crewly 1.3.31 → 1.4.1

package/dist/backend/backend/src/controllers/payment/payment.controller.js

@@ -57,7 +57,7 @@ export const handleCreateCheckout = asyncHandler(async (req, res) => {
     const stripe = StripeService.getInstance();
     const result = await stripe.createCheckoutSession(userId, planId, interval, successUrl, cancelUrl);
     if (!result.success) {
-        res.status(result.message.includes('not configured') ? 503 : 400).json(result);
+        res.status(result.message?.includes('not configured') ? 503 : 400).json(result);
         return;
     }
     res.json({ success: true, data: result.data });
@@ -128,7 +128,7 @@ export const handleCreatePortal = asyncHandler(async (req, res) => {
     const stripe = StripeService.getInstance();
     const result = await stripe.createPortalSession(userId, returnUrl);
     if (!result.success) {
-        res.status(result.message.includes('not configured') ? 503 : 400).json(result);
+        res.status(result.message?.includes('not configured') ? 503 : 400).json(result);
         return;
     }
     res.json({ success: true, data: result.data });

package/dist/backend/backend/src/controllers/payment/payment.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"payment.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAc5D,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACrG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAKvD,CAAC;IAEF,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC,CAAC;QAChG,OAAO;IACR,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;QACxF,OAAO;IACR,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;QACzF,OAAO;IACR,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBACxF,OAAO;YACR,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtE,OAAO;QACR,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAI,GAA4B,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAEnG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,OAAO;IACR,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IAC9F,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAW,IAAI,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAc,CAAC;IAEnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAC7E,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO;IACR,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACtG,MAAM,MAAM,GAAI,GAA4B,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAEpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO;IACR,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACnG,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAA8B,CAAC;IAEzD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACzE,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GAAI,GAA4B,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,OAAO;IACR,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC"}
+{"version":3,"file":"payment.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAc5D,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACrG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAKvD,CAAC;IAEF,IAAI,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC,CAAC;QAChG,OAAO;IACR,CAAC;IAED,IAAI,CAAC,QAAQ,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;QACxF,OAAO;IACR,CAAC;IAED,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;QACzF,OAAO;IACR,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBACxF,OAAO;YACR,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACtE,OAAO;QACR,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAI,GAA4B,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAEnG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChF,OAAO;IACR,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IAC9F,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAW,IAAI,EAAE,CAAC;IAClE,MAAM,OAAO,GAAG,GAAG,CAAC,IAAc,CAAC;IAEnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAC7E,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO;IACR,CAAC;IAED,qDAAqD;IACrD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACtG,MAAM,MAAM,GAAI,GAA4B,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAEpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO;IACR,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC,KAAK,EAAE,GAAY,EAAE,GAAa,EAAiB,EAAE;IACnG,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,IAA8B,CAAC;IAEzD,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACzE,OAAO;IACR,CAAC;IAED,MAAM,MAAM,GAAI,GAA4B,CAAC,IAAI,CAAC,MAAM,CAAC;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChF,OAAO;IACR,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC"}

package/dist/backend/backend/src/controllers/payment/payment.routes.d.ts

@@ -7,9 +7,9 @@
  * The webhook endpoint uses raw body parsing for Stripe signature
  * verification (configured at the Express app level).
  *
- * Note: Supabase auth middleware was removed when cloud services were
- * deleted. Authenticated endpoints currently use a pass-through placeholder
- * that must be replaced with a real auth middleware before production.
+ * Note: Authenticated endpoints use a shared pass-through placeholder
+ * middleware (require-auth.middleware.ts) that must be replaced with
+ * a real auth implementation before production.
  *
  * @module controllers/payment/payment.routes
  */

package/dist/backend/backend/src/controllers/payment/payment.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payment.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAqBjC;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAY5C"}
+{"version":3,"file":"payment.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AASjC;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAY5C"}

package/dist/backend/backend/src/controllers/payment/payment.routes.js

@@ -7,25 +7,15 @@
  * The webhook endpoint uses raw body parsing for Stripe signature
  * verification (configured at the Express app level).
  *
- * Note: Supabase auth middleware was removed when cloud services were
- * deleted. Authenticated endpoints currently use a pass-through placeholder
- * that must be replaced with a real auth middleware before production.
+ * Note: Authenticated endpoints use a shared pass-through placeholder
+ * middleware (require-auth.middleware.ts) that must be replaced with
+ * a real auth implementation before production.
  *
  * @module controllers/payment/payment.routes
  */
 import { Router } from 'express';
 import { handleCreateCheckout, handleWebhook, handleGetSubscription, handleCreatePortal, } from './payment.controller.js';
-/**
- * Placeholder auth middleware. Passes requests through without authentication.
- * TODO: Replace with a real authentication middleware when cloud services are restored.
- *
- * @param _req - Express request
- * @param _res - Express response
- * @param next - Express next function
- */
-const requireAuth = (_req, _res, next) => {
-    next();
-};
+import { requireAuth } from '../../middleware/require-auth.middleware.js';
 /**
  * Creates the payment router with all Stripe payment endpoints.
  *

package/dist/backend/backend/src/controllers/payment/payment.routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"payment.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EACN,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,CAAC,IAAa,EAAE,IAAc,EAAE,IAAkB,EAAQ,EAAE;IAC/E,IAAI,EAAE,CAAC;AACR,CAAC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB;IAClC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,0BAA0B;IAC1B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAChE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IAExD,4DAA4D;IAC5D,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEvC,OAAO,MAAM,CAAC;AACf,CAAC"}
+{"version":3,"file":"payment.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EACN,oBAAoB,EACpB,aAAa,EACb,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAE1E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB;IAClC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,0BAA0B;IAC1B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IAChE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC;IAExD,4DAA4D;IAC5D,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEvC,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/backend/backend/src/controllers/payment/payment.types.d.ts

@@ -1,109 +1,30 @@
 /**
  * Payment Type Definitions
  *
- * Types for Stripe-based payment processing including checkout sessions,
- * subscriptions, webhook events, and customer portal sessions.
+ * Type definitions and validators for Stripe payment endpoints.
  *
  * @module controllers/payment/payment.types
  */
-/** Available subscription plan identifiers. */
-export type PlanId = 'free' | 'pro' | 'enterprise';
-/** Billing interval for subscriptions. */
-export type BillingInterval = 'month' | 'year';
-/** Subscription status mirroring Stripe's status values. */
-export type SubscriptionStatus = 'active' | 'past_due' | 'canceled' | 'incomplete' | 'trialing' | 'unpaid' | 'paused';
-/** Request body for POST /api/payment/checkout. */
-export interface CreateCheckoutRequest {
-    /** Plan to subscribe to */
-    planId: PlanId;
-    /** Billing interval */
-    interval: BillingInterval;
-    /** URL to redirect to after successful checkout */
-    successUrl: string;
-    /** URL to redirect to if user cancels */
-    cancelUrl: string;
-}
-/** Response from POST /api/payment/checkout. */
-export interface CreateCheckoutResponse {
-    /** Stripe Checkout Session URL to redirect the user to */
-    checkoutUrl: string;
-    /** Stripe Checkout Session ID */
-    sessionId: string;
-}
-/** Subscription details returned by GET /api/payment/subscription. */
-export interface SubscriptionInfo {
-    /** Whether the user has an active subscription */
-    active: boolean;
-    /** Current plan */
-    planId: PlanId;
-    /** Subscription status */
-    status: SubscriptionStatus | null;
-    /** Current billing period end (ISO timestamp) */
-    currentPeriodEnd: string | null;
-    /** Whether the subscription is set to cancel at period end */
-    cancelAtPeriodEnd: boolean;
-}
-/** Request body for POST /api/payment/portal. */
-export interface CreatePortalRequest {
-    /** URL to redirect to when the user is done managing their subscription */
-    returnUrl: string;
-}
-/** Response from POST /api/payment/portal. */
-export interface CreatePortalResponse {
-    /** Stripe Customer Portal URL */
-    portalUrl: string;
-}
-/** Relevant Stripe webhook event types we handle. */
-export type PaymentWebhookEventType = 'checkout.session.completed' | 'customer.subscription.updated' | 'customer.subscription.deleted' | 'invoice.payment_succeeded' | 'invoice.payment_failed';
-/** Processed webhook event payload (subset of Stripe event). */
-export interface WebhookEventPayload {
-    /** Stripe event ID */
-    eventId: string;
-    /** Event type */
-    type: PaymentWebhookEventType;
-    /** Supabase user ID extracted from metadata */
-    userId: string | null;
-    /** Stripe customer ID */
-    customerId: string | null;
-    /** Stripe subscription ID */
-    subscriptionId: string | null;
-    /** Plan ID from metadata */
-    planId: PlanId | null;
-}
-/** Result wrapper for payment operations. */
-export interface PaymentOperationResult<T = unknown> {
-    /** Whether the operation succeeded */
-    success: boolean;
-    /** Human-readable message */
-    message: string;
-    /** Result data, if any */
-    data?: T;
-}
-/** Valid plan IDs for validation. */
-export declare const VALID_PLAN_IDS: PlanId[];
-/** Valid billing intervals for validation. */
-export declare const VALID_BILLING_INTERVALS: BillingInterval[];
-/** Webhook event types we process. */
-export declare const HANDLED_WEBHOOK_EVENTS: PaymentWebhookEventType[];
+/** Valid subscription plan identifiers */
+export declare const PLAN_IDS: readonly ["free", "pro", "enterprise"];
+/** Plan ID type */
+export type PlanId = (typeof PLAN_IDS)[number];
+/** Valid billing intervals */
+export declare const BILLING_INTERVALS: readonly ["month", "year"];
+/** Billing interval type */
+export type BillingInterval = (typeof BILLING_INTERVALS)[number];
 /**
- * Check whether a value is a valid PlanId.
+ * Check if a string is a valid plan ID.
  *
  * @param value - Value to check
- * @returns true if value is a valid PlanId
+ * @returns True if value is a valid PlanId
  */
-export declare function isValidPlanId(value: unknown): value is PlanId;
+export declare function isValidPlanId(value: string): value is PlanId;
 /**
- * Check whether a value is a valid BillingInterval.
+ * Check if a string is a valid billing interval.
  *
  * @param value - Value to check
- * @returns true if value is a valid BillingInterval
+ * @returns True if value is a valid BillingInterval
  */
-export declare function isValidBillingInterval(value: unknown): value is BillingInterval;
-/**
- * Check whether a value is a handled webhook event type.
- *
- * @param value - Value to check
- * @returns true if value is a handled webhook event type
- */
-export declare function isHandledWebhookEvent(value: unknown): value is PaymentWebhookEventType;
+export declare function isValidBillingInterval(value: string): value is BillingInterval;
 //# sourceMappingURL=payment.types.d.ts.map

package/dist/backend/backend/src/controllers/payment/payment.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payment.types.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,+CAA+C;AAC/C,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,YAAY,CAAC;AAEnD,0CAA0C;AAC1C,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAE/C,4DAA4D;AAC5D,MAAM,MAAM,kBAAkB,GAC3B,QAAQ,GACR,UAAU,GACV,UAAU,GACV,YAAY,GACZ,UAAU,GACV,QAAQ,GACR,QAAQ,CAAC;AAMZ,mDAAmD;AACnD,MAAM,WAAW,qBAAqB;IACrC,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,QAAQ,EAAE,eAAe,CAAC;IAC1B,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,gDAAgD;AAChD,MAAM,WAAW,sBAAsB;IACtC,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAChC,kDAAkD;IAClD,MAAM,EAAE,OAAO,CAAC;IAChB,mBAAmB;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAClC,iDAAiD;IACjD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8DAA8D;IAC9D,iBAAiB,EAAE,OAAO,CAAC;CAC3B;AAMD,iDAAiD;AACjD,MAAM,WAAW,mBAAmB;IACnC,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACpC,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD,qDAAqD;AACrD,MAAM,MAAM,uBAAuB,GAChC,4BAA4B,GAC5B,+BAA+B,GAC/B,+BAA+B,GAC/B,2BAA2B,GAC3B,wBAAwB,CAAC;AAE5B,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IACnC,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB;IACjB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,+CAA+C;IAC/C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yBAAyB;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,6BAA6B;IAC7B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,4BAA4B;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAMD,6CAA6C;AAC7C,MAAM,WAAW,sBAAsB,CAAC,CAAC,GAAG,OAAO;IAClD,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,IAAI,CAAC,EAAE,CAAC,CAAC;CACT;AAMD,qCAAqC;AACrC,eAAO,MAAM,cAAc,EAAE,MAAM,EAAkC,CAAC;AAEtE,8CAA8C;AAC9C,eAAO,MAAM,uBAAuB,EAAE,eAAe,EAAsB,CAAC;AAE5E,sCAAsC;AACtC,eAAO,MAAM,sBAAsB,EAAE,uBAAuB,EAM3D,CAAC;AAMF;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE/E;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,uBAAuB,CAEtF"}
+{"version":3,"file":"payment.types.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,0CAA0C;AAC1C,eAAO,MAAM,QAAQ,wCAAyC,CAAC;AAE/D,mBAAmB;AACnB,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,8BAA8B;AAC9B,eAAO,MAAM,iBAAiB,4BAA6B,CAAC;AAE5D,4BAA4B;AAC5B,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,MAAM,CAE5D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,eAAe,CAE9E"}

package/dist/backend/backend/src/controllers/payment/payment.types.js

@@ -1,54 +1,30 @@
 /**
  * Payment Type Definitions
  *
- * Types for Stripe-based payment processing including checkout sessions,
- * subscriptions, webhook events, and customer portal sessions.
+ * Type definitions and validators for Stripe payment endpoints.
  *
  * @module controllers/payment/payment.types
  */
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-/** Valid plan IDs for validation. */
-export const VALID_PLAN_IDS = ['free', 'pro', 'enterprise'];
-/** Valid billing intervals for validation. */
-export const VALID_BILLING_INTERVALS = ['month', 'year'];
-/** Webhook event types we process. */
-export const HANDLED_WEBHOOK_EVENTS = [
-    'checkout.session.completed',
-    'customer.subscription.updated',
-    'customer.subscription.deleted',
-    'invoice.payment_succeeded',
-    'invoice.payment_failed',
-];
-// ---------------------------------------------------------------------------
-// Type guards
-// ---------------------------------------------------------------------------
+/** Valid subscription plan identifiers */
+export const PLAN_IDS = ['free', 'pro', 'enterprise'];
+/** Valid billing intervals */
+export const BILLING_INTERVALS = ['month', 'year'];
 /**
- * Check whether a value is a valid PlanId.
+ * Check if a string is a valid plan ID.
  *
  * @param value - Value to check
- * @returns true if value is a valid PlanId
+ * @returns True if value is a valid PlanId
  */
 export function isValidPlanId(value) {
-    return typeof value === 'string' && VALID_PLAN_IDS.includes(value);
+    return PLAN_IDS.includes(value);
 }
 /**
- * Check whether a value is a valid BillingInterval.
+ * Check if a string is a valid billing interval.
  *
  * @param value - Value to check
- * @returns true if value is a valid BillingInterval
+ * @returns True if value is a valid BillingInterval
  */
 export function isValidBillingInterval(value) {
-    return typeof value === 'string' && VALID_BILLING_INTERVALS.includes(value);
-}
-/**
- * Check whether a value is a handled webhook event type.
- *
- * @param value - Value to check
- * @returns true if value is a handled webhook event type
- */
-export function isHandledWebhookEvent(value) {
-    return typeof value === 'string' && HANDLED_WEBHOOK_EVENTS.includes(value);
+    return BILLING_INTERVALS.includes(value);
 }
 //# sourceMappingURL=payment.types.js.map

package/dist/backend/backend/src/controllers/payment/payment.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"payment.types.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA0HH,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,qCAAqC;AACrC,MAAM,CAAC,MAAM,cAAc,GAAa,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;AAEtE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAE5E,sCAAsC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GAA8B;IAChE,4BAA4B;IAC5B,+BAA+B;IAC/B,+BAA+B;IAC/B,2BAA2B;IAC3B,wBAAwB;CACxB,CAAC;AAEF,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,QAAQ,CAAC,KAAe,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACpD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,QAAQ,CAAC,KAAwB,CAAC,CAAC;AAChG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,QAAQ,CAAC,KAAgC,CAAC,CAAC;AACvG,CAAC"}
+{"version":3,"file":"payment.types.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/payment/payment.types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAU,CAAC;AAK/D,8BAA8B;AAC9B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,MAAM,CAAU,CAAC;AAK5D;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,QAAQ,CAAC,QAAQ,CAAC,KAAe,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,KAAwB,CAAC,CAAC;AAC9D,CAAC"}

package/dist/backend/backend/src/controllers/pr-review/pr-review.controller.d.ts

@@ -0,0 +1,49 @@
+/**
+ * PR Review Controller
+ *
+ * HTTP request handlers for GitHub PR webhook events and review status.
+ * Receives webhook payloads, verifies signatures, and triggers automated
+ * code reviews that post findings back as PR comments.
+ *
+ * @module controllers/pr-review/pr-review.controller
+ */
+import type { Request, Response, NextFunction } from 'express';
+/**
+ * POST /api/pr-review/webhook
+ *
+ * Receive GitHub PR webhook events. Verifies the signature, checks the
+ * event type and action, then triggers an asynchronous review.
+ * Returns 200 immediately to acknowledge receipt — the review runs
+ * in the background.
+ *
+ * Required headers:
+ * - X-GitHub-Event: must be "pull_request"
+ * - X-Hub-Signature-256: HMAC signature of the body
+ *
+ * @param req - Express request with webhook payload
+ * @param res - Express response (200 on accept, 400/401/202 on reject)
+ * @param next - Express next function for error propagation
+ */
+export declare function handleWebhook(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * POST /api/pr-review/review
+ *
+ * Manually trigger a PR review by providing the repository and PR number.
+ * Useful for re-reviewing PRs or testing the review pipeline.
+ *
+ * @param req - Express request with { repo: string, prNumber: number }
+ * @param res - Express response with review result
+ * @param next - Express next function for error propagation
+ */
+export declare function triggerManualReview(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * GET /api/pr-review/status
+ *
+ * Get the current PR review service status and statistics.
+ *
+ * @param _req - Express request (unused)
+ * @param res - Express response with status data
+ * @param next - Express next function for error propagation
+ */
+export declare function getPrReviewStatus(_req: Request, res: Response, next: NextFunction): Promise<void>;
+//# sourceMappingURL=pr-review.controller.d.ts.map

package/dist/backend/backend/src/controllers/pr-review/pr-review.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-review.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/pr-review/pr-review.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAY/D;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CA0Df;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAOf"}

package/dist/backend/backend/src/controllers/pr-review/pr-review.controller.js

@@ -0,0 +1,138 @@
+/**
+ * PR Review Controller
+ *
+ * HTTP request handlers for GitHub PR webhook events and review status.
+ * Receives webhook payloads, verifies signatures, and triggers automated
+ * code reviews that post findings back as PR comments.
+ *
+ * @module controllers/pr-review/pr-review.controller
+ */
+import { verifyWebhookSignature, executePrReview, getReviewStatus, PR_REVIEW_ACTIONS, } from '../../services/pr-review/pr-review.service.js';
+/** Environment variable name for the GitHub webhook secret */
+const WEBHOOK_SECRET_ENV = 'GITHUB_WEBHOOK_SECRET';
+/**
+ * POST /api/pr-review/webhook
+ *
+ * Receive GitHub PR webhook events. Verifies the signature, checks the
+ * event type and action, then triggers an asynchronous review.
+ * Returns 200 immediately to acknowledge receipt — the review runs
+ * in the background.
+ *
+ * Required headers:
+ * - X-GitHub-Event: must be "pull_request"
+ * - X-Hub-Signature-256: HMAC signature of the body
+ *
+ * @param req - Express request with webhook payload
+ * @param res - Express response (200 on accept, 400/401/202 on reject)
+ * @param next - Express next function for error propagation
+ */
+export async function handleWebhook(req, res, next) {
+    try {
+        const event = req.headers['x-github-event'];
+        // Only handle pull_request events
+        if (event !== 'pull_request') {
+            res.status(202).json({ success: true, message: 'Event ignored', event });
+            return;
+        }
+        // Verify webhook signature
+        const secret = process.env[WEBHOOK_SECRET_ENV];
+        if (secret) {
+            const signature = req.headers['x-hub-signature-256'];
+            const rawBody = JSON.stringify(req.body);
+            if (!signature || !verifyWebhookSignature(rawBody, signature, secret)) {
+                res.status(401).json({ success: false, error: 'Invalid webhook signature' });
+                return;
+            }
+        }
+        const payload = req.body;
+        // Validate required fields
+        if (!payload.action || !payload.pull_request || !payload.repository) {
+            res.status(400).json({ success: false, error: 'Invalid webhook payload' });
+            return;
+        }
+        // Only review on supported actions
+        if (!PR_REVIEW_ACTIONS.includes(payload.action)) {
+            res.status(202).json({
+                success: true,
+                message: 'Action ignored',
+                action: payload.action,
+            });
+            return;
+        }
+        // Acknowledge receipt immediately, then review async
+        res.status(200).json({
+            success: true,
+            message: 'Review triggered',
+            prNumber: payload.pull_request.number,
+            repository: payload.repository.full_name,
+        });
+        // Fire-and-forget: run review in background
+        executePrReview(payload).catch((error) => {
+            // Log but don't crash — webhook already acknowledged
+            console.error(`[pr-review] Review failed for PR #${payload.pull_request.number}:`, error instanceof Error ? error.message : String(error));
+        });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+/**
+ * POST /api/pr-review/review
+ *
+ * Manually trigger a PR review by providing the repository and PR number.
+ * Useful for re-reviewing PRs or testing the review pipeline.
+ *
+ * @param req - Express request with { repo: string, prNumber: number }
+ * @param res - Express response with review result
+ * @param next - Express next function for error propagation
+ */
+export async function triggerManualReview(req, res, next) {
+    try {
+        const { repo, prNumber } = req.body;
+        if (!repo || !prNumber) {
+            res.status(400).json({
+                success: false,
+                error: 'Missing required fields: repo (string), prNumber (number)',
+            });
+            return;
+        }
+        // Build a minimal payload for the review service
+        const payload = {
+            action: 'opened',
+            pull_request: {
+                number: prNumber,
+                title: '',
+                user: { login: 'manual' },
+                head: { sha: '', ref: '' },
+                base: { sha: '', ref: '' },
+                diff_url: '',
+                html_url: `https://github.com/${repo}/pull/${prNumber}`,
+            },
+            repository: { full_name: repo },
+        };
+        const result = await executePrReview(payload);
+        res.json({ success: true, data: result });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+/**
+ * GET /api/pr-review/status
+ *
+ * Get the current PR review service status and statistics.
+ *
+ * @param _req - Express request (unused)
+ * @param res - Express response with status data
+ * @param next - Express next function for error propagation
+ */
+export async function getPrReviewStatus(_req, res, next) {
+    try {
+        const status = getReviewStatus();
+        res.json({ success: true, data: status });
+    }
+    catch (error) {
+        next(error);
+    }
+}
+//# sourceMappingURL=pr-review.controller.js.map

package/dist/backend/backend/src/controllers/pr-review/pr-review.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-review.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/pr-review/pr-review.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,iBAAiB,GAElB,MAAM,+CAA+C,CAAC;AAEvD,8DAA8D;AAC9D,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAEnD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QAElE,kCAAkC;QAClC,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC/C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAuB,CAAC;YAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;gBAC7E,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAA0B,CAAC;QAE/C,2BAA2B;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAA0C,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,gBAAgB;gBACzB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,qDAAqD;QACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,MAAM;YACrC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,SAAS;SACzC,CAAC,CAAC;QAEH,4CAA4C;QAC5C,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACvC,qDAAqD;YACrD,OAAO,CAAC,KAAK,CACX,qCAAqC,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,EACnE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAA4C,CAAC;QAE5E,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,2DAA2D;aACnE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,MAAM,OAAO,GAAuB;YAClC,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE;gBACZ,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,EAAE;gBACT,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;gBACzB,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC1B,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBAC1B,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,sBAAsB,IAAI,SAAS,QAAQ,EAAE;aACxD;YACD,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SAChC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAa,EACb,GAAa,EACb,IAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/backend/backend/src/controllers/pr-review/pr-review.routes.d.ts

@@ -0,0 +1,20 @@
+/**
+ * PR Review Routes
+ *
+ * Router configuration for PR review webhook and management endpoints.
+ *
+ * @module controllers/pr-review/pr-review.routes
+ */
+import { Router } from 'express';
+/**
+ * Create the PR review router with webhook and management endpoints.
+ *
+ * Routes:
+ * - POST /webhook — GitHub webhook receiver for PR events
+ * - POST /review — Manually trigger a PR review
+ * - GET /status — Get review service status
+ *
+ * @returns Express router for /api/pr-review routes
+ */
+export declare function createPrReviewRouter(): Router;
+//# sourceMappingURL=pr-review.routes.d.ts.map

package/dist/backend/backend/src/controllers/pr-review/pr-review.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-review.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/pr-review/pr-review.routes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAa7C"}

package/dist/backend/backend/src/controllers/pr-review/pr-review.routes.js

@@ -0,0 +1,30 @@
+/**
+ * PR Review Routes
+ *
+ * Router configuration for PR review webhook and management endpoints.
+ *
+ * @module controllers/pr-review/pr-review.routes
+ */
+import { Router } from 'express';
+import { handleWebhook, triggerManualReview, getPrReviewStatus } from './pr-review.controller.js';
+/**
+ * Create the PR review router with webhook and management endpoints.
+ *
+ * Routes:
+ * - POST /webhook — GitHub webhook receiver for PR events
+ * - POST /review — Manually trigger a PR review
+ * - GET /status — Get review service status
+ *
+ * @returns Express router for /api/pr-review routes
+ */
+export function createPrReviewRouter() {
+    const router = Router();
+    // POST /api/pr-review/webhook — GitHub webhook receiver
+    router.post('/webhook', handleWebhook);
+    // POST /api/pr-review/review — Manual review trigger
+    router.post('/review', triggerManualReview);
+    // GET /api/pr-review/status — Service status
+    router.get('/status', getPrReviewStatus);
+    return router;
+}
+//# sourceMappingURL=pr-review.routes.js.map

package/dist/backend/backend/src/controllers/pr-review/pr-review.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-review.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/pr-review/pr-review.routes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAElG;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,wDAAwD;IACxD,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEvC,qDAAqD;IACrD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAE5C,6CAA6C;IAC7C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAEzC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/backend/backend/src/controllers/quality-gate/quality-gate.controller.d.ts

@@ -29,4 +29,16 @@ import type { Request, Response, NextFunction } from 'express';
  * ```
  */
 export declare function checkQualityGates(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * POST /api/quality-gates/pre-commit
+ *
+ * Called by the git pre-commit hook to verify that team norms (SOPs) have
+ * been followed before allowing a commit. Checks git history for evidence
+ * of SOP compliance (e.g., review round commits for Code Commit SOP).
+ *
+ * @param req - Request with body: { sessionName, branch? }
+ * @param res - Response returning { pass, feedback, checks }
+ * @param next - Next function for error propagation
+ */
+export declare function preCommitGate(req: Request, res: Response, next: NextFunction): Promise<void>;
 //# sourceMappingURL=quality-gate.controller.d.ts.map

package/dist/backend/backend/src/controllers/quality-gate/quality-gate.controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quality-gate.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/quality-gate/quality-gate.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAO/D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CA0Bf"}
+{"version":3,"file":"quality-gate.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/quality-gate/quality-gate.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAQ/D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAqGf"}