5 Commits

Include renames

Author	SHA1	Message	Date
mrhid6andClaude Opus 5	3a6c5ebae8	fix(admin): licence and plan features serialise as [], never null ... Free has no features, so a nil Go slice served "features": null. The portal's type said string[], called .length on it, and took the page down. The guarantee lives on a named Features type with its own MarshalJSON rather than at each of the six places a licence or plan is serialised, because the seventh is the one that would have been forgotten. Applying it at marshal time also fixes rows already holding null in Mongo, which a write-side fix alone would not. Same class, found while checking the rest: staffListInstances built its expiring filter from a nil []string, marshalling to $in: null, which Mongo rejects — so the quiet week when nothing is expiring is precisely when the staff Operations page's own query would have failed. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-26 18:10:07 +01:00
mrhid6andClaude Opus 5	a7b9af4422	feat(admin): account roles and the instance_members index ... Phase 2 created cloud instances without recording who owns them on this side, because the collection did not exist. The boot backfill reconstructs one member row per instance from the hq-sourced control-plane owner, and marks every existing customer_user an owner — they all created their own account. Backfill lives in models rather than db: db is the connection layer and models already imports it for SeedPlans, so db -> models would cycle. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-26 16:23:02 +01:00
mrhid6andClaude Opus 5	909ddb884e	feat(admin): renew a Free instance from the portal ... Available from seven days before expiry and, deliberately, at any point after it up to deletion, so the same button rescues a lapsed instance. Renewal is manual because it is the entire reclaim signal: an instance nobody renews is one nobody is using, which is what makes reaping safe. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-26 13:17:45 +01:00
mrhid6andClaude Opus 5	1836237f82	feat(admin): POST /api/instances creates a Free cloud instance ... Provisions the control-plane instance and its owner, records the admin_instances row, issues and injects a Free licence, and emails the customer where it is and when it expires. Licence issuance and email cannot fail the request. The instance exists and the customer can sign in; rolling back something they can already see would be worse than shipping it unlicensed for staff to fix. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-26 13:16:12 +01:00
mrhid6andClaude Opus 5	b8fcf89ee7	feat(admin): documents, indexes and the plan seed ... Adds admin's own documents, its unique indexes and the plan seed from shared/license. Licences are append-only -- a renewal writes a new row and supersedes the old one -- because the history is the support tool. Plans are seeded with $setOnInsert only, so a redeploy never stamps over staff edits to limits, features or Paddle IDs. admin_instances.instance_id unique is a correctness property, not an optimisation: without it two customers could both claim one self-hosted UUID and both be issued licences for it. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-25 19:00:37 +01:00