@rubytech/create-maxy 1.0.806 → 1.0.808

package/payload/server/server.js

@@ -6,6 +6,7 @@ import {
   TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE,
   TELEGRAM_WEBHOOK_SECRET_FILE,
   USERS_FILE,
+  actionLogPath,
   autoDeliverPremiumPlugins,
   buildX11Env,
   callOauthLlm,
@@ -29,6 +30,7 @@ import {
   launchAction,
   load,
   logPath,
+  reconcileCloudflareSetupFromLog,
   recordFailedAttempt,
   render,
   renderLoginPage,
@@ -50,7 +52,7 @@ import {
   vncLog,
   waitForExit,
   writeChromiumWrapper
-} from "./chunk-SC3ZSD7N.js";
+} from "./chunk-V3VLAL7N.js";
 import {
   ACCOUNTS_DIR,
   GREETING_DIRECTIVE,
@@ -65,6 +67,7 @@ import {
   deleteAgentProjection,
   deleteConversation,
   embed,
+  ensureConversation,
   fetchBranding,
   findGroupBySlug,
   findRecentConversation,
@@ -113,7 +116,7 @@ import {
   verifyAndGetConversationUpdatedAt,
   verifyConversationOwnership,
   writeAdminUserAndPerson
-} from "./chunk-LTIWPCUF.js";
+} from "./chunk-CRWLE6BZ.js";
 import {
   __commonJS,
   __toESM
@@ -616,8 +619,8 @@ var serveStatic = (options = { root: "" }) => {
 };
 
 // server/index.ts
-import { readFileSync as readFileSync17, existsSync as existsSync24, watchFile } from "fs";
-import { resolve as resolve24, join as join10, basename as basename7 } from "path";
+import { readFileSync as readFileSync18, existsSync as existsSync25, watchFile } from "fs";
+import { resolve as resolve24, join as join11, basename as basename7 } from "path";
 import { homedir as homedir2 } from "os";
 
 // app/lib/agent-slug-pattern.ts
@@ -803,6 +806,28 @@ function defaultRules() {
       scope: "session",
       suggestedAction: "The WebFetch SPA preflight has fired more than once in this conversation. Either the agent is ignoring the loud-failure directive (retrying WebFetch after seeing WEBFETCH_CANNOT_READ_JS_SPA), or multiple SPA URLs are being asked about. Read the conversation's stream log for the [tool-use] / [tool-result] sequence around each occurrence \u2014 if the agent dispatched WebFetch on the same URL or substituted Playwright silently, revisit the IDENTITY.md `Tool Failure Discipline` paragraph that names structured-error handling."
     },
+    {
+      // Task 867 — fires when setup-tunnel.sh emits step=done but no
+      // `[persist] role=user … Cloudflare setup completed (actionId: <id>)`
+      // line appears within 60s. Covers the three failure modes of the
+      // action-relay-queue plumbing: queue-write failed, boot-drain consumer
+      // skipped the record, or the agent's hoisted persist threw. The
+      // followup pattern is intentionally narrow to the cloudflare-setup
+      // relay shape (not a general "any user persist") so a benign user
+      // typing in chat does not satisfy the followup. logSource=any so
+      // the rule sees both the script tee (in stream logs / server.log)
+      // and the [persist] line (server.log).
+      id: "cloudflare-setup-relay-not-acknowledged",
+      name: "Cloudflare-setup completed but the chat relay never acknowledged",
+      type: "absent-followup",
+      logSource: "any",
+      pattern: "\\[script:setup-tunnel\\] step=done",
+      followupPattern: "\\[persist\\] .*role=user.* Cloudflare setup completed \\(actionId:",
+      followupWindowMs: 6e4,
+      thresholdCount: 0,
+      thresholdWindowMinutes: 0,
+      suggestedAction: "[Task 867] cloudflare-setup completed but the post-action relay never reached the chat history. Check `[action-relay-queue] phase=enqueued` (queue write), `[action-completion-relay] phase=consumed` (boot-drain ran), and `[persist] role=user \u2026 Cloudflare setup completed` (graph write). One of those is missing; the matching grep recipe is in the Task 867 brief Observability section."
+    },
     {
       // Task 538: fires when a [spawn] line appears in a conversation's stream
       // log but no subprocess-lifecycle marker follows within 10s. The three
@@ -3739,6 +3764,37 @@ function sanitizeReason(err) {
   return `${err.name}:${msg}`;
 }
 
+// app/lib/whatsapp/ensure-conversation.ts
+var TAG8 = "[whatsapp-persist]";
+async function ensureWhatsAppConversation(input) {
+  const t0 = Date.now();
+  try {
+    const result = await ensureConversation(
+      input.accountId,
+      input.agentType,
+      input.sessionKey
+    );
+    const ms = Date.now() - t0;
+    if (!result.conversationId) {
+      console.error(
+        `${TAG8} conversation-merged FAIL sessionKey=${input.sessionKey} reason=null-conversationId ms=${ms}`
+      );
+      return null;
+    }
+    console.error(
+      `${TAG8} conversation-merged sessionKey=${input.sessionKey} agentType=${input.agentType} channel=whatsapp created=${result.created} ms=${ms}`
+    );
+    return { conversationId: result.conversationId, created: result.created };
+  } catch (err) {
+    const ms = Date.now() - t0;
+    const reason = err instanceof Error ? `${err.name}:${err.message.slice(0, 200)}` : String(err).slice(0, 200);
+    console.error(
+      `${TAG8} conversation-merged FAIL sessionKey=${input.sessionKey} reason=${reason} ms=${ms}`
+    );
+    return null;
+  }
+}
+
 // app/lib/whatsapp/inbound/media.ts
 import { randomUUID as randomUUID3 } from "crypto";
 import { writeFile, mkdir } from "fs/promises";
@@ -3748,7 +3804,7 @@ import {
   downloadContentFromMessage,
   normalizeMessageContent as normalizeMessageContent2
 } from "@whiskeysockets/baileys";
-var TAG8 = "[whatsapp:media]";
+var TAG9 = "[whatsapp:media]";
 var MEDIA_DIR = "/tmp/maxy-media";
 function mimeToExt(mimetype) {
   const map = {
@@ -3804,25 +3860,25 @@ async function downloadInboundMedia(msg, sock, opts) {
       }
     );
     if (!buffer || buffer.length === 0) {
-      console.error(`${TAG8} primary download returned empty, trying direct fallback`);
+      console.error(`${TAG9} primary download returned empty, trying direct fallback`);
       const downloadable = getDownloadableContent(content);
       if (downloadable) {
         try {
           const stream = await downloadContentFromMessage(downloadable.downloadable, downloadable.mediaType);
           buffer = await streamToBuffer(stream);
         } catch (fallbackErr) {
-          console.error(`${TAG8} direct download fallback failed: ${String(fallbackErr)}`);
+          console.error(`${TAG9} direct download fallback failed: ${String(fallbackErr)}`);
         }
       }
     }
     if (!buffer || buffer.length === 0) {
-      console.error(`${TAG8} download failed: empty buffer for ${mimetype ?? "unknown"}`);
+      console.error(`${TAG9} download failed: empty buffer for ${mimetype ?? "unknown"}`);
       return void 0;
     }
     if (buffer.length > maxBytes) {
       const sizeMB = (buffer.length / (1024 * 1024)).toFixed(1);
       const limitMB = (maxBytes / (1024 * 1024)).toFixed(0);
-      console.error(`${TAG8} media too large type=${mimetype ?? "unknown"} size=${sizeMB}MB limit=${limitMB}MB`);
+      console.error(`${TAG9} media too large type=${mimetype ?? "unknown"} size=${sizeMB}MB limit=${limitMB}MB`);
       return void 0;
     }
     await mkdir(MEDIA_DIR, { recursive: true });
@@ -3831,20 +3887,20 @@ async function downloadInboundMedia(msg, sock, opts) {
     const filePath = join4(MEDIA_DIR, filename);
     await writeFile(filePath, buffer);
     const sizeKB = (buffer.length / 1024).toFixed(0);
-    console.error(`${TAG8} media downloaded type=${mimetype ?? "unknown"} size=${sizeKB}KB path=${filePath}`);
+    console.error(`${TAG9} media downloaded type=${mimetype ?? "unknown"} size=${sizeKB}KB path=${filePath}`);
     return {
       path: filePath,
       mimetype: mimetype ?? "application/octet-stream",
       size: buffer.length
     };
   } catch (err) {
-    console.error(`${TAG8} media download failed type=${mimetype ?? "unknown"} error=${String(err)}`);
+    console.error(`${TAG9} media download failed type=${mimetype ?? "unknown"} error=${String(err)}`);
     return void 0;
   }
 }
 
 // app/lib/whatsapp/inbound/debounce.ts
-var TAG9 = "[whatsapp:debounce]";
+var TAG10 = "[whatsapp:debounce]";
 var STT_TAG = "[whatsapp:stt-await]";
 function createInboundDebouncer(opts) {
   const { debounceMs, buildKey, onFlush, onError } = opts;
@@ -3875,7 +3931,7 @@ function createInboundDebouncer(opts) {
     pending.delete(key);
     const batchSize = batch.entries.length;
     try {
-      console.error(`${TAG9} debounce flush key=${key} batchSize=${batchSize}`);
+      console.error(`${TAG10} debounce flush key=${key} batchSize=${batchSize}`);
       const result = onFlush(batch.entries);
       if (result && typeof result.catch === "function") {
         result.catch(onError);
@@ -3947,7 +4003,7 @@ function createInboundDebouncer(opts) {
 }
 
 // app/lib/whatsapp/opening-hours.ts
-var TAG10 = "[whatsapp:hours]";
+var TAG11 = "[whatsapp:hours]";
 async function isBusinessOpen(accountId) {
   try {
     const timezone = await resolveTimezone(accountId);
@@ -3965,7 +4021,7 @@ async function isBusinessOpen(accountId) {
         { accountId, dayOfWeek, previousDayOfWeek }
       );
       if (result.records.length === 0) {
-        console.error(`${TAG10} [${accountId}] business hours check: no opening hours configured, treating as open`);
+        console.error(`${TAG11} [${accountId}] business hours check: no opening hours configured, treating as open`);
         return { open: true, reason: "no opening hours configured" };
       }
       const specs = result.records.filter((r) => r.get("opens") != null && r.get("closes") != null).map((r) => ({
@@ -3974,7 +4030,7 @@ async function isBusinessOpen(accountId) {
         closes: String(r.get("closes")).trim()
       }));
       if (specs.length === 0) {
-        console.error(`${TAG10} [${accountId}] business hours check: no opening hours configured, treating as open`);
+        console.error(`${TAG11} [${accountId}] business hours check: no opening hours configured, treating as open`);
         return { open: true, reason: "no opening hours configured" };
       }
       for (const spec of specs) {
@@ -3984,7 +4040,7 @@ async function isBusinessOpen(accountId) {
           if (spec.opens > spec.closes && currentTime < spec.closes) {
             const hoursStr = `${spec.opens}-${spec.closes} (${spec.day})`;
             console.error(
-              `${TAG10} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
+              `${TAG11} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
             );
             return {
               open: true,
@@ -3997,7 +4053,7 @@ async function isBusinessOpen(accountId) {
         } else if (isTimeInRange(currentTime, spec.opens, spec.closes)) {
           const hoursStr = `${spec.opens}-${spec.closes}`;
           console.error(
-            `${TAG10} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
+            `${TAG11} [${accountId}] business hours check: open (day=${dayOfWeek}, time=${currentTime}, hours=${hoursStr})`
           );
           return {
             open: true,
@@ -4011,7 +4067,7 @@ async function isBusinessOpen(accountId) {
       const todaySpecs = specs.filter((s) => s.day === dayOfWeek);
       const allHours = todaySpecs.map((s) => `${s.opens}-${s.closes}`).join(", ") || "none today";
       console.error(
-        `${TAG10} [${accountId}] business hours check: closed (day=${dayOfWeek}, time=${currentTime}, hours=${allHours})`
+        `${TAG11} [${accountId}] business hours check: closed (day=${dayOfWeek}, time=${currentTime}, hours=${allHours})`
       );
       return {
         open: false,
@@ -4025,7 +4081,7 @@ async function isBusinessOpen(accountId) {
     }
   } catch (err) {
     console.error(
-      `${TAG10} [${accountId}] business hours check failed, treating as open: ${err instanceof Error ? err.message : String(err)}`
+      `${TAG11} [${accountId}] business hours check failed, treating as open: ${err instanceof Error ? err.message : String(err)}`
     );
     return { open: true, reason: "hours check failed (treating as open)" };
   }
@@ -4071,7 +4127,7 @@ import { execFile } from "child_process";
 import { unlink, stat } from "fs/promises";
 import { promisify } from "util";
 var execFileAsync = promisify(execFile);
-var TAG11 = "[stt]";
+var TAG12 = "[stt]";
 var WHISPER_BINARY = process.env.WHISPER_BINARY ?? "/opt/whisper.cpp/build/bin/whisper-cli";
 var WHISPER_MODEL = process.env.WHISPER_MODEL ?? "/opt/whisper.cpp/models/ggml-base.bin";
 var WHISPER_TIMEOUT_MS = 20 * 60 * 1e3;
@@ -4082,11 +4138,11 @@ async function transcribe(audioPath, mimetype) {
     const s = await stat(audioPath);
     audioBytes = s.size;
   } catch {
-    console.error(`${TAG11} failed: file not readable path=${audioPath}`);
+    console.error(`${TAG12} failed: file not readable path=${audioPath}`);
     return void 0;
   }
   console.error(
-    `${TAG11} start provider=whisper-local audio_bytes=${audioBytes} mimetype=${mimetype} path=${audioPath}`
+    `${TAG12} start provider=whisper-local audio_bytes=${audioBytes} mimetype=${mimetype} path=${audioPath}`
   );
   const wavPath = audioPath.replace(/\.[^.]+$/, "") + ".wav";
   try {
@@ -4105,7 +4161,7 @@ async function transcribe(audioPath, mimetype) {
     ], { timeout: 3e4 });
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG11} failed: ffmpeg conversion error=${reason}`);
+    console.error(`${TAG12} failed: ffmpeg conversion error=${reason}`);
     return void 0;
   }
   try {
@@ -4123,20 +4179,20 @@ async function transcribe(audioPath, mimetype) {
     const text = stdout.trim();
     const durationMs = Date.now() - startMs;
     if (!text) {
-      console.error(`${TAG11} failed: whisper returned empty output duration_ms=${durationMs}`);
+      console.error(`${TAG12} failed: whisper returned empty output duration_ms=${durationMs}`);
       return void 0;
     }
     const langMatch = stderr.match(/auto-detected language:\s*(\w+)/);
     const language = langMatch?.[1] ?? "unknown";
     const words = text.split(/\s+/).filter(Boolean).length;
     console.error(
-      `${TAG11} done provider=whisper-local duration_ms=${durationMs} words=${words} lang=${language}`
+      `${TAG12} done provider=whisper-local duration_ms=${durationMs} words=${words} lang=${language}`
     );
     return { text, language, durationMs };
   } catch (err) {
     const durationMs = Date.now() - startMs;
     const reason = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG11} failed provider=whisper-local duration_ms=${durationMs} error=${reason}`);
+    console.error(`${TAG12} failed provider=whisper-local duration_ms=${durationMs} error=${reason}`);
     return void 0;
   } finally {
     unlink(wavPath).catch(() => {
@@ -4145,7 +4201,7 @@ async function transcribe(audioPath, mimetype) {
 }
 
 // app/lib/whatsapp/manager.ts
-var TAG12 = "[whatsapp:manager]";
+var TAG13 = "[whatsapp:manager]";
 var MAX_RECONNECT_ATTEMPTS = 10;
 var MESSAGE_STORE_MAX = 500;
 var GROUP_META_TTL = 5 * 60 * 1e3;
@@ -4165,7 +4221,7 @@ function storeMessage(storeKey, entry) {
   if (entries.length > MESSAGE_STORE_MAX) {
     const trimmed = entries.length - MESSAGE_STORE_MAX;
     entries.splice(0, trimmed);
-    console.error(`${TAG12} message store trimmed for ${storeKey}: ${trimmed} oldest messages removed`);
+    console.error(`${TAG13} message store trimmed for ${storeKey}: ${trimmed} oldest messages removed`);
   }
 }
 function deriveSessionKey(input) {
@@ -4184,7 +4240,7 @@ function deriveSessionKey(input) {
 }
 async function init(opts) {
   if (initialized) {
-    console.error(`${TAG12} already initialized`);
+    console.error(`${TAG13} already initialized`);
     return;
   }
   configDir = opts.configDir;
@@ -4192,20 +4248,20 @@ async function init(opts) {
   loadConfig(opts.accountConfig);
   const accountIds = listCredentialAccountIds(configDir);
   if (accountIds.length === 0) {
-    console.error(`${TAG12} init: no stored WhatsApp credentials found`);
+    console.error(`${TAG13} init: no stored WhatsApp credentials found`);
     initialized = true;
     return;
   }
-  console.error(`${TAG12} init: found ${accountIds.length} credentialed account(s): ${accountIds.join(", ")}`);
+  console.error(`${TAG13} init: found ${accountIds.length} credentialed account(s): ${accountIds.join(", ")}`);
   initialized = true;
   for (const accountId of accountIds) {
     const accountCfg = whatsAppConfig.accounts?.[accountId];
     if (accountCfg?.enabled === false) {
-      console.error(`${TAG12} skipping disabled account=${accountId}`);
+      console.error(`${TAG13} skipping disabled account=${accountId}`);
       continue;
     }
     startConnection(accountId).catch((err) => {
-      console.error(`${TAG12} failed to auto-start account=${accountId}: ${formatError(err)}`);
+      console.error(`${TAG13} failed to auto-start account=${accountId}: ${formatError(err)}`);
     });
   }
 }
@@ -4214,7 +4270,7 @@ async function startConnection(accountId) {
   const authDir = resolveAuthDir(configDir, accountId);
   const hasAuth = await authExists(authDir);
   if (!hasAuth) {
-    console.error(`${TAG12} no credentials for account=${accountId}`);
+    console.error(`${TAG13} no credentials for account=${accountId}`);
     return;
   }
   await stopConnection(accountId);
@@ -4250,11 +4306,11 @@ async function stopConnection(accountId) {
       conn.sock.ev.removeAllListeners("creds.update");
       conn.sock.ws?.close?.();
     } catch (err) {
-      console.warn(`${TAG12} socket cleanup error during stop account=${accountId}: ${String(err)}`);
+      console.warn(`${TAG13} socket cleanup error during stop account=${accountId}: ${String(err)}`);
     }
   }
   connections.delete(accountId);
-  console.error(`${TAG12} stopped account=${accountId}`);
+  console.error(`${TAG13} stopped account=${accountId}`);
 }
 function getStatus() {
   return Array.from(connections.values()).map((conn) => ({
@@ -4295,9 +4351,9 @@ async function registerLoginSocket(accountId, sock, authDir) {
   connections.set(accountId, conn);
   try {
     await sock.sendPresenceUpdate("available");
-    console.error(`${TAG12} presence set to available account=${accountId}`);
+    console.error(`${TAG13} presence set to available account=${accountId}`);
   } catch (err) {
-    console.error(`${TAG12} presence update failed account=${accountId}: ${String(err)}`);
+    console.error(`${TAG13} presence update failed account=${accountId}: ${String(err)}`);
   }
   await runInitQueries(sock, {
     accountId,
@@ -4308,7 +4364,7 @@ async function registerLoginSocket(accountId, sock, authDir) {
   });
   monitorInbound(conn);
   watchForDisconnect(conn);
-  console.error(`${TAG12} registered login socket for account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
+  console.error(`${TAG13} registered login socket for account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
 }
 function reloadConfig(accountConfig) {
   loadConfig(accountConfig);
@@ -4332,7 +4388,7 @@ async function shutdown() {
   const ids = Array.from(connections.keys());
   await Promise.all(ids.map((id) => stopConnection(id)));
   initialized = false;
-  console.error(`${TAG12} shutdown complete`);
+  console.error(`${TAG13} shutdown complete`);
 }
 function loadConfig(accountConfig) {
   try {
@@ -4344,12 +4400,12 @@ function loadConfig(accountConfig) {
       if (parsed.success) {
         whatsAppConfig = parsed.data;
       } else {
-        console.error(`${TAG12} config validation failed: ${parsed.error.message}`);
+        console.error(`${TAG13} config validation failed: ${parsed.error.message}`);
         whatsAppConfig = {};
       }
     }
   } catch (err) {
-    console.error(`${TAG12} config load error: ${String(err)}`);
+    console.error(`${TAG13} config load error: ${String(err)}`);
     whatsAppConfig = {};
   }
 }
@@ -4360,13 +4416,13 @@ async function connectWithReconnect(conn) {
     let cycleError = null;
     let connectedAt;
     try {
-      console.error(`${TAG12} connecting account=${conn.accountId} attempt=${conn.reconnectAttempts}`);
+      console.error(`${TAG13} connecting account=${conn.accountId} attempt=${conn.reconnectAttempts}`);
       const sock = await createWaSocket({
         authDir: conn.authDir,
         silent: true
       });
       conn.sock = sock;
-      console.error(`${TAG12} socket created account=${conn.accountId} \u2014 waiting for connection`);
+      console.error(`${TAG13} socket created account=${conn.accountId} \u2014 waiting for connection`);
       await waitForConnection(sock);
       const selfId = readSelfId(conn.authDir);
       connectedAt = Date.now();
@@ -4376,12 +4432,12 @@ async function connectWithReconnect(conn) {
       conn.lastConnectedAt = connectedAt;
       conn.lastError = void 0;
       conn.lidMapping = sock.signalRepository?.lidMapping ?? null;
-      console.error(`${TAG12} connected account=${conn.accountId} phone=${selfId.e164 ?? "unknown"}`);
+      console.error(`${TAG13} connected account=${conn.accountId} phone=${selfId.e164 ?? "unknown"}`);
       try {
         await sock.sendPresenceUpdate("available");
-        console.error(`${TAG12} presence set to available account=${conn.accountId}`);
+        console.error(`${TAG13} presence set to available account=${conn.accountId}`);
       } catch (err) {
-        console.error(`${TAG12} presence update failed account=${conn.accountId}: ${String(err)}`);
+        console.error(`${TAG13} presence update failed account=${conn.accountId}: ${String(err)}`);
       }
       await runInitQueries(sock, {
         accountId: conn.accountId,
@@ -4408,9 +4464,9 @@ async function connectWithReconnect(conn) {
       }
       const classification = classifyDisconnect(err);
       conn.lastError = classification.message;
-      console.error(`${TAG12} disconnect account=${conn.accountId}: ${classification.kind} \u2014 ${classification.message}`);
+      console.error(`${TAG13} disconnect account=${conn.accountId}: ${classification.kind} \u2014 ${classification.message}`);
       if (!classification.shouldRetry) {
-        console.error(`${TAG12} terminal disconnect for account=${conn.accountId}, stopping reconnection`);
+        console.error(`${TAG13} terminal disconnect for account=${conn.accountId}, stopping reconnection`);
         return;
       }
     }
@@ -4423,7 +4479,7 @@ async function connectWithReconnect(conn) {
     if (decision.action === "abort") {
       const stuckReason = `GIVING UP account=${conn.accountId} attempts=${decision.finalAttempts}/${maxAttempts} uptimeMsLast=${uptimeMs} stableThresholdMs=${STABLE_UPTIME_MS} lastError=${conn.lastError ?? "(none)"}`;
       console.error(
-        `${TAG12} ${stuckReason} \u2014 re-pair via QR or restart required; WhatsApp will not reconnect automatically`
+        `${TAG13} ${stuckReason} \u2014 re-pair via QR or restart required; WhatsApp will not reconnect automatically`
       );
       conn.sessionStuckReason = stuckReason;
       conn.lastError = stuckReason;
@@ -4432,17 +4488,17 @@ async function connectWithReconnect(conn) {
     conn.reconnectAttempts = decision.nextAttempts;
     if (decision.reason === "short-lived") {
       console.error(
-        `${TAG12} short-lived session account=${conn.accountId} uptimeMs=${uptimeMs} attempt=${decision.nextAttempts}/${maxAttempts} lastError=${conn.lastError ?? "(clean disconnect)"}`
+        `${TAG13} short-lived session account=${conn.accountId} uptimeMs=${uptimeMs} attempt=${decision.nextAttempts}/${maxAttempts} lastError=${conn.lastError ?? "(clean disconnect)"}`
       );
     } else {
       console.error(
-        `${TAG12} session stable account=${conn.accountId} uptimeMs=${uptimeMs} \u2014 reconnect counter reset`
+        `${TAG13} session stable account=${conn.accountId} uptimeMs=${uptimeMs} \u2014 reconnect counter reset`
       );
     }
     if (decision.reason === "short-lived" || cycleError) {
       const delay = computeBackoff(Math.max(1, decision.nextAttempts));
       console.error(
-        `${TAG12} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
+        `${TAG13} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
       await new Promise((resolve25) => {
         const timer2 = setTimeout(resolve25, delay);
@@ -4476,11 +4532,11 @@ function watchForDisconnect(conn) {
   conn.sock.ev.on("connection.update", (update) => {
     if (update.connection === "close") {
       if (connections.get(conn.accountId) !== conn) return;
-      console.error(`${TAG12} socket disconnected for account=${conn.accountId}`);
+      console.error(`${TAG13} socket disconnected for account=${conn.accountId}`);
       conn.connected = false;
       conn.sock = null;
       connectWithReconnect(conn).catch((err) => {
-        console.error(`${TAG12} reconnection failed for account=${conn.accountId}: ${formatError(err)}`);
+        console.error(`${TAG13} reconnection failed for account=${conn.accountId}: ${formatError(err)}`);
       });
     }
   });
@@ -4489,7 +4545,7 @@ async function getGroupMeta(conn, jid) {
   const cached = conn.groupMetaCache.get(jid);
   if (cached && cached.expires > Date.now()) return cached;
   if (!conn.sock) return null;
-  console.error(`${TAG12} group metadata cache miss for ${jid}, fetching from Baileys account=${conn.accountId}`);
+  console.error(`${TAG13} group metadata cache miss for ${jid}, fetching from Baileys account=${conn.accountId}`);
   try {
     const meta = await conn.sock.groupMetadata(jid);
     const participants = await Promise.all(
@@ -4504,12 +4560,12 @@ async function getGroupMeta(conn, jid) {
     };
     conn.groupMetaCache.set(jid, entry);
     console.error(
-      `${TAG12} group metadata cached for ${jid}: "${meta.subject}", ${participants.length} participants, expires in ${GROUP_META_TTL}ms account=${conn.accountId}`
+      `${TAG13} group metadata cached for ${jid}: "${meta.subject}", ${participants.length} participants, expires in ${GROUP_META_TTL}ms account=${conn.accountId}`
     );
     return entry;
   } catch (err) {
     console.error(
-      `${TAG12} group metadata fetch failed for ${jid}: ${err instanceof Error ? err.message : String(err)}, caching empty entry for ${GROUP_META_TTL}ms account=${conn.accountId}`
+      `${TAG13} group metadata fetch failed for ${jid}: ${err instanceof Error ? err.message : String(err)}, caching empty entry for ${GROUP_META_TTL}ms account=${conn.accountId}`
     );
     const emptyEntry = { expires: Date.now() + GROUP_META_TTL };
     conn.groupMetaCache.set(jid, emptyEntry);
@@ -4520,7 +4576,7 @@ function monitorInbound(conn) {
   if (!conn.sock || !onInboundMessage) return;
   const sock = conn.sock;
   const debounceMs = whatsAppConfig.accounts?.[conn.accountId]?.debounceMs ?? whatsAppConfig.debounceMs ?? 0;
-  console.error(`${TAG12} monitorInbound started account=${conn.accountId} debounceMs=${debounceMs}`);
+  console.error(`${TAG13} monitorInbound started account=${conn.accountId} debounceMs=${debounceMs}`);
   conn.debouncer = createInboundDebouncer({
     debounceMs,
     buildKey: (payload) => {
@@ -4533,7 +4589,7 @@ function monitorInbound(conn) {
         onInboundMessage(entries[0]);
         return;
       }
-      console.error(`${TAG12} debounce: combining ${entries.length} messages account=${conn.accountId} from=${entries[0].senderPhone}`);
+      console.error(`${TAG13} debounce: combining ${entries.length} messages account=${conn.accountId} from=${entries[0].senderPhone}`);
       const last = entries[entries.length - 1];
       const mediaEntry = entries.find((e) => e.mediaPath);
       const combinedText = entries.map((e) => e.text).filter(Boolean).join("\n");
@@ -4546,7 +4602,7 @@ function monitorInbound(conn) {
       });
     },
     onError: (err) => {
-      console.error(`${TAG12} debounce flush error account=${conn.accountId}: ${String(err)}`);
+      console.error(`${TAG13} debounce flush error account=${conn.accountId}: ${String(err)}`);
     }
   });
   sock.ev.on("messages.upsert", async (upsert) => {
@@ -4574,7 +4630,7 @@ function monitorInbound(conn) {
           });
           const entries = messageStore.get(storeKey);
           console.error(
-            `${TAG12} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries?.length ?? 0}/${MESSAGE_STORE_MAX}) account=${conn.accountId}`
+            `${TAG13} stored message ${msg.key.id ?? "?"} for ${remoteJid} (type: ${upsert.type}, store size: ${entries?.length ?? 0}/${MESSAGE_STORE_MAX}) account=${conn.accountId}`
           );
           recordActivity({
             accountId: conn.accountId,
@@ -4597,23 +4653,31 @@ function monitorInbound(conn) {
             isOwnerMirror: fromMe && !isGroup
           });
           if (msg.key.id) {
-            await persistWhatsAppMessage({
+            const merged = await ensureWhatsAppConversation({
               accountId: conn.accountId,
-              remoteJid,
               sessionKey,
-              msgKeyId: msg.key.id,
-              fromMe,
-              senderPhone,
-              selfPhone: conn.selfPhone,
-              body: extracted.text,
-              timestamp: ts,
-              pushName: msg.pushName ?? void 0,
-              quoted: extracted.quotedMessage ? {
-                id: extracted.quotedMessage.id,
-                body: extracted.quotedMessage.text,
-                sender: extracted.quotedMessage.sender
-              } : void 0
+              agentType: sessionKeyAgentType,
+              groupJid: isGroup ? remoteJid : void 0
             });
+            if (merged) {
+              await persistWhatsAppMessage({
+                accountId: conn.accountId,
+                remoteJid,
+                sessionKey,
+                msgKeyId: msg.key.id,
+                fromMe,
+                senderPhone,
+                selfPhone: conn.selfPhone,
+                body: extracted.text,
+                timestamp: ts,
+                pushName: msg.pushName ?? void 0,
+                quoted: extracted.quotedMessage ? {
+                  id: extracted.quotedMessage.id,
+                  body: extracted.quotedMessage.text,
+                  sender: extracted.quotedMessage.sender
+                } : void 0
+              });
+            }
           }
         }
         if (upsert.type === "append") {
@@ -4627,13 +4691,13 @@ function monitorInbound(conn) {
             );
           }
           console.error(
-            `${TAG12} append-type message ${msg.key.id ?? "?"} stored, dispatch skipped account=${conn.accountId}`
+            `${TAG13} append-type message ${msg.key.id ?? "?"} stored, dispatch skipped account=${conn.accountId}`
           );
           continue;
         }
         await handleInboundMessage(conn, msg);
       } catch (err) {
-        console.error(`${TAG12} inbound handler error account=${conn.accountId}: ${String(err)}`);
+        console.error(`${TAG13} inbound handler error account=${conn.accountId}: ${String(err)}`);
       }
     }
   });
@@ -4643,31 +4707,31 @@ async function handleInboundMessage(conn, msg) {
   const remoteJid = msg.key.remoteJid;
   if (!remoteJid) return;
   if (remoteJid === "status@broadcast") {
-    console.error(`${TAG12} drop: status broadcast account=${conn.accountId}`);
+    console.error(`${TAG13} drop: status broadcast account=${conn.accountId}`);
     return;
   }
   if (!msg.message) {
-    console.error(`${TAG12} drop: empty message account=${conn.accountId} from=${remoteJid}`);
+    console.error(`${TAG13} drop: empty message account=${conn.accountId} from=${remoteJid}`);
     return;
   }
   const dedupKey = `${conn.accountId}:${remoteJid}:${msg.key.id}`;
   if (isDuplicateInbound(dedupKey)) {
-    console.error(`${TAG12} drop: duplicate account=${conn.accountId} key=${dedupKey}`);
+    console.error(`${TAG13} drop: duplicate account=${conn.accountId} key=${dedupKey}`);
     return;
   }
   if (msg.key.fromMe) {
     if (msg.key.id && isAgentSentMessage(msg.key.id)) {
-      console.error(`${TAG12} drop: echo suppression account=${conn.accountId} msgId=${msg.key.id}`);
+      console.error(`${TAG13} drop: echo suppression account=${conn.accountId} msgId=${msg.key.id}`);
       return;
     }
     const extracted2 = extractMessage(msg);
     if (!extracted2.text) {
-      console.error(`${TAG12} owner reply skipped \u2014 no text content account=${conn.accountId}`);
+      console.error(`${TAG13} owner reply skipped \u2014 no text content account=${conn.accountId}`);
       return;
     }
     const isGroup2 = isGroupJid(remoteJid);
     const senderPhone2 = conn.selfPhone ?? "owner";
-    console.error(`${TAG12} owner reply mirrored to session from=${senderPhone2} account=${conn.accountId}`);
+    console.error(`${TAG13} owner reply mirrored to session from=${senderPhone2} account=${conn.accountId}`);
     const reply2 = async (text) => {
       const currentSock = conn.sock;
       if (!currentSock) throw new Error("WhatsApp disconnected \u2014 cannot reply");
@@ -4695,7 +4759,7 @@ async function handleInboundMessage(conn, msg) {
   }
   const extracted = extractMessage(msg);
   if (!extracted.text && !extracted.mediaType) {
-    console.error(`${TAG12} drop: no text or media account=${conn.accountId} from=${remoteJid}`);
+    console.error(`${TAG13} drop: no text or media account=${conn.accountId} from=${remoteJid}`);
     return;
   }
   let mediaResult;
@@ -4705,7 +4769,7 @@ async function handleInboundMessage(conn, msg) {
       maxBytes: maxMb * 1024 * 1024
     });
     if (!mediaResult) {
-      console.error(`${TAG12} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
+      console.error(`${TAG13} media download returned undefined account=${conn.accountId} type=${extracted.mediaType} from=${remoteJid}`);
     }
   }
   const isGroup = isGroupJid(remoteJid);
@@ -4750,7 +4814,7 @@ async function handleInboundMessage(conn, msg) {
     });
   }
   console.error(
-    `${TAG12} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (mediaResult ? ` mediaPath=${mediaResult.path}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
+    `${TAG13} inbound account=${conn.accountId} from=${senderPhone} group=${isGroup} access=${accessResult.allowed ? "allowed" : "blocked"}(${accessResult.reason}) agent=${accessResult.agentType}` + (extracted.mediaType ? ` media=${extracted.mediaType}` : "") + (mediaResult ? ` mediaPath=${mediaResult.path}` : "") + (extracted.quotedMessage ? ` replyTo=${extracted.quotedMessage.id}` : "")
   );
   if (!accessResult.allowed) return;
   let groupSubject;
@@ -4793,15 +4857,15 @@ async function handleInboundMessage(conn, msg) {
   if (accessResult.agentType === "public") {
     const hoursResult = await isBusinessOpen(conn.accountId);
     if (!hoursResult.open) {
-      console.error(`${TAG12} [${conn.accountId}] dispatch skipped: business closed`);
+      console.error(`${TAG13} [${conn.accountId}] dispatch skipped: business closed`);
       const afterHoursMessage = whatsAppConfig.accounts?.[conn.accountId]?.afterHoursMessage ?? whatsAppConfig.afterHoursMessage;
       if (afterHoursMessage) {
         try {
           await reply(afterHoursMessage);
-          console.error(`${TAG12} [${conn.accountId}] after-hours auto-reply sent to ${remoteJid}`);
+          console.error(`${TAG13} [${conn.accountId}] after-hours auto-reply sent to ${remoteJid}`);
         } catch (err) {
           console.error(
-            `${TAG12} [${conn.accountId}] after-hours auto-reply failed: ${err instanceof Error ? err.message : String(err)}`
+            `${TAG13} [${conn.accountId}] after-hours auto-reply failed: ${err instanceof Error ? err.message : String(err)}`
           );
         }
       }
@@ -5387,7 +5451,7 @@ async function storeGeneratedFile(accountId, filePath) {
 import { writeFile as writeFile3, mkdtemp, rm } from "fs/promises";
 import { tmpdir } from "os";
 import { join as join5 } from "path";
-var TAG13 = "[voice]";
+var TAG14 = "[voice]";
 var AUDIO_MIME_TYPES = /* @__PURE__ */ new Set([
   "audio/ogg",
   "audio/webm",
@@ -5419,7 +5483,7 @@ async function transcribeVoiceNote(file, source) {
   const bytes = file.size;
   const mimeType = file.type;
   console.error(
-    `${TAG13} recording send source=${source} duration_ms=unknown bytes=${bytes} format=${mimeType}`
+    `${TAG14} recording send source=${source} duration_ms=unknown bytes=${bytes} format=${mimeType}`
   );
   let tempDir;
   let tempPath;
@@ -5431,7 +5495,7 @@ async function transcribeVoiceNote(file, source) {
     await writeFile3(tempPath, buffer);
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG13} failed source=${source} error=temp-file-write: ${reason}`);
+    console.error(`${TAG14} failed source=${source} error=temp-file-write: ${reason}`);
     return { ok: false, error: "Could not process voice note" };
   }
   try {
@@ -5439,7 +5503,7 @@ async function transcribeVoiceNote(file, source) {
     if (!sttResult) {
       const elapsed2 = Date.now() - startMs;
       console.error(
-        `${TAG13} failed source=${source} error=transcription-failed duration_ms=${elapsed2}`
+        `${TAG14} failed source=${source} error=transcription-failed duration_ms=${elapsed2}`
       );
       return { ok: false, error: "Could not transcribe voice note. Please try again or type your message." };
     }
@@ -5447,7 +5511,7 @@ async function transcribeVoiceNote(file, source) {
     const elapsed = Date.now() - startMs;
     const words = rawText.split(/\s+/).filter(Boolean).length;
     console.error(
-      `${TAG13} transcribed source=${source} duration_ms=${elapsed} stt_ms=${sttResult.durationMs} words=${words}`
+      `${TAG14} transcribed source=${source} duration_ms=${elapsed} stt_ms=${sttResult.durationMs} words=${words}`
     );
     return {
       ok: true,
@@ -5457,7 +5521,7 @@ async function transcribeVoiceNote(file, source) {
     const elapsed = Date.now() - startMs;
     const reason = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG13} failed source=${source} error=${reason} duration_ms=${elapsed}`
+      `${TAG14} failed source=${source} error=${reason} duration_ms=${elapsed}`
     );
     return { ok: false, error: "Voice note transcription failed. Please try again or type your message." };
   } finally {
@@ -5492,7 +5556,7 @@ var VERDICT_DEFINITIONS = {
 };
 
 // app/lib/inbound-gateway.ts
-var TAG14 = "[inbound-gateway]";
+var TAG15 = "[inbound-gateway]";
 var GATEWAY_TIMEOUT_MS = 1e4;
 var MIN_WORDS_FOR_PROCESSING = 5;
 function defaultResult(rawText, latencyMs) {
@@ -5615,11 +5679,11 @@ async function processInbound(rawText, channel) {
       };
       result.fallthrough = false;
       console.warn(
-        `${TAG14} short-message-injection channel=${channel} words=${words.length} latency_ms=${result.latencyMs}`
+        `${TAG15} short-message-injection channel=${channel} words=${words.length} latency_ms=${result.latencyMs}`
       );
     } else {
       console.log(
-        `${TAG14} passthrough channel=${channel} reason=short-message words=${words.length} latency_ms=${result.latencyMs}`
+        `${TAG15} passthrough channel=${channel} reason=short-message words=${words.length} latency_ms=${result.latencyMs}`
       );
     }
     return result;
@@ -5636,13 +5700,13 @@ async function processInbound(rawText, channel) {
   const latencyMs = Date.now() - startMs;
   if (llmResult.kind === "fallback") {
     console.warn(
-      `${TAG14} fallthrough channel=${channel} reason=${llmResult.cause} detail=${llmResult.reason} latency_ms=${latencyMs}`
+      `${TAG15} fallthrough channel=${channel} reason=${llmResult.cause} detail=${llmResult.reason} latency_ms=${latencyMs}`
     );
     return defaultResult(rawText.trim(), latencyMs);
   }
   if (llmResult.kind !== "ok-tool") {
     console.warn(
-      `${TAG14} fallthrough channel=${channel} reason=no-tool-response latency_ms=${latencyMs}`
+      `${TAG15} fallthrough channel=${channel} reason=no-tool-response latency_ms=${latencyMs}`
     );
     return defaultResult(rawText.trim(), latencyMs);
   }
@@ -5652,7 +5716,7 @@ async function processInbound(rawText, channel) {
     const verdict = input.verdict;
     if (!processedText || !verdict || !["clean", "suspicious", "discard"].includes(verdict)) {
       console.warn(
-        `${TAG14} fallthrough channel=${channel} reason=mandatory-fields-missing latency_ms=${latencyMs} hasProcessedText=${!!processedText} verdict=${String(verdict)}`
+        `${TAG15} fallthrough channel=${channel} reason=mandatory-fields-missing latency_ms=${latencyMs} hasProcessedText=${!!processedText} verdict=${String(verdict)}`
       );
       return defaultResult(rawText.trim(), latencyMs);
     }
@@ -5680,18 +5744,18 @@ async function processInbound(rawText, channel) {
       fallthrough: false
     };
     console.log(
-      `${TAG14} channel=${channel} verdict=${verdict} promptInjection=${promptInjectionRisk} intent=${intent} language=${language} complexity=${complexity} requiresHistory=${requiresHistory} rewrite=${!isAdmin && processedText !== rawText.trim()} searchQuery=${searchQuery ? "yes" : "null"} latency_ms=${latencyMs}`
+      `${TAG15} channel=${channel} verdict=${verdict} promptInjection=${promptInjectionRisk} intent=${intent} language=${language} complexity=${complexity} requiresHistory=${requiresHistory} rewrite=${!isAdmin && processedText !== rawText.trim()} searchQuery=${searchQuery ? "yes" : "null"} latency_ms=${latencyMs}`
     );
     if (verdict !== "clean") {
       console.warn(
-        `${TAG14} ${verdict.toUpperCase()} channel=${channel} reason=${reason} promptInjection=${promptInjectionRisk}`
+        `${TAG15} ${verdict.toUpperCase()} channel=${channel} reason=${reason} promptInjection=${promptInjectionRisk}`
       );
     }
     return result;
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
     console.warn(
-      `${TAG14} fallthrough channel=${channel} reason=parse-error: ${reason} latency_ms=${latencyMs}`
+      `${TAG15} fallthrough channel=${channel} reason=parse-error: ${reason} latency_ms=${latencyMs}`
     );
     return defaultResult(rawText.trim(), latencyMs);
   }
@@ -6784,7 +6848,7 @@ function checkTelegramAccess(params) {
 }
 
 // server/routes/telegram.ts
-var TAG15 = "[telegram-webhook]";
+var TAG16 = "[telegram-webhook]";
 var TELEGRAM_API = "https://api.telegram.org";
 function getWebhookSecret(botType) {
   const filePath = botType === "admin" ? TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE : TELEGRAM_WEBHOOK_SECRET_FILE;
@@ -6808,12 +6872,12 @@ async function handleInbound(params) {
   const gatewayChannel = agentType === "admin" ? "telegram-admin" : "telegram-dm";
   registerSession(sessionKey, agentType, accountId);
   console.error(
-    `${TAG15} session registered: sessionKey=${sessionKey} agentType=${agentType} botType=${botType} senderId=${senderId} accountId=${accountId.slice(0, 8)}\u2026`
+    `${TAG16} session registered: sessionKey=${sessionKey} agentType=${agentType} botType=${botType} senderId=${senderId} accountId=${accountId.slice(0, 8)}\u2026`
   );
   const gatewayResult = await processInbound(text, gatewayChannel);
   if (gatewayResult.screening.verdict === "discard") {
     console.error(
-      `${TAG15} discarded: senderId=${senderId} chatId=${chatId} reason=${gatewayResult.screening.reason}`
+      `${TAG16} discarded: senderId=${senderId} chatId=${chatId} reason=${gatewayResult.screening.reason}`
     );
     return;
   }
@@ -6836,7 +6900,7 @@ async function handleInbound(params) {
     }
   } catch (err) {
     console.error(
-      `${TAG15} agent-error: chatId=${chatId} senderId=${senderId} error=${err instanceof Error ? err.message : String(err)}`
+      `${TAG16} agent-error: chatId=${chatId} senderId=${senderId} error=${err instanceof Error ? err.message : String(err)}`
     );
     responseText = "I'm having trouble right now. Please try again in a moment.";
   }
@@ -6854,12 +6918,12 @@ async function handleInbound(params) {
     const data = await res.json();
     if (!data.ok) {
       console.error(
-        `${TAG15} send-error: chatId=${chatId} error=${data.description ?? "unknown"}`
+        `${TAG16} send-error: chatId=${chatId} error=${data.description ?? "unknown"}`
       );
     }
   } catch (err) {
     console.error(
-      `${TAG15} send-error: chatId=${chatId} error=${err instanceof Error ? err.message : String(err)}`
+      `${TAG16} send-error: chatId=${chatId} error=${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
@@ -6867,28 +6931,28 @@ var app6 = new Hono();
 app6.post("/webhook", async (c) => {
   const botType = c.req.query("bot");
   if (!botType || botType !== "public" && botType !== "admin") {
-    console.error(`${TAG15} invalid-bot-type: received=${botType ?? "missing"}`);
+    console.error(`${TAG16} invalid-bot-type: received=${botType ?? "missing"}`);
     return c.json({ error: "Missing or invalid bot type" }, 400);
   }
   const storedSecret = getWebhookSecret(botType);
   if (!storedSecret) {
-    console.error(`${TAG15} secret=missing botType=${botType}`);
+    console.error(`${TAG16} secret=missing botType=${botType}`);
     return c.json({ error: "Webhook not configured" }, 401);
   }
   const headerSecret = c.req.header("x-telegram-bot-api-secret-token");
   if (!headerSecret || !verifyWebhookSecret(headerSecret, storedSecret)) {
-    console.error(`${TAG15} secret=invalid botType=${botType}`);
+    console.error(`${TAG16} secret=invalid botType=${botType}`);
     return c.json({ error: "Unauthorized" }, 401);
   }
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG15} config=no-account`);
+    console.error(`${TAG16} config=no-account`);
     return c.json({ error: "No account configured" }, 500);
   }
   const tgConfig = account.config.telegram ?? {};
   const botToken = botType === "admin" ? tgConfig.adminBotToken : tgConfig.publicBotToken;
   if (!botToken) {
-    console.error(`${TAG15} config=no-token botType=${botType}`);
+    console.error(`${TAG16} config=no-token botType=${botType}`);
     return c.json({ error: `No ${botType} bot token configured` }, 500);
   }
   let update;
@@ -6916,7 +6980,7 @@ app6.post("/webhook", async (c) => {
   }
   const accessResult = checkTelegramAccess({ senderId, botType, config: tgConfig });
   console.error(
-    `${TAG15} access: botType=${botType} senderId=${senderId} chatId=${chatId} allowed=${accessResult.allowed} reason=${accessResult.reason} agentType=${accessResult.agentType}`
+    `${TAG16} access: botType=${botType} senderId=${senderId} chatId=${chatId} allowed=${accessResult.allowed} reason=${accessResult.reason} agentType=${accessResult.agentType}`
   );
   if (!accessResult.allowed) {
     return c.json({ ok: true });
@@ -6927,7 +6991,7 @@ app6.post("/webhook", async (c) => {
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ callback_query_id: callbackId })
     }).catch((err) => {
-      console.error(`${TAG15} callback-ack-error: ${err instanceof Error ? err.message : String(err)}`);
+      console.error(`${TAG16} callback-ack-error: ${err instanceof Error ? err.message : String(err)}`);
     });
   }
   handleInbound({
@@ -6940,7 +7004,7 @@ app6.post("/webhook", async (c) => {
     agentType: accessResult.agentType
   }).catch((err) => {
     console.error(
-      `${TAG15} unhandled-error: chatId=${chatId} senderId=${senderId} error=${err instanceof Error ? err.message : String(err)}`
+      `${TAG16} unhandled-error: chatId=${chatId} senderId=${senderId} error=${err instanceof Error ? err.message : String(err)}`
     );
   });
   return c.json({ ok: true });
@@ -6954,14 +7018,14 @@ import { realpathSync as realpathSync2, readdirSync as readdirSync2, readFileSyn
 
 // app/lib/whatsapp/login.ts
 import { randomUUID as randomUUID6 } from "crypto";
-var TAG16 = "[whatsapp:login]";
+var TAG17 = "[whatsapp:login]";
 var ACTIVE_LOGIN_TTL_MS = 3 * 6e4;
 var activeLogins = /* @__PURE__ */ new Map();
 function closeSocket(sock) {
   try {
     sock.ws?.close?.();
   } catch (err) {
-    console.warn(`${TAG16} socket close error during cleanup: ${String(err)}`);
+    console.warn(`${TAG17} socket close error during cleanup: ${String(err)}`);
   }
 }
 function resetActiveLogin(accountId) {
@@ -6984,7 +7048,7 @@ async function loginConnectionLoop(accountId, login) {
       const current = activeLogins.get(accountId);
       if (current?.id === login.id) {
         current.connected = true;
-        console.error(`${TAG16} loginConnectionLoop: connected account=${accountId} attempt=${attempt}`);
+        console.error(`${TAG17} loginConnectionLoop: connected account=${accountId} attempt=${attempt}`);
       }
       return;
     } catch (err) {
@@ -6994,7 +7058,7 @@ async function loginConnectionLoop(accountId, login) {
       if (!classification.shouldRetry || attempt >= LOGIN_MAX_RECONNECTS) {
         if (attempt >= LOGIN_MAX_RECONNECTS) {
           console.error(
-            `${TAG16} login reconnect attempts exhausted (${attempt}/${LOGIN_MAX_RECONNECTS}) \u2014 surfacing error to agent`
+            `${TAG17} login reconnect attempts exhausted (${attempt}/${LOGIN_MAX_RECONNECTS}) \u2014 surfacing error to agent`
           );
           current.error = `Login failed after ${attempt} reconnect attempts: ${formatError(err)}`;
         } else {
@@ -7006,7 +7070,7 @@ async function loginConnectionLoop(accountId, login) {
       attempt++;
       const delay = LOGIN_RECONNECT_DELAYS[attempt - 1] ?? 8e3;
       console.error(
-        `${TAG16} status=${classification.statusCode ?? "unknown"} restart required \u2014 reconnecting with saved creds (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}) delay=${delay}ms`
+        `${TAG17} status=${classification.statusCode ?? "unknown"} restart required \u2014 reconnecting with saved creds (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}) delay=${delay}ms`
       );
       closeSocket(current.sock);
       await new Promise((r) => setTimeout(r, delay));
@@ -7017,7 +7081,7 @@ async function loginConnectionLoop(accountId, login) {
         current.sock = newSock;
       } catch (sockErr) {
         console.error(
-          `${TAG16} reconnect socket creation failed (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}): ${String(sockErr)}`
+          `${TAG17} reconnect socket creation failed (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}): ${String(sockErr)}`
         );
         current.error = `Reconnection failed: ${String(sockErr)}`;
         return;
@@ -7031,7 +7095,7 @@ async function startLogin(opts) {
   const hasAuth = await authExists(authDir);
   const selfId = readSelfId(authDir);
   console.error(
-    `${TAG16} startLogin account=${accountId} force=${!!force} hasAuth=${hasAuth}` + (existing0 ? ` activeLogin={id=${existing0.id.slice(0, 8)},age=${Math.round((Date.now() - existing0.startedAt) / 1e3)}s,hasQr=${!!existing0.qr}}` : " activeLogin=none")
+    `${TAG17} startLogin account=${accountId} force=${!!force} hasAuth=${hasAuth}` + (existing0 ? ` activeLogin={id=${existing0.id.slice(0, 8)},age=${Math.round((Date.now() - existing0.startedAt) / 1e3)}s,hasQr=${!!existing0.qr}}` : " activeLogin=none")
   );
   if (hasAuth && !force) {
     const who = selfId.e164 ?? selfId.jid ?? "unknown";
@@ -7043,7 +7107,7 @@ async function startLogin(opts) {
   await clearAuth(authDir);
   const existing = activeLogins.get(accountId);
   if (existing && isLoginFresh(existing) && existing.qrDataUrl && !force) {
-    console.error(`${TAG16} startLogin account=${accountId} guard: returning existing QR (age=${Math.round((Date.now() - existing.startedAt) / 1e3)}s)`);
+    console.error(`${TAG17} startLogin account=${accountId} guard: returning existing QR (age=${Math.round((Date.now() - existing.startedAt) / 1e3)}s)`);
     return {
       qrDataUrl: existing.qrDataUrl,
       qrRaw: existing.qr,
@@ -7051,7 +7115,7 @@ async function startLogin(opts) {
     };
   }
   if (existing) {
-    console.error(`${TAG16} startLogin account=${accountId} ${force ? "force override" : "stale/no-QR"}, resetting active login`);
+    console.error(`${TAG17} startLogin account=${accountId} ${force ? "force override" : "stale/no-QR"}, resetting active login`);
   }
   resetActiveLogin(accountId);
   let resolveQr = null;
@@ -7073,14 +7137,14 @@ async function startLogin(opts) {
       onQr: (qr2) => {
         loginQrCount++;
         if (pendingQr) {
-          console.error(`${TAG16} QR rotation #${loginQrCount} received for account=${accountId} \u2014 not forwarded (initial QR already captured)`);
+          console.error(`${TAG17} QR rotation #${loginQrCount} received for account=${accountId} \u2014 not forwarded (initial QR already captured)`);
           return;
         }
         pendingQr = qr2;
         const current = activeLogins.get(accountId);
         if (current && !current.qr) current.qr = qr2;
         clearTimeout(qrTimer);
-        console.error(`${TAG16} QR #${loginQrCount} received for account=${accountId} \u2014 forwarding to caller`);
+        console.error(`${TAG17} QR #${loginQrCount} received for account=${accountId} \u2014 forwarding to caller`);
         resolveQr?.(qr2);
       }
     });
@@ -7100,7 +7164,7 @@ async function startLogin(opts) {
   activeLogins.set(accountId, login);
   if (pendingQr && !login.qr) login.qr = pendingQr;
   loginConnectionLoop(accountId, login).catch((err) => {
-    console.error(`${TAG16} loginConnectionLoop unexpected error: ${String(err)}`);
+    console.error(`${TAG17} loginConnectionLoop unexpected error: ${String(err)}`);
     const current = activeLogins.get(accountId);
     if (current?.id === login.id) {
       current.error = `Unexpected login error: ${String(err)}`;
@@ -7125,7 +7189,7 @@ async function waitForLogin(opts) {
   const { accountId, timeoutMs = 6e4 } = opts;
   const login = activeLogins.get(accountId);
   console.error(
-    `${TAG16} waitForLogin account=${accountId} timeout=${timeoutMs}ms` + (login ? ` login={id=${login.id.slice(0, 8)},age=${Math.round((Date.now() - login.startedAt) / 1e3)}s,connected=${login.connected},hasQr=${!!login.qr}}` : " login=none")
+    `${TAG17} waitForLogin account=${accountId} timeout=${timeoutMs}ms` + (login ? ` login={id=${login.id.slice(0, 8)},age=${Math.round((Date.now() - login.startedAt) / 1e3)}s,connected=${login.connected},hasQr=${!!login.qr}}` : " login=none")
   );
   if (!login) {
     return { connected: false, message: "No active WhatsApp login in progress." };
@@ -7138,7 +7202,7 @@ async function waitForLogin(opts) {
   while (Date.now() < deadline) {
     if (login.connected) {
       const selfId = readSelfId(login.authDir);
-      console.error(`${TAG16} login complete for account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
+      console.error(`${TAG17} login complete for account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
       const sock = login.sock;
       const authDir = login.authDir;
       activeLogins.delete(accountId);
@@ -7158,7 +7222,7 @@ async function waitForLogin(opts) {
     await new Promise((r) => setTimeout(r, 1e3));
   }
   const elapsed = Math.round((Date.now() - (deadline - timeoutMs)) / 1e3);
-  console.error(`${TAG16} waitForLogin timeout account=${accountId} elapsed=${elapsed}s \u2014 cleaning up active login`);
+  console.error(`${TAG17} waitForLogin timeout account=${accountId} elapsed=${elapsed}s \u2014 cleaning up active login`);
   resetActiveLogin(accountId);
   return { connected: false, message: "Login timed out. Try generating a new QR." };
 }
@@ -7272,17 +7336,17 @@ function serializeWhatsAppSchema() {
 }
 
 // server/routes/whatsapp.ts
-var TAG17 = "[whatsapp:api]";
+var TAG18 = "[whatsapp:api]";
 var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT || "";
 var app7 = new Hono();
 app7.get("/status", (c) => {
   try {
     const status = getStatus();
     const summary = status.map((a) => `${a.accountId}:${a.connected ? "up" : "down"}`).join(", ");
-    console.error(`${TAG17} status accounts=${status.length} [${summary}]`);
+    console.error(`${TAG18} status accounts=${status.length} [${summary}]`);
     return c.json({ accounts: status });
   } catch (err) {
-    console.error(`${TAG17} status error: ${String(err)}`);
+    console.error(`${TAG18} status error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7293,10 +7357,10 @@ app7.post("/login/start", async (c) => {
     const force = body.force ?? false;
     const authDir = join6(MAXY_DIR, "credentials", "whatsapp", accountId);
     const result = await startLogin({ accountId, authDir, force });
-    console.error(`${TAG17} login/start result account=${accountId} hasQr=${!!result.qrRaw}${result.selfPhone ? ` phone=${result.selfPhone}` : ""}`);
+    console.error(`${TAG18} login/start result account=${accountId} hasQr=${!!result.qrRaw}${result.selfPhone ? ` phone=${result.selfPhone}` : ""}`);
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG17} login/start error: ${String(err)}`);
+    console.error(`${TAG18} login/start error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7311,7 +7375,7 @@ app7.post("/login/wait", async (c) => {
       try {
         await registerLoginSocket(accountId, result.sock, result.authDir);
       } catch (regErr) {
-        console.error(`${TAG17} registerLoginSocket failed account=${accountId}: ${String(regErr)}`);
+        console.error(`${TAG18} registerLoginSocket failed account=${accountId}: ${String(regErr)}`);
       }
       try {
         const account = resolveAccount();
@@ -7319,16 +7383,16 @@ app7.post("/login/wait", async (c) => {
           const persistResult = persistAfterPairing(account.accountDir, accountId, result.selfPhone ?? null);
           configPersisted = persistResult.ok;
           if (!persistResult.ok) {
-            console.error(`${TAG17} config persist failed account=${accountId}: ${persistResult.error}`);
+            console.error(`${TAG18} config persist failed account=${accountId}: ${persistResult.error}`);
           }
         } else {
-          console.error(`${TAG17} config persist skipped \u2014 no account resolved`);
+          console.error(`${TAG18} config persist skipped \u2014 no account resolved`);
         }
       } catch (persistErr) {
-        console.error(`${TAG17} config persist error account=${accountId}: ${String(persistErr)}`);
+        console.error(`${TAG18} config persist error account=${accountId}: ${String(persistErr)}`);
       }
     }
-    console.error(`${TAG17} login/wait result account=${accountId} connected=${result.connected}${result.selfPhone ? ` phone=${result.selfPhone}` : ""} configPersisted=${configPersisted}`);
+    console.error(`${TAG18} login/wait result account=${accountId} connected=${result.connected}${result.selfPhone ? ` phone=${result.selfPhone}` : ""} configPersisted=${configPersisted}`);
     return c.json({
       connected: result.connected,
       message: result.message,
@@ -7336,7 +7400,7 @@ app7.post("/login/wait", async (c) => {
       configPersisted
     });
   } catch (err) {
-    console.error(`${TAG17} login/wait error: ${String(err)}`);
+    console.error(`${TAG18} login/wait error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7347,7 +7411,7 @@ app7.post("/disconnect", async (c) => {
     await stopConnection(accountId);
     return c.json({ disconnected: true, accountId });
   } catch (err) {
-    console.error(`${TAG17} disconnect error: ${String(err)}`);
+    console.error(`${TAG18} disconnect error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7358,7 +7422,7 @@ app7.post("/reconnect", async (c) => {
     await startConnection(accountId);
     return c.json({ reconnecting: true, accountId });
   } catch (err) {
-    console.error(`${TAG17} reconnect error: ${String(err)}`);
+    console.error(`${TAG18} reconnect error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7377,7 +7441,7 @@ app7.post("/send", async (c) => {
     const result = await sendTextMessage(sock, to, text, { accountId });
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG17} send error: ${String(err)}`);
+    console.error(`${TAG18} send error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7398,7 +7462,7 @@ app7.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "phone" (E.164 format, e.g. +441234567890).' }, 400);
         }
         const result = addAdminPhone(account.accountDir, phone);
-        console.error(`${TAG17} config action=add-admin-phone phone=${phone} ok=${result.ok}`);
+        console.error(`${TAG18} config action=add-admin-phone phone=${phone} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "remove-admin-phone": {
@@ -7406,12 +7470,12 @@ app7.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "phone".' }, 400);
         }
         const result = removeAdminPhone(account.accountDir, phone);
-        console.error(`${TAG17} config action=remove-admin-phone phone=${phone} ok=${result.ok}`);
+        console.error(`${TAG18} config action=remove-admin-phone phone=${phone} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "list-admin-phones": {
         const phones = readAdminPhones(account.accountDir);
-        console.error(`${TAG17} config action=list-admin-phones count=${phones.length}`);
+        console.error(`${TAG18} config action=list-admin-phones count=${phones.length}`);
         return c.json({ ok: true, phones });
       }
       case "set-public-agent": {
@@ -7419,14 +7483,14 @@ app7.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "slug" (the agent directory name, e.g. "my-agent").' }, 400);
         }
         const result = setPublicAgent(account.accountDir, slug);
-        console.error(`${TAG17} config action=set-public-agent slug=${slug} ok=${result.ok}`);
+        console.error(`${TAG18} config action=set-public-agent slug=${slug} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "get-public-agent": {
         const targetAccount = typeof accountId === "string" && accountId.trim() ? accountId.trim() : "default";
         const targetGroup = typeof groupJid === "string" && groupJid.trim() ? groupJid.trim() : void 0;
         const resolved = resolvePublicAgent(account.accountDir, { accountId: targetAccount, groupJid: targetGroup });
-        console.error(`${TAG17} config action=get-public-agent accountId=${targetAccount} groupJid=${targetGroup ?? "none"} slug=${resolved?.slug ?? "none"} source=${resolved?.source ?? "none"}`);
+        console.error(`${TAG18} config action=get-public-agent accountId=${targetAccount} groupJid=${targetGroup ?? "none"} slug=${resolved?.slug ?? "none"} source=${resolved?.source ?? "none"}`);
         return c.json({ ok: true, slug: resolved?.slug ?? null, source: resolved?.source ?? null });
       }
       case "set-group-public-agent": {
@@ -7438,7 +7502,7 @@ app7.post("/config", async (c) => {
         }
         const targetAccount = typeof accountId === "string" && accountId.trim() ? accountId.trim() : "default";
         const result = setGroupPublicAgent(account.accountDir, targetAccount, groupJid, slug);
-        console.error(`${TAG17} config action=set-group-public-agent accountId=${targetAccount} groupJid=${groupJid} slug=${slug} ok=${result.ok}`);
+        console.error(`${TAG18} config action=set-group-public-agent accountId=${targetAccount} groupJid=${groupJid} slug=${slug} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "unset-group-public-agent": {
@@ -7447,7 +7511,7 @@ app7.post("/config", async (c) => {
         }
         const targetAccount = typeof accountId === "string" && accountId.trim() ? accountId.trim() : "default";
         const result = unsetGroupPublicAgent(account.accountDir, targetAccount, groupJid);
-        console.error(`${TAG17} config action=unset-group-public-agent accountId=${targetAccount} groupJid=${groupJid} ok=${result.ok}`);
+        console.error(`${TAG18} config action=unset-group-public-agent accountId=${targetAccount} groupJid=${groupJid} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "list-public-agents": {
@@ -7464,26 +7528,26 @@ app7.post("/config", async (c) => {
                 const config = JSON.parse(readFileSync9(configPath2, "utf-8"));
                 agents.push({ slug: entry.name, displayName: config.displayName ?? entry.name });
               } catch {
-                console.error(`${TAG17} config action=list-public-agents error="failed to parse config.json for agent ${entry.name}" \u2014 skipping`);
+                console.error(`${TAG18} config action=list-public-agents error="failed to parse config.json for agent ${entry.name}" \u2014 skipping`);
               }
             }
           } catch (err) {
-            console.error(`${TAG17} config action=list-public-agents error="failed to scan agents directory: ${String(err)}"`);
+            console.error(`${TAG18} config action=list-public-agents error="failed to scan agents directory: ${String(err)}"`);
           }
         }
-        console.error(`${TAG17} config action=list-public-agents count=${agents.length}`);
+        console.error(`${TAG18} config action=list-public-agents count=${agents.length}`);
         return c.json({ ok: true, agents });
       }
       case "schema": {
         const text = serializeWhatsAppSchema();
-        console.error(`${TAG17} config action=schema`);
+        console.error(`${TAG18} config action=schema`);
         return c.json({ ok: true, text });
       }
       case "list-groups": {
         const groupAccountId = accountId ?? "default";
         const sock = getSocket(groupAccountId);
         if (!sock) {
-          console.error(`${TAG17} config action=list-groups error="not connected" accountId=${groupAccountId}`);
+          console.error(`${TAG18} config action=list-groups error="not connected" accountId=${groupAccountId}`);
           return c.json({ ok: false, error: `WhatsApp account "${groupAccountId}" is not connected. Connect first, then retry.` });
         }
         try {
@@ -7493,10 +7557,10 @@ app7.post("/config", async (c) => {
             name: g.subject ?? g.id,
             participantCount: Array.isArray(g.participants) ? g.participants.length : 0
           }));
-          console.error(`${TAG17} config action=list-groups count=${groups.length} accountId=${groupAccountId}`);
+          console.error(`${TAG18} config action=list-groups count=${groups.length} accountId=${groupAccountId}`);
           return c.json({ ok: true, groups });
         } catch (err) {
-          console.error(`${TAG17} config action=list-groups error="${String(err)}" accountId=${groupAccountId}`);
+          console.error(`${TAG18} config action=list-groups error="${String(err)}" accountId=${groupAccountId}`);
           return c.json({ ok: false, error: `Failed to fetch groups: ${String(err)}` });
         }
       }
@@ -7506,12 +7570,12 @@ app7.post("/config", async (c) => {
         }
         const result = updateConfig(account.accountDir, fields);
         const fieldNames = Object.keys(fields);
-        console.error(`${TAG17} config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
+        console.error(`${TAG18} config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "get-config": {
         const waConfig = getConfig(account.accountDir);
-        console.error(`${TAG17} config action=get-config`);
+        console.error(`${TAG18} config action=get-config`);
         return c.json({ ok: true, config: waConfig });
       }
       default:
@@ -7521,7 +7585,7 @@ app7.post("/config", async (c) => {
         );
     }
   } catch (err) {
-    console.error(`${TAG17} config error: ${String(err)}`);
+    console.error(`${TAG18} config error: ${String(err)}`);
     return c.json({ ok: false, error: String(err) }, 500);
   }
 });
@@ -7543,16 +7607,16 @@ app7.post("/send-document", async (c) => {
       const accountResolved = realpathSync2(accountDir);
       if (!resolvedPath.startsWith(accountResolved + "/")) {
         const sanitised = filePath.replace(accountDir, "<account>/");
-        console.error(`${TAG17} send-document REJECTED path=${sanitised} reason=outside_account_directory`);
+        console.error(`${TAG18} send-document REJECTED path=${sanitised} reason=outside_account_directory`);
         return c.json({ error: "Access denied: file is outside the account directory" }, 403);
       }
     } catch (err) {
       const code = err.code;
       if (code === "ENOENT") {
-        console.error(`${TAG17} send-document ENOENT path=${filePath}`);
+        console.error(`${TAG18} send-document ENOENT path=${filePath}`);
         return c.json({ error: `File not found: ${filePath}` }, 404);
       }
-      console.error(`${TAG17} send-document path error: ${String(err)}`);
+      console.error(`${TAG18} send-document path error: ${String(err)}`);
       return c.json({ error: String(err) }, 500);
     }
     const fileStat = await stat3(resolvedPath);
@@ -7574,11 +7638,11 @@ app7.post("/send-document", async (c) => {
       caption
     }, { accountId });
     console.error(
-      `${TAG17} send-document to=${to} size=${fileStat.size} mime=${mimetype} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
+      `${TAG18} send-document to=${to} size=${fileStat.size} mime=${mimetype} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
     );
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG17} send-document error: ${String(err)}`);
+    console.error(`${TAG18} send-document error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7588,11 +7652,11 @@ app7.get("/activity", (c) => {
     const result = getChannelActivity(accountId);
     const total = result.accounts.reduce((sum, a) => sum + a.total, 0);
     console.error(
-      `${TAG17} activity accounts=${result.accounts.length} total=${total} recentEvents=${result.recentEvents.length}` + (accountId ? ` filter=${accountId}` : "")
+      `${TAG18} activity accounts=${result.accounts.length} total=${total} recentEvents=${result.recentEvents.length}` + (accountId ? ` filter=${accountId}` : "")
     );
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG17} activity error: ${String(err)}`);
+    console.error(`${TAG18} activity error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7611,10 +7675,10 @@ app7.get("/conversations", (c) => {
       };
     });
     conversations.sort((a, b) => (b.lastMessageTimestamp ?? 0) - (a.lastMessageTimestamp ?? 0));
-    console.error(`${TAG17} conversations account=${accountId} count=${conversations.length}`);
+    console.error(`${TAG18} conversations account=${accountId} count=${conversations.length}`);
     return c.json({ conversations });
   } catch (err) {
-    console.error(`${TAG17} conversations error: ${String(err)}`);
+    console.error(`${TAG18} conversations error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7629,10 +7693,10 @@ app7.get("/messages", (c) => {
     const limit = limitParam ? parseInt(limitParam, 10) : void 0;
     const effectiveLimit = limit && !Number.isNaN(limit) && limit > 0 ? limit : void 0;
     const messages = getMessages(accountId, jid, effectiveLimit);
-    console.error(`${TAG17} messages account=${accountId} jid=${jid} limit=${effectiveLimit ?? "all"} returned=${messages.length}`);
+    console.error(`${TAG18} messages account=${accountId} jid=${jid} limit=${effectiveLimit ?? "all"} returned=${messages.length}`);
     return c.json({ messages });
   } catch (err) {
-    console.error(`${TAG17} messages error: ${String(err)}`);
+    console.error(`${TAG18} messages error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -7644,12 +7708,12 @@ app7.get("/group-info", async (c) => {
       return c.json({ error: "Missing required parameter: jid" }, 400);
     }
     if (!isGroupJid(jid)) {
-      console.error(`${TAG17} group-info error="not a group JID" jid=${jid} account=${accountId}`);
+      console.error(`${TAG18} group-info error="not a group JID" jid=${jid} account=${accountId}`);
       return c.json({ error: `"${jid}" is not a group JID. Group JIDs end with @g.us.` }, 400);
     }
     const sock = getSocket(accountId);
     if (!sock) {
-      console.error(`${TAG17} group-info error="not connected" account=${accountId}`);
+      console.error(`${TAG18} group-info error="not connected" account=${accountId}`);
       return c.json({ error: `WhatsApp account "${accountId}" is not connected. Connect first, then retry.` }, 400);
     }
     const meta = await sock.groupMetadata(jid);
@@ -7662,10 +7726,10 @@ app7.get("/group-info", async (c) => {
       participantCount: meta.participants.length,
       participants: meta.participants.map((p) => ({ jid: p.id, admin: p.admin ?? null }))
     };
-    console.error(`${TAG17} group-info jid=${jid} subject="${meta.subject}" participants=${meta.participants.length} account=${accountId}`);
+    console.error(`${TAG18} group-info jid=${jid} subject="${meta.subject}" participants=${meta.participants.length} account=${accountId}`);
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG17} group-info error="${String(err)}" jid=${jid} account=${accountId}`);
+    console.error(`${TAG18} group-info error="${String(err)}" jid=${jid} account=${accountId}`);
     return c.json({ error: `Failed to fetch group info: ${String(err)}` }, 500);
   }
 });
@@ -8030,7 +8094,8 @@ app9.post("/", async (c) => {
     "unknown",
     "graph-labels-in-graph",
     "graph-default-view",
-    "graph-nav"
+    "graph-nav",
+    "event"
   ]);
   const kind = allowedKinds.has(kindRaw) ? kindRaw : "unknown";
   const msg = truncate(body.msg, MAX_MSG_LEN);
@@ -8044,29 +8109,42 @@ app9.post("/", async (c) => {
   const stackTrunc = truncate(body.stack, MAX_STACK_LEN);
   const head = stackHead(body.stack);
   const ts = (/* @__PURE__ */ new Date()).toISOString();
-  console.error(
-    `[client-error] ts=${ts} ip=${ip} kind=${kind} url=${JSON.stringify(url)} version=${version || "unknown"} ua=${JSON.stringify(ua)} msg=${JSON.stringify(msg)} stack-head=${JSON.stringify(head)} file-line-col=${JSON.stringify(fileLineCol)}`
-  );
-  rotateIfNeeded();
-  try {
-    const payload = {
-      ts,
-      ip,
-      kind,
-      url,
-      version,
-      ua,
-      msg,
-      stack: stackTrunc,
-      filename: file,
-      lineno: line,
-      colno: col,
-      tag: typeof body.tag === "string" ? truncate(body.tag, 32) : void 0,
-      status: typeof body.status === "number" ? body.status : void 0
-    };
-    appendFileSync2(CLIENT_ERRORS_LOG, JSON.stringify(payload) + "\n", "utf-8");
-  } catch (err) {
-    console.error(`[client-error] append failed: ${err instanceof Error ? err.message : String(err)}`);
+  if (kind === "event") {
+    const source = typeof body.source === "string" ? truncate(body.source, 64) : "unknown";
+    const extra = Object.entries(body).filter(([k]) => !["kind", "source", "msg", "url", "ua", "version", "stack", "filename", "lineno", "colno", "tag", "status"].includes(k)).map(([k, v]) => {
+      const safe = typeof v === "string" ? truncate(v, 200) : typeof v === "number" || typeof v === "boolean" ? String(v) : JSON.stringify(v).slice(0, 200);
+      return `${k}=${safe}`;
+    }).join(" ");
+    console.log(
+      `[client-event] ts=${ts} ip=${ip} source=${source} version=${version || "unknown"}${extra ? " " + extra : ""}`
+    );
+  } else {
+    console.error(
+      `[client-error] ts=${ts} ip=${ip} kind=${kind} url=${JSON.stringify(url)} version=${version || "unknown"} ua=${JSON.stringify(ua)} msg=${JSON.stringify(msg)} stack-head=${JSON.stringify(head)} file-line-col=${JSON.stringify(fileLineCol)}`
+    );
+  }
+  if (kind !== "event") {
+    rotateIfNeeded();
+    try {
+      const payload = {
+        ts,
+        ip,
+        kind,
+        url,
+        version,
+        ua,
+        msg,
+        stack: stackTrunc,
+        filename: file,
+        lineno: line,
+        colno: col,
+        tag: typeof body.tag === "string" ? truncate(body.tag, 32) : void 0,
+        status: typeof body.status === "number" ? body.status : void 0
+      };
+      appendFileSync2(CLIENT_ERRORS_LOG, JSON.stringify(payload) + "\n", "utf-8");
+    } catch (err) {
+      console.error(`[client-error] append failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
   }
   return c.json({ ok: true });
 });
@@ -8546,7 +8624,7 @@ var app11 = new Hono();
 app11.post("/cancel", requireAdminSession, async (c) => {
   const session_key = c.var.sessionKey;
   try {
-    const { interruptClient: interruptClient2 } = await import("./client-pool-CD7WHZIK.js");
+    const { interruptClient: interruptClient2 } = await import("./client-pool-N2Y57223.js");
     await interruptClient2(session_key);
     return c.json({ ok: true });
   } catch (err) {
@@ -9426,16 +9504,26 @@ app17.get("/", requireAdminSession, async (c) => {
       sessionKey: null,
       name: r.name,
       updatedAt: r.updatedAt,
-      phase: "flushed"
+      phase: "flushed",
+      channel: r.channel
     }));
     const inProgressRows = inProgressRaw.map((r) => ({
       conversationId: null,
       sessionKey: r.sessionKey,
       name: null,
       updatedAt: new Date(r.createdAt).toISOString(),
-      phase: "pre-flush"
+      phase: "pre-flush",
+      channel: "webchat"
     }));
     const sessions = [...flushedRows, ...inProgressRows].sort((a, b) => a.updatedAt < b.updatedAt ? 1 : a.updatedAt > b.updatedAt ? -1 : 0).slice(0, 20);
+    const channelCounts = sessions.reduce((acc, s) => {
+      const k = s.channel ?? "unknown";
+      acc[k] = (acc[k] ?? 0) + 1;
+      return acc;
+    }, {});
+    console.error(
+      `[conversations-list] render rows=${sessions.length} channels=${JSON.stringify(channelCounts)}`
+    );
     return c.json({ sessions });
   } catch (err) {
     console.error(`[sessions-list] Failed: ${err instanceof Error ? err.message : String(err)}`);
@@ -9699,13 +9787,13 @@ async function cdpNavigateNewTab(url, opts = {}) {
 // server/routes/admin/device-browser.ts
 var app19 = new Hono();
 app19.post("/navigate", async (c) => {
-  const TAG18 = "[device-url:click]";
+  const TAG20 = "[device-url:click]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG18} reject reason=body-not-json detail=${detail} browser=fallback navigateResult=error`);
+    console.error(`${TAG20} reject reason=body-not-json detail=${detail} browser=fallback navigateResult=error`);
     return c.json(
       { ok: false, navigateResult: "error", browser: "fallback", detail: "Request body was not valid JSON" },
       400
@@ -9715,7 +9803,7 @@ app19.post("/navigate", async (c) => {
   const intent = typeof body.intent === "string" ? body.intent : "";
   const hostname2 = typeof body.hostname === "string" ? body.hostname : "";
   if (!url) {
-    console.error(`${TAG18} reject reason=missing-url intent=${JSON.stringify(intent)} browser=fallback navigateResult=error`);
+    console.error(`${TAG20} reject reason=missing-url intent=${JSON.stringify(intent)} browser=fallback navigateResult=error`);
     return c.json(
       { ok: false, navigateResult: "error", browser: "fallback", detail: "url field is required" },
       400
@@ -9725,7 +9813,7 @@ app19.post("/navigate", async (c) => {
   try {
     parsed = new URL(url);
   } catch {
-    console.error(`${TAG18} reject reason=url-malformed intent=${JSON.stringify(intent)} url=${url} browser=fallback navigateResult=error`);
+    console.error(`${TAG20} reject reason=url-malformed intent=${JSON.stringify(intent)} url=${url} browser=fallback navigateResult=error`);
     return c.json(
       { ok: false, navigateResult: "error", browser: "fallback", detail: "url is not a valid URL" },
       400
@@ -9733,7 +9821,7 @@ app19.post("/navigate", async (c) => {
   }
   if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
     console.error(
-      `${TAG18} reject reason=scheme-not-allowed scheme=${parsed.protocol} intent=${JSON.stringify(intent)} browser=fallback navigateResult=error`
+      `${TAG20} reject reason=scheme-not-allowed scheme=${parsed.protocol} intent=${JSON.stringify(intent)} browser=fallback navigateResult=error`
     );
     return c.json(
       {
@@ -9749,7 +9837,7 @@ app19.post("/navigate", async (c) => {
   const cdpOk = await ensureCdp(transport);
   if (!cdpOk) {
     console.error(
-      `${TAG18} intent=${JSON.stringify(intent)} browser=fallback navigateResult=cdp-unreachable hostname=${JSON.stringify(hostname2)}`
+      `${TAG20} intent=${JSON.stringify(intent)} browser=fallback navigateResult=cdp-unreachable hostname=${JSON.stringify(hostname2)}`
     );
     return c.json(
       {
@@ -9765,7 +9853,7 @@ app19.post("/navigate", async (c) => {
   const browser = outcome.result === "ok" ? "vnc" : "fallback";
   const detailStr = outcome.detail ? ` detail=${JSON.stringify(outcome.detail.length > 230 ? outcome.detail.slice(0, 227) + "..." : outcome.detail)}` : "";
   console.error(
-    `${TAG18} intent=${JSON.stringify(intent)} browser=${browser} navigateResult=${outcome.result} hostname=${JSON.stringify(hostname2)} targetId=${outcome.targetId ?? "none"}${detailStr}`
+    `${TAG20} intent=${JSON.stringify(intent)} browser=${browser} navigateResult=${outcome.result} hostname=${JSON.stringify(hostname2)} targetId=${outcome.targetId ?? "none"}${detailStr}`
   );
   if (outcome.result !== "ok") {
     return c.json(
@@ -9796,18 +9884,18 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
 ]);
 var app20 = new Hono();
 app20.post("/", async (c) => {
-  const TAG18 = "[admin:events]";
+  const TAG20 = "[admin:events]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG18} reject reason=body-not-json detail=${detail}`);
+    console.error(`${TAG20} reject reason=body-not-json detail=${detail}`);
     return c.json({ ok: false, detail: "Request body was not valid JSON" }, 400);
   }
   const event = typeof body.event === "string" ? body.event : "";
   if (!ALLOWED_EVENTS.has(event)) {
-    console.error(`${TAG18} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
+    console.error(`${TAG20} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
     return c.json({ ok: false, detail: `Event "${event}" is not allowed` }, 400);
   }
   const rawFields = body.fields && typeof body.fields === "object" ? body.fields : {};
@@ -9831,7 +9919,7 @@ var events_default = app20;
 // server/routes/admin/cloudflare.ts
 import { homedir } from "os";
 import { resolve as resolve17 } from "path";
-import { readFileSync as readFileSync15 } from "fs";
+import { readFileSync as readFileSync16 } from "fs";
 
 // app/lib/dns-label.ts
 var VALID_LABEL = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
@@ -9869,14 +9957,131 @@ function addAliasDomain(hostname2) {
   writeFileSync9(ALIAS_DOMAINS_PATH, JSON.stringify([...existing], null, 2) + "\n", "utf-8");
 }
 
+// app/lib/action-relay-queue.ts
+import {
+  existsSync as existsSync20,
+  mkdirSync as mkdirSync9,
+  readdirSync as readdirSync5,
+  readFileSync as readFileSync15,
+  unlinkSync as unlinkSync2,
+  writeFileSync as writeFileSync10
+} from "fs";
+import { join as join9 } from "path";
+var TAG19 = "[action-relay-queue]";
+var FILE_PREFIX = "action-completion-relay-";
+var FILE_SUFFIX = ".json";
+function queueDir(accountDir) {
+  return join9(accountDir, "queue");
+}
+function relayFilePath(accountDir, actionId) {
+  return join9(queueDir(accountDir), `${FILE_PREFIX}${actionId}${FILE_SUFFIX}`);
+}
+function enqueueActionCompletionRelay(opts) {
+  const dir = queueDir(opts.accountDir);
+  mkdirSync9(dir, { recursive: true });
+  const filePath = relayFilePath(opts.accountDir, opts.actionId);
+  const record = {
+    actionId: opts.actionId,
+    conversationId: opts.conversationId,
+    message: opts.message,
+    queuedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  const body = JSON.stringify(record);
+  try {
+    writeFileSync10(filePath, body, { flag: "wx", encoding: "utf-8" });
+    console.log(
+      `${TAG19} phase=enqueued actionId=${opts.actionId} conversationId=${opts.conversationId} path=${filePath} bytes=${Buffer.byteLength(body, "utf-8")}`
+    );
+    return { enqueued: true, path: filePath };
+  } catch (e) {
+    if (e.code === "EEXIST") {
+      console.log(
+        `${TAG19} phase=enqueue-skipped actionId=${opts.actionId} reason=already-queued`
+      );
+      return { enqueued: false, reason: "already-queued", path: filePath };
+    }
+    throw e;
+  }
+}
+function consumeActionCompletionRelays(accountDir) {
+  const dir = queueDir(accountDir);
+  if (!existsSync20(dir)) return [];
+  let entries;
+  try {
+    entries = readdirSync5(dir);
+  } catch (e) {
+    console.error(
+      `${TAG19} phase=readdir-failed dir=${dir} error=${e instanceof Error ? e.message : String(e)}`
+    );
+    return [];
+  }
+  const records = [];
+  for (const name of entries) {
+    if (!name.startsWith(FILE_PREFIX) || !name.endsWith(FILE_SUFFIX)) continue;
+    const filePath = join9(dir, name);
+    let raw;
+    try {
+      raw = readFileSync15(filePath, "utf-8");
+    } catch (e) {
+      console.error(
+        `${TAG19} phase=read-failed file=${name} error=${e instanceof Error ? e.message : String(e)}`
+      );
+      continue;
+    }
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch (e) {
+      console.error(
+        `${TAG19} phase=parse-failed file=${name} error=${e instanceof Error ? e.message : String(e)}`
+      );
+      continue;
+    }
+    if (!isActionCompletionRelay(parsed)) {
+      console.error(
+        `${TAG19} phase=shape-invalid file=${name} keys=${parsed && typeof parsed === "object" ? Object.keys(parsed).join(",") : "non-object"}`
+      );
+      continue;
+    }
+    records.push({ rec: parsed, filePath });
+  }
+  records.sort((a, b) => a.rec.queuedAt.localeCompare(b.rec.queuedAt));
+  const out = [];
+  const now = Date.now();
+  for (const { rec, filePath } of records) {
+    const queuedAtMs = Date.parse(rec.queuedAt);
+    const ageMs = Number.isFinite(queuedAtMs) ? now - queuedAtMs : 0;
+    out.push({ ...rec, ageMs, filePath });
+  }
+  return out;
+}
+function deleteConsumedRelay(filePath) {
+  try {
+    unlinkSync2(filePath);
+  } catch (e) {
+    const code = e.code;
+    if (code !== "ENOENT") {
+      console.error(
+        `${TAG19} phase=unlink-failed file=${filePath} error=${e instanceof Error ? e.message : String(e)}`
+      );
+    }
+  }
+}
+function isActionCompletionRelay(value) {
+  if (!value || typeof value !== "object") return false;
+  const v = value;
+  return typeof v.actionId === "string" && typeof v.conversationId === "string" && typeof v.message === "string" && typeof v.queuedAt === "string";
+}
+
 // server/routes/admin/cloudflare.ts
+import { existsSync as existsSyncFs, readFileSync as readFileSyncFs } from "fs";
 var SETUP_TIMEOUT_MS = 10 * 60 * 1e3;
 var DOMAINS_TIMEOUT_MS = 40 * 1e3;
 function loadBrandInfo() {
   const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve17(process.cwd(), "..");
   const brandPath = resolve17(platformRoot2, "config", "brand.json");
   try {
-    const parsed = JSON.parse(readFileSync15(brandPath, "utf-8"));
+    const parsed = JSON.parse(readFileSync16(brandPath, "utf-8"));
     const hostname2 = typeof parsed.hostname === "string" && parsed.hostname ? parsed.hostname : "maxy";
     const configDir2 = typeof parsed.configDir === "string" && parsed.configDir ? parsed.configDir : ".maxy";
     return { hostname: hostname2, configDir: configDir2 };
@@ -10172,13 +10377,79 @@ actionId: ${actionId}`,
   };
   return ok(success);
 });
+var RELAY_MAX_BODY = 8 * 1024;
+var RELAY_MAX_MESSAGE = 2048;
+var ACTION_ID_RE = /^[a-z0-9-]+$/;
+app21.post("/relay-completion", requireAdminSession, async (c) => {
+  const sessionKey = c.var.sessionKey;
+  let raw;
+  try {
+    raw = await c.req.text();
+  } catch {
+    return c.json({ ok: false, reason: "invalid-body" }, 400);
+  }
+  if (Buffer.byteLength(raw, "utf-8") > RELAY_MAX_BODY) {
+    return c.json({ ok: false, reason: "body-too-large" }, 413);
+  }
+  let body;
+  try {
+    body = JSON.parse(raw);
+  } catch {
+    return c.json({ ok: false, reason: "invalid-json" }, 400);
+  }
+  if (!body || typeof body !== "object") {
+    return c.json({ ok: false, reason: "invalid-body" }, 400);
+  }
+  const { actionId, message } = body;
+  if (typeof actionId !== "string" || !ACTION_ID_RE.test(actionId) || actionId.length > 200) {
+    console.error(`[cloudflare-relay-completion] phase=enqueue-skipped reason=invalid-actionid sessionKey=${sessionKey.slice(-8)}`);
+    return c.json({ ok: false, reason: "invalid-actionid" }, 400);
+  }
+  if (typeof message !== "string" || message.length === 0 || message.length > RELAY_MAX_MESSAGE) {
+    return c.json({ ok: false, reason: "invalid-message" }, 400);
+  }
+  const conversationId = getConversationIdForSession(sessionKey);
+  if (!conversationId) {
+    console.error(`[cloudflare-relay-completion] phase=enqueue-skipped reason=missing-conversation-id sessionKey=${sessionKey.slice(-8)}`);
+    return c.json({ ok: false, reason: "missing-conversation-id" }, 400);
+  }
+  const account = resolveAccount();
+  if (!account) {
+    console.error(`[cloudflare-relay-completion] phase=enqueue-skipped reason=missing-account-dir actionId=${actionId}`);
+    return c.json({ ok: false, reason: "missing-account-dir" }, 500);
+  }
+  const logPath2 = actionLogPath(actionId);
+  let auditOutcome = "log-absent";
+  if (existsSyncFs(logPath2)) {
+    try {
+      const lines = readFileSyncFs(logPath2, "utf-8").split("\n");
+      const reconciled = reconcileCloudflareSetupFromLog(lines);
+      auditOutcome = reconciled ? reconciled.kind : "log-incomplete";
+    } catch (e) {
+      auditOutcome = `read-failed:${e instanceof Error ? e.message : String(e)}`;
+    }
+  }
+  console.log(`[cloudflare-relay-completion] phase=enqueue-attempt actionId=${actionId} auditOutcome=${auditOutcome} conversationId=${conversationId}`);
+  try {
+    enqueueActionCompletionRelay({
+      accountDir: account.accountDir,
+      actionId,
+      conversationId,
+      message
+    });
+  } catch (e) {
+    console.error(`[cloudflare-relay-completion] phase=enqueue-failed actionId=${actionId} error=${e instanceof Error ? e.message : String(e)}`);
+    return c.json({ ok: false, reason: "enqueue-failed" }, 500);
+  }
+  return c.body(null, 204);
+});
 var cloudflare_default = app21;
 
 // server/routes/admin/files.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { readdir as readdir2, readFile as readFile4, stat as stat4, mkdir as mkdir3, writeFile as writeFile4, unlink as unlink2 } from "fs/promises";
 import { realpathSync as realpathSync4 } from "fs";
-import { basename as basename6, dirname as dirname8, join as join9, resolve as resolve19, sep as sep2 } from "path";
+import { basename as basename6, dirname as dirname8, join as join10, resolve as resolve19, sep as sep2 } from "path";
 import { Readable as Readable2 } from "stream";
 
 // app/lib/data-path.ts
@@ -10536,7 +10807,7 @@ async function cascadeDeleteDocument(params) {
 var UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta(absDir, baseName) {
   try {
-    const raw = await readFile4(join9(absDir, `${baseName}.meta.json`), "utf8");
+    const raw = await readFile4(join10(absDir, `${baseName}.meta.json`), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.filename === "string") {
       return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
@@ -10574,7 +10845,7 @@ async function readAccountNames() {
 }
 async function enrich(absolute, entry, accountNames) {
   if (entry.kind === "directory" && UUID_RE3.test(entry.name)) {
-    const meta = await readMeta(join9(absolute, entry.name), entry.name);
+    const meta = await readMeta(join10(absolute, entry.name), entry.name);
     if (meta?.filename) {
       entry.displayName = meta.filename;
       entry.mimeType = meta.mimeType;
@@ -10633,7 +10904,7 @@ app22.get("/", requireAdminSession, async (c) => {
         continue;
       }
       try {
-        const entryPath = join9(absolute, name);
+        const entryPath = join10(absolute, name);
         const s = await stat4(entryPath);
         entries.push({
           name,
@@ -10806,7 +11077,7 @@ app22.delete("/", requireAdminSession, async (c) => {
     }
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
-    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join9(dirname8(absolute), `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join10(dirname8(absolute), `${stem}.meta.json`) : null;
     await unlink2(absolute);
     if (sidecarPath) {
       try {
@@ -11157,6 +11428,8 @@ function plainProperties(properties) {
 // server/routes/admin/graph-search.ts
 var DEFAULT_LIMIT = 20;
 var MAX_LIMIT = 2e3;
+var MESSAGE_FAMILY_LABELS = ["Message", "UserMessage", "AssistantMessage", "WhatsAppMessage"];
+var CONVERSATION_PARENT_LABELS = /* @__PURE__ */ new Set(["AdminConversation", "PublicConversation"]);
 var app23 = new Hono();
 app23.get("/", requireAdminSession, async (c) => {
   const sessionKey = c.var.sessionKey;
@@ -11175,13 +11448,15 @@ app23.get("/", requireAdminSession, async (c) => {
   }
   const parsedLimit = rawLimit ? parseInt(rawLimit, 10) : DEFAULT_LIMIT;
   const limit = Number.isFinite(parsedLimit) && parsedLimit > 0 ? Math.min(parsedLimit, MAX_LIMIT) : DEFAULT_LIMIT;
+  const wantsBodyFulltext = labels.some((l) => CONVERSATION_PARENT_LABELS.has(l));
+  const expandedLabels = wantsBodyFulltext ? Array.from(/* @__PURE__ */ new Set([...labels, ...MESSAGE_FAMILY_LABELS])) : labels;
   const started = Date.now();
   const session = getSession();
   try {
     const res = await hybrid(session, embed, {
       query: q,
       accountId,
-      labels,
+      labels: expandedLabels,
       limit,
       degradeOnEmbedFailure: true
     });
@@ -11190,11 +11465,59 @@ app23.get("/", requireAdminSession, async (c) => {
       console.error(`[graph-search] embed-unavailable err="${res.embedError}" \u2014 bm25-only`);
       console.error(`[graph-search] embed-degraded query="${q}" results=${res.results.length}`);
     }
+    let labelMatchCount = 0;
+    let bodyFulltextCount = 0;
+    let resolvedResults = res.results;
+    if (wantsBodyFulltext) {
+      const userLabelSet = new Set(labels);
+      const seen = /* @__PURE__ */ new Map();
+      for (const r of res.results) {
+        const isMessage = r.labels.some((l) => MESSAGE_FAMILY_LABELS.includes(l));
+        if (isMessage) continue;
+        if (r.labels.some((l) => userLabelSet.has(l))) {
+          const existing = seen.get(r.nodeId);
+          if (!existing || existing.score < r.score) {
+            seen.set(r.nodeId, r);
+          }
+          labelMatchCount++;
+        }
+      }
+      for (const r of res.results) {
+        const isMessage = r.labels.some((l) => MESSAGE_FAMILY_LABELS.includes(l));
+        if (!isMessage) continue;
+        const parent = r.related.find(
+          (rel) => rel.relationship === "PART_OF" && rel.direction === "outgoing" && rel.labels.some((l) => userLabelSet.has(l))
+        );
+        if (!parent) continue;
+        const existing = seen.get(parent.nodeId);
+        if (existing) {
+          if (existing.score < r.score) {
+            seen.set(parent.nodeId, { ...existing, score: r.score });
+          }
+        } else {
+          seen.set(parent.nodeId, {
+            nodeId: parent.nodeId,
+            labels: parent.labels,
+            properties: parent.properties,
+            score: r.score,
+            related: []
+          });
+        }
+        bodyFulltextCount++;
+      }
+      resolvedResults = Array.from(seen.values()).sort((a, b) => b.score - a.score);
+      console.error(
+        `[graph-search] label-match query="${q}" hits=${labelMatchCount}`
+      );
+      console.error(
+        `[graph-search] body-fulltext query="${q}" hits=${bodyFulltextCount} ms=${total}`
+      );
+    }
     console.error(
-      `[graph-search] query="${q}" labels=${labels.join(",")} limit=${limit} mode=${res.mode} results=${res.results.length} expand-ms=${res.expandMs} total-ms=${total}`
+      `[graph-search] query="${q}" labels=${labels.join(",")} expanded=${expandedLabels.length > labels.length ? 1 : 0} limit=${limit} mode=${res.mode} raw-results=${res.results.length} resolved-results=${resolvedResults.length} expand-ms=${res.expandMs} total-ms=${total}`
     );
     return c.json({
-      results: res.results,
+      results: resolvedResults,
       mode: res.mode,
       embedError: res.embedError,
       elapsedMs: total
@@ -11393,6 +11716,10 @@ async function handleDefault(c, accountId) {
   const includeTrashed = c.req.query("includeTrashed") === "1";
   const includeAgentActions = c.req.query("includeAgentActions") === "1";
   const agentActionLabels = includeAgentActions ? [] : [...AGENT_ACTION_LABELS];
+  const rawChannel = c.req.query("channel") ?? "";
+  const channel = rawChannel.split(",").map((s) => s.trim()).filter(Boolean);
+  const rawMessageSublabel = c.req.query("messageSublabel") ?? "";
+  const messageSublabel = rawMessageSublabel.split(",").map((s) => s.trim()).filter(Boolean);
   if (labels.length === 0) {
     console.error(
       `[graph-page] load rejected reason=missing-filter account=${accountId} labels=`
@@ -11424,7 +11751,7 @@ async function handleDefault(c, accountId) {
   try {
     const countCypher = includeTrashed ? DEFAULT_COUNT_CYPHER_INCLUDE_TRASHED : DEFAULT_COUNT_CYPHER;
     const fetchCypher = includeTrashed ? DEFAULT_FETCH_CYPHER_INCLUDE_TRASHED : DEFAULT_FETCH_CYPHER;
-    const cypherParams = { accountId, labels, agentActionLabels };
+    const cypherParams = { accountId, labels, agentActionLabels, channel, messageSublabel };
     const result = await session.executeRead(async (tx) => {
       const countResult = await tx.run(countCypher, cypherParams);
       const matchedRaw = countResult.records[0]?.get("matched");
@@ -11456,8 +11783,10 @@ async function handleDefault(c, accountId) {
     const nodes = result.rawNodes.map((n) => pruneNode(n, warnedClasses, conversationWarnings));
     const edges = result.rawEdges.filter((e) => e && e.id != null).map((e) => pruneEdge(e, warnedClasses));
     const trashedSuffix = includeTrashed ? " includeTrashed=1" : "";
+    const channelSuffix = channel.length > 0 ? ` channel=${channel.join(",")}` : "";
+    const sublabelSuffix = messageSublabel.length > 0 ? ` messageSublabel=${messageSublabel.join(",")}` : "";
     console.error(
-      `[graph-page] load mode=default account=${accountId} agentActions=${includeAgentActions} labels=${labels.join(",")}${trashedSuffix} nodes=${nodes.length} edges=${edges.length} ms=${elapsed}`
+      `[graph-page] load mode=default account=${accountId} agentActions=${includeAgentActions} labels=${labels.join(",")}${trashedSuffix}${channelSuffix}${sublabelSuffix} nodes=${nodes.length} edges=${edges.length} ms=${elapsed}`
     );
     return c.json({ nodes, edges });
   } catch (err) {
@@ -11553,13 +11882,22 @@ async function handleNeighbourhood(c, accountId) {
     }
   }
 }
+var SUBFACET_PREDICATE = `
+    AND (size($channel) = 0
+         OR NOT any(lbl IN labels(n) WHERE lbl IN ['Conversation','AdminConversation','PublicConversation'])
+         OR n.channel IS NULL
+         OR n.channel IN $channel)
+    AND (size($messageSublabel) = 0
+         OR NOT any(lbl IN labels(n) WHERE lbl IN ['Message','UserMessage','AssistantMessage','WhatsAppMessage'])
+         OR any(lbl IN labels(n) WHERE lbl IN $messageSublabel))
+`;
 var DEFAULT_COUNT_CYPHER = `
   MATCH (n)
   WHERE n.accountId = $accountId
     AND any(lbl IN labels(n) WHERE lbl IN $labels)
     AND NOT any(lbl IN labels(n) WHERE lbl IN $agentActionLabels)
     AND NOT n:Trashed
-    AND n.deletedAt IS NULL
+    AND n.deletedAt IS NULL${SUBFACET_PREDICATE}
   RETURN count(n) AS matched
 `;
 var CONVERSATION_PROPS_PROJECTION = `CASE
@@ -11573,7 +11911,7 @@ var DEFAULT_FETCH_CYPHER = `
     AND any(lbl IN labels(n) WHERE lbl IN $labels)
     AND NOT any(lbl IN labels(n) WHERE lbl IN $agentActionLabels)
     AND NOT n:Trashed
-    AND n.deletedAt IS NULL
+    AND n.deletedAt IS NULL${SUBFACET_PREDICATE}
   WITH collect(n) AS nodes, collect(elementId(n)) AS nodeIds
   UNWIND nodes AS n
   OPTIONAL MATCH (n)-[r]-(m)
@@ -11595,7 +11933,7 @@ var DEFAULT_COUNT_CYPHER_INCLUDE_TRASHED = `
   WHERE n.accountId = $accountId
     AND any(lbl IN labels(n) WHERE lbl IN $labels)
     AND NOT any(lbl IN labels(n) WHERE lbl IN $agentActionLabels)
-    AND n.deletedAt IS NULL
+    AND n.deletedAt IS NULL${SUBFACET_PREDICATE}
   RETURN count(n) AS matched
 `;
 var DEFAULT_FETCH_CYPHER_INCLUDE_TRASHED = `
@@ -11603,7 +11941,7 @@ var DEFAULT_FETCH_CYPHER_INCLUDE_TRASHED = `
   WHERE n.accountId = $accountId
     AND any(lbl IN labels(n) WHERE lbl IN $labels)
     AND NOT any(lbl IN labels(n) WHERE lbl IN $agentActionLabels)
-    AND n.deletedAt IS NULL
+    AND n.deletedAt IS NULL${SUBFACET_PREDICATE}
   WITH collect(n) AS nodes, collect(elementId(n)) AS nodeIds
   UNWIND nodes AS n
   OPTIONAL MATCH (n)-[r]-(m)
@@ -12197,7 +12535,7 @@ var adherence_default = app30;
 import neo4j3 from "neo4j-driver";
 import { readFile as readFile5, readdir as readdir3, stat as stat5 } from "fs/promises";
 import { resolve as resolve20, relative as relative2, isAbsolute } from "path";
-import { existsSync as existsSync20 } from "fs";
+import { existsSync as existsSync21 } from "fs";
 var LIMIT = 50;
 var TEXT_MIME_PREFIXES = ["text/", "application/json", "application/markdown"];
 var ADMIN_AGENT_FILES = ["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"];
@@ -12345,7 +12683,7 @@ async function fetchAgentTemplateRows(accountDir) {
 async function unionSpecialistFilenames(overrideDir, bundledDir) {
   const names = /* @__PURE__ */ new Set();
   for (const dir of [overrideDir, bundledDir]) {
-    if (!existsSync20(dir)) continue;
+    if (!existsSync21(dir)) continue;
     try {
       const entries = await readdir3(dir);
       for (const entry of entries) {
@@ -12360,7 +12698,7 @@ async function unionSpecialistFilenames(overrideDir, bundledDir) {
 }
 async function readAgentTemplateRow(inp) {
   let chosenPath = null;
-  if (existsSync20(inp.overridePath)) {
+  if (existsSync21(inp.overridePath)) {
     try {
       validateFilePathInAccount(inp.overridePath, inp.overrideRoot);
       chosenPath = inp.overridePath;
@@ -12371,7 +12709,7 @@ async function readAgentTemplateRow(inp) {
       );
       return null;
     }
-  } else if (existsSync20(inp.bundledPath)) {
+  } else if (existsSync21(inp.bundledPath)) {
     if (!isWithin(inp.bundledPath, inp.bundledRoot)) {
       console.error(
         `[admin/sidebar-artefacts] agent-template-read-failed agent=${inp.displayName} kind=${inp.logName} error="bundled path outside PLATFORM_ROOT"`
@@ -12413,7 +12751,7 @@ var sidebar_artefacts_default = app31;
 // server/routes/admin/sidebar-artefact-save.ts
 import { mkdir as mkdir4, readdir as readdir4, stat as stat6, writeFile as writeFile5 } from "fs/promises";
 import { resolve as resolve21 } from "path";
-import { existsSync as existsSync21 } from "fs";
+import { existsSync as existsSync22 } from "fs";
 var ADMIN_AGENT_FILES2 = /* @__PURE__ */ new Set(["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"]);
 var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 var app32 = new Hono();
@@ -12477,7 +12815,7 @@ async function resolveSavePath(id, accountId, accountDir) {
   }
   if (UUID_RE4.test(id)) {
     const dir = resolve21(ATTACHMENTS_ROOT, accountId, id);
-    if (!existsSync21(dir)) {
+    if (!existsSync22(dir)) {
       return { kind: "reject", status: 400, reason: "not-found" };
     }
     try {
@@ -12501,7 +12839,7 @@ var sidebar_artefact_save_default = app32;
 
 // server/routes/admin/sidebar-artefact-content.ts
 import { readFile as readFile6, readdir as readdir5 } from "fs/promises";
-import { existsSync as existsSync22 } from "fs";
+import { existsSync as existsSync23 } from "fs";
 import { resolve as resolve22 } from "path";
 var UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 var app33 = new Hono();
@@ -12515,7 +12853,7 @@ app33.get("/", requireAdminSession, async (c) => {
     return new Response("Not found", { status: 404 });
   }
   const dir = resolve22(ATTACHMENTS_ROOT, accountId, id);
-  if (!existsSync22(dir)) {
+  if (!existsSync23(dir)) {
     console.error(`[admin/sidebar-artefact-content] not-found id=${id.slice(0, 8)}`);
     return new Response("Not found", { status: 404 });
   }
@@ -12577,7 +12915,7 @@ app34.route("/sidebar-artefact-content", sidebar_artefact_content_default);
 var admin_default = app34;
 
 // server/routes/sites.ts
-import { existsSync as existsSync23, readFileSync as readFileSync16, realpathSync as realpathSync5, statSync as statSync8 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync17, realpathSync as realpathSync5, statSync as statSync8 } from "fs";
 import { resolve as resolve23 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
@@ -12644,7 +12982,7 @@ app35.get("/:rel{.*}", (c) => {
   }
   let stat7;
   try {
-    stat7 = existsSync23(filePath) ? statSync8(filePath) : null;
+    stat7 = existsSync24(filePath) ? statSync8(filePath) : null;
   } catch {
     stat7 = null;
   }
@@ -12657,7 +12995,7 @@ app35.get("/:rel{.*}", (c) => {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync23(filePath)) {
+  if (!existsSync24(filePath)) {
     console.error(`[sites] not-found path=${reqPath} status=404`);
     return c.text("Not found", 404);
   }
@@ -12676,7 +13014,7 @@ app35.get("/:rel{.*}", (c) => {
   }
   let body;
   try {
-    body = readFileSync16(realPath);
+    body = readFileSync17(realPath);
   } catch (err) {
     const code = err?.code;
     if (code === "EISDIR") {
@@ -12808,14 +13146,14 @@ function clientFrom(c) {
   );
 }
 var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT7 ? join10(PLATFORM_ROOT7, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT7 ? join11(PLATFORM_ROOT7, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", domain: "getmaxy.com" };
-if (BRAND_JSON_PATH && !existsSync24(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && !existsSync25(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
-if (BRAND_JSON_PATH && existsSync24(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync25(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync17(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync18(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -12834,11 +13172,11 @@ var brandLoginOpts = {
   bodyFont: BRAND.defaultFonts?.body,
   logoContainsName: !!BRAND.logoContainsName
 };
-var ALIAS_DOMAINS_PATH2 = join10(homedir2(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH2 = join11(homedir2(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
-    if (!existsSync24(ALIAS_DOMAINS_PATH2)) return null;
-    const parsed = JSON.parse(readFileSync17(ALIAS_DOMAINS_PATH2, "utf-8"));
+    if (!existsSync25(ALIAS_DOMAINS_PATH2)) return null;
+    const parsed = JSON.parse(readFileSync18(ALIAS_DOMAINS_PATH2, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -13184,14 +13522,14 @@ app36.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync24(filePath)) {
+  if (!existsSync25(filePath)) {
     console.error(`[agent-assets] serve slug=${slug} file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync17(filePath);
+  const body = readFileSync18(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
@@ -13214,14 +13552,14 @@ app36.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync24(filePath)) {
+  if (!existsSync25(filePath)) {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync17(filePath);
+  const body = readFileSync18(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
@@ -13231,9 +13569,9 @@ app36.route("/sites", sites_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
-if (BRAND_JSON_PATH && existsSync24(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync25(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync17(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync18(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -13250,9 +13588,9 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT7) return "unknown";
-    const versionFile = join10(PLATFORM_ROOT7, "config", `.${BRAND.hostname}-version`);
-    if (!existsSync24(versionFile)) return "unknown";
-    const content = readFileSync17(versionFile, "utf-8").trim();
+    const versionFile = join11(PLATFORM_ROOT7, "config", `.${BRAND.hostname}-version`);
+    if (!existsSync25(versionFile)) return "unknown";
+    const content = readFileSync18(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -13293,7 +13631,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync17(resolve24(process.cwd(), "public", file), "utf-8");
+    html = readFileSync18(resolve24(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -13309,26 +13647,26 @@ ${clientErrorReporterScript}
 }
 var brandedHtmlCache = /* @__PURE__ */ new Map();
 function loadBrandingCache(agentSlug) {
-  const configDir2 = join10(homedir2(), BRAND.configDir);
+  const configDir2 = join11(homedir2(), BRAND.configDir);
   try {
-    const accountJsonPath = join10(configDir2, "account.json");
-    if (!existsSync24(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync17(accountJsonPath, "utf-8"));
+    const accountJsonPath = join11(configDir2, "account.json");
+    if (!existsSync25(accountJsonPath)) return null;
+    const account = JSON.parse(readFileSync18(accountJsonPath, "utf-8"));
     const accountId = account.accountId;
     if (!accountId) return null;
-    const cachePath = join10(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
-    if (!existsSync24(cachePath)) return null;
-    return JSON.parse(readFileSync17(cachePath, "utf-8"));
+    const cachePath = join11(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
+    if (!existsSync25(cachePath)) return null;
+    return JSON.parse(readFileSync18(cachePath, "utf-8"));
   } catch {
     return null;
   }
 }
 function resolveDefaultSlug() {
   try {
-    const configDir2 = join10(homedir2(), BRAND.configDir);
-    const accountJsonPath = join10(configDir2, "account.json");
-    if (!existsSync24(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync17(accountJsonPath, "utf-8"));
+    const configDir2 = join11(homedir2(), BRAND.configDir);
+    const accountJsonPath = join11(configDir2, "account.json");
+    if (!existsSync25(accountJsonPath)) return null;
+    const account = JSON.parse(readFileSync18(accountJsonPath, "utf-8"));
     return account.defaultAgent || null;
   } catch {
     return null;
@@ -13401,7 +13739,7 @@ app36.use("/vnc-popout.html", logViewerFetch);
 app36.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync17(resolve24(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync18(resolve24(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -13491,8 +13829,8 @@ try {
 (async () => {
   try {
     let userId = "";
-    if (existsSync24(USERS_FILE)) {
-      const users = JSON.parse(readFileSync17(USERS_FILE, "utf-8").trim() || "[]");
+    if (existsSync25(USERS_FILE)) {
+      const users = JSON.parse(readFileSync18(USERS_FILE, "utf-8").trim() || "[]");
       userId = users[0]?.userId ?? "";
     }
     await backfillNullUserIdConversations(userId);
@@ -13552,6 +13890,48 @@ for (const dir of bootEnabled) {
   bootDelivered.push(dir);
 }
 console.error(`[plugins] readiness enabled=${bootEnabled.length} delivered=${bootDelivered.length} dist-missing=[${bootDistMissing.join(",")}] missing=[${bootMissing.join(",")}]`);
+(async () => {
+  if (!bootAccount) {
+    console.log("[action-completion-relay] phase=consumed-skip reason=no-account");
+    return;
+  }
+  let records;
+  try {
+    records = consumeActionCompletionRelays(bootAccount.accountDir);
+  } catch (err) {
+    console.error(`[action-completion-relay] phase=consume-failed error=${err instanceof Error ? err.message : String(err)}`);
+    return;
+  }
+  if (records.length === 0) {
+    console.log(`[action-completion-relay] phase=consumed-empty accountId=${bootAccount.accountId.slice(0, 8)}\u2026`);
+    return;
+  }
+  console.log(`[action-completion-relay] phase=consume-batch count=${records.length} accountId=${bootAccount.accountId.slice(0, 8)}\u2026`);
+  for (const rec of records) {
+    const sessionKey = `cloudflare-relay-boot:${rec.actionId}`;
+    let outcome = "injected";
+    let dispatchError;
+    try {
+      registerSession(sessionKey, "admin", bootAccount.accountId);
+      setConversationIdForSession(sessionKey, rec.conversationId);
+      for await (const _ev of invokeAgent({ type: "admin" }, rec.message, sessionKey)) {
+      }
+    } catch (err) {
+      outcome = "dispatch-failed";
+      dispatchError = err instanceof Error ? err.message : String(err);
+    } finally {
+      unregisterSession(sessionKey);
+    }
+    if (outcome === "injected") {
+      deleteConsumedRelay(rec.filePath);
+      console.log(`[action-completion-relay] phase=consumed actionId=${rec.actionId} conversationId=${rec.conversationId} ageMs=${rec.ageMs} outcome=injected`);
+    } else {
+      console.error(`[action-completion-relay] phase=consumed actionId=${rec.actionId} conversationId=${rec.conversationId} ageMs=${rec.ageMs} outcome=${outcome} reason=${JSON.stringify(dispatchError ?? "")} fileRetained=${JSON.stringify(rec.filePath)}`);
+    }
+  }
+})().catch((err) => {
+  console.error(`[action-completion-relay] boot-drain rejected: ${err instanceof Error ? err.message : String(err)}`);
+});
 if (bootAccountConfig?.whatsapp) {
   console.error(`[whatsapp:boot] loading whatsapp config from account.json publicAgent=${bootPublicAgent ?? "none"}`);
 } else {
@@ -13559,7 +13939,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve24(process.env.MAXY_PLATFORM_ROOT ?? join10(__dirname, "..")),
+  platformRoot: resolve24(process.env.MAXY_PLATFORM_ROOT ?? join11(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     try {