@rubytech/create-maxy-code 0.1.437 → 0.1.438

package/payload/platform/services/claude-session-manager/dist/redundant-operator-seat-audit.js

@@ -0,0 +1,127 @@
+// Task 1568 — standing redundant-operator-seat audit. A role:"client" sub-account
+// carries exactly one identity node, its business owner (AdminUser{role:'owner'}).
+// Any other AdminUser{accountId} on a client account is a redundant operator seat:
+// since Task 999 admin access is install-wide, so the seat grants nothing an
+// install-wide admin does not already have, and it fragments identity. admin-add
+// no longer creates one going forward; this periodic read is the only signal for
+// seats persisted before that fix, because a redundant seat emits no error and
+// does not reproduce on demand. Detector only — removal is a deliberate
+// remediation (Task 1569), never an automatic timer-driven delete.
+//
+// admin-add seats carry no au.role (role 'admin' lives on the ADMIN_OF edge), so
+// the predicate is not-the-owner rather than a role:'admin' match. Best-effort by
+// construction: a Neo4j-unreachable read logs `op=unavailable` rather than
+// crashing the manager (Neo4j may not be up at boot). Shape mirrors
+// rootless-client-audit.ts: a pure predicate + formatter (unit-tested) + an
+// impure collector + a start/stop factory whose setInterval is unref'd.
+import neo4j from 'neo4j-driver';
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+const TAG = '[identity-audit]';
+/** The redundant-seat invariant, read side: an AdminUser on a client account is a
+ *  redundant operator seat unless it is the owner. admin-add seats carry no
+ *  au.role, so the predicate is not-the-owner, never a role:'admin' match. */
+export function isRedundantOperatorSeat(role) {
+    return (role ?? '').trim() !== 'owner';
+}
+/** One alarm line per flagged seat; ids truncated to 8 for readability. */
+export function formatRedundantSeatLine(f) {
+    return `${TAG} op=redundant-operator-seat account=${f.accountId.slice(0, 8)} adminUserId=${f.adminUserId.slice(0, 8)}`;
+}
+/** Return every non-owner AdminUser seated on the given client accounts. One
+ *  round-trip: the cypher returns all AdminUser{accountId} rows for the client
+ *  ids and the not-owner filter is applied in JS (same predicate the audit
+ *  exposes). Empty input issues no query. */
+export async function auditRedundantOperatorSeats(session, clientIds) {
+    if (clientIds.length === 0)
+        return [];
+    const res = await session.run(`UNWIND $ids AS id
+     MATCH (au:AdminUser {accountId: id})
+     RETURN id AS accountId, coalesce(au.userId, '') AS adminUserId, au.role AS role`, { ids: clientIds });
+    const findings = [];
+    for (const rec of res.records) {
+        if (isRedundantOperatorSeat(rec.get('role'))) {
+            findings.push({
+                accountId: String(rec.get('accountId')),
+                adminUserId: String(rec.get('adminUserId')),
+            });
+        }
+    }
+    return findings;
+}
+/** Enumerate role:"client" accountIds under the accounts root (filesystem). */
+function clientAccountIds(accountsRoot) {
+    let entries;
+    try {
+        entries = readdirSync(accountsRoot);
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const entry of entries) {
+        const cfgPath = join(accountsRoot, entry, 'account.json');
+        if (!existsSync(cfgPath))
+            continue;
+        try {
+            const cfg = JSON.parse(readFileSync(cfgPath, 'utf-8'));
+            if (cfg.role === 'client')
+                out.push(entry);
+        }
+        catch {
+            // unparseable account.json — excluded
+        }
+    }
+    return out;
+}
+/** Run one audit pass and log an alarm line per flagged seat. Best-effort Neo4j:
+ *  absent env or an unreachable/erroring read logs `op=unavailable` and never
+ *  throws. A clean pass logs a single `op=ok` line so the audit's own liveness is
+ *  visible. */
+export async function emitRedundantOperatorSeatAudit(deps) {
+    if (!deps.neo4jUri || !deps.neo4jPassword) {
+        deps.logger(`${TAG} op=unavailable reason=no-neo4j-env`);
+        return;
+    }
+    const driver = neo4j.driver(deps.neo4jUri, neo4j.auth.basic(deps.neo4jUser, deps.neo4jPassword));
+    const session = driver.session();
+    try {
+        const findings = await auditRedundantOperatorSeats(session, clientAccountIds(deps.accountsRoot));
+        if (findings.length === 0) {
+            deps.logger(`${TAG} op=ok redundant-operator-seats=0`);
+            return;
+        }
+        for (const f of findings)
+            deps.logger(formatRedundantSeatLine(f));
+    }
+    catch (err) {
+        deps.logger(`${TAG} op=unavailable reason=${err instanceof Error ? err.message : String(err)}`);
+    }
+    finally {
+        await session.close();
+        await driver.close();
+    }
+}
+/** Standing periodic audit. Unref'd interval so it never holds the process open;
+ *  each tick re-emits best-effort. */
+export function createRedundantOperatorSeatAudit(deps) {
+    let timer = null;
+    return {
+        start() {
+            if (timer)
+                return;
+            timer = setInterval(() => {
+                void emitRedundantOperatorSeatAudit(deps);
+            }, deps.intervalMs);
+            if (typeof timer.unref === 'function')
+                timer.unref();
+        },
+        stop() {
+            if (timer) {
+                clearInterval(timer);
+                timer = null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=redundant-operator-seat-audit.js.map

package/payload/platform/services/claude-session-manager/dist/redundant-operator-seat-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redundant-operator-seat-audit.js","sourceRoot":"","sources":["../src/redundant-operator-seat-audit.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,mFAAmF;AACnF,mFAAmF;AACnF,6EAA6E;AAC7E,iFAAiF;AACjF,iFAAiF;AACjF,+EAA+E;AAC/E,wEAAwE;AACxE,mEAAmE;AACnE,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,2EAA2E;AAC3E,oEAAoE;AACpE,4EAA4E;AAC5E,wEAAwE;AAExE,OAAO,KAAK,MAAM,cAAc,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,MAAM,GAAG,GAAG,kBAAkB,CAAA;AAc9B;;8EAE8E;AAC9E,MAAM,UAAU,uBAAuB,CAAC,IAAmB;IACzD,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,OAAO,CAAA;AACxC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB,CAAC,CAAuB;IAC7D,OAAO,GAAG,GAAG,uCAAuC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAA;AACxH,CAAC;AAED;;;6CAG6C;AAC7C,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAyB,EACzB,SAAmB;IAEnB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACrC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3B;;qFAEiF,EACjF,EAAE,GAAG,EAAE,SAAS,EAAE,CACnB,CAAA;IACD,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9B,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAkB,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACvC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;aAC5C,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,+EAA+E;AAC/E,SAAS,gBAAgB,CAAC,YAAoB;IAC5C,IAAI,OAAiB,CAAA;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,cAAc,CAAC,CAAA;QACzD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAQ;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAuB,CAAA;YAC5E,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAUD;;;eAGe;AACf,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,IAA4B;IAC/E,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,qCAAqC,CAAC,CAAA;QACxD,OAAM;IACR,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAA;IAChG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IAChC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;QAChG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,mCAAmC,CAAC,CAAA;YACtD,OAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAA;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACjG,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;QACrB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAOD;sCACsC;AACtC,MAAM,UAAU,gCAAgC,CAC9C,IAAqD;IAErD,IAAI,KAAK,GAA0B,IAAI,CAAA;IACvC,OAAO;QACL,KAAK;YACH,IAAI,KAAK;gBAAE,OAAM;YACjB,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;gBACvB,KAAK,8BAA8B,CAAC,IAAI,CAAC,CAAA;YAC3C,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;YACnB,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;gBAAE,KAAK,CAAC,KAAK,EAAE,CAAA;QACtD,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAA;gBACpB,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/payload/server/{chunk-LMLVOZ6G.js → chunk-UGPQCVIW.js}

@@ -2774,7 +2774,8 @@ function rowIds(users) {
 function appendUsersAuditLine(audit, fields) {
   const sess = audit.session ? ` session=${id8(audit.session)}` : "";
   const actor = audit.actor.includes("-") ? id8(audit.actor) : audit.actor;
-  const line = `[users-audit] action=${fields.action} actor=${actor}${sess} field=${fields.field} rowsBefore=${fields.rowsBefore} rowsAfter=${fields.rowsAfter} ts=${(/* @__PURE__ */ new Date()).toISOString()}
+  const targetFields = audit.target !== void 0 ? ` target=${audit.target.includes("-") ? id8(audit.target) : audit.target} explicitUserId=${audit.explicitUserId ? "true" : "false"}` : "";
+  const line = `[users-audit] action=${fields.action} actor=${actor}${targetFields}${sess} field=${fields.field} rowsBefore=${fields.rowsBefore} rowsAfter=${fields.rowsAfter} ts=${(/* @__PURE__ */ new Date()).toISOString()}
 `;
   try {
     mkdirSync2(dirname(audit.logFile), { recursive: true, mode: 448 });
@@ -4515,7 +4516,7 @@ async function findRecentConversation(visitorId, accountId, agentSlug, maxAgeHou
     await session.close();
   }
 }
-async function createNewAdminConversation(userId, accountId, cacheKey2, adminName, preMintedSessionId) {
+async function createNewAdminConversation(userId, accountId, cacheKey2, preMintedSessionId) {
   if (!userId || !cacheKey2 || !accountId) {
     console.error(`[admin/conversation-write] schema-violation userId=${userId ? "set" : "EMPTY"} cacheKey=${cacheKey2 ? "set" : "EMPTY"} accountId=${accountId ? "set" : "EMPTY"}`);
     return null;
@@ -4528,7 +4529,6 @@ async function createNewAdminConversation(userId, accountId, cacheKey2, adminNam
        WITH existing IS NULL AS adminUserCreated
        MERGE (au:AdminUser {userId: $userId})
        ON CREATE SET au.accountId = $accountId,
-                     au.name = COALESCE($adminName, 'Admin'),
                      au.createdAt = datetime(),
                      au.scope = 'admin'
        CREATE (c:Conversation:AdminConversation {
@@ -4543,7 +4543,7 @@ async function createNewAdminConversation(userId, accountId, cacheKey2, adminNam
          updatedAt: datetime()
        })-[:STARTED_BY]->(au)
        RETURN adminUserCreated`,
-      { sessionId, accountId, userId, adminName: adminName ?? null }
+      { sessionId, accountId, userId }
     );
     const adminUserCreated = result.records[0]?.get("adminUserCreated") === true;
     cacheSessionId(cacheKey2, sessionId);
@@ -5113,14 +5113,15 @@ async function getUserTimezone(accountId, userId) {
     await session.close();
   }
 }
-async function loadAdminUserName(accountId, userId) {
+async function loadAdminUserName(userId) {
   const session = getSession();
   try {
     const result = await session.run(
-      `MATCH (au:AdminUser {userId: $userId})-[:OWNS]->(p:Person {accountId: $accountId})
+      `MATCH (au:AdminUser {userId: $userId})-[:OWNS]->(p:Person)
+       WHERE p.accountId = au.accountId
        RETURN p.givenName AS givenName, p.familyName AS familyName, p.avatar AS avatar
        LIMIT 1`,
-      { accountId, userId }
+      { userId }
     );
     if (result.records.length === 0) {
       return { source: "fallback", reason: "no-person-node" };
@@ -5142,33 +5143,6 @@ async function loadAdminUserName(accountId, userId) {
     await session.close();
   }
 }
-async function loadAdminDisplayIdentity(accountId, userId) {
-  const session = getSession();
-  try {
-    const result = await session.run(
-      `MATCH (au:AdminUser {userId: $userId})
-       OPTIONAL MATCH (au)-[:OWNS]->(p:Person {accountId: $accountId})
-       RETURN au.name AS name, p.avatar AS avatar
-       LIMIT 1`,
-      { accountId, userId }
-    );
-    if (result.records.length === 0) {
-      return { source: "fallback", reason: "no-admin-user" };
-    }
-    const name = result.records[0].get("name");
-    const avatar = result.records[0].get("avatar");
-    if (!name || name.trim().length === 0) {
-      return { source: "fallback", reason: "no-name" };
-    }
-    const trimmedAvatar = avatar && avatar.trim().length > 0 ? avatar.trim() : null;
-    return { source: "admin-user", name: name.trim(), avatar: trimmedAvatar };
-  } catch (err) {
-    console.error(`[admin-identity] loadAdminDisplayIdentity failed: ${err instanceof Error ? err.message : String(err)}`);
-    return { source: "fallback", reason: "neo4j-unreachable" };
-  } finally {
-    await session.close();
-  }
-}
 async function loadPersonNameByElementId(accountId, personId) {
   const session = getSession();
   try {
@@ -5226,9 +5200,9 @@ async function writeAdminUserAndPerson(params) {
        // on the operator's first memory write. Mirrors seed-neo4j.sh:175-181
        // and the sibling writers (neo4j-store.ts:537,:931). COALESCE on MATCH
        // preserves an already-stamped node.
-       ON CREATE SET au.name = $fullName, au.createdAt = $now,
+       ON CREATE SET au.createdAt = $now,
                      au.accountId = $accountId, au.role = 'owner'
-       ON MATCH SET au.name = $fullName, au.updatedAt = $now,
+       ON MATCH SET au.updatedAt = $now,
                     au.accountId = COALESCE(au.accountId, $accountId),
                     au.role = COALESCE(au.role, 'owner')
        WITH au
@@ -5274,7 +5248,7 @@ async function writeAdminUserAndPerson(params) {
        }
        RETURN reused, profileIsNew, elementId(p) AS personElementId,
               p.givenName AS givenName, p.familyName AS familyName`,
-      { userId, fullName: trimmed, accountId, givenName, familyName, now, personEmbedding, serverTimezone }
+      { userId, accountId, givenName, familyName, now, personEmbedding, serverTimezone }
     );
     if (result.records.length === 0) {
       throw new Error("writeAdminUserAndPerson: no record returned");
@@ -6020,7 +5994,6 @@ export {
   renameConversation,
   getUserTimezone,
   loadAdminUserName,
-  loadAdminDisplayIdentity,
   loadPersonNameByElementId,
   writeAdminUserAndPerson,
   loadUserProfile,

package/payload/server/maxy-edge.js

@@ -16,7 +16,7 @@ import {
   sanitizeClientCorrId,
   vncLog,
   websockifyLog
-} from "./chunk-LMLVOZ6G.js";
+} from "./chunk-UGPQCVIW.js";
 import "./chunk-PFF6I7KP.js";
 
 // server/edge.ts

package/payload/server/server.js

@@ -70,7 +70,6 @@ import {
   linkConversationTranscript,
   listAdminSessions,
   listValidAccounts,
-  loadAdminDisplayIdentity,
   loadAdminUserName,
   loadPersonNameByElementId,
   loadUserProfile,
@@ -112,7 +111,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-LMLVOZ6G.js";
+} from "./chunk-UGPQCVIW.js";
 import {
   __commonJS,
   __toESM
@@ -8567,7 +8566,7 @@ app3.get("/", requireAdminSession, async (c) => {
         }
         const auid = adminUserIdBySession.get(row.sessionId);
         if (auid) {
-          const resolved = await loadAdminUserName(scopeAccountId, auid);
+          const resolved = await loadAdminUserName(auid);
           if (resolved.source === "neo4j") {
             row.personName = resolved.joined;
             adminNameCount += 1;
@@ -9071,7 +9070,7 @@ app4.get("/conversations", requireAdminSession, async (c) => {
         return;
       }
       const idRes = classifyAdminUserId(users, admins, senderId);
-      const nameRes = idRes.kind === "resolved" ? await loadAdminUserName(account.accountId, idRes.userId) : null;
+      const nameRes = idRes.kind === "resolved" ? await loadAdminUserName(idRes.userId) : null;
       const { name, reason } = resolveOperatorDisplay(idRes, nameRes);
       if (reason) console.error(`[wa-reader] op=operator-unresolved senderId=${senderId} reason=${reason}`);
       nameBySender.set(senderId, name);
@@ -11492,7 +11491,8 @@ function formatAuditRowIds(userIds) {
 function appendUsersAuditLine(audit, fields) {
   const sess = audit.session ? ` session=${id8(audit.session)}` : "";
   const actor = audit.actor.includes("-") ? id8(audit.actor) : audit.actor;
-  const line = `[users-audit] action=${fields.action} actor=${actor}${sess} field=${fields.field} rowsBefore=${fields.rowsBefore} rowsAfter=${fields.rowsAfter} ts=${(/* @__PURE__ */ new Date()).toISOString()}
+  const targetFields = audit.target !== void 0 ? ` target=${audit.target.includes("-") ? id8(audit.target) : audit.target} explicitUserId=${audit.explicitUserId ? "true" : "false"}` : "";
+  const line = `[users-audit] action=${fields.action} actor=${actor}${targetFields}${sess} field=${fields.field} rowsBefore=${fields.rowsBefore} rowsAfter=${fields.rowsAfter} ts=${(/* @__PURE__ */ new Date()).toISOString()}
 `;
   try {
     mkdirSync5(dirname7(audit.logFile), { recursive: true, mode: 448 });
@@ -12233,13 +12233,13 @@ var client_error_default = app10;
 // server/routes/admin/session.ts
 import { randomUUID as randomUUID8 } from "crypto";
 async function resolveUserIdentity(accountId, userId) {
-  const result = await loadAdminDisplayIdentity(accountId, userId);
-  if (result.source === "admin-user") {
-    console.log(`[admin-identity] userName-source=admin-user userId=${userId.slice(0, 8)} accountId=${accountId.slice(0, 8)} name=${result.name} avatar=${result.avatar ? "present" : "absent"}`);
-    return { userName: result.name, avatar: result.avatar };
+  const result = await loadAdminUserName(userId);
+  if (result.source === "neo4j") {
+    console.log(`[admin-identity] userName-source=person userId=${userId.slice(0, 8)} accountId=${accountId.slice(0, 8)} name=${result.joined} avatar=${result.avatar ? "present" : "absent"}`);
+    return { userName: result.joined, avatar: result.avatar };
   }
   console.log(`[admin-identity] userName-source=fallback reason=${result.reason} userId=${userId.slice(0, 8)} accountId=${accountId.slice(0, 8)}`);
-  const userName = result.reason === "neo4j-unreachable" ? "Owner" : void 0;
+  const userName = result.reason === "neo4j-unreachable" ? void 0 : null;
   return { userName, avatar: null };
 }
 async function createAdminSession(accountId, thinkingView, userId, userName, role, avatar) {
@@ -12247,7 +12247,7 @@ async function createAdminSession(accountId, thinkingView, userId, userName, rol
   const effectiveThinkingView = thinkingView ?? account?.config.thinkingView ?? "default";
   const signedSessionToken = randomUUID8();
   const cacheKey = fingerprintSessionKey(signedSessionToken);
-  registerSession(cacheKey, "admin", accountId, void 0, userId, userName, role);
+  registerSession(cacheKey, "admin", accountId, void 0, userId, userName ?? void 0, role);
   if (userId) setWantsPriorConversation(cacheKey);
   const businessName = await fetchAccountName(accountId) || void 0;
   let initialSessionId = null;
@@ -12324,7 +12324,7 @@ app11.get("/", async (c) => {
     const resolved = await resolveUserIdentity(accountId, restoredUserId);
     restoredUserName = resolved.userName;
     restoredAvatar = resolved.avatar;
-    if (resolved.userName !== void 0) {
+    if (typeof resolved.userName === "string") {
       registerSession(cacheKey, "admin", accountId, void 0, restoredUserId, resolved.userName, role ?? void 0);
     }
   }
@@ -13476,7 +13476,7 @@ async function resolveOwnerProfileBlock(accountId, userId) {
 async function resolveAuthenticatedName(accountId, userId) {
   if (!userId) return void 0;
   try {
-    const res = await loadAdminUserName(accountId, userId);
+    const res = await loadAdminUserName(userId);
     return res.source === "neo4j" ? res.joined : void 0;
   } catch (err) {
     console.error(
@@ -18381,7 +18381,6 @@ app34.post("/", requireAdminSession, async (c) => {
             adminUserId,
             convAccountId,
             `session:${plan.sessionId}`,
-            authenticatedName,
             plan.sessionId
           );
           console.log(
@@ -22002,8 +22001,8 @@ import { join as join34 } from "path";
 var ADMIN_ROLE2 = "admin";
 var WEBCHAT_CHANNEL2 = "webchat";
 var SESSION_META_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\.meta\.json$/i;
-var defaultResolveName = async (accountId, userId) => {
-  const res = await loadAdminUserName(accountId, userId);
+var defaultResolveName = async (_accountId, userId) => {
+  const res = await loadAdminUserName(userId);
   return res.source === "neo4j" && res.joined.length > 0 ? res.joined : null;
 };
 async function readRaw2(path2) {