@rubytech/create-maxy 1.0.477 → 1.0.478

package/payload/server/server.js

@@ -2877,6 +2877,8 @@ if (platformRoot) {
 }
 var MAXY_DIR = resolve(homedir(), configDirName);
 var PIN_FILE = resolve(MAXY_DIR, ".admin-pin");
+var PLATFORM_ROOT = process.env.MAXY_PLATFORM_ROOT ?? resolve(process.cwd(), "..");
+var USERS_FILE = resolve(PLATFORM_ROOT, "config", "users.json");
 var LOG_DIR = resolve(MAXY_DIR, "logs");
 var BIN_DIR = resolve(MAXY_DIR, "bin");
 var API_KEY_FILE = resolve(MAXY_DIR, ".anthropic-api-key");
@@ -3144,8 +3146,8 @@ import { spawnSync, execFileSync } from "child_process";
 import { createConnection as createConnection2 } from "net";
 import { mkdirSync, writeFileSync as writeFileSync2 } from "fs";
 import { resolve as resolve2 } from "path";
-var PLATFORM_ROOT = process.env.MAXY_PLATFORM_ROOT ?? resolve2(process.cwd(), "..");
-var VNC_SCRIPT = resolve2(PLATFORM_ROOT, "scripts/vnc.sh");
+var PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve2(process.cwd(), "..");
+var VNC_SCRIPT = resolve2(PLATFORM_ROOT2, "scripts/vnc.sh");
 function sleep(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
@@ -3277,11 +3279,11 @@ import { randomUUID } from "crypto";
 import { spawn } from "child_process";
 import { readFileSync as readFileSync4 } from "fs";
 import { resolve as resolve3 } from "path";
-var PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve3(process.cwd(), "..");
+var PLATFORM_ROOT3 = process.env.MAXY_PLATFORM_ROOT ?? resolve3(process.cwd(), "..");
 var driver = null;
 function readPassword() {
   if (process.env.NEO4J_PASSWORD) return process.env.NEO4J_PASSWORD;
-  const passwordFile = resolve3(PLATFORM_ROOT2, "config/.neo4j-password");
+  const passwordFile = resolve3(PLATFORM_ROOT3, "config/.neo4j-password");
   try {
     return readFileSync4(passwordFile, "utf-8").trim();
   } catch {
@@ -4270,11 +4272,11 @@ function agentLogStream(name, accountDir) {
   }
   return createWriteStream(resolve4(logDir, `${name}-${date5}.log`), { flags: "a" });
 }
-var PLATFORM_ROOT3 = process.env.MAXY_PLATFORM_ROOT ?? resolve4(process.cwd(), "..");
-var ACCOUNTS_DIR = resolve4(PLATFORM_ROOT3, "..", "data/accounts");
-if (!existsSync5(PLATFORM_ROOT3)) {
+var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT ?? resolve4(process.cwd(), "..");
+var ACCOUNTS_DIR = resolve4(PLATFORM_ROOT4, "..", "data/accounts");
+if (!existsSync5(PLATFORM_ROOT4)) {
   throw new Error(
-    `PLATFORM_ROOT does not exist: ${PLATFORM_ROOT3}
+    `PLATFORM_ROOT does not exist: ${PLATFORM_ROOT4}
 Set the MAXY_PLATFORM_ROOT environment variable to the absolute path of the platform directory.`
   );
 }
@@ -4452,7 +4454,7 @@ function resolveAgentConfig(accountDir, agentName) {
   return { model, plugins, status, displayName, image, imageShape, showAgentName, knowledge, knowledgeBaked, liveMemory, knowledgeKeywords, budget, accessMode };
 }
 function parsePluginFrontmatter(pluginDir) {
-  const pluginPath = resolve4(PLATFORM_ROOT3, "plugins", pluginDir, "PLUGIN.md");
+  const pluginPath = resolve4(PLATFORM_ROOT4, "plugins", pluginDir, "PLUGIN.md");
   if (!existsSync5(pluginPath)) return null;
   let raw2;
   try {
@@ -4513,7 +4515,7 @@ function parsePluginFrontmatter(pluginDir) {
   };
 }
 function assemblePublicPluginContent(pluginDir) {
-  const pluginRoot = resolve4(PLATFORM_ROOT3, "plugins", pluginDir);
+  const pluginRoot = resolve4(PLATFORM_ROOT4, "plugins", pluginDir);
   const pluginPath = resolve4(pluginRoot, "PLUGIN.md");
   let raw2;
   try {
@@ -4607,7 +4609,7 @@ function assemblePublicPluginContent(pluginDir) {
   return { body: parts.join("\n"), skillCount, refCount };
 }
 function loadEmbeddedPlugins(agentType, selectedPlugins, enabledPlugins) {
-  const pluginsDir = resolve4(PLATFORM_ROOT3, "plugins");
+  const pluginsDir = resolve4(PLATFORM_ROOT4, "plugins");
   let dirs;
   try {
     dirs = readdirSync(pluginsDir);
@@ -4687,14 +4689,14 @@ var mcpToolsCache = /* @__PURE__ */ new Map();
 function fetchMcpToolsList(pluginDir) {
   const cached2 = mcpToolsCache.get(pluginDir);
   if (cached2) return Promise.resolve(cached2);
-  const serverPath = resolve4(PLATFORM_ROOT3, "plugins", pluginDir, "mcp/dist/index.js");
+  const serverPath = resolve4(PLATFORM_ROOT4, "plugins", pluginDir, "mcp/dist/index.js");
   if (!existsSync5(serverPath)) return Promise.resolve([]);
   const startMs = Date.now();
   return new Promise((resolvePromise) => {
     const proc = spawn2(process.execPath, [serverPath], {
       env: {
         ...process.env,
-        PLATFORM_ROOT: PLATFORM_ROOT3,
+        PLATFORM_ROOT: PLATFORM_ROOT4,
         ACCOUNT_ID: "__toolslist__",
         PLATFORM_PORT: process.env.PORT ?? "19200"
       }
@@ -4778,7 +4780,7 @@ function fetchMcpToolsList(pluginDir) {
   });
 }
 async function buildPluginManifest(enabledPlugins) {
-  const pluginsDir = resolve4(PLATFORM_ROOT3, "plugins");
+  const pluginsDir = resolve4(PLATFORM_ROOT4, "plugins");
   let dirs;
   try {
     dirs = readdirSync(pluginsDir);
@@ -4849,7 +4851,7 @@ async function buildPluginManifest(enabledPlugins) {
         toolLines.push(desc ? `  ${tool.name} \u2014 ${desc}` : `  ${tool.name}`);
       }
     } else if (parsed.tools.length > 0) {
-      const serverPath = resolve4(PLATFORM_ROOT3, "plugins", dir, "mcp/dist/index.js");
+      const serverPath = resolve4(PLATFORM_ROOT4, "plugins", dir, "mcp/dist/index.js");
       if (existsSync5(serverPath)) {
         fallbackSourced++;
         console.error(`[plugin-manifest] ${dir}: tools/list empty \u2014 fallback to frontmatter (${parsed.tools.length} tools)`);
@@ -4924,10 +4926,37 @@ function validateComponentData(componentName, data) {
 function getDefaultAccountId() {
   return resolveAccount()?.accountId ?? null;
 }
+function resolveUserAccounts(userId) {
+  if (!existsSync5(ACCOUNTS_DIR)) return [];
+  const results = [];
+  const entries = readdirSync(ACCOUNTS_DIR, { withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const configPath2 = resolve4(ACCOUNTS_DIR, entry.name, "account.json");
+    if (!existsSync5(configPath2)) continue;
+    let config2;
+    try {
+      config2 = JSON.parse(readFileSync5(configPath2, "utf-8"));
+    } catch {
+      console.error(`[session] account.json corrupt at ${configPath2} \u2014 skipping`);
+      continue;
+    }
+    const adminEntry = config2.admins?.find((a) => a.userId === userId);
+    if (adminEntry) {
+      results.push({
+        accountId: config2.accountId,
+        accountDir: resolve4(ACCOUNTS_DIR, entry.name),
+        config: config2,
+        role: adminEntry.role
+      });
+    }
+  }
+  return results;
+}
 var sessionStore = /* @__PURE__ */ new Map();
 setSessionStoreRef(sessionStore);
-function registerSession(sessionKey, agentType, accountId, agentName) {
-  sessionStore.set(sessionKey, { createdAt: Date.now(), agentType, accountId, agentName });
+function registerSession(sessionKey, agentType, accountId, agentName, userId, userName) {
+  sessionStore.set(sessionKey, { createdAt: Date.now(), agentType, accountId, agentName, userId, userName });
 }
 function registerResumedSession(sessionKey, accountId, agentName, conversationId, messages) {
   const messageHistory = messages.map((m) => ({
@@ -5076,38 +5105,38 @@ function getMcpServers(accountId, enabledPlugins) {
   const servers = {
     "memory": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/memory/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/memory/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     },
     "contacts": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/contacts/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/contacts/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     },
     "whatsapp": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/whatsapp/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3, PLATFORM_PORT: process.env.PORT ?? "19200" }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/whatsapp/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4, PLATFORM_PORT: process.env.PORT ?? "19200" }
     },
     "admin": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/admin/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3, PLATFORM_PORT: process.env.PORT ?? "19200" }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/admin/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4, PLATFORM_PORT: process.env.PORT ?? "19200" }
     },
     "scheduling": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/scheduling/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/scheduling/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     },
     "tasks": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/tasks/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/tasks/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     },
     "email": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/email/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/email/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     },
     // Playwright MCP server — browser automation for browser-specialist.
     // Key matches Claude Code's plugin naming: plugin_{plugin}_{server} so tools
@@ -5123,8 +5152,8 @@ function getMcpServers(accountId, enabledPlugins) {
   if (process.env.TELEGRAM_PUBLIC_BOT_TOKEN) {
     servers["telegram"] = {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/telegram/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/telegram/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     };
   } else {
     console.error("[plugins] telegram MCP: skipped (no TELEGRAM_PUBLIC_BOT_TOKEN)");
@@ -5141,14 +5170,14 @@ function getMcpServers(accountId, enabledPlugins) {
   if (!tunnelConfigured) {
     servers["cloudflare"] = {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/cloudflare/mcp/dist/index.js")],
-      env: { PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/cloudflare/mcp/dist/index.js")],
+      env: { PLATFORM_ROOT: PLATFORM_ROOT4 }
     };
   } else {
     console.error("[plugins] cloudflare MCP: skipped (tunnel already configured)");
   }
   if (Array.isArray(enabledPlugins) && enabledPlugins.length > 0) {
-    const pluginsDir = resolve4(PLATFORM_ROOT3, "plugins");
+    const pluginsDir = resolve4(PLATFORM_ROOT4, "plugins");
     let dirs;
     try {
       dirs = readdirSync(pluginsDir);
@@ -5171,12 +5200,12 @@ function getMcpServers(accountId, enabledPlugins) {
           continue;
         }
       }
-      const mcpEntry = resolve4(PLATFORM_ROOT3, "plugins", dir, "mcp/dist/index.js");
+      const mcpEntry = resolve4(PLATFORM_ROOT4, "plugins", dir, "mcp/dist/index.js");
       if (!existsSync5(mcpEntry)) continue;
       servers[dir] = {
         command: "node",
         args: [mcpEntry],
-        env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+        env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
       };
       console.log(`[plugins] optional MCP server started: ${dir}`);
     }
@@ -5265,7 +5294,7 @@ var ADMIN_CORE_TOOLS = [
 function getAdminAllowedTools(enabledPlugins) {
   const tools = [...ADMIN_CORE_TOOLS];
   if (Array.isArray(enabledPlugins) && enabledPlugins.length > 0) {
-    const pluginsDir = resolve4(PLATFORM_ROOT3, "plugins");
+    const pluginsDir = resolve4(PLATFORM_ROOT4, "plugins");
     let dirs;
     try {
       dirs = readdirSync(pluginsDir);
@@ -5358,7 +5387,7 @@ ${message.slice(0, QUERY_CLASSIFIER_MSG_CAP)}`
   }
 }
 async function fetchMemoryContext(accountId, query, sessionKey, options) {
-  const serverPath = resolve4(PLATFORM_ROOT3, "plugins/memory/mcp/dist/index.js");
+  const serverPath = resolve4(PLATFORM_ROOT4, "plugins/memory/mcp/dist/index.js");
   if (!existsSync5(serverPath)) {
     console.error(`[fetchMemoryContext] MCP server not found: ${serverPath}`);
     return null;
@@ -5369,7 +5398,7 @@ async function fetchMemoryContext(accountId, query, sessionKey, options) {
       env: {
         ...process.env,
         ACCOUNT_ID: accountId,
-        PLATFORM_ROOT: PLATFORM_ROOT3,
+        PLATFORM_ROOT: PLATFORM_ROOT4,
         READ_ONLY: "true",
         ALLOWED_SCOPES: "public,shared",
         ...sessionKey ? { SESSION_ID: sessionKey } : {},
@@ -5456,7 +5485,7 @@ async function fetchMemoryContext(accountId, query, sessionKey, options) {
 }
 async function compactTrimmedMessages(accountId, trimmedMessages) {
   if (trimmedMessages.length === 0) return true;
-  const serverPath = resolve4(PLATFORM_ROOT3, "plugins/memory/mcp/dist/index.js");
+  const serverPath = resolve4(PLATFORM_ROOT4, "plugins/memory/mcp/dist/index.js");
   if (!existsSync5(serverPath)) return false;
   const briefing = trimmedMessages.map((m) => `[${m.role.toUpperCase()}] ${m.content}`).join("\n\n");
   return new Promise((resolvePromise) => {
@@ -5888,7 +5917,7 @@ async function* runCompactionTurn(accountDir, accountId, systemPrompt, resumeSes
   const proc = spawn2("claude", args, {
     cwd: accountDir,
     stdio: ["ignore", "pipe", "pipe"],
-    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT3, ACCOUNT_DIR: accountDir }
+    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT4, ACCOUNT_DIR: accountDir }
   });
   const stderrLog = agentLogStream("claude-agent-compaction-stderr", accountDir);
   proc.stderr?.pipe(stderrLog);
@@ -6529,7 +6558,7 @@ async function* invokeAdminAgent(message, systemPrompt, accountDir, accountId, a
   const proc = spawn2("claude", args, {
     cwd: accountDir,
     stdio: ["ignore", "pipe", "pipe"],
-    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT3, ACCOUNT_DIR: accountDir }
+    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT4, ACCOUNT_DIR: accountDir }
   });
   const stderrLog = agentLogStream("claude-agent-stderr", accountDir);
   proc.stderr?.pipe(stderrLog);
@@ -6778,7 +6807,7 @@ async function* invokeManagedAdminAgent(message, systemPrompt, accountDir, accou
   const proc = spawn2("claude", args, {
     cwd: accountDir,
     stdio: ["ignore", "pipe", "pipe"],
-    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT3, ACCOUNT_DIR: accountDir }
+    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT4, ACCOUNT_DIR: accountDir }
   });
   const stderrLog = agentLogStream("claude-agent-stderr", accountDir);
   proc.stderr?.pipe(stderrLog);
@@ -7606,8 +7635,8 @@ import { randomUUID as randomUUID2 } from "crypto";
 import { mkdir, readFile, stat, writeFile } from "fs/promises";
 import { realpathSync } from "fs";
 import { resolve as resolve6, extname, basename } from "path";
-var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT ?? resolve6(process.cwd(), "../platform");
-var ATTACHMENTS_ROOT = resolve6(PLATFORM_ROOT4, "..", "data/uploads");
+var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve6(process.cwd(), "../platform");
+var ATTACHMENTS_ROOT = resolve6(PLATFORM_ROOT5, "..", "data/uploads");
 var SUPPORTED_MIME_TYPES = /* @__PURE__ */ new Set([
   "image/jpeg",
   "image/png",
@@ -8463,11 +8492,11 @@ import neo4j2 from "neo4j-driver";
 import { readFileSync as readFileSync7 } from "fs";
 import { resolve as resolve7 } from "path";
 import { randomUUID as randomUUID3, randomInt } from "crypto";
-var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve7(process.cwd(), "..");
+var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve7(process.cwd(), "..");
 var driver2 = null;
 function readPassword2() {
   if (process.env.NEO4J_PASSWORD) return process.env.NEO4J_PASSWORD;
-  const passwordFile = resolve7(PLATFORM_ROOT5, "config/.neo4j-password");
+  const passwordFile = resolve7(PLATFORM_ROOT6, "config/.neo4j-password");
   try {
     return readFileSync7(passwordFile, "utf-8").trim();
   } catch {
@@ -25619,7 +25648,7 @@ import { readFile as readFile2, stat as stat2 } from "fs/promises";
 import { realpathSync as realpathSync2 } from "fs";
 import { resolve as resolve11, basename as basename2 } from "path";
 var TAG11 = "[whatsapp:api]";
-var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
+var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT || "";
 async function POST15(req) {
   try {
     const body = await req.json();
@@ -25628,13 +25657,13 @@ async function POST15(req) {
     if (!to || !filePath) {
       return Response.json({ error: "Missing required fields: to, filePath" }, { status: 400 });
     }
-    if (!maxyAccountId || !PLATFORM_ROOT6) {
+    if (!maxyAccountId || !PLATFORM_ROOT7) {
       return Response.json(
         { error: "Cannot validate file path: missing account or platform context" },
         { status: 400 }
       );
     }
-    const accountDir = resolve11(PLATFORM_ROOT6, "..", "data/accounts", maxyAccountId);
+    const accountDir = resolve11(PLATFORM_ROOT7, "..", "data/accounts", maxyAccountId);
     let resolvedPath;
     try {
       resolvedPath = realpathSync2(filePath);
@@ -25877,35 +25906,93 @@ function getStoredPinHash() {
   }
   return null;
 }
+function readUsersFile() {
+  if (!existsSync13(USERS_FILE)) return null;
+  const raw2 = readFileSync13(USERS_FILE, "utf-8").trim();
+  if (!raw2) return [];
+  return JSON.parse(raw2);
+}
 async function POST19(req) {
-  const storedHash = getStoredPinHash();
-  if (!storedHash) {
-    return Response.json(
-      { error: "PIN not configured. Complete onboarding first." },
-      { status: 503 }
-    );
-  }
   let body;
   try {
     body = await req.json();
   } catch {
     return Response.json({ error: "Invalid request" }, { status: 400 });
   }
+  if (!body.pin) {
+    return Response.json({ error: "Invalid request" }, { status: 400 });
+  }
   const inputHash = hashPin2(body.pin);
-  if (!body.pin || inputHash !== storedHash) {
+  let users = null;
+  try {
+    users = readUsersFile();
+  } catch (err) {
+    console.error(`[session] users.json corrupt: ${err instanceof Error ? err.message : String(err)}`);
+    return Response.json(
+      { error: "User configuration is corrupt. Re-run the seed script." },
+      { status: 503 }
+    );
+  }
+  if (users !== null) {
+    const matchedUser = users.find((u) => u.pin === inputHash);
+    if (!matchedUser) {
+      console.log(`[session] PIN auth failed: no matching user`);
+      return Response.json({ error: "Invalid PIN" }, { status: 401 });
+    }
+    const { userId, name: userName } = matchedUser;
+    const accounts = resolveUserAccounts(userId);
+    if (accounts.length === 0) {
+      console.log(`[session] user has no accounts: userId=${userId}`);
+      return Response.json(
+        { error: "No account access for this user." },
+        { status: 403 }
+      );
+    }
+    if (accounts.length > 1 && !body.accountId) {
+      console.log(`[session] multi-account user: userId=${userId} accounts=${accounts.length}`);
+      const accountList = await Promise.all(
+        accounts.map(async (a) => {
+          let businessName;
+          try {
+            const branding = await fetchBranding(a.accountId);
+            businessName = branding?.name || void 0;
+          } catch {
+          }
+          return { accountId: a.accountId, businessName, role: a.role };
+        })
+      );
+      return Response.json({ accounts: accountList, userId, userName });
+    }
+    const selected = body.accountId ? accounts.find((a) => a.accountId === body.accountId) : accounts[0];
+    if (!selected) {
+      console.log(`[session] account selection invalid: userId=${userId} requested=${body.accountId}`);
+      return Response.json({ error: "Invalid account selection." }, { status: 403 });
+    }
+    return createAdminSession(selected.accountId, selected.config.thinkingView, userId, userName);
+  }
+  const storedHash = getStoredPinHash();
+  if (!storedHash) {
+    return Response.json(
+      { error: "PIN not configured. Complete onboarding first." },
+      { status: 503 }
+    );
+  }
+  if (inputHash !== storedHash) {
     console.log(`[session] PIN mismatch \u2014 stored=${storedHash.slice(0, 8)}\u2026 input=${inputHash.slice(0, 8)}\u2026 file=${PIN_FILE}`);
     return Response.json({ error: "Invalid PIN" }, { status: 401 });
   }
   const accountId = getDefaultAccountId() ?? "default";
-  const sessionKey = crypto.randomUUID();
-  registerSession(sessionKey, "admin", accountId);
+  return createAdminSession(accountId);
+}
+async function createAdminSession(accountId, thinkingView, userId, userName) {
   const account = resolveAccount();
-  const thinkingView = account?.config.thinkingView ?? "default";
+  const effectiveThinkingView = thinkingView ?? account?.config.thinkingView ?? "default";
+  const sessionKey = crypto.randomUUID();
+  registerSession(sessionKey, "admin", accountId, void 0, userId, userName);
   let onboardingComplete = true;
   try {
     const step = await loadOnboardingStep(accountId);
     onboardingComplete = step === null || step >= 7;
-    console.log(`[session] accountId=${accountId} onboardingComplete=${onboardingComplete}`);
   } catch (err) {
     console.error(`[session] onboarding query failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -25915,11 +26002,13 @@ async function POST19(req) {
     businessName = branding?.name || void 0;
   } catch {
   }
-  console.log(`[session] businessName=${businessName ?? "\u2013"}`);
+  console.log(`[session] admin session created: userId=${userId ?? "\u2013"} userName=${userName ?? "\u2013"} accountId=${accountId}`);
   return Response.json({
     session_key: sessionKey,
     agent_id: "admin",
-    thinkingView,
+    userId,
+    userName,
+    thinkingView: effectiveThinkingView,
     onboardingComplete,
     businessName
   });
@@ -26433,10 +26522,10 @@ async function GET8() {
 // app/api/admin/version/route.ts
 import { readFileSync as readFileSync17, existsSync as existsSync17 } from "fs";
 import { resolve as resolve16, join as join7 } from "path";
-var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve16(process.cwd(), "..");
+var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT ?? resolve16(process.cwd(), "..");
 var brandHostname = "maxy";
 var brandNpmPackage = "@rubytech/create-maxy";
-var brandJsonPath = join7(PLATFORM_ROOT7, "config", "brand.json");
+var brandJsonPath = join7(PLATFORM_ROOT8, "config", "brand.json");
 if (existsSync17(brandJsonPath)) {
   try {
     const brand = JSON.parse(readFileSync17(brandJsonPath, "utf-8"));
@@ -26445,7 +26534,7 @@ if (existsSync17(brandJsonPath)) {
   } catch {
   }
 }
-var VERSION_FILE = resolve16(PLATFORM_ROOT7, `config/.${brandHostname}-version`);
+var VERSION_FILE = resolve16(PLATFORM_ROOT8, `config/.${brandHostname}-version`);
 var NPM_PACKAGE = brandNpmPackage;
 var REGISTRY_URL = `https://registry.npmjs.org/${NPM_PACKAGE}/latest`;
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -26509,10 +26598,10 @@ async function GET9() {
 import { spawn as spawn4 } from "child_process";
 import { existsSync as existsSync18, statSync as statSync4, writeFileSync as writeFileSync10, readFileSync as readFileSync18, openSync as openSync2, closeSync as closeSync2 } from "fs";
 import { resolve as resolve17, join as join8 } from "path";
-var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT ?? resolve17(process.cwd(), "..");
+var PLATFORM_ROOT9 = process.env.MAXY_PLATFORM_ROOT ?? resolve17(process.cwd(), "..");
 var upgradePkg = "@rubytech/create-maxy";
 var upgradeHostname = "maxy";
-var brandPath = join8(PLATFORM_ROOT8, "config", "brand.json");
+var brandPath = join8(PLATFORM_ROOT9, "config", "brand.json");
 if (existsSync18(brandPath)) {
   try {
     const brand = JSON.parse(readFileSync18(brandPath, "utf-8"));
@@ -26678,8 +26767,8 @@ async function POST23() {
 }
 
 // server/index.ts
-var PLATFORM_ROOT9 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join9(PLATFORM_ROOT9, "config", "brand.json") : "";
+var PLATFORM_ROOT10 = process.env.MAXY_PLATFORM_ROOT || "";
+var BRAND_JSON_PATH = PLATFORM_ROOT10 ? join9(PLATFORM_ROOT10, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", domain: "getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync19(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);