crewly 1.2.3 → 1.2.4

package/dist/backend/backend/src/controllers/payment/payment.controller.js

@@ -0,0 +1,136 @@
+/**
+ * Payment REST Controller
+ *
+ * Handles Stripe payment endpoints: checkout session creation,
+ * subscription queries, customer portal sessions, and webhook events.
+ *
+ * All endpoints except the webhook require Supabase authentication.
+ * The webhook endpoint receives raw body for Stripe signature verification.
+ *
+ * @module controllers/payment/payment.controller
+ */
+import { StripeService } from '../../services/payment/stripe.service.js';
+import { isValidPlanId, isValidBillingInterval } from './payment.types.js';
+import { asyncHandler } from '../../utils/async-handler.js';
+// ---------------------------------------------------------------------------
+// Handlers
+// ---------------------------------------------------------------------------
+/**
+ * POST /api/payment/checkout
+ *
+ * Creates a Stripe Checkout Session for a subscription plan.
+ * Requires Supabase auth. The authenticated user ID is attached
+ * as session metadata for post-checkout correlation.
+ *
+ * @param req - Request with body: { planId, interval, successUrl, cancelUrl }
+ * @param res - Response with { success, data: { checkoutUrl, sessionId } }
+ */
+export const handleCreateCheckout = asyncHandler(async (req, res) => {
+    const { planId, interval, successUrl, cancelUrl } = req.body;
+    if (!planId || !isValidPlanId(planId)) {
+        res.status(400).json({ success: false, error: 'planId must be one of: free, solo, team, full' });
+        return;
+    }
+    if (!interval || !isValidBillingInterval(interval)) {
+        res.status(400).json({ success: false, error: 'interval must be one of: month, year' });
+        return;
+    }
+    if (!successUrl || !cancelUrl) {
+        res.status(400).json({ success: false, error: 'successUrl and cancelUrl are required' });
+        return;
+    }
+    // Validate URLs to prevent open redirects
+    for (const url of [successUrl, cancelUrl]) {
+        try {
+            const parsed = new URL(url);
+            if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+                res.status(400).json({ success: false, error: 'URLs must use http or https protocol' });
+                return;
+            }
+        }
+        catch {
+            res.status(400).json({ success: false, error: 'Invalid URL format' });
+            return;
+        }
+    }
+    const userId = req.user.userId;
+    const stripe = StripeService.getInstance();
+    const result = await stripe.createCheckoutSession(userId, planId, interval, successUrl, cancelUrl);
+    if (!result.success) {
+        res.status(result.message.includes('not configured') ? 503 : 400).json(result);
+        return;
+    }
+    res.json({ success: true, data: result.data });
+});
+/**
+ * POST /api/payment/webhook
+ *
+ * Receives Stripe webhook events. Does NOT require Supabase auth —
+ * authentication is done via Stripe signature verification.
+ *
+ * Expects raw body (application/json with raw Buffer) and the
+ * Stripe-Signature header.
+ *
+ * @param req - Request with raw body and Stripe-Signature header
+ * @param res - Response with 200 on success, 400 on failure
+ */
+export const handleWebhook = asyncHandler(async (req, res) => {
+    const signature = req.headers['stripe-signature'] || '';
+    const rawBody = req.body;
+    if (!Buffer.isBuffer(rawBody)) {
+        res.status(400).json({ success: false, error: 'Webhook requires raw body' });
+        return;
+    }
+    const stripe = StripeService.getInstance();
+    const result = await stripe.handleWebhookEvent(rawBody, signature);
+    if (!result.success) {
+        res.status(400).json(result);
+        return;
+    }
+    // Always return 200 to Stripe to acknowledge receipt
+    res.json({ success: true, received: true });
+});
+/**
+ * GET /api/payment/subscription
+ *
+ * Returns the current subscription status for the authenticated user.
+ * Requires Supabase auth.
+ *
+ * @param req - Authenticated request
+ * @param res - Response with { success, data: SubscriptionInfo }
+ */
+export const handleGetSubscription = asyncHandler(async (req, res) => {
+    const userId = req.user.userId;
+    const stripe = StripeService.getInstance();
+    const result = await stripe.getSubscription(userId);
+    if (!result.success) {
+        res.status(503).json(result);
+        return;
+    }
+    res.json({ success: true, data: result.data });
+});
+/**
+ * POST /api/payment/portal
+ *
+ * Creates a Stripe Customer Portal session for subscription management.
+ * Requires Supabase auth.
+ *
+ * @param req - Request with body: { returnUrl }
+ * @param res - Response with { success, data: { portalUrl } }
+ */
+export const handleCreatePortal = asyncHandler(async (req, res) => {
+    const { returnUrl } = req.body;
+    if (!returnUrl) {
+        res.status(400).json({ success: false, error: 'returnUrl is required' });
+        return;
+    }
+    const userId = req.user.userId;
+    const stripe = StripeService.getInstance();
+    const result = await stripe.createPortalSession(userId, returnUrl);
+    if (!result.success) {
+        res.status(result.message.includes('not configured') ? 503 : 400).json(result);
+        return;
+    }
+    res.json({ success: true, data: result.data });
+});
+//# sourceMappingURL=payment.controller.js.map

package/dist/backend/backend/src/controllers/payment/payment.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE3E,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACrG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAKvD,CAAC;IAEF,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAC;QACjG,OAAO;IACR,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;QACxF,OAAO;IACR,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;QACzF,OAAO;IACR,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBACxF,OAAO;YACR,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtE,OAAO;QACR,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAI,GAAoC,CAAC,IAAI,CAAC,MAAM,CAAC;IACjE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAEnG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,OAAO;IACR,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IAC9F,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAW,IAAI,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAc,CAAC;IAEnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAC7E,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO;IACR,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACtG,MAAM,MAAM,GAAI,GAAoC,CAAC,IAAI,CAAC,MAAM,CAAC;IACjE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAEpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO;IACR,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACnG,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAA8B,CAAC;IAEzD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACzE,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GAAI,GAAoC,CAAC,IAAI,CAAC,MAAM,CAAC;IACjE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,OAAO;IACR,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC"}

package/dist/backend/backend/src/controllers/payment/payment.routes.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Payment REST Routes
+ *
+ * Router configuration for Stripe payment endpoints.
+ *
+ * All endpoints except the webhook require Supabase authentication.
+ * The webhook endpoint uses raw body parsing for Stripe signature
+ * verification (configured at the Express app level).
+ *
+ * @module controllers/payment/payment.routes
+ */
+import { Router } from 'express';
+/**
+ * Creates the payment router with all Stripe payment endpoints.
+ *
+ * Authenticated endpoints (require Supabase JWT):
+ * - POST /checkout      - Create a Stripe Checkout Session
+ * - GET  /subscription  - Get current subscription status
+ * - POST /portal        - Create a Stripe Customer Portal session
+ *
+ * Public endpoints (Stripe signature verification):
+ * - POST /webhook       - Receive Stripe webhook events (raw body)
+ *
+ * @returns Express router configured with payment routes
+ */
+export declare function createPaymentRouter(): Router;
+//# sourceMappingURL=payment.routes.d.ts.map

package/dist/backend/backend/src/controllers/payment/payment.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AASjC;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAY5C"}

package/dist/backend/backend/src/controllers/payment/payment.routes.js

@@ -0,0 +1,38 @@
+/**
+ * Payment REST Routes
+ *
+ * Router configuration for Stripe payment endpoints.
+ *
+ * All endpoints except the webhook require Supabase authentication.
+ * The webhook endpoint uses raw body parsing for Stripe signature
+ * verification (configured at the Express app level).
+ *
+ * @module controllers/payment/payment.routes
+ */
+import { Router } from 'express';
+import { handleCreateCheckout, handleWebhook, handleGetSubscription, handleCreatePortal, } from './payment.controller.js';
+import { requireSupabaseAuth } from '../../services/cloud/auth/supabase-auth.middleware.js';
+/**
+ * Creates the payment router with all Stripe payment endpoints.
+ *
+ * Authenticated endpoints (require Supabase JWT):
+ * - POST /checkout      - Create a Stripe Checkout Session
+ * - GET  /subscription  - Get current subscription status
+ * - POST /portal        - Create a Stripe Customer Portal session
+ *
+ * Public endpoints (Stripe signature verification):
+ * - POST /webhook       - Receive Stripe webhook events (raw body)
+ *
+ * @returns Express router configured with payment routes
+ */
+export function createPaymentRouter() {
+    const router = Router();
+    // Authenticated endpoints (Supabase JWT required)
+    router.post('/checkout', requireSupabaseAuth, handleCreateCheckout);
+    router.get('/subscription', requireSupabaseAuth, handleGetSubscription);
+    router.post('/portal', requireSupabaseAuth, handleCreatePortal);
+    // Webhook endpoint (Stripe signature verification, no Supabase auth)
+    router.post('/webhook', handleWebhook);
+    return router;
+}
+//# sourceMappingURL=payment.routes.js.map

package/dist/backend/backend/src/controllers/payment/payment.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EACN,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uDAAuD,CAAC;AAE5F;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB;IAClC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,kDAAkD;IAClD,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;IACpE,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IACxE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;IAEhE,qEAAqE;IACrE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEvC,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/backend/backend/src/controllers/payment/payment.types.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Payment Type Definitions
+ *
+ * Types for Stripe-based payment processing including checkout sessions,
+ * subscriptions, webhook events, and customer portal sessions.
+ *
+ * @module controllers/payment/payment.types
+ */
+/** Available subscription plan identifiers. */
+export type PlanId = 'free' | 'solo' | 'team' | 'full';
+/** Billing interval for subscriptions. */
+export type BillingInterval = 'month' | 'year';
+/** Subscription status mirroring Stripe's status values. */
+export type SubscriptionStatus = 'active' | 'past_due' | 'canceled' | 'incomplete' | 'trialing' | 'unpaid' | 'paused';
+/** Request body for POST /api/payment/checkout. */
+export interface CreateCheckoutRequest {
+    /** Plan to subscribe to */
+    planId: PlanId;
+    /** Billing interval */
+    interval: BillingInterval;
+    /** URL to redirect to after successful checkout */
+    successUrl: string;
+    /** URL to redirect to if user cancels */
+    cancelUrl: string;
+}
+/** Response from POST /api/payment/checkout. */
+export interface CreateCheckoutResponse {
+    /** Stripe Checkout Session URL to redirect the user to */
+    checkoutUrl: string;
+    /** Stripe Checkout Session ID */
+    sessionId: string;
+}
+/** Subscription details returned by GET /api/payment/subscription. */
+export interface SubscriptionInfo {
+    /** Whether the user has an active subscription */
+    active: boolean;
+    /** Current plan */
+    planId: PlanId;
+    /** Subscription status */
+    status: SubscriptionStatus | null;
+    /** Current billing period end (ISO timestamp) */
+    currentPeriodEnd: string | null;
+    /** Whether the subscription is set to cancel at period end */
+    cancelAtPeriodEnd: boolean;
+}
+/** Request body for POST /api/payment/portal. */
+export interface CreatePortalRequest {
+    /** URL to redirect to when the user is done managing their subscription */
+    returnUrl: string;
+}
+/** Response from POST /api/payment/portal. */
+export interface CreatePortalResponse {
+    /** Stripe Customer Portal URL */
+    portalUrl: string;
+}
+/** Relevant Stripe webhook event types we handle. */
+export type PaymentWebhookEventType = 'checkout.session.completed' | 'customer.subscription.updated' | 'customer.subscription.deleted' | 'invoice.payment_succeeded' | 'invoice.payment_failed';
+/** Processed webhook event payload (subset of Stripe event). */
+export interface WebhookEventPayload {
+    /** Stripe event ID */
+    eventId: string;
+    /** Event type */
+    type: PaymentWebhookEventType;
+    /** Supabase user ID extracted from metadata */
+    userId: string | null;
+    /** Stripe customer ID */
+    customerId: string | null;
+    /** Stripe subscription ID */
+    subscriptionId: string | null;
+    /** Plan ID from metadata */
+    planId: PlanId | null;
+}
+/** Result wrapper for payment operations. */
+export interface PaymentOperationResult<T = unknown> {
+    /** Whether the operation succeeded */
+    success: boolean;
+    /** Human-readable message */
+    message: string;
+    /** Result data, if any */
+    data?: T;
+}
+/** Valid plan IDs for validation. */
+export declare const VALID_PLAN_IDS: PlanId[];
+/** Valid billing intervals for validation. */
+export declare const VALID_BILLING_INTERVALS: BillingInterval[];
+/** Webhook event types we process. */
+export declare const HANDLED_WEBHOOK_EVENTS: PaymentWebhookEventType[];
+/**
+ * Check whether a value is a valid PlanId.
+ *
+ * @param value - Value to check
+ * @returns true if value is a valid PlanId
+ */
+export declare function isValidPlanId(value: unknown): value is PlanId;
+/**
+ * Check whether a value is a valid BillingInterval.
+ *
+ * @param value - Value to check
+ * @returns true if value is a valid BillingInterval
+ */
+export declare function isValidBillingInterval(value: unknown): value is BillingInterval;
+/**
+ * Check whether a value is a handled webhook event type.
+ *
+ * @param value - Value to check
+ * @returns true if value is a handled webhook event type
+ */
+export declare function isHandledWebhookEvent(value: unknown): value is PaymentWebhookEventType;
+//# sourceMappingURL=payment.types.d.ts.map

package/dist/backend/backend/src/controllers/payment/payment.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.types.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,+CAA+C;AAC/C,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvD,0CAA0C;AAC1C,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAE/C,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAC3B,QAAQ,GACR,UAAU,GACV,UAAU,GACV,YAAY,GACZ,UAAU,GACV,QAAQ,GACR,QAAQ,CAAC;AAMZ,mDAAmD;AACnD,MAAM,WAAW,qBAAqB;IACrC,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,QAAQ,EAAE,eAAe,CAAC;IAC1B,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,gDAAgD;AAChD,MAAM,WAAW,sBAAsB;IACtC,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAChC,kDAAkD;IAClD,MAAM,EAAE,OAAO,CAAC;IAChB,mBAAmB;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClC,iDAAiD;IACjD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8DAA8D;IAC9D,iBAAiB,EAAE,OAAO,CAAC;CAC3B;AAMD,iDAAiD;AACjD,MAAM,WAAW,mBAAmB;IACnC,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACpC,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD,qDAAqD;AACrD,MAAM,MAAM,uBAAuB,GAChC,4BAA4B,GAC5B,+BAA+B,GAC/B,+BAA+B,GAC/B,2BAA2B,GAC3B,wBAAwB,CAAC;AAE5B,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IACnC,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,+CAA+C;IAC/C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yBAAyB;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,6BAA6B;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,4BAA4B;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAMD,6CAA6C;AAC7C,MAAM,WAAW,sBAAsB,CAAC,CAAC,GAAG,OAAO;IAClD,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,IAAI,CAAC,EAAE,CAAC,CAAC;CACT;AAMD,qCAAqC;AACrC,eAAO,MAAM,cAAc,EAAE,MAAM,EAAqC,CAAC;AAEzE,8CAA8C;AAC9C,eAAO,MAAM,uBAAuB,EAAE,eAAe,EAAsB,CAAC;AAE5E,sCAAsC;AACtC,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EAM3D,CAAC;AAMF;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE/E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,uBAAuB,CAEtF"}

package/dist/backend/backend/src/controllers/payment/payment.types.js

@@ -0,0 +1,54 @@
+/**
+ * Payment Type Definitions
+ *
+ * Types for Stripe-based payment processing including checkout sessions,
+ * subscriptions, webhook events, and customer portal sessions.
+ *
+ * @module controllers/payment/payment.types
+ */
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Valid plan IDs for validation. */
+export const VALID_PLAN_IDS = ['free', 'solo', 'team', 'full'];
+/** Valid billing intervals for validation. */
+export const VALID_BILLING_INTERVALS = ['month', 'year'];
+/** Webhook event types we process. */
+export const HANDLED_WEBHOOK_EVENTS = [
+    'checkout.session.completed',
+    'customer.subscription.updated',
+    'customer.subscription.deleted',
+    'invoice.payment_succeeded',
+    'invoice.payment_failed',
+];
+// ---------------------------------------------------------------------------
+// Type guards
+// ---------------------------------------------------------------------------
+/**
+ * Check whether a value is a valid PlanId.
+ *
+ * @param value - Value to check
+ * @returns true if value is a valid PlanId
+ */
+export function isValidPlanId(value) {
+    return typeof value === 'string' && VALID_PLAN_IDS.includes(value);
+}
+/**
+ * Check whether a value is a valid BillingInterval.
+ *
+ * @param value - Value to check
+ * @returns true if value is a valid BillingInterval
+ */
+export function isValidBillingInterval(value) {
+    return typeof value === 'string' && VALID_BILLING_INTERVALS.includes(value);
+}
+/**
+ * Check whether a value is a handled webhook event type.
+ *
+ * @param value - Value to check
+ * @returns true if value is a handled webhook event type
+ */
+export function isHandledWebhookEvent(value) {
+    return typeof value === 'string' && HANDLED_WEBHOOK_EVENTS.includes(value);
+}
+//# sourceMappingURL=payment.types.js.map

package/dist/backend/backend/src/controllers/payment/payment.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment.types.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA0HH,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,qCAAqC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEzE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAE5E,sCAAsC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GAA8B;IAChE,4BAA4B;IAC5B,+BAA+B;IAC/B,+BAA+B;IAC/B,2BAA2B;IAC3B,wBAAwB;CACxB,CAAC;AAEF,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAe,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACpD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,QAAQ,CAAC,KAAwB,CAAC,CAAC;AAChG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,QAAQ,CAAC,KAAgC,CAAC,CAAC;AACvG,CAAC"}

package/dist/backend/backend/src/controllers/request-types.d.ts

@@ -4,7 +4,7 @@
  * These interfaces replace `any` type assertions in controller files,
  * providing compile-time type safety for incoming HTTP requests.
  */
-import type { TeamMember, Project } from '../types/index.js';
+import type { TeamMember, TeamMemberRole, Project } from '../types/index.js';
 /**
  * Request body for creating a new project
  */
@@ -86,12 +86,16 @@ export interface ProjectContextOptionsQuery {
  */
 export interface CreateTeamMemberInput {
     name: string;
-    role: TeamMember['role'];
+    role: TeamMemberRole;
     systemPrompt: string;
     runtimeType?: TeamMember['runtimeType'];
     avatar?: string;
     skillOverrides?: string[];
     excludedRoleSkills?: string[];
+    /** Whether this member can delegate tasks (for hierarchical teams). */
+    canDelegate?: boolean;
+    /** Hierarchy level override (auto-set if not provided). */
+    hierarchyLevel?: number;
 }
 /**
  * Request body for creating a new team
@@ -103,6 +107,12 @@ export interface CreateTeamRequestBody {
     projectPath?: string;
     currentProject?: string;
     projectIds?: string[];
+    /** Whether this team uses hierarchical management (TL -> Workers). */
+    hierarchical?: boolean;
+    /** Template ID to create team from. */
+    templateId?: string;
+    /** Parent team ID for organization grouping. */
+    parentTeamId?: string;
 }
 /**
  * Request body for starting a team
@@ -115,8 +125,14 @@ export interface StartTeamRequestBody {
  */
 export interface AddTeamMemberRequestBody {
     name: string;
-    role: TeamMember['role'];
+    role: TeamMemberRole;
     avatar?: string;
+    /** Whether this member can delegate tasks (for hierarchical teams). */
+    canDelegate?: boolean;
+    /** Hierarchy level override. */
+    hierarchyLevel?: number;
+    /** Parent member ID (for hierarchical teams). */
+    parentMemberId?: string;
 }
 /**
  * Request body for updating a team member
@@ -168,7 +184,7 @@ export interface GenerateMemberContextQuery {
  * Request body for updating team member runtime type
  */
 export interface UpdateTeamMemberRuntimeRequestBody {
-    runtimeType: 'claude-code' | 'gemini-cli' | 'codex-cli';
+    runtimeType: 'claude-code' | 'gemini-cli' | 'codex-cli' | 'openhands';
 }
 /**
  * Member update data in team update request
@@ -177,7 +193,7 @@ export interface TeamMemberUpdate {
     name: string;
     role: string;
     systemPrompt: string;
-    runtimeType?: 'claude-code' | 'gemini-cli' | 'codex-cli';
+    runtimeType?: 'claude-code' | 'gemini-cli' | 'codex-cli' | 'openhands';
     avatar?: string;
     skillOverrides?: string[];
     excludedRoleSkills?: string[];
@@ -190,6 +206,14 @@ export interface UpdateTeamRequestBody {
     description?: string;
     projectIds?: string[];
     members?: TeamMemberUpdate[];
+    /** Toggle hierarchical team management */
+    hierarchical?: boolean;
+    /** @deprecated Use `leaderIds` instead. */
+    leaderId?: string;
+    /** Member IDs of the team leaders (supports multiple TLs). */
+    leaderIds?: string[];
+    /** Parent team ID for organization grouping. */
+    parentTeamId?: string | null;
 }
 /**
  * TeamMember with updatedAt as a writable property
@@ -213,6 +237,11 @@ export interface MutableTeam {
     projectIds: string[];
     createdAt: string;
     updatedAt: string;
+    hierarchical?: boolean;
+    leaderId?: string;
+    leaderIds?: string[];
+    templateId?: string;
+    parentTeamId?: string;
 }
 /**
  * Project with mutable fields for internal updates

package/dist/backend/backend/src/controllers/request-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-types.d.ts","sourceRoot":"","sources":["../../../../../backend/src/controllers/request-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAM7D;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,WAAW,EAAE,aAAa,GAAG,YAAY,GAAG,WAAW,CAAC;CACzD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,aAAa,GAAG,YAAY,GAAG,WAAW,CAAC;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAMD;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAe,SAAQ,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB"}
+{"version":3,"file":"request-types.d.ts","sourceRoot":"","sources":["../../../../../backend/src/controllers/request-types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAM7E;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,uEAAuE;IACvE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,sEAAsE;IACtE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,gCAAgC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD,WAAW,EAAE,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,WAAW,CAAC;CACvE;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,WAAW,CAAC;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC7B,0CAA0C;IAC1C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAMD;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAe,SAAQ,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB"}

package/dist/backend/backend/src/controllers/session/session.controller.d.ts

@@ -77,4 +77,18 @@ export declare function getPreviousSessions(this: unknown, req: Request, res: Re
  * @returns {object} JSON response confirming dismissal
  */
 export declare function dismissPreviousSessions(this: unknown, req: Request, res: Response): Promise<void>;
+/**
+ * Submit an OAuth authorization code to a session.
+ *
+ * After an agent's OAuth token expires and /login is sent, the CLI outputs an
+ * OAuth URL. The user visits the URL, gets an auth code, and sends it back via
+ * this endpoint. The code is written to the agent's PTY session to complete
+ * the re-authentication flow.
+ *
+ * @route POST /api/sessions/:name/oauth-callback
+ * @param name - Session name
+ * @body {code} - OAuth authorization code from the user
+ * @returns {object} JSON response confirming code was submitted
+ */
+export declare function submitOAuthCallback(this: unknown, req: Request, res: Response): Promise<void>;
 //# sourceMappingURL=session.controller.d.ts.map

package/dist/backend/backend/src/controllers/session/session.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/session/session.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAOjD;;;;;GAKG;AACH,wBAAsB,YAAY,CACjC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC/B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAClC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CACnC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACrC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAChC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACxC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC5C,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"session.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/session/session.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAQjD;;;;;GAKG;AACH,wBAAsB,YAAY,CACjC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC/B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAClC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CACnC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACrC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAChC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACxC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC5C,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACxC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,GACX,OAAO,CAAC,IAAI,CAAC,CAqCf"}

package/dist/backend/backend/src/controllers/session/session.controller.js

@@ -9,6 +9,7 @@
  */
 import { getSessionBackendSync, getSessionBackend, getSessionStatePersistence, createSessionCommandHelper } from '../../services/session/index.js';
 import { LoggerService } from '../../services/core/logger.service.js';
+import { OAuthReloginMonitorService } from '../../services/agent/oauth-relogin-monitor.service.js';
 import { RUNTIME_TYPES } from '../../constants.js';
 const logger = LoggerService.getInstance().createComponentLogger('SessionController');
 /**
@@ -281,4 +282,51 @@ export async function dismissPreviousSessions(req, res) {
         });
     }
 }
+/**
+ * Submit an OAuth authorization code to a session.
+ *
+ * After an agent's OAuth token expires and /login is sent, the CLI outputs an
+ * OAuth URL. The user visits the URL, gets an auth code, and sends it back via
+ * this endpoint. The code is written to the agent's PTY session to complete
+ * the re-authentication flow.
+ *
+ * @route POST /api/sessions/:name/oauth-callback
+ * @param name - Session name
+ * @body {code} - OAuth authorization code from the user
+ * @returns {object} JSON response confirming code was submitted
+ */
+export async function submitOAuthCallback(req, res) {
+    try {
+        const { name } = req.params;
+        const { code } = req.body;
+        if (!code || typeof code !== 'string') {
+            res.status(400).json({ error: 'OAuth code is required and must be a string' });
+            return;
+        }
+        // Validate session exists
+        const backend = getSessionBackendSync();
+        if (!backend || !backend.sessionExists(name)) {
+            res.status(404).json({ error: `Session '${name}' not found` });
+            return;
+        }
+        // Submit the code to the PTY session
+        const success = OAuthReloginMonitorService.submitOAuthCode(name, code);
+        if (!success) {
+            res.status(500).json({ error: 'Failed to write OAuth code to session' });
+            return;
+        }
+        logger.info('OAuth code submitted to session', { sessionName: name });
+        res.json({ success: true, message: `OAuth code submitted to session '${name}'` });
+    }
+    catch (error) {
+        logger.error('Failed to submit OAuth code', {
+            name: req.params.name,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        res.status(500).json({
+            error: 'Failed to submit OAuth code',
+            message: error instanceof Error ? error.message : 'Unknown error',
+        });
+    }
+}
 //# sourceMappingURL=session.controller.js.map