crewly 1.5.18 → 1.5.19

package/config/templates/social-media-ops-team.json

@@ -1,67 +0,0 @@
-{
-  "id": "social-media-ops-team",
-  "name": "Social Media Ops",
-  "description": "AI team that monitors social trends, creates platform-native content, manages posting schedules, and analyzes engagement. Built for e-commerce brands, DTC companies, and social-first businesses.",
-  "category": "marketing",
-  "targetVertical": "E-commerce / DTC Brand / Social-First Business",
-  "members": [
-    {
-      "name": "Social Manager",
-      "role": "content-strategist",
-      "systemPrompt": "You are the social media manager on a social ops team. You own the content calendar, monitor trending topics and competitor activity, and set the strategy for each platform (X, LinkedIn, Reddit, Xiaohongshu). Use the rednote-reader skill to monitor Xiaohongshu trends and competitor posts. Define posting schedules, approve content before publishing, and review analytics to optimize strategy. Coordinate the Content Creator for production and the Analyst for performance insights."
-    },
-    {
-      "name": "Content Creator",
-      "role": "designer",
-      "systemPrompt": "You are the content creator on a social ops team. You produce platform-native social media posts, short-form copy, and visual assets. Use the social-media-post skill to generate platform-optimized posts for X, LinkedIn, and Reddit. Use the nano-banana-image skill to create eye-catching visuals and graphics. Adapt content tone and format to each platform's audience. Follow the Social Manager's content calendar and brand guidelines."
-    },
-    {
-      "name": "Analyst",
-      "role": "product-manager",
-      "systemPrompt": "You are the analytics lead on a social ops team. You track engagement metrics, identify high-performing content patterns, and produce weekly performance reports. Use the feedback-analyzer skill to analyze audience comments and sentiment. Use the daily-standup-report skill to compile daily activity summaries. Recommend content adjustments based on data: what topics resonate, best posting times, which platforms drive the most engagement. Feed insights back to the Social Manager for strategy iteration."
-    }
-  ],
-  "requiredSkills": [
-    "social-media-post",
-    "nano-banana-image",
-    "feedback-analyzer",
-    "daily-standup-report"
-  ],
-  "optionalSkills": [
-    "rednote-reader",
-    "send-pdf-to-slack"
-  ],
-  "workflow": {
-    "name": "Social Media Operations Cycle",
-    "steps": [
-      {
-        "step": 1,
-        "name": "Trend Monitoring & Planning",
-        "owner": "Social Manager",
-        "description": "Monitor trending topics across platforms, review competitor activity, update weekly content calendar.",
-        "output": "Weekly content calendar (markdown) with topics, platforms, and posting schedule"
-      },
-      {
-        "step": 2,
-        "name": "Content Creation",
-        "owner": "Content Creator",
-        "description": "Produce posts and visuals for each calendar slot. Adapt format and tone per platform.",
-        "output": "Platform-ready posts (text + images) per calendar slot"
-      },
-      {
-        "step": 3,
-        "name": "Review & Schedule",
-        "owner": "Social Manager",
-        "description": "Review content for brand alignment and quality. Approve or request revisions. Confirm posting schedule.",
-        "output": "Approved content queue"
-      },
-      {
-        "step": 4,
-        "name": "Performance Analysis",
-        "owner": "Analyst",
-        "description": "Collect engagement data, analyze content performance, produce weekly report with recommendations.",
-        "output": "Weekly analytics report (markdown) with metrics, top posts, and optimization recommendations"
-      }
-    ]
-  }
-}

package/config/templates/video-production/template.json

@@ -1,132 +0,0 @@
-{
-  "id": "video-production",
-  "name": "AI Video Production Team",
-  "description": "Director + Scriptwriter + Editor + Designer for UGC video production. The Director decomposes video projects, delegates scripting/editing/design tasks, reviews deliverables, and aggregates final output. Ideal for YouTube, TikTok, Instagram Reels content pipelines.",
-  "category": "content-creation",
-  "version": "1.0.0",
-  "tags": ["video", "ugc", "content", "production", "creative", "youtube", "tiktok"],
-  "icon": "video",
-  "hierarchical": true,
-  "defaultRuntime": "claude-code",
-  "pricing": {
-    "isFree": false,
-    "priceUsdCents": 499,
-    "requiredTier": "pro"
-  },
-  "roles": [
-    {
-      "role": "product-manager",
-      "label": "Director",
-      "defaultName": "Director",
-      "count": 1,
-      "hierarchyLevel": 1,
-      "canDelegate": true,
-      "defaultSkills": [
-        "decompose-goal",
-        "delegate-task",
-        "verify-output",
-        "aggregate-results",
-        "handle-failure",
-        "schedule-check"
-      ],
-      "promptAdditions": "You are the Director of a video production team. Your job is to take video project briefs and decompose them into actionable tasks: scripting, editing guidelines, and visual design. Delegate each task to the appropriate team member (Scriptwriter, Editor, Designer), review their output for quality and brand consistency, and aggregate the final deliverables.\n\nYour workflow:\n1. Receive a video brief (topic, platform, target audience, tone)\n2. Use decompose-goal to break it into: script, edit plan, thumbnail/graphics\n3. Use delegate-task to assign each piece to the right worker\n4. Use verify-output to review deliverables against the brief\n5. Use aggregate-results to compile the final production package\n\nFocus on storytelling, pacing, audience retention hooks (first 3 seconds), and platform-specific best practices."
-    },
-    {
-      "role": "content-strategist",
-      "label": "Scriptwriter",
-      "defaultName": "Scriptwriter",
-      "count": 1,
-      "hierarchyLevel": 2,
-      "canDelegate": false,
-      "reportsTo": "product-manager",
-      "defaultSkills": [
-        "report-status",
-        "complete-task",
-        "request-help"
-      ],
-      "promptAdditions": "You are a Scriptwriter on a video production team. Write compelling video scripts, voiceover narration, captions, and subtitle tracks.\n\nDeliverable format for each script:\n- Hook (0-3s): Attention-grabbing opening line\n- Body: Main content with timestamps, speaker notes, and B-roll suggestions\n- CTA: Clear call-to-action ending\n- Metadata: Word count, estimated duration, tone tags\n\nAdapt your writing style to the target platform:\n- YouTube: Longer form, educational/entertaining, SEO-optimized titles\n- TikTok/Reels: Punchy, trend-aware, hook-first, 15-60 seconds\n- LinkedIn: Professional, insight-driven, story-based\n\nAlways deliver scripts as structured markdown with clear section markers."
-    },
-    {
-      "role": "developer",
-      "label": "Editor",
-      "defaultName": "Editor",
-      "count": 1,
-      "hierarchyLevel": 2,
-      "canDelegate": false,
-      "reportsTo": "product-manager",
-      "defaultSkills": [
-        "report-status",
-        "complete-task",
-        "request-help"
-      ],
-      "promptAdditions": "You are a Video Editor on a production team. Create detailed editing blueprints that a human editor or automated tool can follow.\n\nDeliverable format for each edit plan:\n- Timeline structure with timestamps and segment labels\n- Cut list: in/out points, transition types (cut, dissolve, wipe, zoom)\n- Audio plan: music cues, voiceover sync points, sound effects\n- Pacing guide: fast cuts for energy, slow for emphasis\n- B-roll placement map\n- Text overlay specifications (position, timing, font style)\n- Export settings per platform (aspect ratio, resolution, codec)\n\nOutput structured edit decision lists (EDLs) in markdown with clear technical specifications. Think like a post-production supervisor."
-    },
-    {
-      "role": "designer",
-      "label": "Designer",
-      "defaultName": "Designer",
-      "count": 1,
-      "hierarchyLevel": 2,
-      "canDelegate": false,
-      "reportsTo": "product-manager",
-      "defaultSkills": [
-        "report-status",
-        "complete-task",
-        "request-help",
-        "nano-banana-image"
-      ],
-      "promptAdditions": "You are a Visual Designer on a video production team. Create thumbnail concepts, brand style guides, title cards, lower-third graphics specifications, and color palettes.\n\nDeliverable format:\n- Thumbnail: Concept description, composition layout, text overlay, face/emotion focus, color contrast analysis, CTR optimization notes\n- Brand kit: Primary/secondary colors (hex), fonts, logo placement rules, consistent visual language\n- Title cards: Text, background, animation direction\n- Lower thirds: Name, title, position, animation style, timing\n\nUse the nano-banana-image skill to generate visual assets when needed. Focus on click-through-rate optimization for thumbnails (high contrast, readable text, emotional faces). Maintain visual consistency across the video brand."
-    }
-  ],
-  "verificationPipeline": {
-    "name": "Video Production Quality Pipeline",
-    "steps": [
-      {
-        "id": "script-review",
-        "name": "Script Review",
-        "description": "Director reviews script for storytelling arc, hook quality, and brand voice",
-        "method": "code_review",
-        "critical": true,
-        "config": {
-          "checkPatterns": true
-        }
-      },
-      {
-        "id": "edit-plan-review",
-        "name": "Edit Plan Review",
-        "description": "Director reviews editing blueprint for pacing and technical completeness",
-        "method": "code_review",
-        "critical": true,
-        "config": {
-          "checkPatterns": true
-        }
-      },
-      {
-        "id": "visual-consistency",
-        "name": "Visual Consistency Check",
-        "description": "Verify thumbnails and graphics match brand guidelines",
-        "method": "code_review",
-        "critical": false,
-        "config": {
-          "checkPatterns": true
-        }
-      }
-    ],
-    "passPolicy": "critical_only",
-    "maxRetries": 1
-  },
-  "monitoringDefaults": {
-    "idleEvent": true,
-    "fallbackCheckMinutes": 10
-  },
-  "maxWorkersPerLeader": 3,
-  "mission": "Produce high-quality UGC video content for YouTube, TikTok, and Instagram Reels with consistent branding",
-  "budget": {
-    "maxTokensPerDay": 3000000,
-    "alertThreshold": 80
-  },
-  "qualityGate": {
-    "autoApprove": false,
-    "minQualityScore": 75
-  }
-}

package/dist/backend/backend/src/controllers/admin/admin.controller.d.ts

@@ -1,69 +0,0 @@
-/**
- * Admin Controller
- *
- * Handles admin portal endpoints for user management.
- * Admin authentication uses hardcoded credentials (from env vars)
- * with a separate JWT containing role: 'admin'.
- *
- * @module controllers/admin/admin.controller
- */
-import type { Request, Response, NextFunction } from 'express';
-/** Admin JWT payload shape. */
-interface AdminJwtPayload {
-    role: string;
-    email: string;
-    iat: number;
-    exp: number;
-    iss: string;
-}
-/**
- * Verify an admin JWT and return the payload.
- *
- * @param token - JWT token string
- * @returns Admin JWT payload
- * @throws Error if token is invalid, expired, or not admin
- */
-export declare function verifyAdminToken(token: string): AdminJwtPayload;
-/**
- * Express middleware that requires a valid admin JWT.
- *
- * Extracts the token from the Authorization header (Bearer scheme)
- * and verifies it contains the admin role claim.
- *
- * @param req - Express request
- * @param res - Express response
- * @param next - Next middleware
- */
-export declare function requireAdmin(req: Request, res: Response, next: NextFunction): void;
-/**
- * POST /api/admin/login
- *
- * Authenticate admin with hardcoded credentials (env vars).
- *
- * @param req - Express request with { email, password } body
- * @param res - Express response
- * @param next - Next middleware
- */
-export declare function adminLogin(req: Request, res: Response, next: NextFunction): Promise<void>;
-/**
- * GET /api/admin/users
- *
- * List all registered users (admin only).
- *
- * @param _req - Express request
- * @param res - Express response
- * @param next - Next middleware
- */
-export declare function listUsers(_req: Request, res: Response, next: NextFunction): Promise<void>;
-/**
- * PATCH /api/admin/users/:userId/tier
- *
- * Update a user's subscription tier (admin only).
- *
- * @param req - Express request with { tier } body
- * @param res - Express response
- * @param next - Next middleware
- */
-export declare function updateUserTier(req: Request, res: Response, next: NextFunction): Promise<void>;
-export {};
-//# sourceMappingURL=admin.controller.d.ts.map

package/dist/backend/backend/src/controllers/admin/admin.controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/admin/admin.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAc/D,+BAA+B;AAC/B,UAAU,eAAe;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAkCD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,CA0B/D;AAMD;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAelF;AAMD;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB/F;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ/F;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBnG"}

package/dist/backend/backend/src/controllers/admin/admin.controller.js

@@ -1,187 +0,0 @@
-/**
- * Admin Controller
- *
- * Handles admin portal endpoints for user management.
- * Admin authentication uses hardcoded credentials (from env vars)
- * with a separate JWT containing role: 'admin'.
- *
- * @module controllers/admin/admin.controller
- */
-import { createHmac } from 'crypto';
-import { AuthService } from '../../services/cloud/auth/auth.service.js';
-import { isValidPlan } from '../../services/cloud/auth/auth.types.js';
-import { AUTH_CONSTANTS, ADMIN_CONSTANTS } from '../../constants.js';
-import { LoggerService } from '../../services/core/logger.service.js';
-const logger = LoggerService.getInstance().createComponentLogger('AdminController');
-const jwtSecret = process.env['CREWLY_JWT_SECRET'] || AUTH_CONSTANTS.JWT.DEFAULT_SECRET;
-/**
- * Sign data with HMAC-SHA256.
- *
- * @param data - Data to sign
- * @returns Base64url-encoded signature
- */
-function sign(data) {
-    return createHmac('sha256', jwtSecret).update(data).digest('base64url');
-}
-/**
- * Create an admin JWT token.
- *
- * @param email - Admin email
- * @returns Signed JWT string
- */
-function createAdminToken(email) {
-    const now = Math.floor(Date.now() / 1000);
-    const header = { alg: 'HS256', typ: 'JWT' };
-    const payload = {
-        role: ADMIN_CONSTANTS.JWT.ROLE,
-        email,
-        iat: now,
-        exp: now + ADMIN_CONSTANTS.JWT.EXPIRY_S,
-        iss: AUTH_CONSTANTS.JWT.ISSUER,
-    };
-    const headerB64 = Buffer.from(JSON.stringify(header)).toString('base64url');
-    const payloadB64 = Buffer.from(JSON.stringify(payload)).toString('base64url');
-    const signature = sign(`${headerB64}.${payloadB64}`);
-    return `${headerB64}.${payloadB64}.${signature}`;
-}
-/**
- * Verify an admin JWT and return the payload.
- *
- * @param token - JWT token string
- * @returns Admin JWT payload
- * @throws Error if token is invalid, expired, or not admin
- */
-export function verifyAdminToken(token) {
-    const parts = token.split('.');
-    if (parts.length !== 3) {
-        throw new Error('Invalid token format');
-    }
-    const [headerB64, payloadB64, signatureB64] = parts;
-    const expectedSig = sign(`${headerB64}.${payloadB64}`);
-    if (signatureB64 !== expectedSig) {
-        throw new Error('Invalid token signature');
-    }
-    const payload = JSON.parse(Buffer.from(payloadB64, 'base64url').toString('utf8'));
-    if (payload.role !== ADMIN_CONSTANTS.JWT.ROLE) {
-        throw new Error('Not an admin token');
-    }
-    const now = Math.floor(Date.now() / 1000);
-    if (payload.exp <= now) {
-        throw new Error('Token expired');
-    }
-    return payload;
-}
-// ---------------------------------------------------------------------------
-// Middleware
-// ---------------------------------------------------------------------------
-/**
- * Express middleware that requires a valid admin JWT.
- *
- * Extracts the token from the Authorization header (Bearer scheme)
- * and verifies it contains the admin role claim.
- *
- * @param req - Express request
- * @param res - Express response
- * @param next - Next middleware
- */
-export function requireAdmin(req, res, next) {
-    const authHeader = req.headers.authorization;
-    if (!authHeader || !authHeader.startsWith('Bearer ')) {
-        res.status(401).json({ success: false, error: 'Admin authentication required' });
-        return;
-    }
-    try {
-        const token = authHeader.slice(7);
-        verifyAdminToken(token);
-        next();
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : 'Invalid admin token';
-        res.status(401).json({ success: false, error: message });
-    }
-}
-// ---------------------------------------------------------------------------
-// Route handlers
-// ---------------------------------------------------------------------------
-/**
- * POST /api/admin/login
- *
- * Authenticate admin with hardcoded credentials (env vars).
- *
- * @param req - Express request with { email, password } body
- * @param res - Express response
- * @param next - Next middleware
- */
-export async function adminLogin(req, res, next) {
-    try {
-        const { email, password } = req.body;
-        if (!email || !password) {
-            res.status(400).json({ success: false, error: 'Email and password are required' });
-            return;
-        }
-        if (email !== ADMIN_CONSTANTS.CREDENTIALS.EMAIL || password !== ADMIN_CONSTANTS.CREDENTIALS.PASSWORD) {
-            logger.warn('Admin login failed', { email });
-            res.status(401).json({ success: false, error: 'Invalid admin credentials' });
-            return;
-        }
-        const token = createAdminToken(email);
-        logger.info('Admin logged in', { email });
-        res.json({
-            success: true,
-            data: { token, email, expiresIn: ADMIN_CONSTANTS.JWT.EXPIRY_S },
-        });
-    }
-    catch (error) {
-        next(error);
-    }
-}
-/**
- * GET /api/admin/users
- *
- * List all registered users (admin only).
- *
- * @param _req - Express request
- * @param res - Express response
- * @param next - Next middleware
- */
-export async function listUsers(_req, res, next) {
-    try {
-        const authService = AuthService.getInstance();
-        const users = await authService.listAllUsers();
-        res.json({ success: true, data: users });
-    }
-    catch (error) {
-        next(error);
-    }
-}
-/**
- * PATCH /api/admin/users/:userId/tier
- *
- * Update a user's subscription tier (admin only).
- *
- * @param req - Express request with { tier } body
- * @param res - Express response
- * @param next - Next middleware
- */
-export async function updateUserTier(req, res, next) {
-    try {
-        const { userId } = req.params;
-        const { tier } = req.body;
-        if (!tier || !isValidPlan(tier)) {
-            res.status(400).json({ success: false, error: 'Invalid tier. Must be: free, pro, or enterprise' });
-            return;
-        }
-        const authService = AuthService.getInstance();
-        const profile = await authService.updateUserTier(userId, tier);
-        logger.info('Admin updated user tier', { userId, tier });
-        res.json({ success: true, data: profile });
-    }
-    catch (error) {
-        if (error instanceof Error && error.message === 'User not found') {
-            res.status(404).json({ success: false, error: 'User not found' });
-            return;
-        }
-        next(error);
-    }
-}
-//# sourceMappingURL=admin.controller.js.map

package/dist/backend/backend/src/controllers/admin/admin.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/admin/admin.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AAEtE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;AACpF,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC;AAexF;;;;;GAKG;AACH,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAoB;QAC/B,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI;QAC9B,KAAK;QACL,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ;QACvC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM;KAC/B,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;IACrD,OAAO,GAAG,SAAS,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;IACvD,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACnC,CAAC;IAErB,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC1E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC9E,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAA6C,CAAC;QAC9E,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QAED,IAAI,KAAK,KAAK,eAAe,CAAC,WAAW,CAAC,KAAK,IAAI,QAAQ,KAAK,eAAe,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YACrG,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAE1C,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;SAChE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAa,EAAE,GAAa,EAAE,IAAkB;IAC9E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,YAAY,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAClF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAAyB,CAAC;QAE/C,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QAED,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,gBAAgB,EAAE,CAAC;YACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/backend/backend/src/controllers/admin/admin.routes.d.ts

@@ -1,22 +0,0 @@
-/**
- * Admin Routes
- *
- * Router configuration for the admin portal API.
- *
- * Public endpoint:
- * - POST /login — admin authentication
- *
- * Protected endpoints (requireAdmin middleware):
- * - GET  /users               — list all users
- * - PATCH /users/:userId/tier — update user subscription tier
- *
- * @module controllers/admin/admin.routes
- */
-import { Router } from 'express';
-/**
- * Create the admin API router.
- *
- * @returns Express router with admin endpoints
- */
-export declare function createAdminRouter(): Router;
-//# sourceMappingURL=admin.routes.d.ts.map

package/dist/backend/backend/src/controllers/admin/admin.routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/admin/admin.routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAQjC;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAW1C"}

package/dist/backend/backend/src/controllers/admin/admin.routes.js

@@ -1,31 +0,0 @@
-/**
- * Admin Routes
- *
- * Router configuration for the admin portal API.
- *
- * Public endpoint:
- * - POST /login — admin authentication
- *
- * Protected endpoints (requireAdmin middleware):
- * - GET  /users               — list all users
- * - PATCH /users/:userId/tier — update user subscription tier
- *
- * @module controllers/admin/admin.routes
- */
-import { Router } from 'express';
-import { adminLogin, listUsers, updateUserTier, requireAdmin, } from './admin.controller.js';
-/**
- * Create the admin API router.
- *
- * @returns Express router with admin endpoints
- */
-export function createAdminRouter() {
-    const router = Router();
-    // Public
-    router.post('/login', adminLogin);
-    // Protected (admin JWT required)
-    router.get('/users', requireAdmin, listUsers);
-    router.patch('/users/:userId/tier', requireAdmin, updateUserTier);
-    return router;
-}
-//# sourceMappingURL=admin.routes.js.map

package/dist/backend/backend/src/controllers/admin/admin.routes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/admin/admin.routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EACL,UAAU,EACV,SAAS,EACT,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAE/B;;;;GAIG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,SAAS;IACT,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAElC,iCAAiC;IACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;IAElE,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/backend/backend/src/controllers/cloud/admin/admin-auth.middleware.d.ts

@@ -1,23 +0,0 @@
-/**
- * Admin Auth Middleware
- *
- * Simple secret-based authentication for Cloud admin endpoints.
- * Validates the X-Admin-Secret header against the CLOUD_ADMIN_SECRET env var.
- *
- * @module controllers/cloud/admin/admin-auth.middleware
- */
-import type { Request, Response, NextFunction } from 'express';
-/** Header name for admin secret. */
-export declare const ADMIN_SECRET_HEADER = "x-admin-secret";
-/**
- * Express middleware that requires a valid admin secret.
- *
- * Checks the X-Admin-Secret header against the CLOUD_ADMIN_SECRET
- * environment variable. Responds with 401 if missing or invalid.
- *
- * @param req - Express request
- * @param res - Express response
- * @param next - Next middleware
- */
-export declare function requireAdminAuth(req: Request, res: Response, next: NextFunction): void;
-//# sourceMappingURL=admin-auth.middleware.d.ts.map

package/dist/backend/backend/src/controllers/cloud/admin/admin-auth.middleware.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth.middleware.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/controllers/cloud/admin/admin-auth.middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAK/D,oCAAoC;AACpC,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAuBtF"}

package/dist/backend/backend/src/controllers/cloud/admin/admin-auth.middleware.js

@@ -1,42 +0,0 @@
-/**
- * Admin Auth Middleware
- *
- * Simple secret-based authentication for Cloud admin endpoints.
- * Validates the X-Admin-Secret header against the CLOUD_ADMIN_SECRET env var.
- *
- * @module controllers/cloud/admin/admin-auth.middleware
- */
-import { LoggerService } from '../../../services/core/logger.service.js';
-const logger = LoggerService.getInstance().createComponentLogger('AdminAuth');
-/** Header name for admin secret. */
-export const ADMIN_SECRET_HEADER = 'x-admin-secret';
-/**
- * Express middleware that requires a valid admin secret.
- *
- * Checks the X-Admin-Secret header against the CLOUD_ADMIN_SECRET
- * environment variable. Responds with 401 if missing or invalid.
- *
- * @param req - Express request
- * @param res - Express response
- * @param next - Next middleware
- */
-export function requireAdminAuth(req, res, next) {
-    const secret = process.env['CLOUD_ADMIN_SECRET'];
-    if (!secret) {
-        logger.error('CLOUD_ADMIN_SECRET not configured');
-        res.status(503).json({ success: false, error: 'Admin API not configured' });
-        return;
-    }
-    const provided = req.headers[ADMIN_SECRET_HEADER];
-    if (!provided) {
-        res.status(401).json({ success: false, error: 'Missing X-Admin-Secret header' });
-        return;
-    }
-    if (provided !== secret) {
-        logger.warn('Invalid admin secret attempt', { ip: req.ip, path: req.path });
-        res.status(401).json({ success: false, error: 'Invalid admin secret' });
-        return;
-    }
-    next();
-}
-//# sourceMappingURL=admin-auth.middleware.js.map

package/dist/backend/backend/src/controllers/cloud/admin/admin-auth.middleware.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth.middleware.js","sourceRoot":"","sources":["../../../../../../../backend/src/controllers/cloud/admin/admin-auth.middleware.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAEzE,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;AAE9E,oCAAoC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAEjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAuB,CAAC;IAExE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACjF,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,IAAI,EAAE,CAAC;AACT,CAAC"}