crewly 1.2.3 → 1.2.6

package/dist/backend/backend/src/services/cloud/cloud-auth.service.d.ts

@@ -0,0 +1,136 @@
+/**
+ * Cloud Auth Service (Supabase-backed)
+ *
+ * Provides user authentication and license verification using
+ * the Supabase JS SDK. Unlike the local AuthService (which stores
+ * data on disk), this service delegates all auth state to Supabase Auth
+ * and queries the `licenses` table for plan-based feature gating.
+ *
+ * @module services/cloud/cloud-auth.service
+ */
+/** Row shape returned from the Supabase `licenses` table. */
+export interface LicenseRow {
+    /** License primary key */
+    id: string;
+    /** Owner user ID (Supabase auth.users.id) */
+    user_id: string;
+    /** Plan tier (e.g. "free", "pro") */
+    plan: string;
+    /** Whether the license is currently active */
+    status: string;
+    /** ISO timestamp of license creation */
+    created_at: string;
+    /** ISO timestamp when the license expires (nullable) */
+    expires_at: string | null;
+}
+/** Aggregated license status returned to callers. */
+export interface CloudLicenseInfo {
+    /** Whether the user holds a valid license */
+    valid: boolean;
+    /** Plan tier ("free" if no active license found) */
+    plan: string;
+    /** License status string */
+    status: string;
+    /** Expiration date (null if no expiry) */
+    expiresAt: string | null;
+}
+/** Session info returned by getSession / refreshToken. */
+export interface CloudSessionInfo {
+    /** Whether a session is currently active */
+    active: boolean;
+    /** Supabase user ID */
+    userId: string | null;
+    /** User email */
+    email: string | null;
+    /** Access token */
+    accessToken: string | null;
+    /** Refresh token */
+    refreshToken: string | null;
+    /** Token expiry (epoch seconds) */
+    expiresAt: number | null;
+}
+/** Auth result returned by signUp / signIn. */
+export interface CloudAuthResult {
+    /** Whether the operation succeeded */
+    success: boolean;
+    /** Session info (null on failure) */
+    session: CloudSessionInfo | null;
+    /** Error message (null on success) */
+    error: string | null;
+}
+/**
+ * CloudAuthService singleton.
+ *
+ * Wraps the Supabase JS SDK to provide signUp, signIn, signOut,
+ * getSession, refreshToken, and checkLicense operations.
+ */
+export declare class CloudAuthService {
+    private static instance;
+    private readonly logger;
+    private readonly supabase;
+    private constructor();
+    /**
+     * Get the singleton instance.
+     *
+     * @returns CloudAuthService instance
+     */
+    static getInstance(): CloudAuthService;
+    /**
+     * Reset the singleton (for testing).
+     */
+    static resetInstance(): void;
+    /**
+     * Register a new user via Supabase Auth.
+     *
+     * @param email - User email address
+     * @param password - User password
+     * @returns Auth result with session info
+     */
+    signUp(email: string, password: string): Promise<CloudAuthResult>;
+    /**
+     * Sign in an existing user via Supabase Auth.
+     *
+     * @param email - User email address
+     * @param password - User password
+     * @returns Auth result with session info
+     */
+    signIn(email: string, password: string): Promise<CloudAuthResult>;
+    /**
+     * Sign out the current user session.
+     *
+     * @returns Object indicating success or failure
+     */
+    signOut(): Promise<{
+        success: boolean;
+        error: string | null;
+    }>;
+    /**
+     * Get the current session from Supabase Auth.
+     *
+     * @returns Session info (active: false if no session)
+     */
+    getSession(): Promise<CloudSessionInfo>;
+    /**
+     * Refresh the current session using a refresh token.
+     *
+     * @param refreshToken - Refresh token string
+     * @returns Auth result with new session info
+     */
+    refreshToken(refreshToken: string): Promise<CloudAuthResult>;
+    /**
+     * Check the license status for a given user by querying the
+     * Supabase `licenses` table.
+     *
+     * @param userId - Supabase auth user ID
+     * @returns License info with plan and status
+     */
+    checkLicense(userId: string): Promise<CloudLicenseInfo>;
+    /**
+     * Convert a Supabase Session (or null) to CloudSessionInfo.
+     *
+     * @param session - Supabase session object
+     * @returns Normalized session info
+     */
+    private toSessionInfo;
+}
+//# sourceMappingURL=cloud-auth.service.d.ts.map

package/dist/backend/backend/src/services/cloud/cloud-auth.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-auth.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-auth.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,6DAA6D;AAC7D,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,KAAK,EAAE,OAAO,CAAC;IACf,oDAAoD;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,0DAA0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,4CAA4C;IAC5C,MAAM,EAAE,OAAO,CAAC;IAChB,uBAAuB;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,iBAAiB;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,mBAAmB;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oBAAoB;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mCAAmC;IACnC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,qCAAqC;IACrC,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACjC,sCAAsC;IACtC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAMD;;;;;GAKG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAE1C,OAAO;IAQP;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,gBAAgB;IAOtC;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAQ5B;;;;;;OAMG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAkBvE;;;;;;OAMG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAkBvE;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAiBpE;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAW7C;;;;;OAKG;IACG,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAsBlE;;;;;;OAMG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAuC7D;;;;;OAKG;IACH,OAAO,CAAC,aAAa;CActB"}

package/dist/backend/backend/src/services/cloud/cloud-auth.service.js

@@ -0,0 +1,204 @@
+/**
+ * Cloud Auth Service (Supabase-backed)
+ *
+ * Provides user authentication and license verification using
+ * the Supabase JS SDK. Unlike the local AuthService (which stores
+ * data on disk), this service delegates all auth state to Supabase Auth
+ * and queries the `licenses` table for plan-based feature gating.
+ *
+ * @module services/cloud/cloud-auth.service
+ */
+import { createClient } from '@supabase/supabase-js';
+import { LoggerService } from '../core/logger.service.js';
+import { CLOUD_AUTH_CONSTANTS } from '../../constants.js';
+// ---------------------------------------------------------------------------
+// Service
+// ---------------------------------------------------------------------------
+/**
+ * CloudAuthService singleton.
+ *
+ * Wraps the Supabase JS SDK to provide signUp, signIn, signOut,
+ * getSession, refreshToken, and checkLicense operations.
+ */
+export class CloudAuthService {
+    static instance = null;
+    logger;
+    supabase;
+    constructor() {
+        this.logger = LoggerService.getInstance().createComponentLogger('CloudAuthService');
+        this.supabase = createClient(CLOUD_AUTH_CONSTANTS.SUPABASE.URL, CLOUD_AUTH_CONSTANTS.SUPABASE.ANON_KEY);
+    }
+    /**
+     * Get the singleton instance.
+     *
+     * @returns CloudAuthService instance
+     */
+    static getInstance() {
+        if (!CloudAuthService.instance) {
+            CloudAuthService.instance = new CloudAuthService();
+        }
+        return CloudAuthService.instance;
+    }
+    /**
+     * Reset the singleton (for testing).
+     */
+    static resetInstance() {
+        CloudAuthService.instance = null;
+    }
+    // -------------------------------------------------------------------------
+    // Authentication
+    // -------------------------------------------------------------------------
+    /**
+     * Register a new user via Supabase Auth.
+     *
+     * @param email - User email address
+     * @param password - User password
+     * @returns Auth result with session info
+     */
+    async signUp(email, password) {
+        this.logger.info('Cloud signUp attempt', { email });
+        const response = await this.supabase.auth.signUp({ email, password });
+        if (response.error) {
+            this.logger.error('Cloud signUp failed', { email, error: response.error.message });
+            return { success: false, session: null, error: response.error.message };
+        }
+        this.logger.info('Cloud signUp succeeded', { email });
+        return {
+            success: true,
+            session: this.toSessionInfo(response.data.session),
+            error: null,
+        };
+    }
+    /**
+     * Sign in an existing user via Supabase Auth.
+     *
+     * @param email - User email address
+     * @param password - User password
+     * @returns Auth result with session info
+     */
+    async signIn(email, password) {
+        this.logger.info('Cloud signIn attempt', { email });
+        const response = await this.supabase.auth.signInWithPassword({ email, password });
+        if (response.error) {
+            this.logger.error('Cloud signIn failed', { email, error: response.error.message });
+            return { success: false, session: null, error: response.error.message };
+        }
+        this.logger.info('Cloud signIn succeeded', { email });
+        return {
+            success: true,
+            session: this.toSessionInfo(response.data.session),
+            error: null,
+        };
+    }
+    /**
+     * Sign out the current user session.
+     *
+     * @returns Object indicating success or failure
+     */
+    async signOut() {
+        this.logger.info('Cloud signOut');
+        const { error } = await this.supabase.auth.signOut();
+        if (error) {
+            this.logger.error('Cloud signOut failed', { error: error.message });
+            return { success: false, error: error.message };
+        }
+        return { success: true, error: null };
+    }
+    // -------------------------------------------------------------------------
+    // Session management
+    // -------------------------------------------------------------------------
+    /**
+     * Get the current session from Supabase Auth.
+     *
+     * @returns Session info (active: false if no session)
+     */
+    async getSession() {
+        const { data, error } = await this.supabase.auth.getSession();
+        if (error) {
+            this.logger.error('getSession failed', { error: error.message });
+            return { active: false, userId: null, email: null, accessToken: null, refreshToken: null, expiresAt: null };
+        }
+        return this.toSessionInfo(data.session);
+    }
+    /**
+     * Refresh the current session using a refresh token.
+     *
+     * @param refreshToken - Refresh token string
+     * @returns Auth result with new session info
+     */
+    async refreshToken(refreshToken) {
+        this.logger.info('Cloud refreshToken attempt');
+        const { data, error } = await this.supabase.auth.refreshSession({ refresh_token: refreshToken });
+        if (error) {
+            this.logger.error('Cloud refreshToken failed', { error: error.message });
+            return { success: false, session: null, error: error.message };
+        }
+        this.logger.info('Cloud refreshToken succeeded');
+        return {
+            success: true,
+            session: this.toSessionInfo(data.session),
+            error: null,
+        };
+    }
+    // -------------------------------------------------------------------------
+    // License verification
+    // -------------------------------------------------------------------------
+    /**
+     * Check the license status for a given user by querying the
+     * Supabase `licenses` table.
+     *
+     * @param userId - Supabase auth user ID
+     * @returns License info with plan and status
+     */
+    async checkLicense(userId) {
+        this.logger.info('Checking license', { userId });
+        const { data, error } = await this.supabase
+            .from(CLOUD_AUTH_CONSTANTS.TABLES.LICENSES)
+            .select('*')
+            .eq('user_id', userId)
+            .eq('status', CLOUD_AUTH_CONSTANTS.LICENSE_STATUS.ACTIVE)
+            .order('created_at', { ascending: false })
+            .limit(1);
+        if (error) {
+            this.logger.error('License check failed', { userId, error: error.message });
+            return { valid: false, plan: 'free', status: 'error', expiresAt: null };
+        }
+        if (!data || data.length === 0) {
+            return { valid: false, plan: 'free', status: 'none', expiresAt: null };
+        }
+        const license = data[0];
+        const isExpired = license.expires_at !== null && new Date(license.expires_at) < new Date();
+        if (isExpired) {
+            return { valid: false, plan: license.plan, status: 'expired', expiresAt: license.expires_at };
+        }
+        return {
+            valid: true,
+            plan: license.plan,
+            status: license.status,
+            expiresAt: license.expires_at,
+        };
+    }
+    // -------------------------------------------------------------------------
+    // Private helpers
+    // -------------------------------------------------------------------------
+    /**
+     * Convert a Supabase Session (or null) to CloudSessionInfo.
+     *
+     * @param session - Supabase session object
+     * @returns Normalized session info
+     */
+    toSessionInfo(session) {
+        if (!session) {
+            return { active: false, userId: null, email: null, accessToken: null, refreshToken: null, expiresAt: null };
+        }
+        return {
+            active: true,
+            userId: session.user?.id ?? null,
+            email: session.user?.email ?? null,
+            accessToken: session.access_token,
+            refreshToken: session.refresh_token,
+            expiresAt: session.expires_at ?? null,
+        };
+    }
+}
+//# sourceMappingURL=cloud-auth.service.js.map

package/dist/backend/backend/src/services/cloud/cloud-auth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-auth.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-auth.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAwD,MAAM,uBAAuB,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AA4D1D,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,gBAAgB;IACnB,MAAM,CAAC,QAAQ,GAA4B,IAAI,CAAC;IACvC,MAAM,CAAkB;IACxB,QAAQ,CAAiB;IAE1C;QACE,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,GAAG,YAAY,CAC1B,oBAAoB,CAAC,QAAQ,CAAC,GAAG,EACjC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CACvC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC/B,gBAAgB,CAAC,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACrD,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa;QAClB,gBAAgB,CAAC,QAAQ,GAAG,IAAI,CAAC;IACnC,CAAC;IAED,4EAA4E;IAC5E,iBAAiB;IACjB,4EAA4E;IAE5E;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,QAAgB;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAEpD,MAAM,QAAQ,GAAiB,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEpF,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,QAAgB;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAEpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAElF,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;YAClD,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAElC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAErD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAClD,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC;IAED,4EAA4E;IAC5E,qBAAqB;IACrB,4EAA4E;IAE5E;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QAE9D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9G,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,YAAoB;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAE/C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;QAEjG,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YACzC,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,uBAAuB;IACvB,4EAA4E;IAE5E;;;;;;OAMG;IACH,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAEjD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;aACxC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC;aAC1C,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;aACrB,EAAE,CAAC,QAAQ,EAAE,oBAAoB,CAAC,cAAc,CAAC,MAAM,CAAC;aACxD,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;aACzC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAe,CAAC;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;QAE3F,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;QAChG,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,kBAAkB;IAClB,4EAA4E;IAE5E;;;;;OAKG;IACK,aAAa,CAAC,OAAuB;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9G,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI;YAChC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI;YAClC,WAAW,EAAE,OAAO,CAAC,YAAY;YACjC,YAAY,EAAE,OAAO,CAAC,aAAa;YACnC,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;SACtC,CAAC;IACJ,CAAC"}

package/dist/backend/backend/src/services/cloud/cloud-client.service.d.ts

@@ -0,0 +1,179 @@
+/**
+ * Cloud Client Service
+ *
+ * Singleton service responsible for all interactions with CrewlyAI Cloud.
+ * Handles authentication, premium template fetching, and subscription
+ * status synchronization.
+ *
+ * Premium templates are loaded into memory only — never written to disk
+ * to prevent IP leakage.
+ *
+ * @module services/cloud/cloud-client.service
+ */
+import { type CloudTier, type CloudConnectionStatus } from '../../constants.js';
+/** Summary of a premium template returned by the cloud listing endpoint. */
+export interface CloudTemplateSummary {
+    /** Unique template identifier */
+    id: string;
+    /** Human-readable template name */
+    name: string;
+    /** Short description */
+    description: string;
+    /** Minimum subscription tier required */
+    requiredTier: CloudTier;
+    /** Category tag (e.g. "dev-team", "marketing") */
+    category: string;
+}
+/** Full detail for a single premium template (in-memory only). */
+export interface CloudTemplateDetail {
+    /** Unique template identifier */
+    id: string;
+    /** Human-readable template name */
+    name: string;
+    /** Full description */
+    description: string;
+    /** Minimum subscription tier required */
+    requiredTier: CloudTier;
+    /** Category tag */
+    category: string;
+    /** Team member role definitions */
+    roles: Array<{
+        role: string;
+        prompt: string;
+    }>;
+    /** Task orchestration config */
+    orchestration: Record<string, unknown>;
+}
+/** Current cloud connection state exposed by getStatus(). */
+export interface CloudStatus {
+    /** Whether the client is currently connected */
+    connectionStatus: CloudConnectionStatus;
+    /** Cloud API base URL (set after connect) */
+    cloudUrl: string | null;
+    /** Current subscription tier */
+    tier: CloudTier;
+    /** ISO timestamp of last successful sync */
+    lastSyncAt: string | null;
+}
+/**
+ * CloudClientService singleton.
+ *
+ * Manages the lifecycle of the connection between a local Crewly instance
+ * and CrewlyAI Cloud. All cloud API calls are made via native fetch with
+ * bearer-token authentication.
+ */
+export declare class CloudClientService {
+    private static instance;
+    private readonly logger;
+    /** Cloud API base URL (e.g. "https://cloud.crewly.dev") */
+    private cloudUrl;
+    /** Bearer token obtained during connect() */
+    private token;
+    /** Current connection status */
+    private connectionStatus;
+    /** Subscription tier reported by cloud */
+    private tier;
+    /** Timestamp of the most recent successful cloud API call */
+    private lastSyncAt;
+    private constructor();
+    /**
+     * Get the singleton instance.
+     *
+     * @returns CloudClientService instance
+     */
+    static getInstance(): CloudClientService;
+    /**
+     * Reset the singleton (for testing).
+     */
+    static resetInstance(): void;
+    /**
+     * Connect to CrewlyAI Cloud by verifying the provided token.
+     *
+     * Calls the cloud auth endpoint to validate credentials and retrieve
+     * the subscription tier. On success the service transitions to
+     * "connected" status.
+     *
+     * @param cloudUrl - Base URL of the CrewlyAI Cloud API
+     * @param token - Authentication token (API key or JWT)
+     * @returns Object with connection result
+     * @throws Error when the auth request fails or token is invalid
+     *
+     * @example
+     * ```ts
+     * const client = CloudClientService.getInstance();
+     * await client.connect('https://cloud.crewly.dev', 'sk-abc123');
+     * ```
+     */
+    connect(cloudUrl: string, token: string): Promise<{
+        success: boolean;
+        tier: CloudTier;
+    }>;
+    /**
+     * Disconnect from CrewlyAI Cloud.
+     *
+     * Clears stored credentials and resets the connection state.
+     */
+    disconnect(): void;
+    /**
+     * Fetch the list of premium templates available on CrewlyAI Cloud.
+     *
+     * Requires an active cloud connection.
+     *
+     * @returns Array of template summaries
+     * @throws Error when not connected or fetch fails
+     *
+     * @example
+     * ```ts
+     * const templates = await client.getTemplates();
+     * console.log(templates.map(t => t.name));
+     * ```
+     */
+    getTemplates(): Promise<CloudTemplateSummary[]>;
+    /**
+     * Fetch full detail for a single premium template.
+     *
+     * The returned data is held in memory only and must never be
+     * persisted to disk.
+     *
+     * @param id - Template identifier
+     * @returns Template detail object
+     * @throws Error when not connected, template not found, or fetch fails
+     *
+     * @example
+     * ```ts
+     * const detail = await client.getTemplateDetail('tpl-tiktok-ops');
+     * ```
+     */
+    getTemplateDetail(id: string): Promise<CloudTemplateDetail>;
+    /**
+     * Get the current cloud connection status and subscription tier.
+     *
+     * @returns Current status snapshot
+     */
+    getStatus(): CloudStatus;
+    /**
+     * Check whether the client is currently connected to cloud.
+     *
+     * @returns true if connected
+     */
+    isConnected(): boolean;
+    /**
+     * Get the current subscription tier.
+     *
+     * @returns Current tier value
+     */
+    getTier(): CloudTier;
+    /**
+     * Throw if the client is not in a connected state.
+     *
+     * @throws Error when not connected
+     */
+    private ensureConnected;
+    /**
+     * Build the standard authorization headers for cloud API requests.
+     *
+     * @returns Headers object with Authorization and Content-Type
+     */
+    private authHeaders;
+}
+//# sourceMappingURL=cloud-client.service.d.ts.map

package/dist/backend/backend/src/services/cloud/cloud-client.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-client.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-client.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAM5B,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,YAAY,EAAE,SAAS,CAAC;IACxB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,kEAAkE;AAClE,MAAM,WAAW,mBAAmB;IAClC,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,YAAY,EAAE,SAAS,CAAC;IACxB,mBAAmB;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,gCAAgC;IAChC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,gDAAgD;IAChD,gBAAgB,EAAE,qBAAqB,CAAC;IACxC,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gCAAgC;IAChC,IAAI,EAAE,SAAS,CAAC;IAChB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAMD;;;;;;GAMG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAmC;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEzC,2DAA2D;IAC3D,OAAO,CAAC,QAAQ,CAAuB;IACvC,6CAA6C;IAC7C,OAAO,CAAC,KAAK,CAAuB;IACpC,gCAAgC;IAChC,OAAO,CAAC,gBAAgB,CAAyE;IACjG,0CAA0C;IAC1C,OAAO,CAAC,IAAI,CAAyC;IACrD,6DAA6D;IAC7D,OAAO,CAAC,UAAU,CAAuB;IAEzC,OAAO;IAIP;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,kBAAkB;IAOxC;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAQ5B;;;;;;;;;;;;;;;;;OAiBG;IACG,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAiC9F;;;;OAIG;IACH,UAAU,IAAI,IAAI;IASlB;;;;;;;;;;;;;OAaG;IACG,YAAY,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAqBrD;;;;;;;;;;;;;;OAcG;IACG,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAyBjE;;;;OAIG;IACH,SAAS,IAAI,WAAW;IASxB;;;;OAIG;IACH,WAAW,IAAI,OAAO;IAItB;;;;OAIG;IACH,OAAO,IAAI,SAAS;IAQpB;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAMvB;;;;OAIG;IACH,OAAO,CAAC,WAAW;CAMpB"}