@rubytech/create-sitedesk-code 0.1.519 → 0.1.521

package/payload/server/server.js

@@ -163,7 +163,6 @@ import {
   sendMediaMessage,
   sendPaused,
   sendTextMessage,
-  senderJidFromTelephone,
   sessionScratchpadRoot,
   shouldDispatchInbound,
   shutdown,
@@ -178,7 +177,7 @@ import {
   validateFilePathInAccount,
   waitForConnection,
   warnNonUuidAccount
-} from "./chunk-TIIWMF5G.js";
+} from "./chunk-AZLT4LVO.js";
 import {
   ACCOUNTS_DIR,
   BIN_DIR,
@@ -1719,10 +1718,10 @@ var require_dist5 = __commonJS({
 });
 
 // server/index.ts
-import { readFileSync as readFileSync43, existsSync as existsSync47, watchFile, readdirSync as readdirSync28, statSync as statSync24 } from "fs";
+import { readFileSync as readFileSync44, existsSync as existsSync48, watchFile, readdirSync as readdirSync28, statSync as statSync24 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash7 } from "crypto";
-import { resolve as resolve42, join as join49, basename as basename15 } from "path";
+import { resolve as resolve42, join as join50, basename as basename15 } from "path";
 import { homedir as homedir4 } from "os";
 
 // server/lib/route-cache-watchers.ts
@@ -2288,11 +2287,11 @@ function staticCacheHeaders(root) {
 }
 
 // server/lib/static-mounts.ts
-function mountStaticFiles(app72, root) {
-  app72.use("/*", staticCacheHeaders(root));
-  app72.use("/assets/*", assetsVary);
-  app72.use("/assets/*", serveStatic({ root, precompressed: true }));
-  app72.use("/*", serveStatic({ root }));
+function mountStaticFiles(app73, root) {
+  app73.use("/*", staticCacheHeaders(root));
+  app73.use("/assets/*", assetsVary);
+  app73.use("/assets/*", serveStatic({ root, precompressed: true }));
+  app73.use("/*", serveStatic({ root }));
 }
 var assetsVary = async (c, next) => {
   await next();
@@ -3503,8 +3502,8 @@ function webchatTurnTimeoutMs() {
   return Number(process.env.WEBCHAT_TURN_TIMEOUT_MS ?? String(2 * 6e4));
 }
 function createChatRoutes(deps) {
-  const app72 = new Hono();
-  app72.post("/", async (c) => {
+  const app73 = new Hono();
+  app73.post("/", async (c) => {
     console.log(`[chat-route] entered route=public method=POST`);
     const contentType = c.req.header("content-type") ?? "";
     const account = resolveAccount();
@@ -3776,7 +3775,7 @@ ${result.result.text}` : result.result.text;
       }
     });
   });
-  return app72;
+  return app73;
 }
 
 // app/lib/channel-pty-bridge/admin-session-id.ts
@@ -3810,8 +3809,8 @@ function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
 function createScheduleInjectRoutes(deps) {
-  const app72 = new Hono();
-  app72.post("/", async (c) => {
+  const app73 = new Hono();
+  app73.post("/", async (c) => {
     const env = c.env;
     const remoteAddr = env?.incoming?.socket?.remoteAddress ?? "";
     if (!isLoopbackAddr(remoteAddr)) {
@@ -3912,14 +3911,14 @@ function createScheduleInjectRoutes(deps) {
     console.error(`${TAG5} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
     return c.json({ ok: true }, 200);
   });
-  return app72;
+  return app73;
 }
 
 // server/index.ts
 var import_dist9 = __toESM(require_dist(), 1);
 
 // app/lib/whatsapp/avatar-store.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync3, readdirSync as readdirSync2, statSync as statSync4 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync3, readdirSync as readdirSync2, statSync as statSync4, rmSync } from "fs";
 import { join as join6 } from "path";
 function safeName(jid) {
   if (jid.length === 0 || jid.includes("/") || jid.includes("\\") || jid.includes("..")) {
@@ -3964,30 +3963,41 @@ function writeAvatarAbsent(accountId, jid) {
   const dir = dirFor(accountId);
   const base = join6(dir, safeName(jid));
   mkdirSync2(dir, { recursive: true });
+  rmSync(`${base}.bin`, { force: true });
   const meta = { jid, state: "absent", fetchedAt: (/* @__PURE__ */ new Date()).toISOString() };
   writeFileSync3(`${base}.json`, JSON.stringify(meta));
 }
-function listAvatarJids(accountId) {
+function removeAvatar(accountId, jid) {
+  const base = join6(dirFor(accountId), safeName(jid));
+  rmSync(`${base}.bin`, { force: true });
+  rmSync(`${base}.json`, { force: true });
+}
+function listAvatarEntries(accountId) {
   const dir = dirFor(accountId);
   if (!existsSync3(dir)) return [];
   const out = [];
   for (const f of readdirSync2(dir)) {
     if (!f.endsWith(".json")) continue;
     const meta = readMeta(join6(dir, f));
-    if (meta?.jid) out.push(meta.jid);
+    if (!meta?.jid) continue;
+    let bytes = 0;
+    if (meta.state === "present") {
+      try {
+        bytes = statSync4(join6(dir, `${f.slice(0, -".json".length)}.bin`)).size;
+      } catch {
+        bytes = 0;
+      }
+    }
+    out.push({ jid: meta.jid, state: meta.state, bytes, fetchedAt: meta.fetchedAt });
   }
   return out;
 }
+function listAvatarJids(accountId) {
+  return listAvatarEntries(accountId).map((e) => e.jid);
+}
 function avatarCensus(accountId) {
-  const dir = dirFor(accountId);
-  if (!existsSync3(dir)) return { entries: 0, bytes: 0 };
-  let entries2 = 0;
-  let bytes = 0;
-  for (const f of readdirSync2(dir)) {
-    if (f.endsWith(".json")) entries2++;
-    else if (f.endsWith(".bin")) bytes += statSync4(join6(dir, f)).size;
-  }
-  return { entries: entries2, bytes };
+  const entries2 = listAvatarEntries(accountId);
+  return { entries: entries2.length, bytes: entries2.reduce((n, e) => n + e.bytes, 0) };
 }
 
 // app/lib/whatsapp/avatar-fetch.ts
@@ -4007,7 +4017,7 @@ async function defaultHttpGet(url) {
   }
 }
 async function defaultResolve(accountId) {
-  const { resolveSocket: resolveSocket2 } = await import("./manager-B6OFOXSW.js");
+  const { resolveSocket: resolveSocket2 } = await import("./manager-CQBSUJXR.js");
   return resolveSocket2(accountId);
 }
 async function fetchAvatar(accountId, jid, deps = {}) {
@@ -4055,25 +4065,66 @@ async function fetchAvatar(accountId, jid, deps = {}) {
 // app/lib/whatsapp/avatar-sweep.ts
 var TAG7 = "[wa-avatar]";
 var CENSUS_TAG = "[wa-avatar-census]";
+var AVATAR_STORE_MAX_BYTES = 16 * 1024 * 1024;
 function liveJidsForAccount(accountId) {
   const live = /* @__PURE__ */ new Set();
   for (const [remoteJid, records] of readAllConversations(accountId)) {
-    live.add(remoteJid);
-    for (const r of records) {
-      if (r.fromMe) continue;
-      const jid = senderJidFromTelephone(r.senderTelephone);
-      if (jid) live.add(jid);
-    }
+    for (const jid of avatarJidsForConversation(remoteJid, records)) live.add(jid);
   }
   return live;
 }
+function avatarJidsForConversation(remoteJid, records) {
+  const jids = /* @__PURE__ */ new Set([remoteJid]);
+  if (!isGroupJid(remoteJid)) return jids;
+  for (const r of records) {
+    if (r.fromMe) continue;
+    if (r.senderJid && isUserJid(r.senderJid)) jids.add(r.senderJid);
+  }
+  return jids;
+}
+function evictAvatars(accountId, live) {
+  let unreferenced = 0;
+  let overBound = 0;
+  let freedBytes = 0;
+  const kept = [];
+  for (const e of listAvatarEntries(accountId)) {
+    if (live.has(e.jid)) {
+      kept.push(e);
+      continue;
+    }
+    removeAvatar(accountId, e.jid);
+    unreferenced++;
+    freedBytes += e.bytes;
+  }
+  let bytes = kept.reduce((n, e) => n + e.bytes, 0);
+  if (bytes > AVATAR_STORE_MAX_BYTES) {
+    const oldestFirst = kept.filter((e) => e.state === "present").sort((a, b) => a.fetchedAt.localeCompare(b.fetchedAt));
+    for (const e of oldestFirst) {
+      if (bytes <= AVATAR_STORE_MAX_BYTES) break;
+      removeAvatar(accountId, e.jid);
+      overBound++;
+      freedBytes += e.bytes;
+      bytes -= e.bytes;
+    }
+  }
+  return { unreferenced, overBound, freedBytes };
+}
 async function sweepAvatars() {
   const started2 = Date.now();
   let jids = 0;
   let refetched = 0;
   let skipped = 0;
   let failed = 0;
+  let evicted = 0;
   for (const accountId of listStoredAccountIds()) {
+    const live = liveJidsForAccount(accountId);
+    const ev = evictAvatars(accountId, live);
+    evicted += ev.unreferenced + ev.overBound;
+    if (ev.unreferenced > 0 || ev.overBound > 0) {
+      console.log(
+        `${TAG7} op=evict account=${accountId.slice(0, 8)} unreferenced=${ev.unreferenced} overBound=${ev.overBound} freedBytes=${ev.freedBytes}`
+      );
+    }
     const cached3 = listAvatarJids(accountId);
     for (const jid of cached3) {
       jids++;
@@ -4089,11 +4140,10 @@ async function sweepAvatars() {
       else if (outcome === "failed") failed++;
       else skipped++;
     }
-    const live = liveJidsForAccount(accountId);
     const census = avatarCensus(accountId);
     console.log(`${CENSUS_TAG} account=${accountId.slice(0, 8)} entries=${census.entries} bytes=${census.bytes} live=${live.size}`);
   }
-  const note = `jids=${jids} refetched=${refetched} skipped=${skipped} failed=${failed} ms=${Date.now() - started2}`;
+  const note = `jids=${jids} refetched=${refetched} skipped=${skipped} failed=${failed} evicted=${evicted} ms=${Date.now() - started2}`;
   console.log(`${TAG7} op=sweep ${note}`);
   return note;
 }
@@ -4104,7 +4154,9 @@ var OFFENDER_CAP = 10;
 function auditGroupOutbound() {
   let convos = 0;
   let outbound = 0;
-  let unmarked = 0;
+  let operator = 0;
+  let agent = 0;
+  let unstamped = 0;
   const offenders = [];
   for (const accountId of listStoredAccountIds()) {
     for (const [remoteJid, records] of readAllConversations(accountId)) {
@@ -4113,18 +4165,20 @@ function auditGroupOutbound() {
       for (const r of records) {
         if (!r.fromMe) continue;
         outbound++;
-        if (r.origin === "operator-manual") continue;
-        unmarked++;
-        if (offenders.length < OFFENDER_CAP) offenders.push(r.msgKeyId);
+        if (r.origin === "operator-manual") operator++;
+        else if (r.origin === "agent") {
+          agent++;
+          if (offenders.length < OFFENDER_CAP) offenders.push(r.msgKeyId);
+        } else unstamped++;
       }
     }
   }
-  return { convos, outbound, unmarked, offenders };
+  return { convos, outbound, operator, agent, unstamped, offenders };
 }
 function auditGroupOutboundNote() {
   const a = auditGroupOutbound();
-  const tail = a.unmarked > 0 ? ` offenders=${a.offenders.join(",")}` : "";
-  const note = `convos=${a.convos} outbound=${a.outbound} unmarked=${a.unmarked}${tail}`;
+  const tail = a.agent > 0 ? ` offenders=${a.offenders.join(",")}` : "";
+  const note = `convos=${a.convos} outbound=${a.outbound} operator=${a.operator} agent=${a.agent} unstamped=${a.unstamped}${tail}`;
   console.log(`${TAG8} op=group-outbound-audit ${note}`);
   return note;
 }
@@ -5868,6 +5922,7 @@ app2.post("/reply", async (c) => {
         quotedId: null,
         quotedSender: null,
         scope: template.scope,
+        origin: "agent",
         createdAt: nowIso
       };
       appendMessage(storeKey, rec);
@@ -6813,7 +6868,51 @@ function countConfigAbsent(platformRoot5, present) {
     return 0;
   }
 }
-function discoverPortalAccounts(accountsDir) {
+var SAFE_AUDIT_ACCOUNT_ID = /^[a-z0-9-]+$/;
+function auditAccountClause(portal) {
+  if (portal.storageModel !== "shared") {
+    return { manifestWhere: "", directoryWhere: "", objectPrefix: void 0 };
+  }
+  if (!SAFE_AUDIT_ACCOUNT_ID.test(portal.accountId)) {
+    throw new Error(
+      `storage-broker: refusing to audit unsafe accountId "${portal.accountId}"`
+    );
+  }
+  return {
+    manifestWhere: ` WHERE accountId = '${portal.accountId}'`,
+    directoryWhere: ` WHERE d.accountId = '${portal.accountId}'`,
+    objectPrefix: `${portal.accountId}/`
+  };
+}
+function readSharedStoreNames(platformRootDir) {
+  let raw;
+  try {
+    raw = readFileSync8(join10(platformRootDir, "config", "cloudflare-house.env"), "utf-8");
+  } catch {
+    return null;
+  }
+  const env = {};
+  for (const line of raw.split("\n")) {
+    const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
+    if (m) env[m[1]] = m[2].trim();
+  }
+  const dbName = env.DATA_PORTAL_DB_NAME;
+  const bucket = env.DATA_PORTAL_BUCKET;
+  return dbName && bucket ? { dbName, bucket } : null;
+}
+function resolveStorageModel(cfg, shared, onDisagree) {
+  const labelled = cfg.storageModel === "shared" ? "shared" : "dedicated";
+  if (!shared) return labelled;
+  const namesShared = cfg.portalDbName === shared.dbName || cfg.bucketName === shared.bucket;
+  const derived = namesShared ? "shared" : "dedicated";
+  if (derived !== labelled && onDisagree) {
+    onDisagree(
+      `[storage-broker] op=storage-model result=overridden labelled=${labelled} derived=${derived} db=${cfg.portalDbName} bucket=${cfg.bucketName}`
+    );
+  }
+  return derived;
+}
+function discoverPortalAccounts(accountsDir, shared = null) {
   if (!existsSync6(accountsDir)) return [];
   const found = [];
   for (const accountId of readdirSync5(accountsDir)) {
@@ -6822,7 +6921,20 @@ function discoverPortalAccounts(accountsDir) {
     try {
       const cfg = JSON.parse(readFileSync8(configPath2, "utf-8"));
       if (typeof cfg.portalDbName === "string" && cfg.portalDbName.length > 0 && typeof cfg.bucketName === "string" && cfg.bucketName.length > 0) {
-        found.push({ accountId, portalDbName: cfg.portalDbName, bucketName: cfg.bucketName });
+        found.push({
+          accountId,
+          portalDbName: cfg.portalDbName,
+          bucketName: cfg.bucketName,
+          storageModel: resolveStorageModel(
+            {
+              portalDbName: cfg.portalDbName,
+              bucketName: cfg.bucketName,
+              storageModel: cfg.storageModel
+            },
+            shared,
+            (line) => console.error(`${line} account=${accountId}`)
+          )
+        });
       }
     } catch {
     }
@@ -6830,7 +6942,10 @@ function discoverPortalAccounts(accountsDir) {
   return found;
 }
 async function runDataPortalAudit(root) {
-  const portals = discoverPortalAccounts(resolve7(root, "..", "data", "accounts"));
+  const portals = discoverPortalAccounts(
+    resolve7(root, "..", "data", "accounts"),
+    readSharedStoreNames(root)
+  );
   const configAbsent = countConfigAbsent(root, portals);
   if (portals.length === 0) {
     if (configAbsent > 0) {
@@ -6841,13 +6956,14 @@ async function runDataPortalAudit(root) {
   const cf = await makeHouseCfExec(root);
   let degraded = 0;
   for (const portal of portals) {
+    const scope = auditAccountClause(portal);
     let rows = null;
     let d1Error = null;
     try {
       rows = parseManifestRows(
         await cf.d1Query(
           portal.portalDbName,
-          "SELECT objectKey, ingested, uploadedAt, devicePath, deleted FROM manifest"
+          "SELECT objectKey, ingested, uploadedAt, devicePath, deleted FROM manifest" + scope.manifestWhere
         )
       );
     } catch (err) {
@@ -6857,7 +6973,7 @@ async function runDataPortalAudit(root) {
     try {
       const published = await cf.d1Query(
         portal.portalDbName,
-        "SELECT d.relPath AS relPath FROM directory d JOIN directory_state s ON s.accountId = d.accountId AND s.currentGeneration = d.generation"
+        "SELECT d.relPath AS relPath FROM directory d JOIN directory_state s ON s.accountId = d.accountId AND s.currentGeneration = d.generation" + scope.directoryWhere
       );
       const envelope = Array.isArray(published) ? published[0] : null;
       const results = envelope?.results;
@@ -6872,7 +6988,7 @@ async function runDataPortalAudit(root) {
     let objects = null;
     let r2Error = null;
     try {
-      objects = await cf.r2ObjectList(portal.bucketName);
+      objects = await cf.r2ObjectList(portal.bucketName, scope.objectPrefix);
     } catch (err) {
       r2Error = err.message;
     }
@@ -7157,7 +7273,17 @@ function exposedOrOwnUploads(segments, exposed, ownerId) {
   if (exposed.includes(segments[0])) return true;
   return segments.length > 2 && segments[0] === "uploads" && segments[1] === ownerId;
 }
-var PENDING_SELECT = "SELECT fileId, ownerId, filename, objectKey, size, targetPath, devicePath, deleted FROM manifest WHERE ingested = 0 OR deleted = 1";
+var PENDING_COLUMNS = "SELECT fileId, ownerId, filename, objectKey, size, targetPath, devicePath, deleted FROM manifest WHERE (ingested = 0 OR deleted = 1)";
+var SAFE_ACCOUNT_ID = /^[a-z0-9-]+$/;
+function pendingSelect(portal) {
+  if (portal.storageModel !== "shared") return PENDING_COLUMNS;
+  if (!SAFE_ACCOUNT_ID.test(portal.accountId)) {
+    throw new Error(
+      `portal-uploads-pull: refusing to build a query for unsafe accountId "${portal.accountId}"`
+    );
+  }
+  return `${PENDING_COLUMNS} AND accountId = '${portal.accountId}'`;
+}
 function parsePendingRows(raw) {
   const envelope = Array.isArray(raw) ? raw[0] : null;
   const results = envelope?.results;
@@ -7208,7 +7334,7 @@ async function readExposedDirs(accountDir) {
 }
 async function runPortalUploadsPull(root) {
   const accountsRoot = resolve8(root, "..", "data", "accounts");
-  const portals = discoverPortalAccounts(accountsRoot);
+  const portals = discoverPortalAccounts(accountsRoot, readSharedStoreNames(root));
   if (portals.length === 0) return "portals=0 pulled=0";
   const cf = await makeHouseCfExec(root);
   let pulledTotal = 0;
@@ -7217,7 +7343,7 @@ async function runPortalUploadsPull(root) {
   for (const portal of portals) {
     try {
       const { rows, malformed } = parsePendingRows(
-        await cf.d1Query(portal.portalDbName, PENDING_SELECT)
+        await cf.d1Query(portal.portalDbName, pendingSelect(portal))
       );
       if (malformed > 0) {
         console.error(`${TAG14} op=malformed account=${portal.accountId} rows=${malformed}`);
@@ -7949,12 +8075,7 @@ function resolveReplyAppendAccount(args) {
   return args.resolve(args.sendAccountId, args.counterpartyPhone) || args.sendAccountId;
 }
 function warmConversationAvatars(accountId, remoteJid, records) {
-  const jids = /* @__PURE__ */ new Set([remoteJid]);
-  for (const r of records) {
-    if (r.fromMe) continue;
-    const jid = senderJidFromTelephone(r.senderTelephone);
-    if (jid) jids.add(jid);
-  }
+  const jids = avatarJidsForConversation(remoteJid, records);
   console.log(`[wa-avatar] op=request account=${accountId.slice(0, 8)} convo=${remoteJid.slice(0, 12)} jids=${jids.size} reason=reader-open`);
   for (const jid of jids) {
     void fetchAvatar(accountId, jid).catch((e) => {
@@ -8025,6 +8146,10 @@ app4.get("/store-stream", requireAdminSession, (c) => {
       // Task 2081 — the group transcript's per-sender colour key. Stable across a
       // display-name change, which `senderName` is not.
       senderTelephone: r.senderTelephone,
+      // Task 2096 — the sender's wire JID, for the per-bubble avatar. Omitted
+      // rather than sent null when the record has none, so the client's own
+      // presence check is the whole test. Pre-2096 records have none.
+      ...r.senderJid ? { senderJid: r.senderJid } : {},
       origin: r.origin,
       msgKeyId: r.msgKeyId,
       // Task 1619 — folded inbound reactions for this bubble (omitted when none).
@@ -11009,8 +11134,8 @@ async function reapplyLeversViaManager() {
 var WEBCHAT_SEND_TURN_WINDOW_MS = Number(process.env.WEBCHAT_SEND_TURN_WINDOW_MS ?? String(15e3));
 var sendSeq = 0;
 function createWebchatRoutes(deps) {
-  const app72 = new Hono();
-  app72.post("/send", requireAdminSession, async (c) => {
+  const app73 = new Hono();
+  app73.post("/send", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -11208,7 +11333,7 @@ ${note}` : note;
     if (turnTimer.unref) turnTimer.unref();
     return c.json({ ok: true });
   });
-  app72.post("/interrupt", requireAdminSession, async (c) => {
+  app73.post("/interrupt", requireAdminSession, async (c) => {
     const cacheKey = c.get("cacheKey");
     const requesterUserId = (cacheKey ? getUserIdForSession(cacheKey) : void 0) ?? null;
     const primaryUserId = resolvePrimaryAdminUserId();
@@ -11236,7 +11361,7 @@ ${note}` : note;
     }
     return c.json({ ok: true, stopped: outcome.stopped, intId: outcome.intId, deadChild: outcome.deadChild }, 200);
   });
-  app72.post("/settings", requireAdminSession, async (c) => {
+  app73.post("/settings", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const op = body?.op;
     const value = body?.value;
@@ -11272,7 +11397,7 @@ ${note}` : note;
     console.log(`[webchat:settings] op=${op} outcome=accepted accountId=${account.accountId.slice(0, 8)} value=${value} settingsApplied=${settingsApplied}`);
     return c.json({ ok: true, settingsApplied });
   });
-  app72.get("/session", requireAdminSession, async (c) => {
+  app73.get("/session", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -11345,7 +11470,7 @@ ${note}` : note;
     const indicators = await fetchComposerIndicators(sessionId);
     return c.json({ sessionId, projectDir, source, sizeBytes: jsonlSizeBytes(projectDir, sessionId), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${sessionId}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${sessionId}`) ?? null, ...indicators, ...readLevers(account) });
   });
-  app72.post("/permission-verdict", requireAdminSession, async (c) => {
+  app73.post("/permission-verdict", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const sessionId = body?.sessionId;
     const requestId = body?.request_id;
@@ -11362,7 +11487,7 @@ ${note}` : note;
     const ok = deps.resolvePermissionVerdict?.(`session:${sessionId}`, requestId, behavior) ?? false;
     return c.json({ ok });
   });
-  return app72;
+  return app73;
 }
 
 // server/routes/webchat-greeting.ts
@@ -11656,7 +11781,7 @@ var telegram_default = app10;
 
 // server/routes/quickbooks.ts
 import { join as join28 } from "path";
-import { existsSync as existsSync21, readFileSync as readFileSync23, writeFileSync as writeFileSync9, mkdirSync as mkdirSync4, rmSync, renameSync as renameSync5 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync23, writeFileSync as writeFileSync9, mkdirSync as mkdirSync4, rmSync as rmSync2, renameSync as renameSync5 } from "fs";
 var TAG18 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
@@ -11737,7 +11862,7 @@ async function completeConsent(args) {
     console.error(`${TAG18} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
-    rmSync(claimFile, { force: true });
+    rmSync2(claimFile, { force: true });
   }
 }
 function page(title, detail) {
@@ -13172,7 +13297,7 @@ var session_upload_default = app19;
 
 // server/routes/admin/agents.ts
 import { resolve as resolve20 } from "path";
-import { readdirSync as readdirSync21, readFileSync as readFileSync28, existsSync as existsSync30, rmSync as rmSync2, renameSync as renameSync9, mkdirSync as mkdirSync6, writeFileSync as writeFileSync12 } from "fs";
+import { readdirSync as readdirSync21, readFileSync as readFileSync28, existsSync as existsSync30, rmSync as rmSync3, renameSync as renameSync9, mkdirSync as mkdirSync6, writeFileSync as writeFileSync12 } from "fs";
 import { execFileSync as execFileSync6 } from "child_process";
 
 // ../services/claude-session-manager/src/tool-surface.ts
@@ -14065,7 +14190,7 @@ app20.delete("/:slug", async (c) => {
     return c.json({ error: `Graph cleanup failed: ${msg}` }, 500);
   }
   try {
-    rmSync2(agentDir, { recursive: true, force: true });
+    rmSync3(agentDir, { recursive: true, force: true });
     console.log(`[admin/agents] op=delete accountId=${account.accountId.slice(0, 8)} slug=${slug} outcome=ok`);
     return c.json({ ok: true });
   } catch (err) {
@@ -20163,6 +20288,7 @@ function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID7, adm
   const operator = isOperatorHost(host, operatorDomains);
   const resumeId = typeof body.sessionId === "string" && body.sessionId.length > 0 ? body.sessionId : void 0;
   const name = typeof body.name === "string" && body.name.length > 0 ? body.name : void 0;
+  const rawTitle = typeof body.title === "string" ? body.title.trim() : "";
   const webchatBind = resumeId === void 0 || operator;
   const kind = resumeId === void 0 ? "new" : "resume";
   const origin = operator ? "operator" : "admin";
@@ -20193,13 +20319,25 @@ function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID7, adm
     payload.sessionId = resumeId;
     if (name) payload.name = name;
   }
-  return { webchatBind, origin, kind, sessionId, payload, model: pickedModel, effort: pickedEffort, paramsSource };
+  return {
+    webchatBind,
+    origin,
+    kind,
+    sessionId,
+    payload,
+    model: pickedModel,
+    effort: pickedEffort,
+    paramsSource,
+    // Never rides `payload`: the manager's rc-spawn takes no title. The route
+    // applies it through the rename endpoint once the session id exists.
+    title: kind === "new" && webchatBind && rawTitle.length > 0 ? rawTitle : null
+  };
 }
-function shapeWebchatResponse(sessionId, manager) {
+function shapeWebchatResponse(sessionId, manager, titleSource = "none") {
   const outcome = typeof manager?.outcome === "string" ? manager.outcome : "bound";
   const redirected = manager?.redirected === true && typeof manager?.sessionId === "string";
   const landed = redirected ? manager.sessionId : sessionId;
-  return { sessionId: landed, outcome, target: `/chat?session=${landed}` };
+  return { sessionId: landed, outcome, target: `/chat?session=${landed}`, titleSource };
 }
 var app38 = new Hono();
 app38.post("/", requireAdminSession, async (c) => {
@@ -20278,9 +20416,40 @@ app38.post("/", requireAdminSession, async (c) => {
         );
       }
     }
+    let titleSource = "none";
+    if (plan.kind === "new") {
+      if (plan.title === null) {
+        console.log(
+          `[chat-spawn] op=title spawnReqId=${spawnReqId} sessionId=${plan.sessionId} titleLen=0 source=absent outcome=skipped`
+        );
+      } else {
+        try {
+          const tRes = await fetch(`${managerBase("session-rc-spawn:title")}/${plan.sessionId}/rename`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ title: plan.title })
+          });
+          if (tRes.status === 200) {
+            titleSource = "user";
+            console.log(
+              `[chat-spawn] op=title spawnReqId=${spawnReqId} sessionId=${plan.sessionId} titleLen=${plan.title.length} source=modal outcome=applied`
+            );
+          } else {
+            const reason = (await tRes.json().catch(() => ({}))).reason ?? `status-${tRes.status}`;
+            console.error(
+              `[chat-spawn] op=title spawnReqId=${spawnReqId} sessionId=${plan.sessionId} titleLen=${plan.title.length} source=modal outcome=rejected reason=${reason}`
+            );
+          }
+        } catch (err) {
+          console.error(
+            `[chat-spawn] op=title spawnReqId=${spawnReqId} sessionId=${plan.sessionId} titleLen=${plan.title.length} source=modal outcome=failed reason=${err instanceof Error ? err.message : String(err)}`
+          );
+        }
+      }
+    }
     console.log(`[chat-spawn] op=navigate spawnReqId=${spawnReqId} target=${target}`);
     console.log(`[chat-spawn] op=exit spawnReqId=${spawnReqId} outcome=bound`);
-    return c.json(shapeWebchatResponse(plan.sessionId, parsed));
+    return c.json(shapeWebchatResponse(plan.sessionId, parsed, titleSource));
   }
   return c.json(parsed ?? {});
 });
@@ -21877,10 +22046,40 @@ app49.get("/booking-link", requireAdminSession, (c) => {
 });
 var calendar_default = app49;
 
+// server/routes/admin/data-portal.ts
+import { existsSync as existsSync38, readFileSync as readFileSync35 } from "fs";
+import { join as join44 } from "path";
+var app50 = new Hono();
+var PORTAL_FILENAME = "data-portal.json";
+app50.get("/portal-link", requireAdminSession, (c) => {
+  const account = accountDirForSession(c.var.cacheKey);
+  if (!account) {
+    console.error("[data-portal] op=portal-link auth-rejected reason=no-account-for-session accountId=none");
+    return c.json({ error: "no account for session", reason: "no-account-for-session" }, 401);
+  }
+  const id82 = account.accountId.slice(0, 8);
+  try {
+    const path = join44(account.accountDir, PORTAL_FILENAME);
+    if (!existsSync38(path)) {
+      console.log(`[data-portal] op=portal-link accountId=${id82} portalDomain=none source=data-portal-config`);
+      return c.json({ portalDomain: null });
+    }
+    const cfg = JSON.parse(readFileSync35(path, "utf-8"));
+    const portalDomain = typeof cfg.portalDomain === "string" && cfg.portalDomain.trim() ? cfg.portalDomain.trim() : null;
+    console.log(`[data-portal] op=portal-link accountId=${id82} portalDomain=${portalDomain ?? "none"} source=data-portal-config`);
+    return c.json({ portalDomain });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    console.error(`[data-portal] op=portal-link-fail accountId=${id82} err="${message}"`);
+    return c.json({ portalDomain: null });
+  }
+});
+var data_portal_default = app50;
+
 // server/routes/admin/routines.ts
 import cronParser from "cron-parser";
 var { parseExpression } = cronParser;
-var app50 = new Hono();
+var app51 = new Hono();
 var AUTOMATION_WHERE = "(e.recurrence IS NOT NULL OR e.agentChannel IS NOT NULL OR e.actionPlugin IS NOT NULL)";
 var ROUTINE_COLS = `e.eventId AS eventId, e.name AS name, e.eventStatus AS eventStatus,
   e.recurrence AS recurrence, e.nextRun AS nextRun, e.lastTriggered AS lastTriggered,
@@ -21910,7 +22109,7 @@ function mapRoutine(r) {
     lastDispatchAt: g("lastDispatchAt")
   };
 }
-app50.get("/", requireAdminSession, async (c) => {
+app51.get("/", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
     console.error('[admin:routines] op=list auth-rejected reason="no account for session"');
@@ -21936,7 +22135,7 @@ app50.get("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.get("/:eventId", requireAdminSession, async (c) => {
+app51.get("/:eventId", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const eventId = c.req.param("eventId");
@@ -21960,7 +22159,7 @@ app50.get("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.patch("/:eventId", requireAdminSession, async (c) => {
+app51.patch("/:eventId", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
   const eventId = c.req.param("eventId");
@@ -22030,7 +22229,7 @@ app50.patch("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-app50.delete("/:eventId", requireAdminSession, async (c) => {
+app51.delete("/:eventId", requireAdminSession, async (c) => {
   const accountId = getAccountIdForSession(c.var.cacheKey);
   if (!accountId) {
     console.error('[admin:routines] op=delete auth-rejected reason="no account for session"');
@@ -22058,12 +22257,12 @@ app50.delete("/:eventId", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var routines_default = app50;
+var routines_default = app51;
 
 // server/routes/admin/skills.ts
-import { existsSync as existsSync38, readdirSync as readdirSync24, readFileSync as readFileSync35, rmSync as rmSync3 } from "fs";
+import { existsSync as existsSync39, readdirSync as readdirSync24, readFileSync as readFileSync36, rmSync as rmSync4 } from "fs";
 import { resolve as resolve30 } from "path";
-var app51 = new Hono();
+var app52 = new Hono();
 var NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
 function splitSkillMd(text) {
   const m = text.match(/^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/);
@@ -22085,14 +22284,14 @@ function stripQuotes(s) {
   return s;
 }
 function subdirs2(dir) {
-  if (!existsSync38(dir)) return [];
+  if (!existsSync39(dir)) return [];
   try {
     return readdirSync24(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
     return [];
   }
 }
-app51.get("/", requireAdminSession, async (c) => {
+app52.get("/", requireAdminSession, async (c) => {
   const acct = accountDirForSession(c.var.cacheKey);
   if (!acct) {
     console.error('[admin:skills] op=list auth-rejected reason="no account for session"');
@@ -22108,11 +22307,11 @@ app51.get("/", requireAdminSession, async (c) => {
       const skillsDir = resolve30(pluginsDir, plugin, "skills");
       for (const skill of subdirs2(skillsDir)) {
         const skillMd = resolve30(skillsDir, skill, "SKILL.md");
-        if (!existsSync38(skillMd)) continue;
+        if (!existsSync39(skillMd)) continue;
         try {
-          const { frontmatter } = splitSkillMd(readFileSync35(skillMd, "utf-8"));
+          const { frontmatter } = splitSkillMd(readFileSync36(skillMd, "utf-8"));
           const refsDir = resolve30(skillsDir, skill, "references");
-          const refCount = existsSync38(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).length : 0;
+          const refCount = existsSync39(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).length : 0;
           skills.push({ plugin, skill, description: frontmatter.description, refCount });
         } catch (err) {
           console.error(`[admin:skills] op=list-skip plugin=${plugin} skill=${skill} reason="${err instanceof Error ? err.message : String(err)}"`);
@@ -22125,7 +22324,7 @@ app51.get("/", requireAdminSession, async (c) => {
   console.log(`[admin:skills] op=list accountId=${acct.accountId.slice(0, 8)} plugins=${value.pluginCount} skills=${value.skills.length} cache=${state}`);
   return c.json({ skills: value.skills });
 });
-app51.get("/:plugin/:skill", requireAdminSession, async (c) => {
+app52.get("/:plugin/:skill", requireAdminSession, async (c) => {
   const acct = accountDirForSession(c.var.cacheKey);
   if (!acct) return c.json({ error: "Account not found for session" }, 401);
   const plugin = c.req.param("plugin");
@@ -22136,13 +22335,13 @@ app51.get("/:plugin/:skill", requireAdminSession, async (c) => {
   }
   const skillDir = resolve30(acct.accountDir, "plugins", plugin, "skills", skill);
   const skillMd = resolve30(skillDir, "SKILL.md");
-  const found = existsSync38(skillMd);
+  const found = existsSync39(skillMd);
   console.log(`[admin:skills] op=get plugin=${plugin} skill=${skill} found=${found}`);
   if (!found) return c.json({ error: "Skill not found" }, 404);
   try {
-    const { frontmatter, body } = splitSkillMd(readFileSync35(skillMd, "utf-8"));
+    const { frontmatter, body } = splitSkillMd(readFileSync36(skillMd, "utf-8"));
     const refsDir = resolve30(skillDir, "references");
-    const references = existsSync38(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name).sort() : [];
+    const references = existsSync39(refsDir) ? readdirSync24(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name).sort() : [];
     return c.json({ skill: { plugin, skill, frontmatter, body, references } });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
@@ -22150,7 +22349,7 @@ app51.get("/:plugin/:skill", requireAdminSession, async (c) => {
     return c.json({ error: `Skill unavailable: ${message}` }, 503);
   }
 });
-app51.delete("/:plugin/:skill", requireAdminSession, async (c) => {
+app52.delete("/:plugin/:skill", requireAdminSession, async (c) => {
   const acct = accountDirForSession(c.var.cacheKey);
   if (!acct) return c.json({ error: "Account not found for session" }, 401);
   const plugin = c.req.param("plugin");
@@ -22162,15 +22361,15 @@ app51.delete("/:plugin/:skill", requireAdminSession, async (c) => {
   const pluginDir = resolve30(acct.accountDir, "plugins", plugin);
   const skillsDir = resolve30(pluginDir, "skills");
   const skillDir = resolve30(skillsDir, skill);
-  if (!existsSync38(resolve30(skillDir, "SKILL.md"))) {
+  if (!existsSync39(resolve30(skillDir, "SKILL.md"))) {
     console.error(`[admin:skills] op=delete outcome=rejected reason=not-found plugin=${plugin} skill=${skill}`);
     return c.json({ error: "Skill not found" }, 404);
   }
   try {
-    rmSync3(skillDir, { recursive: true, force: true });
+    rmSync4(skillDir, { recursive: true, force: true });
     const pluginDirRemoved = subdirs2(skillsDir).length === 0;
-    if (pluginDirRemoved) rmSync3(pluginDir, { recursive: true, force: true });
-    const skillDirGone = !existsSync38(skillDir);
+    if (pluginDirRemoved) rmSync4(pluginDir, { recursive: true, force: true });
+    const skillDirGone = !existsSync39(skillDir);
     if (!skillDirGone) {
       console.error(`[admin:skills] op=delete plugin=${plugin} skill=${skill} outcome=rejected reason=rm-incomplete skillDirGone=false`);
       return c.json({ error: "Delete did not remove the skill directory" }, 503);
@@ -22183,7 +22382,7 @@ app51.delete("/:plugin/:skill", requireAdminSession, async (c) => {
     return c.json({ error: `Delete failed: ${message}` }, 503);
   }
 });
-var skills_default = app51;
+var skills_default = app52;
 
 // app/lib/time-entry-format.ts
 function secondsBetween(startIso, endIso) {
@@ -22206,8 +22405,8 @@ function toNum(v) {
 var TAG27 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
-var app52 = new Hono();
-app52.get("/", requireAdminSession, async (c) => {
+var app53 = new Hono();
+app53.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -22313,13 +22512,13 @@ async function computeTaskList(accountId) {
     await session.close();
   }
 }
-var tasks_list_default = app52;
+var tasks_list_default = app53;
 
 // server/routes/admin/task-timer-start.ts
 import { randomUUID as randomUUID10 } from "crypto";
 var TAG28 = "[task-timer]";
-var app53 = new Hono();
-app53.post("/", requireAdminSession, async (c) => {
+var app54 = new Hono();
+app54.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22376,13 +22575,13 @@ app53.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_timer_start_default = app53;
+var task_timer_start_default = app54;
 
 // server/routes/admin/task-timer-stop.ts
 import neo4j4 from "neo4j-driver";
 var TAG29 = "[task-timer]";
-var app54 = new Hono();
-app54.post("/", requireAdminSession, async (c) => {
+var app55 = new Hono();
+app55.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22451,12 +22650,12 @@ app54.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_timer_stop_default = app54;
+var task_timer_stop_default = app55;
 
 // server/routes/admin/task-complete.ts
 var TAG30 = "[task-timer]";
-var app55 = new Hono();
-app55.post("/", requireAdminSession, async (c) => {
+var app56 = new Hono();
+app56.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22495,14 +22694,14 @@ app55.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_complete_default = app55;
+var task_complete_default = app56;
 
 // server/routes/admin/task-time-adjust.ts
 import { randomUUID as randomUUID11 } from "crypto";
 import neo4j5 from "neo4j-driver";
 var TAG31 = "[task-time-adjust]";
-var app56 = new Hono();
-app56.post("/", requireAdminSession, async (c) => {
+var app57 = new Hono();
+app57.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22577,10 +22776,10 @@ app56.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_time_adjust_default = app56;
+var task_time_adjust_default = app57;
 
 // app/lib/admin-roster.ts
-import { existsSync as existsSync39, readdirSync as readdirSync25, readFileSync as readFileSync36 } from "fs";
+import { existsSync as existsSync40, readdirSync as readdirSync25, readFileSync as readFileSync37 } from "fs";
 import { resolve as resolve31 } from "path";
 function readHouseAdminUserIds(accountsDir = ACCOUNTS_DIR) {
   let entries2;
@@ -22591,9 +22790,9 @@ function readHouseAdminUserIds(accountsDir = ACCOUNTS_DIR) {
   }
   for (const entry of entries2) {
     const cfgPath = resolve31(accountsDir, entry, "account.json");
-    if (!existsSync39(cfgPath)) continue;
+    if (!existsSync40(cfgPath)) continue;
     try {
-      const cfg = JSON.parse(readFileSync36(cfgPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync37(cfgPath, "utf-8"));
       if (cfg.role !== "house") continue;
       if (!Array.isArray(cfg.admins)) return [];
       return cfg.admins.map(
@@ -22665,8 +22864,8 @@ async function resolveAssignableAdmins(accountId, accountsDir = ACCOUNTS_DIR) {
 
 // server/routes/admin/task-assign.ts
 var TAG32 = "[task-assign]";
-var app57 = new Hono();
-app57.post("/", requireAdminSession, async (c) => {
+var app58 = new Hono();
+app58.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) return c.json({ error: "Account not found for session" }, 401);
@@ -22748,12 +22947,12 @@ app57.post("/", requireAdminSession, async (c) => {
     await session.close();
   }
 });
-var task_assign_default = app57;
+var task_assign_default = app58;
 
 // server/routes/admin/admin-users-list.ts
 var TAG33 = "[admin-users]";
-var app58 = new Hono();
-app58.get("/", requireAdminSession, async (c) => {
+var app59 = new Hono();
+app59.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
@@ -22769,11 +22968,11 @@ app58.get("/", requireAdminSession, async (c) => {
     return c.json({ error: "admin-users-list-failed" }, 500);
   }
 });
-var admin_users_list_default = app58;
+var admin_users_list_default = app59;
 
 // server/routes/admin/activity.ts
 import { readdirSync as readdirSync26 } from "fs";
-var app59 = new Hono();
+var app60 = new Hono();
 var TAG34 = "[activity]";
 function resolveHouseAccountId(accounts) {
   const houses = accounts.filter((a) => a.config.role === "house");
@@ -22795,7 +22994,7 @@ function countAccountDirsOnDisk() {
     return null;
   }
 }
-app59.get("/", requireAdminSession, async (c) => {
+app60.get("/", requireAdminSession, async (c) => {
   const req = requestToken();
   const cacheKey = c.var.cacheKey;
   const caller2 = getAccountIdForSession(cacheKey) ?? null;
@@ -22904,65 +23103,66 @@ app59.get("/", requireAdminSession, async (c) => {
     }
   });
 });
-var activity_default = app59;
+var activity_default = app60;
 
 // server/routes/admin/index.ts
-var app60 = new Hono();
-app60.route("/session", session_default);
-app60.route("/accounts", accounts_default);
-app60.route("/logs", logs_default);
-app60.route("/claude-info", claude_info_default);
-app60.route("/attachment", attachment_default);
-app60.route("/session-upload", session_upload_default);
-app60.route("/agents", agents_default);
-app60.route("/sessions", sessions_default);
-app60.route("/claude-sessions", claude_sessions_default);
-app60.route("/log-ingest", log_ingest_default);
-app60.route("/events", events_default);
-app60.route("/files", files_default);
-app60.route("/graph-search", graph_search_default);
-app60.route("/graph-subgraph", graph_subgraph_default);
-app60.route("/graph-delete", graph_delete_default);
-app60.route("/graph-restore", graph_restore_default);
-app60.route("/graph-labels-in-graph", graph_labels_in_graph_default);
-app60.route("/graph-default-view", graph_default_view_default);
-app60.route("/sidebar-artefacts", sidebar_artefacts_default);
-app60.route("/sidebar-sessions", sidebar_sessions_default);
-app60.route("/session-delete", session_delete_default);
-app60.route("/session-stop", session_stop_default);
-app60.route("/session-archive", session_archive_default);
-app60.route("/session-rename", session_rename_default);
-app60.route("/session-usage", session_usage_default);
-app60.route("/browser", browser_default);
-app60.route("/session-rc-spawn", session_rc_spawn_default);
-app60.route("/session-reseat", session_reseat_default);
-app60.route("/system-stats", system_stats_default);
-app60.route("/health-brand", health_default2);
-app60.route("/linkedin-ingest", linkedin_ingest_default);
-app60.route("/post-turn-context", post_turn_context_default);
-app60.route("/public-session-context", public_session_context_default);
-app60.route("/public-session-exit", public_session_exit_default);
-app60.route("/access-session-evict", access_session_evict_default);
-app60.route("/enrol-person", enrol_person_default);
-app60.route("/calendar", calendar_default);
-app60.route("/routines", routines_default);
-app60.route("/skills", skills_default);
-app60.route("/tasks-list", tasks_list_default);
-app60.route("/task-timer-start", task_timer_start_default);
-app60.route("/task-timer-stop", task_timer_stop_default);
-app60.route("/task-complete", task_complete_default);
-app60.route("/task-time-adjust", task_time_adjust_default);
-app60.route("/task-assign", task_assign_default);
-app60.route("/admin-users-list", admin_users_list_default);
-app60.route("/activity", activity_default);
-var admin_default = app60;
+var app61 = new Hono();
+app61.route("/session", session_default);
+app61.route("/accounts", accounts_default);
+app61.route("/logs", logs_default);
+app61.route("/claude-info", claude_info_default);
+app61.route("/attachment", attachment_default);
+app61.route("/session-upload", session_upload_default);
+app61.route("/agents", agents_default);
+app61.route("/sessions", sessions_default);
+app61.route("/claude-sessions", claude_sessions_default);
+app61.route("/log-ingest", log_ingest_default);
+app61.route("/events", events_default);
+app61.route("/files", files_default);
+app61.route("/graph-search", graph_search_default);
+app61.route("/graph-subgraph", graph_subgraph_default);
+app61.route("/graph-delete", graph_delete_default);
+app61.route("/graph-restore", graph_restore_default);
+app61.route("/graph-labels-in-graph", graph_labels_in_graph_default);
+app61.route("/graph-default-view", graph_default_view_default);
+app61.route("/sidebar-artefacts", sidebar_artefacts_default);
+app61.route("/sidebar-sessions", sidebar_sessions_default);
+app61.route("/session-delete", session_delete_default);
+app61.route("/session-stop", session_stop_default);
+app61.route("/session-archive", session_archive_default);
+app61.route("/session-rename", session_rename_default);
+app61.route("/session-usage", session_usage_default);
+app61.route("/browser", browser_default);
+app61.route("/session-rc-spawn", session_rc_spawn_default);
+app61.route("/session-reseat", session_reseat_default);
+app61.route("/system-stats", system_stats_default);
+app61.route("/health-brand", health_default2);
+app61.route("/linkedin-ingest", linkedin_ingest_default);
+app61.route("/post-turn-context", post_turn_context_default);
+app61.route("/public-session-context", public_session_context_default);
+app61.route("/public-session-exit", public_session_exit_default);
+app61.route("/access-session-evict", access_session_evict_default);
+app61.route("/enrol-person", enrol_person_default);
+app61.route("/calendar", calendar_default);
+app61.route("/data-portal", data_portal_default);
+app61.route("/routines", routines_default);
+app61.route("/skills", skills_default);
+app61.route("/tasks-list", tasks_list_default);
+app61.route("/task-timer-start", task_timer_start_default);
+app61.route("/task-timer-stop", task_timer_stop_default);
+app61.route("/task-complete", task_complete_default);
+app61.route("/task-time-adjust", task_time_adjust_default);
+app61.route("/task-assign", task_assign_default);
+app61.route("/admin-users-list", admin_users_list_default);
+app61.route("/activity", activity_default);
+var admin_default = app61;
 
 // server/routes/access/verify-token.ts
 var TAG35 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
-var app61 = new Hono();
-app61.post("/", async (c) => {
+var app62 = new Hono();
+app62.post("/", async (c) => {
   const ip = c.var.clientIp || "unknown";
   let body;
   try {
@@ -23044,7 +23244,7 @@ app61.post("/", async (c) => {
     displayName: grant.displayName
   });
 });
-var verify_token_default = app61;
+var verify_token_default = app62;
 
 // app/lib/access-email.ts
 import { spawn as spawn2 } from "child_process";
@@ -23107,9 +23307,9 @@ async function sendMagicLinkEmail(payload) {
 
 // server/routes/access/request-magic-link.ts
 var TAG36 = "[access-request-link]";
-var app62 = new Hono();
+var app63 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
-app62.post("/", async (c) => {
+app63.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -23183,16 +23383,16 @@ app62.post("/", async (c) => {
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
-var request_magic_link_default = app62;
+var request_magic_link_default = app63;
 
 // server/routes/access/index.ts
-var app63 = new Hono();
-app63.route("/verify-token", verify_token_default);
-app63.route("/request-magic-link", request_magic_link_default);
-var access_default = app63;
+var app64 = new Hono();
+app64.route("/verify-token", verify_token_default);
+app64.route("/request-magic-link", request_magic_link_default);
+var access_default = app64;
 
 // server/routes/sites.ts
-import { existsSync as existsSync40, readFileSync as readFileSync37, realpathSync as realpathSync8, statSync as statSync21 } from "fs";
+import { existsSync as existsSync41, readFileSync as readFileSync38, realpathSync as realpathSync8, statSync as statSync21 } from "fs";
 import { resolve as resolve33 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
@@ -23224,8 +23424,8 @@ function getExt(p) {
   if (idx < p.lastIndexOf("/")) return "";
   return p.slice(idx).toLowerCase();
 }
-var app64 = new Hono();
-app64.get("/:rel{.*}", (c) => {
+var app65 = new Hono();
+app65.get("/:rel{.*}", (c) => {
   const reqPath = c.req.path;
   const rawRel = c.req.param("rel") ?? "";
   const trimmed = rawRel.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -23258,7 +23458,7 @@ app64.get("/:rel{.*}", (c) => {
   }
   let stat11;
   try {
-    stat11 = existsSync40(filePath) ? statSync21(filePath) : null;
+    stat11 = existsSync41(filePath) ? statSync21(filePath) : null;
   } catch {
     stat11 = null;
   }
@@ -23277,7 +23477,7 @@ app64.get("/:rel{.*}", (c) => {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync40(filePath)) {
+  if (!existsSync41(filePath)) {
     console.error(`[sites] not-found path=${reqPath} status=404`);
     return c.text("Not found", 404);
   }
@@ -23296,7 +23496,7 @@ app64.get("/:rel{.*}", (c) => {
   }
   let body;
   try {
-    body = readFileSync37(realPath);
+    body = readFileSync38(realPath);
   } catch (err) {
     const code = err?.code;
     if (code === "EISDIR") {
@@ -23328,11 +23528,11 @@ app64.get("/:rel{.*}", (c) => {
     "X-Content-Type-Options": "nosniff"
   });
 });
-var sites_default = app64;
+var sites_default = app65;
 
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync38, writeFileSync as writeFileSync14 } from "fs";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync39, writeFileSync as writeFileSync14 } from "fs";
 import { dirname as dirname15 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
@@ -23341,7 +23541,7 @@ var cachedSecret = null;
 function getSecret() {
   if (cachedSecret) return cachedSecret;
   try {
-    const hex2 = readFileSync38(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+    const hex2 = readFileSync39(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
     if (hex2.length === SECRET_BYTES * 2) {
       cachedSecret = Buffer.from(hex2, "hex");
       return cachedSecret;
@@ -23355,7 +23555,7 @@ function getSecret() {
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
   }
-  const hex = readFileSync38(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+  const hex = readFileSync39(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
   cachedSecret = Buffer.from(hex, "hex");
   return cachedSecret;
 }
@@ -23408,8 +23608,8 @@ var VISITOR_COOKIE_NAME = "mxy_v";
 var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
-import { existsSync as existsSync41, readFileSync as readFileSync39 } from "fs";
-import { join as join44 } from "path";
+import { existsSync as existsSync42, readFileSync as readFileSync40 } from "fs";
+import { join as join45 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -23417,10 +23617,10 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot5) return null;
-  const brandPath = join44(platformRoot5, "config", "brand.json");
-  if (!existsSync41(brandPath)) return null;
+  const brandPath = join45(platformRoot5, "config", "brand.json");
+  if (!existsSync42(brandPath)) return null;
   try {
-    cached2 = JSON.parse(readFileSync39(brandPath, "utf-8"));
+    cached2 = JSON.parse(readFileSync40(brandPath, "utf-8"));
     return cached2;
   } catch {
     return null;
@@ -23428,7 +23628,7 @@ function readBrandConfig() {
 }
 
 // server/routes/visitor-consent.ts
-var app65 = new Hono();
+var app66 = new Hono();
 var CONSENT_COOKIE_NAME = "mxy_consent";
 var CONSENT_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
 var DEFAULT_CONSENT_COPY = {
@@ -23473,17 +23673,17 @@ function siteSlugFromReferer(referer) {
     return "";
   }
 }
-app65.options("/consent", (c) => {
+app66.options("/consent", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app65.options("/brand-config", (c) => {
+app66.options("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app65.post("/consent", async (c) => {
+app66.post("/consent", async (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   let raw;
@@ -23523,7 +23723,7 @@ app65.post("/consent", async (c) => {
   console.log(`[consent] ${parsed.decision} site=${site} brand=${brandName} tokenBound=${tokenBound}`);
   return c.body(null, 204);
 });
-app65.get("/brand-config", (c) => {
+app66.get("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   const brand = readBrandConfig();
@@ -23533,7 +23733,7 @@ app65.get("/brand-config", (c) => {
   c.header("Cache-Control", "public, max-age=300");
   return c.json({ consent: { copy, palette } });
 });
-var visitor_consent_default = app65;
+var visitor_consent_default = app66;
 
 // server/routes/listings.ts
 function getCookie(headerValue, name) {
@@ -23560,8 +23760,8 @@ function appendConsentParams(pageUrl, token) {
 }
 var SAFE_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,118}[a-z0-9])?$/;
 var CHAT_SESSION_KEY_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var app66 = new Hono();
-app66.get("/:slug/click", async (c) => {
+var app67 = new Hono();
+app67.get("/:slug/click", async (c) => {
   const slug = c.req.param("slug") ?? "";
   const rawSession = c.req.query("session") ?? "";
   const sessionKey = CHAT_SESSION_KEY_RE.test(rawSession) ? rawSession : "invalid";
@@ -23625,10 +23825,10 @@ app66.get("/:slug/click", async (c) => {
   console.log(`[property-card-click] sessionKey=${sessionKey} listingSlug=${slug} consent=${consentCookie ?? "absent"} ts=${(/* @__PURE__ */ new Date()).toISOString()}`);
   return c.redirect(redirectUrl, 302);
 });
-var listings_default = app66;
+var listings_default = app67;
 
 // server/routes/visitor-event.ts
-var app67 = new Hono();
+var app68 = new Hono();
 var BOT_UA_RE = /\b(bot|crawl|spider|slurp|headlesschrome|phantomjs|googlebot|bingbot|yandex|baiduspider|ahrefsbot|semrushbot|mj12bot|dotbot|petalbot)\b/i;
 var buckets = /* @__PURE__ */ new Map();
 var RATE_LIMIT = 60;
@@ -23704,12 +23904,12 @@ function originAllowed(origin, allowlist) {
     return false;
   }
 }
-app67.options("/event", (c) => {
+app68.options("/event", (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   return c.body(null, 204);
 });
-app67.post("/event", async (c) => {
+app68.post("/event", async (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   const ua = c.req.header("user-agent") ?? "";
@@ -23914,11 +24114,11 @@ async function writeEvent(opts) {
     );
   }
 }
-var visitor_event_default = app67;
+var visitor_event_default = app68;
 
 // server/routes/session.ts
 import { resolve as resolve34 } from "path";
-import { existsSync as existsSync42, writeFileSync as writeFileSync15, mkdirSync as mkdirSync9 } from "fs";
+import { existsSync as existsSync43, writeFileSync as writeFileSync15, mkdirSync as mkdirSync9 } from "fs";
 var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function writeBrandingCache(accountId, agentSlug, branding) {
   try {
@@ -23960,8 +24160,8 @@ function withVisitorCookie(response, visitorId) {
     headers
   });
 }
-var app68 = new Hono();
-app68.post("/", async (c) => {
+var app69 = new Hono();
+app69.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24002,7 +24202,7 @@ app68.post("/", async (c) => {
   let agentConfig = null;
   if (account) {
     const agentDir = resolve34(account.accountDir, "agents", agentSlug);
-    if (!existsSync42(agentDir) || !existsSync42(resolve34(agentDir, "config.json"))) {
+    if (!existsSync43(agentDir) || !existsSync43(resolve34(agentDir, "config.json"))) {
       return c.json({ error: "Agent not found" }, 404);
     }
     agentConfig = resolveAgentConfig(account.accountDir, agentSlug);
@@ -24108,7 +24308,7 @@ app68.post("/", async (c) => {
     newVisitorId
   );
 });
-var session_default2 = app68;
+var session_default2 = app69;
 
 // server/lib/calendar-slots.ts
 var WEEKDAYS = ["sun", "mon", "tue", "wed", "thu", "fri", "sat"];
@@ -24191,17 +24391,17 @@ function computeOpenSlots(config, busy, fromISO, toISO) {
 }
 
 // server/routes/calendar-public.ts
-var app69 = new Hono();
+var app70 = new Hono();
 function setCors(c) {
   c.header("Access-Control-Allow-Origin", "*");
   c.header("Access-Control-Allow-Methods", "GET, OPTIONS");
   c.header("Access-Control-Allow-Headers", "content-type");
 }
-app69.options("/free-busy", (c) => {
+app70.options("/free-busy", (c) => {
   setCors(c);
   return c.body(null, 204);
 });
-app69.get("/free-busy", async (c) => {
+app70.get("/free-busy", async (c) => {
   setCors(c);
   const from = c.req.query("from");
   const to = c.req.query("to");
@@ -24257,14 +24457,14 @@ app69.get("/free-busy", async (c) => {
     await session.close();
   }
 });
-var calendar_public_default = app69;
+var calendar_public_default = app70;
 
 // server/routes/portal-fetch.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat8, readFile as readFile11, realpath } from "fs/promises";
-import { join as join45, resolve as resolve35, sep as sep11 } from "path";
+import { join as join46, resolve as resolve35, sep as sep11 } from "path";
 import { Readable as Readable3 } from "stream";
-var app70 = new Hono();
+var app71 = new Hono();
 var TAG37 = "[portal-fetch]";
 async function verifySignature(secret, accountId, relPath, expiresAtMs, signature, nowMs) {
   if (!secret || !signature) return false;
@@ -24335,7 +24535,7 @@ function isValidAccountId2(value) {
 }
 async function readExposeFolders2(accountDir) {
   try {
-    const cfg = JSON.parse(await readFile11(join45(accountDir, "data-portal.json"), "utf8"));
+    const cfg = JSON.parse(await readFile11(join46(accountDir, "data-portal.json"), "utf8"));
     return Array.isArray(cfg?.exposeFolders) ? cfg.exposeFolders.filter((f) => typeof f === "string") : [];
   } catch {
     return [];
@@ -24344,7 +24544,7 @@ async function readExposeFolders2(accountDir) {
 async function resolveFetchTarget(accountDir, relPath, ownerId) {
   let schemaText = null;
   try {
-    schemaText = await readFile11(join45(accountDir, "SCHEMA.md"), "utf8");
+    schemaText = await readFile11(join46(accountDir, "SCHEMA.md"), "utf8");
   } catch {
     schemaText = null;
   }
@@ -24427,9 +24627,9 @@ async function handle(c, headOnly) {
     }
   });
 }
-app70.get("/fetch", (c) => handle(c, false));
-app70.on("HEAD", "/fetch", (c) => handle(c, true));
-var portal_fetch_default = app70;
+app71.get("/fetch", (c) => handle(c, false));
+app71.on("HEAD", "/fetch", (c) => handle(c, true));
+var portal_fetch_default = app71;
 
 // app/lib/timeentry-census.ts
 var TAG38 = "[timeentry-census]";
@@ -24514,8 +24714,8 @@ function startTimeEntryCensus(openSession, opts = {}) {
 }
 
 // app/lib/ledger-census.ts
-import { readdirSync as readdirSync27, readFileSync as readFileSync40, statSync as statSync22 } from "fs";
-import { join as join46 } from "path";
+import { readdirSync as readdirSync27, readFileSync as readFileSync41, statSync as statSync22 } from "fs";
+import { join as join47 } from "path";
 
 // ../lib/ledger-core/dist/reconcile.js
 var LEDGER_INDEX_NAMES = [
@@ -24569,10 +24769,10 @@ function countWriteRejects24h(logDir, now) {
   }
   let total = 0;
   for (const name of entries2) {
-    const path = join46(logDir, name);
+    const path = join47(logDir, name);
     try {
       if (now - statSync22(path).mtimeMs > DAY_MS) continue;
-      for (const line of readFileSync40(path, "utf8").split("\n")) {
+      for (const line of readFileSync41(path, "utf8").split("\n")) {
         if (line.includes("[graph-write] reject")) total += 1;
       }
     } catch {
@@ -25067,8 +25267,8 @@ async function migrateUploads(opts = {}) {
 
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir7, readFile as readFile12, rename as rename5, writeFile as writeFile4, unlink as unlink4 } from "fs/promises";
-import { existsSync as existsSync43 } from "fs";
-import { join as join47 } from "path";
+import { existsSync as existsSync44 } from "fs";
+import { join as join48 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -25097,7 +25297,7 @@ async function writeRaw(path, obj) {
     await rename5(tmp, path);
   } catch (err) {
     try {
-      if (existsSync43(tmp)) await unlink4(tmp);
+      if (existsSync44(tmp)) await unlink4(tmp);
     } catch {
     }
     throw err;
@@ -25113,7 +25313,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join47(projectsRoot, slug.name);
+    const slugDir = join48(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir7(slugDir, { withFileTypes: true });
@@ -25122,9 +25322,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE.test(entry.name)) {
-        out.push(join47(slugDir, entry.name));
+        out.push(join48(slugDir, entry.name));
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join47(slugDir, entry.name);
+        const subDir = join48(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir7(subDir, { withFileTypes: true });
@@ -25132,7 +25332,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join47(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join48(subDir, s.name));
         }
       }
     }
@@ -25144,7 +25344,7 @@ function shortId(path) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join47(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join48(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -25220,8 +25420,8 @@ async function migrateAdminWebchatSidecars(opts = {}) {
 
 // app/lib/migrate-sidecar-account-ids.ts
 import { readdir as readdir8, readFile as readFile13, rename as rename6, writeFile as writeFile5, unlink as unlink5 } from "fs/promises";
-import { existsSync as existsSync44 } from "fs";
-import { join as join48 } from "path";
+import { existsSync as existsSync45 } from "fs";
+import { join as join49 } from "path";
 var SESSION_META_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
 function projectSlugForCwd(cwd) {
   return cwd.replace(/\//g, "-");
@@ -25247,7 +25447,7 @@ async function writeRaw2(path, obj) {
     await rename6(tmp, path);
   } catch (err) {
     try {
-      if (existsSync44(tmp)) await unlink5(tmp);
+      if (existsSync45(tmp)) await unlink5(tmp);
     } catch {
     }
     throw err;
@@ -25267,7 +25467,7 @@ async function collectSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join48(projectsRoot, slug.name);
+    const slugDir = join49(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir8(slugDir, { withFileTypes: true });
@@ -25276,9 +25476,9 @@ async function collectSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE2.test(entry.name)) {
-        out.push({ path: join48(slugDir, entry.name), slug: slug.name });
+        out.push({ path: join49(slugDir, entry.name), slug: slug.name });
       } else if (entry.isDirectory() && (entry.name === "subagents" || entry.name === "archive")) {
-        const subDir = join48(slugDir, entry.name);
+        const subDir = join49(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir8(subDir, { withFileTypes: true });
@@ -25287,7 +25487,7 @@ async function collectSidecars(projectsRoot) {
         }
         for (const s of subs) {
           if (s.isFile() && SESSION_META_RE2.test(s.name)) {
-            out.push({ path: join48(subDir, s.name), slug: slug.name });
+            out.push({ path: join49(subDir, s.name), slug: slug.name });
           }
         }
       }
@@ -25296,7 +25496,7 @@ async function collectSidecars(projectsRoot) {
   return out;
 }
 async function migrateSidecarAccountIds(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join48(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join49(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const accounts = opts.accounts ?? listValidAccounts();
   const result = {
     scanned: 0,
@@ -25609,8 +25809,8 @@ var streamSSE = (c, cb, onError) => {
 
 // app/lib/whatsapp/gateway/routes.ts
 function createWaChannelRoutes(deps) {
-  const app72 = new Hono();
-  app72.get("/wa-channel/inbound", (c) => {
+  const app73 = new Hono();
+  app73.get("/wa-channel/inbound", (c) => {
     const senderId = c.req.query("senderId");
     if (!senderId) return c.json({ error: "senderId required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -25628,7 +25828,7 @@ function createWaChannelRoutes(deps) {
       }
     });
   });
-  app72.post("/wa-channel/reply", async (c) => {
+  app73.post("/wa-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const text = body?.text;
@@ -25647,9 +25847,10 @@ function createWaChannelRoutes(deps) {
       return c.json({ error: message, terminal }, 500);
     }
     console.error(`[whatsapp-native] op=reply-dispatch senderId=${senderId} bytes=${bytes}`);
+    deps.onReplyDispatch?.(senderId, Date.now());
     return c.json({ ok: true });
   });
-  app72.post("/wa-channel/reply-document", async (c) => {
+  app73.post("/wa-channel/reply-document", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const files = body?.files;
@@ -25688,7 +25889,7 @@ function createWaChannelRoutes(deps) {
     }
     return c.json({ ok: true, results });
   });
-  app72.post("/wa-channel/ready", async (c) => {
+  app73.post("/wa-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     if (typeof senderId !== "string") {
@@ -25697,7 +25898,7 @@ function createWaChannelRoutes(deps) {
     deps.onReady?.(senderId);
     return c.json({ ok: true });
   });
-  app72.post("/wa-channel/received", async (c) => {
+  app73.post("/wa-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const waMessageId = body?.waMessageId;
@@ -25707,7 +25908,7 @@ function createWaChannelRoutes(deps) {
     deps.onReceived?.(senderId, waMessageId);
     return c.json({ ok: true });
   });
-  app72.post("/wa-channel/turn-end", async (c) => {
+  app73.post("/wa-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const sessionId = body?.sessionId;
@@ -25721,9 +25922,10 @@ function createWaChannelRoutes(deps) {
     const finalBytes = num(body?.finalBytes);
     const queueDepth = num(body?.queueDepth);
     const pendingTurns = num(body?.pendingTurns);
+    const consumed2 = num(body?.consumed);
     const sid = sessionId.slice(0, 8);
     const deliver = interactive && !replied && finalText.trim().length > 0;
-    const decision = `sessionId=${sid} replied=${replied ? "yes" : "no"} interactive=${interactive ? "yes" : "no"} finalBytes=${finalBytes} queueDepth=${queueDepth} pendingTurns=${pendingTurns}`;
+    const decision = `sessionId=${sid} replied=${replied ? "yes" : "no"} interactive=${interactive ? "yes" : "no"} finalBytes=${finalBytes} queueDepth=${queueDepth} pendingTurns=${pendingTurns} consumed=${consumed2}`;
     if (!replied && finalBytes > 0 && !deliver) {
       const op = interactive ? "turn-answer-dropped" : "turn-answer-withheld";
       console.error(
@@ -25742,6 +25944,7 @@ function createWaChannelRoutes(deps) {
         return c.json({ ok: true, delivered: "undelivered" });
       }
       console.error(`[whatsapp-native] op=turn-end ${decision} delivered=fallback bytes=${bytes}`);
+      deps.onReplyDispatch?.(senderId, Date.now());
       return c.json({ ok: true, delivered: "fallback" });
     }
     if (replied) {
@@ -25751,13 +25954,14 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=turn-end ${decision} delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app72;
+  return app73;
 }
 
 // app/lib/whatsapp/gateway/wa-gateway.ts
 var QUEUED_THRESHOLD_MS = 3e4;
 var ACK_THRESHOLD_MS = 3e4;
 var SWEEP_INTERVAL_MS = 15e3;
+var MEDIA_STANZA_STALE_MS = 12e4;
 var WaGateway = class {
   constructor(deps) {
     this.deps = deps;
@@ -25772,6 +25976,66 @@ var WaGateway = class {
   docContexts = /* @__PURE__ */ new Map();
   spawning = /* @__PURE__ */ new Set();
   seq = 0;
+  // Task 2110 — senderId -> the arrival ms of every still-unemitted non-audio
+  // media stanza for that sender, oldest first. This is the race window: a reply
+  // dispatched while the list is non-empty was composed by a turn that could not
+  // yet see an incoming file, and the window is measured from the OLDEST entry.
+  //
+  // One entry per stanza, not one per sender. Downloads finish out of order and
+  // the debouncer flushes whatever has landed, so a small file can be emitted
+  // while a large one is still downloading. Holding a single timestamp meant that
+  // first inbound closed the window and the still-blind replies that followed
+  // were never counted, with the census reading zero throughout.
+  pendingMediaStanza = /* @__PURE__ */ new Map();
+  // Counters for the per-sweep census, reset on every print.
+  mediaRaces = 0;
+  mediaRaceSenders = /* @__PURE__ */ new Set();
+  mediaStanzaExpired = 0;
+  /** Task 2110 — the WhatsApp manager reports that a non-audio media stanza for
+   *  this sender has started downloading. The gateway cannot derive this itself:
+   *  it first learns of the media when the completed inbound arrives, which is
+   *  the CLOSE of the window, not its open. Audio is excluded by the caller —
+   *  its transcript rides in as `text`, so no turn is ever blind to a voice note.
+   *  The key is canonicalised on write, the same rule handleInbound applies, so
+   *  a "+"-prefixed value and a digits-only one address one window. */
+  noteMediaStanza(senderId, atMs) {
+    const key = normalizeTarget(senderId) ?? senderId;
+    const inFlight2 = this.pendingMediaStanza.get(key);
+    if (inFlight2) inFlight2.push(atMs);
+    else this.pendingMediaStanza.set(key, [atMs]);
+  }
+  /** Task 2110 — drop every entry past the staleness cap, oldest first, counting
+   *  each into the census. Entries are appended in arrival order, so the scan
+   *  stops at the first one still inside the cap. A download that never produced
+   *  an inbound leaves its entry here; without this it would hold the window open
+   *  forever and make every later reply to that sender read as a race. */
+  expireStaleStanzas(key, inFlight2, now) {
+    while (inFlight2.length > 0 && now - inFlight2[0] > MEDIA_STANZA_STALE_MS) {
+      inFlight2.shift();
+      this.mediaStanzaExpired++;
+    }
+    if (inFlight2.length === 0) this.pendingMediaStanza.delete(key);
+  }
+  /** Task 2110 — a reply was dispatched to this sender. When a media stanza for
+   *  the same sender is in flight, the turn that composed this reply could not
+   *  see the incoming file, so the exposure is recorded whether or not the agent
+   *  actually misspoke: a steering clause has no machine-checkable
+   *  post-condition, and this counts entry into the window, never the phrasing.
+   *  A window past the staleness cap is a download that never produced an
+   *  inbound; it is dropped and counted as expired, not reported as a race. */
+  noteReplyDispatch(senderId, atMs) {
+    const key = normalizeTarget(senderId) ?? senderId;
+    const inFlight2 = this.pendingMediaStanza.get(key);
+    if (inFlight2 === void 0) return;
+    this.expireStaleStanzas(key, inFlight2, atMs);
+    if (inFlight2.length === 0) return;
+    const stanzaAt = inFlight2[0];
+    this.mediaRaces++;
+    this.mediaRaceSenders.add(key);
+    console.error(
+      `[whatsapp-native] op=media-race senderId=${key} replyAt=${new Date(atMs).toISOString()} mediaStanzaAt=${new Date(stanzaAt).toISOString()} gapMs=${atMs - stanzaAt}`
+    );
+  }
   /** Hono sub-app exposing the loopback channel routes; mount on the UI app.
    *  Task 1836 — the process-local unseated-sender census that used to live here
    *  was retired. Its quiet state was ambiguous (a UI restart emptied it, so
@@ -25793,7 +26057,8 @@ var WaGateway = class {
         console.error(
           `[whatsapp-native] op=channel-received senderId=${senderId} waMessageId=${waMessageId}${found ? "" : " note=unknown"}`
         );
-      }
+      },
+      onReplyDispatch: (senderId, atMs) => this.noteReplyDispatch(senderId, atMs)
     });
   }
   /** Run one reconciliation pass: log every terminal delivery event the sweep
@@ -25813,6 +26078,15 @@ var WaGateway = class {
         `[whatsapp-native] op=${e.kind} senderId=${e.senderId} waMessageId=${e.waMessageId} ageMs=${e.ageMs}`
       );
     }
+    for (const [key, inFlight2] of [...this.pendingMediaStanza]) {
+      this.expireStaleStanzas(key, inFlight2, now);
+    }
+    console.error(
+      `[whatsapp-native] op=media-race-census races=${this.mediaRaces} senders=${this.mediaRaceSenders.size} expired=${this.mediaStanzaExpired}`
+    );
+    this.mediaRaces = 0;
+    this.mediaRaceSenders.clear();
+    this.mediaStanzaExpired = 0;
     return events;
   }
   /** Arm the periodic reconciliation sweep in the long-lived UI process.
@@ -25844,6 +26118,14 @@ var WaGateway = class {
     if (senderId !== input.senderId) {
       console.error(`[whatsapp-native] op=sender-key raw=${input.senderId} canonical=${senderId}`);
     }
+    const arrived = input.media.filter((m) => m.type !== "audio").length;
+    if (arrived > 0) {
+      const inFlight2 = this.pendingMediaStanza.get(senderId);
+      if (inFlight2) {
+        inFlight2.splice(0, arrived);
+        if (inFlight2.length === 0) this.pendingMediaStanza.delete(senderId);
+      }
+    }
     if (input.passive) {
       const msgId = `wa-${++this.seq}`;
       await this.deps.ensureChannelSession({
@@ -26181,8 +26463,8 @@ var InboundHub2 = class {
 
 // app/lib/webchat/gateway/routes.ts
 function createWebchatChannelRoutes(deps) {
-  const app72 = new Hono();
-  app72.get("/webchat-channel/inbound", (c) => {
+  const app73 = new Hono();
+  app73.get("/webchat-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     const role = c.req.query("role");
@@ -26207,7 +26489,7 @@ function createWebchatChannelRoutes(deps) {
       }
     });
   });
-  app72.post("/webchat-channel/reply", async (c) => {
+  app73.post("/webchat-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -26217,7 +26499,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReply?.(key, text);
     return c.json({ ok: true });
   });
-  app72.post("/webchat-channel/connector-auth", async (c) => {
+  app73.post("/webchat-channel/connector-auth", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -26230,7 +26512,7 @@ function createWebchatChannelRoutes(deps) {
     const result = await deps.onConnectorAuth({ key, sessionId, name, completed });
     return c.json(result);
   });
-  app72.post("/webchat-channel/ready", async (c) => {
+  app73.post("/webchat-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -26239,7 +26521,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app72.post("/webchat-channel/permission-request", async (c) => {
+  app73.post("/webchat-channel/permission-request", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const requestId = body?.request_id;
@@ -26253,7 +26535,7 @@ function createWebchatChannelRoutes(deps) {
     const verdict = await deps.awaitPermissionVerdict({ key, requestId, toolName, description, inputPreview });
     return c.json(verdict);
   });
-  app72.post("/webchat-channel/received", async (c) => {
+  app73.post("/webchat-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -26263,7 +26545,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app72.post("/webchat-channel/turn-end", async (c) => {
+  app73.post("/webchat-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -26283,7 +26565,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onTurnEnd?.(key, role);
     return c.json({ ok: true });
   });
-  return app72;
+  return app73;
 }
 
 // app/lib/webchat/gateway/webchat-gateway.ts
@@ -27379,8 +27661,8 @@ var InboundHub3 = class {
 
 // app/lib/telegram/gateway/routes.ts
 function createTelegramChannelRoutes(deps) {
-  const app72 = new Hono();
-  app72.get("/tg-channel/inbound", (c) => {
+  const app73 = new Hono();
+  app73.get("/tg-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -27398,7 +27680,7 @@ function createTelegramChannelRoutes(deps) {
       }
     });
   });
-  app72.post("/tg-channel/reply", async (c) => {
+  app73.post("/tg-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -27414,7 +27696,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=reply key=${key} bytes=${Buffer.byteLength(text, "utf8")}`);
     return c.json({ ok: true });
   });
-  app72.post("/tg-channel/ready", async (c) => {
+  app73.post("/tg-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -27423,7 +27705,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app72.post("/tg-channel/received", async (c) => {
+  app73.post("/tg-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -27433,7 +27715,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app72.post("/tg-channel/turn-end", async (c) => {
+  app73.post("/tg-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -27466,7 +27748,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=turn-end key=${key} sessionId=${sid} replied=no delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app72;
+  return app73;
 }
 
 // app/lib/telegram/gateway/telegram-gateway.ts
@@ -28035,14 +28317,14 @@ function resolveScheduledEffectiveAccountForInstall(accountDir, destination) {
 }
 
 // server/lib/booking-site-accounts.ts
-import { existsSync as existsSync45, readFileSync as readFileSync41 } from "fs";
+import { existsSync as existsSync46, readFileSync as readFileSync42 } from "fs";
 import { resolve as resolve40 } from "path";
 function listBookingSiteAccounts(accounts) {
   return accounts.filter((a) => {
     const availPath = resolve40(a.accountDir, "calendar-availability.json");
-    if (!existsSync45(availPath)) return false;
+    if (!existsSync46(availPath)) return false;
     try {
-      const cfg = JSON.parse(readFileSync41(availPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync42(availPath, "utf-8"));
       return typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
     } catch {
       return false;
@@ -28080,7 +28362,7 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash6, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync46, readFileSync as readFileSync42, statSync as statSync23 } from "fs";
+import { existsSync as existsSync47, readFileSync as readFileSync43, statSync as statSync23 } from "fs";
 import { resolve as resolve41 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
@@ -28129,7 +28411,7 @@ function resolveEntitlement(brand, account) {
     return logResolved(implicitTrust(account), null);
   }
   const entitlementPath = resolve41(brand.configDir, "entitlement.json");
-  if (!existsSync46(entitlementPath)) {
+  if (!existsSync47(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
   const stat11 = statSync23(entitlementPath);
@@ -28144,7 +28426,7 @@ function resolveEntitlement(brand, account) {
 function verifyAndResolve(brand, entitlementPath, account) {
   let pubkeyPem;
   try {
-    pubkeyPem = readFileSync42(pubkeyPath(brand), "utf-8");
+    pubkeyPem = readFileSync43(pubkeyPath(brand), "utf-8");
   } catch (err) {
     return logResolved(anonymousFallback("pubkey-missing"), {
       reason: "pubkey-missing"
@@ -28158,7 +28440,7 @@ function verifyAndResolve(brand, entitlementPath, account) {
   }
   let envelope;
   try {
-    envelope = JSON.parse(readFileSync42(entitlementPath, "utf-8"));
+    envelope = JSON.parse(readFileSync43(entitlementPath, "utf-8"));
   } catch {
     return logResolved(anonymousFallback("malformed"), { reason: "malformed" });
   }
@@ -28320,14 +28602,14 @@ function clientFrom(c) {
 }
 installMediaDownloadGuard();
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join49(PLATFORM_ROOT6, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join50(PLATFORM_ROOT6, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
-if (BRAND_JSON_PATH && !existsSync47(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && !existsSync48(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
-if (BRAND_JSON_PATH && existsSync47(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync48(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync43(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync44(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -28359,11 +28641,11 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join49(homedir4(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join50(homedir4(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
-    if (!existsSync47(ALIAS_DOMAINS_PATH)) return null;
-    const parsed = JSON.parse(readFileSync43(ALIAS_DOMAINS_PATH, "utf-8"));
+    if (!existsSync48(ALIAS_DOMAINS_PATH)) return null;
+    const parsed = JSON.parse(readFileSync44(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -28389,7 +28671,7 @@ startManagerEventsSubscriber();
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
-var app71 = new Hono();
+var app72 = new Hono();
 function resolveChannelOverride(accountId, channel, senderId) {
   try {
     const dir = listValidAccounts().find((a) => a.accountId === accountId)?.accountDir;
@@ -28438,7 +28720,7 @@ var waGateway = new WaGateway({
   fetchStandingRules: fetchAccountStandingRules,
   resolveSessionOverride: (accountId, senderId) => resolveChannelOverride(accountId, "whatsapp", senderId),
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve42(process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve42(process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -28453,7 +28735,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, ".."))
+      platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -28566,13 +28848,13 @@ var waGateway = new WaGateway({
     nativeFileFollowers.set(senderId, ac);
   }
 });
-app71.route("/", waGateway.routes());
+app72.route("/", waGateway.routes());
 waGateway.startSweeper();
 function runDuplicateSenderAudit() {
   try {
     const configDir = process.env.CLAUDE_CONFIG_DIR;
     if (!configDir) return;
-    const projectsRoot = join49(configDir, "projects");
+    const projectsRoot = join50(configDir, "projects");
     const records = [];
     for (const { path: jsonlPath, isSubagent, archived } of enumerateJsonls(projectsRoot)) {
       if (isSubagent || archived) continue;
@@ -28696,7 +28978,7 @@ var webchatGateway = new WebchatGateway({
   firePublicSessionEndReview: (input) => firePublicSessionEndReview(input)
 });
 setWebchatGateway(webchatGateway);
-app71.route("/", webchatGateway.routes());
+app72.route("/", webchatGateway.routes());
 webchatGateway.startSweeper();
 webchatGateway.startPublicReaper();
 var telegramFileFollowers = /* @__PURE__ */ new Map();
@@ -28740,7 +29022,7 @@ var telegramGateway = new TelegramGateway({
   }
 });
 setTelegramGateway(telegramGateway);
-app71.route("/", telegramGateway.routes());
+app72.route("/", telegramGateway.routes());
 telegramGateway.startSweeper();
 var chatRoutes = createChatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
@@ -28774,19 +29056,19 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
   // and why the real dependencies are bound there rather than assembled here.
   effectiveAccountFor: resolveScheduledEffectiveAccountForInstall
 });
-app71.route("/api/channel/schedule-inject", scheduleInjectRoutes);
-app71.use("*", clientIpMiddleware);
+app72.route("/api/channel/schedule-inject", scheduleInjectRoutes);
+app72.use("*", clientIpMiddleware);
 function allowsSameOriginFraming(path) {
   return path === "/vnc-viewer.html" || path.startsWith("/api/admin/attachment/") || path.startsWith("/api/public-reader/attachment/") || path === "/api/admin/files/download" || path === "/api/admin/session-upload";
 }
-app71.use("*", async (c, next) => {
+app72.use("*", async (c, next) => {
   await next();
   c.header("X-Content-Type-Options", "nosniff");
   c.header("Referrer-Policy", "strict-origin-when-cross-origin");
   c.header("X-Frame-Options", allowsSameOriginFraming(c.req.path) ? "SAMEORIGIN" : "DENY");
 });
 var HTTP_LOG_PATHS = /* @__PURE__ */ new Set(["/vnc-viewer.html", "/vnc-popout.html"]);
-app71.use("*", async (c, next) => {
+app72.use("*", async (c, next) => {
   if (!HTTP_LOG_PATHS.has(c.req.path)) {
     await next();
     return;
@@ -28804,7 +29086,7 @@ app71.use("*", async (c, next) => {
     });
   }
 });
-app71.use("*", async (c, next) => {
+app72.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains()) || !isPublicHost(host)) {
     await next();
@@ -28842,7 +29124,7 @@ function resolveRemoteAuthOpts(c) {
   return { ...brandLoginOpts, origin };
 }
 var MAX_LOGIN_BODY = 8 * 1024;
-app71.post("/__remote-auth/login", async (c) => {
+app72.post("/__remote-auth/login", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   if (!requestIsTlsTerminated(c)) {
@@ -28887,7 +29169,7 @@ app71.post("/__remote-auth/login", async (c) => {
     }
   });
 });
-app71.get("/__remote-auth/logout", (c) => {
+app72.get("/__remote-auth/logout", (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   console.error(`[remote-auth] logout ip=${clientIp}`);
@@ -28900,7 +29182,7 @@ app71.get("/__remote-auth/logout", (c) => {
     }
   });
 });
-app71.post("/__remote-auth/change-password", async (c) => {
+app72.post("/__remote-auth/change-password", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   const rateLimited = checkRateLimit(client);
@@ -28959,13 +29241,13 @@ app71.post("/__remote-auth/change-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "change", changeError: "Failed to save password", redirect }), 200);
   }
 });
-app71.get("/__remote-auth/setup", (c) => {
+app72.get("/__remote-auth/setup", (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup" }), 200);
 });
-app71.post("/__remote-auth/set-initial-password", async (c) => {
+app72.post("/__remote-auth/set-initial-password", async (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
@@ -29003,10 +29285,10 @@ app71.post("/__remote-auth/set-initial-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup", setupError: "Failed to save password. Please try again." }), 200);
   }
 });
-app71.get("/api/remote-auth/status", (c) => {
+app72.get("/api/remote-auth/status", (c) => {
   return c.json({ configured: isRemoteAuthConfigured() });
 });
-app71.post("/api/remote-auth/set-password", async (c) => {
+app72.post("/api/remote-auth/set-password", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -29045,10 +29327,10 @@ app71.post("/api/remote-auth/set-password", async (c) => {
     return c.json({ error: "Failed to save password" }, 500);
   }
 });
-app71.route("/api/_client-error", client_error_default);
+app72.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
 var PWA_PUBLIC_PATHS = /* @__PURE__ */ new Set(["/sw.js", ...PWA_SURFACES.map((s) => s.manifestPath)]);
-app71.use("*", async (c, next) => {
+app72.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path = c.req.path;
   if (path === "/favicon.ico" || path.startsWith("/assets/") || path.startsWith("/brand/") || // Public free/busy is read by the booking page (a separate Cloudflare Pages
@@ -29092,30 +29374,30 @@ app71.use("*", async (c, next) => {
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), redirect: path }), 200);
 });
-app71.route("/api/health", health_default);
-app71.route("/api/chat", chatRoutes);
-app71.route("/api/whatsapp", whatsapp_default);
-app71.route("/api/storage", storage_broker_default);
-app71.route("/api/whatsapp-reader", whatsapp_reader_default);
-app71.route("/api/session-reader", session_reader_default);
-app71.route("/api/operator-conversations", operator_conversations_default);
-app71.route("/api/public-reader", public_reader_default);
-app71.route("/api/webchat", createWebchatRoutes({
+app72.route("/api/health", health_default);
+app72.route("/api/chat", chatRoutes);
+app72.route("/api/whatsapp", whatsapp_default);
+app72.route("/api/storage", storage_broker_default);
+app72.route("/api/whatsapp-reader", whatsapp_reader_default);
+app72.route("/api/session-reader", session_reader_default);
+app72.route("/api/operator-conversations", operator_conversations_default);
+app72.route("/api/public-reader", public_reader_default);
+app72.route("/api/webchat", createWebchatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
   // Task 940 — the permission relay's pointer read + verdict write.
   pendingPromptFor: (key) => webchatGateway.pendingPromptFor(key),
   deliveryFailureFor: (key) => webchatGateway.deliveryFailureFor(key),
   resolvePermissionVerdict: (key, requestId, behavior) => webchatGateway.resolvePermissionVerdict(key, requestId, behavior)
 }));
-app71.route("/api/webchat/greeting", webchat_greeting_default);
-app71.route("/api/telegram", telegram_default);
-app71.route("/api/quickbooks", quickbooks_default);
-app71.route("/api/onboarding", onboarding_default);
-app71.route("/api/admin", admin_default);
-app71.route("/api/access", access_default);
-app71.route("/api/session", session_default2);
-app71.route("/api/calendar", calendar_public_default);
-app71.route("/api/portal", portal_fetch_default);
+app72.route("/api/webchat/greeting", webchat_greeting_default);
+app72.route("/api/telegram", telegram_default);
+app72.route("/api/quickbooks", quickbooks_default);
+app72.route("/api/onboarding", onboarding_default);
+app72.route("/api/admin", admin_default);
+app72.route("/api/access", access_default);
+app72.route("/api/session", session_default2);
+app72.route("/api/calendar", calendar_public_default);
+app72.route("/api/portal", portal_fetch_default);
 var SAFE_SLUG_RE2 = /^[a-z][a-z0-9-]{2,49}$/;
 var SAFE_FILENAME_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var IMAGE_MIME = {
@@ -29127,7 +29409,7 @@ var IMAGE_MIME = {
   ".svg": "image/svg+xml",
   ".ico": "image/x-icon"
 };
-app71.get("/agent-assets/:slug/:filename", (c) => {
+app72.get("/agent-assets/:slug/:filename", (c) => {
   const slug = c.req.param("slug");
   const filename = c.req.param("filename");
   if (!SAFE_SLUG_RE2.test(slug)) {
@@ -29149,20 +29431,20 @@ app71.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync47(filePath)) {
+  if (!existsSync48(filePath)) {
     console.error(`[agent-assets] serve slug=${slug} file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync43(filePath);
+  const body = readFileSync44(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
   });
 });
-app71.get("/generated/:filename", (c) => {
+app72.get("/generated/:filename", (c) => {
   const filename = c.req.param("filename");
   if (!SAFE_FILENAME_RE.test(filename) || filename.includes("..")) {
     console.error(`[generated] serve file=${filename} status=403`);
@@ -29179,29 +29461,29 @@ app71.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync47(filePath)) {
+  if (!existsSync48(filePath)) {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync43(filePath);
+  const body = readFileSync44(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
   });
 });
-app71.route("/sites", sites_default);
-app71.route("/listings", listings_default);
-app71.route("/v", visitor_event_default);
-app71.route("/v", visitor_consent_default);
+app72.route("/sites", sites_default);
+app72.route("/listings", listings_default);
+app72.route("/v", visitor_event_default);
+app72.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
-if (BRAND_JSON_PATH && existsSync47(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync48(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync43(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync44(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -29228,11 +29510,11 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 var brandThemeColor = BRAND.defaultColors?.primary ?? "#000000";
 var brandBackgroundColor = BRAND.defaultColors?.background ?? "#ffffff";
 var brandAppIconsExist = [brandAppIcon192Path, brandAppIcon512Path, brandMaskableIconPath].every(
-  (p) => existsSync47(resolve42(process.cwd(), "public", p.replace(/^\//, "")))
+  (p) => existsSync48(resolve42(process.cwd(), "public", p.replace(/^\//, "")))
 );
 var SW_SOURCE = (() => {
   try {
-    return readFileSync43(resolve42(process.cwd(), "public", "sw.js"), "utf-8");
+    return readFileSync44(resolve42(process.cwd(), "public", "sw.js"), "utf-8");
   } catch {
     return null;
   }
@@ -29240,9 +29522,9 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT6) return "unknown";
-    const versionFile = join49(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
-    if (!existsSync47(versionFile)) return "unknown";
-    const content = readFileSync43(versionFile, "utf-8").trim();
+    const versionFile = join50(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
+    if (!existsSync48(versionFile)) return "unknown";
+    const content = readFileSync44(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -29253,7 +29535,7 @@ var versionScript = `<script>window.__MAXY_VERSION__=${JSON.stringify(INSTALLED_
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync43(resolve42(process.cwd(), "public", file), "utf-8");
+    html = readFileSync44(resolve42(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -29270,13 +29552,13 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir = join49(homedir4(), BRAND.configDir);
+  const configDir = join50(homedir4(), BRAND.configDir);
   try {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join49(configDir, "branding-cache", accountId, `${agentSlug}.json`);
-    if (!existsSync47(cachePath)) return null;
-    return JSON.parse(readFileSync43(cachePath, "utf-8"));
+    const cachePath = join50(configDir, "branding-cache", accountId, `${agentSlug}.json`);
+    if (!existsSync48(cachePath)) return null;
+    return JSON.parse(readFileSync44(cachePath, "utf-8"));
   } catch {
     return null;
   }
@@ -29320,7 +29602,7 @@ function brandedPublicHtml(agentSlug) {
 function agentUnavailableHtml() {
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(BRAND.productName)}</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1.5rem;color:#222"><h1 style="font-size:1.25rem">Agent unavailable</h1><p>This agent isn't available right now. If you reached this page from a saved link, the agent may have been turned off.</p></body></html>`;
 }
-app71.get("/", (c) => {
+app72.get("/", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const klass = classifyHost(host, getOperatorDomains(), isPublicHost);
   if (klass === "operator") {
@@ -29342,12 +29624,12 @@ app71.get("/", (c) => {
   console.log(`[host-class] host=${host} class=admin served=index.html`);
   return c.html(cachedHtml("index.html"));
 });
-app71.get("/public", (c) => {
+app72.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
 });
-app71.get("/public-chat", (c) => {
+app72.get("/public-chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
@@ -29366,12 +29648,12 @@ async function logViewerFetch(c, next) {
     duration_ms: Date.now() - start
   });
 }
-app71.use("/vnc-viewer.html", logViewerFetch);
-app71.use("/vnc-popout.html", logViewerFetch);
-app71.get("/vnc-popout.html", (c) => {
+app72.use("/vnc-viewer.html", logViewerFetch);
+app72.use("/vnc-popout.html", logViewerFetch);
+app72.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync43(resolve42(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync44(resolve42(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -29381,7 +29663,7 @@ app71.get("/vnc-popout.html", (c) => {
   }
   return c.html(html);
 });
-app71.post("/api/vnc/client-event", async (c) => {
+app72.post("/api/vnc/client-event", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -29402,11 +29684,11 @@ app71.post("/api/vnc/client-event", async (c) => {
   });
   return c.json({ ok: true });
 });
-app71.get("/g/:slug", (c) => {
+app72.get("/g/:slug", (c) => {
   return c.html(brandedPublicHtml(resolveDefaultSlug() ?? void 0));
 });
 for (const pwa of PWA_SURFACES) {
-  app71.get(pwa.manifestPath, (c) => {
+  app72.get(pwa.manifestPath, (c) => {
     const manifest = buildManifest(pwa, {
       productName: BRAND.productName,
       appIcon192: brandAppIcon192Path,
@@ -29422,7 +29704,7 @@ for (const pwa of PWA_SURFACES) {
     return c.body(JSON.stringify(manifest));
   });
 }
-app71.get("/sw.js", (c) => {
+app72.get("/sw.js", (c) => {
   if (SW_SOURCE == null) {
     console.error("[pwa] op=sw status=500 reason=sw-source-missing");
     return c.text("Service worker unavailable", 500);
@@ -29431,12 +29713,12 @@ app71.get("/sw.js", (c) => {
   console.log(`[pwa] op=sw status=200 ct=${SW_CONTENT_TYPE}`);
   return c.body(SW_SOURCE);
 });
-app71.get("/graph", (c) => {
+app72.get("/graph", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("graph.html"));
 });
-app71.get("/chat", (c) => {
+app72.get("/chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains())) {
     console.log(`[host-class] host=${host} class=operator served=operator.html`);
@@ -29445,47 +29727,47 @@ app71.get("/chat", (c) => {
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("chat.html"));
 });
-app71.get("/data", (c) => {
+app72.get("/data", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app71.get("/tasks", (c) => {
+app72.get("/tasks", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("tasks.html"));
 });
-app71.get("/activity", (c) => {
+app72.get("/activity", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("activity.html"));
 });
-app71.get("/calendar", (c) => {
+app72.get("/calendar", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("calendar.html"));
 });
-app71.get("/routines", (c) => {
+app72.get("/routines", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("routines.html"));
 });
-app71.get("/skills", (c) => {
+app72.get("/skills", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("skills.html"));
 });
-app71.get("/agents", (c) => {
+app72.get("/agents", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("agents.html"));
 });
-app71.get("/browser", (c) => {
+app72.get("/browser", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("browser.html"));
 });
-app71.get("/:slug", async (c, next) => {
+app72.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN.test(`/${slug}`)) {
     const account = resolveAccount();
@@ -29500,13 +29782,13 @@ app71.get("/:slug", async (c, next) => {
   await next();
 });
 if (brandFaviconPath !== "/favicon.ico") {
-  app71.get("/favicon.ico", (c) => {
+  app72.get("/favicon.ico", (c) => {
     c.header("Cache-Control", "public, max-age=300");
     return c.redirect(brandFaviconPath, 302);
   });
 }
-mountStaticFiles(app71, "./public");
-app71.all("*", (c) => {
+mountStaticFiles(app72, "./public");
+app72.all("*", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path = c.req.path;
   if (isPublicHost(host)) {
@@ -29520,13 +29802,13 @@ app71.all("*", (c) => {
 });
 var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
-var httpServer = serve({ fetch: app71.fetch, port, hostname });
+var httpServer = serve({ fetch: app72.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const reconcileScript = resolve42(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const runReconcile = (ctx) => {
-    if (!existsSync47(reconcileScript)) return;
+    if (!existsSync48(reconcileScript)) return;
     try {
       const child = spawn3(process.execPath, [reconcileScript], {
         env: { ...process.env, PLATFORM_ROOT: reconcilePlatformRoot },
@@ -29546,7 +29828,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     detached: true,
     run: runReconcile
   });
-  const reconcileStatePath = join49(MAXY_DIR, "booking-reconcile-state.json");
+  const reconcileStatePath = join50(MAXY_DIR, "booking-reconcile-state.json");
   registerLoop({
     name: "calendar-reconcile-liveness",
     intervalMs: 6e5,
@@ -29564,7 +29846,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
-  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const dreamSweepScript = resolve42(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
   registerLoop({
     name: "dream-cycle-sweep",
@@ -29572,7 +29854,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     firstRunDelayMs: 3e4,
     detached: true,
     run: (ctx) => {
-      if (!existsSync47(dreamSweepScript)) return;
+      if (!existsSync48(dreamSweepScript)) return;
       try {
         const child = spawn3(process.execPath, [dreamSweepScript], {
           env: { ...process.env, PLATFORM_ROOT: dreamPlatformRoot },
@@ -29588,11 +29870,11 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const outlookScript = resolve42(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
-    if (!existsSync47(outlookScript)) return;
+    if (!existsSync48(outlookScript)) return;
     try {
       const child = spawn3(process.execPath, [outlookScript], {
         env: { ...process.env, PLATFORM_ROOT: outlookPlatformRoot },
@@ -29614,19 +29896,19 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const strandedAccountsDir = resolve42(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
   const STRANDED_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
   const runStrandedAudit = () => {
     try {
-      if (!existsSync47(strandedAccountsDir)) return;
+      if (!existsSync48(strandedAccountsDir)) return;
       const now = Date.now();
       for (const name of readdirSync28(strandedAccountsDir)) {
         if (!STRANDED_UUID_RE.test(name)) continue;
         const pendingPath2 = resolve42(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
-        if (!existsSync47(pendingPath2)) continue;
+        if (!existsSync48(pendingPath2)) continue;
         const ageMs2 = now - statSync24(pendingPath2).mtimeMs;
         if (ageMs2 > STRANDED_AGE_MS) {
           console.error(`[outlook-mcp] devicecode-stranded account=${name} ageSec=${Math.floor(ageMs2 / 1e3)}`);
@@ -29644,7 +29926,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const googleAccountsDir = resolve42(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
@@ -29663,7 +29945,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   const googleAuditScript = resolve42(googleRoot, "plugins/google/mcp/dist/scripts/account-audit.js");
   const GOOGLE_ACCOUNT_AUDIT_INTERVAL_MS = 36e5;
   const runGoogleAccountAudit = (ctx) => {
-    if (!existsSync47(googleAuditScript)) return;
+    if (!existsSync48(googleAuditScript)) return;
     try {
       const child = spawn3(process.execPath, [googleAuditScript], {
         env: { ...process.env, PLATFORM_ROOT: googleRoot },
@@ -29688,7 +29970,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const STORAGE_AUDIT_INTERVAL_MS = 3e5;
   const runStorageAuditSafe = () => runStorageAudit(auditPlatformRoot).catch((err) => {
     console.error(`[storage-audit] error="${err.message}"`);
@@ -29749,7 +30031,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const publishScript = resolve42(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const bookingAccounts = () => {
@@ -29761,7 +30043,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     }
   };
   const spawnPublish = (account, ctx) => {
-    if (!existsSync47(publishScript)) return;
+    if (!existsSync48(publishScript)) return;
     try {
       const child = spawn3(process.execPath, [publishScript], {
         env: {
@@ -29783,8 +30065,8 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     const availPath = resolve42(account.accountDir, "calendar-availability.json");
     let hasBookingSite = false;
     try {
-      if (existsSync47(availPath)) {
-        const cfg = JSON.parse(readFileSync43(availPath, "utf-8"));
+      if (existsSync48(availPath)) {
+        const cfg = JSON.parse(readFileSync44(availPath, "utf-8"));
         hasBookingSite = typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
       }
     } catch {
@@ -29792,9 +30074,9 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     if (!hasBookingSite) return;
     const statePath = resolve42(account.accountDir, "state", "booking-availability", "last-publish.json");
     let lastSuccessAt = null;
-    if (existsSync47(statePath)) {
+    if (existsSync48(statePath)) {
       try {
-        const rec = JSON.parse(readFileSync43(statePath, "utf-8"));
+        const rec = JSON.parse(readFileSync44(statePath, "utf-8"));
         lastSuccessAt = rec.lastSuccessAt ?? null;
       } catch {
         console.error(`[calendar-availability] op=audit accountId=${account.accountId} snapshotAgeMs=na reason=bad-state-file`);
@@ -29826,12 +30108,12 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startTimeEntryCensus(() => getSession());
 startLedgerCensus(() => getSession());
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
   const auditScript = resolve42(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
   const runConnectorAudit = (ctx) => {
-    if (!existsSync47(auditScript)) return;
+    if (!existsSync48(auditScript)) return;
     try {
       const child = spawn3(process.execPath, [auditScript], {
         env: { ...process.env, PLATFORM_ROOT: auditPlatformRoot, LOG_DIR: auditLogDir },
@@ -29911,7 +30193,7 @@ for (const m of SUBAPP_MANIFEST) {
 }
 try {
   const registered = [];
-  for (const r of app71.routes ?? []) {
+  for (const r of app72.routes ?? []) {
     if (typeof r.path !== "string" || r.path.includes(":") || r.path.includes("*")) continue;
     if (AGENT_SLUG_PATTERN.test(r.path)) {
       registered.push({ method: (r.method ?? "ALL").toUpperCase(), path: r.path });
@@ -29951,11 +30233,11 @@ try {
 var ADMINUSER_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 async function runAdminUserReconcileTick() {
   try {
-    if (!existsSync47(USERS_FILE)) {
+    if (!existsSync48(USERS_FILE)) {
       console.error("[adminuser-self-heal] skip reason=no-users-file");
       return;
     }
-    const usersRaw = readFileSync43(USERS_FILE, "utf-8").trim();
+    const usersRaw = readFileSync44(USERS_FILE, "utf-8").trim();
     if (!usersRaw) {
       console.error("[adminuser-self-heal] skip reason=empty-users-file");
       return;
@@ -30007,8 +30289,8 @@ registerLoop({
 });
 var USERS_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 function countUsersRows() {
-  if (!existsSync47(USERS_FILE)) return 0;
-  const raw = readFileSync43(USERS_FILE, "utf-8").trim();
+  if (!existsSync48(USERS_FILE)) return 0;
+  const raw = readFileSync44(USERS_FILE, "utf-8").trim();
   if (!raw) return 0;
   const users = JSON.parse(raw);
   return users.filter((u) => typeof u.userId === "string").length;
@@ -30142,7 +30424,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join49(__dirname, "..")),
+  platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..")),
   accountConfig: bootAccountConfig,
   // Task 2074 — enrich with the sub-account name and fan out to every open
   // admin SSE stream. Fire-and-forget: the manager's persist path must not
@@ -30174,6 +30456,11 @@ init({
       );
     });
   },
+  // Task 2110 — the manager is the only place that sees a media stanza start
+  // downloading; the gateway first sees the media on the completed inbound,
+  // which is the race window's close. Wiring it here keeps the manager free of
+  // any gateway import, exactly as onMessage and onNotify are wired.
+  onMediaStanza: (senderId, atMs) => waGateway.noteMediaStanza(senderId, atMs),
   onMessage: async (msg) => {
     if (isObserveAccount(msg.accountId)) {
       console.error(`[whatsapp:observe] op=BREACH account=${msg.accountId} sender=${msg.senderPhone} \u2014 dispatch reached the router from an observe socket`);