@rubytech/create-maxy-code 0.1.193 → 0.1.194

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-maxy-code",
-  "version": "0.1.193",
+  "version": "0.1.194",
   "description": "Install Maxy — AI for Productive People",
   "bin": {
     "create-maxy-code": "./dist/index.js"

package/payload/platform/plugins/docs/references/deployment.md

@@ -127,13 +127,15 @@ The share is **LAN-only**: it binds to the loopback and your Pi's Wi-Fi/Ethernet
 
 **Credentials:** SMB user is `admin`; password is your {{productName}} PIN. The installer wires the sync so every time you set or rotate the PIN in the admin UI, the SMB password updates with it.
 
-**macOS Finder**: Press `Cmd-K` from any Finder window, type `smb://<hostname>.local` (use the hostname your installer printed — for example `smb://maxy-code.local` or `smb://realagent-code.local`), click Connect, sign in as `admin` with your PIN. The share appears in the Finder sidebar; drag-and-drop works in both directions.
+The SMB username is the Linux user that owns the install on the device — `admin` on a Pi or a Hetzner box, your own Linux user (for example `neo`) on a self-hosted laptop install. The password is your {{productName}} PIN. Changing the PIN in the admin UI re-syncs the SMB password for that same Unix user automatically.
 
-**Windows Explorer**: Open File Explorer, type `\\<hostname>.local\<brand>` in the address bar (for example `\\maxy-code.local\maxy-code`), press Enter, sign in as `admin` with your PIN. To keep it across reboots, right-click → "Map network drive".
+**macOS Finder**: Press `Cmd-K` from any Finder window, type `smb://<hostname>.local` (use the hostname your installer printed — for example `smb://maxy-code.local` or `smb://realagent-code.local`), click Connect, sign in as the install owner with your PIN. The share appears in the Finder sidebar; drag-and-drop works in both directions.
 
-**iOS Files**: Open Files → tap the `…` menu (top-right) → "Connect to Server" → enter `smb://<hostname>.local` → "Registered User" → username `admin`, password is your PIN.
+**Windows Explorer**: Open File Explorer, type `\\<hostname>.local\<brand>` in the address bar (for example `\\maxy-code.local\maxy-code`), press Enter, sign in as the install owner with your PIN. To keep it across reboots, right-click → "Map network drive".
 
-**Android (Solid Explorer, CX File Explorer)**: Add a new connection of type SMB / Network. Host = `<hostname>.local`, share = `<brand>` (same as your install folder name), user = `admin`, password = your PIN.
+**iOS Files**: Open Files → tap the `…` menu (top-right) → "Connect to Server" → enter `smb://<hostname>.local` → "Registered User" → username is the install owner, password is your PIN.
+
+**Android (Solid Explorer, CX File Explorer)**: Add a new connection of type SMB / Network. Host = `<hostname>.local`, share = `<brand>` (same as your install folder name), user = the install owner, password = your PIN.
 
 **Troubleshooting:** if the mount fails with "logon failure", change your PIN in the admin UI and try again — that re-triggers the smbpasswd sync. If the share doesn't show up at all, your client may need `<hostname>.local` resolved by mDNS — try the Pi's LAN IP address as a fallback (`smb://192.168.1.50` on macOS, `\\192.168.1.50\<brand>` on Windows).
 

package/payload/server/{chunk-WWD4TCJJ.js → chunk-EXIPYITB.js}

@@ -2705,6 +2705,7 @@ var BIN_DIR = resolve(MAXY_DIR, "bin");
 var REMOTE_PASSWORD_FILE = resolve(MAXY_DIR, ".remote-password");
 var REMOTE_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "remote-session-secret");
 var ADMIN_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "admin-session-secret");
+var INSTALL_OWNER_FILE = resolve(MAXY_DIR, ".install-owner");
 var TELEGRAM_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-webhook-secret");
 var TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-admin-webhook-secret");
 var VISITOR_TOKEN_SECRET_FILE = resolve(MAXY_DIR, "credentials", "visitor-token-secret");
@@ -5454,6 +5455,7 @@ export {
   USERS_FILE,
   LOG_DIR,
   BIN_DIR,
+  INSTALL_OWNER_FILE,
   VISITOR_TOKEN_SECRET_FILE,
   CLAUDE_CREDENTIALS_FILE,
   vncLog,

package/payload/server/maxy-edge.js

@@ -14,7 +14,7 @@ import {
   sanitizeClientCorrId,
   vncLog,
   websockifyLog
-} from "./chunk-WWD4TCJJ.js";
+} from "./chunk-EXIPYITB.js";
 import "./chunk-PFF6I7KP.js";
 
 // server/edge.ts

package/payload/server/server.js

@@ -9,6 +9,7 @@ import {
   COMMERCIAL_MODE,
   GREETING_DIRECTIVE,
   Hono,
+  INSTALL_OWNER_FILE,
   LOG_DIR,
   MAXY_DIR,
   PLATFORM_ROOT,
@@ -83,7 +84,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-WWD4TCJJ.js";
+} from "./chunk-EXIPYITB.js";
 import {
   __commonJS,
   __toESM
@@ -815,8 +816,8 @@ var serveStatic = (options = { root: "" }) => {
 };
 
 // server/index.ts
-import { readFileSync as readFileSync20, existsSync as existsSync21, watchFile } from "fs";
-import { resolve as resolve23, join as join15, basename as basename6 } from "path";
+import { readFileSync as readFileSync21, existsSync as existsSync21, watchFile } from "fs";
+import { resolve as resolve23, join as join16, basename as basename6 } from "path";
 import { homedir as homedir2 } from "os";
 import { monitorEventLoopDelay } from "perf_hooks";
 
@@ -6325,19 +6326,32 @@ app4.post("/set-pin", async (c) => {
   }
   console.log(`[set-pin] wrote users.json + account.json admins: userId=${userId.slice(0, 8)}\u2026 role=owner`);
   if (process.platform === "linux") {
-    const smbProc = spawnSync2("sudo", ["-n", "smbpasswd", "-a", "-s", "admin"], {
-      input: `${body.pin}
+    let installOwner = null;
+    if (existsSync6(INSTALL_OWNER_FILE)) {
+      try {
+        const raw = readFileSync8(INSTALL_OWNER_FILE, "utf-8").trim();
+        if (raw.length > 0) installOwner = raw;
+      } catch (err) {
+        console.error(`[set-pin] install-owner-read-failed path=${INSTALL_OWNER_FILE} error=${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+    if (!installOwner) {
+      console.error(`[set-pin] smbpasswd sync failed owner=<unknown> rc=-1 reason=install-owner-file-missing path=${INSTALL_OWNER_FILE}`);
+    } else {
+      const smbProc = spawnSync2("sudo", ["-n", "smbpasswd", "-a", "-s", installOwner], {
+        input: `${body.pin}
 ${body.pin}
 `,
-      stdio: ["pipe", "pipe", "pipe"],
-      encoding: "utf-8",
-      timeout: 1e4
-    });
-    if (smbProc.status === 0) {
-      console.log(`[set-pin] smb-password-synced userId=${userId.slice(0, 8)}\u2026`);
-    } else {
-      const stderr = (smbProc.stderr ?? "").trim().slice(0, 200);
-      console.error(`[set-pin] smb-password-sync-failed exit=${smbProc.status} stderr=${JSON.stringify(stderr)}`);
+        stdio: ["pipe", "pipe", "pipe"],
+        encoding: "utf-8",
+        timeout: 1e4
+      });
+      if (smbProc.status === 0) {
+        console.log(`[set-pin] smbpasswd sync ok owner=${installOwner} userId=${userId.slice(0, 8)}\u2026`);
+      } else {
+        const stderr = (smbProc.stderr ?? "").trim().slice(0, 200);
+        console.error(`[set-pin] smbpasswd sync failed owner=${installOwner} rc=${smbProc.status} stderr=${JSON.stringify(stderr)}`);
+      }
     }
   } else {
     console.log(`[set-pin] smb-password-sync-skipped reason=non-linux platform=${process.platform}`);
@@ -11781,53 +11795,87 @@ function relPath(absPath, root) {
 var sidebar_artefact_save_default = app23;
 
 // server/routes/admin/sidebar-sessions.ts
+import { readdirSync as readdirSync8, readFileSync as readFileSync14, statSync as statSync7 } from "fs";
+import { join as join13 } from "path";
+var RC_URL_RE = /https:\/\/claude\.ai\/code\/session_[A-Za-z0-9_-]+/;
+var SESSION_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.jsonl$/i;
+var TITLE_MAX = 80;
 var app24 = new Hono();
+function projectsDirForAccount(accountId) {
+  const configDir2 = process.env.CLAUDE_CONFIG_DIR;
+  if (!configDir2) return null;
+  const accountCwd = join13(DATA_ROOT, "accounts", accountId);
+  const slug = accountCwd.replace(/\//g, "-");
+  return join13(configDir2, "projects", slug);
+}
+function firstUserMessage(body) {
+  for (const line of body.split("\n")) {
+    if (!line || line[0] !== "{") continue;
+    let parsed;
+    try {
+      parsed = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (!parsed || typeof parsed !== "object") continue;
+    const row = parsed;
+    if (row.type !== "user" || !row.message || row.message.role !== "user") continue;
+    const content = row.message.content;
+    if (typeof content !== "string") continue;
+    const trimmed = content.trim().replace(/\s+/g, " ");
+    if (!trimmed) continue;
+    return trimmed.length > TITLE_MAX ? trimmed.slice(0, TITLE_MAX - 1) + "\u2026" : trimmed;
+  }
+  return null;
+}
 app24.get("/", requireAdminSession, async (c) => {
   const cacheKey = c.var.cacheKey;
   const accountId = getAccountIdForSession(cacheKey);
   if (!accountId) {
     return c.json({ error: "Account not found for session" }, 401);
   }
-  const port2 = requirePortEnv("CLAUDE_SESSION_MANAGER_PORT", { tag: "admin-sessions-list" });
-  const url = `http://127.0.0.1:${port2}/list?senderId=${encodeURIComponent(accountId)}`;
-  let upstream = null;
-  try {
-    upstream = await fetch(url);
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    console.error(`[admin-sessions-list] account=${accountId} fetch-failed error="${message}"`);
-    return c.json({ error: "session-manager-unreachable" }, 503);
+  const projectsDir = projectsDirForAccount(accountId);
+  if (!projectsDir) {
+    console.error(`[admin-sessions-list] account=${accountId} no-claude-config-dir`);
+    return c.json({ sessions: [] });
   }
-  if (!upstream.ok) {
-    console.error(`[admin-sessions-list] account=${accountId} upstream-status=${upstream.status}`);
-    return c.json({ error: "session-manager-error", status: upstream.status }, 502);
-  }
-  let payloads;
+  let entries;
   try {
-    payloads = await upstream.json();
+    entries = readdirSync8(projectsDir);
   } catch (err) {
+    const code = err.code;
+    if (code === "ENOENT") {
+      console.log(`[admin-sessions-list] account=${accountId} rows=0 reason=no-projects-dir`);
+      return c.json({ sessions: [] });
+    }
     const message = err instanceof Error ? err.message : String(err);
-    console.error(`[admin-sessions-list] account=${accountId} parse-failed error="${message}"`);
-    return c.json({ error: "session-manager-bad-body" }, 502);
-  }
-  if (!Array.isArray(payloads)) {
-    console.error(`[admin-sessions-list] account=${accountId} bad-shape=not-array`);
-    return c.json({ error: "session-manager-bad-body" }, 502);
+    console.error(`[admin-sessions-list] account=${accountId} readdir-failed error="${message}"`);
+    return c.json({ error: "projects-dir-unreadable" }, 500);
   }
   const rows = [];
-  for (const p of payloads) {
-    const sessionId = typeof p.sessionId === "string" ? p.sessionId : null;
-    const capturedUrl = typeof p.url === "string" ? p.url : null;
-    const startedAt = typeof p.startedAt === "string" ? p.startedAt : null;
-    if (!sessionId || !capturedUrl || !startedAt) continue;
-    const displayName = typeof p.displayName === "string" && p.displayName.length > 0 ? p.displayName : sessionId.slice(0, 8);
+  for (const name of entries) {
+    if (!SESSION_ID_RE.test(name)) continue;
+    const sessionId = name.slice(0, -".jsonl".length);
+    const path2 = join13(projectsDir, name);
+    let body;
+    let mtimeMs;
+    try {
+      body = readFileSync14(path2, "utf8");
+      mtimeMs = statSync7(path2).mtimeMs;
+    } catch {
+      continue;
+    }
+    const urlMatch = body.match(RC_URL_RE);
+    if (!urlMatch) continue;
+    const title = firstUserMessage(body) ?? sessionId.slice(0, 8);
     rows.push({
       sessionId,
-      title: displayName,
-      url: capturedUrl,
-      capturedAt: startedAt
+      title,
+      url: urlMatch[0],
+      capturedAt: new Date(mtimeMs).toISOString()
     });
   }
+  rows.sort((a, b) => a.capturedAt < b.capturedAt ? 1 : -1);
   console.log(`[admin-sessions-list] account=${accountId} rows=${rows.length}`);
   return c.json({ sessions: rows });
 });
@@ -11955,14 +12003,14 @@ app25.get("/", async (c) => {
 var system_stats_default = app25;
 
 // server/routes/admin/health.ts
-import { existsSync as existsSync17, readFileSync as readFileSync14 } from "fs";
-import { resolve as resolve17, join as join13 } from "path";
+import { existsSync as existsSync17, readFileSync as readFileSync15 } from "fs";
+import { resolve as resolve17, join as join14 } from "path";
 var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve17(process.cwd(), "..");
 var brandHostname = "maxy";
-var brandJsonPath = join13(PLATFORM_ROOT6, "config", "brand.json");
+var brandJsonPath = join14(PLATFORM_ROOT6, "config", "brand.json");
 if (existsSync17(brandJsonPath)) {
   try {
-    const brand = JSON.parse(readFileSync14(brandJsonPath, "utf-8"));
+    const brand = JSON.parse(readFileSync15(brandJsonPath, "utf-8"));
     if (brand.hostname) brandHostname = brand.hostname;
   } catch {
   }
@@ -11972,7 +12020,7 @@ var PROCESS_STARTED_AT = (/* @__PURE__ */ new Date()).toISOString();
 var PROBE_TIMEOUT_MS = 1e3;
 function readVersion() {
   if (!existsSync17(VERSION_FILE)) return "unknown";
-  return readFileSync14(VERSION_FILE, "utf-8").trim() || "unknown";
+  return readFileSync15(VERSION_FILE, "utf-8").trim() || "unknown";
 }
 async function probeConversationDb() {
   let session;
@@ -12481,7 +12529,7 @@ var admin_default = app32;
 
 // app/lib/access-gate.ts
 import neo4j4 from "neo4j-driver";
-import { readFileSync as readFileSync15 } from "fs";
+import { readFileSync as readFileSync16 } from "fs";
 import { resolve as resolve18 } from "path";
 import { randomUUID as randomUUID8 } from "crypto";
 var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve18(process.cwd(), "..");
@@ -12490,7 +12538,7 @@ function readPassword() {
   if (process.env.NEO4J_PASSWORD) return process.env.NEO4J_PASSWORD;
   const passwordFile = resolve18(PLATFORM_ROOT7, "config/.neo4j-password");
   try {
-    return readFileSync15(passwordFile, "utf-8").trim();
+    return readFileSync16(passwordFile, "utf-8").trim();
   } catch {
     throw new Error(
       `Neo4j password not found. Expected at ${passwordFile} or in NEO4J_PASSWORD env var.`
@@ -12922,7 +12970,7 @@ app35.route("/request-magic-link", request_magic_link_default);
 var access_default = app35;
 
 // server/routes/sites.ts
-import { existsSync as existsSync18, readFileSync as readFileSync16, realpathSync as realpathSync5, statSync as statSync7 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync17, realpathSync as realpathSync5, statSync as statSync8 } from "fs";
 import { resolve as resolve20 } from "path";
 var SAFE_SEG_RE = /^[a-z0-9_][a-z0-9_.-]{0,99}$/i;
 var MIME = {
@@ -12988,7 +13036,7 @@ app36.get("/:rel{.*}", (c) => {
   }
   let stat8;
   try {
-    stat8 = existsSync18(filePath) ? statSync7(filePath) : null;
+    stat8 = existsSync18(filePath) ? statSync8(filePath) : null;
   } catch {
     stat8 = null;
   }
@@ -13026,7 +13074,7 @@ app36.get("/:rel{.*}", (c) => {
   }
   let body;
   try {
-    body = readFileSync16(realPath);
+    body = readFileSync17(realPath);
   } catch (err) {
     const code = err?.code;
     if (code === "EISDIR") {
@@ -13062,7 +13110,7 @@ var sites_default = app36;
 
 // app/lib/visitor-token.ts
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync17, writeFileSync as writeFileSync6 } from "fs";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync18, writeFileSync as writeFileSync6 } from "fs";
 import { dirname as dirname4 } from "path";
 var TOKEN_PREFIX = "v1.";
 var SECRET_BYTES = 32;
@@ -13071,7 +13119,7 @@ var cachedSecret = null;
 function getSecret() {
   if (cachedSecret) return cachedSecret;
   try {
-    const hex2 = readFileSync17(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+    const hex2 = readFileSync18(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
     if (hex2.length === SECRET_BYTES * 2) {
       cachedSecret = Buffer.from(hex2, "hex");
       return cachedSecret;
@@ -13085,7 +13133,7 @@ function getSecret() {
     console.log(`[visitor-token] secret minted path=${VISITOR_TOKEN_SECRET_FILE}`);
   } catch {
   }
-  const hex = readFileSync17(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
+  const hex = readFileSync18(VISITOR_TOKEN_SECRET_FILE, "utf-8").trim();
   cachedSecret = Buffer.from(hex, "hex");
   return cachedSecret;
 }
@@ -13138,8 +13186,8 @@ var VISITOR_COOKIE_NAME = "mxy_v";
 var VISITOR_COOKIE_MAX_AGE_SECONDS = Math.floor(DEFAULT_TTL_MS / 1e3);
 
 // app/lib/brand-config.ts
-import { existsSync as existsSync19, readFileSync as readFileSync18 } from "fs";
-import { join as join14 } from "path";
+import { existsSync as existsSync19, readFileSync as readFileSync19 } from "fs";
+import { join as join15 } from "path";
 var cached2 = null;
 var cachedAttempted = false;
 function readBrandConfig() {
@@ -13147,10 +13195,10 @@ function readBrandConfig() {
   cachedAttempted = true;
   const platformRoot = process.env.MAXY_PLATFORM_ROOT;
   if (!platformRoot) return null;
-  const brandPath = join14(platformRoot, "config", "brand.json");
+  const brandPath = join15(platformRoot, "config", "brand.json");
   if (!existsSync19(brandPath)) return null;
   try {
-    cached2 = JSON.parse(readFileSync18(brandPath, "utf-8"));
+    cached2 = JSON.parse(readFileSync19(brandPath, "utf-8"));
     return cached2;
   } catch {
     return null;
@@ -13882,7 +13930,7 @@ function broadcastAdminShutdown(reason) {
 
 // ../lib/entitlement/src/index.ts
 import { createPublicKey, createHash as createHash4, verify as cryptoVerify } from "crypto";
-import { existsSync as existsSync20, readFileSync as readFileSync19, statSync as statSync8 } from "fs";
+import { existsSync as existsSync20, readFileSync as readFileSync20, statSync as statSync9 } from "fs";
 import { resolve as resolve22 } from "path";
 
 // ../lib/entitlement/src/canonicalize.ts
@@ -13934,7 +13982,7 @@ function resolveEntitlement(brand, account) {
   if (!existsSync20(entitlementPath)) {
     return logResolved(anonymousFallback("missing"), { reason: "missing" });
   }
-  const stat8 = statSync8(entitlementPath);
+  const stat8 = statSync9(entitlementPath);
   const key = memoKey(stat8.mtimeMs, account);
   if (memo && memo.key === key) {
     return memo.result;
@@ -13946,7 +13994,7 @@ function resolveEntitlement(brand, account) {
 function verifyAndResolve(brand, entitlementPath, account) {
   let pubkeyPem;
   try {
-    pubkeyPem = readFileSync19(pubkeyPath(brand), "utf-8");
+    pubkeyPem = readFileSync20(pubkeyPath(brand), "utf-8");
   } catch (err) {
     return logResolved(anonymousFallback("pubkey-missing"), {
       reason: "pubkey-missing"
@@ -13960,7 +14008,7 @@ function verifyAndResolve(brand, entitlementPath, account) {
   }
   let envelope;
   try {
-    envelope = JSON.parse(readFileSync19(entitlementPath, "utf-8"));
+    envelope = JSON.parse(readFileSync20(entitlementPath, "utf-8"));
   } catch {
     return logResolved(anonymousFallback("malformed"), { reason: "malformed" });
   }
@@ -14121,14 +14169,14 @@ function clientFrom(c) {
   );
 }
 var PLATFORM_ROOT9 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join15(PLATFORM_ROOT9, "config", "brand.json") : "";
+var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join16(PLATFORM_ROOT9, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", marketingUrl: "https://getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync21(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);
 }
 if (BRAND_JSON_PATH && existsSync21(BRAND_JSON_PATH)) {
   try {
-    const parsed = JSON.parse(readFileSync20(BRAND_JSON_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync21(BRAND_JSON_PATH, "utf-8"));
     BRAND = { ...BRAND, ...parsed };
   } catch (err) {
     console.error(`[brand] Failed to parse brand.json: ${err.message}`);
@@ -14147,11 +14195,11 @@ var brandLoginOpts = {
   bodyFont: BRAND.defaultFonts?.body,
   logoContainsName: !!BRAND.logoContainsName
 };
-var ALIAS_DOMAINS_PATH = join15(homedir2(), BRAND.configDir, "alias-domains.json");
+var ALIAS_DOMAINS_PATH = join16(homedir2(), BRAND.configDir, "alias-domains.json");
 function loadAliasDomains() {
   try {
     if (!existsSync21(ALIAS_DOMAINS_PATH)) return null;
-    const parsed = JSON.parse(readFileSync20(ALIAS_DOMAINS_PATH, "utf-8"));
+    const parsed = JSON.parse(readFileSync21(ALIAS_DOMAINS_PATH, "utf-8"));
     if (!Array.isArray(parsed)) {
       console.error("[alias-domains] malformed alias-domains.json \u2014 expected array");
       return null;
@@ -14528,7 +14576,7 @@ app40.get("/agent-assets/:slug/:filename", (c) => {
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[agent-assets] serve slug=${slug} file=${filename} status=200`);
-  const body = readFileSync20(filePath);
+  const body = readFileSync21(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=3600"
@@ -14558,7 +14606,7 @@ app40.get("/generated/:filename", (c) => {
   const ext = "." + filename.split(".").pop()?.toLowerCase();
   const contentType = IMAGE_MIME[ext] || "application/octet-stream";
   console.log(`[generated] serve file=${filename} status=200`);
-  const body = readFileSync20(filePath);
+  const body = readFileSync21(filePath);
   return c.body(body, 200, {
     "Content-Type": contentType,
     "Cache-Control": "public, max-age=86400"
@@ -14573,7 +14621,7 @@ var brandLogoPath = "/brand/maxy-monochrome.png";
 var brandIconPath = "/brand/maxy-monochrome.png";
 if (BRAND_JSON_PATH && existsSync21(BRAND_JSON_PATH)) {
   try {
-    const fullBrand = JSON.parse(readFileSync20(BRAND_JSON_PATH, "utf-8"));
+    const fullBrand = JSON.parse(readFileSync21(BRAND_JSON_PATH, "utf-8"));
     if (fullBrand.assets?.logo) brandLogoPath = `/brand/${fullBrand.assets.logo}`;
     brandIconPath = fullBrand.assets?.icon ? `/brand/${fullBrand.assets.icon}` : brandLogoPath;
   } catch {
@@ -14590,9 +14638,9 @@ var brandScript = `<script>window.__BRAND__=${JSON.stringify({
 function readInstalledVersion() {
   try {
     if (!PLATFORM_ROOT9) return "unknown";
-    const versionFile = join15(PLATFORM_ROOT9, "config", `.${BRAND.hostname}-version`);
+    const versionFile = join16(PLATFORM_ROOT9, "config", `.${BRAND.hostname}-version`);
     if (!existsSync21(versionFile)) return "unknown";
-    const content = readFileSync20(versionFile, "utf-8").trim();
+    const content = readFileSync21(versionFile, "utf-8").trim();
     return content || "unknown";
   } catch {
     return "unknown";
@@ -14633,7 +14681,7 @@ var clientErrorReporterScript = `<script>
 function cachedHtml(file) {
   let html = htmlCache.get(file);
   if (!html) {
-    html = readFileSync20(resolve23(process.cwd(), "public", file), "utf-8");
+    html = readFileSync21(resolve23(process.cwd(), "public", file), "utf-8");
     const productNameEsc = escapeHtml(BRAND.productName);
     html = html.replace(/<title>([^<]*)<\/title>/, (_match, inner) => `<title>${escapeHtml(inner).replace(/Maxy/g, productNameEsc)}</title>`);
     html = html.replace('href="/favicon.ico"', `href="${escapeHtml(brandFaviconPath)}"`);
@@ -14649,26 +14697,26 @@ ${clientErrorReporterScript}
 }
 var brandedHtmlCache = /* @__PURE__ */ new Map();
 function loadBrandingCache(agentSlug) {
-  const configDir2 = join15(homedir2(), BRAND.configDir);
+  const configDir2 = join16(homedir2(), BRAND.configDir);
   try {
-    const accountJsonPath = join15(configDir2, "account.json");
+    const accountJsonPath = join16(configDir2, "account.json");
     if (!existsSync21(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync20(accountJsonPath, "utf-8"));
+    const account = JSON.parse(readFileSync21(accountJsonPath, "utf-8"));
     const accountId = account.accountId;
     if (!accountId) return null;
-    const cachePath = join15(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
+    const cachePath = join16(configDir2, "branding-cache", accountId, `${agentSlug}.json`);
     if (!existsSync21(cachePath)) return null;
-    return JSON.parse(readFileSync20(cachePath, "utf-8"));
+    return JSON.parse(readFileSync21(cachePath, "utf-8"));
   } catch {
     return null;
   }
 }
 function resolveDefaultSlug() {
   try {
-    const configDir2 = join15(homedir2(), BRAND.configDir);
-    const accountJsonPath = join15(configDir2, "account.json");
+    const configDir2 = join16(homedir2(), BRAND.configDir);
+    const accountJsonPath = join16(configDir2, "account.json");
     if (!existsSync21(accountJsonPath)) return null;
-    const account = JSON.parse(readFileSync20(accountJsonPath, "utf-8"));
+    const account = JSON.parse(readFileSync21(accountJsonPath, "utf-8"));
     return account.defaultAgent || null;
   } catch {
     return null;
@@ -14741,7 +14789,7 @@ app40.use("/vnc-popout.html", logViewerFetch);
 app40.get("/vnc-popout.html", (c) => {
   let html = htmlCache.get("vnc-popout.html");
   if (!html) {
-    html = readFileSync20(resolve23(process.cwd(), "public", "vnc-popout.html"), "utf-8");
+    html = readFileSync21(resolve23(process.cwd(), "public", "vnc-popout.html"), "utf-8");
     const name = escapeHtml(BRAND.productName);
     html = html.replace("<title>Browser \u2014 Maxy</title>", `<title>${name}</title>`);
     html = html.replace("</head>", `  ${brandScript}
@@ -14867,7 +14915,7 @@ try {
 (async () => {
   try {
     if (!existsSync21(USERS_FILE)) return;
-    const usersRaw = readFileSync20(USERS_FILE, "utf-8").trim();
+    const usersRaw = readFileSync21(USERS_FILE, "utf-8").trim();
     if (!usersRaw) return;
     const users = JSON.parse(usersRaw);
     const userId = users[0]?.userId;
@@ -14962,7 +15010,7 @@ if (bootAccountConfig?.whatsapp) {
 }
 init({
   configDir: configDirForWhatsApp,
-  platformRoot: resolve23(process.env.MAXY_PLATFORM_ROOT ?? join15(__dirname, "..")),
+  platformRoot: resolve23(process.env.MAXY_PLATFORM_ROOT ?? join16(__dirname, "..")),
   accountConfig: bootAccountConfig,
   onMessage: async (msg) => {
     if (process.env.WHATSAPP_PTY_BRIDGE_ENABLED === "true" && msg.text && !msg.isOwnerMirror) {