@rubytech/create-sitedesk-code 0.1.519 → 0.1.520

package/payload/server/server.js

@@ -1719,10 +1719,10 @@ var require_dist5 = __commonJS({
 });
 
 // server/index.ts
-import { readFileSync as readFileSync43, existsSync as existsSync47, watchFile, readdirSync as readdirSync28, statSync as statSync24 } from "fs";
+import { readFileSync as readFileSync44, existsSync as existsSync48, watchFile, readdirSync as readdirSync28, statSync as statSync24 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash7 } from "crypto";
-import { resolve as resolve42, join as join49, basename as basename15 } from "path";
+import { resolve as resolve42, join as join50, basename as basename15 } from "path";
 import { homedir as homedir4 } from "os";
 
 // server/lib/route-cache-watchers.ts
@@ -2288,11 +2288,11 @@ function staticCacheHeaders(root) {
 }
 
 // server/lib/static-mounts.ts
-function mountStaticFiles(app72, root) {
-  app72.use("/*", staticCacheHeaders(root));
-  app72.use("/assets/*", assetsVary);
-  app72.use("/assets/*", serveStatic({ root, precompressed: true }));
-  app72.use("/*", serveStatic({ root }));
+function mountStaticFiles(app73, root) {
+  app73.use("/*", staticCacheHeaders(root));
+  app73.use("/assets/*", assetsVary);
+  app73.use("/assets/*", serveStatic({ root, precompressed: true }));
+  app73.use("/*", serveStatic({ root }));
 }
 var assetsVary = async (c, next) => {
   await next();
@@ -3503,8 +3503,8 @@ function webchatTurnTimeoutMs() {
   return Number(process.env.WEBCHAT_TURN_TIMEOUT_MS ?? String(2 * 6e4));
 }
 function createChatRoutes(deps) {
-  const app72 = new Hono();
-  app72.post("/", async (c) => {
+  const app73 = new Hono();
+  app73.post("/", async (c) => {
     console.log(`[chat-route] entered route=public method=POST`);
     const contentType = c.req.header("content-type") ?? "";
     const account = resolveAccount();
@@ -3776,7 +3776,7 @@ ${result.result.text}` : result.result.text;
       }
     });
   });
-  return app72;
+  return app73;
 }
 
 // app/lib/channel-pty-bridge/admin-session-id.ts
@@ -3810,8 +3810,8 @@ function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
 function createScheduleInjectRoutes(deps) {
-  const app72 = new Hono();
-  app72.post("/", async (c) => {
+  const app73 = new Hono();
+  app73.post("/", async (c) => {
     const env = c.env;
     const remoteAddr = env?.incoming?.socket?.remoteAddress ?? "";
     if (!isLoopbackAddr(remoteAddr)) {
@@ -3912,7 +3912,7 @@ function createScheduleInjectRoutes(deps) {
     console.error(`${TAG5} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
     return c.json({ ok: true }, 200);
   });
-  return app72;
+  return app73;
 }
 
 // server/index.ts
@@ -6813,7 +6813,51 @@ function countConfigAbsent(platformRoot5, present) {
     return 0;
   }
 }
-function discoverPortalAccounts(accountsDir) {
+var SAFE_AUDIT_ACCOUNT_ID = /^[a-z0-9-]+$/;
+function auditAccountClause(portal) {
+  if (portal.storageModel !== "shared") {
+    return { manifestWhere: "", directoryWhere: "", objectPrefix: void 0 };
+  }
+  if (!SAFE_AUDIT_ACCOUNT_ID.test(portal.accountId)) {
+    throw new Error(
+      `storage-broker: refusing to audit unsafe accountId "${portal.accountId}"`
+    );
+  }
+  return {
+    manifestWhere: ` WHERE accountId = '${portal.accountId}'`,
+    directoryWhere: ` WHERE d.accountId = '${portal.accountId}'`,
+    objectPrefix: `${portal.accountId}/`
+  };
+}
+function readSharedStoreNames(platformRootDir) {
+  let raw;
+  try {
+    raw = readFileSync8(join10(platformRootDir, "config", "cloudflare-house.env"), "utf-8");
+  } catch {
+    return null;
+  }
+  const env = {};
+  for (const line of raw.split("\n")) {
+    const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
+    if (m) env[m[1]] = m[2].trim();
+  }
+  const dbName = env.DATA_PORTAL_DB_NAME;
+  const bucket = env.DATA_PORTAL_BUCKET;
+  return dbName && bucket ? { dbName, bucket } : null;
+}
+function resolveStorageModel(cfg, shared, onDisagree) {
+  const labelled = cfg.storageModel === "shared" ? "shared" : "dedicated";
+  if (!shared) return labelled;
+  const namesShared = cfg.portalDbName === shared.dbName || cfg.bucketName === shared.bucket;
+  const derived = namesShared ? "shared" : "dedicated";
+  if (derived !== labelled && onDisagree) {
+    onDisagree(
+      `[storage-broker] op=storage-model result=overridden labelled=${labelled} derived=${derived} db=${cfg.portalDbName} bucket=${cfg.bucketName}`
+    );
+  }
+  return derived;
+}
+function discoverPortalAccounts(accountsDir, shared = null) {
   if (!existsSync6(accountsDir)) return [];
   const found = [];
   for (const accountId of readdirSync5(accountsDir)) {
@@ -6822,7 +6866,20 @@ function discoverPortalAccounts(accountsDir) {
     try {
       const cfg = JSON.parse(readFileSync8(configPath2, "utf-8"));
       if (typeof cfg.portalDbName === "string" && cfg.portalDbName.length > 0 && typeof cfg.bucketName === "string" && cfg.bucketName.length > 0) {
-        found.push({ accountId, portalDbName: cfg.portalDbName, bucketName: cfg.bucketName });
+        found.push({
+          accountId,
+          portalDbName: cfg.portalDbName,
+          bucketName: cfg.bucketName,
+          storageModel: resolveStorageModel(
+            {
+              portalDbName: cfg.portalDbName,
+              bucketName: cfg.bucketName,
+              storageModel: cfg.storageModel
+            },
+            shared,
+            (line) => console.error(`${line} account=${accountId}`)
+          )
+        });
       }
     } catch {
     }
@@ -6830,7 +6887,10 @@ function discoverPortalAccounts(accountsDir) {
   return found;
 }
 async function runDataPortalAudit(root) {
-  const portals = discoverPortalAccounts(resolve7(root, "..", "data", "accounts"));
+  const portals = discoverPortalAccounts(
+    resolve7(root, "..", "data", "accounts"),
+    readSharedStoreNames(root)
+  );
   const configAbsent = countConfigAbsent(root, portals);
   if (portals.length === 0) {
     if (configAbsent > 0) {
@@ -6841,13 +6901,14 @@ async function runDataPortalAudit(root) {
   const cf = await makeHouseCfExec(root);
   let degraded = 0;
   for (const portal of portals) {
+    const scope = auditAccountClause(portal);
     let rows = null;
     let d1Error = null;
     try {
       rows = parseManifestRows(
         await cf.d1Query(
           portal.portalDbName,
-          "SELECT objectKey, ingested, uploadedAt, devicePath, deleted FROM manifest"
+          "SELECT objectKey, ingested, uploadedAt, devicePath, deleted FROM manifest" + scope.manifestWhere
         )
       );
     } catch (err) {
@@ -6857,7 +6918,7 @@ async function runDataPortalAudit(root) {
     try {
       const published = await cf.d1Query(
         portal.portalDbName,
-        "SELECT d.relPath AS relPath FROM directory d JOIN directory_state s ON s.accountId = d.accountId AND s.currentGeneration = d.generation"
+        "SELECT d.relPath AS relPath FROM directory d JOIN directory_state s ON s.accountId = d.accountId AND s.currentGeneration = d.generation" + scope.directoryWhere
       );
       const envelope = Array.isArray(published) ? published[0] : null;
       const results = envelope?.results;
@@ -6872,7 +6933,7 @@ async function runDataPortalAudit(root) {
     let objects = null;
     let r2Error = null;
     try {
-      objects = await cf.r2ObjectList(portal.bucketName);
+      objects = await cf.r2ObjectList(portal.bucketName, scope.objectPrefix);
     } catch (err) {
       r2Error = err.message;
     }
@@ -7157,7 +7218,17 @@ function exposedOrOwnUploads(segments, exposed, ownerId) {
   if (exposed.includes(segments[0])) return true;
   return segments.length > 2 && segments[0] === "uploads" && segments[1] === ownerId;
 }
-var PENDING_SELECT = "SELECT fileId, ownerId, filename, objectKey, size, targetPath, devicePath, deleted FROM manifest WHERE ingested = 0 OR deleted = 1";
+var PENDING_COLUMNS = "SELECT fileId, ownerId, filename, objectKey, size, targetPath, devicePath, deleted FROM manifest WHERE (ingested = 0 OR deleted = 1)";
+var SAFE_ACCOUNT_ID = /^[a-z0-9-]+$/;
+function pendingSelect(portal) {
+  if (portal.storageModel !== "shared") return PENDING_COLUMNS;
+  if (!SAFE_ACCOUNT_ID.test(portal.accountId)) {
+    throw new Error(
+      `portal-uploads-pull: refusing to build a query for unsafe accountId "${portal.accountId}"`
+    );
+  }
+  return `${PENDING_COLUMNS} AND accountId = '${portal.accountId}'`;
+}
 function parsePendingRows(raw) {
   const envelope = Array.isArray(raw) ? raw[0] : null;
   const results = envelope?.results;
@@ -7208,7 +7279,7 @@ async function readExposedDirs(accountDir) {
 }
 async function runPortalUploadsPull(root) {
   const accountsRoot = resolve8(root, "..", "data", "accounts");
-  const portals = discoverPortalAccounts(accountsRoot);
+  const portals = discoverPortalAccounts(accountsRoot, readSharedStoreNames(root));
   if (portals.length === 0) return "portals=0 pulled=0";
   const cf = await makeHouseCfExec(root);
   let pulledTotal = 0;
@@ -7217,7 +7288,7 @@ async function runPortalUploadsPull(root) {
   for (const portal of portals) {
     try {
       const { rows, malformed } = parsePendingRows(
-        await cf.d1Query(portal.portalDbName, PENDING_SELECT)
+        await cf.d1Query(portal.portalDbName, pendingSelect(portal))
       );
       if (malformed > 0) {
         console.error(`${TAG14} op=malformed account=${portal.accountId} rows=${malformed}`);
@@ -11009,8 +11080,8 @@ async function reapplyLeversViaManager() {
 var WEBCHAT_SEND_TURN_WINDOW_MS = Number(process.env.WEBCHAT_SEND_TURN_WINDOW_MS ?? String(15e3));
 var sendSeq = 0;
 function createWebchatRoutes(deps) {
-  const app72 = new Hono();
-  app72.post("/send", requireAdminSession, async (c) => {
+  const app73 = new Hono();
+  app73.post("/send", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -11208,7 +11279,7 @@ ${note}` : note;
     if (turnTimer.unref) turnTimer.unref();
     return c.json({ ok: true });
   });
-  app72.post("/interrupt", requireAdminSession, async (c) => {
+  app73.post("/interrupt", requireAdminSession, async (c) => {
     const cacheKey = c.get("cacheKey");
     const requesterUserId = (cacheKey ? getUserIdForSession(cacheKey) : void 0) ?? null;
     const primaryUserId = resolvePrimaryAdminUserId();
@@ -11236,7 +11307,7 @@ ${note}` : note;
     }
     return c.json({ ok: true, stopped: outcome.stopped, intId: outcome.intId, deadChild: outcome.deadChild }, 200);
   });
-  app72.post("/settings", requireAdminSession, async (c) => {
+  app73.post("/settings", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const op = body?.op;
     const value = body?.value;
@@ -11272,7 +11343,7 @@ ${note}` : note;
     console.log(`[webchat:settings] op=${op} outcome=accepted accountId=${account.accountId.slice(0, 8)} value=${value} settingsApplied=${settingsApplied}`);
     return c.json({ ok: true, settingsApplied });
   });
-  app72.get("/session", requireAdminSession, async (c) => {
+  app73.get("/session", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -11345,7 +11416,7 @@ ${note}` : note;
     const indicators = await fetchComposerIndicators(sessionId);
     return c.json({ sessionId, projectDir, source, sizeBytes: jsonlSizeBytes(projectDir, sessionId), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${sessionId}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${sessionId}`) ?? null, ...indicators, ...readLevers(account) });
   });
-  app72.post("/permission-verdict", requireAdminSession, async (c) => {
+  app73.post("/permission-verdict", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const sessionId = body?.sessionId;
     const requestId = body?.request_id;
@@ -11362,7 +11433,7 @@ ${note}` : note;
     const ok = deps.resolvePermissionVerdict?.(`session:${sessionId}`, requestId, behavior) ?? false;
     return c.json({ ok });
   });
-  return app72;
+  return app73;
 }
 
 // server/routes/webchat-greeting.ts
@@ -21877,10 +21948,40 @@ app49.get("/booking-link", requireAdminSession, (c) => {
 });
 var calendar_default = app49;
 
+// server/routes/admin/data-portal.ts
+import { existsSync as existsSync38, readFileSync as readFileSync35 } from "fs";
+import { join as join44 } from "path";
+var app50 = new Hono();
+var PORTAL_FILENAME = "data-portal.json";
+app50.get("/portal-link", requireAdminSession, (c) => {
+  const account = accountDirForSession(c.var.cacheKey);
+  if (!account) {
+    console.error("[data-portal] op=portal-link auth-rejected reason=no-account-for-session accountId=none");
+    return c.json({ error: "no account for session", reason: "no-account-for-session" }, 401);
+  }
+  const id82 = account.accountId.slice(0, 8);
+  try {
+    const path = join44(account.accountDir, PORTAL_FILENAME);
+    if (!existsSync38(path)) {
+      console.log(`[data-portal] op=portal-link accountId=${id82} portalDomain=none source=data-portal-config`);
+      return c.json({ portalDomain: null });
+    }
+    const cfg = JSON.parse(readFileSync35(path, "utf-8"));
+    const portalDomain = typeof cfg.portalDomain === "string" && cfg.portalDomain.trim() ? cfg.portalDomain.trim() : null;
+    console.log(`[data-portal] op=portal-link accountId=${id82} portalDomain=${portalDomain ?? "none"} source=data-portal-config`);
+    return c.json({ portalDomain });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`[data-portal] op=portal-link-fail accountId=${id82} err="${message}"`);
+    return c.json({ portalDomain: null });
+  }
+});
+var data_portal_default = app50;
+
 // server/routes/admin/routines.ts
 import cronParser from "cron-parser";
 var { parseExpression } = cronParser;
-var app50 = new Hono();
+var app51 = new Hono();
 var AUTOMATION_WHERE = "(e.recurrence IS NOT NULL OR e.agentChannel IS NOT NULL OR e.actionPlugin IS NOT NULL)";
 var ROUTINE_COLS = `e.eventId AS eventId, e.name AS name, e.eventStatus AS eventStatus,
   e.recurrence AS recurrence, e.nextRun AS nextRun, e.lastTriggered AS lastTriggered,
@@ -21910,7 +22011,7 @@ function mapRoutine(r) {
     lastDispatchAt: g("lastDispatchAt")
   };
 }
-app50.get("/", requireAdminSession, async (c) => {
+app51.get("/", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
     console.error('[admin:routines] op=list auth-rejected reason="no account for session"');
@@ -21936,7 +22037,7 @@ app50.get("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.get("/:eventId", requireAdminSession, async (c) => {
+app51.get("/:eventId", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const eventId = c.req.param("eventId");
@@ -21960,7 +22061,7 @@ app50.get("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.patch("/:eventId", requireAdminSession, async (c) => {
+app51.patch("/:eventId", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const eventId = c.req.param("eventId");
@@ -22030,7 +22131,7 @@ app50.patch("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.delete("/:eventId", requireAdminSession, async (c) => {
+app51.delete("/:eventId", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
     console.error('[admin:routines] op=delete auth-rejected reason="no account for session"');
@@ -22058,12 +22159,12 @@ app50.delete("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var routines_default = app50;
+var routines_default = app51;
 
 // server/routes/admin/skills.ts
-import { existsSync as existsSync38, readdirSync as readdirSync24, readFileSync as readFileSync35, rmSync as rmSync3 } from "fs";
+import { existsSync as existsSync39, readdirSync as readdirSync24, readFileSync as readFileSync36, rmSync as rmSync3 } from "fs";
 import { resolve as resolve30 } from "path";
-var app51 = new Hono();
+var app52 = new Hono();
 var NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
 function splitSkillMd(text) {
   const m = text.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
@@ -22085,14 +22186,14 @@ function stripQuotes(s) {
   return s;
 }
 function subdirs2(dir) {
-  if (!existsSync38(dir)) return [];
+  if (!existsSync39(dir)) return [];
   try {
     return readdirSync24(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
     return [];
   }
 }
-app51.get("/", requireAdminSession, async (c) => {
+app52.get("/", requireAdminSession, async (c) => {
   const acct = accountDirForSession(c.var.cacheKey);
   if (!acct) {
     console.error('[admin:skills] op=list auth-rejected reason="no account for session"');
@@ -22108,11 +22209,11 @@ app51.get("/", requireAdminSession, async (c) => {
       const skillsDir = resolve30(pluginsDir, plugin, "skills");
       for (const skill of subdirs2(skillsDir)) {
         const skillMd = resolve30(skillsDir, skill, "SKILL.md");
-        if (!existsSync38(skillMd)) continue;
+        if (!existsSync39(skillMd)) continue;
         try {
-          const { frontmatter } = splitSkillMd(readFileSync35(skillMd, "utf-8"));
+          const { frontmatter } = splitSkillMd(readFileSync36(skillMd, "utf-8"));
           const refsDir = resolve30(skillsDir, skill, "references");
-          const refCount = existsSync38(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).length : 0;
+          const refCount = existsSync39(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).length : 0;
           skills.push({ plugin, skill, description: frontmatter.description, refCount });
         } catch (err) {
           console.error(`[admin:skills] op=list-skip plugin=${plugin} skill=${skill} reason="${err instanceof Error ? err.message : String(err)}"`);
@@ -22125,7 +22226,7 @@ app51.get("/", requireAdminSession, async (c) => {
   console.log(`[admin:skills] op=list accountId=${acct.accountId.slice(0, 8)} plugins=${value.pluginCount} skills=${value.skills.length} cache=${state}`);
   return c.json({ skills: value.skills });
 });
-app51.get("/:plugin/:skill", requireAdminSession, async (c) => {
+app52.get("/:plugin/:skill", requireAdminSession, async (c) => {
   const acct = accountDirForSession(c.var.cacheKey);
   if (!acct) return c.json({ error: "Account not found for session" }, 401);
   const plugin = c.req.param("plugin");
@@ -22136,13 +22237,13 @@ app51.get("/:plugin/:skill", requireAdminSession, async (c) => {
   }
   const skillDir = resolve30(acct.accountDir, "plugins", plugin, "skills", skill);
   const skillMd = resolve30(skillDir, "SKILL.md");
-  const found = existsSync38(skillMd);
+  const found = existsSync39(skillMd);
   console.log(`[admin:skills] op=get plugin=${plugin} skill=${skill} found=${found}`);
   if (!found) return c.json({ error: "Skill not found" }, 404);
   try {
-    const { frontmatter, body } = splitSkillMd(readFileSync35(skillMd, "utf-8"));
+    const { frontmatter, body } = splitSkillMd(readFileSync36(skillMd, "utf-8"));
     const refsDir = resolve30(skillDir, "references");
-    const references = existsSync38(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name).sort() : [];
+    const references = existsSync39(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name).sort() : [];
     return c.json({ skill: { plugin, skill, frontmatter, body, references } });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
@@ -22150,7 +22251,7 @@ app51.get("/:plugin/:skill", requireAdminSession, async (c) => {
     return c.json({ error: `Skill unavailable: ${message}` }, 503);
   }
 });
-app51.delete("/:plugin/:skill", requireAdminSession, async (c) => {
+app52.delete("/:plugin/:skill", requireAdminSession, async (c) => {
   const acct = accountDirForSession(c.var.cacheKey);
   if (!acct) return c.json({ error: "Account not found for session" }, 401);
   const plugin = c.req.param("plugin");
@@ -22162,7 +22263,7 @@ app51.delete("/:plugin/:skill", requireAdminSession, async (c) => {
   const pluginDir = resolve30(acct.accountDir, "plugins", plugin);
   const skillsDir = resolve30(pluginDir, "skills");
   const skillDir = resolve30(skillsDir, skill);
-  if (!existsSync38(resolve30(skillDir, "SKILL.md"))) {
+  if (!existsSync39(resolve30(skillDir, "SKILL.md"))) {
     console.error(`[admin:skills] op=delete outcome=rejected reason=not-found plugin=${plugin} skill=${skill}`);
     return c.json({ error: "Skill not found" }, 404);
   }
@@ -22170,7 +22271,7 @@ app51.delete("/:plugin/:skill", requireAdminSession, async (c) => {
     rmSync3(skillDir, { recursive: true, force: true });
     const pluginDirRemoved = subdirs2(skillsDir).length === 0;
     if (pluginDirRemoved) rmSync3(pluginDir, { recursive: true, force: true });
-    const skillDirGone = !existsSync38(skillDir);
+    const skillDirGone = !existsSync39(skillDir);
     if (!skillDirGone) {
       console.error(`[admin:skills] op=delete plugin=${plugin} skill=${skill} outcome=rejected reason=rm-incomplete skillDirGone=false`);
       return c.json({ error: "Delete did not remove the skill directory" }, 503);
@@ -22183,7 +22284,7 @@ app51.delete("/:plugin/:skill", requireAdminSession, async (c) => {
     return c.json({ error: `Delete failed: ${message}` }, 503);
   }
 });
-var skills_default = app51;
+var skills_default = app52;
 
 // app/lib/time-entry-format.ts
 function secondsBetween(startIso, endIso) {
@@ -22206,8 +22307,8 @@ function toNum(v) {
 var TAG27 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
-var app52 = new Hono();
-app52.get("/", requireAdminSession, async (c) => {
+var app53 = new Hono();
+app53.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -22313,13 +22414,13 @@ async function computeTaskList(accountId) {
     await session.close();
   }
 }
-var tasks_list_default = app52;
+var tasks_list_default = app53;
 
 // server/routes/admin/task-timer-start.ts
 import { randomUUID as randomUUID10 } from "crypto";
 var TAG28 = "[task-timer]";
-var app53 = new Hono();
-app53.post("/", requireAdminSession, async (c) => {
+var app54 = new Hono();
+app54.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22376,13 +22477,13 @@ app53.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_timer_start_default = app53;
+var task_timer_start_default = app54;
 
 // server/routes/admin/task-timer-stop.ts
 import neo4j4 from "neo4j-driver";
 var TAG29 = "[task-timer]";
-var app54 = new Hono();
-app54.post("/", requireAdminSession, async (c) => {
+var app55 = new Hono();
+app55.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22451,12 +22552,12 @@ app54.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_timer_stop_default = app54;
+var task_timer_stop_default = app55;
 
 // server/routes/admin/task-complete.ts
 var TAG30 = "[task-timer]";
-var app55 = new Hono();
-app55.post("/", requireAdminSession, async (c) => {
+var app56 = new Hono();
+app56.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22495,14 +22596,14 @@ app55.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_complete_default = app55;
+var task_complete_default = app56;
 
 // server/routes/admin/task-time-adjust.ts
 import { randomUUID as randomUUID11 } from "crypto";
 import neo4j5 from "neo4j-driver";
 var TAG31 = "[task-time-adjust]";
-var app56 = new Hono();
-app56.post("/", requireAdminSession, async (c) => {
+var app57 = new Hono();
+app57.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22577,10 +22678,10 @@ app56.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_time_adjust_default = app56;
+var task_time_adjust_default = app57;
 
 // app/lib/admin-roster.ts
-import { existsSync as existsSync39, readdirSync as readdirSync25, readFileSync as readFileSync36 } from "fs";
+import { existsSync as existsSync40, readdirSync as readdirSync25, readFileSync as readFileSync37 } from "fs";
 import { resolve as resolve31 } from "path";
 function readHouseAdminUserIds(accountsDir = ACCOUNTS_DIR) {
   let entries2;
@@ -22591,9 +22692,9 @@ function readHouseAdminUserIds(accountsDir = ACCOUNTS_DIR) {
   }
   for (const entry of entries2) {
     const cfgPath = resolve31(accountsDir, entry, "account.json");
-    if (!existsSync39(cfgPath)) continue;
+    if (!existsSync40(cfgPath)) continue;
     try {
-      const cfg = JSON.parse(readFileSync36(cfgPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync37(cfgPath, "utf-8"));
       if (cfg.role !== "house") continue;
       if (!Array.isArray(cfg.admins)) return [];
       return cfg.admins.map(
@@ -22665,8 +22766,8 @@ async function resolveAssignableAdmins(accountId, accountsDir = ACCOUNTS_DIR) {
 
 // server/routes/admin/task-assign.ts
 var TAG32 = "[task-assign]";
-var app57 = new Hono();
-app57.post("/", requireAdminSession, async (c) => {
+var app58 = new Hono();
+app58.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22748,12 +22849,12 @@ app57.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_assign_default = app57;
+var task_assign_default = app58;
 
 // server/routes/admin/admin-users-list.ts
 var TAG33 = "[admin-users]";
-var app58 = new Hono();
-app58.get("/", requireAdminSession, async (c) => {
+var app59 = new Hono();
+app59.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -22769,11 +22870,11 @@ app58.get("/", requireAdminSession, async (c) => {
     return c.json({ error: "admin-users-list-failed" }, 500);
   }
 });
-var admin_users_list_default = app58;
+var admin_users_list_default = app59;
 
 // server/routes/admin/activity.ts
 import { readdirSync as readdirSync26 } from "fs";
-var app59 = new Hono();
+var app60 = new Hono();
 var TAG34 = "[activity]";
 function resolveHouseAccountId(accounts) {
   const houses = accounts.filter((a) => a.config.role === "house");
@@ -22795,7 +22896,7 @@ function countAccountDirsOnDisk() {
     return null;
   }
 }
-app59.get("/", requireAdminSession, async (c) => {
+app60.get("/", requireAdminSession, async (c) => {
   const req = requestToken();
   const cacheKey = c.var.cacheKey;
   const caller2 = getAccountIdForSession(cacheKey) ?? null;
@@ -22904,65 +23005,66 @@ app59.get("/", requireAdminSession, async (c) => {
     }
   });
 });
-var activity_default = app59;
+var activity_default = app60;
 
 // server/routes/admin/index.ts
-var app60 = new Hono();
-app60.route("/session", session_default);
-app60.route("/accounts", accounts_default);
-app60.route("/logs", logs_default);
-app60.route("/claude-info", claude_info_default);
-app60.route("/attachment", attachment_default);
-app60.route("/session-upload", session_upload_default);
-app60.route("/agents", agents_default);
-app60.route("/sessions", sessions_default);
-app60.route("/claude-sessions", claude_sessions_default);
-app60.route("/log-ingest", log_ingest_default);
-app60.route("/events", events_default);
-app60.route("/files", files_default);
-app60.route("/graph-search", graph_search_default);
-app60.route("/graph-subgraph", graph_subgraph_default);
-app60.route("/graph-delete", graph_delete_default);
-app60.route("/graph-restore", graph_restore_default);
-app60.route("/graph-labels-in-graph", graph_labels_in_graph_default);
-app60.route("/graph-default-view", graph_default_view_default);
-app60.route("/sidebar-artefacts", sidebar_artefacts_default);
-app60.route("/sidebar-sessions", sidebar_sessions_default);
-app60.route("/session-delete", session_delete_default);
-app60.route("/session-stop", session_stop_default);
-app60.route("/session-archive", session_archive_default);
-app60.route("/session-rename", session_rename_default);
-app60.route("/session-usage", session_usage_default);
-app60.route("/browser", browser_default);
-app60.route("/session-rc-spawn", session_rc_spawn_default);
-app60.route("/session-reseat", session_reseat_default);
-app60.route("/system-stats", system_stats_default);
-app60.route("/health-brand", health_default2);
-app60.route("/linkedin-ingest", linkedin_ingest_default);
-app60.route("/post-turn-context", post_turn_context_default);
-app60.route("/public-session-context", public_session_context_default);
-app60.route("/public-session-exit", public_session_exit_default);
-app60.route("/access-session-evict", access_session_evict_default);
-app60.route("/enrol-person", enrol_person_default);
-app60.route("/calendar", calendar_default);
-app60.route("/routines", routines_default);
-app60.route("/skills", skills_default);
-app60.route("/tasks-list", tasks_list_default);
-app60.route("/task-timer-start", task_timer_start_default);
-app60.route("/task-timer-stop", task_timer_stop_default);
-app60.route("/task-complete", task_complete_default);
-app60.route("/task-time-adjust", task_time_adjust_default);
-app60.route("/task-assign", task_assign_default);
-app60.route("/admin-users-list", admin_users_list_default);
-app60.route("/activity", activity_default);
-var admin_default = app60;
+var app61 = new Hono();
+app61.route("/session", session_default);
+app61.route("/accounts", accounts_default);
+app61.route("/logs", logs_default);
+app61.route("/claude-info", claude_info_default);
+app61.route("/attachment", attachment_default);
+app61.route("/session-upload", session_upload_default);
+app61.route("/agents", agents_default);
+app61.route("/sessions", sessions_default);
+app61.route("/claude-sessions", claude_sessions_default);
+app61.route("/log-ingest", log_ingest_default);
+app61.route("/events", events_default);
+app61.route("/files", files_default);
+app61.route("/graph-search", graph_search_default);
+app61.route("/graph-subgraph", graph_subgraph_default);
+app61.route("/graph-delete", graph_delete_default);
+app61.route("/graph-restore", graph_restore_default);
+app61.route("/graph-labels-in-graph", graph_labels_in_graph_default);
+app61.route("/graph-default-view", graph_default_view_default);
+app61.route("/sidebar-artefacts", sidebar_artefacts_default);
+app61.route("/sidebar-sessions", sidebar_sessions_default);
+app61.route("/session-delete", session_delete_default);
+app61.route("/session-stop", session_stop_default);
+app61.route("/session-archive", session_archive_default);
+app61.route("/session-rename", session_rename_default);
+app61.route("/session-usage", session_usage_default);
+app61.route("/browser", browser_default);
+app61.route("/session-rc-spawn", session_rc_spawn_default);
+app61.route("/session-reseat", session_reseat_default);
+app61.route("/system-stats", system_stats_default);
+app61.route("/health-brand", health_default2);
+app61.route("/linkedin-ingest", linkedin_ingest_default);
+app61.route("/post-turn-context", post_turn_context_default);
+app61.route("/public-session-context", public_session_context_default);
+app61.route("/public-session-exit", public_session_exit_default);
+app61.route("/access-session-evict", access_session_evict_default);
+app61.route("/enrol-person", enrol_person_default);
+app61.route("/calendar", calendar_default);
+app61.route("/data-portal", data_portal_default);
+app61.route("/routines", routines_default);
+app61.route("/skills", skills_default);
+app61.route("/tasks-list", tasks_list_default);
+app61.route("/task-timer-start", task_timer_start_default);
+app61.route("/task-timer-stop", task_timer_stop_default);
+app61.route("/task-complete", task_complete_default);
+app61.route("/task-time-adjust", task_time_adjust_default);
+app61.route("/task-assign", task_assign_default);
+app61.route("/admin-users-list", admin_users_list_default);
+app61.route("/activity", activity_default);
+var admin_default = app61;
 
 // server/routes/access/verify-token.ts
 var TAG35 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
-var app61 = new Hono();
-app61.post("/", async (c) => {
+var app62 = new Hono();
+app62.post("/", async (c) => {
   const ip = c.var.clientIp || "unknown";
   let body;
   try {
@@ -23044,7 +23146,7 @@ app61.post("/", async (c) => {
     displayName: grant.displayName
   });
 });
-var verify_token_default = app61;
+var verify_token_default = app62;
 
 // app/lib/access-email.ts
 import { spawn as spawn2 } from "child_process";
@@ -23107,9 +23209,9 @@ async function sendMagicLinkEmail(payload) {
 
 // server/routes/access/request-magic-link.ts
 var TAG36 = "[access-request-link]";
-var app62 = new Hono();
+var app63 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
-app62.post("/", async (c) => {
+app63.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -23183,16 +23285,16 @@ app62.post("/", async (c) => {
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
-var request_magic_link_default = app62;
+var request_magic_link_default = app63;
 
 // server/routes/access/index.ts
-var app63 = new Hono();
-app63.route("/verify-token", verify_token_default);
-app63.route("/request-magic-link", request_magic_link_default);
-var access_default = app63;
+var app64 = new Hono();
+app64.route("/verify-token", verify_token_default);
+app64.route("/request-magic-link", request_magic_link_default);
+var access_default = app64;
 
 // server/routes/sites.ts
-import { existsSync as existsSync40, readFileSync as readFileSync37, realpathSync as realpathSync8, statSync as statSync21 } from "fs";
+import { existsSync as existsSync41, readFileSync as readFileSync38, realpathSync as realpathSync8, statSync as statSync21 } from "fs";
 import { resolve as resolve33 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
@@ -23224,8 +23326,8 @@ function getExt(p) {
   if (idx < p.lastIndexOf("/")) return "";
   return p.slice(idx).toLowerCase();
 }
-var app64 = new Hono();
-app64.get("/:rel{.*}", (c) => {
+var app65 = new Hono();
+app65.get("/:rel{.*}", (c) => {
   const reqPath = c.req.path;
   const rawRel = c.req.param("rel") ?? "";
   const trimmed = rawRel.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -23258,7 +23360,7 @@ app64.get("/:rel{.*}", (c) => {
   }
   let stat11;
   try {
-    stat11 = existsSync40(filePath) ? statSync21(filePath) : null;
+    stat11 = existsSync41(filePath) ? statSync21(filePath) : null;
   } catch {
     stat11 = null;
   }
@@ -23277,7 +23379,7 @@ app64.get("/:rel{.*}", (c) => {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync40(filePath)) {
+  if (!existsSync41(filePath)) {
     console.error(`[sites] not-found path=${reqPath} status=404`);
     return c.text("Not found", 404);
   }
@@ -23296,7 +23398,7 @@ app64.get("/:rel{.*}", (c) => {
   }
   let body;
   try {
-    body = readFileSync37(realPath);
+    body = readFileSync38(realPath);
   } catch (err) {
     const code = err?.code;
     if (code === "EISDIR") {
@@ -23328,11 +23430,11 @@ app64.get("/:rel{.*}", (c) => {
     "X-Content-Type-Options": "nosniff"
   });
 });
-var sites_default = app64;
+var sites_default = app65;
 
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync38, writeFileSync as writeFileSync14 } from "fs";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync39, writeFileSync as writeFileSync14 } from "fs";
 import { dirname as dirname15 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
@@ -23341,7 +23443,7 @@ var cachedSecret = null;
 function getSecret() {
   if (cachedSecret) return cachedSecret;
   try {
-    const hex2 = readFileSync38(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+    const hex2 = readFileSync39(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
     if (hex2.length === SECRET_BYTES * 2) {
       cachedSecret = Buffer.from(hex2, "hex");
       return cachedSecret;
@@ -23355,7 +23457,7 @@ function getSecret() {
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
   }
-  const hex = readFileSync38(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+  const hex = readFileSync39(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
   cachedSecret = Buffer.from(hex, "hex");
   return cachedSecret;
 }
@@ -23408,8 +23510,8 @@ var VISITOR_COOKIE_NAME = "mxy_v";
 var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
-import { existsSync as existsSync41, readFileSync as readFileSync39 } from "fs";
-import { join as join44 } from "path";
+import { existsSync as existsSync42, readFileSync as readFileSync40 } from "fs";
+import { join as join45 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -23417,10 +23519,10 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot5) return null;
-  const brandPath = join44(platformRoot5, "config", "brand.json");
-  if (!existsSync41(brandPath)) return null;
+  const brandPath = join45(platformRoot5, "config", "brand.json");
+  if (!existsSync42(brandPath)) return null;
   try {
-    cached2 = JSON.parse(readFileSync39(brandPath, "utf-8"));
+    cached2 = JSON.parse(readFileSync40(brandPath, "utf-8"));
     return cached2;
   } catch {
     return null;
@@ -23428,7 +23530,7 @@ function readBrandConfig() {
 }
 
 // server/routes/visitor-consent.ts
-var app65 = new Hono();
+var app66 = new Hono();
 var CONSENT_COOKIE_NAME = "mxy_consent";
 var CONSENT_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
 var DEFAULT_CONSENT_COPY = {
@@ -23473,17 +23575,17 @@ function siteSlugFromReferer(referer) {
     return "";
   }
 }
-app65.options("/consent", (c) => {
+app66.options("/consent", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app65.options("/brand-config", (c) => {
+app66.options("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app65.post("/consent", async (c) => {
+app66.post("/consent", async (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   let raw;
@@ -23523,7 +23625,7 @@ app65.post("/consent", async (c) => {
   console.log(`[consent] ${parsed.decision} site=${site} brand=${brandName} tokenBound=${tokenBound}`);
   return c.body(null, 204);
 });
-app65.get("/brand-config", (c) => {
+app66.get("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   const brand = readBrandConfig();
@@ -23533,7 +23635,7 @@ app65.get("/brand-config", (c) => {
   c.header("Cache-Control", "public, max-age=300");
   return c.json({ consent: { copy, palette } });
 });
-var visitor_consent_default = app65;
+var visitor_consent_default = app66;
 
 // server/routes/listings.ts
 function getCookie(headerValue, name) {
@@ -23560,8 +23662,8 @@ function appendConsentParams(pageUrl, token) {
 }
 var SAFE_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,118}[a-z0-9])?$/;
 var CHAT_SESSION_KEY_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var app66 = new Hono();
-app66.get("/:slug/click", async (c) => {
+var app67 = new Hono();
+app67.get("/:slug/click", async (c) => {
   const slug = c.req.param("slug") ?? "";
   const rawSession = c.req.query("session") ?? "";
   const sessionKey = CHAT_SESSION_KEY_RE.test(rawSession) ? rawSession : "invalid";
@@ -23625,10 +23727,10 @@ app66.get("/:slug/click", async (c) => {
   console.log(`[property-card-click] sessionKey=${sessionKey} listingSlug=${slug} consent=${consentCookie ?? "absent"} ts=${(/* @__PURE__ */ new Date()).toISOString()}`);
   return c.redirect(redirectUrl, 302);
 });
-var listings_default = app66;
+var listings_default = app67;
 
 // server/routes/visitor-event.ts
-var app67 = new Hono();
+var app68 = new Hono();
 var BOT_UA_RE = /\b(bot|crawl|spider|slurp|headlesschrome|phantomjs|googlebot|bingbot|yandex|baiduspider|ahrefsbot|semrushbot|mj12bot|dotbot|petalbot)\b/i;
 var buckets = /* @__PURE__ */ new Map();
 var RATE_LIMIT = 60;
@@ -23704,12 +23806,12 @@ function originAllowed(origin, allowlist) {
     return false;
   }
 }
-app67.options("/event", (c) => {
+app68.options("/event", (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   return c.body(null, 204);
 });
-app67.post("/event", async (c) => {
+app68.post("/event", async (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   const ua = c.req.header("user-agent") ?? "";
@@ -23914,11 +24016,11 @@ async function writeEvent(opts) {
     );
   }
 }
-var visitor_event_default = app67;
+var visitor_event_default = app68;
 
 // server/routes/session.ts
 import { resolve as resolve34 } from "path";
-import { existsSync as existsSync42, writeFileSync as writeFileSync15, mkdirSync as mkdirSync9 } from "fs";
+import { existsSync as existsSync43, writeFileSync as writeFileSync15, mkdirSync as mkdirSync9 } from "fs";
 var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function writeBrandingCache(accountId, agentSlug, branding) {
   try {
@@ -23960,8 +24062,8 @@ function withVisitorCookie(response, visitorId) {
     headers
   });
 }
-var app68 = new Hono();
-app68.post("/", async (c) => {
+var app69 = new Hono();
+app69.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24002,7 +24104,7 @@ app68.post("/", async (c) => {
   let agentConfig = null;
   if (account) {
     const agentDir = resolve34(account.accountDir, "agents", agentSlug);
-    if (!existsSync42(agentDir) || !existsSync42(resolve34(agentDir, "config.json"))) {
+    if (!existsSync43(agentDir) || !existsSync43(resolve34(agentDir, "config.json"))) {
       return c.json({ error: "Agent not found" }, 404);
     }
     agentConfig = resolveAgentConfig(account.accountDir, agentSlug);
@@ -24108,7 +24210,7 @@ app68.post("/", async (c) => {
     newVisitorId
   );
 });
-var session_default2 = app68;
+var session_default2 = app69;
 
 // server/lib/calendar-slots.ts
 var WEEKDAYS = ["sun", "mon", "tue", "wed", "thu", "fri", "sat"];
@@ -24191,17 +24293,17 @@ function computeOpenSlots(config, busy, fromISO, toISO) {
 }
 
 // server/routes/calendar-public.ts
-var app69 = new Hono();
+var app70 = new Hono();
 function setCors(c) {
   c.header("Access-Control-Allow-Origin", "*");
   c.header("Access-Control-Allow-Methods", "GET, OPTIONS");
   c.header("Access-Control-Allow-Headers", "content-type");
 }
-app69.options("/free-busy", (c) => {
+app70.options("/free-busy", (c) => {
   setCors(c);
   return c.body(null, 204);
 });
-app69.get("/free-busy", async (c) => {
+app70.get("/free-busy", async (c) => {
   setCors(c);
   const from = c.req.query("from");
   const to = c.req.query("to");
@@ -24257,14 +24359,14 @@ app69.get("/free-busy", async (c) => {
     await session.close();
   }
 });
-var calendar_public_default = app69;
+var calendar_public_default = app70;
 
 // server/routes/portal-fetch.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat8, readFile as readFile11, realpath } from "fs/promises";
-import { join as join45, resolve as resolve35, sep as sep11 } from "path";
+import { join as join46, resolve as resolve35, sep as sep11 } from "path";
 import { Readable as Readable3 } from "stream";
-var app70 = new Hono();
+var app71 = new Hono();
 var TAG37 = "[portal-fetch]";
 async function verifySignature(secret, accountId, relPath, expiresAtMs, signature, nowMs) {
   if (!secret || !signature) return false;
@@ -24335,7 +24437,7 @@ function isValidAccountId2(value) {
 }
 async function readExposeFolders2(accountDir) {
   try {
-    const cfg = JSON.parse(await readFile11(join45(accountDir, "data-portal.json"), "utf8"));
+    const cfg = JSON.parse(await readFile11(join46(accountDir, "data-portal.json"), "utf8"));
     return Array.isArray(cfg?.exposeFolders) ? cfg.exposeFolders.filter((f) => typeof f === "string") : [];
   } catch {
     return [];
@@ -24344,7 +24446,7 @@ async function readExposeFolders2(accountDir) {
 async function resolveFetchTarget(accountDir, relPath, ownerId) {
   let schemaText = null;
   try {
-    schemaText = await readFile11(join45(accountDir, "SCHEMA.md"), "utf8");
+    schemaText = await readFile11(join46(accountDir, "SCHEMA.md"), "utf8");
   } catch {
     schemaText = null;
   }
@@ -24427,9 +24529,9 @@ async function handle(c, headOnly) {
     }
   });
 }
-app70.get("/fetch", (c) => handle(c, false));
-app70.on("HEAD", "/fetch", (c) => handle(c, true));
-var portal_fetch_default = app70;
+app71.get("/fetch", (c) => handle(c, false));
+app71.on("HEAD", "/fetch", (c) => handle(c, true));
+var portal_fetch_default = app71;
 
 // app/lib/timeentry-census.ts
 var TAG38 = "[timeentry-census]";
@@ -24514,8 +24616,8 @@ function startTimeEntryCensus(openSession, opts = {}) {
 }
 
 // app/lib/ledger-census.ts
-import { readdirSync as readdirSync27, readFileSync as readFileSync40, statSync as statSync22 } from "fs";
-import { join as join46 } from "path";
+import { readdirSync as readdirSync27, readFileSync as readFileSync41, statSync as statSync22 } from "fs";
+import { join as join47 } from "path";
 
 // ../lib/ledger-core/dist/reconcile.js
 var LEDGER_INDEX_NAMES = [
@@ -24569,10 +24671,10 @@ function countWriteRejects24h(logDir, now) {
   }
   let total = 0;
   for (const name of entries2) {
-    const path = join46(logDir, name);
+    const path = join47(logDir, name);
     try {
       if (now - statSync22(path).mtimeMs > DAY_MS) continue;
-      for (const line of readFileSync40(path, "utf8").split("\n")) {
+      for (const line of readFileSync41(path, "utf8").split("\n")) {
         if (line.includes("[graph-write] reject")) total += 1;
       }
     } catch {
@@ -25067,8 +25169,8 @@ async function migrateUploads(opts = {}) {
 
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir7, readFile as readFile12, rename as rename5, writeFile as writeFile4, unlink as unlink4 } from "fs/promises";
-import { existsSync as existsSync43 } from "fs";
-import { join as join47 } from "path";
+import { existsSync as existsSync44 } from "fs";
+import { join as join48 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -25097,7 +25199,7 @@ async function writeRaw(path, obj) {
     await rename5(tmp, path);
   } catch (err) {
     try {
-      if (existsSync43(tmp)) await unlink4(tmp);
+      if (existsSync44(tmp)) await unlink4(tmp);
     } catch {
     }
     throw err;
@@ -25113,7 +25215,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join47(projectsRoot, slug.name);
+    const slugDir = join48(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir7(slugDir, { withFileTypes: true });
@@ -25122,9 +25224,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE.test(entry.name)) {
-        out.push(join47(slugDir, entry.name));
+        out.push(join48(slugDir, entry.name));
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join47(slugDir, entry.name);
+        const subDir = join48(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir7(subDir, { withFileTypes: true });
@@ -25132,7 +25234,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join47(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join48(subDir, s.name));
         }
       }
     }
@@ -25144,7 +25246,7 @@ function shortId(path) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join47(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join48(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -25220,8 +25322,8 @@ async function migrateAdminWebchatSidecars(opts = {}) {
 
 // app/lib/migrate-sidecar-account-ids.ts
 import { readdir as readdir8, readFile as readFile13, rename as rename6, writeFile as writeFile5, unlink as unlink5 } from "fs/promises";
-import { existsSync as existsSync44 } from "fs";
-import { join as join48 } from "path";
+import { existsSync as existsSync45 } from "fs";
+import { join as join49 } from "path";
 var SESSION_META_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
 function projectSlugForCwd(cwd) {
   return cwd.replace(/\//g, "-");
@@ -25247,7 +25349,7 @@ async function writeRaw2(path, obj) {
     await rename6(tmp, path);
   } catch (err) {
     try {
-      if (existsSync44(tmp)) await unlink5(tmp);
+      if (existsSync45(tmp)) await unlink5(tmp);
     } catch {
     }
     throw err;
@@ -25267,7 +25369,7 @@ async function collectSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join48(projectsRoot, slug.name);
+    const slugDir = join49(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir8(slugDir, { withFileTypes: true });
@@ -25276,9 +25378,9 @@ async function collectSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE2.test(entry.name)) {
-        out.push({ path: join48(slugDir, entry.name), slug: slug.name });
+        out.push({ path: join49(slugDir, entry.name), slug: slug.name });
       } else if (entry.isDirectory() && (entry.name === "subagents" || entry.name === "archive")) {
-        const subDir = join48(slugDir, entry.name);
+        const subDir = join49(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir8(subDir, { withFileTypes: true });
@@ -25287,7 +25389,7 @@ async function collectSidecars(projectsRoot) {
         }
         for (const s of subs) {
           if (s.isFile() && SESSION_META_RE2.test(s.name)) {
-            out.push({ path: join48(subDir, s.name), slug: slug.name });
+            out.push({ path: join49(subDir, s.name), slug: slug.name });
           }
         }
       }
@@ -25296,7 +25398,7 @@ async function collectSidecars(projectsRoot) {
   return out;
 }
 async function migrateSidecarAccountIds(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join48(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join49(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const accounts = opts.accounts ?? listValidAccounts();
   const result = {
     scanned: 0,
@@ -25609,8 +25711,8 @@ var streamSSE = (c, cb, onError) => {
 
 // app/lib/whatsapp/gateway/routes.ts
 function createWaChannelRoutes(deps) {
-  const app72 = new Hono();
-  app72.get("/wa-channel/inbound", (c) => {
+  const app73 = new Hono();
+  app73.get("/wa-channel/inbound", (c) => {
     const senderId = c.req.query("senderId");
     if (!senderId) return c.json({ error: "senderId required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -25628,7 +25730,7 @@ function createWaChannelRoutes(deps) {
       }
     });
   });
-  app72.post("/wa-channel/reply", async (c) => {
+  app73.post("/wa-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const text = body?.text;
@@ -25649,7 +25751,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
     return c.json({ ok: true });
   });
-  app72.post("/wa-channel/reply-document", async (c) => {
+  app73.post("/wa-channel/reply-document", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const files = body?.files;
@@ -25688,7 +25790,7 @@ function createWaChannelRoutes(deps) {
     }
     return c.json({ ok: true, results });
   });
-  app72.post("/wa-channel/ready", async (c) => {
+  app73.post("/wa-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     if (typeof senderId !== "string") {
@@ -25697,7 +25799,7 @@ function createWaChannelRoutes(deps) {
     deps.onReady?.(senderId);
     return c.json({ ok: true });
   });
-  app72.post("/wa-channel/received", async (c) => {
+  app73.post("/wa-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const waMessageId = body?.waMessageId;
@@ -25707,7 +25809,7 @@ function createWaChannelRoutes(deps) {
     deps.onReceived?.(senderId, waMessageId);
     return c.json({ ok: true });
   });
-  app72.post("/wa-channel/turn-end", async (c) => {
+  app73.post("/wa-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const sessionId = body?.sessionId;
@@ -25751,7 +25853,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=turn-end ${decision} delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app72;
+  return app73;
 }
 
 // app/lib/whatsapp/gateway/wa-gateway.ts
@@ -26181,8 +26283,8 @@ var InboundHub2 = class {
 
 // app/lib/webchat/gateway/routes.ts
 function createWebchatChannelRoutes(deps) {
-  const app72 = new Hono();
-  app72.get("/webchat-channel/inbound", (c) => {
+  const app73 = new Hono();
+  app73.get("/webchat-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     const role = c.req.query("role");
@@ -26207,7 +26309,7 @@ function createWebchatChannelRoutes(deps) {
       }
     });
   });
-  app72.post("/webchat-channel/reply", async (c) => {
+  app73.post("/webchat-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -26217,7 +26319,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReply?.(key, text);
     return c.json({ ok: true });
   });
-  app72.post("/webchat-channel/connector-auth", async (c) => {
+  app73.post("/webchat-channel/connector-auth", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -26230,7 +26332,7 @@ function createWebchatChannelRoutes(deps) {
     const result = await deps.onConnectorAuth({ key, sessionId, name, completed });
     return c.json(result);
   });
-  app72.post("/webchat-channel/ready", async (c) => {
+  app73.post("/webchat-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -26239,7 +26341,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app72.post("/webchat-channel/permission-request", async (c) => {
+  app73.post("/webchat-channel/permission-request", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const requestId = body?.request_id;
@@ -26253,7 +26355,7 @@ function createWebchatChannelRoutes(deps) {
     const verdict = await deps.awaitPermissionVerdict({ key, requestId, toolName, description, inputPreview });
     return c.json(verdict);
   });
-  app72.post("/webchat-channel/received", async (c) => {
+  app73.post("/webchat-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -26263,7 +26365,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app72.post("/webchat-channel/turn-end", async (c) => {
+  app73.post("/webchat-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -26283,7 +26385,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onTurnEnd?.(key, role);
     return c.json({ ok: true });
   });
-  return app72;
+  return app73;
 }
 
 // app/lib/webchat/gateway/webchat-gateway.ts
@@ -27379,8 +27481,8 @@ var InboundHub3 = class {
 
 // app/lib/telegram/gateway/routes.ts
 function createTelegramChannelRoutes(deps) {
-  const app72 = new Hono();
-  app72.get("/tg-channel/inbound", (c) => {
+  const app73 = new Hono();
+  app73.get("/tg-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -27398,7 +27500,7 @@ function createTelegramChannelRoutes(deps) {
       }
     });
   });
-  app72.post("/tg-channel/reply", async (c) => {
+  app73.post("/tg-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -27414,7 +27516,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=reply key=${key} bytes=${Buffer.byteLength(text, "utf8")}`);
     return c.json({ ok: true });
   });
-  app72.post("/tg-channel/ready", async (c) => {
+  app73.post("/tg-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -27423,7 +27525,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app72.post("/tg-channel/received", async (c) => {
+  app73.post("/tg-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -27433,7 +27535,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app72.post("/tg-channel/turn-end", async (c) => {
+  app73.post("/tg-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -27466,7 +27568,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=turn-end key=${key} sessionId=${sid} replied=no delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app72;
+  return app73;
 }
 
 // app/lib/telegram/gateway/telegram-gateway.ts
@@ -28035,14 +28137,14 @@ function resolveScheduledEffectiveAccountForInstall(accountDir, destination) {
 }
 
 // server/lib/booking-site-accounts.ts
-import { existsSync as existsSync45, readFileSync as readFileSync41 } from "fs";
+import { existsSync as existsSync46, readFileSync as readFileSync42 } from "fs";
 import { resolve as resolve40 } from "path";
 function listBookingSiteAccounts(accounts) {
   return accounts.filter((a) => {
     const availPath = resolve40(a.accountDir, "calendar-availability.json");
-    if (!existsSync45(availPath)) return false;
+    if (!existsSync46(availPath)) return false;
     try {
-      const cfg = JSON.parse(readFileSync41(availPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync42(availPath, "utf-8"));
       return typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
     } catch {
       return false;
@@ -28080,7 +28182,7 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash6, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync46, readFileSync as readFileSync42, statSync as statSync23 } from "fs";
+import { existsSync as existsSync47, readFileSync as readFileSync43, statSync as statSync23 } from "fs";
 import { resolve as resolve41 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
@@ -28129,7 +28231,7 @@ function resolveEntitlement(brand, account) {
     return logResolved(implicitTrust(account), null);
   }
   const entitlementPath = resolve41(brand.configDir, "entitlement.json");
-  if (!existsSync46(entitlementPath)) {
+  if (!existsSync47(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
   const stat11 = statSync23(entitlementPath);
@@ -28144,7 +28246,7 @@ function resolveEntitlement(brand, account) {
 function verifyAndResolve(brand, entitlementPath, account) {
   let pubkeyPem;
   try {
-    pubkeyPem = readFileSync42(pubkeyPath(brand), "utf-8");
+    pubkeyPem = readFileSync43(pubkeyPath(brand), "utf-8");
   } catch (err) {
     return logResolved(anonymousFallback("pubkey-missing"), {
       reason: "pubkey-missing"
@@ -28158,7 +28260,7 @@ function verifyAndResolve(brand, entitlementPath, account) {
   }
   let envelope;
   try {
-    envelope = JSON.parse(readFileSync42(entitlementPath, "utf-8"));
+    envelope = JSON.parse(readFileSync43(entitlementPath, "utf-8"));
   } catch {
     return logResolved(anonymousFallback("malformed"), { reason: "malformed" });
   }
@@ -28320,14 +28422,14 @@ function clientFrom(c) {
 }
 installMediaDownloadGuard();
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join49(PLATFORM_ROOT6, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join50(PLATFORM_ROOT6, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
-if (BRAND_JSON_PATH && !existsSync47(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && !existsSync48(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
-if (BRAND_JSON_PATH && existsSync47(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync48(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync43(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync44(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -28359,11 +28461,11 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join49(homedir4(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join50(homedir4(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
-    if (!existsSync47(ALIAS_DOMAINS_PATH)) return null;
-    const parsed = JSON.parse(readFileSync43(ALIAS_DOMAINS_PATH, "utf-8"));
+    if (!existsSync48(ALIAS_DOMAINS_PATH)) return null;
+    const parsed = JSON.parse(readFileSync44(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -28389,7 +28491,7 @@ startManagerEventsSubscriber();
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
-var app71 = new Hono();
+var app72 = new Hono();
 function resolveChannelOverride(accountId, channel, senderId) {
   try {
     const dir = listValidAccounts().find((a) => a.accountId === accountId)?.accountDir;
@@ -28438,7 +28540,7 @@ var waGateway = new WaGateway({
   fetchStandingRules: fetchAccountStandingRules,
   resolveSessionOverride: (accountId, senderId) => resolveChannelOverride(accountId, "whatsapp", senderId),
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve42(process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve42(process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -28453,7 +28555,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, ".."))
+      platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -28566,13 +28668,13 @@ var waGateway = new WaGateway({
     nativeFileFollowers.set(senderId, ac);
   }
 });
-app71.route("/", waGateway.routes());
+app72.route("/", waGateway.routes());
 waGateway.startSweeper();
 function runDuplicateSenderAudit() {
   try {
     const configDir = process.env.CLAUDE_CONFIG_DIR;
     if (!configDir) return;
-    const projectsRoot = join49(configDir, "projects");
+    const projectsRoot = join50(configDir, "projects");
     const records = [];
     for (const { path: jsonlPath, isSubagent, archived } of enumerateJsonls(projectsRoot)) {
       if (isSubagent || archived) continue;
@@ -28696,7 +28798,7 @@ var webchatGateway = new WebchatGateway({
   firePublicSessionEndReview: (input) => firePublicSessionEndReview(input)
 });
 setWebchatGateway(webchatGateway);
-app71.route("/", webchatGateway.routes());
+app72.route("/", webchatGateway.routes());
 webchatGateway.startSweeper();
 webchatGateway.startPublicReaper();
 var telegramFileFollowers = /* @__PURE__ */ new Map();
@@ -28740,7 +28842,7 @@ var telegramGateway = new TelegramGateway({
   }
 });
 setTelegramGateway(telegramGateway);
-app71.route("/", telegramGateway.routes());
+app72.route("/", telegramGateway.routes());
 telegramGateway.startSweeper();
 var chatRoutes = createChatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
@@ -28774,19 +28876,19 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
   // and why the real dependencies are bound there rather than assembled here.
   effectiveAccountFor: resolveScheduledEffectiveAccountForInstall
 });
-app71.route("/api/channel/schedule-inject", scheduleInjectRoutes);
-app71.use("*", clientIpMiddleware);
+app72.route("/api/channel/schedule-inject", scheduleInjectRoutes);
+app72.use("*", clientIpMiddleware);
 function allowsSameOriginFraming(path) {
   return path === "/vnc-viewer.html" || path.startsWith("/api/admin/attachment/") || path.startsWith("/api/public-reader/attachment/") || path === "/api/admin/files/download" || path === "/api/admin/session-upload";
 }
-app71.use("*", async (c, next) => {
+app72.use("*", async (c, next) => {
   await next();
   c.header("X-Content-Type-Options", "nosniff");
   c.header("Referrer-Policy", "strict-origin-when-cross-origin");
   c.header("X-Frame-Options", allowsSameOriginFraming(c.req.path) ? "SAMEORIGIN" : "DENY");
 });
 var HTTP_LOG_PATHS = /* @__PURE__ */ new Set(["/vnc-viewer.html", "/vnc-popout.html"]);
-app71.use("*", async (c, next) => {
+app72.use("*", async (c, next) => {
   if (!HTTP_LOG_PATHS.has(c.req.path)) {
     await next();
     return;
@@ -28804,7 +28906,7 @@ app71.use("*", async (c, next) => {
     });
   }
 });
-app71.use("*", async (c, next) => {
+app72.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains()) || !isPublicHost(host)) {
     await next();
@@ -28842,7 +28944,7 @@ function resolveRemoteAuthOpts(c) {
   return { ...brandLoginOpts, origin };
 }
 var MAX_LOGIN_BODY = 8 * 1024;
-app71.post("/__remote-auth/login", async (c) => {
+app72.post("/__remote-auth/login", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   if (!requestIsTlsTerminated(c)) {
@@ -28887,7 +28989,7 @@ app71.post("/__remote-auth/login", async (c) => {
     }
   });
 });
-app71.get("/__remote-auth/logout", (c) => {
+app72.get("/__remote-auth/logout", (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   console.error(`[remote-auth] logout ip=${clientIp}`);
@@ -28900,7 +29002,7 @@ app71.get("/__remote-auth/logout", (c) => {
     }
   });
 });
-app71.post("/__remote-auth/change-password", async (c) => {
+app72.post("/__remote-auth/change-password", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   const rateLimited = checkRateLimit(client);
@@ -28959,13 +29061,13 @@ app71.post("/__remote-auth/change-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "change", changeError: "Failed to save password", redirect }), 200);
   }
 });
-app71.get("/__remote-auth/setup", (c) => {
+app72.get("/__remote-auth/setup", (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup" }), 200);
 });
-app71.post("/__remote-auth/set-initial-password", async (c) => {
+app72.post("/__remote-auth/set-initial-password", async (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
@@ -29003,10 +29105,10 @@ app71.post("/__remote-auth/set-initial-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup", setupError: "Failed to save password. Please try again." }), 200);
   }
 });
-app71.get("/api/remote-auth/status", (c) => {
+app72.get("/api/remote-auth/status", (c) => {
   return c.json({ configured: isRemoteAuthConfigured() });
 });
-app71.post("/api/remote-auth/set-password", async (c) => {
+app72.post("/api/remote-auth/set-password", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -29045,10 +29147,10 @@ app71.post("/api/remote-auth/set-password", async (c) => {
     return c.json({ error: "Failed to save password" }, 500);
   }
 });
-app71.route("/api/_client-error", client_error_default);
+app72.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
 var PWA_PUBLIC_PATHS = /* @__PURE__ */ new Set(["/sw.js", ...PWA_SURFACES.map((s) => s.manifestPath)]);
-app71.use("*", async (c, next) => {
+app72.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path = c.req.path;
   if (path === "/favicon.ico" || path.startsWith("/assets/") || path.startsWith("/brand/") || // Public free/busy is read by the booking page (a separate Cloudflare Pages
@@ -29092,30 +29194,30 @@ app71.use("*", async (c, next) => {
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), redirect: path }), 200);
 });
-app71.route("/api/health", health_default);
-app71.route("/api/chat", chatRoutes);
-app71.route("/api/whatsapp", whatsapp_default);
-app71.route("/api/storage", storage_broker_default);
-app71.route("/api/whatsapp-reader", whatsapp_reader_default);
-app71.route("/api/session-reader", session_reader_default);
-app71.route("/api/operator-conversations", operator_conversations_default);
-app71.route("/api/public-reader", public_reader_default);
-app71.route("/api/webchat", createWebchatRoutes({
+app72.route("/api/health", health_default);
+app72.route("/api/chat", chatRoutes);
+app72.route("/api/whatsapp", whatsapp_default);
+app72.route("/api/storage", storage_broker_default);
+app72.route("/api/whatsapp-reader", whatsapp_reader_default);
+app72.route("/api/session-reader", session_reader_default);
+app72.route("/api/operator-conversations", operator_conversations_default);
+app72.route("/api/public-reader", public_reader_default);
+app72.route("/api/webchat", createWebchatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
   // Task 940 — the permission relay's pointer read + verdict write.
   pendingPromptFor: (key) => webchatGateway.pendingPromptFor(key),
   deliveryFailureFor: (key) => webchatGateway.deliveryFailureFor(key),
   resolvePermissionVerdict: (key, requestId, behavior) => webchatGateway.resolvePermissionVerdict(key, requestId, behavior)
 }));
-app71.route("/api/webchat/greeting", webchat_greeting_default);
-app71.route("/api/telegram", telegram_default);
-app71.route("/api/quickbooks", quickbooks_default);
-app71.route("/api/onboarding", onboarding_default);
-app71.route("/api/admin", admin_default);
-app71.route("/api/access", access_default);
-app71.route("/api/session", session_default2);
-app71.route("/api/calendar", calendar_public_default);
-app71.route("/api/portal", portal_fetch_default);
+app72.route("/api/webchat/greeting", webchat_greeting_default);
+app72.route("/api/telegram", telegram_default);
+app72.route("/api/quickbooks", quickbooks_default);
+app72.route("/api/onboarding", onboarding_default);
+app72.route("/api/admin", admin_default);
+app72.route("/api/access", access_default);
+app72.route("/api/session", session_default2);
+app72.route("/api/calendar", calendar_public_default);
+app72.route("/api/portal", portal_fetch_default);
 var SAFE_SLUG_RE2 = /^[a-z][a-z0-9-]{2,49}$/;
 var SAFE_FILENAME_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var IMAGE_MIME = {
@@ -29127,7 +29229,7 @@ var IMAGE_MIME = {
   ".svg": "image/svg+xml",
   ".ico": "image/x-icon"
 };
-app71.get("/agent-assets/:slug/:filename", (c) => {
+app72.get("/agent-assets/:slug/:filename", (c) => {
   const slug = c.req.param("slug");
   const filename = c.req.param("filename");
   if (!SAFE_SLUG_RE2.test(slug)) {
@@ -29149,20 +29251,20 @@ app71.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync47(filePath)) {
+  if (!existsSync48(filePath)) {
     console.error(`[agent-assets] serve slug=${slug} file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync43(filePath);
+  const body = readFileSync44(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
   });
 });
-app71.get("/generated/:filename", (c) => {
+app72.get("/generated/:filename", (c) => {
   const filename = c.req.param("filename");
   if (!SAFE_FILENAME_RE.test(filename) || filename.includes("..")) {
     console.error(`[generated] serve file=${filename} status=403`);
@@ -29179,29 +29281,29 @@ app71.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync47(filePath)) {
+  if (!existsSync48(filePath)) {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync43(filePath);
+  const body = readFileSync44(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
   });
 });
-app71.route("/sites", sites_default);
-app71.route("/listings", listings_default);
-app71.route("/v", visitor_event_default);
-app71.route("/v", visitor_consent_default);
+app72.route("/sites", sites_default);
+app72.route("/listings", listings_default);
+app72.route("/v", visitor_event_default);
+app72.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
-if (BRAND_JSON_PATH && existsSync47(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync48(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync43(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync44(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -29228,11 +29330,11 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 var brandThemeColor = BRAND.defaultColors?.primary ?? "#000000";
 var brandBackgroundColor = BRAND.defaultColors?.background ?? "#ffffff";
 var brandAppIconsExist = [brandAppIcon192Path, brandAppIcon512Path, brandMaskableIconPath].every(
-  (p) => existsSync47(resolve42(process.cwd(), "public", p.replace(/^\//, "")))
+  (p) => existsSync48(resolve42(process.cwd(), "public", p.replace(/^\//, "")))
 );
 var SW_SOURCE = (() => {
   try {
-    return readFileSync43(resolve42(process.cwd(), "public", "sw.js"), "utf-8");
+    return readFileSync44(resolve42(process.cwd(), "public", "sw.js"), "utf-8");
   } catch {
     return null;
   }
@@ -29240,9 +29342,9 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT6) return "unknown";
-    const versionFile = join49(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
-    if (!existsSync47(versionFile)) return "unknown";
-    const content = readFileSync43(versionFile, "utf-8").trim();
+    const versionFile = join50(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
+    if (!existsSync48(versionFile)) return "unknown";
+    const content = readFileSync44(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -29253,7 +29355,7 @@ var versionScript = `<script>window.__MAXY_VERSION__=${JSON.stringify(INSTALLED_
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync43(resolve42(process.cwd(), "public", file), "utf-8");
+    html = readFileSync44(resolve42(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -29270,13 +29372,13 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir = join49(homedir4(), BRAND.configDir);
+  const configDir = join50(homedir4(), BRAND.configDir);
   try {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join49(configDir, "branding-cache", accountId, `${agentSlug}.json`);
-    if (!existsSync47(cachePath)) return null;
-    return JSON.parse(readFileSync43(cachePath, "utf-8"));
+    const cachePath = join50(configDir, "branding-cache", accountId, `${agentSlug}.json`);
+    if (!existsSync48(cachePath)) return null;
+    return JSON.parse(readFileSync44(cachePath, "utf-8"));
   } catch {
     return null;
   }
@@ -29320,7 +29422,7 @@ function brandedPublicHtml(agentSlug) {
 function agentUnavailableHtml() {
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(BRAND.productName)}</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1.5rem;color:#222"><h1 style="font-size:1.25rem">Agent unavailable</h1><p>This agent isn't available right now. If you reached this page from a saved link, the agent may have been turned off.</p></body></html>`;
 }
-app71.get("/", (c) => {
+app72.get("/", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const klass = classifyHost(host, getOperatorDomains(), isPublicHost);
   if (klass === "operator") {
@@ -29342,12 +29444,12 @@ app71.get("/", (c) => {
   console.log(`[host-class] host=${host} class=admin served=index.html`);
   return c.html(cachedHtml("index.html"));
 });
-app71.get("/public", (c) => {
+app72.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
 });
-app71.get("/public-chat", (c) => {
+app72.get("/public-chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
@@ -29366,12 +29468,12 @@ async function logViewerFetch(c, next) {
     duration_ms: Date.now() - start
   });
 }
-app71.use("/vnc-viewer.html", logViewerFetch);
-app71.use("/vnc-popout.html", logViewerFetch);
-app71.get("/vnc-popout.html", (c) => {
+app72.use("/vnc-viewer.html", logViewerFetch);
+app72.use("/vnc-popout.html", logViewerFetch);
+app72.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync43(resolve42(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync44(resolve42(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -29381,7 +29483,7 @@ app71.get("/vnc-popout.html", (c) => {
   }
   return c.html(html);
 });
-app71.post("/api/vnc/client-event", async (c) => {
+app72.post("/api/vnc/client-event", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -29402,11 +29504,11 @@ app71.post("/api/vnc/client-event", async (c) => {
   });
   return c.json({ ok: true });
 });
-app71.get("/g/:slug", (c) => {
+app72.get("/g/:slug", (c) => {
   return c.html(brandedPublicHtml(resolveDefaultSlug() ?? void 0));
 });
 for (const pwa of PWA_SURFACES) {
-  app71.get(pwa.manifestPath, (c) => {
+  app72.get(pwa.manifestPath, (c) => {
     const manifest = buildManifest(pwa, {
       productName: BRAND.productName,
       appIcon192: brandAppIcon192Path,
@@ -29422,7 +29524,7 @@ for (const pwa of PWA_SURFACES) {
     return c.body(JSON.stringify(manifest));
   });
 }
-app71.get("/sw.js", (c) => {
+app72.get("/sw.js", (c) => {
   if (SW_SOURCE == null) {
     console.error("[pwa] op=sw status=500 reason=sw-source-missing");
     return c.text("Service worker unavailable", 500);
@@ -29431,12 +29533,12 @@ app71.get("/sw.js", (c) => {
   console.log(`[pwa] op=sw status=200 ct=${SW_CONTENT_TYPE}`);
   return c.body(SW_SOURCE);
 });
-app71.get("/graph", (c) => {
+app72.get("/graph", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("graph.html"));
 });
-app71.get("/chat", (c) => {
+app72.get("/chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains())) {
     console.log(`[host-class] host=${host} class=operator served=operator.html`);
@@ -29445,47 +29547,47 @@ app71.get("/chat", (c) => {
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("chat.html"));
 });
-app71.get("/data", (c) => {
+app72.get("/data", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app71.get("/tasks", (c) => {
+app72.get("/tasks", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("tasks.html"));
 });
-app71.get("/activity", (c) => {
+app72.get("/activity", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("activity.html"));
 });
-app71.get("/calendar", (c) => {
+app72.get("/calendar", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("calendar.html"));
 });
-app71.get("/routines", (c) => {
+app72.get("/routines", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("routines.html"));
 });
-app71.get("/skills", (c) => {
+app72.get("/skills", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("skills.html"));
 });
-app71.get("/agents", (c) => {
+app72.get("/agents", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("agents.html"));
 });
-app71.get("/browser", (c) => {
+app72.get("/browser", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("browser.html"));
 });
-app71.get("/:slug", async (c, next) => {
+app72.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN.test(`/${slug}`)) {
     const account = resolveAccount();
@@ -29500,13 +29602,13 @@ app71.get("/:slug", async (c, next) => {
   await next();
 });
 if (brandFaviconPath !== "/favicon.ico") {
-  app71.get("/favicon.ico", (c) => {
+  app72.get("/favicon.ico", (c) => {
     c.header("Cache-Control", "public, max-age=300");
     return c.redirect(brandFaviconPath, 302);
   });
 }
-mountStaticFiles(app71, "./public");
-app71.all("*", (c) => {
+mountStaticFiles(app72, "./public");
+app72.all("*", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path = c.req.path;
   if (isPublicHost(host)) {
@@ -29520,13 +29622,13 @@ app71.all("*", (c) => {
 });
 var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
-var httpServer = serve({ fetch: app71.fetch, port, hostname });
+var httpServer = serve({ fetch: app72.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const reconcileScript = resolve42(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const runReconcile = (ctx) => {
-    if (!existsSync47(reconcileScript)) return;
+    if (!existsSync48(reconcileScript)) return;
     try {
       const child = spawn3(process.execPath, [reconcileScript], {
         env: { ...process.env, PLATFORM_ROOT: reconcilePlatformRoot },
@@ -29546,7 +29648,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     detached: true,
     run: runReconcile
   });
-  const reconcileStatePath = join49(MAXY_DIR, "booking-reconcile-state.json");
+  const reconcileStatePath = join50(MAXY_DIR, "booking-reconcile-state.json");
   registerLoop({
     name: "calendar-reconcile-liveness",
     intervalMs: 6e5,
@@ -29564,7 +29666,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
-  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const dreamSweepScript = resolve42(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
   registerLoop({
     name: "dream-cycle-sweep",
@@ -29572,7 +29674,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     firstRunDelayMs: 3e4,
     detached: true,
     run: (ctx) => {
-      if (!existsSync47(dreamSweepScript)) return;
+      if (!existsSync48(dreamSweepScript)) return;
       try {
         const child = spawn3(process.execPath, [dreamSweepScript], {
           env: { ...process.env, PLATFORM_ROOT: dreamPlatformRoot },
@@ -29588,11 +29690,11 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const outlookScript = resolve42(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
-    if (!existsSync47(outlookScript)) return;
+    if (!existsSync48(outlookScript)) return;
     try {
       const child = spawn3(process.execPath, [outlookScript], {
         env: { ...process.env, PLATFORM_ROOT: outlookPlatformRoot },
@@ -29614,19 +29716,19 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const strandedAccountsDir = resolve42(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
   const STRANDED_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
   const runStrandedAudit = () => {
     try {
-      if (!existsSync47(strandedAccountsDir)) return;
+      if (!existsSync48(strandedAccountsDir)) return;
       const now = Date.now();
       for (const name of readdirSync28(strandedAccountsDir)) {
         if (!STRANDED_UUID_RE.test(name)) continue;
         const pendingPath2 = resolve42(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
-        if (!existsSync47(pendingPath2)) continue;
+        if (!existsSync48(pendingPath2)) continue;
         const ageMs2 = now - statSync24(pendingPath2).mtimeMs;
         if (ageMs2 > STRANDED_AGE_MS) {
           console.error(`[outlook-mcp] devicecode-stranded account=${name} ageSec=${Math.floor(ageMs2 / 1e3)}`);
@@ -29644,7 +29746,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const googleAccountsDir = resolve42(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
@@ -29663,7 +29765,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   const googleAuditScript = resolve42(googleRoot, "plugins/google/mcp/dist/scripts/account-audit.js");
   const GOOGLE_ACCOUNT_AUDIT_INTERVAL_MS = 36e5;
   const runGoogleAccountAudit = (ctx) => {
-    if (!existsSync47(googleAuditScript)) return;
+    if (!existsSync48(googleAuditScript)) return;
     try {
       const child = spawn3(process.execPath, [googleAuditScript], {
         env: { ...process.env, PLATFORM_ROOT: googleRoot },
@@ -29688,7 +29790,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const STORAGE_AUDIT_INTERVAL_MS = 3e5;
   const runStorageAuditSafe = () => runStorageAudit(auditPlatformRoot).catch((err) => {
     console.error(`[storage-audit] error="${err.message}"`);
@@ -29749,7 +29851,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const publishScript = resolve42(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const bookingAccounts = () => {
@@ -29761,7 +29863,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     }
   };
   const spawnPublish = (account, ctx) => {
-    if (!existsSync47(publishScript)) return;
+    if (!existsSync48(publishScript)) return;
     try {
       const child = spawn3(process.execPath, [publishScript], {
         env: {
@@ -29783,8 +29885,8 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     const availPath = resolve42(account.accountDir, "calendar-availability.json");
     let hasBookingSite = false;
     try {
-      if (existsSync47(availPath)) {
-        const cfg = JSON.parse(readFileSync43(availPath, "utf-8"));
+      if (existsSync48(availPath)) {
+        const cfg = JSON.parse(readFileSync44(availPath, "utf-8"));
         hasBookingSite = typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
       }
     } catch {
@@ -29792,9 +29894,9 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     if (!hasBookingSite) return;
     const statePath = resolve42(account.accountDir, "state", "booking-availability", "last-publish.json");
     let lastSuccessAt = null;
-    if (existsSync47(statePath)) {
+    if (existsSync48(statePath)) {
       try {
-        const rec = JSON.parse(readFileSync43(statePath, "utf-8"));
+        const rec = JSON.parse(readFileSync44(statePath, "utf-8"));
         lastSuccessAt = rec.lastSuccessAt ?? null;
       } catch {
         console.error(`[calendar-availability] op=audit accountId=${account.accountId} snapshotAgeMs=na reason=bad-state-file`);
@@ -29826,12 +29928,12 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startTimeEntryCensus(() => getSession());
 startLedgerCensus(() => getSession());
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const auditScript = resolve42(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
   const runConnectorAudit = (ctx) => {
-    if (!existsSync47(auditScript)) return;
+    if (!existsSync48(auditScript)) return;
     try {
       const child = spawn3(process.execPath, [auditScript], {
         env: { ...process.env, PLATFORM_ROOT: auditPlatformRoot, LOG_DIR: auditLogDir },
@@ -29911,7 +30013,7 @@ for (const m of SUBAPP_MANIFEST) {
 }
 try {
   const registered = [];
-  for (const r of app71.routes ?? []) {
+  for (const r of app72.routes ?? []) {
     if (typeof r.path !== "string" || r.path.includes(":") || r.path.includes("*")) continue;
     if (AGENT_SLUG_PATTERN.test(r.path)) {
       registered.push({ method: (r.method ?? "ALL").toUpperCase(), path: r.path });
@@ -29951,11 +30053,11 @@ try {
 var ADMINUSER_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 async function runAdminUserReconcileTick() {
   try {
-    if (!existsSync47(USERS_FILE)) {
+    if (!existsSync48(USERS_FILE)) {
       console.error("[adminuser-self-heal] skip reason=no-users-file");
       return;
     }
-    const usersRaw = readFileSync43(USERS_FILE, "utf-8").trim();
+    const usersRaw = readFileSync44(USERS_FILE, "utf-8").trim();
     if (!usersRaw) {
       console.error("[adminuser-self-heal] skip reason=empty-users-file");
       return;
@@ -30007,8 +30109,8 @@ registerLoop({
 });
 var USERS_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 function countUsersRows() {
-  if (!existsSync47(USERS_FILE)) return 0;
-  const raw = readFileSync43(USERS_FILE, "utf-8").trim();
+  if (!existsSync48(USERS_FILE)) return 0;
+  const raw = readFileSync44(USERS_FILE, "utf-8").trim();
   if (!raw) return 0;
   const users = JSON.parse(raw);
   return users.filter((u) => typeof u.userId === "string").length;
@@ -30142,7 +30244,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..")),
+  platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..")),
   accountConfig: bootAccountConfig,
   // Task 2074 — enrich with the sub-account name and fan out to every open
   // admin SSE stream. Fire-and-forget: the manager's persist path must not