@chaaskit/server 0.1.0

package/dist/api/admin.js

@@ -0,0 +1,438 @@
+import { Router } from 'express';
+import { db } from '@chaaskit/db';
+import { z } from 'zod';
+import { HTTP_STATUS } from '@chaaskit/shared';
+import { requireAuth, requireAdmin } from '../middleware/auth.js';
+import { AppError } from '../middleware/errorHandler.js';
+export const adminRouter = Router();
+// All admin routes require authentication and admin role
+adminRouter.use(requireAuth, requireAdmin);
+// Get admin dashboard stats
+adminRouter.get('/stats', async (req, res, next) => {
+    try {
+        const thirtyDaysAgo = new Date();
+        thirtyDaysAgo.setDate(thirtyDaysAgo.getDate() - 30);
+        const [totalUsers, totalTeams, totalThreads, totalMessages, newUsersLast30Days, messagesLast30Days, planCounts,] = await Promise.all([
+            db.user.count(),
+            db.team.count({ where: { archivedAt: null } }),
+            db.thread.count(),
+            db.message.count(),
+            db.user.count({
+                where: { createdAt: { gte: thirtyDaysAgo } },
+            }),
+            db.message.count({
+                where: { createdAt: { gte: thirtyDaysAgo } },
+            }),
+            db.user.groupBy({
+                by: ['plan'],
+                _count: { plan: true },
+            }),
+        ]);
+        const planDistribution = {};
+        for (const item of planCounts) {
+            planDistribution[item.plan] = item._count.plan;
+        }
+        const stats = {
+            totalUsers,
+            totalTeams,
+            totalThreads,
+            totalMessages,
+            planDistribution,
+            newUsersLast30Days,
+            messagesLast30Days,
+        };
+        res.json(stats);
+    }
+    catch (error) {
+        next(error);
+    }
+});
+// Get usage data over time
+adminRouter.get('/usage', async (req, res, next) => {
+    try {
+        const periodParam = req.query.period || 'day';
+        const daysParam = parseInt(req.query.days) || 30;
+        // Limit to reasonable ranges
+        const days = Math.min(Math.max(daysParam, 1), 365);
+        const startDate = new Date();
+        startDate.setDate(startDate.getDate() - days);
+        startDate.setHours(0, 0, 0, 0);
+        // Get messages with token counts grouped by date
+        const messages = await db.message.findMany({
+            where: {
+                createdAt: { gte: startDate },
+            },
+            select: {
+                createdAt: true,
+                inputTokens: true,
+                outputTokens: true,
+            },
+        });
+        // Group by date
+        const usageByDate = new Map();
+        for (const msg of messages) {
+            const dateKey = msg.createdAt.toISOString().split('T')[0];
+            if (!usageByDate.has(dateKey)) {
+                usageByDate.set(dateKey, {
+                    date: dateKey,
+                    messages: 0,
+                    inputTokens: 0,
+                    outputTokens: 0,
+                });
+            }
+            const data = usageByDate.get(dateKey);
+            data.messages += 1;
+            data.inputTokens += msg.inputTokens || 0;
+            data.outputTokens += msg.outputTokens || 0;
+        }
+        // Fill in missing dates with zeros
+        const usage = [];
+        const currentDate = new Date(startDate);
+        const endDate = new Date();
+        while (currentDate <= endDate) {
+            const dateKey = currentDate.toISOString().split('T')[0];
+            usage.push(usageByDate.get(dateKey) || {
+                date: dateKey,
+                messages: 0,
+                inputTokens: 0,
+                outputTokens: 0,
+            });
+            currentDate.setDate(currentDate.getDate() + 1);
+        }
+        res.json({
+            usage,
+            period: periodParam,
+        });
+    }
+    catch (error) {
+        next(error);
+    }
+});
+// Get feedback stats and recent feedback
+adminRouter.get('/feedback', async (req, res, next) => {
+    try {
+        const limit = Math.min(parseInt(req.query.limit) || 20, 100);
+        const [totalUp, totalDown, recentFeedback] = await Promise.all([
+            db.messageFeedback.count({ where: { type: 'up' } }),
+            db.messageFeedback.count({ where: { type: 'down' } }),
+            db.messageFeedback.findMany({
+                take: limit,
+                orderBy: { createdAt: 'desc' },
+                include: {
+                    user: {
+                        select: {
+                            id: true,
+                            email: true,
+                            name: true,
+                        },
+                    },
+                    message: {
+                        select: {
+                            id: true,
+                            content: true,
+                            threadId: true,
+                        },
+                    },
+                },
+            }),
+        ]);
+        const feedbackItems = recentFeedback.map((f) => ({
+            id: f.id,
+            type: f.type,
+            comment: f.comment,
+            createdAt: f.createdAt,
+            user: f.user,
+            message: {
+                ...f.message,
+                content: f.message.content.slice(0, 200) + (f.message.content.length > 200 ? '...' : ''),
+            },
+        }));
+        const stats = {
+            totalUp,
+            totalDown,
+            recentFeedback: feedbackItems,
+        };
+        res.json(stats);
+    }
+    catch (error) {
+        next(error);
+    }
+});
+// Get paginated user list
+adminRouter.get('/users', async (req, res, next) => {
+    try {
+        const page = Math.max(parseInt(req.query.page) || 1, 1);
+        const pageSize = Math.min(Math.max(parseInt(req.query.pageSize) || 20, 1), 100);
+        const search = req.query.search || '';
+        const skip = (page - 1) * pageSize;
+        const whereClause = search
+            ? {
+                OR: [
+                    { email: { contains: search, mode: 'insensitive' } },
+                    { name: { contains: search, mode: 'insensitive' } },
+                ],
+            }
+            : {};
+        const [users, total] = await Promise.all([
+            db.user.findMany({
+                where: whereClause,
+                skip,
+                take: pageSize,
+                orderBy: { createdAt: 'desc' },
+                select: {
+                    id: true,
+                    email: true,
+                    name: true,
+                    avatarUrl: true,
+                    isAdmin: true,
+                    plan: true,
+                    messagesThisMonth: true,
+                    credits: true,
+                    emailVerified: true,
+                    oauthProvider: true,
+                    createdAt: true,
+                    _count: {
+                        select: {
+                            threads: true,
+                            teamMemberships: true,
+                        },
+                    },
+                    teamMemberships: {
+                        select: {
+                            role: true,
+                            team: {
+                                select: {
+                                    id: true,
+                                    name: true,
+                                },
+                            },
+                        },
+                    },
+                },
+            }),
+            db.user.count({ where: whereClause }),
+        ]);
+        const adminUsers = users.map((u) => ({
+            id: u.id,
+            email: u.email,
+            name: u.name,
+            avatarUrl: u.avatarUrl,
+            isAdmin: u.isAdmin,
+            plan: u.plan,
+            messagesThisMonth: u.messagesThisMonth,
+            credits: u.credits,
+            emailVerified: u.emailVerified,
+            oauthProvider: u.oauthProvider,
+            createdAt: u.createdAt,
+            threadCount: u._count.threads,
+            teamCount: u._count.teamMemberships,
+            teams: u.teamMemberships.map((tm) => ({
+                id: tm.team.id,
+                name: tm.team.name,
+                role: tm.role,
+            })),
+        }));
+        res.json({
+            users: adminUsers,
+            total,
+            page,
+            pageSize,
+        });
+    }
+    catch (error) {
+        next(error);
+    }
+});
+// Update user (admin toggle, plan change)
+const updateUserSchema = z.object({
+    isAdmin: z.boolean().optional(),
+    plan: z.string().optional(),
+});
+adminRouter.patch('/users/:userId', async (req, res, next) => {
+    try {
+        const { userId } = req.params;
+        const updates = updateUserSchema.parse(req.body);
+        // Prevent self-demotion
+        if (userId === req.user.id && updates.isAdmin === false) {
+            throw new AppError(HTTP_STATUS.BAD_REQUEST, 'Cannot remove your own admin status');
+        }
+        const user = await db.user.findUnique({
+            where: { id: userId },
+        });
+        if (!user) {
+            throw new AppError(HTTP_STATUS.NOT_FOUND, 'User not found');
+        }
+        const updatedUser = await db.user.update({
+            where: { id: userId },
+            data: updates,
+            select: {
+                id: true,
+                email: true,
+                name: true,
+                avatarUrl: true,
+                isAdmin: true,
+                plan: true,
+                messagesThisMonth: true,
+                credits: true,
+                emailVerified: true,
+                oauthProvider: true,
+                createdAt: true,
+                teamMemberships: {
+                    select: {
+                        role: true,
+                        team: {
+                            select: {
+                                id: true,
+                                name: true,
+                            },
+                        },
+                    },
+                },
+                _count: {
+                    select: {
+                        threads: true,
+                        teamMemberships: true,
+                    },
+                },
+            },
+        });
+        const adminUser = {
+            id: updatedUser.id,
+            email: updatedUser.email,
+            name: updatedUser.name,
+            avatarUrl: updatedUser.avatarUrl,
+            isAdmin: updatedUser.isAdmin,
+            plan: updatedUser.plan,
+            messagesThisMonth: updatedUser.messagesThisMonth,
+            credits: updatedUser.credits,
+            emailVerified: updatedUser.emailVerified,
+            oauthProvider: updatedUser.oauthProvider,
+            createdAt: updatedUser.createdAt,
+            threadCount: updatedUser._count.threads,
+            teamCount: updatedUser._count.teamMemberships,
+            teams: updatedUser.teamMemberships.map((tm) => ({
+                id: tm.team.id,
+                name: tm.team.name,
+                role: tm.role,
+            })),
+        };
+        res.json({ user: adminUser });
+    }
+    catch (error) {
+        next(error);
+    }
+});
+// Get paginated team list
+adminRouter.get('/teams', async (req, res, next) => {
+    try {
+        const page = Math.max(parseInt(req.query.page) || 1, 1);
+        const pageSize = Math.min(Math.max(parseInt(req.query.pageSize) || 20, 1), 100);
+        const search = req.query.search || '';
+        const includeArchived = req.query.includeArchived === 'true';
+        const skip = (page - 1) * pageSize;
+        const whereClause = {
+            ...(search ? { name: { contains: search, mode: 'insensitive' } } : {}),
+            ...(includeArchived ? {} : { archivedAt: null }),
+        };
+        const [teams, total] = await Promise.all([
+            db.team.findMany({
+                where: whereClause,
+                skip,
+                take: pageSize,
+                orderBy: { createdAt: 'desc' },
+                select: {
+                    id: true,
+                    name: true,
+                    createdAt: true,
+                    archivedAt: true,
+                    _count: {
+                        select: {
+                            members: true,
+                            threads: true,
+                        },
+                    },
+                },
+            }),
+            db.team.count({ where: whereClause }),
+        ]);
+        const adminTeams = teams.map((t) => ({
+            id: t.id,
+            name: t.name,
+            memberCount: t._count.members,
+            threadCount: t._count.threads,
+            createdAt: t.createdAt,
+            archivedAt: t.archivedAt,
+        }));
+        res.json({
+            teams: adminTeams,
+            total,
+            page,
+            pageSize,
+        });
+    }
+    catch (error) {
+        next(error);
+    }
+});
+// Get single team with members
+adminRouter.get('/teams/:teamId', async (req, res, next) => {
+    try {
+        const { teamId } = req.params;
+        const team = await db.team.findUnique({
+            where: { id: teamId },
+            select: {
+                id: true,
+                name: true,
+                context: true,
+                createdAt: true,
+                archivedAt: true,
+                _count: {
+                    select: {
+                        members: true,
+                        threads: true,
+                    },
+                },
+                members: {
+                    select: {
+                        role: true,
+                        createdAt: true,
+                        user: {
+                            select: {
+                                id: true,
+                                email: true,
+                                name: true,
+                                avatarUrl: true,
+                            },
+                        },
+                    },
+                    orderBy: { createdAt: 'asc' },
+                },
+            },
+        });
+        if (!team) {
+            throw new AppError(HTTP_STATUS.NOT_FOUND, 'Team not found');
+        }
+        const adminTeamDetails = {
+            id: team.id,
+            name: team.name,
+            context: team.context,
+            memberCount: team._count.members,
+            threadCount: team._count.threads,
+            createdAt: team.createdAt,
+            archivedAt: team.archivedAt,
+            members: team.members.map((m) => ({
+                id: m.user.id,
+                email: m.user.email,
+                name: m.user.name,
+                avatarUrl: m.user.avatarUrl,
+                role: m.role,
+                joinedAt: m.createdAt,
+            })),
+        };
+        res.json(adminTeamDetails);
+    }
+    catch (error) {
+        next(error);
+    }
+});
+//# sourceMappingURL=admin.js.map

package/dist/api/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/api/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAW/C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AAEzD,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC;AAEpC,yDAAyD;AACzD,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAE3C,4BAA4B;AAC5B,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC;QACjC,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAEpD,MAAM,CACJ,UAAU,EACV,UAAU,EACV,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACX,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;YACf,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;YAC9C,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;YACjB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE;YAClB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;gBACZ,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;aAC7C,CAAC;YACF,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;gBACf,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;aAC7C,CAAC;YACF,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;gBACd,EAAE,EAAE,CAAC,MAAM,CAAC;gBACZ,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aACvB,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAA2B,EAAE,CAAC;QACpD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QACjD,CAAC;QAED,MAAM,KAAK,GAAe;YACxB,UAAU;YACV,UAAU;YACV,YAAY;YACZ,aAAa;YACb,gBAAgB;YAChB,kBAAkB;YAClB,kBAAkB;SACnB,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,2BAA2B;AAC3B,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,WAAW,GAAI,GAAG,CAAC,KAAK,CAAC,MAAiB,IAAI,KAAK,CAAC;QAC1D,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,IAAI,EAAE,CAAC;QAE3D,6BAA6B;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEnD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAE/B,iDAAiD;QACjD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;YACzC,KAAK,EAAE;gBACL,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE;aAC9B;YACD,MAAM,EAAE;gBACN,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,IAAI;aACnB;SACF,CAAC,CAAC;QAEH,gBAAgB;QAChB,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;QAEtD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE;oBACvB,IAAI,EAAE,OAAO;oBACb,QAAQ,EAAE,CAAC;oBACX,WAAW,EAAE,CAAC;oBACd,YAAY,EAAE,CAAC;iBAChB,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,CAAC;QAED,mCAAmC;QACnC,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;QAE3B,OAAO,WAAW,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CACR,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI;gBAC1B,IAAI,EAAE,OAAO;gBACb,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,CAAC;gBACd,YAAY,EAAE,CAAC;aAChB,CACF,CAAC;YACF,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC;YACP,KAAK;YACL,MAAM,EAAE,WAAuC;SAChD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,yCAAyC;AACzC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAe,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAEvE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC7D,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YACnD,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;YACrD,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC;gBAC1B,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,OAAO,EAAE;oBACP,IAAI,EAAE;wBACJ,MAAM,EAAE;4BACN,EAAE,EAAE,IAAI;4BACR,KAAK,EAAE,IAAI;4BACX,IAAI,EAAE,IAAI;yBACX;qBACF;oBACD,OAAO,EAAE;wBACP,MAAM,EAAE;4BACN,EAAE,EAAE,IAAI;4BACR,OAAO,EAAE,IAAI;4BACb,QAAQ,EAAE,IAAI;yBACf;qBACF;iBACF;aACF,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,aAAa,GAAmB,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/D,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAqB;YAC7B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE;gBACP,GAAG,CAAC,CAAC,OAAO;gBACZ,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;aACzF;SACF,CAAC,CAAC,CAAC;QAEJ,MAAM,KAAK,GAAkB;YAC3B,OAAO;YACP,SAAS;YACT,cAAc,EAAE,aAAa;SAC9B,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,0BAA0B;AAC1B,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAI,GAAG,CAAC,KAAK,CAAC,MAAiB,IAAI,EAAE,CAAC;QAElD,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;QAEnC,MAAM,WAAW,GAAG,MAAM;YACxB,CAAC,CAAC;gBACE,EAAE,EAAE;oBACF,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAsB,EAAE,EAAE;oBAC7D,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAsB,EAAE,EAAE;iBAC7D;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QAEP,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACf,KAAK,EAAE,WAAW;gBAClB,IAAI;gBACJ,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,IAAI;oBACf,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,IAAI;oBACV,iBAAiB,EAAE,IAAI;oBACvB,OAAO,EAAE,IAAI;oBACb,aAAa,EAAE,IAAI;oBACnB,aAAa,EAAE,IAAI;oBACnB,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI;4BACb,eAAe,EAAE,IAAI;yBACtB;qBACF;oBACD,eAAe,EAAE;wBACf,MAAM,EAAE;4BACN,IAAI,EAAE,IAAI;4BACV,IAAI,EAAE;gCACJ,MAAM,EAAE;oCACN,EAAE,EAAE,IAAI;oCACR,IAAI,EAAE,IAAI;iCACX;6BACF;yBACF;qBACF;iBACF;aACF,CAAC;YACF,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;YAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe;YACnC,KAAK,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACpC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE;gBACd,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;gBAClB,IAAI,EAAE,EAAE,CAAC,IAAI;aACd,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;QAEJ,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,0CAA0C;AAC1C,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,WAAW,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC3D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC9B,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEjD,wBAAwB;QACxB,IAAI,MAAM,KAAK,GAAG,CAAC,IAAK,CAAC,EAAE,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YACzD,MAAM,IAAI,QAAQ,CAAC,WAAW,CAAC,WAAW,EAAE,qCAAqC,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;YACpC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;YACvC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,IAAI;gBACV,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,IAAI;gBACf,eAAe,EAAE;oBACf,MAAM,EAAE;wBACN,IAAI,EAAE,IAAI;wBACV,IAAI,EAAE;4BACJ,MAAM,EAAE;gCACN,EAAE,EAAE,IAAI;gCACR,IAAI,EAAE,IAAI;6BACX;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,OAAO,EAAE,IAAI;wBACb,eAAe,EAAE,IAAI;qBACtB;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,SAAS,GAAc;YAC3B,EAAE,EAAE,WAAW,CAAC,EAAE;YAClB,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;YAChD,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,OAAO;YACvC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,eAAe;YAC7C,KAAK,EAAE,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC9C,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE;gBACd,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;gBAClB,IAAI,EAAE,EAAE,CAAC,IAAI;aACd,CAAC,CAAC;SACJ,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,0BAA0B;AAC1B,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAI,GAAG,CAAC,KAAK,CAAC,MAAiB,IAAI,EAAE,CAAC;QAClD,MAAM,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,MAAM,CAAC;QAE7D,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;QAEnC,MAAM,WAAW,GAAG;YAClB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;SACjD,CAAC;QAEF,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACf,KAAK,EAAE,WAAW;gBAClB,IAAI;gBACJ,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;gBAC9B,MAAM,EAAE;oBACN,EAAE,EAAE,IAAI;oBACR,IAAI,EAAE,IAAI;oBACV,SAAS,EAAE,IAAI;oBACf,UAAU,EAAE,IAAI;oBAChB,MAAM,EAAE;wBACN,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI;4BACb,OAAO,EAAE,IAAI;yBACd;qBACF;iBACF;aACF,CAAC;YACF,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAgB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;YAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;YAC7B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC,CAAC;QAEJ,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,UAAU;YACjB,KAAK;YACL,IAAI;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,+BAA+B;AAC/B,WAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE9B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;YACpC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE;oBACN,MAAM,EAAE;wBACN,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,IAAI;qBACd;iBACF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE;wBACN,IAAI,EAAE,IAAI;wBACV,SAAS,EAAE,IAAI;wBACf,IAAI,EAAE;4BACJ,MAAM,EAAE;gCACN,EAAE,EAAE,IAAI;gCACR,KAAK,EAAE,IAAI;gCACX,IAAI,EAAE,IAAI;gCACV,SAAS,EAAE,IAAI;6BAChB;yBACF;qBACF;oBACD,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;iBAC9B;aACF;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,QAAQ,CAAC,WAAW,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,gBAAgB,GAAqB;YACzC,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAChC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAChC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAmB,EAAE,CAAC,CAAC;gBACjD,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE;gBACb,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;gBACnB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;gBACjB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS;gBAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,SAAS;aACtB,CAAC,CAAC;SACJ,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/api/agents.js

@@ -0,0 +1,21 @@
+import { Router } from 'express';
+import { optionalAuth } from '../middleware/auth.js';
+import { getAgentsForPlan, getAgentClientInfo } from '../services/agents.js';
+export const agentsRouter = Router();
+/**
+ * GET /api/agents
+ * List agents available to the current user based on their plan.
+ * Returns agent info suitable for display (id, name, isDefault).
+ */
+agentsRouter.get('/', optionalAuth, async (req, res, next) => {
+    try {
+        const userPlan = req.user?.plan;
+        const agents = getAgentsForPlan(userPlan);
+        const agentList = agents.map(getAgentClientInfo);
+        res.json({ agents: agentList });
+    }
+    catch (error) {
+        next(error);
+    }
+});
+//# sourceMappingURL=agents.js.map

package/dist/api/agents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/api/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE7E,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC;AAErC;;;;GAIG;AACH,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC3D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAE1C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAEjD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/api/api-keys.js

@@ -0,0 +1,122 @@
+import { Router } from 'express';
+import { randomBytes } from 'crypto';
+import bcrypt from 'bcryptjs';
+import { db } from '@chaaskit/db';
+import { HTTP_STATUS } from '@chaaskit/shared';
+import { requireAuth } from '../middleware/auth.js';
+import { getConfig } from '../config/loader.js';
+export const apiKeysRouter = Router();
+// Check if user can access API keys feature
+function canAccessApiKeys(user) {
+    const config = getConfig();
+    if (!config.api?.enabled)
+        return false;
+    if (!config.api.allowedPlans)
+        return true;
+    return config.api.allowedPlans.includes(user.plan);
+}
+// List user's API keys (masked)
+apiKeysRouter.get('/', requireAuth, async (req, res, next) => {
+    try {
+        if (!canAccessApiKeys(req.user)) {
+            res.status(HTTP_STATUS.FORBIDDEN).json({ error: 'API access not available for your plan' });
+            return;
+        }
+        const keys = await db.apiKey.findMany({
+            where: { userId: req.user.id },
+            select: {
+                id: true,
+                name: true,
+                keyPrefix: true,
+                teamId: true,
+                team: { select: { id: true, name: true } },
+                lastUsedAt: true,
+                expiresAt: true,
+                createdAt: true,
+            },
+            orderBy: { createdAt: 'desc' },
+        });
+        res.json({ keys });
+    }
+    catch (error) {
+        next(error);
+    }
+});
+// Create new API key
+apiKeysRouter.post('/', requireAuth, async (req, res, next) => {
+    try {
+        if (!canAccessApiKeys(req.user)) {
+            res.status(HTTP_STATUS.FORBIDDEN).json({ error: 'API access not available for your plan' });
+            return;
+        }
+        const { name, expiresAt, teamId } = req.body;
+        // If teamId provided, verify user is a member of that team
+        if (teamId) {
+            const membership = await db.teamMember.findFirst({
+                where: { userId: req.user.id, teamId },
+            });
+            if (!membership) {
+                res.status(HTTP_STATUS.FORBIDDEN).json({ error: 'You are not a member of this team' });
+                return;
+            }
+        }
+        // Generate key: <prefix><48 random chars>
+        const config = getConfig();
+        const prefix = config.api?.keyPrefix || 'sk-';
+        const rawKey = `${prefix}${randomBytes(24).toString('hex')}`;
+        // Store enough chars to identify the key (prefix + first few random chars)
+        const keyPrefix = rawKey.slice(0, prefix.length + 6);
+        const keyHash = await bcrypt.hash(rawKey, 10);
+        const apiKey = await db.apiKey.create({
+            data: {
+                userId: req.user.id,
+                teamId: teamId || null,
+                name: name || 'Untitled Key',
+                keyPrefix,
+                keyHash,
+                expiresAt: expiresAt ? new Date(expiresAt) : null,
+            },
+            include: { team: { select: { id: true, name: true } } },
+        });
+        // Return full key ONLY on creation (never again)
+        res.json({
+            key: {
+                id: apiKey.id,
+                name: apiKey.name,
+                keyPrefix,
+                teamId: apiKey.teamId,
+                teamName: apiKey.team?.name,
+                createdAt: apiKey.createdAt,
+                expiresAt: apiKey.expiresAt,
+            },
+            secret: rawKey, // Show once, user must copy
+        });
+    }
+    catch (error) {
+        next(error);
+    }
+});
+// Delete API key
+apiKeysRouter.delete('/:keyId', requireAuth, async (req, res, next) => {
+    try {
+        const { keyId } = req.params;
+        const key = await db.apiKey.findFirst({
+            where: { id: keyId, userId: req.user.id },
+        });
+        if (!key) {
+            res.status(HTTP_STATUS.NOT_FOUND).json({ error: 'API key not found' });
+            return;
+        }
+        await db.apiKey.delete({ where: { id: keyId } });
+        res.json({ success: true });
+    }
+    catch (error) {
+        next(error);
+    }
+});
+// Check if user can access API keys (for UI)
+apiKeysRouter.get('/access', requireAuth, async (req, res) => {
+    const canAccess = canAccessApiKeys(req.user);
+    res.json({ canAccess });
+});
+//# sourceMappingURL=api-keys.js.map

package/dist/api/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../src/api/api-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,MAAM,MAAM,UAAU,CAAC;AAC9B,OAAO,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC;AAEtC,4CAA4C;AAC5C,SAAS,gBAAgB,CAAC,IAAsB;IAC9C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,gCAAgC;AAChC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC3D,IAAI,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAK,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YACpC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE;YAC/B,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;gBACV,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;gBAC1C,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;aAChB;YACD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,qBAAqB;AACrB,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC5D,IAAI,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAK,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;YAC5F,OAAO;QACT,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAE7C,2DAA2D;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;gBAC/C,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE,MAAM,EAAE;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;gBACvF,OAAO;YACT,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,EAAE,SAAS,IAAI,KAAK,CAAC;QAC9C,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,2EAA2E;QAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,IAAI,EAAE;gBACJ,MAAM,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE;gBACpB,MAAM,EAAE,MAAM,IAAI,IAAI;gBACtB,IAAI,EAAE,IAAI,IAAI,cAAc;gBAC5B,SAAS;gBACT,OAAO;gBACP,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;aAClD;YACD,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;SACxD,CAAC,CAAC;QAEH,iDAAiD;QACjD,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,EAAE;gBACH,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B;YACD,MAAM,EAAE,MAAM,EAAG,4BAA4B;SAC9C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,iBAAiB;AACjB,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACpE,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;YACpC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,IAAK,CAAC,EAAE,EAAE;SAC3C,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,6CAA6C;AAC7C,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC3D,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC;IAC9C,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC"}