@rubytech/create-realagent-code 0.1.193 → 0.1.194

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-realagent-code",
-  "version": "0.1.193",
+  "version": "0.1.194",
   "description": "Install Real Agent — Built for agents. By agents.",
   "bin": {
     "create-realagent-code": "./dist/index.js"

package/payload/platform/plugins/docs/references/deployment.md

@@ -127,13 +127,15 @@ The share is **LAN-only**: it binds to the loopback and your Pi's Wi-Fi/Ethernet
 
 **Credentials:** SMB user is `admin`; password is your {{productName}} PIN. The installer wires the sync so every time you set or rotate the PIN in the admin UI, the SMB password updates with it.
 
-**macOS Finder**: Press `Cmd-K` from any Finder window, type `smb://<hostname>.local` (use the hostname your installer printed — for example `smb://maxy-code.local` or `smb://realagent-code.local`), click Connect, sign in as `admin` with your PIN. The share appears in the Finder sidebar; drag-and-drop works in both directions.
+The SMB username is the Linux user that owns the install on the device — `admin` on a Pi or a Hetzner box, your own Linux user (for example `neo`) on a self-hosted laptop install. The password is your {{productName}} PIN. Changing the PIN in the admin UI re-syncs the SMB password for that same Unix user automatically.
 
-**Windows Explorer**: Open File Explorer, type `\\<hostname>.local\<brand>` in the address bar (for example `\\maxy-code.local\maxy-code`), press Enter, sign in as `admin` with your PIN. To keep it across reboots, right-click → "Map network drive".
+**macOS Finder**: Press `Cmd-K` from any Finder window, type `smb://<hostname>.local` (use the hostname your installer printed — for example `smb://maxy-code.local` or `smb://realagent-code.local`), click Connect, sign in as the install owner with your PIN. The share appears in the Finder sidebar; drag-and-drop works in both directions.
 
-**iOS Files**: Open Files → tap the `…` menu (top-right) → "Connect to Server" → enter `smb://<hostname>.local` → "Registered User" → username `admin`, password is your PIN.
+**Windows Explorer**: Open File Explorer, type `\\<hostname>.local\<brand>` in the address bar (for example `\\maxy-code.local\maxy-code`), press Enter, sign in as the install owner with your PIN. To keep it across reboots, right-click → "Map network drive".
 
-**Android (Solid Explorer, CX File Explorer)**: Add a new connection of type SMB / Network. Host = `<hostname>.local`, share = `<brand>` (same as your install folder name), user = `admin`, password = your PIN.
+**iOS Files**: Open Files → tap the `…` menu (top-right) → "Connect to Server" → enter `smb://<hostname>.local` → "Registered User" → username is the install owner, password is your PIN.
+
+**Android (Solid Explorer, CX File Explorer)**: Add a new connection of type SMB / Network. Host = `<hostname>.local`, share = `<brand>` (same as your install folder name), user = the install owner, password = your PIN.
 
 **Troubleshooting:** if the mount fails with "logon failure", change your PIN in the admin UI and try again — that re-triggers the smbpasswd sync. If the share doesn't show up at all, your client may need `<hostname>.local` resolved by mDNS — try the Pi's LAN IP address as a fallback (`smb://192.168.1.50` on macOS, `\\192.168.1.50\<brand>` on Windows).
 

package/payload/server/{chunk-WWD4TCJJ.js → chunk-EXIPYITB.js}

@@ -2705,6 +2705,7 @@ var BIN_DIR = resolve(MAXY_DIR, "bin");
 var REMOTE_PASSWORD_FILE = resolve(MAXY_DIR, ".remote-password");
 var REMOTE_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "remote-session-secret");
 var ADMIN_SESSION_SECRET_FILE = resolve(MAXY_DIR, "credentials", "admin-session-secret");
+var INSTALL_OWNER_FILE = resolve(MAXY_DIR, ".install-owner");
 var TELEGRAM_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-webhook-secret");
 var TELEGRAM_ADMIN_WEBHOOK_SECRET_FILE = resolve(MAXY_DIR, ".telegram-admin-webhook-secret");
 var VISITOR_TOKEN_SECRET_FILE = resolve(MAXY_DIR, "credentials", "visitor-token-secret");
@@ -5454,6 +5455,7 @@ export {
   USERS_FILE,
   LOG_DIR,
   BIN_DIR,
+  INSTALL_OWNER_FILE,
   VISITOR_TOKEN_SECRET_FILE,
   CLAUDE_CREDENTIALS_FILE,
   vncLog,

package/payload/server/maxy-edge.js

@@ -14,7 +14,7 @@ import {
   sanitizeClientCorrId,
   vncLog,
   websockifyLog
-} from "./chunk-WWD4TCJJ.js";
+} from "./chunk-EXIPYITB.js";
 import "./chunk-PFF6I7KP.js";
 
 // server/edge.ts

package/payload/server/server.js

@@ -9,6 +9,7 @@ import {
   COMMERCIAL_MODE,
   GREETING_DIRECTIVE,
   Hono,
+  INSTALL_OWNER_FILE,
   LOG_DIR,
   MAXY_DIR,
   PLATFORM_ROOT,
@@ -83,7 +84,7 @@ import {
   vncLog,
   walkPremiumBundles,
   writeAdminUserAndPerson
-} from "./chunk-WWD4TCJJ.js";
+} from "./chunk-EXIPYITB.js";
 import {
   __commonJS,
   __toESM
@@ -6325,19 +6326,32 @@ app4.post("/set-pin", async (c) => {
   }
   console.log(`[set-pin] wrote users.json + account.json admins: userId=${userId.slice(0, 8)}\u2026 role=owner`);
   if (process.platform === "linux") {
-    const smbProc = spawnSync2("sudo", ["-n", "smbpasswd", "-a", "-s", "admin"], {
-      input: `${body.pin}
+    let installOwner = null;
+    if (existsSync6(INSTALL_OWNER_FILE)) {
+      try {
+        const raw = readFileSync8(INSTALL_OWNER_FILE, "utf-8").trim();
+        if (raw.length > 0) installOwner = raw;
+      } catch (err) {
+        console.error(`[set-pin] install-owner-read-failed path=${INSTALL_OWNER_FILE} error=${err instanceof Error ? err.message : String(err)}`);
+      }
+    }
+    if (!installOwner) {
+      console.error(`[set-pin] smbpasswd sync failed owner=<unknown> rc=-1 reason=install-owner-file-missing path=${INSTALL_OWNER_FILE}`);
+    } else {
+      const smbProc = spawnSync2("sudo", ["-n", "smbpasswd", "-a", "-s", installOwner], {
+        input: `${body.pin}
 ${body.pin}
 `,
-      stdio: ["pipe", "pipe", "pipe"],
-      encoding: "utf-8",
-      timeout: 1e4
-    });
-    if (smbProc.status === 0) {
-      console.log(`[set-pin] smb-password-synced userId=${userId.slice(0, 8)}\u2026`);
-    } else {
-      const stderr = (smbProc.stderr ?? "").trim().slice(0, 200);
-      console.error(`[set-pin] smb-password-sync-failed exit=${smbProc.status} stderr=${JSON.stringify(stderr)}`);
+        stdio: ["pipe", "pipe", "pipe"],
+        encoding: "utf-8",
+        timeout: 1e4
+      });
+      if (smbProc.status === 0) {
+        console.log(`[set-pin] smbpasswd sync ok owner=${installOwner} userId=${userId.slice(0, 8)}\u2026`);
+      } else {
+        const stderr = (smbProc.stderr ?? "").trim().slice(0, 200);
+        console.error(`[set-pin] smbpasswd sync failed owner=${installOwner} rc=${smbProc.status} stderr=${JSON.stringify(stderr)}`);
+      }
     }
   } else {
     console.log(`[set-pin] smb-password-sync-skipped reason=non-linux platform=${process.platform}`);