message : String(err);
+        console.error(`[webchat:inbound] op=send-continuation-failed key=${keyDisplay2} detail=${detail}`);
+        deps.markDeliveryFailure?.(deliveryKey, `send-${sendId}`);
+      }).finally(() => {
+        clearTranscribing(deliveryKey);
+        notify("webchat-pointer", deliveryAccountId);
+      });
+      return c.json({ ok: true, transcribing: true });
+    }
+    await completeSend();
     return c.json({ ok: true });
   });
   app81.post("/interrupt", requireAdminSession, async (c) => {
@@ -17742,7 +17865,7 @@ ${note}` : note;
       }
       const known = resolvedProjectDir !== null || sessionSidecarExists(target);
       const indicators2 = await fetchComposerIndicators(target);
-      return c.json({ sessionId: target, projectDir: resolvedProjectDir, transcriptSessionId, channelBinding: conflictingBinding(channel), known, sizeBytes: jsonlSizeBytes(projectDir2, target), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${target}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${target}`) ?? null, ...indicators2, ...readLevers(scopeAccountId ? validateAccountId2(scopeAccountId) : null) });
+      return c.json({ sessionId: target, projectDir: resolvedProjectDir, transcriptSessionId, channelBinding: conflictingBinding(channel), known, sizeBytes: jsonlSizeBytes(projectDir2, target), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${target}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${target}`) ?? null, transcribing: isTranscribing(`session:${target}`), ...indicators2, ...readLevers(scopeAccountId ? validateAccountId2(scopeAccountId) : null) });
     }
     const account = scopeAccountId ? validateAccountId2(scopeAccountId) : null;
     const { sessionId, source } = resolveCanonical(accountId, account?.accountDir ?? null, requesterUserId, primaryUserId, scopeAccountId, multiAccount);
@@ -17770,7 +17893,7 @@ ${note}` : note;
       }
     }
     const indicators = await fetchComposerIndicators(sessionId);
-    return c.json({ sessionId, projectDir, source, sizeBytes: jsonlSizeBytes(projectDir, sessionId), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${sessionId}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${sessionId}`) ?? null, ...indicators, ...readLevers(account) });
+    return c.json({ sessionId, projectDir, source, sizeBytes: jsonlSizeBytes(projectDir, sessionId), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${sessionId}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${sessionId}`) ?? null, transcribing: isTranscribing(`session:${sessionId}`), ...indicators, ...readLevers(account) });
   });
   app81.post("/permission-verdict", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
@@ -18997,7 +19120,7 @@ function routeTelegramUpdate(input) {
 // app/lib/telegram/inbound/media.ts
 var import_dist5 = __toESM(require_dist4(), 1);
 import { join as join37 } from "path";
-var TAG26 = "[telegram-inbound]";
+var TAG27 = "[telegram-inbound]";
 var TELEGRAM_MEDIA_DIR = "/tmp/maxy-media";
 var DOWNLOAD_TIMEOUT_MS = 45e3;
 async function downloadTelegramMedia(input) {
@@ -19046,7 +19169,7 @@ async function downloadTelegramMedia(input) {
       result = { ...base, failure: err instanceof Error ? err.message : String(err) };
     }
     console.error(
-      `${TAG26} op=media-download botId=${input.botId} type=${item.type} ok=${result.path ? "yes" : "no"} bytes=${bytes} path=${result.path ?? "-"} reason=${result.failure ?? "-"}`
+      `${TAG27} op=media-download botId=${input.botId} type=${item.type} ok=${result.path ? "yes" : "no"} bytes=${bytes} path=${result.path ?? "-"} reason=${result.failure ?? "-"}`
     );
     out.push(result);
   }
@@ -19056,7 +19179,7 @@ async function downloadTelegramMedia(input) {
 // app/lib/telegram/inbound/servable.ts
 import { readFile as readFile6 } from "fs/promises";
 import { basename as basename12 } from "path";
-var TAG27 = "[telegram-inbound]";
+var TAG28 = "[telegram-inbound]";
 async function storeTelegramServable(input) {
   const out = [];
   for (const [index, item] of input.media.entries()) {
@@ -19070,12 +19193,12 @@ async function storeTelegramServable(input) {
       }
       out.push(attachmentId);
       console.error(
-        `${TAG27} op=servable-store ok=true type=${item.type} id=${attachmentId}`
+        `${TAG28} op=servable-store ok=true type=${item.type} id=${attachmentId}`
       );
     } catch (err) {
       const reason = err instanceof Error ? err.message : String(err);
       console.error(
-        `${TAG27} op=servable-store ok=false type=${item.type} id=${attachmentId} reason=${reason.slice(0, 100)}`
+        `${TAG28} op=servable-store ok=false type=${item.type} id=${attachmentId} reason=${reason.slice(0, 100)}`
       );
     }
   }
@@ -19083,7 +19206,7 @@ async function storeTelegramServable(input) {
 }
 
 // app/lib/telegram/inbound/transcribe.ts
-var TAG28 = "[telegram-inbound]";
+var TAG29 = "[telegram-inbound]";
 async function transcribeTelegramAudio(input) {
   const doTranscribe = input.transcribeImpl ?? transcribe;
   const out = [];
@@ -19095,7 +19218,7 @@ async function transcribeTelegramAudio(input) {
     }
     if (!m.path) {
       console.error(
-        `${TAG28} op=transcribe botId=${input.botId} ok=no chars=0 ms=0 reason=${m.failure ?? "no local file"}`
+        `${TAG29} op=transcribe botId=${input.botId} ok=no chars=0 ms=0 reason=${m.failure ?? "no local file"}`
       );
       out.push(m);
       continue;
@@ -19112,7 +19235,7 @@ async function transcribeTelegramAudio(input) {
       reason = err instanceof Error ? err.message : String(err);
     }
     console.error(
-      `${TAG28} op=transcribe botId=${input.botId} ok=${heard ? "yes" : "no"} chars=${heard?.length ?? 0} ms=${Date.now() - startedMs} reason=${reason}`
+      `${TAG29} op=transcribe botId=${input.botId} ok=${heard ? "yes" : "no"} chars=${heard?.length ?? 0} ms=${Date.now() - startedMs} reason=${reason}`
     );
     if (heard) {
       transcripts.push(heard);
@@ -19129,6 +19252,33 @@ async function transcribeTelegramAudio(input) {
 ${body}` : body, media: out };
 }
 
+// app/lib/telegram/inbound/video.ts
+var TAG30 = "[telegram-inbound]";
+async function extractTelegramVideo(input) {
+  const doExtract = input.extractImpl ?? extractVideo;
+  const out = [];
+  for (const m of input.media) {
+    if (m.type !== "video" || !m.path) {
+      out.push(m);
+      continue;
+    }
+    const startedMs = Date.now();
+    let timeline;
+    let reason = "-";
+    try {
+      timeline = await doExtract(m.path, m.mimetype ?? "");
+      if (!timeline) reason = "no timeline returned";
+    } catch (err) {
+      reason = err instanceof Error ? err.message : String(err);
+    }
+    console.error(
+      `${TAG30} op=video-extract botId=${input.botId} ok=${timeline ? "yes" : "no"} chars=${timeline?.length ?? 0} ms=${Date.now() - startedMs} reason=${reason}`
+    );
+    out.push(timeline ? { ...m, timeline } : m);
+  }
+  return { media: out };
+}
+
 // app/lib/telegram/gateway/telegram-inbound-census.ts
 var ANSWER_THRESHOLD_MS = 3e4;
 var GAP_NAME_LIMIT2 = 10;
@@ -19571,7 +19721,7 @@ async function visitStatusSet(p) {
 }
 
 // app/lib/telegram/dispatch/press.ts
-var TAG29 = "[dispatch-tg]";
+var TAG31 = "[dispatch-tg]";
 function logValue(v) {
   return v.replace(/[\r\n]+/g, " ");
 }
@@ -19632,12 +19782,12 @@ async function handleDispatchPress(p) {
 status: ${status}`;
     const done = await p.edit(p.token, p.chatId, p.messageId, text, toBotApiKeyboard(kb.rows));
     p.emit(
-      `${TAG29} op=card-redrawn visitId=${logVisitId} messageId=${p.messageId} buttons=${kb.rows.flat().length} drawnFor=${logValue(status)}` + (done.ok ? "" : ` editError="${logValue(done.error ?? "unknown")}"`)
+      `${TAG31} op=card-redrawn visitId=${logVisitId} messageId=${p.messageId} buttons=${kb.rows.flat().length} drawnFor=${logValue(status)}` + (done.ok ? "" : ` editError="${logValue(done.error ?? "unknown")}"`)
     );
   };
   if (visit.status !== parsed.drawnFor) {
     p.emit(
-      `${TAG29} op=callback-stale updateId=${u} visitId=${logVisitId} expected=${logDrawnFor} actual=${logValue(visit.status)}`
+      `${TAG31} op=callback-stale updateId=${u} visitId=${logVisitId} expected=${logDrawnFor} actual=${logValue(visit.status)}`
     );
     await redraw(visit.status);
     return {
@@ -19664,7 +19814,7 @@ status: ${status}`;
     return { kind: "refused", reason: out.reason, answer: out.message };
   }
   p.emit(
-    `${TAG29} op=callback-applied updateId=${u} visitId=${logVisitId} from=${logValue(out.value.from)} to=${logValue(out.value.to)} tool=dispatch-visit-status-set ms=${Date.now() - startedAt}`
+    `${TAG31} op=callback-applied updateId=${u} visitId=${logVisitId} from=${logValue(out.value.from)} to=${logValue(out.value.to)} tool=dispatch-visit-status-set ms=${Date.now() - startedAt}`
   );
   await redraw(out.value.to);
   return {
@@ -19691,7 +19841,7 @@ async function bindChatToVisit(p) {
 }
 
 // app/lib/telegram/dispatch/location.ts
-var TAG30 = "[dispatch-tg]";
+var TAG32 = "[dispatch-tg]";
 async function handleDispatchLocation(p) {
   const bound = await bindChatToVisit({
     session: p.session,
@@ -19708,7 +19858,7 @@ async function handleDispatchLocation(p) {
     at: { latitude: p.latitude, longitude: p.longitude }
   });
   p.emit(
-    `${TAG30} op=location-update visitId=${bound.visit.visitId} workerId=${bound.worker.workerId} distanceM=${v.distanceM ?? "none"} inside=${v.inside} siteHasCoords=${v.siteHasCoords} radiusM=${v.radiusM ?? "none"}`
+    `${TAG32} op=location-update visitId=${bound.visit.visitId} workerId=${bound.worker.workerId} distanceM=${v.distanceM ?? "none"} inside=${v.inside} siteHasCoords=${v.siteHasCoords} radiusM=${v.radiusM ?? "none"}`
   );
   if (!v.siteHasCoords) return { kind: "no-coords" };
   if (v.radiusM === null) return { kind: "no-radius" };
@@ -19726,12 +19876,12 @@ async function handleDispatchLocation(p) {
   });
   if (!rec.ok) {
     p.emit(
-      `${TAG30} op=geofence-refused visitId=${bound.visit.visitId} workerId=${bound.worker.workerId} distanceM=${v.distanceM} reason=${rec.reason}`
+      `${TAG32} op=geofence-refused visitId=${bound.visit.visitId} workerId=${bound.worker.workerId} distanceM=${v.distanceM} reason=${rec.reason}`
     );
     return { kind: "not-recorded" };
   }
   p.emit(
-    `${TAG30} op=geofence-enter visitId=${bound.visit.visitId} observedAt=${observedAt} distanceM=${v.distanceM} pressedAt=${bound.visit.arrivedPressedAt ?? "none"}`
+    `${TAG32} op=geofence-enter visitId=${bound.visit.visitId} observedAt=${observedAt} distanceM=${v.distanceM} pressedAt=${bound.visit.arrivedPressedAt ?? "none"}`
   );
   return { kind: "recorded" };
 }
@@ -19763,7 +19913,7 @@ function readTgActivity(accountId) {
 }
 
 // app/lib/telegram/dispatch/media.ts
-var TAG31 = "[dispatch-tg]";
+var TAG33 = "[dispatch-tg]";
 async function handleDispatchMedia(p) {
   const bound = await bindChatToVisit({
     session: p.session,
@@ -19774,14 +19924,14 @@ async function handleDispatchMedia(p) {
   if (bound.kind !== "bound") {
     const tell = bound.kind === "no-open-visit" ? `You have no open ${p.cfg.vocabulary.visit}, so I have kept this in the chat. Open one and send it again.` : bound.kind === "many-open-visits" ? `You have ${bound.visits.length} open ${p.cfg.vocabulary.visit}s, so I have kept this in the chat rather than guessing. Open the one you mean in the job sheet and send it there.` : null;
     p.emit(
-      `${TAG31} op=unbound-inbound chatId=${p.telegramUserId} kind=${p.kind} reason=${bound.kind} told=${tell !== null}`
+      `${TAG33} op=unbound-inbound chatId=${p.telegramUserId} kind=${p.kind} reason=${bound.kind} told=${tell !== null}`
     );
     return { kind: "unattached", reason: bound.kind, tell };
   }
   const visitId = bound.visit.visitId;
   if (p.kind === "voice") {
     p.emit(
-      `${TAG31} op=voice-received visitId=${visitId} durationS=${p.durationS ?? "none"} bytes=${p.bytes ?? "none"}`
+      `${TAG33} op=voice-received visitId=${visitId} durationS=${p.durationS ?? "none"} bytes=${p.bytes ?? "none"}`
     );
     noteVoiceReceived(p.accountId, visitId);
     if (p.transcript === null || p.transcript.length === 0) {
@@ -19801,7 +19951,7 @@ async function handleDispatchMedia(p) {
       note: p.transcript
     });
     p.emit(
-      `${TAG31} op=voice-transcribed visitId=${visitId} chars=${p.transcript.length} ms=${Date.now() - startedAt}`
+      `${TAG33} op=voice-transcribed visitId=${visitId} chars=${p.transcript.length} ms=${Date.now() - startedAt}`
     );
     noteVoiceTranscribed(p.accountId, visitId);
     return { kind: "note", visitId };
@@ -19821,14 +19971,14 @@ async function handleDispatchMedia(p) {
     visitId,
     mediaRef: p.path
   });
-  p.emit(`${TAG31} op=media-attached visitId=${visitId} kind=${p.kind} path=${p.path}`);
+  p.emit(`${TAG33} op=media-attached visitId=${visitId} kind=${p.kind} path=${p.path}`);
   return { kind: "media", visitId };
 }
 
 // app/lib/telegram/live-location.ts
 import { existsSync as existsSync26, mkdirSync as mkdirSync6, readFileSync as readFileSync30, readdirSync as readdirSync20, statSync as statSync19, writeFileSync as writeFileSync13 } from "fs";
 import { join as join38 } from "path";
-var TAG32 = "[telegram-inbound]";
+var TAG34 = "[telegram-inbound]";
 var LIVE_LOCATION_FILE = "telegram-live-location.json";
 var LIVE_LOCATION_CENSUS_TAG = "[telegram-live-location-census]";
 function liveLocationKey(botId, senderId) {
@@ -19864,12 +20014,12 @@ function writeLiveLocation(input) {
   const livePeriodS = input.livePeriodS ?? stored[key2]?.livePeriodS ?? null;
   if (livePeriodS === null) {
     emit(
-      `${TAG32} op=live-location op=skipped-write senderId=${senderId} botId=${botId} reason=no-live-period`
+      `${TAG34} op=live-location op=skipped-write senderId=${senderId} botId=${botId} reason=no-live-period`
     );
     return { written: false, reason: "no-live-period" };
   }
   if (input.atS === null) {
-    emit(`${TAG32} op=live-location op=skipped-write senderId=${senderId} botId=${botId} reason=no-date`);
+    emit(`${TAG34} op=live-location op=skipped-write senderId=${senderId} botId=${botId} reason=no-date`);
     return { written: false, reason: "no-date" };
   }
   const next = {
@@ -19887,7 +20037,7 @@ function writeLiveLocation(input) {
   mkdirSync6(accountDir, { recursive: true });
   writeFileSync13(path, JSON.stringify(kept, null, 2) + "\n", "utf-8");
   emit(
-    `${TAG32} op=live-location op=updated senderId=${senderId} botId=${botId} ageMs=${now - next.at} livePeriodS=${livePeriodS}`
+    `${TAG34} op=live-location op=updated senderId=${senderId} botId=${botId} ageMs=${now - next.at} livePeriodS=${livePeriodS}`
   );
   return { written: true };
 }
@@ -19931,7 +20081,7 @@ function liveLocationCensusLine(accountsRoot, now) {
 // app/lib/telegram/business-connection.ts
 import { existsSync as existsSync27, mkdirSync as mkdirSync7, readFileSync as readFileSync31, writeFileSync as writeFileSync14 } from "fs";
 import { join as join39 } from "path";
-var TAG33 = "[telegram-inbound]";
+var TAG35 = "[telegram-inbound]";
 var BUSINESS_CONNECTION_FILE = "telegram-business-connection.json";
 function truncateConnectionId(id) {
   return `${id.slice(0, 6)}\u2026`;
@@ -19964,7 +20114,7 @@ function writeBusinessConnection(input) {
   const canReply = rights?.can_reply === true;
   const say = (stored, reason) => {
     emit(
-      `${TAG33} op=business-connection botId=${botId} connectionId=${id === null ? "none" : truncateConnectionId(id)} userId=${userId ?? "none"} isEnabled=${isEnabled} canReply=${canReply} stored=${stored} reason=${reason}`
+      `${TAG35} op=business-connection botId=${botId} connectionId=${id === null ? "none" : truncateConnectionId(id)} userId=${userId ?? "none"} isEnabled=${isEnabled} canReply=${canReply} stored=${stored} reason=${reason}`
     );
   };
   if (id === null) {
@@ -20043,7 +20193,7 @@ async function editTelegramMessage(botToken, chatId, messageId, text, keyboard)
 }
 
 // server/routes/telegram.ts
-var TAG34 = "[telegram-inbound]";
+var TAG36 = "[telegram-inbound]";
 var PROVISION_TAG = "[telegram-provision]";
 function entryActive(entry3, accountDir, botId, noteSpecialist) {
   if (entry3.role === "admin") return true;
@@ -20053,7 +20203,7 @@ function entryActive(entry3, accountDir, botId, noteSpecialist) {
     noteSpecialist?.(rosterValid);
     if (rosterValid) return true;
     console.error(
-      `${TAG34} op=specialist-refused botId=${botId} specialist=${logValue2(entry3.specialist)} reason=specialist-unknown`
+      `${TAG36} op=specialist-refused botId=${botId} specialist=${logValue2(entry3.specialist)} reason=specialist-unknown`
     );
     return false;
   }
@@ -20104,13 +20254,13 @@ function accountConfig(accountDir) {
 function raiseChannelTurn(input) {
   if (!input.active) {
     console.error(
-      `${TAG34} op=reject reason=agent-inactive botId=${input.botId} agent=${input.agentSlug}`
+      `${TAG36} op=reject reason=agent-inactive botId=${input.botId} agent=${input.agentSlug}`
     );
     return;
   }
   const gateway = getTelegramGateway();
   if (!gateway) {
-    console.error(`${TAG34} op=reply-dropped botId=${input.botId} reason=gateway-not-ready`);
+    console.error(`${TAG36} op=reply-dropped botId=${input.botId} reason=gateway-not-ready`);
     return;
   }
   const reply = async (replyText) => {
@@ -20131,8 +20281,8 @@ function raiseChannelTurn(input) {
         origin: "agent",
         createdAt: at
       });
-      console.error(`${TAG34} op=reply-sent botId=${input.botId} ok=true`);
-    } else console.error(`${TAG34} op=reply-dropped botId=${input.botId} reason=${sent.error}`);
+      console.error(`${TAG36} op=reply-sent botId=${input.botId} ok=true`);
+    } else console.error(`${TAG36} op=reply-dropped botId=${input.botId} reason=${sent.error}`);
   };
   void gateway.handleInbound({
     accountId: input.accountId,
@@ -20157,34 +20307,34 @@ var app11 = new Hono();
 app11.post("/", async (c) => {
   const botId = c.req.query("bot");
   if (!botId) {
-    console.error(`${TAG34} op=reject reason=missing-bot-param`);
+    console.error(`${TAG36} op=reject reason=missing-bot-param`);
     return c.json({ ok: false }, 400);
   }
-  console.error(`${TAG34} op=received botId=${botId} path=/api/telegram/`);
+  console.error(`${TAG36} op=received botId=${botId} path=/api/telegram/`);
   const resolved = resolveBotEntry(listValidAccounts(), botId);
   if (resolved.kind === "none") {
-    console.error(`${TAG34} op=reject reason=unknown-bot botId=${botId}`);
+    console.error(`${TAG36} op=reject reason=unknown-bot botId=${botId}`);
     return c.json({ ok: false }, 401);
   }
   if (resolved.kind === "duplicate") {
-    console.error(`${TAG34} op=reject reason=duplicate-bot-id botId=${botId} accounts=${resolved.count}`);
+    console.error(`${TAG36} op=reject reason=duplicate-bot-id botId=${botId} accounts=${resolved.count}`);
     return c.json({ ok: false }, 401);
   }
   const { accountId, accountDir, entry: entry3 } = resolved;
   const agentSlug = entryAgentSlug(entry3);
-  console.error(`${TAG34} op=entry botId=${botId} accountId=${accountId} role=${entry3.role} agent=${agentSlug}`);
+  console.error(`${TAG36} op=entry botId=${botId} accountId=${accountId} role=${entry3.role} agent=${agentSlug}`);
   const sp = secretPath(botId);
   if (!existsSync28(sp)) {
-    console.error(`${TAG34} op=secret botId=${botId} result=missing-file`);
+    console.error(`${TAG36} op=secret botId=${botId} result=missing-file`);
     return c.json({ ok: false }, 401);
   }
   const expected = readFileSync32(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
-    console.error(`${TAG34} op=secret botId=${botId} result=mismatch`);
+    console.error(`${TAG36} op=secret botId=${botId} result=mismatch`);
     return c.json({ ok: false }, 401);
   }
-  console.error(`${TAG34} op=secret botId=${botId} result=ok`);
+  console.error(`${TAG36} op=secret botId=${botId} result=ok`);
   let update;
   try {
     update = await c.req.json();
@@ -20193,7 +20343,7 @@ app11.post("/", async (c) => {
   }
   const shape = describeTelegramUpdate(update);
   console.error(
-    `${TAG34} op=inbound-kind botId=${botId} update=${shape.envelope} content=${shape.content} chatType=${shape.chatType} isEdit=${shape.isEdit ? "yes" : "no"}`
+    `${TAG36} op=inbound-kind botId=${botId} update=${shape.envelope} content=${shape.content} chatType=${shape.chatType} isEdit=${shape.isEdit ? "yes" : "no"}`
   );
   if (update.business_connection) {
     writeBusinessConnection({
@@ -20207,13 +20357,13 @@ app11.post("/", async (c) => {
   if (shape.chatType === "group" || shape.chatType === "supergroup") {
     const allowlisted = entry3.role === "public" && (entry3.groupPolicy ?? "disabled") === "allowlist" && shape.chatId !== null && (entry3.allowGroups ?? []).includes(shape.chatId);
     console.error(
-      `${TAG34} op=group-inbound botId=${botId} chatType=${shape.chatType} chatId=${shape.chatId ?? "none"} senderId=${shape.senderId ?? "none"} threadId=${shape.threadId ?? "none"} allowlisted=${allowlisted ? "yes" : "no"}`
+      `${TAG36} op=group-inbound botId=${botId} chatType=${shape.chatType} chatId=${shape.chatId ?? "none"} senderId=${shape.senderId ?? "none"} threadId=${shape.threadId ?? "none"} allowlisted=${allowlisted ? "yes" : "no"}`
     );
   }
   if (shape.chatType === "channel") {
     const allowlisted = entry3.role === "public" && (entry3.channelPolicy ?? "disabled") === "allowlist" && shape.chatId !== null && (entry3.allowChannels ?? []).includes(shape.chatId);
     console.error(
-      `${TAG34} op=channel-post botId=${botId} chatId=${shape.chatId ?? "none"} messageId=${shape.messageId ?? "none"} senderChat=${shape.senderChat ?? "none"} isEdit=${shape.isEdit ? "yes" : "no"} allowlisted=${allowlisted ? "yes" : "no"}`
+      `${TAG36} op=channel-post botId=${botId} chatId=${shape.chatId ?? "none"} messageId=${shape.messageId ?? "none"} senderChat=${shape.senderChat ?? "none"} isEdit=${shape.isEdit ? "yes" : "no"} allowlisted=${allowlisted ? "yes" : "no"}`
     );
   }
   const hostBots = update.managed_bot ? listBotEntries(accountConfig(accountDir).telegram) : [];
@@ -20234,56 +20384,56 @@ app11.post("/", async (c) => {
   decision.kind === "managed-bot" && decision.authorised && decision.event === "created";
   noteInboundKind(shape.primaryKind, raisesTurn, shape.envelope);
   if (decision.kind === "ignore") {
-    console.error(`${TAG34} op=ignore botId=${botId} reason=${decision.reason}`);
+    console.error(`${TAG36} op=ignore botId=${botId} reason=${decision.reason}`);
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "denied") {
     if (decision.reason === "admin-entry-no-groups" || decision.reason === "not-in-allowGroups" || decision.reason === "group-policy-disabled") {
       console.error(
-        `${TAG34} op=group-refused botId=${botId} chatId=${shape.chatId ?? "none"} reason=${decision.reason}`
+        `${TAG36} op=group-refused botId=${botId} chatId=${shape.chatId ?? "none"} reason=${decision.reason}`
       );
     }
     if (decision.reason === "admin-entry-no-channels" || decision.reason === "specialist-entry-no-channels" || decision.reason === "unbound-entry-no-channels" || decision.reason === "not-in-allowChannels" || decision.reason === "channel-policy-disabled") {
       console.error(
-        `${TAG34} op=channel-refused botId=${botId} chatId=${shape.chatId ?? "none"} reason=${decision.reason}`
+        `${TAG36} op=channel-refused botId=${botId} chatId=${shape.chatId ?? "none"} reason=${decision.reason}`
       );
     }
-    console.error(`${TAG34} op=access botId=${botId} senderId=- allowed=false reason=${decision.reason}`);
+    console.error(`${TAG36} op=access botId=${botId} senderId=- allowed=false reason=${decision.reason}`);
     if (entry3.role === "specialist") {
       console.error(
-        `${TAG34} op=specialist-refused botId=${botId} specialist=${logValue2(entry3.specialist)} reason=${decision.reason}`
+        `${TAG36} op=specialist-refused botId=${botId} specialist=${logValue2(entry3.specialist)} reason=${decision.reason}`
       );
     }
     return c.json({ ok: true }, 200);
   }
   if (!isBindableEntry(entry3)) {
-    console.error(`${TAG34} op=ignore botId=${botId} reason=bot-unbound`);
+    console.error(`${TAG36} op=ignore botId=${botId} reason=bot-unbound`);
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "chat-member") {
     console.error(
-      `${TAG34} op=chat-member-group botId=${botId} chatId=${decision.chatId} userId=${decision.userId || "none"} status=${logValue2(decision.status)}`
+      `${TAG36} op=chat-member-group botId=${botId} chatId=${decision.chatId} userId=${decision.userId || "none"} status=${logValue2(decision.status)}`
     );
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "recorded") {
     console.error(
-      `${TAG34} op=recorded botId=${botId} envelope=${decision.envelope} chatId=${decision.chatId ?? "none"} messageId=${decision.messageId ?? "none"}`
+      `${TAG36} op=recorded botId=${botId} envelope=${decision.envelope} chatId=${decision.chatId ?? "none"} messageId=${decision.messageId ?? "none"}`
     );
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "comment-root") {
     console.error(
-      `${TAG34} op=channel-comment-root botId=${botId} groupChatId=${decision.groupChatId} rootMessageId=${decision.rootMessageId} channelChatId=${decision.channelChatId}`
+      `${TAG36} op=channel-comment-root botId=${botId} groupChatId=${decision.groupChatId} rootMessageId=${decision.rootMessageId} channelChatId=${decision.channelChatId}`
     );
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "callback") {
     console.error(
-      `${TAG34} op=callback-received botId=${botId} callbackId=${decision.callbackId} chatId=${decision.chatId} messageId=${decision.messageId ?? "none"} data=${decision.data === null ? "none" : logValue2(decision.data)}`
+      `${TAG36} op=callback-received botId=${botId} callbackId=${decision.callbackId} chatId=${decision.chatId} messageId=${decision.messageId ?? "none"} data=${decision.data === null ? "none" : logValue2(decision.data)}`
     );
     console.error(
-      `${TAG34} op=callback-authorised botId=${botId} senderId=${decision.senderId} allowed=${decision.allowed} reason=${decision.reason}`
+      `${TAG36} op=callback-authorised botId=${botId} senderId=${decision.senderId} allowed=${decision.allowed} reason=${decision.reason}`
     );
     const cbSubject = telegramConversationSubject(decision.chatType, decision.chatId, decision.senderId);
     if (decision.allowed) {
@@ -20296,7 +20446,7 @@ app11.post("/", async (c) => {
           cbBody = label;
         } else {
           console.error(
-            `${TAG34} op=button-label-miss botId=${botId} chatId=${decision.chatId} data=${logValue2(decision.data)}`
+            `${TAG36} op=button-label-miss botId=${botId} chatId=${decision.chatId} data=${logValue2(decision.data)}`
           );
         }
       }
@@ -20357,11 +20507,11 @@ app11.post("/", async (c) => {
     const answered4 = await answerTelegramCallback(entry3.token, decision.callbackId, answerText);
     const outcome = !answered4.ok ? "error" : decision.allowed ? "stored" : "refused";
     console.error(
-      `${TAG34} op=callback-answered botId=${botId} callbackId=${decision.callbackId} ms=${Date.now() - answerStartedAt} outcome=${outcome}${answered4.error ? ` error=${logValue2(answered4.error)}` : ""}`
+      `${TAG36} op=callback-answered botId=${botId} callbackId=${decision.callbackId} ms=${Date.now() - answerStartedAt} outcome=${outcome}${answered4.error ? ` error=${logValue2(answered4.error)}` : ""}`
     );
     if (decision.allowed && parseDispatchCallback(decision.data) === null) {
       const cbActive = entryActive(entry3, accountDir, botId);
-      console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${cbActive}`);
+      console.error(`${TAG36} op=agent botId=${botId} slug=${agentSlug} active=${cbActive}`);
       raiseChannelTurn({
         accountId,
         accountDir,
@@ -20388,10 +20538,10 @@ app11.post("/", async (c) => {
   if (decision.kind === "poll") {
     const options = decision.optionIds.length > 0 ? decision.optionIds.join(",") : "retracted";
     console.error(
-      `${TAG34} op=poll-received botId=${botId} updateId=${decision.updateId ?? "none"} senderId=${decision.senderId} pollId=${logValue2(decision.pollId)} options=${options}`
+      `${TAG36} op=poll-received botId=${botId} updateId=${decision.updateId ?? "none"} senderId=${decision.senderId} pollId=${logValue2(decision.pollId)} options=${options}`
     );
     console.error(
-      `${TAG34} op=poll-authorised botId=${botId} senderId=${decision.senderId} allowed=${decision.allowed} reason=${decision.reason}`
+      `${TAG36} op=poll-authorised botId=${botId} senderId=${decision.senderId} allowed=${decision.allowed} reason=${decision.reason}`
     );
     if (!decision.allowed) return c.json({ ok: true }, 200);
     const pollKey = telegramChannelKey(botId, decision.senderId);
@@ -20414,7 +20564,7 @@ app11.post("/", async (c) => {
       createdAt: pollAt
     });
     const pollActive = entryActive(entry3, accountDir, botId);
-    console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${pollActive}`);
+    console.error(`${TAG36} op=agent botId=${botId} slug=${agentSlug} active=${pollActive}`);
     raiseChannelTurn({
       accountId,
       accountDir,
@@ -20440,10 +20590,10 @@ app11.post("/", async (c) => {
     const quotedBody = findInboundBody(accountId, rKey, decision.messageId);
     const shown = decision.newReaction.length > 0 ? decision.newReaction.join(",") : "none";
     console.error(
-      `${TAG34} op=reaction-received botId=${botId} chatId=${decision.chatId} messageId=${decision.messageId} senderId=${decision.senderId} old=${decision.oldReaction.join(",") || "none"} new=${shown} targetHeld=${quotedBody === null ? "no" : "yes"}`
+      `${TAG36} op=reaction-received botId=${botId} chatId=${decision.chatId} messageId=${decision.messageId} senderId=${decision.senderId} old=${decision.oldReaction.join(",") || "none"} new=${shown} targetHeld=${quotedBody === null ? "no" : "yes"}`
     );
     console.error(
-      `${TAG34} op=reaction-authorised botId=${botId} senderId=${decision.senderId} allowed=${decision.allowed} reason=${decision.reason}`
+      `${TAG36} op=reaction-authorised botId=${botId} senderId=${decision.senderId} allowed=${decision.allowed} reason=${decision.reason}`
     );
     if (!decision.allowed) return c.json({ ok: true }, 200);
     const rScope = entry3.role === "admin" ? "admin" : "public";
@@ -20466,7 +20616,7 @@ app11.post("/", async (c) => {
       createdAt: rAt
     });
     const rActive = entryActive(entry3, accountDir, botId);
-    console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${rActive}`);
+    console.error(`${TAG36} op=agent botId=${botId} slug=${agentSlug} active=${rActive}`);
     raiseChannelTurn({
       accountId,
       accountDir,
@@ -20490,25 +20640,25 @@ app11.post("/", async (c) => {
   if (decision.kind === "checkout") {
     if (decision.query === "pre-checkout") {
       console.error(
-        `${TAG34} op=precheckout-received botId=${botId} queryId=${decision.queryId} payload=${logValue2(decision.payload)} amount=${decision.amount ?? "none"} currency=${decision.currency ?? "none"}`
+        `${TAG36} op=precheckout-received botId=${botId} queryId=${decision.queryId} payload=${logValue2(decision.payload)} amount=${decision.amount ?? "none"} currency=${decision.currency ?? "none"}`
       );
       noteCheckoutArrived(botId, decision.queryId, Date.now());
     } else {
       console.error(
-        `${TAG34} op=shipping-received botId=${botId} queryId=${decision.queryId} payload=${logValue2(decision.payload)}`
+        `${TAG36} op=shipping-received botId=${botId} queryId=${decision.queryId} payload=${logValue2(decision.payload)}`
       );
     }
     console.error(
-      `${TAG34} op=checkout-ignored botId=${botId} senderId=${decision.senderId} queryId=${decision.queryId} query=${decision.query} allowed=${decision.allowed} reason=payments-removed`
+      `${TAG36} op=checkout-ignored botId=${botId} senderId=${decision.senderId} queryId=${decision.queryId} query=${decision.query} allowed=${decision.allowed} reason=payments-removed`
     );
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "subscription") {
     console.error(
-      `${TAG34} op=subscription botId=${botId} userId=${decision.senderId} payload=${logValue2(decision.payload)} state=${decision.state}`
+      `${TAG36} op=subscription botId=${botId} userId=${decision.senderId} payload=${logValue2(decision.payload)} state=${decision.state}`
     );
     console.error(
-      `${TAG34} op=subscription-authorised botId=${botId} senderId=${decision.senderId} allowed=${decision.allowed} reason=${decision.reason}`
+      `${TAG36} op=subscription-authorised botId=${botId} senderId=${decision.senderId} allowed=${decision.allowed} reason=${decision.reason}`
     );
     if (!decision.allowed) return c.json({ ok: true }, 200);
     const sKey = telegramChannelKey(botId, decision.senderId);
@@ -20531,7 +20681,7 @@ app11.post("/", async (c) => {
       createdAt: sAt
     });
     const sActive = entryActive(entry3, accountDir, botId);
-    console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${sActive}`);
+    console.error(`${TAG36} op=agent botId=${botId} slug=${agentSlug} active=${sActive}`);
     raiseChannelTurn({
       accountId,
       accountDir,
@@ -20555,7 +20705,7 @@ app11.post("/", async (c) => {
     if (!decision.isClosed) return c.json({ ok: true }, 200);
     const where = findPollConversation(accountId, decision.pollId);
     console.error(
-      `${TAG34} op=poll-closed botId=${botId} pollId=${logValue2(decision.pollId)} options=${decision.options.length} totalVotes=${decision.totalVotes} targetHeld=${where === null ? "no" : "yes"}`
+      `${TAG36} op=poll-closed botId=${botId} pollId=${logValue2(decision.pollId)} options=${decision.options.length} totalVotes=${decision.totalVotes} targetHeld=${where === null ? "no" : "yes"}`
     );
     if (where === null) return c.json({ ok: true }, 200);
     const plScope = entry3.role === "admin" ? "admin" : "public";
@@ -20578,7 +20728,7 @@ app11.post("/", async (c) => {
       createdAt: plAt
     });
     const plActive = entryActive(entry3, accountDir, botId);
-    console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${plActive}`);
+    console.error(`${TAG36} op=agent botId=${botId} slug=${agentSlug} active=${plActive}`);
     raiseChannelTurn({
       accountId,
       accountDir,
@@ -20599,7 +20749,7 @@ app11.post("/", async (c) => {
   }
   if (decision.kind === "member") {
     console.error(
-      `${TAG34} op=chat-member botId=${botId} chatId=${decision.chatId} status=${decision.status}`
+      `${TAG36} op=chat-member botId=${botId} chatId=${decision.chatId} status=${decision.status}`
     );
     return c.json({ ok: true }, 200);
   }
@@ -20607,13 +20757,13 @@ app11.post("/", async (c) => {
     const { newBotId } = decision;
     if (!decision.authorised) {
       console.error(
-        `${TAG34} op=managed-bot botId=${botId} event=${decision.event} newBotId=${newBotId} result=refused reason=public-entry-no-provision`
+        `${TAG36} op=managed-bot botId=${botId} event=${decision.event} newBotId=${newBotId} result=refused reason=public-entry-no-provision`
       );
       return c.json({ ok: true }, 200);
     }
     const { event } = decision;
     console.error(
-      `${TAG34} op=managed-bot botId=${botId} event=${event} newBotId=${newBotId} creator=${decision.creatorId ?? "none"}`
+      `${TAG36} op=managed-bot botId=${botId} event=${event} newBotId=${newBotId} creator=${decision.creatorId ?? "none"}`
     );
     const fetched = await getManagedBotToken(entry3.token, Number(newBotId));
     console.error(
@@ -20669,11 +20819,11 @@ app11.post("/", async (c) => {
     const matched = bizStored !== null && bizStored.id === decision.businessConnectionId;
     const bizNowS = Math.floor(Date.now() / 1e3);
     console.error(
-      `${TAG34} op=business-message botId=${botId} connectionId=${truncateConnectionId(decision.businessConnectionId)} chatId=${decision.chatId} senderId=${decision.senderId} messageId=${decision.messageId ?? "none"} kind=${shape.primaryKind} ageS=${decision.date === null ? "none" : bizNowS - decision.date} matched=${matched ? "yes" : "no"}`
+      `${TAG36} op=business-message botId=${botId} connectionId=${truncateConnectionId(decision.businessConnectionId)} chatId=${decision.chatId} senderId=${decision.senderId} messageId=${decision.messageId ?? "none"} kind=${shape.primaryKind} ageS=${decision.date === null ? "none" : bizNowS - decision.date} matched=${matched ? "yes" : "no"}`
     );
     if (!matched) {
       console.error(
-        `${TAG34} op=business-refused botId=${botId} connectionId=${truncateConnectionId(decision.businessConnectionId)} reason=${bizStored === null ? "no-record" : "mismatch"}`
+        `${TAG36} op=business-refused botId=${botId} connectionId=${truncateConnectionId(decision.businessConnectionId)} reason=${bizStored === null ? "no-record" : "mismatch"}`
       );
       return c.json({ ok: true }, 200);
     }
@@ -20735,7 +20885,7 @@ app11.post("/", async (c) => {
     }
     const bizGateway = getTelegramGateway();
     if (!bizGateway) {
-      console.error(`${TAG34} op=reply-dropped botId=${botId} reason=gateway-not-ready`);
+      console.error(`${TAG36} op=reply-dropped botId=${botId} reason=gateway-not-ready`);
       return c.json({ ok: true }, 200);
     }
     const bizConnectionId = bizStored.id;
@@ -20749,7 +20899,7 @@ app11.post("/", async (c) => {
       );
       if (!verdict.allowed) {
         console.error(
-          `${TAG34} op=reply-dropped botId=${botId} reason=business-window-${verdict.reason} detail="${logValue2(businessWindowRefusal(decision.chatId, verdict.ageS))}"`
+          `${TAG36} op=reply-dropped botId=${botId} reason=business-window-${verdict.reason} detail="${logValue2(businessWindowRefusal(decision.chatId, verdict.ageS))}"`
         );
         return;
       }
@@ -20776,8 +20926,8 @@ app11.post("/", async (c) => {
           origin: "agent",
           createdAt: outAt
         });
-        console.error(`${TAG34} op=reply-sent botId=${botId} ok=true`);
-      } else console.error(`${TAG34} op=reply-dropped botId=${botId} reason=${sent.error}`);
+        console.error(`${TAG36} op=reply-sent botId=${botId} ok=true`);
+      } else console.error(`${TAG36} op=reply-dropped botId=${botId} reason=${sent.error}`);
     };
     void bizGateway.handleInbound({
       accountId,
@@ -20808,7 +20958,7 @@ app11.post("/", async (c) => {
     const delStored = readBusinessConnection(accountDir, botId);
     if (delStored === null || delStored.id !== decision.businessConnectionId) {
       console.error(
-        `${TAG34} op=business-refused botId=${botId} connectionId=${truncateConnectionId(decision.businessConnectionId)} reason=${delStored === null ? "no-record" : "mismatch"}`
+        `${TAG36} op=business-refused botId=${botId} connectionId=${truncateConnectionId(decision.businessConnectionId)} reason=${delStored === null ? "no-record" : "mismatch"}`
       );
       return c.json({ ok: true }, 200);
     }
@@ -20825,12 +20975,12 @@ app11.post("/", async (c) => {
       if (res.created) marked += 1;
     }
     console.error(
-      `${TAG34} op=business-deleted botId=${botId} chatId=${decision.chatId} ids=${decision.messageIds.length} marked=${marked}`
+      `${TAG36} op=business-deleted botId=${botId} chatId=${decision.chatId} ids=${decision.messageIds.length} marked=${marked}`
     );
     return c.json({ ok: true }, 200);
   }
   const { senderId, chatId, text } = decision;
-  console.error(`${TAG34} op=access botId=${botId} senderId=${senderId} allowed=true reason=${decision.reason}`);
+  console.error(`${TAG36} op=access botId=${botId} senderId=${senderId} allowed=true reason=${decision.reason}`);
   const subject = telegramConversationSubject(decision.chatType, chatId, senderId);
   const channelKey = telegramChannelKey(botId, subject);
   const scope = entry3.role === "public" ? "public" : "admin";
@@ -20917,17 +21067,17 @@ app11.post("/", async (c) => {
   const active = entryActive(entry3, accountDir, botId, (rosterValid) => {
     if (entry3.role !== "specialist") return;
     console.error(
-      `${TAG34} op=specialist-inbound botId=${botId} specialist=${logValue2(entry3.specialist)} senderId=${senderId} sessionId=${sessionId} rosterValid=${rosterValid ? "yes" : "no"}`
+      `${TAG36} op=specialist-inbound botId=${botId} specialist=${logValue2(entry3.specialist)} senderId=${senderId} sessionId=${sessionId} rosterValid=${rosterValid ? "yes" : "no"}`
     );
   });
-  console.error(`${TAG34} op=agent botId=${botId} slug=${agentSlug} active=${active}`);
+  console.error(`${TAG36} op=agent botId=${botId} slug=${agentSlug} active=${active}`);
   if (!active) {
-    console.error(`${TAG34} op=reject reason=agent-inactive botId=${botId} agent=${agentSlug}`);
+    console.error(`${TAG36} op=reject reason=agent-inactive botId=${botId} agent=${agentSlug}`);
     return c.json({ ok: true }, 200);
   }
   const gateway = getTelegramGateway();
   if (!gateway) {
-    console.error(`${TAG34} op=reply-dropped botId=${botId} reason=gateway-not-ready`);
+    console.error(`${TAG36} op=reply-dropped botId=${botId} reason=gateway-not-ready`);
     return c.json({ ok: true }, 200);
   }
   const replyThreadId = decision.threadId ?? void 0;
@@ -20949,8 +21099,8 @@ app11.post("/", async (c) => {
         origin: "agent",
         createdAt: at
       });
-      console.error(`${TAG34} op=reply-sent botId=${botId} ok=true`);
-    } else console.error(`${TAG34} op=reply-dropped botId=${botId} reason=${sent.error}`);
+      console.error(`${TAG36} op=reply-sent botId=${botId} ok=true`);
+    } else console.error(`${TAG36} op=reply-dropped botId=${botId} reason=${sent.error}`);
   };
   const media = await downloadTelegramMedia({ token: entry3.token, botId, items: decision.media });
   if (media.length > 0) {
@@ -21010,7 +21160,7 @@ app11.post("/", async (c) => {
         if (written.written && !decision.isEdit) noteShareStarted();
       } catch (err) {
         console.error(
-          `${TAG34} op=live-location op=write-failed botId=${botId} senderId=${senderId} detail="${logValue2(err instanceof Error ? err.message : String(err))}"`
+          `${TAG36} op=live-location op=write-failed botId=${botId} senderId=${senderId} detail="${logValue2(err instanceof Error ? err.message : String(err))}"`
         );
       }
     }
@@ -21022,6 +21172,8 @@ app11.post("/", async (c) => {
       textIsPlaceholder: decision.textIsPlaceholder,
       media
     });
+    const seen = await extractTelegramVideo({ botId, media: heard.media });
+    heard.media = seen.media;
     if (heard.text !== text) {
       const patched = appendUpdate(accountId, channelKey, {
         kind: "update",
@@ -21030,7 +21182,7 @@ app11.post("/", async (c) => {
         createdAt: (/* @__PURE__ */ new Date()).toISOString()
       });
       console.error(
-        `${TAG34} op=transcript-patch botId=${botId} target=${inboundMessageId} ok=${patched.created}`
+        `${TAG36} op=transcript-patch botId=${botId} target=${inboundMessageId} ok=${patched.created}`
       );
     }
     {
@@ -21066,7 +21218,7 @@ app11.post("/", async (c) => {
     }
     if (decision.isEdit && decision.location) {
       console.error(
-        `${TAG34} op=live-location op=suppressed-turn botId=${botId} senderId=${senderId} reason=live-edit`
+        `${TAG36} op=live-location op=suppressed-turn botId=${botId} senderId=${senderId} reason=live-edit`
       );
       return;
     }
@@ -21117,7 +21269,7 @@ function mountTelegramRoutes(app81, telegramRoutes) {
 // server/routes/quickbooks.ts
 import { join as join41 } from "path";
 import { existsSync as existsSync29, readFileSync as readFileSync33, writeFileSync as writeFileSync15, mkdirSync as mkdirSync8, rmSync as rmSync4, renameSync as renameSync5 } from "fs";
-var TAG35 = "[quickbooks]";
+var TAG37 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
 function pendingPath(accountDir, state) {
@@ -21130,14 +21282,14 @@ async function completeConsent(args) {
   const { accountDir, code, realmId } = args;
   const state = args.state;
   if (!state || !STATE_RE.test(state) || !existsSync29(pendingPath(accountDir, state))) {
-    console.error(`${TAG35} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG37} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   const claimFile = `${pendingPath(accountDir, state)}.claimed`;
   try {
     renameSync5(pendingPath(accountDir, state), claimFile);
   } catch {
-    console.error(`${TAG35} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG37} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   try {
@@ -21145,14 +21297,14 @@ async function completeConsent(args) {
     try {
       pending = JSON.parse(readFileSync33(claimFile, "utf-8"));
     } catch {
-      console.error(`${TAG35} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG37} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization state could not be read.", stateValid: false };
     }
     if (Date.now() > pending.expiresAt) {
-      console.error(`${TAG35} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG37} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization request expired. Generate a new consent link.", stateValid: false };
     }
-    console.error(`${TAG35} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
+    console.error(`${TAG37} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
     if (!code || !realmId) {
       return { ok: false, status: 400, message: "Missing code or realmId in the callback.", stateValid: true };
     }
@@ -21176,12 +21328,12 @@ async function completeConsent(args) {
     });
     const text = await res.text();
     if (!res.ok) {
-      console.error(`${TAG35} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG37} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: `Token exchange failed (${res.status}). Generate a new consent link to retry.`, stateValid: true };
     }
     const body = JSON.parse(text);
     if (!body.refresh_token) {
-      console.error(`${TAG35} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG37} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: "Token exchange returned no refresh token.", stateValid: true };
     }
     const now = Date.now();
@@ -21194,7 +21346,7 @@ async function completeConsent(args) {
     mkdirSync8(join41(accountDir, "secrets"), { recursive: true });
     writeFileSync15(storePath(accountDir), JSON.stringify(store2, null, 2), { mode: 384 });
     const persisted = JSON.parse(readFileSync33(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
-    console.error(`${TAG35} op=token-exchange realmId=${realmId} persisted=${persisted}`);
+    console.error(`${TAG37} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
     rmSync4(claimFile, { force: true });
@@ -21207,7 +21359,7 @@ var app12 = new Hono();
 app12.get("/callback", async (c) => {
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG35} op=callback stateValid=false realmId= reason=no-account`);
+    console.error(`${TAG37} op=callback stateValid=false realmId= reason=no-account`);
     return c.html(page("QuickBooks", "This install has no account configured."), 500);
   }
   const result = await completeConsent({
@@ -22172,7 +22324,7 @@ function startDispatchFieldCensus(getSession3, intervalMs = FIFTEEN_MIN_MS) {
 }
 
 // server/routes/field.ts
-var TAG36 = "[dispatch-field]";
+var TAG38 = "[dispatch-field]";
 var MAX_INITDATA_AGE_S = 3600;
 var ZONE_FALLBACK2 = "UTC";
 var SITE_HISTORY_LIMIT = 20;
@@ -22221,7 +22373,7 @@ function gate(c) {
     Date.now()
   );
   console.log(
-    `${TAG36} op=initdata-verify workerId=${auth.ok ? auth.worker.workerId : "none"} ok=${auth.ok} reason=${auth.ok ? "ok" : auth.reason} ageS=${auth.ageS}`
+    `${TAG38} op=initdata-verify workerId=${auth.ok ? auth.worker.workerId : "none"} ok=${auth.ok} reason=${auth.ok ? "ok" : auth.reason} ageS=${auth.ageS}`
   );
   if (auth.ok) {
     noteFieldContact(auth.accountId, auth.worker.workerId, Date.now());
@@ -22243,7 +22395,7 @@ async function loadSheet(auth, visitId) {
     if (!visit) return { ok: false, status: 404, reason: "not-found" };
     if (visit.workerId !== auth.worker.workerId) {
       console.error(
-        `${TAG36} op=visit-refused visitId=${visitId} workerId=${auth.worker.workerId} reason=not-assigned`
+        `${TAG38} op=visit-refused visitId=${visitId} workerId=${auth.worker.workerId} reason=not-assigned`
       );
       return { ok: false, status: 403, reason: "not-assigned" };
     }
@@ -22264,7 +22416,7 @@ async function loadSheet(auth, visitId) {
 }
 function readFailed(reason, err, ctx) {
   console.error(
-    `${TAG36} op=read-failed ${ctx} error="${err instanceof Error ? err.message : String(err)}" reason=${reason}`
+    `${TAG38} op=read-failed ${ctx} error="${err instanceof Error ? err.message : String(err)}" reason=${reason}`
   );
 }
 var app14 = new Hono();
@@ -22280,7 +22432,7 @@ app14.get("/session", async (c) => {
     return c.json({ reason: "read-failed" }, 503);
   }
   console.log(
-    `${TAG36} op=session-open workerId=${auth.worker.workerId} visits=${visits} source=network`
+    `${TAG38} op=session-open workerId=${auth.worker.workerId} visits=${visits} source=network`
   );
   return c.json({
     worker: { workerId: auth.worker.workerId, name: auth.worker.name },
@@ -22316,7 +22468,7 @@ app14.get("/visit/:visitId", async (c) => {
     const loaded = await loadSheet(auth, visitId);
     if (!loaded.ok) return c.json({ reason: loaded.reason }, loaded.status);
     console.log(
-      `${TAG36} op=sheet-open visitId=${visitId} workerId=${auth.worker.workerId} historyVisits=${loaded.history.length} source=network`
+      `${TAG38} op=sheet-open visitId=${visitId} workerId=${auth.worker.workerId} historyVisits=${loaded.history.length} source=network`
     );
     return c.json({
       visit: loaded.visit,
@@ -22352,7 +22504,7 @@ app14.post("/visit/:visitId/record", async (c) => {
   );
   if (!out.ok) return c.json({ reason: out.reason, detail: out.message }, 400);
   const kind = body.checklistItem !== void 0 ? "checklist" : body.partId !== void 0 ? "part" : body.signature !== void 0 ? "signature" : body.mediaRef !== void 0 ? "media" : "note";
-  console.log(`${TAG36} op=edit-recorded visitId=${visitId} workerId=${auth.worker.workerId} kind=${kind}`);
+  console.log(`${TAG38} op=edit-recorded visitId=${visitId} workerId=${auth.worker.workerId} kind=${kind}`);
   return c.json(out.value);
 });
 app14.post("/visit/:visitId/status", async (c) => {
@@ -22379,7 +22531,7 @@ app14.post("/visit/:visitId/status", async (c) => {
     const prefix = "missing-required-field:";
     if (out.reason.startsWith(prefix)) {
       const missing = out.reason.slice(prefix.length);
-      console.error(`${TAG36} op=complete-refused visitId=${visitId} missing=${missing}`);
+      console.error(`${TAG38} op=complete-refused visitId=${visitId} missing=${missing}`);
       return c.json({ reason: "missing-required-field", missing, detail: out.message }, 409);
     }
     return c.json({ reason: out.reason, detail: out.message }, 409);
@@ -22391,7 +22543,7 @@ app14.post("/visit/:visitId/status", async (c) => {
     Math.round((Date.parse(out.value.at) - Date.parse(dueToLeaveAt)) / 1e3)
   );
   console.log(
-    `${TAG36} op=complete visitId=${visitId} checklist=${state.checklistDone}/${state.checklistTotal} notes=${state.notes} media=${state.media} parts=${state.parts} signatures=${state.signatures} lagS=${lagS}`
+    `${TAG38} op=complete visitId=${visitId} checklist=${state.checklistDone}/${state.checklistTotal} notes=${state.notes} media=${state.media} parts=${state.parts} signatures=${state.signatures} lagS=${lagS}`
   );
   return c.json(out.value);
 });
@@ -22400,10 +22552,10 @@ app14.post("/probe", async (c) => {
   if (!auth.ok) return c.json({ reason: auth.reason }, auth.status);
   const p = await c.req.json();
   console.log(
-    `${TAG36} op=storage-probe platform=${p.platform} indexedDB=${p.indexedDB} localStorage=${p.localStorage} cacheStorage=${p.cacheStorage} serviceWorker=${p.serviceWorker} persisted=${p.persisted} workerId=${auth.worker.workerId}`
+    `${TAG38} op=storage-probe platform=${p.platform} indexedDB=${p.indexedDB} localStorage=${p.localStorage} cacheStorage=${p.cacheStorage} serviceWorker=${p.serviceWorker} persisted=${p.persisted} workerId=${auth.worker.workerId}`
   );
   console.log(
-    `${TAG36} op=launch-params workerId=${auth.worker.workerId} keys=${(p.launchKeys ?? []).join(",") || "none"}`
+    `${TAG38} op=launch-params workerId=${auth.worker.workerId} keys=${(p.launchKeys ?? []).join(",") || "none"}`
   );
   const anyUsable = p.indexedDB || p.localStorage || p.cacheStorage;
   noteFieldStorage(auth.accountId, auth.worker.workerId, anyUsable, Date.now());
@@ -22530,6 +22682,14 @@ app15.post("/", async (c) => {
     // the standard fields.
     "graph-fullscreen-not-covering",
     "graph-fullscreen-canvas-mismatch",
+    // Task 2439 — the admin composer's own send failure. The inline reporter in
+    // server/index.ts hooks only `error` and `unhandledrejection`, so a caught
+    // fetch rejection in send() reached no sink at all. Without this entry the
+    // POST collapses to kind=unknown and the log loses the source, which is the
+    // whole point of the report. Deliberately NOT in ERROR_KINDS: it fires at
+    // most once per send press, so it cannot exhaust a budget, and leaving it in
+    // the telemetry class keeps the protected error budget for uncaught errors.
+    "webchat-send-failed",
     "event"
   ]);
   const kind = allowedKinds.has(kindRaw) ? kindRaw : "unknown";
@@ -25309,7 +25469,7 @@ function resolveTunnelUrl() {
   if (!state) return null;
   return `https://${hostname2}.${state.domain}`;
 }
-var TAG37 = "[claude-session-manager:wrapper]";
+var TAG39 = "[claude-session-manager:wrapper]";
 async function refuseIfClaudeAuthDead(c, route, sessionId) {
   const auth = await ensureAuth();
   if (auth.status !== "dead" && auth.status !== "missing") return null;
@@ -25327,12 +25487,12 @@ async function performSpawnWithInitialMessage(args) {
   const aboutOwner = await resolveOwnerProfileBlock(args.senderId, args.userId);
   const ownerMs = Date.now() - ownerStart;
   const aboutOwnerStatus = aboutOwner == null ? "absent" : "ok" in aboutOwner && aboutOwner.ok === false ? `unresolved:${aboutOwner.reason}` : "ok";
-  console.log(`${TAG37} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
+  console.log(`${TAG39} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
   const dormantPlugins = computeDormantPlugins(args.senderId);
   const activePlugins = computeActivePlugins(args.senderId);
   const specialistDomains = computeSpecialistDomains(args.senderId);
   const tunnelUrl = resolveTunnelUrl();
-  console.log(`${TAG37} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
+  console.log(`${TAG39} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
   const upstreamPayload = JSON.stringify({
     senderId: args.senderId,
     // Task 205 — pass userId through to the manager so it lands as
@@ -25359,24 +25519,24 @@ async function performSpawnWithInitialMessage(args) {
     // unshapely values.
     conversationNodeId: args.conversationNodeId
   });
-  console.log(`${TAG37} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
+  console.log(`${TAG39} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
   const forwardStart = Date.now();
   const upstream = await fetch(`${managerBase("claude-session-manager:wrapper")}/public-spawn`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: upstreamPayload
   }).catch((err) => {
-    console.error(`${TAG37} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
+    console.error(`${TAG39} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
     return null;
   });
   if (!upstream) return {
     response: new Response(JSON.stringify({ error: "manager-unreachable" }), { status: 503, headers: { "content-type": "application/json" } }),
     claudeSessionId: null
   };
-  console.log(`${TAG37} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
+  console.log(`${TAG39} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
   if (args.initialMessage) {
     const inputBytes = Buffer.byteLength(args.initialMessage, "utf8");
-    console.log(`${TAG37} initial-message-inlined bytes=${inputBytes}`);
+    console.log(`${TAG39} initial-message-inlined bytes=${inputBytes}`);
   }
   const bodyText = await upstream.text().catch(() => "");
   let claudeSessionId = null;
@@ -25411,7 +25571,7 @@ app24.post("/", async (c) => {
   if (refusal) return refusal;
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(`${TAG37} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
+    console.error(`${TAG39} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
     return c.json({ error: "admin-account-not-resolved" }, 500);
   }
   const userId = getUserIdForSession(cacheKey) ?? void 0;
@@ -25420,7 +25580,7 @@ app24.post("/", async (c) => {
   const permissionMode = typeof body.permissionMode === "string" ? body.permissionMode : void 0;
   const specialist = typeof body.specialist === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(body.specialist) ? body.specialist : void 0;
   const model = typeof body.model === "string" && /^[A-Za-z0-9._-]{1,64}$/.test(body.model) ? body.model : void 0;
-  console.log(`${TAG37} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
+  console.log(`${TAG39} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
   const conversationNodeId = cacheKey ? getSessionIdForSession(cacheKey) : void 0;
   const { response, claudeSessionId } = await performSpawnWithInitialMessage({
     senderId,
@@ -25439,13 +25599,13 @@ app24.post("/", async (c) => {
     claudeSessionId,
     senderId
   );
-  console.log(`${TAG37} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
+  console.log(`${TAG39} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
   return response;
 });
 var claude_sessions_default = app24;
 
 // server/routes/admin/log-ingest.ts
-var TAG38 = "[log-ingest]";
+var TAG40 = "[log-ingest]";
 var TAG_PATTERN = /^[A-Za-z0-9_:-]{1,32}$/;
 var LEVELS = /* @__PURE__ */ new Set(["debug", "info", "warn", "error"]);
 var MAX_LINE_BYTES = 4096;
@@ -25456,7 +25616,7 @@ function isLoopbackAddr2(addr) {
 app25.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr2(remoteAddr)) {
-    console.error(`${TAG38} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG40} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "log-ingest-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -25465,7 +25625,7 @@ app25.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr2(t));
     if (offender !== void 0) {
-      console.error(`${TAG38} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG40} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "log-ingest-loopback-only" }, 403);
     }
   }
@@ -25500,7 +25660,7 @@ var log_ingest_default = app25;
 
 // server/routes/admin/session-blocked.ts
 import { join as join48 } from "path";
-var TAG39 = "[blocked-tool-notify]";
+var TAG41 = "[blocked-tool-notify]";
 function isLoopbackAddr3(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -25518,18 +25678,18 @@ Answer the permission card in the session's PTY or in Claude Desktop. Some check
 async function sendWhatsApp(account, to, text) {
   const res = resolveSocket(account.accountId);
   if (!res.ok) {
-    console.error(`${TAG39} op=socket-unavailable accountId=${account.accountId} reason=${res.reason}`);
+    console.error(`${TAG41} op=socket-unavailable accountId=${account.accountId} reason=${res.reason}`);
     return false;
   }
   const sent = await sendTextMessage(res.sock, to, text, { accountId: res.accountId });
-  if (!sent.success) console.error(`${TAG39} op=send-failed to=${to} error=${sent.error ?? "unknown"}`);
+  if (!sent.success) console.error(`${TAG41} op=send-failed to=${to} error=${sent.error ?? "unknown"}`);
   return sent.success === true;
 }
 var app26 = new Hono();
 app26.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr3(remoteAddr)) {
-    console.error(`${TAG39} op=reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG41} op=reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "session-blocked-loopback-only" }, 403);
   }
   let body = {};
@@ -25550,13 +25710,13 @@ app26.post("/", async (c) => {
   const account = validateAccountId2(meta.accountId ?? "");
   if (!account) {
     console.error(
-      `${TAG39} op=account-unresolved sessionId=${sessionId.slice(0, 8)} sidecarAccountId=${meta.accountId ?? "none"}`
+      `${TAG41} op=account-unresolved sessionId=${sessionId.slice(0, 8)} sidecarAccountId=${meta.accountId ?? "none"}`
     );
     return c.json({ delivered: false, channel: "none" }, 200);
   }
   if (meta.role === "admin" && meta.channel === "whatsapp" && meta.senderId) {
     const delivered2 = await sendWhatsApp(account, meta.senderId, text);
-    console.error(`${TAG39} op=notify sessionId=${sessionId.slice(0, 8)} channel=whatsapp delivered=${delivered2}`);
+    console.error(`${TAG41} op=notify sessionId=${sessionId.slice(0, 8)} channel=whatsapp delivered=${delivered2}`);
     return c.json({ delivered: delivered2, channel: "whatsapp" }, 200);
   }
   if (meta.role === "admin" && meta.channel === "telegram" && meta.senderId) {
@@ -25566,11 +25726,11 @@ app26.post("/", async (c) => {
       const chatId = Number(parsed.senderId);
       if (resolved.kind === "one" && Number.isFinite(chatId)) {
         const res = await sendTelegramText(resolved.entry.token, chatId, text);
-        console.error(`${TAG39} op=notify sessionId=${sessionId.slice(0, 8)} channel=telegram delivered=${res.ok}`);
+        console.error(`${TAG41} op=notify sessionId=${sessionId.slice(0, 8)} channel=telegram delivered=${res.ok}`);
         return c.json({ delivered: res.ok, channel: "telegram" }, 200);
       }
       console.error(
-        `${TAG39} op=telegram-unresolved sessionId=${sessionId.slice(0, 8)} botId=${parsed.botId} kind=${resolved.kind}`
+        `${TAG41} op=telegram-unresolved sessionId=${sessionId.slice(0, 8)} botId=${parsed.botId} kind=${resolved.kind}`
       );
     }
   }
@@ -25580,7 +25740,7 @@ app26.post("/", async (c) => {
     if (await sendWhatsApp(account, phone, text)) delivered = true;
   }
   console.error(
-    `${TAG39} op=notify sessionId=${sessionId.slice(0, 8)} channel=house-admin phones=${phones.length} delivered=${delivered}`
+    `${TAG41} op=notify sessionId=${sessionId.slice(0, 8)} channel=house-admin phones=${phones.length} delivered=${delivered}`
   );
   return c.json({ delivered, channel: "house-admin" }, 200);
 });
@@ -25613,18 +25773,18 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
 ]);
 var app27 = new Hono();
 app27.post("/", async (c) => {
-  const TAG75 = "[admin:events]";
+  const TAG77 = "[admin:events]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG75} reject reason=body-not-json detail=${detail}`);
+    console.error(`${TAG77} reject reason=body-not-json detail=${detail}`);
     return c.json({ ok: false, detail: "Request body was not valid JSON" }, 400);
   }
   const event = typeof body.event === "string" ? body.event : "";
   if (!ALLOWED_EVENTS.has(event)) {
-    console.error(`${TAG75} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
+    console.error(`${TAG77} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
     return c.json({ ok: false, detail: `Event "${event}" is not allowed` }, 400);
   }
   const rawFields = body.fields && typeof body.fields === "object" ? body.fields : {};
@@ -31189,7 +31349,7 @@ function managerLogFollowUrl(sessionId, opts) {
 }
 
 // server/routes/admin/linkedin-ingest.ts
-var TAG40 = "[linkedin-ingest-route]";
+var TAG42 = "[linkedin-ingest-route]";
 var UUID4 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 var ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/;
 var LINKEDIN_URL = /^https:\/\/www\.linkedin\.com\//;
@@ -31314,28 +31474,28 @@ app45.post("/", requireIngestToken, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(TAG40 + " rejected status=400 reason=schema:body-not-json");
+    console.error(TAG42 + " rejected status=400 reason=schema:body-not-json");
     return c.json({ ok: false, error: "schema", reason: "body-not-json" }, 400);
   }
   const v = validate2(body);
   if (!v.ok) {
-    console.error(TAG40 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
+    console.error(TAG42 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
     return c.json({ ok: false, error: v.error, reason: v.reason, missing: v.missing }, v.status);
   }
   const envelope = v.envelope;
   const senderId = c.var.ingestAccountId ?? "";
   if (!senderId) {
-    console.error(TAG40 + " rejected status=500 reason=admin-account-not-resolved");
+    console.error(TAG42 + " rejected status=500 reason=admin-account-not-resolved");
     return c.json({ ok: false, error: "admin-account-not-resolved" }, 500);
   }
   const payloadBytes = JSON.stringify(envelope).length;
   console.log(
-    TAG40 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
+    TAG42 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
   );
   const initialMessage = buildInitialMessage(envelope);
   const spawnStart = Date.now();
   const sessionId = randomUUID9();
-  console.log(TAG40 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
+  console.log(TAG42 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -31348,12 +31508,12 @@ app45.post("/", requireIngestToken, async (c) => {
   });
   if ("error" in spawned) {
     console.error(
-      TAG40 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
+      TAG42 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
     );
     return c.json({ ok: false, error: "dispatch-failed", upstreamStatus: spawned.status, detail: spawned.error }, 502);
   }
   console.log(
-    TAG40 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
+    TAG42 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
   );
   return c.json({ ok: true, dispatchId: envelope.dispatchId, taskId: spawned.sessionId }, 202);
 });
@@ -31361,7 +31521,7 @@ var linkedin_ingest_default = app45;
 
 // server/routes/admin/post-turn-context.ts
 import neo4j3 from "neo4j-driver";
-var TAG41 = "[post-turn-context]";
+var TAG43 = "[post-turn-context]";
 var STRIPPED_PROPERTIES2 = /* @__PURE__ */ new Set([
   "embedding",
   "passwordHash",
@@ -31403,7 +31563,7 @@ var app46 = new Hono();
 app46.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr4(remoteAddr)) {
-    console.error(`${TAG41} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG43} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "post-turn-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -31412,7 +31572,7 @@ app46.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr4(t));
     if (offender !== void 0) {
-      console.error(`${TAG41} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG43} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "post-turn-context-loopback-only" }, 403);
     }
   }
@@ -31444,7 +31604,7 @@ app46.get("/", async (c) => {
     writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
     const total = Date.now() - started2;
     console.log(
-      `${TAG41} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
+      `${TAG43} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
     );
     return c.json({
       writes: writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }))
@@ -31453,7 +31613,7 @@ app46.get("/", async (c) => {
     const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG41} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
+      `${TAG43} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `post-turn-context unavailable: ${message}` }, 503);
   } finally {
@@ -31566,7 +31726,7 @@ function formatPreviousContext(writes) {
 }
 
 // server/routes/admin/public-session-context.ts
-var TAG42 = "[public-session-context]";
+var TAG44 = "[public-session-context]";
 function isLoopbackAddr5(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -31574,7 +31734,7 @@ var app47 = new Hono();
 app47.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr5(remoteAddr)) {
-    console.error(`${TAG42} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG44} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -31583,7 +31743,7 @@ app47.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr5(t));
     if (offender !== void 0) {
-      console.error(`${TAG42} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG44} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-context-loopback-only" }, 403);
     }
   }
@@ -31597,14 +31757,14 @@ app47.get("/", async (c) => {
     const writes = await fetchSliceWrites(session, sliceToken, accountId);
     const total = Date.now() - started2;
     console.log(
-      `${TAG42} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
+      `${TAG44} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
     );
     return c.json({ writes });
   } catch (err) {
     const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG42} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
+      `${TAG44} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `public-session-context unavailable: ${message}` }, 503);
   } finally {
@@ -31623,7 +31783,7 @@ function getWebchatGateway() {
 }
 
 // server/routes/admin/public-session-exit.ts
-var TAG43 = "[public-session-exit-route]";
+var TAG45 = "[public-session-exit-route]";
 function isLoopbackAddr6(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -31631,7 +31791,7 @@ var app48 = new Hono();
 app48.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr6(remoteAddr)) {
-    console.error(`${TAG43} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG45} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-exit-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -31640,7 +31800,7 @@ app48.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr6(t));
     if (offender !== void 0) {
-      console.error(`${TAG43} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG45} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-exit-loopback-only" }, 403);
     }
   }
@@ -31654,7 +31814,7 @@ app48.post("/", async (c) => {
   if (!sessionId) return c.json({ error: "sessionId required" }, 400);
   const gateway = getWebchatGateway();
   if (!gateway) {
-    console.error(`${TAG43} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
+    console.error(`${TAG45} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
     return c.json({ error: "webchat-gateway-unset" }, 503);
   }
   gateway.handlePublicSessionExit(sessionId);
@@ -31663,7 +31823,7 @@ app48.post("/", async (c) => {
 var public_session_exit_default = app48;
 
 // server/routes/admin/access-session-evict.ts
-var TAG44 = "[access-session-evict]";
+var TAG46 = "[access-session-evict]";
 function isLoopbackAddr7(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -31671,7 +31831,7 @@ var app49 = new Hono();
 app49.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr7(remoteAddr)) {
-    console.error(`${TAG44} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG46} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "access-session-evict-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -31680,7 +31840,7 @@ app49.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr7(t));
     if (offender !== void 0) {
-      console.error(`${TAG44} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG46} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "access-session-evict-loopback-only" }, 403);
     }
   }
@@ -31693,13 +31853,13 @@ app49.post("/", async (c) => {
   const grantId = typeof body.grantId === "string" ? body.grantId.trim() : "";
   if (!grantId) return c.json({ error: "grantId required" }, 400);
   const dropped = evictAccessSessionsByGrant(grantId);
-  console.log(`${TAG44} grantId=${grantId} dropped=${dropped}`);
+  console.log(`${TAG46} grantId=${grantId} dropped=${dropped}`);
   return c.json({ ok: true, dropped });
 });
 var access_session_evict_default = app49;
 
 // server/routes/admin/enrol-person.ts
-var TAG45 = "[enrol]";
+var TAG47 = "[enrol]";
 function isLoopbackAddr8(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -31708,7 +31868,7 @@ var app50 = new Hono();
 app50.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr8(remoteAddr)) {
-    console.error(`${TAG45} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG47} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "enrol-person-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -31717,7 +31877,7 @@ app50.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr8(t));
     if (offender !== void 0) {
-      console.error(`${TAG45} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG47} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "enrol-person-loopback-only" }, 403);
     }
   }
@@ -31742,7 +31902,7 @@ app50.post("/", async (c) => {
   }
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG45} op=person result=no-account-id`);
+    console.error(`${TAG47} op=person result=no-account-id`);
     return c.json({ error: "no-account-id" }, 500);
   }
   let personId;
@@ -31750,7 +31910,7 @@ app50.post("/", async (c) => {
     personId = await enrolPerson({ accountId, phone, email, agentSlug });
   } catch (err) {
     console.error(
-      `${TAG45} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG47} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "enrol-failed" }, 500);
   }
@@ -31760,11 +31920,11 @@ app50.post("/", async (c) => {
     if (g) grant = { grantId: g.grantId, status: g.status, contactValue: g.contactValue };
   } catch (err) {
     console.error(
-      `${TAG45} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG47} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
   console.log(
-    `${TAG45} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
+    `${TAG47} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
   );
   return c.json({ personId, grant }, 200);
 });
@@ -33832,7 +33992,7 @@ function toNum(v) {
 }
 
 // server/routes/admin/tasks-list.ts
-var TAG46 = "[task-timer]";
+var TAG48 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
 var app57 = new Hono();
@@ -33840,12 +34000,12 @@ app57.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG46} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG48} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   const cacheStart = Date.now();
   const cached3 = await getOrCompute("tasks-list", accountId, () => computeTaskList(accountId));
-  console.log(`${TAG46} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
+  console.log(`${TAG48} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
   if (cached3.value === null) {
     return c.json({ error: "tasks-list-failed" }, 500);
   }
@@ -33946,13 +34106,13 @@ async function computeTaskList(accountId) {
       orphans = orphanResult.records.length > 0 ? toNum(orphanResult.records[0].get("orphans")) : 0;
     } catch (err) {
       console.error(
-        `${TAG46} op=session-orphans-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG48} op=session-orphans-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
       );
       orphans = -1;
     }
     if (orphans > 0) {
       console.error(
-        `${TAG46} op=session-orphans account=${accountId} orphans=${orphans} detail="task marked for a session spawn that never linked; the spawned session is unreachable from its row"`
+        `${TAG48} op=session-orphans account=${accountId} orphans=${orphans} detail="task marked for a session spawn that never linked; the spawned session is unreachable from its row"`
       );
     }
     let orphanEntries = 0;
@@ -33971,14 +34131,14 @@ async function computeTaskList(accountId) {
       orphanAdjustments = orphanTime.records.length > 0 ? toNum(orphanTime.records[0].get("orphanAdjustments")) : 0;
     } catch (err) {
       console.error(
-        `${TAG46} op=orphan-time-records-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG48} op=orphan-time-records-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
       );
       orphanEntries = -1;
       orphanAdjustments = -1;
     }
     if (orphanEntries > 0 || orphanAdjustments > 0) {
       console.error(
-        `${TAG46} op=orphan-time-records account=${accountId} orphanEntries=${orphanEntries} orphanAdjustments=${orphanAdjustments} detail="time records whose task no longer exists; something removed the task without its records"`
+        `${TAG48} op=orphan-time-records account=${accountId} orphanEntries=${orphanEntries} orphanAdjustments=${orphanAdjustments} detail="time records whose task no longer exists; something removed the task without its records"`
       );
     }
     const linkedIds = [...open3, ...completed].map((r) => r.sessionId).filter((s) => s !== null);
@@ -33991,7 +34151,7 @@ async function computeTaskList(accountId) {
         const walk = enumerateJsonlsWithSkips(join60(cfg, "projects"));
         if (walk.skipped > 0) {
           console.error(
-            `${TAG46} op=session-dangling-census-incomplete account=${accountId} skipped=${walk.skipped} detail="a slug the walk could not read contributes no session ids, so its links cannot be judged"`
+            `${TAG48} op=session-dangling-census-incomplete account=${accountId} skipped=${walk.skipped} detail="a slug the walk could not read contributes no session ids, so its links cannot be judged"`
           );
           dangling = null;
         } else {
@@ -34000,28 +34160,28 @@ async function computeTaskList(accountId) {
         }
       } catch (err) {
         console.error(
-          `${TAG46} op=session-dangling-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+          `${TAG48} op=session-dangling-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
         );
         dangling = null;
       }
     }
     if (dangling !== null && dangling > 0) {
       console.error(
-        `${TAG46} op=session-dangling account=${accountId} dangling=${dangling} linked=${linkedIds.length} detail="a task links a session with no JSONL on disk; clicking it will not resume"`
+        `${TAG48} op=session-dangling account=${accountId} dangling=${dangling} linked=${linkedIds.length} detail="a task links a session with no JSONL on disk; clicking it will not resume"`
       );
     }
     const returned = result.records.length;
     if (returned < graphTotal) {
       console.error(
-        `${TAG46} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
+        `${TAG48} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
       );
     }
     console.log(
-      `${TAG46} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open3.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned} sessionLinked=${sessionLinked} sessionOrphans=${orphans < 0 ? "n/a" : orphans} sessionDangling=${dangling === null ? "n/a" : dangling}`
+      `${TAG48} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open3.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned} sessionLinked=${sessionLinked} sessionOrphans=${orphans < 0 ? "n/a" : orphans} sessionDangling=${dangling === null ? "n/a" : dangling}`
     );
     return { open: open3, completed };
   } catch (err) {
-    console.error(`${TAG46} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG48} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   } finally {
     await session.close();
@@ -34031,7 +34191,7 @@ var tasks_list_default = app57;
 
 // server/routes/admin/task-timer-start.ts
 import { randomUUID as randomUUID11 } from "crypto";
-var TAG47 = "[task-timer]";
+var TAG49 = "[task-timer]";
 var app58 = new Hono();
 app58.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -34046,7 +34206,7 @@ app58.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG47} op=timer-start rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG49} op=timer-start rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -34057,7 +34217,7 @@ app58.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (target.records.length === 0) {
-      console.error(`${TAG47} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
+      console.error(`${TAG49} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const open3 = await session.run(
@@ -34069,7 +34229,7 @@ app58.post("/", requireAdminSession, async (c) => {
     const priorEntryId = open3.records[0]?.get("entryId");
     const priorStartedAt = open3.records[0]?.get("startedAt");
     if (priorEntryId) {
-      console.log(`${TAG47} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
+      console.log(`${TAG49} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: true, entryId: priorEntryId, startedAt: priorStartedAt });
     }
@@ -34080,11 +34240,11 @@ app58.post("/", requireAdminSession, async (c) => {
        CREATE (te)-[:LOGGED_AGAINST]->(t)`,
       { taskId, accountId, entryId, now }
     );
-    console.log(`${TAG47} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
+    console.log(`${TAG49} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: true, entryId, startedAt: now });
   } catch (err) {
-    console.error(`${TAG47} op=start error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG49} op=start error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-start-failed" }, 500);
   } finally {
     await session.close();
@@ -34094,7 +34254,7 @@ var task_timer_start_default = app58;
 
 // server/routes/admin/task-timer-stop.ts
 import neo4j5 from "neo4j-driver";
-var TAG48 = "[task-timer]";
+var TAG50 = "[task-timer]";
 var app59 = new Hono();
 app59.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -34109,7 +34269,7 @@ app59.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG48} op=timer-stop rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG50} op=timer-stop rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -34130,7 +34290,7 @@ app59.post("/", requireAdminSession, async (c) => {
         { taskId, accountId }
       );
       const secondsLogged2 = toNum(cur.records[0]?.get("secondsLogged"));
-      console.log(`${TAG48} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
+      console.log(`${TAG50} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: false, seconds: 0, secondsLogged: secondsLogged2 });
     }
@@ -34154,12 +34314,12 @@ app59.post("/", requireAdminSession, async (c) => {
     const sumEntries = toNum(verify.records[0]?.get("sumEntries"));
     const sumAdjustments = toNum(verify.records[0]?.get("sumAdjustments"));
     const secondsLogged = toNum(verify.records[0]?.get("secondsLogged"));
-    console.log(`${TAG48} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
-    console.log(`${TAG48} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
+    console.log(`${TAG50} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
+    console.log(`${TAG50} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: false, seconds, secondsLogged });
   } catch (err) {
-    console.error(`${TAG48} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG50} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-stop-failed" }, 500);
   } finally {
     await session.close();
@@ -34168,7 +34328,7 @@ app59.post("/", requireAdminSession, async (c) => {
 var task_timer_stop_default = app59;
 
 // server/routes/admin/task-complete.ts
-var TAG49 = "[task-timer]";
+var TAG51 = "[task-timer]";
 var app60 = new Hono();
 app60.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -34183,7 +34343,7 @@ app60.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG49} op=complete rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG51} op=complete rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -34199,11 +34359,11 @@ app60.post("/", requireAdminSession, async (c) => {
       return c.json({ error: "task-not-found" }, 404);
     }
     const secondsLogged = toNum(result.records[0].get("secondsLogged"));
-    console.log(`${TAG49} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
+    console.log(`${TAG51} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, status: "completed", secondsLogged });
   } catch (err) {
-    console.error(`${TAG49} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG51} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-complete-failed" }, 500);
   } finally {
     await session.close();
@@ -34214,7 +34374,7 @@ var task_complete_default = app60;
 // server/routes/admin/task-time-adjust.ts
 import { randomUUID as randomUUID12 } from "crypto";
 import neo4j6 from "neo4j-driver";
-var TAG50 = "[task-time-adjust]";
+var TAG52 = "[task-time-adjust]";
 var app61 = new Hono();
 app61.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -34224,23 +34384,23 @@ app61.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(`${TAG50} op=reject reason=bad-json`);
+    console.error(`${TAG52} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG50} op=time-adjust rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG52} op=time-adjust rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const newSeconds = body.newSeconds;
   if (typeof newSeconds !== "number" || !Number.isInteger(newSeconds) || newSeconds < 0) {
-    console.error(`${TAG50} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
+    console.error(`${TAG52} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
     return c.json({ error: "newSeconds must be a non-negative integer" }, 400);
   }
   const adjustmentId = randomUUID12();
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  console.log(`${TAG50} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
+  console.log(`${TAG52} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
   const session = getSession();
   try {
     const guard = await session.run(
@@ -34250,12 +34410,12 @@ app61.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (guard.records.length === 0) {
-      console.error(`${TAG50} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG52} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const openCount = toNum(guard.records[0].get("openCount"));
     if (openCount > 0) {
-      console.error(`${TAG50} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG52} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-timer-running" }, 409);
     }
     const previousSeconds = toNum(guard.records[0].get("previousSeconds"));
@@ -34281,11 +34441,11 @@ app61.post("/", requireAdminSession, async (c) => {
       }
     );
     const secondsLoggedAfter = toNum(write.records[0]?.get("secondsLoggedAfter"));
-    console.log(`${TAG50} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
+    console.log(`${TAG52} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, secondsLogged: secondsLoggedAfter });
   } catch (err) {
-    console.error(`${TAG50} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG52} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-time-adjust-failed" }, 500);
   } finally {
     await session.close();
@@ -34295,7 +34455,7 @@ var task_time_adjust_default = app61;
 
 // server/routes/admin/task-delete.ts
 import { randomUUID as randomUUID13 } from "crypto";
-var TAG51 = "[task-delete]";
+var TAG53 = "[task-delete]";
 var app62 = new Hono();
 app62.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -34305,18 +34465,18 @@ app62.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(`${TAG51} op=reject reason=bad-json`);
+    console.error(`${TAG53} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
   const deletionId = randomUUID13();
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG51} op=reject reason=${reason} deletionId=${deletionId} accountId=${accountId}`);
+    console.error(`${TAG53} op=reject reason=${reason} deletionId=${deletionId} accountId=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   console.log(
-    `${TAG51} op=request deletionId=${deletionId} taskId=${taskId} accountId=${accountId} confirmed=${body.confirmed === true}`
+    `${TAG53} op=request deletionId=${deletionId} taskId=${taskId} accountId=${accountId} confirmed=${body.confirmed === true}`
   );
   const session = getSession();
   try {
@@ -34332,18 +34492,18 @@ app62.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (guard.records.length === 0) {
-      console.error(`${TAG51} op=reject reason=no-task deletionId=${deletionId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG53} op=reject reason=no-task deletionId=${deletionId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const timeEntries = toNum(guard.records[0].get("timeEntries"));
     const openCount = toNum(guard.records[0].get("openCount"));
     const adjustments = toNum(guard.records[0].get("adjustments"));
     console.log(
-      `${TAG51} op=guard deletionId=${deletionId} taskId=${taskId} openCount=${openCount} timeEntries=${timeEntries} adjustments=${adjustments}`
+      `${TAG53} op=guard deletionId=${deletionId} taskId=${taskId} openCount=${openCount} timeEntries=${timeEntries} adjustments=${adjustments}`
     );
     if (openCount > 0) {
       console.error(
-        `${TAG51} op=reject reason=running deletionId=${deletionId} taskId=${taskId} openCount=${openCount}`
+        `${TAG53} op=reject reason=running deletionId=${deletionId} taskId=${taskId} openCount=${openCount}`
       );
       return c.json({ error: "task-timer-running" }, 409);
     }
@@ -34379,18 +34539,18 @@ app62.post("/", requireAdminSession, async (c) => {
     const adjustmentsLeft = toNum(after.records[0]?.get("adjustmentsLeft"));
     const remaining = taskLeft + entriesLeft + adjustmentsLeft;
     console.log(
-      `${TAG51} op=persisted deletionId=${deletionId} taskId=${taskId} tasksDeleted=${tasksDeleted} timeEntriesDeleted=${timeEntriesDeleted} adjustmentsDeleted=${adjustmentsDeleted} remaining=${remaining}`
+      `${TAG53} op=persisted deletionId=${deletionId} taskId=${taskId} tasksDeleted=${tasksDeleted} timeEntriesDeleted=${timeEntriesDeleted} adjustmentsDeleted=${adjustmentsDeleted} remaining=${remaining}`
     );
     if (remaining > 0) {
       console.error(
-        `${TAG51} op=incomplete deletionId=${deletionId} taskId=${taskId} taskLeft=${taskLeft} entriesLeft=${entriesLeft} adjustmentsLeft=${adjustmentsLeft} detail="the delete returned but rows for this taskId survive"`
+        `${TAG53} op=incomplete deletionId=${deletionId} taskId=${taskId} taskLeft=${taskLeft} entriesLeft=${entriesLeft} adjustmentsLeft=${adjustmentsLeft} detail="the delete returned but rows for this taskId survive"`
       );
     }
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, tasksDeleted, timeEntriesDeleted, adjustmentsDeleted, remaining });
   } catch (err) {
     console.error(
-      `${TAG51} op=error deletionId=${deletionId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG53} op=error deletionId=${deletionId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "task-delete-failed" }, 500);
   } finally {
@@ -34484,7 +34644,7 @@ async function resolveAssignableAdmins(accountId, accountsDir = ACCOUNTS_DIR) {
 }
 
 // server/routes/admin/task-assign.ts
-var TAG52 = "[task-assign]";
+var TAG54 = "[task-assign]";
 var app63 = new Hono();
 app63.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -34499,7 +34659,7 @@ app63.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG52} op=assign rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG54} op=assign rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const rawAssignee = body.assigneeUserId;
@@ -34511,7 +34671,7 @@ app63.post("/", requireAdminSession, async (c) => {
     const { ids } = await resolveAllowedAssigneeIds(accountId);
     if (!ids.has(assigneeUserId)) {
       console.error(
-        `${TAG52} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
+        `${TAG54} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
       );
       return c.json({ error: "assignee-not-in-roster" }, 403);
     }
@@ -34533,7 +34693,7 @@ app63.post("/", requireAdminSession, async (c) => {
         `MATCH (t:Task {taskId: $taskId, accountId: $accountId}) SET t.updatedAt = $now`,
         { taskId, accountId, now }
       );
-      console.log(`${TAG52} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
+      console.log(`${TAG54} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, assigneeUserId: null, assigneeName: null });
     }
@@ -34549,7 +34709,7 @@ app63.post("/", requireAdminSession, async (c) => {
     );
     if (set.records.length === 0) {
       console.error(
-        `${TAG52} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
+        `${TAG54} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
       );
       return c.json({ error: "assignee-no-admin-node" }, 409);
     }
@@ -34557,12 +34717,12 @@ app63.post("/", requireAdminSession, async (c) => {
     const family = set.records[0].get("familyName") ?? null;
     const assigneeName = given && given.trim().length > 0 ? family && family.trim().length > 0 ? `${given.trim()} ${family.trim()}` : given.trim() : null;
     console.log(
-      `${TAG52} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
+      `${TAG54} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
     );
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, assigneeUserId, assigneeName });
   } catch (err) {
-    console.error(`${TAG52} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG54} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-assign-failed" }, 500);
   } finally {
     await session.close();
@@ -34571,13 +34731,13 @@ app63.post("/", requireAdminSession, async (c) => {
 var task_assign_default = app63;
 
 // server/routes/admin/task-session-open.ts
-var TAG53 = "[task-session]";
+var TAG55 = "[task-session]";
 var app64 = new Hono();
 app64.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG53} op=request auth-rejected reason="no account for session"`);
+    console.error(`${TAG55} op=request auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   let body;
@@ -34589,7 +34749,7 @@ app64.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG53} op=request rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG55} op=request rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const session = getSession();
@@ -34603,14 +34763,14 @@ app64.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (found.records.length === 0) {
-      console.error(`${TAG53} op=request taskId=${taskId} account=${accountId} result=task-not-found`);
+      console.error(`${TAG55} op=request taskId=${taskId} account=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const title = found.records[0].get("name") ?? "";
     const sessionId = found.records[0].get("sessionId") ?? null;
     const description = found.records[0].get("description") ?? "";
     const notes = found.records[0].get("notes") ?? "";
-    console.log(`${TAG53} op=request taskId=${taskId} account=${accountId} linked=${sessionId ?? "none"}`);
+    console.log(`${TAG55} op=request taskId=${taskId} account=${accountId} linked=${sessionId ?? "none"}`);
     if (sessionId !== null) return c.json({ sessionId, title, description, notes });
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const stamped = await session.run(
@@ -34620,10 +34780,10 @@ app64.post("/", requireAdminSession, async (c) => {
       { taskId, accountId, now }
     );
     const at = stamped.records[0]?.get("at") ?? void 0;
-    console.log(`${TAG53} op=marker taskId=${taskId} stamped=${at !== void 0}`);
+    console.log(`${TAG55} op=marker taskId=${taskId} stamped=${at !== void 0}`);
     return c.json({ sessionId: null, title, description, notes });
   } catch (err) {
-    console.error(`${TAG53} op=request taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG55} op=request taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-session-open-failed" }, 500);
   } finally {
     await session.close();
@@ -34632,13 +34792,13 @@ app64.post("/", requireAdminSession, async (c) => {
 var task_session_open_default = app64;
 
 // server/routes/admin/task-session-link.ts
-var TAG54 = "[task-session]";
+var TAG56 = "[task-session]";
 var app65 = new Hono();
 app65.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG54} op=link auth-rejected reason="no account for session"`);
+    console.error(`${TAG56} op=link auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   let body;
@@ -34650,12 +34810,12 @@ app65.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG54} op=link rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG56} op=link rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const sessionId = typeof body.sessionId === "string" && body.sessionId.length > 0 ? body.sessionId : "";
   if (!sessionId) {
-    console.error(`${TAG54} op=link rejected reason=missing-sessionId taskId=${taskId} account=${accountId}`);
+    console.error(`${TAG56} op=link rejected reason=missing-sessionId taskId=${taskId} account=${accountId}`);
     return c.json({ error: "sessionId required" }, 400);
   }
   const session = getSession();
@@ -34669,13 +34829,13 @@ app65.post("/", requireAdminSession, async (c) => {
       { taskId, accountId, sessionId }
     );
     if (state.records.length === 0) {
-      console.error(`${TAG54} op=link taskId=${taskId} account=${accountId} result=task-not-found`);
+      console.error(`${TAG56} op=link taskId=${taskId} account=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const conversationExists = state.records[0].get("conversationExists") === true;
     const priorSessionIds = (state.records[0].get("priorSessionIds") ?? []).filter((s) => typeof s === "string");
     if (!conversationExists) {
-      console.error(`${TAG54} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=conversation-absent`);
+      console.error(`${TAG56} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=conversation-absent`);
       return c.json({ linked: false, created: false, repointedFrom: null });
     }
     const stale = priorSessionIds.filter((s) => s !== sessionId);
@@ -34701,18 +34861,18 @@ app65.post("/", requireAdminSession, async (c) => {
     const repointedFrom = stale.length > 0 ? stale[0] : null;
     if (!linked) {
       console.error(
-        `${TAG54} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=edge-absent-after-merge linkedTo=${linkedTo ?? "none"}`
+        `${TAG56} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=edge-absent-after-merge linkedTo=${linkedTo ?? "none"}`
       );
       return c.json({ linked: false, created: false, repointedFrom });
     }
     console.log(
-      `${TAG54} op=link taskId=${taskId} sessionId=${sessionId} created=${created} repointedFrom=${repointedFrom ?? "none"}`
+      `${TAG56} op=link taskId=${taskId} sessionId=${sessionId} created=${created} repointedFrom=${repointedFrom ?? "none"}`
     );
     invalidate("tasks-list", accountId);
     return c.json({ linked: true, created, repointedFrom });
   } catch (err) {
     console.error(
-      `${TAG54} op=link-failed taskId=${taskId} sessionId=${sessionId} reason="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG56} op=link-failed taskId=${taskId} sessionId=${sessionId} reason="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "task-session-link-failed" }, 500);
   } finally {
@@ -34722,21 +34882,21 @@ app65.post("/", requireAdminSession, async (c) => {
 var task_session_link_default = app65;
 
 // server/routes/admin/admin-users-list.ts
-var TAG55 = "[admin-users]";
+var TAG57 = "[admin-users]";
 var app66 = new Hono();
 app66.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG55} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG57} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   try {
     const users = await resolveAssignableAdmins(accountId);
-    console.log(`${TAG55} op=list account=${accountId} count=${users.length}`);
+    console.log(`${TAG57} op=list account=${accountId} count=${users.length}`);
     return c.json({ ok: true, users });
   } catch (err) {
-    console.error(`${TAG55} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG57} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "admin-users-list-failed" }, 500);
   }
 });
@@ -34744,7 +34904,7 @@ var admin_users_list_default = app66;
 
 // server/routes/admin/dispatch-destinations.ts
 import { resolve as resolve43 } from "path";
-var TAG56 = "[admin:routines]";
+var TAG58 = "[admin:routines]";
 function scopeFor(d, houseDir, houseAccountId) {
   if (d.channel !== "whatsapp") return null;
   if (d.label === "Account manager") return boundSubAccountFor(houseDir, d.destination);
@@ -34762,7 +34922,7 @@ var app67 = new Hono();
 app67.get("/", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
-    console.error(`${TAG56} op=destinations auth-rejected reason="no account for session"`);
+    console.error(`${TAG58} op=destinations auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   let houseAccountId = null;
@@ -34770,7 +34930,7 @@ app67.get("/", requireAdminSession, async (c) => {
     houseAccountId = resolveHouseOrSoleAccountId(ACCOUNTS_DIR);
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG56} op=destinations account=${accountId.slice(0, 8)} outcome=house-unresolved reason="${message}"`);
+    console.error(`${TAG58} op=destinations account=${accountId.slice(0, 8)} outcome=house-unresolved reason="${message}"`);
   }
   const destinations = listDispatchDestinations({ accountsDir: ACCOUNTS_DIR, houseAccountId, accountId });
   const houseDir = houseAccountId === null ? null : resolve43(ACCOUNTS_DIR, houseAccountId);
@@ -34821,7 +34981,7 @@ app67.get("/", requireAdminSession, async (c) => {
   const scopes = [...byScope.keys()];
   const nameScope = scopes.length === 0 ? "none" : scopes.every((s) => s === houseAccountId) ? "house" : scopes.some((s) => s === houseAccountId) ? "mixed" : "account";
   console.log(
-    `${TAG56} op=destinations account=${accountId.slice(0, 8)} count=${destinations.length} named=${named} unnamed=${destinations.length - named} nameScope=${nameScope}` + (houseAccountId === null ? " outcome=house-unresolved" : "") + (namesUnresolved === null ? "" : ` outcome=names-unresolved reason="${namesUnresolved}"`)
+    `${TAG58} op=destinations account=${accountId.slice(0, 8)} count=${destinations.length} named=${named} unnamed=${destinations.length - named} nameScope=${nameScope}` + (houseAccountId === null ? " outcome=house-unresolved" : "") + (namesUnresolved === null ? "" : ` outcome=names-unresolved reason="${namesUnresolved}"`)
   );
   return c.json({ destinations });
 });
@@ -34830,7 +34990,7 @@ var dispatch_destinations_default = app67;
 // server/routes/admin/activity.ts
 import { readdirSync as readdirSync30 } from "fs";
 var app68 = new Hono();
-var TAG57 = "[activity]";
+var TAG59 = "[activity]";
 function resolveHouseAccountId2(accounts) {
   const houses = accounts.filter((a) => a.config.role === "house");
   if (houses.length === 1) return { accountId: houses[0].accountId, reason: "house" };
@@ -34859,19 +35019,19 @@ app68.get("/", requireAdminSession, async (c) => {
   const house = resolveHouseAccountId2(valid);
   const isHouse = caller2 !== null && house.accountId !== null && caller2 === house.accountId;
   console.log(
-    `${TAG57} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
+    `${TAG59} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
   );
   if (!isHouse) {
     const reason = house.accountId === null ? house.reason : "not-house";
     console.error(
-      `${TAG57} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
+      `${TAG59} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
     );
     return c.json({ error: "house-only" }, 403);
   }
-  console.log(`${TAG57} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
+  console.log(`${TAG59} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
   const onDisk = countAccountDirsOnDisk();
   console.log(
-    `${TAG57} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
+    `${TAG59} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
   );
   const start = Date.now();
   let res;
@@ -34887,17 +35047,17 @@ app68.get("/", requireAdminSession, async (c) => {
     });
   } catch (err) {
     console.error(
-      `${TAG57} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG59} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
     );
     return c.json({ error: "manager-unreachable" }, 502);
   }
   if (res.status !== 200) {
-    console.error(`${TAG57} op=manager-fail req=${req} reason=status status=${res.status}`);
+    console.error(`${TAG59} op=manager-fail req=${req} reason=status status=${res.status}`);
     return c.json({ error: `manager-status-${res.status}` }, 502);
   }
   const body = await res.json().catch(() => null);
   if (!body || !Array.isArray(body.rows)) {
-    console.error(`${TAG57} op=manager-fail req=${req} reason=bad-json`);
+    console.error(`${TAG59} op=manager-fail req=${req} reason=bad-json`);
     return c.json({ error: "manager-bad-json" }, 502);
   }
   const rows = body.rows;
@@ -34908,10 +35068,10 @@ app68.get("/", requireAdminSession, async (c) => {
   const ageNull = rows.filter((r) => r.ageMs === null).length;
   const sidecarNull = rows.filter((r) => r.sidecarMissing).length;
   console.log(
-    `${TAG57} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
+    `${TAG59} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
   );
   console.log(
-    `${TAG57} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
+    `${TAG59} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
   );
   const names = {};
   await Promise.all(
@@ -34930,7 +35090,7 @@ app68.get("/", requireAdminSession, async (c) => {
     return acc;
   }, {});
   console.log(
-    `${TAG57} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
+    `${TAG59} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
   );
   return c.json({
     rows,
@@ -35021,7 +35181,7 @@ app69.route("/activity", activity_default);
 var admin_default = app69;
 
 // server/routes/access/verify-token.ts
-var TAG58 = "[access-verify]";
+var TAG60 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
 var app70 = new Hono();
@@ -35040,39 +35200,39 @@ app70.post("/", async (c) => {
   }
   const rateMsg = checkAccessRateLimit(ip, agentSlug);
   if (rateMsg) {
-    console.error(`${TAG58} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
+    console.error(`${TAG60} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
     return c.json({ error: rateMsg }, 429);
   }
   const grant = await findGrantByMagicToken(token);
   if (!grant) {
     recordAccessFailedAttempt(ip, agentSlug);
-    console.error(`${TAG58} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
+    console.error(`${TAG60} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.agentSlug !== agentSlug) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG58} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
+      `${TAG60} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
     );
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.status === "expired" || grant.status === "revoked") {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG58} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
+      `${TAG60} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (grant.expiresAt !== null && grant.expiresAt < Date.now()) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG58} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
+      `${TAG60} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (!grant.sliceToken) {
     console.error(
-      `${TAG58} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
+      `${TAG60} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
     );
     return c.json({ error: "grant-misconfigured" }, 500);
   }
@@ -35088,12 +35248,12 @@ app70.post("/", async (c) => {
     await consumeMagicTokenAndActivate(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG58} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG60} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "verification-failed" }, 500);
   }
   clearAccessRateLimit(ip, agentSlug);
-  console.log(`${TAG58} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
+  console.log(`${TAG60} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
   console.log(
     `${MINT_TAG} grantId=${grant.grantId} sliceToken=${grant.sliceToken.slice(0, 8)} agentSlug=${agentSlug} personId=${grant.personId ?? "none"}`
   );
@@ -35169,7 +35329,7 @@ async function sendMagicLinkEmail(payload) {
 }
 
 // server/routes/access/request-magic-link.ts
-var TAG59 = "[access-request-link]";
+var TAG61 = "[access-request-link]";
 var app71 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
 app71.post("/", async (c) => {
@@ -35186,18 +35346,18 @@ app71.post("/", async (c) => {
   }
   const rateMsg = checkRequestLinkRateLimit(contactValue);
   if (rateMsg) {
-    console.error(`${TAG59} contactValue=${maskContact(contactValue)} result=rate-limited`);
+    console.error(`${TAG61} contactValue=${maskContact(contactValue)} result=rate-limited`);
     return c.json({ error: rateMsg }, 429);
   }
   recordRequestLinkAttempt(contactValue);
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG59} contactValue=${maskContact(contactValue)} result=no-account-id`);
+    console.error(`${TAG61} contactValue=${maskContact(contactValue)} result=no-account-id`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   const grant = await findActiveGrantByContact(contactValue, agentSlug, accountId);
   if (!grant) {
-    console.log(`${TAG59} contactValue=${maskContact(contactValue)} result=notfound`);
+    console.log(`${TAG61} contactValue=${maskContact(contactValue)} result=notfound`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   let token;
@@ -35205,7 +35365,7 @@ app71.post("/", async (c) => {
     token = await generateNewMagicToken(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG59} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG61} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
@@ -35237,12 +35397,12 @@ app71.post("/", async (c) => {
   });
   if (!sendResult.ok) {
     console.error(
-      `${TAG59} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
+      `${TAG61} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   console.log(
-    `${TAG59} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
+    `${TAG61} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
@@ -36252,7 +36412,7 @@ import { stat as stat8, readFile as readFile12, realpath } from "fs/promises";
 import { join as join62, resolve as resolve47, sep as sep11 } from "path";
 import { Readable as Readable3 } from "stream";
 var app79 = new Hono();
-var TAG60 = "[portal-fetch]";
+var TAG62 = "[portal-fetch]";
 async function verifySignature(secret, accountId, relPath, expiresAtMs, signature, nowMs) {
   if (!secret || !signature) return false;
   if (!Number.isFinite(expiresAtMs) || expiresAtMs <= nowMs) return false;
@@ -36307,14 +36467,14 @@ async function readAccountSecret(accountId) {
   try {
     text = await readFile12(path, "utf8");
   } catch {
-    console.error(`${TAG60} op=no-secret account="${accountId}" path="${path}"`);
+    console.error(`${TAG62} op=no-secret account="${accountId}" path="${path}"`);
     return "";
   }
   for (const line of text.split("\n")) {
     const m = line.match(/^PORTAL_FETCH_SECRET=(.*)$/);
     if (m) return m[1].trim();
   }
-  console.error(`${TAG60} op=no-secret account="${accountId}" reason=key-absent path="${path}"`);
+  console.error(`${TAG62} op=no-secret account="${accountId}" reason=key-absent path="${path}"`);
   return "";
 }
 function isValidAccountId2(value) {
@@ -36374,16 +36534,16 @@ async function handle(c, headOnly) {
   const sig = c.req.query("sig") ?? "";
   const owner = c.req.query("owner") ?? "";
   console.log(
-    `${TAG60} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
+    `${TAG62} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
   );
   if (!isValidAccountId2(accountId)) {
-    console.error(`${TAG60} op=denied account=${q(accountId)} reason=account-id`);
+    console.error(`${TAG62} op=denied account=${q(accountId)} reason=account-id`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const secret = await readAccountSecret(accountId);
   const verified = owner ? await verifyOwnUploadSignature(secret, accountId, owner, relPath, exp, sig, Date.now()) : await verifySignature(secret, accountId, relPath, exp, sig, Date.now());
   if (!verified) {
-    console.error(`${TAG60} op=denied account=${q(accountId)} reason=secret`);
+    console.error(`${TAG62} op=denied account=${q(accountId)} reason=secret`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const target = await resolveFetchTarget(
@@ -36393,14 +36553,14 @@ async function handle(c, headOnly) {
   );
   if (!target.ok) {
     const op = target.reason === "enoent" ? "miss" : "denied";
-    console.error(`${TAG60} op=${op} account=${accountId} reason=${target.reason}`);
+    console.error(`${TAG62} op=${op} account=${accountId} reason=${target.reason}`);
     return c.json({ ok: false, error: "not found" }, 404);
   }
   if (headOnly) {
-    console.log(`${TAG60} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
+    console.log(`${TAG62} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
     return c.body(null, 200);
   }
-  console.log(`${TAG60} op=served account=${accountId} bytes=${target.sizeBytes}`);
+  console.log(`${TAG62} op=served account=${accountId} bytes=${target.sizeBytes}`);
   return new Response(Readable3.toWeb(createReadStream3(target.absolute)), {
     status: 200,
     headers: {
@@ -36419,7 +36579,7 @@ app79.on("HEAD", "/fetch", (c) => handle(c, true));
 var portal_fetch_default = app79;
 
 // app/lib/timeentry-census.ts
-var TAG61 = "[timeentry-census]";
+var TAG63 = "[timeentry-census]";
 function reconcileTimeEntries(rows, now, horizonMs) {
   const openEntries = rows.openEntries.length;
   let oldestOpenAgeMs = 0;
@@ -36459,12 +36619,12 @@ async function runTimeEntryCensusOnce(session, now, horizonMs) {
       sumAdjustments: toNum(r.get("sumAdjustments"))
     }));
     const finding = reconcileTimeEntries({ openEntries, taskSums }, now, horizonMs);
-    const line = `${TAG61} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
+    const line = `${TAG63} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
     if (finding.alarm) console.error(`${line} alarm=true`);
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG61} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG63} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -36478,13 +36638,13 @@ function startTimeEntryCensus(openSession, opts = {}) {
     try {
       session = openSession();
     } catch (err) {
-      console.error(`${TAG61} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG63} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
       return;
     }
     try {
       await runTimeEntryCensusOnce(session, Date.now(), horizonMs);
     } catch (err) {
-      console.error(`${TAG61} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG63} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
     } finally {
       try {
         await session.close();
@@ -36545,7 +36705,7 @@ function formatCensusLine(f) {
 }
 
 // app/lib/ledger-census.ts
-var TAG62 = "[ledger-census]";
+var TAG64 = "[ledger-census]";
 var DAY_MS = 864e5;
 function countWriteRejects24h(logDir, now) {
   let entries2;
@@ -36621,7 +36781,7 @@ async function runLedgerCensusOnce(session, now) {
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG62} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG64} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -36634,7 +36794,7 @@ function startLedgerCensus(openSession, opts = {}) {
       session = openSession();
     } catch (err) {
       console.error(
-        `${TAG62} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG64} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
       return;
     }
@@ -36642,7 +36802,7 @@ function startLedgerCensus(openSession, opts = {}) {
       await runLedgerCensusOnce(session, Date.now());
     } catch (err) {
       console.error(
-        `${TAG62} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG64} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
     } finally {
       try {
@@ -36987,7 +37147,7 @@ function startDispatchTgCensus(getSession3, intervalMs = FIFTEEN_MIN_MS3) {
 }
 
 // app/lib/conversation-audit.ts
-var TAG63 = "[conversation-audit]";
+var TAG65 = "[conversation-audit]";
 async function runConversationAudit() {
   const session = getSession();
   try {
@@ -37024,12 +37184,12 @@ async function runConversationAudit() {
       multiAnchored: Number(multiRec?.get("multiAnchored") ?? 0)
     };
     console.error(
-      `${TAG63} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
+      `${TAG65} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
     );
     return result;
   } catch (err) {
     const reason = err instanceof Error ? `${err.name}:${err.message.slice(0, 200)}` : String(err).slice(0, 200);
-    console.error(`${TAG63} op=failed reason=${reason}`);
+    console.error(`${TAG65} op=failed reason=${reason}`);
     return null;
   } finally {
     await session.close();
@@ -37157,7 +37317,7 @@ function startGraphHealthTimer() {
 import { existsSync as existsSync54, statSync as statSync29, readdirSync as readdirSync32 } from "fs";
 import { join as join65 } from "path";
 var import_dist16 = __toESM(require_dist(), 1);
-var TAG64 = "[shared-census]";
+var TAG66 = "[shared-census]";
 var WIRED_SURFACES = 3;
 function countFiles(dir) {
   let n = 0;
@@ -37185,8 +37345,8 @@ function runSharedFolderCensus(dataRoot = DATA_ROOT) {
     }
   }
   const files = isDir ? countFiles(root) : 0;
-  console.error(`${TAG64} op=root exists=${exists} isDir=${isDir} files=${files}`);
-  console.error(`${TAG64} op=wiring surfaces=${WIRED_SURFACES}/3`);
+  console.error(`${TAG66} op=root exists=${exists} isDir=${isDir} files=${files}`);
+  console.error(`${TAG66} op=wiring surfaces=${WIRED_SURFACES}/3`);
   return `shared root ${exists ? "present" : "ABSENT"}, ${files} file(s)`;
 }
 function startSharedFolderCensus() {
@@ -37202,7 +37362,7 @@ function startSharedFolderCensus() {
 import { readdirSync as readdirSync33, readFileSync as readFileSync57 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join66 } from "path";
-var TAG65 = "[claude-auth]";
+var TAG67 = "[claude-auth]";
 function refreshTokenLength(raw) {
   let data;
   try {
@@ -37246,7 +37406,7 @@ function runCredRefreshCensus(home = homedir4()) {
   const blank = rows.filter(isBlank).length;
   const detail = rows.map((r) => `${r.brand}:${r.refreshTokenLen === null ? "unreadable" : r.refreshTokenLen}`).join(",");
   console.log(
-    `${TAG65} op=cred-refresh-census result=${censusResult(rows)} brands=${rows.length} blank=${blank} detail=${detail}`
+    `${TAG67} op=cred-refresh-census result=${censusResult(rows)} brands=${rows.length} blank=${blank} detail=${detail}`
   );
   return `${rows.length} brand(s), ${blank} blank`;
 }
@@ -39745,6 +39905,16 @@ var WebchatGateway = class _WebchatGateway {
   clearDeliveryFailure(key2) {
     this.deliveryFailures.delete(key2);
   }
+  /** Task 2439 — mark a key undelivered from OUTSIDE the drain path. Every other
+   *  writer above fires because a message the hub already holds could not be
+   *  delivered. The send route's deferred continuation is the one case where no
+   *  message ever reached the hub: it dies before handleInbound runs, so nothing
+   *  is queued, nothing can go stale, and no drain can fail. Without this the
+   *  client's pending window (Task 2465 reads exactly this marker) never gets a
+   *  verdict and the composer stays disabled until the page is reloaded. */
+  markDeliveryFailure(key2, messageId) {
+    this.deliveryFailures.set(key2, { messageId, at: Date.now() });
+  }
   /** Task 2465 — record which session a conversation key's child is running.
    *  Public so the audit below can be driven directly in tests without standing
    *  up the channel-server HTTP surface; production writes come from runSpawn and
@@ -40437,14 +40607,14 @@ function makeFileDelivery(opts) {
 }
 
 // app/lib/webchat/file-delivery.ts
-var TAG66 = "[webchat-adaptor]";
+var TAG68 = "[webchat-adaptor]";
 function platformRoot2() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeWebchatSendFile(entry3) {
   return async (filePath) => {
     if (!entry3.accountId) {
-      console.error(`${TAG66} file-delivery reject reason=no-account sender=${entry3.senderId}`);
+      console.error(`${TAG68} file-delivery reject reason=no-account sender=${entry3.senderId}`);
       return { ok: false, error: "no-account" };
     }
     const accountDir = resolve50(platformRoot2(), "..", "data/accounts", entry3.accountId);
@@ -40452,14 +40622,14 @@ function makeWebchatSendFile(entry3) {
       const resolved = realpathSync9(filePath);
       const accountResolved = realpathSync9(accountDir);
       if (!resolved.startsWith(accountResolved + "/")) {
-        console.error(`${TAG66} file-delivery reject reason=outside_account_directory sender=${entry3.senderId}`);
+        console.error(`${TAG68} file-delivery reject reason=outside_account_directory sender=${entry3.senderId}`);
         return { ok: false, error: "outside-account" };
       }
       return { ok: true };
     } catch (err) {
       const code = err.code;
       console.error(
-        `${TAG66} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry3.senderId}`
+        `${TAG68} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry3.senderId}`
       );
       return { ok: false, error: code === "ENOENT" ? "not-found" : "path-error" };
     }
@@ -40468,7 +40638,7 @@ function makeWebchatSendFile(entry3) {
 function makeWebchatFileDelivery(entry3) {
   return makeFileDelivery({
     entry: entry3,
-    tag: TAG66,
+    tag: TAG68,
     channel: "webchat",
     sendFile: makeWebchatSendFile(entry3),
     deferUntilVerdict: true
@@ -40547,7 +40717,7 @@ function buildPublicWebchatSpawnRequest(input) {
 }
 
 // app/lib/whatsapp/inbound/file-delivery-bridge.ts
-var TAG67 = "[whatsapp-adaptor]";
+var TAG69 = "[whatsapp-adaptor]";
 var SEND_USER_FILE2 = "SendUserFile";
 var WHATSAPP_SEND_DOCUMENT = "whatsapp-send-document";
 function platformRoot3() {
@@ -40565,7 +40735,7 @@ function makeWhatsAppSendFile(entry3, maxyAccountId) {
     });
     if (result.ok) return { ok: true };
     console.error(
-      `${TAG67} file-delivery reject reason=send-failed sender=${entry3.senderId} status=${result.status} message=${result.error}`
+      `${TAG69} file-delivery reject reason=send-failed sender=${entry3.senderId} status=${result.status} message=${result.error}`
     );
     return { ok: false, error: result.error };
   };
@@ -40573,7 +40743,7 @@ function makeWhatsAppSendFile(entry3, maxyAccountId) {
 function makeWhatsAppFileDelivery(entry3, maxyAccountId) {
   const shared = makeFileDelivery({
     entry: entry3,
-    tag: TAG67,
+    tag: TAG69,
     channel: "whatsapp",
     sendFile: makeWhatsAppSendFile(entry3, maxyAccountId)
   });
@@ -40608,7 +40778,7 @@ function makeWhatsAppFileDelivery(entry3, maxyAccountId) {
         if (!delivered) {
           const fileField = call2.filePath !== void 0 ? ` file=${call2.filePath}` : "";
           console.error(
-            `${TAG67} file-delivery-unreconciled sender=${entry3.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+            `${TAG69} file-delivery-unreconciled sender=${entry3.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
           );
         }
       }
@@ -40774,7 +40944,7 @@ function whatsappDoorLabel(doorId) {
 }
 
 // app/lib/channel-delivery/refusal-notice.ts
-var TAG68 = "[channel-delivery]";
+var TAG70 = "[channel-delivery]";
 var notified = /* @__PURE__ */ new Set();
 function refusalNoticeText(reason) {
   return reason === "claude-auth-dead" ? "Your message arrived but no assistant could be started: the Claude sign-in on this install is not active. An operator has to sign in again; send this again once they have." : `Your message arrived but no assistant could be started (${reason}). Nothing was lost; try again shortly.`;
@@ -40783,19 +40953,19 @@ async function sendRefusalNotice(input) {
   if (notified.has(input.doorId)) return;
   const fields = `channel=${input.channel} sender=${input.sender} reason=${input.reason}`;
   if (!input.send) {
-    console.error(`${TAG68} op=refusal-notice-failed ${fields} error=no-target`);
+    console.error(`${TAG70} op=refusal-notice-failed ${fields} error=no-target`);
     return;
   }
   try {
     await input.send(guardOutbound(input.sender, refusalNoticeText(input.reason)));
   } catch (e) {
     console.error(
-      `${TAG68} op=refusal-notice-failed ${fields} error=${e instanceof Error ? e.message : String(e)}`
+      `${TAG70} op=refusal-notice-failed ${fields} error=${e instanceof Error ? e.message : String(e)}`
     );
     return;
   }
   notified.add(input.doorId);
-  console.error(`${TAG68} op=refusal-notice ${fields} status=${input.status}`);
+  console.error(`${TAG70} op=refusal-notice ${fields} status=${input.status}`);
 }
 function clearRefusalNotice(doorId) {
   notified.delete(doorId);
@@ -41455,10 +41625,10 @@ function buildTelegramSpawnRequest(input) {
 }
 
 // server/telegram-ensure-session.ts
-var TAG69 = "[telegram-inbound]";
+var TAG71 = "[telegram-inbound]";
 function reportReused(botId, channelKey, result) {
   if (!result.reused) return;
-  console.error(`${TAG69} op=spawn-reused botId=${botId} key=${channelKey} sessionId=${result.sessionId}`);
+  console.error(`${TAG71} op=spawn-reused botId=${botId} key=${channelKey} sessionId=${result.sessionId}`);
 }
 function buildTelegramEnsureSession(deps) {
   return async (input) => {
@@ -41522,10 +41692,10 @@ function buildTelegramEnsureSession(deps) {
         return;
       }
       console.error(
-        `${TAG69} op=telegram-spawn-door botId=${input.botId} role=specialist door=rc specialist=${input.specialist}`
+        `${TAG71} op=telegram-spawn-door botId=${input.botId} role=specialist door=rc specialist=${input.specialist}`
       );
       console.error(
-        `${TAG69} op=spawn botId=${input.botId} sessionId=${req.sessionId} targetAccountId=${input.accountId} role=specialist specialist=${input.specialist}`
+        `${TAG71} op=spawn botId=${input.botId} sessionId=${req.sessionId} targetAccountId=${input.accountId} role=specialist specialist=${input.specialist}`
       );
       reportReused(input.botId, req.channelKey, result2);
       noteSpawnOk2(input.botId);
@@ -41560,10 +41730,10 @@ function buildTelegramEnsureSession(deps) {
         return;
       }
       console.error(
-        `${TAG69} op=telegram-spawn-door botId=${input.botId} role=public door=rc agent=${input.agentSlug}`
+        `${TAG71} op=telegram-spawn-door botId=${input.botId} role=public door=rc agent=${input.agentSlug}`
       );
       console.error(
-        `${TAG69} op=spawn botId=${input.botId} sessionId=${result2.sessionId} targetAccountId=${input.accountId} role=public`
+        `${TAG71} op=spawn botId=${input.botId} sessionId=${result2.sessionId} targetAccountId=${input.accountId} role=public`
       );
       reportReused(input.botId, req.channelKey, result2);
       noteSpawnOk2(input.botId);
@@ -41587,7 +41757,7 @@ function buildTelegramEnsureSession(deps) {
       return;
     }
     console.error(
-      `${TAG69} op=spawn botId=${input.botId} sessionId=${req.sessionId} targetAccountId=${input.accountId} role=admin`
+      `${TAG71} op=spawn botId=${input.botId} sessionId=${req.sessionId} targetAccountId=${input.accountId} role=admin`
     );
     reportReused(input.botId, req.channelKey, result);
     noteSpawnOk2(input.botId);
@@ -41606,7 +41776,7 @@ function buildTelegramEnsureSession(deps) {
 import { realpathSync as realpathSync10 } from "fs";
 import { readFile as readFile15, stat as stat10 } from "fs/promises";
 import { resolve as resolve51, basename as basename18 } from "path";
-var TAG70 = "[telegram:outbound]";
+var TAG72 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
   const { botToken, chatId, filePath, caption, maxyAccountId, platformRoot: platformRoot5 } = input;
@@ -41623,10 +41793,10 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG70} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG72} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 500, error: `Account directory not resolvable for ${maxyAccountId}` };
     }
-    console.error(`${TAG70} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG72} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   let resolvedPath;
@@ -41635,14 +41805,14 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG70} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG72} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG70} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG72} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   if (!resolvedPath.startsWith(accountResolved + "/")) {
-    console.error(`${TAG70} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+    console.error(`${TAG72} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
     return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
   }
   const fileStat = await stat10(resolvedPath);
@@ -41675,24 +41845,24 @@ async function sendTelegramDocument(input) {
     error = e instanceof Error ? e.message : String(e);
   }
   console.error(
-    `${TAG70} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok2}` + (messageId !== void 0 ? ` id=${messageId}` : "")
+    `${TAG72} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok2}` + (messageId !== void 0 ? ` id=${messageId}` : "")
   );
   return ok2 ? { ok: true, messageId } : { ok: false, status: 500, error };
 }
 
 // app/lib/telegram/outbound/file-delivery.ts
-var TAG71 = "[telegram:outbound]";
+var TAG73 = "[telegram:outbound]";
 function platformRoot4() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeTelegramSendFile(entry3, botToken) {
   return async (filePath, caption) => {
     if (!botToken) {
-      console.error(`${TAG71} file-delivery reject reason=no-bot-token sender=${entry3.senderId} role=${entry3.role}`);
+      console.error(`${TAG73} file-delivery reject reason=no-bot-token sender=${entry3.senderId} role=${entry3.role}`);
       return { ok: false, error: "no-bot-token" };
     }
     if (entry3.replyTarget == null) {
-      console.error(`${TAG71} file-delivery reject reason=no-reply-target sender=${entry3.senderId} role=${entry3.role}`);
+      console.error(`${TAG73} file-delivery reject reason=no-reply-target sender=${entry3.senderId} role=${entry3.role}`);
       return { ok: false, error: "no-reply-target" };
     }
     const result = await sendTelegramDocument({
@@ -41709,7 +41879,7 @@ function makeTelegramSendFile(entry3, botToken) {
 function makeTelegramFileDelivery(entry3, botToken) {
   return makeFileDelivery({
     entry: entry3,
-    tag: TAG71,
+    tag: TAG73,
     channel: "telegram",
     sendFile: makeTelegramSendFile(entry3, botToken)
   });
@@ -42120,7 +42290,7 @@ function adminFanTargets(p) {
 
 // app/lib/channel-pty-bridge/public-session-end-review.ts
 import { randomUUID as randomUUID14 } from "crypto";
-var TAG72 = "[public-session-review]";
+var TAG74 = "[public-session-review]";
 var CONSUMED_CAP = 500;
 var consumed = /* @__PURE__ */ new Set();
 function consumeOnce(sessionId) {
@@ -42147,7 +42317,7 @@ async function fetchJsonl(sessionId) {
     return await res.text();
   } catch (err) {
     console.error(
-      `${TAG72} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG74} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return null;
   }
@@ -42171,7 +42341,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     const res = await fetch(url);
     if (!res.ok) {
       console.error(
-        `${TAG72} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
+        `${TAG74} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
       );
       return [];
     }
@@ -42179,7 +42349,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     return Array.isArray(body.writes) ? body.writes : [];
   } catch (err) {
     console.error(
-      `${TAG72} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG74} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return [];
   }
@@ -42208,7 +42378,7 @@ function composeInitialMessage(input) {
 }
 async function dispatchReviewer(input, initialMessage) {
   const sessionId = randomUUID14();
-  console.log(`${TAG72} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
+  console.log(`${TAG74} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -42232,21 +42402,21 @@ async function firePublicSessionEndReview(input) {
   const dispatchedAt = Date.now();
   if (consumed.has(input.sessionId)) {
     console.log(
-      `${TAG72} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG74} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const jsonl = await fetchJsonl(input.sessionId);
   if (!jsonl) {
     console.log(
-      `${TAG72} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
+      `${TAG74} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
     );
     return;
   }
   const operatorTurns = countOperatorTurns(jsonl);
   if (operatorTurns === 0) {
     console.log(
-      `${TAG72} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
+      `${TAG74} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
     );
     return;
   }
@@ -42260,19 +42430,19 @@ async function firePublicSessionEndReview(input) {
   });
   if (!consumeOnce(input.sessionId)) {
     console.log(
-      `${TAG72} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG74} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const dispatched = await dispatchReviewer(input, initialMessage);
   if (!dispatched.ok) {
     console.error(
-      `${TAG72} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
+      `${TAG74} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
     );
     return;
   }
   console.log(
-    `${TAG72} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
+    `${TAG74} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
   );
 }
 
@@ -42541,10 +42711,10 @@ function* walkTelegramSidecars() {
 }
 
 // server/telegram-group-census.ts
-var TAG73 = "[telegram-audit]";
+var TAG75 = "[telegram-audit]";
 var PRESENT_STATUSES = /* @__PURE__ */ new Set(["member", "administrator", "creator"]);
 function buildGroupCensusLine(c) {
-  return `${TAG73} op=group-census bots=${c.bots} groups=${c.groups} present=${c.present} absent=${c.absent} privacyOff=${c.privacyOff}`;
+  return `${TAG75} op=group-census bots=${c.bots} groups=${c.groups} present=${c.present} absent=${c.absent} privacyOff=${c.privacyOff}`;
 }
 async function runTelegramGroupCensus(accounts, deps) {
   const counts = { bots: 0, groups: 0, present: 0, absent: 0, privacyOff: 0 };
@@ -42575,10 +42745,10 @@ async function runTelegramGroupCensus(accounts, deps) {
 }
 
 // server/telegram-channel-census.ts
-var TAG74 = "[telegram-audit]";
+var TAG76 = "[telegram-audit]";
 var ADMIN_STATUSES = /* @__PURE__ */ new Set(["administrator", "creator"]);
 function buildChannelCensusLine(c) {
-  return `${TAG74} op=channel-census bots=${c.bots} channels=${c.channels} admin=${c.admin} notAdmin=${c.notAdmin} noPostRight=${c.noPostRight}`;
+  return `${TAG76} op=channel-census bots=${c.bots} channels=${c.channels} admin=${c.admin} notAdmin=${c.notAdmin} noPostRight=${c.noPostRight}`;
 }
 async function runTelegramChannelCensus(accounts, deps) {
   const counts = { bots: 0, channels: 0, admin: 0, notAdmin: 0, noPostRight: 0 };
@@ -44204,6 +44374,9 @@ app80.route("/api/webchat", createWebchatRoutes({
   // Task 940 — the permission relay's pointer read + verdict write.
   pendingPromptFor: (key2) => webchatGateway.pendingPromptFor(key2),
   deliveryFailureFor: (key2) => webchatGateway.deliveryFailureFor(key2),
+  // Task 2439 — the deferred send continuation's only way to report that a
+  // staged upload will never produce a turn.
+  markDeliveryFailure: (key2, messageId) => webchatGateway.markDeliveryFailure(key2, messageId),
   resolvePermissionVerdict: (key2, requestId, behavior) => webchatGateway.resolvePermissionVerdict(key2, requestId, behavior)
 }));
 app80.route("/api/webchat/greeting", webchat_greeting_default);