npm - @rubytech/create-sitedesk-code - Versions diffs - 0.1.526 → 0.1.528 - Mend

@rubytech/create-sitedesk-code 0.1.526 → 0.1.528

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (716) hide show

package/payload/server/public/graph.html CHANGED Viewed

@@ -5,16 +5,16 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Graph — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/graph-BjHJ0z_6.js"></script>
+  <script type="module" crossorigin src="/assets/graph-BSuDP6k7.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CnpeWIYq.js">
-  <link rel="modulepreload" crossorigin href="/assets/graph-labels-D-0u37KA.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-YctTrR-D.js">
-  <link rel="modulepreload" crossorigin href="/assets/useCopyFeedback-Dg5lNgqH.js">
-  <link rel="modulepreload" crossorigin href="/assets/chevron-left-BD09SN6R.js">
-  <link rel="modulepreload" crossorigin href="/assets/maximize-2-BJ9S-nfS.js">
-  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-jeSVwUAv.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BYfe9vj8.css">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-DMr3DR5N.js">
+  <link rel="modulepreload" crossorigin href="/assets/graph-labels-D2pQkgYW.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BxJPbC3p.js">
+  <link rel="modulepreload" crossorigin href="/assets/useCopyFeedback-vPCmdOmY.js">
+  <link rel="modulepreload" crossorigin href="/assets/chevron-left-ClfIy5Fx.js">
+  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DlzSNygU.js">
+  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-BR0JbPFV.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DxuUS_C7.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/public/index.html CHANGED Viewed

@@ -5,23 +5,24 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>SiteDesk</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/admin-DnUxbB3P.js"></script>
+  <script type="module" crossorigin src="/assets/admin-CYCKrV_x.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CnpeWIYq.js">
-  <link rel="modulepreload" crossorigin href="/assets/graph-labels-D-0u37KA.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-YctTrR-D.js">
-  <link rel="modulepreload" crossorigin href="/assets/preload-helper-eAV8hweq.js">
-  <link rel="modulepreload" crossorigin href="/assets/time-entry-format-r5UY9rjG.js">
-  <link rel="modulepreload" crossorigin href="/assets/maximize-2-BJ9S-nfS.js">
-  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-BY6ZsGMH.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminLoginScreens-BgDjueVe.js">
-  <link rel="modulepreload" crossorigin href="/assets/file-download-CiGklOfA.js">
-  <link rel="modulepreload" crossorigin href="/assets/chevron-left-BD09SN6R.js">
-  <link rel="modulepreload" crossorigin href="/assets/file-text-XjJPULAZ.js">
-  <link rel="modulepreload" crossorigin href="/assets/triangle-alert--PCKaewD.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-shuh4ES9.js">
-  <link rel="modulepreload" crossorigin href="/assets/chevron-right-ChmWeo7T.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BYfe9vj8.css">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-DMr3DR5N.js">
+  <link rel="modulepreload" crossorigin href="/assets/graph-labels-D2pQkgYW.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BxJPbC3p.js">
+  <link rel="modulepreload" crossorigin href="/assets/preload-helper-3YNEDsJZ.js">
+  <link rel="modulepreload" crossorigin href="/assets/time-entry-format-C_0jiMpQ.js">
+  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DlzSNygU.js">
+  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-D5bFDRqL.js">
+  <link rel="modulepreload" crossorigin href="/assets/CdpScreencastSurface-5HLhTQTV.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminLoginScreens-Bx9vPuUg.js">
+  <link rel="modulepreload" crossorigin href="/assets/file-download-sXU3_umF.js">
+  <link rel="modulepreload" crossorigin href="/assets/chevron-left-ClfIy5Fx.js">
+  <link rel="modulepreload" crossorigin href="/assets/file-text-CeXBviDH.js">
+  <link rel="modulepreload" crossorigin href="/assets/triangle-alert-eLJHC_QJ.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-DX7ArY_s.js">
+  <link rel="modulepreload" crossorigin href="/assets/chevron-right-B0QvXpxl.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DxuUS_C7.css">
   <link rel="stylesheet" crossorigin href="/assets/AdminLoginScreens-CWMpccrR.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>

package/payload/server/public/operator.html CHANGED Viewed

@@ -5,22 +5,23 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Operator — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/operator-Cay4rOOK.js"></script>
+  <script type="module" crossorigin src="/assets/operator-BP61-xjz.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CnpeWIYq.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-YctTrR-D.js">
-  <link rel="modulepreload" crossorigin href="/assets/preload-helper-eAV8hweq.js">
-  <link rel="modulepreload" crossorigin href="/assets/time-entry-format-r5UY9rjG.js">
-  <link rel="modulepreload" crossorigin href="/assets/maximize-2-BJ9S-nfS.js">
-  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-BY6ZsGMH.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminLoginScreens-BgDjueVe.js">
-  <link rel="modulepreload" crossorigin href="/assets/useCopyFeedback-Dg5lNgqH.js">
-  <link rel="modulepreload" crossorigin href="/assets/chevron-left-BD09SN6R.js">
-  <link rel="modulepreload" crossorigin href="/assets/file-text-XjJPULAZ.js">
-  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-jeSVwUAv.js">
-  <link rel="modulepreload" crossorigin href="/assets/wrench-Bw1FMolk.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-Cci_j_y7.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BYfe9vj8.css">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-DMr3DR5N.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BxJPbC3p.js">
+  <link rel="modulepreload" crossorigin href="/assets/preload-helper-3YNEDsJZ.js">
+  <link rel="modulepreload" crossorigin href="/assets/time-entry-format-C_0jiMpQ.js">
+  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DlzSNygU.js">
+  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-D5bFDRqL.js">
+  <link rel="modulepreload" crossorigin href="/assets/CdpScreencastSurface-5HLhTQTV.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminLoginScreens-Bx9vPuUg.js">
+  <link rel="modulepreload" crossorigin href="/assets/useCopyFeedback-vPCmdOmY.js">
+  <link rel="modulepreload" crossorigin href="/assets/chevron-left-ClfIy5Fx.js">
+  <link rel="modulepreload" crossorigin href="/assets/file-text-CeXBviDH.js">
+  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-BR0JbPFV.js">
+  <link rel="modulepreload" crossorigin href="/assets/wrench-sXisQXkf.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-eQ4OVros.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DxuUS_C7.css">
   <link rel="stylesheet" crossorigin href="/assets/AdminLoginScreens-CWMpccrR.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>

package/payload/server/public/public.html CHANGED Viewed

@@ -5,21 +5,21 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>SiteDesk</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/public-BbJcQGsO.js"></script>
+  <script type="module" crossorigin src="/assets/public-DPDKFKM2.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CnpeWIYq.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-YctTrR-D.js">
-  <link rel="modulepreload" crossorigin href="/assets/preload-helper-eAV8hweq.js">
-  <link rel="modulepreload" crossorigin href="/assets/time-entry-format-r5UY9rjG.js">
-  <link rel="modulepreload" crossorigin href="/assets/maximize-2-BJ9S-nfS.js">
-  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-BY6ZsGMH.js">
-  <link rel="modulepreload" crossorigin href="/assets/useCopyFeedback-Dg5lNgqH.js">
-  <link rel="modulepreload" crossorigin href="/assets/chevron-left-BD09SN6R.js">
-  <link rel="modulepreload" crossorigin href="/assets/file-text-XjJPULAZ.js">
-  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-jeSVwUAv.js">
-  <link rel="modulepreload" crossorigin href="/assets/wrench-Bw1FMolk.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-Cci_j_y7.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BYfe9vj8.css">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-DMr3DR5N.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BxJPbC3p.js">
+  <link rel="modulepreload" crossorigin href="/assets/preload-helper-3YNEDsJZ.js">
+  <link rel="modulepreload" crossorigin href="/assets/time-entry-format-C_0jiMpQ.js">
+  <link rel="modulepreload" crossorigin href="/assets/maximize-2-DlzSNygU.js">
+  <link rel="modulepreload" crossorigin href="/assets/useVoiceRecorder-D5bFDRqL.js">
+  <link rel="modulepreload" crossorigin href="/assets/useCopyFeedback-vPCmdOmY.js">
+  <link rel="modulepreload" crossorigin href="/assets/chevron-left-ClfIy5Fx.js">
+  <link rel="modulepreload" crossorigin href="/assets/file-text-CeXBviDH.js">
+  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-BR0JbPFV.js">
+  <link rel="modulepreload" crossorigin href="/assets/wrench-sXisQXkf.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-eQ4OVros.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DxuUS_C7.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body class="public-surface">

package/payload/server/public/routines.html CHANGED Viewed

@@ -5,14 +5,14 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Routines — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/routines-D3M1Wh3a.js"></script>
+  <script type="module" crossorigin src="/assets/routines-y413YZa-.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CnpeWIYq.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-YctTrR-D.js">
-  <link rel="modulepreload" crossorigin href="/assets/file-download-CiGklOfA.js">
-  <link rel="modulepreload" crossorigin href="/assets/clock-Yqf7Ke7I.js">
-  <link rel="modulepreload" crossorigin href="/assets/wrench-Bw1FMolk.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BYfe9vj8.css">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-DMr3DR5N.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BxJPbC3p.js">
+  <link rel="modulepreload" crossorigin href="/assets/file-download-sXU3_umF.js">
+  <link rel="modulepreload" crossorigin href="/assets/clock-BIaRnIP_.js">
+  <link rel="modulepreload" crossorigin href="/assets/wrench-sXisQXkf.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DxuUS_C7.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/public/skills.html CHANGED Viewed

@@ -5,12 +5,12 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Skills — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/skills-Bhej2ub1.js"></script>
+  <script type="module" crossorigin src="/assets/skills-fH0uA7cj.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CnpeWIYq.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-YctTrR-D.js">
-  <link rel="modulepreload" crossorigin href="/assets/file-text-XjJPULAZ.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BYfe9vj8.css">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-DMr3DR5N.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BxJPbC3p.js">
+  <link rel="modulepreload" crossorigin href="/assets/file-text-CeXBviDH.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DxuUS_C7.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/public/tasks.html CHANGED Viewed

@@ -5,13 +5,13 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Tasks — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/tasks-qY-dtOI2.js"></script>
+  <script type="module" crossorigin src="/assets/tasks-CrVzFrTR.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-CltuBf4Z.js">
-  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-CnpeWIYq.js">
-  <link rel="modulepreload" crossorigin href="/assets/AdminShell-YctTrR-D.js">
-  <link rel="modulepreload" crossorigin href="/assets/time-entry-format-r5UY9rjG.js">
-  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-jeSVwUAv.js">
-  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-BYfe9vj8.css">
+  <link rel="modulepreload" crossorigin href="/assets/useSubAccountSwitcher-DMr3DR5N.js">
+  <link rel="modulepreload" crossorigin href="/assets/AdminShell-BxJPbC3p.js">
+  <link rel="modulepreload" crossorigin href="/assets/time-entry-format-C_0jiMpQ.js">
+  <link rel="modulepreload" crossorigin href="/assets/rotate-ccw-BR0JbPFV.js">
+  <link rel="stylesheet" crossorigin href="/assets/useSubAccountSwitcher-DxuUS_C7.css">
   <link rel="stylesheet" href="/brand-defaults.css">
 </head>
 <body>

package/payload/server/server.js CHANGED Viewed

@@ -16,6 +16,7 @@ import {
   clientIpMiddleware,
   createRemoteSession,
   emitMissingOnResolve,
+  fetchPageTargets,
   findMissingPlugins,
   fingerprintSessionKey,
   getAccountIdForSession,
@@ -32,6 +33,7 @@ import {
   isPublicPathAllowed,
   isRemoteAuthConfigured,
   migrateLegacyRemotePassword,
+  parseScreencastEvent,
   reconcileEnabledPluginsForAccounts,
   recordFailedAttempt,
   registerSession,
@@ -43,6 +45,7 @@ import {
   resolveClientIp,
   safeJson,
   sanitizeClientCorrId,
+  screencastLog,
   serve,
   setAccessPassword,
   setRemotePassword,
@@ -56,7 +59,7 @@ import {
   verifyRemotePassword,
   vncLog,
   walkPremiumBundles
-} from "./chunk-WT2PFGY4.js";
+} from "./chunk-DLG7XSLA.js";
 import {
   DATA_ROOT,
   EXTRACTED_TEXT_SUFFIX,
@@ -180,13 +183,12 @@ import {
   waitForConnection,
   warnNonUuidAccount,
   writeChatMetadataMerged
-} from "./chunk-7MGR5M6G.js";
+} from "./chunk-UTIHI6KV.js";
 import {
   ACCOUNTS_DIR,
   BIN_DIR,
   BRAND_NAME,
   CDP_PORT,
-  CHROMIUM_PROFILE_DIR,
   CLAUDE_CREDENTIALS_FILE,
   COMMERCIAL_MODE,
   GREETING_DIRECTIVE,
@@ -242,7 +244,7 @@ import {
   verifyAndGetConversationUpdatedAt,
   verifyConversationOwnership,
   writeAdminUserAndPerson
-} from "./chunk-XCR5D2G3.js";
+} from "./chunk-BP7LH7MC.js";
 import {
   D1_MAX_SQL_STATEMENT_BYTES,
   D1_QUERY_MAX_BODY_BYTES,
@@ -3005,7 +3007,7 @@ function getLanIp() {
 // app/lib/vnc.ts
 import { spawnSync, execFileSync } from "child_process";
 import { createConnection } from "net";
-import { mkdirSync, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { mkdirSync, readFileSync as readFileSync3, rmSync, writeFileSync as writeFileSync2 } from "fs";
 import { resolve as resolve3 } from "path";
 var PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve3(process.cwd(), "..");
 var VNC_SCRIPT = resolve3(PLATFORM_ROOT2, "scripts/vnc.sh");
@@ -3206,71 +3208,60 @@ async function ensureCdp(transport = "vnc") {
 function killChromium() {
   spawnSync("pkill", ["-f", "chromium"], { stdio: "pipe" });
 }
+var AUTH_TARGET_ID_FILE = resolve3(LOG_DIR, "claude-auth-target.id");
+function readAuthTargetId() {
+  try {
+    const id = readFileSync3(AUTH_TARGET_ID_FILE, "utf8").trim();
+    return id.length > 0 ? id : null;
+  } catch {
+    return null;
+  }
+}
 function writeChromiumWrapper() {
   mkdirSync(BIN_DIR, { recursive: true });
+  rmSync(AUTH_TARGET_ID_FILE, { force: true });
   const wrapperPath = resolve3(BIN_DIR, "chromium");
   writeFileSync2(wrapperPath, `#!/bin/bash
-LOG="${LOG_DIR}/chromium.log"
-echo "==== [$(date)] chromium wrapper ====" >> "$LOG"
-echo "  DISPLAY=$DISPLAY WAYLAND=$WAYLAND_DISPLAY XDG_SESSION_TYPE=$XDG_SESSION_TYPE" >> "$LOG"
+# Generated by writeChromiumWrapper (app/lib/vnc.ts) \u2014 Task 1562.
+# Hands its URL argument to the brand's running Chromium over CDP.
+LOG_DIR="${LOG_DIR}"
+LOG="$LOG_DIR/chromium.log"
+TARGET_ID_FILE="$LOG_DIR/claude-auth-target.id"
+CDP="http://127.0.0.1:${CDP_PORT}/json/new"
+mkdir -p "$LOG_DIR"
+echo "==== [$(date)] chromium wrapper (cdp-handover) ====" >> "$LOG"
 echo "  args: $*" >> "$LOG"
-# Check the brand's virtual display is up (Tasks 553 + 924 \u2014 per-brand
-# display + per-brand CDP port).
-if DISPLAY=${VNC_DISPLAY} xdpyinfo >/dev/null 2>&1; then
-  echo "  xdpyinfo ${VNC_DISPLAY} OK" >> "$LOG"
-else
-  echo "  xdpyinfo ${VNC_DISPLAY} FAILED \u2014 display not ready" >> "$LOG"
+URL="$1"
+if [ -z "$URL" ]; then
+  echo "  ERROR: no URL argument" >> "$LOG"
+  echo "[chromium-wrapper] op=cdp-handover outcome=failed reason=no-url" >> "$LOG"
+  exit 64
 fi
-# read the install-time-resolved non-snap Chromium binary path.
-# The installer (ensureNonSnapChromium + writeChromiumBinaryPathFile) writes
-# this file with the absolute path to either /usr/bin/chromium (Pi Bookworm:
-# real .deb) or /usr/bin/google-chrome-stable (Ubuntu Noble laptop: snap
-# replaced). Refusing the legacy probe loop closes the silent-fallback path
-# where /snap/bin/chromium would re-introduce the AppArmor SingletonLock
-# denial that triggered.
-PATH_FILE="${PLATFORM_ROOT2}/config/chromium-binary.path"
-if [ ! -r "$PATH_FILE" ]; then
-  echo "  ERROR: $PATH_FILE missing \u2014 re-run installer" >> "$LOG"
-  exit 1
+# -f so an HTTP error status is a non-zero exit rather than an error body
+# written to the id file; -G moves the urlencoded data into the query string.
+RESPONSE="$(curl -sf --max-time 10 -X PUT -G --data-urlencode "=$URL" "$CDP" 2>>"$LOG")"
+CURL_STATUS=$?
+if [ "$CURL_STATUS" -ne 0 ]; then
+  echo "  ERROR: CDP handover failed (curl exit $CURL_STATUS) \u2014 is Chromium running on ${CDP_PORT}?" >> "$LOG"
+  echo "[chromium-wrapper] op=cdp-handover outcome=failed reason=cdp-unreachable curlExit=$CURL_STATUS" >> "$LOG"
+  exit "$CURL_STATUS"
 fi
-BIN="$(head -n1 "$PATH_FILE" | tr -d '[:space:]')"
-if [ -z "$BIN" ] || [ ! -x "$BIN" ]; then
-  echo "  ERROR: $PATH_FILE empty or non-executable: $BIN" >> "$LOG"
-  exit 1
+# Chromium answers with the created target; pretty-printed on the real endpoint
+# and compact from some clients, so match the key rather than a line shape.
+TARGET_ID="$(printf '%s' "$RESPONSE" | grep -o '"id"[[:space:]]*:[[:space:]]*"[^"]*"' | head -n1 | sed 's/.*"\\([^"]*\\)"$/\\1/')"
+if [ -z "$TARGET_ID" ]; then
+  echo "  ERROR: CDP accepted the URL but named no target id" >> "$LOG"
+  echo "[chromium-wrapper] op=cdp-handover outcome=failed reason=no-target-id" >> "$LOG"
+  exit 65
 fi
-RESOLVED="$(readlink -f "$BIN" 2>/dev/null || echo "$BIN")"
-case ":$(echo "$RESOLVED" | tr '/' ':'):" in
-  *:snap:*)
-    echo "  ERROR: $BIN resolves to snap-confined $RESOLVED \u2014 re-run installer" >> "$LOG"
-    exit 1
-    ;;
-esac
-echo "  launching $BIN (realpath=$RESOLVED)" >> "$LOG"
-# nohup detaches chromium from this wrapper's process group so it outlives
-# claude auth login exiting (e.g. on timeout). --user-data-dir is brand-scoped
-# so a wrapper-spawned chromium attaches to the same per-brand
-# profile that vnc.sh's start_chrome targets \u2014 no shared cookies across brands.
-nohup "$BIN" \\
-  --user-data-dir=${CHROMIUM_PROFILE_DIR} \\
-  --no-sandbox \\
-  --test-type \\
-  --disable-dev-shm-usage \\
-  --disable-gpu \\
-  --password-store=basic \\
-  --use-mock-keychain \\
-  --ozone-platform=x11 \\
-  --no-first-run \\
-  --no-default-browser-check \\
-  --disable-session-crashed-bubble \\
-  --hide-crash-restore-bubble \\
-  --noerrdialogs \\
-  --window-size=1280,800 \\
-  --window-position=0,0 \\
-  "$@" >> "$LOG" 2>&1 &
-echo "  chromium PID: $!" >> "$LOG"
+printf '%s' "$TARGET_ID" > "$TARGET_ID_FILE"
+echo "  opened target $TARGET_ID" >> "$LOG"
+echo "[chromium-wrapper] op=cdp-handover outcome=ready targetId=$TARGET_ID" >> "$LOG"
 `, { mode: 493 });
   return wrapperPath;
 }
@@ -4909,7 +4900,7 @@ function createScheduleInjectRoutes(deps) {
 var import_dist9 = __toESM(require_dist(), 1);
 // app/lib/whatsapp/avatar-store.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync7, writeFileSync as writeFileSync3, readdirSync as readdirSync5, statSync as statSync6, rmSync } from "fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync2, readFileSync as readFileSync7, writeFileSync as writeFileSync3, readdirSync as readdirSync5, statSync as statSync6, rmSync as rmSync2 } from "fs";
 import { join as join11 } from "path";
 function safeName(jid) {
   if (jid.length === 0 || jid.includes("/") || jid.includes("\\") || jid.includes("..")) {
@@ -4954,14 +4945,14 @@ function writeAvatarAbsent(accountId, jid) {
   const dir = dirFor(accountId);
   const base = join11(dir, safeName(jid));
   mkdirSync2(dir, { recursive: true });
-  rmSync(`${base}.bin`, { force: true });
+  rmSync2(`${base}.bin`, { force: true });
   const meta = { jid, state: "absent", fetchedAt: (/* @__PURE__ */ new Date()).toISOString() };
   writeFileSync3(`${base}.json`, JSON.stringify(meta));
 }
 function removeAvatar(accountId, jid) {
   const base = join11(dirFor(accountId), safeName(jid));
-  rmSync(`${base}.bin`, { force: true });
-  rmSync(`${base}.json`, { force: true });
+  rmSync2(`${base}.bin`, { force: true });
+  rmSync2(`${base}.json`, { force: true });
 }
 function listAvatarEntries(accountId) {
   const dir = dirFor(accountId);
@@ -5008,7 +4999,7 @@ async function defaultHttpGet(url) {
   }
 }
 async function defaultResolve(accountId) {
-  const { resolveSocket: resolveSocket2 } = await import("./manager-6XOWHREK.js");
+  const { resolveSocket: resolveSocket2 } = await import("./manager-B4LRDZKC.js");
   return resolveSocket2(accountId);
 }
 async function fetchAvatar(accountId, jid, deps = {}) {
@@ -12083,7 +12074,7 @@ var telegram_default = app10;
 // server/routes/quickbooks.ts
 import { join as join29 } from "path";
-import { existsSync as existsSync21, readFileSync as readFileSync23, writeFileSync as writeFileSync9, mkdirSync as mkdirSync4, rmSync as rmSync2, renameSync as renameSync5 } from "fs";
+import { existsSync as existsSync21, readFileSync as readFileSync23, writeFileSync as writeFileSync9, mkdirSync as mkdirSync4, rmSync as rmSync3, renameSync as renameSync5 } from "fs";
 var TAG19 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
@@ -12164,7 +12155,7 @@ async function completeConsent(args) {
     console.error(`${TAG19} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
-    rmSync2(claimFile, { force: true });
+    rmSync3(claimFile, { force: true });
   }
 }
 function page(title, detail) {
@@ -12576,7 +12567,7 @@ app12.post("/claude-auth", async (c) => {
   }
   if (body.action === "wait") {
     const authenticated = await checkAuthStatus();
-    return c.json({ completed: authenticated, authenticated });
+    return c.json({ completed: authenticated, authenticated, authTargetId: readAuthTargetId() });
   }
   if (body.action === "paste-code") {
     const code = typeof body.code === "string" ? body.code : "";
@@ -13599,7 +13590,7 @@ var session_upload_default = app19;
 // server/routes/admin/agents.ts
 import { resolve as resolve20 } from "path";
-import { readdirSync as readdirSync21, readFileSync as readFileSync28, existsSync as existsSync30, rmSync as rmSync3, renameSync as renameSync9, mkdirSync as mkdirSync6, writeFileSync as writeFileSync12, chmodSync } from "fs";
+import { readdirSync as readdirSync21, readFileSync as readFileSync28, existsSync as existsSync30, rmSync as rmSync4, renameSync as renameSync9, mkdirSync as mkdirSync6, writeFileSync as writeFileSync12, chmodSync } from "fs";
 import { execFileSync as execFileSync6 } from "child_process";
 // ../services/claude-session-manager/src/tool-surface.ts
@@ -14615,7 +14606,7 @@ app20.delete("/:slug", async (c) => {
     return c.json({ error: `Graph cleanup failed: ${msg}` }, 500);
   }
   try {
-    rmSync3(agentDir, { recursive: true, force: true });
+    rmSync4(agentDir, { recursive: true, force: true });
     console.log(`[admin/agents] op=delete accountId=${account.accountId.slice(0, 8)} slug=${slug} outcome=ok`);
     return c.json({ ok: true });
   } catch (err) {
@@ -20720,6 +20711,7 @@ function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID7, adm
   const resumeId = typeof body.sessionId === "string" && body.sessionId.length > 0 ? body.sessionId : void 0;
   const name = typeof body.name === "string" && body.name.length > 0 ? body.name : void 0;
   const rawTitle = typeof body.title === "string" ? body.title.trim() : "";
+  const rawInitialMessage = typeof body.initialMessage === "string" ? body.initialMessage.trim() : "";
   const webchatBind = resumeId === void 0 || operator;
   const kind = resumeId === void 0 ? "new" : "resume";
   const origin = operator ? "operator" : "admin";
@@ -20742,6 +20734,7 @@ function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID7, adm
     if (name) payload.name = name;
     if (pickedModel) payload.model = pickedModel;
     if (pickedEffort) payload.effort = pickedEffort;
+    if (kind === "new" && rawInitialMessage.length > 0) payload.initialMessage = rawInitialMessage;
     if (adminUserId) payload.adminUserId = adminUserId;
     if (targetAccountId) payload.targetAccountId = targetAccountId;
     if (authenticatedName) payload.authenticatedName = authenticatedName;
@@ -20789,7 +20782,10 @@ app38.post("/", requireAdminSession, async (c) => {
     `[chat-spawn] op=request spawnReqId=${spawnReqId} origin=${plan.origin} kind=${plan.kind} sessionId=${plan.kind === "new" ? "new" : plan.sessionId}`
   );
   if (plan.webchatBind) {
-    console.log(`[chat-spawn] op=args spawnReqId=${spawnReqId} webchatChannel=present sessionId=${plan.sessionId}`);
+    const seedBytes = typeof plan.payload.initialMessage === "string" ? Buffer.byteLength(plan.payload.initialMessage, "utf8") : 0;
+    console.log(
+      `[chat-spawn] op=args spawnReqId=${spawnReqId} webchatChannel=present sessionId=${plan.sessionId} initialMessage=${seedBytes > 0 ? `${seedBytes}b` : "none"}`
+    );
     console.log(
       `[webchat-spawn] op=args sessionId=${plan.sessionId} model=${plan.model ?? "default"} effort=${plan.effort ?? "default"} source=${plan.paramsSource} accountId=${plan.payload.targetAccountId?.slice(0, 8) ?? "unset"}`
     );
@@ -21983,6 +21979,33 @@ app48.post("/launch", requireAdminSession, async (c) => {
     );
   }
 });
+app48.get("/screencast-targets", requireAdminSession, async (c) => {
+  const result = await fetchPageTargets({
+    fetchImpl: fetch,
+    cdpPort: CDP_PORT,
+    platform: process.platform
+  });
+  if (!result.ok) {
+    screencastLog("targets-failed", { status: result.status, error: result.error });
+    return c.json({ ok: false, error: result.error }, result.status);
+  }
+  screencastLog("targets", { count: result.targets.length, cdpPort: CDP_PORT });
+  return c.json({ ok: true, targets: result.targets });
+});
+app48.post("/screencast-event", requireAdminSession, async (c) => {
+  let body;
+  try {
+    body = await c.req.json();
+  } catch {
+    return c.json({ ok: false, error: "invalid json" }, 400);
+  }
+  const parsed = parseScreencastEvent(body);
+  if (!parsed.ok) {
+    return c.json({ ok: false, error: "unknown op" }, 400);
+  }
+  screencastLog(parsed.op, parsed.detail);
+  return c.json({ ok: true });
+});
 var browser_default = app48;
 // server/routes/admin/calendar.ts
@@ -23271,7 +23294,7 @@ app51.delete("/:eventId", requireAdminSession, async (c) => {
 var routines_default = app51;
 // server/routes/admin/skills.ts
-import { existsSync as existsSync39, readdirSync as readdirSync24, readFileSync as readFileSync37, rmSync as rmSync4 } from "fs";
+import { existsSync as existsSync39, readdirSync as readdirSync24, readFileSync as readFileSync37, rmSync as rmSync5 } from "fs";
 import { resolve as resolve31 } from "path";
 var app52 = new Hono();
 var NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
@@ -23377,9 +23400,9 @@ app52.delete("/:plugin/:skill", requireAdminSession, async (c) => {
     return c.json({ error: "Skill not found" }, 404);
   }
   try {
-    rmSync4(skillDir, { recursive: true, force: true });
+    rmSync5(skillDir, { recursive: true, force: true });
     const pluginDirRemoved = subdirs2(skillsDir).length === 0;
-    if (pluginDirRemoved) rmSync4(pluginDir, { recursive: true, force: true });
+    if (pluginDirRemoved) rmSync5(pluginDir, { recursive: true, force: true });
     const skillDirGone = !existsSync39(skillDir);
     if (!skillDirGone) {
       console.error(`[admin:skills] op=delete plugin=${plugin} skill=${skill} outcome=rejected reason=rm-incomplete skillDirGone=false`);
@@ -24050,7 +24073,8 @@ app59.post("/", requireAdminSession, async (c) => {
       `MATCH (t:Task {taskId: $taskId, accountId: $accountId})
        OPTIONAL MATCH (t)-[:WORKED_ON_IN]->(conv:Conversation)
        WITH t, head(collect(conv)) AS linked
-       RETURN t.name AS name, linked.sessionId AS sessionId LIMIT 1`,
+       RETURN t.name AS name, t.description AS description, t.notes AS notes,
+              linked.sessionId AS sessionId LIMIT 1`,
       { taskId, accountId }
     );
     if (found.records.length === 0) {
@@ -24059,8 +24083,10 @@ app59.post("/", requireAdminSession, async (c) => {
     }
     const title = found.records[0].get("name") ?? "";
     const sessionId = found.records[0].get("sessionId") ?? null;
+    const description = found.records[0].get("description") ?? "";
+    const notes = found.records[0].get("notes") ?? "";
     console.log(`${TAG34} op=request taskId=${taskId} account=${accountId} linked=${sessionId ?? "none"}`);
-    if (sessionId !== null) return c.json({ sessionId, title, accountId });
+    if (sessionId !== null) return c.json({ sessionId, title, description, notes });
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const stamped = await session.run(
       `MATCH (t:Task {taskId: $taskId, accountId: $accountId})
@@ -24070,7 +24096,7 @@ app59.post("/", requireAdminSession, async (c) => {
     );
     const at = stamped.records[0]?.get("at") ?? void 0;
     console.log(`${TAG34} op=marker taskId=${taskId} stamped=${at !== void 0}`);
-    return c.json({ sessionId: null, title, accountId });
+    return c.json({ sessionId: null, title, description, notes });
   } catch (err) {
     console.error(`${TAG34} op=request taskId=${taskId} error="${err instanceof Error ? err.message : String(err)}"`);
     return c.json({ error: "task-session-open-failed" }, 500);