@rubytech/create-maxy 1.0.889 → 1.0.891

package/payload/server/server.js

@@ -1,13 +1,10 @@
 import {
-  ACCOUNTS_DIR,
   ATTACHMENTS_ROOT,
   Hono,
   MAX_FILES_PER_MESSAGE,
   MAX_FILE_SIZE_BYTES,
-  PLATFORM_ROOT,
   SUPPORTED_MIME_TYPES,
   assertSupportedMime,
-  autoDeliverPremiumPlugins,
   browserViewerLog,
   buildX11Env,
   callOauthLlm,
@@ -26,10 +23,6 @@ import {
   ensureCdp,
   ensureLogDir,
   ensureVnc,
-  findMissingPlugins,
-  getBundleMtimeIso,
-  getDefaultAccountId,
-  hasStubAccountDir,
   hashPassword,
   httpLog,
   invokeAgent,
@@ -42,17 +35,12 @@ import {
   load,
   logPath,
   pickComponentBytes,
-  reconcileEnabledPlugins,
   recordFailedAttempt,
   render,
   renderLoginPage,
   requireAdminSession,
-  resolveAccount,
-  resolveAgentConfig,
   resolveBrowserTransport,
   resolveClientIp,
-  resolveDefaultAgentSlug,
-  resolveUserAccounts,
   safeJson,
   sanitizeClientCorrId,
   serve,
@@ -62,10 +50,8 @@ import {
   storeComponentArtefact,
   storeGeneratedFile,
   storePublicAttachment,
-  streamLogPathFor,
   stripAttachmentMetaSuffix,
   tryCookieBridgeForConversation,
-  validateAgentSlug,
   validateFilePathInAccount,
   validateKey,
   validatePasswordStrength,
@@ -73,50 +59,66 @@ import {
   verifyRemotePassword,
   vncLog,
   waitForExit,
-  walkPremiumBundles,
   writeChromiumWrapper
-} from "./chunk-S65GGO53.js";
+} from "./chunk-RICR2PXW.js";
 import {
+  ACCOUNTS_DIR,
   CDP_PORT,
   COMMERCIAL_MODE,
   LOG_DIR,
   MAXY_DIR,
+  PLATFORM_ROOT,
   TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE,
   TELEGRAM_WEBHOOK_SECRET_FILE,
   USERS_FILE,
   WEBSOCKIFY_PORT,
   agentLogStream,
+  appendStreamLogLine,
+  autoDeliverPremiumPlugins,
   clearSessionHistory,
   completeGrantSetup,
   consumeWantsPriorConversation,
   emitMissingOnResolve,
+  findMissingPlugins,
   fingerprintSessionKey,
   getAccountIdForSession,
   getActiveClient,
   getAgentNameForSession,
+  getBundleMtimeIso,
   getConversationIdForSession,
+  getDefaultAccountId,
   getGrantForSession,
   getGroupSlugForSession,
   getRoleForSession,
   getSessionKeyByConversationId,
   getSessionMessages,
+  getStreamLogHandle,
   getUserIdForSession,
   getUserNameForSession,
   getVisitorIdForSession,
+  hasStubAccountDir,
   interruptClient,
   listAdminSessionsInProgress,
   mintAdminSessionToken,
+  reconcileEnabledPlugins,
   registerGrantSession,
   registerResumedSession,
   registerSession,
+  resolveAccount,
+  resolveAgentConfig,
+  resolveDefaultAgentSlug,
+  resolveUserAccounts,
   setAgentSessionId,
   setConversationIdForSession,
   setGroupContextForSession,
   setWantsPriorConversation,
   sigtermFlushStreamLogs,
+  streamLogPathFor,
   unregisterSession,
-  validateSession
-} from "./chunk-IFMZ5I3E.js";
+  validateAgentSlug,
+  validateSession,
+  walkPremiumBundles
+} from "./chunk-NZ6D7QJM.js";
 import {
   CLOUDFLARE_TASK_DIAGNOSTICS,
   appendCloudflareSteps,
@@ -125,7 +127,7 @@ import {
   openCloudflareTask,
   readTunnelState,
   resolveUnitGoneVerdict
-} from "./chunk-ECAQVMRA.js";
+} from "./chunk-O7DTMDJM.js";
 import {
   GREETING_DIRECTIVE,
   HAIKU_MODEL,
@@ -160,7 +162,7 @@ import {
   verifyConversationOwnership,
   writeAdminUserAndPerson,
   writeTurnFailure
-} from "./chunk-DOIAYD3J.js";
+} from "./chunk-FBTNBSB4.js";
 import {
   __commonJS,
   __toESM
@@ -664,7 +666,7 @@ var serveStatic = (options = { root: "" }) => {
 
 // server/index.ts
 import { readFileSync as readFileSync19, existsSync as existsSync25, watchFile } from "fs";
-import { resolve as resolve22, join as join12, basename as basename4 } from "path";
+import { resolve as resolve21, join as join12, basename as basename4 } from "path";
 import { homedir as homedir3 } from "os";
 
 // app/lib/agent-slug-pattern.ts
@@ -1308,7 +1310,7 @@ var credsSaveQueue = Promise.resolve();
 async function drainCredsSaveQueue(timeoutMs = 5e3) {
   console.error(`${TAG3} draining credential save queue\u2026`);
   const timer2 = new Promise(
-    (resolve23) => setTimeout(() => resolve23("timeout"), timeoutMs)
+    (resolve22) => setTimeout(() => resolve22("timeout"), timeoutMs)
   );
   const result = await Promise.race([
     credsSaveQueue.then(() => "drained"),
@@ -1436,11 +1438,11 @@ async function createWaSocket(opts) {
   return sock;
 }
 async function waitForConnection(sock) {
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve22, reject) => {
     const handler = (update) => {
       if (update.connection === "open") {
         sock.ev.off("connection.update", handler);
-        resolve23();
+        resolve22();
       }
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
@@ -1554,14 +1556,14 @@ ${inspected}`;
   return inspect2(err, INSPECT_OPTS2);
 }
 function withTimeout(label, promise, timeoutMs) {
-  return new Promise((resolve23, reject) => {
+  return new Promise((resolve22, reject) => {
     const timer2 = setTimeout(() => {
       reject(new Error(`${label} timed out after ${timeoutMs}ms`));
     }, timeoutMs);
     promise.then(
       (value) => {
         clearTimeout(timer2);
-        resolve23(value);
+        resolve22(value);
       },
       (err) => {
         clearTimeout(timer2);
@@ -2096,8 +2098,8 @@ async function persistWhatsAppMessage(input) {
   const { givenName, familyName } = splitName(input.pushName);
   const prev = sessionWriteLocks.get(input.cacheKey);
   let release;
-  const mine = new Promise((resolve23) => {
-    release = resolve23;
+  const mine = new Promise((resolve22) => {
+    release = resolve22;
   });
   const chained = (prev ?? Promise.resolve()).then(() => mine);
   sessionWriteLocks.set(input.cacheKey, chained);
@@ -3134,11 +3136,11 @@ async function connectWithReconnect(conn) {
       console.error(
         `${TAG13} reconnecting account=${conn.accountId} in ${delay}ms (attempt ${decision.nextAttempts}/${maxAttempts})`
       );
-      await new Promise((resolve23) => {
-        const timer2 = setTimeout(resolve23, delay);
+      await new Promise((resolve22) => {
+        const timer2 = setTimeout(resolve22, delay);
         conn.abortController.signal.addEventListener("abort", () => {
           clearTimeout(timer2);
-          resolve23();
+          resolve22();
         }, { once: true });
       });
     }
@@ -3146,16 +3148,16 @@ async function connectWithReconnect(conn) {
   }
 }
 function waitForDisconnectEvent(conn) {
-  return new Promise((resolve23) => {
+  return new Promise((resolve22) => {
     if (!conn.sock) {
-      resolve23();
+      resolve22();
       return;
     }
     const sock = conn.sock;
     const handler = (update) => {
       if (update.connection === "close") {
         sock.ev.off("connection.update", handler);
-        resolve23();
+        resolve22();
       }
     };
     sock.ev.on("connection.update", handler);
@@ -3417,8 +3419,8 @@ async function handleInboundMessage(conn, msg) {
     const conversationKey = isGroup ? remoteJid : senderPhone;
     const debounceKey = `${conn.accountId}:${conversationKey}:${senderPhone}`;
     let resolvePending;
-    const sttPending = new Promise((resolve23) => {
-      resolvePending = resolve23;
+    const sttPending = new Promise((resolve22) => {
+      resolvePending = resolve22;
     });
     if (conn.debouncer) conn.debouncer.registerPending(debounceKey, sttPending);
     try {
@@ -3539,20 +3541,20 @@ async function probeApiKey() {
   return result.status;
 }
 function checkPort(port2, timeoutMs = 500) {
-  return new Promise((resolve23) => {
+  return new Promise((resolve22) => {
     const socket = createConnection(port2, "127.0.0.1");
     socket.setTimeout(timeoutMs);
     socket.once("connect", () => {
       socket.destroy();
-      resolve23(true);
+      resolve22(true);
     });
     socket.once("error", () => {
       socket.destroy();
-      resolve23(false);
+      resolve22(false);
     });
     socket.once("timeout", () => {
       socket.destroy();
-      resolve23(false);
+      resolve22(false);
     });
   });
 }
@@ -4291,6 +4293,7 @@ function isLocalHost(host) {
 }
 var app3 = new Hono();
 app3.post("/", async (c) => {
+  console.log(`[chat-route] entered route=public method=POST`);
   const contentType = c.req.header("content-type") ?? "";
   const local = isLocalHost(c.req.header("host") ?? "");
   let message;
@@ -5643,8 +5646,8 @@ async function startLogin(opts) {
   resetActiveLogin(accountId);
   let resolveQr = null;
   let rejectQr = null;
-  const qrPromise = new Promise((resolve23, reject) => {
-    resolveQr = resolve23;
+  const qrPromise = new Promise((resolve22, reject) => {
+    resolveQr = resolve22;
     rejectQr = reject;
   });
   const qrTimer = setTimeout(
@@ -6780,7 +6783,7 @@ app8.post("/skip", async (c) => {
 var onboarding_default = app8;
 
 // server/routes/client-error.ts
-import { appendFileSync, existsSync as existsSync10, renameSync as renameSync2, statSync as statSync3 } from "fs";
+import { appendFileSync as appendFileSync2, existsSync as existsSync10, renameSync as renameSync2, statSync as statSync3 } from "fs";
 import { join as join7 } from "path";
 var CLIENT_ERRORS_LOG = join7(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
@@ -6929,7 +6932,7 @@ app9.post("/", async (c) => {
         tag: typeof body.tag === "string" ? truncate(body.tag, 32) : void 0,
         status: typeof body.status === "number" ? body.status : void 0
       };
-      appendFileSync(CLIENT_ERRORS_LOG, JSON.stringify(payload) + "\n", "utf-8");
+      appendFileSync2(CLIENT_ERRORS_LOG, JSON.stringify(payload) + "\n", "utf-8");
     } catch (err) {
       console.error(`[client-error] append failed: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -7187,13 +7190,11 @@ app10.post("/", async (c) => {
 var session_default2 = app10;
 
 // server/routes/admin/chat.ts
-import { resolve as resolve8 } from "path";
-import { appendFileSync as appendFileSync3 } from "fs";
 import { randomUUID as randomUUID6 } from "crypto";
 
 // app/lib/script-stream-tailer.ts
 import * as childProcess from "child_process";
-import { appendFileSync as appendFileSync2, createReadStream as createReadStream2, mkdirSync as mkdirSync5, statSync as statSync5 } from "fs";
+import { appendFileSync as appendFileSync3, createReadStream as createReadStream2, mkdirSync as mkdirSync5, statSync as statSync5 } from "fs";
 import { dirname as dirname4 } from "path";
 import { StringDecoder } from "string_decoder";
 var SCRIPT_STREAM_RE = /^\[([^\]]+)\] \[script:([a-z][a-z0-9-]*)((?::[a-z0-9:_-]+)?)\] (.*)$/;
@@ -7304,7 +7305,7 @@ function writeRouteMilestone(streamLogPath, scope, line) {
   const ts = (/* @__PURE__ */ new Date()).toISOString();
   try {
     mkdirSync5(dirname4(streamLogPath), { recursive: true });
-    appendFileSync2(streamLogPath, `[${ts}] [script:${scope}] ${line}
+    appendFileSync3(streamLogPath, `[${ts}] [script:${scope}] ${line}
 `);
   } catch (err) {
     console.error(
@@ -7479,7 +7480,7 @@ var app11 = new Hono();
 app11.post("/cancel", requireAdminSession, async (c) => {
   const session_key = c.var.cacheKey;
   try {
-    const { interruptClient: interruptClient2 } = await import("./client-pool-M6NS5G2U.js");
+    const { interruptClient: interruptClient2 } = await import("./client-pool-PG23WNFG.js");
     await interruptClient2(session_key);
     return c.json({ ok: true });
   } catch (err) {
@@ -7488,6 +7489,7 @@ app11.post("/cancel", requireAdminSession, async (c) => {
 });
 app11.post("/", requireAdminSession, async (c) => {
   const session_key = c.var.cacheKey;
+  console.log(`[chat-route] entered route=admin method=POST cacheKey=${session_key.slice(0, 8)}\u2026`);
   const contentType = c.req.header("content-type") ?? "";
   let message;
   let userTimestamp;
@@ -7673,14 +7675,14 @@ app11.post("/", requireAdminSession, async (c) => {
   const encoder = new TextEncoder();
   const sseLogStream = agentLogStream("sse-events", account.accountDir, session_key);
   const sk = conversationId.slice(0, 8);
-  const teeStreamLogPath = resolve8(account.accountDir, "logs", `claude-agent-stream-${session_key}.log`);
+  const streamLog = getStreamLogHandle(account.accountDir, session_key);
   try {
-    appendFileSync3(teeStreamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [chat-route-version=task1006-sessionkey-on-disk] cacheKey=${session_key.slice(0, 12)}\u2026 conversationId=${conversationId}
+    streamLog.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [chat-route-version=task1013-one-writer-lazy-open] cacheKey=${session_key.slice(0, 12)}\u2026 conversationId=${conversationId}
 `);
   } catch {
   }
   try {
-    appendFileSync3(teeStreamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [client-acquire] cacheKey=${session_key.slice(0, 12)}\u2026 resume=${resumedAgentSessionId ? resumedAgentSessionId.slice(0, 8) + "\u2026" : "none"} reason=${acquireReason}
+    streamLog.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [client-acquire] cacheKey=${session_key.slice(0, 12)}\u2026 resume=${resumedAgentSessionId ? resumedAgentSessionId.slice(0, 8) + "\u2026" : "none"} reason=${acquireReason}
 `);
   } catch {
   }
@@ -7689,7 +7691,7 @@ app11.post("/", requireAdminSession, async (c) => {
     incoming.on("close", () => {
       const tsClose = (/* @__PURE__ */ new Date()).toISOString();
       try {
-        appendFileSync3(teeStreamLogPath, `[${tsClose}] [incoming-close] cacheKey=${session_key.slice(0, 12)}\u2026 complete=${incoming.complete}
+        streamLog.write(`[${tsClose}] [incoming-close] cacheKey=${session_key.slice(0, 12)}\u2026 complete=${incoming.complete}
 `);
       } catch {
       }
@@ -7697,7 +7699,7 @@ app11.post("/", requireAdminSession, async (c) => {
         console.error(`[${tsClose}] [incoming-close] DISCONNECT cacheKey=${session_key.slice(0, 12)}\u2026`);
         interruptClient(session_key).catch((err) => {
           try {
-            appendFileSync3(teeStreamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [incoming-close] interrupt-failed: ${err instanceof Error ? err.message : String(err)}
+            streamLog.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [incoming-close] interrupt-failed: ${err instanceof Error ? err.message : String(err)}
 `);
           } catch {
           }
@@ -7706,19 +7708,36 @@ app11.post("/", requireAdminSession, async (c) => {
     });
   } else {
     try {
-      appendFileSync3(teeStreamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [incoming-close] UNAVAILABLE \u2014 c.env.incoming is not an EventEmitter
+      streamLog.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [incoming-close] UNAVAILABLE \u2014 c.env.incoming is not an EventEmitter
 `);
     } catch {
     }
   }
   const sseLog = {
+    // Pre-token marker write. Buffers via streamLog.write (handle buffer +
+    // console.error backstop to server.log on zero-token sessions).
     write(line) {
       try {
         sseLogStream.write(line);
       } catch {
       }
       try {
-        appendFileSync3(teeStreamLogPath, line);
+        streamLog.write(line);
+      } catch {
+      }
+      return true;
+    },
+    // Task 1013 — SDK token-event write. Calls streamLog.writeToken which
+    // opens the per-session file lazily on first call (flushing the
+    // pre-token buffer alongside) and appends thereafter. Used by the
+    // SDK event for-await loop so the file exists iff a token was emitted.
+    writeToken(line) {
+      try {
+        sseLogStream.write(line);
+      } catch {
+      }
+      try {
+        streamLog.writeToken(line);
       } catch {
       }
       return true;
@@ -7763,11 +7782,10 @@ app11.post("/", requireAdminSession, async (c) => {
         const reqSignal = c.req.raw?.signal;
         if (reqSignal) {
           reqSignal.addEventListener("abort", () => {
-            const abortStreamLog = agentLogStream("claude-agent-stream", account.accountDir, session_key);
             const ts = (/* @__PURE__ */ new Date()).toISOString().slice(11, 23);
             sseLog.write(`[${ts}] [${sk}] admin: ABORT [operator-cancel] interrupting pool client
 `);
-            interruptClient(session_key, abortStreamLog).catch((err) => {
+            interruptClient(session_key).catch((err) => {
               sseLog.write(`[${ts}] [${sk}] admin: ABORT [interrupt-failed] ${err instanceof Error ? err.message : String(err)}
 `);
             });
@@ -7778,7 +7796,7 @@ app11.post("/", requireAdminSession, async (c) => {
       try {
         registerAdminSSE(sseEntry);
         tailer = startScriptStreamTailer({
-          path: teeStreamLogPath,
+          path: streamLog.path,
           onEvent: (event) => {
             if (!controllerOpen) return;
             const ts = (/* @__PURE__ */ new Date()).toISOString().slice(11, 23);
@@ -7793,7 +7811,7 @@ app11.post("/", requireAdminSession, async (c) => {
             }
           },
           onError: (err) => {
-            console.error(`[script-stream-tailer] ${teeStreamLogPath}: ${err.message}`);
+            console.error(`[script-stream-tailer] ${streamLog.path}: ${err.message}`);
           }
         });
         for await (const event of invokeAgent(
@@ -7806,7 +7824,7 @@ app11.post("/", requireAdminSession, async (c) => {
         )) {
           const data = JSON.stringify(event);
           const ts = (/* @__PURE__ */ new Date()).toISOString().slice(11, 23);
-          sseLog.write(`[${ts}] [${sk}] admin: ${data}
+          sseLog.writeToken(`[${ts}] [${sk}] admin: ${data}
 `);
           controller.enqueue(encoder.encode(`data: ${data}
 
@@ -7947,9 +7965,127 @@ app12.post("/", requireAdminSession, async (c) => {
 });
 var chat_failure_default = app12;
 
-// server/routes/admin/compact.ts
+// server/routes/admin/failure-report.ts
+var SESSION_KEY_RE = /^sk_[0-9a-f]{16}$/i;
+var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var ISO_RE2 = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/;
+var SAFE_TOKEN_RE = /^[\w.:-]{1,64}$/;
+function validate2(body) {
+  const missing = [];
+  if (typeof body.sessionKey !== "string" || !SESSION_KEY_RE.test(body.sessionKey)) missing.push("sessionKey");
+  if (typeof body.conversationId !== "string" || !UUID_RE4.test(body.conversationId)) missing.push("conversationId");
+  if (typeof body.lastUserMessageId !== "string" || !SAFE_TOKEN_RE.test(body.lastUserMessageId)) missing.push("lastUserMessageId");
+  if (typeof body.clickTs !== "string" || !ISO_RE2.test(body.clickTs)) missing.push("clickTs");
+  const snap = body.clientSnapshot;
+  if (!snap || typeof snap !== "object") missing.push("clientSnapshot");
+  if (missing.length > 0) return { ok: false, missing };
+  const snapshot = snap;
+  const lastAssistantMessageId = typeof body.lastAssistantMessageId === "string" && SAFE_TOKEN_RE.test(body.lastAssistantMessageId) ? body.lastAssistantMessageId : "-";
+  const sseReadyState = typeof snapshot.sseReadyState === "string" && SAFE_TOKEN_RE.test(snapshot.sseReadyState) ? snapshot.sseReadyState : typeof snapshot.sseReadyState === "number" ? String(snapshot.sseReadyState) : "-";
+  const lastEventType = typeof snapshot.lastEventType === "string" && SAFE_TOKEN_RE.test(snapshot.lastEventType) ? snapshot.lastEventType : "-";
+  const lastAppliedMessageId = typeof snapshot.lastAppliedMessageId === "string" && SAFE_TOKEN_RE.test(snapshot.lastAppliedMessageId) ? snapshot.lastAppliedMessageId : "-";
+  return {
+    ok: true,
+    value: {
+      sessionKey: body.sessionKey,
+      conversationId: body.conversationId,
+      lastUserMessageId: body.lastUserMessageId,
+      lastAssistantMessageId,
+      clickTs: body.clickTs,
+      sseReadyState,
+      lastEventType,
+      lastAppliedMessageId
+    }
+  };
+}
 var app13 = new Hono();
 app13.post("/", requireAdminSession, async (c) => {
+  let body;
+  try {
+    body = await c.req.json();
+  } catch {
+    return c.json({ ok: false, error: "missing-turn-identifiers", missing: ["body-not-json"] }, 400);
+  }
+  const v = validate2(body);
+  if (!v.ok) {
+    return c.json({ ok: false, error: "missing-turn-identifiers", missing: v.missing }, 400);
+  }
+  const cacheKey = c.var.cacheKey;
+  const accountId = getAccountIdForSession(cacheKey);
+  if (!accountId) {
+    return c.json({ ok: false, error: "no-account" }, 401);
+  }
+  const line = [
+    `[failure-report] sessionKey=${v.value.sessionKey}`,
+    `conversationId=${v.value.conversationId}`,
+    `userMessageId=${v.value.lastUserMessageId}`,
+    `assistantMessageId=${v.value.lastAssistantMessageId}`,
+    `sseState=${v.value.sseReadyState}`,
+    `lastEventType=${v.value.lastEventType}`,
+    `lastAppliedMessageId=${v.value.lastAppliedMessageId}`,
+    `ts=${v.value.clickTs}`
+  ].join(" ");
+  appendStreamLogLine(accountId, v.value.sessionKey, line);
+  return c.json({ ok: true });
+});
+var failure_report_default = app13;
+
+// server/routes/admin/sse-telemetry.ts
+var SESSION_KEY_RE2 = /^sk_[0-9a-f]{16}$/i;
+var UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var ISO_RE3 = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/;
+var PHASE_VALUES = /* @__PURE__ */ new Set(["connected", "event_received", "render_complete", "error", "close"]);
+var SAFE_TOKEN_RE2 = /^[\w.:-]{1,64}$/;
+function validate3(body) {
+  const missing = [];
+  if (typeof body.sessionKey !== "string" || !SESSION_KEY_RE2.test(body.sessionKey)) missing.push("sessionKey");
+  if (typeof body.conversationId !== "string" || !UUID_RE5.test(body.conversationId)) missing.push("conversationId");
+  if (typeof body.phase !== "string" || !PHASE_VALUES.has(body.phase)) missing.push("phase");
+  if (typeof body.ts !== "string" || !ISO_RE3.test(body.ts)) missing.push("ts");
+  if (missing.length > 0) return { ok: false, missing };
+  const eventType = typeof body.eventType === "string" && SAFE_TOKEN_RE2.test(body.eventType) ? body.eventType : "-";
+  const messageId = typeof body.messageId === "string" && SAFE_TOKEN_RE2.test(body.messageId) ? body.messageId : "-";
+  return {
+    ok: true,
+    value: {
+      sessionKey: body.sessionKey,
+      conversationId: body.conversationId,
+      phase: body.phase,
+      eventType,
+      messageId,
+      ts: body.ts
+    }
+  };
+}
+var app14 = new Hono();
+app14.post("/", requireAdminSession, async (c) => {
+  let body;
+  try {
+    body = await c.req.json();
+  } catch {
+    return c.json({ ok: false, error: "missing-turn-identifiers", missing: ["body-not-json"] }, 400);
+  }
+  const v = validate3(body);
+  if (!v.ok) {
+    return c.json({ ok: false, error: "missing-turn-identifiers", missing: v.missing }, 400);
+  }
+  const cacheKey = c.var.cacheKey;
+  const accountId = getAccountIdForSession(cacheKey);
+  if (!accountId) {
+    return c.json({ ok: false, error: "no-account" }, 401);
+  }
+  appendStreamLogLine(
+    accountId,
+    v.value.sessionKey,
+    `[sse-client] phase=${v.value.phase} sessionKey=${v.value.sessionKey} conversationId=${v.value.conversationId} messageId=${v.value.messageId} eventType=${v.value.eventType} ts=${v.value.ts}`
+  );
+  return c.json({ ok: true });
+});
+var sse_telemetry_default = app14;
+
+// server/routes/admin/compact.ts
+var app15 = new Hono();
+app15.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const encoder = new TextEncoder();
   const stream = new ReadableStream({
@@ -7976,11 +8112,11 @@ app13.post("/", requireAdminSession, async (c) => {
     }
   });
 });
-var compact_default = app13;
+var compact_default = app15;
 
 // server/routes/admin/logs.ts
 import { existsSync as existsSync13, readdirSync as readdirSync5, readFileSync as readFileSync11, statSync as statSync6 } from "fs";
-import { resolve as resolve9, basename as basename2 } from "path";
+import { resolve as resolve8, basename as basename2 } from "path";
 
 // app/lib/logs-read-resolve.ts
 import { existsSync as existsSync12 } from "fs";
@@ -7999,15 +8135,15 @@ function resolveSessionLogPaths(filename, logDirs) {
 
 // server/routes/admin/logs.ts
 var TAIL_BYTES = 8192;
-var app14 = new Hono();
-app14.get("/", async (c) => {
+var app16 = new Hono();
+app16.get("/", async (c) => {
   const fileParam = c.req.query("file");
   const typeParam = c.req.query("type");
   const conversationIdParam = c.req.query("conversationId");
   const cacheKeyParam = c.req.query("cacheKey");
   const download = c.req.query("download") === "1";
   const account = resolveAccount();
-  const accountLogDir = account ? resolve9(account.accountDir, "logs") : null;
+  const accountLogDir = account ? resolve8(account.accountDir, "logs") : null;
   const logDirs = [];
   if (accountLogDir) logDirs.push(accountLogDir);
   logDirs.push(LOG_DIR);
@@ -8015,7 +8151,7 @@ app14.get("/", async (c) => {
     const safe = basename2(fileParam);
     const searched = [];
     for (const dir of logDirs) {
-      const filePath = resolve9(dir, safe);
+      const filePath = resolve8(dir, safe);
       searched.push(filePath);
       try {
         const buffer = readFileSync11(filePath);
@@ -8127,10 +8263,10 @@ app14.get("/", async (c) => {
       console.warn(`[admin/logs] readdir-fail dir=${dir} reason=${reason}`);
       continue;
     }
-    files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync6(resolve9(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
+    files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync6(resolve8(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
       seen.add(name);
       try {
-        const content = readFileSync11(resolve9(dir, name));
+        const content = readFileSync11(resolve8(dir, name));
         const tail = content.length > TAIL_BYTES ? content.subarray(content.length - TAIL_BYTES).toString("utf-8") : content.toString("utf-8");
         logs[name] = tail.trim() || "(empty)";
       } catch (err) {
@@ -8142,12 +8278,12 @@ app14.get("/", async (c) => {
   }
   return c.json({ logs });
 });
-var logs_default = app14;
+var logs_default = app16;
 
 // server/routes/admin/claude-info.ts
 import { execFileSync as execFileSync2 } from "child_process";
-var app15 = new Hono();
-app15.get("/", (c) => {
+var app17 = new Hono();
+app17.get("/", (c) => {
   let version = "unknown";
   try {
     const raw = execFileSync2("claude", ["--version"], { encoding: "utf-8", timeout: 5e3 });
@@ -8165,14 +8301,14 @@ app15.get("/", (c) => {
   const thinkingView = resolvedAccount?.config.thinkingView ?? "default";
   return c.json({ version, account, model, thinkingView });
 });
-var claude_info_default = app15;
+var claude_info_default = app17;
 
 // server/routes/admin/attachment.ts
 import { readFile as readFile2, readdir } from "fs/promises";
 import { existsSync as existsSync14 } from "fs";
-import { resolve as resolve10 } from "path";
-var app16 = new Hono();
-app16.get("/:attachmentId", requireAdminSession, async (c) => {
+import { resolve as resolve9 } from "path";
+var app18 = new Hono();
+app18.get("/:attachmentId", requireAdminSession, async (c) => {
   const attachmentId = c.req.param("attachmentId");
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
@@ -8182,11 +8318,11 @@ app16.get("/:attachmentId", requireAdminSession, async (c) => {
   if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(attachmentId)) {
     return new Response("Not found", { status: 404 });
   }
-  const dir = resolve10(ATTACHMENTS_ROOT, accountId, attachmentId);
+  const dir = resolve9(ATTACHMENTS_ROOT, accountId, attachmentId);
   if (!existsSync14(dir)) {
     return new Response("Not found", { status: 404 });
   }
-  const metaPath = resolve10(dir, `${attachmentId}.meta.json`);
+  const metaPath = resolve9(dir, `${attachmentId}.meta.json`);
   if (!existsSync14(metaPath)) {
     return new Response("Not found", { status: 404 });
   }
@@ -8201,7 +8337,7 @@ app16.get("/:attachmentId", requireAdminSession, async (c) => {
   if (!dataFile) {
     return new Response("Not found", { status: 404 });
   }
-  const filePath = resolve10(dir, dataFile);
+  const filePath = resolve9(dir, dataFile);
   const buffer = await readFile2(filePath);
   return new Response(new Uint8Array(buffer), {
     headers: {
@@ -8211,16 +8347,16 @@ app16.get("/:attachmentId", requireAdminSession, async (c) => {
     }
   });
 });
-var attachment_default = app16;
+var attachment_default = app18;
 
 // server/routes/admin/agents.ts
-import { resolve as resolve11 } from "path";
+import { resolve as resolve10 } from "path";
 import { readdirSync as readdirSync6, readFileSync as readFileSync12, existsSync as existsSync15, rmSync } from "fs";
-var app17 = new Hono();
-app17.get("/", (c) => {
+var app19 = new Hono();
+app19.get("/", (c) => {
   const account = resolveAccount();
   if (!account) return c.json({ agents: [] });
-  const agentsDir = resolve11(account.accountDir, "agents");
+  const agentsDir = resolve10(account.accountDir, "agents");
   if (!existsSync15(agentsDir)) return c.json({ agents: [] });
   const agents = [];
   try {
@@ -8228,7 +8364,7 @@ app17.get("/", (c) => {
     for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
       if (!entry.isDirectory()) continue;
       if (entry.name === "admin") continue;
-      const configPath2 = resolve11(agentsDir, entry.name, "config.json");
+      const configPath2 = resolve10(agentsDir, entry.name, "config.json");
       if (!existsSync15(configPath2)) continue;
       try {
         const config = JSON.parse(readFileSync12(configPath2, "utf-8"));
@@ -8247,7 +8383,7 @@ app17.get("/", (c) => {
   }
   return c.json({ agents });
 });
-app17.delete("/:slug", async (c) => {
+app19.delete("/:slug", async (c) => {
   const slug = c.req.param("slug");
   const account = resolveAccount();
   if (!account) return c.json({ error: "No account resolved" }, 400);
@@ -8257,7 +8393,7 @@ app17.delete("/:slug", async (c) => {
   if (slug.includes("/") || slug.includes("..") || slug.includes("\\")) {
     return c.json({ error: "Invalid agent slug" }, 400);
   }
-  const agentDir = resolve11(account.accountDir, "agents", slug);
+  const agentDir = resolve10(account.accountDir, "agents", slug);
   if (!existsSync15(agentDir)) {
     return c.json({ error: "Agent not found" }, 404);
   }
@@ -8277,7 +8413,7 @@ app17.delete("/:slug", async (c) => {
     return c.json({ error: "Failed to delete agent" }, 500);
   }
 });
-app17.post("/:slug/project", async (c) => {
+app19.post("/:slug/project", async (c) => {
   const slug = c.req.param("slug");
   const account = resolveAccount();
   if (!account) return c.json({ error: "No account resolved" }, 400);
@@ -8287,7 +8423,7 @@ app17.post("/:slug/project", async (c) => {
   if (slug.includes("/") || slug.includes("..") || slug.includes("\\")) {
     return c.json({ error: "Invalid agent slug" }, 400);
   }
-  const agentDir = resolve11(account.accountDir, "agents", slug);
+  const agentDir = resolve10(account.accountDir, "agents", slug);
   if (!existsSync15(agentDir)) {
     return c.json({ error: "Agent not found on disk" }, 404);
   }
@@ -8299,12 +8435,12 @@ app17.post("/:slug/project", async (c) => {
     return c.json({ error: `Projection failed: ${msg}` }, 500);
   }
 });
-var agents_default = app17;
+var agents_default = app19;
 
 // server/routes/admin/sessions.ts
 import crypto2 from "crypto";
 import { resolve as resolvePath } from "path";
-import { appendFileSync as appendFileSync4, existsSync as existsSync17 } from "fs";
+import { existsSync as existsSync17 } from "fs";
 
 // app/lib/synthetic-marker.ts
 var CLOUDFLARE_MARKER_PREFIX = "Cloudflare setup completed (actionId: ";
@@ -8487,7 +8623,7 @@ function validateAndShapeAttachments(raws, conversationAccountId, conversationId
     if (reason) {
       invalid++;
       try {
-        appendFileSync4(streamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [attachment-rehydrate-invalid] conversationId=${conversationId.slice(0, 8)} messageId=${messageId.slice(0, 8)} attachmentId=${(a.attachmentId || "").slice(0, 8)} reason=${reason}
+        streamLogPath.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [attachment-rehydrate-invalid] conversationId=${conversationId.slice(0, 8)} messageId=${messageId.slice(0, 8)} attachmentId=${(a.attachmentId || "").slice(0, 8)} reason=${reason}
 `);
       } catch {
       }
@@ -8550,7 +8686,7 @@ function reconstructAssistantEvents(content, components, conversationId, message
       const line = `[${(/* @__PURE__ */ new Date()).toISOString()}] [component-rehydrate-invalid] conversationId=${conversationId.slice(0, 8)} messageId=${messageId.slice(0, 8)} name=${c.name || "<unnamed>"} reason=${invalidReason}
 `;
       try {
-        appendFileSync4(streamLogPath, line);
+        streamLogPath.write(line);
       } catch {
       }
       continue;
@@ -8590,8 +8726,8 @@ function formatAge(updatedAtStr) {
     return "unknown";
   }
 }
-var app18 = new Hono();
-app18.get("/", requireAdminSession, async (c) => {
+var app20 = new Hono();
+app20.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -8631,7 +8767,7 @@ app18.get("/", requireAdminSession, async (c) => {
     return c.json({ error: "Failed to fetch sessions" }, 500);
   }
 });
-app18.post("/new", requireAdminSession, async (c) => {
+app20.post("/new", requireAdminSession, async (c) => {
   const oldCacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(oldCacheKey);
   const userId = getUserIdForSession(oldCacheKey);
@@ -8647,7 +8783,7 @@ app18.post("/new", requireAdminSession, async (c) => {
   console.log(`[session] ${(/* @__PURE__ */ new Date()).toISOString()} session reset for new conversation: oldCacheKey=${oldCacheKey.slice(0, 8)}\u2026 newCacheKey=${newCacheKey.slice(0, 8)}\u2026 previousConversationId=${previousConversationId?.slice(0, 8) ?? "none"}\u2026 newConversationId=deferred`);
   return c.json({ session_key: newSignedSessionToken, conversationId: null });
 });
-app18.post("/switch", requireAdminSession, async (c) => {
+app20.post("/switch", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -8675,7 +8811,7 @@ app18.post("/switch", requireAdminSession, async (c) => {
   console.log(`[session-switch] from=${cacheKey.slice(0, 8)} to=${targetCacheKey.slice(0, 8)} targetConvId=${targetConversationId?.slice(0, 8) ?? "none"} accountId=${accountId.slice(0, 8)}`);
   return c.json({ session_key: targetSignedSessionToken, conversationId: targetConversationId });
 });
-app18.delete("/:id", requireAdminSession, async (c) => {
+app20.delete("/:id", requireAdminSession, async (c) => {
   const conversationId = c.req.param("id");
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
@@ -8690,7 +8826,7 @@ app18.delete("/:id", requireAdminSession, async (c) => {
     return c.json({ error: "Failed to delete session" }, 500);
   }
 });
-app18.post("/:id/resume", async (c) => {
+app20.post("/:id/resume", async (c) => {
   const conversationId = c.req.param("id");
   const signedSessionToken = c.req.query("session_key") ?? "";
   if (!signedSessionToken) {
@@ -8740,7 +8876,7 @@ app18.post("/:id/resume", async (c) => {
   if (persistedAgentSessionId) {
     setAgentSessionId(cacheKey, persistedAgentSessionId);
   }
-  const streamLogPath = resolvePath(ACCOUNTS_DIR, accountId, "logs", `claude-agent-stream-${conversationId}.log`);
+  const streamLogPath = getStreamLogHandle(resolvePath(ACCOUNTS_DIR, accountId), cacheKey);
   const tag = persistedAgentSessionId ? `agentSessionId=${persistedAgentSessionId.slice(0, 8)}\u2026` : "agentSessionId=missing";
   let messages = [];
   let neo4jMessages = [];
@@ -8843,7 +8979,7 @@ app18.post("/:id/resume", async (c) => {
                 const filename = bytesPick.mimeType === "text/html" ? `${c2.artefactTitle}.html` : `${c2.artefactTitle}.md`;
                 await storeComponentArtefact(accountId, c2.artefactAttachmentId, bytesPick.mimeType, bytesPick.content, filename);
                 clearHealPending(accountId, c2.artefactAttachmentId);
-                appendFileSync4(
+                appendFileSync(
                   streamLogPath,
                   `[${(/* @__PURE__ */ new Date()).toISOString()}] [render-component-persist] heal componentName=${c2.name} attachmentId=${c2.artefactAttachmentId.slice(0, 8)} mimeType=${bytesPick.mimeType} bytes=${bytesPick.content.length} outcome=ok
 `
@@ -8857,7 +8993,7 @@ app18.post("/:id/resume", async (c) => {
               } catch (writeErr) {
                 clearHealPending(accountId, c2.artefactAttachmentId);
                 const reason2 = writeErr instanceof Error ? writeErr.message : String(writeErr);
-                appendFileSync4(
+                appendFileSync(
                   streamLogPath,
                   `[${(/* @__PURE__ */ new Date()).toISOString()}] [render-component-persist] heal componentName=${c2.name} attachmentId=${c2.artefactAttachmentId.slice(0, 8)} outcome=disk-fail reason=${JSON.stringify(reason2.slice(0, 200))}
 `
@@ -8878,14 +9014,14 @@ app18.post("/:id/resume", async (c) => {
             );
             jsonlHealOk += 1;
             try {
-              appendFileSync4(streamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [admin-persist-heal] convId=${conversationId.slice(0, 8)} turnIndex=${i} role=${q.role} outcome=ok messageId=${(messageId ?? "").slice(0, 8)}
+              streamLogPath.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [admin-persist-heal] convId=${conversationId.slice(0, 8)} turnIndex=${i} role=${q.role} outcome=ok messageId=${(messageId ?? "").slice(0, 8)}
 `);
             } catch {
             }
           } catch (err) {
             jsonlHealFail += 1;
             try {
-              appendFileSync4(streamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [admin-persist-heal] convId=${conversationId.slice(0, 8)} turnIndex=${i} role=${q.role} outcome=fail reason=${JSON.stringify((err instanceof Error ? err.message : String(err)).slice(0, 200))}
+              streamLogPath.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [admin-persist-heal] convId=${conversationId.slice(0, 8)} turnIndex=${i} role=${q.role} outcome=fail reason=${JSON.stringify((err instanceof Error ? err.message : String(err)).slice(0, 200))}
 `);
             } catch {
             }
@@ -8936,18 +9072,18 @@ app18.post("/:id/resume", async (c) => {
   const reason = bridged ? "post-restart" : "page-refresh";
   try {
     const source = jsonlMissing ? persistedAgentSessionId ? "jsonl-missing" : "neo4j-only" : "jsonl";
-    appendFileSync4(streamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [admin-resume] reason=${reason} source=${source} cacheKey=${cacheKey.slice(0, 8)} conversationId=${conversationId.slice(0, 8)} ${tag} loadedMessages=${messages.length} jsonlReplayMessages=${jsonlReplayMessages.length} neo4jMessages=${neo4jMessages.length} jsonlMalformed=${jsonlMalformedLines} componentCount=${totalComponents} userAttachmentCount=${totalAttachments} syntheticHidden=${syntheticHidden}
+    streamLogPath.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [admin-resume] reason=${reason} source=${source} cacheKey=${cacheKey.slice(0, 8)} conversationId=${conversationId.slice(0, 8)} ${tag} loadedMessages=${messages.length} jsonlReplayMessages=${jsonlReplayMessages.length} neo4jMessages=${neo4jMessages.length} jsonlMalformed=${jsonlMalformedLines} componentCount=${totalComponents} userAttachmentCount=${totalAttachments} syntheticHidden=${syntheticHidden}
 `);
     if (totalComponents > 0) {
-      appendFileSync4(streamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [component-rehydrate] conversationId=${conversationId.slice(0, 8)} count=${totalComponents} valid=${totalValid} invalid=${totalInvalid} textRuns=${textRuns}
+      streamLogPath.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [component-rehydrate] conversationId=${conversationId.slice(0, 8)} count=${totalComponents} valid=${totalValid} invalid=${totalInvalid} textRuns=${textRuns}
 `);
     }
     if (totalAttachments > 0 || totalAttachmentInvalid > 0) {
-      appendFileSync4(streamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [attachment-rehydrate] conversationId=${conversationId.slice(0, 8)} userMessages=${userMessageCount} attachments=${totalAttachments} invalid=${totalAttachmentInvalid}
+      streamLogPath.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [attachment-rehydrate] conversationId=${conversationId.slice(0, 8)} userMessages=${userMessageCount} attachments=${totalAttachments} invalid=${totalAttachmentInvalid}
 `);
     }
     if (jsonlHealMissing > 0) {
-      appendFileSync4(streamLogPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] [admin-resume-heal] conversationId=${conversationId.slice(0, 8)} missingTurns=${jsonlHealMissing} healOk=${jsonlHealOk} healFail=${jsonlHealFail} note=async-writes-may-still-be-in-flight
+      streamLogPath.write(`[${(/* @__PURE__ */ new Date()).toISOString()}] [admin-resume-heal] conversationId=${conversationId.slice(0, 8)} missingTurns=${jsonlHealMissing} healOk=${jsonlHealOk} healFail=${jsonlHealFail} note=async-writes-may-still-be-in-flight
 `);
     }
   } catch {
@@ -8966,7 +9102,7 @@ app18.post("/:id/resume", async (c) => {
     }
   });
 });
-app18.post("/:id/label", requireAdminSession, async (c) => {
+app20.post("/:id/label", requireAdminSession, async (c) => {
   const conversationId = c.req.param("id");
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
@@ -8993,7 +9129,7 @@ app18.post("/:id/label", requireAdminSession, async (c) => {
     return c.json({ label: null });
   }
 });
-app18.put("/:id/label", requireAdminSession, async (c) => {
+app20.put("/:id/label", requireAdminSession, async (c) => {
   const conversationId = c.req.param("id");
   const cacheKey = c.var.cacheKey;
   let body;
@@ -9019,11 +9155,11 @@ app18.put("/:id/label", requireAdminSession, async (c) => {
     return c.json({ error: "Failed to rename session" }, 500);
   }
 });
-var sessions_default = app18;
+var sessions_default = app20;
 
 // server/routes/admin/browser.ts
-var app19 = new Hono();
-app19.post("/launch", async (c) => {
+var app21 = new Hono();
+app21.post("/launch", async (c) => {
   try {
     const transport = resolveBrowserTransport(c.req.raw, c.env?.incoming?.socket?.remoteAddress);
     if (transport === "vnc") {
@@ -9045,7 +9181,7 @@ app19.post("/launch", async (c) => {
     );
   }
 });
-var browser_default = app19;
+var browser_default = app21;
 
 // server/routes/admin/browser-iframe.ts
 var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
@@ -9062,8 +9198,8 @@ function asString(v, max = 500) {
 function asNumber(v) {
   return typeof v === "number" && Number.isFinite(v) ? v : void 0;
 }
-var app20 = new Hono();
-app20.post("/event", async (c) => {
+var app22 = new Hono();
+app22.post("/event", async (c) => {
   let body = {};
   try {
     body = await c.req.json();
@@ -9084,7 +9220,7 @@ app20.post("/event", async (c) => {
   });
   return c.body(null, 204);
 });
-var browser_iframe_default = app20;
+var browser_iframe_default = app22;
 
 // app/lib/cdp-client.ts
 var CDP_HOST = "127.0.0.1";
@@ -9127,8 +9263,8 @@ async function cdpNavigateNewTab(url, opts = {}) {
 }
 
 // server/routes/admin/device-browser.ts
-var app21 = new Hono();
-app21.post("/navigate", async (c) => {
+var app23 = new Hono();
+app23.post("/navigate", async (c) => {
   const TAG19 = "[device-url:click]";
   let body;
   try {
@@ -9215,7 +9351,7 @@ app21.post("/navigate", async (c) => {
     targetId: outcome.targetId
   });
 });
-var device_browser_default = app21;
+var device_browser_default = app23;
 
 // server/routes/admin/events.ts
 var ALLOWED_EVENTS2 = /* @__PURE__ */ new Set([
@@ -9224,8 +9360,8 @@ var ALLOWED_EVENTS2 = /* @__PURE__ */ new Set([
   "device-url:vnc-surface-shown",
   "device-url:malformed"
 ]);
-var app22 = new Hono();
-app22.post("/", async (c) => {
+var app24 = new Hono();
+app24.post("/", async (c) => {
   const TAG19 = "[admin:events]";
   let body;
   try {
@@ -9256,11 +9392,11 @@ app22.post("/", async (c) => {
   console.error(`[${event}] ${formatted}`);
   return c.json({ ok: true });
 });
-var events_default = app22;
+var events_default = app24;
 
 // server/routes/admin/cloudflare.ts
 import { homedir as homedir2 } from "os";
-import { resolve as resolve13 } from "path";
+import { resolve as resolve12 } from "path";
 import { readFileSync as readFileSync15 } from "fs";
 
 // app/lib/dns-label.ts
@@ -9279,8 +9415,8 @@ function isValidDomain(value) {
 // app/lib/alias-domains.ts
 import { existsSync as existsSync18, mkdirSync as mkdirSync6, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "fs";
 import { dirname as dirname5 } from "path";
-import { resolve as resolve12 } from "path";
-var ALIAS_DOMAINS_PATH = resolve12(MAXY_DIR, "alias-domains.json");
+import { resolve as resolve11 } from "path";
+var ALIAS_DOMAINS_PATH = resolve11(MAXY_DIR, "alias-domains.json");
 function readExisting() {
   if (!existsSync18(ALIAS_DOMAINS_PATH)) return /* @__PURE__ */ new Set();
   try {
@@ -9333,8 +9469,8 @@ function readDiscoveryResults(accountId) {
   return { tunnels: entry.tunnels, domains: entry.domains };
 }
 function loadBrandInfo() {
-  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve13(process.cwd(), "..");
-  const brandPath = resolve13(platformRoot2, "config", "brand.json");
+  const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve12(process.cwd(), "..");
+  const brandPath = resolve12(platformRoot2, "config", "brand.json");
   try {
     const parsed = JSON.parse(readFileSync15(brandPath, "utf-8"));
     const hostname2 = typeof parsed.hostname === "string" && parsed.hostname ? parsed.hostname : "maxy";
@@ -9399,7 +9535,7 @@ function validateBody(body) {
   }
   return null;
 }
-var app23 = new Hono();
+var app25 = new Hono();
 function fieldFromReason(reason) {
   switch (reason) {
     case "not-signed-in":
@@ -9420,7 +9556,7 @@ function fieldFromReason(reason) {
       return "script";
   }
 }
-app23.get("/domains", requireAdminSession, async (c) => {
+app25.get("/domains", requireAdminSession, async (c) => {
   const started = Date.now();
   const cacheKey = c.var.cacheKey;
   let correlationId;
@@ -9464,7 +9600,7 @@ app23.get("/domains", requireAdminSession, async (c) => {
   streamLogPath = streamLogPathFor(accountId, correlationId).streamLogPath;
   log(`phase=stream-log-resolved path=${streamLogPath}`);
   const brand = loadBrandInfo();
-  const scriptPath = resolve13(homedir2(), "list-cf-domains.sh");
+  const scriptPath = resolve12(homedir2(), "list-cf-domains.sh");
   const result = await runFormSpawn({
     scriptPath,
     args: [brand.hostname],
@@ -9516,7 +9652,7 @@ ${result.stderr}` : ""}`;
   return c.json(success, 200);
 });
 var TUNNELS_TIMEOUT_MS = 30 * 1e3;
-app23.get("/tunnels", requireAdminSession, async (c) => {
+app25.get("/tunnels", requireAdminSession, async (c) => {
   const started = Date.now();
   const cacheKey = c.var.cacheKey;
   let correlationId;
@@ -9555,7 +9691,7 @@ app23.get("/tunnels", requireAdminSession, async (c) => {
   if (!accountId) return err("session", "No account bound to session \u2014 refresh chat.");
   if (!correlationId) return err("session", "No active conversation for session \u2014 refresh chat.");
   streamLogPath = streamLogPathFor(accountId, correlationId).streamLogPath;
-  const certPath = resolve13(homedir2(), brand.configDir, "cloudflared", "cert.pem");
+  const certPath = resolve12(homedir2(), brand.configDir, "cloudflared", "cert.pem");
   const { existsSync: existsSync26 } = await import("fs");
   if (!existsSync26(certPath)) {
     return err("cert", `Cloudflare origin certificate is not on disk yet (${certPath}). Complete the Cloudflare login first by submitting the form once \u2014 the OAuth flow writes cert.pem.`);
@@ -9613,7 +9749,7 @@ ${result.stderr}` : ""}`;
   const success = { ok: true, tunnels, defaultName, correlationId, streamLogPath };
   return c.json(success, 200);
 });
-app23.post("/setup", requireAdminSession, async (c) => {
+app25.post("/setup", requireAdminSession, async (c) => {
   const started = Date.now();
   const cacheKey = c.var.cacheKey;
   let correlationId;
@@ -9875,23 +10011,23 @@ actionId: ${actionId}`,
   };
   return ok(success);
 });
-var cloudflare_default = app23;
+var cloudflare_default = app25;
 
 // server/routes/admin/files.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { readdir as readdir2, readFile as readFile3, stat as stat3, mkdir as mkdir2, writeFile as writeFile3, unlink as unlink2 } from "fs/promises";
 import { realpathSync as realpathSync3 } from "fs";
-import { basename as basename3, dirname as dirname6, join as join10, resolve as resolve15, sep as sep2 } from "path";
+import { basename as basename3, dirname as dirname6, join as join10, resolve as resolve14, sep as sep2 } from "path";
 import { Readable as Readable2 } from "stream";
 
 // app/lib/data-path.ts
 import { realpathSync as realpathSync2 } from "fs";
-import { resolve as resolve14, normalize, sep, relative } from "path";
-var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve14(process.cwd(), "../platform");
-var DATA_ROOT = resolve14(PLATFORM_ROOT5, "..", "data");
+import { resolve as resolve13, normalize, sep, relative } from "path";
+var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve13(process.cwd(), "../platform");
+var DATA_ROOT = resolve13(PLATFORM_ROOT5, "..", "data");
 function resolveDataPath(raw) {
   const cleaned = normalize("/" + (raw ?? "").replace(/\\/g, "/")).replace(/^\/+/, "");
-  const absolute = resolve14(DATA_ROOT, cleaned);
+  const absolute = resolve13(DATA_ROOT, cleaned);
   let dataRootReal;
   try {
     dataRootReal = realpathSync2(DATA_ROOT);
@@ -10156,7 +10292,7 @@ async function restoreNode(params) {
 }
 
 // app/lib/file-delete-cascade.ts
-var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var UUID_RE6 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function parseAttachmentPath(relPath2) {
   const segments = relPath2.split("/").filter(Boolean);
   if (segments.length !== 4) return null;
@@ -10164,7 +10300,7 @@ function parseAttachmentPath(relPath2) {
   const accountId = segments[1];
   const attachmentId = segments[2];
   const filename = segments[3];
-  if (!UUID_RE4.test(accountId) || !UUID_RE4.test(attachmentId)) return null;
+  if (!UUID_RE6.test(accountId) || !UUID_RE6.test(attachmentId)) return null;
   const dot = filename.lastIndexOf(".");
   if (dot === -1) return null;
   const stem = filename.slice(0, dot);
@@ -10236,7 +10372,7 @@ async function cascadeDeleteDocument(params) {
 }
 
 // server/routes/admin/files.ts
-var UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var UUID_RE7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta(absDir, baseName) {
   try {
     const raw = await readFile3(join10(absDir, `${baseName}.meta.json`), "utf8");
@@ -10250,7 +10386,7 @@ async function readMeta(absDir, baseName) {
 }
 async function readAccountNames() {
   const map = /* @__PURE__ */ new Map();
-  const accountsDir = resolve15(DATA_ROOT, "accounts");
+  const accountsDir = resolve14(DATA_ROOT, "accounts");
   let names;
   try {
     names = await readdir2(accountsDir);
@@ -10258,8 +10394,8 @@ async function readAccountNames() {
     return map;
   }
   for (const name of names) {
-    if (!UUID_RE5.test(name)) continue;
-    const configPath2 = resolve15(accountsDir, name, "account.json");
+    if (!UUID_RE7.test(name)) continue;
+    const configPath2 = resolve14(accountsDir, name, "account.json");
     try {
       const raw = await readFile3(configPath2, "utf8");
       const parsed = JSON.parse(raw);
@@ -10276,7 +10412,7 @@ async function readAccountNames() {
   return map;
 }
 async function enrich(absolute, entry, accountNames) {
-  if (entry.kind === "directory" && UUID_RE5.test(entry.name)) {
+  if (entry.kind === "directory" && UUID_RE7.test(entry.name)) {
     const meta = await readMeta(join10(absolute, entry.name), entry.name);
     if (meta?.filename) {
       entry.displayName = meta.filename;
@@ -10292,7 +10428,7 @@ async function enrich(absolute, entry, accountNames) {
   if (entry.kind === "file") {
     const dot = entry.name.lastIndexOf(".");
     const base = dot === -1 ? entry.name : entry.name.slice(0, dot);
-    if (UUID_RE5.test(base)) {
+    if (UUID_RE7.test(base)) {
       const meta = await readMeta(absolute, base);
       if (meta?.filename) {
         entry.displayName = meta.filename;
@@ -10304,12 +10440,12 @@ async function enrich(absolute, entry, accountNames) {
 function buildDisplayPath(relPath2, accountNames) {
   if (relPath2 === "." || relPath2 === "") return [];
   return relPath2.split("/").filter(Boolean).map((seg) => {
-    const dn = UUID_RE5.test(seg) ? accountNames.get(seg) : void 0;
+    const dn = UUID_RE7.test(seg) ? accountNames.get(seg) : void 0;
     return dn ? { name: seg, displayName: dn } : { name: seg };
   });
 }
-var app24 = new Hono();
-app24.get("/", requireAdminSession, async (c) => {
+var app26 = new Hono();
+app26.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   if (!getAccountIdForSession(cacheKey)) {
     console.error(`[data] auth-rejected endpoint="/api/admin/files" reason="no account for session"`);
@@ -10332,7 +10468,7 @@ app24.get("/", requireAdminSession, async (c) => {
     const names = await readdir2(absolute);
     const entries = [];
     for (const name of names) {
-      if (UUID_RE5.test(name.replace(/\.meta\.json$/, "")) && name.endsWith(".meta.json")) {
+      if (UUID_RE7.test(name.replace(/\.meta\.json$/, "")) && name.endsWith(".meta.json")) {
         continue;
       }
       try {
@@ -10370,7 +10506,7 @@ app24.get("/", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app24.get("/download", requireAdminSession, async (c) => {
+app26.get("/download", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   if (!getAccountIdForSession(cacheKey)) {
     console.error(`[data] auth-rejected endpoint="/api/admin/files/download" reason="no account for session"`);
@@ -10418,7 +10554,7 @@ app24.get("/download", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-app24.post("/upload", requireAdminSession, async (c) => {
+app26.post("/upload", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -10450,8 +10586,8 @@ app24.post("/upload", requireAdminSession, async (c) => {
   }
   const safeName = basename3(file.name).replace(/[\0/\\]/g, "_");
   const finalName = `${Date.now()}-${safeName}`;
-  const destDir = resolve15(DATA_ROOT, "uploads", accountId);
-  const destPath = resolve15(destDir, finalName);
+  const destDir = resolve14(DATA_ROOT, "uploads", accountId);
+  const destPath = resolve14(destDir, finalName);
   try {
     await mkdir2(destDir, { recursive: true });
     const dataRootReal = realpathSync3(DATA_ROOT);
@@ -10476,7 +10612,7 @@ app24.post("/upload", requireAdminSession, async (c) => {
     mimeType: file.type
   });
 });
-app24.delete("/", requireAdminSession, async (c) => {
+app26.delete("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -10509,7 +10645,7 @@ app24.delete("/", requireAdminSession, async (c) => {
     }
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
-    const sidecarPath = UUID_RE5.test(stem) && base !== `${stem}.meta.json` ? join10(dirname6(absolute), `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE7.test(stem) && base !== `${stem}.meta.json` ? join10(dirname6(absolute), `${stem}.meta.json`) : null;
     await unlink2(absolute);
     if (sidecarPath) {
       try {
@@ -10543,7 +10679,7 @@ app24.delete("/", requireAdminSession, async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-var files_default = app24;
+var files_default = app26;
 
 // ../lib/graph-search/src/index.ts
 var import_dist = __toESM(require_dist());
@@ -10923,8 +11059,8 @@ var MAX_LIMIT = 2e3;
 var DEFAULT_VECTOR_THRESHOLD = 0.82;
 var MESSAGE_FAMILY_LABELS = ["Message", "UserMessage", "AssistantMessage", "WhatsAppMessage"];
 var CONVERSATION_PARENT_LABELS = /* @__PURE__ */ new Set(["AdminConversation", "PublicConversation"]);
-var app25 = new Hono();
-app25.get("/", requireAdminSession, async (c) => {
+var app27 = new Hono();
+app27.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const q = (c.req.query("q") ?? "").trim();
   const rawLimit = c.req.query("limit");
@@ -11055,7 +11191,7 @@ app25.get("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var graph_search_default = app25;
+var graph_search_default = app27;
 
 // server/routes/admin/graph-subgraph.ts
 import neo4j2 from "neo4j-driver";
@@ -11213,8 +11349,8 @@ var STRIPPED_PROPERTIES = /* @__PURE__ */ new Set([
   "otpCode",
   "cacheKey"
 ]);
-var app26 = new Hono();
-app26.get("/", requireAdminSession, async (c) => {
+var app28 = new Hono();
+app28.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -11797,12 +11933,12 @@ function pruneNode(node, warnedClasses, conversationWarnings) {
   }
   return trashed ? { id: node.id, labels, properties, trashed: true } : { id: node.id, labels, properties };
 }
-var graph_subgraph_default = app26;
+var graph_subgraph_default = app28;
 
 // server/routes/admin/graph-delete.ts
 var ALLOWED_BY = ["graph-page", "graph-drag-trash"];
-var app27 = new Hono();
-app27.post("/", requireAdminSession, async (c) => {
+var app29 = new Hono();
+app29.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -11873,11 +12009,11 @@ app27.post("/", requireAdminSession, async (c) => {
     }
   }
 });
-var graph_delete_default = app27;
+var graph_delete_default = app29;
 
 // server/routes/admin/graph-restore.ts
-var app28 = new Hono();
-app28.post("/", requireAdminSession, async (c) => {
+var app30 = new Hono();
+app30.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -11941,11 +12077,11 @@ app28.post("/", requireAdminSession, async (c) => {
     }
   }
 });
-var graph_restore_default = app28;
+var graph_restore_default = app30;
 
 // server/routes/admin/graph-labels-in-graph.ts
-var app29 = new Hono();
-app29.get("/", requireAdminSession, async (c) => {
+var app31 = new Hono();
+app31.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -12011,11 +12147,11 @@ var LABELS_IN_GRAPH_CYPHER = `
        sum(halfEdges) AS relDegree
   RETURN label, nodeCount, relDegree
 `;
-var graph_labels_in_graph_default = app29;
+var graph_labels_in_graph_default = app31;
 
 // server/routes/admin/graph-default-view.ts
-var app30 = new Hono();
-app30.get("/", requireAdminSession, async (c) => {
+var app32 = new Hono();
+app32.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -12053,7 +12189,7 @@ app30.get("/", requireAdminSession, async (c) => {
     }
   }
 });
-app30.put("/", requireAdminSession, async (c) => {
+app32.put("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   const userId = getUserIdForSession(cacheKey);
@@ -12142,11 +12278,11 @@ var WRITE_CYPHER = `
       p.updatedAt = $updatedAt
   RETURN p.labels AS labels
 `;
-var graph_default_view_default = app30;
+var graph_default_view_default = app32;
 
 // server/routes/admin/file-attach.ts
-var app31 = new Hono();
-app31.post("/", async (c) => {
+var app33 = new Hono();
+app33.post("/", async (c) => {
   try {
     const body = await c.req.json();
     const { filePath, accountId } = body;
@@ -12169,11 +12305,11 @@ app31.post("/", async (c) => {
     return c.json({ error: message }, 500);
   }
 });
-var file_attach_default = app31;
+var file_attach_default = app33;
 
 // server/routes/admin/adherence.ts
-var app32 = new Hono();
-app32.get("/", requireAdminSession, async (c) => {
+var app34 = new Hono();
+app34.get("/", requireAdminSession, async (c) => {
   const agent = c.req.query("agent") ?? "admin";
   const includeBlock = c.req.query("block") === "1";
   const account = resolveAccount();
@@ -12194,18 +12330,18 @@ app32.get("/", requireAdminSession, async (c) => {
     return c.json({ error: "Failed to read adherence ledger", agent }, 500);
   }
 });
-var adherence_default = app32;
+var adherence_default = app34;
 
 // server/routes/admin/sidebar-artefacts.ts
 import neo4j3 from "neo4j-driver";
 import { readFile as readFile4, readdir as readdir3, stat as stat4 } from "fs/promises";
-import { resolve as resolve16, relative as relative2, isAbsolute } from "path";
+import { resolve as resolve15, relative as relative2, isAbsolute } from "path";
 import { existsSync as existsSync19 } from "fs";
 var LIMIT = 50;
 var TEXT_MIME_PREFIXES = ["text/", "application/json", "application/markdown"];
 var ADMIN_AGENT_FILES = ["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"];
-var app33 = new Hono();
-app33.get("/", requireAdminSession, async (c) => {
+var app35 = new Hono();
+app35.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -12216,7 +12352,7 @@ app33.get("/", requireAdminSession, async (c) => {
   if (docs === null) {
     return c.json({ error: "Failed to load artefacts" }, 500);
   }
-  const accountDir = resolve16(ACCOUNTS_DIR, accountId);
+  const accountDir = resolve15(ACCOUNTS_DIR, accountId);
   const agents = await fetchAgentTemplateRows(accountDir);
   const artefacts = [...docs, ...agents].sort(
     (a, b) => (b.updatedAt ?? "").localeCompare(a.updatedAt ?? "")
@@ -12279,8 +12415,8 @@ async function readArtefactContent(accountId, attachmentId, mimeType, displayNam
     logSkip(displayName, "non-text-mime", mimeType);
     return { content: "", skipReason: "non-text-mime" };
   }
-  const accountDir = resolve16(ATTACHMENTS_ROOT, accountId);
-  const dir = resolve16(accountDir, attachmentId);
+  const accountDir = resolve15(ATTACHMENTS_ROOT, accountId);
+  const dir = resolve15(accountDir, attachmentId);
   try {
     validateFilePathInAccount(dir, accountDir);
   } catch {
@@ -12294,7 +12430,7 @@ async function readArtefactContent(accountId, attachmentId, mimeType, displayNam
       logSkip(displayName, "missing-on-disk", mimeType);
       return { content: "", skipReason: "missing-on-disk" };
     }
-    return { content: await readFile4(resolve16(dir, dataFile), "utf-8"), skipReason: null };
+    return { content: await readFile4(resolve15(dir, dataFile), "utf-8"), skipReason: null };
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     console.error(`[admin/sidebar-artefacts] read-failed attachmentId=${attachmentId.slice(0, 8)} error="${message}"`);
@@ -12310,8 +12446,8 @@ function logSkip(name, reason, mimeType) {
 async function fetchAgentTemplateRows(accountDir) {
   const rows = [];
   for (const filename of ADMIN_AGENT_FILES) {
-    const overridePath = resolve16(accountDir, "agents", "admin", filename);
-    const bundledPath = resolve16(PLATFORM_ROOT, "templates", "agents", "admin", filename);
+    const overridePath = resolve15(accountDir, "agents", "admin", filename);
+    const bundledPath = resolve15(PLATFORM_ROOT, "templates", "agents", "admin", filename);
     const labelStem = filename.replace(/\.md$/, "");
     const row = await readAgentTemplateRow({
       id: `agent-template:admin:${filename}`,
@@ -12325,12 +12461,12 @@ async function fetchAgentTemplateRows(accountDir) {
     });
     if (row) rows.push(row);
   }
-  const overrideDir = resolve16(accountDir, "specialists", "agents");
-  const bundledDir = resolve16(PLATFORM_ROOT, "templates", "specialists", "agents");
+  const overrideDir = resolve15(accountDir, "specialists", "agents");
+  const bundledDir = resolve15(PLATFORM_ROOT, "templates", "specialists", "agents");
   const specialistNames = await unionSpecialistFilenames(overrideDir, bundledDir);
   for (const filename of specialistNames) {
-    const overridePath = resolve16(overrideDir, filename);
-    const bundledPath = resolve16(bundledDir, filename);
+    const overridePath = resolve15(overrideDir, filename);
+    const bundledPath = resolve15(bundledDir, filename);
     const row = await readAgentTemplateRow({
       id: `agent-template:specialist:${filename}`,
       displayName: filename.replace(/\.md$/, ""),
@@ -12411,16 +12547,16 @@ function isWithin(target, root) {
   const rel = relative2(root, target);
   return !rel.startsWith("..") && !isAbsolute(rel);
 }
-var sidebar_artefacts_default = app33;
+var sidebar_artefacts_default = app35;
 
 // server/routes/admin/sidebar-artefact-save.ts
 import { mkdir as mkdir3, readdir as readdir4, stat as stat5, writeFile as writeFile4 } from "fs/promises";
-import { resolve as resolve17 } from "path";
+import { resolve as resolve16 } from "path";
 import { existsSync as existsSync20 } from "fs";
 var ADMIN_AGENT_FILES2 = /* @__PURE__ */ new Set(["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"]);
-var UUID_RE6 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
-var app34 = new Hono();
-app34.post("/", requireAdminSession, async (c) => {
+var UUID_RE8 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var app36 = new Hono();
+app36.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -12428,7 +12564,7 @@ app34.post("/", requireAdminSession, async (c) => {
   if (!body || typeof body.id !== "string" || typeof body.content !== "string") {
     return c.json({ error: "id and content required" }, 400);
   }
-  const accountDir = resolve17(ACCOUNTS_DIR, accountId);
+  const accountDir = resolve16(ACCOUNTS_DIR, accountId);
   const resolved = await resolveSavePath(body.id, accountId, accountDir);
   if (resolved.kind === "heal-race") {
     c.header("Retry-After", "2");
@@ -12473,17 +12609,17 @@ async function resolveSavePath(id, accountId, accountDir) {
     if (role !== "admin" || !ADMIN_AGENT_FILES2.has(filename)) {
       return { kind: "reject", status: 400, reason: "invalid-id" };
     }
-    const parent = resolve17(accountDir, "agents", "admin");
+    const parent = resolve16(accountDir, "agents", "admin");
     await mkdir3(parent, { recursive: true });
     try {
       validateFilePathInAccount(parent, accountDir);
     } catch {
       return { kind: "reject", status: 400, reason: "containment-rejected" };
     }
-    return { kind: "admin-template", path: resolve17(parent, filename) };
+    return { kind: "admin-template", path: resolve16(parent, filename) };
   }
-  if (UUID_RE6.test(id)) {
-    const dir = resolve17(ATTACHMENTS_ROOT, accountId, id);
+  if (UUID_RE8.test(id)) {
+    const dir = resolve16(ATTACHMENTS_ROOT, accountId, id);
     if (!existsSync20(dir)) {
       const attShort = id.slice(0, 8);
       if (isHealPending(accountId, id)) {
@@ -12516,7 +12652,7 @@ async function resolveSavePath(id, accountId, accountDir) {
       }
     }
     try {
-      validateFilePathInAccount(dir, resolve17(ATTACHMENTS_ROOT, accountId));
+      validateFilePathInAccount(dir, resolve16(ATTACHMENTS_ROOT, accountId));
     } catch {
       return { kind: "reject", status: 400, reason: "containment-rejected" };
     }
@@ -12525,38 +12661,38 @@ async function resolveSavePath(id, accountId, accountDir) {
     if (!dataFile) {
       return { kind: "reject", status: 400, reason: "not-found" };
     }
-    return { kind: "knowledge-doc", path: resolve17(dir, dataFile) };
+    return { kind: "knowledge-doc", path: resolve16(dir, dataFile) };
   }
   return { kind: "reject", status: 400, reason: "invalid-id" };
 }
 function relPath(absPath, root) {
   return absPath.startsWith(root) ? absPath.slice(root.length + 1) : absPath;
 }
-var sidebar_artefact_save_default = app34;
+var sidebar_artefact_save_default = app36;
 
 // server/routes/admin/sidebar-artefact-content.ts
 import { readFile as readFile5, readdir as readdir5 } from "fs/promises";
 import { existsSync as existsSync21 } from "fs";
-import { resolve as resolve18 } from "path";
-var UUID_RE7 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
-var app35 = new Hono();
-app35.get("/", requireAdminSession, async (c) => {
+import { resolve as resolve17 } from "path";
+var UUID_RE9 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var app37 = new Hono();
+app37.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return new Response("Unauthorized", { status: 401 });
   const id = c.req.query("id") ?? "";
-  if (!UUID_RE7.test(id)) {
+  if (!UUID_RE9.test(id)) {
     console.error(`[admin/sidebar-artefact-content] not-found id=${id.slice(0, 8)}`);
     return new Response("Not found", { status: 404 });
   }
-  const dir = resolve18(ATTACHMENTS_ROOT, accountId, id);
+  const dir = resolve17(ATTACHMENTS_ROOT, accountId, id);
   if (!existsSync21(dir)) {
     console.error(`[admin/sidebar-artefact-content] not-found id=${id.slice(0, 8)}`);
     return new Response("Not found", { status: 404 });
   }
   let meta;
   try {
-    meta = JSON.parse(await readFile5(resolve18(dir, `${id}.meta.json`), "utf-8"));
+    meta = JSON.parse(await readFile5(resolve17(dir, `${id}.meta.json`), "utf-8"));
   } catch {
     console.error(`[admin/sidebar-artefact-content] not-found id=${id.slice(0, 8)}`);
     return new Response("Not found", { status: 404 });
@@ -12568,7 +12704,7 @@ app35.get("/", requireAdminSession, async (c) => {
     return new Response("Not found", { status: 404 });
   }
   const start = Date.now();
-  const buffer = await readFile5(resolve18(dir, dataFile));
+  const buffer = await readFile5(resolve17(dir, dataFile));
   const ms = Date.now() - start;
   console.log(
     `[admin/sidebar-artefact-content] account=${accountId} id=${id.slice(0, 8)} mime=${meta.mimeType} bytes=${buffer.length} ms=${ms}`
@@ -12581,12 +12717,12 @@ app35.get("/", requireAdminSession, async (c) => {
     }
   });
 });
-var sidebar_artefact_content_default = app35;
+var sidebar_artefact_content_default = app37;
 
 // server/routes/admin/health.ts
 import { existsSync as existsSync22, readFileSync as readFileSync16 } from "fs";
-import { resolve as resolve19, join as join11 } from "path";
-var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve19(process.cwd(), "..");
+import { resolve as resolve18, join as join11 } from "path";
+var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve18(process.cwd(), "..");
 var brandHostname = "maxy";
 var brandJsonPath = join11(PLATFORM_ROOT6, "config", "brand.json");
 if (existsSync22(brandJsonPath)) {
@@ -12596,7 +12732,7 @@ if (existsSync22(brandJsonPath)) {
   } catch {
   }
 }
-var VERSION_FILE = resolve19(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
+var VERSION_FILE = resolve18(PLATFORM_ROOT6, `config/.${brandHostname}-version`);
 var PROCESS_STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
 var PROBE_TIMEOUT_MS = 1e3;
 function readVersion() {
@@ -12626,8 +12762,8 @@ async function probeConversationDb() {
     });
   }
 }
-var app36 = new Hono();
-app36.get("/", async (c) => {
+var app38 = new Hono();
+app38.get("/", async (c) => {
   const version = readVersion();
   const probe = await probeConversationDb();
   const uptimeMs = Date.now() - new Date(PROCESS_STARTED_AT).getTime();
@@ -12649,42 +12785,44 @@ app36.get("/", async (c) => {
     uptimeMs
   });
 });
-var health_default2 = app36;
+var health_default2 = app38;
 
 // server/routes/admin/index.ts
-var app37 = new Hono();
-app37.route("/session", session_default2);
-app37.route("/chat", chat_default2);
-app37.route("/chat-failure", chat_failure_default);
-app37.route("/compact", compact_default);
-app37.route("/logs", logs_default);
-app37.route("/claude-info", claude_info_default);
-app37.route("/attachment", attachment_default);
-app37.route("/agents", agents_default);
-app37.route("/sessions", sessions_default);
-app37.route("/browser", browser_default);
-app37.route("/browser-iframe", browser_iframe_default);
-app37.route("/device-browser", device_browser_default);
-app37.route("/events", events_default);
-app37.route("/cloudflare", cloudflare_default);
-app37.route("/files", files_default);
-app37.route("/graph-search", graph_search_default);
-app37.route("/graph-subgraph", graph_subgraph_default);
-app37.route("/graph-delete", graph_delete_default);
-app37.route("/graph-restore", graph_restore_default);
-app37.route("/graph-labels-in-graph", graph_labels_in_graph_default);
-app37.route("/graph-default-view", graph_default_view_default);
-app37.route("/file-attach", file_attach_default);
-app37.route("/adherence", adherence_default);
-app37.route("/sidebar-artefacts", sidebar_artefacts_default);
-app37.route("/sidebar-artefact-save", sidebar_artefact_save_default);
-app37.route("/sidebar-artefact-content", sidebar_artefact_content_default);
-app37.route("/health-brand", health_default2);
-var admin_default = app37;
+var app39 = new Hono();
+app39.route("/session", session_default2);
+app39.route("/chat", chat_default2);
+app39.route("/chat-failure", chat_failure_default);
+app39.route("/failure-report", failure_report_default);
+app39.route("/sse-telemetry", sse_telemetry_default);
+app39.route("/compact", compact_default);
+app39.route("/logs", logs_default);
+app39.route("/claude-info", claude_info_default);
+app39.route("/attachment", attachment_default);
+app39.route("/agents", agents_default);
+app39.route("/sessions", sessions_default);
+app39.route("/browser", browser_default);
+app39.route("/browser-iframe", browser_iframe_default);
+app39.route("/device-browser", device_browser_default);
+app39.route("/events", events_default);
+app39.route("/cloudflare", cloudflare_default);
+app39.route("/files", files_default);
+app39.route("/graph-search", graph_search_default);
+app39.route("/graph-subgraph", graph_subgraph_default);
+app39.route("/graph-delete", graph_delete_default);
+app39.route("/graph-restore", graph_restore_default);
+app39.route("/graph-labels-in-graph", graph_labels_in_graph_default);
+app39.route("/graph-default-view", graph_default_view_default);
+app39.route("/file-attach", file_attach_default);
+app39.route("/adherence", adherence_default);
+app39.route("/sidebar-artefacts", sidebar_artefacts_default);
+app39.route("/sidebar-artefact-save", sidebar_artefact_save_default);
+app39.route("/sidebar-artefact-content", sidebar_artefact_content_default);
+app39.route("/health-brand", health_default2);
+var admin_default = app39;
 
 // server/routes/sites.ts
 import { existsSync as existsSync23, readFileSync as readFileSync17, realpathSync as realpathSync4, statSync as statSync7 } from "fs";
-import { resolve as resolve20 } from "path";
+import { resolve as resolve19 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
   ".html": "text/html; charset=utf-8",
@@ -12715,8 +12853,8 @@ function getExt(p) {
   if (idx < p.lastIndexOf("/")) return "";
   return p.slice(idx).toLowerCase();
 }
-var app38 = new Hono();
-app38.get("/:rel{.*}", (c) => {
+var app40 = new Hono();
+app40.get("/:rel{.*}", (c) => {
   const reqPath = c.req.path;
   const rawRel = c.req.param("rel") ?? "";
   const trimmed = rawRel.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -12741,8 +12879,8 @@ app38.get("/:rel{.*}", (c) => {
     }
     segments.push(seg);
   }
-  const rootDir = resolve20(account.accountDir, "sites");
-  let filePath = segments.length === 0 ? rootDir : resolve20(rootDir, ...segments);
+  const rootDir = resolve19(account.accountDir, "sites");
+  let filePath = segments.length === 0 ? rootDir : resolve19(rootDir, ...segments);
   if (filePath !== rootDir && !filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
@@ -12762,7 +12900,7 @@ app38.get("/:rel{.*}", (c) => {
     return c.redirect(target, 301);
   }
   if (stat6?.isDirectory()) {
-    filePath = resolve20(filePath, "index.html");
+    filePath = resolve19(filePath, "index.html");
   }
   if (!filePath.startsWith(rootDir + "/")) {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
@@ -12819,7 +12957,7 @@ app38.get("/:rel{.*}", (c) => {
     "X-Content-Type-Options": "nosniff"
   });
 });
-var sites_default = app38;
+var sites_default = app40;
 
 // app/lib/graph-health.ts
 var HOUR_MS = 60 * 60 * 1e3;
@@ -12937,7 +13075,7 @@ function startGraphHealthTimer() {
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash3, verify as cryptoVerify } from "crypto";
 import { existsSync as existsSync24, readFileSync as readFileSync18, statSync as statSync8 } from "fs";
-import { resolve as resolve21 } from "path";
+import { resolve as resolve20 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
 function canonicalize(value) {
@@ -12972,7 +13110,7 @@ var PUBKEY_SHA256 = "8eee6bcb33545fd13b16d3199a5735ca5db5062834c7b49dfe4f23801d9
 var GRACE_DAYS = 7;
 var GRACE_MS = GRACE_DAYS * 24 * 60 * 60 * 1e3;
 function pubkeyPath(brand) {
-  return resolve21(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
+  return resolve20(brand.platformRoot, "lib", "entitlement", "rubytech-pubkey.pem");
 }
 var memo = null;
 function memoKey(mtimeMs, account) {
@@ -12984,7 +13122,7 @@ function resolveEntitlement(brand, account) {
   if (brand.commercialMode !== true) {
     return logResolved(implicitTrust(account), null);
   }
-  const entitlementPath = resolve21(brand.configDir, "entitlement.json");
+  const entitlementPath = resolve20(brand.configDir, "entitlement.json");
   if (!existsSync24(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
@@ -13229,9 +13367,9 @@ watchFile(ALIAS_DOMAINS_PATH2, { interval: 2e3 }, () => {
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
-var app39 = new Hono();
-app39.use("*", clientIpMiddleware);
-app39.use("*", async (c, next) => {
+var app41 = new Hono();
+app41.use("*", clientIpMiddleware);
+app41.use("*", async (c, next) => {
   await next();
   c.header("X-Content-Type-Options", "nosniff");
   c.header("Referrer-Policy", "strict-origin-when-cross-origin");
@@ -13241,7 +13379,7 @@ app39.use("*", async (c, next) => {
   );
 });
 var HTTP_LOG_PATHS = /* @__PURE__ */ new Set(["/vnc-viewer.html", "/vnc-popout.html"]);
-app39.use("*", async (c, next) => {
+app41.use("*", async (c, next) => {
   if (!HTTP_LOG_PATHS.has(c.req.path)) {
     await next();
     return;
@@ -13274,7 +13412,7 @@ var PUBLIC_ALLOWED_PREFIXES = [
   "/sites/"
 ];
 var PUBLIC_ALLOWED_EXACT = ["/favicon.ico"];
-app39.use("*", async (c, next) => {
+app41.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (!isPublicHost(host)) {
     await next();
@@ -13314,7 +13452,7 @@ function resolveRemoteAuthOpts() {
   return brandLoginOpts;
 }
 var MAX_LOGIN_BODY = 8 * 1024;
-app39.post("/__remote-auth/login", async (c) => {
+app41.post("/__remote-auth/login", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   if (!requestIsTlsTerminated(c)) {
@@ -13359,7 +13497,7 @@ app39.post("/__remote-auth/login", async (c) => {
     }
   });
 });
-app39.get("/__remote-auth/logout", (c) => {
+app41.get("/__remote-auth/logout", (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   console.error(`[remote-auth] logout ip=${clientIp}`);
@@ -13372,7 +13510,7 @@ app39.get("/__remote-auth/logout", (c) => {
     }
   });
 });
-app39.post("/__remote-auth/change-password", async (c) => {
+app41.post("/__remote-auth/change-password", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   const rateLimited = checkRateLimit(client);
@@ -13423,13 +13561,13 @@ app39.post("/__remote-auth/change-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "change", changeError: "Failed to save password", redirect }), 200);
   }
 });
-app39.get("/__remote-auth/setup", (c) => {
+app41.get("/__remote-auth/setup", (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "setup" }), 200);
 });
-app39.post("/__remote-auth/set-initial-password", async (c) => {
+app41.post("/__remote-auth/set-initial-password", async (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
@@ -13467,10 +13605,10 @@ app39.post("/__remote-auth/set-initial-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "setup", setupError: "Failed to save password. Please try again." }), 200);
   }
 });
-app39.get("/api/remote-auth/status", (c) => {
+app41.get("/api/remote-auth/status", (c) => {
   return c.json({ configured: isRemoteAuthConfigured() });
 });
-app39.post("/api/remote-auth/set-password", async (c) => {
+app41.post("/api/remote-auth/set-password", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -13501,9 +13639,9 @@ app39.post("/api/remote-auth/set-password", async (c) => {
     return c.json({ error: "Failed to save password" }, 500);
   }
 });
-app39.route("/api/_client-error", client_error_default);
+app41.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
-app39.use("*", async (c, next) => {
+app41.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path2 = c.req.path;
   if (path2 === "/favicon.ico" || path2.startsWith("/assets/") || path2.startsWith("/brand/")) {
@@ -13543,15 +13681,15 @@ app39.use("*", async (c, next) => {
   console.error(`[remote-auth] login required ip=${clientIp} path=${path2} ${disambig}`);
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), redirect: path2 }), 200);
 });
-app39.route("/api/health", health_default);
-app39.route("/api/session", session_default);
-app39.route("/api/chat", chat_default);
-app39.route("/api/group", group_default);
-app39.route("/api/access", access_default);
-app39.route("/api/telegram", telegram_default);
-app39.route("/api/whatsapp", whatsapp_default);
-app39.route("/api/onboarding", onboarding_default);
-app39.route("/api/admin", admin_default);
+app41.route("/api/health", health_default);
+app41.route("/api/session", session_default);
+app41.route("/api/chat", chat_default);
+app41.route("/api/group", group_default);
+app41.route("/api/access", access_default);
+app41.route("/api/telegram", telegram_default);
+app41.route("/api/whatsapp", whatsapp_default);
+app41.route("/api/onboarding", onboarding_default);
+app41.route("/api/admin", admin_default);
 var SAFE_SLUG_RE = /^[a-z][a-z0-9-]{2,49}$/;
 var SAFE_FILENAME_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var IMAGE_MIME = {
@@ -13563,7 +13701,7 @@ var IMAGE_MIME = {
   ".svg": "image/svg+xml",
   ".ico": "image/x-icon"
 };
-app39.get("/agent-assets/:slug/:filename", (c) => {
+app41.get("/agent-assets/:slug/:filename", (c) => {
   const slug = c.req.param("slug");
   const filename = c.req.param("filename");
   if (!SAFE_SLUG_RE.test(slug)) {
@@ -13579,8 +13717,8 @@ app39.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] no-account slug=${slug} file=${filename}`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve22(account.accountDir, "agents", slug, "assets", filename);
-  const expectedDir = resolve22(account.accountDir, "agents", slug, "assets");
+  const filePath = resolve21(account.accountDir, "agents", slug, "assets", filename);
+  const expectedDir = resolve21(account.accountDir, "agents", slug, "assets");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
@@ -13598,7 +13736,7 @@ app39.get("/agent-assets/:slug/:filename", (c) => {
     "Cache-Control": "public, max-age=3600"
   });
 });
-app39.get("/generated/:filename", (c) => {
+app41.get("/generated/:filename", (c) => {
   const filename = c.req.param("filename");
   if (!SAFE_FILENAME_RE.test(filename) || filename.includes("..")) {
     console.error(`[generated] serve file=${filename} status=403`);
@@ -13609,8 +13747,8 @@ app39.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
-  const filePath = resolve22(account.accountDir, "generated", filename);
-  const expectedDir = resolve22(account.accountDir, "generated");
+  const filePath = resolve21(account.accountDir, "generated", filename);
+  const expectedDir = resolve21(account.accountDir, "generated");
   if (!filePath.startsWith(expectedDir + "/")) {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
@@ -13628,7 +13766,7 @@ app39.get("/generated/:filename", (c) => {
     "Cache-Control": "public, max-age=86400"
   });
 });
-app39.route("/sites", sites_default);
+app41.route("/sites", sites_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
@@ -13694,7 +13832,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync19(resolve22(process.cwd(), "public", file), "utf-8");
+    html = readFileSync19(resolve21(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -13765,7 +13903,7 @@ function brandedPublicHtml(agentSlug) {
 function escapeHtml(s) {
   return s.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-app39.get("/", (c) => {
+app41.get("/", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) {
     const defaultSlug = resolveDefaultSlug();
@@ -13773,12 +13911,12 @@ app39.get("/", (c) => {
   }
   return c.html(cachedHtml("index.html"));
 });
-app39.get("/public", (c) => {
+app41.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
 });
-app39.get("/chat", (c) => {
+app41.get("/chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
@@ -13797,12 +13935,12 @@ async function logViewerFetch(c, next) {
     duration_ms: Date.now() - start
   });
 }
-app39.use("/vnc-viewer.html", logViewerFetch);
-app39.use("/vnc-popout.html", logViewerFetch);
-app39.get("/vnc-popout.html", (c) => {
+app41.use("/vnc-viewer.html", logViewerFetch);
+app41.use("/vnc-popout.html", logViewerFetch);
+app41.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync19(resolve22(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync19(resolve21(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -13812,7 +13950,7 @@ app39.get("/vnc-popout.html", (c) => {
   }
   return c.html(html);
 });
-app39.post("/api/vnc/client-event", async (c) => {
+app41.post("/api/vnc/client-event", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -13833,20 +13971,20 @@ app39.post("/api/vnc/client-event", async (c) => {
   });
   return c.json({ ok: true });
 });
-app39.get("/g/:slug", (c) => {
+app41.get("/g/:slug", (c) => {
   return c.html(brandedPublicHtml());
 });
-app39.get("/graph", (c) => {
+app41.get("/graph", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("graph.html"));
 });
-app39.get("/data", (c) => {
+app41.get("/data", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app39.get("/:slug", async (c, next) => {
+app41.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN.test(`/${slug}`)) {
     const branding = loadBrandingCache(slug);
@@ -13856,15 +13994,15 @@ app39.get("/:slug", async (c, next) => {
   await next();
 });
 if (brandFaviconPath !== "/favicon.ico") {
-  app39.get("/favicon.ico", (c) => {
+  app41.get("/favicon.ico", (c) => {
     c.header("Cache-Control", "public, max-age=300");
     return c.redirect(brandFaviconPath, 302);
   });
 }
-app39.use("/*", serveStatic({ root: "./public" }));
+app41.use("/*", serveStatic({ root: "./public" }));
 var port = parseInt(process.env.MAXY_UI_INTERNAL_PORT ?? process.env.PORT ?? "19199", 10);
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
-var httpServer = serve({ fetch: app39.fetch, port, hostname });
+var httpServer = serve({ fetch: app41.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 console.log("[boot] auth-mode summary: oauth=8 api-key=1 (api-key consumer: invokePublicAgent only)");
 var SUBAPP_MANIFEST = [
@@ -13885,7 +14023,7 @@ for (const m of SUBAPP_MANIFEST) {
 }
 try {
   const registered = [];
-  for (const r of app39.routes ?? []) {
+  for (const r of app41.routes ?? []) {
     if (typeof r.path !== "string" || r.path.includes(":") || r.path.includes("*")) continue;
     if (AGENT_SLUG_PATTERN.test(r.path)) {
       registered.push({ method: (r.method ?? "ALL").toUpperCase(), path: r.path });
@@ -13993,7 +14131,7 @@ reconcileEnabledPlugins(bootAccount?.accountDir, bootAccount?.config);
 (async () => {
   if (!bootAccount) return;
   try {
-    const { recoverRunningCloudflareTasks } = await import("./cloudflare-task-tracker-JNZXLW32.js");
+    const { recoverRunningCloudflareTasks } = await import("./cloudflare-task-tracker-KCIUQYB5.js");
     const result = await recoverRunningCloudflareTasks(
       bootAccount.accountId,
       configDirForWhatsApp,
@@ -14053,7 +14191,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve22(process.env.MAXY_PLATFORM_ROOT ?? join12(__dirname, "..")),
+  platformRoot: resolve21(process.env.MAXY_PLATFORM_ROOT ?? join12(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     try {