@rubytech/create-sitedesk-code 0.1.521 → 0.1.522

package/payload/server/server.js

@@ -103,6 +103,7 @@ import {
   findGrantByMagicToken,
   foldReactions,
   formatError,
+  formatSenderPhone,
   generateNewMagicToken,
   getAccountsDirFromEnv,
   getAuthAgeMs,
@@ -110,6 +111,7 @@ import {
   getStatus,
   getStatusCode,
   getWhatsAppConfig,
+  groupEntriesFromUpdates,
   guardInstalled,
   hasCredsSync,
   init,
@@ -124,6 +126,7 @@ import {
   isWithinOwnAccountPartition,
   jidToE164,
   listConnectionPlatformAccountIds,
+  listConnections,
   listLedgerAccounts,
   listStoreAccountKeys,
   listStoredAccountIds,
@@ -137,6 +140,7 @@ import {
   phonesMatch,
   pruneLedger,
   readAllConversations,
+  readChatMetadata,
   readConversation,
   readConversationSummaries,
   readDeclined,
@@ -176,8 +180,9 @@ import {
   validateAccountIdEnv,
   validateFilePathInAccount,
   waitForConnection,
-  warnNonUuidAccount
-} from "./chunk-AZLT4LVO.js";
+  warnNonUuidAccount,
+  writeChatMetadataMerged
+} from "./chunk-K7CJGZPU.js";
 import {
   ACCOUNTS_DIR,
   BIN_DIR,
@@ -1721,7 +1726,7 @@ var require_dist5 = __commonJS({
 import { readFileSync as readFileSync44, existsSync as existsSync48, watchFile, readdirSync as readdirSync28, statSync as statSync24 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash7 } from "crypto";
-import { resolve as resolve42, join as join50, basename as basename15 } from "path";
+import { resolve as resolve42, join as join51, basename as basename16 } from "path";
 import { homedir as homedir4 } from "os";
 
 // server/lib/route-cache-watchers.ts
@@ -2287,11 +2292,11 @@ function staticCacheHeaders(root) {
 }
 
 // server/lib/static-mounts.ts
-function mountStaticFiles(app73, root) {
-  app73.use("/*", staticCacheHeaders(root));
-  app73.use("/assets/*", assetsVary);
-  app73.use("/assets/*", serveStatic({ root, precompressed: true }));
-  app73.use("/*", serveStatic({ root }));
+function mountStaticFiles(app75, root) {
+  app75.use("/*", staticCacheHeaders(root));
+  app75.use("/assets/*", assetsVary);
+  app75.use("/assets/*", serveStatic({ root, precompressed: true }));
+  app75.use("/*", serveStatic({ root }));
 }
 var assetsVary = async (c, next) => {
   await next();
@@ -3502,8 +3507,8 @@ function webchatTurnTimeoutMs() {
   return Number(process.env.WEBCHAT_TURN_TIMEOUT_MS ?? String(2 * 6e4));
 }
 function createChatRoutes(deps) {
-  const app73 = new Hono();
-  app73.post("/", async (c) => {
+  const app75 = new Hono();
+  app75.post("/", async (c) => {
     console.log(`[chat-route] entered route=public method=POST`);
     const contentType = c.req.header("content-type") ?? "";
     const account = resolveAccount();
@@ -3775,7 +3780,7 @@ ${result.result.text}` : result.result.text;
       }
     });
   });
-  return app73;
+  return app75;
 }
 
 // app/lib/channel-pty-bridge/admin-session-id.ts
@@ -3809,8 +3814,8 @@ function isLoopbackAddr(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
 function createScheduleInjectRoutes(deps) {
-  const app73 = new Hono();
-  app73.post("/", async (c) => {
+  const app75 = new Hono();
+  app75.post("/", async (c) => {
     const env = c.env;
     const remoteAddr = env?.incoming?.socket?.remoteAddress ?? "";
     if (!isLoopbackAddr(remoteAddr)) {
@@ -3911,7 +3916,7 @@ function createScheduleInjectRoutes(deps) {
     console.error(`${TAG5} op=inject-spawn eventId=${eventId} sessionId=${sessionId} result=ok status=-`);
     return c.json({ ok: true }, 200);
   });
-  return app73;
+  return app75;
 }
 
 // server/index.ts
@@ -4017,7 +4022,7 @@ async function defaultHttpGet(url) {
   }
 }
 async function defaultResolve(accountId) {
-  const { resolveSocket: resolveSocket2 } = await import("./manager-CQBSUJXR.js");
+  const { resolveSocket: resolveSocket2 } = await import("./manager-RKL7JZ4Y.js");
   return resolveSocket2(accountId);
 }
 async function fetchAvatar(accountId, jid, deps = {}) {
@@ -4148,8 +4153,60 @@ async function sweepAvatars() {
   return note;
 }
 
+// app/lib/whatsapp/chat-metadata-sweep.ts
+var TAG8 = "[wa-chatmeta]";
+function diffStoredAgainstLive(stored, live) {
+  const out = [];
+  for (const entry of stored.values()) {
+    if (!entry.isGroup) continue;
+    const seen = live.get(entry.jid);
+    if (seen === void 0) continue;
+    if (seen.name !== entry.name) {
+      out.push({ jid: entry.jid, stored: entry.name, live: seen.name, observedAt: seen.observedAt });
+    }
+  }
+  return out;
+}
+async function sweepChatMetadata() {
+  const started2 = Date.now();
+  let groups = 0;
+  let checked = 0;
+  let drifted = 0;
+  let unreachable = 0;
+  for (const conn of listConnections()) {
+    if (!conn.sock) continue;
+    const sock = conn.sock;
+    const stored = readChatMetadata(conn.platformAccountId);
+    const live = /* @__PURE__ */ new Map();
+    for (const entry of stored.values()) {
+      if (!entry.isGroup) continue;
+      groups += 1;
+      try {
+        const meta = await sock.groupMetadata(entry.jid);
+        if (typeof meta.subject === "string" && meta.subject.length > 0) {
+          live.set(entry.jid, { name: meta.subject, observedAt: (/* @__PURE__ */ new Date()).toISOString() });
+          checked += 1;
+        }
+      } catch {
+        unreachable += 1;
+      }
+    }
+    const drift = diffStoredAgainstLive(stored, live);
+    const corrections = [];
+    for (const d of drift) {
+      console.error(`${TAG8} op=drift jid=${d.jid} stored=${d.stored} live=${d.live} observedAt=${d.observedAt}`);
+      corrections.push(...groupEntriesFromUpdates([{ id: d.jid, subject: d.live }], d.observedAt));
+    }
+    drifted += drift.length;
+    if (corrections.length > 0) writeChatMetadataMerged(conn.platformAccountId, corrections);
+  }
+  const summary = `groups=${groups} checked=${checked} drifted=${drifted} unreachable=${unreachable} ms=${Date.now() - started2}`;
+  console.error(`${TAG8} op=sweep ${summary}`);
+  return summary;
+}
+
 // app/lib/whatsapp/group-outbound-audit.ts
-var TAG8 = "[wa-manual-send]";
+var TAG9 = "[wa-manual-send]";
 var OFFENDER_CAP = 10;
 function auditGroupOutbound() {
   let convos = 0;
@@ -4179,7 +4236,7 @@ function auditGroupOutboundNote() {
   const a = auditGroupOutbound();
   const tail = a.agent > 0 ? ` offenders=${a.offenders.join(",")}` : "";
   const note = `convos=${a.convos} outbound=${a.outbound} operator=${a.operator} agent=${a.agent} unstamped=${a.unstamped}${tail}`;
-  console.log(`${TAG8} op=group-outbound-audit ${note}`);
+  console.log(`${TAG9} op=group-outbound-audit ${note}`);
   return note;
 }
 
@@ -4236,7 +4293,7 @@ import { randomUUID as randomUUID2 } from "crypto";
 // app/lib/whatsapp/config-persist.ts
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, existsSync as existsSync4 } from "fs";
 import { resolve as resolve4, join as join7, dirname, basename } from "path";
-var TAG9 = "[whatsapp:config]";
+var TAG10 = "[whatsapp:config]";
 function configPath(accountDir) {
   return resolve4(accountDir, "account.json");
 }
@@ -4253,9 +4310,9 @@ function reloadManagerConfig(accountDir) {
   try {
     const config = readConfig(accountDir);
     reloadConfig(config);
-    console.error(`${TAG9} reloaded manager config`);
+    console.error(`${TAG10} reloaded manager config`);
   } catch (err) {
-    console.error(`${TAG9} manager config reload failed: ${String(err)}`);
+    console.error(`${TAG10} manager config reload failed: ${String(err)}`);
   }
 }
 var E164_PATTERN = /^\+\d{7,15}$/;
@@ -4281,25 +4338,25 @@ function persistAfterPairing(accountDir, accountId, selfPhone) {
       const adminPhones = wa.adminPhones;
       if (!adminPhones.includes(normalized)) {
         adminPhones.push(normalized);
-        console.error(`${TAG9} added selfPhone=${normalized} to adminPhones`);
+        console.error(`${TAG10} added selfPhone=${normalized} to adminPhones`);
       }
     } else {
-      console.error(`${TAG9} skipping adminPhones \u2014 selfPhone is null account=${accountId}`);
+      console.error(`${TAG10} skipping adminPhones \u2014 selfPhone is null account=${accountId}`);
     }
     const parsed = WhatsAppConfigSchema.safeParse(wa);
     if (!parsed.success) {
       const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      console.error(`${TAG9} validation failed after pairing: ${msg}`);
+      console.error(`${TAG10} validation failed after pairing: ${msg}`);
       return { ok: false, error: `Validation failed: ${msg}` };
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG9} persisted after pairing account=${accountId} phone=${selfPhone ?? "null"}`);
+    console.error(`${TAG10} persisted after pairing account=${accountId} phone=${selfPhone ?? "null"}`);
     reloadManagerConfig(accountDir);
     return { ok: true };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG9} persist failed account=${accountId}: ${msg}`);
+    console.error(`${TAG10} persist failed account=${accountId}: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -4313,7 +4370,7 @@ function addAdminPhone(accountDir, phone) {
     const targetId = typeof config.accountId === "string" && config.accountId ? config.accountId : basename(resolve4(accountDir));
     const socketOwner = resolveHouseOrSoleAccountId(dirname(resolve4(accountDir)));
     if (targetId !== socketOwner) {
-      console.error(`${TAG9} add-admin-phone rejected accountId=${targetId} reason=not-socket-account`);
+      console.error(`${TAG10} add-admin-phone rejected accountId=${targetId} reason=not-socket-account`);
       return {
         ok: false,
         reason: "not-socket-account",
@@ -4342,12 +4399,12 @@ function addAdminPhone(accountDir, phone) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG9} added admin phone=${normalized}`);
+    console.error(`${TAG10} added admin phone=${normalized}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Added ${normalized} as admin phone. Messages from this number will route to the admin agent.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG9} addAdminPhone failed: ${msg}`);
+    console.error(`${TAG10} addAdminPhone failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -4375,12 +4432,12 @@ function removeAdminPhone(accountDir, phone) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG9} removed admin phone=${normalized}`);
+    console.error(`${TAG10} removed admin phone=${normalized}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Removed ${normalized} from admin phones. Messages from this number will now route to the public agent.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG9} removeAdminPhone failed: ${msg}`);
+    console.error(`${TAG10} removeAdminPhone failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -4506,7 +4563,7 @@ function setAccountManager(accountDir, phone, subAccountId, mode = "active") {
     return { ok: false, error: `Could not resolve the house account to validate the binding: ${err instanceof Error ? err.message : String(err)}. Try again.` };
   }
   if (sub === houseId) {
-    console.error(`${TAG9} set-account-manager rejected phone=${normalized} reason=house-account-binding`);
+    console.error(`${TAG10} set-account-manager rejected phone=${normalized} reason=house-account-binding`);
     return {
       ok: false,
       reason: "house-account-binding",
@@ -4517,7 +4574,7 @@ function setAccountManager(accountDir, phone, subAccountId, mode = "active") {
     const config = readConfig(accountDir);
     const targetId = typeof config.accountId === "string" && config.accountId ? config.accountId : basename(resolve4(accountDir));
     if (targetId !== houseId) {
-      console.error(`${TAG9} set-account-manager rejected phone=${normalized} reason=not-socket-account`);
+      console.error(`${TAG10} set-account-manager rejected phone=${normalized} reason=not-socket-account`);
       return {
         ok: false,
         reason: "not-socket-account",
@@ -4546,13 +4603,13 @@ function setAccountManager(accountDir, phone, subAccountId, mode = "active") {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG9} bound account manager phone=${normalized} managesAccount=${sub} mode=${mode}`);
+    console.error(`${TAG10} bound account manager phone=${normalized} managesAccount=${sub} mode=${mode}`);
     reloadManagerConfig(accountDir);
     const behaviour = mode === "passive" ? `Their WhatsApp messages will each file one task scoped to that sub-account; the agent sends nothing back.` : `Their WhatsApp messages will reach that sub-account's admin agent; replies still go out over this account's WhatsApp device.`;
     return { ok: true, message: `Bound ${normalized} as ${mode} account manager for sub-account ${sub}. ${behaviour}` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG9} setAccountManager failed: ${msg}`);
+    console.error(`${TAG10} setAccountManager failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -4589,12 +4646,12 @@ function setDispatchInbound(accountDir, accountId, value) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG9} set dispatchInbound account=${id} value=${value}`);
+    console.error(`${TAG10} set dispatchInbound account=${id} value=${value}`);
     reloadManagerConfig(accountDir);
     return { ok: true };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG9} setDispatchInbound failed: ${msg}`);
+    console.error(`${TAG10} setDispatchInbound failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -4619,12 +4676,12 @@ function clearAccountManager(accountDir, phone) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG9} cleared account manager phone=${normalized}`);
+    console.error(`${TAG10} cleared account manager phone=${normalized}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Cleared the account-manager binding for ${normalized}.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG9} clearAccountManager failed: ${msg}`);
+    console.error(`${TAG10} clearAccountManager failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -4671,12 +4728,12 @@ function setPublicAgent(accountDir, slug) {
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG9} publicAgent set to ${trimmed}`);
+    console.error(`${TAG10} publicAgent set to ${trimmed}`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Public agent set to "${trimmed}". WhatsApp messages from non-admin phones will be handled by this agent.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG9} setPublicAgent failed: ${msg}`);
+    console.error(`${TAG10} setPublicAgent failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -4717,17 +4774,17 @@ function updateConfig(accountDir, fields) {
     const parsed = WhatsAppConfigSchema.safeParse(wa);
     if (!parsed.success) {
       const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
-      console.error(`${TAG9} update validation failed: ${msg}`);
+      console.error(`${TAG10} update validation failed: ${msg}`);
       return { ok: false, error: `Validation failed: ${msg}` };
     }
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
-    console.error(`${TAG9} updated fields=[${fieldNames.join(",")}]`);
+    console.error(`${TAG10} updated fields=[${fieldNames.join(",")}]`);
     reloadManagerConfig(accountDir);
     return { ok: true, message: `Updated WhatsApp config: ${fieldNames.join(", ")}.` };
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG9} updateConfig failed: ${msg}`);
+    console.error(`${TAG10} updateConfig failed: ${msg}`);
     return { ok: false, error: msg };
   }
 }
@@ -4764,17 +4821,17 @@ function migrateRemovedConfigKeys(accountDir) {
     }
     writeConfig(accountDir, config);
     console.error(
-      `${TAG9} migration: stripped unknown keys=[${result.droppedKeys.join(",")}] from account.json`
+      `${TAG10} migration: stripped unknown keys=[${result.droppedKeys.join(",")}] from account.json`
     );
     return { dropped: result.droppedKeys };
   } catch (err) {
-    console.error(`${TAG9} migration failed: ${String(err)}`);
+    console.error(`${TAG10} migration failed: ${String(err)}`);
     return { dropped: [] };
   }
 }
 
 // app/lib/whatsapp/login.ts
-var TAG10 = "[whatsapp:login]";
+var TAG11 = "[whatsapp:login]";
 function maskPhone(digits) {
   if (digits.length <= 4) return "*".repeat(digits.length);
   return digits.slice(0, 2) + "*".repeat(digits.length - 4) + digits.slice(-2);
@@ -4785,7 +4842,7 @@ function closeSocket(sock) {
   try {
     sock.ws?.close?.();
   } catch (err) {
-    console.warn(`${TAG10} socket close error during cleanup: ${String(err)}`);
+    console.warn(`${TAG11} socket close error during cleanup: ${String(err)}`);
   }
 }
 function resetActiveLogin(accountId) {
@@ -4812,18 +4869,18 @@ async function runPostPairing(login) {
         const masked = selfPhone ? `${selfPhone.slice(0, 4)}***` : "null";
         console.error(`[whatsapp-persist] wa-persist-on-connect account=${login.accountId} phone=${masked}`);
       } else {
-        console.error(`${TAG10} wa-persist-on-connect FAILED account=${login.accountId}: ${result.error}`);
+        console.error(`${TAG11} wa-persist-on-connect FAILED account=${login.accountId}: ${result.error}`);
       }
     } catch (err) {
-      console.error(`${TAG10} wa-persist-on-connect error account=${login.accountId}: ${String(err)}`);
+      console.error(`${TAG11} wa-persist-on-connect error account=${login.accountId}: ${String(err)}`);
     }
   } else {
-    console.error(`${TAG10} wa-persist-on-connect skipped \u2014 no accountDir account=${login.accountId}`);
+    console.error(`${TAG11} wa-persist-on-connect skipped \u2014 no accountDir account=${login.accountId}`);
   }
   try {
     await registerLoginSocket(login.accountId, login.sock, login.authDir);
   } catch (err) {
-    console.error(`${TAG10} registerLoginSocket failed account=${login.accountId}: ${String(err)}`);
+    console.error(`${TAG11} registerLoginSocket failed account=${login.accountId}: ${String(err)}`);
   }
 }
 async function loginConnectionLoop(accountId, login) {
@@ -4832,7 +4889,7 @@ async function loginConnectionLoop(accountId, login) {
   const logTerminal = (outcome, errMsg) => {
     const fc = credsCensus(login.authDir);
     console.error(
-      `${TAG10} op=terminal cid=${cidShort} outcome=${outcome} credsFinal={registered=${fc.registered},account=${fc.hasAccountSignature},me=${fc.e164 ?? "null"}}` + (errMsg ? ` error="${errMsg}"` : "")
+      `${TAG11} op=terminal cid=${cidShort} outcome=${outcome} credsFinal={registered=${fc.registered},account=${fc.hasAccountSignature},me=${fc.e164 ?? "null"}}` + (errMsg ? ` error="${errMsg}"` : "")
     );
   };
   while (true) {
@@ -4842,7 +4899,7 @@ async function loginConnectionLoop(accountId, login) {
       if (current?.id === login.id) {
         await runPostPairing(current);
         current.connected = true;
-        console.error(`${TAG10} loginConnectionLoop: connected account=${accountId} attempt=${attempt} configPersisted=${current.configPersisted}`);
+        console.error(`${TAG11} loginConnectionLoop: connected account=${accountId} attempt=${attempt} configPersisted=${current.configPersisted}`);
         logTerminal("connected");
       }
       return;
@@ -4854,7 +4911,7 @@ async function loginConnectionLoop(accountId, login) {
       if (!preRetryCensus.hasAccountSignature) {
         current.error = "WhatsApp accepted the code but did not finish linking. This usually means the number has reached its linked-device limit or has a stale linked device. On the phone, open WhatsApp, Linked Devices, remove existing devices, then ask for a new code.";
         console.error(
-          `${TAG10} op=pairing-incomplete cid=${cidShort} closeKind=${closeKind(getStatusCode(err), false)} reason=no-account-signature`
+          `${TAG11} op=pairing-incomplete cid=${cidShort} closeKind=${closeKind(getStatusCode(err), false)} reason=no-account-signature`
         );
         return;
       }
@@ -4862,7 +4919,7 @@ async function loginConnectionLoop(accountId, login) {
       if (!classification.shouldRetry || attempt >= LOGIN_MAX_RECONNECTS) {
         if (attempt >= LOGIN_MAX_RECONNECTS) {
           console.error(
-            `${TAG10} login reconnect attempts exhausted (${attempt}/${LOGIN_MAX_RECONNECTS}) \u2014 surfacing error to agent`
+            `${TAG11} login reconnect attempts exhausted (${attempt}/${LOGIN_MAX_RECONNECTS}) \u2014 surfacing error to agent`
           );
           current.error = `Login failed after ${attempt} reconnect attempts: ${formatError(err)}`;
         } else {
@@ -4875,7 +4932,7 @@ async function loginConnectionLoop(accountId, login) {
       attempt++;
       const delay = LOGIN_RECONNECT_DELAYS[attempt - 1] ?? 8e3;
       console.error(
-        `${TAG10} status=${classification.statusCode ?? "unknown"} restart required \u2014 reconnecting with saved creds (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}) delay=${delay}ms`
+        `${TAG11} status=${classification.statusCode ?? "unknown"} restart required \u2014 reconnecting with saved creds (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}) delay=${delay}ms`
       );
       closeSocket(current.sock);
       await new Promise((r) => setTimeout(r, delay));
@@ -4883,14 +4940,14 @@ async function loginConnectionLoop(accountId, login) {
       if (afterDelay?.id !== login.id) return;
       const rc = credsCensus(login.authDir);
       console.error(
-        `${TAG10} op=reconnect cid=${cidShort} attempt=${attempt}/${LOGIN_MAX_RECONNECTS} withRegistered=${rc.registered} withAccount=${rc.hasAccountSignature}`
+        `${TAG11} op=reconnect cid=${cidShort} attempt=${attempt}/${LOGIN_MAX_RECONNECTS} withRegistered=${rc.registered} withAccount=${rc.hasAccountSignature}`
       );
       try {
         const newSock = await createWaSocket({ authDir: login.authDir, correlationId: cidShort, account: accountId });
         current.sock = newSock;
       } catch (sockErr) {
         console.error(
-          `${TAG10} reconnect socket creation failed (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}): ${String(sockErr)}`
+          `${TAG11} reconnect socket creation failed (attempt ${attempt}/${LOGIN_MAX_RECONNECTS}): ${String(sockErr)}`
         );
         current.error = `Reconnection failed: ${String(sockErr)}`;
         logTerminal("error", current.error);
@@ -4907,7 +4964,7 @@ async function startLogin(opts) {
   const hasAuth = await authExists(authDir);
   const selfId = readSelfId(authDir);
   console.error(
-    `${TAG10} op=start cid=${cid} account=${accountId} force=${!!force} hasAuth=${hasAuth}` + (existing0 ? ` activeLogin={id=${existing0.id.slice(0, 8)},age=${Math.round((Date.now() - existing0.startedAt) / 1e3)}s,hasCode=${!!existing0.pairingCode}}` : " activeLogin=none")
+    `${TAG11} op=start cid=${cid} account=${accountId} force=${!!force} hasAuth=${hasAuth}` + (existing0 ? ` activeLogin={id=${existing0.id.slice(0, 8)},age=${Math.round((Date.now() - existing0.startedAt) / 1e3)}s,hasCode=${!!existing0.pairingCode}}` : " activeLogin=none")
   );
   if (hasAuth && !force) {
     const who = selfId.e164 ?? selfId.jid ?? "unknown";
@@ -4922,7 +4979,7 @@ async function startLogin(opts) {
   }
   const existing = activeLogins.get(accountId);
   if (existing && isLoginFresh(existing) && existing.pairingCode && !force) {
-    console.error(`${TAG10} startLogin account=${accountId} guard: returning existing pairing code (age=${Math.round((Date.now() - existing.startedAt) / 1e3)}s)`);
+    console.error(`${TAG11} startLogin account=${accountId} guard: returning existing pairing code (age=${Math.round((Date.now() - existing.startedAt) / 1e3)}s)`);
     return {
       pairingCode: existing.pairingCode,
       phone: existing.phone,
@@ -4930,7 +4987,7 @@ async function startLogin(opts) {
     };
   }
   if (existing) {
-    console.error(`${TAG10} startLogin account=${accountId} ${force ? "force override" : "stale/no-code"}, resetting active login`);
+    console.error(`${TAG11} startLogin account=${accountId} ${force ? "force override" : "stale/no-code"}, resetting active login`);
   }
   resetActiveLogin(accountId);
   await clearAuth(authDir);
@@ -4961,7 +5018,7 @@ async function startLogin(opts) {
         if (requested) return;
         requested = true;
         console.error(
-          `${TAG10} op=pairing-request cid=${cid} account=${accountId} qrRef=#1 sinceOpenMs=${socketOpenTs ? Date.now() - socketOpenTs : 0}`
+          `${TAG11} op=pairing-request cid=${cid} account=${accountId} qrRef=#1 sinceOpenMs=${socketOpenTs ? Date.now() - socketOpenTs : 0}`
         );
         void sock.requestPairingCode(digits).then((code) => {
           clearTimeout(codeTimer);
@@ -4970,7 +5027,7 @@ async function startLogin(opts) {
           if (current?.id !== login.id) return;
           if (!current.pairingCode) current.pairingCode = code;
           console.error(
-            `${TAG10} op=code-issued cid=${cid} account=${accountId} phone=${maskPhone(digits)} codeLen=${code.length} sinceOpenMs=${socketOpenTs ? codeIssuedTs - socketOpenTs : 0}`
+            `${TAG11} op=code-issued cid=${cid} account=${accountId} phone=${maskPhone(digits)} codeLen=${code.length} sinceOpenMs=${socketOpenTs ? codeIssuedTs - socketOpenTs : 0}`
           );
           resolveCode?.(code);
         }).catch((err) => {
@@ -5001,7 +5058,7 @@ async function startLogin(opts) {
   const ttlTimer = setTimeout(() => {
     const current = activeLogins.get(accountId);
     if (current?.id === login.id && !current.connected) {
-      console.error(`${TAG10} pairing-window-elapsed account=${accountId} (ttl sweep)`);
+      console.error(`${TAG11} pairing-window-elapsed account=${accountId} (ttl sweep)`);
       resetActiveLogin(accountId);
     }
   }, ACTIVE_LOGIN_TTL_MS);
@@ -5009,7 +5066,7 @@ async function startLogin(opts) {
     ttlTimer.unref();
   }
   loginConnectionLoop(accountId, login).catch((err) => {
-    console.error(`${TAG10} loginConnectionLoop unexpected error: ${String(err)}`);
+    console.error(`${TAG11} loginConnectionLoop unexpected error: ${String(err)}`);
     const current = activeLogins.get(accountId);
     if (current?.id === login.id) {
       current.error = `Unexpected login error: ${String(err)}`;
@@ -5034,13 +5091,13 @@ async function waitForLogin(opts) {
   const { accountId, timeoutMs = 6e4 } = opts;
   const login = activeLogins.get(accountId);
   console.error(
-    `${TAG10} waitForLogin account=${accountId} timeout=${timeoutMs}ms` + (login ? ` login={id=${login.id.slice(0, 8)},age=${Math.round((Date.now() - login.startedAt) / 1e3)}s,connected=${login.connected},hasCode=${!!login.pairingCode}}` : " login=none")
+    `${TAG11} waitForLogin account=${accountId} timeout=${timeoutMs}ms` + (login ? ` login={id=${login.id.slice(0, 8)},age=${Math.round((Date.now() - login.startedAt) / 1e3)}s,connected=${login.connected},hasCode=${!!login.pairingCode}}` : " login=none")
   );
   if (!login) {
     return { connected: false, message: "No active WhatsApp login in progress.", configPersisted: false };
   }
   if (!isLoginFresh(login)) {
-    console.error(`${TAG10} pairing-window-elapsed account=${accountId}`);
+    console.error(`${TAG11} pairing-window-elapsed account=${accountId}`);
     resetActiveLogin(accountId);
     return { connected: false, message: "The pairing window expired. Ask me to generate a new code.", configPersisted: false };
   }
@@ -5048,8 +5105,8 @@ async function waitForLogin(opts) {
   while (Date.now() < deadline) {
     if (login.connected) {
       const selfId = readSelfId(login.authDir);
-      console.error(`${TAG10} pairing-connected account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
-      console.error(`${TAG10} login complete for account=${accountId} phone=${selfId.e164 ?? "unknown"} configPersisted=${login.configPersisted}`);
+      console.error(`${TAG11} pairing-connected account=${accountId} phone=${selfId.e164 ?? "unknown"}`);
+      console.error(`${TAG11} login complete for account=${accountId} phone=${selfId.e164 ?? "unknown"} configPersisted=${login.configPersisted}`);
       const configPersisted = login.configPersisted;
       activeLogins.delete(accountId);
       return {
@@ -5067,7 +5124,7 @@ async function waitForLogin(opts) {
     await new Promise((r) => setTimeout(r, 1e3));
   }
   const elapsed = Math.round((Date.now() - (deadline - timeoutMs)) / 1e3);
-  console.error(`${TAG10} waitForLogin poll timeout account=${accountId} elapsed=${elapsed}s \u2014 login kept alive (pairing code still valid)`);
+  console.error(`${TAG11} waitForLogin poll timeout account=${accountId} elapsed=${elapsed}s \u2014 login kept alive (pairing code still valid)`);
   return { connected: false, message: "Still waiting for you to enter the pairing code. The code is still valid \u2014 ask me to keep waiting, or request a new code.", configPersisted: false };
 }
 function listActiveLoginAccountIds() {
@@ -5089,7 +5146,7 @@ function reconcileMessageStoreAccountKeys(input) {
 import { realpathSync } from "fs";
 import { readFile, stat } from "fs/promises";
 import { resolve as resolve5, basename as basename2 } from "path";
-var TAG11 = "[whatsapp:outbound]";
+var TAG12 = "[whatsapp:outbound]";
 var lastDocumentOutboundAt = /* @__PURE__ */ new Map();
 var lastRouteDocumentOutboundAt = /* @__PURE__ */ new Map();
 function normalizeJid(to) {
@@ -5122,10 +5179,10 @@ async function sendWhatsAppDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG11} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG12} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 500, error: `Account directory not resolvable for ${maxyAccountId}` };
     }
-    console.error(`${TAG11} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG12} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   let resolvedPath;
@@ -5134,15 +5191,15 @@ async function sendWhatsAppDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG11} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG12} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG11} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG12} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   if (!resolvedPath.startsWith(accountResolved + "/")) {
     const sanitised = filePath.replace(accountDir, "<account>/");
-    console.error(`${TAG11} document REJECTED path=${sanitised} reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+    console.error(`${TAG12} document REJECTED path=${sanitised} reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
     return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
   }
   const fileStat = await stat(resolvedPath);
@@ -5158,7 +5215,7 @@ async function sendWhatsAppDocument(input) {
   const res = resolveSocket(accountId);
   if (!res.ok) {
     const reason = formatSocketResolutionReason(res);
-    console.error(`${TAG11} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=false reason=${reason}`);
+    console.error(`${TAG12} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=false reason=${reason}`);
     return { ok: false, status: 503, error: formatSocketResolutionMessage(res, accountId) };
   }
   const sock = res.sock;
@@ -5171,7 +5228,7 @@ async function sendWhatsAppDocument(input) {
     { accountId: res.accountId }
   );
   console.error(
-    `${TAG11} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
+    `${TAG12} sent document to=${jid} file=${filename} bytes=${fileStat.size} ok=${result.success}` + (result.messageId ? ` id=${result.messageId}` : "")
   );
   if (result.success) {
     recordDocumentOutbound(to);
@@ -5291,7 +5348,7 @@ function serializeWhatsAppSchema() {
 // app/lib/whatsapp/status-reconcile.ts
 import { readdirSync as readdirSync3 } from "fs";
 import { join as join8 } from "path";
-var TAG12 = "[whatsapp:reconcile]";
+var TAG13 = "[whatsapp:reconcile]";
 var HALF_REGISTERED_MIN_AGE_MS = 5 * 6e4;
 function listCredsAccountIds(credsRoot) {
   try {
@@ -5317,14 +5374,14 @@ function reconcileCredsOnDisk(opts) {
       const ageMs2 = getAuthAgeMs(authDir);
       const abandoned = !inFlight2 && ageMs2 !== null && ageMs2 >= HALF_REGISTERED_MIN_AGE_MS;
       if (!abandoned) {
-        console.error(`${TAG12} op=half-registered account=${accountId} registered=true hasAccount=false inFlight=${inFlight2} ageMs=${ageMs2 ?? "null"}`);
+        console.error(`${TAG13} op=half-registered account=${accountId} registered=true hasAccount=false inFlight=${inFlight2} ageMs=${ageMs2 ?? "null"}`);
         entries2.push({ accountId, connected: false, linkedUnconfigured: true });
         continue;
       }
-      console.error(`${TAG12} op=discard-half-registered account=${accountId} registered=true hasAccount=false ageMs=${ageMs2}`);
+      console.error(`${TAG13} op=discard-half-registered account=${accountId} registered=true hasAccount=false ageMs=${ageMs2}`);
       const removed = discardAuthDirSync(authDir);
       if (!removed) {
-        console.error(`${TAG12} op=discard-half-registered-failed account=${accountId} \u2014 residue persists`);
+        console.error(`${TAG13} op=discard-half-registered-failed account=${accountId} \u2014 residue persists`);
         entries2.push({ accountId, connected: false, linkedUnconfigured: true });
       }
       continue;
@@ -5332,14 +5389,14 @@ function reconcileCredsOnDisk(opts) {
     const selfPhone = readSelfId(authDir).e164 ?? void 0;
     const configured = accountDir ? isAccountConfigured(accountDir, accountId) : false;
     console.error(
-      `${TAG12} wa-link-unconfigured account=${accountId} creds=present config=${configured ? "present" : "absent"}`
+      `${TAG13} wa-link-unconfigured account=${accountId} creds=present config=${configured ? "present" : "absent"}`
     );
     if (!configured && accountDir) {
       const result = persistAfterPairing(accountDir, accountId, selfPhone ?? null);
       if (result.ok) {
-        console.error(`${TAG12} self-healed account=${accountId}`);
+        console.error(`${TAG13} self-healed account=${accountId}`);
       } else {
-        console.error(`${TAG12} self-heal FAILED account=${accountId}: ${result.error}`);
+        console.error(`${TAG13} self-heal FAILED account=${accountId}: ${result.error}`);
       }
     }
     entries2.push({ accountId, selfPhone, connected: false, linkedUnconfigured: !configured });
@@ -5355,6 +5412,18 @@ function admitReply(input) {
   return { ok: true };
 }
 
+// app/lib/reader/conversation-preview.ts
+var ATTACHMENT_LABEL = "Attachment";
+function buildConversationPreview(input, maxLen = 80) {
+  const text = input.body.replace(/\s+/g, " ").trim();
+  const subject = text.length > 0 ? text : input.hasAttachment ? ATTACHMENT_LABEL : "";
+  if (subject.length === 0) return "";
+  const clipped = subject.length > maxLen ? `${subject.slice(0, maxLen)}\u2026` : subject;
+  if (input.fromMe) return `You: ${clipped}`;
+  if (input.isGroup && input.senderName) return `${input.senderName}: ${clipped}`;
+  return clipped;
+}
+
 // app/lib/reader/select-sessions.ts
 function isReaderChannelSession(role, channel) {
   return role === "admin" && (channel === "whatsapp" || channel === "telegram") || role === "public" && (channel === "whatsapp" || channel === "webchat");
@@ -5404,11 +5473,12 @@ function storePushNamesBySender(summaries) {
   }
   return out;
 }
-function buildStoreConversationRows(accountId, summaries) {
+function buildStoreConversationRows(accountId, summaries, chatMeta) {
   const rows = [];
   for (const [remoteJid, { first, last, firstNamedSender }] of summaries) {
     const scope = last.scope;
     const senderTelephone = conversationCounterpartyPhone(remoteJid, first.senderTelephone);
+    const isGroup = remoteJid.endsWith("@g.us");
     rows.push({
       sessionId: "",
       projectDir: "",
@@ -5425,7 +5495,16 @@ function buildStoreConversationRows(accountId, summaries) {
       source: "store",
       accountId,
       remoteJid,
-      scope
+      scope,
+      chatName: chatMeta?.get(remoteJid)?.name ?? null,
+      isGroup,
+      preview: buildConversationPreview({
+        body: last.body,
+        fromMe: last.fromMe,
+        senderName: last.senderName,
+        hasAttachment: last.attachmentId !== void 0,
+        isGroup
+      })
     });
   }
   return rows.sort((a, b) => (b.lastMessageAt ?? "").localeCompare(a.lastMessageAt ?? ""));
@@ -5482,7 +5561,7 @@ function authorizeRecallRead(input) {
 }
 
 // server/routes/whatsapp.ts
-var TAG13 = "[whatsapp:api]";
+var TAG14 = "[whatsapp:api]";
 var PLATFORM_ROOT3 = process.env.MAXY_PLATFORM_ROOT || "";
 function recallAttachment(storeAccountId, attachmentId) {
   if (!attachmentId) return void 0;
@@ -5527,16 +5606,16 @@ function houseSocketScopeDenial(c, op) {
   const houseAccountId = resolveAccount()?.accountId ?? "";
   const { decision, callerAccountId, houseAdminScope } = evaluateCallerScope(c, houseAccountId);
   if (decision.authorized) return null;
-  console.error(`${TAG13} op=authz-deny route=${op} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
+  console.error(`${TAG14} op=authz-deny route=${op} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
   return c.json({ ok: false, error: "Not authorized. The WhatsApp connection and its settings are house-scoped; this session may only act on its own account." }, 403);
 }
 function selfOrHouseScopeDenial(c, targetAccountId, op) {
   const { decision, callerAccountId, houseAdminScope } = evaluateCallerScope(c, targetAccountId);
   if (decision.authorized) {
-    console.error(`${TAG13} op=authz-ok route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
+    console.error(`${TAG14} op=authz-ok route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
     return null;
   }
-  console.error(`${TAG13} op=authz-deny route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
+  console.error(`${TAG14} op=authz-deny route=${op} target=${targetAccountId} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`);
   return c.json({ ok: false, error: "Not authorized. This session may only pair or manage its own account." }, 403);
 }
 var app2 = new Hono();
@@ -5556,7 +5635,7 @@ app2.get("/status", (c) => {
       dispatchInbound: shouldDispatchInbound(cfg, a.accountId)
     }));
     const summary = accounts.map((a) => `${a.accountId}:${a.connected ? "up" : a.linkedUnconfigured ? "linked-unconfigured" : "down"}:${a.dispatchInbound ? "dispatch" : "observe"}`).join(", ");
-    console.error(`${TAG13} status accounts=${accounts.length} [${summary}]`);
+    console.error(`${TAG14} status accounts=${accounts.length} [${summary}]`);
     const reachableAccountIds = [
       .../* @__PURE__ */ new Set([...listStoredAccountIds(), ...listConnectionPlatformAccountIds()])
     ];
@@ -5565,11 +5644,11 @@ app2.get("/status", (c) => {
       reachableAccountIds
     });
     if (!storeKeyReconcile.ok) {
-      console.warn(`${TAG13} store-key-drift orphanLiveKeys=[${storeKeyReconcile.orphanLiveKeys.join(",")}] \u2014 in-memory cache keyed by a value with no disk account; read tools will miss`);
+      console.warn(`${TAG14} store-key-drift orphanLiveKeys=[${storeKeyReconcile.orphanLiveKeys.join(",")}] \u2014 in-memory cache keyed by a value with no disk account; read tools will miss`);
     }
     return c.json({ accounts, storeKeyReconcile });
   } catch (err) {
-    console.error(`${TAG13} status error: ${String(err)}`);
+    console.error(`${TAG14} status error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -5587,10 +5666,10 @@ app2.post("/login/start", async (c) => {
     const authDir = join9(MAXY_DIR, "credentials", "whatsapp", accountId);
     const accountDir = resolveAccount()?.accountDir ?? null;
     const result = await startLogin({ accountId, authDir, phone, accountDir, force });
-    console.error(`${TAG13} login/start result account=${accountId} hasCode=${!!result.pairingCode}${result.selfPhone ? ` phone=${result.selfPhone}` : ""}`);
+    console.error(`${TAG14} login/start result account=${accountId} hasCode=${!!result.pairingCode}${result.selfPhone ? ` phone=${result.selfPhone}` : ""}`);
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG13} login/start error: ${String(err)}`);
+    console.error(`${TAG14} login/start error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -5602,7 +5681,7 @@ app2.post("/login/wait", async (c) => {
     if (denial) return denial;
     const timeoutMs = body.timeoutMs ?? 6e4;
     const result = await waitForLogin({ accountId, timeoutMs });
-    console.error(`${TAG13} login/wait result account=${accountId} connected=${result.connected}${result.selfPhone ? ` phone=${result.selfPhone}` : ""} configPersisted=${result.configPersisted}`);
+    console.error(`${TAG14} login/wait result account=${accountId} connected=${result.connected}${result.selfPhone ? ` phone=${result.selfPhone}` : ""} configPersisted=${result.configPersisted}`);
     return c.json({
       connected: result.connected,
       message: result.message,
@@ -5610,7 +5689,7 @@ app2.post("/login/wait", async (c) => {
       configPersisted: result.configPersisted
     });
   } catch (err) {
-    console.error(`${TAG13} login/wait error: ${String(err)}`);
+    console.error(`${TAG14} login/wait error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -5623,7 +5702,7 @@ app2.post("/disconnect", async (c) => {
     await stopConnection(accountId);
     return c.json({ disconnected: true, accountId });
   } catch (err) {
-    console.error(`${TAG13} disconnect error: ${String(err)}`);
+    console.error(`${TAG14} disconnect error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -5636,7 +5715,7 @@ app2.post("/reconnect", async (c) => {
     await startConnection(accountId);
     return c.json({ reconnecting: true, accountId });
   } catch (err) {
-    console.error(`${TAG13} reconnect error: ${String(err)}`);
+    console.error(`${TAG14} reconnect error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -5660,7 +5739,7 @@ app2.post("/config", async (c) => {
       const acct = resolveAccount();
       if (!acct) return c.json({ ok: false, error: "No account configured." }, 500);
       const result = setDispatchInbound(acct.accountDir, target, body.dispatchInbound);
-      console.error(`${TAG13} config action=set-dispatch-inbound account=${target} dispatchInbound=${body.dispatchInbound} ok=${result.ok}`);
+      console.error(`${TAG14} config action=set-dispatch-inbound account=${target} dispatchInbound=${body.dispatchInbound} ok=${result.ok}`);
       return c.json(result, result.ok ? 200 : 400);
     }
     const denial = houseSocketScopeDenial(c, `config action=${action}`);
@@ -5676,7 +5755,7 @@ app2.post("/config", async (c) => {
         }
         const result = addAdminPhone(account.accountDir, phone);
         const reasonTail = !result.ok && result.reason ? ` reason=${result.reason}` : "";
-        console.error(`${TAG13} config action=add-admin-phone accountId=${account.accountId} phone=${phone} ok=${result.ok}${reasonTail}`);
+        console.error(`${TAG14} config action=add-admin-phone accountId=${account.accountId} phone=${phone} ok=${result.ok}${reasonTail}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "remove-admin-phone": {
@@ -5684,12 +5763,12 @@ app2.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "phone".' }, 400);
         }
         const result = removeAdminPhone(account.accountDir, phone);
-        console.error(`${TAG13} config action=remove-admin-phone phone=${phone} ok=${result.ok}`);
+        console.error(`${TAG14} config action=remove-admin-phone phone=${phone} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "list-admin-phones": {
         const phones = readAdminPhones(account.accountDir);
-        console.error(`${TAG13} config action=list-admin-phones count=${phones.length}`);
+        console.error(`${TAG14} config action=list-admin-phones count=${phones.length}`);
         return c.json({ ok: true, phones });
       }
       case "add-account-manager": {
@@ -5702,7 +5781,7 @@ app2.post("/config", async (c) => {
         const managerMode = mode === "passive" ? "passive" : "active";
         const result = setAccountManager(account.accountDir, phone, managesAccount, managerMode);
         const managerReasonTail = !result.ok && result.reason ? ` reason=${result.reason}` : "";
-        console.error(`${TAG13} config action=add-account-manager phone=${phone} managesAccount=${managesAccount} mode=${managerMode} ok=${result.ok}${managerReasonTail}`);
+        console.error(`${TAG14} config action=add-account-manager phone=${phone} managesAccount=${managesAccount} mode=${managerMode} ok=${result.ok}${managerReasonTail}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "remove-account-manager": {
@@ -5710,12 +5789,12 @@ app2.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "phone".' }, 400);
         }
         const result = clearAccountManager(account.accountDir, phone);
-        console.error(`${TAG13} config action=remove-account-manager phone=${phone} ok=${result.ok}`);
+        console.error(`${TAG14} config action=remove-account-manager phone=${phone} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "list-account-managers": {
         const accountManagers = readAccountManagers(account.accountDir);
-        console.error(`${TAG13} config action=list-account-managers count=${Object.keys(accountManagers).length}`);
+        console.error(`${TAG14} config action=list-account-managers count=${Object.keys(accountManagers).length}`);
         return c.json({ ok: true, accountManagers });
       }
       case "set-public-agent": {
@@ -5723,13 +5802,13 @@ app2.post("/config", async (c) => {
           return c.json({ ok: false, error: 'Missing required field "slug" (the agent directory name, e.g. "my-agent").' }, 400);
         }
         const result = setPublicAgent(account.accountDir, slug);
-        console.error(`${TAG13} config action=set-public-agent slug=${slug} ok=${result.ok}`);
+        console.error(`${TAG14} config action=set-public-agent slug=${slug} ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "get-public-agent": {
         const targetAccount = typeof accountId === "string" && accountId.trim() ? accountId.trim() : "default";
         const resolved = resolvePublicAgent(account.accountDir, { accountId: targetAccount });
-        console.error(`${TAG13} config action=get-public-agent accountId=${targetAccount} slug=${resolved?.slug ?? "none"} source=${resolved?.source ?? "none"}`);
+        console.error(`${TAG14} config action=get-public-agent accountId=${targetAccount} slug=${resolved?.slug ?? "none"} source=${resolved?.source ?? "none"}`);
         return c.json({ ok: true, slug: resolved?.slug ?? null, source: resolved?.source ?? null });
       }
       case "list-public-agents": {
@@ -5746,26 +5825,26 @@ app2.post("/config", async (c) => {
                 const config = JSON.parse(readFileSync7(configPath2, "utf-8"));
                 agents.push({ slug: entry.name, displayName: config.displayName ?? entry.name });
               } catch {
-                console.error(`${TAG13} config action=list-public-agents error="failed to parse config.json for agent ${entry.name}" \u2014 skipping`);
+                console.error(`${TAG14} config action=list-public-agents error="failed to parse config.json for agent ${entry.name}" \u2014 skipping`);
               }
             }
           } catch (err) {
-            console.error(`${TAG13} config action=list-public-agents error="failed to scan agents directory: ${String(err)}"`);
+            console.error(`${TAG14} config action=list-public-agents error="failed to scan agents directory: ${String(err)}"`);
           }
         }
-        console.error(`${TAG13} config action=list-public-agents count=${agents.length}`);
+        console.error(`${TAG14} config action=list-public-agents count=${agents.length}`);
         return c.json({ ok: true, agents });
       }
       case "schema": {
         const text = serializeWhatsAppSchema();
-        console.error(`${TAG13} config action=schema`);
+        console.error(`${TAG14} config action=schema`);
         return c.json({ ok: true, text });
       }
       case "list-groups": {
         const groupAccountId = accountId ?? "default";
         const groupRes = resolveSocket(groupAccountId);
         if (!groupRes.ok) {
-          console.error(`${TAG13} config action=list-groups error="${formatSocketResolutionReason(groupRes)}" accountId=${groupAccountId}`);
+          console.error(`${TAG14} config action=list-groups error="${formatSocketResolutionReason(groupRes)}" accountId=${groupAccountId}`);
           return c.json({ ok: false, error: formatSocketResolutionMessage(groupRes, groupAccountId) });
         }
         const sock = groupRes.sock;
@@ -5776,10 +5855,10 @@ app2.post("/config", async (c) => {
             name: g.subject ?? g.id,
             participantCount: Array.isArray(g.participants) ? g.participants.length : 0
           }));
-          console.error(`${TAG13} config action=list-groups count=${groups.length} accountId=${groupAccountId}`);
+          console.error(`${TAG14} config action=list-groups count=${groups.length} accountId=${groupAccountId}`);
           return c.json({ ok: true, groups });
         } catch (err) {
-          console.error(`${TAG13} config action=list-groups error="${String(err)}" accountId=${groupAccountId}`);
+          console.error(`${TAG14} config action=list-groups error="${String(err)}" accountId=${groupAccountId}`);
           return c.json({ ok: false, error: `Failed to fetch groups: ${String(err)}` });
         }
       }
@@ -5789,12 +5868,12 @@ app2.post("/config", async (c) => {
         }
         const result = updateConfig(account.accountDir, fields);
         const fieldNames = Object.keys(fields);
-        console.error(`${TAG13} config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
+        console.error(`${TAG14} config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
       case "get-config": {
         const waConfig = getConfig(account.accountDir);
-        console.error(`${TAG13} config action=get-config`);
+        console.error(`${TAG14} config action=get-config`);
         return c.json({ ok: true, config: waConfig });
       }
       default:
@@ -5804,7 +5883,7 @@ app2.post("/config", async (c) => {
         );
     }
   } catch (err) {
-    console.error(`${TAG13} config error: ${String(err)}`);
+    console.error(`${TAG14} config error: ${String(err)}`);
     return c.json({ ok: false, error: String(err) }, 500);
   }
 });
@@ -5825,7 +5904,7 @@ app2.post("/send-document", async (c) => {
     recordRouteDocumentOutbound(to, filePath);
     return c.json({ success: true, messageId: result.messageId });
   } catch (err) {
-    console.error(`${TAG13} send-document error: ${String(err)}`);
+    console.error(`${TAG14} send-document error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -5870,7 +5949,7 @@ app2.post("/send-admin", async (c) => {
     console.error(`[whatsapp:outbound] op=send-admin-ok via=${via} to=${phone}`);
     return c.json({ success: true, messageId: result.messageId });
   } catch (err) {
-    console.error(`${TAG13} send-admin error: ${String(err)}`);
+    console.error(`${TAG14} send-admin error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -5930,7 +6009,7 @@ app2.post("/reply", async (c) => {
     console.error(`[whatsapp:observe] op=reply-sent sendId=${sendId} account=${accountId} socket=${res.accountId} waMessageId=${sent.messageId ?? ""}`);
     return c.json({ success: true, messageId: sent.messageId });
   } catch (err) {
-    console.error(`${TAG13} reply error: ${String(err)}`);
+    console.error(`${TAG14} reply error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -5940,11 +6019,11 @@ app2.get("/activity", (c) => {
     const result = getChannelActivity(accountId);
     const total = result.accounts.reduce((sum, a) => sum + a.total, 0);
     console.error(
-      `${TAG13} activity accounts=${result.accounts.length} total=${total} recentEvents=${result.recentEvents.length}` + (accountId ? ` filter=${accountId}` : "")
+      `${TAG14} activity accounts=${result.accounts.length} total=${total} recentEvents=${result.recentEvents.length}` + (accountId ? ` filter=${accountId}` : "")
     );
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG13} activity error: ${String(err)}`);
+    console.error(`${TAG14} activity error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -5972,10 +6051,10 @@ app2.get("/conversations", (c) => {
       };
     });
     conversations.sort((a, b) => (b.lastMessageTimestamp ?? 0) - (a.lastMessageTimestamp ?? 0));
-    console.error(`${TAG13} conversations requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${allConversations.size > 0} count=${conversations.length}`);
+    console.error(`${TAG14} conversations requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${allConversations.size > 0} count=${conversations.length}`);
     return c.json({ conversations });
   } catch (err) {
-    console.error(`${TAG13} conversations error: ${String(err)}`);
+    console.error(`${TAG14} conversations error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -6028,10 +6107,10 @@ app2.get("/messages", (c) => {
         ...reactions && reactions.length > 0 ? { reactions } : {}
       };
     });
-    console.error(`${TAG13} messages requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} jid=${jid} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${storeMessages.length > 0} limit=${effectiveLimit ?? "all"} returned=${messages.length} withAttachments=${withAttachments}`);
+    console.error(`${TAG14} messages requested=${requestedAccountId} caller=${callerAccountId ?? "none"} account=${storeAccountId} jid=${jid} projected=${projecting} storeAccount=${projecting ? storeAccountId : "self"} managerPhonesBound=${managerPhonesBound} storeKeyFound=${storeMessages.length > 0} limit=${effectiveLimit ?? "all"} returned=${messages.length} withAttachments=${withAttachments}`);
     return c.json({ messages });
   } catch (err) {
-    console.error(`${TAG13} messages error: ${String(err)}`);
+    console.error(`${TAG14} messages error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -6133,7 +6212,7 @@ app2.get("/conversation-graph-state", async (c) => {
       ms
     });
   } catch (err) {
-    console.error(`${TAG13} conversation-graph-state error: ${String(err)}`);
+    console.error(`${TAG14} conversation-graph-state error: ${String(err)}`);
     return c.json({ error: String(err) }, 500);
   }
 });
@@ -6145,12 +6224,12 @@ app2.get("/group-info", async (c) => {
       return c.json({ error: "Missing required parameter: jid" }, 400);
     }
     if (!isGroupJid(jid)) {
-      console.error(`${TAG13} group-info error="not a group JID" jid=${jid} account=${accountId}`);
+      console.error(`${TAG14} group-info error="not a group JID" jid=${jid} account=${accountId}`);
       return c.json({ error: `"${jid}" is not a group JID. Group JIDs end with @g.us.` }, 400);
     }
     const res = resolveSocket(accountId);
     if (!res.ok) {
-      console.error(`${TAG13} group-info error="${formatSocketResolutionReason(res)}" account=${accountId}`);
+      console.error(`${TAG14} group-info error="${formatSocketResolutionReason(res)}" account=${accountId}`);
       return c.json({ error: formatSocketResolutionMessage(res, accountId) }, 400);
     }
     const sock = res.sock;
@@ -6164,10 +6243,10 @@ app2.get("/group-info", async (c) => {
       participantCount: meta.participants.length,
       participants: meta.participants.map((p) => ({ jid: p.id, admin: p.admin ?? null }))
     };
-    console.error(`${TAG13} group-info jid=${jid} subject="${meta.subject}" participants=${meta.participants.length} account=${accountId}`);
+    console.error(`${TAG14} group-info jid=${jid} subject="${meta.subject}" participants=${meta.participants.length} account=${accountId}`);
     return c.json(result);
   } catch (err) {
-    console.error(`${TAG13} group-info error="${String(err)}" jid=${jid} account=${accountId}`);
+    console.error(`${TAG14} group-info error="${String(err)}" jid=${jid} account=${accountId}`);
     return c.json({ error: `Failed to fetch group info: ${String(err)}` }, 500);
   }
 });
@@ -7096,7 +7175,7 @@ function resolveExposedDirs(schemaText, exposeFolders = []) {
 }
 
 // server/portal-uploads-pull.ts
-var TAG14 = "[portal-pull]";
+var TAG15 = "[portal-pull]";
 var PORTAL_UPLOADS_PULL_INTERVAL_MS = 6e4;
 var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function safeSegment(s) {
@@ -7157,17 +7236,17 @@ async function pullAccount(opts) {
     }
     const dest = resolveDestination(accountDir, row, exposed);
     const idField = dest.ok || dest.reason !== "bad-fileid" ? ` fileId=${row.fileId}` : "";
-    const head = `${TAG14} op=claim account=${accountId}${idField} bytes=${row.size}`;
+    const head = `${TAG15} op=claim account=${accountId}${idField} bytes=${row.size}`;
     if (!dest.ok) {
       failed++;
       log2(
-        `${TAG14} op=route account=${accountId}${idField} target="${row.targetPath}" result=refused reason=${dest.reason}`
+        `${TAG15} op=route account=${accountId}${idField} target="${row.targetPath}" result=refused reason=${dest.reason}`
       );
       log2(`${head} result=${dest.reason}`);
       continue;
     }
     log2(
-      `${TAG14} op=route account=${accountId}${idField} target="${row.targetPath}" result=${row.targetPath ? "exposed" : "default"}`
+      `${TAG15} op=route account=${accountId}${idField} target="${row.targetPath}" result=${row.targetPath ? "exposed" : "default"}`
     );
     let bytes;
     try {
@@ -7180,7 +7259,7 @@ async function pullAccount(opts) {
     const finalPath = nextFreePath(dest.final);
     if (finalPath !== dest.final) {
       log2(
-        `${TAG14} op=collision account=${accountId}${idField} suffix="${basename3(finalPath)}" result=suffixed`
+        `${TAG15} op=collision account=${accountId}${idField} suffix="${basename3(finalPath)}" result=suffixed`
       );
     }
     const relPath = relative(resolve8(accountDir), finalPath).split(sep2).join("/");
@@ -7224,7 +7303,7 @@ async function pullAccount(opts) {
       deleteErr = err instanceof Error ? err.message : String(err);
     }
     log2(
-      `${TAG14} op=move account=${accountId}${idField} r2Deleted=${r2Deleted}` + (deleteErr ? ` err="${deleteErr}"` : "")
+      `${TAG15} op=move account=${accountId}${idField} r2Deleted=${r2Deleted}` + (deleteErr ? ` err="${deleteErr}"` : "")
     );
     pulled++;
     log2(`${head} result=written`);
@@ -7234,10 +7313,10 @@ async function pullAccount(opts) {
 async function withdrawRow(opts) {
   const { accountDir, accountId, dbName, exposed, row, cf, log: log2 } = opts;
   if (!UUID.test(row.fileId)) {
-    log2(`${TAG14} op=delete-propagate account=${accountId} result=bad-fileid`);
+    log2(`${TAG15} op=delete-propagate account=${accountId} result=bad-fileid`);
     return false;
   }
-  const head = `${TAG14} op=delete-propagate account=${accountId} fileId=${row.fileId}`;
+  const head = `${TAG15} op=delete-propagate account=${accountId} fileId=${row.fileId}`;
   const segments = row.devicePath.split("/");
   if (!row.devicePath || !segments.every(safeSegment) || !exposedOrOwnUploads(segments, exposed, row.ownerId)) {
     log2(`${head} removed=false result=bad-path`);
@@ -7346,7 +7425,7 @@ async function runPortalUploadsPull(root) {
         await cf.d1Query(portal.portalDbName, pendingSelect(portal))
       );
       if (malformed > 0) {
-        console.error(`${TAG14} op=malformed account=${portal.accountId} rows=${malformed}`);
+        console.error(`${TAG15} op=malformed account=${portal.accountId} rows=${malformed}`);
       }
       if (rows.length === 0) continue;
       const accountDir = join11(accountsRoot, portal.accountId);
@@ -7366,12 +7445,12 @@ async function runPortalUploadsPull(root) {
       failedTotal += r.failed;
       withdrawnTotal += r.withdrawn;
       console.error(
-        `${TAG14} op=done account=${portal.accountId} pulled=${r.pulled} withdrawn=${r.withdrawn} failed=${r.failed}`
+        `${TAG15} op=done account=${portal.accountId} pulled=${r.pulled} withdrawn=${r.withdrawn} failed=${r.failed}`
       );
     } catch (err) {
       failedTotal++;
       console.error(
-        `${TAG14} op=failed account=${portal.accountId} err="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG15} op=failed account=${portal.accountId} err="${err instanceof Error ? err.message : String(err)}"`
       );
     }
   }
@@ -7446,7 +7525,7 @@ function createD1Client(opts) {
 }
 
 // ../plugins/cloudflare/bin/portal-index-push.mjs
-var TAG15 = "[portal-index]";
+var TAG16 = "[portal-index]";
 function readEnvFile(path) {
   const out = {};
   if (!existsSync8(path)) return out;
@@ -7511,17 +7590,17 @@ async function pushAccount(opts) {
   const exposeFolders = Array.isArray(opts.exposeFolders) ? opts.exposeFolders : [];
   const r = resolveExposedDirs(schemaText, exposeFolders);
   log2(
-    `${TAG15} op=resolve account=${accountId} schemaPresent=${r.schemaPresent} allowed=${r.allowed.length} domainBuckets=${r.domainBuckets.join(",") || "none"} extraFolders=${exposeFolders.length} exposed=${r.exposed.join(",") || "none"}`
+    `${TAG16} op=resolve account=${accountId} schemaPresent=${r.schemaPresent} allowed=${r.allowed.length} domainBuckets=${r.domainBuckets.join(",") || "none"} extraFolders=${exposeFolders.length} exposed=${r.exposed.join(",") || "none"}`
   );
   for (const c of r.collisions) {
-    log2(`${TAG15} op=collision account=${accountId} dir=${c} claimedBy=plugin-owned`);
+    log2(`${TAG16} op=collision account=${accountId} dir=${c} claimedBy=plugin-owned`);
   }
   if (opts.previousExposed) {
     const added = r.exposed.filter((d) => !opts.previousExposed.includes(d));
     const removed = opts.previousExposed.filter((d) => !r.exposed.includes(d));
     if (added.length || removed.length) {
       log2(
-        `${TAG15} op=exposed-changed account=${accountId} added=${added.join(",") || "none"} removed=${removed.join(",") || "none"}`
+        `${TAG16} op=exposed-changed account=${accountId} added=${added.join(",") || "none"} removed=${removed.join(",") || "none"}`
       );
     }
   }
@@ -7545,7 +7624,7 @@ async function pushAccount(opts) {
       [accountId, row.relPath, row.sizeBytes, row.modifiedAt, nowIso, row.isDir ? 1 : 0, next]
     );
   }
-  log2(`${TAG15} op=stage account=${accountId} generation=${next} inserted=${rows.length}`);
+  log2(`${TAG16} op=stage account=${accountId} generation=${next} inserted=${rows.length}`);
   await client.query(
     "INSERT INTO directory_state (accountId, currentGeneration) VALUES (?, ?) ON CONFLICT (accountId) DO UPDATE SET currentGeneration = excluded.currentGeneration WHERE excluded.currentGeneration > directory_state.currentGeneration",
     [accountId, next]
@@ -7557,7 +7636,7 @@ async function pushAccount(opts) {
   const pointer = Number(flipped[0]?.currentGeneration ?? 0);
   if (pointer !== next) {
     log2(
-      `${TAG15} op=stage-contended account=${accountId} generation=${next} pointer=${pointer} action=superseded`
+      `${TAG16} op=stage-contended account=${accountId} generation=${next} pointer=${pointer} action=superseded`
     );
     return {
       exposed: r.exposed,
@@ -7567,7 +7646,7 @@ async function pushAccount(opts) {
       superseded: true
     };
   }
-  log2(`${TAG15} op=flip account=${accountId} generation=${next}`);
+  log2(`${TAG16} op=flip account=${accountId} generation=${next}`);
   try {
     await client.query("DELETE FROM directory WHERE accountId = ? AND generation < ?", [
       accountId,
@@ -7575,7 +7654,7 @@ async function pushAccount(opts) {
     ]);
   } catch (err) {
     log2(
-      `${TAG15} op=sweep account=${accountId} generation=${next} result=failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG16} op=sweep account=${accountId} generation=${next} result=failed err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
   const check = await client.query(
@@ -7583,7 +7662,7 @@ async function pushAccount(opts) {
     [accountId]
   );
   const after = Number(check[0]?.n ?? -1);
-  log2(`${TAG15} op=verify account=${accountId} rowsAfter=${after} expected=${rows.length}`);
+  log2(`${TAG16} op=verify account=${accountId} rowsAfter=${after} expected=${rows.length}`);
   return { exposed: r.exposed, rows: rows.length, schemaPresent: true, generation: next };
 }
 function stateFilePath(platformRoot5) {
@@ -7604,7 +7683,7 @@ function recordSuccess(platformRoot5, accountId, entry) {
     writeFileSync5(path, JSON.stringify(state, null, 1));
   } catch (err) {
     console.error(
-      `${TAG15} op=state-write-failed account=${accountId} path="${path}" err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG16} op=state-write-failed account=${accountId} path="${path}" err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
 }
@@ -7628,7 +7707,7 @@ async function portalAccounts(accountsRoot) {
         const exposeFolders = Array.isArray(cfg?.exposeFolders) ? cfg.exposeFolders.filter((f) => typeof f === "string") : [];
         out.push({ accountDir, accountId, dbName: cfg.portalDbName, exposeFolders });
       } else {
-        console.error(`${TAG15} op=skip account=${accountId} reason=no-portalDbName`);
+        console.error(`${TAG16} op=skip account=${accountId} reason=no-portalDbName`);
       }
     } catch {
     }
@@ -7656,7 +7735,7 @@ function resolveCloudflareCredentials(platformRoot5) {
 async function pushAllAccounts(platformRoot5) {
   const accountsRoot = resolve9(platformRoot5, "..", "data", "accounts");
   const targets = await portalAccounts(accountsRoot);
-  console.error(`${TAG15} op=enumerate accountsRoot="${accountsRoot}" accounts=${targets.length}`);
+  console.error(`${TAG16} op=enumerate accountsRoot="${accountsRoot}" accounts=${targets.length}`);
   if (targets.length === 0) return { accounts: 0, pushed: 0, failed: 0 };
   const cred = resolveCloudflareCredentials(platformRoot5);
   if ("error" in cred) {
@@ -7690,11 +7769,11 @@ async function runTargets(platformRoot5, cred, targets) {
         });
       }
       pushed++;
-      console.error(`${TAG15} op=done account=${t.accountId} rows=${r.rows}`);
+      console.error(`${TAG16} op=done account=${t.accountId} rows=${r.rows}`);
     } catch (err) {
       failed++;
       console.error(
-        `${TAG15} op=failed account=${t.accountId} err="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG16} op=failed account=${t.accountId} err="${err instanceof Error ? err.message : String(err)}"`
       );
     }
   }
@@ -7703,7 +7782,7 @@ async function runTargets(platformRoot5, cred, targets) {
 async function main() {
   const platformRoot5 = process.env.PLATFORM_ROOT;
   if (!platformRoot5) {
-    console.error(`${TAG15} op=usage reason=no-platform-root PLATFORM_ROOT is required`);
+    console.error(`${TAG16} op=usage reason=no-platform-root PLATFORM_ROOT is required`);
     process.exit(1);
   }
   if (process.argv.includes("--all-accounts")) {
@@ -7711,7 +7790,7 @@ async function main() {
       const r2 = await pushAllAccounts(platformRoot5);
       if (r2.failed > 0) process.exit(1);
     } catch (err) {
-      console.error(`${TAG15} op=skip reason=${err instanceof Error ? err.message : String(err)}`);
+      console.error(`${TAG16} op=skip reason=${err instanceof Error ? err.message : String(err)}`);
       process.exit(1);
     }
     return;
@@ -7720,12 +7799,12 @@ async function main() {
   const accountId = arg("--account");
   const dbName = arg("--db");
   if (!accountDir || !accountId || !dbName) {
-    console.error(`${TAG15} op=usage --account-dir <dir> --account <id> --db <name>`);
+    console.error(`${TAG16} op=usage --account-dir <dir> --account <id> --db <name>`);
     process.exit(1);
   }
   const cred = resolveCloudflareCredentials(platformRoot5);
   if ("error" in cred) {
-    console.error(`${TAG15} op=skip reason=${cred.error}`);
+    console.error(`${TAG16} op=skip reason=${cred.error}`);
     process.exit(1);
   }
   const r = await runTargets(platformRoot5, cred, [
@@ -8751,11 +8830,11 @@ function findExistingJsonlForSessionId(claudeConfigDir2, sessionId) {
   } catch {
     return null;
   }
-  const basename16 = `${sessionId}.jsonl`;
+  const basename17 = `${sessionId}.jsonl`;
   for (const slug of slugs) {
-    const live = join17(projectsRoot, slug, basename16);
+    const live = join17(projectsRoot, slug, basename17);
     if (existsSync13(live)) return live;
-    const archived = join17(projectsRoot, slug, "archive", basename16);
+    const archived = join17(projectsRoot, slug, "archive", basename17);
     if (existsSync13(archived)) return archived;
   }
   return null;
@@ -10031,6 +10110,80 @@ var session_reader_default = app6;
 // server/routes/operator-conversations.ts
 import { readFileSync as readFileSync16 } from "fs";
 import { basename as basename7, dirname as dirname8, join as join21 } from "path";
+
+// app/lib/reader/operator-conversations.ts
+function operatorConvName(row) {
+  if (row.isGroup === true) return row.chatName ?? row.title;
+  const name = row.operatorName ?? row.chatName ?? row.whatsappName;
+  const senderId = row.senderId != null && row.channel === "whatsapp" ? formatSenderPhone(row.senderId) : row.senderId;
+  if (name) return senderId ? `${name}  ${senderId}` : name;
+  return senderId ?? row.title;
+}
+function operatorConvNameSource(row) {
+  if (row.isGroup === true) return row.chatName ? "chatmeta" : "jid";
+  if (row.operatorName) return "operator";
+  if (row.chatName) return "chatmeta";
+  if (row.whatsappName) return "inbound-pushname";
+  if (row.senderId != null) return "counterparty-number";
+  return "jid";
+}
+
+// app/lib/reader/label-census.ts
+function selfPushNames(summaries) {
+  const out = /* @__PURE__ */ new Set();
+  for (const { first, last } of summaries.values()) {
+    for (const r of [first, last]) {
+      if (r.fromMe && r.senderName) out.add(r.senderName);
+    }
+  }
+  return out;
+}
+function fallbackLabelSources(rows) {
+  const out = [];
+  for (const r of rows) {
+    if (r.source !== "store") continue;
+    const source = operatorConvNameSource(r);
+    if (source === "chatmeta" || source === "operator") continue;
+    out.push({ jid: r.remoteJid ?? r.title, source });
+  }
+  return out;
+}
+function buildLabelCensus(rows, selfNames) {
+  const c = {
+    chats: 0,
+    withMeta: 0,
+    groups: 0,
+    groupsWithSubject: 0,
+    labelledByMember: 0,
+    dms: 0,
+    namedDms: 0,
+    labelledBySelfPushName: 0
+  };
+  for (const r of rows) {
+    if (r.source !== "store") continue;
+    c.chats += 1;
+    if (r.chatName) c.withMeta += 1;
+    const source = operatorConvNameSource(r);
+    if (r.isGroup === true) {
+      c.groups += 1;
+      if (r.chatName) c.groupsWithSubject += 1;
+      if (source === "inbound-pushname") c.labelledByMember += 1;
+    } else {
+      c.dms += 1;
+      if (source === "operator" || source === "chatmeta" || source === "inbound-pushname") c.namedDms += 1;
+    }
+    const shown = operatorConvName(r);
+    for (const self of selfNames) {
+      if (shown === self || shown.startsWith(`${self}  `)) {
+        c.labelledBySelfPushName += 1;
+        break;
+      }
+    }
+  }
+  return c;
+}
+
+// server/routes/operator-conversations.ts
 var app7 = new Hono();
 app7.get("/conversations", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -10157,7 +10310,8 @@ app7.get("/conversations", requireAdminSession, async (c) => {
     ...r,
     operatorName: r.senderId ? nameBySender.get(r.senderId) ?? null : null
   }));
-  const storeRows = account ? buildStoreConversationRows(account.accountId, readConversationSummaries(account.accountId)) : [];
+  const summaries = account ? readConversationSummaries(account.accountId) : /* @__PURE__ */ new Map();
+  const storeRows = account ? buildStoreConversationRows(account.accountId, summaries, readChatMetadata(account.accountId)) : [];
   let houseId = null;
   if (multiAccount) {
     try {
@@ -10174,9 +10328,11 @@ app7.get("/conversations", requireAdminSession, async (c) => {
       const managerPhones = managerPhonesForAccount(readAccountManagers(houseAccount.accountDir), account.accountId);
       managerPhonesBound = managerPhones.length;
       if (managerPhones.length > 0) {
-        managedRows = buildStoreConversationRows(houseId, readConversationSummaries(houseId)).filter(
-          (r) => counterpartyBoundToSubAccount(managerPhones, r.senderId)
-        );
+        managedRows = buildStoreConversationRows(
+          houseId,
+          readConversationSummaries(houseId),
+          readChatMetadata(houseId)
+        ).filter((r) => counterpartyBoundToSubAccount(managerPhones, r.senderId));
       }
     }
   }
@@ -10185,6 +10341,13 @@ app7.get("/conversations", requireAdminSession, async (c) => {
   );
   const adminScope = allStoreRows.filter((r) => r.scope === "admin").length;
   const publicScope = allStoreRows.length - adminScope;
+  const census = buildLabelCensus(allStoreRows, selfPushNames(summaries));
+  for (const f of fallbackLabelSources(allStoreRows)) {
+    console.log(`[wa-label] op=row-label jid=${f.jid} source=${f.source} route=conversations`);
+  }
+  console.log(
+    `[wa-label-census] route=conversations chats=${census.chats} withMeta=${census.withMeta} groups=${census.groups} groupsWithSubject=${census.groupsWithSubject} labelledByMember=${census.labelledByMember} dms=${census.dms} namedDms=${census.namedDms} labelledBySelfPushName=${census.labelledBySelfPushName}`
+  );
   const sessionRowCount = sessionConversations.length;
   console.log(
     `[wa-reader] op=list pinnedAccount=${scopeAccountId?.slice(0, 8) ?? "null"} resolvedAccount=${account?.accountId.slice(0, 8) ?? "null"} multiAccount=${multiAccount} conversations=${sessionRowCount + allStoreRows.length} sessionRows=${sessionRowCount} storeRows=${allStoreRows.length} adminScope=${adminScope} publicScope=${publicScope} sessionRowsExcludedUntagged=${sessionRowsExcludedUntagged} houseResolved=${houseId ? houseId.slice(0, 8) : "null"} managerPhonesBound=${managerPhonesBound} managedStoreRows=${managedRows.length}`
@@ -10326,12 +10489,20 @@ app7.get("/conversations-all", requireAdminSession, async (c) => {
       const distinct = [...new Set(sessionRows.map((r) => r.senderId).filter((s) => !!s))];
       const resolved = await resolveOperatorNamesBySender(users, admins, distinct);
       const nameBySender = /* @__PURE__ */ new Map();
-      for (const senderId of distinct) nameBySender.set(senderId, resolved.get(senderId)?.name ?? null);
+      for (const senderId of distinct) {
+        const { name, reason } = resolved.get(senderId) ?? { name: null, reason: "no-binding" };
+        if (reason) console.error(`[wa-reader] op=operator-unresolved senderId=${senderId} reason=${reason} route=conversations-all`);
+        nameBySender.set(senderId, name);
+      }
       const named = sessionRows.map((r) => ({
         ...r,
         operatorName: r.senderId ? nameBySender.get(r.senderId) ?? null : null
       }));
-      const storeRows = buildStoreConversationRows(account.accountId, readConversationSummaries(account.accountId));
+      const storeRows = buildStoreConversationRows(
+        account.accountId,
+        readConversationSummaries(account.accountId),
+        readChatMetadata(account.accountId)
+      );
       perAccount.push({ isHouse, rows: [...named, ...storeRows] });
     }
     const houseAccount = validAccounts.find((a) => a.accountId === houseId) ?? null;
@@ -10346,6 +10517,17 @@ app7.get("/conversations-all", requireAdminSession, async (c) => {
     }
     const merged = tagAndMergeInstallConversations(perAccount);
     const conversations = dropHouseRowsOwnedBySubAccount(merged, subManagerPhones);
+    const allSummaries = /* @__PURE__ */ new Map();
+    for (const account of validAccounts) {
+      for (const [jid, s] of readConversationSummaries(account.accountId)) allSummaries.set(`${account.accountId}:${jid}`, s);
+    }
+    const census = buildLabelCensus(conversations, selfPushNames(allSummaries));
+    for (const f of fallbackLabelSources(conversations)) {
+      console.log(`[wa-label] op=row-label jid=${f.jid} source=${f.source} route=conversations-all`);
+    }
+    console.log(
+      `[wa-label-census] route=conversations-all chats=${census.chats} withMeta=${census.withMeta} groups=${census.groups} groupsWithSubject=${census.groupsWithSubject} labelledByMember=${census.labelledByMember} dms=${census.dms} namedDms=${census.namedDms} labelledBySelfPushName=${census.labelledBySelfPushName}`
+    );
     const houseRows = conversations.filter((r) => r.isHouse).length;
     console.log(
       `[wa-reader] op=conversations-all accounts=${validAccounts.length} rows=${conversations.length} house=${houseRows} sub=${conversations.length - houseRows} deduped=${merged.length - conversations.length}`
@@ -10406,7 +10588,7 @@ function resolveOpenVisitorSession(rows, visitorId, agentSlug) {
 
 // server/routes/public-reader.ts
 var app8 = new Hono();
-var TAG16 = "[public-webchat]";
+var TAG17 = "[public-webchat]";
 function parseAccessSessionId(cookieHeader) {
   if (!cookieHeader) return null;
   const part = cookieHeader.split(";").map((p) => p.trim()).find((p) => p.startsWith("__access_session="));
@@ -10454,7 +10636,7 @@ function enumeratePublicRows() {
 app8.get("/session", (c) => {
   const visitor = resolveVisitor(c);
   if (!visitor) {
-    console.error(`${TAG16} op=reader-refused reason=no-anchor path=/session`);
+    console.error(`${TAG17} op=reader-refused reason=no-anchor path=/session`);
     return c.json({ error: "gate-required" }, 401);
   }
   const rows = enumeratePublicRows();
@@ -10473,11 +10655,11 @@ app8.get("/session", (c) => {
     found = effectiveSlug ? resolveOpenVisitorSession(rows, visitor.visitorId, effectiveSlug) : null;
   }
   if (found) {
-    console.log(`${TAG16} op=session-resume anchor=${visitor.kind} key=${(found.senderId ?? "").slice(0, 8)} sessionId=${found.sessionId.slice(0, 8)}`);
+    console.log(`${TAG17} op=session-resume anchor=${visitor.kind} key=${(found.senderId ?? "").slice(0, 8)} sessionId=${found.sessionId.slice(0, 8)}`);
     return c.json({ sessionId: found.sessionId, projectDir: found.projectDir, sessionKey: found.senderId });
   }
   const sessionKey = crypto.randomUUID();
-  console.log(`${TAG16} op=session-new anchor=${visitor.kind} key=${sessionKey.slice(0, 8)}`);
+  console.log(`${TAG17} op=session-new anchor=${visitor.kind} key=${sessionKey.slice(0, 8)}`);
   return c.json({ sessionId: null, projectDir: null, sessionKey });
 });
 function publicUploadsDir(accountId, sessionId) {
@@ -10506,7 +10688,7 @@ function readFrom2(path, from) {
 app8.get("/stream", (c) => {
   const visitor = resolveVisitor(c);
   if (!visitor) {
-    console.error(`${TAG16} op=reader-refused reason=no-anchor path=/stream`);
+    console.error(`${TAG17} op=reader-refused reason=no-anchor path=/stream`);
     return c.json({ error: "gate-required" }, 401);
   }
   const sessionId = c.req.query("sessionId") ?? "";
@@ -10524,12 +10706,12 @@ app8.get("/stream", (c) => {
   const isPublicWebchat = meta.role === "public" && meta.channel === "webchat";
   const owns = visitor.kind === "person" ? meta.personId === visitor.personId : meta.personId === null && meta.visitorId === visitor.visitorId;
   if (!(isPublicWebchat && owns)) {
-    console.error(`${TAG16} op=reader-refused reason=not-owner anchor=${visitor.kind} sessionId=${sessionId.slice(0, 8)}`);
+    console.error(`${TAG17} op=reader-refused reason=not-owner anchor=${visitor.kind} sessionId=${sessionId.slice(0, 8)}`);
     return c.json({ error: "forbidden" }, 403);
   }
   const senderShort = (meta.senderId ?? "").slice(0, 8);
   const encoder = new TextEncoder();
-  console.log(`${TAG16} op=reader-open anchor=${visitor.kind} key=${senderShort} mode=delivered-only sessionId=${sessionId.slice(0, 8)}`);
+  console.log(`${TAG17} op=reader-open anchor=${visitor.kind} key=${senderShort} mode=delivered-only sessionId=${sessionId.slice(0, 8)}`);
   const send = (controller, turn, id) => controller.enqueue(encoder.encode(`id: ${id}
 data: ${JSON.stringify(turn)}
 
@@ -10544,7 +10726,7 @@ data: ${JSON.stringify(turn)}
         const { turns, dropped } = filterDeliveredFrames(lines);
         if (uploadsDir) enrichPublicAttachments(turns, listSessionAttachmentsInDir(uploadsDir), attachmentCursor);
         for (const turn of turns) send(controller, turn, offset);
-        if (dropped > 0) console.log(`${TAG16} op=reader-filtered key=${senderShort} dropped=${dropped}`);
+        if (dropped > 0) console.log(`${TAG17} op=reader-filtered key=${senderShort} dropped=${dropped}`);
       };
       try {
         const { buf, end } = readFrom2(jsonlPath, 0);
@@ -10579,7 +10761,7 @@ data: ${JSON.stringify(turn)}
         watcher?.close();
         clearInterval(poll);
         clearInterval(heartbeat);
-        console.log(`${TAG16} op=reader-close key=${senderShort}`);
+        console.log(`${TAG17} op=reader-close key=${senderShort}`);
         try {
           controller.close();
         } catch {
@@ -11134,8 +11316,8 @@ async function reapplyLeversViaManager() {
 var WEBCHAT_SEND_TURN_WINDOW_MS = Number(process.env.WEBCHAT_SEND_TURN_WINDOW_MS ?? String(15e3));
 var sendSeq = 0;
 function createWebchatRoutes(deps) {
-  const app73 = new Hono();
-  app73.post("/send", requireAdminSession, async (c) => {
+  const app75 = new Hono();
+  app75.post("/send", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -11333,7 +11515,7 @@ ${note}` : note;
     if (turnTimer.unref) turnTimer.unref();
     return c.json({ ok: true });
   });
-  app73.post("/interrupt", requireAdminSession, async (c) => {
+  app75.post("/interrupt", requireAdminSession, async (c) => {
     const cacheKey = c.get("cacheKey");
     const requesterUserId = (cacheKey ? getUserIdForSession(cacheKey) : void 0) ?? null;
     const primaryUserId = resolvePrimaryAdminUserId();
@@ -11361,7 +11543,7 @@ ${note}` : note;
     }
     return c.json({ ok: true, stopped: outcome.stopped, intId: outcome.intId, deadChild: outcome.deadChild }, 200);
   });
-  app73.post("/settings", requireAdminSession, async (c) => {
+  app75.post("/settings", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const op = body?.op;
     const value = body?.value;
@@ -11397,7 +11579,7 @@ ${note}` : note;
     console.log(`[webchat:settings] op=${op} outcome=accepted accountId=${account.accountId.slice(0, 8)} value=${value} settingsApplied=${settingsApplied}`);
     return c.json({ ok: true, settingsApplied });
   });
-  app73.get("/session", requireAdminSession, async (c) => {
+  app75.get("/session", requireAdminSession, async (c) => {
     let accountId;
     try {
       accountId = resolvePlatformAccountId();
@@ -11470,7 +11652,7 @@ ${note}` : note;
     const indicators = await fetchComposerIndicators(sessionId);
     return c.json({ sessionId, projectDir, source, sizeBytes: jsonlSizeBytes(projectDir, sessionId), pendingPermissionPrompt: deps.pendingPromptFor?.(`session:${sessionId}`) ?? null, deliveryFailure: deps.deliveryFailureFor?.(`session:${sessionId}`) ?? null, ...indicators, ...readLevers(account) });
   });
-  app73.post("/permission-verdict", requireAdminSession, async (c) => {
+  app75.post("/permission-verdict", requireAdminSession, async (c) => {
     const body = await c.req.json().catch(() => null);
     const sessionId = body?.sessionId;
     const requestId = body?.request_id;
@@ -11487,7 +11669,7 @@ ${note}` : note;
     const ok = deps.resolvePermissionVerdict?.(`session:${sessionId}`, requestId, behavior) ?? false;
     return c.json({ ok });
   });
-  return app73;
+  return app75;
 }
 
 // server/routes/webchat-greeting.ts
@@ -11688,7 +11870,7 @@ function routeTelegramUpdate(input) {
 }
 
 // server/routes/telegram.ts
-var TAG17 = "[telegram-inbound]";
+var TAG18 = "[telegram-inbound]";
 function configDirName() {
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? resolve17(process.cwd(), "..");
   const brandPath = join27(platformRoot5, "config", "brand.json");
@@ -11709,18 +11891,18 @@ app10.post("/", async (c) => {
   const botParam = c.req.query("bot");
   const botType = botParam === "admin" ? "admin" : botParam === "public" ? "public" : null;
   if (!botType) {
-    console.error(`${TAG17} op=reject reason=missing-bot-param`);
+    console.error(`${TAG18} op=reject reason=missing-bot-param`);
     return c.json({ ok: false }, 400);
   }
   const sp = secretPath(botType);
   if (!existsSync20(sp)) {
-    console.error(`${TAG17} op=reject reason=no-secret-file botType=${botType}`);
+    console.error(`${TAG18} op=reject reason=no-secret-file botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
   const expected = readFileSync22(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
-    console.error(`${TAG17} op=reject reason=bad-secret botType=${botType}`);
+    console.error(`${TAG18} op=reject reason=bad-secret botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
   let update;
@@ -11731,40 +11913,40 @@ app10.post("/", async (c) => {
   }
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG17} op=reject reason=no-account`);
+    console.error(`${TAG18} op=reject reason=no-account`);
     return c.json({ ok: true }, 200);
   }
   const decision = routeTelegramUpdate({ update, botType, config: account.config.telegram ?? {} });
   if (decision.kind === "ignore") {
-    console.error(`${TAG17} op=ignore reason=${decision.reason}`);
+    console.error(`${TAG18} op=ignore reason=${decision.reason}`);
     return c.json({ ok: true }, 200);
   }
   if (decision.kind === "denied") {
-    console.error(`${TAG17} op=denied reason=${decision.reason} agentType=${decision.agentType}`);
+    console.error(`${TAG18} op=denied reason=${decision.reason} agentType=${decision.agentType}`);
     return c.json({ ok: true }, 200);
   }
   const role = decision.agentType === "admin" ? "admin" : "public";
   const agentSlug = role === "admin" ? "admin" : resolveDefaultAgentSlug(account.accountDir);
   if (!agentSlug) {
-    console.error(`${TAG17} op=reject reason=no-default-agent`);
+    console.error(`${TAG18} op=reject reason=no-default-agent`);
     return c.json({ ok: true }, 200);
   }
-  console.error(`${TAG17} op=update accountId=${account.accountId} from=${decision.senderId}`);
+  console.error(`${TAG18} op=update accountId=${account.accountId} from=${decision.senderId}`);
   const botToken = botType === "admin" ? account.config.telegram?.adminBotToken : account.config.telegram?.publicBotToken;
   const { senderId, chatId, text } = decision;
   const gateway = getTelegramGateway();
   if (!gateway) {
-    console.error(`${TAG17} op=reject reason=gateway-not-ready from=${senderId}`);
+    console.error(`${TAG18} op=reject reason=gateway-not-ready from=${senderId}`);
     return c.json({ ok: true }, 200);
   }
   const reply = async (replyText) => {
     if (!botToken) {
       const reason = account.config.telegram ? "no-bot-token" : "no-telegram-config";
-      console.error(`${TAG17} op=reply-dropped reason=${reason} botType=${botType} from=${senderId}`);
+      console.error(`${TAG18} op=reply-dropped reason=${reason} botType=${botType} from=${senderId}`);
       return;
     }
     const sent = await sendTelegramText(botToken, chatId, replyText);
-    console.error(`${TAG17} op=reply-sent from=${senderId} ok=${sent.ok}${sent.ok ? "" : ` error=${sent.error}`}`);
+    console.error(`${TAG18} op=reply-sent from=${senderId} ok=${sent.ok}${sent.ok ? "" : ` error=${sent.error}`}`);
   };
   void gateway.handleInbound({
     accountId: account.accountId,
@@ -11782,7 +11964,7 @@ var telegram_default = app10;
 // server/routes/quickbooks.ts
 import { join as join28 } from "path";
 import { existsSync as existsSync21, readFileSync as readFileSync23, writeFileSync as writeFileSync9, mkdirSync as mkdirSync4, rmSync as rmSync2, renameSync as renameSync5 } from "fs";
-var TAG18 = "[quickbooks]";
+var TAG19 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
 function pendingPath(accountDir, state) {
@@ -11795,14 +11977,14 @@ async function completeConsent(args) {
   const { accountDir, code, realmId } = args;
   const state = args.state;
   if (!state || !STATE_RE.test(state) || !existsSync21(pendingPath(accountDir, state))) {
-    console.error(`${TAG18} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG19} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   const claimFile = `${pendingPath(accountDir, state)}.claimed`;
   try {
     renameSync5(pendingPath(accountDir, state), claimFile);
   } catch {
-    console.error(`${TAG18} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+    console.error(`${TAG19} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
   try {
@@ -11810,14 +11992,14 @@ async function completeConsent(args) {
     try {
       pending = JSON.parse(readFileSync23(claimFile, "utf-8"));
     } catch {
-      console.error(`${TAG18} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG19} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization state could not be read.", stateValid: false };
     }
     if (Date.now() > pending.expiresAt) {
-      console.error(`${TAG18} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
+      console.error(`${TAG19} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization request expired. Generate a new consent link.", stateValid: false };
     }
-    console.error(`${TAG18} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
+    console.error(`${TAG19} op=callback state=${state} stateValid=true realmId=${realmId ?? ""}`);
     if (!code || !realmId) {
       return { ok: false, status: 400, message: "Missing code or realmId in the callback.", stateValid: true };
     }
@@ -11841,12 +12023,12 @@ async function completeConsent(args) {
     });
     const text = await res.text();
     if (!res.ok) {
-      console.error(`${TAG18} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG19} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: `Token exchange failed (${res.status}). Generate a new consent link to retry.`, stateValid: true };
     }
     const body = JSON.parse(text);
     if (!body.refresh_token) {
-      console.error(`${TAG18} op=token-exchange realmId=${realmId} persisted=false`);
+      console.error(`${TAG19} op=token-exchange realmId=${realmId} persisted=false`);
       return { ok: false, status: 502, message: "Token exchange returned no refresh token.", stateValid: true };
     }
     const now = Date.now();
@@ -11859,7 +12041,7 @@ async function completeConsent(args) {
     mkdirSync4(join28(accountDir, "secrets"), { recursive: true });
     writeFileSync9(storePath(accountDir), JSON.stringify(store2, null, 2), { mode: 384 });
     const persisted = JSON.parse(readFileSync23(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
-    console.error(`${TAG18} op=token-exchange realmId=${realmId} persisted=${persisted}`);
+    console.error(`${TAG19} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
     rmSync2(claimFile, { force: true });
@@ -11872,7 +12054,7 @@ var app11 = new Hono();
 app11.get("/callback", async (c) => {
   const account = resolveAccount();
   if (!account) {
-    console.error(`${TAG18} op=callback stateValid=false realmId= reason=no-account`);
+    console.error(`${TAG19} op=callback stateValid=false realmId= reason=no-account`);
     return c.html(page("QuickBooks", "This install has no account configured."), 500);
   }
   const result = await completeConsent({
@@ -15279,7 +15461,7 @@ function resolveTunnelUrl() {
   if (!state) return null;
   return `https://${hostname2}.${state.domain}`;
 }
-var TAG19 = "[claude-session-manager:wrapper]";
+var TAG20 = "[claude-session-manager:wrapper]";
 async function refuseIfClaudeAuthDead(c, route, sessionId) {
   const auth = await ensureAuth();
   if (auth.status !== "dead" && auth.status !== "missing") return null;
@@ -15297,12 +15479,12 @@ async function performSpawnWithInitialMessage(args) {
   const aboutOwner = await resolveOwnerProfileBlock(args.senderId, args.userId);
   const ownerMs = Date.now() - ownerStart;
   const aboutOwnerStatus = aboutOwner == null ? "absent" : "ok" in aboutOwner && aboutOwner.ok === false ? `unresolved:${aboutOwner.reason}` : "ok";
-  console.log(`${TAG19} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
+  console.log(`${TAG20} about-owner-resolved status=${aboutOwnerStatus} ms=${ownerMs}`);
   const dormantPlugins = computeDormantPlugins(args.senderId);
   const activePlugins = computeActivePlugins(args.senderId);
   const specialistDomains = computeSpecialistDomains(args.senderId);
   const tunnelUrl = resolveTunnelUrl();
-  console.log(`${TAG19} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
+  console.log(`${TAG20} tunnel-url-resolved value=${tunnelUrl ?? "null"}`);
   const upstreamPayload = JSON.stringify({
     senderId: args.senderId,
     // Task 205 — pass userId through to the manager so it lands as
@@ -15329,24 +15511,24 @@ async function performSpawnWithInitialMessage(args) {
     // unshapely values.
     conversationNodeId: args.conversationNodeId
   });
-  console.log(`${TAG19} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
+  console.log(`${TAG20} forward-spawn-start managerBase=${managerBase("claude-session-manager:wrapper")} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
   const forwardStart = Date.now();
   const upstream = await fetch(`${managerBase("claude-session-manager:wrapper")}/public-spawn`, {
     method: "POST",
     headers: { "content-type": "application/json" },
     body: upstreamPayload
   }).catch((err) => {
-    console.error(`${TAG19} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
+    console.error(`${TAG20} fetch-failed op=spawn message=${err instanceof Error ? err.message : String(err)} ms=${Date.now() - forwardStart}`);
     return null;
   });
   if (!upstream) return {
     response: new Response(JSON.stringify({ error: "manager-unreachable" }), { status: 503, headers: { "content-type": "application/json" } }),
     claudeSessionId: null
   };
-  console.log(`${TAG19} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
+  console.log(`${TAG20} forward-spawn-done status=${upstream.status} ms=${Date.now() - forwardStart}`);
   if (args.initialMessage) {
     const inputBytes = Buffer.byteLength(args.initialMessage, "utf8");
-    console.log(`${TAG19} initial-message-inlined bytes=${inputBytes}`);
+    console.log(`${TAG20} initial-message-inlined bytes=${inputBytes}`);
   }
   const bodyText = await upstream.text().catch(() => "");
   let claudeSessionId = null;
@@ -15381,7 +15563,7 @@ app22.post("/", async (c) => {
   if (refusal) return refusal;
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(`${TAG19} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
+    console.error(`${TAG20} reject reason=no-account-id cacheKey-prefix=${cacheKey.slice(0, 8)}`);
     return c.json({ error: "admin-account-not-resolved" }, 500);
   }
   const userId = getUserIdForSession(cacheKey) ?? void 0;
@@ -15390,7 +15572,7 @@ app22.post("/", async (c) => {
   const permissionMode = typeof body.permissionMode === "string" ? body.permissionMode : void 0;
   const specialist = typeof body.specialist === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(body.specialist) ? body.specialist : void 0;
   const model = typeof body.model === "string" && /^[A-Za-z0-9._-]{1,64}$/.test(body.model) ? body.model : void 0;
-  console.log(`${TAG19} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
+  console.log(`${TAG20} spawn-request-in surface=cookie accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
   const conversationNodeId = cacheKey ? getSessionIdForSession(cacheKey) : void 0;
   const { response, claudeSessionId } = await performSpawnWithInitialMessage({
     senderId,
@@ -15409,13 +15591,13 @@ app22.post("/", async (c) => {
     claudeSessionId,
     senderId
   );
-  console.log(`${TAG19} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
+  console.log(`${TAG20} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
   return response;
 });
 var claude_sessions_default = app22;
 
 // server/routes/admin/log-ingest.ts
-var TAG20 = "[log-ingest]";
+var TAG21 = "[log-ingest]";
 var TAG_PATTERN = /^[A-Za-z0-9_:-]{1,32}$/;
 var LEVELS = /* @__PURE__ */ new Set(["debug", "info", "warn", "error"]);
 var MAX_LINE_BYTES = 4096;
@@ -15426,7 +15608,7 @@ function isLoopbackAddr2(addr) {
 app23.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr2(remoteAddr)) {
-    console.error(`${TAG20} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG21} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "log-ingest-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -15435,7 +15617,7 @@ app23.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr2(t));
     if (offender !== void 0) {
-      console.error(`${TAG20} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG21} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "log-ingest-loopback-only" }, 403);
     }
   }
@@ -15483,18 +15665,18 @@ var ALLOWED_EVENTS = /* @__PURE__ */ new Set([
 ]);
 var app24 = new Hono();
 app24.post("/", async (c) => {
-  const TAG46 = "[admin:events]";
+  const TAG49 = "[admin:events]";
   let body;
   try {
     body = await c.req.json();
   } catch (err) {
     const detail = err instanceof Error ? err.message : String(err);
-    console.error(`${TAG46} reject reason=body-not-json detail=${detail}`);
+    console.error(`${TAG49} reject reason=body-not-json detail=${detail}`);
     return c.json({ ok: false, detail: "Request body was not valid JSON" }, 400);
   }
   const event = typeof body.event === "string" ? body.event : "";
   if (!ALLOWED_EVENTS.has(event)) {
-    console.error(`${TAG46} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
+    console.error(`${TAG49} reject reason=event-not-allowed event=${JSON.stringify(event)}`);
     return c.json({ ok: false, detail: `Event "${event}" is not allowed` }, 400);
   }
   const rawFields = body.fields && typeof body.fields === "object" ? body.fields : {};
@@ -20958,7 +21140,7 @@ function managerLogFollowUrl(sessionId, opts) {
 }
 
 // server/routes/admin/linkedin-ingest.ts
-var TAG21 = "[linkedin-ingest-route]";
+var TAG22 = "[linkedin-ingest-route]";
 var UUID4 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 var ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,3})?(?:Z|[+-]\d{2}:\d{2})$/;
 var LINKEDIN_URL = /^https:\/\/www\.linkedin\.com\//;
@@ -21062,29 +21244,29 @@ app42.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(TAG21 + " rejected status=400 reason=schema:body-not-json");
+    console.error(TAG22 + " rejected status=400 reason=schema:body-not-json");
     return c.json({ ok: false, error: "schema", reason: "body-not-json" }, 400);
   }
   const v = validate(body);
   if (!v.ok) {
-    console.error(TAG21 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
+    console.error(TAG22 + " rejected status=" + v.status + " reason=" + v.reason + " missing=" + v.missing.join(","));
     return c.json({ ok: false, error: v.error, reason: v.reason, missing: v.missing }, v.status);
   }
   const envelope = v.envelope;
   const cacheKey = c.var.cacheKey ?? "";
   const senderId = getAccountIdForSession(cacheKey) ?? "";
   if (!senderId) {
-    console.error(TAG21 + " rejected status=500 reason=admin-account-not-resolved");
+    console.error(TAG22 + " rejected status=500 reason=admin-account-not-resolved");
     return c.json({ ok: false, error: "admin-account-not-resolved" }, 500);
   }
   const payloadBytes = JSON.stringify(envelope).length;
   console.log(
-    TAG21 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
+    TAG22 + " received kind=" + envelope.kind + " account=" + senderId.slice(0, 8) + " pageUrl=" + envelope.pageUrl + " dispatchId=" + envelope.dispatchId + " payloadBytes=" + payloadBytes
   );
   const initialMessage = buildInitialMessage(envelope);
   const spawnStart = Date.now();
   const sessionId = randomUUID9();
-  console.log(TAG21 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
+  console.log(TAG22 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -21093,12 +21275,12 @@ app42.post("/", requireAdminSession, async (c) => {
   });
   if ("error" in spawned) {
     console.error(
-      TAG21 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
+      TAG22 + " dispatch-failed dispatchId=" + envelope.dispatchId + " status=" + spawned.status + " ms=" + (Date.now() - spawnStart) + " message=" + spawned.error
     );
     return c.json({ ok: false, error: "dispatch-failed", upstreamStatus: spawned.status, detail: spawned.error }, 502);
   }
   console.log(
-    TAG21 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
+    TAG22 + " dispatched dispatchId=" + envelope.dispatchId + " taskId=" + spawned.sessionId + " ms=" + (Date.now() - spawnStart)
   );
   return c.json({ ok: true, dispatchId: envelope.dispatchId, taskId: spawned.sessionId }, 202);
 });
@@ -21106,7 +21288,7 @@ var linkedin_ingest_default = app42;
 
 // server/routes/admin/post-turn-context.ts
 import neo4j2 from "neo4j-driver";
-var TAG22 = "[post-turn-context]";
+var TAG23 = "[post-turn-context]";
 var STRIPPED_PROPERTIES2 = /* @__PURE__ */ new Set([
   "embedding",
   "passwordHash",
@@ -21148,7 +21330,7 @@ var app43 = new Hono();
 app43.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr3(remoteAddr)) {
-    console.error(`${TAG22} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG23} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "post-turn-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -21157,7 +21339,7 @@ app43.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr3(t));
     if (offender !== void 0) {
-      console.error(`${TAG22} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG23} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "post-turn-context-loopback-only" }, 403);
     }
   }
@@ -21189,7 +21371,7 @@ app43.get("/", async (c) => {
     writes.sort((a, b) => a.sortKey.localeCompare(b.sortKey));
     const total = Date.now() - started2;
     console.log(
-      `${TAG22} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
+      `${TAG23} sessionId=${sessionId} accountId=${accountId} writes=${writes.length} ms=${total}`
     );
     return c.json({
       writes: writes.map(({ elementId, labels, properties }) => ({ elementId, labels, properties }))
@@ -21198,7 +21380,7 @@ app43.get("/", async (c) => {
     const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG22} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
+      `${TAG23} neo4j-unreachable sessionId=${sessionId} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `post-turn-context unavailable: ${message}` }, 503);
   } finally {
@@ -21311,7 +21493,7 @@ function formatPreviousContext(writes) {
 }
 
 // server/routes/admin/public-session-context.ts
-var TAG23 = "[public-session-context]";
+var TAG24 = "[public-session-context]";
 function isLoopbackAddr4(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -21319,7 +21501,7 @@ var app44 = new Hono();
 app44.get("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr4(remoteAddr)) {
-    console.error(`${TAG23} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG24} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-context-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -21328,7 +21510,7 @@ app44.get("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr4(t));
     if (offender !== void 0) {
-      console.error(`${TAG23} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG24} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-context-loopback-only" }, 403);
     }
   }
@@ -21342,14 +21524,14 @@ app44.get("/", async (c) => {
     const writes = await fetchSliceWrites(session, sliceToken, accountId);
     const total = Date.now() - started2;
     console.log(
-      `${TAG23} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
+      `${TAG24} sliceToken=${sliceToken.slice(0, 8)} writes=${writes.length} ms=${total}`
     );
     return c.json({ writes });
   } catch (err) {
     const elapsed = Date.now() - started2;
     const message = err instanceof Error ? err.message : String(err);
     console.error(
-      `${TAG23} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
+      `${TAG24} neo4j-unreachable sliceToken=${sliceToken.slice(0, 8)} ms=${elapsed} err="${message}"`
     );
     return c.json({ error: `public-session-context unavailable: ${message}` }, 503);
   } finally {
@@ -21368,7 +21550,7 @@ function getWebchatGateway() {
 }
 
 // server/routes/admin/public-session-exit.ts
-var TAG24 = "[public-session-exit-route]";
+var TAG25 = "[public-session-exit-route]";
 function isLoopbackAddr5(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -21376,7 +21558,7 @@ var app45 = new Hono();
 app45.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr5(remoteAddr)) {
-    console.error(`${TAG24} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG25} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "public-session-exit-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -21385,7 +21567,7 @@ app45.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr5(t));
     if (offender !== void 0) {
-      console.error(`${TAG24} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG25} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "public-session-exit-loopback-only" }, 403);
     }
   }
@@ -21399,7 +21581,7 @@ app45.post("/", async (c) => {
   if (!sessionId) return c.json({ error: "sessionId required" }, 400);
   const gateway = getWebchatGateway();
   if (!gateway) {
-    console.error(`${TAG24} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
+    console.error(`${TAG25} reject reason=gateway-unset sessionId=${sessionId.slice(0, 8)}`);
     return c.json({ error: "webchat-gateway-unset" }, 503);
   }
   gateway.handlePublicSessionExit(sessionId);
@@ -21408,7 +21590,7 @@ app45.post("/", async (c) => {
 var public_session_exit_default = app45;
 
 // server/routes/admin/access-session-evict.ts
-var TAG25 = "[access-session-evict]";
+var TAG26 = "[access-session-evict]";
 function isLoopbackAddr6(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -21416,7 +21598,7 @@ var app46 = new Hono();
 app46.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr6(remoteAddr)) {
-    console.error(`${TAG25} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG26} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "access-session-evict-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -21425,7 +21607,7 @@ app46.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr6(t));
     if (offender !== void 0) {
-      console.error(`${TAG25} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG26} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "access-session-evict-loopback-only" }, 403);
     }
   }
@@ -21438,13 +21620,13 @@ app46.post("/", async (c) => {
   const grantId = typeof body.grantId === "string" ? body.grantId.trim() : "";
   if (!grantId) return c.json({ error: "grantId required" }, 400);
   const dropped = evictAccessSessionsByGrant(grantId);
-  console.log(`${TAG25} grantId=${grantId} dropped=${dropped}`);
+  console.log(`${TAG26} grantId=${grantId} dropped=${dropped}`);
   return c.json({ ok: true, dropped });
 });
 var access_session_evict_default = app46;
 
 // server/routes/admin/enrol-person.ts
-var TAG26 = "[enrol]";
+var TAG27 = "[enrol]";
 function isLoopbackAddr7(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
 }
@@ -21453,7 +21635,7 @@ var app47 = new Hono();
 app47.post("/", async (c) => {
   const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
   if (!isLoopbackAddr7(remoteAddr)) {
-    console.error(`${TAG26} reject reason=non-loopback remoteAddr=${remoteAddr}`);
+    console.error(`${TAG27} reject reason=non-loopback remoteAddr=${remoteAddr}`);
     return c.json({ error: "enrol-person-loopback-only" }, 403);
   }
   const xffHeader = c.env?.incoming?.headers?.["x-forwarded-for"];
@@ -21462,7 +21644,7 @@ app47.post("/", async (c) => {
     const tokens = xffRaw.split(",").map((t) => t.trim()).filter((t) => t.length > 0);
     const offender = tokens.find((t) => !isLoopbackAddr7(t));
     if (offender !== void 0) {
-      console.error(`${TAG26} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
+      console.error(`${TAG27} reject reason=xff-non-loopback xff=${JSON.stringify(xffRaw)}`);
       return c.json({ error: "enrol-person-loopback-only" }, 403);
     }
   }
@@ -21487,7 +21669,7 @@ app47.post("/", async (c) => {
   }
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG26} op=person result=no-account-id`);
+    console.error(`${TAG27} op=person result=no-account-id`);
     return c.json({ error: "no-account-id" }, 500);
   }
   let personId;
@@ -21495,7 +21677,7 @@ app47.post("/", async (c) => {
     personId = await enrolPerson({ accountId, phone, email, agentSlug });
   } catch (err) {
     console.error(
-      `${TAG26} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG27} op=person result=write-failed agentSlug=${agentSlug} contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "enrol-failed" }, 500);
   }
@@ -21505,11 +21687,11 @@ app47.post("/", async (c) => {
     if (g) grant = { grantId: g.grantId, status: g.status, contactValue: g.contactValue };
   } catch (err) {
     console.error(
-      `${TAG26} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG27} op=person result=grant-lookup-failed contact=${maskContact(email)} err="${err instanceof Error ? err.message : String(err)}"`
     );
   }
   console.log(
-    `${TAG26} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
+    `${TAG27} op=person personId=${personId} account=${accountId} agentSlug=${agentSlug} contact=${maskContact(email)}`
   );
   return c.json({ personId, grant }, 200);
 });
@@ -22384,6 +22566,9 @@ app52.delete("/:plugin/:skill", requireAdminSession, async (c) => {
 });
 var skills_default = app52;
 
+// server/routes/admin/tasks-list.ts
+import { basename as basename14, join as join45 } from "path";
+
 // app/lib/time-entry-format.ts
 function secondsBetween(startIso, endIso) {
   const s = Date.parse(startIso);
@@ -22402,7 +22587,7 @@ function toNum(v) {
 }
 
 // server/routes/admin/tasks-list.ts
-var TAG27 = "[task-timer]";
+var TAG28 = "[task-timer]";
 var COMPLETED = /* @__PURE__ */ new Set(["completed"]);
 var HIDDEN_FROM_OPEN = /* @__PURE__ */ new Set(["completed", "cancelled"]);
 var app53 = new Hono();
@@ -22410,12 +22595,12 @@ app53.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG27} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG28} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   const cacheStart = Date.now();
   const cached3 = await getOrCompute("tasks-list", accountId, () => computeTaskList(accountId));
-  console.log(`${TAG27} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
+  console.log(`${TAG28} op=list-cache cache=${cached3.state} account=${accountId} ms=${Date.now() - cacheStart}`);
   if (cached3.value === null) {
     return c.json({ error: "tasks-list-failed" }, 500);
   }
@@ -22442,6 +22627,11 @@ async function computeTaskList(accountId) {
        // rather than a userId slice (Task 1982).
        OPTIONAL MATCH (assignee)-[:OWNS]->(ap:Person) WHERE ap.accountId = assignee.accountId
        WITH t, openTe, assignee, head(collect(ap)) AS assigneePerson
+       // Task 2121 \u2014 the worked-in session. head(collect(...)) for the same
+       // fan-out reason as the assignee match above: a second WORKED_ON_IN edge
+       // would duplicate the row and double-count the census.
+       OPTIONAL MATCH (t)-[:WORKED_ON_IN]->(conv:Conversation)
+       WITH t, openTe, assignee, assigneePerson, head(collect(conv)) AS workConv
        RETURN t.taskId AS taskId, elementId(t) AS rowKey, t.name AS name, t.clientName AS clientName,
               t.propertyAddress AS propertyAddress, t.fee AS fee, t.status AS status,
               coalesce(t.secondsLogged, 0) AS secondsLogged,
@@ -22449,7 +22639,8 @@ async function computeTaskList(accountId) {
               t.createdAt AS createdAt,
               assignee.userId AS assigneeUserId,
               assigneePerson.givenName AS assigneeGivenName,
-              assigneePerson.familyName AS assigneeFamilyName
+              assigneePerson.familyName AS assigneeFamilyName,
+              workConv.sessionId AS sessionId
        ORDER BY t.createdAt DESC`,
       { accountId }
     );
@@ -22463,6 +22654,7 @@ async function computeTaskList(accountId) {
     let missingTaskId = 0;
     let missingCreatedAt = 0;
     let assigned = 0;
+    let sessionLinked = 0;
     for (const rec of result.records) {
       const status = rec.get("status") ?? "pending";
       const runningStartedAt = rec.get("runningStartedAt") ?? null;
@@ -22477,6 +22669,8 @@ async function computeTaskList(accountId) {
       const assigneeGivenName = rec.get("assigneeGivenName") ?? null;
       const assigneeFamilyName = rec.get("assigneeFamilyName") ?? null;
       const assigneeName = assigneeGivenName && assigneeGivenName.trim().length > 0 ? assigneeFamilyName && assigneeFamilyName.trim().length > 0 ? `${assigneeGivenName.trim()} ${assigneeFamilyName.trim()}` : assigneeGivenName.trim() : null;
+      const sessionId = rec.get("sessionId") ?? null;
+      if (sessionId !== null) sessionLinked++;
       const row = {
         taskId,
         rowKey: rec.get("rowKey"),
@@ -22490,23 +22684,73 @@ async function computeTaskList(accountId) {
         runningStartedAt,
         createdAt,
         assigneeUserId,
-        assigneeName
+        assigneeName,
+        sessionId
       };
       if (COMPLETED.has(status)) completed.push(row);
       else if (!HIDDEN_FROM_OPEN.has(status)) open3.push(row);
     }
+    let orphans = 0;
+    try {
+      const orphanResult = await session.run(
+        `MATCH (t:Task {accountId: $accountId})
+         WHERE t.sessionSpawnRequestedAt IS NOT NULL AND NOT (t)-[:WORKED_ON_IN]->(:Conversation)
+         RETURN count(t) AS orphans`,
+        { accountId }
+      );
+      orphans = orphanResult.records.length > 0 ? toNum(orphanResult.records[0].get("orphans")) : 0;
+    } catch (err) {
+      console.error(
+        `${TAG28} op=session-orphans-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+      );
+      orphans = -1;
+    }
+    if (orphans > 0) {
+      console.error(
+        `${TAG28} op=session-orphans account=${accountId} orphans=${orphans} detail="task marked for a session spawn that never linked; the spawned session is unreachable from its row"`
+      );
+    }
+    const linkedIds = [...open3, ...completed].map((r) => r.sessionId).filter((s) => s !== null);
+    let dangling = null;
+    const cfg = claudeConfigDir();
+    if (linkedIds.length === 0) {
+      dangling = 0;
+    } else if (cfg !== null) {
+      try {
+        const walk = enumerateJsonlsWithSkips(join45(cfg, "projects"));
+        if (walk.skipped > 0) {
+          console.error(
+            `${TAG28} op=session-dangling-census-incomplete account=${accountId} skipped=${walk.skipped} detail="a slug the walk could not read contributes no session ids, so its links cannot be judged"`
+          );
+          dangling = null;
+        } else {
+          const live = new Set(walk.files.map((f) => basename14(f.path, ".jsonl")));
+          dangling = linkedIds.filter((id) => !live.has(id)).length;
+        }
+      } catch (err) {
+        console.error(
+          `${TAG28} op=session-dangling-census-failed account=${accountId} error="${err instanceof Error ? err.message : String(err)}"`
+        );
+        dangling = null;
+      }
+    }
+    if (dangling !== null && dangling > 0) {
+      console.error(
+        `${TAG28} op=session-dangling account=${accountId} dangling=${dangling} linked=${linkedIds.length} detail="a task links a session with no JSONL on disk; clicking it will not resume"`
+      );
+    }
     const returned = result.records.length;
     if (returned < graphTotal) {
       console.error(
-        `${TAG27} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
+        `${TAG28} op=list row-count-shortfall account=${accountId} returned=${returned} graphTotal=${graphTotal} missing=${graphTotal - returned}`
       );
     }
     console.log(
-      `${TAG27} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open3.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned}`
+      `${TAG28} op=list account=${accountId} returned=${returned} graphTotal=${graphTotal} open=${open3.length} completed=${completed.length} missingTaskId=${missingTaskId} missingCreatedAt=${missingCreatedAt} assigned=${assigned} sessionLinked=${sessionLinked} sessionOrphans=${orphans < 0 ? "n/a" : orphans} sessionDangling=${dangling === null ? "n/a" : dangling}`
     );
     return { open: open3, completed };
   } catch (err) {
-    console.error(`${TAG27} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG28} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   } finally {
     await session.close();
@@ -22516,7 +22760,7 @@ var tasks_list_default = app53;
 
 // server/routes/admin/task-timer-start.ts
 import { randomUUID as randomUUID10 } from "crypto";
-var TAG28 = "[task-timer]";
+var TAG29 = "[task-timer]";
 var app54 = new Hono();
 app54.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -22531,7 +22775,7 @@ app54.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG28} op=timer-start rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG29} op=timer-start rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -22542,7 +22786,7 @@ app54.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (target.records.length === 0) {
-      console.error(`${TAG28} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
+      console.error(`${TAG29} op=start taskId=${taskId} accountId=${accountId} result=task-not-found`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const open3 = await session.run(
@@ -22554,7 +22798,7 @@ app54.post("/", requireAdminSession, async (c) => {
     const priorEntryId = open3.records[0]?.get("entryId");
     const priorStartedAt = open3.records[0]?.get("startedAt");
     if (priorEntryId) {
-      console.log(`${TAG28} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
+      console.log(`${TAG29} op=start taskId=${taskId} accountId=${accountId} result=already-running`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: true, entryId: priorEntryId, startedAt: priorStartedAt });
     }
@@ -22565,11 +22809,11 @@ app54.post("/", requireAdminSession, async (c) => {
        CREATE (te)-[:LOGGED_AGAINST]->(t)`,
       { taskId, accountId, entryId, now }
     );
-    console.log(`${TAG28} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
+    console.log(`${TAG29} op=opened taskId=${taskId} entryId=${entryId} startedAt=${now}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: true, entryId, startedAt: now });
   } catch (err) {
-    console.error(`${TAG28} op=start error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG29} op=start error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-start-failed" }, 500);
   } finally {
     await session.close();
@@ -22579,7 +22823,7 @@ var task_timer_start_default = app54;
 
 // server/routes/admin/task-timer-stop.ts
 import neo4j4 from "neo4j-driver";
-var TAG29 = "[task-timer]";
+var TAG30 = "[task-timer]";
 var app55 = new Hono();
 app55.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -22594,7 +22838,7 @@ app55.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG29} op=timer-stop rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG30} op=timer-stop rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -22615,7 +22859,7 @@ app55.post("/", requireAdminSession, async (c) => {
         { taskId, accountId }
       );
       const secondsLogged2 = toNum(cur.records[0]?.get("secondsLogged"));
-      console.log(`${TAG29} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
+      console.log(`${TAG30} op=stop taskId=${taskId} entryId=none seconds=0 totalAfter=${secondsLogged2}`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: false, seconds: 0, secondsLogged: secondsLogged2 });
     }
@@ -22639,12 +22883,12 @@ app55.post("/", requireAdminSession, async (c) => {
     const sumEntries = toNum(verify.records[0]?.get("sumEntries"));
     const sumAdjustments = toNum(verify.records[0]?.get("sumAdjustments"));
     const secondsLogged = toNum(verify.records[0]?.get("secondsLogged"));
-    console.log(`${TAG29} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
-    console.log(`${TAG29} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
+    console.log(`${TAG30} op=stop taskId=${taskId} entryId=${entryId} seconds=${seconds} totalAfter=${secondsLogged}`);
+    console.log(`${TAG30} op=persisted taskId=${taskId} entryId=${entryId} sumEntries=${sumEntries} sumAdjustments=${sumAdjustments} secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, running: false, seconds, secondsLogged });
   } catch (err) {
-    console.error(`${TAG29} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG30} op=stop error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-timer-stop-failed" }, 500);
   } finally {
     await session.close();
@@ -22653,7 +22897,7 @@ app55.post("/", requireAdminSession, async (c) => {
 var task_timer_stop_default = app55;
 
 // server/routes/admin/task-complete.ts
-var TAG30 = "[task-timer]";
+var TAG31 = "[task-timer]";
 var app56 = new Hono();
 app56.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -22668,7 +22912,7 @@ app56.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG30} op=complete rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG31} op=complete rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -22684,11 +22928,11 @@ app56.post("/", requireAdminSession, async (c) => {
       return c.json({ error: "task-not-found" }, 404);
     }
     const secondsLogged = toNum(result.records[0].get("secondsLogged"));
-    console.log(`${TAG30} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
+    console.log(`${TAG31} op=complete taskId=${taskId} status=completed secondsLogged=${secondsLogged}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, status: "completed", secondsLogged });
   } catch (err) {
-    console.error(`${TAG30} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG31} op=complete error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-complete-failed" }, 500);
   } finally {
     await session.close();
@@ -22699,7 +22943,7 @@ var task_complete_default = app56;
 // server/routes/admin/task-time-adjust.ts
 import { randomUUID as randomUUID11 } from "crypto";
 import neo4j5 from "neo4j-driver";
-var TAG31 = "[task-time-adjust]";
+var TAG32 = "[task-time-adjust]";
 var app57 = new Hono();
 app57.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -22709,23 +22953,23 @@ app57.post("/", requireAdminSession, async (c) => {
   try {
     body = await c.req.json();
   } catch {
-    console.error(`${TAG31} op=reject reason=bad-json`);
+    console.error(`${TAG32} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG31} op=time-adjust rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG32} op=time-adjust rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const newSeconds = body.newSeconds;
   if (typeof newSeconds !== "number" || !Number.isInteger(newSeconds) || newSeconds < 0) {
-    console.error(`${TAG31} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
+    console.error(`${TAG32} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
     return c.json({ error: "newSeconds must be a non-negative integer" }, 400);
   }
   const adjustmentId = randomUUID11();
   const now = (/* @__PURE__ */ new Date()).toISOString();
-  console.log(`${TAG31} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
+  console.log(`${TAG32} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
   const session = getSession();
   try {
     const guard = await session.run(
@@ -22735,12 +22979,12 @@ app57.post("/", requireAdminSession, async (c) => {
       { taskId, accountId }
     );
     if (guard.records.length === 0) {
-      console.error(`${TAG31} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG32} op=reject reason=no-task adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-not-found" }, 404);
     }
     const openCount = toNum(guard.records[0].get("openCount"));
     if (openCount > 0) {
-      console.error(`${TAG31} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
+      console.error(`${TAG32} op=reject reason=running adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId}`);
       return c.json({ error: "task-timer-running" }, 409);
     }
     const previousSeconds = toNum(guard.records[0].get("previousSeconds"));
@@ -22766,11 +23010,11 @@ app57.post("/", requireAdminSession, async (c) => {
       }
     );
     const secondsLoggedAfter = toNum(write.records[0]?.get("secondsLoggedAfter"));
-    console.log(`${TAG31} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
+    console.log(`${TAG32} op=persisted adjustmentId=${adjustmentId} previousSeconds=${previousSeconds} newSeconds=${newSeconds} delta=${delta} secondsLoggedAfter=${secondsLoggedAfter}`);
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, secondsLogged: secondsLoggedAfter });
   } catch (err) {
-    console.error(`${TAG31} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG32} op=error adjustmentId=${adjustmentId} taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-time-adjust-failed" }, 500);
   } finally {
     await session.close();
@@ -22863,7 +23107,7 @@ async function resolveAssignableAdmins(accountId, accountsDir = ACCOUNTS_DIR) {
 }
 
 // server/routes/admin/task-assign.ts
-var TAG32 = "[task-assign]";
+var TAG33 = "[task-assign]";
 var app58 = new Hono();
 app58.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -22878,7 +23122,7 @@ app58.post("/", requireAdminSession, async (c) => {
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
-    console.error(`${TAG32} op=assign rejected reason=${reason} account=${accountId}`);
+    console.error(`${TAG33} op=assign rejected reason=${reason} account=${accountId}`);
     return c.json({ error: "taskId required" }, 400);
   }
   const rawAssignee = body.assigneeUserId;
@@ -22890,7 +23134,7 @@ app58.post("/", requireAdminSession, async (c) => {
     const { ids } = await resolveAllowedAssigneeIds(accountId);
     if (!ids.has(assigneeUserId)) {
       console.error(
-        `${TAG32} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
+        `${TAG33} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=not-in-roster`
       );
       return c.json({ error: "assignee-not-in-roster" }, 403);
     }
@@ -22912,7 +23156,7 @@ app58.post("/", requireAdminSession, async (c) => {
         `MATCH (t:Task {taskId: $taskId, accountId: $accountId}) SET t.updatedAt = $now`,
         { taskId, accountId, now }
       );
-      console.log(`${TAG32} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
+      console.log(`${TAG33} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=none assigned=false source=route`);
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, assigneeUserId: null, assigneeName: null });
     }
@@ -22928,7 +23172,7 @@ app58.post("/", requireAdminSession, async (c) => {
     );
     if (set.records.length === 0) {
       console.error(
-        `${TAG32} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
+        `${TAG33} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=false source=route reason=no-adminuser-node`
       );
       return c.json({ error: "assignee-no-admin-node" }, 409);
     }
@@ -22936,12 +23180,12 @@ app58.post("/", requireAdminSession, async (c) => {
     const family = set.records[0].get("familyName") ?? null;
     const assigneeName = given && given.trim().length > 0 ? family && family.trim().length > 0 ? `${given.trim()} ${family.trim()}` : given.trim() : null;
     console.log(
-      `${TAG32} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
+      `${TAG33} op=assign taskId=${taskId.slice(0, 8)} assigneeUserId=${assigneeUserId.slice(0, 8)} assigned=true source=route`
     );
     invalidate("tasks-list", accountId);
     return c.json({ ok: true, assigneeUserId, assigneeName });
   } catch (err) {
-    console.error(`${TAG32} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG33} op=assign error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-assign-failed" }, 500);
   } finally {
     await session.close();
@@ -22949,31 +23193,179 @@ app58.post("/", requireAdminSession, async (c) => {
 });
 var task_assign_default = app58;
 
-// server/routes/admin/admin-users-list.ts
-var TAG33 = "[admin-users]";
+// server/routes/admin/task-session-open.ts
+var TAG34 = "[task-session]";
 var app59 = new Hono();
-app59.get("/", requireAdminSession, async (c) => {
+app59.post("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
-    console.error(`${TAG33} op=list auth-rejected reason="no account for session"`);
+    console.error(`${TAG34} op=request auth-rejected reason="no account for session"`);
+    return c.json({ error: "Account not found for session" }, 401);
+  }
+  let body;
+  try {
+    body = await c.req.json();
+  } catch {
+    return c.json({ error: "invalid-json" }, 400);
+  }
+  const taskId = typeof body.taskId === "string" ? body.taskId : "";
+  if (!taskId) {
+    const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
+    console.error(`${TAG34} op=request rejected reason=${reason} account=${accountId}`);
+    return c.json({ error: "taskId required" }, 400);
+  }
+  const session = getSession();
+  try {
+    const found = await session.run(
+      `MATCH (t:Task {taskId: $taskId, accountId: $accountId})
+       OPTIONAL MATCH (t)-[:WORKED_ON_IN]->(conv:Conversation)
+       WITH t, head(collect(conv)) AS linked
+       RETURN t.name AS name, linked.sessionId AS sessionId LIMIT 1`,
+      { taskId, accountId }
+    );
+    if (found.records.length === 0) {
+      console.error(`${TAG34} op=request taskId=${taskId} account=${accountId} result=task-not-found`);
+      return c.json({ error: "task-not-found" }, 404);
+    }
+    const title = found.records[0].get("name") ?? "";
+    const sessionId = found.records[0].get("sessionId") ?? null;
+    console.log(`${TAG34} op=request taskId=${taskId} account=${accountId} linked=${sessionId ?? "none"}`);
+    if (sessionId !== null) return c.json({ sessionId, title, accountId });
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const stamped = await session.run(
+      `MATCH (t:Task {taskId: $taskId, accountId: $accountId})
+       SET t.sessionSpawnRequestedAt = $now
+       RETURN t.sessionSpawnRequestedAt AS at`,
+      { taskId, accountId, now }
+    );
+    const at = stamped.records[0]?.get("at") ?? void 0;
+    console.log(`${TAG34} op=marker taskId=${taskId} stamped=${at !== void 0}`);
+    return c.json({ sessionId: null, title, accountId });
+  } catch (err) {
+    console.error(`${TAG34} op=request taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
+    return c.json({ error: "task-session-open-failed" }, 500);
+  } finally {
+    await session.close();
+  }
+});
+var task_session_open_default = app59;
+
+// server/routes/admin/task-session-link.ts
+var TAG35 = "[task-session]";
+var app60 = new Hono();
+app60.post("/", requireAdminSession, async (c) => {
+  const cacheKey = c.var.cacheKey;
+  const accountId = getAccountIdForSession(cacheKey);
+  if (!accountId) {
+    console.error(`${TAG35} op=link auth-rejected reason="no account for session"`);
+    return c.json({ error: "Account not found for session" }, 401);
+  }
+  let body;
+  try {
+    body = await c.req.json();
+  } catch {
+    return c.json({ error: "invalid-json" }, 400);
+  }
+  const taskId = typeof body.taskId === "string" ? body.taskId : "";
+  if (!taskId) {
+    const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
+    console.error(`${TAG35} op=link rejected reason=${reason} account=${accountId}`);
+    return c.json({ error: "taskId required" }, 400);
+  }
+  const sessionId = typeof body.sessionId === "string" && body.sessionId.length > 0 ? body.sessionId : "";
+  if (!sessionId) {
+    console.error(`${TAG35} op=link rejected reason=missing-sessionId taskId=${taskId} account=${accountId}`);
+    return c.json({ error: "sessionId required" }, 400);
+  }
+  const session = getSession();
+  try {
+    const state = await session.run(
+      `MATCH (t:Task {taskId: $taskId, accountId: $accountId})
+       OPTIONAL MATCH (target:Conversation {sessionId: $sessionId, accountId: $accountId})
+       OPTIONAL MATCH (t)-[:WORKED_ON_IN]->(prev:Conversation)
+       RETURN target IS NOT NULL AS conversationExists,
+              collect(DISTINCT prev.sessionId) AS priorSessionIds`,
+      { taskId, accountId, sessionId }
+    );
+    if (state.records.length === 0) {
+      console.error(`${TAG35} op=link taskId=${taskId} account=${accountId} result=task-not-found`);
+      return c.json({ error: "task-not-found" }, 404);
+    }
+    const conversationExists = state.records[0].get("conversationExists") === true;
+    const priorSessionIds = (state.records[0].get("priorSessionIds") ?? []).filter((s) => typeof s === "string");
+    if (!conversationExists) {
+      console.error(`${TAG35} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=conversation-absent`);
+      return c.json({ linked: false, created: false, repointedFrom: null });
+    }
+    const stale = priorSessionIds.filter((s) => s !== sessionId);
+    await session.run(
+      `MATCH (t:Task {taskId: $taskId, accountId: $accountId})
+       MATCH (target:Conversation {sessionId: $sessionId, accountId: $accountId})
+       OPTIONAL MATCH (t)-[r:WORKED_ON_IN]->(prev:Conversation)
+       WHERE prev.sessionId <> $sessionId
+       DELETE r
+       WITH DISTINCT t, target
+       MERGE (t)-[:WORKED_ON_IN]->(target)
+       REMOVE t.sessionSpawnRequestedAt`,
+      { taskId, accountId, sessionId }
+    );
+    const verify = await session.run(
+      `MATCH (t:Task {taskId: $taskId, accountId: $accountId})-[:WORKED_ON_IN]->(c:Conversation)
+       RETURN c.sessionId AS sessionId LIMIT 1`,
+      { taskId, accountId }
+    );
+    const linkedTo = verify.records[0]?.get("sessionId") ?? null;
+    const linked = linkedTo === sessionId;
+    const created = linked && !priorSessionIds.includes(sessionId);
+    const repointedFrom = stale.length > 0 ? stale[0] : null;
+    if (!linked) {
+      console.error(
+        `${TAG35} op=link-failed taskId=${taskId} sessionId=${sessionId} reason=edge-absent-after-merge linkedTo=${linkedTo ?? "none"}`
+      );
+      return c.json({ linked: false, created: false, repointedFrom });
+    }
+    console.log(
+      `${TAG35} op=link taskId=${taskId} sessionId=${sessionId} created=${created} repointedFrom=${repointedFrom ?? "none"}`
+    );
+    invalidate("tasks-list", accountId);
+    return c.json({ linked: true, created, repointedFrom });
+  } catch (err) {
+    console.error(
+      `${TAG35} op=link-failed taskId=${taskId} sessionId=${sessionId} reason="${err instanceof Error ? err.message : String(err)}"`
+    );
+    return c.json({ error: "task-session-link-failed" }, 500);
+  } finally {
+    await session.close();
+  }
+});
+var task_session_link_default = app60;
+
+// server/routes/admin/admin-users-list.ts
+var TAG36 = "[admin-users]";
+var app61 = new Hono();
+app61.get("/", requireAdminSession, async (c) => {
+  const cacheKey = c.var.cacheKey;
+  const accountId = getAccountIdForSession(cacheKey);
+  if (!accountId) {
+    console.error(`${TAG36} op=list auth-rejected reason="no account for session"`);
     return c.json({ error: "Account not found for session" }, 401);
   }
   try {
     const users = await resolveAssignableAdmins(accountId);
-    console.log(`${TAG33} op=list account=${accountId} count=${users.length}`);
+    console.log(`${TAG36} op=list account=${accountId} count=${users.length}`);
     return c.json({ ok: true, users });
   } catch (err) {
-    console.error(`${TAG33} op=list error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG36} op=list error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "admin-users-list-failed" }, 500);
   }
 });
-var admin_users_list_default = app59;
+var admin_users_list_default = app61;
 
 // server/routes/admin/activity.ts
 import { readdirSync as readdirSync26 } from "fs";
-var app60 = new Hono();
-var TAG34 = "[activity]";
+var app62 = new Hono();
+var TAG37 = "[activity]";
 function resolveHouseAccountId(accounts) {
   const houses = accounts.filter((a) => a.config.role === "house");
   if (houses.length === 1) return { accountId: houses[0].accountId, reason: "house" };
@@ -22994,7 +23386,7 @@ function countAccountDirsOnDisk() {
     return null;
   }
 }
-app60.get("/", requireAdminSession, async (c) => {
+app62.get("/", requireAdminSession, async (c) => {
   const req = requestToken();
   const cacheKey = c.var.cacheKey;
   const caller2 = getAccountIdForSession(cacheKey) ?? null;
@@ -23002,19 +23394,19 @@ app60.get("/", requireAdminSession, async (c) => {
   const house = resolveHouseAccountId(valid);
   const isHouse = caller2 !== null && house.accountId !== null && caller2 === house.accountId;
   console.log(
-    `${TAG34} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
+    `${TAG37} op=request req=${req} caller=${short(caller2)} house=${isHouse} houseVia=${house.reason}`
   );
   if (!isHouse) {
     const reason = house.accountId === null ? house.reason : "not-house";
     console.error(
-      `${TAG34} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
+      `${TAG37} op=gate req=${req} decision=deny reason=${reason} caller=${short(caller2)} houseAcct=${short(house.accountId)} accounts=${valid.length}`
     );
     return c.json({ error: "house-only" }, 403);
   }
-  console.log(`${TAG34} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
+  console.log(`${TAG37} op=gate req=${req} decision=allow caller=${short(caller2)} via=${house.reason}`);
   const onDisk = countAccountDirsOnDisk();
   console.log(
-    `${TAG34} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
+    `${TAG37} op=accounts req=${req} onDisk=${onDisk ?? "unknown"} valid=${valid.length} ids=${valid.map((a) => short(a.accountId)).join(",")}`
   );
   const start = Date.now();
   let res;
@@ -23030,17 +23422,17 @@ app60.get("/", requireAdminSession, async (c) => {
     });
   } catch (err) {
     console.error(
-      `${TAG34} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
+      `${TAG37} op=manager-fail req=${req} reason=unreachable err=${err instanceof Error ? err.message : String(err)}`
     );
     return c.json({ error: "manager-unreachable" }, 502);
   }
   if (res.status !== 200) {
-    console.error(`${TAG34} op=manager-fail req=${req} reason=status status=${res.status}`);
+    console.error(`${TAG37} op=manager-fail req=${req} reason=status status=${res.status}`);
     return c.json({ error: `manager-status-${res.status}` }, 502);
   }
   const body = await res.json().catch(() => null);
   if (!body || !Array.isArray(body.rows)) {
-    console.error(`${TAG34} op=manager-fail req=${req} reason=bad-json`);
+    console.error(`${TAG37} op=manager-fail req=${req} reason=bad-json`);
     return c.json({ error: "manager-bad-json" }, 502);
   }
   const rows = body.rows;
@@ -23051,10 +23443,10 @@ app60.get("/", requireAdminSession, async (c) => {
   const ageNull = rows.filter((r) => r.ageMs === null).length;
   const sidecarNull = rows.filter((r) => r.sidecarMissing).length;
   console.log(
-    `${TAG34} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
+    `${TAG37} op=census req=${req} ageMs=${censusAgeMs ?? "none"} live=${census?.live ?? "none"} cpuNull=${census?.cpuNull ?? "none"} rows=${rows.length} ageNull=${ageNull} sidecarNull=${sidecarNull}`
   );
   console.log(
-    `${TAG34} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
+    `${TAG37} op=response req=${req} rows=${rows.length} accounts=${valid.length} untagged=${untaggedCount} meteringFailed=${meteringFailed} ms=${Date.now() - start}`
   );
   const names = {};
   await Promise.all(
@@ -23073,7 +23465,7 @@ app60.get("/", requireAdminSession, async (c) => {
     return acc;
   }, {});
   console.log(
-    `${TAG34} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
+    `${TAG37} op=loops req=${req} armed=${armed2} rendered=${loopRows.length} procPct=${cpu.processPct?.toFixed(1) ?? "null"} attributedPct=${cpu.attributedPct?.toFixed(1) ?? "null"} ` + Object.entries(byState).map(([s, n]) => `${s}=${n}`).join(" ")
   );
   return c.json({
     rows,
@@ -23103,66 +23495,68 @@ app60.get("/", requireAdminSession, async (c) => {
     }
   });
 });
-var activity_default = app60;
+var activity_default = app62;
 
 // server/routes/admin/index.ts
-var app61 = new Hono();
-app61.route("/session", session_default);
-app61.route("/accounts", accounts_default);
-app61.route("/logs", logs_default);
-app61.route("/claude-info", claude_info_default);
-app61.route("/attachment", attachment_default);
-app61.route("/session-upload", session_upload_default);
-app61.route("/agents", agents_default);
-app61.route("/sessions", sessions_default);
-app61.route("/claude-sessions", claude_sessions_default);
-app61.route("/log-ingest", log_ingest_default);
-app61.route("/events", events_default);
-app61.route("/files", files_default);
-app61.route("/graph-search", graph_search_default);
-app61.route("/graph-subgraph", graph_subgraph_default);
-app61.route("/graph-delete", graph_delete_default);
-app61.route("/graph-restore", graph_restore_default);
-app61.route("/graph-labels-in-graph", graph_labels_in_graph_default);
-app61.route("/graph-default-view", graph_default_view_default);
-app61.route("/sidebar-artefacts", sidebar_artefacts_default);
-app61.route("/sidebar-sessions", sidebar_sessions_default);
-app61.route("/session-delete", session_delete_default);
-app61.route("/session-stop", session_stop_default);
-app61.route("/session-archive", session_archive_default);
-app61.route("/session-rename", session_rename_default);
-app61.route("/session-usage", session_usage_default);
-app61.route("/browser", browser_default);
-app61.route("/session-rc-spawn", session_rc_spawn_default);
-app61.route("/session-reseat", session_reseat_default);
-app61.route("/system-stats", system_stats_default);
-app61.route("/health-brand", health_default2);
-app61.route("/linkedin-ingest", linkedin_ingest_default);
-app61.route("/post-turn-context", post_turn_context_default);
-app61.route("/public-session-context", public_session_context_default);
-app61.route("/public-session-exit", public_session_exit_default);
-app61.route("/access-session-evict", access_session_evict_default);
-app61.route("/enrol-person", enrol_person_default);
-app61.route("/calendar", calendar_default);
-app61.route("/data-portal", data_portal_default);
-app61.route("/routines", routines_default);
-app61.route("/skills", skills_default);
-app61.route("/tasks-list", tasks_list_default);
-app61.route("/task-timer-start", task_timer_start_default);
-app61.route("/task-timer-stop", task_timer_stop_default);
-app61.route("/task-complete", task_complete_default);
-app61.route("/task-time-adjust", task_time_adjust_default);
-app61.route("/task-assign", task_assign_default);
-app61.route("/admin-users-list", admin_users_list_default);
-app61.route("/activity", activity_default);
-var admin_default = app61;
+var app63 = new Hono();
+app63.route("/session", session_default);
+app63.route("/accounts", accounts_default);
+app63.route("/logs", logs_default);
+app63.route("/claude-info", claude_info_default);
+app63.route("/attachment", attachment_default);
+app63.route("/session-upload", session_upload_default);
+app63.route("/agents", agents_default);
+app63.route("/sessions", sessions_default);
+app63.route("/claude-sessions", claude_sessions_default);
+app63.route("/log-ingest", log_ingest_default);
+app63.route("/events", events_default);
+app63.route("/files", files_default);
+app63.route("/graph-search", graph_search_default);
+app63.route("/graph-subgraph", graph_subgraph_default);
+app63.route("/graph-delete", graph_delete_default);
+app63.route("/graph-restore", graph_restore_default);
+app63.route("/graph-labels-in-graph", graph_labels_in_graph_default);
+app63.route("/graph-default-view", graph_default_view_default);
+app63.route("/sidebar-artefacts", sidebar_artefacts_default);
+app63.route("/sidebar-sessions", sidebar_sessions_default);
+app63.route("/session-delete", session_delete_default);
+app63.route("/session-stop", session_stop_default);
+app63.route("/session-archive", session_archive_default);
+app63.route("/session-rename", session_rename_default);
+app63.route("/session-usage", session_usage_default);
+app63.route("/browser", browser_default);
+app63.route("/session-rc-spawn", session_rc_spawn_default);
+app63.route("/session-reseat", session_reseat_default);
+app63.route("/system-stats", system_stats_default);
+app63.route("/health-brand", health_default2);
+app63.route("/linkedin-ingest", linkedin_ingest_default);
+app63.route("/post-turn-context", post_turn_context_default);
+app63.route("/public-session-context", public_session_context_default);
+app63.route("/public-session-exit", public_session_exit_default);
+app63.route("/access-session-evict", access_session_evict_default);
+app63.route("/enrol-person", enrol_person_default);
+app63.route("/calendar", calendar_default);
+app63.route("/data-portal", data_portal_default);
+app63.route("/routines", routines_default);
+app63.route("/skills", skills_default);
+app63.route("/tasks-list", tasks_list_default);
+app63.route("/task-timer-start", task_timer_start_default);
+app63.route("/task-timer-stop", task_timer_stop_default);
+app63.route("/task-complete", task_complete_default);
+app63.route("/task-time-adjust", task_time_adjust_default);
+app63.route("/task-assign", task_assign_default);
+app63.route("/task-session-open", task_session_open_default);
+app63.route("/task-session-link", task_session_link_default);
+app63.route("/admin-users-list", admin_users_list_default);
+app63.route("/activity", activity_default);
+var admin_default = app63;
 
 // server/routes/access/verify-token.ts
-var TAG35 = "[access-verify]";
+var TAG38 = "[access-verify]";
 var MINT_TAG = "[access-session-mint]";
 var COOKIE_NAME = "__access_session";
-var app62 = new Hono();
-app62.post("/", async (c) => {
+var app64 = new Hono();
+app64.post("/", async (c) => {
   const ip = c.var.clientIp || "unknown";
   let body;
   try {
@@ -23177,39 +23571,39 @@ app62.post("/", async (c) => {
   }
   const rateMsg = checkAccessRateLimit(ip, agentSlug);
   if (rateMsg) {
-    console.error(`${TAG35} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
+    console.error(`${TAG38} grantId=- agentSlug=${agentSlug} result=rate-limited ip=${ip}`);
     return c.json({ error: rateMsg }, 429);
   }
   const grant = await findGrantByMagicToken(token);
   if (!grant) {
     recordAccessFailedAttempt(ip, agentSlug);
-    console.error(`${TAG35} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
+    console.error(`${TAG38} grantId=- agentSlug=${agentSlug} result=notfound ip=${ip}`);
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.agentSlug !== agentSlug) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG35} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
+      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=agent-mismatch grantAgent=${grant.agentSlug} ip=${ip}`
     );
     return c.json({ error: "invalid-or-expired-link" }, 401);
   }
   if (grant.status === "expired" || grant.status === "revoked") {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG35} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
+      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired status=${grant.status} ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (grant.expiresAt !== null && grant.expiresAt < Date.now()) {
     recordAccessFailedAttempt(ip, agentSlug);
     console.error(
-      `${TAG35} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
+      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=expired reason=expiresAt-past ip=${ip}`
     );
     return c.json({ error: "access-no-longer-valid" }, 401);
   }
   if (!grant.sliceToken) {
     console.error(
-      `${TAG35} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
+      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=no-slice-token reason=schema-violation`
     );
     return c.json({ error: "grant-misconfigured" }, 500);
   }
@@ -23225,12 +23619,12 @@ app62.post("/", async (c) => {
     await consumeMagicTokenAndActivate(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG35} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=consume-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ error: "verification-failed" }, 500);
   }
   clearAccessRateLimit(ip, agentSlug);
-  console.log(`${TAG35} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
+  console.log(`${TAG38} grantId=${grant.grantId} agentSlug=${agentSlug} result=ok ip=${ip}`);
   console.log(
     `${MINT_TAG} grantId=${grant.grantId} sliceToken=${grant.sliceToken.slice(0, 8)} agentSlug=${agentSlug} personId=${grant.personId ?? "none"}`
   );
@@ -23244,7 +23638,7 @@ app62.post("/", async (c) => {
     displayName: grant.displayName
   });
 });
-var verify_token_default = app62;
+var verify_token_default = app64;
 
 // app/lib/access-email.ts
 import { spawn as spawn2 } from "child_process";
@@ -23306,10 +23700,10 @@ async function sendMagicLinkEmail(payload) {
 }
 
 // server/routes/access/request-magic-link.ts
-var TAG36 = "[access-request-link]";
-var app63 = new Hono();
+var TAG39 = "[access-request-link]";
+var app65 = new Hono();
 var VISITOR_MESSAGE = "If that email is on the invite list, a fresh link is on the way.";
-app63.post("/", async (c) => {
+app65.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -23323,18 +23717,18 @@ app63.post("/", async (c) => {
   }
   const rateMsg = checkRequestLinkRateLimit(contactValue);
   if (rateMsg) {
-    console.error(`${TAG36} contactValue=${maskContact(contactValue)} result=rate-limited`);
+    console.error(`${TAG39} contactValue=${maskContact(contactValue)} result=rate-limited`);
     return c.json({ error: rateMsg }, 429);
   }
   recordRequestLinkAttempt(contactValue);
   const accountId = process.env.ACCOUNT_ID ?? "";
   if (!accountId) {
-    console.error(`${TAG36} contactValue=${maskContact(contactValue)} result=no-account-id`);
+    console.error(`${TAG39} contactValue=${maskContact(contactValue)} result=no-account-id`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   const grant = await findActiveGrantByContact(contactValue, agentSlug, accountId);
   if (!grant) {
-    console.log(`${TAG36} contactValue=${maskContact(contactValue)} result=notfound`);
+    console.log(`${TAG39} contactValue=${maskContact(contactValue)} result=notfound`);
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   let token;
@@ -23342,7 +23736,7 @@ app63.post("/", async (c) => {
     token = await generateNewMagicToken(grant.grantId);
   } catch (err) {
     console.error(
-      `${TAG36} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG39} contactValue=${maskContact(contactValue)} result=mint-failed err="${err instanceof Error ? err.message : String(err)}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
@@ -23374,22 +23768,22 @@ app63.post("/", async (c) => {
   });
   if (!sendResult.ok) {
     console.error(
-      `${TAG36} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
+      `${TAG39} contactValue=${maskContact(contactValue)} result=send-failed err="${sendResult.error}"`
     );
     return c.json({ message: VISITOR_MESSAGE }, 200);
   }
   console.log(
-    `${TAG36} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
+    `${TAG39} contactValue=${maskContact(contactValue)} result=ok messageId=${sendResult.messageId}`
   );
   return c.json({ message: VISITOR_MESSAGE }, 200);
 });
-var request_magic_link_default = app63;
+var request_magic_link_default = app65;
 
 // server/routes/access/index.ts
-var app64 = new Hono();
-app64.route("/verify-token", verify_token_default);
-app64.route("/request-magic-link", request_magic_link_default);
-var access_default = app64;
+var app66 = new Hono();
+app66.route("/verify-token", verify_token_default);
+app66.route("/request-magic-link", request_magic_link_default);
+var access_default = app66;
 
 // server/routes/sites.ts
 import { existsSync as existsSync41, readFileSync as readFileSync38, realpathSync as realpathSync8, statSync as statSync21 } from "fs";
@@ -23424,8 +23818,8 @@ function getExt(p) {
   if (idx < p.lastIndexOf("/")) return "";
   return p.slice(idx).toLowerCase();
 }
-var app65 = new Hono();
-app65.get("/:rel{.*}", (c) => {
+var app67 = new Hono();
+app67.get("/:rel{.*}", (c) => {
   const reqPath = c.req.path;
   const rawRel = c.req.param("rel") ?? "";
   const trimmed = rawRel.replace(/^\/+/, "").replace(/\/+$/, "");
@@ -23528,7 +23922,7 @@ app65.get("/:rel{.*}", (c) => {
     "X-Content-Type-Options": "nosniff"
   });
 });
-var sites_default = app65;
+var sites_default = app67;
 
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
@@ -23609,7 +24003,7 @@ var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
 import { existsSync as existsSync42, readFileSync as readFileSync40 } from "fs";
-import { join as join45 } from "path";
+import { join as join46 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -23617,7 +24011,7 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot5) return null;
-  const brandPath = join45(platformRoot5, "config", "brand.json");
+  const brandPath = join46(platformRoot5, "config", "brand.json");
   if (!existsSync42(brandPath)) return null;
   try {
     cached2 = JSON.parse(readFileSync40(brandPath, "utf-8"));
@@ -23628,7 +24022,7 @@ function readBrandConfig() {
 }
 
 // server/routes/visitor-consent.ts
-var app66 = new Hono();
+var app68 = new Hono();
 var CONSENT_COOKIE_NAME = "mxy_consent";
 var CONSENT_COOKIE_MAX_AGE_SECONDS = 60 * 60 * 24 * 365;
 var DEFAULT_CONSENT_COPY = {
@@ -23673,17 +24067,17 @@ function siteSlugFromReferer(referer) {
     return "";
   }
 }
-app66.options("/consent", (c) => {
+app68.options("/consent", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app66.options("/brand-config", (c) => {
+app68.options("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   return c.body(null, 204);
 });
-app66.post("/consent", async (c) => {
+app68.post("/consent", async (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   let raw;
@@ -23723,7 +24117,7 @@ app66.post("/consent", async (c) => {
   console.log(`[consent] ${parsed.decision} site=${site} brand=${brandName} tokenBound=${tokenBound}`);
   return c.body(null, 204);
 });
-app66.get("/brand-config", (c) => {
+app68.get("/brand-config", (c) => {
   const origin = getOrigin(c);
   setCorsHeaders(c, origin);
   const brand = readBrandConfig();
@@ -23733,7 +24127,7 @@ app66.get("/brand-config", (c) => {
   c.header("Cache-Control", "public, max-age=300");
   return c.json({ consent: { copy, palette } });
 });
-var visitor_consent_default = app66;
+var visitor_consent_default = app68;
 
 // server/routes/listings.ts
 function getCookie(headerValue, name) {
@@ -23760,8 +24154,8 @@ function appendConsentParams(pageUrl, token) {
 }
 var SAFE_SLUG_RE = /^[a-z0-9](?:[a-z0-9-]{0,118}[a-z0-9])?$/;
 var CHAT_SESSION_KEY_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{7,127}$/;
-var app67 = new Hono();
-app67.get("/:slug/click", async (c) => {
+var app69 = new Hono();
+app69.get("/:slug/click", async (c) => {
   const slug = c.req.param("slug") ?? "";
   const rawSession = c.req.query("session") ?? "";
   const sessionKey = CHAT_SESSION_KEY_RE.test(rawSession) ? rawSession : "invalid";
@@ -23825,10 +24219,10 @@ app67.get("/:slug/click", async (c) => {
   console.log(`[property-card-click] sessionKey=${sessionKey} listingSlug=${slug} consent=${consentCookie ?? "absent"} ts=${(/* @__PURE__ */ new Date()).toISOString()}`);
   return c.redirect(redirectUrl, 302);
 });
-var listings_default = app67;
+var listings_default = app69;
 
 // server/routes/visitor-event.ts
-var app68 = new Hono();
+var app70 = new Hono();
 var BOT_UA_RE = /\b(bot|crawl|spider|slurp|headlesschrome|phantomjs|googlebot|bingbot|yandex|baiduspider|ahrefsbot|semrushbot|mj12bot|dotbot|petalbot)\b/i;
 var buckets = /* @__PURE__ */ new Map();
 var RATE_LIMIT = 60;
@@ -23904,12 +24298,12 @@ function originAllowed(origin, allowlist) {
     return false;
   }
 }
-app68.options("/event", (c) => {
+app70.options("/event", (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   return c.body(null, 204);
 });
-app68.post("/event", async (c) => {
+app70.post("/event", async (c) => {
   const origin = getOrigin2(c);
   setCorsHeaders2(c, origin);
   const ua = c.req.header("user-agent") ?? "";
@@ -24114,7 +24508,7 @@ async function writeEvent(opts) {
     );
   }
 }
-var visitor_event_default = app68;
+var visitor_event_default = app70;
 
 // server/routes/session.ts
 import { resolve as resolve34 } from "path";
@@ -24160,8 +24554,8 @@ function withVisitorCookie(response, visitorId) {
     headers
   });
 }
-var app69 = new Hono();
-app69.post("/", async (c) => {
+var app71 = new Hono();
+app71.post("/", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -24308,7 +24702,7 @@ app69.post("/", async (c) => {
     newVisitorId
   );
 });
-var session_default2 = app69;
+var session_default2 = app71;
 
 // server/lib/calendar-slots.ts
 var WEEKDAYS = ["sun", "mon", "tue", "wed", "thu", "fri", "sat"];
@@ -24391,17 +24785,17 @@ function computeOpenSlots(config, busy, fromISO, toISO) {
 }
 
 // server/routes/calendar-public.ts
-var app70 = new Hono();
+var app72 = new Hono();
 function setCors(c) {
   c.header("Access-Control-Allow-Origin", "*");
   c.header("Access-Control-Allow-Methods", "GET, OPTIONS");
   c.header("Access-Control-Allow-Headers", "content-type");
 }
-app70.options("/free-busy", (c) => {
+app72.options("/free-busy", (c) => {
   setCors(c);
   return c.body(null, 204);
 });
-app70.get("/free-busy", async (c) => {
+app72.get("/free-busy", async (c) => {
   setCors(c);
   const from = c.req.query("from");
   const to = c.req.query("to");
@@ -24457,15 +24851,15 @@ app70.get("/free-busy", async (c) => {
     await session.close();
   }
 });
-var calendar_public_default = app70;
+var calendar_public_default = app72;
 
 // server/routes/portal-fetch.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat8, readFile as readFile11, realpath } from "fs/promises";
-import { join as join46, resolve as resolve35, sep as sep11 } from "path";
+import { join as join47, resolve as resolve35, sep as sep11 } from "path";
 import { Readable as Readable3 } from "stream";
-var app71 = new Hono();
-var TAG37 = "[portal-fetch]";
+var app73 = new Hono();
+var TAG40 = "[portal-fetch]";
 async function verifySignature(secret, accountId, relPath, expiresAtMs, signature, nowMs) {
   if (!secret || !signature) return false;
   if (!Number.isFinite(expiresAtMs) || expiresAtMs <= nowMs) return false;
@@ -24520,14 +24914,14 @@ async function readAccountSecret(accountId) {
   try {
     text = await readFile11(path, "utf8");
   } catch {
-    console.error(`${TAG37} op=no-secret account="${accountId}" path="${path}"`);
+    console.error(`${TAG40} op=no-secret account="${accountId}" path="${path}"`);
     return "";
   }
   for (const line of text.split("\n")) {
     const m = line.match(/^PORTAL_FETCH_SECRET=(.*)$/);
     if (m) return m[1].trim();
   }
-  console.error(`${TAG37} op=no-secret account="${accountId}" reason=key-absent path="${path}"`);
+  console.error(`${TAG40} op=no-secret account="${accountId}" reason=key-absent path="${path}"`);
   return "";
 }
 function isValidAccountId2(value) {
@@ -24535,7 +24929,7 @@ function isValidAccountId2(value) {
 }
 async function readExposeFolders2(accountDir) {
   try {
-    const cfg = JSON.parse(await readFile11(join46(accountDir, "data-portal.json"), "utf8"));
+    const cfg = JSON.parse(await readFile11(join47(accountDir, "data-portal.json"), "utf8"));
     return Array.isArray(cfg?.exposeFolders) ? cfg.exposeFolders.filter((f) => typeof f === "string") : [];
   } catch {
     return [];
@@ -24544,7 +24938,7 @@ async function readExposeFolders2(accountDir) {
 async function resolveFetchTarget(accountDir, relPath, ownerId) {
   let schemaText = null;
   try {
-    schemaText = await readFile11(join46(accountDir, "SCHEMA.md"), "utf8");
+    schemaText = await readFile11(join47(accountDir, "SCHEMA.md"), "utf8");
   } catch {
     schemaText = null;
   }
@@ -24587,16 +24981,16 @@ async function handle(c, headOnly) {
   const sig = c.req.query("sig") ?? "";
   const owner = c.req.query("owner") ?? "";
   console.log(
-    `${TAG37} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
+    `${TAG40} op=request account=${q(accountId)} path=${q(relPath)} owner=${q(owner)} head=${headOnly}`
   );
   if (!isValidAccountId2(accountId)) {
-    console.error(`${TAG37} op=denied account=${q(accountId)} reason=account-id`);
+    console.error(`${TAG40} op=denied account=${q(accountId)} reason=account-id`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const secret = await readAccountSecret(accountId);
   const verified = owner ? await verifyOwnUploadSignature(secret, accountId, owner, relPath, exp, sig, Date.now()) : await verifySignature(secret, accountId, relPath, exp, sig, Date.now());
   if (!verified) {
-    console.error(`${TAG37} op=denied account=${q(accountId)} reason=secret`);
+    console.error(`${TAG40} op=denied account=${q(accountId)} reason=secret`);
     return c.json({ ok: false, error: "denied" }, 401);
   }
   const target = await resolveFetchTarget(
@@ -24606,14 +25000,14 @@ async function handle(c, headOnly) {
   );
   if (!target.ok) {
     const op = target.reason === "enoent" ? "miss" : "denied";
-    console.error(`${TAG37} op=${op} account=${accountId} reason=${target.reason}`);
+    console.error(`${TAG40} op=${op} account=${accountId} reason=${target.reason}`);
     return c.json({ ok: false, error: "not found" }, 404);
   }
   if (headOnly) {
-    console.log(`${TAG37} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
+    console.log(`${TAG40} op=served account=${accountId} bytes=${target.sizeBytes} head=true`);
     return c.body(null, 200);
   }
-  console.log(`${TAG37} op=served account=${accountId} bytes=${target.sizeBytes}`);
+  console.log(`${TAG40} op=served account=${accountId} bytes=${target.sizeBytes}`);
   return new Response(Readable3.toWeb(createReadStream3(target.absolute)), {
     status: 200,
     headers: {
@@ -24627,12 +25021,12 @@ async function handle(c, headOnly) {
     }
   });
 }
-app71.get("/fetch", (c) => handle(c, false));
-app71.on("HEAD", "/fetch", (c) => handle(c, true));
-var portal_fetch_default = app71;
+app73.get("/fetch", (c) => handle(c, false));
+app73.on("HEAD", "/fetch", (c) => handle(c, true));
+var portal_fetch_default = app73;
 
 // app/lib/timeentry-census.ts
-var TAG38 = "[timeentry-census]";
+var TAG41 = "[timeentry-census]";
 function reconcileTimeEntries(rows, now, horizonMs) {
   const openEntries = rows.openEntries.length;
   let oldestOpenAgeMs = 0;
@@ -24672,12 +25066,12 @@ async function runTimeEntryCensusOnce(session, now, horizonMs) {
       sumAdjustments: toNum(r.get("sumAdjustments"))
     }));
     const finding = reconcileTimeEntries({ openEntries, taskSums }, now, horizonMs);
-    const line = `${TAG38} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
+    const line = `${TAG41} openEntries=${finding.openEntries} oldestOpenAgeMin=${finding.oldestOpenAgeMin} maxOpenPerAccount=${finding.maxOpenPerAccount} driftTasks=${finding.driftTasks}`;
     if (finding.alarm) console.error(`${line} alarm=true`);
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG38} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG41} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -24691,13 +25085,13 @@ function startTimeEntryCensus(openSession, opts = {}) {
     try {
       session = openSession();
     } catch (err) {
-      console.error(`${TAG38} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG41} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`);
       return;
     }
     try {
       await runTimeEntryCensusOnce(session, Date.now(), horizonMs);
     } catch (err) {
-      console.error(`${TAG38} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
+      console.error(`${TAG41} tick-failed error="${err instanceof Error ? err.message : String(err)}"`);
     } finally {
       try {
         await session.close();
@@ -24715,7 +25109,7 @@ function startTimeEntryCensus(openSession, opts = {}) {
 
 // app/lib/ledger-census.ts
 import { readdirSync as readdirSync27, readFileSync as readFileSync41, statSync as statSync22 } from "fs";
-import { join as join47 } from "path";
+import { join as join48 } from "path";
 
 // ../lib/ledger-core/dist/reconcile.js
 var LEDGER_INDEX_NAMES = [
@@ -24758,7 +25152,7 @@ function formatCensusLine(f) {
 }
 
 // app/lib/ledger-census.ts
-var TAG39 = "[ledger-census]";
+var TAG42 = "[ledger-census]";
 var DAY_MS = 864e5;
 function countWriteRejects24h(logDir, now) {
   let entries2;
@@ -24769,7 +25163,7 @@ function countWriteRejects24h(logDir, now) {
   }
   let total = 0;
   for (const name of entries2) {
-    const path = join47(logDir, name);
+    const path = join48(logDir, name);
     try {
       if (now - statSync22(path).mtimeMs > DAY_MS) continue;
       for (const line of readFileSync41(path, "utf8").split("\n")) {
@@ -24834,7 +25228,7 @@ async function runLedgerCensusOnce(session, now) {
     else console.log(line);
     return finding;
   } catch (err) {
-    console.error(`${TAG39} error="${err instanceof Error ? err.message : String(err)}"`);
+    console.error(`${TAG42} error="${err instanceof Error ? err.message : String(err)}"`);
     return null;
   }
 }
@@ -24847,7 +25241,7 @@ function startLedgerCensus(openSession, opts = {}) {
       session = openSession();
     } catch (err) {
       console.error(
-        `${TAG39} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG42} open-session-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
       return;
     }
@@ -24855,7 +25249,7 @@ function startLedgerCensus(openSession, opts = {}) {
       await runLedgerCensusOnce(session, Date.now());
     } catch (err) {
       console.error(
-        `${TAG39} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
+        `${TAG42} tick-failed error="${err instanceof Error ? err.message : String(err)}"`
       );
     } finally {
       try {
@@ -24873,7 +25267,7 @@ function startLedgerCensus(openSession, opts = {}) {
 }
 
 // app/lib/conversation-audit.ts
-var TAG40 = "[conversation-audit]";
+var TAG43 = "[conversation-audit]";
 async function runConversationAudit() {
   const session = getSession();
   try {
@@ -24910,12 +25304,12 @@ async function runConversationAudit() {
       multiAnchored: Number(multiRec?.get("multiAnchored") ?? 0)
     };
     console.error(
-      `${TAG40} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
+      `${TAG43} channel=whatsapp total=${result.total} senders=${result.senders} multiAnchored=${result.multiAnchored} unreconciled=${result.unreconciled} unpairable=${result.unpairable}`
     );
     return result;
   } catch (err) {
     const reason = err instanceof Error ? `${err.name}:${err.message.slice(0, 200)}` : String(err).slice(0, 200);
-    console.error(`${TAG40} op=failed reason=${reason}`);
+    console.error(`${TAG43} op=failed reason=${reason}`);
     return null;
   } finally {
     await session.close();
@@ -25268,7 +25662,7 @@ async function migrateUploads(opts = {}) {
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir7, readFile as readFile12, rename as rename5, writeFile as writeFile4, unlink as unlink4 } from "fs/promises";
 import { existsSync as existsSync44 } from "fs";
-import { join as join48 } from "path";
+import { join as join49 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -25313,7 +25707,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join48(projectsRoot, slug.name);
+    const slugDir = join49(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir7(slugDir, { withFileTypes: true });
@@ -25322,9 +25716,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE.test(entry.name)) {
-        out.push(join48(slugDir, entry.name));
+        out.push(join49(slugDir, entry.name));
       } else if (entry.isDirectory() && entry.name === "subagents") {
-        const subDir = join48(slugDir, entry.name);
+        const subDir = join49(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir7(subDir, { withFileTypes: true });
@@ -25332,7 +25726,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join48(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join49(subDir, s.name));
         }
       }
     }
@@ -25344,7 +25738,7 @@ function shortId(path) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join48(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join49(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -25421,7 +25815,7 @@ async function migrateAdminWebchatSidecars(opts = {}) {
 // app/lib/migrate-sidecar-account-ids.ts
 import { readdir as readdir8, readFile as readFile13, rename as rename6, writeFile as writeFile5, unlink as unlink5 } from "fs/promises";
 import { existsSync as existsSync45 } from "fs";
-import { join as join49 } from "path";
+import { join as join50 } from "path";
 var SESSION_META_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
 function projectSlugForCwd(cwd) {
   return cwd.replace(/\//g, "-");
@@ -25467,7 +25861,7 @@ async function collectSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join49(projectsRoot, slug.name);
+    const slugDir = join50(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir8(slugDir, { withFileTypes: true });
@@ -25476,9 +25870,9 @@ async function collectSidecars(projectsRoot) {
     }
     for (const entry of entries2) {
       if (entry.isFile() && SESSION_META_RE2.test(entry.name)) {
-        out.push({ path: join49(slugDir, entry.name), slug: slug.name });
+        out.push({ path: join50(slugDir, entry.name), slug: slug.name });
       } else if (entry.isDirectory() && (entry.name === "subagents" || entry.name === "archive")) {
-        const subDir = join49(slugDir, entry.name);
+        const subDir = join50(slugDir, entry.name);
         let subs;
         try {
           subs = await readdir8(subDir, { withFileTypes: true });
@@ -25487,7 +25881,7 @@ async function collectSidecars(projectsRoot) {
         }
         for (const s of subs) {
           if (s.isFile() && SESSION_META_RE2.test(s.name)) {
-            out.push({ path: join49(subDir, s.name), slug: slug.name });
+            out.push({ path: join50(subDir, s.name), slug: slug.name });
           }
         }
       }
@@ -25496,7 +25890,7 @@ async function collectSidecars(projectsRoot) {
   return out;
 }
 async function migrateSidecarAccountIds(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join49(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join50(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const accounts = opts.accounts ?? listValidAccounts();
   const result = {
     scanned: 0,
@@ -25809,8 +26203,8 @@ var streamSSE = (c, cb, onError) => {
 
 // app/lib/whatsapp/gateway/routes.ts
 function createWaChannelRoutes(deps) {
-  const app73 = new Hono();
-  app73.get("/wa-channel/inbound", (c) => {
+  const app75 = new Hono();
+  app75.get("/wa-channel/inbound", (c) => {
     const senderId = c.req.query("senderId");
     if (!senderId) return c.json({ error: "senderId required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -25828,7 +26222,7 @@ function createWaChannelRoutes(deps) {
       }
     });
   });
-  app73.post("/wa-channel/reply", async (c) => {
+  app75.post("/wa-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const text = body?.text;
@@ -25850,7 +26244,7 @@ function createWaChannelRoutes(deps) {
     deps.onReplyDispatch?.(senderId, Date.now());
     return c.json({ ok: true });
   });
-  app73.post("/wa-channel/reply-document", async (c) => {
+  app75.post("/wa-channel/reply-document", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const files = body?.files;
@@ -25889,7 +26283,7 @@ function createWaChannelRoutes(deps) {
     }
     return c.json({ ok: true, results });
   });
-  app73.post("/wa-channel/ready", async (c) => {
+  app75.post("/wa-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     if (typeof senderId !== "string") {
@@ -25898,7 +26292,7 @@ function createWaChannelRoutes(deps) {
     deps.onReady?.(senderId);
     return c.json({ ok: true });
   });
-  app73.post("/wa-channel/received", async (c) => {
+  app75.post("/wa-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const waMessageId = body?.waMessageId;
@@ -25908,7 +26302,7 @@ function createWaChannelRoutes(deps) {
     deps.onReceived?.(senderId, waMessageId);
     return c.json({ ok: true });
   });
-  app73.post("/wa-channel/turn-end", async (c) => {
+  app75.post("/wa-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const senderId = body?.senderId;
     const sessionId = body?.sessionId;
@@ -25954,7 +26348,7 @@ function createWaChannelRoutes(deps) {
     console.error(`[whatsapp-native] op=turn-end ${decision} delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app73;
+  return app75;
 }
 
 // app/lib/whatsapp/gateway/wa-gateway.ts
@@ -26463,8 +26857,8 @@ var InboundHub2 = class {
 
 // app/lib/webchat/gateway/routes.ts
 function createWebchatChannelRoutes(deps) {
-  const app73 = new Hono();
-  app73.get("/webchat-channel/inbound", (c) => {
+  const app75 = new Hono();
+  app75.get("/webchat-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     const role = c.req.query("role");
@@ -26489,7 +26883,7 @@ function createWebchatChannelRoutes(deps) {
       }
     });
   });
-  app73.post("/webchat-channel/reply", async (c) => {
+  app75.post("/webchat-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -26499,7 +26893,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReply?.(key, text);
     return c.json({ ok: true });
   });
-  app73.post("/webchat-channel/connector-auth", async (c) => {
+  app75.post("/webchat-channel/connector-auth", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -26512,7 +26906,7 @@ function createWebchatChannelRoutes(deps) {
     const result = await deps.onConnectorAuth({ key, sessionId, name, completed });
     return c.json(result);
   });
-  app73.post("/webchat-channel/ready", async (c) => {
+  app75.post("/webchat-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -26521,7 +26915,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app73.post("/webchat-channel/permission-request", async (c) => {
+  app75.post("/webchat-channel/permission-request", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const requestId = body?.request_id;
@@ -26535,7 +26929,7 @@ function createWebchatChannelRoutes(deps) {
     const verdict = await deps.awaitPermissionVerdict({ key, requestId, toolName, description, inputPreview });
     return c.json(verdict);
   });
-  app73.post("/webchat-channel/received", async (c) => {
+  app75.post("/webchat-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -26545,7 +26939,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app73.post("/webchat-channel/turn-end", async (c) => {
+  app75.post("/webchat-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -26565,7 +26959,7 @@ function createWebchatChannelRoutes(deps) {
     deps.onTurnEnd?.(key, role);
     return c.json({ ok: true });
   });
-  return app73;
+  return app75;
 }
 
 // app/lib/webchat/gateway/webchat-gateway.ts
@@ -27324,14 +27718,14 @@ function makeFileDelivery(opts) {
 }
 
 // app/lib/webchat/file-delivery.ts
-var TAG41 = "[webchat-adaptor]";
+var TAG44 = "[webchat-adaptor]";
 function platformRoot2() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
 function makeWebchatSendFile(entry) {
   return async (filePath) => {
     if (!entry.accountId) {
-      console.error(`${TAG41} file-delivery reject reason=no-account sender=${entry.senderId}`);
+      console.error(`${TAG44} file-delivery reject reason=no-account sender=${entry.senderId}`);
       return { ok: false, error: "no-account" };
     }
     const accountDir = resolve38(platformRoot2(), "..", "data/accounts", entry.accountId);
@@ -27339,14 +27733,14 @@ function makeWebchatSendFile(entry) {
       const resolved = realpathSync9(filePath);
       const accountResolved = realpathSync9(accountDir);
       if (!resolved.startsWith(accountResolved + "/")) {
-        console.error(`${TAG41} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
+        console.error(`${TAG44} file-delivery reject reason=outside_account_directory sender=${entry.senderId}`);
         return { ok: false, error: "outside-account" };
       }
       return { ok: true };
     } catch (err) {
       const code = err.code;
       console.error(
-        `${TAG41} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
+        `${TAG44} file-delivery reject reason=${code === "ENOENT" ? "not-found" : "path-error"} sender=${entry.senderId}`
       );
       return { ok: false, error: code === "ENOENT" ? "not-found" : "path-error" };
     }
@@ -27355,7 +27749,7 @@ function makeWebchatSendFile(entry) {
 function makeWebchatFileDelivery(entry) {
   return makeFileDelivery({
     entry,
-    tag: TAG41,
+    tag: TAG44,
     channel: "webchat",
     sendFile: makeWebchatSendFile(entry),
     deferUntilVerdict: true
@@ -27417,7 +27811,7 @@ function buildPublicWebchatSpawnRequest(input) {
 }
 
 // app/lib/whatsapp/inbound/file-delivery-bridge.ts
-var TAG42 = "[whatsapp-adaptor]";
+var TAG45 = "[whatsapp-adaptor]";
 var SEND_USER_FILE2 = "SendUserFile";
 var WHATSAPP_SEND_DOCUMENT = "whatsapp-send-document";
 function platformRoot3() {
@@ -27435,7 +27829,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
     });
     if (result.ok) return { ok: true };
     console.error(
-      `${TAG42} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
+      `${TAG45} file-delivery reject reason=send-failed sender=${entry.senderId} status=${result.status} message=${result.error}`
     );
     return { ok: false, error: result.error };
   };
@@ -27443,7 +27837,7 @@ function makeWhatsAppSendFile(entry, maxyAccountId) {
 function makeWhatsAppFileDelivery(entry, maxyAccountId) {
   const shared = makeFileDelivery({
     entry,
-    tag: TAG42,
+    tag: TAG45,
     channel: "whatsapp",
     sendFile: makeWhatsAppSendFile(entry, maxyAccountId)
   });
@@ -27478,7 +27872,7 @@ function makeWhatsAppFileDelivery(entry, maxyAccountId) {
         if (!delivered) {
           const fileField = call.filePath !== void 0 ? ` file=${call.filePath}` : "";
           console.error(
-            `${TAG42} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
+            `${TAG45} file-delivery-unreconciled sender=${entry.senderId} sessionId=${sid} tool=${WHATSAPP_SEND_DOCUMENT}${fileField}`
           );
         }
       }
@@ -27661,8 +28055,8 @@ var InboundHub3 = class {
 
 // app/lib/telegram/gateway/routes.ts
 function createTelegramChannelRoutes(deps) {
-  const app73 = new Hono();
-  app73.get("/tg-channel/inbound", (c) => {
+  const app75 = new Hono();
+  app75.get("/tg-channel/inbound", (c) => {
     const key = c.req.query("key");
     if (!key) return c.json({ error: "key required" }, 400);
     return streamSSE(c, async (stream2) => {
@@ -27680,7 +28074,7 @@ function createTelegramChannelRoutes(deps) {
       }
     });
   });
-  app73.post("/tg-channel/reply", async (c) => {
+  app75.post("/tg-channel/reply", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const text = body?.text;
@@ -27696,7 +28090,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=reply key=${key} bytes=${Buffer.byteLength(text, "utf8")}`);
     return c.json({ ok: true });
   });
-  app73.post("/tg-channel/ready", async (c) => {
+  app75.post("/tg-channel/ready", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     if (typeof key !== "string") {
@@ -27705,7 +28099,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReady?.(key);
     return c.json({ ok: true });
   });
-  app73.post("/tg-channel/received", async (c) => {
+  app75.post("/tg-channel/received", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const messageId = body?.messageId;
@@ -27715,7 +28109,7 @@ function createTelegramChannelRoutes(deps) {
     deps.onReceived?.(key, messageId);
     return c.json({ ok: true });
   });
-  app73.post("/tg-channel/turn-end", async (c) => {
+  app75.post("/tg-channel/turn-end", async (c) => {
     const body = await c.req.json().catch(() => null);
     const key = body?.key;
     const sessionId = body?.sessionId;
@@ -27748,7 +28142,7 @@ function createTelegramChannelRoutes(deps) {
     console.error(`[telegram-native] op=turn-end key=${key} sessionId=${sid} replied=no delivered=none`);
     return c.json({ ok: true, delivered: "none" });
   });
-  return app73;
+  return app75;
 }
 
 // app/lib/telegram/gateway/telegram-gateway.ts
@@ -27898,8 +28292,8 @@ function buildTelegramSpawnRequest(input) {
 // app/lib/telegram/outbound/send-document.ts
 import { realpathSync as realpathSync10 } from "fs";
 import { readFile as readFile14, stat as stat10 } from "fs/promises";
-import { resolve as resolve39, basename as basename14 } from "path";
-var TAG43 = "[telegram:outbound]";
+import { resolve as resolve39, basename as basename15 } from "path";
+var TAG46 = "[telegram:outbound]";
 var TELEGRAM_DOCUMENT_MAX_BYTES = 50 * 1024 * 1024;
 async function sendTelegramDocument(input) {
   const { botToken, chatId, filePath, caption, maxyAccountId, platformRoot: platformRoot5 } = input;
@@ -27916,10 +28310,10 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG43} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG46} document ENOENT scope=account-dir accountDir=${accountDir} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 500, error: `Account directory not resolvable for ${maxyAccountId}` };
     }
-    console.error(`${TAG43} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG46} document path error scope=account-dir maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   let resolvedPath;
@@ -27928,14 +28322,14 @@ async function sendTelegramDocument(input) {
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT") {
-      console.error(`${TAG43} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
+      console.error(`${TAG46} document ENOENT scope=file path=${filePath} maxyAccountId=${maxyAccountId}`);
       return { ok: false, status: 404, error: `File not found: ${filePath}` };
     }
-    console.error(`${TAG43} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
+    console.error(`${TAG46} document path error scope=file maxyAccountId=${maxyAccountId}: ${String(err)}`);
     return { ok: false, status: 500, error: String(err) };
   }
   if (!resolvedPath.startsWith(accountResolved + "/")) {
-    console.error(`${TAG43} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
+    console.error(`${TAG46} document REJECTED reason=outside_account_directory maxyAccountId=${maxyAccountId}`);
     return { ok: false, status: 403, error: "Access denied: file is outside the account directory" };
   }
   const fileStat = await stat10(resolvedPath);
@@ -27946,7 +28340,7 @@ async function sendTelegramDocument(input) {
       error: `File exceeds 50 MB limit (${(fileStat.size / 1024 / 1024).toFixed(1)} MB)`
     };
   }
-  const filename = basename14(resolvedPath);
+  const filename = basename15(resolvedPath);
   const buffer = Buffer.from(await readFile14(resolvedPath));
   const form = new FormData();
   form.append("chat_id", String(chatId));
@@ -27968,13 +28362,13 @@ async function sendTelegramDocument(input) {
     error = e instanceof Error ? e.message : String(e);
   }
   console.error(
-    `${TAG43} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok}` + (messageId !== void 0 ? ` id=${messageId}` : "")
+    `${TAG46} sent document to=${chatId} file=${filename} bytes=${fileStat.size} ok=${ok}` + (messageId !== void 0 ? ` id=${messageId}` : "")
   );
   return ok ? { ok: true, messageId } : { ok: false, status: 500, error };
 }
 
 // app/lib/telegram/outbound/file-delivery.ts
-var TAG44 = "[telegram:outbound]";
+var TAG47 = "[telegram:outbound]";
 function platformRoot4() {
   return process.env.MAXY_PLATFORM_ROOT || "";
 }
@@ -27986,11 +28380,11 @@ function makeTelegramSendFile(entry) {
       botToken = (entry.role === "admin" ? tg?.adminBotToken : tg?.publicBotToken) ?? null;
     }
     if (!botToken) {
-      console.error(`${TAG44} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG47} file-delivery reject reason=no-bot-token sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-bot-token" };
     }
     if (entry.replyTarget == null) {
-      console.error(`${TAG44} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
+      console.error(`${TAG47} file-delivery reject reason=no-reply-target sender=${entry.senderId} role=${entry.role}`);
       return { ok: false, error: "no-reply-target" };
     }
     const result = await sendTelegramDocument({
@@ -28007,7 +28401,7 @@ function makeTelegramSendFile(entry) {
 function makeTelegramFileDelivery(entry) {
   return makeFileDelivery({
     entry,
-    tag: TAG44,
+    tag: TAG47,
     channel: "telegram",
     sendFile: makeTelegramSendFile(entry)
   });
@@ -28048,7 +28442,7 @@ function startTelegramNativeFileFollower(input) {
 
 // app/lib/channel-pty-bridge/public-session-end-review.ts
 import { randomUUID as randomUUID12 } from "crypto";
-var TAG45 = "[public-session-review]";
+var TAG48 = "[public-session-review]";
 var CONSUMED_CAP = 500;
 var consumed = /* @__PURE__ */ new Set();
 function consumeOnce(sessionId) {
@@ -28075,7 +28469,7 @@ async function fetchJsonl(sessionId) {
     return await res.text();
   } catch (err) {
     console.error(
-      `${TAG45} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG48} jsonl-fetch-failed sessionId=${sessionId} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return null;
   }
@@ -28099,7 +28493,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     const res = await fetch(url);
     if (!res.ok) {
       console.error(
-        `${TAG45} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
+        `${TAG48} prior-writes-fetch-failed sliceToken=${sliceToken.slice(0, 8)} status=${res.status}`
       );
       return [];
     }
@@ -28107,7 +28501,7 @@ async function fetchPriorWrites(sliceToken, accountId) {
     return Array.isArray(body.writes) ? body.writes : [];
   } catch (err) {
     console.error(
-      `${TAG45} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
+      `${TAG48} prior-writes-fetch-threw sliceToken=${sliceToken.slice(0, 8)} err="${err instanceof Error ? err.message : String(err)}"`
     );
     return [];
   }
@@ -28136,7 +28530,7 @@ function composeInitialMessage(input) {
 }
 async function dispatchReviewer(input, initialMessage) {
   const sessionId = randomUUID12();
-  console.log(`${TAG45} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
+  console.log(`${TAG48} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
   const spawned = await managerRcSpawn({
     sessionId,
     initialMessage,
@@ -28156,21 +28550,21 @@ async function firePublicSessionEndReview(input) {
   const dispatchedAt = Date.now();
   if (consumed.has(input.sessionId)) {
     console.log(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG48} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const jsonl = await fetchJsonl(input.sessionId);
   if (!jsonl) {
     console.log(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
+      `${TAG48} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-jsonl-missing`
     );
     return;
   }
   const operatorTurns = countOperatorTurns(jsonl);
   if (operatorTurns === 0) {
     console.log(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
+      `${TAG48} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-no-turns`
     );
     return;
   }
@@ -28184,19 +28578,19 @@ async function firePublicSessionEndReview(input) {
   });
   if (!consumeOnce(input.sessionId)) {
     console.log(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
+      `${TAG48} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-already-reviewed`
     );
     return;
   }
   const dispatched = await dispatchReviewer(input, initialMessage);
   if (!dispatched.ok) {
     console.error(
-      `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
+      `${TAG48} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=skipped-spawn-failed reason=${dispatched.reason}`
     );
     return;
   }
   console.log(
-    `${TAG45} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
+    `${TAG48} dispatchFor=${input.dispatchFor} sessionId=${input.sessionId} sliceToken=${sliceShort} personId=${personField} result=dispatched managerSessionId=${dispatched.managerSessionId} operatorTurns=${operatorTurns} priorWrites=${priorWrites.length} ms=${Date.now() - dispatchedAt}`
   );
 }
 
@@ -28602,7 +28996,7 @@ function clientFrom(c) {
 }
 installMediaDownloadGuard();
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join50(PLATFORM_ROOT6, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join51(PLATFORM_ROOT6, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync48(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
@@ -28641,7 +29035,7 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join50(homedir4(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join51(homedir4(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync48(ALIAS_DOMAINS_PATH)) return null;
@@ -28671,7 +29065,7 @@ startManagerEventsSubscriber();
 function isPublicHost(host) {
   return host.startsWith("public.") || aliasDomains.has(host);
 }
-var app72 = new Hono();
+var app74 = new Hono();
 function resolveChannelOverride(accountId, channel, senderId) {
   try {
     const dir = listValidAccounts().find((a) => a.accountId === accountId)?.accountDir;
@@ -28720,7 +29114,7 @@ var waGateway = new WaGateway({
   fetchStandingRules: fetchAccountStandingRules,
   resolveSessionOverride: (accountId, senderId) => resolveChannelOverride(accountId, "whatsapp", senderId),
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve42(process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve42(process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -28735,7 +29129,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, ".."))
+      platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -28848,13 +29242,13 @@ var waGateway = new WaGateway({
     nativeFileFollowers.set(senderId, ac);
   }
 });
-app72.route("/", waGateway.routes());
+app74.route("/", waGateway.routes());
 waGateway.startSweeper();
 function runDuplicateSenderAudit() {
   try {
     const configDir = process.env.CLAUDE_CONFIG_DIR;
     if (!configDir) return;
-    const projectsRoot = join50(configDir, "projects");
+    const projectsRoot = join51(configDir, "projects");
     const records = [];
     for (const { path: jsonlPath, isSubagent, archived } of enumerateJsonls(projectsRoot)) {
       if (isSubagent || archived) continue;
@@ -28978,7 +29372,7 @@ var webchatGateway = new WebchatGateway({
   firePublicSessionEndReview: (input) => firePublicSessionEndReview(input)
 });
 setWebchatGateway(webchatGateway);
-app72.route("/", webchatGateway.routes());
+app74.route("/", webchatGateway.routes());
 webchatGateway.startSweeper();
 webchatGateway.startPublicReaper();
 var telegramFileFollowers = /* @__PURE__ */ new Map();
@@ -29022,7 +29416,7 @@ var telegramGateway = new TelegramGateway({
   }
 });
 setTelegramGateway(telegramGateway);
-app72.route("/", telegramGateway.routes());
+app74.route("/", telegramGateway.routes());
 telegramGateway.startSweeper();
 var chatRoutes = createChatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
@@ -29056,19 +29450,19 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
   // and why the real dependencies are bound there rather than assembled here.
   effectiveAccountFor: resolveScheduledEffectiveAccountForInstall
 });
-app72.route("/api/channel/schedule-inject", scheduleInjectRoutes);
-app72.use("*", clientIpMiddleware);
+app74.route("/api/channel/schedule-inject", scheduleInjectRoutes);
+app74.use("*", clientIpMiddleware);
 function allowsSameOriginFraming(path) {
   return path === "/vnc-viewer.html" || path.startsWith("/api/admin/attachment/") || path.startsWith("/api/public-reader/attachment/") || path === "/api/admin/files/download" || path === "/api/admin/session-upload";
 }
-app72.use("*", async (c, next) => {
+app74.use("*", async (c, next) => {
   await next();
   c.header("X-Content-Type-Options", "nosniff");
   c.header("Referrer-Policy", "strict-origin-when-cross-origin");
   c.header("X-Frame-Options", allowsSameOriginFraming(c.req.path) ? "SAMEORIGIN" : "DENY");
 });
 var HTTP_LOG_PATHS = /* @__PURE__ */ new Set(["/vnc-viewer.html", "/vnc-popout.html"]);
-app72.use("*", async (c, next) => {
+app74.use("*", async (c, next) => {
   if (!HTTP_LOG_PATHS.has(c.req.path)) {
     await next();
     return;
@@ -29086,7 +29480,7 @@ app72.use("*", async (c, next) => {
     });
   }
 });
-app72.use("*", async (c, next) => {
+app74.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains()) || !isPublicHost(host)) {
     await next();
@@ -29124,7 +29518,7 @@ function resolveRemoteAuthOpts(c) {
   return { ...brandLoginOpts, origin };
 }
 var MAX_LOGIN_BODY = 8 * 1024;
-app72.post("/__remote-auth/login", async (c) => {
+app74.post("/__remote-auth/login", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   if (!requestIsTlsTerminated(c)) {
@@ -29169,7 +29563,7 @@ app72.post("/__remote-auth/login", async (c) => {
     }
   });
 });
-app72.get("/__remote-auth/logout", (c) => {
+app74.get("/__remote-auth/logout", (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   console.error(`[remote-auth] logout ip=${clientIp}`);
@@ -29182,7 +29576,7 @@ app72.get("/__remote-auth/logout", (c) => {
     }
   });
 });
-app72.post("/__remote-auth/change-password", async (c) => {
+app74.post("/__remote-auth/change-password", async (c) => {
   const client = clientFrom(c);
   const clientIp = client.ip || "unknown";
   const rateLimited = checkRateLimit(client);
@@ -29241,13 +29635,13 @@ app72.post("/__remote-auth/change-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "change", changeError: "Failed to save password", redirect }), 200);
   }
 });
-app72.get("/__remote-auth/setup", (c) => {
+app74.get("/__remote-auth/setup", (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup" }), 200);
 });
-app72.post("/__remote-auth/set-initial-password", async (c) => {
+app74.post("/__remote-auth/set-initial-password", async (c) => {
   if (isRemoteAuthConfigured()) {
     return c.redirect("/");
   }
@@ -29285,10 +29679,10 @@ app72.post("/__remote-auth/set-initial-password", async (c) => {
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), mode: "setup", setupError: "Failed to save password. Please try again." }), 200);
   }
 });
-app72.get("/api/remote-auth/status", (c) => {
+app74.get("/api/remote-auth/status", (c) => {
   return c.json({ configured: isRemoteAuthConfigured() });
 });
-app72.post("/api/remote-auth/set-password", async (c) => {
+app74.post("/api/remote-auth/set-password", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -29327,10 +29721,10 @@ app72.post("/api/remote-auth/set-password", async (c) => {
     return c.json({ error: "Failed to save password" }, 500);
   }
 });
-app72.route("/api/_client-error", client_error_default);
+app74.route("/api/_client-error", client_error_default);
 console.log("[client-error-route] mounted");
 var PWA_PUBLIC_PATHS = /* @__PURE__ */ new Set(["/sw.js", ...PWA_SURFACES.map((s) => s.manifestPath)]);
-app72.use("*", async (c, next) => {
+app74.use("*", async (c, next) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path = c.req.path;
   if (path === "/favicon.ico" || path.startsWith("/assets/") || path.startsWith("/brand/") || // Public free/busy is read by the booking page (a separate Cloudflare Pages
@@ -29374,30 +29768,30 @@ app72.use("*", async (c, next) => {
   }
   return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(c), redirect: path }), 200);
 });
-app72.route("/api/health", health_default);
-app72.route("/api/chat", chatRoutes);
-app72.route("/api/whatsapp", whatsapp_default);
-app72.route("/api/storage", storage_broker_default);
-app72.route("/api/whatsapp-reader", whatsapp_reader_default);
-app72.route("/api/session-reader", session_reader_default);
-app72.route("/api/operator-conversations", operator_conversations_default);
-app72.route("/api/public-reader", public_reader_default);
-app72.route("/api/webchat", createWebchatRoutes({
+app74.route("/api/health", health_default);
+app74.route("/api/chat", chatRoutes);
+app74.route("/api/whatsapp", whatsapp_default);
+app74.route("/api/storage", storage_broker_default);
+app74.route("/api/whatsapp-reader", whatsapp_reader_default);
+app74.route("/api/session-reader", session_reader_default);
+app74.route("/api/operator-conversations", operator_conversations_default);
+app74.route("/api/public-reader", public_reader_default);
+app74.route("/api/webchat", createWebchatRoutes({
   handleInbound: (input) => webchatGateway.handleInbound(input),
   // Task 940 — the permission relay's pointer read + verdict write.
   pendingPromptFor: (key) => webchatGateway.pendingPromptFor(key),
   deliveryFailureFor: (key) => webchatGateway.deliveryFailureFor(key),
   resolvePermissionVerdict: (key, requestId, behavior) => webchatGateway.resolvePermissionVerdict(key, requestId, behavior)
 }));
-app72.route("/api/webchat/greeting", webchat_greeting_default);
-app72.route("/api/telegram", telegram_default);
-app72.route("/api/quickbooks", quickbooks_default);
-app72.route("/api/onboarding", onboarding_default);
-app72.route("/api/admin", admin_default);
-app72.route("/api/access", access_default);
-app72.route("/api/session", session_default2);
-app72.route("/api/calendar", calendar_public_default);
-app72.route("/api/portal", portal_fetch_default);
+app74.route("/api/webchat/greeting", webchat_greeting_default);
+app74.route("/api/telegram", telegram_default);
+app74.route("/api/quickbooks", quickbooks_default);
+app74.route("/api/onboarding", onboarding_default);
+app74.route("/api/admin", admin_default);
+app74.route("/api/access", access_default);
+app74.route("/api/session", session_default2);
+app74.route("/api/calendar", calendar_public_default);
+app74.route("/api/portal", portal_fetch_default);
 var SAFE_SLUG_RE2 = /^[a-z][a-z0-9-]{2,49}$/;
 var SAFE_FILENAME_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var IMAGE_MIME = {
@@ -29409,7 +29803,7 @@ var IMAGE_MIME = {
   ".svg": "image/svg+xml",
   ".ico": "image/x-icon"
 };
-app72.get("/agent-assets/:slug/:filename", (c) => {
+app74.get("/agent-assets/:slug/:filename", (c) => {
   const slug = c.req.param("slug");
   const filename = c.req.param("filename");
   if (!SAFE_SLUG_RE2.test(slug)) {
@@ -29444,7 +29838,7 @@ app72.get("/agent-assets/:slug/:filename", (c) => {
     "Cache-Control": "public, max-age=3600"
   });
 });
-app72.get("/generated/:filename", (c) => {
+app74.get("/generated/:filename", (c) => {
   const filename = c.req.param("filename");
   if (!SAFE_FILENAME_RE.test(filename) || filename.includes("..")) {
     console.error(`[generated] serve file=${filename} status=403`);
@@ -29474,10 +29868,10 @@ app72.get("/generated/:filename", (c) => {
     "Cache-Control": "public, max-age=86400"
   });
 });
-app72.route("/sites", sites_default);
-app72.route("/listings", listings_default);
-app72.route("/v", visitor_event_default);
-app72.route("/v", visitor_consent_default);
+app74.route("/sites", sites_default);
+app74.route("/listings", listings_default);
+app74.route("/v", visitor_event_default);
+app74.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
@@ -29522,7 +29916,7 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT6) return "unknown";
-    const versionFile = join50(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join51(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
     if (!existsSync48(versionFile)) return "unknown";
     const content = readFileSync44(versionFile, "utf-8").trim();
     return content || "unknown";
@@ -29552,11 +29946,11 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir = join50(homedir4(), BRAND.configDir);
+  const configDir = join51(homedir4(), BRAND.configDir);
   try {
     const accountId = getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join50(configDir, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join51(configDir, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync48(cachePath)) return null;
     return JSON.parse(readFileSync44(cachePath, "utf-8"));
   } catch {
@@ -29602,7 +29996,7 @@ function brandedPublicHtml(agentSlug) {
 function agentUnavailableHtml() {
   return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(BRAND.productName)}</title></head><body style="font-family:system-ui,sans-serif;max-width:32rem;margin:4rem auto;padding:0 1.5rem;color:#222"><h1 style="font-size:1.25rem">Agent unavailable</h1><p>This agent isn't available right now. If you reached this page from a saved link, the agent may have been turned off.</p></body></html>`;
 }
-app72.get("/", (c) => {
+app74.get("/", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const klass = classifyHost(host, getOperatorDomains(), isPublicHost);
   if (klass === "operator") {
@@ -29624,12 +30018,12 @@ app72.get("/", (c) => {
   console.log(`[host-class] host=${host} class=admin served=index.html`);
   return c.html(cachedHtml("index.html"));
 });
-app72.get("/public", (c) => {
+app74.get("/public", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
 });
-app72.get("/public-chat", (c) => {
+app74.get("/public-chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("public.html"));
@@ -29648,9 +30042,9 @@ async function logViewerFetch(c, next) {
     duration_ms: Date.now() - start
   });
 }
-app72.use("/vnc-viewer.html", logViewerFetch);
-app72.use("/vnc-popout.html", logViewerFetch);
-app72.get("/vnc-popout.html", (c) => {
+app74.use("/vnc-viewer.html", logViewerFetch);
+app74.use("/vnc-popout.html", logViewerFetch);
+app74.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
     html = readFileSync44(resolve42(process.cwd(), "public", "vnc-popout.html"), "utf-8");
@@ -29663,7 +30057,7 @@ app72.get("/vnc-popout.html", (c) => {
   }
   return c.html(html);
 });
-app72.post("/api/vnc/client-event", async (c) => {
+app74.post("/api/vnc/client-event", async (c) => {
   let body;
   try {
     body = await c.req.json();
@@ -29684,11 +30078,11 @@ app72.post("/api/vnc/client-event", async (c) => {
   });
   return c.json({ ok: true });
 });
-app72.get("/g/:slug", (c) => {
+app74.get("/g/:slug", (c) => {
   return c.html(brandedPublicHtml(resolveDefaultSlug() ?? void 0));
 });
 for (const pwa of PWA_SURFACES) {
-  app72.get(pwa.manifestPath, (c) => {
+  app74.get(pwa.manifestPath, (c) => {
     const manifest = buildManifest(pwa, {
       productName: BRAND.productName,
       appIcon192: brandAppIcon192Path,
@@ -29704,7 +30098,7 @@ for (const pwa of PWA_SURFACES) {
     return c.body(JSON.stringify(manifest));
   });
 }
-app72.get("/sw.js", (c) => {
+app74.get("/sw.js", (c) => {
   if (SW_SOURCE == null) {
     console.error("[pwa] op=sw status=500 reason=sw-source-missing");
     return c.text("Service worker unavailable", 500);
@@ -29713,12 +30107,12 @@ app72.get("/sw.js", (c) => {
   console.log(`[pwa] op=sw status=200 ct=${SW_CONTENT_TYPE}`);
   return c.body(SW_SOURCE);
 });
-app72.get("/graph", (c) => {
+app74.get("/graph", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("graph.html"));
 });
-app72.get("/chat", (c) => {
+app74.get("/chat", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isOperatorHost(host, getOperatorDomains())) {
     console.log(`[host-class] host=${host} class=operator served=operator.html`);
@@ -29727,47 +30121,47 @@ app72.get("/chat", (c) => {
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("chat.html"));
 });
-app72.get("/data", (c) => {
+app74.get("/data", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("data.html"));
 });
-app72.get("/tasks", (c) => {
+app74.get("/tasks", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("tasks.html"));
 });
-app72.get("/activity", (c) => {
+app74.get("/activity", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("activity.html"));
 });
-app72.get("/calendar", (c) => {
+app74.get("/calendar", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("calendar.html"));
 });
-app72.get("/routines", (c) => {
+app74.get("/routines", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("routines.html"));
 });
-app72.get("/skills", (c) => {
+app74.get("/skills", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("skills.html"));
 });
-app72.get("/agents", (c) => {
+app74.get("/agents", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host)) return c.text("Not found", 404);
   return c.html(cachedHtml("agents.html"));
 });
-app72.get("/browser", (c) => {
+app74.get("/browser", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   if (isPublicHost(host) || isOperatorHost(host, getOperatorDomains())) return c.text("Not found", 404);
   return c.html(cachedHtml("browser.html"));
 });
-app72.get("/:slug", async (c, next) => {
+app74.get("/:slug", async (c, next) => {
   const slug = c.req.param("slug");
   if (AGENT_SLUG_PATTERN.test(`/${slug}`)) {
     const account = resolveAccount();
@@ -29782,13 +30176,13 @@ app72.get("/:slug", async (c, next) => {
   await next();
 });
 if (brandFaviconPath !== "/favicon.ico") {
-  app72.get("/favicon.ico", (c) => {
+  app74.get("/favicon.ico", (c) => {
     c.header("Cache-Control", "public, max-age=300");
     return c.redirect(brandFaviconPath, 302);
   });
 }
-mountStaticFiles(app72, "./public");
-app72.all("*", (c) => {
+mountStaticFiles(app74, "./public");
+app74.all("*", (c) => {
   const host = (c.req.header("host") ?? "").split(":")[0];
   const path = c.req.path;
   if (isPublicHost(host)) {
@@ -29802,10 +30196,10 @@ app72.all("*", (c) => {
 });
 var port = requirePortEnv("MAXY_UI_INTERNAL_PORT", { tag: "ui-server" });
 var hostname = process.env.HOSTNAME ?? "127.0.0.1";
-var httpServer = serve({ fetch: app72.fetch, port, hostname });
+var httpServer = serve({ fetch: app74.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, "..");
   const reconcileScript = resolve42(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const runReconcile = (ctx) => {
     if (!existsSync48(reconcileScript)) return;
@@ -29828,7 +30222,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     detached: true,
     run: runReconcile
   });
-  const reconcileStatePath = join50(MAXY_DIR, "booking-reconcile-state.json");
+  const reconcileStatePath = join51(MAXY_DIR, "booking-reconcile-state.json");
   registerLoop({
     name: "calendar-reconcile-liveness",
     intervalMs: 6e5,
@@ -29846,7 +30240,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
-  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
+  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, "..");
   const dreamSweepScript = resolve42(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
   registerLoop({
     name: "dream-cycle-sweep",
@@ -29870,7 +30264,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
+  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, "..");
   const outlookScript = resolve42(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
@@ -29896,7 +30290,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
+  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, "..");
   const strandedAccountsDir = resolve42(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
@@ -29926,7 +30320,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
+  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, "..");
   const googleAccountsDir = resolve42(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
@@ -29970,7 +30364,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, "..");
   const STORAGE_AUDIT_INTERVAL_MS = 3e5;
   const runStorageAuditSafe = () => runStorageAudit(auditPlatformRoot).catch((err) => {
     console.error(`[storage-audit] error="${err.message}"`);
@@ -30029,9 +30423,15 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     firstRunDelayMs: 15e4,
     run: auditGroupOutboundNote
   });
+  registerLoop({
+    name: "wa-chatmeta-sweep",
+    intervalMs: WA_STANDING_CHECK_INTERVAL_MS,
+    firstRunDelayMs: 18e4,
+    run: sweepChatMetadata
+  });
 }
 {
-  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
+  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, "..");
   const publishScript = resolve42(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const bookingAccounts = () => {
@@ -30108,7 +30508,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 startTimeEntryCensus(() => getSession());
 startLedgerCensus(() => getSession());
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, "..");
   const auditScript = resolve42(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
@@ -30193,7 +30593,7 @@ for (const m of SUBAPP_MANIFEST) {
 }
 try {
   const registered = [];
-  for (const r of app72.routes ?? []) {
+  for (const r of app74.routes ?? []) {
     if (typeof r.path !== "string" || r.path.includes(":") || r.path.includes("*")) continue;
     if (AGENT_SLUG_PATTERN.test(r.path)) {
       registered.push({ method: (r.method ?? "ALL").toUpperCase(), path: r.path });
@@ -30359,7 +30759,7 @@ try {
 } catch (err) {
   console.error(`[graph-health] account-enumeration unavailable reason=${err instanceof Error ? err.message : String(err)}`);
 }
-var configDirForWhatsApp = basename15(MAXY_DIR) || ".maxy";
+var configDirForWhatsApp = basename16(MAXY_DIR) || ".maxy";
 var bootAccount = resolveAccount();
 if (bootAccount) {
   migrateRemovedConfigKeys(bootAccount.accountDir);
@@ -30424,7 +30824,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join50(__dirname, "..")),
+  platformRoot: resolve42(process.env.MAXY_PLATFORM_ROOT ?? join51(__dirname, "..")),
   accountConfig: bootAccountConfig,
   // Task 2074 — enrich with the sub-account name and fan out to every open
   // admin SSE stream. Fire-and-forget: the manager's persist path must not