Admin simulation flows

For testing, PsiMatch supports admin impersonation: a provisioned admin can drive two users through like → mutual match → conversation without touching production accounts' agency.

Who can do this

Only accounts where admin authority came from either:

1. The psymatch_admin custom claim written via the Firebase Admin SDK (scripts/provision-admin-user.mjs), or
2. The static ADMIN_EMAILS allowlist

Impersonation requests carry X-Act-As-User-Id and are validated per request: targets must exist, must not be banned, and can never be another admin. Every request is logged.

The flow

1. 01
   admin_list_users to find an unmatched pair
2. 02
   admin_become_user(A) then like_user toward B
3. 03
   admin_become_user(B) then respond_to_match ACCEPTED
4. 04
   Exchange messages both directions as A and B
5. 05
   analyze_conversation from each side to verify dynamics
6. 06
   admin_clear_actor to drop the impersonation