web-agent-bridge 3.4.0 → 3.8.1

package/server/migrations/019_unify_tier_constraints.sql

@@ -0,0 +1,133 @@
+-- ─────────────────────────────────────────────────────────────────────
+-- Migration 019: Unify tier CHECK constraints with canonical plans table
+--
+-- Background:
+--   plans table (008_plans.sql) seeds: free / pro / business / enterprise
+--   Legacy CHECK constraints accepted:  free / starter / pro / enterprise
+--   ⇒ Cannot purchase the canonical 'business' tier because the row would
+--     violate the CHECK constraint on sites.tier, subscriptions.tier,
+--     stripe_subscriptions.tier, free_grants.granted_tier and
+--     workspace_subscriptions.plan.
+--
+-- This migration accepts BOTH 'starter' (legacy / kept for back-compat
+-- with any existing rows or external scripts) AND 'business' (canonical
+-- new tier name).
+--
+-- SQLite-recommended pattern: create new table, copy rows, drop old,
+-- rename new, recreate indexes. defer_foreign_keys lets us do it inside
+-- a single transaction.
+-- ─────────────────────────────────────────────────────────────────────
+
+PRAGMA defer_foreign_keys = ON;
+
+-- ── 1) sites ─────────────────────────────────────────────────────────
+CREATE TABLE sites_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  domain TEXT NOT NULL,
+  name TEXT NOT NULL,
+  description TEXT,
+  tier TEXT DEFAULT 'free' CHECK(tier IN ('free','starter','pro','business','enterprise')),
+  license_key TEXT UNIQUE NOT NULL,
+  api_key TEXT UNIQUE,
+  config TEXT DEFAULT '{}',
+  active INTEGER DEFAULT 1,
+  created_at TEXT DEFAULT (datetime('now')),
+  updated_at TEXT DEFAULT (datetime('now')),
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+INSERT INTO sites_new SELECT * FROM sites;
+DROP TABLE sites;
+ALTER TABLE sites_new RENAME TO sites;
+CREATE INDEX IF NOT EXISTS idx_sites_domain  ON sites(domain);
+CREATE INDEX IF NOT EXISTS idx_sites_license ON sites(license_key);
+
+-- ── 2) subscriptions ────────────────────────────────────────────────
+CREATE TABLE subscriptions_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  site_id TEXT NOT NULL,
+  tier TEXT NOT NULL CHECK(tier IN ('free','starter','pro','business','enterprise')),
+  status TEXT DEFAULT 'active' CHECK(status IN ('active','cancelled','expired','trial')),
+  started_at TEXT DEFAULT (datetime('now')),
+  expires_at TEXT,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+  FOREIGN KEY (site_id) REFERENCES sites(id) ON DELETE CASCADE
+);
+INSERT INTO subscriptions_new SELECT * FROM subscriptions;
+DROP TABLE subscriptions;
+ALTER TABLE subscriptions_new RENAME TO subscriptions;
+
+-- ── 3) free_grants ──────────────────────────────────────────────────
+CREATE TABLE free_grants_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  site_id TEXT,
+  granted_tier TEXT NOT NULL CHECK(granted_tier IN ('starter','pro','business','enterprise')),
+  reason TEXT,
+  granted_by TEXT NOT NULL,
+  granted_at TEXT DEFAULT (datetime('now')),
+  expires_at TEXT,
+  active INTEGER DEFAULT 1,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+  FOREIGN KEY (granted_by) REFERENCES admins(id)
+);
+INSERT INTO free_grants_new SELECT * FROM free_grants;
+DROP TABLE free_grants;
+ALTER TABLE free_grants_new RENAME TO free_grants;
+
+-- ── 4) stripe_subscriptions ─────────────────────────────────────────
+CREATE TABLE stripe_subscriptions_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  site_id TEXT NOT NULL,
+  stripe_subscription_id TEXT UNIQUE,
+  stripe_price_id TEXT,
+  tier TEXT NOT NULL CHECK(tier IN ('starter','pro','business','enterprise')),
+  status TEXT DEFAULT 'active' CHECK(status IN ('active','cancelled','past_due','trialing','incomplete')),
+  current_period_start TEXT,
+  current_period_end TEXT,
+  created_at TEXT DEFAULT (datetime('now')),
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+  FOREIGN KEY (site_id) REFERENCES sites(id) ON DELETE CASCADE
+);
+INSERT INTO stripe_subscriptions_new SELECT * FROM stripe_subscriptions;
+DROP TABLE stripe_subscriptions;
+ALTER TABLE stripe_subscriptions_new RENAME TO stripe_subscriptions;
+
+-- ── 5) workspace_subscriptions (agent-workspace.js dynamic table) ────
+-- Created on first import of routes/agent-workspace.js. May not exist
+-- in fresh installs that have not loaded that route yet; guard with
+-- a defensive recreate.
+CREATE TABLE IF NOT EXISTS workspace_subscriptions (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  plan TEXT NOT NULL DEFAULT 'free',
+  status TEXT NOT NULL DEFAULT 'active',
+  tasks_today INTEGER DEFAULT 0,
+  tasks_total INTEGER DEFAULT 0,
+  deals_completed INTEGER DEFAULT 0,
+  total_savings REAL DEFAULT 0,
+  last_task_date TEXT,
+  created_at TEXT DEFAULT (datetime('now')),
+  expires_at TEXT,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+
+CREATE TABLE workspace_subscriptions_new (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL,
+  plan TEXT NOT NULL DEFAULT 'free' CHECK(plan IN ('free','starter','pro','business','enterprise')),
+  status TEXT NOT NULL DEFAULT 'active' CHECK(status IN ('active','cancelled','expired','suspended')),
+  tasks_today INTEGER DEFAULT 0,
+  tasks_total INTEGER DEFAULT 0,
+  deals_completed INTEGER DEFAULT 0,
+  total_savings REAL DEFAULT 0,
+  last_task_date TEXT,
+  created_at TEXT DEFAULT (datetime('now')),
+  expires_at TEXT,
+  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
+);
+INSERT INTO workspace_subscriptions_new SELECT * FROM workspace_subscriptions;
+DROP TABLE workspace_subscriptions;
+ALTER TABLE workspace_subscriptions_new RENAME TO workspace_subscriptions;

package/server/models/adapters/index.js

@@ -1,33 +1,33 @@
-/**
- * Database Adapter Interface
- *
- * WAB supports multiple database backends via adapters.
- * Set DB_ADAPTER environment variable to choose: sqlite (default), postgresql, mysql
- *
- * For PostgreSQL:
- *   npm install pg
- *   DB_ADAPTER=postgresql DATABASE_URL=postgres://user:pass@host:5432/wab
- *
- * For MySQL:
- *   npm install mysql2
- *   DB_ADAPTER=mysql DATABASE_URL=mysql://user:pass@host:3306/wab
- */
-
-const adapter = process.env.DB_ADAPTER || 'sqlite';
-
-let db;
-switch (adapter) {
-  case 'postgresql':
-  case 'postgres':
-    db = require('./postgresql');
-    break;
-  case 'mysql':
-    db = require('./mysql');
-    break;
-  case 'sqlite':
-  default:
-    db = require('./sqlite');
-    break;
-}
-
-module.exports = db;
+/**
+ * Database Adapter Interface
+ *
+ * WAB supports multiple database backends via adapters.
+ * Set DB_ADAPTER environment variable to choose: sqlite (default), postgresql, mysql
+ *
+ * For PostgreSQL:
+ *   npm install pg
+ *   DB_ADAPTER=postgresql DATABASE_URL=postgres://user:pass@host:5432/wab
+ *
+ * For MySQL:
+ *   npm install mysql2
+ *   DB_ADAPTER=mysql DATABASE_URL=mysql://user:pass@host:3306/wab
+ */
+
+const adapter = process.env.DB_ADAPTER || 'sqlite';
+
+let db;
+switch (adapter) {
+  case 'postgresql':
+  case 'postgres':
+    db = require('./postgresql');
+    break;
+  case 'mysql':
+    db = require('./mysql');
+    break;
+  case 'sqlite':
+  default:
+    db = require('./sqlite');
+    break;
+}
+
+module.exports = db;

package/server/models/adapters/mysql.js

@@ -1,183 +1,183 @@
-/**
- * MySQL Adapter for WAB
- *
- * Prerequisites: npm install mysql2
- * Set DATABASE_URL=mysql://user:pass@host:3306/wab
- *
- * This adapter implements the same interface as the SQLite adapter
- * so it can be used as a drop-in replacement.
- */
-
-const mysql = require('mysql2/promise');
-const bcrypt = require('bcryptjs');
-const { randomUUID: uuidv4 } = require('crypto');
-
-const pool = mysql.createPool(process.env.DATABASE_URL);
-
-// Initialize tables
-async function initDB() {
-  const conn = await pool.getConnection();
-  try {
-    await conn.query(`
-      CREATE TABLE IF NOT EXISTS users (
-        id VARCHAR(36) PRIMARY KEY,
-        email VARCHAR(255) UNIQUE NOT NULL,
-        password VARCHAR(255) NOT NULL,
-        name VARCHAR(255) NOT NULL,
-        company VARCHAR(255),
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
-      )
-    `);
-    await conn.query(`
-      CREATE TABLE IF NOT EXISTS sites (
-        id VARCHAR(36) PRIMARY KEY,
-        user_id VARCHAR(36) NOT NULL,
-        domain VARCHAR(255) NOT NULL,
-        name VARCHAR(255) NOT NULL,
-        description TEXT,
-        tier ENUM('free','starter','pro','enterprise') DEFAULT 'free',
-        license_key VARCHAR(30) UNIQUE NOT NULL,
-        api_key VARCHAR(50) UNIQUE,
-        config JSON,
-        active BOOLEAN DEFAULT TRUE,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
-        FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
-        INDEX idx_sites_domain (domain),
-        INDEX idx_sites_license (license_key)
-      )
-    `);
-    await conn.query(`
-      CREATE TABLE IF NOT EXISTS analytics (
-        id INT AUTO_INCREMENT PRIMARY KEY,
-        site_id VARCHAR(36) NOT NULL,
-        action_name VARCHAR(255) NOT NULL,
-        agent_id VARCHAR(255),
-        trigger_type VARCHAR(50),
-        success BOOLEAN,
-        metadata JSON,
-        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        FOREIGN KEY (site_id) REFERENCES sites(id) ON DELETE CASCADE,
-        INDEX idx_analytics_site (site_id),
-        INDEX idx_analytics_created (created_at)
-      )
-    `);
-    await conn.query(`
-      CREATE TABLE IF NOT EXISTS subscriptions (
-        id VARCHAR(36) PRIMARY KEY,
-        user_id VARCHAR(36) NOT NULL,
-        site_id VARCHAR(36) NOT NULL,
-        tier ENUM('free','starter','pro','enterprise') NOT NULL,
-        status ENUM('active','cancelled','expired','trial') DEFAULT 'active',
-        started_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
-        expires_at TIMESTAMP NULL,
-        FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
-        FOREIGN KEY (site_id) REFERENCES sites(id) ON DELETE CASCADE
-      )
-    `);
-  } finally {
-    conn.release();
-  }
-}
-
-initDB().catch(console.error);
-
-function generateLicenseKey() {
-  const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
-  const segments = [];
-  for (let s = 0; s < 4; s++) {
-    let seg = '';
-    for (let i = 0; i < 5; i++) seg += chars[Math.floor(Math.random() * chars.length)];
-    segments.push(seg);
-  }
-  return `WAB-${segments.join('-')}`;
-}
-
-function generateApiKey() {
-  return `wab_${uuidv4().replace(/-/g, '')}`;
-}
-
-// ─── User Operations ──────────────────────────────────────────────────
-async function registerUser({ email, password, name, company }) {
-  const id = uuidv4();
-  const hashed = bcrypt.hashSync(password, 12);
-  await pool.execute(
-    'INSERT INTO users (id, email, password, name, company) VALUES (?, ?, ?, ?, ?)',
-    [id, email, hashed, name, company || null]
-  );
-  return { id, email, name, company };
-}
-
-async function loginUser({ email, password }) {
-  const [rows] = await pool.execute('SELECT * FROM users WHERE email = ?', [email]);
-  const user = rows[0];
-  if (!user) return null;
-  if (!bcrypt.compareSync(password, user.password)) return null;
-  return { id: user.id, email: user.email, name: user.name, company: user.company };
-}
-
-// ─── Site Operations ──────────────────────────────────────────────────
-async function addSite({ userId, domain, name, description, tier }) {
-  const id = uuidv4();
-  const licenseKey = generateLicenseKey();
-  const apiKey = generateApiKey();
-  const config = JSON.stringify({
-    agentPermissions: { readContent: true, click: true, fillForms: false, scroll: true, navigate: false, apiAccess: false, automatedLogin: false, extractData: false },
-    features: { advancedAnalytics: false, realTimeUpdates: false },
-    restrictions: { allowedSelectors: [], blockedSelectors: ['.private', '[data-private]'], rateLimit: { maxCallsPerMinute: 60 } },
-    logging: { enabled: false, level: 'basic' }
-  });
-  await pool.execute(
-    'INSERT INTO sites (id, user_id, domain, name, description, tier, license_key, api_key, config) VALUES (?,?,?,?,?,?,?,?,?)',
-    [id, userId, domain, name, description || '', tier || 'free', licenseKey, apiKey, config]
-  );
-  return { id, domain, name, licenseKey, apiKey, tier: tier || 'free' };
-}
-
-// ─── Analytics ────────────────────────────────────────────────────────
-async function recordAnalytic({ siteId, actionName, agentId, triggerType, success, metadata }) {
-  await pool.execute(
-    'INSERT INTO analytics (site_id, action_name, agent_id, trigger_type, success, metadata) VALUES (?,?,?,?,?,?)',
-    [siteId, actionName, agentId || null, triggerType || null, success ? 1 : 0, JSON.stringify(metadata || {})]
-  );
-}
-
-// ─── License Verification ─────────────────────────────────────────────
-async function verifyLicense(domain, licenseKey) {
-  const [rows] = await pool.execute(
-    'SELECT * FROM sites WHERE domain = ? AND license_key = ? AND active = TRUE', [domain, licenseKey]
-  );
-  const site = rows[0];
-  if (!site) {
-    const [byKey] = await pool.execute('SELECT * FROM sites WHERE license_key = ? AND active = TRUE', [licenseKey]);
-    if (byKey[0]) return { valid: false, error: 'Domain mismatch', tier: 'free' };
-    return { valid: false, error: 'Invalid license key', tier: 'free' };
-  }
-
-  const tierPermissions = {
-    free: { apiAccess: false, automatedLogin: false, extractData: false, advancedAnalytics: false },
-    starter: { apiAccess: false, automatedLogin: true, extractData: false, advancedAnalytics: true },
-    pro: { apiAccess: true, automatedLogin: true, extractData: true, advancedAnalytics: true },
-    enterprise: { apiAccess: true, automatedLogin: true, extractData: true, advancedAnalytics: true }
-  };
-
-  const config = typeof site.config === 'string' ? JSON.parse(site.config) : site.config;
-  return {
-    valid: true,
-    tier: site.tier,
-    permissions: { ...config.agentPermissions, ...tierPermissions[site.tier] },
-    restrictions: config.restrictions,
-    features: config.features,
-    siteId: site.id
-  };
-}
-
-module.exports = {
-  registerUser,
-  loginUser,
-  addSite,
-  recordAnalytic,
-  verifyLicense,
-  pool
-};
+/**
+ * MySQL Adapter for WAB
+ *
+ * Prerequisites: npm install mysql2
+ * Set DATABASE_URL=mysql://user:pass@host:3306/wab
+ *
+ * This adapter implements the same interface as the SQLite adapter
+ * so it can be used as a drop-in replacement.
+ */
+
+const mysql = require('mysql2/promise');
+const bcrypt = require('bcryptjs');
+const { randomUUID: uuidv4 } = require('crypto');
+
+const pool = mysql.createPool(process.env.DATABASE_URL);
+
+// Initialize tables
+async function initDB() {
+  const conn = await pool.getConnection();
+  try {
+    await conn.query(`
+      CREATE TABLE IF NOT EXISTS users (
+        id VARCHAR(36) PRIMARY KEY,
+        email VARCHAR(255) UNIQUE NOT NULL,
+        password VARCHAR(255) NOT NULL,
+        name VARCHAR(255) NOT NULL,
+        company VARCHAR(255),
+        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+        updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP
+      )
+    `);
+    await conn.query(`
+      CREATE TABLE IF NOT EXISTS sites (
+        id VARCHAR(36) PRIMARY KEY,
+        user_id VARCHAR(36) NOT NULL,
+        domain VARCHAR(255) NOT NULL,
+        name VARCHAR(255) NOT NULL,
+        description TEXT,
+        tier ENUM('free','starter','pro','business','enterprise') DEFAULT 'free',
+        license_key VARCHAR(30) UNIQUE NOT NULL,
+        api_key VARCHAR(50) UNIQUE,
+        config JSON,
+        active BOOLEAN DEFAULT TRUE,
+        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+        updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+        FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+        INDEX idx_sites_domain (domain),
+        INDEX idx_sites_license (license_key)
+      )
+    `);
+    await conn.query(`
+      CREATE TABLE IF NOT EXISTS analytics (
+        id INT AUTO_INCREMENT PRIMARY KEY,
+        site_id VARCHAR(36) NOT NULL,
+        action_name VARCHAR(255) NOT NULL,
+        agent_id VARCHAR(255),
+        trigger_type VARCHAR(50),
+        success BOOLEAN,
+        metadata JSON,
+        created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+        FOREIGN KEY (site_id) REFERENCES sites(id) ON DELETE CASCADE,
+        INDEX idx_analytics_site (site_id),
+        INDEX idx_analytics_created (created_at)
+      )
+    `);
+    await conn.query(`
+      CREATE TABLE IF NOT EXISTS subscriptions (
+        id VARCHAR(36) PRIMARY KEY,
+        user_id VARCHAR(36) NOT NULL,
+        site_id VARCHAR(36) NOT NULL,
+        tier ENUM('free','starter','pro','business','enterprise') NOT NULL,
+        status ENUM('active','cancelled','expired','trial') DEFAULT 'active',
+        started_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+        expires_at TIMESTAMP NULL,
+        FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+        FOREIGN KEY (site_id) REFERENCES sites(id) ON DELETE CASCADE
+      )
+    `);
+  } finally {
+    conn.release();
+  }
+}
+
+initDB().catch(console.error);
+
+function generateLicenseKey() {
+  const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
+  const segments = [];
+  for (let s = 0; s < 4; s++) {
+    let seg = '';
+    for (let i = 0; i < 5; i++) seg += chars[Math.floor(Math.random() * chars.length)];
+    segments.push(seg);
+  }
+  return `WAB-${segments.join('-')}`;
+}
+
+function generateApiKey() {
+  return `wab_${uuidv4().replace(/-/g, '')}`;
+}
+
+// ─── User Operations ──────────────────────────────────────────────────
+async function registerUser({ email, password, name, company }) {
+  const id = uuidv4();
+  const hashed = bcrypt.hashSync(password, 12);
+  await pool.execute(
+    'INSERT INTO users (id, email, password, name, company) VALUES (?, ?, ?, ?, ?)',
+    [id, email, hashed, name, company || null]
+  );
+  return { id, email, name, company };
+}
+
+async function loginUser({ email, password }) {
+  const [rows] = await pool.execute('SELECT * FROM users WHERE email = ?', [email]);
+  const user = rows[0];
+  if (!user) return null;
+  if (!bcrypt.compareSync(password, user.password)) return null;
+  return { id: user.id, email: user.email, name: user.name, company: user.company };
+}
+
+// ─── Site Operations ──────────────────────────────────────────────────
+async function addSite({ userId, domain, name, description, tier }) {
+  const id = uuidv4();
+  const licenseKey = generateLicenseKey();
+  const apiKey = generateApiKey();
+  const config = JSON.stringify({
+    agentPermissions: { readContent: true, click: true, fillForms: false, scroll: true, navigate: false, apiAccess: false, automatedLogin: false, extractData: false },
+    features: { advancedAnalytics: false, realTimeUpdates: false },
+    restrictions: { allowedSelectors: [], blockedSelectors: ['.private', '[data-private]'], rateLimit: { maxCallsPerMinute: 60 } },
+    logging: { enabled: false, level: 'basic' }
+  });
+  await pool.execute(
+    'INSERT INTO sites (id, user_id, domain, name, description, tier, license_key, api_key, config) VALUES (?,?,?,?,?,?,?,?,?)',
+    [id, userId, domain, name, description || '', tier || 'free', licenseKey, apiKey, config]
+  );
+  return { id, domain, name, licenseKey, apiKey, tier: tier || 'free' };
+}
+
+// ─── Analytics ────────────────────────────────────────────────────────
+async function recordAnalytic({ siteId, actionName, agentId, triggerType, success, metadata }) {
+  await pool.execute(
+    'INSERT INTO analytics (site_id, action_name, agent_id, trigger_type, success, metadata) VALUES (?,?,?,?,?,?)',
+    [siteId, actionName, agentId || null, triggerType || null, success ? 1 : 0, JSON.stringify(metadata || {})]
+  );
+}
+
+// ─── License Verification ─────────────────────────────────────────────
+async function verifyLicense(domain, licenseKey) {
+  const [rows] = await pool.execute(
+    'SELECT * FROM sites WHERE domain = ? AND license_key = ? AND active = TRUE', [domain, licenseKey]
+  );
+  const site = rows[0];
+  if (!site) {
+    const [byKey] = await pool.execute('SELECT * FROM sites WHERE license_key = ? AND active = TRUE', [licenseKey]);
+    if (byKey[0]) return { valid: false, error: 'Domain mismatch', tier: 'free' };
+    return { valid: false, error: 'Invalid license key', tier: 'free' };
+  }
+
+  const tierPermissions = {
+    free: { apiAccess: false, automatedLogin: false, extractData: false, advancedAnalytics: false },
+    starter: { apiAccess: false, automatedLogin: true, extractData: false, advancedAnalytics: true },
+    pro: { apiAccess: true, automatedLogin: true, extractData: true, advancedAnalytics: true },
+    enterprise: { apiAccess: true, automatedLogin: true, extractData: true, advancedAnalytics: true }
+  };
+
+  const config = typeof site.config === 'string' ? JSON.parse(site.config) : site.config;
+  return {
+    valid: true,
+    tier: site.tier,
+    permissions: { ...config.agentPermissions, ...tierPermissions[site.tier] },
+    restrictions: config.restrictions,
+    features: config.features,
+    siteId: site.id
+  };
+}
+
+module.exports = {
+  registerUser,
+  loginUser,
+  addSite,
+  recordAnalytic,
+  verifyLicense,
+  pool
+};