@rubytech/create-maxy-code 0.1.283 → 0.1.285

package/payload/server/server.js

@@ -6861,8 +6861,8 @@ app3.get("/group-info", async (c) => {
 var whatsapp_default = app3;
 
 // server/routes/whatsapp-reader.ts
-import { readFileSync as readFileSync9, watch, statSync as statSync3, openSync, readSync, closeSync } from "fs";
-import { basename as basename2, dirname, join as join8, resolve as resolve9, sep as sep2 } from "path";
+import { readFileSync as readFileSync10, watch, statSync as statSync4, openSync, readSync, closeSync } from "fs";
+import { basename as basename2, dirname, join as join9, resolve as resolve9, sep as sep2 } from "path";
 
 // server/routes/admin/sidebar-sessions.ts
 import { readdirSync as readdirSync4, readFileSync as readFileSync8, statSync as statSync2 } from "fs";
@@ -7118,16 +7118,115 @@ app4.get("/", requireAdminSession, async (c) => {
 var sidebar_sessions_default = app4;
 
 // app/lib/whatsapp-reader/select-sessions.ts
-function selectAdminWhatsappSessions(rows) {
-  return rows.filter((r) => r.role === "admin" && r.channel === "whatsapp").sort((a, b) => b.startedAt.localeCompare(a.startedAt)).map((r) => ({
+function selectAdminChannelSessions(rows) {
+  return rows.filter((r) => r.role === "admin" && (r.channel === "whatsapp" || r.channel === "telegram")).sort((a, b) => b.startedAt.localeCompare(a.startedAt)).map((r) => ({
     sessionId: r.sessionId,
     projectDir: r.projectDir,
     title: r.title,
     senderId: r.senderId,
-    startedAt: r.startedAt
+    startedAt: r.startedAt,
+    channel: r.channel,
+    operatorName: null
   }));
 }
 
+// app/lib/admin-identity/pin-validator.ts
+import { createHash as createHash2 } from "crypto";
+import { existsSync as existsSync6, readFileSync as readFileSync9, readdirSync as readdirSync5, statSync as statSync3 } from "fs";
+import { join as join8 } from "path";
+function hashPin(pin) {
+  return createHash2("sha256").update(pin).digest("hex");
+}
+function readUsersFile(usersFilePath) {
+  if (!existsSync6(usersFilePath)) return null;
+  const raw = readFileSync9(usersFilePath, "utf-8").trim();
+  if (!raw) return [];
+  return JSON.parse(raw);
+}
+function validatePin(pin, usersFilePath) {
+  let users;
+  try {
+    users = readUsersFile(usersFilePath);
+  } catch (err) {
+    return { kind: "corrupt", message: err instanceof Error ? err.message : String(err) };
+  }
+  if (users === null || users.length === 0) return { kind: "unavailable" };
+  const inputHash = hashPin(pin);
+  const matched = users.find((u) => u.pin === inputHash);
+  return matched ? { kind: "match", userId: matched.userId } : { kind: "miss" };
+}
+function scanForOrphanedAccountAdmins(users, accountsDir) {
+  const known = new Set(users.map((u) => u.userId));
+  const orphans = [];
+  if (!existsSync6(accountsDir)) return orphans;
+  let entries;
+  try {
+    entries = readdirSync5(accountsDir);
+  } catch {
+    return orphans;
+  }
+  for (const entry of entries) {
+    if (entry.startsWith(".")) continue;
+    const accountDir = join8(accountsDir, entry);
+    try {
+      if (!statSync3(accountDir).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    const accountJsonPath = join8(accountDir, "account.json");
+    if (!existsSync6(accountJsonPath)) continue;
+    try {
+      const config = JSON.parse(readFileSync9(accountJsonPath, "utf-8"));
+      const admins = config.admins ?? [];
+      for (const a of admins) {
+        if (typeof a.userId === "string" && !known.has(a.userId)) orphans.push(a.userId);
+      }
+    } catch {
+      continue;
+    }
+  }
+  return orphans;
+}
+
+// app/lib/whatsapp/inbound/resolve-admin-userid.ts
+function classifyAdminUserId(users, admins, senderPhone) {
+  const matched = users.find((u) => typeof u.phone === "string" && phonesMatch(u.phone, senderPhone));
+  if (!matched) return { kind: "no-users-binding" };
+  return admins.some((a) => a.userId === matched.userId) ? { kind: "resolved", userId: matched.userId } : { kind: "userid-not-admin", userId: matched.userId };
+}
+function pickAdminUserId(users, admins, senderPhone) {
+  const r = classifyAdminUserId(users, admins, senderPhone);
+  return r.kind === "resolved" ? r.userId : null;
+}
+function resolveAdminUserId(params) {
+  try {
+    const users = readUsersFile(USERS_FILE);
+    if (!users) return null;
+    const account = listValidAccounts().find((a) => a.accountId === params.accountId);
+    const admins = account?.config.admins ?? [];
+    const direct = pickAdminUserId(users, admins, params.senderPhone);
+    if (direct) return direct;
+    const mapped = resolveViaLidMap(readLidMap() ?? {}, params.senderPhone);
+    if (!mapped) return null;
+    const viaLid = pickAdminUserId(users, admins, mapped);
+    if (viaLid) {
+      console.error(`[lid-map] resolved-via-cache lid=${params.senderPhone} userId=${viaLid.slice(0, 8)}`);
+    }
+    return viaLid;
+  } catch {
+    return null;
+  }
+}
+
+// app/lib/whatsapp-reader/resolve-operator-name.ts
+function resolveOperatorDisplay(userIdRes, nameRes) {
+  if (userIdRes.kind === "no-users-binding") return { name: null, reason: "no-binding" };
+  if (userIdRes.kind === "userid-not-admin") return { name: null, reason: "not-admin" };
+  if (nameRes && nameRes.source === "neo4j") return { name: nameRes.joined, reason: null };
+  if (nameRes && nameRes.reason === "neo4j-unreachable") return { name: null, reason: "neo4j-unreachable" };
+  return { name: null, reason: "no-person-name" };
+}
+
 // app/lib/whatsapp-reader/parse-transcript.ts
 var CLI_MARKER_PREFIXES2 = ["<local-command-", "<command-name>", "<command-message>"];
 var CHANNEL_WRAPPER = /^<channel\b[^>]*>\n?([\s\S]*?)\n?<\/channel>$/;
@@ -7227,17 +7326,17 @@ var app5 = new Hono();
 app5.get("/conversations", requireAdminSession, async (c) => {
   const cfg = claudeConfigDir();
   if (!cfg) return c.json({ conversations: [] });
-  const projectsRoot = join8(cfg, "projects");
+  const projectsRoot = join9(cfg, "projects");
   const userTitles = loadUserTitles(ACCOUNTS_DIR ?? null);
   const rows = [];
   for (const { path: path2 } of enumerateJsonls(projectsRoot)) {
     const sessionId = basename2(path2).replace(/\.jsonl$/, "");
     const projectDir = dirname(path2);
-    const meta = readSidecarMeta(join8(projectDir, `${sessionId}.meta.json`));
-    if (meta.role !== "admin" || meta.channel !== "whatsapp") continue;
+    const meta = readSidecarMeta(join9(projectDir, `${sessionId}.meta.json`));
+    if (meta.role !== "admin" || meta.channel !== "whatsapp" && meta.channel !== "telegram") continue;
     let body = "";
     try {
-      body = readFileSync9(path2, "utf8");
+      body = readFileSync10(path2, "utf8");
     } catch {
     }
     const { title } = resolveTitle(body, sessionId, userTitles);
@@ -7251,10 +7350,41 @@ app5.get("/conversations", requireAdminSession, async (c) => {
       senderId: meta.senderId
     });
   }
-  return c.json({ conversations: selectAdminWhatsappSessions(rows) });
+  const selected = selectAdminChannelSessions(rows);
+  const account = resolveAccount();
+  let users = [];
+  if (account) {
+    try {
+      users = readUsersFile(USERS_FILE) ?? [];
+    } catch (err) {
+      console.error(`[wa-reader] op=users-file-unreadable reason=${err instanceof Error ? err.message : String(err)}`);
+      users = [];
+    }
+  }
+  const admins = account?.config.admins ?? [];
+  const nameBySender = /* @__PURE__ */ new Map();
+  const distinct = [...new Set(selected.map((r) => r.senderId).filter((s) => !!s))];
+  await Promise.all(
+    distinct.map(async (senderId) => {
+      if (!account) {
+        nameBySender.set(senderId, null);
+        return;
+      }
+      const idRes = classifyAdminUserId(users, admins, senderId);
+      const nameRes = idRes.kind === "resolved" ? await loadAdminUserName(account.accountId, idRes.userId) : null;
+      const { name, reason } = resolveOperatorDisplay(idRes, nameRes);
+      if (reason) console.error(`[wa-reader] op=operator-unresolved senderId=${senderId} reason=${reason}`);
+      nameBySender.set(senderId, name);
+    })
+  );
+  const conversations = selected.map((r) => ({
+    ...r,
+    operatorName: r.senderId ? nameBySender.get(r.senderId) ?? null : null
+  }));
+  return c.json({ conversations });
 });
 function readFrom(path2, from) {
-  const end = statSync3(path2).size;
+  const end = statSync4(path2).size;
   if (end <= from) return { buf: Buffer.alloc(0), end: from };
   const fd = openSync(path2, "r");
   try {
@@ -7265,41 +7395,73 @@ function readFrom(path2, from) {
     closeSync(fd);
   }
 }
+function resumeOffset(lastEventId, fileEnd) {
+  if (!lastEventId) return 0;
+  const n = Number(lastEventId);
+  if (!Number.isFinite(n) || n < 0) return 0;
+  return Math.min(n, fileEnd);
+}
 app5.get("/stream", requireAdminSession, (c) => {
   const sessionId = c.req.query("sessionId") ?? "";
   const projectDir = c.req.query("projectDir") ?? "";
   const cfg = claudeConfigDir();
-  const projectsRoot = cfg ? resolve9(join8(cfg, "projects")) : null;
+  const projectsRoot = cfg ? resolve9(join9(cfg, "projects")) : null;
   if (!cfg || !projectsRoot || !SESSION_ID_RE2.test(sessionId)) {
     return c.json({ error: "bad session reference" }, 400);
   }
-  const jsonlPath = resolve9(join8(projectDir, `${sessionId}.jsonl`));
+  const jsonlPath = resolve9(join9(projectDir, `${sessionId}.jsonl`));
   if (!jsonlPath.startsWith(projectsRoot + sep2)) {
     return c.json({ error: "bad session reference" }, 400);
   }
   const encoder = new TextEncoder();
-  const send = (controller, turn) => controller.enqueue(encoder.encode(`data: ${JSON.stringify(turn)}
+  const send = (controller, turn, id) => controller.enqueue(encoder.encode(`id: ${id}
+data: ${JSON.stringify(turn)}
 
 `));
+  const connId = `${sessionId.slice(0, 8)}-${process.hrtime.bigint().toString(36).slice(-6)}`;
+  const startedAt = Date.now();
+  const lastEventId = c.req.header("Last-Event-ID");
   const readable = new ReadableStream({
     start(controller) {
-      let offset = 0;
+      const fileEnd0 = (() => {
+        try {
+          return statSync4(jsonlPath).size;
+        } catch {
+          return 0;
+        }
+      })();
+      let offset = resumeOffset(lastEventId, fileEnd0);
+      console.log(`[wa-stream] op=open conn=${connId} sessionId=${sessionId} channel=reader resume=${offset}`);
       const drain = () => {
         try {
           const { buf, end } = readFrom(jsonlPath, offset);
           if (end <= offset) return;
           const { lines, nextOffset } = splitNewLines(buf, offset);
           offset = nextOffset;
-          for (const turn of parseTranscript(lines)) send(controller, turn);
+          let n = 0;
+          for (const turn of parseTranscript(lines)) {
+            send(controller, turn, offset);
+            n++;
+          }
+          if (n > 0) console.log(`[wa-stream] op=drain conn=${connId} turns=${n}`);
         } catch {
         }
       };
-      try {
-        const { buf, end } = readFrom(jsonlPath, 0);
-        offset = end;
-        for (const turn of parseTranscript(buf.toString("utf8").split("\n"))) send(controller, turn);
-      } catch {
-        controller.enqueue(encoder.encode('event: error\ndata: "read-failed"\n\n'));
+      if (offset === 0) {
+        try {
+          const { buf, end } = readFrom(jsonlPath, 0);
+          offset = end;
+          let n = 0;
+          for (const turn of parseTranscript(buf.toString("utf8").split("\n"))) {
+            send(controller, turn, offset);
+            n++;
+          }
+          console.log(`[wa-stream] op=backlog conn=${connId} turns=${n} bytes=${end}`);
+        } catch {
+          controller.enqueue(encoder.encode('event: error\ndata: "read-failed"\n\n'));
+        }
+      } else {
+        drain();
       }
       let watcher = null;
       try {
@@ -7307,9 +7469,18 @@ app5.get("/stream", requireAdminSession, (c) => {
       } catch {
       }
       const poll = setInterval(drain, 1e3);
+      const heartbeat = setInterval(() => {
+        try {
+          controller.enqueue(encoder.encode(": ping\n\n"));
+          console.log(`[wa-stream] op=heartbeat conn=${connId}`);
+        } catch {
+        }
+      }, 2e4);
       c.req.raw.signal.addEventListener("abort", () => {
         watcher?.close();
         clearInterval(poll);
+        clearInterval(heartbeat);
+        console.log(`[wa-stream] op=close conn=${connId} ranMs=${Date.now() - startedAt} reason=client-abort`);
         try {
           controller.close();
         } catch {
@@ -7325,8 +7496,8 @@ var whatsapp_reader_default = app5;
 
 // server/routes/telegram.ts
 import { homedir } from "os";
-import { resolve as resolve10, join as join9 } from "path";
-import { existsSync as existsSync6, readFileSync as readFileSync10 } from "fs";
+import { resolve as resolve10, join as join10 } from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync11 } from "fs";
 
 // app/lib/telegram/access-control.ts
 function checkTelegramAccess(params) {
@@ -7377,10 +7548,10 @@ var TAG21 = "[telegram-inbound]";
 var DISPATCH_TIMEOUT_MS = 12e4;
 function configDirName() {
   const platformRoot2 = process.env.MAXY_PLATFORM_ROOT ?? resolve10(process.cwd(), "..");
-  const brandPath = join9(platformRoot2, "config", "brand.json");
-  if (existsSync6(brandPath)) {
+  const brandPath = join10(platformRoot2, "config", "brand.json");
+  if (existsSync7(brandPath)) {
     try {
-      return JSON.parse(readFileSync10(brandPath, "utf-8")).configDir ?? ".maxy";
+      return JSON.parse(readFileSync11(brandPath, "utf-8")).configDir ?? ".maxy";
     } catch {
     }
   }
@@ -7412,11 +7583,11 @@ app6.post("/", async (c) => {
     return c.json({ ok: false }, 400);
   }
   const sp = secretPath(botType);
-  if (!existsSync6(sp)) {
+  if (!existsSync7(sp)) {
     console.error(`${TAG21} op=reject reason=no-secret-file botType=${botType}`);
     return c.json({ ok: false }, 401);
   }
-  const expected = readFileSync10(sp, "utf-8").trim();
+  const expected = readFileSync11(sp, "utf-8").trim();
   const got = c.req.header("x-telegram-bot-api-secret-token") ?? "";
   if (got !== expected) {
     console.error(`${TAG21} op=reject reason=bad-secret botType=${botType}`);
@@ -7479,12 +7650,12 @@ var telegram_default = app6;
 
 // server/routes/onboarding.ts
 import { spawn, spawnSync as spawnSync2, execFileSync as execFileSync2 } from "child_process";
-import { openSync as openSync2, closeSync as closeSync2, writeFileSync as writeFileSync6, writeSync, existsSync as existsSync8, readFileSync as readFileSync12, unlinkSync } from "fs";
-import { createHash as createHash2, randomUUID as randomUUID7 } from "crypto";
+import { openSync as openSync2, closeSync as closeSync2, writeFileSync as writeFileSync6, writeSync, existsSync as existsSync9, readFileSync as readFileSync13, unlinkSync } from "fs";
+import { createHash as createHash3, randomUUID as randomUUID7 } from "crypto";
 
 // ../lib/admins-write/src/index.ts
-import { existsSync as existsSync7, readFileSync as readFileSync11, writeFileSync as writeFileSync5, renameSync, mkdirSync as mkdirSync2, readdirSync as readdirSync5, statSync as statSync4 } from "fs";
-import { dirname as dirname2, join as join10 } from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync12, writeFileSync as writeFileSync5, renameSync, mkdirSync as mkdirSync2, readdirSync as readdirSync6, statSync as statSync5 } from "fs";
+import { dirname as dirname2, join as join11 } from "path";
 function logLine(input, result) {
   const userIdShort = input.userId.slice(0, 8);
   console.error(
@@ -7501,8 +7672,8 @@ function writeAdminEntry(input) {
   const result = { usersJsonResult: "noop", accountJsonResult: "noop" };
   try {
     let users = [];
-    if (existsSync7(input.usersFile)) {
-      const raw = readFileSync11(input.usersFile, "utf-8").trim();
+    if (existsSync8(input.usersFile)) {
+      const raw = readFileSync12(input.usersFile, "utf-8").trim();
       if (raw) {
         const parsed = JSON.parse(raw);
         if (!Array.isArray(parsed)) {
@@ -7526,11 +7697,11 @@ function writeAdminEntry(input) {
     return result;
   }
   try {
-    const accountJsonPath = join10(input.accountDir, "account.json");
-    if (!existsSync7(accountJsonPath)) {
+    const accountJsonPath = join11(input.accountDir, "account.json");
+    if (!existsSync8(accountJsonPath)) {
       throw new Error(`account.json not found at ${accountJsonPath}`);
     }
-    const config = JSON.parse(readFileSync11(accountJsonPath, "utf-8"));
+    const config = JSON.parse(readFileSync12(accountJsonPath, "utf-8"));
     const admins = config.admins ?? [];
     if (admins.some((a) => a.userId === input.userId)) {
       result.accountJsonResult = "noop";
@@ -7554,9 +7725,9 @@ function checkAdminAuthInvariant(input) {
     usersWithoutAccount: []
   };
   const usersUserIds = /* @__PURE__ */ new Set();
-  if (existsSync7(input.usersFile)) {
+  if (existsSync8(input.usersFile)) {
     try {
-      const raw = readFileSync11(input.usersFile, "utf-8").trim();
+      const raw = readFileSync12(input.usersFile, "utf-8").trim();
       if (raw) {
         const users = JSON.parse(raw);
         for (const u of users) {
@@ -7569,10 +7740,10 @@ function checkAdminAuthInvariant(input) {
     }
   }
   const accountUserIds = /* @__PURE__ */ new Set();
-  if (existsSync7(input.accountsDir)) {
+  if (existsSync8(input.accountsDir)) {
     let entries;
     try {
-      entries = readdirSync5(input.accountsDir);
+      entries = readdirSync6(input.accountsDir);
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
       console.error(`[${input.tag}] accounts-dir unreadable accountsDir=${input.accountsDir} error=${msg}`);
@@ -7581,17 +7752,17 @@ function checkAdminAuthInvariant(input) {
     }
     for (const entry of entries) {
       if (entry.startsWith(".")) continue;
-      const accountDir = join10(input.accountsDir, entry);
+      const accountDir = join11(input.accountsDir, entry);
       try {
-        if (!statSync4(accountDir).isDirectory()) continue;
+        if (!statSync5(accountDir).isDirectory()) continue;
       } catch {
         continue;
       }
-      const accountJsonPath = join10(accountDir, "account.json");
-      if (!existsSync7(accountJsonPath)) continue;
+      const accountJsonPath = join11(accountDir, "account.json");
+      if (!existsSync8(accountJsonPath)) continue;
       let admins = [];
       try {
-        const config = JSON.parse(readFileSync11(accountJsonPath, "utf-8"));
+        const config = JSON.parse(readFileSync12(accountJsonPath, "utf-8"));
         admins = config.admins ?? [];
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -7627,12 +7798,12 @@ function checkAdminAuthInvariant(input) {
 }
 
 // server/routes/onboarding.ts
-function hashPin(pin) {
-  return createHash2("sha256").update(pin).digest("hex");
+function hashPin2(pin) {
+  return createHash3("sha256").update(pin).digest("hex");
 }
-function readUsersFile() {
-  if (!existsSync8(USERS_FILE)) return null;
-  const raw = readFileSync12(USERS_FILE, "utf-8").trim();
+function readUsersFile2() {
+  if (!existsSync9(USERS_FILE)) return null;
+  const raw = readFileSync13(USERS_FILE, "utf-8").trim();
   if (!raw) return [];
   return JSON.parse(raw);
 }
@@ -7733,7 +7904,7 @@ app7.post("/claude-auth", async (c) => {
 app7.post("/set-pin", async (c) => {
   let existingUsers = null;
   try {
-    existingUsers = readUsersFile();
+    existingUsers = readUsersFile2();
   } catch (err) {
     console.error(`[set-pin] users.json corrupt: ${err instanceof Error ? err.message : String(err)}`);
     return c.json({ error: "User configuration is corrupt." }, 400);
@@ -7754,7 +7925,7 @@ app7.post("/set-pin", async (c) => {
   if (!fullName) {
     return c.json({ error: "Your name is required." }, 400);
   }
-  const hash = hashPin(body.pin);
+  const hash = hashPin2(body.pin);
   const account = resolveAccount();
   const existingOwnerUserId = account?.config.admins?.find((a) => a.role === "owner")?.userId;
   const userId = existingOwnerUserId ?? randomUUID7();
@@ -7786,9 +7957,9 @@ app7.post("/set-pin", async (c) => {
   console.log(`[set-pin] wrote users.json + account.json admins: userId=${userId.slice(0, 8)}\u2026 role=owner`);
   if (process.platform === "linux") {
     let installOwner = null;
-    if (existsSync8(INSTALL_OWNER_FILE)) {
+    if (existsSync9(INSTALL_OWNER_FILE)) {
       try {
-        const raw = readFileSync12(INSTALL_OWNER_FILE, "utf-8").trim();
+        const raw = readFileSync13(INSTALL_OWNER_FILE, "utf-8").trim();
         if (raw.length > 0) installOwner = raw;
       } catch (err) {
         console.error(`[set-pin] install-owner-read-failed path=${INSTALL_OWNER_FILE} error=${err instanceof Error ? err.message : String(err)}`);
@@ -7835,7 +8006,7 @@ ${body.pin}
 app7.delete("/set-pin", async (c) => {
   let users = null;
   try {
-    users = readUsersFile();
+    users = readUsersFile2();
   } catch (err) {
     console.error(`[set-pin] users.json corrupt on DELETE: ${err instanceof Error ? err.message : String(err)}`);
     return c.json({ error: "User configuration is corrupt." }, 400);
@@ -7850,7 +8021,7 @@ app7.delete("/set-pin", async (c) => {
     return c.json({ error: "Invalid request" }, 400);
   }
   if (!body.currentPin) return c.json({ error: "Current PIN required." }, 400);
-  const inputHash = hashPin(body.currentPin);
+  const inputHash = hashPin2(body.currentPin);
   const matchedUser = users.find((u) => u.pin === inputHash);
   if (!matchedUser) {
     console.log(`[set-pin] DELETE PIN mismatch: input=${inputHash.slice(0, 8)}\u2026`);
@@ -7869,9 +8040,9 @@ app7.delete("/set-pin", async (c) => {
 var onboarding_default = app7;
 
 // server/routes/client-error.ts
-import { appendFileSync, existsSync as existsSync9, renameSync as renameSync2, statSync as statSync5 } from "fs";
-import { join as join11 } from "path";
-var CLIENT_ERRORS_LOG = join11(LOG_DIR, "client-errors.log");
+import { appendFileSync, existsSync as existsSync10, renameSync as renameSync2, statSync as statSync6 } from "fs";
+import { join as join12 } from "path";
+var CLIENT_ERRORS_LOG = join12(LOG_DIR, "client-errors.log");
 var MAX_LOG_SIZE = 10 * 1024 * 1024;
 var MAX_BODY_SIZE = 8 * 1024;
 var MAX_STACK_LEN = 2e3;
@@ -7914,8 +8085,8 @@ function stackHead(stack) {
 }
 function rotateIfNeeded() {
   try {
-    if (!existsSync9(CLIENT_ERRORS_LOG)) return;
-    const stats = statSync5(CLIENT_ERRORS_LOG);
+    if (!existsSync10(CLIENT_ERRORS_LOG)) return;
+    const stats = statSync6(CLIENT_ERRORS_LOG);
     if (stats.size < MAX_LOG_SIZE) return;
     renameSync2(CLIENT_ERRORS_LOG, CLIENT_ERRORS_LOG + ".1");
   } catch (err) {
@@ -8029,66 +8200,6 @@ var client_error_default = app8;
 
 // server/routes/admin/session.ts
 import { randomUUID as randomUUID8 } from "crypto";
-
-// app/lib/admin-identity/pin-validator.ts
-import { createHash as createHash3 } from "crypto";
-import { existsSync as existsSync10, readFileSync as readFileSync13, readdirSync as readdirSync6, statSync as statSync6 } from "fs";
-import { join as join12 } from "path";
-function hashPin2(pin) {
-  return createHash3("sha256").update(pin).digest("hex");
-}
-function readUsersFile2(usersFilePath) {
-  if (!existsSync10(usersFilePath)) return null;
-  const raw = readFileSync13(usersFilePath, "utf-8").trim();
-  if (!raw) return [];
-  return JSON.parse(raw);
-}
-function validatePin(pin, usersFilePath) {
-  let users;
-  try {
-    users = readUsersFile2(usersFilePath);
-  } catch (err) {
-    return { kind: "corrupt", message: err instanceof Error ? err.message : String(err) };
-  }
-  if (users === null || users.length === 0) return { kind: "unavailable" };
-  const inputHash = hashPin2(pin);
-  const matched = users.find((u) => u.pin === inputHash);
-  return matched ? { kind: "match", userId: matched.userId } : { kind: "miss" };
-}
-function scanForOrphanedAccountAdmins(users, accountsDir) {
-  const known = new Set(users.map((u) => u.userId));
-  const orphans = [];
-  if (!existsSync10(accountsDir)) return orphans;
-  let entries;
-  try {
-    entries = readdirSync6(accountsDir);
-  } catch {
-    return orphans;
-  }
-  for (const entry of entries) {
-    if (entry.startsWith(".")) continue;
-    const accountDir = join12(accountsDir, entry);
-    try {
-      if (!statSync6(accountDir).isDirectory()) continue;
-    } catch {
-      continue;
-    }
-    const accountJsonPath = join12(accountDir, "account.json");
-    if (!existsSync10(accountJsonPath)) continue;
-    try {
-      const config = JSON.parse(readFileSync13(accountJsonPath, "utf-8"));
-      const admins = config.admins ?? [];
-      for (const a of admins) {
-        if (typeof a.userId === "string" && !known.has(a.userId)) orphans.push(a.userId);
-      }
-    } catch {
-      continue;
-    }
-  }
-  return orphans;
-}
-
-// server/routes/admin/session.ts
 async function resolveUserIdentity(accountId, userId) {
   const result = await loadAdminUserName(accountId, userId);
   if (result.source === "neo4j") {
@@ -8209,7 +8320,7 @@ app9.post("/", async (c) => {
   if (verdict.kind === "miss") {
     let users = [];
     try {
-      users = readUsersFile2(USERS_FILE) ?? [];
+      users = readUsersFile(USERS_FILE) ?? [];
     } catch {
     }
     const orphanUserIds = scanForOrphanedAccountAdmins(users, ACCOUNTS_DIR);
@@ -16060,36 +16171,6 @@ var WaGateway = class {
   }
 };
 
-// app/lib/whatsapp/inbound/resolve-admin-userid.ts
-function classifyAdminUserId(users, admins, senderPhone) {
-  const matched = users.find((u) => typeof u.phone === "string" && phonesMatch(u.phone, senderPhone));
-  if (!matched) return { kind: "no-users-binding" };
-  return admins.some((a) => a.userId === matched.userId) ? { kind: "resolved", userId: matched.userId } : { kind: "userid-not-admin", userId: matched.userId };
-}
-function pickAdminUserId(users, admins, senderPhone) {
-  const r = classifyAdminUserId(users, admins, senderPhone);
-  return r.kind === "resolved" ? r.userId : null;
-}
-function resolveAdminUserId(params) {
-  try {
-    const users = readUsersFile2(USERS_FILE);
-    if (!users) return null;
-    const account = listValidAccounts().find((a) => a.accountId === params.accountId);
-    const admins = account?.config.admins ?? [];
-    const direct = pickAdminUserId(users, admins, params.senderPhone);
-    if (direct) return direct;
-    const mapped = resolveViaLidMap(readLidMap() ?? {}, params.senderPhone);
-    if (!mapped) return null;
-    const viaLid = pickAdminUserId(users, admins, mapped);
-    if (viaLid) {
-      console.error(`[lid-map] resolved-via-cache lid=${params.senderPhone} userId=${viaLid.slice(0, 8)}`);
-    }
-    return viaLid;
-  } catch {
-    return null;
-  }
-}
-
 // app/lib/whatsapp/inbound/channel-admin-binding-drift.ts
 function findChannelAdminBindingDrift(adminPhones, admins, users) {
   const drift = [];
@@ -16103,7 +16184,7 @@ function findChannelAdminBindingDrift(adminPhones, admins, users) {
 function warnOnChannelAdminBindingDrift() {
   let users;
   try {
-    users = readUsersFile2(USERS_FILE) ?? [];
+    users = readUsersFile(USERS_FILE) ?? [];
   } catch {
     return;
   }