diff --git a/server.js b/server.js
index dbe1e28..0515ba4 100644
--- a/server.js
+++ b/server.js
@@ -504,7 +504,12 @@ app.post("/auth/login", async (req, res) => {
         res.json({ 
             ok: true, 
             token, 
-            user: { id: user.id, full_name: user.full_name, role: user.role, accountId: user.owner_id || user.id } 
+            user: { 
+                id: user.id, 
+                full_name: user.full_name, 
+                role: user.role || 'operario', // 🛡️ ESCUDO: Si la base de datos manda null, forzamos 'operario'
+                accountId: user.owner_id || user.id 
+            } 
         });
     } catch (e) {
         console.error("Error en Login:", e);