npm - @intranefr/superbackend - Versions diffs - 1.4.3 - Mend

@intranefr/superbackend 1.4.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (188) hide show

package/.commiat +4 -0
package/.env.example +47 -0
package/README.md +110 -0
package/index.js +94 -0
package/package.json +67 -0
package/public/css/styles.css +139 -0
package/public/js/animations.js +41 -0
package/sdk/error-tracking/browser/package.json +16 -0
package/sdk/error-tracking/browser/src/core.js +270 -0
package/sdk/error-tracking/browser/src/embed.js +18 -0
package/sdk/error-tracking/browser/src/index.js +1 -0
package/server.js +5 -0
package/src/admin/endpointRegistry.js +300 -0
package/src/controllers/admin.controller.js +321 -0
package/src/controllers/adminAssets.controller.js +530 -0
package/src/controllers/adminAssetsStorage.controller.js +260 -0
package/src/controllers/adminEjsVirtual.controller.js +354 -0
package/src/controllers/adminFeatureFlags.controller.js +155 -0
package/src/controllers/adminHeadless.controller.js +1071 -0
package/src/controllers/adminI18n.controller.js +604 -0
package/src/controllers/adminJsonConfigs.controller.js +97 -0
package/src/controllers/adminLlm.controller.js +273 -0
package/src/controllers/adminMigration.controller.js +257 -0
package/src/controllers/adminSeoConfig.controller.js +515 -0
package/src/controllers/adminStats.controller.js +121 -0
package/src/controllers/adminUploadNamespaces.controller.js +208 -0
package/src/controllers/assets.controller.js +248 -0
package/src/controllers/auth.controller.js +93 -0
package/src/controllers/billing.controller.js +223 -0
package/src/controllers/featureFlags.controller.js +35 -0
package/src/controllers/forms.controller.js +217 -0
package/src/controllers/globalSettings.controller.js +252 -0
package/src/controllers/headlessCrud.controller.js +126 -0
package/src/controllers/i18n.controller.js +12 -0
package/src/controllers/invite.controller.js +249 -0
package/src/controllers/jsonConfigs.controller.js +19 -0
package/src/controllers/metrics.controller.js +149 -0
package/src/controllers/notificationAdmin.controller.js +264 -0
package/src/controllers/notifications.controller.js +131 -0
package/src/controllers/org.controller.js +357 -0
package/src/controllers/orgAdmin.controller.js +491 -0
package/src/controllers/stripeAdmin.controller.js +410 -0
package/src/controllers/user.controller.js +361 -0
package/src/controllers/userAdmin.controller.js +277 -0
package/src/controllers/waitingList.controller.js +167 -0
package/src/controllers/webhook.controller.js +200 -0
package/src/middleware/auth.js +66 -0
package/src/middleware/errorCapture.js +170 -0
package/src/middleware/headlessApiTokenAuth.js +57 -0
package/src/middleware/org.js +108 -0
package/src/middleware.js +901 -0
package/src/models/ActionEvent.js +31 -0
package/src/models/ActivityLog.js +41 -0
package/src/models/Asset.js +84 -0
package/src/models/AuditEvent.js +93 -0
package/src/models/EmailLog.js +28 -0
package/src/models/ErrorAggregate.js +72 -0
package/src/models/FormSubmission.js +41 -0
package/src/models/GlobalSetting.js +38 -0
package/src/models/HeadlessApiToken.js +24 -0
package/src/models/HeadlessModelDefinition.js +41 -0
package/src/models/I18nEntry.js +77 -0
package/src/models/I18nLocale.js +33 -0
package/src/models/Invite.js +70 -0
package/src/models/JsonConfig.js +46 -0
package/src/models/Notification.js +60 -0
package/src/models/Organization.js +57 -0
package/src/models/OrganizationMember.js +43 -0
package/src/models/StripeCatalogItem.js +77 -0
package/src/models/StripeWebhookEvent.js +57 -0
package/src/models/User.js +89 -0
package/src/models/VirtualEjsFile.js +60 -0
package/src/models/VirtualEjsFileVersion.js +43 -0
package/src/models/VirtualEjsGroupChange.js +32 -0
package/src/models/WaitingList.js +41 -0
package/src/models/Webhook.js +63 -0
package/src/models/Workflow.js +29 -0
package/src/models/WorkflowExecution.js +12 -0
package/src/routes/admin.routes.js +26 -0
package/src/routes/adminAssets.routes.js +28 -0
package/src/routes/adminAssetsStorage.routes.js +13 -0
package/src/routes/adminAudit.routes.js +196 -0
package/src/routes/adminEjsVirtual.routes.js +17 -0
package/src/routes/adminErrors.routes.js +164 -0
package/src/routes/adminFeatureFlags.routes.js +12 -0
package/src/routes/adminHeadless.routes.js +38 -0
package/src/routes/adminI18n.routes.js +22 -0
package/src/routes/adminJsonConfigs.routes.js +15 -0
package/src/routes/adminLlm.routes.js +12 -0
package/src/routes/adminMigration.routes.js +81 -0
package/src/routes/adminSeoConfig.routes.js +20 -0
package/src/routes/adminUploadNamespaces.routes.js +13 -0
package/src/routes/assets.routes.js +21 -0
package/src/routes/auth.routes.js +12 -0
package/src/routes/billing.routes.js +11 -0
package/src/routes/errorTracking.routes.js +31 -0
package/src/routes/featureFlags.routes.js +9 -0
package/src/routes/forms.routes.js +9 -0
package/src/routes/formsAdmin.routes.js +13 -0
package/src/routes/globalSettings.routes.js +18 -0
package/src/routes/headless.routes.js +15 -0
package/src/routes/i18n.routes.js +8 -0
package/src/routes/invite.routes.js +9 -0
package/src/routes/jsonConfigs.routes.js +8 -0
package/src/routes/log.routes.js +111 -0
package/src/routes/metrics.routes.js +9 -0
package/src/routes/notificationAdmin.routes.js +15 -0
package/src/routes/notifications.routes.js +12 -0
package/src/routes/org.routes.js +31 -0
package/src/routes/orgAdmin.routes.js +20 -0
package/src/routes/publicAssets.routes.js +7 -0
package/src/routes/stripeAdmin.routes.js +20 -0
package/src/routes/user.routes.js +22 -0
package/src/routes/userAdmin.routes.js +15 -0
package/src/routes/waitingList.routes.js +13 -0
package/src/routes/waitingListAdmin.routes.js +9 -0
package/src/routes/webhook.routes.js +32 -0
package/src/routes/workflowWebhook.routes.js +54 -0
package/src/routes/workflows.routes.js +110 -0
package/src/services/assets.service.js +110 -0
package/src/services/audit.service.js +62 -0
package/src/services/auditLogger.js +165 -0
package/src/services/ejsVirtual.service.js +614 -0
package/src/services/email.service.js +351 -0
package/src/services/errorLogger.js +221 -0
package/src/services/featureFlags.service.js +202 -0
package/src/services/forms.service.js +214 -0
package/src/services/globalSettings.service.js +49 -0
package/src/services/headlessApiTokens.service.js +158 -0
package/src/services/headlessCrypto.service.js +31 -0
package/src/services/headlessModels.service.js +356 -0
package/src/services/i18n.service.js +314 -0
package/src/services/i18nInferredKeys.service.js +337 -0
package/src/services/jsonConfigs.service.js +392 -0
package/src/services/llm.service.js +749 -0
package/src/services/migration.service.js +581 -0
package/src/services/migrationAssets/fsLocal.js +58 -0
package/src/services/migrationAssets/index.js +134 -0
package/src/services/migrationAssets/s3.js +75 -0
package/src/services/migrationAssets/sftp.js +92 -0
package/src/services/notification.service.js +212 -0
package/src/services/objectStorage.service.js +514 -0
package/src/services/seoConfig.service.js +402 -0
package/src/services/storage.js +150 -0
package/src/services/stripe.service.js +185 -0
package/src/services/stripeHelper.service.js +264 -0
package/src/services/uploadNamespaces.service.js +326 -0
package/src/services/webhook.service.js +157 -0
package/src/services/workflow.service.js +271 -0
package/src/utils/asyncHandler.js +5 -0
package/src/utils/encryption.js +80 -0
package/src/utils/jwt.js +40 -0
package/src/utils/orgRoles.js +156 -0
package/src/utils/validation.js +26 -0
package/src/utils/webhookRetry.js +93 -0
package/views/admin-assets.ejs +444 -0
package/views/admin-audit.ejs +283 -0
package/views/admin-coolify-deploy.ejs +207 -0
package/views/admin-dashboard-home.ejs +291 -0
package/views/admin-dashboard.ejs +397 -0
package/views/admin-ejs-virtual.ejs +280 -0
package/views/admin-errors.ejs +368 -0
package/views/admin-feature-flags.ejs +390 -0
package/views/admin-forms.ejs +526 -0
package/views/admin-global-settings.ejs +436 -0
package/views/admin-headless.ejs +2020 -0
package/views/admin-i18n-locales.ejs +221 -0
package/views/admin-i18n.ejs +728 -0
package/views/admin-json-configs.ejs +410 -0
package/views/admin-llm.ejs +884 -0
package/views/admin-metrics.ejs +274 -0
package/views/admin-migration.ejs +814 -0
package/views/admin-notifications.ejs +430 -0
package/views/admin-organizations.ejs +984 -0
package/views/admin-seo-config.ejs +673 -0
package/views/admin-stripe-pricing.ejs +558 -0
package/views/admin-test.ejs +342 -0
package/views/admin-users.ejs +452 -0
package/views/admin-waiting-list.ejs +547 -0
package/views/admin-webhooks.ejs +329 -0
package/views/admin-workflows.ejs +310 -0
package/views/partials/admin-assets-script.ejs +2022 -0
package/views/partials/admin-test-sidebar.ejs +14 -0
package/views/partials/dashboard/nav-items.ejs +66 -0
package/views/partials/dashboard/palette.ejs +63 -0
package/views/partials/dashboard/sidebar.ejs +21 -0
package/views/partials/dashboard/tab-bar.ejs +26 -0
package/views/partials/footer.ejs +3 -0

package/views/admin-waiting-list.ejs ADDED Viewed

@@ -0,0 +1,547 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Waiting List Admin</title>
+  <script src="https://cdn.tailwindcss.com"></script>
+  <style>
+    .toast {
+      animation: slideIn 0.3s ease-out;
+    }
+    @keyframes slideIn {
+      from { transform: translateX(100%); opacity: 0; }
+      to { transform: translateX(0); opacity: 1; }
+    }
+    .fade-out {
+      animation: fadeOut 0.3s ease-out forwards;
+    }
+    @keyframes fadeOut {
+      from { opacity: 1; }
+      to { opacity: 0; }
+    }
+  </style>
+</head>
+<body class="bg-gray-100">
+  <div class="min-h-screen">
+    <!-- Header -->
+    <div class="bg-white shadow">
+      <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-4">
+        <div class="flex justify-between items-center">
+          <div>
+            <h1 class="text-2xl font-bold text-gray-900">Waiting List</h1>
+            <p class="text-sm text-gray-600 mt-1">Stats + subscription tester</p>
+          </div>
+          <div class="flex items-center gap-4">
+          </div>
+        </div>
+      </div>
+    </div>
+    <!-- Main Content -->
+    <div class="max-w-7xl mx-auto px-4 sm:px-6 lg:px-8 py-8">
+      <!-- KPI Cards -->
+      <div class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 gap-4 mb-6">
+        <div class="bg-white rounded-lg shadow p-6">
+          <p class="text-sm text-gray-500">Total Subscribers</p>
+          <p id="kpi-total" class="text-3xl font-bold text-gray-900 mt-2">-</p>
+        </div>
+        <div class="bg-white rounded-lg shadow p-6">
+          <p class="text-sm text-gray-500">Growth This Week</p>
+          <p id="kpi-growth" class="text-3xl font-bold text-gray-900 mt-2">-</p>
+        </div>
+        <div class="bg-white rounded-lg shadow p-6">
+          <p class="text-sm text-gray-500">Last Updated</p>
+          <p id="kpi-updated" class="text-sm font-medium text-gray-900 mt-2">-</p>
+        </div>
+      </div>
+      <div class="bg-white rounded-lg shadow p-6 mb-6">
+        <div class="flex items-center justify-between gap-4">
+          <div>
+            <h2 class="text-lg font-semibold text-gray-900">Breakdown by Type</h2>
+            <p class="text-sm text-gray-600 mt-1">Auto-generated from current data</p>
+          </div>
+        </div>
+        <div id="type-cards" class="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-4 gap-4 mt-4"></div>
+      </div>
+      <div class="flex gap-2 mb-8">
+        <button id="btn-refresh-stats" class="bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600">Refresh Stats</button>
+      </div>
+      <!-- Entries table (admin) -->
+      <div class="bg-white rounded-lg shadow p-6 mb-8">
+        <div class="flex flex-col gap-4 sm:flex-row sm:items-end sm:justify-between">
+          <div>
+            <h2 class="text-xl font-bold text-gray-900">Entries</h2>
+            <p id="entries-subtitle" class="text-sm text-gray-600 mt-1">Loading...</p>
+          </div>
+          <div class="flex gap-2">
+            <button id="btn-copy-visible" class="bg-gray-100 text-gray-800 px-4 py-2 rounded hover:bg-gray-200">Copy visible</button>
+            <button id="btn-refresh-entries" class="bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600">Refresh</button>
+          </div>
+        </div>
+        <div class="grid grid-cols-1 sm:grid-cols-4 gap-4 mt-4">
+          <div>
+            <label class="block text-sm font-medium text-gray-700 mb-1">Status</label>
+            <input id="entries-status" type="text" class="w-full border rounded px-3 py-2" placeholder="active">
+          </div>
+          <div>
+            <label class="block text-sm font-medium text-gray-700 mb-1">Type</label>
+            <input id="entries-type" type="text" class="w-full border rounded px-3 py-2" placeholder="e.g., buyer">
+          </div>
+          <div>
+            <label class="block text-sm font-medium text-gray-700 mb-1">Email (exact)</label>
+            <input id="entries-email" type="text" class="w-full border rounded px-3 py-2" placeholder="user@example.com">
+          </div>
+          <div>
+            <label class="block text-sm font-medium text-gray-700 mb-1">Page size</label>
+            <select id="entries-limit" class="w-full border rounded px-3 py-2">
+              <option value="20">20</option>
+              <option value="50" selected>50</option>
+              <option value="100">100</option>
+              <option value="200">200</option>
+            </select>
+          </div>
+        </div>
+        <div class="flex gap-2 mt-4">
+          <button id="btn-entries-apply" class="bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600">Apply</button>
+          <button id="btn-entries-reset" class="bg-gray-100 text-gray-800 px-4 py-2 rounded hover:bg-gray-200">Reset</button>
+          <div class="flex-1"></div>
+          <button id="btn-entries-prev" class="bg-gray-100 text-gray-800 px-4 py-2 rounded hover:bg-gray-200">Prev</button>
+          <button id="btn-entries-next" class="bg-gray-100 text-gray-800 px-4 py-2 rounded hover:bg-gray-200">Next</button>
+        </div>
+        <div class="overflow-x-auto mt-4">
+          <table class="min-w-full divide-y divide-gray-200">
+            <thead class="bg-gray-50">
+              <tr>
+                <th class="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase tracking-wider">Created</th>
+                <th class="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase tracking-wider">Email</th>
+                <th class="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase tracking-wider">Type</th>
+                <th class="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase tracking-wider">Status</th>
+                <th class="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase tracking-wider">Referral</th>
+                <th class="px-4 py-3 text-left text-xs font-medium text-gray-500 uppercase tracking-wider">Actions</th>
+              </tr>
+            </thead>
+            <tbody id="entries-tbody" class="bg-white divide-y divide-gray-200"></tbody>
+          </table>
+        </div>
+      </div>
+      <!-- Subscribe tester -->
+      <div class="bg-white rounded-lg shadow p-6">
+        <div>
+          <h2 class="text-xl font-bold text-gray-900">Subscribe Test</h2>
+          <p class="text-sm text-gray-600 mt-1">POST /api/waiting-list/subscribe</p>
+        </div>
+        <form id="subscribe-form" class="mt-6">
+          <div class="grid grid-cols-1 lg:grid-cols-3 gap-4">
+            <div>
+              <label class="block text-sm font-medium text-gray-700 mb-1">Email *</label>
+              <input id="sub-email" type="email" class="w-full border rounded px-3 py-2" placeholder="user@example.com" required>
+            </div>
+            <div>
+              <label class="block text-sm font-medium text-gray-700 mb-1">Type *</label>
+              <input id="sub-type" type="text" class="w-full border rounded px-3 py-2" placeholder="e.g., buyer" required>
+            </div>
+            <div>
+              <label class="block text-sm font-medium text-gray-700 mb-1">Referral Source</label>
+              <input id="sub-ref" type="text" class="w-full border rounded px-3 py-2" placeholder="website">
+            </div>
+          </div>
+          <div class="mt-4 flex gap-2">
+            <button type="submit" class="bg-green-500 text-white px-4 py-2 rounded hover:bg-green-600">Subscribe</button>
+            <button type="button" id="btn-sub-clear" class="bg-gray-100 text-gray-800 px-4 py-2 rounded hover:bg-gray-200">Clear</button>
+          </div>
+        </form>
+        <div class="mt-6">
+          <h3 class="font-semibold mb-2">Response</h3>
+          <pre id="subscribe-response" class="bg-gray-100 p-4 rounded overflow-auto max-h-96"></pre>
+        </div>
+      </div>
+    </div>
+  </div>
+  <!-- Toast Container -->
+  <div id="toast-container" class="fixed top-4 right-4 space-y-2 z-50"></div>
+  <script>
+    const API_BASE = window.location.origin + "<%= baseUrl %>" || window.location.origin;
+    const WAITING_LIST_STATS_PATH = '/api/waiting-list/stats';
+    const WAITING_LIST_SUBSCRIBE_PATH = '/api/waiting-list/subscribe';
+    const WAITING_LIST_ADMIN_LIST_PATH = '/api/admin/waiting-list';
+    function showToast(message, type = 'success') {
+      const container = document.getElementById('toast-container');
+      const toast = document.createElement('div');
+      toast.className = `toast px-6 py-4 rounded-lg shadow-lg text-white ${
+        type === 'success' ? 'bg-green-500' : 'bg-red-500'
+      }`;
+      toast.textContent = message;
+      container.appendChild(toast);
+      setTimeout(() => {
+        toast.classList.add('fade-out');
+        setTimeout(() => toast.remove(), 300);
+      }, 3000);
+    }
+    async function makeRequest(endpoint, method, body = null, requiresJWT = false) {
+      const headers = { 'Content-Type': 'application/json' };
+      if (requiresJWT) {
+        const token = document.getElementById('jwt-input')?.value;
+        if (!token) {
+          showToast('JWT token required', 'error');
+          return;
+        }
+        headers['Authorization'] = `Bearer ${token}`;
+      }
+      const options = { method, headers };
+      if (body) options.body = JSON.stringify(body);
+      try {
+        const response = await fetch(`${API_BASE}${endpoint}`, options);
+        const data = await response.json();
+        const responseEl = document.querySelector('#content pre#response');
+        if (response.ok) {
+          showToast('Request successful!', 'success');
+          if (responseEl) responseEl.textContent = JSON.stringify(data, null, 2);
+        } else {
+          showToast(data.error || 'Request failed', 'error');
+          if (responseEl) responseEl.textContent = JSON.stringify(data, null, 2);
+        }
+      } catch (error) {
+        showToast(error.message, 'error');
+        const responseEl = document.querySelector('#content pre#response');
+        if (responseEl) responseEl.textContent = error.message;
+      }
+    }
+    function qs(obj) {
+      const params = new URLSearchParams();
+      Object.entries(obj).forEach(([k, v]) => {
+        if (v === undefined || v === null) return;
+        const s = String(v).trim();
+        if (!s) return;
+        params.set(k, s);
+      });
+      const out = params.toString();
+      return out ? `?${out}` : '';
+    }
+    function escapeHtml(str) {
+      return String(str || '')
+        .replaceAll('&', '&amp;')
+        .replaceAll('<', '&lt;')
+        .replaceAll('>', '&gt;')
+        .replaceAll('"', '&quot;')
+        .replaceAll("'", '&#39;');
+    }
+    async function copyText(text) {
+      try {
+        await navigator.clipboard.writeText(text);
+        showToast('Copied to clipboard', 'success');
+      } catch (e) {
+        try {
+          const ta = document.createElement('textarea');
+          ta.value = text;
+          ta.style.position = 'fixed';
+          ta.style.left = '-9999px';
+          document.body.appendChild(ta);
+          ta.focus();
+          ta.select();
+          document.execCommand('copy');
+          ta.remove();
+          showToast('Copied to clipboard', 'success');
+        } catch (err) {
+          showToast('Failed to copy', 'error');
+        }
+      }
+    }
+    let entriesState = { offset: 0, total: 0, limit: 50 };
+    let lastEntries = [];
+    async function loadEntries() {
+      const status = document.getElementById('entries-status')?.value?.trim();
+      const type = document.getElementById('entries-type')?.value?.trim();
+      const email = document.getElementById('entries-email')?.value?.trim();
+      const limit = parseInt(document.getElementById('entries-limit')?.value || '50', 10);
+      const subtitle = document.getElementById('entries-subtitle');
+      const tbody = document.getElementById('entries-tbody');
+      if (subtitle) subtitle.textContent = 'Loading...';
+      if (tbody) tbody.innerHTML = '';
+      try {
+        const url = `${API_BASE}${WAITING_LIST_ADMIN_LIST_PATH}${qs({
+          status: status || undefined,
+          type: type || undefined,
+          email: email || undefined,
+          limit,
+          offset: entriesState.offset,
+        })}`;
+        const res = await fetch(url, { headers: { 'Accept': 'application/json' } });
+        const data = await res.json();
+        if (!res.ok) {
+          showToast(data?.error || 'Failed to load entries', 'error');
+          if (subtitle) subtitle.textContent = 'Failed to load.';
+          return;
+        }
+        const entries = Array.isArray(data?.entries) ? data.entries : [];
+        const pagination = data?.pagination || {};
+        const total = Number.isFinite(pagination.total) ? pagination.total : 0;
+        const usedLimit = Number.isFinite(pagination.limit) ? pagination.limit : limit;
+        const usedOffset = Number.isFinite(pagination.offset) ? pagination.offset : entriesState.offset;
+        entriesState = { offset: usedOffset, total, limit: usedLimit };
+        lastEntries = entries;
+        if (subtitle) {
+          const from = total === 0 ? 0 : usedOffset + 1;
+          const to = Math.min(usedOffset + entries.length, total);
+          subtitle.textContent = `${from}-${to} of ${total}`;
+        }
+        if (tbody) {
+          if (entries.length === 0) {
+            tbody.innerHTML = `
+              <tr>
+                <td class="px-4 py-6 text-sm text-gray-600" colspan="6">No entries found.</td>
+              </tr>
+            `;
+          } else {
+            tbody.innerHTML = entries.map((e) => {
+              const createdAt = escapeHtml(formatDateTime(e?.createdAt));
+              const emailCell = escapeHtml(e?.email);
+              const typeCell = escapeHtml(e?.type);
+              const statusCell = escapeHtml(e?.status);
+              const refCell = escapeHtml(e?.referralSource || '');
+              const rawEmail = String(e?.email || '');
+              return `
+                <tr>
+                  <td class="px-4 py-3 text-sm text-gray-900 whitespace-nowrap">${createdAt}</td>
+                  <td class="px-4 py-3 text-sm text-gray-900">${emailCell}</td>
+                  <td class="px-4 py-3 text-sm text-gray-700">${typeCell}</td>
+                  <td class="px-4 py-3 text-sm text-gray-700">${statusCell}</td>
+                  <td class="px-4 py-3 text-sm text-gray-700">${refCell}</td>
+                  <td class="px-4 py-3 text-sm">
+                    <button class="text-blue-600 hover:text-blue-800" data-copy-email="${escapeHtml(rawEmail)}">Copy</button>
+                  </td>
+                </tr>
+              `;
+            }).join('');
+            tbody.querySelectorAll('[data-copy-email]').forEach((btn) => {
+              btn.addEventListener('click', () => copyText(btn.getAttribute('data-copy-email') || ''));
+            });
+          }
+        }
+        const prevBtn = document.getElementById('btn-entries-prev');
+        const nextBtn = document.getElementById('btn-entries-next');
+        if (prevBtn) prevBtn.disabled = usedOffset <= 0;
+        if (nextBtn) nextBtn.disabled = usedOffset + usedLimit >= total;
+      } catch (e) {
+        showToast(e.message || 'Failed to load entries', 'error');
+        if (subtitle) subtitle.textContent = 'Failed to load.';
+      }
+    }
+    function setText(id, value) {
+      const el = document.getElementById(id);
+      if (!el) return;
+      el.textContent = value;
+    }
+    function formatDateTime(iso) {
+      try {
+        return new Date(iso).toLocaleString();
+      } catch {
+        return String(iso || '');
+      }
+    }
+    async function loadStats() {
+      try {
+        const res = await fetch(`${API_BASE}${WAITING_LIST_STATS_PATH}`, { headers: { 'Accept': 'application/json' } });
+        const data = await res.json();
+        if (!res.ok) {
+          showToast(data?.error || 'Failed to load stats', 'error');
+          return;
+        }
+        setText('kpi-total', String(data?.totalSubscribers ?? '-'));
+        setText('kpi-growth', String(data?.growthThisWeek ?? '-'));
+        setText('kpi-updated', data?.lastUpdated ? formatDateTime(data.lastUpdated) : '-');
+        const typeCounts = data?.typeCounts && typeof data.typeCounts === 'object' ? data.typeCounts : {};
+        const entries = Object.entries(typeCounts)
+          .filter(([k]) => k && String(k).trim())
+          .sort((a, b) => (b[1] || 0) - (a[1] || 0));
+        const container = document.getElementById('type-cards');
+        if (container) {
+          if (entries.length === 0) {
+            container.innerHTML = '<div class="text-sm text-gray-600">No types found.</div>';
+          } else {
+            container.innerHTML = entries.map(([type, count]) => {
+              const safeType = String(type)
+                .replaceAll('&', '&amp;')
+                .replaceAll('<', '&lt;')
+                .replaceAll('>', '&gt;')
+                .replaceAll('"', '&quot;')
+                .replaceAll("'", '&#39;');
+              return `
+                <div class="bg-gray-50 rounded-lg border p-4">
+                  <p class="text-sm text-gray-500">${safeType}</p>
+                  <p class="text-2xl font-bold text-gray-900 mt-2">${count ?? 0}</p>
+                </div>
+              `;
+            }).join('');
+          }
+        }
+      } catch (e) {
+        showToast(e.message || 'Failed to load stats', 'error');
+      }
+    }
+    function bindEvents() {
+      const refreshBtn = document.getElementById('btn-refresh-stats');
+      if (refreshBtn) refreshBtn.onclick = loadStats;
+      const refreshEntriesBtn = document.getElementById('btn-refresh-entries');
+      if (refreshEntriesBtn) refreshEntriesBtn.onclick = loadEntries;
+      const applyEntriesBtn = document.getElementById('btn-entries-apply');
+      if (applyEntriesBtn) {
+        applyEntriesBtn.onclick = () => {
+          entriesState.offset = 0;
+          loadEntries();
+        };
+      }
+      const resetEntriesBtn = document.getElementById('btn-entries-reset');
+      if (resetEntriesBtn) {
+        resetEntriesBtn.onclick = () => {
+          document.getElementById('entries-status').value = '';
+          document.getElementById('entries-type').value = '';
+          document.getElementById('entries-email').value = '';
+          document.getElementById('entries-limit').value = '50';
+          entriesState.offset = 0;
+          loadEntries();
+        };
+      }
+      const prevEntriesBtn = document.getElementById('btn-entries-prev');
+      if (prevEntriesBtn) {
+        prevEntriesBtn.onclick = () => {
+          entriesState.offset = Math.max(0, entriesState.offset - entriesState.limit);
+          loadEntries();
+        };
+      }
+      const nextEntriesBtn = document.getElementById('btn-entries-next');
+      if (nextEntriesBtn) {
+        nextEntriesBtn.onclick = () => {
+          entriesState.offset = Math.max(0, entriesState.offset + entriesState.limit);
+          loadEntries();
+        };
+      }
+      const copyVisibleBtn = document.getElementById('btn-copy-visible');
+      if (copyVisibleBtn) {
+        copyVisibleBtn.onclick = () => {
+          const emails = (lastEntries || [])
+            .map((e) => String(e?.email || '').trim())
+            .filter(Boolean);
+          if (emails.length === 0) {
+            showToast('No visible emails to copy', 'error');
+            return;
+          }
+          copyText(emails.join('\n'));
+        };
+      }
+      const clearBtn = document.getElementById('btn-sub-clear');
+      if (clearBtn) {
+        clearBtn.onclick = () => {
+          document.getElementById('sub-email').value = '';
+          document.getElementById('sub-type').value = '';
+          document.getElementById('sub-ref').value = '';
+          const out = document.getElementById('subscribe-response');
+          if (out) out.textContent = '';
+        };
+      }
+      const form = document.getElementById('subscribe-form');
+      if (form) {
+        form.onsubmit = async (event) => {
+          event.preventDefault();
+          const email = document.getElementById('sub-email')?.value?.trim();
+          const type = document.getElementById('sub-type')?.value;
+          const referralSource = document.getElementById('sub-ref')?.value?.trim();
+          if (!email) {
+            showToast('Email is required', 'error');
+            return;
+          }
+          const body = { email, type, referralSource };
+          try {
+            const res = await fetch(`${API_BASE}${WAITING_LIST_SUBSCRIBE_PATH}`, {
+              method: 'POST',
+              headers: { 'Content-Type': 'application/json', 'Accept': 'application/json' },
+              body: JSON.stringify(body),
+            });
+            const data = await res.json();
+            const out = document.getElementById('subscribe-response');
+            if (out) out.textContent = JSON.stringify(data, null, 2);
+            if (!res.ok) {
+              showToast(data?.error || 'Subscribe failed', 'error');
+              return;
+            }
+            showToast('Subscribed!', 'success');
+            loadStats();
+          } catch (e) {
+            showToast(e.message || 'Subscribe failed', 'error');
+          }
+        };
+      }
+    }
+    bindEvents();
+    loadStats();
+    loadEntries();
+  </script>
+<script>
+  window.addEventListener("keydown", (e) => {
+    if ((e.ctrlKey || e.metaKey) && e.key === "k") {
+      e.preventDefault();
+      window.parent.postMessage({ type: "keydown", ctrlK: true }, "*");
+    }
+  });
+</script>
+</body>
+</html>