The old package-lock.json still referenced @nixpanel/whm as a workspace. After the package rename in v0.4.6, npm install failed to resolve the workspace correctly, causing the nixserver frontend build to fail and breaking login. Deleted and regenerated package-lock.json cleanly.