feat: admin 4-feature upgrade + Aurora UI redesign

Cloud Gateway:
- Model-level plan access control (allowed_plans per model in registry)
- Credit packages moved from hardcode to DB with admin CRUD
- User detail drill-down modal (transactions/requests/model breakdown)
- Announcement system (DB-backed, served to desktop via /account/announcement)
- Admin frontend full Aurora dark UI (glassmorphism, purple/cyan/green palette,
  animated gradient mesh background, Fira Sans/Code typography)

Migrations:
- 006: ALTER model_registry ADD allowed_plans text[]
- 007: CREATE credit_packages table + seed
- 008: CREATE announcements table

Desktop:
- api.ts: cloudGetAnnouncement()
- App.tsx: fetch + display cloud announcements as AlertBanner

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: createpjf

apps/cloud-gateway/admin/index.html

@@ -0,0 +1,7 @@
+-- ---------------------------------------------------------------------------
+-- Migration 006: Add allowed_plans to model_registry
+-- Allows per-model plan access control (free / pro / all)
+-- ---------------------------------------------------------------------------
+
+ALTER TABLE model_registry
+  ADD COLUMN IF NOT EXISTS allowed_plans text[] NOT NULL DEFAULT ARRAY['all'];

apps/cloud-gateway/migrations/006_model_plan_access.sql

@@ -0,0 +1,22 @@
+-- ---------------------------------------------------------------------------
+-- Migration 007: DB-backed credit packages
+-- Moves CREDIT_PACKAGES from hardcoded code to database
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS credit_packages (
+  id               text PRIMARY KEY,
+  polar_product_id text NOT NULL DEFAULT '',
+  amount_cents     int  NOT NULL,
+  credits_cents    int  NOT NULL,
+  label            text NOT NULL,
+  bonus            text,
+  is_active        boolean NOT NULL DEFAULT true,
+  sort_order       int  NOT NULL DEFAULT 0,
+  created_at       timestamptz DEFAULT now()
+);
+
+-- Seed initial data (update polar_product_id via admin after migration)
+INSERT INTO credit_packages (id, polar_product_id, amount_cents, credits_cents, label, bonus, is_active, sort_order) VALUES
+  ('credits_5',  '', 500,  500,  '$5',  NULL,   true, 0),
+  ('credits_20', '', 2000, 2200, '$20', '+10%', true, 1)
+ON CONFLICT DO NOTHING;

apps/cloud-gateway/migrations/007_credit_packages.sql

@@ -0,0 +1,17 @@
+-- ---------------------------------------------------------------------------
+-- Migration 008: Announcements system
+-- Admin-managed banners displayed to desktop users
+-- ---------------------------------------------------------------------------
+
+CREATE TABLE IF NOT EXISTS announcements (
+  id         uuid PRIMARY KEY DEFAULT gen_random_uuid(),
+  title      text NOT NULL,
+  message    text NOT NULL,
+  type       text NOT NULL DEFAULT 'info',  -- info | warning | error
+  starts_at  timestamptz DEFAULT now(),
+  ends_at    timestamptz,
+  is_active  boolean NOT NULL DEFAULT true,
+  created_at timestamptz DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_announcements_active ON announcements (is_active, starts_at, ends_at);

apps/cloud-gateway/migrations/008_announcements.sql

@@ -372,6 +372,111 @@ export async function adjustUserBalance(
   return result;
 }
 
+// ── User detail (single user) ─────────────────────────────────────────────
+
+export async function getAdminUser(userId: string) {
+  const [row] = await sql`
+    SELECT
+      u.id, u.email, u.display_name, u.plan, u.created_at, u.updated_at,
+      COALESCE(c.balance_cents, 0) AS balance_cents,
+      COALESCE(c.total_deposited_cents, 0) AS total_deposited_cents,
+      COALESCE(c.total_used_cents, 0) AS total_used_cents,
+      (SELECT COUNT(*)::int FROM requests WHERE user_id = u.id) AS request_count,
+      (SELECT COUNT(*)::int FROM transactions WHERE user_id = u.id) AS transaction_count
+    FROM users u
+    LEFT JOIN credits c ON c.user_id = u.id
+    WHERE u.id = ${userId}
+  `;
+  if (!row) return null;
+  return {
+    id: row.id,
+    email: row.email,
+    displayName: row.display_name,
+    plan: row.plan,
+    createdAt: row.created_at,
+    updatedAt: row.updated_at,
+    balanceCents: row.balance_cents,
+    totalDepositedCents: row.total_deposited_cents,
+    totalUsedCents: row.total_used_cents,
+    requestCount: row.request_count,
+    transactionCount: row.transaction_count,
+  };
+}
+
+export async function getUserTransactions(userId: string, limit = 50, offset = 0) {
+  const rows = await sql`
+    SELECT
+      id, type, amount_cents, balance_after_cents, description, payment_ref, model, created_at,
+      COUNT(*) OVER() AS total_count
+    FROM transactions
+    WHERE user_id = ${userId}
+    ORDER BY created_at DESC
+    LIMIT ${limit} OFFSET ${offset}
+  `;
+  const total = rows.length > 0 ? Number(rows[0].total_count) : 0;
+  return {
+    transactions: rows.map((r) => ({
+      id: r.id,
+      type: r.type,
+      amountCents: r.amount_cents,
+      balanceAfterCents: r.balance_after_cents,
+      description: r.description,
+      paymentRef: r.payment_ref,
+      model: r.model,
+      createdAt: r.created_at,
+    })),
+    total,
+  };
+}
+
+export async function getUserRequests(userId: string, limit = 50, offset = 0) {
+  const rows = await sql`
+    SELECT
+      id, model, provider, input_tokens, output_tokens, cost_cents, latency_ms, status, created_at,
+      COUNT(*) OVER() AS total_count
+    FROM requests
+    WHERE user_id = ${userId}
+    ORDER BY created_at DESC
+    LIMIT ${limit} OFFSET ${offset}
+  `;
+  const total = rows.length > 0 ? Number(rows[0].total_count) : 0;
+  return {
+    requests: rows.map((r) => ({
+      id: r.id,
+      model: r.model,
+      provider: r.provider,
+      inputTokens: r.input_tokens,
+      outputTokens: r.output_tokens,
+      costCents: r.cost_cents,
+      latencyMs: r.latency_ms,
+      status: r.status,
+      createdAt: r.created_at,
+    })),
+    total,
+  };
+}
+
+export async function getUserModelBreakdown(userId: string, days = 30) {
+  const rows = await sql`
+    SELECT
+      model,
+      COUNT(*)::int AS requests,
+      COALESCE(SUM(cost_cents), 0)::int AS cost_cents,
+      COALESCE(SUM(input_tokens + output_tokens), 0)::bigint AS total_tokens
+    FROM requests
+    WHERE user_id = ${userId}
+      AND created_at >= CURRENT_DATE - make_interval(days => ${days})
+    GROUP BY model
+    ORDER BY requests DESC
+  `;
+  return rows.map((r) => ({
+    model: r.model,
+    requests: r.requests,
+    costCents: r.cost_cents,
+    totalTokens: Number(r.total_tokens),
+  }));
+}
+
 // ── Recent referral claims ───────────────────────────────────────────────
 
 export async function getAdminRecentReferralClaims(limit = 50) {

apps/cloud-gateway/src/lib/admin-queries.ts

@@ -35,6 +35,8 @@ export interface ModelRegistryEntry {
 
   isFlockNode: boolean;
 
+  allowedPlans: string[];
+
   createdAt: Date;
   updatedAt: Date;
 }
@@ -64,6 +66,7 @@ function rowToEntry(r: Record<string, unknown>): ModelRegistryEntry {
     priceInput: r.price_input as number,
     priceOutput: r.price_output as number,
     isFlockNode: r.is_flock_node as boolean,
+    allowedPlans: (r.allowed_plans as string[]) ?? ["all"],
     createdAt: r.created_at as Date,
     updatedAt: r.updated_at as Date,
   };
@@ -104,13 +107,14 @@ export async function createModel(data: {
   priceInput?: number;
   priceOutput?: number;
   isFlockNode?: boolean;
+  allowedPlans?: string[];
 }): Promise<ModelRegistryEntry> {
   const [row] = await sql`
     INSERT INTO model_registry (
       model_id, display_name, provider, status, tier,
       quality, speed, cost_efficiency, code_strength,
       supports_vision, supports_function_call, supports_long_context, chinese_optimized,
-      max_context_tokens, avg_ttft_ms, price_input, price_output, is_flock_node
+      max_context_tokens, avg_ttft_ms, price_input, price_output, is_flock_node, allowed_plans
     ) VALUES (
       ${data.modelId},
       ${data.displayName},
@@ -129,7 +133,8 @@ export async function createModel(data: {
       ${data.avgTtftMs ?? 500},
       ${data.priceInput ?? 1.0},
       ${data.priceOutput ?? 3.0},
-      ${data.isFlockNode ?? false}
+      ${data.isFlockNode ?? false},
+      ${data.allowedPlans ?? ["all"]}
     )
     RETURNING *
   `;
@@ -156,6 +161,7 @@ export async function updateModel(
     priceInput: number;
     priceOutput: number;
     isFlockNode: boolean;
+    allowedPlans: string[];
   }>,
 ): Promise<ModelRegistryEntry | null> {
   // Map camelCase keys to snake_case DB columns
@@ -177,6 +183,7 @@ export async function updateModel(
     priceInput: "price_input",
     priceOutput: "price_output",
     isFlockNode: "is_flock_node",
+    allowedPlans: "allowed_plans",
   };
 
   // Build a single atomic UPDATE with all changed fields

apps/cloud-gateway/src/lib/model-registry.ts

@@ -4,6 +4,7 @@
 
 import { Polar } from "@polar-sh/sdk";
 import { validateEvent, WebhookVerificationError } from "@polar-sh/sdk/webhooks";
+import { sql } from "./db-cloud";
 
 const POLAR_ACCESS_TOKEN = process.env.POLAR_ACCESS_TOKEN;
 const POLAR_WEBHOOK_SECRET = process.env.POLAR_WEBHOOK_SECRET;
@@ -33,25 +34,65 @@ export interface CreditPackage {
   credits: number;     // credits added in cents
   label: string;
   bonus?: string;
+  isActive?: boolean;
+  sortOrder?: number;
 }
 
-export const CREDIT_PACKAGES: CreditPackage[] = [
-  {
-    id: "credits_5",
-    polarProductId: process.env.POLAR_PRODUCT_CREDIT_5 ?? "",
-    amount: 500,
-    credits: 500,
-    label: "$5",
-  },
-  {
-    id: "credits_20",
-    polarProductId: process.env.POLAR_PRODUCT_CREDIT_20 ?? "",
-    amount: 2000,
-    credits: 2200,
-    label: "$20",
-    bonus: "+10%",
-  },
-];
+// ---------------------------------------------------------------------------
+// DB-backed credit packages (replaces hardcoded CREDIT_PACKAGES)
+// ---------------------------------------------------------------------------
+
+let _packagesCache: CreditPackage[] | null = null;
+
+export async function loadCreditPackages(): Promise<CreditPackage[]> {
+  if (_packagesCache) return _packagesCache;
+
+  try {
+    const rows = await sql`
+      SELECT id, polar_product_id, amount_cents, credits_cents, label, bonus, is_active, sort_order
+      FROM credit_packages
+      ORDER BY sort_order, id
+    `;
+    _packagesCache = rows.map((r) => ({
+      id: r.id as string,
+      polarProductId: r.polar_product_id as string,
+      amount: r.amount_cents as number,
+      credits: r.credits_cents as number,
+      label: r.label as string,
+      bonus: r.bonus as string | undefined,
+      isActive: r.is_active as boolean,
+      sortOrder: r.sort_order as number,
+    }));
+  } catch {
+    // Fallback to env-var defaults if table not yet migrated
+    _packagesCache = [
+      {
+        id: "credits_5",
+        polarProductId: process.env.POLAR_PRODUCT_CREDIT_5 ?? "",
+        amount: 500,
+        credits: 500,
+        label: "$5",
+        isActive: true,
+        sortOrder: 0,
+      },
+      {
+        id: "credits_20",
+        polarProductId: process.env.POLAR_PRODUCT_CREDIT_20 ?? "",
+        amount: 2000,
+        credits: 2200,
+        label: "$20",
+        bonus: "+10%",
+        isActive: true,
+        sortOrder: 1,
+      },
+    ];
+  }
+  return _packagesCache;
+}
+
+export function reloadCreditPackages(): void {
+  _packagesCache = null;
+}
 
 // ---------------------------------------------------------------------------
 // Subscription plans — monthly subscriptions with reduced markup
@@ -99,7 +140,8 @@ export async function createCheckoutSession(
   _email: string,
   packageId: string,
 ) {
-  const pkg = CREDIT_PACKAGES.find((p) => p.id === packageId);
+  const packages = await loadCreditPackages();
+  const pkg = packages.find((p) => p.id === packageId && p.isActive !== false);
   if (!pkg) throw new Error(`Invalid package: ${packageId}`);
   if (!pkg.polarProductId) throw new Error(`Polar product ID not configured for ${packageId}`);
 

apps/cloud-gateway/src/lib/polar.ts

@@ -6,6 +6,7 @@ import { Hono } from "hono";
 import { getUserById } from "../lib/users";
 import { getBalance, getTransactions } from "../lib/credits";
 import { getOrCreateReferralCode } from "../lib/referrals";
+import { sql } from "../lib/db-cloud";
 import type { CloudEnv } from "../types";
 
 const app = new Hono<CloudEnv>();
@@ -62,4 +63,31 @@ app.get("/referral", async (c) => {
   return c.json(referral);
 });
 
+// ── GET /announcement — current active announcement (if any) ─────────────────
+
+app.get("/announcement", async (c) => {
+  const [row] = await sql`
+    SELECT id, title, message, type, starts_at, ends_at
+    FROM announcements
+    WHERE is_active = true
+      AND starts_at <= now()
+      AND (ends_at IS NULL OR ends_at > now())
+    ORDER BY created_at DESC
+    LIMIT 1
+  `;
+
+  if (!row) return c.json({ announcement: null });
+
+  return c.json({
+    announcement: {
+      id: row.id,
+      title: row.title,
+      message: row.message,
+      type: row.type,
+      startsAt: row.starts_at,
+      endsAt: row.ends_at,
+    },
+  });
+});
+
 export default app;