npm - @intranefr/superbackend - Versions diffs - 1.4.3 - Mend

@intranefr/superbackend 1.4.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (188) hide show

package/.commiat +4 -0
package/.env.example +47 -0
package/README.md +110 -0
package/index.js +94 -0
package/package.json +67 -0
package/public/css/styles.css +139 -0
package/public/js/animations.js +41 -0
package/sdk/error-tracking/browser/package.json +16 -0
package/sdk/error-tracking/browser/src/core.js +270 -0
package/sdk/error-tracking/browser/src/embed.js +18 -0
package/sdk/error-tracking/browser/src/index.js +1 -0
package/server.js +5 -0
package/src/admin/endpointRegistry.js +300 -0
package/src/controllers/admin.controller.js +321 -0
package/src/controllers/adminAssets.controller.js +530 -0
package/src/controllers/adminAssetsStorage.controller.js +260 -0
package/src/controllers/adminEjsVirtual.controller.js +354 -0
package/src/controllers/adminFeatureFlags.controller.js +155 -0
package/src/controllers/adminHeadless.controller.js +1071 -0
package/src/controllers/adminI18n.controller.js +604 -0
package/src/controllers/adminJsonConfigs.controller.js +97 -0
package/src/controllers/adminLlm.controller.js +273 -0
package/src/controllers/adminMigration.controller.js +257 -0
package/src/controllers/adminSeoConfig.controller.js +515 -0
package/src/controllers/adminStats.controller.js +121 -0
package/src/controllers/adminUploadNamespaces.controller.js +208 -0
package/src/controllers/assets.controller.js +248 -0
package/src/controllers/auth.controller.js +93 -0
package/src/controllers/billing.controller.js +223 -0
package/src/controllers/featureFlags.controller.js +35 -0
package/src/controllers/forms.controller.js +217 -0
package/src/controllers/globalSettings.controller.js +252 -0
package/src/controllers/headlessCrud.controller.js +126 -0
package/src/controllers/i18n.controller.js +12 -0
package/src/controllers/invite.controller.js +249 -0
package/src/controllers/jsonConfigs.controller.js +19 -0
package/src/controllers/metrics.controller.js +149 -0
package/src/controllers/notificationAdmin.controller.js +264 -0
package/src/controllers/notifications.controller.js +131 -0
package/src/controllers/org.controller.js +357 -0
package/src/controllers/orgAdmin.controller.js +491 -0
package/src/controllers/stripeAdmin.controller.js +410 -0
package/src/controllers/user.controller.js +361 -0
package/src/controllers/userAdmin.controller.js +277 -0
package/src/controllers/waitingList.controller.js +167 -0
package/src/controllers/webhook.controller.js +200 -0
package/src/middleware/auth.js +66 -0
package/src/middleware/errorCapture.js +170 -0
package/src/middleware/headlessApiTokenAuth.js +57 -0
package/src/middleware/org.js +108 -0
package/src/middleware.js +901 -0
package/src/models/ActionEvent.js +31 -0
package/src/models/ActivityLog.js +41 -0
package/src/models/Asset.js +84 -0
package/src/models/AuditEvent.js +93 -0
package/src/models/EmailLog.js +28 -0
package/src/models/ErrorAggregate.js +72 -0
package/src/models/FormSubmission.js +41 -0
package/src/models/GlobalSetting.js +38 -0
package/src/models/HeadlessApiToken.js +24 -0
package/src/models/HeadlessModelDefinition.js +41 -0
package/src/models/I18nEntry.js +77 -0
package/src/models/I18nLocale.js +33 -0
package/src/models/Invite.js +70 -0
package/src/models/JsonConfig.js +46 -0
package/src/models/Notification.js +60 -0
package/src/models/Organization.js +57 -0
package/src/models/OrganizationMember.js +43 -0
package/src/models/StripeCatalogItem.js +77 -0
package/src/models/StripeWebhookEvent.js +57 -0
package/src/models/User.js +89 -0
package/src/models/VirtualEjsFile.js +60 -0
package/src/models/VirtualEjsFileVersion.js +43 -0
package/src/models/VirtualEjsGroupChange.js +32 -0
package/src/models/WaitingList.js +41 -0
package/src/models/Webhook.js +63 -0
package/src/models/Workflow.js +29 -0
package/src/models/WorkflowExecution.js +12 -0
package/src/routes/admin.routes.js +26 -0
package/src/routes/adminAssets.routes.js +28 -0
package/src/routes/adminAssetsStorage.routes.js +13 -0
package/src/routes/adminAudit.routes.js +196 -0
package/src/routes/adminEjsVirtual.routes.js +17 -0
package/src/routes/adminErrors.routes.js +164 -0
package/src/routes/adminFeatureFlags.routes.js +12 -0
package/src/routes/adminHeadless.routes.js +38 -0
package/src/routes/adminI18n.routes.js +22 -0
package/src/routes/adminJsonConfigs.routes.js +15 -0
package/src/routes/adminLlm.routes.js +12 -0
package/src/routes/adminMigration.routes.js +81 -0
package/src/routes/adminSeoConfig.routes.js +20 -0
package/src/routes/adminUploadNamespaces.routes.js +13 -0
package/src/routes/assets.routes.js +21 -0
package/src/routes/auth.routes.js +12 -0
package/src/routes/billing.routes.js +11 -0
package/src/routes/errorTracking.routes.js +31 -0
package/src/routes/featureFlags.routes.js +9 -0
package/src/routes/forms.routes.js +9 -0
package/src/routes/formsAdmin.routes.js +13 -0
package/src/routes/globalSettings.routes.js +18 -0
package/src/routes/headless.routes.js +15 -0
package/src/routes/i18n.routes.js +8 -0
package/src/routes/invite.routes.js +9 -0
package/src/routes/jsonConfigs.routes.js +8 -0
package/src/routes/log.routes.js +111 -0
package/src/routes/metrics.routes.js +9 -0
package/src/routes/notificationAdmin.routes.js +15 -0
package/src/routes/notifications.routes.js +12 -0
package/src/routes/org.routes.js +31 -0
package/src/routes/orgAdmin.routes.js +20 -0
package/src/routes/publicAssets.routes.js +7 -0
package/src/routes/stripeAdmin.routes.js +20 -0
package/src/routes/user.routes.js +22 -0
package/src/routes/userAdmin.routes.js +15 -0
package/src/routes/waitingList.routes.js +13 -0
package/src/routes/waitingListAdmin.routes.js +9 -0
package/src/routes/webhook.routes.js +32 -0
package/src/routes/workflowWebhook.routes.js +54 -0
package/src/routes/workflows.routes.js +110 -0
package/src/services/assets.service.js +110 -0
package/src/services/audit.service.js +62 -0
package/src/services/auditLogger.js +165 -0
package/src/services/ejsVirtual.service.js +614 -0
package/src/services/email.service.js +351 -0
package/src/services/errorLogger.js +221 -0
package/src/services/featureFlags.service.js +202 -0
package/src/services/forms.service.js +214 -0
package/src/services/globalSettings.service.js +49 -0
package/src/services/headlessApiTokens.service.js +158 -0
package/src/services/headlessCrypto.service.js +31 -0
package/src/services/headlessModels.service.js +356 -0
package/src/services/i18n.service.js +314 -0
package/src/services/i18nInferredKeys.service.js +337 -0
package/src/services/jsonConfigs.service.js +392 -0
package/src/services/llm.service.js +749 -0
package/src/services/migration.service.js +581 -0
package/src/services/migrationAssets/fsLocal.js +58 -0
package/src/services/migrationAssets/index.js +134 -0
package/src/services/migrationAssets/s3.js +75 -0
package/src/services/migrationAssets/sftp.js +92 -0
package/src/services/notification.service.js +212 -0
package/src/services/objectStorage.service.js +514 -0
package/src/services/seoConfig.service.js +402 -0
package/src/services/storage.js +150 -0
package/src/services/stripe.service.js +185 -0
package/src/services/stripeHelper.service.js +264 -0
package/src/services/uploadNamespaces.service.js +326 -0
package/src/services/webhook.service.js +157 -0
package/src/services/workflow.service.js +271 -0
package/src/utils/asyncHandler.js +5 -0
package/src/utils/encryption.js +80 -0
package/src/utils/jwt.js +40 -0
package/src/utils/orgRoles.js +156 -0
package/src/utils/validation.js +26 -0
package/src/utils/webhookRetry.js +93 -0
package/views/admin-assets.ejs +444 -0
package/views/admin-audit.ejs +283 -0
package/views/admin-coolify-deploy.ejs +207 -0
package/views/admin-dashboard-home.ejs +291 -0
package/views/admin-dashboard.ejs +397 -0
package/views/admin-ejs-virtual.ejs +280 -0
package/views/admin-errors.ejs +368 -0
package/views/admin-feature-flags.ejs +390 -0
package/views/admin-forms.ejs +526 -0
package/views/admin-global-settings.ejs +436 -0
package/views/admin-headless.ejs +2020 -0
package/views/admin-i18n-locales.ejs +221 -0
package/views/admin-i18n.ejs +728 -0
package/views/admin-json-configs.ejs +410 -0
package/views/admin-llm.ejs +884 -0
package/views/admin-metrics.ejs +274 -0
package/views/admin-migration.ejs +814 -0
package/views/admin-notifications.ejs +430 -0
package/views/admin-organizations.ejs +984 -0
package/views/admin-seo-config.ejs +673 -0
package/views/admin-stripe-pricing.ejs +558 -0
package/views/admin-test.ejs +342 -0
package/views/admin-users.ejs +452 -0
package/views/admin-waiting-list.ejs +547 -0
package/views/admin-webhooks.ejs +329 -0
package/views/admin-workflows.ejs +310 -0
package/views/partials/admin-assets-script.ejs +2022 -0
package/views/partials/admin-test-sidebar.ejs +14 -0
package/views/partials/dashboard/nav-items.ejs +66 -0
package/views/partials/dashboard/palette.ejs +63 -0
package/views/partials/dashboard/sidebar.ejs +21 -0
package/views/partials/dashboard/tab-bar.ejs +26 -0
package/views/partials/footer.ejs +3 -0

package/views/admin-stripe-pricing.ejs ADDED Viewed

@@ -0,0 +1,558 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Stripe Pricing Admin</title>
+  <script src="https://cdn.tailwindcss.com"></script>
+  <style>
+    .toast { animation: slideIn 0.3s ease-out; }
+    @keyframes slideIn { from { transform: translateX(100%); opacity: 0; } to { transform: translateX(0); opacity: 1; } }
+    .fade-out { animation: fadeOut 0.3s ease-out forwards; }
+    @keyframes fadeOut { from { opacity: 1; } to { opacity: 0; } }
+  </style>
+</head>
+<body class="bg-gray-100">
+  <div class="min-h-screen">
+    <div class="bg-white shadow">
+      <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-4">
+        <div class="flex justify-between items-center">
+          <div>
+            <h1 class="text-2xl font-bold text-gray-900">Stripe Pricing</h1>
+            <p class="text-sm text-gray-600 mt-1">Manage Stripe prices and products</p>
+          </div>
+          <div class="flex items-center gap-4">
+            <span id="stripe-status" class="text-sm"></span>
+          </div>
+        </div>
+      </div>
+    </div>
+    <div id="stripe-disabled" class="hidden max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-8">
+      <div class="bg-yellow-50 border border-yellow-200 rounded-lg p-6">
+        <h2 class="text-lg font-semibold text-yellow-800 mb-2">Stripe Not Configured</h2>
+        <p class="text-yellow-700 mb-4">To use this feature, set the <code class="bg-yellow-100 px-1 rounded">STRIPE_SECRET_KEY</code> environment variable.</p>
+        <p class="text-sm text-yellow-600">Example: <code class="bg-yellow-100 px-1 rounded">STRIPE_SECRET_KEY=sk_test_...</code></p>
+      </div>
+    </div>
+    <div id="stripe-enabled" class="hidden max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-8">
+      <div class="grid grid-cols-1 md:grid-cols-4 gap-4 mb-6">
+        <div class="bg-white rounded-lg shadow p-4">
+          <p class="text-sm text-gray-500">Total Catalog Items</p>
+          <p id="stat-total" class="text-2xl font-bold text-gray-900">-</p>
+        </div>
+        <div class="bg-white rounded-lg shadow p-4">
+          <p class="text-sm text-gray-500">Active Items</p>
+          <p id="stat-active" class="text-2xl font-bold text-green-600">-</p>
+        </div>
+        <div class="bg-white rounded-lg shadow p-4">
+          <p class="text-sm text-gray-500">Env: PRICE_ID_CREATOR</p>
+          <p id="stat-env-creator" class="text-sm font-medium text-gray-700">-</p>
+        </div>
+        <div class="bg-white rounded-lg shadow p-4">
+          <p class="text-sm text-gray-500">Env: PRICE_ID_PRO</p>
+          <p id="stat-env-pro" class="text-sm font-medium text-gray-700">-</p>
+        </div>
+      </div>
+      <div class="grid grid-cols-1 lg:grid-cols-3 gap-6">
+        <div class="lg:col-span-1 space-y-6">
+          <div class="bg-white rounded-lg shadow p-6">
+            <h2 class="text-lg font-semibold text-gray-900 mb-4">Create New Price</h2>
+            <div class="space-y-3">
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Product Name *</label>
+                <input id="create-product-name" type="text" class="w-full border rounded px-3 py-2 text-sm" placeholder="Pro Plan">
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Description</label>
+                <input id="create-description" type="text" class="w-full border rounded px-3 py-2 text-sm" placeholder="Access to all features">
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Plan Key *</label>
+                <input id="create-plan-key" type="text" class="w-full border rounded px-3 py-2 text-sm" placeholder="pro_monthly">
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Display Name *</label>
+                <input id="create-display-name" type="text" class="w-full border rounded px-3 py-2 text-sm" placeholder="Pro (Monthly)">
+              </div>
+              <div class="grid grid-cols-2 gap-3">
+                <div>
+                  <label class="block text-sm font-medium text-gray-700 mb-1">Type *</label>
+                  <select id="create-billing-type" class="w-full border rounded px-3 py-2 text-sm">
+                    <option value="subscription">Subscription</option>
+                    <option value="one_time">One-Time</option>
+                  </select>
+                </div>
+                <div>
+                  <label class="block text-sm font-medium text-gray-700 mb-1">Currency</label>
+                  <select id="create-currency" class="w-full border rounded px-3 py-2 text-sm">
+                    <option value="usd">USD</option>
+                    <option value="eur">EUR</option>
+                    <option value="gbp">GBP</option>
+                  </select>
+                </div>
+              </div>
+              <div class="grid grid-cols-2 gap-3">
+                <div>
+                  <label class="block text-sm font-medium text-gray-700 mb-1">Amount (cents) *</label>
+                  <input id="create-unit-amount" type="number" min="0" class="w-full border rounded px-3 py-2 text-sm" placeholder="1999">
+                </div>
+                <div id="interval-container">
+                  <label class="block text-sm font-medium text-gray-700 mb-1">Interval</label>
+                  <select id="create-interval" class="w-full border rounded px-3 py-2 text-sm">
+                    <option value="month">Monthly</option>
+                    <option value="year">Yearly</option>
+                    <option value="week">Weekly</option>
+                  </select>
+                </div>
+              </div>
+              <button id="btn-create" class="w-full bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 text-sm">Create in Stripe + Catalog</button>
+            </div>
+          </div>
+          <div class="bg-white rounded-lg shadow p-6">
+            <h2 class="text-lg font-semibold text-gray-900 mb-4">Import Existing Price</h2>
+            <p class="text-xs text-gray-500 mb-3">Import an existing Stripe price by ID and assign a plan key.</p>
+            <div class="space-y-3">
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Stripe Price ID *</label>
+                <input id="import-price-id" type="text" class="w-full border rounded px-3 py-2 text-sm" placeholder="price_...">
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Plan Key *</label>
+                <input id="import-plan-key" type="text" class="w-full border rounded px-3 py-2 text-sm" placeholder="pro">
+              </div>
+              <div>
+                <label class="block text-sm font-medium text-gray-700 mb-1">Display Name</label>
+                <input id="import-display-name" type="text" class="w-full border rounded px-3 py-2 text-sm" placeholder="(auto from Stripe)">
+              </div>
+              <button id="btn-import" class="w-full bg-green-500 text-white px-4 py-2 rounded hover:bg-green-600 text-sm">Import Price</button>
+            </div>
+          </div>
+        </div>
+        <div class="lg:col-span-2">
+          <div class="bg-white rounded-lg shadow p-6">
+            <div class="flex items-center justify-between mb-4">
+              <div>
+                <h2 class="text-lg font-semibold text-gray-900">Catalog</h2>
+                <p id="catalog-subtitle" class="text-sm text-gray-600">-</p>
+              </div>
+              <div class="flex gap-2">
+                <button id="btn-show-stripe" class="bg-purple-100 text-purple-800 px-3 py-2 rounded hover:bg-purple-200 text-sm">Browse Stripe</button>
+                <button id="btn-refresh" class="bg-gray-100 text-gray-800 px-3 py-2 rounded hover:bg-gray-200 text-sm">Refresh</button>
+              </div>
+            </div>
+            <div class="flex gap-2 mb-4">
+              <select id="filter-active" class="border rounded px-3 py-2 text-sm">
+                <option value="">All Status</option>
+                <option value="true">Active</option>
+                <option value="false">Inactive</option>
+              </select>
+              <select id="filter-type" class="border rounded px-3 py-2 text-sm">
+                <option value="">All Types</option>
+                <option value="subscription">Subscription</option>
+                <option value="one_time">One-Time</option>
+              </select>
+              <button id="btn-apply" class="bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 text-sm">Apply</button>
+              <div class="flex-1"></div>
+              <button id="btn-prev" class="bg-gray-100 text-gray-800 px-3 py-2 rounded hover:bg-gray-200 text-sm" disabled>Prev</button>
+              <button id="btn-next" class="bg-gray-100 text-gray-800 px-3 py-2 rounded hover:bg-gray-200 text-sm" disabled>Next</button>
+            </div>
+            <div class="overflow-x-auto">
+              <table class="min-w-full divide-y divide-gray-200">
+                <thead class="bg-gray-50">
+                  <tr>
+                    <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Plan Key</th>
+                    <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Display</th>
+                    <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Type</th>
+                    <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Price</th>
+                    <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Status</th>
+                    <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Actions</th>
+                  </tr>
+                </thead>
+                <tbody id="catalog-tbody" class="bg-white divide-y divide-gray-200"></tbody>
+              </table>
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+  <div id="modal-stripe" class="fixed inset-0 bg-black bg-opacity-50 hidden z-50 flex items-center justify-center">
+    <div class="bg-white rounded-lg shadow-xl p-6 w-full max-w-3xl mx-4 max-h-[80vh] overflow-y-auto">
+      <div class="flex justify-between items-center mb-4">
+        <h3 class="text-lg font-semibold text-gray-900">Stripe Prices</h3>
+        <button id="btn-close-stripe" class="text-gray-400 hover:text-gray-600">&times;</button>
+      </div>
+      <p class="text-sm text-gray-600 mb-4">Prices from your Stripe account. Click "Import" to add to catalog.</p>
+      <div class="overflow-x-auto">
+        <table class="min-w-full divide-y divide-gray-200">
+          <thead class="bg-gray-50">
+            <tr>
+              <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Product</th>
+              <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Price ID</th>
+              <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Amount</th>
+              <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Type</th>
+              <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Mapped</th>
+              <th class="px-3 py-2 text-left text-xs font-medium text-gray-500 uppercase">Action</th>
+            </tr>
+          </thead>
+          <tbody id="stripe-prices-tbody" class="bg-white divide-y divide-gray-200"></tbody>
+        </table>
+      </div>
+      <div class="flex justify-end mt-4">
+        <button id="btn-load-more-stripe" class="bg-gray-100 text-gray-800 px-4 py-2 rounded hover:bg-gray-200 text-sm hidden">Load More</button>
+      </div>
+    </div>
+  </div>
+  <div id="toast-container" class="fixed top-4 right-4 space-y-2 z-50"></div>
+  <script>
+    const API_BASE = window.location.origin + "<%= baseUrl %>" || window.location.origin;
+    function showToast(message, type = 'success') {
+      const container = document.getElementById('toast-container');
+      const toast = document.createElement('div');
+      toast.className = `toast px-6 py-4 rounded-lg shadow-lg text-white ${type === 'success' ? 'bg-green-500' : 'bg-red-500'}`;
+      toast.textContent = message;
+      container.appendChild(toast);
+      setTimeout(() => { toast.classList.add('fade-out'); setTimeout(() => toast.remove(), 300); }, 3000);
+    }
+    function escapeHtml(str) {
+      return String(str || '').replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+    }
+    function formatAmount(cents, currency) {
+      return new Intl.NumberFormat('en-US', { style: 'currency', currency: currency || 'usd' }).format(cents / 100);
+    }
+    function qs(obj) {
+      const params = new URLSearchParams();
+      Object.entries(obj).forEach(([k, v]) => { if (v !== undefined && v !== null && String(v).trim()) params.set(k, String(v).trim()); });
+      const out = params.toString();
+      return out ? `?${out}` : '';
+    }
+    const state = { offset: 0, limit: 20, total: 0, stripeConfigured: false };
+    async function checkStatus() {
+      try {
+        const res = await fetch(`${API_BASE}/api/admin/stripe/status`);
+        const data = await res.json();
+        state.stripeConfigured = data.configured;
+        if (data.configured) {
+          document.getElementById('stripe-enabled').classList.remove('hidden');
+          document.getElementById('stripe-disabled').classList.add('hidden');
+          document.getElementById('stripe-status').innerHTML = '<span class="text-green-600">● Connected</span>';
+          document.getElementById('stat-total').textContent = data.catalogCount ?? '-';
+          document.getElementById('stat-active').textContent = data.activeCount ?? '-';
+          document.getElementById('stat-env-creator').textContent = data.envPriceIdCreator;
+          document.getElementById('stat-env-pro').textContent = data.envPriceIdPro;
+          loadCatalog();
+        } else {
+          document.getElementById('stripe-enabled').classList.add('hidden');
+          document.getElementById('stripe-disabled').classList.remove('hidden');
+          document.getElementById('stripe-status').innerHTML = '<span class="text-yellow-600">● Not Configured</span>';
+        }
+      } catch (e) {
+        console.error('Status check failed:', e);
+        document.getElementById('stripe-status').innerHTML = '<span class="text-red-600">● Error</span>';
+      }
+    }
+    async function loadCatalog() {
+      const active = document.getElementById('filter-active')?.value;
+      const billingType = document.getElementById('filter-type')?.value;
+      const subtitle = document.getElementById('catalog-subtitle');
+      const tbody = document.getElementById('catalog-tbody');
+      if (subtitle) subtitle.textContent = 'Loading...';
+      if (tbody) tbody.innerHTML = '';
+      try {
+        const url = `${API_BASE}/api/admin/stripe/catalog${qs({ active, billingType, limit: state.limit, offset: state.offset })}`;
+        const res = await fetch(url);
+        const data = await res.json();
+        if (!res.ok) { showToast(data?.error || 'Failed to load catalog', 'error'); return; }
+        const items = Array.isArray(data?.items) ? data.items : [];
+        const pagination = data?.pagination || {};
+        state.total = pagination.total ?? 0;
+        state.offset = pagination.offset ?? state.offset;
+        if (subtitle) {
+          const from = state.total === 0 ? 0 : state.offset + 1;
+          const to = Math.min(state.offset + items.length, state.total);
+          subtitle.textContent = `${from}-${to} of ${state.total}`;
+        }
+        document.getElementById('btn-prev').disabled = state.offset <= 0;
+        document.getElementById('btn-next').disabled = state.offset + state.limit >= state.total;
+        if (tbody) {
+          if (items.length === 0) {
+            tbody.innerHTML = '<tr><td class="px-3 py-4 text-sm text-gray-600" colspan="6">No catalog items. Create one or import from Stripe.</td></tr>';
+            return;
+          }
+          tbody.innerHTML = items.map(item => {
+            const priceStr = formatAmount(item.unitAmount, item.currency) + (item.interval ? `/${item.interval}` : '');
+            const statusClass = item.active ? 'bg-green-100 text-green-800' : 'bg-gray-100 text-gray-600';
+            return `
+              <tr>
+                <td class="px-3 py-2 text-sm">
+                  <div class="font-medium text-gray-900">${escapeHtml(item.planKey)}</div>
+                  <div class="text-xs text-gray-400 truncate max-w-[150px]" title="${escapeHtml(item.stripePriceId)}">${escapeHtml(item.stripePriceId)}</div>
+                </td>
+                <td class="px-3 py-2 text-sm text-gray-700">${escapeHtml(item.displayName)}</td>
+                <td class="px-3 py-2 text-sm text-gray-700">${escapeHtml(item.billingType)}</td>
+                <td class="px-3 py-2 text-sm text-gray-700">${priceStr}</td>
+                <td class="px-3 py-2"><span class="px-2 py-1 text-xs rounded ${statusClass}">${item.active ? 'Active' : 'Inactive'}</span></td>
+                <td class="px-3 py-2 text-sm whitespace-nowrap">
+                  <button class="text-blue-600 hover:text-blue-800 mr-1" onclick="copyText('${escapeHtml(item.stripePriceId)}')">Copy</button>
+                  ${item.active
+                    ? `<button class="text-yellow-600 hover:text-yellow-800 mr-1" data-deactivate="${escapeHtml(item._id)}">Deact</button>`
+                    : `<button class="text-green-600 hover:text-green-800 mr-1" data-activate="${escapeHtml(item._id)}">Act</button>`
+                  }
+                  <button class="text-red-600 hover:text-red-800" data-delete="${escapeHtml(item._id)}">Del</button>
+                </td>
+              </tr>
+            `;
+          }).join('');
+          tbody.querySelectorAll('[data-deactivate]').forEach(btn => {
+            btn.addEventListener('click', async () => {
+              if (!confirm('Deactivate this catalog item?')) return;
+              try {
+                const res = await fetch(`${API_BASE}/api/admin/stripe/catalog/${btn.dataset.deactivate}/deactivate`, { method: 'POST' });
+                if (!res.ok) { const d = await res.json(); showToast(d?.error || 'Failed', 'error'); return; }
+                showToast('Deactivated', 'success');
+                checkStatus();
+              } catch (e) { showToast(e.message, 'error'); }
+            });
+          });
+          tbody.querySelectorAll('[data-activate]').forEach(btn => {
+            btn.addEventListener('click', async () => {
+              try {
+                const res = await fetch(`${API_BASE}/api/admin/stripe/catalog/${btn.dataset.activate}/activate`, { method: 'POST' });
+                if (!res.ok) { const d = await res.json(); showToast(d?.error || 'Failed', 'error'); return; }
+                showToast('Activated', 'success');
+                checkStatus();
+              } catch (e) { showToast(e.message, 'error'); }
+            });
+          });
+          tbody.querySelectorAll('[data-delete]').forEach(btn => {
+            btn.addEventListener('click', async () => {
+              if (!confirm('Delete this catalog item? (Does not delete from Stripe)')) return;
+              try {
+                const res = await fetch(`${API_BASE}/api/admin/stripe/catalog/${btn.dataset.delete}`, { method: 'DELETE' });
+                if (!res.ok) { const d = await res.json(); showToast(d?.error || 'Failed', 'error'); return; }
+                showToast('Deleted', 'success');
+                checkStatus();
+              } catch (e) { showToast(e.message, 'error'); }
+            });
+          });
+        }
+      } catch (e) {
+        showToast(e.message || 'Failed to load catalog', 'error');
+      }
+    }
+    function copyText(text) {
+      navigator.clipboard.writeText(text).then(() => showToast('Copied!', 'success')).catch(() => showToast('Copy failed', 'error'));
+    }
+    async function createPrice() {
+      const productName = document.getElementById('create-product-name').value.trim();
+      const productDescription = document.getElementById('create-description').value.trim();
+      const planKey = document.getElementById('create-plan-key').value.trim();
+      const displayName = document.getElementById('create-display-name').value.trim();
+      const billingType = document.getElementById('create-billing-type').value;
+      const currency = document.getElementById('create-currency').value;
+      const unitAmount = parseInt(document.getElementById('create-unit-amount').value, 10);
+      const interval = document.getElementById('create-interval').value;
+      if (!productName || !planKey || !displayName || !unitAmount) {
+        showToast('Fill required fields', 'error'); return;
+      }
+      try {
+        const body = { productName, productDescription, planKey, displayName, billingType, currency, unitAmount };
+        if (billingType === 'subscription') body.interval = interval;
+        const res = await fetch(`${API_BASE}/api/admin/stripe/catalog/upsert`, {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify(body)
+        });
+        const data = await res.json();
+        if (!res.ok) { showToast(data?.error || 'Failed', 'error'); return; }
+        showToast('Created: ' + data.stripePrice?.id, 'success');
+        document.getElementById('create-product-name').value = '';
+        document.getElementById('create-description').value = '';
+        document.getElementById('create-plan-key').value = '';
+        document.getElementById('create-display-name').value = '';
+        document.getElementById('create-unit-amount').value = '';
+        checkStatus();
+      } catch (e) { showToast(e.message, 'error'); }
+    }
+    async function importPrice() {
+      const stripePriceId = document.getElementById('import-price-id').value.trim();
+      const planKey = document.getElementById('import-plan-key').value.trim();
+      const displayName = document.getElementById('import-display-name').value.trim();
+      if (!stripePriceId || !planKey) {
+        showToast('Price ID and Plan Key required', 'error'); return;
+      }
+      try {
+        const res = await fetch(`${API_BASE}/api/admin/stripe/catalog/import`, {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ stripePriceId, planKey, displayName: displayName || undefined })
+        });
+        const data = await res.json();
+        if (!res.ok) { showToast(data?.error || 'Failed', 'error'); return; }
+        showToast('Imported!', 'success');
+        document.getElementById('import-price-id').value = '';
+        document.getElementById('import-plan-key').value = '';
+        document.getElementById('import-display-name').value = '';
+        checkStatus();
+      } catch (e) { showToast(e.message, 'error'); }
+    }
+    let stripePricesLastId = null;
+    let stripePricesHasMore = false;
+    async function loadStripePrices(append = false) {
+      const tbody = document.getElementById('stripe-prices-tbody');
+      if (!append) {
+        tbody.innerHTML = '<tr><td colspan="6" class="px-3 py-4 text-sm text-gray-600">Loading...</td></tr>';
+        stripePricesLastId = null;
+      }
+      try {
+        const params = { limit: 20 };
+        if (stripePricesLastId) params.starting_after = stripePricesLastId;
+        const res = await fetch(`${API_BASE}/api/admin/stripe/prices${qs(params)}`);
+        const data = await res.json();
+        if (!res.ok) { showToast(data?.error || 'Failed', 'error'); return; }
+        const prices = Array.isArray(data?.prices) ? data.prices : [];
+        stripePricesHasMore = data.hasMore;
+        if (prices.length > 0) {
+          stripePricesLastId = prices[prices.length - 1].id;
+        }
+        document.getElementById('btn-load-more-stripe').classList.toggle('hidden', !stripePricesHasMore);
+        const rows = prices.map(p => {
+          const productName = typeof p.product === 'object' ? p.product.name : p.product;
+          const priceStr = formatAmount(p.unit_amount, p.currency) + (p.recurring ? `/${p.recurring.interval}` : ' one-time');
+          const mapped = p._isMapped ? '<span class="text-green-600">Yes</span>' : '<span class="text-gray-400">No</span>';
+          return `
+            <tr>
+              <td class="px-3 py-2 text-sm text-gray-900">${escapeHtml(productName)}</td>
+              <td class="px-3 py-2 text-sm text-gray-700 truncate max-w-[150px]" title="${escapeHtml(p.id)}">${escapeHtml(p.id)}</td>
+              <td class="px-3 py-2 text-sm text-gray-700">${priceStr}</td>
+              <td class="px-3 py-2 text-sm text-gray-700">${p.recurring ? 'Subscription' : 'One-Time'}</td>
+              <td class="px-3 py-2 text-sm">${mapped}</td>
+              <td class="px-3 py-2 text-sm">
+                ${p._isMapped ? '-' : `<button class="text-green-600 hover:text-green-800" data-import-stripe="${escapeHtml(p.id)}">Import</button>`}
+              </td>
+            </tr>
+          `;
+        }).join('');
+        if (append) {
+          tbody.innerHTML += rows;
+        } else {
+          tbody.innerHTML = rows || '<tr><td colspan="6" class="px-3 py-4 text-sm text-gray-600">No prices found.</td></tr>';
+        }
+        tbody.querySelectorAll('[data-import-stripe]').forEach(btn => {
+          btn.addEventListener('click', () => {
+            document.getElementById('import-price-id').value = btn.dataset.importStripe;
+            document.getElementById('modal-stripe').classList.add('hidden');
+            document.getElementById('import-plan-key').focus();
+          });
+        });
+      } catch (e) { showToast(e.message, 'error'); }
+    }
+    function toggleIntervalVisibility() {
+      const billingType = document.getElementById('create-billing-type').value;
+      document.getElementById('interval-container').style.display = billingType === 'subscription' ? 'block' : 'none';
+    }
+    function bindEvents() {
+      document.getElementById('btn-refresh').onclick = () => checkStatus();
+      document.getElementById('btn-apply').onclick = () => { state.offset = 0; loadCatalog(); };
+      document.getElementById('btn-prev').onclick = () => { state.offset = Math.max(0, state.offset - state.limit); loadCatalog(); };
+      document.getElementById('btn-next').onclick = () => { state.offset += state.limit; loadCatalog(); };
+      document.getElementById('btn-create').onclick = createPrice;
+      document.getElementById('btn-import').onclick = importPrice;
+      document.getElementById('create-billing-type').onchange = toggleIntervalVisibility;
+      document.getElementById('btn-show-stripe').onclick = () => {
+        document.getElementById('modal-stripe').classList.remove('hidden');
+        loadStripePrices();
+      };
+      document.getElementById('btn-close-stripe').onclick = () => document.getElementById('modal-stripe').classList.add('hidden');
+      document.getElementById('btn-load-more-stripe').onclick = () => loadStripePrices(true);
+      const runEnvSyncBtn = document.getElementById('btn-env-sync-run');
+      if (runEnvSyncBtn) {
+        runEnvSyncBtn.onclick = async () => {
+          try {
+            const res = await fetch(`${API_BASE}/api/admin/stripe/env/sync`, {
+              method: 'POST'
+            });
+            const data = await res.json().catch(() => ({}));
+            if (!res.ok) {
+              showToast(data.error || 'Failed to sync env', 'error');
+              return;
+            }
+            const appliedCount = Array.isArray(data.applied) ? data.applied.length : 0;
+            const totalActive = typeof data.totalActive === 'number' ? data.totalActive : null;
+            const suffix = totalActive === null ? '' : ` (active: ${totalActive})`;
+            showToast(`Synced env for ${appliedCount} planKey(s)${suffix}.`, 'success');
+          } catch (e) {
+            showToast(e.message || 'Failed to sync env', 'error');
+          }
+        };
+      }
+      toggleIntervalVisibility();
+    }
+    bindEvents();
+    checkStatus();
+  </script>
+<script>
+  window.addEventListener("keydown", (e) => {
+    if ((e.ctrlKey || e.metaKey) && e.key === "k") {
+      e.preventDefault();
+      window.parent.postMessage({ type: "keydown", ctrlK: true }, "*");
+    }
+  });
+</script>
+</body>
+</html>