@rubytech/create-maxy 1.0.477 → 1.0.479

package/payload/server/server.js

@@ -2877,6 +2877,8 @@ if (platformRoot) {
 }
 var MAXY_DIR = resolve(homedir(), configDirName);
 var PIN_FILE = resolve(MAXY_DIR, ".admin-pin");
+var PLATFORM_ROOT = process.env.MAXY_PLATFORM_ROOT ?? resolve(process.cwd(), "..");
+var USERS_FILE = resolve(PLATFORM_ROOT, "config", "users.json");
 var LOG_DIR = resolve(MAXY_DIR, "logs");
 var BIN_DIR = resolve(MAXY_DIR, "bin");
 var API_KEY_FILE = resolve(MAXY_DIR, ".anthropic-api-key");
@@ -3144,8 +3146,8 @@ import { spawnSync, execFileSync } from "child_process";
 import { createConnection as createConnection2 } from "net";
 import { mkdirSync, writeFileSync as writeFileSync2 } from "fs";
 import { resolve as resolve2 } from "path";
-var PLATFORM_ROOT = process.env.MAXY_PLATFORM_ROOT ?? resolve2(process.cwd(), "..");
-var VNC_SCRIPT = resolve2(PLATFORM_ROOT, "scripts/vnc.sh");
+var PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve2(process.cwd(), "..");
+var VNC_SCRIPT = resolve2(PLATFORM_ROOT2, "scripts/vnc.sh");
 function sleep(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
@@ -3277,11 +3279,11 @@ import { randomUUID } from "crypto";
 import { spawn } from "child_process";
 import { readFileSync as readFileSync4 } from "fs";
 import { resolve as resolve3 } from "path";
-var PLATFORM_ROOT2 = process.env.MAXY_PLATFORM_ROOT ?? resolve3(process.cwd(), "..");
+var PLATFORM_ROOT3 = process.env.MAXY_PLATFORM_ROOT ?? resolve3(process.cwd(), "..");
 var driver = null;
 function readPassword() {
   if (process.env.NEO4J_PASSWORD) return process.env.NEO4J_PASSWORD;
-  const passwordFile = resolve3(PLATFORM_ROOT2, "config/.neo4j-password");
+  const passwordFile = resolve3(PLATFORM_ROOT3, "config/.neo4j-password");
   try {
     return readFileSync4(passwordFile, "utf-8").trim();
   } catch {
@@ -3340,7 +3342,7 @@ function cacheConversationId(sessionKey, conversationId) {
   }
 }
 var GREETING_DIRECTIVE = "[New session. Greet the visitor.]";
-async function ensureConversation(accountId, agentType, sessionKey, visitorId, agentSlug) {
+async function ensureConversation(accountId, agentType, sessionKey, visitorId, agentSlug, userId) {
   const cached2 = getCachedConversationId(sessionKey);
   if (cached2) return cached2;
   const conversationId = randomUUID();
@@ -3354,6 +3356,7 @@ async function ensureConversation(accountId, agentType, sessionKey, visitorId, a
          c.agentType = $agentType,
          ${visitorId ? "c.visitorId = $visitorId," : ""}
          ${agentSlug ? "c.agentSlug = $agentSlug," : ""}
+         ${userId ? "c.userId = $userId," : ""}
          c.createdAt = datetime(),
          c.updatedAt = datetime()
        ON MATCH SET
@@ -3370,13 +3373,14 @@ async function ensureConversation(accountId, agentType, sessionKey, visitorId, a
         accountId,
         agentType,
         ...visitorId ? { visitorId } : {},
-        ...agentSlug ? { agentSlug } : {}
+        ...agentSlug ? { agentSlug } : {},
+        ...userId ? { userId } : {}
       }
     );
     const id = result.records[0]?.get("conversationId");
     if (id) {
       cacheConversationId(sessionKey, id);
-      console.error(`[persist] Conversation ${id.slice(0, 8)}\u2026 ensured for ${agentType}/${accountId.slice(0, 8)}\u2026`);
+      console.error(`[session] conversation attributed: conversationId=${id.slice(0, 8)}\u2026 userId=${userId ?? "none"} ${agentType}/${accountId.slice(0, 8)}\u2026`);
     }
     return id ?? null;
   } catch (err) {
@@ -3582,17 +3586,18 @@ async function searchMessages(accountId, queryEmbedding, limit = 10) {
     await session.close();
   }
 }
-async function listAdminSessions(accountId, limit = 20) {
+async function listAdminSessions(accountId, userId, limit = 20) {
   const session = getSession();
   try {
     const result = await session.run(
       `MATCH (c:Conversation {accountId: $accountId, agentType: 'admin'})
+       WHERE c.userId = $userId OR c.userId IS NULL
        RETURN c.conversationId AS conversationId,
               c.name AS name,
               c.updatedAt AS updatedAt
        ORDER BY c.updatedAt DESC
        LIMIT $limit`,
-      { accountId, limit: neo4j.int(limit) }
+      { accountId, userId, limit: neo4j.int(limit) }
     );
     return result.records.map((r) => ({
       conversationId: r.get("conversationId"),
@@ -3800,14 +3805,13 @@ var VALID_CATEGORIES = /* @__PURE__ */ new Set([
   "content",
   "interaction"
 ]);
-async function getUserTimezone(accountId) {
+async function getUserTimezone(accountId, userId) {
   const session = getSession();
   try {
-    const result = await session.run(
-      `MATCH (up:UserProfile {accountId: $accountId})
-       RETURN up.timezone AS timezone`,
-      { accountId }
-    );
+    const query = userId ? `MATCH (up:UserProfile {accountId: $accountId, userId: $userId})
+         RETURN up.timezone AS timezone` : `MATCH (up:UserProfile {accountId: $accountId})
+         RETURN up.timezone AS timezone LIMIT 1`;
+    const result = await session.run(query, { accountId, userId: userId ?? "" });
     if (result.records.length === 0) return null;
     const tz = result.records[0].get("timezone");
     return tz && tz.trim().length > 0 ? tz : null;
@@ -3818,11 +3822,11 @@ async function getUserTimezone(accountId) {
     await session.close();
   }
 }
-async function loadUserProfile(accountId) {
+async function loadUserProfile(accountId, userId) {
   const session = getSession();
   try {
-    await session.run(
-      `MERGE (up:UserProfile {accountId: $accountId})
+    const mergeResult = await session.run(
+      `MERGE (up:UserProfile {accountId: $accountId, userId: $userId})
        ON CREATE SET
          up.createdAt = $now,
          up.updatedAt = $now,
@@ -3832,18 +3836,23 @@ async function loadUserProfile(accountId) {
        OPTIONAL MATCH (b:LocalBusiness {accountId: $accountId})
        FOREACH (_ IN CASE WHEN b IS NOT NULL THEN [1] ELSE [] END |
          MERGE (up)-[:BELONGS_TO]->(b)
-       )`,
-      { accountId, now: (/* @__PURE__ */ new Date()).toISOString() }
+       )
+       RETURN up.createdAt = $now AS isNew`,
+      { accountId, userId, now: (/* @__PURE__ */ new Date()).toISOString() }
     );
+    const isNew = mergeResult.records[0]?.get("isNew");
+    if (isNew) {
+      console.error(`[profile] created new profile: userId=${userId} accountId=${accountId.slice(0, 8)}\u2026`);
+    }
     const nowMs = Date.now();
     const thresholdMs = DECAY_THRESHOLD_DAYS * 24 * 60 * 60 * 1e3;
     const staleResult = await session.run(
-      `MATCH (up:UserProfile {accountId: $accountId})-[:HAS_PREFERENCE]->(pref:Preference)
+      `MATCH (up:UserProfile {accountId: $accountId, userId: $userId})-[:HAS_PREFERENCE]->(pref:Preference)
        WHERE pref.observedAt IS NOT NULL
        RETURN pref.preferenceId AS preferenceId,
               pref.observedAt AS observedAt,
               pref.confidence AS confidence`,
-      { accountId }
+      { accountId, userId }
     );
     let decayCount = 0;
     for (const record2 of staleResult.records) {
@@ -3869,7 +3878,7 @@ async function loadUserProfile(accountId) {
       }
     }
     const result = await session.run(
-      `MATCH (up:UserProfile {accountId: $accountId})
+      `MATCH (up:UserProfile {accountId: $accountId, userId: $userId})
        OPTIONAL MATCH (up)-[:HAS_PREFERENCE]->(pref:Preference)
        WHERE pref.confidence >= $threshold
        WITH up, pref
@@ -3877,7 +3886,7 @@ async function loadUserProfile(accountId) {
        WITH up, collect(pref) AS allPrefs
        WITH up, allPrefs[0..$limit] AS prefs
        RETURN up, prefs`,
-      { accountId, threshold: INJECTION_THRESHOLD, limit: MAX_SUMMARY_PREFERENCES }
+      { accountId, userId, threshold: INJECTION_THRESHOLD, limit: MAX_SUMMARY_PREFERENCES }
     );
     if (result.records.length === 0 || !result.records[0].get("up")) {
       return null;
@@ -3896,7 +3905,7 @@ async function loadUserProfile(accountId) {
     }));
     const summary = formatProfileSummary(profileProps, preferences);
     console.error(
-      `[profile] Loaded ${preferences.length} preferences for ${accountId.slice(0, 8)}\u2026 (decay: ${decayCount} updated)`
+      `[profile] loaded for userId=${userId} accountId=${accountId.slice(0, 8)}\u2026 preferences=${preferences.length} (decay: ${decayCount} updated)`
     );
     return summary;
   } catch (err) {
@@ -4083,7 +4092,7 @@ async function loadOnboardingStep(accountId) {
     await session.close();
   }
 }
-async function writeReflectionPreferences(accountId, conversationId, updates) {
+async function writeReflectionPreferences(accountId, userId, conversationId, updates) {
   if (updates.length === 0) return 0;
   const session = getSession();
   const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -4135,6 +4144,7 @@ async function writeReflectionPreferences(accountId, conversationId, updates) {
             const props = {
               preferenceId,
               accountId,
+              userId,
               category: update.category,
               key: update.key,
               value: update.value,
@@ -4147,10 +4157,10 @@ async function writeReflectionPreferences(accountId, conversationId, updates) {
             };
             if (embedding2) props.embedding = embedding2;
             await txc.run(
-              `MATCH (up:UserProfile {accountId: $accountId})
+              `MATCH (up:UserProfile {accountId: $accountId, userId: $userId})
                CREATE (pref:Preference $props)
                CREATE (up)-[:HAS_PREFERENCE]->(pref)`,
-              { accountId, props }
+              { accountId, userId, props }
             );
             for (const convId of allConvIds) {
               await txc.run(
@@ -4183,6 +4193,7 @@ async function writeReflectionPreferences(accountId, conversationId, updates) {
         const mode = update.mode || "reinforce";
         const mergeParams = {
           accountId,
+          userId,
           category: update.category,
           key: update.key,
           newPrefId,
@@ -4196,8 +4207,8 @@ async function writeReflectionPreferences(accountId, conversationId, updates) {
         };
         if (embedding) mergeParams.embedding = embedding;
         const mergeResult = await session.run(
-          `MATCH (up:UserProfile {accountId: $accountId})
-           MERGE (up)-[:HAS_PREFERENCE]->(pref:Preference {accountId: $accountId, category: $category, key: $key})
+          `MATCH (up:UserProfile {accountId: $accountId, userId: $userId})
+           MERGE (up)-[:HAS_PREFERENCE]->(pref:Preference {accountId: $accountId, userId: $userId, category: $category, key: $key})
            ON CREATE SET
              pref.preferenceId = $newPrefId,
              pref.value = $value,
@@ -4237,13 +4248,13 @@ async function writeReflectionPreferences(accountId, conversationId, updates) {
     }
     if (written > 0) {
       await session.run(
-        `MATCH (up:UserProfile {accountId: $accountId})
+        `MATCH (up:UserProfile {accountId: $accountId, userId: $userId})
          SET up.profileVersion = coalesce(up.profileVersion, 0) + 1,
              up.updatedAt = $now`,
-        { accountId, now }
+        { accountId, userId, now }
       );
     }
-    console.error(`[profile-reflection] Wrote ${written}/${updates.length} preference updates for ${accountId.slice(0, 8)}\u2026`);
+    console.error(`[profile-reflection] Wrote ${written}/${updates.length} preference updates for userId=${userId} accountId=${accountId.slice(0, 8)}\u2026`);
     return written;
   } catch (err) {
     console.error(`[profile-reflection] writeReflectionPreferences failed: ${err instanceof Error ? err.message : String(err)}`);
@@ -4270,11 +4281,11 @@ function agentLogStream(name, accountDir) {
   }
   return createWriteStream(resolve4(logDir, `${name}-${date5}.log`), { flags: "a" });
 }
-var PLATFORM_ROOT3 = process.env.MAXY_PLATFORM_ROOT ?? resolve4(process.cwd(), "..");
-var ACCOUNTS_DIR = resolve4(PLATFORM_ROOT3, "..", "data/accounts");
-if (!existsSync5(PLATFORM_ROOT3)) {
+var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT ?? resolve4(process.cwd(), "..");
+var ACCOUNTS_DIR = resolve4(PLATFORM_ROOT4, "..", "data/accounts");
+if (!existsSync5(PLATFORM_ROOT4)) {
   throw new Error(
-    `PLATFORM_ROOT does not exist: ${PLATFORM_ROOT3}
+    `PLATFORM_ROOT does not exist: ${PLATFORM_ROOT4}
 Set the MAXY_PLATFORM_ROOT environment variable to the absolute path of the platform directory.`
   );
 }
@@ -4452,7 +4463,7 @@ function resolveAgentConfig(accountDir, agentName) {
   return { model, plugins, status, displayName, image, imageShape, showAgentName, knowledge, knowledgeBaked, liveMemory, knowledgeKeywords, budget, accessMode };
 }
 function parsePluginFrontmatter(pluginDir) {
-  const pluginPath = resolve4(PLATFORM_ROOT3, "plugins", pluginDir, "PLUGIN.md");
+  const pluginPath = resolve4(PLATFORM_ROOT4, "plugins", pluginDir, "PLUGIN.md");
   if (!existsSync5(pluginPath)) return null;
   let raw2;
   try {
@@ -4513,7 +4524,7 @@ function parsePluginFrontmatter(pluginDir) {
   };
 }
 function assemblePublicPluginContent(pluginDir) {
-  const pluginRoot = resolve4(PLATFORM_ROOT3, "plugins", pluginDir);
+  const pluginRoot = resolve4(PLATFORM_ROOT4, "plugins", pluginDir);
   const pluginPath = resolve4(pluginRoot, "PLUGIN.md");
   let raw2;
   try {
@@ -4607,7 +4618,7 @@ function assemblePublicPluginContent(pluginDir) {
   return { body: parts.join("\n"), skillCount, refCount };
 }
 function loadEmbeddedPlugins(agentType, selectedPlugins, enabledPlugins) {
-  const pluginsDir = resolve4(PLATFORM_ROOT3, "plugins");
+  const pluginsDir = resolve4(PLATFORM_ROOT4, "plugins");
   let dirs;
   try {
     dirs = readdirSync(pluginsDir);
@@ -4687,14 +4698,14 @@ var mcpToolsCache = /* @__PURE__ */ new Map();
 function fetchMcpToolsList(pluginDir) {
   const cached2 = mcpToolsCache.get(pluginDir);
   if (cached2) return Promise.resolve(cached2);
-  const serverPath = resolve4(PLATFORM_ROOT3, "plugins", pluginDir, "mcp/dist/index.js");
+  const serverPath = resolve4(PLATFORM_ROOT4, "plugins", pluginDir, "mcp/dist/index.js");
   if (!existsSync5(serverPath)) return Promise.resolve([]);
   const startMs = Date.now();
   return new Promise((resolvePromise) => {
     const proc = spawn2(process.execPath, [serverPath], {
       env: {
         ...process.env,
-        PLATFORM_ROOT: PLATFORM_ROOT3,
+        PLATFORM_ROOT: PLATFORM_ROOT4,
         ACCOUNT_ID: "__toolslist__",
         PLATFORM_PORT: process.env.PORT ?? "19200"
       }
@@ -4778,7 +4789,7 @@ function fetchMcpToolsList(pluginDir) {
   });
 }
 async function buildPluginManifest(enabledPlugins) {
-  const pluginsDir = resolve4(PLATFORM_ROOT3, "plugins");
+  const pluginsDir = resolve4(PLATFORM_ROOT4, "plugins");
   let dirs;
   try {
     dirs = readdirSync(pluginsDir);
@@ -4849,7 +4860,7 @@ async function buildPluginManifest(enabledPlugins) {
         toolLines.push(desc ? `  ${tool.name} \u2014 ${desc}` : `  ${tool.name}`);
       }
     } else if (parsed.tools.length > 0) {
-      const serverPath = resolve4(PLATFORM_ROOT3, "plugins", dir, "mcp/dist/index.js");
+      const serverPath = resolve4(PLATFORM_ROOT4, "plugins", dir, "mcp/dist/index.js");
       if (existsSync5(serverPath)) {
         fallbackSourced++;
         console.error(`[plugin-manifest] ${dir}: tools/list empty \u2014 fallback to frontmatter (${parsed.tools.length} tools)`);
@@ -4924,10 +4935,37 @@ function validateComponentData(componentName, data) {
 function getDefaultAccountId() {
   return resolveAccount()?.accountId ?? null;
 }
+function resolveUserAccounts(userId) {
+  if (!existsSync5(ACCOUNTS_DIR)) return [];
+  const results = [];
+  const entries = readdirSync(ACCOUNTS_DIR, { withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const configPath2 = resolve4(ACCOUNTS_DIR, entry.name, "account.json");
+    if (!existsSync5(configPath2)) continue;
+    let config2;
+    try {
+      config2 = JSON.parse(readFileSync5(configPath2, "utf-8"));
+    } catch {
+      console.error(`[session] account.json corrupt at ${configPath2} \u2014 skipping`);
+      continue;
+    }
+    const adminEntry = config2.admins?.find((a) => a.userId === userId);
+    if (adminEntry) {
+      results.push({
+        accountId: config2.accountId,
+        accountDir: resolve4(ACCOUNTS_DIR, entry.name),
+        config: config2,
+        role: adminEntry.role
+      });
+    }
+  }
+  return results;
+}
 var sessionStore = /* @__PURE__ */ new Map();
 setSessionStoreRef(sessionStore);
-function registerSession(sessionKey, agentType, accountId, agentName) {
-  sessionStore.set(sessionKey, { createdAt: Date.now(), agentType, accountId, agentName });
+function registerSession(sessionKey, agentType, accountId, agentName, userId, userName) {
+  sessionStore.set(sessionKey, { createdAt: Date.now(), agentType, accountId, agentName, userId, userName });
 }
 function registerResumedSession(sessionKey, accountId, agentName, conversationId, messages) {
   const messageHistory = messages.map((m) => ({
@@ -4996,6 +5034,12 @@ function consumePendingCompactionSummary(sessionKey) {
 function getAccountIdForSession(sessionKey) {
   return sessionStore.get(sessionKey)?.accountId;
 }
+function getUserIdForSession(sessionKey) {
+  return sessionStore.get(sessionKey)?.userId;
+}
+function getUserNameForSession(sessionKey) {
+  return sessionStore.get(sessionKey)?.userName;
+}
 function registerGrantSession(sessionKey, accountId, agentName, opts) {
   sessionStore.set(sessionKey, {
     createdAt: Date.now(),
@@ -5072,42 +5116,42 @@ function consumeStalledSubagents(sessionKey) {
   delete session.stalledSubagents;
   return stalls && stalls.length > 0 ? stalls : void 0;
 }
-function getMcpServers(accountId, enabledPlugins) {
+function getMcpServers(accountId, userId, enabledPlugins) {
   const servers = {
     "memory": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/memory/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/memory/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4, ...userId ? { USER_ID: userId } : {} }
     },
     "contacts": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/contacts/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/contacts/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     },
     "whatsapp": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/whatsapp/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3, PLATFORM_PORT: process.env.PORT ?? "19200" }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/whatsapp/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4, PLATFORM_PORT: process.env.PORT ?? "19200" }
     },
     "admin": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/admin/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3, PLATFORM_PORT: process.env.PORT ?? "19200" }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/admin/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4, PLATFORM_PORT: process.env.PORT ?? "19200", ...userId ? { USER_ID: userId } : {} }
     },
     "scheduling": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/scheduling/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/scheduling/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     },
     "tasks": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/tasks/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/tasks/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     },
     "email": {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/email/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/email/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     },
     // Playwright MCP server — browser automation for browser-specialist.
     // Key matches Claude Code's plugin naming: plugin_{plugin}_{server} so tools
@@ -5123,8 +5167,8 @@ function getMcpServers(accountId, enabledPlugins) {
   if (process.env.TELEGRAM_PUBLIC_BOT_TOKEN) {
     servers["telegram"] = {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/telegram/mcp/dist/index.js")],
-      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/telegram/mcp/dist/index.js")],
+      env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
     };
   } else {
     console.error("[plugins] telegram MCP: skipped (no TELEGRAM_PUBLIC_BOT_TOKEN)");
@@ -5141,14 +5185,14 @@ function getMcpServers(accountId, enabledPlugins) {
   if (!tunnelConfigured) {
     servers["cloudflare"] = {
       command: "node",
-      args: [resolve4(PLATFORM_ROOT3, "plugins/cloudflare/mcp/dist/index.js")],
-      env: { PLATFORM_ROOT: PLATFORM_ROOT3 }
+      args: [resolve4(PLATFORM_ROOT4, "plugins/cloudflare/mcp/dist/index.js")],
+      env: { PLATFORM_ROOT: PLATFORM_ROOT4 }
     };
   } else {
     console.error("[plugins] cloudflare MCP: skipped (tunnel already configured)");
   }
   if (Array.isArray(enabledPlugins) && enabledPlugins.length > 0) {
-    const pluginsDir = resolve4(PLATFORM_ROOT3, "plugins");
+    const pluginsDir = resolve4(PLATFORM_ROOT4, "plugins");
     let dirs;
     try {
       dirs = readdirSync(pluginsDir);
@@ -5171,12 +5215,12 @@ function getMcpServers(accountId, enabledPlugins) {
           continue;
         }
       }
-      const mcpEntry = resolve4(PLATFORM_ROOT3, "plugins", dir, "mcp/dist/index.js");
+      const mcpEntry = resolve4(PLATFORM_ROOT4, "plugins", dir, "mcp/dist/index.js");
       if (!existsSync5(mcpEntry)) continue;
       servers[dir] = {
         command: "node",
         args: [mcpEntry],
-        env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT3 }
+        env: { ACCOUNT_ID: accountId, PLATFORM_ROOT: PLATFORM_ROOT4 }
       };
       console.log(`[plugins] optional MCP server started: ${dir}`);
     }
@@ -5224,6 +5268,9 @@ var ADMIN_CORE_TOOLS = [
   "mcp__admin__render-component",
   "mcp__admin__session-reset",
   "mcp__admin__session-resume",
+  "mcp__admin__admin-add",
+  "mcp__admin__admin-remove",
+  "mcp__admin__admin-list",
   "mcp__admin__api-key-store",
   "mcp__admin__api-key-verify",
   "mcp__admin__file-attach",
@@ -5265,7 +5312,7 @@ var ADMIN_CORE_TOOLS = [
 function getAdminAllowedTools(enabledPlugins) {
   const tools = [...ADMIN_CORE_TOOLS];
   if (Array.isArray(enabledPlugins) && enabledPlugins.length > 0) {
-    const pluginsDir = resolve4(PLATFORM_ROOT3, "plugins");
+    const pluginsDir = resolve4(PLATFORM_ROOT4, "plugins");
     let dirs;
     try {
       dirs = readdirSync(pluginsDir);
@@ -5358,7 +5405,7 @@ ${message.slice(0, QUERY_CLASSIFIER_MSG_CAP)}`
   }
 }
 async function fetchMemoryContext(accountId, query, sessionKey, options) {
-  const serverPath = resolve4(PLATFORM_ROOT3, "plugins/memory/mcp/dist/index.js");
+  const serverPath = resolve4(PLATFORM_ROOT4, "plugins/memory/mcp/dist/index.js");
   if (!existsSync5(serverPath)) {
     console.error(`[fetchMemoryContext] MCP server not found: ${serverPath}`);
     return null;
@@ -5369,7 +5416,7 @@ async function fetchMemoryContext(accountId, query, sessionKey, options) {
       env: {
         ...process.env,
         ACCOUNT_ID: accountId,
-        PLATFORM_ROOT: PLATFORM_ROOT3,
+        PLATFORM_ROOT: PLATFORM_ROOT4,
         READ_ONLY: "true",
         ALLOWED_SCOPES: "public,shared",
         ...sessionKey ? { SESSION_ID: sessionKey } : {},
@@ -5456,7 +5503,7 @@ async function fetchMemoryContext(accountId, query, sessionKey, options) {
 }
 async function compactTrimmedMessages(accountId, trimmedMessages) {
   if (trimmedMessages.length === 0) return true;
-  const serverPath = resolve4(PLATFORM_ROOT3, "plugins/memory/mcp/dist/index.js");
+  const serverPath = resolve4(PLATFORM_ROOT4, "plugins/memory/mcp/dist/index.js");
   if (!existsSync5(serverPath)) return false;
   const briefing = trimmedMessages.map((m) => `[${m.role.toUpperCase()}] ${m.content}`).join("\n\n");
   return new Promise((resolvePromise) => {
@@ -5657,7 +5704,7 @@ Respond with ONLY a JSON array. Each element:
 
 mergeSourceIds is only for mode "merge" \u2014 list the preferenceIds of the sources to combine.
 If no preferences are found, respond with an empty array: []`;
-async function reflectOnSessionProfile(accountId, sessionKey, profileSummary) {
+async function reflectOnSessionProfile(accountId, userId, sessionKey, profileSummary) {
   const history = getMessageHistory(sessionKey);
   if (history.length === 0) return 0;
   let apiKey = process.env.ANTHROPIC_API_KEY;
@@ -5739,7 +5786,7 @@ Extract preference updates as JSON array.`
     }
     console.error(`[profile-reflection] Extracted ${sanitized.length} preference updates via Haiku (${updates.length - sanitized.length} filtered)`);
     const convId = sessionStore.get(sessionKey)?.conversationId;
-    return await writeReflectionPreferences(accountId, convId, sanitized);
+    return await writeReflectionPreferences(accountId, userId, convId, sanitized);
   } catch (err) {
     const reason = err instanceof Error ? err.message : String(err);
     if (err instanceof Error && err.name === "AbortError") {
@@ -5858,7 +5905,7 @@ var COMPACTION_PROMPT = `You are about to reach your context limit. Call session
 Then respond with only: [COMPACTED]`;
 var COMPACTION_TIMEOUT_MS = 45e3;
 async function* runCompactionTurn(accountDir, accountId, systemPrompt, resumeSessionId, adminModel, enabledPlugins) {
-  const mcpConfig = JSON.stringify({ mcpServers: getMcpServers(accountId, enabledPlugins) });
+  const mcpConfig = JSON.stringify({ mcpServers: getMcpServers(accountId, void 0, enabledPlugins) });
   const specialistsDir = resolve4(accountDir, "specialists");
   if (!existsSync5(specialistsDir)) agentLogStream("claude-agent-compaction-stream", accountDir).write(`[${isoTs()}] [warn] specialists plugin dir missing: ${specialistsDir}
 `);
@@ -5888,7 +5935,7 @@ async function* runCompactionTurn(accountDir, accountId, systemPrompt, resumeSes
   const proc = spawn2("claude", args, {
     cwd: accountDir,
     stdio: ["ignore", "pipe", "pipe"],
-    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT3, ACCOUNT_DIR: accountDir }
+    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT4, ACCOUNT_DIR: accountDir }
   });
   const stderrLog = agentLogStream("claude-agent-compaction-stderr", accountDir);
   proc.stderr?.pipe(stderrLog);
@@ -6497,7 +6544,8 @@ async function* invokeAdminAgent(message, systemPrompt, accountDir, accountId, a
 `);
     cdpLog.end();
   }
-  const mcpConfig = JSON.stringify({ mcpServers: getMcpServers(accountId, enabledPlugins) });
+  const ccUserId = sessionKey ? getUserIdForSession(sessionKey) : void 0;
+  const mcpConfig = JSON.stringify({ mcpServers: getMcpServers(accountId, ccUserId, enabledPlugins) });
   const specialistsDir = resolve4(accountDir, "specialists");
   if (!existsSync5(specialistsDir)) agentLogStream("claude-agent-stream", accountDir).write(`[${isoTs()}] [warn] specialists plugin dir missing: ${specialistsDir}
 `);
@@ -6529,7 +6577,7 @@ async function* invokeAdminAgent(message, systemPrompt, accountDir, accountId, a
   const proc = spawn2("claude", args, {
     cwd: accountDir,
     stdio: ["ignore", "pipe", "pipe"],
-    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT3, ACCOUNT_DIR: accountDir }
+    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT4, ACCOUNT_DIR: accountDir }
   });
   const stderrLog = agentLogStream("claude-agent-stderr", accountDir);
   proc.stderr?.pipe(stderrLog);
@@ -6581,10 +6629,13 @@ async function* invokeAdminAgent(message, systemPrompt, accountDir, accountId, a
         if (step.value.summary) {
           storePendingCompactionSummary(sessionKey, step.value.summary);
         }
-        const profileForReflection = await loadUserProfile(accountId);
-        reflectOnSessionProfile(accountId, sessionKey, profileForReflection).catch((err) => {
-          console.error(`[profile-reflection] Unhandled error: ${err instanceof Error ? err.message : String(err)}`);
-        });
+        const reflectionUserId = getUserIdForSession(sessionKey);
+        if (reflectionUserId) {
+          const profileForReflection = await loadUserProfile(accountId, reflectionUserId);
+          reflectOnSessionProfile(accountId, reflectionUserId, sessionKey, profileForReflection).catch((err) => {
+            console.error(`[profile-reflection] Unhandled error: ${err instanceof Error ? err.message : String(err)}`);
+          });
+        }
         clearAgentSessionId(sessionKey);
         const convId = sessionStore.get(sessionKey)?.conversationId;
         if (convId) {
@@ -6749,7 +6800,8 @@ async function* invokeManagedAdminAgent(message, systemPrompt, accountDir, accou
   const cdpOk = await ensureCdp();
   if (!cdpOk) streamLog.write(`[${isoTs()}] [warn] ensureCdp failed \u2014 browser-specialist degraded
 `);
-  const mcpConfig = JSON.stringify({ mcpServers: getMcpServers(accountId, enabledPlugins) });
+  const managedUserId = getUserIdForSession(sessionKey);
+  const mcpConfig = JSON.stringify({ mcpServers: getMcpServers(accountId, managedUserId, enabledPlugins) });
   const specialistsDir = resolve4(accountDir, "specialists");
   if (!existsSync5(specialistsDir)) streamLog.write(`[${isoTs()}] [warn] specialists plugin dir missing: ${specialistsDir}
 `);
@@ -6778,7 +6830,7 @@ async function* invokeManagedAdminAgent(message, systemPrompt, accountDir, accou
   const proc = spawn2("claude", args, {
     cwd: accountDir,
     stdio: ["ignore", "pipe", "pipe"],
-    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT3, ACCOUNT_DIR: accountDir }
+    env: { ...process.env, PLATFORM_ROOT: PLATFORM_ROOT4, ACCOUNT_DIR: accountDir }
   });
   const stderrLog = agentLogStream("claude-agent-stderr", accountDir);
   proc.stderr?.pipe(stderrLog);
@@ -7216,10 +7268,11 @@ ${EXPLANATORY_STYLE_INSTRUCTIONS}` : baseSystemPrompt;
   if (step.value.summary) {
     storePendingCompactionSummary(sessionKey, step.value.summary);
   }
-  const agentType = sessionStore.get(sessionKey)?.agentType;
-  if (agentType === "admin") {
-    const currentProfile = await loadUserProfile(account.accountId);
-    reflectOnSessionProfile(account.accountId, sessionKey, currentProfile).catch((err) => {
+  const compactAgentType = sessionStore.get(sessionKey)?.agentType;
+  const compactUserId = getUserIdForSession(sessionKey);
+  if (compactAgentType === "admin" && compactUserId) {
+    const currentProfile = await loadUserProfile(account.accountId, compactUserId);
+    reflectOnSessionProfile(account.accountId, compactUserId, sessionKey, currentProfile).catch((err) => {
       console.error(`[profile-reflection] Unhandled error: ${err instanceof Error ? err.message : String(err)}`);
     });
   }
@@ -7236,11 +7289,13 @@ async function* invokeAgent(config2, message, sessionKey, attachments = [], user
     return;
   }
   const accountId = sessionAccountId ?? account.accountId;
+  const sessionUserId = sessionKey ? getUserIdForSession(sessionKey) : void 0;
+  const sessionUserName = sessionKey ? getUserNameForSession(sessionKey) : void 0;
   const resolvedAgentName = agentName ?? agentType;
   const identity = readIdentity(account.accountDir, resolvedAgentName);
   const rawSoul = readAgentFile(account.accountDir, resolvedAgentName, "SOUL.md");
   const soul = rawSoul && hasSoulContent(rawSoul) ? rawSoul : null;
-  console.log(`[invoke-agent] agent=${resolvedAgentName} type=${agentType} session=${sessionKey?.slice(0, 8) ?? "none"} identity=${identity ? `${identity.length}b` : "MISSING"} soul=${rawSoul ? soul ? `${soul.length}b` : "EMPTY(header-only)" : "MISSING"}`);
+  console.log(`[invoke-agent] agent=${resolvedAgentName} type=${agentType} session=${sessionKey?.slice(0, 8) ?? "none"} userId=${sessionUserId ?? "none"} identity=${identity ? `${identity.length}b` : "MISSING"} soul=${rawSoul ? soul ? `${soul.length}b` : "EMPTY(header-only)" : "MISSING"}`);
   const defaultSystemPrompt = agentType === "public" ? "You are a public assistant. Answer only from the memory context provided. Never use training data. British English. Be concise." : "You are an admin agent. Full access. Professional, concise. British English. Be proactive \u2014 tell the user what needs doing and do it.";
   const identityPrompt = identity ?? defaultSystemPrompt;
   let baseSystemPrompt = soul ? `${identityPrompt}
@@ -7248,7 +7303,7 @@ async function* invokeAgent(config2, message, sessionKey, attachments = [], user
 ${soul}` : identityPrompt;
   const now = /* @__PURE__ */ new Date();
   const isoTimestamp = now.toISOString();
-  const userTimezone = await getUserTimezone(accountId);
+  const userTimezone = await getUserTimezone(accountId, sessionUserId);
   const effectiveTimezone = userTimezone ?? Intl.DateTimeFormat().resolvedOptions().timeZone;
   if (!userTimezone) {
     console.error(`[datetime] getUserTimezone returned null for ${accountId.slice(0, 8)}\u2026, falling back to server timezone: ${effectiveTimezone}`);
@@ -7272,16 +7327,23 @@ ${isoTimestamp}
 ${humanReadable} (${effectiveTimezone})
 </datetime>`;
   if (agentType === "admin") {
-    const [profileSummary, sessionContext, onboardingStep] = await Promise.all([
-      loadUserProfile(accountId),
-      loadSessionContext(accountId),
-      loadOnboardingStep(accountId)
-    ]);
-    if (profileSummary) {
+    if (sessionUserId) {
       baseSystemPrompt += `
 
+<admin-identity>
+You are talking to ${sessionUserName ?? "an admin"}. Their userId is ${sessionUserId}.
+</admin-identity>`;
+      const profileSummary = await loadUserProfile(accountId, sessionUserId);
+      if (profileSummary) {
+        baseSystemPrompt += `
+
 ${profileSummary}`;
+      }
     }
+    const [sessionContext, onboardingStep] = await Promise.all([
+      loadSessionContext(accountId),
+      loadOnboardingStep(accountId)
+    ]);
     if (sessionContext) {
       baseSystemPrompt += `
 
@@ -7376,7 +7438,7 @@ ${stallContext}`;
 Current session key: ${sessionKey}` : systemPromptBase;
   if (sessionKey) {
     try {
-      await ensureConversation(accountId, agentType, sessionKey);
+      await ensureConversation(accountId, agentType, sessionKey, void 0, void 0, sessionUserId);
     } catch (err) {
       console.error(`[persist] ensureConversation failed in invokeAgent: ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -7606,8 +7668,8 @@ import { randomUUID as randomUUID2 } from "crypto";
 import { mkdir, readFile, stat, writeFile } from "fs/promises";
 import { realpathSync } from "fs";
 import { resolve as resolve6, extname, basename } from "path";
-var PLATFORM_ROOT4 = process.env.MAXY_PLATFORM_ROOT ?? resolve6(process.cwd(), "../platform");
-var ATTACHMENTS_ROOT = resolve6(PLATFORM_ROOT4, "..", "data/uploads");
+var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve6(process.cwd(), "../platform");
+var ATTACHMENTS_ROOT = resolve6(PLATFORM_ROOT5, "..", "data/uploads");
 var SUPPORTED_MIME_TYPES = /* @__PURE__ */ new Set([
   "image/jpeg",
   "image/png",
@@ -8463,11 +8525,11 @@ import neo4j2 from "neo4j-driver";
 import { readFileSync as readFileSync7 } from "fs";
 import { resolve as resolve7 } from "path";
 import { randomUUID as randomUUID3, randomInt } from "crypto";
-var PLATFORM_ROOT5 = process.env.MAXY_PLATFORM_ROOT ?? resolve7(process.cwd(), "..");
+var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT ?? resolve7(process.cwd(), "..");
 var driver2 = null;
 function readPassword2() {
   if (process.env.NEO4J_PASSWORD) return process.env.NEO4J_PASSWORD;
-  const passwordFile = resolve7(PLATFORM_ROOT5, "config/.neo4j-password");
+  const passwordFile = resolve7(PLATFORM_ROOT6, "config/.neo4j-password");
   try {
     return readFileSync7(passwordFile, "utf-8").trim();
   } catch {
@@ -25619,7 +25681,7 @@ import { readFile as readFile2, stat as stat2 } from "fs/promises";
 import { realpathSync as realpathSync2 } from "fs";
 import { resolve as resolve11, basename as basename2 } from "path";
 var TAG11 = "[whatsapp:api]";
-var PLATFORM_ROOT6 = process.env.MAXY_PLATFORM_ROOT || "";
+var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT || "";
 async function POST15(req) {
   try {
     const body = await req.json();
@@ -25628,13 +25690,13 @@ async function POST15(req) {
     if (!to || !filePath) {
       return Response.json({ error: "Missing required fields: to, filePath" }, { status: 400 });
     }
-    if (!maxyAccountId || !PLATFORM_ROOT6) {
+    if (!maxyAccountId || !PLATFORM_ROOT7) {
       return Response.json(
         { error: "Cannot validate file path: missing account or platform context" },
         { status: 400 }
       );
     }
-    const accountDir = resolve11(PLATFORM_ROOT6, "..", "data/accounts", maxyAccountId);
+    const accountDir = resolve11(PLATFORM_ROOT7, "..", "data/accounts", maxyAccountId);
     let resolvedPath;
     try {
       resolvedPath = realpathSync2(filePath);
@@ -25877,35 +25939,93 @@ function getStoredPinHash() {
   }
   return null;
 }
+function readUsersFile() {
+  if (!existsSync13(USERS_FILE)) return null;
+  const raw2 = readFileSync13(USERS_FILE, "utf-8").trim();
+  if (!raw2) return [];
+  return JSON.parse(raw2);
+}
 async function POST19(req) {
-  const storedHash = getStoredPinHash();
-  if (!storedHash) {
-    return Response.json(
-      { error: "PIN not configured. Complete onboarding first." },
-      { status: 503 }
-    );
-  }
   let body;
   try {
     body = await req.json();
   } catch {
     return Response.json({ error: "Invalid request" }, { status: 400 });
   }
+  if (!body.pin) {
+    return Response.json({ error: "Invalid request" }, { status: 400 });
+  }
   const inputHash = hashPin2(body.pin);
-  if (!body.pin || inputHash !== storedHash) {
+  let users = null;
+  try {
+    users = readUsersFile();
+  } catch (err) {
+    console.error(`[session] users.json corrupt: ${err instanceof Error ? err.message : String(err)}`);
+    return Response.json(
+      { error: "User configuration is corrupt. Re-run the seed script." },
+      { status: 503 }
+    );
+  }
+  if (users !== null) {
+    const matchedUser = users.find((u) => u.pin === inputHash);
+    if (!matchedUser) {
+      console.log(`[session] PIN auth failed: no matching user`);
+      return Response.json({ error: "Invalid PIN" }, { status: 401 });
+    }
+    const { userId, name: userName } = matchedUser;
+    const accounts = resolveUserAccounts(userId);
+    if (accounts.length === 0) {
+      console.log(`[session] user has no accounts: userId=${userId}`);
+      return Response.json(
+        { error: "No account access for this user." },
+        { status: 403 }
+      );
+    }
+    if (accounts.length > 1 && !body.accountId) {
+      console.log(`[session] multi-account user: userId=${userId} accounts=${accounts.length}`);
+      const accountList = await Promise.all(
+        accounts.map(async (a) => {
+          let businessName;
+          try {
+            const branding = await fetchBranding(a.accountId);
+            businessName = branding?.name || void 0;
+          } catch {
+          }
+          return { accountId: a.accountId, businessName, role: a.role };
+        })
+      );
+      return Response.json({ accounts: accountList, userId, userName });
+    }
+    const selected = body.accountId ? accounts.find((a) => a.accountId === body.accountId) : accounts[0];
+    if (!selected) {
+      console.log(`[session] account selection invalid: userId=${userId} requested=${body.accountId}`);
+      return Response.json({ error: "Invalid account selection." }, { status: 403 });
+    }
+    return createAdminSession(selected.accountId, selected.config.thinkingView, userId, userName);
+  }
+  const storedHash = getStoredPinHash();
+  if (!storedHash) {
+    return Response.json(
+      { error: "PIN not configured. Complete onboarding first." },
+      { status: 503 }
+    );
+  }
+  if (inputHash !== storedHash) {
     console.log(`[session] PIN mismatch \u2014 stored=${storedHash.slice(0, 8)}\u2026 input=${inputHash.slice(0, 8)}\u2026 file=${PIN_FILE}`);
     return Response.json({ error: "Invalid PIN" }, { status: 401 });
   }
   const accountId = getDefaultAccountId() ?? "default";
-  const sessionKey = crypto.randomUUID();
-  registerSession(sessionKey, "admin", accountId);
+  return createAdminSession(accountId);
+}
+async function createAdminSession(accountId, thinkingView, userId, userName) {
   const account = resolveAccount();
-  const thinkingView = account?.config.thinkingView ?? "default";
+  const effectiveThinkingView = thinkingView ?? account?.config.thinkingView ?? "default";
+  const sessionKey = crypto.randomUUID();
+  registerSession(sessionKey, "admin", accountId, void 0, userId, userName);
   let onboardingComplete = true;
   try {
     const step = await loadOnboardingStep(accountId);
     onboardingComplete = step === null || step >= 7;
-    console.log(`[session] accountId=${accountId} onboardingComplete=${onboardingComplete}`);
   } catch (err) {
     console.error(`[session] onboarding query failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -25915,11 +26035,13 @@ async function POST19(req) {
     businessName = branding?.name || void 0;
   } catch {
   }
-  console.log(`[session] businessName=${businessName ?? "\u2013"}`);
+  console.log(`[session] admin session created: userId=${userId ?? "\u2013"} userName=${userName ?? "\u2013"} accountId=${accountId}`);
   return Response.json({
     session_key: sessionKey,
     agent_id: "admin",
-    thinkingView,
+    userId,
+    userName,
+    thinkingView: effectiveThinkingView,
     onboardingComplete,
     businessName
   });
@@ -26433,10 +26555,10 @@ async function GET8() {
 // app/api/admin/version/route.ts
 import { readFileSync as readFileSync17, existsSync as existsSync17 } from "fs";
 import { resolve as resolve16, join as join7 } from "path";
-var PLATFORM_ROOT7 = process.env.MAXY_PLATFORM_ROOT ?? resolve16(process.cwd(), "..");
+var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT ?? resolve16(process.cwd(), "..");
 var brandHostname = "maxy";
 var brandNpmPackage = "@rubytech/create-maxy";
-var brandJsonPath = join7(PLATFORM_ROOT7, "config", "brand.json");
+var brandJsonPath = join7(PLATFORM_ROOT8, "config", "brand.json");
 if (existsSync17(brandJsonPath)) {
   try {
     const brand = JSON.parse(readFileSync17(brandJsonPath, "utf-8"));
@@ -26445,7 +26567,7 @@ if (existsSync17(brandJsonPath)) {
   } catch {
   }
 }
-var VERSION_FILE = resolve16(PLATFORM_ROOT7, `config/.${brandHostname}-version`);
+var VERSION_FILE = resolve16(PLATFORM_ROOT8, `config/.${brandHostname}-version`);
 var NPM_PACKAGE = brandNpmPackage;
 var REGISTRY_URL = `https://registry.npmjs.org/${NPM_PACKAGE}/latest`;
 var CACHE_TTL_MS = 60 * 60 * 1e3;
@@ -26509,10 +26631,10 @@ async function GET9() {
 import { spawn as spawn4 } from "child_process";
 import { existsSync as existsSync18, statSync as statSync4, writeFileSync as writeFileSync10, readFileSync as readFileSync18, openSync as openSync2, closeSync as closeSync2 } from "fs";
 import { resolve as resolve17, join as join8 } from "path";
-var PLATFORM_ROOT8 = process.env.MAXY_PLATFORM_ROOT ?? resolve17(process.cwd(), "..");
+var PLATFORM_ROOT9 = process.env.MAXY_PLATFORM_ROOT ?? resolve17(process.cwd(), "..");
 var upgradePkg = "@rubytech/create-maxy";
 var upgradeHostname = "maxy";
-var brandPath = join8(PLATFORM_ROOT8, "config", "brand.json");
+var brandPath = join8(PLATFORM_ROOT9, "config", "brand.json");
 if (existsSync18(brandPath)) {
   try {
     const brand = JSON.parse(readFileSync18(brandPath, "utf-8"));
@@ -26591,8 +26713,12 @@ async function GET10(req) {
   if (!accountId) {
     return Response.json({ error: "Account not found for session" }, { status: 401 });
   }
+  const userId = getUserIdForSession(sessionKey);
+  if (!userId) {
+    return Response.json({ error: "User identity required \u2014 authenticate with users.json PIN" }, { status: 401 });
+  }
   try {
-    const sessions = await listAdminSessions(accountId, 20);
+    const sessions = await listAdminSessions(accountId, userId, 20);
     return Response.json({ sessions });
   } catch (err) {
     console.error(`[sessions-list] Failed: ${err instanceof Error ? err.message : String(err)}`);
@@ -26678,8 +26804,8 @@ async function POST23() {
 }
 
 // server/index.ts
-var PLATFORM_ROOT9 = process.env.MAXY_PLATFORM_ROOT || "";
-var BRAND_JSON_PATH = PLATFORM_ROOT9 ? join9(PLATFORM_ROOT9, "config", "brand.json") : "";
+var PLATFORM_ROOT10 = process.env.MAXY_PLATFORM_ROOT || "";
+var BRAND_JSON_PATH = PLATFORM_ROOT10 ? join9(PLATFORM_ROOT10, "config", "brand.json") : "";
 var BRAND = { productName: "Maxy", hostname: "maxy", configDir: ".maxy", domain: "getmaxy.com" };
 if (BRAND_JSON_PATH && !existsSync19(BRAND_JSON_PATH)) {
   console.error(`[brand] WARNING: brand.json not found at ${BRAND_JSON_PATH} \u2014 using Maxy defaults`);