@rubytech/create-sitedesk-code 0.1.612 → 0.1.614

package/payload/server/server.js

@@ -3220,10 +3220,10 @@ var require_dist10 = __commonJS({
 });
 
 // server/index.ts
-import { readFileSync as readFileSync63, existsSync as existsSync63, watchFile, readdirSync as readdirSync37, statSync as statSync33 } from "fs";
+import { readFileSync as readFileSync64, existsSync as existsSync63, watchFile, readdirSync as readdirSync38, statSync as statSync34 } from "fs";
 import { spawn as spawn3 } from "child_process";
 import { createHash as createHash8 } from "crypto";
-import { resolve as resolve55, join as join77, basename as basename19 } from "path";
+import { resolve as resolve55, join as join78, basename as basename19 } from "path";
 import { homedir as homedir5 } from "os";
 
 // server/lib/route-cache-watchers.ts
@@ -6248,6 +6248,82 @@ function parseTelegramChannelKey(key2) {
   return { botId, senderId: rest, business: false };
 }
 
+// app/lib/telegram/access-control.ts
+function checkTelegramAccess(params) {
+  const { senderId, entry: entry3, chatId, chatType } = params;
+  const isGroup = chatType === "group" || chatType === "supergroup";
+  const isChannel = chatType === "channel";
+  if (isChannel && entry3.role !== "public") {
+    return {
+      allowed: false,
+      reason: entry3.role === "admin" ? "admin-entry-no-channels" : entry3.role === "specialist" ? "specialist-entry-no-channels" : "unbound-entry-no-channels",
+      agentType: entry3.role === "admin" ? "admin" : entry3.role === "specialist" ? "specialist" : "public"
+    };
+  }
+  if (isGroup && entry3.role !== "public") {
+    return {
+      allowed: false,
+      reason: entry3.role === "admin" ? "admin-entry-no-groups" : entry3.role === "specialist" ? "specialist-entry-no-groups" : "unbound-entry-no-groups",
+      agentType: entry3.role === "admin" ? "admin" : entry3.role === "specialist" ? "specialist" : "public"
+    };
+  }
+  if (entry3.role === "admin") {
+    const adminUsers = entry3.adminUsers ?? [];
+    if (adminUsers.includes(senderId)) {
+      return { allowed: true, reason: "admin-binding", agentType: "admin" };
+    }
+    return { allowed: false, reason: "not-admin-user", agentType: "admin" };
+  }
+  if (isGroup && entry3.role === "public") {
+    const groupPolicy = entry3.groupPolicy ?? "disabled";
+    if (groupPolicy === "allowlist") {
+      const allowGroups = entry3.allowGroups ?? [];
+      if (allowGroups.includes(chatId)) {
+        return { allowed: true, reason: "group-allowlist-match", agentType: "public" };
+      }
+      return { allowed: false, reason: "not-in-allowGroups", agentType: "public" };
+    }
+    return { allowed: false, reason: "group-policy-disabled", agentType: "public" };
+  }
+  if (isChannel && entry3.role === "public") {
+    const channelPolicy = entry3.channelPolicy ?? "disabled";
+    if (channelPolicy === "allowlist") {
+      const allowChannels = entry3.allowChannels ?? [];
+      if (allowChannels.includes(chatId)) {
+        return { allowed: true, reason: "channel-allowlist-match", agentType: "public" };
+      }
+      return { allowed: false, reason: "not-in-allowChannels", agentType: "public" };
+    }
+    return { allowed: false, reason: "channel-policy-disabled", agentType: "public" };
+  }
+  if (entry3.role === "unbound") {
+    return { allowed: false, reason: "bot-unbound", agentType: "public" };
+  }
+  if (entry3.role === "specialist") {
+    const allowFrom = entry3.allowFrom ?? [];
+    if (allowFrom.includes(senderId)) {
+      return { allowed: true, reason: "specialist-allowlist-match", agentType: "specialist" };
+    }
+    return { allowed: false, reason: "not-in-allowlist", agentType: "specialist" };
+  }
+  const policy = entry3.dmPolicy ?? "disabled";
+  switch (policy) {
+    case "open":
+      return { allowed: true, reason: "dm-policy-open", agentType: "public" };
+    case "allowlist": {
+      const allowFrom = entry3.allowFrom ?? [];
+      if (allowFrom.includes(senderId)) {
+        return { allowed: true, reason: "allowlist-match", agentType: "public" };
+      }
+      return { allowed: false, reason: "not-in-allowlist", agentType: "public" };
+    }
+    case "disabled":
+      return { allowed: false, reason: "dm-policy-disabled", agentType: "public" };
+    default:
+      return { allowed: false, reason: "unknown-dm-policy", agentType: "public" };
+  }
+}
+
 // app/lib/telegram/chat-send-policy.ts
 var BROADCAST_PREFIX = "-100";
 function checkTelegramChatSend(params) {
@@ -6263,6 +6339,21 @@ function chatSendAllowlists(entry3) {
   if (!entry3 || entry3.role !== "public") return { allowChannels: [], allowGroups: [] };
   return { allowChannels: entry3.allowChannels ?? [], allowGroups: entry3.allowGroups ?? [] };
 }
+function checkTelegramOutboundTarget(params) {
+  const { chatId, entry: entry3 } = params;
+  if (String(chatId).startsWith(BROADCAST_PREFIX)) {
+    const lists = chatSendAllowlists(entry3);
+    const verdict2 = checkTelegramChatSend({
+      chatId,
+      allowChannels: lists.allowChannels,
+      allowGroups: lists.allowGroups
+    });
+    return { allowed: verdict2.allowed, reason: verdict2.reason, kind: "broadcast" };
+  }
+  const kind = chatId < 0 ? "group" : "private";
+  const verdict = checkTelegramAccess({ senderId: chatId, entry: entry3, chatId, chatType: kind });
+  return { allowed: verdict.allowed, reason: verdict.reason, kind };
+}
 
 // app/lib/channel-pty-bridge/admin-session-id.ts
 import { createHash } from "crypto";
@@ -7105,17 +7196,17 @@ async function computeSessionList(scopeAccountId) {
     if (adminUserId && role === ADMIN_ROLE && sidecarChannel === WEBCHAT_CHANNEL) {
       adminUserIdBySession.set(sessionId, adminUserId);
     }
-    const tail = await lastAssistantModelFromTail(path, size);
-    if (tail.failure) {
+    const tail2 = await lastAssistantModelFromTail(path, size);
+    if (tail2.failure) {
       tailReadFails += 1;
       console.error(
-        `[admin-sessions-list] op=tail-read-failed sessionId=${sessionId.slice(0, 8)} reason=${tail.failure}`
+        `[admin-sessions-list] op=tail-read-failed sessionId=${sessionId.slice(0, 8)} reason=${tail2.failure}`
       );
     } else {
-      if (tail.bytesRead > 0) tailReads += 1;
-      if (tail.model === null) tailModelMiss += 1;
+      if (tail2.bytesRead > 0) tailReads += 1;
+      if (tail2.model === null) tailModelMiss += 1;
     }
-    tailBytes += tail.bytesRead;
+    tailBytes += tail2.bytesRead;
     rows.push({
       sessionId,
       title: resolved.title,
@@ -7134,7 +7225,7 @@ async function computeSessionList(scopeAccountId) {
       // diverge from the sidecar (e.g. an ai-titled channel row).
       channel: sidecarChannel,
       personName: null,
-      model: tail.model,
+      model: tail2.model,
       accountId: rowAccountId,
       senderId,
       whatsappName: null
@@ -7354,33 +7445,53 @@ function createScheduleInjectRoutes(deps) {
       console.error(`${TAG6} op=inject-spawn eventId=${eventId} sessionId=${sessionId2} result=ok status=-`);
       return c.json({ ok: true, sessionKey: sessionId2, ...transcriptBoundary(sessionId2) }, 200);
     }
-    const resolution = deps.telegramAccountForDestination(destination);
-    if (resolution.kind === "none") {
-      console.error(`${TAG6} op=schedule-telegram-reject eventId=${eventId} destination=${destination} reason=unresolved-effective-account`);
-      return c.json({ ok: false, error: "unresolved-effective-account" }, 403);
-    }
+    const namedBotId = typeof body.botId === "string" && body.botId.length > 0 ? body.botId : null;
     let claimant;
-    if (resolution.kind === "one") {
-      claimant = resolution;
-    } else {
-      const mine = resolution.claimants.filter((c2) => c2.accountId === eventAccountId);
-      if (mine.length === 0) {
+    let carrierSource;
+    let claimantCount = 0;
+    if (namedBotId !== null && eventAccountId !== null) {
+      carrierSource = "named";
+      const carrier = deps.carrierFor(eventAccountId, namedBotId, destination);
+      if ("error" in carrier) {
         console.error(
-          `${TAG6} op=event-account-scope-mismatch eventId=${eventId} eventAccount=${eventAccountId ?? "-"} effectiveAccount=none claimants=${resolution.claimants.length} destination=${destination} dispatched=no`
+          `${TAG6} op=carrier-unavailable eventId=${eventId} botId=${namedBotId} reason=${carrier.error}`
         );
-        return c.json({ ok: false, error: "event-account-scope-mismatch" }, 403);
+        return c.json({ ok: false, error: "carrier-unavailable" }, 403);
       }
-      if (mine.length > 1) {
+      claimant = carrier;
+    } else {
+      carrierSource = "resolved";
+      const resolution = deps.telegramAccountForDestination(destination);
+      if (resolution.kind === "none") {
+        console.error(`${TAG6} op=schedule-telegram-reject eventId=${eventId} destination=${destination} reason=unresolved-effective-account`);
+        return c.json({ ok: false, error: "unresolved-effective-account" }, 403);
+      }
+      claimantCount = resolution.kind === "ambiguous" ? resolution.claimants.length : 1;
+      if (resolution.kind === "one") {
+        claimant = resolution;
+      } else {
+        const mine = resolution.claimants.filter((c2) => c2.accountId === eventAccountId);
+        if (mine.length === 0) {
+          console.error(
+            `${TAG6} op=event-account-scope-mismatch eventId=${eventId} eventAccount=${eventAccountId ?? "-"} effectiveAccount=none claimants=${resolution.claimants.length} destination=${destination} dispatched=no`
+          );
+          return c.json({ ok: false, error: "event-account-scope-mismatch" }, 403);
+        }
+        if (mine.length > 1) {
+          console.error(
+            `${TAG6} op=telegram-destination-ambiguous eventId=${eventId} destination=${destination} accounts=${mine.length} scope=within-account dispatched=no`
+          );
+          return c.json({ ok: false, error: "telegram-destination-ambiguous" }, 403);
+        }
+        claimant = mine[0];
         console.error(
-          `${TAG6} op=telegram-destination-ambiguous eventId=${eventId} destination=${destination} accounts=${mine.length} scope=within-account dispatched=no`
+          `${TAG6} op=telegram-destination-narrowed eventId=${eventId} destination=${destination} claimants=${resolution.claimants.length} account=${claimant.accountId} botId=${claimant.botId}`
         );
-        return c.json({ ok: false, error: "telegram-destination-ambiguous" }, 403);
       }
-      claimant = mine[0];
-      console.error(
-        `${TAG6} op=telegram-destination-narrowed eventId=${eventId} destination=${destination} claimants=${resolution.claimants.length} account=${claimant.accountId} botId=${claimant.botId}`
-      );
     }
+    console.error(
+      `${TAG6} op=carrier eventId=${eventId} botId=${claimant.botId} source=${carrierSource} claimants=${claimantCount}`
+    );
     const { accountId: effectiveAccount, botId, botToken } = claimant;
     console.error(`${TAG6} op=effective-account eventId=${eventId} effectiveAccount=${effectiveAccount} botId=${botId}`);
     if (eventAccountId === null || eventAccountId !== effectiveAccount) {
@@ -7732,13 +7843,24 @@ function createOperatorInjectRoutes(deps) {
     const { accountId, accountDir, entry: entry3 } = resolved;
     const role = entry3.role;
     const agent = agentOf(entry3);
-    if (role !== "public") {
-      report({ botId, chatId, sessionId: "none", role, agent, accepted: false, reason: "not-public-bot" });
+    if (role === "admin") {
+      report({ botId, chatId, sessionId: "none", role, agent, accepted: false, reason: "admin-bot" });
       return c.json(
         {
           ok: false,
-          error: "not-public-bot",
-          detail: `Bot ${botId} is a ${role} bot, not a public one. Only a public agent's conversation with a visitor can be instructed this way.`
+          error: "admin-bot",
+          detail: `Bot ${botId} is this account's admin bot. Its chat is your own conversation with the agent, so there is nothing to instruct.`
+        },
+        403
+      );
+    }
+    if (role === "unbound") {
+      report({ botId, chatId, sessionId: "none", role, agent, accepted: false, reason: "unbound-bot" });
+      return c.json(
+        {
+          ok: false,
+          error: "unbound-bot",
+          detail: `Bot ${botId} is not bound to an agent or a specialist card, so it answers nobody. Bind it before instructing it.`
         },
         403
       );
@@ -7771,30 +7893,18 @@ function createOperatorInjectRoutes(deps) {
         403
       );
     }
-    const lists = chatSendAllowlists(entry3);
-    const verdict = checkTelegramChatSend({
-      chatId: Number(chatId),
-      allowChannels: lists.allowChannels,
-      allowGroups: lists.allowGroups
-    });
+    const verdict = checkTelegramOutboundTarget({ chatId: Number(chatId), entry: entry3 });
     console.error(
       `[telegram-outbound] op=channel-send botId=${logValue2(botId)} chatId=${logValue2(chatId)} allowed=${verdict.allowed ? "yes" : "no"} reason=${verdict.reason} messageId=none`
     );
     if (!verdict.allowed) {
-      report({
-        botId,
-        chatId,
-        sessionId: "none",
-        role,
-        agent,
-        accepted: false,
-        reason: "chat-not-allowlisted"
-      });
+      const outcome = verdict.kind === "broadcast" ? "chat-not-allowlisted" : "chat-not-permitted";
+      report({ botId, chatId, sessionId: "none", role, agent, accepted: false, reason: outcome });
       return c.json(
         {
           ok: false,
-          error: "chat-not-allowlisted",
-          detail: `Chat ${chatId} is a broadcast channel that bot ${botId} does not allowlist, so nothing was sent.`
+          error: outcome,
+          detail: verdict.kind === "broadcast" ? `Chat ${chatId} is a broadcast channel that bot ${botId} does not allowlist, so nothing was sent.` : `Bot ${botId} may not talk to chat ${chatId} (${verdict.reason}), so nothing was sent. It would refuse that chat's own messages too.`
         },
         403
       );
@@ -7823,13 +7933,22 @@ function createOperatorInjectRoutes(deps) {
         accountDir,
         botId,
         botToken: entry3.token,
-        agentSlug: entry3.agent,
+        // Task 2773 — `entryAgentSlug`, not `entry.agent`: a specialist entry
+        // carries a card name and no `agent` field at all, so the property read
+        // is `undefined` there. The webhook resolves the same way
+        // (`routes/telegram.ts`), so both doors name the spawn's agent from one
+        // definition.
+        agentSlug: entryAgentSlug(entry3),
         senderId: chatId,
         conversationSubject: chatId,
         businessChatId: null,
-        role: "public",
+        // Task 2773 — the entry's OWN role, replacing a hardcoded 'public'. This
+        // picks the session derivation in `sessionIdFor` and the framing in the
+        // channel server; a value disagreeing with the registry would land the
+        // instruction in a session the counterparty's real messages never reach.
+        role,
         personId: null,
-        specialist: null,
+        specialist: entry3.role === "specialist" ? entry3.specialist : null,
         chatId,
         text: instruction,
         // An instruction carries no file by construction: there is no message to
@@ -8171,8 +8290,8 @@ function auditGroupOutbound() {
 }
 function auditGroupOutboundNote() {
   const a = auditGroupOutbound();
-  const tail = a.agent > 0 ? ` offenders=${a.offenders.join(",")}` : "";
-  const note = `convos=${a.convos} outbound=${a.outbound} operator=${a.operator} agent=${a.agent} unstamped=${a.unstamped}${tail}`;
+  const tail2 = a.agent > 0 ? ` offenders=${a.offenders.join(",")}` : "";
+  const note = `convos=${a.convos} outbound=${a.outbound} operator=${a.operator} agent=${a.agent} unstamped=${a.unstamped}${tail2}`;
   console.log(`${TAG13} op=group-outbound-audit ${note}`);
   return note;
 }
@@ -9203,10 +9322,10 @@ function resolveKey(accountId, ctx) {
 function setAccountPolicy(accountDir, accountId, policy, ctx) {
   const id = accountId.trim();
   if (!id) return { ok: false, reason: "missing-account-id", error: "Missing account id." };
-  const fields = ["dmPolicy", "adminPhones", "allowFrom"].filter(
+  const fields2 = ["dmPolicy", "adminPhones", "allowFrom"].filter(
     (f) => policy[f] !== void 0
   );
-  if (fields.length === 0) {
+  if (fields2.length === 0) {
     return {
       ok: false,
       reason: "empty-policy",
@@ -9228,7 +9347,7 @@ function setAccountPolicy(accountDir, accountId, policy, ctx) {
     const accounts = wa.accounts;
     if (!accounts[key2] || typeof accounts[key2] !== "object") accounts[key2] = { name: "Main" };
     const slice = accounts[key2];
-    for (const field2 of fields) slice[field2] = policy[field2];
+    for (const field2 of fields2) slice[field2] = policy[field2];
     const parsed = WhatsAppConfigSchema.safeParse(wa);
     if (!parsed.success) {
       const msg = parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ");
@@ -9238,7 +9357,7 @@ function setAccountPolicy(accountDir, accountId, policy, ctx) {
     config.whatsapp = parsed.data;
     writeConfig(accountDir, config);
     console.error(
-      `${TAG15} op=set-account-policy account=${id} key=${key2} keyKind=${verdict.kind} fields=[${fields.join(",")}] ok=true`
+      `${TAG15} op=set-account-policy account=${id} key=${key2} keyKind=${verdict.kind} fields=[${fields2.join(",")}] ok=true`
     );
     reloadManagerConfig(accountDir);
     return { ok: true, key: key2 };
@@ -9500,8 +9619,8 @@ function resolvePublicAgentEnabled(accountDir, opts) {
     return { enabled: false, source: "default" };
   }
 }
-function updateConfig(accountDir, fields) {
-  const fieldNames = Object.keys(fields);
+function updateConfig(accountDir, fields2) {
+  const fieldNames = Object.keys(fields2);
   if (fieldNames.length === 0) {
     return { ok: false, error: "No fields provided to update." };
   }
@@ -9511,7 +9630,7 @@ function updateConfig(accountDir, fields) {
       config.whatsapp = {};
     }
     const wa = config.whatsapp;
-    for (const [key2, value] of Object.entries(fields)) {
+    for (const [key2, value] of Object.entries(fields2)) {
       wa[key2] = value;
     }
     const parsed = WhatsAppConfigSchema.safeParse(wa);
@@ -10221,12 +10340,12 @@ function unwrapToShape(schema) {
 }
 function extractFields(schema) {
   const shape = unwrapToShape(schema);
-  const fields = [];
+  const fields2 = [];
   for (const [name, fieldSchema] of Object.entries(shape)) {
     const def = fieldSchema?._def;
     const resolved = resolveZodType(def);
     const description = extractDescription(fieldSchema, def);
-    fields.push({
+    fields2.push({
       name,
       type: resolved.type,
       required: resolved.required,
@@ -10234,14 +10353,14 @@ function extractFields(schema) {
       ...description !== void 0 ? { description } : {}
     });
   }
-  return fields;
+  return fields2;
 }
 function escapeTableCell(text) {
   return text.replace(/\|/g, "\\|");
 }
-function formatFieldTable(title, fields) {
+function formatFieldTable(title, fields2) {
   const lines = [`## ${title}`, "", "| Field | Type | Required | Default | Description |", "|-------|------|----------|---------|-------------|"];
-  for (const f of fields) {
+  for (const f of fields2) {
     const desc = f.description ? escapeTableCell(f.description) : "\u2014";
     lines.push(`| ${f.name} | ${f.type} | ${f.required ? "yes" : "no"} | ${f.default ?? "\u2014"} | ${desc} |`);
   }
@@ -10398,12 +10517,12 @@ function houseSocketScopeDenial(c, op) {
 }
 function selfOrHouseScopeDenial(c, targetAccountId, op, targetSource = "explicit") {
   const { decision, callerAccountId, houseAdminScope } = evaluateCallerScope(c, targetAccountId);
-  const tail = `target=${targetAccountId} targetSource=${targetSource} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`;
+  const tail2 = `target=${targetAccountId} targetSource=${targetSource} caller=${callerAccountId ?? "none"} houseAdmin=${houseAdminScope ? "y" : "n"}`;
   if (decision.authorized) {
-    console.error(`${TAG20} op=authz-ok route=${op} ${tail}`);
+    console.error(`${TAG20} op=authz-ok route=${op} ${tail2}`);
     return null;
   }
-  console.error(`${TAG20} op=authz-deny route=${op} ${tail}`);
+  console.error(`${TAG20} op=authz-deny route=${op} ${tail2}`);
   return c.json({ ok: false, error: "Not authorized. This session may only pair or manage its own account." }, 403);
 }
 function bindingScopeDenial(c, targetAccountId, op) {
@@ -10677,7 +10796,7 @@ app3.post("/reconnect", async (c) => {
 app3.post("/config", async (c) => {
   try {
     const body = await c.req.json().catch(() => ({}));
-    const { action, phone, slug, fields, accountId, managesAccount, mode, policy, party, account: partyAccount, enabled } = body;
+    const { action, phone, slug, fields: fields2, accountId, managesAccount, mode, policy, party, account: partyAccount, enabled } = body;
     if (!action || typeof action !== "string") {
       return c.json({ ok: false, error: 'Missing required field "action".' }, 400);
     }
@@ -10941,11 +11060,11 @@ app3.post("/config", async (c) => {
         }
       }
       case "update-config": {
-        if (!fields || typeof fields !== "object" || Array.isArray(fields)) {
+        if (!fields2 || typeof fields2 !== "object" || Array.isArray(fields2)) {
           return c.json({ ok: false, error: 'Missing required field "fields" (object with config field names and values).' }, 400);
         }
-        const result = updateConfig(account.accountDir, fields);
-        const fieldNames = Object.keys(fields);
+        const result = updateConfig(account.accountDir, fields2);
+        const fieldNames = Object.keys(fields2);
         console.error(`${TAG20} config action=update-config fields=[${fieldNames.join(",")}] ok=${result.ok}`);
         return c.json(result, result.ok ? 200 : 400);
       }
@@ -14095,13 +14214,13 @@ async function pullVisitStatusForAccount(opts) {
       log2(
         `${TAG24} op=merged account=${accountId} id=${row.id} labour=${row.dayHundredths > 0} forWorker=${row.forOwnerId !== ""}`
       );
-      const fields = ["status"];
-      if (row.workDate !== "") fields.push("workDate");
-      if (row.workNote !== "") fields.push("workNote");
-      if (row.assignedOwnerId !== "") fields.push("assignedOwnerId");
-      if (row.startDate !== "") fields.push("startDate");
-      if (row.forOwnerId !== "") fields.push("forOwnerId");
-      for (const field2 of fields) {
+      const fields2 = ["status"];
+      if (row.workDate !== "") fields2.push("workDate");
+      if (row.workNote !== "") fields2.push("workNote");
+      if (row.assignedOwnerId !== "") fields2.push("assignedOwnerId");
+      if (row.startDate !== "") fields2.push("startDate");
+      if (row.forOwnerId !== "") fields2.push("forOwnerId");
+      for (const field2 of fields2) {
         log2(`${TAG24} op=applied visitId=${row.visitId} field=${field2}`);
       }
     } catch (err) {
@@ -15516,11 +15635,19 @@ async function recordManualSendContext(input, deps) {
     mechanism,
     reason
   });
-  if (input.entry.role !== "public") return refuse2("not-public-bot");
+  if (input.entry.role === "admin") return refuse2("admin-bot");
+  if (input.entry.role === "unbound") return refuse2("unbound-bot");
   const businessKey = telegramBusinessChannelKey(input.botId, String(input.chatId));
   if (deps.newestInboundTelegramDate(input.accountId, businessKey) !== null) {
     return refuse2("business-chat");
   }
+  const target = checkTelegramOutboundTarget({ chatId: input.chatId, entry: input.entry });
+  if (!target.allowed) {
+    deps.log(
+      `[telegram-manual-send] op=target-refused botId=${input.botId} chatId=${input.chatId} kind=${target.kind} reason=${target.reason}`
+    );
+    return refuse2("chat-not-permitted");
+  }
   const projectDir = deps.findSessionProjectDir(input.sessionId);
   if (projectDir === null) return refuse2("no-transcript");
   const live = deps.isLive(input.channelKey);
@@ -15541,16 +15668,22 @@ async function recordManualSendContext(input, deps) {
       accountDir: input.accountDir,
       botId: input.botId,
       botToken: input.entry.token,
-      agentSlug: input.entry.agent,
+      // Task 2773 — `entryAgentSlug`, not `entry.agent`: a specialist entry has
+      // no `agent` field, so the property read is `undefined` there.
+      agentSlug: entryAgentSlug(input.entry),
       senderId: input.senderId,
       // The route admits only a private chat, where the conversation's subject IS
       // the sender. Passed explicitly so the gateway's key and its session id are
       // derived from the same value the store row already carries.
       conversationSubject: input.senderId,
       businessChatId: null,
-      role: "public",
+      // Task 2773 — the entry's OWN role, replacing a hardcoded 'public'. It
+      // picks the session derivation in `sessionIdFor`, which for a specialist is
+      // `telegramAdminSessionId` — the same value the caller already derived for
+      // `input.sessionId`.
+      role: input.entry.role,
       personId: null,
-      specialist: null,
+      specialist: input.entry.role === "specialist" ? input.entry.specialist : null,
       chatId: String(input.chatId),
       text: input.text,
       // No file by construction: this is text the operator typed into the send
@@ -16185,10 +16318,97 @@ function runTelegramStoreCensus() {
   return c;
 }
 
+// app/lib/telegram/card-row-census.ts
+import { closeSync as closeSync6, openSync as openSync6, readdirSync as readdirSync15, readFileSync as readFileSync24, readSync as readSync6, statSync as statSync15 } from "fs";
+import { join as join30 } from "path";
+var CARD_ROW_CENSUS_TAG = "[telegram-card-row-census]";
+var CARD_ROW_WINDOW_MS = 60 * 60 * 1e3;
+var MAX_BYTES_PER_FILE = 4e6;
+function tail(path, size) {
+  if (size <= MAX_BYTES_PER_FILE) return readFileSync24(path, "utf-8");
+  const buf = Buffer.alloc(MAX_BYTES_PER_FILE);
+  const fd = openSync6(path, "r");
+  try {
+    const read = readSync6(fd, buf, 0, MAX_BYTES_PER_FILE, size - MAX_BYTES_PER_FILE);
+    const text = buf.subarray(0, read).toString("utf-8");
+    const nl = text.indexOf("\n");
+    return nl === -1 ? "" : text.slice(nl + 1);
+  } finally {
+    closeSync6(fd);
+  }
+}
+function fields(line) {
+  const out = {};
+  for (const part of line.split(" ")) {
+    const i = part.indexOf("=");
+    if (i > 0) out[part.slice(0, i)] = part.slice(i + 1);
+  }
+  return out;
+}
+function parseCardSends(lines) {
+  const out = [];
+  for (const line of lines) {
+    if (!line.startsWith("[telegram-tools] op=card-sent ")) continue;
+    const f = fields(line);
+    if (f.outcome !== "sent") continue;
+    if (!f.accountId || !f.key || !f.messageId) continue;
+    const atMs = Date.parse(f.at ?? "");
+    if (!Number.isFinite(atMs)) continue;
+    out.push({ accountId: f.accountId, channelKey: f.key, messageId: f.messageId, atMs });
+  }
+  return out;
+}
+function rowExists(send) {
+  const rowId = `telegram:${send.accountId}:${send.channelKey}:card:${send.messageId}`;
+  for (const row of readRows(send.accountId, send.channelKey)) {
+    if (isUpdateRecord(row)) continue;
+    if (row.messageId === rowId) return true;
+  }
+  return false;
+}
+function collectCardRowCensus(input) {
+  const floor = input.nowMs - CARD_ROW_WINDOW_MS;
+  const sends = /* @__PURE__ */ new Map();
+  try {
+    if (input.logDir) {
+      for (const name of readdirSync15(input.logDir)) {
+        if (!name.startsWith("mcp-") || !name.endsWith(".log")) continue;
+        const path = join30(input.logDir, name);
+        let text;
+        try {
+          text = tail(path, statSync15(path).size);
+        } catch {
+          continue;
+        }
+        for (const send of parseCardSends(text.split("\n"))) {
+          if (send.atMs < floor || send.atMs > input.nowMs) continue;
+          sends.set(`${send.accountId}:${send.channelKey}:${send.messageId}`, send);
+        }
+      }
+    }
+  } catch {
+  }
+  let rows = 0;
+  const missingIds = [];
+  for (const send of sends.values()) {
+    if (rowExists(send)) rows += 1;
+    else missingIds.push(send.messageId);
+  }
+  return { sent: sends.size, rows, missing: missingIds.length, missingIds };
+}
+function cardRowCensusLine(input) {
+  const c = collectCardRowCensus(input);
+  const head = `${CARD_ROW_CENSUS_TAG} sent=${c.sent} rows=${c.rows} missing=${c.missing} window=60m`;
+  return c.missing > 0 ? `${head} missing-ids=[${c.missingIds.join(",")}]` : head;
+}
+function runTelegramCardRowCensus(logDir, nowMs = Date.now()) {
+  console.error(cardRowCensusLine({ logDir, nowMs }));
+}
+
 // app/lib/telegram/reach-census.ts
 var import_dist4 = __toESM(require_dist2(), 1);
 import { existsSync as existsSync21 } from "fs";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 function collectTelegramReachCensus(accounts) {
   const out = {
     accounts: accounts.length,
@@ -16198,7 +16418,7 @@ function collectTelegramReachCensus(accounts) {
   };
   for (const account of accounts) {
     const reach = (0, import_dist4.collectTelegramReach)({
-      storeDir: join30(STORE_ROOT2(), account.accountId),
+      storeDir: join31(STORE_ROOT2(), account.accountId),
       bots: account.bots
     });
     for (const bot of reach.bots) {
@@ -16252,7 +16472,7 @@ function runTelegramCheckoutCensus(bots, now) {
 }
 
 // app/lib/telegram/media-census.ts
-import { join as join31, resolve as resolve20 } from "path";
+import { join as join32, resolve as resolve20 } from "path";
 function idsByTarget(rows) {
   const out = /* @__PURE__ */ new Map();
   for (const row of rows) {
@@ -16333,8 +16553,8 @@ function readWaOperatorTurns() {
 }
 
 // server/routes/session-reader.ts
-import { readFileSync as readFileSync24, watch as watch4, statSync as statSync15, existsSync as existsSync22, readdirSync as readdirSync15, realpathSync as realpathSync5 } from "fs";
-import { isAbsolute as isAbsolute2, join as join32, relative as relative3, resolve as resolve21, sep as sep5 } from "path";
+import { readFileSync as readFileSync25, watch as watch4, statSync as statSync16, existsSync as existsSync22, readdirSync as readdirSync16, realpathSync as realpathSync5 } from "fs";
+import { isAbsolute as isAbsolute2, join as join33, relative as relative3, resolve as resolve21, sep as sep5 } from "path";
 
 // server/routes/admin/manager-client.ts
 var SESSION_ID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -16439,7 +16659,7 @@ function openTaskKey(turns) {
 }
 function readSubagentMeta(dir, hex) {
   try {
-    const m = JSON.parse(readFileSync24(join32(dir, `agent-${hex}.meta.json`), "utf8"));
+    const m = JSON.parse(readFileSync25(join33(dir, `agent-${hex}.meta.json`), "utf8"));
     if (typeof m.agentType === "string" && typeof m.description === "string" && typeof m.toolUseId === "string") {
       return { agentType: m.agentType, description: m.description, toolUseId: m.toolUseId };
     }
@@ -16462,7 +16682,7 @@ function runActivityTick(c) {
   c.parentGrewThisTick = false;
   let names = [];
   try {
-    names = readdirSync15(c.subagentsDir).filter((n) => AGENT_JSONL_RE.test(n));
+    names = readdirSync16(c.subagentsDir).filter((n) => AGENT_JSONL_RE.test(n));
   } catch {
   }
   const entries2 = [];
@@ -16471,7 +16691,7 @@ function runActivityTick(c) {
     let size = 0;
     let mtimeMs = 0;
     try {
-      const st = statSync15(join32(c.subagentsDir, name));
+      const st = statSync16(join33(c.subagentsDir, name));
       size = st.size;
       mtimeMs = st.mtimeMs;
     } catch {
@@ -16516,11 +16736,11 @@ app7.get("/stream", requireAdminSession, (c) => {
   const sessionId = c.req.query("sessionId") ?? "";
   const projectDir = c.req.query("projectDir") ?? "";
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve21(join32(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve21(join33(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve21(join32(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve21(join33(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep5)) {
     return c.json({ error: "bad session reference" }, 400);
   }
@@ -16540,7 +16760,7 @@ data: ${JSON.stringify(turn)}
     start(controller) {
       const fileEnd0 = (() => {
         try {
-          return statSync15(jsonlPath).size;
+          return statSync16(jsonlPath).size;
         } catch {
           return 0;
         }
@@ -16548,7 +16768,7 @@ data: ${JSON.stringify(turn)}
       let offset = resumeOffset(lastEventId, fileEnd0);
       console.log(`[wa-stream] op=open conn=${connId} sessionId=${sessionId} channel=reader resume=${offset}`);
       const sessionKey = c.req.query("session_key") ?? "";
-      const subagentsDir = resolve21(join32(projectDir, sessionId, "subagents"));
+      const subagentsDir = resolve21(join33(projectDir, sessionId, "subagents"));
       console.log(
         `[webchat-activity] op=watch-subagents key=${sessionKey} dir=${subagentsDir} exists=${existsSync22(subagentsDir)}`
       );
@@ -16701,11 +16921,11 @@ app7.get("/backfill", requireAdminSession, (c) => {
   const beforeRaw = c.req.query("before") ?? "";
   const before = Number(beforeRaw);
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve21(join32(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve21(join33(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId) || beforeRaw === "" || !Number.isFinite(before) || before < 0) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve21(join32(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve21(join33(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep5)) {
     return c.json({ error: "bad session reference" }, 400);
   }
@@ -16717,7 +16937,7 @@ app7.get("/backfill", requireAdminSession, (c) => {
   const scratchpadRoot = sessionScratchpadRoot(projectDir, sessionId);
   const fileEnd = (() => {
     try {
-      return statSync15(jsonlPath).size;
+      return statSync16(jsonlPath).size;
     } catch {
       return 0;
     }
@@ -16760,7 +16980,7 @@ app7.get("/directives", requireAdminSession, (c) => {
   if (!dir || !existsSync22(dir)) return c.json({ entries: [] });
   let names;
   try {
-    names = readdirSync15(dir).filter((n) => DIRECTIVE_NAME_RE.test(n));
+    names = readdirSync16(dir).filter((n) => DIRECTIVE_NAME_RE.test(n));
   } catch {
     return c.json({ entries: [] });
   }
@@ -16770,7 +16990,7 @@ app7.get("/directives", requireAdminSession, (c) => {
     const pid = Number(pidPart);
     let len = 0;
     try {
-      len = statSync15(join32(dir, name)).size;
+      len = statSync16(join33(dir, name)).size;
     } catch {
     }
     return { name, secs, pid, ts: Number.isFinite(secs) ? new Date(secs * 1e3).toISOString() : null, len };
@@ -16785,11 +17005,11 @@ app7.get("/directive", requireAdminSession, (c) => {
   }
   const dir = directiveStoreDir(sessionId);
   if (!dir) return c.json({ error: "no account" }, 404);
-  const path = resolve21(join32(dir, name));
+  const path = resolve21(join33(dir, name));
   if (!path.startsWith(dir + sep5)) return c.json({ error: "bad reference" }, 400);
   let body;
   try {
-    body = readFileSync24(path, "utf8");
+    body = readFileSync25(path, "utf8");
   } catch {
     return c.json({ error: "not found" }, 404);
   }
@@ -16798,8 +17018,8 @@ app7.get("/directive", requireAdminSession, (c) => {
 var session_reader_default = app7;
 
 // server/routes/operator-conversations.ts
-import { readFileSync as readFileSync25 } from "fs";
-import { basename as basename9, dirname as dirname9, join as join33 } from "path";
+import { readFileSync as readFileSync26 } from "fs";
+import { basename as basename9, dirname as dirname9, join as join34 } from "path";
 
 // app/lib/reader/operator-conversations.ts
 function operatorConvName(row) {
@@ -16887,7 +17107,7 @@ app8.get("/conversations", requireAdminSession, async (c) => {
   }
   const cfg = claudeConfigDir();
   if (!cfg) return c.json({ conversations: [] });
-  const projectsRoot = join33(cfg, "projects");
+  const projectsRoot = join34(cfg, "projects");
   const userTitles = loadUserTitles(ACCOUNTS_DIR ?? null);
   const rows = [];
   let sessionRowsExcludedUntagged = 0;
@@ -16905,7 +17125,7 @@ app8.get("/conversations", requireAdminSession, async (c) => {
     enumeratedCount += 1;
     const sessionId = basename9(path).replace(/\.jsonl$/, "");
     const projectDir = dirname9(path);
-    const meta = readSidecarMeta(join33(projectDir, `${sessionId}.meta.json`));
+    const meta = readSidecarMeta(join34(projectDir, `${sessionId}.meta.json`));
     if (!isReaderChannelSession(meta.role, meta.channel)) continue;
     if (multiAccount) {
       if (meta.accountId === null) {
@@ -16917,7 +17137,7 @@ app8.get("/conversations", requireAdminSession, async (c) => {
     let body = "";
     let bodyRead = false;
     try {
-      body = readFileSync25(path, "utf8");
+      body = readFileSync26(path, "utf8");
       bodyRead = true;
       bodyReadCount += 1;
     } catch (err) {
@@ -17093,7 +17313,7 @@ app8.get("/conversations-all", requireAdminSession, async (c) => {
   const { value, state } = await getOrCompute("conversations-all", houseId, async () => {
     const cfg = claudeConfigDir();
     if (!cfg) return { conversations: [] };
-    const projectsRoot = join33(cfg, "projects");
+    const projectsRoot = join34(cfg, "projects");
     const userTitles = loadUserTitles(ACCOUNTS_DIR ?? null);
     const validAccounts = listValidAccounts();
     const validIds = new Set(validAccounts.map((a) => a.accountId));
@@ -17113,7 +17333,7 @@ app8.get("/conversations-all", requireAdminSession, async (c) => {
       enumeratedCount += 1;
       const sessionId = basename9(path).replace(/\.jsonl$/, "");
       const projectDir = dirname9(path);
-      const meta = readSidecarMeta(join33(projectDir, `${sessionId}.meta.json`));
+      const meta = readSidecarMeta(join34(projectDir, `${sessionId}.meta.json`));
       if (!isReaderChannelSession(meta.role, meta.channel)) continue;
       if (meta.accountId === null) {
         untaggedCount += 1;
@@ -17124,7 +17344,7 @@ app8.get("/conversations-all", requireAdminSession, async (c) => {
       let body = "";
       let bodyRead = false;
       try {
-        body = readFileSync25(path, "utf8");
+        body = readFileSync26(path, "utf8");
         bodyRead = true;
         bodyReadCount += 1;
       } catch (err) {
@@ -17249,8 +17469,8 @@ app8.get("/conversations-all", requireAdminSession, async (c) => {
 var operator_conversations_default = app8;
 
 // server/routes/public-reader.ts
-import { statSync as statSync17, watch as watch6, readFileSync as readFileSync26, readdirSync as readdirSync17 } from "fs";
-import { basename as basename10, dirname as dirname10, join as join34, resolve as resolve23, sep as sep7 } from "path";
+import { statSync as statSync18, watch as watch6, readFileSync as readFileSync27, readdirSync as readdirSync18 } from "fs";
+import { basename as basename10, dirname as dirname10, join as join35, resolve as resolve23, sep as sep7 } from "path";
 
 // app/lib/reader/delivered-kinds.ts
 var PUBLIC_DELIVERED_KINDS = /* @__PURE__ */ new Set([
@@ -17339,10 +17559,10 @@ function enumeratePublicRows() {
   const cfg = claudeConfigDir();
   if (!cfg) return [];
   const rows = [];
-  for (const { path } of enumerateJsonls(join34(cfg, "projects"))) {
+  for (const { path } of enumerateJsonls(join35(cfg, "projects"))) {
     const sessionId = basename10(path).replace(/\.jsonl$/, "");
     const projectDir = dirname10(path);
-    const meta = readSidecarMeta(join34(projectDir, `${sessionId}.meta.json`));
+    const meta = readSidecarMeta(join35(projectDir, `${sessionId}.meta.json`));
     rows.push({
       sessionId,
       projectDir,
@@ -17409,15 +17629,15 @@ app9.get("/backfill", (c) => {
   const beforeRaw = c.req.query("before") ?? "";
   const before = Number(beforeRaw);
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve23(join34(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve23(join35(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId) || beforeRaw === "" || !Number.isFinite(before) || before < 0) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve23(join34(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve23(join35(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep7)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const meta = readSidecarMeta(join34(projectDir, `${sessionId}.meta.json`));
+  const meta = readSidecarMeta(join35(projectDir, `${sessionId}.meta.json`));
   const isPublicWebchat = meta.role === "public" && meta.channel === "webchat";
   const owns = visitor.kind === "person" ? meta.personId === visitor.personId : meta.personId === null && meta.visitorId === visitor.visitorId;
   if (!(isPublicWebchat && owns)) {
@@ -17433,7 +17653,7 @@ app9.get("/backfill", (c) => {
   }
   const fileEnd = (() => {
     try {
-      return statSync17(jsonlPath).size;
+      return statSync18(jsonlPath).size;
     } catch {
       return 0;
     }
@@ -17476,15 +17696,15 @@ app9.get("/stream", (c) => {
   const sessionId = c.req.query("sessionId") ?? "";
   const projectDir = c.req.query("projectDir") ?? "";
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve23(join34(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve23(join35(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve23(join34(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve23(join35(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep7)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const meta = readSidecarMeta(join34(projectDir, `${sessionId}.meta.json`));
+  const meta = readSidecarMeta(join35(projectDir, `${sessionId}.meta.json`));
   const isPublicWebchat = meta.role === "public" && meta.channel === "webchat";
   const owns = visitor.kind === "person" ? meta.personId === visitor.personId : meta.personId === null && meta.visitorId === visitor.visitorId;
   if (!(isPublicWebchat && owns)) {
@@ -17513,7 +17733,7 @@ data: ${JSON.stringify(turn)}
       };
       const fileEnd0 = (() => {
         try {
-          return statSync17(jsonlPath).size;
+          return statSync18(jsonlPath).size;
         } catch {
           return 0;
         }
@@ -17628,9 +17848,9 @@ app9.get("/attachment/:attachmentId", (c) => {
   let dataFile;
   let buffer;
   try {
-    dataFile = readdirSync17(dir).find((f) => !f.endsWith(".meta.json") && !f.endsWith(EXTRACTED_TEXT_SUFFIX));
+    dataFile = readdirSync18(dir).find((f) => !f.endsWith(".meta.json") && !f.endsWith(EXTRACTED_TEXT_SUFFIX));
     if (!dataFile) throw new Error("no data file");
-    buffer = readFileSync26(resolve23(dir, dataFile));
+    buffer = readFileSync27(resolve23(dir, dataFile));
   } catch {
     console.error(`${ATT_TAG} op=denied session=${ses} att=${at} reason=not-found`);
     return new Response("Not found", { status: 404 });
@@ -17652,20 +17872,20 @@ var public_reader_default = app9;
 
 // server/routes/webchat.ts
 import { basename as basename11, dirname as dirname11 } from "path";
-import { join as join37 } from "path";
-import { existsSync as existsSync25, readdirSync as readdirSync19, readFileSync as readFileSync29, renameSync as renameSync4, statSync as statSync18, writeFileSync as writeFileSync11 } from "fs";
+import { join as join38 } from "path";
+import { existsSync as existsSync25, readdirSync as readdirSync20, readFileSync as readFileSync30, renameSync as renameSync4, statSync as statSync19, writeFileSync as writeFileSync11 } from "fs";
 
 // server/canonical-webchat-override.ts
-import { readFileSync as readFileSync27, writeFileSync as writeFileSync9, renameSync as renameSync2 } from "fs";
-import { join as join35 } from "path";
+import { readFileSync as readFileSync28, writeFileSync as writeFileSync9, renameSync as renameSync2 } from "fs";
+import { join as join36 } from "path";
 var FILE = "canonical-webchat-session.json";
 var UUID2 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 function canonicalOverridePath(accountDir) {
-  return join35(accountDir, FILE);
+  return join36(accountDir, FILE);
 }
 function readRaw(accountDir) {
   try {
-    return JSON.parse(readFileSync27(canonicalOverridePath(accountDir), "utf8"));
+    return JSON.parse(readFileSync28(canonicalOverridePath(accountDir), "utf8"));
   } catch {
     return null;
   }
@@ -17778,8 +17998,8 @@ function isNewSessionEffortLevel(value) {
 }
 
 // ../services/claude-session-manager/src/sidecar-store.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync4, readdirSync as readdirSync18, readFileSync as readFileSync28, renameSync as renameSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "fs";
-import { join as join36 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync4, readdirSync as readdirSync19, readFileSync as readFileSync29, renameSync as renameSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "fs";
+import { join as join37 } from "path";
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -17787,7 +18007,7 @@ function createSidecarStore(config) {
   const { suffix, validate: validate3 } = config;
   const suffixRe = new RegExp(`${escapeRegExp(suffix)}$`);
   function pathFor(sessionsDir, id) {
-    return join36(sessionsDir, `${id}${suffix}`);
+    return join37(sessionsDir, `${id}${suffix}`);
   }
   function write(sessionsDir, id, record) {
     mkdirSync4(sessionsDir, { recursive: true });
@@ -17808,7 +18028,7 @@ function createSidecarStore(config) {
   function readFileAt(path) {
     let raw;
     try {
-      raw = readFileSync28(path, "utf8");
+      raw = readFileSync29(path, "utf8");
     } catch {
       return null;
     }
@@ -17824,17 +18044,17 @@ function createSidecarStore(config) {
   function readAll3(sessionsDir, onSkip) {
     let names;
     try {
-      names = readdirSync18(sessionsDir, { withFileTypes: true }).filter((entry3) => entry3.isFile()).map((entry3) => entry3.name);
+      names = readdirSync19(sessionsDir, { withFileTypes: true }).filter((entry3) => entry3.isFile()).map((entry3) => entry3.name);
     } catch {
       return [];
     }
     const out = [];
     for (const name of names) {
       if (!suffixRe.test(name)) continue;
-      const path = join36(sessionsDir, name);
+      const path = join37(sessionsDir, name);
       let raw;
       try {
-        raw = readFileSync28(path, "utf8");
+        raw = readFileSync29(path, "utf8");
       } catch {
         onSkip?.(name, "unreadable");
         continue;
@@ -17907,7 +18127,7 @@ var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9
 function locateSession(sessionId) {
   const dir = findSessionProjectDir(sessionId);
   if (!dir) return { projectDir: null, channel: null, accountId: null };
-  const meta = readSidecarMeta(join37(dir, `${sessionId}.meta.json`));
+  const meta = readSidecarMeta(join38(dir, `${sessionId}.meta.json`));
   return { projectDir: dir, channel: meta.channel, accountId: meta.accountId };
 }
 function resolveQuoted(sessionId, quotedUuid, sendId) {
@@ -17925,7 +18145,7 @@ function resolveQuoted(sessionId, quotedUuid, sendId) {
   let line;
   try {
     const needle = `"uuid":"${quotedUuid}"`;
-    line = readFileSync29(join37(projectDir, `${sessionId}.jsonl`), "utf8").split("\n").find((l) => l.includes(needle));
+    line = readFileSync30(join38(projectDir, `${sessionId}.jsonl`), "utf8").split("\n").find((l) => l.includes(needle));
   } catch {
     log2(false, 0);
     return void 0;
@@ -17942,15 +18162,15 @@ function resolveQuoted(sessionId, quotedUuid, sendId) {
 function locateSidecar(sessionId) {
   const cfg = claudeConfigDir();
   if (!cfg) return null;
-  const projectsRoot = join37(cfg, "projects");
+  const projectsRoot = join38(cfg, "projects");
   let slugs;
   try {
-    slugs = readdirSync19(projectsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
+    slugs = readdirSync20(projectsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
   } catch {
     return null;
   }
   for (const slug of slugs) {
-    const metaPath = join37(projectsRoot, slug, `${sessionId}.meta.json`);
+    const metaPath = join38(projectsRoot, slug, `${sessionId}.meta.json`);
     if (existsSync25(metaPath)) return readSidecarMeta(metaPath);
   }
   return null;
@@ -17960,7 +18180,7 @@ function readTargetOwner(sessionId) {
   if (sidecar !== null) return { found: true, owner: sidecar.adminUserId };
   const { projectDir } = locateSession(sessionId);
   if (projectDir !== null) {
-    return { found: true, owner: readSidecarMeta(join37(projectDir, `${sessionId}.meta.json`)).adminUserId };
+    return { found: true, owner: readSidecarMeta(join38(projectDir, `${sessionId}.meta.json`)).adminUserId };
   }
   return { found: false, owner: null };
 }
@@ -17968,7 +18188,7 @@ function readSourceRowMeta(sessionId) {
   const sidecar = locateSidecar(sessionId);
   if (sidecar !== null) return sidecar;
   const { projectDir } = locateSession(sessionId);
-  if (projectDir !== null) return readSidecarMeta(join37(projectDir, `${sessionId}.meta.json`));
+  if (projectDir !== null) return readSidecarMeta(join38(projectDir, `${sessionId}.meta.json`));
   return null;
 }
 function ownedByRequester(owner, requesterUserId, primaryUserId) {
@@ -17981,7 +18201,7 @@ function sessionSidecarExists(sessionId) {
 function jsonlSizeBytes(projectDir, sessionId) {
   if (projectDir === null) return null;
   try {
-    return statSync18(join37(projectDir, `${sessionId}.jsonl`)).size;
+    return statSync19(join38(projectDir, `${sessionId}.jsonl`)).size;
   } catch {
     return null;
   }
@@ -18109,15 +18329,15 @@ function latestAdminWebchatSessionId(requesterUserId, primaryUserId, scopeAccoun
   const cfg = claudeConfigDir();
   if (!cfg) return null;
   let best = null;
-  for (const { path, isSubagent, archived } of enumerateJsonls(join37(cfg, "projects"))) {
+  for (const { path, isSubagent, archived } of enumerateJsonls(join38(cfg, "projects"))) {
     if (isSubagent || archived) continue;
     const id = basename11(path).slice(0, -".jsonl".length);
-    const meta = readSidecarMeta(join37(dirname11(path), `${id}.meta.json`));
+    const meta = readSidecarMeta(join38(dirname11(path), `${id}.meta.json`));
     if (meta.role !== "admin" || meta.channel !== "webchat") continue;
     if (multiAccount && meta.accountId !== scopeAccountId) continue;
     let mtimeMs;
     try {
-      mtimeMs = statSync18(path).mtimeMs;
+      mtimeMs = statSync19(path).mtimeMs;
     } catch {
       continue;
     }
@@ -18472,9 +18692,9 @@ ${timeline}`;
       console.error(`[webchat:settings] op=${op} outcome=refused value=${value} accountId=none reason=no-account-for-session`);
       return c.json({ error: "account unresolved" }, 503);
     }
-    const accountJsonPath = join37(account.accountDir, "account.json");
+    const accountJsonPath = join38(account.accountDir, "account.json");
     try {
-      const parsed = JSON.parse(readFileSync29(accountJsonPath, "utf8"));
+      const parsed = JSON.parse(readFileSync30(accountJsonPath, "utf8"));
       if (op === "model") parsed.adminModel = value;
       else if (op === "effort") parsed.effort = value;
       else parsed.adminPermissionMode = value;
@@ -18520,7 +18740,7 @@ ${timeline}`;
         const cfg2 = claudeConfigDir();
         if (cfg2) {
           const source2 = resolveBridgeSource(
-            join37(cfg2, "sessions"),
+            join38(cfg2, "sessions"),
             target,
             (id) => locateSession(id).projectDir !== null
           );
@@ -18547,7 +18767,7 @@ ${timeline}`;
     const cfg = claudeConfigDir();
     let projectDir = null;
     if (cfg) {
-      for (const { path } of enumerateJsonls(join37(cfg, "projects"))) {
+      for (const { path } of enumerateJsonls(join38(cfg, "projects"))) {
         if (basename11(path) === `${sessionId}.jsonl`) {
           projectDir = dirname11(path);
           break;
@@ -18555,7 +18775,7 @@ ${timeline}`;
       }
     }
     if (source === "latest" && requesterUserId !== null) {
-      const owner = readSidecarMeta(join37(projectDir ?? "", `${sessionId}.meta.json`)).adminUserId;
+      const owner = readSidecarMeta(join38(projectDir ?? "", `${sessionId}.meta.json`)).adminUserId;
       if (owner !== null && owner !== requesterUserId && requesterUserId !== primaryUserId) {
         console.error(`[webchat:inbound] op=session-resolve-foreign key=${sessionId.slice(0, 8)} owner=${owner.slice(0, 8)} requester=${requesterUserId.slice(0, 8)}`);
       }
@@ -18680,13 +18900,13 @@ var webchat_greeting_default = app10;
 
 // server/routes/telegram.ts
 import { homedir as homedir2 } from "os";
-import { resolve as resolve25, join as join42 } from "path";
-import { existsSync as existsSync29, readFileSync as readFileSync33 } from "fs";
+import { resolve as resolve25, join as join43 } from "path";
+import { existsSync as existsSync29, readFileSync as readFileSync34 } from "fs";
 
 // ../lib/telegram-managed-bot/src/index.ts
 import { randomBytes } from "crypto";
-import { existsSync as existsSync26, readFileSync as readFileSync30, writeFileSync as writeFileSync12, mkdirSync as mkdirSync5 } from "fs";
-import { dirname as dirname12, join as join38 } from "path";
+import { existsSync as existsSync26, readFileSync as readFileSync31, writeFileSync as writeFileSync12, mkdirSync as mkdirSync5 } from "fs";
+import { dirname as dirname12, join as join39 } from "path";
 var TELEGRAM_API = "https://api.telegram.org";
 var TELEGRAM_ALLOWED_UPDATES = [
   "message",
@@ -18753,13 +18973,13 @@ async function setTelegramWebhook(botToken, webhookUrl, secretFilePath, fetchImp
   return { ok: true, secret };
 }
 function writeTelegramBotEntry(accountDir, entry3) {
-  const configPath3 = join38(accountDir, "account.json");
+  const configPath3 = join39(accountDir, "account.json");
   if (!existsSync26(configPath3)) {
     return { ok: false, error: `account.json not found at ${configPath3}` };
   }
   let config;
   try {
-    config = JSON.parse(readFileSync30(configPath3, "utf-8"));
+    config = JSON.parse(readFileSync31(configPath3, "utf-8"));
   } catch (e) {
     return { ok: false, error: `account.json parse failed: ${e.message}` };
   }
@@ -18842,82 +19062,6 @@ async function setManagedBotAccessSettings(managingBotToken, userId, isAccessRes
   return r.ok ? { ok: true } : { ok: false, error: r.error };
 }
 
-// app/lib/telegram/access-control.ts
-function checkTelegramAccess(params) {
-  const { senderId, entry: entry3, chatId, chatType } = params;
-  const isGroup = chatType === "group" || chatType === "supergroup";
-  const isChannel = chatType === "channel";
-  if (isChannel && entry3.role !== "public") {
-    return {
-      allowed: false,
-      reason: entry3.role === "admin" ? "admin-entry-no-channels" : entry3.role === "specialist" ? "specialist-entry-no-channels" : "unbound-entry-no-channels",
-      agentType: entry3.role === "admin" ? "admin" : entry3.role === "specialist" ? "specialist" : "public"
-    };
-  }
-  if (isGroup && entry3.role !== "public") {
-    return {
-      allowed: false,
-      reason: entry3.role === "admin" ? "admin-entry-no-groups" : entry3.role === "specialist" ? "specialist-entry-no-groups" : "unbound-entry-no-groups",
-      agentType: entry3.role === "admin" ? "admin" : entry3.role === "specialist" ? "specialist" : "public"
-    };
-  }
-  if (entry3.role === "admin") {
-    const adminUsers = entry3.adminUsers ?? [];
-    if (adminUsers.includes(senderId)) {
-      return { allowed: true, reason: "admin-binding", agentType: "admin" };
-    }
-    return { allowed: false, reason: "not-admin-user", agentType: "admin" };
-  }
-  if (isGroup && entry3.role === "public") {
-    const groupPolicy = entry3.groupPolicy ?? "disabled";
-    if (groupPolicy === "allowlist") {
-      const allowGroups = entry3.allowGroups ?? [];
-      if (allowGroups.includes(chatId)) {
-        return { allowed: true, reason: "group-allowlist-match", agentType: "public" };
-      }
-      return { allowed: false, reason: "not-in-allowGroups", agentType: "public" };
-    }
-    return { allowed: false, reason: "group-policy-disabled", agentType: "public" };
-  }
-  if (isChannel && entry3.role === "public") {
-    const channelPolicy = entry3.channelPolicy ?? "disabled";
-    if (channelPolicy === "allowlist") {
-      const allowChannels = entry3.allowChannels ?? [];
-      if (allowChannels.includes(chatId)) {
-        return { allowed: true, reason: "channel-allowlist-match", agentType: "public" };
-      }
-      return { allowed: false, reason: "not-in-allowChannels", agentType: "public" };
-    }
-    return { allowed: false, reason: "channel-policy-disabled", agentType: "public" };
-  }
-  if (entry3.role === "unbound") {
-    return { allowed: false, reason: "bot-unbound", agentType: "public" };
-  }
-  if (entry3.role === "specialist") {
-    const allowFrom = entry3.allowFrom ?? [];
-    if (allowFrom.includes(senderId)) {
-      return { allowed: true, reason: "specialist-allowlist-match", agentType: "specialist" };
-    }
-    return { allowed: false, reason: "not-in-allowlist", agentType: "specialist" };
-  }
-  const policy = entry3.dmPolicy ?? "disabled";
-  switch (policy) {
-    case "open":
-      return { allowed: true, reason: "dm-policy-open", agentType: "public" };
-    case "allowlist": {
-      const allowFrom = entry3.allowFrom ?? [];
-      if (allowFrom.includes(senderId)) {
-        return { allowed: true, reason: "allowlist-match", agentType: "public" };
-      }
-      return { allowed: false, reason: "not-in-allowlist", agentType: "public" };
-    }
-    case "disabled":
-      return { allowed: false, reason: "dm-policy-disabled", agentType: "public" };
-    default:
-      return { allowed: false, reason: "unknown-dm-policy", agentType: "public" };
-  }
-}
-
 // app/lib/telegram/managed-bot.ts
 function parseManagedBotUpdate(u) {
   const id = u?.bot?.id;
@@ -19730,7 +19874,7 @@ function routeTelegramUpdate(input) {
 
 // app/lib/telegram/inbound/media.ts
 var import_dist5 = __toESM(require_dist4(), 1);
-import { join as join39 } from "path";
+import { join as join40 } from "path";
 var TAG30 = "[telegram-inbound]";
 var TELEGRAM_MEDIA_DIR = "/tmp/maxy-media";
 var DOWNLOAD_TIMEOUT_MS = 45e3;
@@ -19758,7 +19902,7 @@ async function downloadTelegramMedia(input) {
       if (!meta.ok) {
         result = { ...base, failure: meta.failure };
       } else {
-        const path = join39(
+        const path = join40(
           dir,
           `tg-${(0, import_dist5.pathSafe)(input.botId)}-${(0, import_dist5.pathSafe)(item.fileUniqueId)}.${(0, import_dist5.extensionFor)(meta.filePath, item.mimetype)}`
         );
@@ -20625,8 +20769,8 @@ async function handleDispatchMedia(p) {
 }
 
 // app/lib/telegram/live-location.ts
-import { existsSync as existsSync27, mkdirSync as mkdirSync6, readFileSync as readFileSync31, readdirSync as readdirSync20, statSync as statSync19, writeFileSync as writeFileSync13 } from "fs";
-import { join as join40 } from "path";
+import { existsSync as existsSync27, mkdirSync as mkdirSync6, readFileSync as readFileSync32, readdirSync as readdirSync21, statSync as statSync20, writeFileSync as writeFileSync13 } from "fs";
+import { join as join41 } from "path";
 var TAG37 = "[telegram-inbound]";
 var LIVE_LOCATION_FILE = "telegram-live-location.json";
 var LIVE_LOCATION_CENSUS_TAG = "[telegram-live-location-census]";
@@ -20641,7 +20785,7 @@ function isRecord(v) {
 function readAll(path) {
   if (!existsSync27(path)) return {};
   try {
-    const parsed = JSON.parse(readFileSync31(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync32(path, "utf-8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
     const out = {};
     for (const [k, v] of Object.entries(parsed)) {
@@ -20658,7 +20802,7 @@ function isExpired(rec, now) {
 function writeLiveLocation(input) {
   const { accountDir, botId, senderId, now, emit } = input;
   const key2 = liveLocationKey(botId, senderId);
-  const path = join40(accountDir, LIVE_LOCATION_FILE);
+  const path = join41(accountDir, LIVE_LOCATION_FILE);
   const stored = readAll(path);
   const livePeriodS = input.livePeriodS ?? stored[key2]?.livePeriodS ?? null;
   if (livePeriodS === null) {
@@ -20707,9 +20851,9 @@ function liveLocationCensusLine(accountsRoot, now) {
   let expired = 0;
   let oldestAgeMs = 0;
   try {
-    for (const entry3 of readdirSync20(accountsRoot)) {
-      const path = join40(accountsRoot, entry3, LIVE_LOCATION_FILE);
-      if (!existsSync27(path) || !statSync19(path).isFile()) continue;
+    for (const entry3 of readdirSync21(accountsRoot)) {
+      const path = join41(accountsRoot, entry3, LIVE_LOCATION_FILE);
+      if (!existsSync27(path) || !statSync20(path).isFile()) continue;
       for (const rec of Object.values(readAll(path))) {
         records5 += 1;
         if (isExpired(rec, now)) expired += 1;
@@ -20728,8 +20872,8 @@ function liveLocationCensusLine(accountsRoot, now) {
 }
 
 // app/lib/telegram/business-connection.ts
-import { existsSync as existsSync28, mkdirSync as mkdirSync7, readFileSync as readFileSync32, writeFileSync as writeFileSync14 } from "fs";
-import { join as join41 } from "path";
+import { existsSync as existsSync28, mkdirSync as mkdirSync7, readFileSync as readFileSync33, writeFileSync as writeFileSync14 } from "fs";
+import { join as join42 } from "path";
 var TAG38 = "[telegram-inbound]";
 var BUSINESS_CONNECTION_FILE = "telegram-business-connection.json";
 function truncateConnectionId(id) {
@@ -20743,7 +20887,7 @@ function isRecord2(v) {
 function readAll2(path) {
   if (!existsSync28(path)) return {};
   try {
-    const parsed = JSON.parse(readFileSync32(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync33(path, "utf-8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
     const out = {};
     for (const [k, v] of Object.entries(parsed)) {
@@ -20779,7 +20923,7 @@ function writeBusinessConnection(input) {
     rights,
     at: now
   };
-  const path = join41(accountDir, BUSINESS_CONNECTION_FILE);
+  const path = join42(accountDir, BUSINESS_CONNECTION_FILE);
   const all = readAll2(path);
   all[botId] = next;
   try {
@@ -20793,12 +20937,12 @@ function writeBusinessConnection(input) {
   return { written: true, reason: "ok" };
 }
 function readBusinessConnection(accountDir, botId) {
-  const rec = readAll2(join41(accountDir, BUSINESS_CONNECTION_FILE))[botId];
+  const rec = readAll2(join42(accountDir, BUSINESS_CONNECTION_FILE))[botId];
   if (!rec || !rec.isEnabled) return null;
   return rec;
 }
 function readAllBusinessConnections(accountDir) {
-  return readAll2(join41(accountDir, BUSINESS_CONNECTION_FILE));
+  return readAll2(join42(accountDir, BUSINESS_CONNECTION_FILE));
 }
 
 // app/lib/telegram/business-window.ts
@@ -20854,10 +20998,10 @@ function logValue4(v) {
 }
 function configDirName() {
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? resolve25(process.cwd(), "..");
-  const brandPath = join42(platformRoot5, "config", "brand.json");
+  const brandPath = join43(platformRoot5, "config", "brand.json");
   if (existsSync29(brandPath)) {
     try {
-      return JSON.parse(readFileSync33(brandPath, "utf-8")).configDir ?? ".maxy";
+      return JSON.parse(readFileSync34(brandPath, "utf-8")).configDir ?? ".maxy";
     } catch {
     }
   }
@@ -20885,7 +21029,7 @@ function provisionedWebhookUrl(c, botId) {
 }
 function accountConfig(accountDir) {
   try {
-    return JSON.parse(readFileSync33(join42(accountDir, "account.json"), "utf-8"));
+    return JSON.parse(readFileSync34(join43(accountDir, "account.json"), "utf-8"));
   } catch {
     return {};
   }
@@ -20967,7 +21111,7 @@ app11.post("/", async (c) => {
     console.error(`${TAG39} op=secret botId=${botId} result=missing-file`);
     return c.json({ ok: false }, 401);
   }
-  const expected = readFileSync33(sp, "utf-8").trim();
+  const expected = readFileSync34(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
     console.error(`${TAG39} op=secret botId=${botId} result=mismatch`);
@@ -21912,16 +22056,16 @@ function mountTelegramRoutes(app81, telegramRoutes) {
 }
 
 // server/routes/quickbooks.ts
-import { join as join43 } from "path";
-import { existsSync as existsSync30, readFileSync as readFileSync34, writeFileSync as writeFileSync15, mkdirSync as mkdirSync8, rmSync as rmSync4, renameSync as renameSync5 } from "fs";
+import { join as join44 } from "path";
+import { existsSync as existsSync30, readFileSync as readFileSync35, writeFileSync as writeFileSync15, mkdirSync as mkdirSync8, rmSync as rmSync4, renameSync as renameSync5 } from "fs";
 var TAG40 = "[quickbooks]";
 var INTUIT_TOKEN_URL = "https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer";
 var STATE_RE = /^[A-Za-z0-9_-]+$/;
 function pendingPath(accountDir, state) {
-  return join43(accountDir, "secrets", "quickbooks-pending", `${state}.json`);
+  return join44(accountDir, "secrets", "quickbooks-pending", `${state}.json`);
 }
 function storePath(accountDir) {
-  return join43(accountDir, "secrets", "quickbooks.json");
+  return join44(accountDir, "secrets", "quickbooks.json");
 }
 async function completeConsent(args) {
   const { accountDir, code, realmId } = args;
@@ -21940,7 +22084,7 @@ async function completeConsent(args) {
   try {
     let pending;
     try {
-      pending = JSON.parse(readFileSync34(claimFile, "utf-8"));
+      pending = JSON.parse(readFileSync35(claimFile, "utf-8"));
     } catch {
       console.error(`${TAG40} op=callback state=${state} stateValid=false realmId=${realmId ?? ""}`);
       return { ok: false, status: 400, message: "Authorization state could not be read.", stateValid: false };
@@ -21956,7 +22100,7 @@ async function completeConsent(args) {
     if (!existsSync30(storePath(accountDir))) {
       return { ok: false, status: 500, message: "No QuickBooks credentials are stored for this account.", stateValid: true };
     }
-    const store2 = JSON.parse(readFileSync34(storePath(accountDir), "utf-8"));
+    const store2 = JSON.parse(readFileSync35(storePath(accountDir), "utf-8"));
     const form = new URLSearchParams({
       grant_type: "authorization_code",
       code,
@@ -21988,9 +22132,9 @@ async function completeConsent(args) {
       refreshTokenExpiry: now + (body.x_refresh_token_expires_in ?? 864e4) * 1e3,
       lastRefresh: now
     };
-    mkdirSync8(join43(accountDir, "secrets"), { recursive: true });
+    mkdirSync8(join44(accountDir, "secrets"), { recursive: true });
     writeFileSync15(storePath(accountDir), JSON.stringify(store2, null, 2), { mode: 384 });
-    const persisted = JSON.parse(readFileSync34(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
+    const persisted = JSON.parse(readFileSync35(storePath(accountDir), "utf-8")).connections?.[realmId]?.refreshToken === body.refresh_token;
     console.error(`${TAG40} op=token-exchange realmId=${realmId} persisted=${persisted}`);
     return { ok: persisted, status: persisted ? 200 : 500, message: persisted ? `Connected company ${realmId}.` : "Failed to persist the connection.", stateValid: true };
   } finally {
@@ -22021,7 +22165,7 @@ var quickbooks_default = app12;
 
 // server/routes/onboarding.ts
 import { spawn, spawnSync as spawnSync2, execFileSync as execFileSync4 } from "child_process";
-import { openSync as openSync8, closeSync as closeSync8, appendFileSync as appendFileSync4, writeFileSync as writeFileSync17, writeSync, existsSync as existsSync32, readFileSync as readFileSync36, unlinkSync as unlinkSync3 } from "fs";
+import { openSync as openSync9, closeSync as closeSync9, appendFileSync as appendFileSync4, writeFileSync as writeFileSync17, writeSync, existsSync as existsSync32, readFileSync as readFileSync37, unlinkSync as unlinkSync3 } from "fs";
 import { createHash as createHash4, randomUUID as randomUUID5 } from "crypto";
 
 // app/lib/claude-spawn-env.ts
@@ -22030,7 +22174,7 @@ function claudeBin() {
 }
 
 // server/routes/onboarding.ts
-import { dirname as dirname14, join as join45 } from "path";
+import { dirname as dirname14, join as join46 } from "path";
 
 // app/lib/claude-keychain.ts
 import { execFileSync as execFileSync3 } from "child_process";
@@ -22161,19 +22305,19 @@ function readHostCredsBlob(service) {
 }
 
 // ../lib/admins-write/src/index.ts
-import { existsSync as existsSync31, readFileSync as readFileSync35, writeFileSync as writeFileSync16, renameSync as renameSync6, mkdirSync as mkdirSync9, readdirSync as readdirSync21, statSync as statSync20, appendFileSync as appendFileSync3 } from "fs";
-import { dirname as dirname13, join as join44 } from "path";
+import { existsSync as existsSync31, readFileSync as readFileSync36, writeFileSync as writeFileSync16, renameSync as renameSync6, mkdirSync as mkdirSync9, readdirSync as readdirSync22, statSync as statSync21, appendFileSync as appendFileSync3 } from "fs";
+import { dirname as dirname13, join as join45 } from "path";
 function id8(value) {
   return value.slice(0, 8);
 }
 function formatAuditRowIds(userIds) {
   return userIds.map(id8).join(",");
 }
-function appendUsersAuditLine(audit, fields) {
+function appendUsersAuditLine(audit, fields2) {
   const sess = audit.session ? ` session=${id8(audit.session)}` : "";
   const actor = audit.actor.includes("-") ? id8(audit.actor) : audit.actor;
   const targetFields = audit.target !== void 0 ? ` target=${audit.target.includes("-") ? id8(audit.target) : audit.target} explicitUserId=${audit.explicitUserId ? "true" : "false"}` : "";
-  const line = `[users-audit] action=${fields.action} actor=${actor}${targetFields}${sess} field=${fields.field} rowsBefore=${fields.rowsBefore} rowsAfter=${fields.rowsAfter} ts=${(/* @__PURE__ */ new Date()).toISOString()}
+  const line = `[users-audit] action=${fields2.action} actor=${actor}${targetFields}${sess} field=${fields2.field} rowsBefore=${fields2.rowsBefore} rowsAfter=${fields2.rowsAfter} ts=${(/* @__PURE__ */ new Date()).toISOString()}
 `;
   try {
     mkdirSync9(dirname13(audit.logFile), { recursive: true, mode: 448 });
@@ -22184,8 +22328,8 @@ function appendUsersAuditLine(audit, fields) {
     );
   }
 }
-function logUsersAudit(audit, fields) {
-  appendUsersAuditLine(audit, fields);
+function logUsersAudit(audit, fields2) {
+  appendUsersAuditLine(audit, fields2);
 }
 function logLine(input, result) {
   const userIdShort = input.userId.slice(0, 8);
@@ -22204,7 +22348,7 @@ function writeAdminEntry(input) {
   try {
     let users = [];
     if (existsSync31(input.usersFile)) {
-      const raw = readFileSync35(input.usersFile, "utf-8").trim();
+      const raw = readFileSync36(input.usersFile, "utf-8").trim();
       if (raw) {
         const parsed = JSON.parse(raw);
         if (!Array.isArray(parsed)) {
@@ -22246,11 +22390,11 @@ function writeAdminEntry(input) {
     return result;
   }
   try {
-    const accountJsonPath = join44(input.accountDir, "account.json");
+    const accountJsonPath = join45(input.accountDir, "account.json");
     if (!existsSync31(accountJsonPath)) {
       throw new Error(`account.json not found at ${accountJsonPath}`);
     }
-    const config = JSON.parse(readFileSync35(accountJsonPath, "utf-8"));
+    const config = JSON.parse(readFileSync36(accountJsonPath, "utf-8"));
     const admins = config.admins ?? [];
     if (admins.some((a) => a.userId === input.userId)) {
       result.accountJsonResult = "noop";
@@ -22272,7 +22416,7 @@ function computeAdminStoreDivergence(input) {
   const usersUserIds = /* @__PURE__ */ new Set();
   if (existsSync31(input.usersFile)) {
     try {
-      const raw = readFileSync35(input.usersFile, "utf-8").trim();
+      const raw = readFileSync36(input.usersFile, "utf-8").trim();
       if (raw) {
         const users = JSON.parse(raw);
         for (const u of users) {
@@ -22287,24 +22431,24 @@ function computeAdminStoreDivergence(input) {
   if (existsSync31(input.accountsDir)) {
     let entries2;
     try {
-      entries2 = readdirSync21(input.accountsDir);
+      entries2 = readdirSync22(input.accountsDir);
     } catch (err) {
       result.errors.push({ source: input.accountsDir, detail: err instanceof Error ? err.message : String(err) });
       return result;
     }
     for (const entry3 of entries2) {
       if (entry3.startsWith(".")) continue;
-      const accountDir = join44(input.accountsDir, entry3);
+      const accountDir = join45(input.accountsDir, entry3);
       try {
-        if (!statSync20(accountDir).isDirectory()) continue;
+        if (!statSync21(accountDir).isDirectory()) continue;
       } catch {
         continue;
       }
-      const accountJsonPath = join44(accountDir, "account.json");
+      const accountJsonPath = join45(accountDir, "account.json");
       if (!existsSync31(accountJsonPath)) continue;
       let admins = [];
       try {
-        const config = JSON.parse(readFileSync35(accountJsonPath, "utf-8"));
+        const config = JSON.parse(readFileSync36(accountJsonPath, "utf-8"));
         admins = config.admins ?? [];
       } catch (err) {
         result.errors.push({ source: accountJsonPath, detail: err instanceof Error ? err.message : String(err) });
@@ -22353,7 +22497,7 @@ function hashPin2(pin) {
 }
 function readUsersFile2() {
   if (!existsSync32(USERS_FILE)) return null;
-  const raw = readFileSync36(USERS_FILE, "utf-8").trim();
+  const raw = readFileSync37(USERS_FILE, "utf-8").trim();
   if (!raw) return [];
   return JSON.parse(raw);
 }
@@ -22484,7 +22628,7 @@ app13.post("/claude-auth", async (c) => {
   ensureLogDir();
   appendFileSync4(logPath("claude-auth"), `==== attempt ${attemptId} ${(/* @__PURE__ */ new Date()).toISOString()} ====
 `);
-  const claudeAuthLogFd = openSync8(logPath("claude-auth"), "a");
+  const claudeAuthLogFd = openSync9(logPath("claude-auth"), "a");
   const onClaudeOutput = (chunk) => writeSync(claudeAuthLogFd, chunk);
   if (process.platform === "darwin") {
     vncLog("claude-auth", { action: "start", transport: "native", platform: "darwin" });
@@ -22501,7 +22645,7 @@ app13.post("/claude-auth", async (c) => {
     claudeProc2.stdout?.on("data", onClaudeOutput);
     claudeProc2.stderr?.on("data", onClaudeOutput);
     claudeProc2.once("close", () => {
-      closeSync8(claudeAuthLogFd);
+      closeSync9(claudeAuthLogFd);
       const writebackResult = bridgeKeychainToFile({
         platform: process.platform,
         before: darwinCredsBefore,
@@ -22514,7 +22658,7 @@ app13.post("/claude-auth", async (c) => {
       });
       persistKeychainService(
         writebackResult,
-        (service) => writeFileSync17(join45(dirname14(CLAUDE_CREDENTIALS_FILE), ".keychain-service"), service, { mode: 384 }),
+        (service) => writeFileSync17(join46(dirname14(CLAUDE_CREDENTIALS_FILE), ".keychain-service"), service, { mode: 384 }),
         (line) => console.log(line)
       );
       if (pendingAuthLogin?.child === claudeProc2) pendingAuthLogin = null;
@@ -22539,7 +22683,7 @@ app13.post("/claude-auth", async (c) => {
   claudeProc.stdout?.on("data", onClaudeOutput);
   claudeProc.stderr?.on("data", onClaudeOutput);
   claudeProc.once("close", () => {
-    closeSync8(claudeAuthLogFd);
+    closeSync9(claudeAuthLogFd);
     if (pendingAuthLogin?.child === claudeProc) pendingAuthLogin = null;
   });
   await waitForAuthPage(2e4);
@@ -22604,7 +22748,7 @@ app13.post("/set-pin", async (c) => {
     let installOwner = null;
     if (existsSync32(INSTALL_OWNER_FILE)) {
       try {
-        const raw = readFileSync36(INSTALL_OWNER_FILE, "utf-8").trim();
+        const raw = readFileSync37(INSTALL_OWNER_FILE, "utf-8").trim();
         if (raw.length > 0) installOwner = raw;
       } catch (err) {
         console.error(`[set-pin] install-owner-read-failed path=${INSTALL_OWNER_FILE} error=${err instanceof Error ? err.message : String(err)}`);
@@ -22752,7 +22896,7 @@ app13.put("/set-pin", requireAdminSession, async (c) => {
     let installOwner = null;
     if (existsSync32(INSTALL_OWNER_FILE)) {
       try {
-        const raw = readFileSync36(INSTALL_OWNER_FILE, "utf-8").trim();
+        const raw = readFileSync37(INSTALL_OWNER_FILE, "utf-8").trim();
         if (raw.length > 0) installOwner = raw;
       } catch (err) {
         console.error(`[set-pin] install-owner-read-failed path=${INSTALL_OWNER_FILE} error=${err instanceof Error ? err.message : String(err)}`);
@@ -23209,9 +23353,9 @@ app14.post("/probe", async (c) => {
 var field_default = app14;
 
 // server/routes/client-error.ts
-import { appendFileSync as appendFileSync5, existsSync as existsSync33, renameSync as renameSync8, statSync as statSync21 } from "fs";
-import { join as join46 } from "path";
-var CLIENT_ERRORS_LOG = join46(LOG_DIR, "client-errors.log");
+import { appendFileSync as appendFileSync5, existsSync as existsSync33, renameSync as renameSync8, statSync as statSync22 } from "fs";
+import { join as join47 } from "path";
+var CLIENT_ERRORS_LOG = join47(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
 var MAX_BODY_SIZE = 8 * 1024;
 var MAX_STACK_LEN = 2e3;
@@ -23269,7 +23413,7 @@ function stackHead(stack) {
 function rotateIfNeeded() {
   try {
     if (!existsSync33(CLIENT_ERRORS_LOG)) return;
-    const stats = statSync21(CLIENT_ERRORS_LOG);
+    const stats = statSync22(CLIENT_ERRORS_LOG);
     if (stats.size < MAX_LOG_SIZE) return;
     renameSync8(CLIENT_ERRORS_LOG, CLIENT_ERRORS_LOG + ".1");
   } catch (err) {
@@ -23625,17 +23769,17 @@ app17.get("/", requireAdminSession, async (c) => {
 var accounts_default = app17;
 
 // server/routes/admin/logs.ts
-import { existsSync as existsSync35, readdirSync as readdirSync22, readFileSync as readFileSync37, statSync as statSync22 } from "fs";
+import { existsSync as existsSync35, readdirSync as readdirSync23, readFileSync as readFileSync38, statSync as statSync23 } from "fs";
 import { resolve as resolve26, basename as basename13 } from "path";
 
 // app/lib/logs-read-resolve.ts
 import { existsSync as existsSync34 } from "fs";
-import { join as join47 } from "path";
+import { join as join48 } from "path";
 function resolveSessionLogPaths(filename, logDirs) {
   const tried = [filename];
   const hits = [];
   for (const dir of logDirs) {
-    const fullPath = join47(dir, filename);
+    const fullPath = join48(dir, filename);
     if (existsSync34(fullPath)) {
       hits.push({ path: fullPath, dir });
     }
@@ -23661,8 +23805,8 @@ app18.get("/", async (c) => {
       const filePath = resolve26(dir, safe);
       searched.push(filePath);
       try {
-        const buffer = readFileSync37(filePath);
-        const onDiskBytes = statSync22(filePath).size;
+        const buffer = readFileSync38(filePath);
+        const onDiskBytes = statSync23(filePath).size;
         const headers = {
           "Content-Type": "text/plain; charset=utf-8",
           "Content-Length": String(buffer.byteLength)
@@ -23726,8 +23870,8 @@ app18.get("/", async (c) => {
       console.info(`[admin/logs] resolved cacheKey=${cacheKeySlice} sessionId=${sessionIdSlice} via=${primaryId === cacheKey ? "cacheKey" : primaryId === sessionKeyFromConv ? "reverse-lookup" : "sessionId-fallback"}`);
       try {
         const filename = basename13(hit.path);
-        const buffer = readFileSync37(hit.path);
-        const onDiskBytes = statSync22(hit.path).size;
+        const buffer = readFileSync38(hit.path);
+        const onDiskBytes = statSync23(hit.path).size;
         const headers = {
           "Content-Type": "text/plain; charset=utf-8",
           "Content-Length": String(buffer.byteLength)
@@ -23764,18 +23908,18 @@ app18.get("/", async (c) => {
     if (!existsSync35(dir)) continue;
     let files;
     try {
-      files = readdirSync22(dir).filter((f) => f.endsWith(".log"));
+      files = readdirSync23(dir).filter((f) => f.endsWith(".log"));
     } catch (err) {
       const reason = err instanceof Error ? err.message : String(err);
       console.warn(`[admin/logs] readdir-fail dir=${dir} reason=${reason}`);
       continue;
     }
-    files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync22(resolve26(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
+    files.filter((f) => !seen.has(f)).map((f) => ({ name: f, mtime: statSync23(resolve26(dir, f)).mtimeMs })).sort((a, b) => b.mtime - a.mtime).forEach(({ name }) => {
       seen.add(name);
       try {
-        const content = readFileSync37(resolve26(dir, name));
-        const tail = content.length > TAIL_BYTES ? content.subarray(content.length - TAIL_BYTES).toString("utf-8") : content.toString("utf-8");
-        logs[name] = tail.trim() || "(empty)";
+        const content = readFileSync38(resolve26(dir, name));
+        const tail2 = content.length > TAIL_BYTES ? content.subarray(content.length - TAIL_BYTES).toString("utf-8") : content.toString("utf-8");
+        logs[name] = tail2.trim() || "(empty)";
       } catch (err) {
         const reason = err instanceof Error ? err.message : String(err);
         console.debug(`[admin/logs] read-fail name=${name} reason=${reason}`);
@@ -23895,7 +24039,7 @@ var attachment_default = app20;
 
 // server/routes/admin/session-upload.ts
 import { readFile as readFile8 } from "fs/promises";
-import { existsSync as existsSync37, statSync as statSync23 } from "fs";
+import { existsSync as existsSync37, statSync as statSync24 } from "fs";
 var app21 = new Hono();
 app21.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
@@ -23916,7 +24060,7 @@ app21.get("/", requireAdminSession, async (c) => {
     return c.json({ error: "Not found" }, 404);
   }
   const resolution = resolveClaudeUploadsPath(`${sessionId}/${file}`);
-  if (!resolution.ok || !existsSync37(resolution.absolute) || !statSync23(resolution.absolute).isFile()) {
+  if (!resolution.ok || !existsSync37(resolution.absolute) || !statSync24(resolution.absolute).isFile()) {
     console.log(`[session-upload] op=miss session=${short2} file=${file} status=404 reason=absent`);
     return c.json({ error: "Not found" }, 404);
   }
@@ -23938,13 +24082,13 @@ var session_upload_default = app21;
 
 // server/routes/admin/agents.ts
 import { resolve as resolve28 } from "path";
-import { readdirSync as readdirSync24, readFileSync as readFileSync39, existsSync as existsSync39, rmSync as rmSync5, renameSync as renameSync9, mkdirSync as mkdirSync10, writeFileSync as writeFileSync18, chmodSync } from "fs";
+import { readdirSync as readdirSync25, readFileSync as readFileSync40, existsSync as existsSync39, rmSync as rmSync5, renameSync as renameSync9, mkdirSync as mkdirSync10, writeFileSync as writeFileSync18, chmodSync } from "fs";
 import { execFileSync as execFileSync6 } from "child_process";
 
 // ../services/claude-session-manager/src/tool-surface.ts
-import { readFileSync as readFileSync38, readdirSync as readdirSync23, statSync as statSync24, existsSync as existsSync38 } from "fs";
+import { readFileSync as readFileSync39, readdirSync as readdirSync24, statSync as statSync25, existsSync as existsSync38 } from "fs";
 import { createHash as createHash5 } from "crypto";
-import { join as join48 } from "path";
+import { join as join49 } from "path";
 
 // ../services/claude-session-manager/src/canonical-tool-names.ts
 function canonicalToolName(plugin, tool) {
@@ -24197,15 +24341,15 @@ function loadToolSurface(pluginsRoots) {
   const riskByTool = /* @__PURE__ */ new Map();
   const manifestPaths = /* @__PURE__ */ new Map();
   const loadOne = (pluginsRoot, plugin) => {
-    const pluginDir = join48(pluginsRoot, plugin);
+    const pluginDir = join49(pluginsRoot, plugin);
     try {
-      if (!statSync24(pluginDir).isDirectory()) return;
+      if (!statSync25(pluginDir).isDirectory()) return;
     } catch {
       return;
     }
-    const manifestPath = join48(pluginDir, "PLUGIN.md");
+    const manifestPath = join49(pluginDir, "PLUGIN.md");
     if (!existsSync38(manifestPath)) return;
-    const raw = readFileSync38(manifestPath, "utf-8");
+    const raw = readFileSync39(manifestPath, "utf-8");
     const frontmatter = extractFrontmatter(raw, plugin);
     const tools = parseToolsBlock(frontmatter, plugin);
     if (tools.length === 0) return;
@@ -24224,7 +24368,7 @@ function loadToolSurface(pluginsRoots) {
           `${plugin}: mcpServers has entry but manifestPaths is missing \u2014 invariant violated, both maps must be written together`
         );
       }
-      const priorSha = createHash5("sha256").update(readFileSync38(priorPath)).digest("hex").slice(0, 8);
+      const priorSha = createHash5("sha256").update(readFileSync39(priorPath)).digest("hex").slice(0, 8);
       const newSha = createHash5("sha256").update(raw).digest("hex").slice(0, 8);
       throw new ToolSurfaceError(
         "mcp-plugin-duplicate",
@@ -24247,15 +24391,15 @@ function loadToolSurface(pluginsRoots) {
     }
   };
   for (const root of roots) {
-    const entries2 = readdirSync23(root).sort();
+    const entries2 = readdirSync24(root).sort();
     for (const plugin of entries2) {
-      const pluginDir = join48(root, plugin);
+      const pluginDir = join49(root, plugin);
       loadOne(root, plugin);
-      const subRoot = join48(pluginDir, "plugins");
+      const subRoot = join49(pluginDir, "plugins");
       let subEntries;
       try {
-        if (!statSync24(subRoot).isDirectory()) continue;
-        subEntries = readdirSync23(subRoot).sort();
+        if (!statSync25(subRoot).isDirectory()) continue;
+        subEntries = readdirSync24(subRoot).sort();
       } catch {
         continue;
       }
@@ -24387,7 +24531,7 @@ var SLUG_UNSAFE = (s) => s.includes("/") || s.includes("..") || s.includes("\\")
 function subdirs(dir) {
   if (!existsSync39(dir)) return [];
   try {
-    return readdirSync24(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+    return readdirSync25(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
     return [];
   }
@@ -24419,7 +24563,7 @@ function loadRiskSurface() {
 function readDisabledStoreStrict(accountDir) {
   const p = resolve28(accountDir, DISABLED_STORE);
   if (!existsSync39(p)) return /* @__PURE__ */ new Set();
-  const parsed = JSON.parse(readFileSync39(p, "utf-8"));
+  const parsed = JSON.parse(readFileSync40(p, "utf-8"));
   if (!Array.isArray(parsed.disabled)) throw new Error("disabled is not an array");
   return new Set(parsed.disabled.filter((x) => typeof x === "string"));
 }
@@ -24439,7 +24583,7 @@ function authoredAgentFiles(accountDir) {
     const dir = resolve28(pluginsDir, plugin, "agents");
     if (!existsSync39(dir)) continue;
     try {
-      for (const entry3 of readdirSync24(dir)) {
+      for (const entry3 of readdirSync25(dir)) {
         if (!entry3.endsWith(".md")) continue;
         const path = resolve28(dir, entry3);
         const paths = byName.get(entry3);
@@ -24460,7 +24604,7 @@ function shippedSourceDirs(accountDir) {
   ];
 }
 function readRowFields(path) {
-  const { fm } = splitFrontmatter(readFileSync39(path, "utf-8"));
+  const { fm } = splitFrontmatter(readFileSync40(path, "utf-8"));
   return {
     name: fm.name ?? "",
     description: fm.description ?? "",
@@ -24493,9 +24637,9 @@ function compareToAuthored(candidatePath, authoredPaths, filename) {
       anyUnreadable = true;
       continue;
     }
-    const fields = divergentFields(candidate, authored);
-    if (fields.length === 0) return { verdict: "matched" };
-    firstDivergence ??= { authoredPath: path, fields };
+    const fields2 = divergentFields(candidate, authored);
+    if (fields2.length === 0) return { verdict: "matched" };
+    firstDivergence ??= { authoredPath: path, fields: fields2 };
   }
   if (firstDivergence) return { verdict: "divergent", ...firstDivergence };
   if (anyUnreadable) return { verdict: "unreadable" };
@@ -24513,7 +24657,7 @@ function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed, author
   for (const dir of dirs) {
     if (!existsSync39(dir)) continue;
     try {
-      for (const entry3 of readdirSync24(dir)) if (entry3.endsWith(".md")) names.add(entry3);
+      for (const entry3 of readdirSync25(dir)) if (entry3.endsWith(".md")) names.add(entry3);
     } catch (err) {
       console.error(`[admin/agents] op=list-shipped read-failed dir=${dir} error="${err}"`);
     }
@@ -24541,7 +24685,7 @@ function listShipped(accountDir, riskByTool, disabled, riskSurfaceFailed, author
       }
     }
     try {
-      const { fm } = splitFrontmatter(readFileSync39(resolve28(source, filename), "utf-8"));
+      const { fm } = splitFrontmatter(readFileSync40(resolve28(source, filename), "utf-8"));
       if (!fm.name) {
         shippedSkipped++;
         console.error(`[admin/agents] op=list-shipped-skip file=${filename} reason=no-name`);
@@ -24603,14 +24747,14 @@ function listSpecialists(accountDir, riskByTool, riskSurfaceFailed) {
     if (!existsSync39(agentsDirP)) continue;
     let entries2;
     try {
-      entries2 = readdirSync24(agentsDirP, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
+      entries2 = readdirSync25(agentsDirP, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name));
     } catch {
       continue;
     }
     for (const entry3 of entries2) {
       if (!entry3.isFile() || !entry3.name.endsWith(".md")) continue;
       try {
-        const { fm } = splitFrontmatter(readFileSync39(resolve28(agentsDirP, entry3.name), "utf-8"));
+        const { fm } = splitFrontmatter(readFileSync40(resolve28(agentsDirP, entry3.name), "utf-8"));
         if (!fm.name) {
           specialistsSkipped++;
           console.error(`[admin/agents] op=list-specialist-skip plugin=${plugin} file=${entry3.name}`);
@@ -24672,14 +24816,14 @@ app22.get("/", requireAdminSession, (c) => {
   const agentsDir = resolve28(account.accountDir, "agents");
   if (existsSync39(agentsDir)) {
     try {
-      const entries2 = readdirSync24(agentsDir, { withFileTypes: true });
+      const entries2 = readdirSync25(agentsDir, { withFileTypes: true });
       for (const entry3 of entries2.sort((a, b) => a.name.localeCompare(b.name))) {
         if (!entry3.isDirectory()) continue;
         if (entry3.name === "admin") continue;
         const configPath3 = resolve28(agentsDir, entry3.name, "config.json");
         if (!existsSync39(configPath3)) continue;
         try {
-          const config = JSON.parse(readFileSync39(configPath3, "utf-8"));
+          const config = JSON.parse(readFileSync40(configPath3, "utf-8"));
           agents.push({
             slug: entry3.name,
             displayName: config.displayName ?? entry3.name,
@@ -24761,7 +24905,7 @@ app22.get("/:slug", requireAdminSession, (c) => {
     const dirs = shippedSourceDirs(account.accountDir);
     const source = dirs.find((d) => existsSync39(resolve28(d, `${slug}.md`)));
     if (!source) return c.json({ error: "Agent not found" }, 404);
-    const { fm, body } = splitFrontmatter(readFileSync39(resolve28(source, `${slug}.md`), "utf-8"));
+    const { fm, body } = splitFrontmatter(readFileSync40(resolve28(source, `${slug}.md`), "utf-8"));
     const { riskByTool, failed: failed2 } = loadRiskSurface();
     const tools = parseToolsLine(fm.tools);
     const r = classify(tools, riskByTool, failed2 !== null);
@@ -24793,7 +24937,7 @@ app22.get("/:slug", requireAdminSession, (c) => {
     if (SLUG_UNSAFE(pluginParam)) return c.json({ error: "Invalid plugin" }, 400);
     const file = resolve28(account.accountDir, "plugins", pluginParam, "agents", `${slug}.md`);
     if (!existsSync39(file)) return c.json({ error: "Agent not found" }, 404);
-    const { fm, body } = splitFrontmatter(readFileSync39(file, "utf-8"));
+    const { fm, body } = splitFrontmatter(readFileSync40(file, "utf-8"));
     const skills = subdirs(resolve28(account.accountDir, "plugins", pluginParam, "skills"));
     const { riskByTool, failed: failed2 } = loadRiskSurface();
     const tools = parseToolsLine(fm.tools);
@@ -24826,7 +24970,7 @@ app22.get("/:slug", requireAdminSession, (c) => {
   if (!existsSync39(configPath3)) return c.json({ error: "Agent not found" }, 404);
   let config;
   try {
-    config = JSON.parse(readFileSync39(configPath3, "utf-8"));
+    config = JSON.parse(readFileSync40(configPath3, "utf-8"));
   } catch {
     console.error(`[admin/agents] op=detail slug=${slug} error="config.json parse failed"`);
     return c.json({ error: "Agent config unreadable" }, 500);
@@ -24837,7 +24981,7 @@ app22.get("/:slug", requireAdminSession, (c) => {
     const p = resolve28(agentDir, file);
     try {
       if (existsSync39(p)) {
-        docs[key2] = readFileSync39(p, "utf-8");
+        docs[key2] = readFileSync40(p, "utf-8");
         present[key2] = true;
       } else {
         docs[key2] = "";
@@ -24899,9 +25043,9 @@ function reconcileAuthoredRoutingLine(accountDir, accountId, op, source) {
   const agentsMd = resolve28(accountDir, "agents", "admin", "AGENTS.md");
   if (!existsSync39(agentsMd) || !existsSync39(source)) return false;
   try {
-    const { fm } = splitFrontmatter(readFileSync39(source, "utf-8"));
+    const { fm } = splitFrontmatter(readFileSync40(source, "utf-8"));
     if (!fm.name) return false;
-    const lines = readFileSync39(agentsMd, "utf-8").split("\n");
+    const lines = readFileSync40(agentsMd, "utf-8").split("\n");
     const prefix = `- **specialists:${fm.name}**:`;
     const without = lines.filter((l) => !l.startsWith(prefix));
     const next = op === "disable" ? without : [...without, `${prefix} ${fm.description ?? ""}`.trimEnd()];
@@ -25479,21 +25623,21 @@ app23.post("/:id/resume", async (c) => {
         if (bridge.reason === "conversation-not-found") {
           return c.json({ error: "Conversation not found" }, 404);
         }
-        const tail = cacheKey.slice(0, 8);
-        console.error(`[session] middleware-reject status=401 code=session-not-registered reason="cookie-bridge-rejected:${bridge.reason}" path=${c.req.path} cacheKey=${tail}\u2026`);
+        const tail2 = cacheKey.slice(0, 8);
+        console.error(`[session] middleware-reject status=401 code=session-not-registered reason="cookie-bridge-rejected:${bridge.reason}" path=${c.req.path} cacheKey=${tail2}\u2026`);
         return c.json({ error: "Invalid or expired admin session", code: "session-not-registered" }, 401);
       }
       bridged = true;
       result = validateSession(cacheKey, "admin", signedSessionToken);
       if (!result.ok) {
-        const tail = cacheKey.slice(0, 8);
-        console.error(`[session] middleware-reject status=401 code=session-not-registered reason="post-bridge re-validate failed" path=${c.req.path} cacheKey=${tail}\u2026`);
+        const tail2 = cacheKey.slice(0, 8);
+        console.error(`[session] middleware-reject status=401 code=session-not-registered reason="post-bridge re-validate failed" path=${c.req.path} cacheKey=${tail2}\u2026`);
         return c.json({ error: "Invalid or expired admin session", code: "session-not-registered" }, 401);
       }
     } else {
-      const tail = cacheKey.slice(0, 8);
+      const tail2 = cacheKey.slice(0, 8);
       const wireCode = result.reason === "agent-type-mismatch" ? "session-not-registered" : result.reason;
-      console.error(`[session] middleware-reject status=401 code=${wireCode} reason="invalid or expired admin session" path=${c.req.path} cacheKey=${tail}\u2026`);
+      console.error(`[session] middleware-reject status=401 code=${wireCode} reason="invalid or expired admin session" path=${c.req.path} cacheKey=${tail2}\u2026`);
       return c.json({ error: "Invalid or expired admin session", code: wireCode }, 401);
     }
   }
@@ -25759,8 +25903,8 @@ app23.put("/:id/label", requireAdminSession, async (c) => {
 var sessions_default = app23;
 
 // app/lib/claude-agent/spawn-context.ts
-import { existsSync as existsSync41, readFileSync as readFileSync40, readdirSync as readdirSync25, statSync as statSync25 } from "fs";
-import { dirname as dirname15, resolve as resolve29, join as join49 } from "path";
+import { existsSync as existsSync41, readFileSync as readFileSync41, readdirSync as readdirSync26, statSync as statSync26 } from "fs";
+import { dirname as dirname15, resolve as resolve29, join as join50 } from "path";
 async function resolveOwnerProfileBlock(accountId, userId) {
   if (!userId) return { ok: false, reason: "missing-user-id" };
   try {
@@ -25801,14 +25945,14 @@ function frontmatterField(manifest, field2) {
 function extractPluginToolDescriptions(pluginDir) {
   const out = /* @__PURE__ */ new Map();
   const candidates = [
-    join49(pluginDir, "mcp/dist/index.js"),
-    join49(pluginDir, "mcp/src/index.ts")
+    join50(pluginDir, "mcp/dist/index.js"),
+    join50(pluginDir, "mcp/src/index.ts")
   ];
   let raw = null;
   for (const path of candidates) {
     if (!existsSync41(path)) continue;
     try {
-      raw = readFileSync40(path, "utf-8");
+      raw = readFileSync41(path, "utf-8");
       break;
     } catch {
     }
@@ -25859,24 +26003,24 @@ function listPluginDirs(accountPluginsDir) {
   const out = /* @__PURE__ */ new Map();
   const platformPlugins = resolve29(PLATFORM_ROOT, "plugins");
   if (existsSync41(platformPlugins)) {
-    for (const name of readdirSync25(platformPlugins)) {
-      const dir = join49(platformPlugins, name);
+    for (const name of readdirSync26(platformPlugins)) {
+      const dir = join50(platformPlugins, name);
       try {
-        if (statSync25(dir).isDirectory()) out.set(name, dir);
+        if (statSync26(dir).isDirectory()) out.set(name, dir);
       } catch {
       }
     }
   }
   const premiumRoot = resolve29(dirname15(PLATFORM_ROOT), "premium-plugins");
   if (existsSync41(premiumRoot)) {
-    for (const bundle of readdirSync25(premiumRoot)) {
-      const bundlePlugins = join49(premiumRoot, bundle, "plugins");
+    for (const bundle of readdirSync26(premiumRoot)) {
+      const bundlePlugins = join50(premiumRoot, bundle, "plugins");
       if (!existsSync41(bundlePlugins)) continue;
       try {
-        for (const name of readdirSync25(bundlePlugins)) {
-          const dir = join49(bundlePlugins, name);
+        for (const name of readdirSync26(bundlePlugins)) {
+          const dir = join50(bundlePlugins, name);
           try {
-            if (statSync25(dir).isDirectory()) out.set(name, dir);
+            if (statSync26(dir).isDirectory()) out.set(name, dir);
           } catch {
           }
         }
@@ -25886,11 +26030,11 @@ function listPluginDirs(accountPluginsDir) {
   }
   if (accountPluginsDir && existsSync41(accountPluginsDir)) {
     try {
-      for (const name of readdirSync25(accountPluginsDir)) {
+      for (const name of readdirSync26(accountPluginsDir)) {
         if (out.has(name)) continue;
-        const dir = join49(accountPluginsDir, name);
+        const dir = join50(accountPluginsDir, name);
         try {
-          if (statSync25(dir).isDirectory()) out.set(name, dir);
+          if (statSync26(dir).isDirectory()) out.set(name, dir);
         } catch {
         }
       }
@@ -25905,9 +26049,9 @@ function accountPluginsDirFor(accountId) {
 function listAccountPluginNames(accountPluginsDir) {
   if (!existsSync41(accountPluginsDir)) return [];
   try {
-    return readdirSync25(accountPluginsDir).filter((name) => {
+    return readdirSync26(accountPluginsDir).filter((name) => {
       try {
-        return statSync25(join49(accountPluginsDir, name)).isDirectory();
+        return statSync26(join50(accountPluginsDir, name)).isDirectory();
       } catch {
         return false;
       }
@@ -25920,7 +26064,7 @@ function readEnabledPlugins(accountId) {
   const accountFile = resolve29(PLATFORM_ROOT, "..", "data/accounts", accountId, "account.json");
   if (!existsSync41(accountFile)) return /* @__PURE__ */ new Set();
   try {
-    const parsed = JSON.parse(readFileSync40(accountFile, "utf-8"));
+    const parsed = JSON.parse(readFileSync41(accountFile, "utf-8"));
     return new Set(
       Array.isArray(parsed.enabledPlugins) ? parsed.enabledPlugins.filter((p) => typeof p === "string") : []
     );
@@ -25932,7 +26076,7 @@ function readFrontmatter(path) {
   if (!existsSync41(path)) return null;
   let raw;
   try {
-    raw = readFileSync40(path, "utf-8");
+    raw = readFileSync41(path, "utf-8");
   } catch {
     return null;
   }
@@ -25950,7 +26094,7 @@ function computeActivePlugins(accountId) {
   for (const name of emitNames) {
     const dir = pluginDirs.get(name);
     if (!dir) continue;
-    const fm = readFrontmatter(join49(dir, "PLUGIN.md"));
+    const fm = readFrontmatter(join50(dir, "PLUGIN.md"));
     if (!fm) continue;
     const description = frontmatterField(`---
 ${fm}
@@ -25967,7 +26111,7 @@ ${fm}
       `plugin-manifest-tool-coverage plugin=${name} tools=${tools.length} with-desc=${withDesc}`
     );
     if (toolNames.length > 0 && descMap.size === 0) {
-      const hasSource = existsSync41(join49(dir, "mcp/dist/index.js")) || existsSync41(join49(dir, "mcp/src/index.ts"));
+      const hasSource = existsSync41(join50(dir, "mcp/dist/index.js")) || existsSync41(join50(dir, "mcp/src/index.ts"));
       if (hasSource) {
         console.warn(
           `[spawn-context] WARN plugin=${name} mcp source present but tool-description regex matched zero entries \u2014 SDK upgrade may have changed the registration shape`
@@ -25977,7 +26121,7 @@ ${fm}
     const skillPaths = parseSkillPathsFromFrontmatter(fm);
     const skills = [];
     for (const relPath of skillPaths) {
-      const skillPath = join49(dir, relPath);
+      const skillPath = join50(dir, relPath);
       const skillFm = readFrontmatter(skillPath);
       if (!skillFm) continue;
       const skillName = frontmatterField(`---
@@ -25997,7 +26141,7 @@ function computeSpecialistDomains(accountId) {
   if (!existsSync41(specialistsDir)) return [];
   let entries2;
   try {
-    entries2 = readdirSync25(specialistsDir);
+    entries2 = readdirSync26(specialistsDir);
   } catch {
     return [];
   }
@@ -26021,7 +26165,7 @@ function computeSpecialistDomains(accountId) {
   const out = [];
   for (const file of entries2.sort()) {
     if (!file.endsWith(".md")) continue;
-    const fm = readFrontmatter(join49(specialistsDir, file));
+    const fm = readFrontmatter(join50(specialistsDir, file));
     if (!fm) continue;
     const wrapped = `---
 ${fm}
@@ -26043,7 +26187,7 @@ function computeDormantPlugins(accountId) {
   if (!existsSync41(accountFile)) return [];
   let enabled;
   try {
-    const raw = readFileSync40(accountFile, "utf-8");
+    const raw = readFileSync41(accountFile, "utf-8");
     const parsed = JSON.parse(raw);
     enabled = new Set(
       Array.isArray(parsed.enabledPlugins) ? parsed.enabledPlugins.filter((p) => typeof p === "string") : []
@@ -26058,7 +26202,7 @@ function computeDormantPlugins(accountId) {
   if (!existsSync41(pluginsDir)) return [];
   let entries2;
   try {
-    entries2 = readdirSync25(pluginsDir);
+    entries2 = readdirSync26(pluginsDir);
   } catch {
     return [];
   }
@@ -26069,7 +26213,7 @@ function computeDormantPlugins(accountId) {
     if (!existsSync41(manifestPath)) continue;
     let manifest;
     try {
-      manifest = readFileSync40(manifestPath, "utf-8");
+      manifest = readFileSync41(manifestPath, "utf-8");
     } catch {
       continue;
     }
@@ -26083,13 +26227,13 @@ function computeDormantPlugins(accountId) {
 }
 
 // server/routes/admin/claude-sessions.ts
-import { existsSync as existsSync42, readFileSync as readFileSync41 } from "fs";
+import { existsSync as existsSync42, readFileSync as readFileSync42 } from "fs";
 import { resolve as resolve30 } from "path";
 function readTunnelState(brandConfigDir) {
   const statePath = `${process.env.HOME ?? ""}/${brandConfigDir}/cloudflared/tunnel.state`;
   if (!existsSync42(statePath)) return null;
   try {
-    const parsed = JSON.parse(readFileSync41(statePath, "utf-8"));
+    const parsed = JSON.parse(readFileSync42(statePath, "utf-8"));
     const tunnelId = typeof parsed.tunnelId === "string" ? parsed.tunnelId : null;
     const tunnelName = typeof parsed.tunnelName === "string" ? parsed.tunnelName : null;
     const domain = typeof parsed.domain === "string" ? parsed.domain : null;
@@ -26103,7 +26247,7 @@ function resolveTunnelUrl() {
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT ?? process.env.PLATFORM_ROOT ?? resolve30(process.cwd(), "..");
   let brand;
   try {
-    brand = JSON.parse(readFileSync41(resolve30(platformRoot5, "config", "brand.json"), "utf-8"));
+    brand = JSON.parse(readFileSync42(resolve30(platformRoot5, "config", "brand.json"), "utf-8"));
   } catch {
     return null;
   }
@@ -26304,7 +26448,7 @@ app25.post("/", async (c) => {
 var log_ingest_default = app25;
 
 // server/routes/admin/session-blocked.ts
-import { join as join50 } from "path";
+import { join as join51 } from "path";
 var TAG44 = "[blocked-tool-notify]";
 function isLoopbackAddr4(addr) {
   return addr === "127.0.0.1" || addr === "::1" || addr === "::ffff:127.0.0.1";
@@ -26351,7 +26495,7 @@ app26.post("/", async (c) => {
   if (!tool) return c.json({ error: "tool-required" }, 400);
   const text = blockedNotificationText({ sessionId, agentId, tool, blockedForMs });
   const projectDir = findSessionProjectDir(sessionId);
-  const meta = projectDir ? readSidecarMeta(join50(projectDir, `${sessionId}.meta.json`)) : { role: null, channel: null, senderId: null, accountId: null };
+  const meta = projectDir ? readSidecarMeta(join51(projectDir, `${sessionId}.meta.json`)) : { role: null, channel: null, senderId: null, accountId: null };
   const account = validateAccountId2(meta.accountId ?? "");
   if (!account) {
     console.error(
@@ -26550,7 +26694,7 @@ import { createReadStream as createReadStream2, createWriteStream as createWrite
 import { readdir as readdir4, readFile as readFile10, stat as stat6, mkdir as mkdir2, unlink as unlink3, rename as rename3, rmdir } from "fs/promises";
 import { realpathSync as realpathSync7 } from "fs";
 import { randomUUID as randomUUID7 } from "crypto";
-import { basename as basename15, dirname as dirname16, join as join52, relative as relative6, resolve as resolve32, sep as sep9 } from "path";
+import { basename as basename15, dirname as dirname16, join as join53, relative as relative6, resolve as resolve32, sep as sep9 } from "path";
 import { Readable as Readable2 } from "stream";
 
 // ../lib/graph-trash/src/index.ts
@@ -26868,7 +27012,7 @@ async function cascadeDeleteDocument(params) {
 
 // app/lib/file-index.ts
 import * as fsp from "fs/promises";
-import { resolve as resolve31, relative as relative5, join as join51, basename as basename14, extname, sep as sep8 } from "path";
+import { resolve as resolve31, relative as relative5, join as join52, basename as basename14, extname, sep as sep8 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 import { execFile } from "child_process";
 import { promisify } from "util";
@@ -26950,7 +27094,7 @@ async function extractPdf(absolute) {
   return stdout.trim();
 }
 async function ocrPdf(absolute) {
-  const outPdf = join51(tmpdir3(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
+  const outPdf = join52(tmpdir3(), `file-index-ocr-${process.pid}-${Date.now()}.pdf`);
   try {
     await execFileAsync(
       "ocrmypdf",
@@ -27012,7 +27156,7 @@ async function readDisplayName(absolute) {
   const stem = dot === -1 ? base : base.slice(0, dot);
   if (base === `${stem}.meta.json`) return null;
   try {
-    const raw = await fsp.readFile(join51(dir, `${stem}.meta.json`), "utf-8");
+    const raw = await fsp.readFile(join52(dir, `${stem}.meta.json`), "utf-8");
     const meta = JSON.parse(raw);
     const dn = meta.displayName ?? meta.filename;
     return typeof dn === "string" && dn.length > 0 ? dn : null;
@@ -27033,7 +27177,7 @@ async function walkSubtree(root, dataRoot, out) {
   for (const entry3 of entries2) {
     if (entry3.isSymbolicLink()) continue;
     if (entry3.isDirectory() && entry3.name === ".uploads-tmp") continue;
-    const abs = join51(root, entry3.name);
+    const abs = join52(root, entry3.name);
     if (entry3.isDirectory()) {
       const sub = await walkSubtree(abs, dataRoot, out);
       if (!sub.clean) clean = false;
@@ -27406,7 +27550,7 @@ var UPLOAD_TMP_DIR = ".uploads-tmp";
 var UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 async function readMeta2(absDir, baseName) {
   try {
-    const raw = await readFile10(join52(absDir, `${baseName}.meta.json`), "utf8");
+    const raw = await readFile10(join53(absDir, `${baseName}.meta.json`), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed?.filename === "string") {
       return { filename: parsed.filename, mimeType: typeof parsed.mimeType === "string" ? parsed.mimeType : void 0 };
@@ -27461,7 +27605,7 @@ async function servableFilesIn(dirAbs, uuid) {
 }
 async function enrich(absolute, entry3, accountNames) {
   if (entry3.kind === "directory" && UUID_RE3.test(entry3.name)) {
-    const dirAbs = join52(absolute, entry3.name);
+    const dirAbs = join53(absolute, entry3.name);
     const meta = await readMeta2(dirAbs, entry3.name);
     if (meta?.filename) {
       const servable = await servableFilesIn(dirAbs, entry3.name);
@@ -27470,7 +27614,7 @@ async function enrich(absolute, entry3, accountNames) {
         let size = null;
         let modifiedAt = entry3.modifiedAt;
         try {
-          const st = await stat6(join52(dirAbs, innerName));
+          const st = await stat6(join53(dirAbs, innerName));
           size = st.size;
           modifiedAt = st.mtime.toISOString();
         } catch {
@@ -27682,7 +27826,7 @@ app28.get("/", requireAdminSession, async (c) => {
       const childRel = relPath === "" || relPath === "." ? name : `${relPath}/${name}`;
       const protectedEntry = isProtectedFromDeletion(childRel).protected;
       try {
-        const entryPath = join52(absolute, name);
+        const entryPath = join53(absolute, name);
         const s = await stat6(entryPath);
         entries2.push({
           name,
@@ -27711,7 +27855,7 @@ app28.get("/", requireAdminSession, async (c) => {
     const displayPath = buildDisplayPath(relPath, accountNames);
     if (groupReq || isAccountRoot(relPath)) {
       const acctId = relPath.split("/")[1] ?? accountId;
-      const schemaMd = await readFile10(join52(absolute, "SCHEMA.md"), "utf8").catch(() => null);
+      const schemaMd = await readFile10(join53(absolute, "SCHEMA.md"), "utf8").catch(() => null);
       const groups = classifyAccountRoot(schemaMd, entries2.map((e) => e.name));
       console.error(
         `[data-schema] op=classify account=${acctId} status=${groups.parsed ? "ok" : "parse-failed"} reason=${groups.reason} entries=${entries2.length} home=${groups.home.join(",") || "none"} system=${groups.system.length} unknown=${groups.unknown.join(",") || "none"}`
@@ -27749,7 +27893,7 @@ app28.get("/", requireAdminSession, async (c) => {
       for (const name of homeDirs) {
         const base = byName.get(name);
         try {
-          const dirents = await readdir4(join52(absolute, name), { withFileTypes: true });
+          const dirents = await readdir4(join53(absolute, name), { withFileTypes: true });
           const visible = dirents.filter((d) => !d.name.startsWith("."));
           visible.sort((a, b) => {
             const ad = a.isDirectory() ? 0 : 1;
@@ -27814,7 +27958,7 @@ app28.get("/download", requireAdminSession, async (c) => {
       console.error(`[data] op=scratchpad-no-session sessionId="${sessionId.slice(0, 8)}\u2026"`);
       return c.json({ error: "Not found" }, 404);
     }
-    const meta = readSidecarMeta(join52(projectDir, `${sessionId}.meta.json`));
+    const meta = readSidecarMeta(join53(projectDir, `${sessionId}.meta.json`));
     if (!meta.accountId || meta.accountId !== accountId) {
       console.error(`[data] account-scope-blocked root="scratchpad" sessionId="${sessionId.slice(0, 8)}\u2026" account=${accountId.slice(0, 8)}\u2026`);
       return c.json({ error: "Not found" }, 404);
@@ -27908,7 +28052,7 @@ async function* walkRegularFiles(dirAbsolute) {
   const dirents = await readdir4(dirAbsolute, { withFileTypes: true });
   for (const d of dirents) {
     if (d.isSymbolicLink()) continue;
-    const child = join52(dirAbsolute, d.name);
+    const child = join53(dirAbsolute, d.name);
     if (d.isDirectory()) {
       yield* walkRegularFiles(child);
       continue;
@@ -28014,7 +28158,7 @@ async function resolveUploadTarget(c, accountId, uid) {
   const base = resolveSharedOrOwnAccountWrite(rawDir, accountId, "POST /api/admin/files/upload");
   if (!base.ok) return { ok: false, status: base.status, error: base.error };
   const relDir = relpath ? dirname16(relpath) : ".";
-  const destRel = relDir === "." ? base.relative : join52(base.relative, relDir);
+  const destRel = relDir === "." ? base.relative : join53(base.relative, relDir);
   if ((0, import_dist.isSharedPath)(destRel)) {
     const gate2 = gateSharedWrite(base.absolute, destRel, accountId, "POST /api/admin/files/upload");
     if (!gate2.ok) return { ok: false, status: gate2.status, error: gate2.error };
@@ -28400,7 +28544,7 @@ app28.delete("/", requireAdminSession, async (c) => {
     const dot = base.lastIndexOf(".");
     const stem = dot === -1 ? base : base.slice(0, dot);
     const containerDir = dirname16(absolute);
-    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join52(containerDir, `${stem}.meta.json`) : null;
+    const sidecarPath = UUID_RE3.test(stem) && base !== `${stem}.meta.json` ? join53(containerDir, `${stem}.meta.json`) : null;
     const isAttachmentContainer = UUID_RE3.test(stem) && basename15(containerDir) === stem;
     await unlink3(absolute);
     if (sidecarPath) {
@@ -28410,7 +28554,7 @@ app28.delete("/", requireAdminSession, async (c) => {
       }
     }
     if (isAttachmentContainer) {
-      await unlink3(join52(containerDir, `${stem}${EXTRACTED_TEXT_SUFFIX}`)).catch(() => {
+      await unlink3(join53(containerDir, `${stem}${EXTRACTED_TEXT_SUFFIX}`)).catch(() => {
       });
       await rmdir(containerDir).catch(() => {
       });
@@ -29525,8 +29669,8 @@ function isHiddenByDefault(label) {
 
 // server/lib/top-level-labels.ts
 var import_dist14 = __toESM(require_dist9(), 1);
-import { readdirSync as readdirSync26, readFileSync as readFileSync42 } from "fs";
-import { join as join53, resolve as resolve33 } from "path";
+import { readdirSync as readdirSync27, readFileSync as readFileSync43 } from "fs";
+import { join as join54, resolve as resolve33 } from "path";
 var STATIC_TOP_LEVEL_LABELS = Object.freeze(
   /* @__PURE__ */ new Set([
     // Base-schema infra (schema-base.md has no top-level section).
@@ -29630,7 +29774,7 @@ function parseTopLevelLabels(content) {
 }
 function resolveReferencesDir() {
   if (process.env.MAXY_PLATFORM_ROOT) {
-    return join53(process.env.MAXY_PLATFORM_ROOT, "plugins", "memory", "references");
+    return join54(process.env.MAXY_PLATFORM_ROOT, "plugins", "memory", "references");
   }
   return resolve33(import.meta.dirname, "../../../plugins/memory/references");
 }
@@ -29638,9 +29782,9 @@ function parseTableTopLevelLabels(referencesDir) {
   const labels = /* @__PURE__ */ new Set();
   const contributingFiles = [];
   try {
-    const fileNames = readdirSync26(referencesDir).filter((f) => f.startsWith("schema-") && f.endsWith(".md")).sort();
+    const fileNames = readdirSync27(referencesDir).filter((f) => f.startsWith("schema-") && f.endsWith(".md")).sort();
     for (const fileName of fileNames) {
-      const content = readFileSync42(join53(referencesDir, fileName), "utf-8");
+      const content = readFileSync43(join54(referencesDir, fileName), "utf-8");
       const parsed = parseTopLevelLabels(content);
       if (parsed.length > 0) contributingFiles.push(fileName);
       for (const label of parsed) labels.add(label);
@@ -30978,19 +31122,19 @@ function isWithin(target, root) {
 var sidebar_artefacts_default = app35;
 
 // server/channel-session-override.ts
-import { readFileSync as readFileSync43, writeFileSync as writeFileSync19, renameSync as renameSync10 } from "fs";
-import { join as join54 } from "path";
+import { readFileSync as readFileSync44, writeFileSync as writeFileSync19, renameSync as renameSync10 } from "fs";
+import { join as join55 } from "path";
 var FILE2 = "channel-session-override.json";
 var UUID3 = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 function channelOverridePath(accountDir) {
-  return join54(accountDir, FILE2);
+  return join55(accountDir, FILE2);
 }
 function senderKey(channel, senderId) {
   return `${channel}:${senderId}`;
 }
 function readRaw2(accountDir) {
   try {
-    return JSON.parse(readFileSync43(channelOverridePath(accountDir), "utf8"));
+    return JSON.parse(readFileSync44(channelOverridePath(accountDir), "utf8"));
   } catch {
     return null;
   }
@@ -31428,24 +31572,24 @@ var session_rc_spawn_default = app41;
 import { randomUUID as randomUUID9 } from "crypto";
 
 // server/wa-descriptor.ts
-import { resolve as resolve35, join as join55 } from "path";
+import { resolve as resolve35, join as join56 } from "path";
 function waGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function waServerPath() {
-  return process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve35(process.env.MAXY_PLATFORM_ROOT ?? join55(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
+  return process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve35(process.env.MAXY_PLATFORM_ROOT ?? join56(__dirname, ".."), "services/whatsapp-channel/dist/server.js");
 }
 function waChannelDescriptor(senderId) {
   return { senderId, gatewayUrl: waGatewayUrl(), serverPath: waServerPath() };
 }
 
 // server/telegram-descriptor.ts
-import { resolve as resolve36, join as join56 } from "path";
+import { resolve as resolve36, join as join57 } from "path";
 function telegramGatewayUrl() {
   return `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`;
 }
 function telegramServerPath() {
-  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve36(process.env.MAXY_PLATFORM_ROOT ?? join56(__dirname, ".."), "services/telegram-channel/dist/server.js");
+  return process.env.MAXY_TELEGRAM_CHANNEL_SERVER_PATH ?? resolve36(process.env.MAXY_PLATFORM_ROOT ?? join57(__dirname, ".."), "services/telegram-channel/dist/server.js");
 }
 function telegramChannelDescriptor(senderId) {
   return { senderId, gatewayUrl: telegramGatewayUrl(), serverPath: telegramServerPath() };
@@ -31616,12 +31760,12 @@ function parseCpuStat(blob) {
   const line = blob.split("\n", 1)[0] ?? "";
   const parts = line.trim().split(/\s+/);
   if (parts[0] !== "cpu") throw new Error(`unexpected /proc/stat header: ${parts[0] ?? "(empty)"}`);
-  const fields = parts.slice(1).map((n) => Number.parseInt(n, 10));
-  if (fields.length < 4 || fields.some((n) => !Number.isFinite(n))) {
+  const fields2 = parts.slice(1).map((n) => Number.parseInt(n, 10));
+  if (fields2.length < 4 || fields2.some((n) => !Number.isFinite(n))) {
     throw new Error("malformed /proc/stat cpu line");
   }
-  const idle = fields[3] + (fields[4] ?? 0);
-  const total = fields.reduce((a, b) => a + b, 0);
+  const idle = fields2[3] + (fields2[4] ?? 0);
+  const total = fields2.reduce((a, b) => a + b, 0);
   return { idle, total };
 }
 function cpuPctFromSamples(a, b) {
@@ -31731,14 +31875,14 @@ app43.get("/", async (c) => {
 var system_stats_default = app43;
 
 // server/routes/admin/health.ts
-import { existsSync as existsSync45, readFileSync as readFileSync44 } from "fs";
-import { resolve as resolve37, join as join57 } from "path";
+import { existsSync as existsSync45, readFileSync as readFileSync45 } from "fs";
+import { resolve as resolve37, join as join58 } from "path";
 var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT ?? resolve37(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join57(PLATFORM_ROOT4, "config", "brand.json");
+var brandJsonPath = join58(PLATFORM_ROOT4, "config", "brand.json");
 if (existsSync45(brandJsonPath)) {
   try {
-    const brand = JSON.parse(readFileSync44(brandJsonPath, "utf-8"));
+    const brand = JSON.parse(readFileSync45(brandJsonPath, "utf-8"));
     if (brand.hostname) brandHostname = brand.hostname;
   } catch {
   }
@@ -31748,7 +31892,7 @@ var PROCESS_STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
 var PROBE_TIMEOUT_MS = 1e3;
 function readVersion() {
   if (!existsSync45(VERSION_FILE)) return "unknown";
-  return readFileSync44(VERSION_FILE, "utf-8").trim() || "unknown";
+  return readFileSync45(VERSION_FILE, "utf-8").trim() || "unknown";
 }
 async function probeConversationDb() {
   let session;
@@ -31803,7 +31947,7 @@ import { randomUUID as randomUUID10 } from "crypto";
 
 // ../lib/account-ingest-token/src/index.ts
 import { randomBytes as randomBytes2, timingSafeEqual as timingSafeEqual2 } from "crypto";
-import { existsSync as existsSync46, readdirSync as readdirSync27, readFileSync as readFileSync45, writeFileSync as writeFileSync20 } from "fs";
+import { existsSync as existsSync46, readdirSync as readdirSync28, readFileSync as readFileSync46, writeFileSync as writeFileSync20 } from "fs";
 import { resolve as resolve38 } from "path";
 var UUID_RE4 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var INGEST_TOKEN_FIELD = "ingestToken";
@@ -31815,7 +31959,7 @@ function readConfig2(accountsDir, accountId) {
   const path = configPath2(accountsDir, accountId);
   if (!existsSync46(path)) return null;
   try {
-    const parsed = JSON.parse(readFileSync45(path, "utf-8"));
+    const parsed = JSON.parse(readFileSync46(path, "utf-8"));
     return parsed !== null && typeof parsed === "object" ? parsed : null;
   } catch {
     return null;
@@ -31829,7 +31973,7 @@ function listAccountIdsOnDisk(accountsDir) {
   if (!existsSync46(accountsDir)) return [];
   let entries2;
   try {
-    entries2 = readdirSync27(accountsDir);
+    entries2 = readdirSync28(accountsDir);
   } catch {
     return [];
   }
@@ -32356,9 +32500,9 @@ function renderWrite(write) {
     const val = String(v).slice(0, 200);
     kv.push(`${k}=${val}`);
   }
-  const tail = [parts.join(" "), kv.join("; ")].filter((s) => s.length > 0).join(" \u2014 ");
-  if (tail.length === 0) return null;
-  return `- ${label}: ${tail}`;
+  const tail2 = [parts.join(" "), kv.join("; ")].filter((s) => s.length > 0).join(" \u2014 ");
+  if (tail2.length === 0) return null;
+  return `- ${label}: ${tail2}`;
 }
 function formatPreviousContext(writes) {
   if (writes.length === 0) return null;
@@ -32668,7 +32812,7 @@ var browser_default = app51;
 // server/routes/admin/calendar.ts
 import { existsSync as existsSync47 } from "fs";
 import { randomUUID as randomUUID11 } from "crypto";
-import { join as join59 } from "path";
+import { join as join60 } from "path";
 
 // server/lib/calendar-ics.ts
 var CRLF = "\r\n";
@@ -32768,8 +32912,8 @@ function countVEvents(ics) {
 }
 
 // server/lib/calendar-availability.ts
-import { readFileSync as readFileSync46 } from "fs";
-import { join as join58 } from "path";
+import { readFileSync as readFileSync47 } from "fs";
+import { join as join59 } from "path";
 var AVAILABILITY_FILENAME = "calendar-availability.json";
 var REQUIRED_KEYS = [
   "timezone",
@@ -32778,10 +32922,10 @@ var REQUIRED_KEYS = [
   "weekly"
 ];
 function readAvailabilityConfig(accountDir) {
-  const path = join58(accountDir, AVAILABILITY_FILENAME);
+  const path = join59(accountDir, AVAILABILITY_FILENAME);
   let raw;
   try {
-    raw = readFileSync46(path, "utf-8");
+    raw = readFileSync47(path, "utf-8");
   } catch {
     throw new Error(`availability not configured: ${path} not found`);
   }
@@ -33167,16 +33311,16 @@ app52.patch("/meetings/:id", requireAdminSession, async (c) => {
   }
   const id = c.req.param("id");
   const body = await safeJson(c) ?? {};
-  const fields = EDITABLE_FIELDS.filter((f) => f in body);
-  if (fields.length === 0) {
+  const fields2 = EDITABLE_FIELDS.filter((f) => f in body);
+  if (fields2.length === 0) {
     return c.json({ error: "No editable field supplied (title, startsAt, endsAt, location, description, privateNote)" }, 400);
   }
-  const setClauses = fields.map(
+  const setClauses = fields2.map(
     (f) => f === "startsAt" || f === "endsAt" ? `m.${f} = datetime($${f})` : `m.${f} = $${f}`
   );
   setClauses.push("m.updatedAt = datetime()");
   const params = { accountId, id };
-  for (const f of fields) params[f] = body[f];
+  for (const f of fields2) params[f] = body[f];
   const session = getSession();
   try {
     const res = await session.run(
@@ -33187,12 +33331,12 @@ app52.patch("/meetings/:id", requireAdminSession, async (c) => {
       params
     );
     if (res.records.length === 0) {
-      console.warn(`[calendar-edit] account=${accountId.slice(0, 8)} uid=absent fields=${fields.join(",")} found=0`);
+      console.warn(`[calendar-edit] account=${accountId.slice(0, 8)} uid=absent fields=${fields2.join(",")} found=0`);
       return c.json({ error: "Meeting not found for this account" }, 404);
     }
     const r = res.records[0];
     const uid = r.get("uid");
-    console.log(`[calendar-edit] account=${accountId.slice(0, 8)} uid=${uid ?? "absent"} fields=${fields.join(",")}`);
+    console.log(`[calendar-edit] account=${accountId.slice(0, 8)} uid=${uid ?? "absent"} fields=${fields2.join(",")}`);
     return c.json({ meeting: mapMeeting(r) });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
@@ -33336,7 +33480,7 @@ app52.get("/booking-link", requireAdminSession, (c) => {
   }
   const id83 = account.accountId.slice(0, 8);
   try {
-    if (!existsSync47(join59(account.accountDir, AVAILABILITY_FILENAME))) {
+    if (!existsSync47(join60(account.accountDir, AVAILABILITY_FILENAME))) {
       console.log(`[calendar] op=booking-link accountId=${id83} bookingDomain=none source=availability-config`);
       return c.json({ bookingDomain: null });
     }
@@ -33355,8 +33499,8 @@ app52.get("/booking-link", requireAdminSession, (c) => {
 var calendar_default = app52;
 
 // server/routes/admin/data-portal.ts
-import { existsSync as existsSync48, readFileSync as readFileSync47 } from "fs";
-import { join as join60 } from "path";
+import { existsSync as existsSync48, readFileSync as readFileSync48 } from "fs";
+import { join as join61 } from "path";
 var app53 = new Hono();
 var PORTAL_FILENAME = "data-portal.json";
 app53.get("/portal-link", requireAdminSession, (c) => {
@@ -33367,12 +33511,12 @@ app53.get("/portal-link", requireAdminSession, (c) => {
   }
   const id83 = account.accountId.slice(0, 8);
   try {
-    const path = join60(account.accountDir, PORTAL_FILENAME);
+    const path = join61(account.accountDir, PORTAL_FILENAME);
     if (!existsSync48(path)) {
       console.log(`[data-portal] op=portal-link accountId=${id83} portalDomain=none source=data-portal-config`);
       return c.json({ portalDomain: null });
     }
-    const cfg = JSON.parse(readFileSync47(path, "utf-8"));
+    const cfg = JSON.parse(readFileSync48(path, "utf-8"));
     const portalDomain = typeof cfg.portalDomain === "string" && cfg.portalDomain.trim() ? cfg.portalDomain.trim() : null;
     console.log(`[data-portal] op=portal-link accountId=${id83} portalDomain=${portalDomain ?? "none"} source=data-portal-config`);
     return c.json({ portalDomain });
@@ -33385,8 +33529,8 @@ app53.get("/portal-link", requireAdminSession, (c) => {
 var data_portal_default = app53;
 
 // server/routes/admin/dispatch-planner.ts
-import { existsSync as existsSync49, readFileSync as readFileSync48 } from "fs";
-import { join as join61 } from "path";
+import { existsSync as existsSync49, readFileSync as readFileSync49 } from "fs";
+import { join as join62 } from "path";
 var app54 = new Hono();
 var PORTAL_FILENAME2 = "data-portal.json";
 app54.get("/planner-link", requireAdminSession, (c) => {
@@ -33399,15 +33543,15 @@ app54.get("/planner-link", requireAdminSession, (c) => {
   }
   const id83 = account.accountId.slice(0, 8);
   try {
-    const portalPath = join61(account.accountDir, PORTAL_FILENAME2);
-    const dispatchConfigured = existsSync49(join61(account.accountDir, "dispatch", "config.json"));
+    const portalPath = join62(account.accountDir, PORTAL_FILENAME2);
+    const dispatchConfigured = existsSync49(join62(account.accountDir, "dispatch", "config.json"));
     if (!existsSync49(portalPath) || !dispatchConfigured) {
       console.log(
         `[dispatch-planner] op=planner-link accountId=${id83} plannerUrl=none portal=${existsSync49(portalPath)} dispatch=${dispatchConfigured}`
       );
       return c.json({ plannerUrl: null });
     }
-    const cfg = JSON.parse(readFileSync48(portalPath, "utf-8"));
+    const cfg = JSON.parse(readFileSync49(portalPath, "utf-8"));
     const domain = typeof cfg.portalDomain === "string" && cfg.portalDomain.trim() ? cfg.portalDomain.trim() : null;
     const plannerUrl = domain ? `https://${domain}/planner` : null;
     console.log(
@@ -33425,11 +33569,11 @@ var dispatch_planner_default = app54;
 // server/routes/admin/routines.ts
 import cronParser from "cron-parser";
 import { int as int2 } from "neo4j-driver";
-import { readFileSync as readFileSync50 } from "fs";
+import { readFileSync as readFileSync51 } from "fs";
 import { resolve as resolve40 } from "path";
 
 // ../lib/agent-dispatch-rule/src/index.ts
-import { readFileSync as readFileSync49 } from "fs";
+import { readFileSync as readFileSync50 } from "fs";
 import { resolve as resolve39 } from "path";
 function normalizeE1642(value) {
   let candidate = value.trim().replace(/[\s\-().]/g, "");
@@ -33447,7 +33591,7 @@ function phonesMatch2(a, b) {
 function readChannelAdmins(accountDir, channel) {
   let config = {};
   try {
-    config = JSON.parse(readFileSync49(resolve39(accountDir, "account.json"), "utf-8"));
+    config = JSON.parse(readFileSync50(resolve39(accountDir, "account.json"), "utf-8"));
   } catch {
     config = {};
   }
@@ -33554,23 +33698,39 @@ function listDispatchDestinations(input) {
   const byDestination = (a, b) => a.destination.localeCompare(b.destination);
   return [...managers.sort(byDestination), ...admins.sort(byDestination), ...telegram];
 }
-function isDispatchable(fields) {
-  if (fields.agentChannel && fields.agentDestination && fields.agentPrompt) return true;
-  return Boolean(fields.actionPlugin && fields.actionTool);
+function isDispatchable(fields2) {
+  if (fields2.agentChannel && fields2.agentDestination && fields2.agentPrompt) return true;
+  return Boolean(fields2.actionPlugin && fields2.actionTool);
 }
-function dispatchGapReason(fields) {
-  if (fields.agentChannel || fields.agentDestination || fields.agentPrompt) {
+function dispatchGapReason(fields2) {
+  if (fields2.agentChannel || fields2.agentDestination || fields2.agentPrompt) {
     const missing = [];
-    if (!fields.agentChannel) missing.push("channel");
-    if (!fields.agentDestination) missing.push("destination");
-    if (!fields.agentPrompt) missing.push("prompt");
+    if (!fields2.agentChannel) missing.push("channel");
+    if (!fields2.agentDestination) missing.push("destination");
+    if (!fields2.agentPrompt) missing.push("prompt");
     return `no-${missing.join("+")}`;
   }
-  if (fields.actionPlugin || fields.actionTool) {
-    return fields.actionTool ? "no-action-plugin" : "no-action-tool";
+  if (fields2.actionPlugin || fields2.actionTool) {
+    return fields2.actionTool ? "no-action-plugin" : "no-action-tool";
   }
   return "no-dispatch-configured";
 }
+function carrierVerdict(accountDir, botId, destination) {
+  let config = {};
+  try {
+    config = JSON.parse(readFileSync50(resolve39(accountDir, "account.json"), "utf-8"));
+  } catch {
+    return { ok: false, reason: "absent" };
+  }
+  const bots = Array.isArray(config.telegram?.bots) ? config.telegram.bots : [];
+  const entry3 = bots.find(
+    (raw) => raw && typeof raw === "object" && raw.id === botId
+  );
+  if (!entry3) return { ok: false, reason: "absent" };
+  if (entry3.role !== "admin") return { ok: false, reason: "not-admin" };
+  const users = Array.isArray(entry3.adminUsers) ? entry3.adminUsers.filter((u) => typeof u === "number") : [];
+  return users.includes(Number(destination)) ? { ok: true } : { ok: false, reason: "not-listed" };
+}
 
 // server/routes/admin/routines.ts
 var { parseExpression } = cronParser;
@@ -33615,7 +33775,7 @@ function gateWatermarkPath(eventId) {
 }
 function readGateLastCommitAt(eventId) {
   try {
-    const parsed = JSON.parse(readFileSync50(gateWatermarkPath(eventId), "utf-8"));
+    const parsed = JSON.parse(readFileSync51(gateWatermarkPath(eventId), "utf-8"));
     return typeof parsed?.lastCommitAt === "string" ? parsed.lastCommitAt : null;
   } catch {
     return null;
@@ -33725,9 +33885,9 @@ function describeDispatchGap(reason) {
     destination: "a destination",
     prompt: "an instruction"
   };
-  const fields = reason.startsWith("no-") ? reason.slice(3).split("+") : [];
-  if (fields.length > 0 && fields.every((f) => f in words)) {
-    const list = fields.map((f) => words[f]);
+  const fields2 = reason.startsWith("no-") ? reason.slice(3).split("+") : [];
+  if (fields2.length > 0 && fields2.every((f) => f in words)) {
+    const list = fields2.map((f) => words[f]);
     const joined = list.length === 1 ? list[0] : `${list.slice(0, -1).join(", ")} and ${list[list.length - 1]}`;
     return `This routine has no ${joined.replace(/^an? /, "")} set, so arming it would deliver nothing.`;
   }
@@ -34056,7 +34216,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
   const id83 = eventId.slice(0, 8);
   const setClauses = [];
   const params = { eventId, accountId };
-  const fields = [];
+  const fields2 = [];
   let nextRunLog = "unchanged";
   let bindingLog = "";
   const hasChannel = "agentChannel" in body;
@@ -34140,7 +34300,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
     setClauses.push("e.agentChannel = $agentChannel", "e.agentDestination = $agentDestination");
     params.agentChannel = channel;
     params.agentDestination = destination;
-    fields.push("agentChannel", "agentDestination");
+    fields2.push("agentChannel", "agentDestination");
     bindingLog = ` channel=${channel} destination=${destination.slice(-4)}`;
   }
   if (clearing) {
@@ -34153,13 +34313,13 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
       );
     }
     setClauses.push("e.agentChannel = null", "e.agentDestination = null");
-    fields.push("agentChannel", "agentDestination");
+    fields2.push("agentChannel", "agentDestination");
     bindingLog = " channel=none destination=none";
   }
   if (typeof body.agentPrompt === "string") {
     setClauses.push("e.agentPrompt = $agentPrompt");
     params.agentPrompt = body.agentPrompt;
-    fields.push("agentPrompt");
+    fields2.push("agentPrompt");
     setClauses.push("e.operatorEdited = $operatorEdited");
     params.operatorEdited = (/* @__PURE__ */ new Date()).toISOString();
   }
@@ -34176,7 +34336,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
     }
     setClauses.push("e.name = $name");
     params.name = nextName;
-    fields.push("name");
+    fields2.push("name");
     setClauses.push("e.operatorEdited = $operatorEdited");
     params.operatorEdited = (/* @__PURE__ */ new Date()).toISOString();
   }
@@ -34190,7 +34350,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
     nextDescription = typeof raw === "string" && raw.trim().length > 0 ? raw : null;
     setClauses.push("e.description = $description");
     params.description = nextDescription;
-    fields.push("description");
+    fields2.push("description");
     setClauses.push("e.operatorEdited = $operatorEdited");
     params.operatorEdited = (/* @__PURE__ */ new Date()).toISOString();
   }
@@ -34205,7 +34365,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
       params.embedding = embedding;
     } else {
       embedLog = " embed=failed";
-      console.error(`[admin:routines] op=patch id=${id83} fields=${fields.join("+")} embed=failed`);
+      console.error(`[admin:routines] op=patch id=${id83} fields=${fields2.join("+")} embed=failed`);
     }
   }
   if (typeof body.recurrence === "string") {
@@ -34215,7 +34375,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
       setClauses.push("e.recurrence = $recurrence", "e.nextRun = $nextRun");
       params.recurrence = body.recurrence;
       params.nextRun = nextRun;
-      fields.push("recurrence");
+      fields2.push("recurrence");
       nextRunLog = nextRun;
     } catch (err) {
       const reason = err instanceof Error ? err.message : String(err);
@@ -34241,7 +34401,7 @@ app55.patch("/:eventId", requireAdminSession, async (c) => {
       return c.json({ error: "Routine not found" }, 404);
     }
     const nameLog = nextName === null ? "" : ` name=len:${nextName.length} operatorEdited=stamped`;
-    console.log(`[admin:routines] op=patch id=${id83} fields=${fields.join("+")} outcome=ok nextRun=${nextRunLog} cron=${params.recurrence ?? "unchanged"}${bindingLog}${nameLog}${embedLog}`);
+    console.log(`[admin:routines] op=patch id=${id83} fields=${fields2.join("+")} outcome=ok nextRun=${nextRunLog} cron=${params.recurrence ?? "unchanged"}${bindingLog}${nameLog}${embedLog}`);
     return c.json({ routine: mapRoutine(res.records[0]) });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
@@ -34492,7 +34652,7 @@ app55.delete("/:eventId", requireAdminSession, async (c) => {
 var routines_default = app55;
 
 // server/routes/admin/skills.ts
-import { existsSync as existsSync50, readdirSync as readdirSync28, readFileSync as readFileSync51, rmSync as rmSync6 } from "fs";
+import { existsSync as existsSync50, readdirSync as readdirSync29, readFileSync as readFileSync52, rmSync as rmSync6 } from "fs";
 import { resolve as resolve41 } from "path";
 var app56 = new Hono();
 var NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
@@ -34518,7 +34678,7 @@ function stripQuotes(s) {
 function subdirs2(dir) {
   if (!existsSync50(dir)) return [];
   try {
-    return readdirSync28(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+    return readdirSync29(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
     return [];
   }
@@ -34541,9 +34701,9 @@ app56.get("/", requireAdminSession, async (c) => {
         const skillMd = resolve41(skillsDir, skill, "SKILL.md");
         if (!existsSync50(skillMd)) continue;
         try {
-          const { frontmatter } = splitSkillMd(readFileSync51(skillMd, "utf-8"));
+          const { frontmatter } = splitSkillMd(readFileSync52(skillMd, "utf-8"));
           const refsDir = resolve41(skillsDir, skill, "references");
-          const refCount = existsSync50(refsDir) ? readdirSync28(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).length : 0;
+          const refCount = existsSync50(refsDir) ? readdirSync29(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).length : 0;
           skills.push({ plugin, skill, description: frontmatter.description, refCount });
         } catch (err) {
           console.error(`[admin:skills] op=list-skip plugin=${plugin} skill=${skill} reason="${err instanceof Error ? err.message : String(err)}"`);
@@ -34571,9 +34731,9 @@ app56.get("/:plugin/:skill", requireAdminSession, async (c) => {
   console.log(`[admin:skills] op=get plugin=${plugin} skill=${skill} found=${found}`);
   if (!found) return c.json({ error: "Skill not found" }, 404);
   try {
-    const { frontmatter, body } = splitSkillMd(readFileSync51(skillMd, "utf-8"));
+    const { frontmatter, body } = splitSkillMd(readFileSync52(skillMd, "utf-8"));
     const refsDir = resolve41(skillDir, "references");
-    const references = existsSync50(refsDir) ? readdirSync28(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name).sort() : [];
+    const references = existsSync50(refsDir) ? readdirSync29(refsDir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => e.name).sort() : [];
     return c.json({ skill: { plugin, skill, frontmatter, body, references } });
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
@@ -34617,7 +34777,7 @@ app56.delete("/:plugin/:skill", requireAdminSession, async (c) => {
 var skills_default = app56;
 
 // server/routes/admin/tasks-list.ts
-import { basename as basename17, join as join62 } from "path";
+import { basename as basename17, join as join63 } from "path";
 
 // app/lib/time-entry-format.ts
 function secondsBetween(startIso, endIso) {
@@ -34793,7 +34953,7 @@ async function computeTaskList(accountId) {
       dangling = 0;
     } else if (cfg !== null) {
       try {
-        const walk = enumerateJsonlsWithSkips(join62(cfg, "projects"));
+        const walk = enumerateJsonlsWithSkips(join63(cfg, "projects"));
         if (walk.skipped > 0) {
           console.error(
             `${TAG51} op=session-dangling-census-incomplete account=${accountId} skipped=${walk.skipped} detail="a slug the walk could not read contributes no session ids, so its links cannot be judged"`
@@ -35205,12 +35365,12 @@ app62.post("/", requireAdminSession, async (c) => {
 var task_delete_default = app62;
 
 // app/lib/admin-roster.ts
-import { existsSync as existsSync51, readdirSync as readdirSync29, readFileSync as readFileSync52 } from "fs";
+import { existsSync as existsSync51, readdirSync as readdirSync30, readFileSync as readFileSync53 } from "fs";
 import { resolve as resolve42 } from "path";
 function readHouseAdminUserIds(accountsDir = ACCOUNTS_DIR) {
   let entries2;
   try {
-    entries2 = readdirSync29(accountsDir);
+    entries2 = readdirSync30(accountsDir);
   } catch {
     return [];
   }
@@ -35218,7 +35378,7 @@ function readHouseAdminUserIds(accountsDir = ACCOUNTS_DIR) {
     const cfgPath = resolve42(accountsDir, entry3, "account.json");
     if (!existsSync51(cfgPath)) continue;
     try {
-      const cfg = JSON.parse(readFileSync52(cfgPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync53(cfgPath, "utf-8"));
       if (cfg.role !== "house") continue;
       if (!Array.isArray(cfg.admins)) return [];
       return cfg.admins.map(
@@ -35633,7 +35793,7 @@ app67.get("/", requireAdminSession, async (c) => {
 var dispatch_destinations_default = app67;
 
 // server/routes/admin/activity.ts
-import { readdirSync as readdirSync30 } from "fs";
+import { readdirSync as readdirSync31 } from "fs";
 var app68 = new Hono();
 var TAG62 = "[activity]";
 function resolveHouseAccountId2(accounts) {
@@ -35649,7 +35809,7 @@ function requestToken() {
 var short = (id) => id ? id.slice(0, 8) : "unset";
 function countAccountDirsOnDisk() {
   try {
-    return readdirSync30(ACCOUNTS_DIR, { withFileTypes: true }).filter(
+    return readdirSync31(ACCOUNTS_DIR, { withFileTypes: true }).filter(
       (e) => e.isDirectory() && !e.name.startsWith(".")
     ).length;
   } catch {
@@ -36060,7 +36220,7 @@ app72.route("/request-magic-link", request_magic_link_default);
 var access_default = app72;
 
 // server/routes/sites.ts
-import { existsSync as existsSync52, readFileSync as readFileSync53, realpathSync as realpathSync8, statSync as statSync27 } from "fs";
+import { existsSync as existsSync52, readFileSync as readFileSync54, realpathSync as realpathSync8, statSync as statSync28 } from "fs";
 import { resolve as resolve45 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
@@ -36126,7 +36286,7 @@ app73.get("/:rel{.*}", (c) => {
   }
   let stat11;
   try {
-    stat11 = existsSync52(filePath) ? statSync27(filePath) : null;
+    stat11 = existsSync52(filePath) ? statSync28(filePath) : null;
   } catch {
     stat11 = null;
   }
@@ -36164,7 +36324,7 @@ app73.get("/:rel{.*}", (c) => {
   }
   let body;
   try {
-    body = readFileSync53(realPath);
+    body = readFileSync54(realPath);
   } catch (err) {
     const code = err?.code;
     if (code === "EISDIR") {
@@ -36200,7 +36360,7 @@ var sites_default = app73;
 
 // app/lib/visitor-token.ts
 import { createHmac as createHmac2, randomBytes as randomBytes3, timingSafeEqual as timingSafeEqual3 } from "crypto";
-import { mkdirSync as mkdirSync12, readFileSync as readFileSync54, writeFileSync as writeFileSync21 } from "fs";
+import { mkdirSync as mkdirSync12, readFileSync as readFileSync55, writeFileSync as writeFileSync21 } from "fs";
 import { dirname as dirname17 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
@@ -36209,7 +36369,7 @@ var cachedSecret = null;
 function getSecret() {
   if (cachedSecret) return cachedSecret;
   try {
-    const hex2 = readFileSync54(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+    const hex2 = readFileSync55(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
     if (hex2.length === SECRET_BYTES * 2) {
       cachedSecret = Buffer.from(hex2, "hex");
       return cachedSecret;
@@ -36223,7 +36383,7 @@ function getSecret() {
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
   }
-  const hex = readFileSync54(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+  const hex = readFileSync55(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
   cachedSecret = Buffer.from(hex, "hex");
   return cachedSecret;
 }
@@ -36276,8 +36436,8 @@ var VISITOR_COOKIE_NAME = "mxy_v";
 var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
-import { existsSync as existsSync53, readFileSync as readFileSync55 } from "fs";
-import { join as join63 } from "path";
+import { existsSync as existsSync53, readFileSync as readFileSync56 } from "fs";
+import { join as join64 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -36285,10 +36445,10 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot5 = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot5) return null;
-  const brandPath = join63(platformRoot5, "config", "brand.json");
+  const brandPath = join64(platformRoot5, "config", "brand.json");
   if (!existsSync53(brandPath)) return null;
   try {
-    cached2 = JSON.parse(readFileSync55(brandPath, "utf-8"));
+    cached2 = JSON.parse(readFileSync56(brandPath, "utf-8"));
     return cached2;
   } catch {
     return null;
@@ -37054,7 +37214,7 @@ var calendar_public_default = app78;
 // server/routes/portal-fetch.ts
 import { createReadStream as createReadStream3 } from "fs";
 import { stat as stat8, readFile as readFile12, realpath } from "fs/promises";
-import { join as join64, resolve as resolve47, sep as sep11 } from "path";
+import { join as join65, resolve as resolve47, sep as sep11 } from "path";
 import { Readable as Readable3 } from "stream";
 var app79 = new Hono();
 var TAG65 = "[portal-fetch]";
@@ -37127,7 +37287,7 @@ function isValidAccountId2(value) {
 }
 async function readExposeFolders2(accountDir) {
   try {
-    const cfg = JSON.parse(await readFile12(join64(accountDir, "data-portal.json"), "utf8"));
+    const cfg = JSON.parse(await readFile12(join65(accountDir, "data-portal.json"), "utf8"));
     return Array.isArray(cfg?.exposeFolders) ? cfg.exposeFolders.filter((f) => typeof f === "string") : [];
   } catch {
     return [];
@@ -37136,7 +37296,7 @@ async function readExposeFolders2(accountDir) {
 async function resolveFetchTarget(accountDir, relPath, ownerId) {
   let schemaText = null;
   try {
-    schemaText = await readFile12(join64(accountDir, "SCHEMA.md"), "utf8");
+    schemaText = await readFile12(join65(accountDir, "SCHEMA.md"), "utf8");
   } catch {
     schemaText = null;
   }
@@ -37306,8 +37466,8 @@ function startTimeEntryCensus(openSession, opts = {}) {
 }
 
 // app/lib/ledger-census.ts
-import { readdirSync as readdirSync31, readFileSync as readFileSync56, statSync as statSync28 } from "fs";
-import { join as join65 } from "path";
+import { readdirSync as readdirSync32, readFileSync as readFileSync57, statSync as statSync29 } from "fs";
+import { join as join66 } from "path";
 
 // ../lib/ledger-core/dist/reconcile.js
 var LEDGER_INDEX_NAMES = [
@@ -37355,16 +37515,16 @@ var DAY_MS = 864e5;
 function countWriteRejects24h(logDir, now) {
   let entries2;
   try {
-    entries2 = readdirSync31(logDir).filter((f) => f.startsWith("mcp-ledger-") && f.endsWith(".log"));
+    entries2 = readdirSync32(logDir).filter((f) => f.startsWith("mcp-ledger-") && f.endsWith(".log"));
   } catch {
     return 0;
   }
   let total = 0;
   for (const name of entries2) {
-    const path = join65(logDir, name);
+    const path = join66(logDir, name);
     try {
-      if (now - statSync28(path).mtimeMs > DAY_MS) continue;
-      for (const line of readFileSync56(path, "utf8").split("\n")) {
+      if (now - statSync29(path).mtimeMs > DAY_MS) continue;
+      for (const line of readFileSync57(path, "utf8").split("\n")) {
         if (line.includes("[graph-write] reject")) total += 1;
       }
     } catch {
@@ -37465,8 +37625,8 @@ function startLedgerCensus(openSession, opts = {}) {
 }
 
 // app/lib/dispatch-census.ts
-import { readFileSync as readFileSync57 } from "fs";
-import { join as join66 } from "path";
+import { readFileSync as readFileSync58 } from "fs";
+import { join as join67 } from "path";
 
 // ../lib/canonical-instant/src/index.ts
 var CANONICAL_INSTANT_PATTERN = "\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z";
@@ -37504,7 +37664,7 @@ function percentile(sortedAsc, p) {
 function auditConfigFile(accountDir) {
   let cfg;
   try {
-    cfg = JSON.parse(readFileSync57(join66(accountDir, "dispatch", "config.json"), "utf-8"));
+    cfg = JSON.parse(readFileSync58(join67(accountDir, "dispatch", "config.json"), "utf-8"));
   } catch {
     return null;
   }
@@ -37529,7 +37689,7 @@ function auditConfigFile(accountDir) {
 function terminalStatuses(accountDir) {
   try {
     const cfg = JSON.parse(
-      readFileSync57(join66(accountDir, "dispatch", "config.json"), "utf-8")
+      readFileSync58(join67(accountDir, "dispatch", "config.json"), "utf-8")
     );
     return {
       job: (cfg.statuses?.job ?? []).filter((s) => s.terminal).map((s) => s.name),
@@ -37959,8 +38119,8 @@ function startGraphHealthTimer() {
 }
 
 // app/lib/shared-folder-census.ts
-import { existsSync as existsSync55, statSync as statSync29, readdirSync as readdirSync32 } from "fs";
-import { join as join67 } from "path";
+import { existsSync as existsSync55, statSync as statSync30, readdirSync as readdirSync33 } from "fs";
+import { join as join68 } from "path";
 var import_dist17 = __toESM(require_dist(), 1);
 var TAG69 = "[shared-census]";
 var WIRED_SURFACES = 3;
@@ -37968,12 +38128,12 @@ function countFiles(dir) {
   let n = 0;
   let entries2;
   try {
-    entries2 = readdirSync32(dir, { withFileTypes: true });
+    entries2 = readdirSync33(dir, { withFileTypes: true });
   } catch {
     return 0;
   }
   for (const e of entries2) {
-    if (e.isDirectory()) n += countFiles(join67(dir, e.name));
+    if (e.isDirectory()) n += countFiles(join68(dir, e.name));
     else if (e.isFile()) n++;
   }
   return n;
@@ -37984,7 +38144,7 @@ function runSharedFolderCensus(dataRoot = DATA_ROOT) {
   let isDir = false;
   if (exists) {
     try {
-      isDir = statSync29(root).isDirectory();
+      isDir = statSync30(root).isDirectory();
     } catch {
       isDir = false;
     }
@@ -38022,9 +38182,9 @@ function startAccountsStateCensus() {
 }
 
 // app/lib/cred-refresh-census.ts
-import { readdirSync as readdirSync33, readFileSync as readFileSync58 } from "fs";
+import { readdirSync as readdirSync34, readFileSync as readFileSync59 } from "fs";
 import { homedir as homedir4 } from "os";
-import { join as join68 } from "path";
+import { join as join69 } from "path";
 var TAG71 = "[claude-auth]";
 function refreshTokenLength(raw) {
   let data;
@@ -38040,7 +38200,7 @@ function refreshTokenLength(raw) {
 function surveyBrandCredentials(home) {
   let entries2;
   try {
-    entries2 = readdirSync33(home);
+    entries2 = readdirSync34(home);
   } catch {
     return [];
   }
@@ -38049,7 +38209,7 @@ function surveyBrandCredentials(home) {
     if (!entry3.startsWith(".")) continue;
     let raw;
     try {
-      raw = readFileSync58(join68(home, entry3, ".claude", ".credentials.json"), "utf-8");
+      raw = readFileSync59(join69(home, entry3, ".claude", ".credentials.json"), "utf-8");
     } catch {
       continue;
     }
@@ -38311,7 +38471,7 @@ async function migrateUploads(opts = {}) {
 // app/lib/migrate-admin-webchat-sidecars.ts
 import { readdir as readdir7, readFile as readFile13, rename as rename5, writeFile as writeFile4, unlink as unlink4 } from "fs/promises";
 import { existsSync as existsSync56 } from "fs";
-import { join as join69 } from "path";
+import { join as join70 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
@@ -38356,7 +38516,7 @@ async function collectLiveSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join69(projectsRoot, slug.name);
+    const slugDir = join70(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir7(slugDir, { withFileTypes: true });
@@ -38365,9 +38525,9 @@ async function collectLiveSidecars(projectsRoot) {
     }
     for (const entry3 of entries2) {
       if (entry3.isFile() && SESSION_META_RE.test(entry3.name)) {
-        out.push(join69(slugDir, entry3.name));
+        out.push(join70(slugDir, entry3.name));
       } else if (entry3.isDirectory() && entry3.name === "subagents") {
-        const subDir = join69(slugDir, entry3.name);
+        const subDir = join70(slugDir, entry3.name);
         let subs;
         try {
           subs = await readdir7(subDir, { withFileTypes: true });
@@ -38375,7 +38535,7 @@ async function collectLiveSidecars(projectsRoot) {
           continue;
         }
         for (const s of subs) {
-          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join69(subDir, s.name));
+          if (s.isFile() && SESSION_META_RE.test(s.name)) out.push(join70(subDir, s.name));
         }
       }
     }
@@ -38387,7 +38547,7 @@ function shortId(path) {
   return base.slice(0, 8);
 }
 async function migrateAdminWebchatSidecars(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join69(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join70(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const usersFile = opts.usersFile ?? USERS_FILE;
   const accountId = opts.accountId ?? resolveAccount()?.accountId ?? null;
   const resolveName = opts.resolveName ?? defaultResolveName;
@@ -38464,7 +38624,7 @@ async function migrateAdminWebchatSidecars(opts = {}) {
 // app/lib/migrate-sidecar-account-ids.ts
 import { readdir as readdir8, readFile as readFile14, rename as rename6, writeFile as writeFile5, unlink as unlink5 } from "fs/promises";
 import { existsSync as existsSync57 } from "fs";
-import { join as join70 } from "path";
+import { join as join71 } from "path";
 var SESSION_META_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
 function projectSlugForCwd(cwd) {
   return cwd.replace(/\//g, "-");
@@ -38510,7 +38670,7 @@ async function collectSidecars(projectsRoot) {
   }
   for (const slug of slugs) {
     if (!slug.isDirectory()) continue;
-    const slugDir = join70(projectsRoot, slug.name);
+    const slugDir = join71(projectsRoot, slug.name);
     let entries2;
     try {
       entries2 = await readdir8(slugDir, { withFileTypes: true });
@@ -38519,9 +38679,9 @@ async function collectSidecars(projectsRoot) {
     }
     for (const entry3 of entries2) {
       if (entry3.isFile() && SESSION_META_RE2.test(entry3.name)) {
-        out.push({ path: join70(slugDir, entry3.name), slug: slug.name });
+        out.push({ path: join71(slugDir, entry3.name), slug: slug.name });
       } else if (entry3.isDirectory() && (entry3.name === "subagents" || entry3.name === "archive")) {
-        const subDir = join70(slugDir, entry3.name);
+        const subDir = join71(slugDir, entry3.name);
         let subs;
         try {
           subs = await readdir8(subDir, { withFileTypes: true });
@@ -38530,7 +38690,7 @@ async function collectSidecars(projectsRoot) {
         }
         for (const s of subs) {
           if (s.isFile() && SESSION_META_RE2.test(s.name)) {
-            out.push({ path: join70(subDir, s.name), slug: slug.name });
+            out.push({ path: join71(subDir, s.name), slug: slug.name });
           }
         }
       }
@@ -38539,7 +38699,7 @@ async function collectSidecars(projectsRoot) {
   return out;
 }
 async function migrateSidecarAccountIds(opts = {}) {
-  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join70(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
+  const projectsRoot = opts.projectsRoot ?? (process.env.CLAUDE_CONFIG_DIR ? join71(process.env.CLAUDE_CONFIG_DIR, "projects") : null) ?? "";
   const accounts = opts.accounts ?? listValidAccounts();
   const result = {
     scanned: 0,
@@ -40162,8 +40322,8 @@ function createWebchatChannelRoutes(deps) {
 }
 
 // app/lib/webchat/gateway/resolve-turn-answer.ts
-import { existsSync as existsSync58, openSync as openSync9, readSync as readSync8, closeSync as closeSync9, readdirSync as readdirSync34 } from "fs";
-import { join as join71 } from "path";
+import { existsSync as existsSync58, openSync as openSync10, readSync as readSync9, closeSync as closeSync10, readdirSync as readdirSync35 } from "fs";
+import { join as join72 } from "path";
 
 // app/lib/channel-delivery/outbound-guard.ts
 var INTERNAL_LEAK_PATTERNS = [
@@ -40205,13 +40365,13 @@ function resolveTurnAnswer(p) {
   if (!(length > 0)) return "";
   let text;
   try {
-    const fd = openSync9(path, "r");
+    const fd = openSync10(path, "r");
     try {
       const buf = Buffer.alloc(length);
-      readSync8(fd, buf, 0, length, p.segmentStart);
+      readSync9(fd, buf, 0, length, p.segmentStart);
       text = buf.toString("utf8");
     } finally {
-      closeSync9(fd);
+      closeSync10(fd);
     }
   } catch {
     return "";
@@ -40227,12 +40387,12 @@ function findJsonl(projectsRoot, sessionId) {
   if (!existsSync58(projectsRoot)) return null;
   let slugs;
   try {
-    slugs = readdirSync34(projectsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
+    slugs = readdirSync35(projectsRoot, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
   } catch {
     return null;
   }
   for (const slug of slugs) {
-    const live = join71(projectsRoot, slug, `${sessionId}.jsonl`);
+    const live = join72(projectsRoot, slug, `${sessionId}.jsonl`);
     if (existsSync58(live)) return live;
   }
   return null;
@@ -41614,21 +41774,21 @@ function refusalNoticeText(reason) {
 }
 async function sendRefusalNotice(input) {
   if (notified.has(input.doorId)) return;
-  const fields = `channel=${input.channel} sender=${input.sender} reason=${input.reason}`;
+  const fields2 = `channel=${input.channel} sender=${input.sender} reason=${input.reason}`;
   if (!input.send) {
-    console.error(`${TAG74} op=refusal-notice-failed ${fields} error=no-target`);
+    console.error(`${TAG74} op=refusal-notice-failed ${fields2} error=no-target`);
     return;
   }
   try {
     await input.send(guardOutbound(input.sender, refusalNoticeText(input.reason)));
   } catch (e) {
     console.error(
-      `${TAG74} op=refusal-notice-failed ${fields} error=${e instanceof Error ? e.message : String(e)}`
+      `${TAG74} op=refusal-notice-failed ${fields2} error=${e instanceof Error ? e.message : String(e)}`
     );
     return;
   }
   notified.add(input.doorId);
-  console.error(`${TAG74} op=refusal-notice ${fields} status=${input.status}`);
+  console.error(`${TAG74} op=refusal-notice ${fields2} status=${input.status}`);
 }
 function clearRefusalNotice(doorId) {
   notified.delete(doorId);
@@ -42635,7 +42795,7 @@ var sessions3 = /* @__PURE__ */ new Map();
 function entry2(sessionId) {
   let e = sessions3.get(sessionId);
   if (!e) {
-    e = { armed: 0, suppressed: 0, delivered: 0, persisted: 0, sent: 0, crossChat: 0 };
+    e = { armed: 0, suppressed: 0, delivered: 0 };
     sessions3.set(sessionId, e);
   }
   return e;
@@ -42650,59 +42810,23 @@ function noteCardDelivered(sessionId) {
   const e = sessions3.get(sessionId);
   if (e && e.armed > 0) e.delivered += 1;
 }
-function noteCardPersisted(sessionId) {
-  entry2(sessionId).persisted += 1;
-}
-function noteCardSent(sessionId) {
-  entry2(sessionId).sent += 1;
-}
-function noteCardCrossChat(sessionId) {
-  entry2(sessionId).crossChat += 1;
-}
 function cardCensusLines() {
   let armed3 = 0;
   let suppressed = 0;
   let delivered = 0;
-  let persisted = 0;
-  let sent = 0;
-  let crossChat = 0;
   for (const e of sessions3.values()) {
     armed3 += e.armed;
     suppressed += e.suppressed;
     delivered += e.delivered;
-    persisted += e.persisted;
-    sent += e.sent;
-    crossChat += e.crossChat;
   }
   const silent = Math.max(0, armed3 - suppressed - delivered);
   return [
-    `[telegram-card-suppression-census] sessions=${sessions3.size} armed=${armed3} suppressed=${suppressed} silent-turns=${silent} sent=${sent} persisted=${persisted} cross-chat=${crossChat}`
+    `[telegram-card-suppression-census] sessions=${sessions3.size} armed=${armed3} suppressed=${suppressed} silent-turns=${silent}`
   ];
 }
 
 // app/lib/telegram/gateway/native-file-follower.ts
 var TELEGRAM_CARD_TOOL = "mcp__telegram__telegram-card";
-var CARD_TOOL_NAMES = /* @__PURE__ */ new Set([
-  "mcp__telegram__telegram-card",
-  "mcp__plugin_telegram_telegram__telegram-card"
-]);
-var CARD_RESULT_RE = /card-result: outcome=(sent|edited|unchanged|none) messageId=(\d+|none)(?: botId=(-?\d+) chatId=(-?\d+))?/;
-function parseCardButtons(input) {
-  const rows = input?.buttons;
-  if (!Array.isArray(rows)) return [];
-  const out = [];
-  for (const row of rows) {
-    if (!Array.isArray(row)) continue;
-    for (const b of row) {
-      if (!b || typeof b !== "object") continue;
-      const text = b.text;
-      if (typeof text !== "string") continue;
-      const data = b.callbackData;
-      out.push({ text, data: typeof data === "string" ? data : null });
-    }
-  }
-  return out;
-}
 var CHAT_ACTION_REFRESH_MS = 4e3;
 function startTelegramNativeFileFollower(input) {
   const entry3 = {
@@ -42723,9 +42847,7 @@ function startTelegramNativeFileFollower(input) {
     // The chat id the document is addressed to (set per spawn from the inbound).
     replyTarget: input.chatId
   };
-  const pendingCards = /* @__PURE__ */ new Map();
   const channelKey = input.senderId;
-  const numericSenderId = parseTelegramChannelKey(channelKey)?.senderId ?? input.chatId;
   let lastChatActionAt = Number.NEGATIVE_INFINITY;
   let turnOpen = false;
   let cardSentThisTurn = false;
@@ -42814,13 +42936,6 @@ function startTelegramNativeFileFollower(input) {
     // before it reaches the optional answerCallbackQuery, so there is no card
     // call that posts nothing and no bare acknowledgement to keep the text for.
     onToolUse: (tool) => {
-      if (CARD_TOOL_NAMES.has(tool.name) && tool.id) {
-        const text = tool.input?.text;
-        pendingCards.set(tool.id, {
-          text: typeof text === "string" ? text : "",
-          buttons: parseCardButtons(tool.input)
-        });
-      }
       if (tool.name !== TELEGRAM_CARD_TOOL) return;
       cardSentThisTurn = true;
       noteCardArmed(input.sessionId);
@@ -42828,75 +42943,6 @@ function startTelegramNativeFileFollower(input) {
         `[telegram-public] op=card-armed sessionId=${input.sessionId.slice(0, 8)} tool=${tool.name}`
       );
     },
-    // Task 2677 — the card's send outcome and message id arrive here, parsed out
-    // of the result text card.ts encoded them into. On a confirmed send write one
-    // outbound store row keyed by the card message id; on an edit patch that same
-    // row (Telegram reuses the id for an edit); unchanged/none write nothing.
-    onToolResult: ({ toolUseId, text }) => {
-      const pending = pendingCards.get(toolUseId);
-      if (!pending) return;
-      pendingCards.delete(toolUseId);
-      const m = CARD_RESULT_RE.exec(text);
-      if (!m) return;
-      const outcome = m[1];
-      const messageId = m[2];
-      if (outcome !== "sent" && outcome !== "edited" || messageId === "none") return;
-      noteCardSent(input.sessionId);
-      const destBot = m[3];
-      const destChat = m[4];
-      const follower = parseTelegramChannelKey(channelKey);
-      let destKey = channelKey;
-      let rowChat = input.chatId;
-      let rowSender = numericSenderId;
-      if (destBot === void 0 || destChat === void 0) {
-        console.error(
-          `[telegram-adaptor] op=card-destination-absent sessionId=${input.sessionId.slice(0, 8)} toolUseId=${toolUseId} follower=${channelKey}`
-        );
-      } else if (follower?.business === true && follower.botId === destBot && follower.senderId === destChat) {
-        rowChat = destChat;
-        rowSender = destChat;
-      } else {
-        destKey = `${destBot}:${destChat}`;
-        rowChat = destChat;
-        rowSender = destChat;
-      }
-      if (destKey !== channelKey) noteCardCrossChat(input.sessionId);
-      const at = (/* @__PURE__ */ new Date()).toISOString();
-      const rowId = `telegram:${input.accountId}:${destKey}:card:${messageId}`;
-      let created;
-      if (outcome === "sent") {
-        created = appendMessage2(input.accountId, {
-          messageId: rowId,
-          sessionId: input.sessionId,
-          dateSent: at,
-          body: pending.text,
-          fromMe: true,
-          senderId: rowSender,
-          senderName: null,
-          chatId: rowChat,
-          channelKey: destKey,
-          // Telegram row scope is not consumed for rendering or routing (only
-          // WhatsApp rows feed the operator-conversations scope counter); 'admin'
-          // matches the operator-surface intent of the card row.
-          scope: "admin",
-          origin: "agent",
-          ...pending.buttons.length > 0 ? { buttons: pending.buttons } : {},
-          createdAt: at
-        }).created;
-      } else {
-        created = appendUpdate(input.accountId, destKey, {
-          kind: "update",
-          targetMessageId: rowId,
-          body: pending.text,
-          ...pending.buttons.length > 0 ? { buttons: pending.buttons } : {},
-          createdAt: at
-        }).created;
-      }
-      if (created) noteCardPersisted(input.sessionId);
-      console.error(
-        `[telegram-adaptor] op=${created ? "card-persisted" : "card-persist-refused"} sessionId=${input.sessionId.slice(0, 8)} messageId=${messageId} outcome=${outcome} buttons=${pending.buttons.length} channelKey=${destKey} follower=${channelKey}`
-      );
-    },
     // Task 2521 — the answer reaches every bound door through the one fan-out.
     // Ungated by design: whatever woke the turn, the reader and the chats show
     // the same thing. Task 2666 adds the one exception above.
@@ -42936,15 +42982,15 @@ function startTelegramNativeFileFollower(input) {
 }
 
 // server/telegram-background-active.ts
-import { join as join72, resolve as resolve52 } from "path";
-import { readdirSync as readdirSync35, statSync as statSync30 } from "fs";
+import { join as join73, resolve as resolve52 } from "path";
+import { readdirSync as readdirSync36, statSync as statSync31 } from "fs";
 var SUBAGENT_STALE_WINDOW_MS = 6e4;
 var AGENT_JSONL_RE2 = /^agent-([0-9a-f]+)\.jsonl$/;
 function makeBackgroundActive(sessionId, deps = {}) {
   const findProjectDir = deps.findProjectDir ?? findSessionProjectDir;
-  const readDir = deps.readDir ?? ((d) => readdirSync35(d));
+  const readDir = deps.readDir ?? ((d) => readdirSync36(d));
   const statFile = deps.statFile ?? ((p) => {
-    const st = statSync30(p);
+    const st = statSync31(p);
     return { size: st.size, mtimeMs: st.mtimeMs };
   });
   const now = deps.now ?? (() => Date.now());
@@ -42955,7 +43001,7 @@ function makeBackgroundActive(sessionId, deps = {}) {
     if (subagentsDir === null) {
       const projectDir = findProjectDir(sessionId);
       if (projectDir === null) return false;
-      subagentsDir = resolve52(join72(projectDir, sessionId, "subagents"));
+      subagentsDir = resolve52(join73(projectDir, sessionId, "subagents"));
     }
     let names;
     try {
@@ -42969,7 +43015,7 @@ function makeBackgroundActive(sessionId, deps = {}) {
       let size;
       let mtimeMs;
       try {
-        const st = statFile(join72(subagentsDir, name));
+        const st = statFile(join73(subagentsDir, name));
         size = st.size;
         mtimeMs = st.mtimeMs;
       } catch {
@@ -43289,9 +43335,9 @@ function warnOnChannelAdminBindingDrift() {
       );
     }
     for (const d of drift) {
-      const tail = d.reason === "userid-not-admin" ? ` userId=${d.userId}` : "";
+      const tail2 = d.reason === "userid-not-admin" ? ` userId=${d.userId}` : "";
       console.error(
-        `[admin-identity] binding-drift accountId=${acct.accountId} phone=${d.phone} reason=${d.reason}${tail}`
+        `[admin-identity] binding-drift accountId=${acct.accountId} phone=${d.phone} reason=${d.reason}${tail2}`
       );
     }
     const managerDrift = findAccountManagerDrift(readAccountManagers(acct.accountDir), validAccountIds);
@@ -43335,8 +43381,8 @@ function runPublicAddressCollisionAudit(deps) {
 }
 
 // server/telegram-audit.ts
-import { statSync as statSync31 } from "fs";
-import { join as join73 } from "path";
+import { statSync as statSync32 } from "fs";
+import { join as join74 } from "path";
 function buildTelegramAuditLines(input) {
   const lines = [];
   const entries2 = input.accounts.flatMap(
@@ -43444,19 +43490,19 @@ function countTelegramSessionsForAccount(accountId) {
 function* walkTelegramSidecars() {
   const cfg = claudeConfigDir();
   if (!cfg) return;
-  const projectsRoot = join73(cfg, "projects");
+  const projectsRoot = join74(cfg, "projects");
   for (const { path } of enumerateSessionSidecars(projectsRoot)) {
     const meta = readSidecarMeta(path);
     if (meta.channel !== "telegram" || !meta.accountId) continue;
     let spawnMs;
     try {
-      spawnMs = statSync31(path).mtimeMs;
+      spawnMs = statSync32(path).mtimeMs;
     } catch {
       continue;
     }
     let turnMs;
     try {
-      turnMs = statSync31(path.replace(/\.meta\.json$/, ".jsonl")).mtimeMs;
+      turnMs = statSync32(path.replace(/\.meta\.json$/, ".jsonl")).mtimeMs;
     } catch {
       turnMs = null;
     }
@@ -43656,8 +43702,8 @@ function businessConnectionCensusLine(c) {
 }
 
 // app/lib/telegram/business-window-census.ts
-import { readdirSync as readdirSync36, existsSync as existsSync59 } from "fs";
-import { join as join74 } from "path";
+import { readdirSync as readdirSync37, existsSync as existsSync59 } from "fs";
+import { join as join75 } from "path";
 var BUSINESS_WINDOW_CENSUS_TAG = "[telegram-audit]";
 var EXPIRING_SOON_S = 3600;
 function collectBusinessWindowCensus(input) {
@@ -43685,11 +43731,11 @@ function businessWindowCensusLine(c) {
 function readBusinessChatClocks(accountIds) {
   const out = [];
   for (const accountId of accountIds) {
-    const dir = join74(STORE_ROOT2(), accountId);
+    const dir = join75(STORE_ROOT2(), accountId);
     if (!existsSync59(dir)) continue;
     let names;
     try {
-      names = readdirSync36(dir);
+      names = readdirSync37(dir);
     } catch {
       continue;
     }
@@ -43747,15 +43793,15 @@ async function getTelegramBusinessConnection(botToken, connectionId, opts = {})
 }
 
 // server/telegram-migrate.ts
-import { readFileSync as readFileSync59, writeFileSync as writeFileSync23, existsSync as existsSync60, renameSync as renameSync11, mkdirSync as mkdirSync14 } from "fs";
-import { dirname as dirname19, join as join75 } from "path";
+import { readFileSync as readFileSync60, writeFileSync as writeFileSync23, existsSync as existsSync60, renameSync as renameSync11, mkdirSync as mkdirSync14 } from "fs";
+import { dirname as dirname19, join as join76 } from "path";
 function migrateTelegramTwoSlot(input) {
   const out = [];
   for (const account of input.accounts) {
-    const configPath3 = join75(account.accountDir, "account.json");
+    const configPath3 = join76(account.accountDir, "account.json");
     let config;
     try {
-      config = JSON.parse(readFileSync59(configPath3, "utf-8"));
+      config = JSON.parse(readFileSync60(configPath3, "utf-8"));
     } catch {
       console.error(`[telegram-audit] op=migrate-unreadable accountId=${account.accountId}`);
       continue;
@@ -43814,16 +43860,16 @@ function moveSecret(from, to) {
 }
 
 // server/telegram-unadopt.ts
-import { readFileSync as readFileSync60, writeFileSync as writeFileSync24, renameSync as renameSync12 } from "fs";
-import { join as join76 } from "path";
+import { readFileSync as readFileSync61, writeFileSync as writeFileSync24, renameSync as renameSync12 } from "fs";
+import { join as join77 } from "path";
 var FILE3 = "channel-session-override.json";
 function unadoptTelegramPointers(input) {
   return input.accounts.map(({ accountId, accountDir }) => {
     const out = { accountId, dropped: [], kept: 0, unknown: 0 };
-    const path = join76(accountDir, FILE3);
+    const path = join77(accountDir, FILE3);
     const bySender = {};
     try {
-      const raw = JSON.parse(readFileSync60(path, "utf8"));
+      const raw = JSON.parse(readFileSync61(path, "utf8"));
       if (!raw.bySender || typeof raw.bySender !== "object") return out;
       for (const [k, v] of Object.entries(raw.bySender)) if (typeof v === "string") bySender[k] = v;
     } catch {
@@ -43894,14 +43940,14 @@ function backfillMisfiledRecords(params) {
 }
 
 // server/lib/booking-site-accounts.ts
-import { existsSync as existsSync61, readFileSync as readFileSync61 } from "fs";
+import { existsSync as existsSync61, readFileSync as readFileSync62 } from "fs";
 import { resolve as resolve53 } from "path";
 function listBookingSiteAccounts(accounts) {
   return accounts.filter((a) => {
     const availPath = resolve53(a.accountDir, "calendar-availability.json");
     if (!existsSync61(availPath)) return false;
     try {
-      const cfg = JSON.parse(readFileSync61(availPath, "utf-8"));
+      const cfg = JSON.parse(readFileSync62(availPath, "utf-8"));
       return typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
     } catch {
       return false;
@@ -43939,7 +43985,7 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash7, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync62, readFileSync as readFileSync62, statSync as statSync32 } from "fs";
+import { existsSync as existsSync62, readFileSync as readFileSync63, statSync as statSync33 } from "fs";
 import { resolve as resolve54 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
@@ -43991,7 +44037,7 @@ function resolveEntitlement(brand, account) {
   if (!existsSync62(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
-  const stat11 = statSync32(entitlementPath);
+  const stat11 = statSync33(entitlementPath);
   const key2 = memoKey(stat11.mtimeMs, account);
   if (memo && memo.key === key2) {
     return memo.result;
@@ -44003,7 +44049,7 @@ function resolveEntitlement(brand, account) {
 function verifyAndResolve(brand, entitlementPath, account) {
   let pubkeyPem;
   try {
-    pubkeyPem = readFileSync62(pubkeyPath(brand), "utf-8");
+    pubkeyPem = readFileSync63(pubkeyPath(brand), "utf-8");
   } catch (err) {
     return logResolved(anonymousFallback("pubkey-missing"), {
       reason: "pubkey-missing"
@@ -44017,7 +44063,7 @@ function verifyAndResolve(brand, entitlementPath, account) {
   }
   let envelope;
   try {
-    envelope = JSON.parse(readFileSync62(entitlementPath, "utf-8"));
+    envelope = JSON.parse(readFileSync63(entitlementPath, "utf-8"));
   } catch {
     return logResolved(anonymousFallback("malformed"), { reason: "malformed" });
   }
@@ -44179,14 +44225,14 @@ function clientFrom(c) {
 }
 installMediaDownloadGuard();
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join77(PLATFORM_ROOT6, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT6 ? join78(PLATFORM_ROOT6, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync63(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
 if (BRAND_JSON_PATH && existsSync63(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync63(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync64(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -44218,11 +44264,11 @@ var brandLoginOpts = {
   appleTouchIconPath: brandAppIcon512Path,
   themeColor: BRAND.defaultColors?.primary
 };
-var ALIAS_DOMAINS_PATH = join77(homedir5(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join78(homedir5(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync63(ALIAS_DOMAINS_PATH)) return null;
-    const parsed = JSON.parse(readFileSync63(ALIAS_DOMAINS_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync64(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -44364,7 +44410,7 @@ var waGateway = new WaGateway({
   // resolver and `fanTargetsFor` is a constructor dep, not a callable method.
   fanTargetsFor: whatsappFanTargets,
   gatewayUrl: `http://127.0.0.1:${process.env.MAXY_UI_INTERNAL_PORT ?? ""}`,
-  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve55(process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
+  serverPath: process.env.MAXY_WA_CHANNEL_SERVER_PATH ?? resolve55(process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, ".."), "services/whatsapp-channel/dist/server.js"),
   // Task 751 / 1390 — file delivery on the native channel. `maxyAccountId` (the
   // path-validation scope) is the sender's effective SESSION account, resolved
   // once at the inbound gate and threaded here via the gateway's per-sender doc
@@ -44379,7 +44425,7 @@ var waGateway = new WaGateway({
       caption,
       accountId,
       maxyAccountId,
-      platformRoot: resolve55(process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, ".."))
+      platformRoot: resolve55(process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, ".."))
     });
     return result.ok ? { ok: true, messageId: result.messageId } : { ok: false, error: result.error };
   },
@@ -44554,7 +44600,7 @@ function runDuplicateSenderAudit() {
   try {
     const configDir = process.env.CLAUDE_CONFIG_DIR;
     if (!configDir) return;
-    const projectsRoot = join77(configDir, "projects");
+    const projectsRoot = join78(configDir, "projects");
     const records5 = [];
     for (const { path: jsonlPath, isSubagent, archived } of enumerateJsonls(projectsRoot)) {
       if (isSubagent || archived) continue;
@@ -44606,7 +44652,7 @@ var webchatGateway = new WebchatGateway({
   // rather than hanging the POST.
   publicProjectsRoot: () => {
     const cfg = claudeConfigDir();
-    return cfg ? join77(cfg, "projects") : "";
+    return cfg ? join78(cfg, "projects") : "";
   },
   gatewayUrl: webchatGatewayUrl(),
   serverPath: webchatServerPath(),
@@ -44876,6 +44922,32 @@ var scheduleInjectRoutes = createScheduleInjectRoutes({
     if (hits.length === 0) return { kind: "none" };
     if (hits.length > 1) return { kind: "ambiguous", claimants: hits };
     return { kind: "one", ...hits[0] };
+  },
+  // Task 2776 — the carrier a routine NAMED, resolved against that account's own
+  // bots and never install-wide. The verdict comes from `carrierVerdict`, the
+  // same function `validateAgentDispatch` calls at write time, so a bot that
+  // saved cannot be refused here for a reason the save would not have given.
+  //
+  // The token and allowlists are read off the entry this lookup just chose, for
+  // the reason the resolver above states about its own: a second read of the
+  // registry could disagree with the entry chosen.
+  //
+  // `absent` covers the two ways an entry can be missing — no such account, and
+  // no such bot on it — because both mean the same thing to the operator: the id
+  // this routine names is not a bot they can dispatch on.
+  carrierFor: (accountId, botId, destination) => {
+    const account = listValidAccounts().find((a) => a.accountId === accountId);
+    if (!account) return { error: "absent" };
+    const verdict = carrierVerdict(account.accountDir, botId, destination);
+    if (!verdict.ok) return { error: verdict.reason };
+    const entry3 = listBotEntries(account.config.telegram).find((e) => e.id === botId);
+    if (!entry3) return { error: "absent" };
+    return {
+      accountId: account.accountId,
+      botId,
+      botToken: entry3.token,
+      ...chatSendAllowlists(entry3)
+    };
   }
   // Task 2078 — the same binding the live inbound resolves. Without it a
   // scheduled dispatch to a BOUND admin would derive the legacy per-chat id and
@@ -45280,7 +45352,7 @@ app80.get("/agent-assets/:slug/:filename", (c) => {
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync63(filePath);
+  const body = readFileSync64(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
@@ -45310,7 +45382,7 @@ app80.get("/generated/:filename", (c) => {
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync63(filePath);
+  const body = readFileSync64(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
@@ -45325,7 +45397,7 @@ var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
 if (BRAND_JSON_PATH && existsSync63(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync63(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync64(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -45356,7 +45428,7 @@ var brandAppIconsExist = [brandAppIcon192Path, brandAppIcon512Path, brandMaskabl
 );
 var SW_SOURCE = (() => {
   try {
-    return readFileSync63(resolve55(process.cwd(), "public", "sw.js"), "utf-8");
+    return readFileSync64(resolve55(process.cwd(), "public", "sw.js"), "utf-8");
   } catch {
     return null;
   }
@@ -45364,9 +45436,9 @@ var SW_SOURCE = (() => {
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT6) return "unknown";
-    const versionFile = join77(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join78(PLATFORM_ROOT6, "config", `.${BRAND.hostname}-version`);
     if (!existsSync63(versionFile)) return "unknown";
-    const content = readFileSync63(versionFile, "utf-8").trim();
+    const content = readFileSync64(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -45377,7 +45449,7 @@ var versionScript = `<script>window.__MAXY_VERSION__=${JSON.stringify(INSTALLED_
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync63(resolve55(process.cwd(), "public", file), "utf-8");
+    html = readFileSync64(resolve55(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -45394,14 +45466,14 @@ ${clientErrorReporterScript}
   return html;
 }
 function loadBrandingCache(agentSlug) {
-  const configDir = join77(homedir5(), BRAND.configDir);
+  const configDir = join78(homedir5(), BRAND.configDir);
   try {
     const verdict = resolvePublicAddressFromDisk(agentSlug);
     const accountId = verdict.kind === "served" ? verdict.owner.accountId : getDefaultAccountId();
     if (!accountId) return null;
-    const cachePath = join77(configDir, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join78(configDir, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync63(cachePath)) return null;
-    return JSON.parse(readFileSync63(cachePath, "utf-8"));
+    return JSON.parse(readFileSync64(cachePath, "utf-8"));
   } catch {
     return null;
   }
@@ -45496,7 +45568,7 @@ app80.use("/vnc-popout.html", logViewerFetch);
 app80.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync63(resolve55(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync64(resolve55(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -45650,7 +45722,7 @@ var hostname = process.env.HOSTNAME ?? "127.0.0.1";
 var httpServer = serve({ fetch: app80.fetch, port, hostname });
 console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 {
-  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
+  const reconcilePlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, "..");
   const reconcileScript = resolve55(reconcilePlatformRoot, "plugins/scheduling/mcp/dist/scripts/reconcile-bookings.js");
   const runReconcile = (ctx) => {
     if (!existsSync63(reconcileScript)) return;
@@ -45673,7 +45745,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     detached: true,
     run: runReconcile
   });
-  const reconcileStatePath = join77(MAXY_DIR, "booking-reconcile-state.json");
+  const reconcileStatePath = join78(MAXY_DIR, "booking-reconcile-state.json");
   registerLoop({
     name: "calendar-reconcile-liveness",
     intervalMs: 6e5,
@@ -45691,7 +45763,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
 }
 {
   const DREAM_CYCLE_SWEEP_INTERVAL_MS = 36e5;
-  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
+  const dreamPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, "..");
   const dreamSweepScript = resolve55(dreamPlatformRoot, "plugins/memory/mcp/dist/scripts/dream-cycle-sweep.js");
   registerLoop({
     name: "dream-cycle-sweep",
@@ -45715,7 +45787,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
+  const outlookPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, "..");
   const outlookScript = resolve55(outlookPlatformRoot, "plugins/outlook/mcp/dist/scripts/complete-registration.js");
   const OUTLOOK_COMPLETE_INTERVAL_MS = 3e4;
   const runOutlookComplete = (ctx) => {
@@ -45741,7 +45813,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
+  const auditRoot = process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, "..");
   const strandedAccountsDir = resolve55(auditRoot, "..", "data/accounts");
   const STRANDED_AUDIT_INTERVAL_MS = 3e5;
   const STRANDED_AGE_MS = 16 * 6e4;
@@ -45750,11 +45822,11 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
     try {
       if (!existsSync63(strandedAccountsDir)) return;
       const now = Date.now();
-      for (const name of readdirSync37(strandedAccountsDir)) {
+      for (const name of readdirSync38(strandedAccountsDir)) {
         if (!STRANDED_UUID_RE.test(name)) continue;
         const pendingPath2 = resolve55(strandedAccountsDir, name, "secrets/outlook/pending-devicecode.enc");
         if (!existsSync63(pendingPath2)) continue;
-        const ageMs2 = now - statSync33(pendingPath2).mtimeMs;
+        const ageMs2 = now - statSync34(pendingPath2).mtimeMs;
         if (ageMs2 > STRANDED_AGE_MS) {
           console.error(`[outlook-mcp] devicecode-stranded account=${name} ageSec=${Math.floor(ageMs2 / 1e3)}`);
         }
@@ -45771,7 +45843,7 @@ console.log(`${BRAND.productName} listening on http://${hostname}:${port}`);
   });
 }
 {
-  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
+  const googleRoot = process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, "..");
   const googleAccountsDir = resolve55(googleRoot, "..", "data/accounts");
   const GOOGLE_PENDING_AUDIT_INTERVAL_MS = 3e5;
   const runGooglePendingAuditSafe = () => {
@@ -45827,7 +45899,7 @@ registerLoop({
   }
 });
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, "..");
   const STORAGE_AUDIT_INTERVAL_MS = 3e5;
   const runStorageAuditSafe = () => runStorageAudit(auditPlatformRoot).catch((err) => {
     console.error(`[storage-audit] error="${err.message}"`);
@@ -45894,7 +45966,7 @@ registerLoop({
     const lastByBot = newestTelegramSessionByBot();
     let secretFilesOnDisk = [];
     try {
-      secretFilesOnDisk = readdirSync37(telegramSecretsDir());
+      secretFilesOnDisk = readdirSync38(telegramSecretsDir());
     } catch {
     }
     const lines = buildTelegramAuditLines({
@@ -45902,7 +45974,7 @@ registerLoop({
       secretFileExists: (botId) => existsSync63(secretPath(botId)),
       agentActive: isActiveAgentSlug,
       // Task 2619 — the card set a specialist binding is reconciled against.
-      specialistCards: (accountDir) => listSpecialistCardNames(join77(accountDir, "specialists", "agents")),
+      specialistCards: (accountDir) => listSpecialistCardNames(join78(accountDir, "specialists", "agents")),
       // Task 2619 — the doors that can be sent to right now. The same accessor
       // the follower census reads (:1185), so "should have a reader" and "can be
       // sent to" stay one fact.
@@ -45988,6 +46060,14 @@ registerLoop({
       runTelegramMediaCensus();
     }
   });
+  registerLoop({
+    name: "telegram-card-row-census",
+    intervalMs: STORAGE_AUDIT_INTERVAL_MS,
+    firstRunDelayMs: 11e4,
+    run: async () => {
+      runTelegramCardRowCensus(process.env.LOG_DIR ?? LOG_DIR);
+    }
+  });
   registerLoop({
     name: "telegram-checkout-census",
     intervalMs: STORAGE_AUDIT_INTERVAL_MS,
@@ -46303,7 +46383,7 @@ registerLoop({
   });
 }
 {
-  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
+  const publishPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, "..");
   const publishScript = resolve55(publishPlatformRoot, "plugins/scheduling/mcp/dist/scripts/publish-availability.js");
   const PUBLISH_INTERVAL_MS = 3e5;
   const bookingAccounts = () => {
@@ -46338,7 +46418,7 @@ registerLoop({
     let hasBookingSite = false;
     try {
       if (existsSync63(availPath)) {
-        const cfg = JSON.parse(readFileSync63(availPath, "utf-8"));
+        const cfg = JSON.parse(readFileSync64(availPath, "utf-8"));
         hasBookingSite = typeof cfg.bookingDbName === "string" && cfg.bookingDbName.length > 0;
       }
     } catch {
@@ -46348,7 +46428,7 @@ registerLoop({
     let lastSuccessAt = null;
     if (existsSync63(statePath)) {
       try {
-        const rec = JSON.parse(readFileSync63(statePath, "utf-8"));
+        const rec = JSON.parse(readFileSync64(statePath, "utf-8"));
         lastSuccessAt = rec.lastSuccessAt ?? null;
       } catch {
         console.error(`[calendar-availability] op=audit accountId=${account.accountId} snapshotAgeMs=na reason=bad-state-file`);
@@ -46383,7 +46463,7 @@ startDispatchCensus(() => getSession());
 startDispatchFieldCensus(() => getSession());
 startDispatchTgCensus(() => getSession());
 {
-  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..");
+  const auditPlatformRoot = process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, "..");
   const auditScript = resolve55(auditPlatformRoot, "plugins/connector/mcp/dist/scripts/audit-connectors.js");
   const auditLogDir = process.env.LOG_DIR ?? LOG_DIR;
   const CONNECTOR_AUDIT_INTERVAL_MS = 3e5;
@@ -46514,7 +46594,7 @@ async function runAdminUserReconcileTick() {
       console.error("[adminuser-self-heal] skip reason=no-users-file");
       return;
     }
-    const usersRaw = readFileSync63(USERS_FILE, "utf-8").trim();
+    const usersRaw = readFileSync64(USERS_FILE, "utf-8").trim();
     if (!usersRaw) {
       console.error("[adminuser-self-heal] skip reason=empty-users-file");
       return;
@@ -46596,8 +46676,8 @@ var runIngestAuditTick = () => {
       },
       agentExists: (accountId, slug) => {
         if (!house) return false;
-        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join77(ACCOUNTS_DIR, accountId);
-        return existsSync63(join77(dir, "agents", slug, "config.json"));
+        const dir = isHouseAccountKey(house.accountId, accountId) ? house.accountDir : join78(ACCOUNTS_DIR, accountId);
+        return existsSync63(join78(dir, "agents", slug, "config.json"));
       }
     });
   } catch (err) {
@@ -46645,9 +46725,9 @@ registerLoop({
       runPublicAddressCollisionAudit({
         houseAccountId: () => resolveAccount()?.accountId ?? null,
         activeSlugs: () => listValidAccounts().map((a) => {
-          const agentsRoot = join77(a.accountDir, "agents");
+          const agentsRoot = join78(a.accountDir, "agents");
           if (!existsSync63(agentsRoot)) return { accountId: a.accountId, slugs: [] };
-          const slugs = readdirSync37(agentsRoot, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).filter((slug) => isActiveAgentSlug(a.accountDir, slug));
+          const slugs = readdirSync38(agentsRoot, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).filter((slug) => isActiveAgentSlug(a.accountDir, slug));
           return { accountId: a.accountId, slugs };
         })
       });
@@ -46661,7 +46741,7 @@ registerLoop({
 var USERS_RECONCILE_INTERVAL_MS = 60 * 60 * 1e3;
 function countUsersRows() {
   if (!existsSync63(USERS_FILE)) return 0;
-  const raw = readFileSync63(USERS_FILE, "utf-8").trim();
+  const raw = readFileSync64(USERS_FILE, "utf-8").trim();
   if (!raw) return 0;
   const users = JSON.parse(raw);
   return users.filter((u) => typeof u.userId === "string").length;
@@ -46764,7 +46844,7 @@ function sessionChannelResolver() {
       byId = /* @__PURE__ */ new Map();
       const cfg = claudeConfigDir();
       if (cfg) {
-        for (const { path } of enumerateSessionSidecars(join77(cfg, "projects"))) {
+        for (const { path } of enumerateSessionSidecars(join78(cfg, "projects"))) {
           const channel = readSidecarMeta(path).channel;
           if (channel) byId.set(basename19(path).replace(/\.meta\.json$/, ""), channel);
         }
@@ -46839,7 +46919,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve55(process.env.MAXY_PLATFORM_ROOT ?? join77(__dirname, "..")),
+  platformRoot: resolve55(process.env.MAXY_PLATFORM_ROOT ?? join78(__dirname, "..")),
   accountConfig: bootAccountConfig,
   // Task 2074 — enrich with the sub-account name and fan out to every open
   // admin SSE stream. Fire-and-forget: the manager's persist path must not