@rubytech/create-sitedesk-code 0.1.609 → 0.1.611

package/payload/server/server.js

@@ -362,15 +362,15 @@ var require_dist2 = __commonJS({
       return out;
     }
     function scanStore(storeDir) {
-      const newest2 = /* @__PURE__ */ new Map();
+      const newest = /* @__PURE__ */ new Map();
       let storeRows = 0;
       if (!storeDir || !(0, node_fs_1.existsSync)(storeDir))
-        return { newest: newest2, storeRows };
+        return { newest, storeRows };
       let entries2;
       try {
         entries2 = (0, node_fs_1.readdirSync)(storeDir);
       } catch {
-        return { newest: newest2, storeRows };
+        return { newest, storeRows };
       }
       for (const entry3 of entries2) {
         if (!entry3.endsWith(".jsonl"))
@@ -402,10 +402,10 @@ var require_dist2 = __commonJS({
           if (chatId !== senderId)
             continue;
           const key2 = `${botId}:${senderId}`;
-          const prev = newest2.get(key2);
+          const prev = newest.get(key2);
           if (prev !== void 0 && prev.dateSent.localeCompare(dateSent) >= 0)
             continue;
-          newest2.set(key2, {
+          newest.set(key2, {
             chatId,
             senderId,
             senderName: typeof row.senderName === "string" ? row.senderName : null,
@@ -413,16 +413,16 @@ var require_dist2 = __commonJS({
           });
         }
       }
-      return { newest: newest2, storeRows };
+      return { newest, storeRows };
     }
     function collectTelegramReach2(input) {
-      const { newest: newest2, storeRows } = scanStore(input.storeDir);
+      const { newest, storeRows } = scanStore(input.storeDir);
       const bots = input.bots.map((bot) => {
         const adminUsers = bot.adminUsers ?? [];
         const adminSet = new Set(adminUsers.map((u) => String(u)));
         const chats = [];
         const seen = /* @__PURE__ */ new Set();
-        for (const [key2, row] of newest2) {
+        for (const [key2, row] of newest) {
           if (key2.slice(0, key2.indexOf(":")) !== bot.id)
             continue;
           seen.add(row.senderId);
@@ -3220,10 +3220,10 @@ var require_dist10 = __commonJS({
 });
 
 // server/index.ts
-import { readFileSync as readFileSync62, existsSync as existsSync62, watchFile, readdirSync as readdirSync37, statSync as statSync33 } from "fs";
+import { readFileSync as readFileSync63, existsSync as existsSync63, watchFile, readdirSync as readdirSync37, statSync as statSync33 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash8 } from "crypto";
-import { resolve as resolve55, join as join76, basename as basename19 } from "path";
+import { resolve as resolve55, join as join77, basename as basename19 } from "path";
 import { homedir as homedir5 } from "os";
 
 // server/lib/route-cache-watchers.ts
@@ -3470,15 +3470,15 @@ function readRows(accountId, channelKey) {
   }
 }
 function newestInboundTelegramDate(accountId, channelKey) {
-  let newest2 = null;
+  let newest = null;
   for (const row of readRows(accountId, channelKey)) {
     if (isUpdateRecord(row)) continue;
     if (row.fromMe) continue;
     const d = row.telegramDate;
     if (typeof d !== "number" || !Number.isFinite(d)) continue;
-    if (newest2 === null || d > newest2) newest2 = d;
+    if (newest === null || d > newest) newest = d;
   }
-  return newest2;
+  return newest;
 }
 function readConversation2(accountId, channelKey) {
   if (!(0, import_dist2.isStorableChannelKey)(channelKey)) return [];
@@ -15432,7 +15432,7 @@ var whatsapp_reader_default = app5;
 
 // server/routes/telegram-reader.ts
 import { statSync as statSync14, watch as watch3 } from "fs";
-import { join as join28, resolve as resolve19 } from "path";
+import { join as join29, resolve as resolve19 } from "path";
 
 // app/lib/telegram/outbound/get-chat.ts
 async function getTelegramChat(botToken, chatId) {
@@ -15458,43 +15458,48 @@ var records3 = [];
 function prune2(now) {
   records3 = records3.filter((r) => now - r.at <= WINDOW_MS3);
 }
-function newest(key2) {
-  for (let i = records3.length - 1; i >= 0; i--) if (records3[i].key === key2) return records3[i];
-  return void 0;
+function oldestPending(key2) {
+  return records3.find((r) => r.key === key2 && r.mechanism === null && r.skipped === null);
 }
 function noteManualSent(key2, now) {
-  records3.push({ key: key2, at: now, recorded: false, skipped: null, suppressed: false });
+  records3.push({ key: key2, at: now, mechanism: null, skipped: null, suppressed: false });
 }
 function noteManualRecorded(key2, _now) {
-  const r = newest(key2);
-  if (r) r.recorded = true;
+  const r = oldestPending(key2);
+  if (r) r.mechanism = "inject";
+}
+function noteManualWritten(key2, _now) {
+  const r = oldestPending(key2);
+  if (r) r.mechanism = "append";
 }
 function noteManualSkipped(key2, reason, _now) {
-  const r = newest(key2);
+  const r = oldestPending(key2);
   if (r) r.skipped = reason;
 }
 function noteManualSuppressed(key2, _now) {
-  const r = records3.find((x) => x.key === key2 && x.recorded && !x.suppressed);
+  const r = records3.find((x) => x.key === key2 && x.mechanism === "inject" && !x.suppressed);
   if (r) r.suppressed = true;
 }
 function readManualSendCensus(now) {
   prune2(now);
-  let recorded = 0;
+  let injected = 0;
+  let written = 0;
   let suppressed = 0;
   let unrecorded = 0;
   let skipped = 0;
   let leaked = 0;
   for (const r of records3) {
-    if (r.recorded) recorded += 1;
+    if (r.mechanism === "inject") injected += 1;
+    else if (r.mechanism === "append") written += 1;
     else if (r.skipped !== null) skipped += 1;
     else if (now - r.at > RECORD_THRESHOLD_MS) unrecorded += 1;
     if (r.suppressed) suppressed += 1;
-    else if (r.recorded && now - r.at > SUPPRESSION_THRESHOLD_MS) leaked += 1;
+    else if (r.mechanism === "inject" && now - r.at > SUPPRESSION_THRESHOLD_MS) leaked += 1;
   }
-  return { sent: records3.length, recorded, suppressed, unrecorded, skipped, leaked };
+  return { sent: records3.length, injected, written, suppressed, unrecorded, skipped, leaked };
 }
 function buildManualSendCensusLine(c) {
-  return `[telegram-manual-census] sent=${c.sent} recorded=${c.recorded} suppressed=${c.suppressed} unrecorded=${c.unrecorded} skipped=${c.skipped} leaked=${c.leaked} window=60m`;
+  return `[telegram-manual-census] sent=${c.sent} injected=${c.injected} written=${c.written} suppressed=${c.suppressed} unrecorded=${c.unrecorded} skipped=${c.skipped} leaked=${c.leaked} window=60m`;
 }
 function runTelegramManualSendCensus(now) {
   console.error(buildManualSendCensusLine(readManualSendCensus(now)));
@@ -15504,15 +15509,32 @@ function runTelegramManualSendCensus(now) {
 async function recordManualSendContext(input, deps) {
   const refuse2 = (reason) => {
     noteManualSkipped(input.channelKey, reason, deps.now());
-    return { recorded: false, reason };
+    return { recorded: false, mechanism: "none", reason };
   };
+  const failed2 = (mechanism, reason) => ({
+    recorded: false,
+    mechanism,
+    reason
+  });
   if (input.entry.role !== "public") return refuse2("not-public-bot");
-  if (!deps.entryActive(input.entry, input.accountDir, input.botId)) return refuse2("agent-inactive");
   const businessKey = telegramBusinessChannelKey(input.botId, String(input.chatId));
   if (deps.newestInboundTelegramDate(input.accountId, businessKey) !== null) {
     return refuse2("business-chat");
   }
-  if (deps.findSessionProjectDir(input.sessionId) === null) return refuse2("no-transcript");
+  const projectDir = deps.findSessionProjectDir(input.sessionId);
+  if (projectDir === null) return refuse2("no-transcript");
+  const live = deps.isLive(input.channelKey);
+  const active = deps.entryActive(input.entry, input.accountDir, input.botId);
+  if (!(live && active)) {
+    const res = deps.appendTranscript(
+      input.sessionId,
+      projectDir,
+      input.text,
+      new Date(deps.now())
+    );
+    if (!res.written) return failed2("append", res.reason);
+    return { recorded: true, mechanism: "append", reason: "-" };
+  }
   try {
     await deps.handleInbound({
       accountId: input.accountId,
@@ -15548,16 +15570,83 @@ async function recordManualSendContext(input, deps) {
       })
     });
   } catch (err) {
-    return refuse2(`inject-error:${err instanceof Error ? err.message : String(err)}`);
+    return failed2("inject", `inject-error:${err instanceof Error ? err.message : String(err)}`);
   }
-  return { recorded: true, reason: "-" };
+  return { recorded: true, mechanism: "inject", reason: "-" };
 }
 
-// app/lib/claude-agent/specialist-roster.ts
-import { existsSync as existsSync19, readFileSync as readFileSync22, readdirSync as readdirSync14 } from "fs";
+// app/lib/telegram/session-transcript-append.ts
+import { appendFileSync as appendFileSync2, existsSync as existsSync19, readFileSync as readFileSync22 } from "fs";
+import { randomUUID as randomUUID4 } from "crypto";
 import { join as join27 } from "path";
+function isStr(v) {
+  return typeof v === "string" && v.length > 0;
+}
+function appendAssistantRecord(input) {
+  const path = join27(input.projectDir, `${input.sessionId}.jsonl`);
+  if (!existsSync19(path)) return { written: false, reason: "no-transcript-file" };
+  const raw = readFileSync22(path, "utf-8");
+  const recs = [];
+  for (const line of raw.split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      recs.push(JSON.parse(line));
+    } catch {
+    }
+  }
+  let parentUuid = null;
+  for (let i = recs.length - 1; i >= 0; i--) {
+    if (isStr(recs[i].uuid)) {
+      parentUuid = recs[i].uuid;
+      break;
+    }
+  }
+  if (!parentUuid) return { written: false, reason: "no-chain-leaf" };
+  let donor = null;
+  for (let i = recs.length - 1; i >= 0; i--) {
+    if (isStr(recs[i].cwd) && isStr(recs[i].version)) {
+      donor = recs[i];
+      break;
+    }
+  }
+  if (!donor) return { written: false, reason: "no-envelope" };
+  const uuid = randomUUID4();
+  const record = {
+    parentUuid,
+    isSidechain: false,
+    type: "assistant",
+    message: {
+      role: "assistant",
+      type: "message",
+      content: [{ type: "text", text: input.text }]
+    },
+    uuid,
+    timestamp: input.at.toISOString(),
+    sessionId: input.sessionId,
+    session_id: input.sessionId,
+    userType: isStr(donor.userType) ? donor.userType : "external",
+    entrypoint: isStr(donor.entrypoint) ? donor.entrypoint : "cli",
+    cwd: donor.cwd,
+    version: donor.version
+  };
+  const boundary = raw.length === 0 || raw.endsWith("\n") ? "" : "\n";
+  appendFileSync2(path, boundary + JSON.stringify(record) + "\n");
+  const reread = readFileSync22(path, "utf-8").split("\n").some((l) => {
+    if (!l.trim()) return false;
+    try {
+      return JSON.parse(l).uuid === uuid;
+    } catch {
+      return false;
+    }
+  });
+  return reread ? { written: true, reason: "-" } : { written: false, reason: "reread-missing" };
+}
+
+// app/lib/claude-agent/specialist-roster.ts
+import { existsSync as existsSync20, readFileSync as readFileSync23, readdirSync as readdirSync14 } from "fs";
+import { join as join28 } from "path";
 function listSpecialistCardNames(specialistsDir) {
-  if (!existsSync19(specialistsDir)) return [];
+  if (!existsSync20(specialistsDir)) return [];
   return readdirSync14(specialistsDir).filter((f) => f.endsWith(".md")).map((f) => f.slice(0, -3)).sort();
 }
 function field(fm, name) {
@@ -15570,7 +15659,7 @@ function field(fm, name) {
   return value || null;
 }
 function readSpecialistRoster(specialistsDir) {
-  if (!existsSync19(specialistsDir)) return { specialists: [], skipped: [] };
+  if (!existsSync20(specialistsDir)) return { specialists: [], skipped: [] };
   const entries2 = readdirSync14(specialistsDir);
   const specialists = [];
   const skipped = [];
@@ -15578,7 +15667,7 @@ function readSpecialistRoster(specialistsDir) {
     if (!file.endsWith(".md")) continue;
     let raw;
     try {
-      raw = readFileSync22(join27(specialistsDir, file), "utf-8");
+      raw = readFileSync23(join28(specialistsDir, file), "utf-8");
     } catch (err) {
       skipped.push({ file, reason: err instanceof Error ? err.message : String(err) });
       continue;
@@ -15623,7 +15712,7 @@ function foldPatches(rows, uploadsBase) {
       for (const id of row.attachmentIds) {
         if (already.has(id)) continue;
         already.add(id);
-        const meta = readAttachmentMeta(join28(uploadsBase, id));
+        const meta = readAttachmentMeta(join29(uploadsBase, id));
         if (meta) metas.push(meta);
       }
       seen.set(row.targetMessageId, already);
@@ -15897,6 +15986,11 @@ function manualSendContextDeps() {
       specialistCards: (dir) => listSpecialistCardNames(dir),
       log: (line) => console.error(line)
     }),
+    // Task 2737 — the gateway's own predicate, never a second one. A null gateway
+    // is not live by the only definition that matters here: an inject could not
+    // land, so the append branch is the correct one.
+    isLive: (channelKey) => getTelegramGateway()?.isLive(channelKey) ?? false,
+    appendTranscript: (sessionId, projectDir, text, at) => appendAssistantRecord({ sessionId, projectDir, text, at }),
     newestInboundTelegramDate,
     findSessionProjectDir,
     handleInbound: async (inbound) => {
@@ -16039,10 +16133,18 @@ app6.post("/send", requireAdminSession, async (c) => {
     manualSendContextDeps()
   );
   console.error(
-    `${MANUAL_TAG2} op=context-recorded sendId=${sendId} chatId=${chatId} sessionId=${contextSessionId} suppressed=${ctx.recorded ? "yes" : "no"} reason=${ctx.reason}`
+    `${MANUAL_TAG2} op=context sendId=${sendId} chatId=${chatId} sessionId=${contextSessionId} mechanism=${ctx.mechanism} written=${ctx.recorded ? "yes" : "no"} reason=${ctx.reason}`
   );
+  if (ctx.recorded && ctx.mechanism === "append") noteManualWritten(channelKey, Date.now());
   exit("delivered");
-  return c.json({ ok: true, recorded: reread }, 200);
+  return c.json(
+    {
+      ok: true,
+      recorded: reread,
+      context: { written: ctx.recorded, mechanism: ctx.mechanism, reason: ctx.reason }
+    },
+    200
+  );
 });
 var telegram_reader_default = app6;
 
@@ -16085,8 +16187,8 @@ function runTelegramStoreCensus() {
 
 // app/lib/telegram/reach-census.ts
 var import_dist4 = __toESM(require_dist2(), 1);
-import { existsSync as existsSync20 } from "fs";
-import { join as join29 } from "path";
+import { existsSync as existsSync21 } from "fs";
+import { join as join30 } from "path";
 function collectTelegramReachCensus(accounts) {
   const out = {
     accounts: accounts.length,
@@ -16096,7 +16198,7 @@ function collectTelegramReachCensus(accounts) {
   };
   for (const account of accounts) {
     const reach = (0, import_dist4.collectTelegramReach)({
-      storeDir: join29(STORE_ROOT2(), account.accountId),
+      storeDir: join30(STORE_ROOT2(), account.accountId),
       bots: account.bots
     });
     for (const bot of reach.bots) {
@@ -16112,7 +16214,7 @@ function runTelegramReachCensus(accounts) {
   const c = collectTelegramReachCensus(accounts);
   const root = STORE_ROOT2();
   console.error(
-    `[telegram-reach-census] accounts=${c.accounts} bots=${c.bots} chatsKnown=${c.chatsKnown} botsWithNoChats=${c.botsWithNoChats} storeRoot=${root} exists=${existsSync20(root)}`
+    `[telegram-reach-census] accounts=${c.accounts} bots=${c.bots} chatsKnown=${c.chatsKnown} botsWithNoChats=${c.botsWithNoChats} storeRoot=${root} exists=${existsSync21(root)}`
   );
   return c;
 }
@@ -16150,7 +16252,7 @@ function runTelegramCheckoutCensus(bots, now) {
 }
 
 // app/lib/telegram/media-census.ts
-import { join as join30, resolve as resolve20 } from "path";
+import { join as join31, resolve as resolve20 } from "path";
 function idsByTarget(rows) {
   const out = /* @__PURE__ */ new Map();
   for (const row of rows) {
@@ -16231,8 +16333,8 @@ function readWaOperatorTurns() {
 }
 
 // server/routes/session-reader.ts
-import { readFileSync as readFileSync23, watch as watch4, statSync as statSync15, existsSync as existsSync21, readdirSync as readdirSync15, realpathSync as realpathSync5 } from "fs";
-import { isAbsolute as isAbsolute2, join as join31, relative as relative3, resolve as resolve21, sep as sep5 } from "path";
+import { readFileSync as readFileSync24, watch as watch4, statSync as statSync15, existsSync as existsSync22, readdirSync as readdirSync15, realpathSync as realpathSync5 } from "fs";
+import { isAbsolute as isAbsolute2, join as join32, relative as relative3, resolve as resolve21, sep as sep5 } from "path";
 
 // server/routes/admin/manager-client.ts
 var SESSION_ID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -16248,10 +16350,10 @@ function managerBase(tag) {
 function pickActivity(entries2, grown, nowMs, concurrencyWindowMs) {
   const candidates = entries2.filter((e) => grown.has(e.hex));
   if (candidates.length === 0) return null;
-  let newest2 = candidates[0];
-  for (const e of candidates) if (e.mtimeMs > newest2.mtimeMs) newest2 = e;
+  let newest = candidates[0];
+  for (const e of candidates) if (e.mtimeMs > newest.mtimeMs) newest = e;
   const count = candidates.filter((e) => nowMs - e.mtimeMs < concurrencyWindowMs).length;
-  return { hex: newest2.hex, lastEmitAt: newest2.mtimeMs, count };
+  return { hex: newest.hex, lastEmitAt: newest.mtimeMs, count };
 }
 
 // server/routes/session-reader.ts
@@ -16337,7 +16439,7 @@ function openTaskKey(turns) {
 }
 function readSubagentMeta(dir, hex) {
   try {
-    const m = JSON.parse(readFileSync23(join31(dir, `agent-${hex}.meta.json`), "utf8"));
+    const m = JSON.parse(readFileSync24(join32(dir, `agent-${hex}.meta.json`), "utf8"));
     if (typeof m.agentType === "string" && typeof m.description === "string" && typeof m.toolUseId === "string") {
       return { agentType: m.agentType, description: m.description, toolUseId: m.toolUseId };
     }
@@ -16369,7 +16471,7 @@ function runActivityTick(c) {
     let size = 0;
     let mtimeMs = 0;
     try {
-      const st = statSync15(join31(c.subagentsDir, name));
+      const st = statSync15(join32(c.subagentsDir, name));
       size = st.size;
       mtimeMs = st.mtimeMs;
     } catch {
@@ -16414,11 +16516,11 @@ app7.get("/stream", requireAdminSession, (c) => {
   const sessionId = c.req.query("sessionId") ?? "";
   const projectDir = c.req.query("projectDir") ?? "";
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve21(join31(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve21(join32(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve21(join31(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve21(join32(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep5)) {
     return c.json({ error: "bad session reference" }, 400);
   }
@@ -16446,9 +16548,9 @@ data: ${JSON.stringify(turn)}
       let offset = resumeOffset(lastEventId, fileEnd0);
       console.log(`[wa-stream] op=open conn=${connId} sessionId=${sessionId} channel=reader resume=${offset}`);
       const sessionKey = c.req.query("session_key") ?? "";
-      const subagentsDir = resolve21(join31(projectDir, sessionId, "subagents"));
+      const subagentsDir = resolve21(join32(projectDir, sessionId, "subagents"));
       console.log(
-        `[webchat-activity] op=watch-subagents key=${sessionKey} dir=${subagentsDir} exists=${existsSync21(subagentsDir)}`
+        `[webchat-activity] op=watch-subagents key=${sessionKey} dir=${subagentsDir} exists=${existsSync22(subagentsDir)}`
       );
       const actx = makeActivityCtx({
         subagentsDir,
@@ -16599,11 +16701,11 @@ app7.get("/backfill", requireAdminSession, (c) => {
   const beforeRaw = c.req.query("before") ?? "";
   const before = Number(beforeRaw);
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve21(join31(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve21(join32(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId) || beforeRaw === "" || !Number.isFinite(before) || before < 0) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve21(join31(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve21(join32(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep5)) {
     return c.json({ error: "bad session reference" }, 400);
   }
@@ -16655,7 +16757,7 @@ app7.get("/directives", requireAdminSession, (c) => {
   const sessionId = c.req.query("sessionId") ?? "";
   if (!SESSION_ID_RE2.test(sessionId)) return c.json({ error: "bad session reference" }, 400);
   const dir = directiveStoreDir(sessionId);
-  if (!dir || !existsSync21(dir)) return c.json({ entries: [] });
+  if (!dir || !existsSync22(dir)) return c.json({ entries: [] });
   let names;
   try {
     names = readdirSync15(dir).filter((n) => DIRECTIVE_NAME_RE.test(n));
@@ -16668,7 +16770,7 @@ app7.get("/directives", requireAdminSession, (c) => {
     const pid = Number(pidPart);
     let len = 0;
     try {
-      len = statSync15(join31(dir, name)).size;
+      len = statSync15(join32(dir, name)).size;
     } catch {
     }
     return { name, secs, pid, ts: Number.isFinite(secs) ? new Date(secs * 1e3).toISOString() : null, len };
@@ -16683,11 +16785,11 @@ app7.get("/directive", requireAdminSession, (c) => {
   }
   const dir = directiveStoreDir(sessionId);
   if (!dir) return c.json({ error: "no account" }, 404);
-  const path = resolve21(join31(dir, name));
+  const path = resolve21(join32(dir, name));
   if (!path.startsWith(dir + sep5)) return c.json({ error: "bad reference" }, 400);
   let body;
   try {
-    body = readFileSync23(path, "utf8");
+    body = readFileSync24(path, "utf8");
   } catch {
     return c.json({ error: "not found" }, 404);
   }
@@ -16696,8 +16798,8 @@ app7.get("/directive", requireAdminSession, (c) => {
 var session_reader_default = app7;
 
 // server/routes/operator-conversations.ts
-import { readFileSync as readFileSync24 } from "fs";
-import { basename as basename9, dirname as dirname9, join as join32 } from "path";
+import { readFileSync as readFileSync25 } from "fs";
+import { basename as basename9, dirname as dirname9, join as join33 } from "path";
 
 // app/lib/reader/operator-conversations.ts
 function operatorConvName(row) {
@@ -16785,7 +16887,7 @@ app8.get("/conversations", requireAdminSession, async (c) => {
   }
   const cfg = claudeConfigDir();
   if (!cfg) return c.json({ conversations: [] });
-  const projectsRoot = join32(cfg, "projects");
+  const projectsRoot = join33(cfg, "projects");
   const userTitles = loadUserTitles(ACCOUNTS_DIR ?? null);
   const rows = [];
   let sessionRowsExcludedUntagged = 0;
@@ -16803,7 +16905,7 @@ app8.get("/conversations", requireAdminSession, async (c) => {
     enumeratedCount += 1;
     const sessionId = basename9(path).replace(/\.jsonl$/, "");
     const projectDir = dirname9(path);
-    const meta = readSidecarMeta(join32(projectDir, `${sessionId}.meta.json`));
+    const meta = readSidecarMeta(join33(projectDir, `${sessionId}.meta.json`));
     if (!isReaderChannelSession(meta.role, meta.channel)) continue;
     if (multiAccount) {
       if (meta.accountId === null) {
@@ -16815,7 +16917,7 @@ app8.get("/conversations", requireAdminSession, async (c) => {
     let body = "";
     let bodyRead = false;
     try {
-      body = readFileSync24(path, "utf8");
+      body = readFileSync25(path, "utf8");
       bodyRead = true;
       bodyReadCount += 1;
     } catch (err) {
@@ -16991,7 +17093,7 @@ app8.get("/conversations-all", requireAdminSession, async (c) => {
   const { value, state } = await getOrCompute("conversations-all", houseId, async () => {
     const cfg = claudeConfigDir();
     if (!cfg) return { conversations: [] };
-    const projectsRoot = join32(cfg, "projects");
+    const projectsRoot = join33(cfg, "projects");
     const userTitles = loadUserTitles(ACCOUNTS_DIR ?? null);
     const validAccounts = listValidAccounts();
     const validIds = new Set(validAccounts.map((a) => a.accountId));
@@ -17011,7 +17113,7 @@ app8.get("/conversations-all", requireAdminSession, async (c) => {
       enumeratedCount += 1;
       const sessionId = basename9(path).replace(/\.jsonl$/, "");
       const projectDir = dirname9(path);
-      const meta = readSidecarMeta(join32(projectDir, `${sessionId}.meta.json`));
+      const meta = readSidecarMeta(join33(projectDir, `${sessionId}.meta.json`));
       if (!isReaderChannelSession(meta.role, meta.channel)) continue;
       if (meta.accountId === null) {
         untaggedCount += 1;
@@ -17022,7 +17124,7 @@ app8.get("/conversations-all", requireAdminSession, async (c) => {
       let body = "";
       let bodyRead = false;
       try {
-        body = readFileSync24(path, "utf8");
+        body = readFileSync25(path, "utf8");
         bodyRead = true;
         bodyReadCount += 1;
       } catch (err) {
@@ -17147,8 +17249,8 @@ app8.get("/conversations-all", requireAdminSession, async (c) => {
 var operator_conversations_default = app8;
 
 // server/routes/public-reader.ts
-import { statSync as statSync17, watch as watch6, readFileSync as readFileSync25, readdirSync as readdirSync17 } from "fs";
-import { basename as basename10, dirname as dirname10, join as join33, resolve as resolve23, sep as sep7 } from "path";
+import { statSync as statSync17, watch as watch6, readFileSync as readFileSync26, readdirSync as readdirSync17 } from "fs";
+import { basename as basename10, dirname as dirname10, join as join34, resolve as resolve23, sep as sep7 } from "path";
 
 // app/lib/reader/delivered-kinds.ts
 var PUBLIC_DELIVERED_KINDS = /* @__PURE__ */ new Set([
@@ -17237,10 +17339,10 @@ function enumeratePublicRows() {
   const cfg = claudeConfigDir();
   if (!cfg) return [];
   const rows = [];
-  for (const { path } of enumerateJsonls(join33(cfg, "projects"))) {
+  for (const { path } of enumerateJsonls(join34(cfg, "projects"))) {
     const sessionId = basename10(path).replace(/\.jsonl$/, "");
     const projectDir = dirname10(path);
-    const meta = readSidecarMeta(join33(projectDir, `${sessionId}.meta.json`));
+    const meta = readSidecarMeta(join34(projectDir, `${sessionId}.meta.json`));
     rows.push({
       sessionId,
       projectDir,
@@ -17307,15 +17409,15 @@ app9.get("/backfill", (c) => {
   const beforeRaw = c.req.query("before") ?? "";
   const before = Number(beforeRaw);
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve23(join33(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve23(join34(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId) || beforeRaw === "" || !Number.isFinite(before) || before < 0) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve23(join33(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve23(join34(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep7)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const meta = readSidecarMeta(join33(projectDir, `${sessionId}.meta.json`));
+  const meta = readSidecarMeta(join34(projectDir, `${sessionId}.meta.json`));
   const isPublicWebchat = meta.role === "public" && meta.channel === "webchat";
   const owns = visitor.kind === "person" ? meta.personId === visitor.personId : meta.personId === null && meta.visitorId === visitor.visitorId;
   if (!(isPublicWebchat && owns)) {
@@ -17374,15 +17476,15 @@ app9.get("/stream", (c) => {
   const sessionId = c.req.query("sessionId") ?? "";
   const projectDir = c.req.query("projectDir") ?? "";
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve23(join33(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve23(join34(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve23(join33(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve23(join34(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep7)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const meta = readSidecarMeta(join33(projectDir, `${sessionId}.meta.json`));
+  const meta = readSidecarMeta(join34(projectDir, `${sessionId}.meta.json`));
   const isPublicWebchat = meta.role === "public" && meta.channel === "webchat";
   const owns = visitor.kind === "person" ? meta.personId === visitor.personId : meta.personId === null && meta.visitorId === visitor.visitorId;
   if (!(isPublicWebchat && owns)) {
@@ -17528,7 +17630,7 @@ app9.get("/attachment/:attachmentId", (c) => {
   try {
     dataFile = readdirSync17(dir).find((f) => !f.endsWith(".meta.json") && !f.endsWith(EXTRACTED_TEXT_SUFFIX));
     if (!dataFile) throw new Error("no data file");
-    buffer = readFileSync25(resolve23(dir, dataFile));
+    buffer = readFileSync26(resolve23(dir, dataFile));
   } catch {
     console.error(`${ATT_TAG} op=denied session=${ses} att=${at} reason=not-found`);
     return new Response("Not found", { status: 404 });
@@ -17550,20 +17652,20 @@ var public_reader_default = app9;
 
 // server/routes/webchat.ts
 import { basename as basename11, dirname as dirname11 } from "path";
-import { join as join36 } from "path";
-import { existsSync as existsSync24, readdirSync as readdirSync19, readFileSync as readFileSync28, renameSync as renameSync4, statSync as statSync18, writeFileSync as writeFileSync11 } from "fs";
+import { join as join37 } from "path";
+import { existsSync as existsSync25, readdirSync as readdirSync19, readFileSync as readFileSync29, renameSync as renameSync4, statSync as statSync18, writeFileSync as writeFileSync11 } from "fs";
 
 // server/canonical-webchat-override.ts
-import { readFileSync as readFileSync26, writeFileSync as writeFileSync9, renameSync as renameSync2 } from "fs";
-import { join as join34 } from "path";
+import { readFileSync as readFileSync27, writeFileSync as writeFileSync9, renameSync as renameSync2 } from "fs";
+import { join as join35 } from "path";
 var FILE = "canonical-webchat-session.json";
 var UUID2 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 function canonicalOverridePath(accountDir) {
-  return join34(accountDir, FILE);
+  return join35(accountDir, FILE);
 }
 function readRaw(accountDir) {
   try {
-    return JSON.parse(readFileSync26(canonicalOverridePath(accountDir), "utf8"));
+    return JSON.parse(readFileSync27(canonicalOverridePath(accountDir), "utf8"));
   } catch {
     return null;
   }
@@ -17676,8 +17778,8 @@ function isNewSessionEffortLevel(value) {
 }
 
 // ../services/claude-session-manager/src/sidecar-store.ts
-import { existsSync as existsSync23, mkdirSync as mkdirSync4, readdirSync as readdirSync18, readFileSync as readFileSync27, renameSync as renameSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "fs";
-import { join as join35 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync4, readdirSync as readdirSync18, readFileSync as readFileSync28, renameSync as renameSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "fs";
+import { join as join36 } from "path";
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -17685,7 +17787,7 @@ function createSidecarStore(config) {
   const { suffix, validate: validate3 } = config;
   const suffixRe = new RegExp(`${escapeRegExp(suffix)}$`);
   function pathFor(sessionsDir, id) {
-    return join35(sessionsDir, `${id}${suffix}`);
+    return join36(sessionsDir, `${id}${suffix}`);
   }
   function write(sessionsDir, id, record) {
     mkdirSync4(sessionsDir, { recursive: true });
@@ -17697,7 +17799,7 @@ function createSidecarStore(config) {
       return { ok: true };
     } catch (error) {
       try {
-        if (existsSync23(tmp)) unlinkSync2(tmp);
+        if (existsSync24(tmp)) unlinkSync2(tmp);
       } catch {
       }
       return { ok: false, error };
@@ -17706,7 +17808,7 @@ function createSidecarStore(config) {
   function readFileAt(path) {
     let raw;
     try {
-      raw = readFileSync27(path, "utf8");
+      raw = readFileSync28(path, "utf8");
     } catch {
       return null;
     }
@@ -17729,10 +17831,10 @@ function createSidecarStore(config) {
     const out = [];
     for (const name of names) {
       if (!suffixRe.test(name)) continue;
-      const path = join35(sessionsDir, name);
+      const path = join36(sessionsDir, name);
       let raw;
       try {
-        raw = readFileSync27(path, "utf8");
+        raw = readFileSync28(path, "utf8");
       } catch {
         onSkip?.(name, "unreadable");
         continue;
@@ -17753,7 +17855,7 @@ function createSidecarStore(config) {
   function clear(sessionsDir, id) {
     const path = pathFor(sessionsDir, id);
     try {
-      if (existsSync23(path)) {
+      if (existsSync24(path)) {
         unlinkSync2(path);
         return { ok: true, removed: true };
       }
@@ -17805,7 +17907,7 @@ var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9
 function locateSession(sessionId) {
   const dir = findSessionProjectDir(sessionId);
   if (!dir) return { projectDir: null, channel: null, accountId: null };
-  const meta = readSidecarMeta(join36(dir, `${sessionId}.meta.json`));
+  const meta = readSidecarMeta(join37(dir, `${sessionId}.meta.json`));
   return { projectDir: dir, channel: meta.channel, accountId: meta.accountId };
 }
 function resolveQuoted(sessionId, quotedUuid, sendId) {
@@ -17823,7 +17925,7 @@ function resolveQuoted(sessionId, quotedUuid, sendId) {
   let line;
   try {
     const needle = `"uuid":"${quotedUuid}"`;
-    line = readFileSync28(join36(projectDir, `${sessionId}.jsonl`), "utf8").split("\n").find((l) => l.includes(needle));
+    line = readFileSync29(join37(projectDir, `${sessionId}.jsonl`), "utf8").split("\n").find((l) => l.includes(needle));
   } catch {
     log2(false, 0);
     return void 0;
@@ -17840,7 +17942,7 @@ function resolveQuoted(sessionId, quotedUuid, sendId) {
 function locateSidecar(sessionId) {
   const cfg = claudeConfigDir();
   if (!cfg) return null;
-  const projectsRoot = join36(cfg, "projects");
+  const projectsRoot = join37(cfg, "projects");
   let slugs;
   try {
     slugs = readdirSync19(projectsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
@@ -17848,8 +17950,8 @@ function locateSidecar(sessionId) {
     return null;
   }
   for (const slug of slugs) {
-    const metaPath = join36(projectsRoot, slug, `${sessionId}.meta.json`);
-    if (existsSync24(metaPath)) return readSidecarMeta(metaPath);
+    const metaPath = join37(projectsRoot, slug, `${sessionId}.meta.json`);
+    if (existsSync25(metaPath)) return readSidecarMeta(metaPath);
   }
   return null;
 }
@@ -17858,7 +17960,7 @@ function readTargetOwner(sessionId) {
   if (sidecar !== null) return { found: true, owner: sidecar.adminUserId };
   const { projectDir } = locateSession(sessionId);
   if (projectDir !== null) {
-    return { found: true, owner: readSidecarMeta(join36(projectDir, `${sessionId}.meta.json`)).adminUserId };
+    return { found: true, owner: readSidecarMeta(join37(projectDir, `${sessionId}.meta.json`)).adminUserId };
   }
   return { found: false, owner: null };
 }
@@ -17866,7 +17968,7 @@ function readSourceRowMeta(sessionId) {
   const sidecar = locateSidecar(sessionId);
   if (sidecar !== null) return sidecar;
   const { projectDir } = locateSession(sessionId);
-  if (projectDir !== null) return readSidecarMeta(join36(projectDir, `${sessionId}.meta.json`));
+  if (projectDir !== null) return readSidecarMeta(join37(projectDir, `${sessionId}.meta.json`));
   return null;
 }
 function ownedByRequester(owner, requesterUserId, primaryUserId) {
@@ -17879,7 +17981,7 @@ function sessionSidecarExists(sessionId) {
 function jsonlSizeBytes(projectDir, sessionId) {
   if (projectDir === null) return null;
   try {
-    return statSync18(join36(projectDir, `${sessionId}.jsonl`)).size;
+    return statSync18(join37(projectDir, `${sessionId}.jsonl`)).size;
   } catch {
     return null;
   }
@@ -18007,10 +18109,10 @@ function latestAdminWebchatSessionId(requesterUserId, primaryUserId, scopeAccoun
   const cfg = claudeConfigDir();
   if (!cfg) return null;
   let best = null;
-  for (const { path, isSubagent, archived } of enumerateJsonls(join36(cfg, "projects"))) {
+  for (const { path, isSubagent, archived } of enumerateJsonls(join37(cfg, "projects"))) {
     if (isSubagent || archived) continue;
     const id = basename11(path).slice(0, -".jsonl".length);
-    const meta = readSidecarMeta(join36(dirname11(path), `${id}.meta.json`));
+    const meta = readSidecarMeta(join37(dirname11(path), `${id}.meta.json`));
     if (meta.role !== "admin" || meta.channel !== "webchat") continue;
     if (multiAccount && meta.accountId !== scopeAccountId) continue;
     let mtimeMs;
@@ -18370,9 +18472,9 @@ ${timeline}`;
       console.error(`[webchat:settings] op=${op} outcome=refused value=${value} accountId=none reason=no-account-for-session`);
       return c.json({ error: "account unresolved" }, 503);
     }
-    const accountJsonPath = join36(account.accountDir, "account.json");
+    const accountJsonPath = join37(account.accountDir, "account.json");
     try {
-      const parsed = JSON.parse(readFileSync28(accountJsonPath, "utf8"));
+      const parsed = JSON.parse(readFileSync29(accountJsonPath, "utf8"));
       if (op === "model") parsed.adminModel = value;
       else if (op === "effort") parsed.effort = value;
       else parsed.adminPermissionMode = value;
@@ -18418,7 +18520,7 @@ ${timeline}`;
         const cfg2 = claudeConfigDir();
         if (cfg2) {
           const source2 = resolveBridgeSource(
-            join36(cfg2, "sessions"),
+            join37(cfg2, "sessions"),
             target,
             (id) => locateSession(id).projectDir !== null
           );
@@ -18445,7 +18547,7 @@ ${timeline}`;
     const cfg = claudeConfigDir();
     let projectDir = null;
     if (cfg) {
-      for (const { path } of enumerateJsonls(join36(cfg, "projects"))) {
+      for (const { path } of enumerateJsonls(join37(cfg, "projects"))) {
         if (basename11(path) === `${sessionId}.jsonl`) {
           projectDir = dirname11(path);
           break;
@@ -18453,7 +18555,7 @@ ${timeline}`;
       }
     }
     if (source === "latest" && requesterUserId !== null) {
-      const owner = readSidecarMeta(join36(projectDir ?? "", `${sessionId}.meta.json`)).adminUserId;
+      const owner = readSidecarMeta(join37(projectDir ?? "", `${sessionId}.meta.json`)).adminUserId;
       if (owner !== null && owner !== requesterUserId && requesterUserId !== primaryUserId) {
         console.error(`[webchat:inbound] op=session-resolve-foreign key=${sessionId.slice(0, 8)} owner=${owner.slice(0, 8)} requester=${requesterUserId.slice(0, 8)}`);
       }
@@ -18578,13 +18680,13 @@ var webchat_greeting_default = app10;
 
 // server/routes/telegram.ts
 import { homedir as homedir2 } from "os";
-import { resolve as resolve25, join as join41 } from "path";
-import { existsSync as existsSync28, readFileSync as readFileSync32 } from "fs";
+import { resolve as resolve25, join as join42 } from "path";
+import { existsSync as existsSync29, readFileSync as readFileSync33 } from "fs";
 
 // ../lib/telegram-managed-bot/src/index.ts
 import { randomBytes } from "crypto";
-import { existsSync as existsSync25, readFileSync as readFileSync29, writeFileSync as writeFileSync12, mkdirSync as mkdirSync5 } from "fs";
-import { dirname as dirname12, join as join37 } from "path";
+import { existsSync as existsSync26, readFileSync as readFileSync30, writeFileSync as writeFileSync12, mkdirSync as mkdirSync5 } from "fs";
+import { dirname as dirname12, join as join38 } from "path";
 var TELEGRAM_API = "https://api.telegram.org";
 var TELEGRAM_ALLOWED_UPDATES = [
   "message",
@@ -18651,13 +18753,13 @@ async function setTelegramWebhook(botToken, webhookUrl, secretFilePath, fetchImp
   return { ok: true, secret };
 }
 function writeTelegramBotEntry(accountDir, entry3) {
-  const configPath3 = join37(accountDir, "account.json");
-  if (!existsSync25(configPath3)) {
+  const configPath3 = join38(accountDir, "account.json");
+  if (!existsSync26(configPath3)) {
     return { ok: false, error: `account.json not found at ${configPath3}` };
   }
   let config;
   try {
-    config = JSON.parse(readFileSync29(configPath3, "utf-8"));
+    config = JSON.parse(readFileSync30(configPath3, "utf-8"));
   } catch (e) {
     return { ok: false, error: `account.json parse failed: ${e.message}` };
   }
@@ -19628,7 +19730,7 @@ function routeTelegramUpdate(input) {
 
 // app/lib/telegram/inbound/media.ts
 var import_dist5 = __toESM(require_dist4(), 1);
-import { join as join38 } from "path";
+import { join as join39 } from "path";
 var TAG30 = "[telegram-inbound]";
 var TELEGRAM_MEDIA_DIR = "/tmp/maxy-media";
 var DOWNLOAD_TIMEOUT_MS = 45e3;
@@ -19656,7 +19758,7 @@ async function downloadTelegramMedia(input) {
       if (!meta.ok) {
         result = { ...base, failure: meta.failure };
       } else {
-        const path = join38(
+        const path = join39(
           dir,
           `tg-${(0, import_dist5.pathSafe)(input.botId)}-${(0, import_dist5.pathSafe)(item.fileUniqueId)}.${(0, import_dist5.extensionFor)(meta.filePath, item.mimetype)}`
         );
@@ -20523,8 +20625,8 @@ async function handleDispatchMedia(p) {
 }
 
 // app/lib/telegram/live-location.ts
-import { existsSync as existsSync26, mkdirSync as mkdirSync6, readFileSync as readFileSync30, readdirSync as readdirSync20, statSync as statSync19, writeFileSync as writeFileSync13 } from "fs";
-import { join as join39 } from "path";
+import { existsSync as existsSync27, mkdirSync as mkdirSync6, readFileSync as readFileSync31, readdirSync as readdirSync20, statSync as statSync19, writeFileSync as writeFileSync13 } from "fs";
+import { join as join40 } from "path";
 var TAG37 = "[telegram-inbound]";
 var LIVE_LOCATION_FILE = "telegram-live-location.json";
 var LIVE_LOCATION_CENSUS_TAG = "[telegram-live-location-census]";
@@ -20537,9 +20639,9 @@ function isRecord(v) {
   return typeof r.lat === "number" && Number.isFinite(r.lat) && typeof r.lon === "number" && Number.isFinite(r.lon) && typeof r.at === "number" && Number.isFinite(r.at) && typeof r.botId === "string" && typeof r.livePeriodS === "number" && Number.isFinite(r.livePeriodS);
 }
 function readAll(path) {
-  if (!existsSync26(path)) return {};
+  if (!existsSync27(path)) return {};
   try {
-    const parsed = JSON.parse(readFileSync30(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync31(path, "utf-8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
     const out = {};
     for (const [k, v] of Object.entries(parsed)) {
@@ -20556,7 +20658,7 @@ function isExpired(rec, now) {
 function writeLiveLocation(input) {
   const { accountDir, botId, senderId, now, emit } = input;
   const key2 = liveLocationKey(botId, senderId);
-  const path = join39(accountDir, LIVE_LOCATION_FILE);
+  const path = join40(accountDir, LIVE_LOCATION_FILE);
   const stored = readAll(path);
   const livePeriodS = input.livePeriodS ?? stored[key2]?.livePeriodS ?? null;
   if (livePeriodS === null) {
@@ -20606,8 +20708,8 @@ function liveLocationCensusLine(accountsRoot, now) {
   let oldestAgeMs = 0;
   try {
     for (const entry3 of readdirSync20(accountsRoot)) {
-      const path = join39(accountsRoot, entry3, LIVE_LOCATION_FILE);
-      if (!existsSync26(path) || !statSync19(path).isFile()) continue;
+      const path = join40(accountsRoot, entry3, LIVE_LOCATION_FILE);
+      if (!existsSync27(path) || !statSync19(path).isFile()) continue;
       for (const rec of Object.values(readAll(path))) {
         records5 += 1;
         if (isExpired(rec, now)) expired += 1;
@@ -20626,8 +20728,8 @@ function liveLocationCensusLine(accountsRoot, now) {
 }
 
 // app/lib/telegram/business-connection.ts
-import { existsSync as existsSync27, mkdirSync as mkdirSync7, readFileSync as readFileSync31, writeFileSync as writeFileSync14 } from "fs";
-import { join as join40 } from "path";
+import { existsSync as existsSync28, mkdirSync as mkdirSync7, readFileSync as readFileSync32, writeFileSync as writeFileSync14 } from "fs";
+import { join as join41 } from "path";
 var TAG38 = "[telegram-inbound]";
 var BUSINESS_CONNECTION_FILE = "telegram-business-connection.json";
 function truncateConnectionId(id) {
@@ -20639,9 +20741,9 @@ function isRecord2(v) {
   return typeof r.id === "string" && r.id.length > 0 && typeof r.isEnabled === "boolean";
 }
 function readAll2(path) {
-  if (!existsSync27(path)) return {};
+  if (!existsSync28(path)) return {};
   try {
-    const parsed = JSON.parse(readFileSync31(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync32(path, "utf-8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
     const out = {};
     for (const [k, v] of Object.entries(parsed)) {
@@ -20677,7 +20779,7 @@ function writeBusinessConnection(input) {
     rights,
     at: now
   };
-  const path = join40(accountDir, BUSINESS_CONNECTION_FILE);
+  const path = join41(accountDir, BUSINESS_CONNECTION_FILE);
   const all = readAll2(path);
   all[botId] = next;
   try {
@@ -20691,12 +20793,12 @@ function writeBusinessConnection(input) {
   return { written: true, reason: "ok" };
 }
 function readBusinessConnection(accountDir, botId) {
-  const rec = readAll2(join40(accountDir, BUSINESS_CONNECTION_FILE))[botId];
+  const rec = readAll2(join41(accountDir, BUSINESS_CONNECTION_FILE))[botId];
   if (!rec || !rec.isEnabled) return null;
   return rec;
 }
 function readAllBusinessConnections(accountDir) {
-  return readAll2(join40(accountDir, BUSINESS_CONNECTION_FILE));
+  return readAll2(join41(accountDir, BUSINESS_CONNECTION_FILE));
 }
 
 // app/lib/telegram/business-window.ts
@@ -20752,10 +20854,10 @@ function logValue4(v) {
 }
 function configDirName() {
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? resolve25(process.cwd(), "..");
-  const brandPath = join41(platformRoot5, "config", "brand.json");
-  if (existsSync28(brandPath)) {
+  const brandPath = join42(platformRoot5, "config", "brand.json");
+  if (existsSync29(brandPath)) {
     try {
-      return JSON.parse(readFileSync32(brandPath, "utf-8")).configDir ?? ".maxy";
+      return JSON.parse(readFileSync33(brandPath, "utf-8")).configDir ?? ".maxy";
     } catch {
     }
   }
@@ -20783,7 +20885,7 @@ function provisionedWebhookUrl(c, botId) {
 }
 function accountConfig(accountDir) {
   try {
-    return JSON.parse(readFileSync32(join41(accountDir, "account.json"), "utf-8"));
+    return JSON.parse(readFileSync33(join42(accountDir, "account.json"), "utf-8"));
   } catch {
     return {};
   }
@@ -20861,11 +20963,11 @@ app11.post("/", async (c) => {
   const agentSlug = entryAgentSlug(entry3);
   console.error(`${TAG39} op=entry botId=${botId} accountId=${accountId} role=${entry3.role} agent=${agentSlug}`);
   const sp = secretPath(botId);
-  if (!existsSync28(sp)) {
+  if (!existsSync29(sp)) {
     console.error(`${TAG39} op=secret botId=${botId} result=missing-file`);
     return c.json({ ok: false }, 401);
   }
-  const expected = readFileSync32(sp, "utf-8").trim();
+  const expected = readFileSync33(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
     console.error(`${TAG39} op=secret botId=${botId} result=mismatch`);
@@ -21810,21 +21912,21 @@ function mountTelegramRoutes(app81, telegramRoutes) {
 }
 
 // server/routes/quickbooks.ts
-import { join as join42 } from "path";
-import { existsSync as existsSync29, readFileSync as readFileSync33, writeFileSync as writeFileSync15, mkdirSync as mkdirSync8, rmSync as rmSync4, renameSync as renameSync5 } from "fs";
+import { join as join43 } from "path";
+import { existsSync as existsSync30, readFileSync as readFileSync34, writeFileSync as writeFileSync15, mkdirSync as mkdirSync8, rmSync as rmSync4, renameSync as renameSync5 } from "fs";
 var TAG40 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
 function pendingPath(accountDir, state) {
-  return join42(accountDir, "secrets", "quickbooks-pending", `${state}.json`);
+  return join43(accountDir, "secrets", "quickbooks-pending", `${state}.json`);
 }
 function storePath(accountDir) {
-  return join42(accountDir, "secrets", "quickbooks.json");
+  return join43(accountDir, "secrets", "quickbooks.json");
 }
 async function completeConsent(args) {
   const { accountDir, code, realmId } = args;
   const state = args.state;
-  if (!state || !STATE_RE.test(state) || !existsSync29(pendingPath(accountDir, state))) {
+  if (!state || !STATE_RE.test(state) || !existsSync30(pendingPath(accountDir, state))) {
     console.error(`${TAG40} op=callback state=${state ?? ""} stateValid=false realmId=${realmId ?? ""}`);
     return { ok: false, status: 400, message: "Invalid or unknown authorization state.", stateValid: false };
   }
@@ -21838,7 +21940,7 @@ async function completeConsent(args) {
   try {
     let pending;
     try {
-      pending = JSON.parse(readFileSync33(claimFile, "utf-8"));
+      pending = JSON.parse(readFileSync34(claimFile, "utf-8"));
     } catch {
       console.error(`${TAG40} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization state could not be read.", stateValid: false };
@@ -21851,10 +21953,10 @@ async function completeConsent(args) {
     if (!code || !realmId) {
       return { ok: false, status: 400, message: "Missing code or realmId in the callback.", stateValid: true };
     }
-    if (!existsSync29(storePath(accountDir))) {
+    if (!existsSync30(storePath(accountDir))) {
       return { ok: false, status: 500, message: "No QuickBooks credentials are stored for this account.", stateValid: true };
     }
-    const store2 = JSON.parse(readFileSync33(storePath(accountDir), "utf-8"));
+    const store2 = JSON.parse(readFileSync34(storePath(accountDir), "utf-8"));
     const form = new URLSearchParams({
       grant_type: "authorization_code",
       code,
@@ -21886,9 +21988,9 @@ async function completeConsent(args) {
       refreshTokenExpiry: now + (body.x_refresh_token_expires_in ?? 864e4) * 1e3,
       lastRefresh: now
     };
-    mkdirSync8(join42(accountDir, "secrets"), { recursive: true });
+    mkdirSync8(join43(accountDir, "secrets"), { recursive: true });
     writeFileSync15(storePath(accountDir), JSON.stringify(store2, null, 2), { mode: 384 });
-    const persisted = JSON.parse(readFileSync33(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
+    const persisted = JSON.parse(readFileSync34(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
     console.error(`${TAG40} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
@@ -21919,8 +22021,8 @@ var quickbooks_default = app12;
 
 // server/routes/onboarding.ts
 import { spawn, spawnSync as spawnSync2, execFileSync as execFileSync4 } from "child_process";
-import { openSync as openSync8, closeSync as closeSync8, appendFileSync as appendFileSync3, writeFileSync as writeFileSync17, writeSync, existsSync as existsSync31, readFileSync as readFileSync35, unlinkSync as unlinkSync3 } from "fs";
-import { createHash as createHash4, randomUUID as randomUUID4 } from "crypto";
+import { openSync as openSync8, closeSync as closeSync8, appendFileSync as appendFileSync4, writeFileSync as writeFileSync17, writeSync, existsSync as existsSync32, readFileSync as readFileSync36, unlinkSync as unlinkSync3 } from "fs";
+import { createHash as createHash4, randomUUID as randomUUID5 } from "crypto";
 
 // app/lib/claude-spawn-env.ts
 function claudeBin() {
@@ -21928,7 +22030,7 @@ function claudeBin() {
 }
 
 // server/routes/onboarding.ts
-import { dirname as dirname14, join as join44 } from "path";
+import { dirname as dirname14, join as join45 } from "path";
 
 // app/lib/claude-keychain.ts
 import { execFileSync as execFileSync3 } from "child_process";
@@ -22059,8 +22161,8 @@ function readHostCredsBlob(service) {
 }
 
 // ../lib/admins-write/src/index.ts
-import { existsSync as existsSync30, readFileSync as readFileSync34, writeFileSync as writeFileSync16, renameSync as renameSync6, mkdirSync as mkdirSync9, readdirSync as readdirSync21, statSync as statSync20, appendFileSync as appendFileSync2 } from "fs";
-import { dirname as dirname13, join as join43 } from "path";
+import { existsSync as existsSync31, readFileSync as readFileSync35, writeFileSync as writeFileSync16, renameSync as renameSync6, mkdirSync as mkdirSync9, readdirSync as readdirSync21, statSync as statSync20, appendFileSync as appendFileSync3 } from "fs";
+import { dirname as dirname13, join as join44 } from "path";
 function id8(value) {
   return value.slice(0, 8);
 }
@@ -22075,7 +22177,7 @@ function appendUsersAuditLine(audit, fields) {
 `;
   try {
     mkdirSync9(dirname13(audit.logFile), { recursive: true, mode: 448 });
-    appendFileSync2(audit.logFile, line, { mode: 384 });
+    appendFileSync3(audit.logFile, line, { mode: 384 });
   } catch (err) {
     console.error(
       `[users-audit] op=write-failed logFile=${audit.logFile} error=${err instanceof Error ? err.message : String(err)}`
@@ -22101,8 +22203,8 @@ function writeAdminEntry(input) {
   const result = { usersJsonResult: "noop", accountJsonResult: "noop" };
   try {
     let users = [];
-    if (existsSync30(input.usersFile)) {
-      const raw = readFileSync34(input.usersFile, "utf-8").trim();
+    if (existsSync31(input.usersFile)) {
+      const raw = readFileSync35(input.usersFile, "utf-8").trim();
       if (raw) {
         const parsed = JSON.parse(raw);
         if (!Array.isArray(parsed)) {
@@ -22144,11 +22246,11 @@ function writeAdminEntry(input) {
     return result;
   }
   try {
-    const accountJsonPath = join43(input.accountDir, "account.json");
-    if (!existsSync30(accountJsonPath)) {
+    const accountJsonPath = join44(input.accountDir, "account.json");
+    if (!existsSync31(accountJsonPath)) {
       throw new Error(`account.json not found at ${accountJsonPath}`);
     }
-    const config = JSON.parse(readFileSync34(accountJsonPath, "utf-8"));
+    const config = JSON.parse(readFileSync35(accountJsonPath, "utf-8"));
     const admins = config.admins ?? [];
     if (admins.some((a) => a.userId === input.userId)) {
       result.accountJsonResult = "noop";
@@ -22168,9 +22270,9 @@ function writeAdminEntry(input) {
 function computeAdminStoreDivergence(input) {
   const result = { divergences: 0, accountWithoutUsers: [], usersWithoutAccount: [], errors: [] };
   const usersUserIds = /* @__PURE__ */ new Set();
-  if (existsSync30(input.usersFile)) {
+  if (existsSync31(input.usersFile)) {
     try {
-      const raw = readFileSync34(input.usersFile, "utf-8").trim();
+      const raw = readFileSync35(input.usersFile, "utf-8").trim();
       if (raw) {
         const users = JSON.parse(raw);
         for (const u of users) {
@@ -22182,7 +22284,7 @@ function computeAdminStoreDivergence(input) {
     }
   }
   const accountUserIds = /* @__PURE__ */ new Set();
-  if (existsSync30(input.accountsDir)) {
+  if (existsSync31(input.accountsDir)) {
     let entries2;
     try {
       entries2 = readdirSync21(input.accountsDir);
@@ -22192,17 +22294,17 @@ function computeAdminStoreDivergence(input) {
     }
     for (const entry3 of entries2) {
       if (entry3.startsWith(".")) continue;
-      const accountDir = join43(input.accountsDir, entry3);
+      const accountDir = join44(input.accountsDir, entry3);
       try {
         if (!statSync20(accountDir).isDirectory()) continue;
       } catch {
         continue;
       }
-      const accountJsonPath = join43(accountDir, "account.json");
-      if (!existsSync30(accountJsonPath)) continue;
+      const accountJsonPath = join44(accountDir, "account.json");
+      if (!existsSync31(accountJsonPath)) continue;
       let admins = [];
       try {
-        const config = JSON.parse(readFileSync34(accountJsonPath, "utf-8"));
+        const config = JSON.parse(readFileSync35(accountJsonPath, "utf-8"));
         admins = config.admins ?? [];
       } catch (err) {
         result.errors.push({ source: accountJsonPath, detail: err instanceof Error ? err.message : String(err) });
@@ -22250,8 +22352,8 @@ function hashPin2(pin) {
   return createHash4("sha256").update(pin).digest("hex");
 }
 function readUsersFile2() {
-  if (!existsSync31(USERS_FILE)) return null;
-  const raw = readFileSync35(USERS_FILE, "utf-8").trim();
+  if (!existsSync32(USERS_FILE)) return null;
+  const raw = readFileSync36(USERS_FILE, "utf-8").trim();
   if (!raw) return [];
   return JSON.parse(raw);
 }
@@ -22342,7 +22444,7 @@ app13.post("/claude-auth", async (c) => {
     } catch (err) {
       logoutError = err instanceof Error ? err.message : String(err);
     }
-    const credentialsPresent = existsSync31(CLAUDE_CREDENTIALS_FILE);
+    const credentialsPresent = existsSync32(CLAUDE_CREDENTIALS_FILE);
     const ranMs = Date.now() - start;
     console.log(`[onboarding] op=claude-logout credentialsPresent=${credentialsPresent} ranMs=${ranMs} logoutError=${logoutError ? JSON.stringify(logoutError.slice(0, 120)) : "none"}`);
     return c.json({ logged_out: !credentialsPresent });
@@ -22375,12 +22477,12 @@ app13.post("/claude-auth", async (c) => {
     const cdpReady = await ensureCdp(transport);
     return c.json({ launched: cdpReady });
   }
-  const attemptId = randomUUID4().slice(0, 8);
+  const attemptId = randomUUID5().slice(0, 8);
   const superseded = pendingAuthLogin;
   pendingAuthLogin = { child: null, attemptId, startedAt: Date.now() };
   const ended = await endLogin(superseded);
   ensureLogDir();
-  appendFileSync3(logPath("claude-auth"), `==== attempt ${attemptId} ${(/* @__PURE__ */ new Date()).toISOString()} ====
+  appendFileSync4(logPath("claude-auth"), `==== attempt ${attemptId} ${(/* @__PURE__ */ new Date()).toISOString()} ====
 `);
   const claudeAuthLogFd = openSync8(logPath("claude-auth"), "a");
   const onClaudeOutput = (chunk) => writeSync(claudeAuthLogFd, chunk);
@@ -22412,7 +22514,7 @@ app13.post("/claude-auth", async (c) => {
       });
       persistKeychainService(
         writebackResult,
-        (service) => writeFileSync17(join44(dirname14(CLAUDE_CREDENTIALS_FILE), ".keychain-service"), service, { mode: 384 }),
+        (service) => writeFileSync17(join45(dirname14(CLAUDE_CREDENTIALS_FILE), ".keychain-service"), service, { mode: 384 }),
         (line) => console.log(line)
       );
       if (pendingAuthLogin?.child === claudeProc2) pendingAuthLogin = null;
@@ -22470,7 +22572,7 @@ app13.post("/set-pin", async (c) => {
   const hash = hashPin2(body.pin);
   const account = resolveAccount();
   const existingOwnerUserId = account?.config.admins?.find((a) => a.role === "owner")?.userId;
-  const userId = existingOwnerUserId ?? randomUUID4();
+  const userId = existingOwnerUserId ?? randomUUID5();
   if (existingOwnerUserId) {
     console.log(`[set-pin] reusing existing owner userId=${userId.slice(0, 8)}\u2026 (change-PIN preserves identity)`);
   } else {
@@ -22500,9 +22602,9 @@ app13.post("/set-pin", async (c) => {
   console.log(`[set-pin] wrote users.json + account.json admins: userId=${userId.slice(0, 8)}\u2026 role=owner`);
   if (process.platform === "linux") {
     let installOwner = null;
-    if (existsSync31(INSTALL_OWNER_FILE)) {
+    if (existsSync32(INSTALL_OWNER_FILE)) {
       try {
-        const raw = readFileSync35(INSTALL_OWNER_FILE, "utf-8").trim();
+        const raw = readFileSync36(INSTALL_OWNER_FILE, "utf-8").trim();
         if (raw.length > 0) installOwner = raw;
       } catch (err) {
         console.error(`[set-pin] install-owner-read-failed path=${INSTALL_OWNER_FILE} error=${err instanceof Error ? err.message : String(err)}`);
@@ -22648,9 +22750,9 @@ app13.put("/set-pin", requireAdminSession, async (c) => {
   console.log(`[set-pin] changed PIN in place: userId=${sessionUserId.slice(0, 8)}\u2026`);
   if (process.platform === "linux") {
     let installOwner = null;
-    if (existsSync31(INSTALL_OWNER_FILE)) {
+    if (existsSync32(INSTALL_OWNER_FILE)) {
       try {
-        const raw = readFileSync35(INSTALL_OWNER_FILE, "utf-8").trim();
+        const raw = readFileSync36(INSTALL_OWNER_FILE, "utf-8").trim();
         if (raw.length > 0) installOwner = raw;
       } catch (err) {
         console.error(`[set-pin] install-owner-read-failed path=${INSTALL_OWNER_FILE} error=${err instanceof Error ? err.message : String(err)}`);
@@ -23107,9 +23209,9 @@ app14.post("/probe", async (c) => {
 var field_default = app14;
 
 // server/routes/client-error.ts
-import { appendFileSync as appendFileSync4, existsSync as existsSync32, renameSync as renameSync8, statSync as statSync21 } from "fs";
-import { join as join45 } from "path";
-var CLIENT_ERRORS_LOG = join45(LOG_DIR, "client-errors.log");
+import { appendFileSync as appendFileSync5, existsSync as existsSync33, renameSync as renameSync8, statSync as statSync21 } from "fs";
+import { join as join46 } from "path";
+var CLIENT_ERRORS_LOG = join46(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
 var MAX_BODY_SIZE = 8 * 1024;
 var MAX_STACK_LEN = 2e3;
@@ -23166,7 +23268,7 @@ function stackHead(stack) {
 }
 function rotateIfNeeded() {
   try {
-    if (!existsSync32(CLIENT_ERRORS_LOG)) return;
+    if (!existsSync33(CLIENT_ERRORS_LOG)) return;
     const stats = statSync21(CLIENT_ERRORS_LOG);
     if (stats.size < MAX_LOG_SIZE) return;
     renameSync8(CLIENT_ERRORS_LOG, CLIENT_ERRORS_LOG + ".1");
@@ -23294,7 +23396,7 @@ app15.post("/", async (c) => {
         tag: typeof body.tag === "string" ? truncate(body.tag, 32) : void 0,
         status: typeof body.status === "number" ? body.status : void 0
       };
-      appendFileSync4(CLIENT_ERRORS_LOG, JSON.stringify(payload) + "\n", "utf-8");
+      appendFileSync5(CLIENT_ERRORS_LOG, JSON.stringify(payload) + "\n", "utf-8");
     } catch (err) {
       console.error(`[client-error] append failed: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -23304,7 +23406,7 @@ app15.post("/", async (c) => {
 var client_error_default = app15;
 
 // server/routes/admin/session.ts
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 
 // server/lib/session-timezone.ts
 async function resolveSessionTimezone(accountId) {
@@ -23334,7 +23436,7 @@ async function resolveUserIdentity(accountId, userId) {
 async function createAdminSession(accountId, thinkingView, userId, userName, role, avatar) {
   const account = validateAccountId2(accountId);
   const effectiveThinkingView = thinkingView ?? account?.config.thinkingView ?? "default";
-  const signedSessionToken = randomUUID5();
+  const signedSessionToken = randomUUID6();
   const cacheKey = fingerprintSessionKey(signedSessionToken);
   registerSession(cacheKey, "admin", accountId, void 0, userId, userName ?? void 0, role);
   if (userId) setWantsPriorConversation(cacheKey);
@@ -23523,18 +23625,18 @@ app17.get("/", requireAdminSession, async (c) => {
 var accounts_default = app17;
 
 // server/routes/admin/logs.ts
-import { existsSync as existsSync34, readdirSync as readdirSync22, readFileSync as readFileSync36, statSync as statSync22 } from "fs";
+import { existsSync as existsSync35, readdirSync as readdirSync22, readFileSync as readFileSync37, statSync as statSync22 } from "fs";
 import { resolve as resolve26, basename as basename13 } from "path";
 
 // app/lib/logs-read-resolve.ts
-import { existsSync as existsSync33 } from "fs";
-import { join as join46 } from "path";
+import { existsSync as existsSync34 } from "fs";
+import { join as join47 } from "path";
 function resolveSessionLogPaths(filename, logDirs) {
   const tried = [filename];
   const hits = [];
   for (const dir of logDirs) {
-    const fullPath = join46(dir, filename);
-    if (existsSync33(fullPath)) {
+    const fullPath = join47(dir, filename);
+    if (existsSync34(fullPath)) {
       hits.push({ path: fullPath, dir });
     }
   }
@@ -23559,7 +23661,7 @@ app18.get("/", async (c) => {
       const filePath = resolve26(dir, safe);
       searched.push(filePath);
       try {
-        const buffer = readFileSync36(filePath);
+        const buffer = readFileSync37(filePath);
         const onDiskBytes = statSync22(filePath).size;
         const headers = {
           "Content-Type": "text/plain; charset=utf-8",
@@ -23624,7 +23726,7 @@ app18.get("/", async (c) => {
       console.info(`[admin/logs] resolved cacheKey=${cacheKeySlice} sessionId=${sessionIdSlice} via=${primaryId === cacheKey ? "cacheKey" : primaryId === sessionKeyFromConv ? "reverse-lookup" : "sessionId-fallback"}`);
       try {
         const filename = basename13(hit.path);
-        const buffer = readFileSync36(hit.path);
+        const buffer = readFileSync37(hit.path);
         const onDiskBytes = statSync22(hit.path).size;
         const headers = {
           "Content-Type": "text/plain; charset=utf-8",
@@ -23659,7 +23761,7 @@ app18.get("/", async (c) => {
   const seen = /* @__PURE__ */ new Set();
   const logs = {};
   for (const dir of logDirs) {
-    if (!existsSync34(dir)) continue;
+    if (!existsSync35(dir)) continue;
     let files;
     try {
       files = readdirSync22(dir).filter((f) => f.endsWith(".log"));
@@ -23671,7 +23773,7 @@ app18.get("/", async (c) => {
     files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync22(resolve26(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
       seen.add(name);
       try {
-        const content = readFileSync36(resolve26(dir, name));
+        const content = readFileSync37(resolve26(dir, name));
         const tail = content.length > TAIL_BYTES ? content.subarray(content.length - TAIL_BYTES).toString("utf-8") : content.toString("utf-8");
         logs[name] = tail.trim() || "(empty)";
       } catch (err) {
@@ -23716,7 +23818,7 @@ var claude_info_default = app19;
 
 // server/routes/admin/attachment.ts
 import { readFile as readFile7, readdir as readdir2 } from "fs/promises";
-import { existsSync as existsSync35 } from "fs";
+import { existsSync as existsSync36 } from "fs";
 import { resolve as resolve27 } from "path";
 var app20 = new Hono();
 var ATTACHMENT_ID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
@@ -23739,12 +23841,12 @@ app20.get("/:attachmentId", requireAdminSession, async (c) => {
   }
   let accountId = pinnedAccountId;
   let dir = uploadsDirFor(accountId, attachmentId);
-  let found = existsSync35(dir);
+  let found = existsSync36(dir);
   if (!found) {
     for (const candidate of listValidAccounts()) {
       if (candidate.accountId === pinnedAccountId) continue;
       const candidateDir = uploadsDirFor(candidate.accountId, attachmentId);
-      if (existsSync35(candidateDir)) {
+      if (existsSync36(candidateDir)) {
         accountId = candidate.accountId;
         dir = candidateDir;
         found = true;
@@ -23759,7 +23861,7 @@ app20.get("/:attachmentId", requireAdminSession, async (c) => {
     return new Response("Not found", { status: 404 });
   }
   const metaPath = resolve27(dir, `${attachmentId}.meta.json`);
-  if (!existsSync35(metaPath)) {
+  if (!existsSync36(metaPath)) {
     return new Response("Not found", { status: 404 });
   }
   let meta;
@@ -23793,7 +23895,7 @@ var attachment_default = app20;
 
 // server/routes/admin/session-upload.ts
 import { readFile as readFile8 } from "fs/promises";
-import { existsSync as existsSync36, statSync as statSync23 } from "fs";
+import { existsSync as existsSync37, statSync as statSync23 } from "fs";
 var app21 = new Hono();
 app21.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -23814,7 +23916,7 @@ app21.get("/", requireAdminSession, async (c) => {
     return c.json({ error: "Not found" }, 404);
   }
   const resolution = resolveClaudeUploadsPath(`${sessionId}/${file}`);
-  if (!resolution.ok || !existsSync36(resolution.absolute) || !statSync23(resolution.absolute).isFile()) {
+  if (!resolution.ok || !existsSync37(resolution.absolute) || !statSync23(resolution.absolute).isFile()) {
     console.log(`[session-upload] op=miss session=${short2} file=${file} status=404 reason=absent`);
     return c.json({ error: "Not found" }, 404);
   }
@@ -23836,13 +23938,13 @@ var session_upload_default = app21;
 
 // server/routes/admin/agents.ts
 import { resolve as resolve28 } from "path";
-import { readdirSync as readdirSync24, readFileSync as readFileSync38, existsSync as existsSync38, rmSync as rmSync5, renameSync as renameSync9, mkdirSync as mkdirSync10, writeFileSync as writeFileSync18, chmodSync } from "fs";
+import { readdirSync as readdirSync24, readFileSync as readFileSync39, existsSync as existsSync39, rmSync as rmSync5, renameSync as renameSync9, mkdirSync as mkdirSync10, writeFileSync as writeFileSync18, chmodSync } from "fs";
 import { execFileSync as execFileSync6 } from "child_process";
 
 // ../services/claude-session-manager/src/tool-surface.ts
-import { readFileSync as readFileSync37, readdirSync as readdirSync23, statSync as statSync24, existsSync as existsSync37 } from "fs";
+import { readFileSync as readFileSync38, readdirSync as readdirSync23, statSync as statSync24, existsSync as existsSync38 } from "fs";
 import { createHash as createHash5 } from "crypto";
-import { join as join47 } from "path";
+import { join as join48 } from "path";
 
 // ../services/claude-session-manager/src/canonical-tool-names.ts
 function canonicalToolName(plugin, tool) {
@@ -24086,7 +24188,7 @@ function parseMcpBlock(frontmatter, pluginDir) {
 function loadToolSurface(pluginsRoots) {
   const roots = Array.isArray(pluginsRoots) ? pluginsRoots : [pluginsRoots];
   for (const r of roots) {
-    if (!existsSync37(r)) throw new ToolSurfaceError("plugins-root-missing", r);
+    if (!existsSync38(r)) throw new ToolSurfaceError("plugins-root-missing", r);
   }
   const admin = /* @__PURE__ */ new Set();
   const pub = /* @__PURE__ */ new Set();
@@ -24095,15 +24197,15 @@ function loadToolSurface(pluginsRoots) {
   const riskByTool = /* @__PURE__ */ new Map();
   const manifestPaths = /* @__PURE__ */ new Map();
   const loadOne = (pluginsRoot, plugin) => {
-    const pluginDir = join47(pluginsRoot, plugin);
+    const pluginDir = join48(pluginsRoot, plugin);
     try {
       if (!statSync24(pluginDir).isDirectory()) return;
     } catch {
       return;
     }
-    const manifestPath = join47(pluginDir, "PLUGIN.md");
-    if (!existsSync37(manifestPath)) return;
-    const raw = readFileSync37(manifestPath, "utf-8");
+    const manifestPath = join48(pluginDir, "PLUGIN.md");
+    if (!existsSync38(manifestPath)) return;
+    const raw = readFileSync38(manifestPath, "utf-8");
     const frontmatter = extractFrontmatter(raw, plugin);
     const tools = parseToolsBlock(frontmatter, plugin);
     if (tools.length === 0) return;
@@ -24122,7 +24224,7 @@ function loadToolSurface(pluginsRoots) {
           `${plugin}: mcpServers has entry but manifestPaths is missing \u2014 invariant violated, both maps must be written together`
         );
       }
-      const priorSha = createHash5("sha256").update(readFileSync37(priorPath)).digest("hex").slice(0, 8);
+      const priorSha = createHash5("sha256").update(readFileSync38(priorPath)).digest("hex").slice(0, 8);
       const newSha = createHash5("sha256").update(raw).digest("hex").slice(0, 8);
       throw new ToolSurfaceError(
         "mcp-plugin-duplicate",
@@ -24147,9 +24249,9 @@ function loadToolSurface(pluginsRoots) {
   for (const root of roots) {
     const entries2 = readdirSync23(root).sort();
     for (const plugin of entries2) {
-      const pluginDir = join47(root, plugin);
+      const pluginDir = join48(root, plugin);
       loadOne(root, plugin);
-      const subRoot = join47(pluginDir, "plugins");
+      const subRoot = join48(pluginDir, "plugins");
       let subEntries;
       try {
         if (!statSync24(subRoot).isDirectory()) continue;
@@ -24283,7 +24385,7 @@ function agentRiskClass(tools, riskByTool) {
 // server/routes/admin/agents.ts
 var SLUG_UNSAFE = (s) => s.includes("/") || s.includes("..") || s.includes("\\");
 function subdirs(dir) {
-  if (!existsSync38(dir)) return [];
+  if (!existsSync39(dir)) return [];
   try {
     return readdirSync24(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
@@ -24304,7 +24406,7 @@ var SPECIALISTS_DIR = ["specialists", "agents"];
 var QUARANTINE_DIR = ["specialists", "agents-disabled"];
 var DISABLED_STORE = "agents-disabled.json";
 function loadRiskSurface() {
-  const roots = [resolve28(PLATFORM_ROOT, "plugins"), resolve28(PLATFORM_ROOT, "..", "premium-plugins")].filter((r) => existsSync38(r));
+  const roots = [resolve28(PLATFORM_ROOT, "plugins"), resolve28(PLATFORM_ROOT, "..", "premium-plugins")].filter((r) => existsSync39(r));
   try {
     return { riskByTool: loadToolSurface(roots).riskByTool, failed: null };
   } catch (err) {
@@ -24316,8 +24418,8 @@ function loadRiskSurface() {
 }
 function readDisabledStoreStrict(accountDir) {
   const p = resolve28(accountDir, DISABLED_STORE);
-  if (!existsSync38(p)) return /* @__PURE__ */ new Set();
-  const parsed = JSON.parse(readFileSync38(p, "utf-8"));
+  if (!existsSync39(p)) return /* @__PURE__ */ new Set();
+  const parsed = JSON.parse(readFileSync39(p, "utf-8"));
   if (!Array.isArray(parsed.disabled)) throw new Error("disabled is not an array");
   return new Set(parsed.disabled.filter((x) => typeof x === "string"));
 }
@@ -24335,7 +24437,7 @@ function authoredAgentFiles(accountDir) {
   const byName = /* @__PURE__ */ new Map();
   for (const plugin of subdirs(pluginsDir)) {
     const dir = resolve28(pluginsDir, plugin, "agents");
-    if (!existsSync38(dir)) continue;
+    if (!existsSync39(dir)) continue;
     try {
       for (const entry3 of readdirSync24(dir)) {
         if (!entry3.endsWith(".md")) continue;
@@ -24358,7 +24460,7 @@ function shippedSourceDirs(accountDir) {
   ];
 }
 function readRowFields(path) {
-  const { fm } = splitFrontmatter(readFileSync38(path, "utf-8"));
+  const { fm } = splitFrontmatter(readFileSync39(path, "utf-8"));
   return {
     name: fm.name ?? "",
     description: fm.description ?? "",
@@ -24409,7 +24511,7 @@ function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed, author
   const dirs = shippedSourceDirs(accountDir);
   const names = /* @__PURE__ */ new Set();
   for (const dir of dirs) {
-    if (!existsSync38(dir)) continue;
+    if (!existsSync39(dir)) continue;
     try {
       for (const entry3 of readdirSync24(dir)) if (entry3.endsWith(".md")) names.add(entry3);
     } catch (err) {
@@ -24421,7 +24523,7 @@ function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed, author
   let deduped = 0;
   let divergent = 0;
   for (const filename of [...names].sort()) {
-    const source = dirs.find((d) => existsSync38(resolve28(d, filename)));
+    const source = dirs.find((d) => existsSync39(resolve28(d, filename)));
     if (!source) continue;
     const authoredPaths = source === dirs[0] || source === dirs[1] ? authoredFiles.get(filename) : void 0;
     if (authoredPaths) {
@@ -24439,7 +24541,7 @@ function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed, author
       }
     }
     try {
-      const { fm } = splitFrontmatter(readFileSync38(resolve28(source, filename), "utf-8"));
+      const { fm } = splitFrontmatter(readFileSync39(resolve28(source, filename), "utf-8"));
       if (!fm.name) {
         shippedSkipped++;
         console.error(`[admin/agents] op=list-shipped-skip file=${filename} reason=no-name`);
@@ -24498,7 +24600,7 @@ function listSpecialists(accountDir, riskByTool, riskSurfaceFailed) {
   let specialistsSkipped = 0;
   for (const plugin of subdirs(pluginsDir).sort()) {
     const agentsDirP = resolve28(pluginsDir, plugin, "agents");
-    if (!existsSync38(agentsDirP)) continue;
+    if (!existsSync39(agentsDirP)) continue;
     let entries2;
     try {
       entries2 = readdirSync24(agentsDirP, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
@@ -24508,7 +24610,7 @@ function listSpecialists(accountDir, riskByTool, riskSurfaceFailed) {
     for (const entry3 of entries2) {
       if (!entry3.isFile() || !entry3.name.endsWith(".md")) continue;
       try {
-        const { fm } = splitFrontmatter(readFileSync38(resolve28(agentsDirP, entry3.name), "utf-8"));
+        const { fm } = splitFrontmatter(readFileSync39(resolve28(agentsDirP, entry3.name), "utf-8"));
         if (!fm.name) {
           specialistsSkipped++;
           console.error(`[admin/agents] op=list-specialist-skip plugin=${plugin} file=${entry3.name}`);
@@ -24540,7 +24642,7 @@ function listSpecialists(accountDir, riskByTool, riskSurfaceFailed) {
           // have the surface claim an agent is stopped while it is still being
           // spawned. Absence from the live dir alone is also not the test: a
           // specialist that was never activated was never switched off either.
-          disabled: existsSync38(resolve28(accountDir, ...QUARANTINE_DIR, entry3.name)) && !existsSync38(resolve28(accountDir, ...SPECIALISTS_DIR, entry3.name))
+          disabled: existsSync39(resolve28(accountDir, ...QUARANTINE_DIR, entry3.name)) && !existsSync39(resolve28(accountDir, ...SPECIALISTS_DIR, entry3.name))
         });
       } catch {
         specialistsSkipped++;
@@ -24568,16 +24670,16 @@ app22.get("/", requireAdminSession, (c) => {
   const agents = [];
   let skipped = 0;
   const agentsDir = resolve28(account.accountDir, "agents");
-  if (existsSync38(agentsDir)) {
+  if (existsSync39(agentsDir)) {
     try {
       const entries2 = readdirSync24(agentsDir, { withFileTypes: true });
       for (const entry3 of entries2.sort((a, b) => a.name.localeCompare(b.name))) {
         if (!entry3.isDirectory()) continue;
         if (entry3.name === "admin") continue;
         const configPath3 = resolve28(agentsDir, entry3.name, "config.json");
-        if (!existsSync38(configPath3)) continue;
+        if (!existsSync39(configPath3)) continue;
         try {
-          const config = JSON.parse(readFileSync38(configPath3, "utf-8"));
+          const config = JSON.parse(readFileSync39(configPath3, "utf-8"));
           agents.push({
             slug: entry3.name,
             displayName: config.displayName ?? entry3.name,
@@ -24657,9 +24759,9 @@ app22.get("/:slug", requireAdminSession, (c) => {
   if (SLUG_UNSAFE(slug)) return c.json({ error: "Invalid agent slug" }, 400);
   if (c.req.query("origin") === "shipped") {
     const dirs = shippedSourceDirs(account.accountDir);
-    const source = dirs.find((d) => existsSync38(resolve28(d, `${slug}.md`)));
+    const source = dirs.find((d) => existsSync39(resolve28(d, `${slug}.md`)));
     if (!source) return c.json({ error: "Agent not found" }, 404);
-    const { fm, body } = splitFrontmatter(readFileSync38(resolve28(source, `${slug}.md`), "utf-8"));
+    const { fm, body } = splitFrontmatter(readFileSync39(resolve28(source, `${slug}.md`), "utf-8"));
     const { riskByTool, failed: failed2 } = loadRiskSurface();
     const tools = parseToolsLine(fm.tools);
     const r = classify(tools, riskByTool, failed2 !== null);
@@ -24690,8 +24792,8 @@ app22.get("/:slug", requireAdminSession, (c) => {
   if (pluginParam) {
     if (SLUG_UNSAFE(pluginParam)) return c.json({ error: "Invalid plugin" }, 400);
     const file = resolve28(account.accountDir, "plugins", pluginParam, "agents", `${slug}.md`);
-    if (!existsSync38(file)) return c.json({ error: "Agent not found" }, 404);
-    const { fm, body } = splitFrontmatter(readFileSync38(file, "utf-8"));
+    if (!existsSync39(file)) return c.json({ error: "Agent not found" }, 404);
+    const { fm, body } = splitFrontmatter(readFileSync39(file, "utf-8"));
     const skills = subdirs(resolve28(account.accountDir, "plugins", pluginParam, "skills"));
     const { riskByTool, failed: failed2 } = loadRiskSurface();
     const tools = parseToolsLine(fm.tools);
@@ -24721,10 +24823,10 @@ app22.get("/:slug", requireAdminSession, (c) => {
   }
   const agentDir = resolve28(account.accountDir, "agents", slug);
   const configPath3 = resolve28(agentDir, "config.json");
-  if (!existsSync38(configPath3)) return c.json({ error: "Agent not found" }, 404);
+  if (!existsSync39(configPath3)) return c.json({ error: "Agent not found" }, 404);
   let config;
   try {
-    config = JSON.parse(readFileSync38(configPath3, "utf-8"));
+    config = JSON.parse(readFileSync39(configPath3, "utf-8"));
   } catch {
     console.error(`[admin/agents] op=detail slug=${slug} error="config.json parse failed"`);
     return c.json({ error: "Agent config unreadable" }, 500);
@@ -24734,8 +24836,8 @@ app22.get("/:slug", requireAdminSession, (c) => {
   for (const { file, key: key2 } of OWNED_DOCS) {
     const p = resolve28(agentDir, file);
     try {
-      if (existsSync38(p)) {
-        docs[key2] = readFileSync38(p, "utf-8");
+      if (existsSync39(p)) {
+        docs[key2] = readFileSync39(p, "utf-8");
         present[key2] = true;
       } else {
         docs[key2] = "";
@@ -24795,11 +24897,11 @@ function reconcileRoutingProse(accountDir, accountId, op, slug) {
 }
 function reconcileAuthoredRoutingLine(accountDir, accountId, op, source) {
   const agentsMd = resolve28(accountDir, "agents", "admin", "AGENTS.md");
-  if (!existsSync38(agentsMd) || !existsSync38(source)) return false;
+  if (!existsSync39(agentsMd) || !existsSync39(source)) return false;
   try {
-    const { fm } = splitFrontmatter(readFileSync38(source, "utf-8"));
+    const { fm } = splitFrontmatter(readFileSync39(source, "utf-8"));
     if (!fm.name) return false;
-    const lines = readFileSync38(agentsMd, "utf-8").split("\n");
+    const lines = readFileSync39(agentsMd, "utf-8").split("\n");
     const prefix = `- **specialists:${fm.name}**:`;
     const without = lines.filter((l) => !l.startsWith(prefix));
     const next = op === "disable" ? without : [...without, `${prefix} ${fm.description ?? ""}`.trimEnd()];
@@ -24824,7 +24926,7 @@ app22.post("/:slug/disable", async (c) => {
     console.error(`[admin/agents] op=disable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} origin=not-authored eligible=false outcome=refused reason=not-user-created`);
     return c.json({ error: "Only an agent you created can be switched off here. A shipped agent is stopped by suspending the routines that dispatch it." }, 404);
   }
-  if (!existsSync38(live)) {
+  if (!existsSync39(live)) {
     console.error(`[admin/agents] op=disable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} origin=specialist eligible=true outcome=refused reason=not-dispatchable`);
     return c.json({ error: "This agent is not in the dispatchable set, so there is nothing to switch off." }, 409);
   }
@@ -24853,7 +24955,7 @@ app22.post("/:slug/enable", async (c) => {
   let restored = false;
   try {
     if (authored) {
-      if (!existsSync38(quarantined)) {
+      if (!existsSync39(quarantined)) {
         console.error(`[admin/agents] op=enable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} origin=specialist eligible=true outcome=refused reason=not-disabled`);
         return c.json({ error: "This agent is not disabled" }, 404);
       }
@@ -24862,11 +24964,11 @@ app22.post("/:slug/enable", async (c) => {
       restored = true;
     } else {
       const disabled = readDisabledStoreStrict(resolved.accountDir);
-      if (!existsSync38(quarantined) && !disabled.has(filename)) {
+      if (!existsSync39(quarantined) && !disabled.has(filename)) {
         console.error(`[admin/agents] op=enable accountId=${resolved.accountId.slice(0, 8)} slug=${slug} origin=shipped eligible=true outcome=refused reason=not-disabled`);
         return c.json({ error: "This agent is not disabled" }, 404);
       }
-      if (existsSync38(quarantined)) {
+      if (existsSync39(quarantined)) {
         mkdirSync10(resolve28(resolved.accountDir, ...SPECIALISTS_DIR), { recursive: true });
         renameSync9(quarantined, live);
         restored = true;
@@ -24909,7 +25011,7 @@ app22.delete("/:slug", async (c) => {
     return c.json({ error: "Not authorized for this account" }, 403);
   }
   const agentDir = resolve28(account.accountDir, "agents", slug);
-  if (!existsSync38(agentDir)) {
+  if (!existsSync39(agentDir)) {
     return c.json({ error: "Agent not found" }, 404);
   }
   try {
@@ -24952,7 +25054,7 @@ app22.post("/:slug/project", async (c) => {
     return c.json({ error: "Not authorized for this account" }, 403);
   }
   const agentDir = resolve28(account.accountDir, "agents", slug);
-  if (!existsSync38(agentDir)) {
+  if (!existsSync39(agentDir)) {
     console.error(`[admin/agents] op=project rejected reason=agent-not-on-disk accountId=${account.accountId.slice(0, 8)} slug=${slug} probed=${agentDir}`);
     return c.json({ error: "Agent not found on disk" }, 404);
   }
@@ -24971,7 +25073,7 @@ var agents_default = app22;
 // server/routes/admin/sessions.ts
 import crypto2 from "crypto";
 import { resolve as resolvePath } from "path";
-import { existsSync as existsSync39, mkdirSync as mkdirSync11, createWriteStream } from "fs";
+import { existsSync as existsSync40, mkdirSync as mkdirSync11, createWriteStream } from "fs";
 
 // ../lib/admin-conversation-purge/src/index.ts
 async function purgeAdminConversationJsonls(args) {
@@ -25131,7 +25233,7 @@ function validateAndShapeAttachments(raws, conversationAccountId, sessionId, mes
     let reason = null;
     if (!a.attachmentId || !a.filename || !a.mimeType || !a.storagePath) reason = "schema-fail";
     else if (a.accountId !== conversationAccountId) reason = "account-mismatch";
-    else if (!existsSync39(a.storagePath)) reason = "missing-file";
+    else if (!existsSync40(a.storagePath)) reason = "missing-file";
     if (reason) {
       invalid++;
       try {
@@ -25657,8 +25759,8 @@ app23.put("/:id/label", requireAdminSession, async (c) => {
 var sessions_default = app23;
 
 // app/lib/claude-agent/spawn-context.ts
-import { existsSync as existsSync40, readFileSync as readFileSync39, readdirSync as readdirSync25, statSync as statSync25 } from "fs";
-import { dirname as dirname15, resolve as resolve29, join as join48 } from "path";
+import { existsSync as existsSync41, readFileSync as readFileSync40, readdirSync as readdirSync25, statSync as statSync25 } from "fs";
+import { dirname as dirname15, resolve as resolve29, join as join49 } from "path";
 async function resolveOwnerProfileBlock(accountId, userId) {
   if (!userId) return { ok: false, reason: "missing-user-id" };
   try {
@@ -25699,14 +25801,14 @@ function frontmatterField(manifest, field2) {
 function extractPluginToolDescriptions(pluginDir) {
   const out = /* @__PURE__ */ new Map();
   const candidates = [
-    join48(pluginDir, "mcp/dist/index.js"),
-    join48(pluginDir, "mcp/src/index.ts")
+    join49(pluginDir, "mcp/dist/index.js"),
+    join49(pluginDir, "mcp/src/index.ts")
   ];
   let raw = null;
   for (const path of candidates) {
-    if (!existsSync40(path)) continue;
+    if (!existsSync41(path)) continue;
     try {
-      raw = readFileSync39(path, "utf-8");
+      raw = readFileSync40(path, "utf-8");
       break;
     } catch {
     }
@@ -25756,9 +25858,9 @@ function parseSkillPathsFromFrontmatter(fm) {
 function listPluginDirs(accountPluginsDir) {
   const out = /* @__PURE__ */ new Map();
   const platformPlugins = resolve29(PLATFORM_ROOT, "plugins");
-  if (existsSync40(platformPlugins)) {
+  if (existsSync41(platformPlugins)) {
     for (const name of readdirSync25(platformPlugins)) {
-      const dir = join48(platformPlugins, name);
+      const dir = join49(platformPlugins, name);
       try {
         if (statSync25(dir).isDirectory()) out.set(name, dir);
       } catch {
@@ -25766,13 +25868,13 @@ function listPluginDirs(accountPluginsDir) {
     }
   }
   const premiumRoot = resolve29(dirname15(PLATFORM_ROOT), "premium-plugins");
-  if (existsSync40(premiumRoot)) {
+  if (existsSync41(premiumRoot)) {
     for (const bundle of readdirSync25(premiumRoot)) {
-      const bundlePlugins = join48(premiumRoot, bundle, "plugins");
-      if (!existsSync40(bundlePlugins)) continue;
+      const bundlePlugins = join49(premiumRoot, bundle, "plugins");
+      if (!existsSync41(bundlePlugins)) continue;
       try {
         for (const name of readdirSync25(bundlePlugins)) {
-          const dir = join48(bundlePlugins, name);
+          const dir = join49(bundlePlugins, name);
           try {
             if (statSync25(dir).isDirectory()) out.set(name, dir);
           } catch {
@@ -25782,11 +25884,11 @@ function listPluginDirs(accountPluginsDir) {
       }
     }
   }
-  if (accountPluginsDir && existsSync40(accountPluginsDir)) {
+  if (accountPluginsDir && existsSync41(accountPluginsDir)) {
     try {
       for (const name of readdirSync25(accountPluginsDir)) {
         if (out.has(name)) continue;
-        const dir = join48(accountPluginsDir, name);
+        const dir = join49(accountPluginsDir, name);
         try {
           if (statSync25(dir).isDirectory()) out.set(name, dir);
         } catch {
@@ -25801,11 +25903,11 @@ function accountPluginsDirFor(accountId) {
   return resolve29(PLATFORM_ROOT, "..", "data/accounts", accountId, "plugins");
 }
 function listAccountPluginNames(accountPluginsDir) {
-  if (!existsSync40(accountPluginsDir)) return [];
+  if (!existsSync41(accountPluginsDir)) return [];
   try {
     return readdirSync25(accountPluginsDir).filter((name) => {
       try {
-        return statSync25(join48(accountPluginsDir, name)).isDirectory();
+        return statSync25(join49(accountPluginsDir, name)).isDirectory();
       } catch {
         return false;
       }
@@ -25816,9 +25918,9 @@ function listAccountPluginNames(accountPluginsDir) {
 }
 function readEnabledPlugins(accountId) {
   const accountFile = resolve29(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
-  if (!existsSync40(accountFile)) return /* @__PURE__ */ new Set();
+  if (!existsSync41(accountFile)) return /* @__PURE__ */ new Set();
   try {
-    const parsed = JSON.parse(readFileSync39(accountFile, "utf-8"));
+    const parsed = JSON.parse(readFileSync40(accountFile, "utf-8"));
     return new Set(
       Array.isArray(parsed.enabledPlugins) ? parsed.enabledPlugins.filter((p) => typeof p === "string") : []
     );
@@ -25827,10 +25929,10 @@ function readEnabledPlugins(accountId) {
   }
 }
 function readFrontmatter(path) {
-  if (!existsSync40(path)) return null;
+  if (!existsSync41(path)) return null;
   let raw;
   try {
-    raw = readFileSync39(path, "utf-8");
+    raw = readFileSync40(path, "utf-8");
   } catch {
     return null;
   }
@@ -25848,7 +25950,7 @@ function computeActivePlugins(accountId) {
   for (const name of emitNames) {
     const dir = pluginDirs.get(name);
     if (!dir) continue;
-    const fm = readFrontmatter(join48(dir, "PLUGIN.md"));
+    const fm = readFrontmatter(join49(dir, "PLUGIN.md"));
     if (!fm) continue;
     const description = frontmatterField(`---
 ${fm}
@@ -25865,7 +25967,7 @@ ${fm}
       `plugin-manifest-tool-coverage plugin=${name} tools=${tools.length} with-desc=${withDesc}`
     );
     if (toolNames.length > 0 && descMap.size === 0) {
-      const hasSource = existsSync40(join48(dir, "mcp/dist/index.js")) || existsSync40(join48(dir, "mcp/src/index.ts"));
+      const hasSource = existsSync41(join49(dir, "mcp/dist/index.js")) || existsSync41(join49(dir, "mcp/src/index.ts"));
       if (hasSource) {
         console.warn(
           `[spawn-context] WARN plugin=${name} mcp source present but tool-description regex matched zero entries \u2014 SDK upgrade may have changed the registration shape`
@@ -25875,7 +25977,7 @@ ${fm}
     const skillPaths = parseSkillPathsFromFrontmatter(fm);
     const skills = [];
     for (const relPath of skillPaths) {
-      const skillPath = join48(dir, relPath);
+      const skillPath = join49(dir, relPath);
       const skillFm = readFrontmatter(skillPath);
       if (!skillFm) continue;
       const skillName = frontmatterField(`---
@@ -25892,7 +25994,7 @@ ${skillFm}
 }
 function computeSpecialistDomains(accountId) {
   const specialistsDir = resolve29(PLATFORM_ROOT, "..", "data/accounts", accountId, "specialists", "agents");
-  if (!existsSync40(specialistsDir)) return [];
+  if (!existsSync41(specialistsDir)) return [];
   let entries2;
   try {
     entries2 = readdirSync25(specialistsDir);
@@ -25919,7 +26021,7 @@ function computeSpecialistDomains(accountId) {
   const out = [];
   for (const file of entries2.sort()) {
     if (!file.endsWith(".md")) continue;
-    const fm = readFrontmatter(join48(specialistsDir, file));
+    const fm = readFrontmatter(join49(specialistsDir, file));
     if (!fm) continue;
     const wrapped = `---
 ${fm}
@@ -25938,10 +26040,10 @@ ${fm}
 }
 function computeDormantPlugins(accountId) {
   const accountFile = resolve29(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
-  if (!existsSync40(accountFile)) return [];
+  if (!existsSync41(accountFile)) return [];
   let enabled;
   try {
-    const raw = readFileSync39(accountFile, "utf-8");
+    const raw = readFileSync40(accountFile, "utf-8");
     const parsed = JSON.parse(raw);
     enabled = new Set(
       Array.isArray(parsed.enabledPlugins) ? parsed.enabledPlugins.filter((p) => typeof p === "string") : []
@@ -25953,7 +26055,7 @@ function computeDormantPlugins(accountId) {
     return [];
   }
   const pluginsDir = resolve29(PLATFORM_ROOT, "plugins");
-  if (!existsSync40(pluginsDir)) return [];
+  if (!existsSync41(pluginsDir)) return [];
   let entries2;
   try {
     entries2 = readdirSync25(pluginsDir);
@@ -25964,10 +26066,10 @@ function computeDormantPlugins(accountId) {
   for (const name of entries2) {
     if (enabled.has(name)) continue;
     const manifestPath = resolve29(pluginsDir, name, "PLUGIN.md");
-    if (!existsSync40(manifestPath)) continue;
+    if (!existsSync41(manifestPath)) continue;
     let manifest;
     try {
-      manifest = readFileSync39(manifestPath, "utf-8");
+      manifest = readFileSync40(manifestPath, "utf-8");
     } catch {
       continue;
     }
@@ -25981,13 +26083,13 @@ function computeDormantPlugins(accountId) {
 }
 
 // server/routes/admin/claude-sessions.ts
-import { existsSync as existsSync41, readFileSync as readFileSync40 } from "fs";
+import { existsSync as existsSync42, readFileSync as readFileSync41 } from "fs";
 import { resolve as resolve30 } from "path";
 function readTunnelState(brandConfigDir) {
   const statePath = `${process.env.HOME ?? ""}/${brandConfigDir}/cloudflared/tunnel.state`;
-  if (!existsSync41(statePath)) return null;
+  if (!existsSync42(statePath)) return null;
   try {
-    const parsed = JSON.parse(readFileSync40(statePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync41(statePath, "utf-8"));
     const tunnelId = typeof parsed.tunnelId === "string" ? parsed.tunnelId : null;
     const tunnelName = typeof parsed.tunnelName === "string" ? parsed.tunnelName : null;
     const domain = typeof parsed.domain === "string" ? parsed.domain : null;
@@ -26001,7 +26103,7 @@ function resolveTunnelUrl() {
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? resolve30(process.cwd(), "..");
   let brand;
   try {
-    brand = JSON.parse(readFileSync40(resolve30(platformRoot5, "config", "brand.json"), "utf-8"));
+    brand = JSON.parse(readFileSync41(resolve30(platformRoot5, "config", "brand.json"), "utf-8"));
   } catch {
     return null;
   }
@@ -26202,7 +26304,7 @@ app25.post("/", async (c) => {
 var log_ingest_default = app25;
 
 // server/routes/admin/session-blocked.ts
-import { join as join49 } from "path";
+import { join as join50 } from "path";
 var TAG44 = "[blocked-tool-notify]";
 function isLoopbackAddr4(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
@@ -26249,7 +26351,7 @@ app26.post("/", async (c) => {
   if (!tool) return c.json({ error: "tool-required" }, 400);
   const text = blockedNotificationText({ sessionId, agentId, tool, blockedForMs });
   const projectDir = findSessionProjectDir(sessionId);
-  const meta = projectDir ? readSidecarMeta(join49(projectDir, `${sessionId}.meta.json`)) : { role: null, channel: null, senderId: null, accountId: null };
+  const meta = projectDir ? readSidecarMeta(join50(projectDir, `${sessionId}.meta.json`)) : { role: null, channel: null, senderId: null, accountId: null };
   const account = validateAccountId2(meta.accountId ?? "");
   if (!account) {
     console.error(
@@ -26444,11 +26546,11 @@ app27.get("/", requireAdminSession, async (c) => {
 var events_default = app27;
 
 // server/routes/admin/files.ts
-import { createReadStream as createReadStream2, createWriteStream as createWriteStream2, existsSync as existsSync42 } from "fs";
+import { createReadStream as createReadStream2, createWriteStream as createWriteStream2, existsSync as existsSync43 } from "fs";
 import { readdir as readdir4, readFile as readFile10, stat as stat6, mkdir as mkdir2, unlink as unlink3, rename as rename3, rmdir } from "fs/promises";
 import { realpathSync as realpathSync7 } from "fs";
-import { randomUUID as randomUUID6 } from "crypto";
-import { basename as basename15, dirname as dirname16, join as join51, relative as relative6, resolve as resolve32, sep as sep9 } from "path";
+import { randomUUID as randomUUID7 } from "crypto";
+import { basename as basename15, dirname as dirname16, join as join52, relative as relative6, resolve as resolve32, sep as sep9 } from "path";
 import { Readable as Readable2 } from "stream";
 
 // ../lib/graph-trash/src/index.ts
@@ -26766,7 +26868,7 @@ async function cascadeDeleteDocument(params) {
 
 // app/lib/file-index.ts
 import * as fsp from "fs/promises";
-import { resolve as resolve31, relative as relative5, join as join50, basename as basename14, extname, sep as sep8 } from "path";
+import { resolve as resolve31, relative as relative5, join as join51, basename as basename14, extname, sep as sep8 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 import { execFile } from "child_process";
 import { promisify } from "util";
@@ -26848,7 +26950,7 @@ async function extractPdf(absolute) {
   return stdout.trim();
 }
 async function ocrPdf(absolute) {
-  const outPdf = join50(tmpdir3(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
+  const outPdf = join51(tmpdir3(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
   try {
     await execFileAsync(
       "ocrmypdf",
@@ -26910,7 +27012,7 @@ async function readDisplayName(absolute) {
   const stem = dot === -1 ? base : base.slice(0, dot);
   if (base === `${stem}.meta.json`) return null;
   try {
-    const raw = await fsp.readFile(join50(dir, `${stem}.meta.json`), "utf-8");
+    const raw = await fsp.readFile(join51(dir, `${stem}.meta.json`), "utf-8");
     const meta = JSON.parse(raw);
     const dn = meta.displayName ?? meta.filename;
     return typeof dn === "string" && dn.length > 0 ? dn : null;
@@ -26931,7 +27033,7 @@ async function walkSubtree(root, dataRoot, out) {
   for (const entry3 of entries2) {
     if (entry3.isSymbolicLink()) continue;
     if (entry3.isDirectory() && entry3.name === ".uploads-tmp") continue;
-    const abs = join50(root, entry3.name);
+    const abs = join51(root, entry3.name);
     if (entry3.isDirectory()) {
       const sub = await walkSubtree(abs, dataRoot, out);
       if (!sub.clean) clean = false;
@@ -27304,7 +27406,7 @@ var UPLOAD_TMP_DIR = ".uploads-tmp";
 var UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta2(absDir, baseName) {
   try {
-    const raw = await readFile10(join51(absDir, `${baseName}.meta.json`), "utf8");
+    const raw = await readFile10(join52(absDir, `${baseName}.meta.json`), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.filename === "string") {
       return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
@@ -27359,7 +27461,7 @@ async function servableFilesIn(dirAbs, uuid) {
 }
 async function enrich(absolute, entry3, accountNames) {
   if (entry3.kind === "directory" && UUID_RE3.test(entry3.name)) {
-    const dirAbs = join51(absolute, entry3.name);
+    const dirAbs = join52(absolute, entry3.name);
     const meta = await readMeta2(dirAbs, entry3.name);
     if (meta?.filename) {
       const servable = await servableFilesIn(dirAbs, entry3.name);
@@ -27368,7 +27470,7 @@ async function enrich(absolute, entry3, accountNames) {
         let size = null;
         let modifiedAt = entry3.modifiedAt;
         try {
-          const st = await stat6(join51(dirAbs, innerName));
+          const st = await stat6(join52(dirAbs, innerName));
           size = st.size;
           modifiedAt = st.mtime.toISOString();
         } catch {
@@ -27580,7 +27682,7 @@ app28.get("/", requireAdminSession, async (c) => {
       const childRel = relPath === "" || relPath === "." ? name : `${relPath}/${name}`;
       const protectedEntry = isProtectedFromDeletion(childRel).protected;
       try {
-        const entryPath = join51(absolute, name);
+        const entryPath = join52(absolute, name);
         const s = await stat6(entryPath);
         entries2.push({
           name,
@@ -27609,7 +27711,7 @@ app28.get("/", requireAdminSession, async (c) => {
     const displayPath = buildDisplayPath(relPath, accountNames);
     if (groupReq || isAccountRoot(relPath)) {
       const acctId = relPath.split("/")[1] ?? accountId;
-      const schemaMd = await readFile10(join51(absolute, "SCHEMA.md"), "utf8").catch(() => null);
+      const schemaMd = await readFile10(join52(absolute, "SCHEMA.md"), "utf8").catch(() => null);
       const groups = classifyAccountRoot(schemaMd, entries2.map((e) => e.name));
       console.error(
         `[data-schema] op=classify account=${acctId} status=${groups.parsed ? "ok" : "parse-failed"} reason=${groups.reason} entries=${entries2.length} home=${groups.home.join(",") || "none"} system=${groups.system.length} unknown=${groups.unknown.join(",") || "none"}`
@@ -27647,7 +27749,7 @@ app28.get("/", requireAdminSession, async (c) => {
       for (const name of homeDirs) {
         const base = byName.get(name);
         try {
-          const dirents = await readdir4(join51(absolute, name), { withFileTypes: true });
+          const dirents = await readdir4(join52(absolute, name), { withFileTypes: true });
           const visible = dirents.filter((d) => !d.name.startsWith("."));
           visible.sort((a, b) => {
             const ad = a.isDirectory() ? 0 : 1;
@@ -27712,7 +27814,7 @@ app28.get("/download", requireAdminSession, async (c) => {
       console.error(`[data] op=scratchpad-no-session sessionId="${sessionId.slice(0, 8)}\u2026"`);
       return c.json({ error: "Not found" }, 404);
     }
-    const meta = readSidecarMeta(join51(projectDir, `${sessionId}.meta.json`));
+    const meta = readSidecarMeta(join52(projectDir, `${sessionId}.meta.json`));
     if (!meta.accountId || meta.accountId !== accountId) {
       console.error(`[data] account-scope-blocked root="scratchpad" sessionId="${sessionId.slice(0, 8)}\u2026" account=${accountId.slice(0, 8)}\u2026`);
       return c.json({ error: "Not found" }, 404);
@@ -27806,7 +27908,7 @@ async function* walkRegularFiles(dirAbsolute) {
   const dirents = await readdir4(dirAbsolute, { withFileTypes: true });
   for (const d of dirents) {
     if (d.isSymbolicLink()) continue;
-    const child = join51(dirAbsolute, d.name);
+    const child = join52(dirAbsolute, d.name);
     if (d.isDirectory()) {
       yield* walkRegularFiles(child);
       continue;
@@ -27912,7 +28014,7 @@ async function resolveUploadTarget(c, accountId, uid) {
   const base = resolveSharedOrOwnAccountWrite(rawDir, accountId, "POST /api/admin/files/upload");
   if (!base.ok) return { ok: false, status: base.status, error: base.error };
   const relDir = relpath ? dirname16(relpath) : ".";
-  const destRel = relDir === "." ? base.relative : join51(base.relative, relDir);
+  const destRel = relDir === "." ? base.relative : join52(base.relative, relDir);
   if ((0, import_dist.isSharedPath)(destRel)) {
     const gate2 = gateSharedWrite(base.absolute, destRel, accountId, "POST /api/admin/files/upload");
     if (!gate2.ok) return { ok: false, status: gate2.status, error: gate2.error };
@@ -27962,7 +28064,7 @@ app28.post("/upload", requireAdminSession, async (c) => {
   if (c.req.query("uploadId") !== void 0) {
     return handleChunkUpload(c, accountId);
   }
-  const uid = `${Date.now()}-${randomUUID6().slice(0, 8)}`;
+  const uid = `${Date.now()}-${randomUUID7().slice(0, 8)}`;
   const declaredBytes = c.req.header("content-length") ?? "unknown";
   const target = await resolveUploadTarget(c, accountId, uid);
   if (!target.ok) return c.json({ error: target.error }, target.status);
@@ -27991,7 +28093,7 @@ app28.post("/upload", requireAdminSession, async (c) => {
     });
     await unlink3(tmpPath).catch(() => {
     });
-    const tempRemoved = !existsSync42(tmpPath);
+    const tempRemoved = !existsSync43(tmpPath);
     console.error(`[data-upload] op=cleanup uid=${uid} tempRemoved=${tempRemoved}`);
   };
   const reader = body.getReader();
@@ -28065,7 +28167,7 @@ async function discardChunkUpload(uploadId, state) {
   });
   await unlink3(state.tmpPath).catch(() => {
   });
-  const tempRemoved = !existsSync42(state.tmpPath);
+  const tempRemoved = !existsSync43(state.tmpPath);
   console.error(`[data-upload] op=cleanup uid=${uploadId} tempRemoved=${tempRemoved}`);
 }
 async function writeChunkBody(body, out, alreadyReceived, ceiling) {
@@ -28298,7 +28400,7 @@ app28.delete("/", requireAdminSession, async (c) => {
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
     const containerDir = dirname16(absolute);
-    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join51(containerDir, `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join52(containerDir, `${stem}.meta.json`) : null;
     const isAttachmentContainer = UUID_RE3.test(stem) && basename15(containerDir) === stem;
     await unlink3(absolute);
     if (sidecarPath) {
@@ -28308,7 +28410,7 @@ app28.delete("/", requireAdminSession, async (c) => {
       }
     }
     if (isAttachmentContainer) {
-      await unlink3(join51(containerDir, `${stem}${EXTRACTED_TEXT_SUFFIX}`)).catch(() => {
+      await unlink3(join52(containerDir, `${stem}${EXTRACTED_TEXT_SUFFIX}`)).catch(() => {
       });
       await rmdir(containerDir).catch(() => {
       });
@@ -29423,8 +29525,8 @@ function isHiddenByDefault(label) {
 
 // server/lib/top-level-labels.ts
 var import_dist14 = __toESM(require_dist9(), 1);
-import { readdirSync as readdirSync26, readFileSync as readFileSync41 } from "fs";
-import { join as join52, resolve as resolve33 } from "path";
+import { readdirSync as readdirSync26, readFileSync as readFileSync42 } from "fs";
+import { join as join53, resolve as resolve33 } from "path";
 var STATIC_TOP_LEVEL_LABELS = Object.freeze(
   /* @__PURE__ */ new Set([
     // Base-schema infra (schema-base.md has no top-level section).
@@ -29528,7 +29630,7 @@ function parseTopLevelLabels(content) {
 }
 function resolveReferencesDir() {
   if (process.env.MAXY_PLATFORM_ROOT) {
-    return join52(process.env.MAXY_PLATFORM_ROOT, "plugins", "memory", "references");
+    return join53(process.env.MAXY_PLATFORM_ROOT, "plugins", "memory", "references");
   }
   return resolve33(import.meta.dirname, "../../../plugins/memory/references");
 }
@@ -29538,7 +29640,7 @@ function parseTableTopLevelLabels(referencesDir) {
   try {
     const fileNames = readdirSync26(referencesDir).filter((f) => f.startsWith("schema-") && f.endsWith(".md")).sort();
     for (const fileName of fileNames) {
-      const content = readFileSync41(join52(referencesDir, fileName), "utf-8");
+      const content = readFileSync42(join53(referencesDir, fileName), "utf-8");
       const parsed = parseTopLevelLabels(content);
       if (parsed.length > 0) contributingFiles.push(fileName);
       for (const label of parsed) labels.add(label);
@@ -30696,7 +30798,7 @@ var graph_default_view_default = app34;
 // server/routes/admin/sidebar-artefacts.ts
 import { readdir as readdir5, stat as stat7 } from "fs/promises";
 import { resolve as resolve34, relative as relative7, isAbsolute as isAbsolute4, sep as sep10, basename as basename16 } from "path";
-import { existsSync as existsSync43 } from "fs";
+import { existsSync as existsSync44 } from "fs";
 var LIMIT = 50;
 var ADMIN_AGENT_FILES = ["IDENTITY.md", "SOUL.md", "KNOWLEDGE.md"];
 function toDataRootRelPath(absPath) {
@@ -30808,7 +30910,7 @@ async function fetchAgentTemplateRows(accountDir) {
 async function unionSpecialistFilenames(overrideDir, bundledDir) {
   const names = /* @__PURE__ */ new Set();
   for (const dir of [overrideDir, bundledDir]) {
-    if (!existsSync43(dir)) continue;
+    if (!existsSync44(dir)) continue;
     try {
       const entries2 = await readdir5(dir);
       for (const entry3 of entries2) {
@@ -30823,7 +30925,7 @@ async function unionSpecialistFilenames(overrideDir, bundledDir) {
 }
 async function readAgentTemplateRow(inp) {
   let chosenPath = null;
-  if (existsSync43(inp.overridePath)) {
+  if (existsSync44(inp.overridePath)) {
     try {
       validateFilePathInAccount(inp.overridePath, inp.overrideRoot);
       chosenPath = inp.overridePath;
@@ -30834,7 +30936,7 @@ async function readAgentTemplateRow(inp) {
       );
       return null;
     }
-  } else if (existsSync43(inp.bundledPath)) {
+  } else if (existsSync44(inp.bundledPath)) {
     if (!isWithin(inp.bundledPath, inp.bundledRoot)) {
       console.error(
         `[admin/sidebar-artefacts] agent-template-read-failed agent=${inp.displayName} kind=${inp.logName} error="bundled path outside PLATFORM_ROOT"`
@@ -30876,19 +30978,19 @@ function isWithin(target, root) {
 var sidebar_artefacts_default = app35;
 
 // server/channel-session-override.ts
-import { readFileSync as readFileSync42, writeFileSync as writeFileSync19, renameSync as renameSync10 } from "fs";
-import { join as join53 } from "path";
+import { readFileSync as readFileSync43, writeFileSync as writeFileSync19, renameSync as renameSync10 } from "fs";
+import { join as join54 } from "path";
 var FILE2 = "channel-session-override.json";
 var UUID3 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 function channelOverridePath(accountDir) {
-  return join53(accountDir, FILE2);
+  return join54(accountDir, FILE2);
 }
 function senderKey(channel, senderId) {
   return `${channel}:${senderId}`;
 }
 function readRaw2(accountDir) {
   try {
-    return JSON.parse(readFileSync42(channelOverridePath(accountDir), "utf8"));
+    return JSON.parse(readFileSync43(channelOverridePath(accountDir), "utf8"));
   } catch {
     return null;
   }
@@ -31144,9 +31246,9 @@ app40.get("/", requireAdminSession, async (c) => {
 var session_usage_default = app40;
 
 // server/routes/admin/session-rc-spawn.ts
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 var ACCOUNT_UUID_RE2 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
-function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID7, adminUserId, authenticatedName, callerAccountId) {
+function resolveSpawnPlan(host, operatorDomains, body, mintId = randomUUID8, adminUserId, authenticatedName, callerAccountId) {
   const operator = isOperatorHost(host, operatorDomains);
   const resumeId = typeof body.sessionId === "string" && body.sessionId.length > 0 ? body.sessionId : void 0;
   const name = typeof body.name === "string" && body.name.length > 0 ? body.name : void 0;
@@ -31216,8 +31318,8 @@ app41.post("/", requireAdminSession, async (c) => {
   const adminUserId = cacheKey ? getUserIdForSession(cacheKey) : void 0;
   const accountId = cacheKey ? getAccountIdForSession(cacheKey) : void 0;
   const authenticatedName = accountId ? await resolveAuthenticatedName(accountId, adminUserId) : void 0;
-  const plan = resolveSpawnPlan(host, getOperatorDomains(), body, randomUUID7, adminUserId, authenticatedName, accountId);
-  const spawnReqId = randomUUID7();
+  const plan = resolveSpawnPlan(host, getOperatorDomains(), body, randomUUID8, adminUserId, authenticatedName, accountId);
+  const spawnReqId = randomUUID8();
   console.log(
     `[chat-spawn] op=request spawnReqId=${spawnReqId} origin=${plan.origin} kind=${plan.kind} sessionId=${plan.kind === "new" ? "new" : plan.sessionId}`
   );
@@ -31323,27 +31425,27 @@ app41.post("/", requireAdminSession, async (c) => {
 var session_rc_spawn_default = app41;
 
 // server/routes/admin/session-reseat.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 
 // server/wa-descriptor.ts
-import { resolve as resolve35, join as join54 } from "path";
+import { resolve as resolve35, join as join55 } from "path";
 function waGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function waServerPath() {
-  return process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve35(process.env.MAXY_PLATFORM_ROOT ?? join54(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
+  return process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve35(process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
 }
 function waChannelDescriptor(senderId) {
   return { senderId, gatewayUrl: waGatewayUrl(), serverPath: waServerPath() };
 }
 
 // server/telegram-descriptor.ts
-import { resolve as resolve36, join as join55 } from "path";
+import { resolve as resolve36, join as join56 } from "path";
 function telegramGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function telegramServerPath() {
-  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve36(process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, ".."), "services/telegram-channel/dist/server.js");
+  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve36(process.env.MAXY_PLATFORM_ROOT ?? join56(__dirname, ".."), "services/telegram-channel/dist/server.js");
 }
 function telegramChannelDescriptor(senderId) {
   return { senderId, gatewayUrl: telegramGatewayUrl(), serverPath: telegramServerPath() };
@@ -31359,7 +31461,7 @@ function shouldWriteChannelForward(source) {
 function isPublicChannelSource(source) {
   return !!source && source.role === "public" && (source.channel === "whatsapp" || source.channel === "telegram");
 }
-function resolveReseatPlan(body, mintId = randomUUID8, adminUserId, authenticatedName, source) {
+function resolveReseatPlan(body, mintId = randomUUID9, adminUserId, authenticatedName, source) {
   const sessionId = mintId();
   const key2 = `session:${sessionId}`;
   const payload = {
@@ -31427,13 +31529,13 @@ app42.post("/", requireAdminSession, async (c) => {
     }
     const plan = resolveReseatPlan(
       { fromSessionId, model, ...permissionMode ? { permissionMode } : {}, ...effort ? { effort } : {} },
-      randomUUID8,
+      randomUUID9,
       adminUserId,
       authenticatedName,
       source
     );
     const isChannelFork = isAdminChannelSource(source);
-    const reseatReqId = randomUUID8();
+    const reseatReqId = randomUUID9();
     console.log(`[chat-reseat] op=request reseatReqId=${reseatReqId} from=${fromSessionId} from-channel=${source?.channel ?? "none"} from-sender=${source?.senderId ?? "none"} to-model=${model} to-mode=${permissionMode ?? "none"} to-effort=${effort ?? "none"} new=${plan.sessionId}`);
     let res;
     try {
@@ -31629,14 +31731,14 @@ app43.get("/", async (c) => {
 var system_stats_default = app43;
 
 // server/routes/admin/health.ts
-import { existsSync as existsSync44, readFileSync as readFileSync43 } from "fs";
-import { resolve as resolve37, join as join56 } from "path";
+import { existsSync as existsSync45, readFileSync as readFileSync44 } from "fs";
+import { resolve as resolve37, join as join57 } from "path";
 var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT ?? resolve37(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join56(PLATFORM_ROOT4, "config", "brand.json");
-if (existsSync44(brandJsonPath)) {
+var brandJsonPath = join57(PLATFORM_ROOT4, "config", "brand.json");
+if (existsSync45(brandJsonPath)) {
   try {
-    const brand = JSON.parse(readFileSync43(brandJsonPath, "utf-8"));
+    const brand = JSON.parse(readFileSync44(brandJsonPath, "utf-8"));
     if (brand.hostname) brandHostname = brand.hostname;
   } catch {
   }
@@ -31645,8 +31747,8 @@ var VERSION_FILE = resolve37(PLATFORM_ROOT4, `config/.${brandHostname}-version`)
 var PROCESS_STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
 var PROBE_TIMEOUT_MS = 1e3;
 function readVersion() {
-  if (!existsSync44(VERSION_FILE)) return "unknown";
-  return readFileSync43(VERSION_FILE, "utf-8").trim() || "unknown";
+  if (!existsSync45(VERSION_FILE)) return "unknown";
+  return readFileSync44(VERSION_FILE, "utf-8").trim() || "unknown";
 }
 async function probeConversationDb() {
   let session;
@@ -31697,11 +31799,11 @@ app44.get("/", async (c) => {
 var health_default2 = app44;
 
 // server/routes/admin/linkedin-ingest.ts
-import { randomUUID as randomUUID9 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 
 // ../lib/account-ingest-token/src/index.ts
 import { randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "crypto";
-import { existsSync as existsSync45, readdirSync as readdirSync27, readFileSync as readFileSync44, writeFileSync as writeFileSync20 } from "fs";
+import { existsSync as existsSync46, readdirSync as readdirSync27, readFileSync as readFileSync45, writeFileSync as writeFileSync20 } from "fs";
 import { resolve as resolve38 } from "path";
 var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var INGEST_TOKEN_FIELD = "ingestToken";
@@ -31711,9 +31813,9 @@ function configPath2(accountsDir, accountId) {
 }
 function readConfig2(accountsDir, accountId) {
   const path = configPath2(accountsDir, accountId);
-  if (!existsSync45(path)) return null;
+  if (!existsSync46(path)) return null;
   try {
-    const parsed = JSON.parse(readFileSync44(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync45(path, "utf-8"));
     return parsed !== null && typeof parsed === "object" ? parsed : null;
   } catch {
     return null;
@@ -31724,7 +31826,7 @@ function readIngestToken(accountsDir, accountId) {
   return typeof value === "string" && TOKEN_RE.test(value) ? value : null;
 }
 function listAccountIdsOnDisk(accountsDir) {
-  if (!existsSync45(accountsDir)) return [];
+  if (!existsSync46(accountsDir)) return [];
   let entries2;
   try {
     entries2 = readdirSync27(accountsDir);
@@ -31732,7 +31834,7 @@ function listAccountIdsOnDisk(accountsDir) {
     return [];
   }
   return entries2.filter(
-    (name) => UUID_RE4.test(name) && existsSync45(resolve38(accountsDir, name, "account.json"))
+    (name) => UUID_RE4.test(name) && existsSync46(resolve38(accountsDir, name, "account.json"))
   );
 }
 function resolveAccountIdByIngestToken(accountsDir, token) {
@@ -32037,7 +32139,7 @@ app45.post("/", requireIngestToken, async (c) => {
   );
   const initialMessage = buildInitialMessage(envelope);
   const spawnStart = Date.now();
-  const sessionId = randomUUID9();
+  const sessionId = randomUUID10();
   console.log(TAG45 + " route target=rc-spawn dispatchId=" + envelope.dispatchId + " sessionId=" + sessionId.slice(0, 8));
   const spawned = await managerRcSpawn({
     sessionId,
@@ -32564,9 +32666,9 @@ app51.delete("/tabs/:id", requireAdminSession, async (c) => {
 var browser_default = app51;
 
 // server/routes/admin/calendar.ts
-import { existsSync as existsSync46 } from "fs";
-import { randomUUID as randomUUID10 } from "crypto";
-import { join as join58 } from "path";
+import { existsSync as existsSync47 } from "fs";
+import { randomUUID as randomUUID11 } from "crypto";
+import { join as join59 } from "path";
 
 // server/lib/calendar-ics.ts
 var CRLF = "\r\n";
@@ -32666,8 +32768,8 @@ function countVEvents(ics) {
 }
 
 // server/lib/calendar-availability.ts
-import { readFileSync as readFileSync45 } from "fs";
-import { join as join57 } from "path";
+import { readFileSync as readFileSync46 } from "fs";
+import { join as join58 } from "path";
 var AVAILABILITY_FILENAME = "calendar-availability.json";
 var REQUIRED_KEYS = [
   "timezone",
@@ -32676,10 +32778,10 @@ var REQUIRED_KEYS = [
   "weekly"
 ];
 function readAvailabilityConfig(accountDir) {
-  const path = join57(accountDir, AVAILABILITY_FILENAME);
+  const path = join58(accountDir, AVAILABILITY_FILENAME);
   let raw;
   try {
-    raw = readFileSync45(path, "utf-8");
+    raw = readFileSync46(path, "utf-8");
   } catch {
     throw new Error(`availability not configured: ${path} not found`);
   }
@@ -32805,7 +32907,7 @@ var CREATE_FIELDS = EDITABLE_FIELDS;
 function buildCreateParams(accountId, body) {
   const params = {
     accountId,
-    uid: randomUUID10(),
+    uid: randomUUID11(),
     source: "admin-ui",
     createdBySource: "admin-ui",
     scope: "admin",
@@ -33234,7 +33336,7 @@ app52.get("/booking-link", requireAdminSession, (c) => {
   }
   const id83 = account.accountId.slice(0, 8);
   try {
-    if (!existsSync46(join58(account.accountDir, AVAILABILITY_FILENAME))) {
+    if (!existsSync47(join59(account.accountDir, AVAILABILITY_FILENAME))) {
       console.log(`[calendar] op=booking-link accountId=${id83} bookingDomain=none source=availability-config`);
       return c.json({ bookingDomain: null });
     }
@@ -33253,8 +33355,8 @@ app52.get("/booking-link", requireAdminSession, (c) => {
 var calendar_default = app52;
 
 // server/routes/admin/data-portal.ts
-import { existsSync as existsSync47, readFileSync as readFileSync46 } from "fs";
-import { join as join59 } from "path";
+import { existsSync as existsSync48, readFileSync as readFileSync47 } from "fs";
+import { join as join60 } from "path";
 var app53 = new Hono();
 var PORTAL_FILENAME = "data-portal.json";
 app53.get("/portal-link", requireAdminSession, (c) => {
@@ -33265,12 +33367,12 @@ app53.get("/portal-link", requireAdminSession, (c) => {
   }
   const id83 = account.accountId.slice(0, 8);
   try {
-    const path = join59(account.accountDir, PORTAL_FILENAME);
-    if (!existsSync47(path)) {
+    const path = join60(account.accountDir, PORTAL_FILENAME);
+    if (!existsSync48(path)) {
       console.log(`[data-portal] op=portal-link accountId=${id83} portalDomain=none source=data-portal-config`);
       return c.json({ portalDomain: null });
     }
-    const cfg = JSON.parse(readFileSync46(path, "utf-8"));
+    const cfg = JSON.parse(readFileSync47(path, "utf-8"));
     const portalDomain = typeof cfg.portalDomain === "string" && cfg.portalDomain.trim() ? cfg.portalDomain.trim() : null;
     console.log(`[data-portal] op=portal-link accountId=${id83} portalDomain=${portalDomain ?? "none"} source=data-portal-config`);
     return c.json({ portalDomain });
@@ -33283,8 +33385,8 @@ app53.get("/portal-link", requireAdminSession, (c) => {
 var data_portal_default = app53;
 
 // server/routes/admin/dispatch-planner.ts
-import { existsSync as existsSync48, readFileSync as readFileSync47 } from "fs";
-import { join as join60 } from "path";
+import { existsSync as existsSync49, readFileSync as readFileSync48 } from "fs";
+import { join as join61 } from "path";
 var app54 = new Hono();
 var PORTAL_FILENAME2 = "data-portal.json";
 app54.get("/planner-link", requireAdminSession, (c) => {
@@ -33297,15 +33399,15 @@ app54.get("/planner-link", requireAdminSession, (c) => {
   }
   const id83 = account.accountId.slice(0, 8);
   try {
-    const portalPath = join60(account.accountDir, PORTAL_FILENAME2);
-    const dispatchConfigured = existsSync48(join60(account.accountDir, "dispatch", "config.json"));
-    if (!existsSync48(portalPath) || !dispatchConfigured) {
+    const portalPath = join61(account.accountDir, PORTAL_FILENAME2);
+    const dispatchConfigured = existsSync49(join61(account.accountDir, "dispatch", "config.json"));
+    if (!existsSync49(portalPath) || !dispatchConfigured) {
       console.log(
-        `[dispatch-planner] op=planner-link accountId=${id83} plannerUrl=none portal=${existsSync48(portalPath)} dispatch=${dispatchConfigured}`
+        `[dispatch-planner] op=planner-link accountId=${id83} plannerUrl=none portal=${existsSync49(portalPath)} dispatch=${dispatchConfigured}`
       );
       return c.json({ plannerUrl: null });
     }
-    const cfg = JSON.parse(readFileSync47(portalPath, "utf-8"));
+    const cfg = JSON.parse(readFileSync48(portalPath, "utf-8"));
     const domain = typeof cfg.portalDomain === "string" && cfg.portalDomain.trim() ? cfg.portalDomain.trim() : null;
     const plannerUrl = domain ? `https://${domain}/planner` : null;
     console.log(
@@ -33323,11 +33425,11 @@ var dispatch_planner_default = app54;
 // server/routes/admin/routines.ts
 import cronParser from "cron-parser";
 import { int as int2 } from "neo4j-driver";
-import { readFileSync as readFileSync49 } from "fs";
+import { readFileSync as readFileSync50 } from "fs";
 import { resolve as resolve40 } from "path";
 
 // ../lib/agent-dispatch-rule/src/index.ts
-import { readFileSync as readFileSync48 } from "fs";
+import { readFileSync as readFileSync49 } from "fs";
 import { resolve as resolve39 } from "path";
 function normalizeE1642(value) {
   let candidate = value.trim().replace(/[\s\-().]/g, "");
@@ -33345,7 +33447,7 @@ function phonesMatch2(a, b) {
 function readChannelAdmins(accountDir, channel) {
   let config = {};
   try {
-    config = JSON.parse(readFileSync48(resolve39(accountDir, "account.json"), "utf-8"));
+    config = JSON.parse(readFileSync49(resolve39(accountDir, "account.json"), "utf-8"));
   } catch {
     config = {};
   }
@@ -33513,7 +33615,7 @@ function gateWatermarkPath(eventId) {
 }
 function readGateLastCommitAt(eventId) {
   try {
-    const parsed = JSON.parse(readFileSync49(gateWatermarkPath(eventId), "utf-8"));
+    const parsed = JSON.parse(readFileSync50(gateWatermarkPath(eventId), "utf-8"));
     return typeof parsed?.lastCommitAt === "string" ? parsed.lastCommitAt : null;
   } catch {
     return null;
@@ -34390,7 +34492,7 @@ app55.delete("/:eventId", requireAdminSession, async (c) => {
 var routines_default = app55;
 
 // server/routes/admin/skills.ts
-import { existsSync as existsSync49, readdirSync as readdirSync28, readFileSync as readFileSync50, rmSync as rmSync6 } from "fs";
+import { existsSync as existsSync50, readdirSync as readdirSync28, readFileSync as readFileSync51, rmSync as rmSync6 } from "fs";
 import { resolve as resolve41 } from "path";
 var app56 = new Hono();
 var NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
@@ -34414,7 +34516,7 @@ function stripQuotes(s) {
   return s;
 }
 function subdirs2(dir) {
-  if (!existsSync49(dir)) return [];
+  if (!existsSync50(dir)) return [];
   try {
     return readdirSync28(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
@@ -34437,11 +34539,11 @@ app56.get("/", requireAdminSession, async (c) => {
       const skillsDir = resolve41(pluginsDir, plugin, "skills");
       for (const skill of subdirs2(skillsDir)) {
         const skillMd = resolve41(skillsDir, skill, "SKILL.md");
-        if (!existsSync49(skillMd)) continue;
+        if (!existsSync50(skillMd)) continue;
         try {
-          const { frontmatter } = splitSkillMd(readFileSync50(skillMd, "utf-8"));
+          const { frontmatter } = splitSkillMd(readFileSync51(skillMd, "utf-8"));
           const refsDir = resolve41(skillsDir, skill, "references");
-          const refCount = existsSync49(refsDir) ? readdirSync28(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).length : 0;
+          const refCount = existsSync50(refsDir) ? readdirSync28(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).length : 0;
           skills.push({ plugin, skill, description: frontmatter.description, refCount });
         } catch (err) {
           console.error(`[admin:skills] op=list-skip plugin=${plugin} skill=${skill} reason="${err instanceof Error ? err.message : String(err)}"`);
@@ -34465,13 +34567,13 @@ app56.get("/:plugin/:skill", requireAdminSession, async (c) => {
   }
   const skillDir = resolve41(acct.accountDir, "plugins", plugin, "skills", skill);
   const skillMd = resolve41(skillDir, "SKILL.md");
-  const found = existsSync49(skillMd);
+  const found = existsSync50(skillMd);
   console.log(`[admin:skills] op=get plugin=${plugin} skill=${skill} found=${found}`);
   if (!found) return c.json({ error: "Skill not found" }, 404);
   try {
-    const { frontmatter, body } = splitSkillMd(readFileSync50(skillMd, "utf-8"));
+    const { frontmatter, body } = splitSkillMd(readFileSync51(skillMd, "utf-8"));
     const refsDir = resolve41(skillDir, "references");
-    const references = existsSync49(refsDir) ? readdirSync28(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name).sort() : [];
+    const references = existsSync50(refsDir) ? readdirSync28(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name).sort() : [];
     return c.json({ skill: { plugin, skill, frontmatter, body, references } });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
@@ -34491,7 +34593,7 @@ app56.delete("/:plugin/:skill", requireAdminSession, async (c) => {
   const pluginDir = resolve41(acct.accountDir, "plugins", plugin);
   const skillsDir = resolve41(pluginDir, "skills");
   const skillDir = resolve41(skillsDir, skill);
-  if (!existsSync49(resolve41(skillDir, "SKILL.md"))) {
+  if (!existsSync50(resolve41(skillDir, "SKILL.md"))) {
     console.error(`[admin:skills] op=delete outcome=rejected reason=not-found plugin=${plugin} skill=${skill}`);
     return c.json({ error: "Skill not found" }, 404);
   }
@@ -34499,7 +34601,7 @@ app56.delete("/:plugin/:skill", requireAdminSession, async (c) => {
     rmSync6(skillDir, { recursive: true, force: true });
     const pluginDirRemoved = subdirs2(skillsDir).length === 0;
     if (pluginDirRemoved) rmSync6(pluginDir, { recursive: true, force: true });
-    const skillDirGone = !existsSync49(skillDir);
+    const skillDirGone = !existsSync50(skillDir);
     if (!skillDirGone) {
       console.error(`[admin:skills] op=delete plugin=${plugin} skill=${skill} outcome=rejected reason=rm-incomplete skillDirGone=false`);
       return c.json({ error: "Delete did not remove the skill directory" }, 503);
@@ -34515,7 +34617,7 @@ app56.delete("/:plugin/:skill", requireAdminSession, async (c) => {
 var skills_default = app56;
 
 // server/routes/admin/tasks-list.ts
-import { basename as basename17, join as join61 } from "path";
+import { basename as basename17, join as join62 } from "path";
 
 // app/lib/time-entry-format.ts
 function secondsBetween(startIso, endIso) {
@@ -34691,7 +34793,7 @@ async function computeTaskList(accountId) {
       dangling = 0;
     } else if (cfg !== null) {
       try {
-        const walk = enumerateJsonlsWithSkips(join61(cfg, "projects"));
+        const walk = enumerateJsonlsWithSkips(join62(cfg, "projects"));
         if (walk.skipped > 0) {
           console.error(
             `${TAG51} op=session-dangling-census-incomplete account=${accountId} skipped=${walk.skipped} detail="a slug the walk could not read contributes no session ids, so its links cannot be judged"`
@@ -34733,7 +34835,7 @@ async function computeTaskList(accountId) {
 var tasks_list_default = app57;
 
 // server/routes/admin/task-timer-start.ts
-import { randomUUID as randomUUID11 } from "crypto";
+import { randomUUID as randomUUID12 } from "crypto";
 var TAG52 = "[task-timer]";
 var app58 = new Hono();
 app58.post("/", requireAdminSession, async (c) => {
@@ -34776,7 +34878,7 @@ app58.post("/", requireAdminSession, async (c) => {
       invalidate("tasks-list", accountId);
       return c.json({ ok: true, running: true, entryId: priorEntryId, startedAt: priorStartedAt });
     }
-    const entryId = randomUUID11();
+    const entryId = randomUUID12();
     await session.run(
       `MATCH (t:Task {taskId: $taskId, accountId: $accountId})
        CREATE (te:TimeEntry {entryId: $entryId, taskId: $taskId, accountId: $accountId, startedAt: $now, endedAt: null})
@@ -34915,7 +35017,7 @@ app60.post("/", requireAdminSession, async (c) => {
 var task_complete_default = app60;
 
 // server/routes/admin/task-time-adjust.ts
-import { randomUUID as randomUUID12 } from "crypto";
+import { randomUUID as randomUUID13 } from "crypto";
 import neo4j6 from "neo4j-driver";
 var TAG55 = "[task-time-adjust]";
 var app61 = new Hono();
@@ -34941,7 +35043,7 @@ app61.post("/", requireAdminSession, async (c) => {
     console.error(`${TAG55} op=reject reason=invalid-seconds taskId=${taskId} accountId=${accountId}`);
     return c.json({ error: "newSeconds must be a non-negative integer" }, 400);
   }
-  const adjustmentId = randomUUID12();
+  const adjustmentId = randomUUID13();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   console.log(`${TAG55} op=request adjustmentId=${adjustmentId} taskId=${taskId} accountId=${accountId} newSeconds=${newSeconds}`);
   const session = getSession();
@@ -34997,7 +35099,7 @@ app61.post("/", requireAdminSession, async (c) => {
 var task_time_adjust_default = app61;
 
 // server/routes/admin/task-delete.ts
-import { randomUUID as randomUUID13 } from "crypto";
+import { randomUUID as randomUUID14 } from "crypto";
 var TAG56 = "[task-delete]";
 var app62 = new Hono();
 app62.post("/", requireAdminSession, async (c) => {
@@ -35011,7 +35113,7 @@ app62.post("/", requireAdminSession, async (c) => {
     console.error(`${TAG56} op=reject reason=bad-json`);
     return c.json({ error: "invalid-json" }, 400);
   }
-  const deletionId = randomUUID13();
+  const deletionId = randomUUID14();
   const taskId = typeof body.taskId === "string" ? body.taskId : "";
   if (!taskId) {
     const reason = body.taskId === null ? "null-taskId" : "missing-taskId";
@@ -35103,7 +35205,7 @@ app62.post("/", requireAdminSession, async (c) => {
 var task_delete_default = app62;
 
 // app/lib/admin-roster.ts
-import { existsSync as existsSync50, readdirSync as readdirSync29, readFileSync as readFileSync51 } from "fs";
+import { existsSync as existsSync51, readdirSync as readdirSync29, readFileSync as readFileSync52 } from "fs";
 import { resolve as resolve42 } from "path";
 function readHouseAdminUserIds(accountsDir = ACCOUNTS_DIR) {
   let entries2;
@@ -35114,9 +35216,9 @@ function readHouseAdminUserIds(accountsDir = ACCOUNTS_DIR) {
   }
   for (const entry3 of entries2) {
     const cfgPath = resolve42(accountsDir, entry3, "account.json");
-    if (!existsSync50(cfgPath)) continue;
+    if (!existsSync51(cfgPath)) continue;
     try {
-      const cfg = JSON.parse(readFileSync51(cfgPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync52(cfgPath, "utf-8"));
       if (cfg.role !== "house") continue;
       if (!Array.isArray(cfg.admins)) return [];
       return cfg.admins.map(
@@ -35958,7 +36060,7 @@ app72.route("/request-magic-link", request_magic_link_default);
 var access_default = app72;
 
 // server/routes/sites.ts
-import { existsSync as existsSync51, readFileSync as readFileSync52, realpathSync as realpathSync8, statSync as statSync27 } from "fs";
+import { existsSync as existsSync52, readFileSync as readFileSync53, realpathSync as realpathSync8, statSync as statSync27 } from "fs";
 import { resolve as resolve45 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
@@ -36024,7 +36126,7 @@ app73.get("/:rel{.*}", (c) => {
   }
   let stat11;
   try {
-    stat11 = existsSync51(filePath) ? statSync27(filePath) : null;
+    stat11 = existsSync52(filePath) ? statSync27(filePath) : null;
   } catch {
     stat11 = null;
   }
@@ -36043,7 +36145,7 @@ app73.get("/:rel{.*}", (c) => {
     console.error(`[sites] path-traversal-rejected path=${reqPath} reason=escape status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync51(filePath)) {
+  if (!existsSync52(filePath)) {
     console.error(`[sites] not-found path=${reqPath} status=404`);
     return c.text("Not found", 404);
   }
@@ -36062,7 +36164,7 @@ app73.get("/:rel{.*}", (c) => {
   }
   let body;
   try {
-    body = readFileSync52(realPath);
+    body = readFileSync53(realPath);
   } catch (err) {
     const code = err?.code;
     if (code === "EISDIR") {
@@ -36098,7 +36200,7 @@ var sites_default = app73;
 
 // app/lib/visitor-token.ts
 import { createHmac as createHmac2, randomBytes as randomBytes3, timingSafeEqual as timingSafeEqual3 } from "crypto";
-import { mkdirSync as mkdirSync12, readFileSync as readFileSync53, writeFileSync as writeFileSync21 } from "fs";
+import { mkdirSync as mkdirSync12, readFileSync as readFileSync54, writeFileSync as writeFileSync21 } from "fs";
 import { dirname as dirname17 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
@@ -36107,7 +36209,7 @@ var cachedSecret = null;
 function getSecret() {
   if (cachedSecret) return cachedSecret;
   try {
-    const hex2 = readFileSync53(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+    const hex2 = readFileSync54(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
     if (hex2.length === SECRET_BYTES * 2) {
       cachedSecret = Buffer.from(hex2, "hex");
       return cachedSecret;
@@ -36121,7 +36223,7 @@ function getSecret() {
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
   }
-  const hex = readFileSync53(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+  const hex = readFileSync54(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
   cachedSecret = Buffer.from(hex, "hex");
   return cachedSecret;
 }
@@ -36174,8 +36276,8 @@ var VISITOR_COOKIE_NAME = "mxy_v";
 var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
-import { existsSync as existsSync52, readFileSync as readFileSync54 } from "fs";
-import { join as join62 } from "path";
+import { existsSync as existsSync53, readFileSync as readFileSync55 } from "fs";
+import { join as join63 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -36183,10 +36285,10 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot5) return null;
-  const brandPath = join62(platformRoot5, "config", "brand.json");
-  if (!existsSync52(brandPath)) return null;
+  const brandPath = join63(platformRoot5, "config", "brand.json");
+  if (!existsSync53(brandPath)) return null;
   try {
-    cached2 = JSON.parse(readFileSync54(brandPath, "utf-8"));
+    cached2 = JSON.parse(readFileSync55(brandPath, "utf-8"));
     return cached2;
   } catch {
     return null;
@@ -36684,7 +36786,7 @@ var visitor_event_default = app76;
 
 // server/routes/session.ts
 import { resolve as resolve46 } from "path";
-import { existsSync as existsSync53, writeFileSync as writeFileSync22, mkdirSync as mkdirSync13 } from "fs";
+import { existsSync as existsSync54, writeFileSync as writeFileSync22, mkdirSync as mkdirSync13 } from "fs";
 var UUID_RE5 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 function writeBrandingCache(accountId, agentSlug, branding) {
   try {
@@ -36772,7 +36874,7 @@ app77.post("/", async (c) => {
   let agentConfig = null;
   if (account) {
     const agentDir = resolve46(account.accountDir, "agents", agentSlug);
-    if (!existsSync53(agentDir) || !existsSync53(resolve46(agentDir, "config.json"))) {
+    if (!existsSync54(agentDir) || !existsSync54(resolve46(agentDir, "config.json"))) {
       return c.json({ error: "Agent not found" }, 404);
     }
     agentConfig = resolveAgentConfig(account.accountDir, agentSlug);
@@ -36952,7 +37054,7 @@ var calendar_public_default = app78;
 // server/routes/portal-fetch.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat8, readFile as readFile12, realpath } from "fs/promises";
-import { join as join63, resolve as resolve47, sep as sep11 } from "path";
+import { join as join64, resolve as resolve47, sep as sep11 } from "path";
 import { Readable as Readable3 } from "stream";
 var app79 = new Hono();
 var TAG65 = "[portal-fetch]";
@@ -37025,7 +37127,7 @@ function isValidAccountId2(value) {
 }
 async function readExposeFolders2(accountDir) {
   try {
-    const cfg = JSON.parse(await readFile12(join63(accountDir, "data-portal.json"), "utf8"));
+    const cfg = JSON.parse(await readFile12(join64(accountDir, "data-portal.json"), "utf8"));
     return Array.isArray(cfg?.exposeFolders) ? cfg.exposeFolders.filter((f) => typeof f === "string") : [];
   } catch {
     return [];
@@ -37034,7 +37136,7 @@ async function readExposeFolders2(accountDir) {
 async function resolveFetchTarget(accountDir, relPath, ownerId) {
   let schemaText = null;
   try {
-    schemaText = await readFile12(join63(accountDir, "SCHEMA.md"), "utf8");
+    schemaText = await readFile12(join64(accountDir, "SCHEMA.md"), "utf8");
   } catch {
     schemaText = null;
   }
@@ -37204,8 +37306,8 @@ function startTimeEntryCensus(openSession, opts = {}) {
 }
 
 // app/lib/ledger-census.ts
-import { readdirSync as readdirSync31, readFileSync as readFileSync55, statSync as statSync28 } from "fs";
-import { join as join64 } from "path";
+import { readdirSync as readdirSync31, readFileSync as readFileSync56, statSync as statSync28 } from "fs";
+import { join as join65 } from "path";
 
 // ../lib/ledger-core/dist/reconcile.js
 var LEDGER_INDEX_NAMES = [
@@ -37259,10 +37361,10 @@ function countWriteRejects24h(logDir, now) {
   }
   let total = 0;
   for (const name of entries2) {
-    const path = join64(logDir, name);
+    const path = join65(logDir, name);
     try {
       if (now - statSync28(path).mtimeMs > DAY_MS) continue;
-      for (const line of readFileSync55(path, "utf8").split("\n")) {
+      for (const line of readFileSync56(path, "utf8").split("\n")) {
         if (line.includes("[graph-write] reject")) total += 1;
       }
     } catch {
@@ -37363,8 +37465,8 @@ function startLedgerCensus(openSession, opts = {}) {
 }
 
 // app/lib/dispatch-census.ts
-import { readFileSync as readFileSync56 } from "fs";
-import { join as join65 } from "path";
+import { readFileSync as readFileSync57 } from "fs";
+import { join as join66 } from "path";
 
 // ../lib/canonical-instant/src/index.ts
 var CANONICAL_INSTANT_PATTERN = "\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z";
@@ -37402,7 +37504,7 @@ function percentile(sortedAsc, p) {
 function auditConfigFile(accountDir) {
   let cfg;
   try {
-    cfg = JSON.parse(readFileSync56(join65(accountDir, "dispatch", "config.json"), "utf-8"));
+    cfg = JSON.parse(readFileSync57(join66(accountDir, "dispatch", "config.json"), "utf-8"));
   } catch {
     return null;
   }
@@ -37427,7 +37529,7 @@ function auditConfigFile(accountDir) {
 function terminalStatuses(accountDir) {
   try {
     const cfg = JSON.parse(
-      readFileSync56(join65(accountDir, "dispatch", "config.json"), "utf-8")
+      readFileSync57(join66(accountDir, "dispatch", "config.json"), "utf-8")
     );
     return {
       job: (cfg.statuses?.job ?? []).filter((s) => s.terminal).map((s) => s.name),
@@ -37857,8 +37959,8 @@ function startGraphHealthTimer() {
 }
 
 // app/lib/shared-folder-census.ts
-import { existsSync as existsSync54, statSync as statSync29, readdirSync as readdirSync32 } from "fs";
-import { join as join66 } from "path";
+import { existsSync as existsSync55, statSync as statSync29, readdirSync as readdirSync32 } from "fs";
+import { join as join67 } from "path";
 var import_dist17 = __toESM(require_dist(), 1);
 var TAG69 = "[shared-census]";
 var WIRED_SURFACES = 3;
@@ -37871,14 +37973,14 @@ function countFiles(dir) {
     return 0;
   }
   for (const e of entries2) {
-    if (e.isDirectory()) n += countFiles(join66(dir, e.name));
+    if (e.isDirectory()) n += countFiles(join67(dir, e.name));
     else if (e.isFile()) n++;
   }
   return n;
 }
 function runSharedFolderCensus(dataRoot = DATA_ROOT) {
   const root = (0, import_dist17.sharedRoot)(dataRoot);
-  const exists = existsSync54(root);
+  const exists = existsSync55(root);
   let isDir = false;
   if (exists) {
     try {
@@ -37920,9 +38022,9 @@ function startAccountsStateCensus() {
 }
 
 // app/lib/cred-refresh-census.ts
-import { readdirSync as readdirSync33, readFileSync as readFileSync57 } from "fs";
+import { readdirSync as readdirSync33, readFileSync as readFileSync58 } from "fs";
 import { homedir as homedir4 } from "os";
-import { join as join67 } from "path";
+import { join as join68 } from "path";
 var TAG71 = "[claude-auth]";
 function refreshTokenLength(raw) {
   let data;
@@ -37947,7 +38049,7 @@ function surveyBrandCredentials(home) {
     if (!entry3.startsWith(".")) continue;
     let raw;
     try {
-      raw = readFileSync57(join67(home, entry3, ".claude", ".credentials.json"), "utf-8");
+      raw = readFileSync58(join68(home, entry3, ".claude", ".credentials.json"), "utf-8");
     } catch {
       continue;
     }
@@ -38208,8 +38310,8 @@ async function migrateUploads(opts = {}) {
 
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir7, readFile as readFile13, rename as rename5, writeFile as writeFile4, unlink as unlink4 } from "fs/promises";
-import { existsSync as existsSync55 } from "fs";
-import { join as join68 } from "path";
+import { existsSync as existsSync56 } from "fs";
+import { join as join69 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -38238,7 +38340,7 @@ async function writeRaw(path, obj) {
     await rename5(tmp, path);
   } catch (err) {
     try {
-      if (existsSync55(tmp)) await unlink4(tmp);
+      if (existsSync56(tmp)) await unlink4(tmp);
     } catch {
     }
     throw err;
@@ -38254,7 +38356,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join68(projectsRoot, slug.name);
+    const slugDir = join69(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir7(slugDir, { withFileTypes: true });
@@ -38263,9 +38365,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry3 of entries2) {
       if (entry3.isFile() && SESSION_META_RE.test(entry3.name)) {
-        out.push(join68(slugDir, entry3.name));
+        out.push(join69(slugDir, entry3.name));
       } else if (entry3.isDirectory() && entry3.name === "subagents") {
-        const subDir = join68(slugDir, entry3.name);
+        const subDir = join69(slugDir, entry3.name);
         let subs;
         try {
           subs = await readdir7(subDir, { withFileTypes: true });
@@ -38273,7 +38375,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join68(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join69(subDir, s.name));
         }
       }
     }
@@ -38285,7 +38387,7 @@ function shortId(path) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join68(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join69(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -38361,8 +38463,8 @@ async function migrateAdminWebchatSidecars(opts = {}) {
 
 // app/lib/migrate-sidecar-account-ids.ts
 import { readdir as readdir8, readFile as readFile14, rename as rename6, writeFile as writeFile5, unlink as unlink5 } from "fs/promises";
-import { existsSync as existsSync56 } from "fs";
-import { join as join69 } from "path";
+import { existsSync as existsSync57 } from "fs";
+import { join as join70 } from "path";
 var SESSION_META_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
 function projectSlugForCwd(cwd) {
   return cwd.replace(/\//g, "-");
@@ -38388,7 +38490,7 @@ async function writeRaw2(path, obj) {
     await rename6(tmp, path);
   } catch (err) {
     try {
-      if (existsSync56(tmp)) await unlink5(tmp);
+      if (existsSync57(tmp)) await unlink5(tmp);
     } catch {
     }
     throw err;
@@ -38408,7 +38510,7 @@ async function collectSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join69(projectsRoot, slug.name);
+    const slugDir = join70(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir8(slugDir, { withFileTypes: true });
@@ -38417,9 +38519,9 @@ async function collectSidecars(projectsRoot) {
     }
     for (const entry3 of entries2) {
       if (entry3.isFile() && SESSION_META_RE2.test(entry3.name)) {
-        out.push({ path: join69(slugDir, entry3.name), slug: slug.name });
+        out.push({ path: join70(slugDir, entry3.name), slug: slug.name });
       } else if (entry3.isDirectory() && (entry3.name === "subagents" || entry3.name === "archive")) {
-        const subDir = join69(slugDir, entry3.name);
+        const subDir = join70(slugDir, entry3.name);
         let subs;
         try {
           subs = await readdir8(subDir, { withFileTypes: true });
@@ -38428,7 +38530,7 @@ async function collectSidecars(projectsRoot) {
         }
         for (const s of subs) {
           if (s.isFile() && SESSION_META_RE2.test(s.name)) {
-            out.push({ path: join69(subDir, s.name), slug: slug.name });
+            out.push({ path: join70(subDir, s.name), slug: slug.name });
           }
         }
       }
@@ -38437,7 +38539,7 @@ async function collectSidecars(projectsRoot) {
   return out;
 }
 async function migrateSidecarAccountIds(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join69(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join70(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const accounts = opts.accounts ?? listValidAccounts();
   const result = {
     scanned: 0,
@@ -40060,8 +40162,8 @@ function createWebchatChannelRoutes(deps) {
 }
 
 // app/lib/webchat/gateway/resolve-turn-answer.ts
-import { existsSync as existsSync57, openSync as openSync9, readSync as readSync8, closeSync as closeSync9, readdirSync as readdirSync34 } from "fs";
-import { join as join70 } from "path";
+import { existsSync as existsSync58, openSync as openSync9, readSync as readSync8, closeSync as closeSync9, readdirSync as readdirSync34 } from "fs";
+import { join as join71 } from "path";
 
 // app/lib/channel-delivery/outbound-guard.ts
 var INTERNAL_LEAK_PATTERNS = [
@@ -40122,7 +40224,7 @@ function resolveTurnAnswer(p) {
   return segmentText(guardOutbound(p.senderId, parts.join("\n\n"))).join("\n\n");
 }
 function findJsonl(projectsRoot, sessionId) {
-  if (!existsSync57(projectsRoot)) return null;
+  if (!existsSync58(projectsRoot)) return null;
   let slugs;
   try {
     slugs = readdirSync34(projectsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
@@ -40130,8 +40232,8 @@ function findJsonl(projectsRoot, sessionId) {
     return null;
   }
   for (const slug of slugs) {
-    const live = join70(projectsRoot, slug, `${sessionId}.jsonl`);
-    if (existsSync57(live)) return live;
+    const live = join71(projectsRoot, slug, `${sessionId}.jsonl`);
+    if (existsSync58(live)) return live;
   }
   return null;
 }
@@ -41678,7 +41780,12 @@ var InboundHub3 = class {
     return this.keys.get(key2)?.subscriber != null;
   }
   /** Whether a key's channel server is attached AND has signalled readiness.
-   *  Used only to log delivery=immediate vs queued accurately. */
+   *
+   *  Task 2737 — this DECIDES behaviour, it does not only describe it. Besides
+   *  logging delivery=immediate vs queued, it is the gateway's `isLive`, on
+   *  which the manual send route chooses between injecting into a running
+   *  process and appending to the session transcript. Change what this returns
+   *  and you change where an operator's words land. */
   isReady(key2) {
     const s = this.keys.get(key2);
     return s?.subscriber != null && s.ready;
@@ -42152,6 +42259,21 @@ var TelegramGateway = class {
   liveReplyTarget(key2) {
     return this.replies.get(key2) ?? null;
   }
+  /** Task 2737 — is a channel server attached AND ready for this conversation?
+   *
+   *  The SAME predicate `deliver` branches on at `inbound-hub.ts:132`, exposed
+   *  rather than re-derived. The manual send route routes on it: live and active
+   *  injects, everything else appends to the transcript. A second definition
+   *  would let that route believe an inject would land while the hub quietly
+   *  queued it for a spawn to drain, and the operator's own send must never
+   *  cause a spawn.
+   *
+   *  Distinct from `liveReplyTarget`, which answers "can I send TO this door?"
+   *  off the reply-closure map. This answers "can this door receive a turn right
+   *  now?", and a closure can outlive the readiness that makes an inject land. */
+  isLive(key2) {
+    return this.hub.isReady(key2);
+  }
   /** Task 2559 — every door this gateway currently holds a live delivery closure
    *  for, as the `<botId>:<senderId>` channel key the follower registry keys on.
    *  The twin of `WaGateway.boundTargets()`: the census reconciles against
@@ -42814,7 +42936,7 @@ function startTelegramNativeFileFollower(input) {
 }
 
 // server/telegram-background-active.ts
-import { join as join71, resolve as resolve52 } from "path";
+import { join as join72, resolve as resolve52 } from "path";
 import { readdirSync as readdirSync35, statSync as statSync30 } from "fs";
 var SUBAGENT_STALE_WINDOW_MS = 6e4;
 var AGENT_JSONL_RE2 = /^agent-([0-9a-f]+)\.jsonl$/;
@@ -42833,7 +42955,7 @@ function makeBackgroundActive(sessionId, deps = {}) {
     if (subagentsDir === null) {
       const projectDir = findProjectDir(sessionId);
       if (projectDir === null) return false;
-      subagentsDir = resolve52(join71(projectDir, sessionId, "subagents"));
+      subagentsDir = resolve52(join72(projectDir, sessionId, "subagents"));
     }
     let names;
     try {
@@ -42847,7 +42969,7 @@ function makeBackgroundActive(sessionId, deps = {}) {
       let size;
       let mtimeMs;
       try {
-        const st = statFile(join71(subagentsDir, name));
+        const st = statFile(join72(subagentsDir, name));
         size = st.size;
         mtimeMs = st.mtimeMs;
       } catch {
@@ -42926,7 +43048,7 @@ function adminFanTargets(p) {
 }
 
 // app/lib/channel-pty-bridge/public-session-end-review.ts
-import { randomUUID as randomUUID14 } from "crypto";
+import { randomUUID as randomUUID15 } from "crypto";
 var TAG78 = "[public-session-review]";
 var CONSUMED_CAP = 500;
 var consumed = /* @__PURE__ */ new Set();
@@ -43014,7 +43136,7 @@ function composeInitialMessage(input) {
   ].join("\n");
 }
 async function dispatchReviewer(input, initialMessage) {
-  const sessionId = randomUUID14();
+  const sessionId = randomUUID15();
   console.log(`${TAG78} route target=rc-spawn sessionId=${sessionId.slice(0, 8)} sourceSession=${input.sessionId.slice(0, 8)}`);
   const spawned = await managerRcSpawn({
     sessionId,
@@ -43214,7 +43336,7 @@ function runPublicAddressCollisionAudit(deps) {
 
 // server/telegram-audit.ts
 import { statSync as statSync31 } from "fs";
-import { join as join72 } from "path";
+import { join as join73 } from "path";
 function buildTelegramAuditLines(input) {
   const lines = [];
   const entries2 = input.accounts.flatMap(
@@ -43322,7 +43444,7 @@ function countTelegramSessionsForAccount(accountId) {
 function* walkTelegramSidecars() {
   const cfg = claudeConfigDir();
   if (!cfg) return;
-  const projectsRoot = join72(cfg, "projects");
+  const projectsRoot = join73(cfg, "projects");
   for (const { path } of enumerateSessionSidecars(projectsRoot)) {
     const meta = readSidecarMeta(path);
     if (meta.channel !== "telegram" || !meta.accountId) continue;
@@ -43534,8 +43656,8 @@ function businessConnectionCensusLine(c) {
 }
 
 // app/lib/telegram/business-window-census.ts
-import { readdirSync as readdirSync36, existsSync as existsSync58 } from "fs";
-import { join as join73 } from "path";
+import { readdirSync as readdirSync36, existsSync as existsSync59 } from "fs";
+import { join as join74 } from "path";
 var BUSINESS_WINDOW_CENSUS_TAG = "[telegram-audit]";
 var EXPIRING_SOON_S = 3600;
 function collectBusinessWindowCensus(input) {
@@ -43563,8 +43685,8 @@ function businessWindowCensusLine(c) {
 function readBusinessChatClocks(accountIds) {
   const out = [];
   for (const accountId of accountIds) {
-    const dir = join73(STORE_ROOT2(), accountId);
-    if (!existsSync58(dir)) continue;
+    const dir = join74(STORE_ROOT2(), accountId);
+    if (!existsSync59(dir)) continue;
     let names;
     try {
       names = readdirSync36(dir);
@@ -43625,15 +43747,15 @@ async function getTelegramBusinessConnection(botToken, connectionId, opts = {})
 }
 
 // server/telegram-migrate.ts
-import { readFileSync as readFileSync58, writeFileSync as writeFileSync23, existsSync as existsSync59, renameSync as renameSync11, mkdirSync as mkdirSync14 } from "fs";
-import { dirname as dirname19, join as join74 } from "path";
+import { readFileSync as readFileSync59, writeFileSync as writeFileSync23, existsSync as existsSync60, renameSync as renameSync11, mkdirSync as mkdirSync14 } from "fs";
+import { dirname as dirname19, join as join75 } from "path";
 function migrateTelegramTwoSlot(input) {
   const out = [];
   for (const account of input.accounts) {
-    const configPath3 = join74(account.accountDir, "account.json");
+    const configPath3 = join75(account.accountDir, "account.json");
     let config;
     try {
-      config = JSON.parse(readFileSync58(configPath3, "utf-8"));
+      config = JSON.parse(readFileSync59(configPath3, "utf-8"));
     } catch {
       console.error(`[telegram-audit] op=migrate-unreadable accountId=${account.accountId}`);
       continue;
@@ -43686,22 +43808,22 @@ function migrateTelegramTwoSlot(input) {
   return out;
 }
 function moveSecret(from, to) {
-  if (!existsSync59(from)) return;
+  if (!existsSync60(from)) return;
   mkdirSync14(dirname19(to), { recursive: true, mode: 448 });
   renameSync11(from, to);
 }
 
 // server/telegram-unadopt.ts
-import { readFileSync as readFileSync59, writeFileSync as writeFileSync24, renameSync as renameSync12 } from "fs";
-import { join as join75 } from "path";
+import { readFileSync as readFileSync60, writeFileSync as writeFileSync24, renameSync as renameSync12 } from "fs";
+import { join as join76 } from "path";
 var FILE3 = "channel-session-override.json";
 function unadoptTelegramPointers(input) {
   return input.accounts.map(({ accountId, accountDir }) => {
     const out = { accountId, dropped: [], kept: 0, unknown: 0 };
-    const path = join75(accountDir, FILE3);
+    const path = join76(accountDir, FILE3);
     const bySender = {};
     try {
-      const raw = JSON.parse(readFileSync59(path, "utf8"));
+      const raw = JSON.parse(readFileSync60(path, "utf8"));
       if (!raw.bySender || typeof raw.bySender !== "object") return out;
       for (const [k, v] of Object.entries(raw.bySender)) if (typeof v === "string") bySender[k] = v;
     } catch {
@@ -43772,14 +43894,14 @@ function backfillMisfiledRecords(params) {
 }
 
 // server/lib/booking-site-accounts.ts
-import { existsSync as existsSync60, readFileSync as readFileSync60 } from "fs";
+import { existsSync as existsSync61, readFileSync as readFileSync61 } from "fs";
 import { resolve as resolve53 } from "path";
 function listBookingSiteAccounts(accounts) {
   return accounts.filter((a) => {
     const availPath = resolve53(a.accountDir, "calendar-availability.json");
-    if (!existsSync60(availPath)) return false;
+    if (!existsSync61(availPath)) return false;
     try {
-      const cfg = JSON.parse(readFileSync60(availPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync61(availPath, "utf-8"));
       return typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
     } catch {
       return false;
@@ -43817,7 +43939,7 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash7, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync61, readFileSync as readFileSync61, statSync as statSync32 } from "fs";
+import { existsSync as existsSync62, readFileSync as readFileSync62, statSync as statSync32 } from "fs";
 import { resolve as resolve54 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
@@ -43866,7 +43988,7 @@ function resolveEntitlement(brand, account) {
     return logResolved(implicitTrust(account), null);
   }
   const entitlementPath = resolve54(brand.configDir, "entitlement.json");
-  if (!existsSync61(entitlementPath)) {
+  if (!existsSync62(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
   const stat11 = statSync32(entitlementPath);
@@ -43881,7 +44003,7 @@ function resolveEntitlement(brand, account) {
 function verifyAndResolve(brand, entitlementPath, account) {
   let pubkeyPem;
   try {
-    pubkeyPem = readFileSync61(pubkeyPath(brand), "utf-8");
+    pubkeyPem = readFileSync62(pubkeyPath(brand), "utf-8");
   } catch (err) {
     return logResolved(anonymousFallback("pubkey-missing"), {
       reason: "pubkey-missing"
@@ -43895,7 +44017,7 @@ function verifyAndResolve(brand, entitlementPath, account) {
   }
   let envelope;
   try {
-    envelope = JSON.parse(readFileSync61(entitlementPath, "utf-8"));
+    envelope = JSON.parse(readFileSync62(entitlementPath, "utf-8"));
   } catch {
     return logResolved(anonymousFallback("malformed"), { reason: "malformed" });
   }
@@ -44057,14 +44179,14 @@ function clientFrom(c) {
 }
 installMediaDownloadGuard();
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join76(PLATFORM_ROOT6, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join77(PLATFORM_ROOT6, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
-if (BRAND_JSON_PATH && !existsSync62(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && !existsSync63(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
-if (BRAND_JSON_PATH && existsSync62(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync63(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync62(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync63(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -44096,11 +44218,11 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join76(homedir5(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join77(homedir5(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
-    if (!existsSync62(ALIAS_DOMAINS_PATH)) return null;
-    const parsed = JSON.parse(readFileSync62(ALIAS_DOMAINS_PATH, "utf-8"));
+    if (!existsSync63(ALIAS_DOMAINS_PATH)) return null;
+    const parsed = JSON.parse(readFileSync63(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -44242,7 +44364,7 @@ var waGateway = new WaGateway({
   // resolver and `fanTargetsFor` is a constructor dep, not a callable method.
   fanTargetsFor: whatsappFanTargets,
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve55(process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve55(process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -44257,7 +44379,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve55(process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, ".."))
+      platformRoot: resolve55(process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -44432,7 +44554,7 @@ function runDuplicateSenderAudit() {
   try {
     const configDir = process.env.CLAUDE_CONFIG_DIR;
     if (!configDir) return;
-    const projectsRoot = join76(configDir, "projects");
+    const projectsRoot = join77(configDir, "projects");
     const records5 = [];
     for (const { path: jsonlPath, isSubagent, archived } of enumerateJsonls(projectsRoot)) {
       if (isSubagent || archived) continue;
@@ -44484,7 +44606,7 @@ var webchatGateway = new WebchatGateway({
   // rather than hanging the POST.
   publicProjectsRoot: () => {
     const cfg = claudeConfigDir();
-    return cfg ? join76(cfg, "projects") : "";
+    return cfg ? join77(cfg, "projects") : "";
   },
   gatewayUrl: webchatGatewayUrl(),
   serverPath: webchatServerPath(),
@@ -45151,14 +45273,14 @@ app80.get("/agent-assets/:slug/:filename", (c) => {
     console.error(`[agent-assets] path-traversal-rejected slug=${slug} file=${filename}`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync62(filePath)) {
+  if (!existsSync63(filePath)) {
     console.error(`[agent-assets] serve slug=${slug} file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync62(filePath);
+  const body = readFileSync63(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
@@ -45181,14 +45303,14 @@ app80.get("/generated/:filename", (c) => {
     console.error(`[generated] serve file=${filename} status=403`);
     return c.text("Forbidden", 403);
   }
-  if (!existsSync62(filePath)) {
+  if (!existsSync63(filePath)) {
     console.error(`[generated] serve file=${filename} status=404`);
     return c.text("Not found", 404);
   }
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync62(filePath);
+  const body = readFileSync63(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
@@ -45201,9 +45323,9 @@ app80.route("/v", visitor_consent_default);
 var htmlCache = /* @__PURE__ */ new Map();
 var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
-if (BRAND_JSON_PATH && existsSync62(BRAND_JSON_PATH)) {
+if (BRAND_JSON_PATH && existsSync63(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync62(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync63(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -45230,11 +45352,11 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 var brandThemeColor = BRAND.defaultColors?.primary ?? "#000000";
 var brandBackgroundColor = BRAND.defaultColors?.background ?? "#ffffff";
 var brandAppIconsExist = [brandAppIcon192Path, brandAppIcon512Path, brandMaskableIconPath].every(
-  (p) => existsSync62(resolve55(process.cwd(), "public", p.replace(/^\//, "")))
+  (p) => existsSync63(resolve55(process.cwd(), "public", p.replace(/^\//, "")))
 );
 var SW_SOURCE = (() => {
   try {
-    return readFileSync62(resolve55(process.cwd(), "public", "sw.js"), "utf-8");
+    return readFileSync63(resolve55(process.cwd(), "public", "sw.js"), "utf-8");
   } catch {
     return null;
   }
@@ -45242,9 +45364,9 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT6) return "unknown";
-    const versionFile = join76(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
-    if (!existsSync62(versionFile)) return "unknown";
-    const content = readFileSync62(versionFile, "utf-8").trim();
+    const versionFile = join77(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
+    if (!existsSync63(versionFile)) return "unknown";
+    const content = readFileSync63(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -45255,7 +45377,7 @@ var versionScript = `<script>window.__MAXY_VERSION__=${JSON.stringify(INSTALLED_
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync62(resolve55(process.cwd(), "public", file), "utf-8");
+    html = readFileSync63(resolve55(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -45272,14 +45394,14 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir = join76(homedir5(), BRAND.configDir);
+  const configDir = join77(homedir5(), BRAND.configDir);
   try {
     const verdict = resolvePublicAddressFromDisk(agentSlug);
     const accountId = verdict.kind === "served" ? verdict.owner.accountId : getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join76(configDir, "branding-cache", accountId, `${agentSlug}.json`);
-    if (!existsSync62(cachePath)) return null;
-    return JSON.parse(readFileSync62(cachePath, "utf-8"));
+    const cachePath = join77(configDir, "branding-cache", accountId, `${agentSlug}.json`);
+    if (!existsSync63(cachePath)) return null;
+    return JSON.parse(readFileSync63(cachePath, "utf-8"));
   } catch {
     return null;
   }
@@ -45374,7 +45496,7 @@ app80.use("/vnc-popout.html", logViewerFetch);
 app80.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync62(resolve55(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync63(resolve55(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -45528,10 +45650,10 @@ var hostname = process.env.HOSTNAME ?? "127.0.0.1";
 var httpServer = serve({ fetch: app80.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
   const reconcileScript = resolve55(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const runReconcile = (ctx) => {
-    if (!existsSync62(reconcileScript)) return;
+    if (!existsSync63(reconcileScript)) return;
     try {
       const child = spawn3(process.execPath, [reconcileScript], {
         env: { ...process.env, PLATFORM_ROOT: reconcilePlatformRoot },
@@ -45551,7 +45673,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     detached: true,
     run: runReconcile
   });
-  const reconcileStatePath = join76(MAXY_DIR, "booking-reconcile-state.json");
+  const reconcileStatePath = join77(MAXY_DIR, "booking-reconcile-state.json");
   registerLoop({
     name: "calendar-reconcile-liveness",
     intervalMs: 6e5,
@@ -45569,7 +45691,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
-  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, "..");
+  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
   const dreamSweepScript = resolve55(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
   registerLoop({
     name: "dream-cycle-sweep",
@@ -45577,7 +45699,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     firstRunDelayMs: 3e4,
     detached: true,
     run: (ctx) => {
-      if (!existsSync62(dreamSweepScript)) return;
+      if (!existsSync63(dreamSweepScript)) return;
       try {
         const child = spawn3(process.execPath, [dreamSweepScript], {
           env: { ...process.env, PLATFORM_ROOT: dreamPlatformRoot },
@@ -45593,11 +45715,11 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, "..");
+  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
   const outlookScript = resolve55(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
-    if (!existsSync62(outlookScript)) return;
+    if (!existsSync63(outlookScript)) return;
     try {
       const child = spawn3(process.execPath, [outlookScript], {
         env: { ...process.env, PLATFORM_ROOT: outlookPlatformRoot },
@@ -45619,19 +45741,19 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, "..");
+  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
   const strandedAccountsDir = resolve55(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
   const STRANDED_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
   const runStrandedAudit = () => {
     try {
-      if (!existsSync62(strandedAccountsDir)) return;
+      if (!existsSync63(strandedAccountsDir)) return;
       const now = Date.now();
       for (const name of readdirSync37(strandedAccountsDir)) {
         if (!STRANDED_UUID_RE.test(name)) continue;
         const pendingPath2 = resolve55(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
-        if (!existsSync62(pendingPath2)) continue;
+        if (!existsSync63(pendingPath2)) continue;
         const ageMs2 = now - statSync33(pendingPath2).mtimeMs;
         if (ageMs2 > STRANDED_AGE_MS) {
           console.error(`[outlook-mcp] devicecode-stranded account=${name} ageSec=${Math.floor(ageMs2 / 1e3)}`);
@@ -45649,7 +45771,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, "..");
+  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
   const googleAccountsDir = resolve55(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
@@ -45668,7 +45790,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   const googleAuditScript = resolve55(googleRoot, "plugins/google/mcp/dist/scripts/account-audit.js");
   const GOOGLE_ACCOUNT_AUDIT_INTERVAL_MS = 36e5;
   const runGoogleAccountAudit = (ctx) => {
-    if (!existsSync62(googleAuditScript)) return;
+    if (!existsSync63(googleAuditScript)) return;
     try {
       const child = spawn3(process.execPath, [googleAuditScript], {
         env: { ...process.env, PLATFORM_ROOT: googleRoot },
@@ -45705,7 +45827,7 @@ registerLoop({
   }
 });
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
   const STORAGE_AUDIT_INTERVAL_MS = 3e5;
   const runStorageAuditSafe = () => runStorageAudit(auditPlatformRoot).catch((err) => {
     console.error(`[storage-audit] error="${err.message}"`);
@@ -45777,10 +45899,10 @@ registerLoop({
     }
     const lines = buildTelegramAuditLines({
       accounts,
-      secretFileExists: (botId) => existsSync62(secretPath(botId)),
+      secretFileExists: (botId) => existsSync63(secretPath(botId)),
       agentActive: isActiveAgentSlug,
       // Task 2619 — the card set a specialist binding is reconciled against.
-      specialistCards: (accountDir) => listSpecialistCardNames(join76(accountDir, "specialists", "agents")),
+      specialistCards: (accountDir) => listSpecialistCardNames(join77(accountDir, "specialists", "agents")),
       // Task 2619 — the doors that can be sent to right now. The same accessor
       // the follower census reads (:1185), so "should have a reader" and "can be
       // sent to" stay one fact.
@@ -46181,7 +46303,7 @@ registerLoop({
   });
 }
 {
-  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, "..");
+  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
   const publishScript = resolve55(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const bookingAccounts = () => {
@@ -46193,7 +46315,7 @@ registerLoop({
     }
   };
   const spawnPublish = (account, ctx) => {
-    if (!existsSync62(publishScript)) return;
+    if (!existsSync63(publishScript)) return;
     try {
       const child = spawn3(process.execPath, [publishScript], {
         env: {
@@ -46215,8 +46337,8 @@ registerLoop({
     const availPath = resolve55(account.accountDir, "calendar-availability.json");
     let hasBookingSite = false;
     try {
-      if (existsSync62(availPath)) {
-        const cfg = JSON.parse(readFileSync62(availPath, "utf-8"));
+      if (existsSync63(availPath)) {
+        const cfg = JSON.parse(readFileSync63(availPath, "utf-8"));
         hasBookingSite = typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
       }
     } catch {
@@ -46224,9 +46346,9 @@ registerLoop({
     if (!hasBookingSite) return;
     const statePath = resolve55(account.accountDir, "state", "booking-availability", "last-publish.json");
     let lastSuccessAt = null;
-    if (existsSync62(statePath)) {
+    if (existsSync63(statePath)) {
       try {
-        const rec = JSON.parse(readFileSync62(statePath, "utf-8"));
+        const rec = JSON.parse(readFileSync63(statePath, "utf-8"));
         lastSuccessAt = rec.lastSuccessAt ?? null;
       } catch {
         console.error(`[calendar-availability] op=audit accountId=${account.accountId} snapshotAgeMs=na reason=bad-state-file`);
@@ -46261,12 +46383,12 @@ startDispatchCensus(() => getSession());
 startDispatchFieldCensus(() => getSession());
 startDispatchTgCensus(() => getSession());
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
   const auditScript = resolve55(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
   const runConnectorAudit = (ctx) => {
-    if (!existsSync62(auditScript)) return;
+    if (!existsSync63(auditScript)) return;
     try {
       const child = spawn3(process.execPath, [auditScript], {
         env: { ...process.env, PLATFORM_ROOT: auditPlatformRoot, LOG_DIR: auditLogDir },
@@ -46388,11 +46510,11 @@ try {
 var ADMINUSER_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 async function runAdminUserReconcileTick() {
   try {
-    if (!existsSync62(USERS_FILE)) {
+    if (!existsSync63(USERS_FILE)) {
       console.error("[adminuser-self-heal] skip reason=no-users-file");
       return;
     }
-    const usersRaw = readFileSync62(USERS_FILE, "utf-8").trim();
+    const usersRaw = readFileSync63(USERS_FILE, "utf-8").trim();
     if (!usersRaw) {
       console.error("[adminuser-self-heal] skip reason=empty-users-file");
       return;
@@ -46474,8 +46596,8 @@ var runIngestAuditTick = () => {
       },
       agentExists: (accountId, slug) => {
         if (!house) return false;
-        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join76(ACCOUNTS_DIR, accountId);
-        return existsSync62(join76(dir, "agents", slug, "config.json"));
+        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join77(ACCOUNTS_DIR, accountId);
+        return existsSync63(join77(dir, "agents", slug, "config.json"));
       }
     });
   } catch (err) {
@@ -46523,8 +46645,8 @@ registerLoop({
       runPublicAddressCollisionAudit({
         houseAccountId: () => resolveAccount()?.accountId ?? null,
         activeSlugs: () => listValidAccounts().map((a) => {
-          const agentsRoot = join76(a.accountDir, "agents");
-          if (!existsSync62(agentsRoot)) return { accountId: a.accountId, slugs: [] };
+          const agentsRoot = join77(a.accountDir, "agents");
+          if (!existsSync63(agentsRoot)) return { accountId: a.accountId, slugs: [] };
           const slugs = readdirSync37(agentsRoot, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).filter((slug) => isActiveAgentSlug(a.accountDir, slug));
           return { accountId: a.accountId, slugs };
         })
@@ -46538,8 +46660,8 @@ registerLoop({
 });
 var USERS_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 function countUsersRows() {
-  if (!existsSync62(USERS_FILE)) return 0;
-  const raw = readFileSync62(USERS_FILE, "utf-8").trim();
+  if (!existsSync63(USERS_FILE)) return 0;
+  const raw = readFileSync63(USERS_FILE, "utf-8").trim();
   if (!raw) return 0;
   const users = JSON.parse(raw);
   return users.filter((u) => typeof u.userId === "string").length;
@@ -46642,7 +46764,7 @@ function sessionChannelResolver() {
       byId = /* @__PURE__ */ new Map();
       const cfg = claudeConfigDir();
       if (cfg) {
-        for (const { path } of enumerateSessionSidecars(join76(cfg, "projects"))) {
+        for (const { path } of enumerateSessionSidecars(join77(cfg, "projects"))) {
           const channel = readSidecarMeta(path).channel;
           if (channel) byId.set(basename19(path).replace(/\.meta\.json$/, ""), channel);
         }
@@ -46717,7 +46839,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve55(process.env.MAXY_PLATFORM_ROOT ?? join76(__dirname, "..")),
+  platformRoot: resolve55(process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..")),
   accountConfig: bootAccountConfig,
   // Task 2074 — enrich with the sub-account name and fan out to every open
   // admin SSE stream. Fire-and-forget: the manager's persist path must not