v0.9.88 major change sqlite to postgres

frontend/src/App.jsx

@@ -5,6 +5,7 @@ import { ToastProvider } from './contexts/ToastContext.jsx';
 import Login from './pages/Login.jsx';
 import Chat from './pages/Chat.jsx';
 import ChangePassword from './pages/ChangePassword.jsx';
+import HostAdmin from './pages/HostAdmin.jsx';
 
 function ProtectedRoute({ children }) {
   const { user, loading, mustChangePassword } = useAuth();
@@ -20,7 +21,6 @@ function ProtectedRoute({ children }) {
 
 function AuthRoute({ children }) {
   const { user, loading, mustChangePassword } = useAuth();
-  // Always show login in light mode regardless of user's saved theme preference
   document.documentElement.setAttribute('data-theme', 'light');
   if (loading) return null;
   if (user && !mustChangePassword) return <Navigate to="/" replace />;
@@ -28,7 +28,6 @@ function AuthRoute({ children }) {
 }
 
 function RestoreTheme() {
-  // Called when entering a protected route — restore the user's saved theme
   const saved = localStorage.getItem('jama-theme') || 'light';
   document.documentElement.setAttribute('data-theme', saved);
   return null;
@@ -38,16 +37,24 @@ export default function App() {
   return (
     <BrowserRouter>
       <ToastProvider>
-        <AuthProvider>
-          <SocketProvider>
-            <Routes>
-              <Route path="/login" element={<AuthRoute><Login /></AuthRoute>} />
-              <Route path="/change-password" element={<ChangePassword />} />
-              <Route path="/" element={<ProtectedRoute><RestoreTheme /><Chat /></ProtectedRoute>} />
-              <Route path="*" element={<Navigate to="/" replace />} />
-            </Routes>
-          </SocketProvider>
-        </AuthProvider>
+        <Routes>
+          {/* /host renders outside AuthProvider — has its own key-based auth */}
+          <Route path="/host" element={<HostAdmin />} />
+          <Route path="/host/*" element={<HostAdmin />} />
+          {/* All other routes go through jama auth */}
+          <Route path="/*" element={
+            <AuthProvider>
+              <SocketProvider>
+                <Routes>
+                  <Route path="/login" element={<AuthRoute><Login /></AuthRoute>} />
+                  <Route path="/change-password" element={<ChangePassword />} />
+                  <Route path="/" element={<ProtectedRoute><RestoreTheme /><Chat /></ProtectedRoute>} />
+                  <Route path="*" element={<Navigate to="/" replace />} />
+                </Routes>
+              </SocketProvider>
+            </AuthProvider>
+          } />
+        </Routes>
       </ToastProvider>
     </BrowserRouter>
   );

frontend/src/components/NavDrawer.jsx

@@ -62,7 +62,7 @@ export default function NavDrawer({ open, onClose, onMessages, onSchedule, onSch
 
         {/* User section */}
         {item(NAV_ICON.messages,  'Messages',  onMessages,  { active: currentPage === 'chat' })}
-        {item(NAV_ICON.schedules, 'Schedules', onSchedule,  { active: currentPage === 'schedule' })}
+        {features.scheduleManager && item(NAV_ICON.schedules, 'Schedules', onSchedule, { active: currentPage === 'schedule' })}
 
         {/* Admin section */}
         {isAdmin && (

frontend/src/components/UserManagerModal.jsx

@@ -221,8 +221,13 @@ export default function UserManagerModal({ onClose }) {
   const fileRef = useRef(null);
   const [userPass, setUserPass] = useState('user@1234');
 
+  const [loadError, setLoadError] = useState('');
   const load = () => {
-    api.getUsers().then(({ users }) => setUsers(users)).catch(() => {}).finally(() => setLoading(false));
+    setLoadError('');
+    api.getUsers()
+      .then(({ users }) => setUsers(users))
+      .catch(e => setLoadError(e.message || 'Failed to load users'))
+      .finally(() => setLoading(false));
   };
   useEffect(() => {
     load();
@@ -305,6 +310,11 @@ export default function UserManagerModal({ onClose }) {
             <input className="input" style={{ marginBottom: 12 }} placeholder="Search users…" autoComplete="new-password" autoCorrect="off" autoCapitalize="off" spellCheck={false} value={search} onChange={e => setSearch(e.target.value)} />
             {loading ? (
               <div className="flex justify-center" style={{ padding: 40 }}><div className="spinner" /></div>
+            ) : loadError ? (
+              <div style={{ padding: 24, textAlign: 'center', color: 'var(--error)' }}>
+                <div style={{ marginBottom: 10 }}>⚠ {loadError}</div>
+                <button className="btn btn-secondary btn-sm" onClick={() => { setLoading(true); load(); }}>Retry</button>
+              </div>
             ) : (
               <div style={{ maxHeight: '60vh', overflowY: 'auto' }}>
                 {filtered.map(u => (

frontend/src/pages/HostAdmin.jsx

@@ -0,0 +1,602 @@
+import { useState, useEffect, useCallback } from 'react';
+
+// ── Constants ─────────────────────────────────────────────────────────────────
+
+const PLANS = [
+  { value: 'chat',  label: 'JAMA-Chat',  desc: 'Chat only' },
+  { value: 'brand', label: 'JAMA-Brand', desc: 'Chat + Branding' },
+  { value: 'team',  label: 'JAMA-Team',  desc: 'Chat + Branding + Groups + Schedule' },
+];
+
+const PLAN_BADGE = {
+  chat:  { bg: '#e8f0fe', color: '#1a73e8', label: 'Chat'  },
+  brand: { bg: '#fce8b2', color: '#e37400', label: 'Brand' },
+  team:  { bg: '#e6f4ea', color: '#188038', label: 'Team'  },
+};
+
+const STATUS_BADGE = {
+  active:    { bg: '#e6f4ea', color: '#188038' },
+  suspended: { bg: '#fce8b2', color: '#e37400' },
+};
+
+// ── API helpers ───────────────────────────────────────────────────────────────
+
+function useHostApi(adminKey) {
+  const call = useCallback(async (method, path, body) => {
+    const res = await fetch(`/api/host${path}`, {
+      method,
+      headers: {
+        'Content-Type': 'application/json',
+        'X-Host-Admin-Key': adminKey,
+      },
+      body: body ? JSON.stringify(body) : undefined,
+    });
+    const data = await res.json();
+    if (!res.ok) throw new Error(data.error || `HTTP ${res.status}`);
+    return data;
+  }, [adminKey]);
+
+  return {
+    getStatus:   ()         => call('GET',    '/status'),
+    getTenants:  ()         => call('GET',    '/tenants'),
+    createTenant: (body)    => call('POST',   '/tenants', body),
+    updateTenant: (slug, b) => call('PATCH',  `/tenants/${slug}`, b),
+    deleteTenant: (slug)    => call('DELETE', `/tenants/${slug}`, { confirm: `DELETE ${slug}` }),
+    suspendTenant:(slug)    => call('PATCH',  `/tenants/${slug}`, { status: 'suspended' }),
+    activateTenant:(slug)   => call('PATCH',  `/tenants/${slug}`, { status: 'active' }),
+    migrateAll:  ()         => call('POST',   '/migrate-all'),
+  };
+}
+
+// ── Small reusable components ─────────────────────────────────────────────────
+
+function Badge({ value, map }) {
+  const s = map[value] || { bg: '#f1f3f4', color: '#5f6368' };
+  return (
+    <span style={{ padding: '2px 8px', borderRadius: 12, fontSize: 11, fontWeight: 700,
+      background: s.bg, color: s.color, textTransform: 'uppercase', letterSpacing: '0.4px' }}>
+      {s.label || value}
+    </span>
+  );
+}
+
+function Btn({ onClick, children, variant = 'secondary', size = 'md', disabled, style = {} }) {
+  const base = {
+    border: 'none', borderRadius: 6, cursor: disabled ? 'not-allowed' : 'pointer',
+    fontWeight: 600, display: 'inline-flex', alignItems: 'center', gap: 6,
+    opacity: disabled ? 0.5 : 1, transition: 'opacity 0.15s',
+    padding: size === 'sm' ? '5px 12px' : '9px 18px',
+    fontSize: size === 'sm' ? 12 : 14,
+  };
+  const variants = {
+    primary:  { background: '#1a73e8', color: '#fff' },
+    danger:   { background: '#d93025', color: '#fff' },
+    warning:  { background: '#e37400', color: '#fff' },
+    success:  { background: '#188038', color: '#fff' },
+    secondary:{ background: '#f1f3f4', color: '#202124' },
+    ghost:    { background: 'transparent', color: '#5f6368', padding: size === 'sm' ? '4px 8px' : '8px 12px' },
+  };
+  return (
+    <button onClick={onClick} disabled={disabled} style={{ ...base, ...variants[variant], ...style }}>
+      {children}
+    </button>
+  );
+}
+
+function Input({ label, value, onChange, placeholder, type = 'text', required, hint, autoComplete }) {
+  return (
+    <div style={{ display: 'flex', flexDirection: 'column', gap: 4 }}>
+      {label && (
+        <label style={{ fontSize: 12, fontWeight: 600, color: '#5f6368' }}>
+          {label}{required && <span style={{ color: '#d93025', marginLeft: 2 }}>*</span>}
+        </label>
+      )}
+      <input
+        type={type} value={value} onChange={e => onChange(e.target.value)}
+        placeholder={placeholder} required={required}
+        autoComplete={autoComplete || 'new-password'} autoCorrect="off" spellCheck={false}
+        style={{ padding: '8px 10px', border: '1px solid #e0e0e0', borderRadius: 6,
+          fontSize: 14, outline: 'none', background: '#fff', color: '#202124',
+          transition: 'border-color 0.15s' }}
+        onFocus={e => e.target.style.borderColor = '#1a73e8'}
+        onBlur={e => e.target.style.borderColor = '#e0e0e0'}
+      />
+      {hint && <span style={{ fontSize: 11, color: '#9aa0a6' }}>{hint}</span>}
+    </div>
+  );
+}
+
+function Select({ label, value, onChange, options, required }) {
+  return (
+    <div style={{ display: 'flex', flexDirection: 'column', gap: 4 }}>
+      {label && <label style={{ fontSize: 12, fontWeight: 600, color: '#5f6368' }}>{label}{required && <span style={{ color: '#d93025', marginLeft: 2 }}>*</span>}</label>}
+      <select value={value} onChange={e => onChange(e.target.value)}
+        style={{ padding: '8px 10px', border: '1px solid #e0e0e0', borderRadius: 6,
+          fontSize: 14, outline: 'none', background: '#fff', color: '#202124' }}>
+        {options.map(o => <option key={o.value} value={o.value}>{o.label}{o.desc ? ` — ${o.desc}` : ''}</option>)}
+      </select>
+    </div>
+  );
+}
+
+function Modal({ title, onClose, children, width = 480 }) {
+  return (
+    <div style={{ position: 'fixed', inset: 0, background: 'rgba(0,0,0,0.4)', zIndex: 1000,
+      display: 'flex', alignItems: 'center', justifyContent: 'center', padding: 16 }}
+      onClick={e => e.target === e.currentTarget && onClose()}>
+      <div style={{ background: '#fff', borderRadius: 12, width: '100%', maxWidth: width,
+        maxHeight: '90vh', overflowY: 'auto', boxShadow: '0 8px 32px rgba(0,0,0,0.2)' }}>
+        <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between',
+          padding: '18px 24px', borderBottom: '1px solid #e0e0e0' }}>
+          <span style={{ fontWeight: 700, fontSize: 16 }}>{title}</span>
+          <button onClick={onClose} style={{ background: 'none', border: 'none', cursor: 'pointer',
+            fontSize: 20, color: '#9aa0a6', lineHeight: 1, padding: 4 }}>✕</button>
+        </div>
+        <div style={{ padding: 24 }}>{children}</div>
+      </div>
+    </div>
+  );
+}
+
+function Toast({ toasts }) {
+  return (
+    <div style={{ position: 'fixed', bottom: 24, right: 24, display: 'flex', flexDirection: 'column',
+      gap: 8, zIndex: 2000 }}>
+      {toasts.map(t => (
+        <div key={t.id} style={{ padding: '12px 18px', borderRadius: 8, fontSize: 13, fontWeight: 500,
+          background: t.type === 'error' ? '#d93025' : t.type === 'warning' ? '#e37400' : '#188038',
+          color: '#fff', boxShadow: '0 2px 8px rgba(0,0,0,0.2)', maxWidth: 360 }}>
+          {t.msg}
+        </div>
+      ))}
+    </div>
+  );
+}
+
+// ── Provision tenant modal ─────────────────────────────────────────────────────
+
+function ProvisionModal({ api, baseDomain, onClose, onDone }) {
+  const [form, setForm] = useState({
+    slug: '', name: '', plan: 'chat',
+    adminEmail: '', adminName: 'Admin User', adminPass: '',
+    customDomain: '',
+  });
+  const [saving, setSaving] = useState(false);
+  const [error, setError] = useState('');
+  const set = k => v => setForm(f => ({ ...f, [k]: v }));
+
+  const handle = async () => {
+    if (!form.slug || !form.name) return setError('Slug and name are required');
+    setSaving(true); setError('');
+    try {
+      const { tenant } = await api.createTenant({
+        slug:         form.slug.toLowerCase().trim(),
+        name:         form.name.trim(),
+        plan:         form.plan,
+        adminEmail:   form.adminEmail || undefined,
+        adminName:    form.adminName  || undefined,
+        adminPass:    form.adminPass  || undefined,
+        customDomain: form.customDomain || undefined,
+      });
+      onDone(tenant);
+    } catch (e) { setError(e.message); }
+    finally { setSaving(false); }
+  };
+
+  const preview = form.slug ? `${form.slug.toLowerCase()}.${baseDomain}` : '';
+
+  return (
+    <Modal title="Provision New Tenant" onClose={onClose} width={520}>
+      <div style={{ display: 'flex', flexDirection: 'column', gap: 16 }}>
+        {error && <div style={{ padding: '10px 14px', background: '#fce8e6', color: '#d93025',
+          borderRadius: 6, fontSize: 13 }}>{error}</div>}
+
+        <div style={{ display: 'grid', gridTemplateColumns: '1fr 1fr', gap: 12 }}>
+          <Input label="Slug" value={form.slug} onChange={set('slug')} required
+            placeholder="team-alpha"
+            hint={preview ? `URL: ${preview}` : 'Used as subdomain + schema name'} />
+          <Input label="Display Name" value={form.name} onChange={set('name')} required placeholder="Team Alpha" />
+        </div>
+
+        <Select label="Plan" value={form.plan} onChange={set('plan')} options={PLANS} required />
+
+        <div style={{ borderTop: '1px solid #e0e0e0', paddingTop: 12 }}>
+          <div style={{ fontSize: 11, fontWeight: 700, color: '#9aa0a6', textTransform: 'uppercase',
+            letterSpacing: '0.5px', marginBottom: 12 }}>First Admin User (optional — defaults to .env values)</div>
+          <div style={{ display: 'grid', gridTemplateColumns: '1fr 1fr', gap: 12 }}>
+            <Input label="Admin Email" value={form.adminEmail} onChange={set('adminEmail')}
+              placeholder="admin@teamalpha.com" type="email" />
+            <Input label="Admin Name" value={form.adminName} onChange={set('adminName')}
+              placeholder="Admin User" />
+            <Input label="Temp Password" value={form.adminPass} onChange={set('adminPass')}
+              placeholder="Auto-generated if blank" type="text" />
+          </div>
+        </div>
+
+        <div style={{ borderTop: '1px solid #e0e0e0', paddingTop: 12 }}>
+          <Input label="Custom Domain (optional)" value={form.customDomain} onChange={set('customDomain')}
+            placeholder="chat.teamalpha.com"
+            hint="Tenant can also be reached at this domain once DNS is configured" />
+        </div>
+
+        <div style={{ display: 'flex', justifyContent: 'flex-end', gap: 8, paddingTop: 4 }}>
+          <Btn onClick={onClose} variant="secondary">Cancel</Btn>
+          <Btn onClick={handle} variant="primary" disabled={saving}>
+            {saving ? 'Provisioning…' : '✦ Provision Tenant'}
+          </Btn>
+        </div>
+      </div>
+    </Modal>
+  );
+}
+
+// ── Edit tenant modal ──────────────────────────────────────────────────────────
+
+function EditModal({ api, tenant, onClose, onDone }) {
+  const [form, setForm] = useState({
+    name: tenant.name, plan: tenant.plan, customDomain: tenant.custom_domain || '',
+  });
+  const [saving, setSaving] = useState(false);
+  const [error, setError]   = useState('');
+  const set = k => v => setForm(f => ({ ...f, [k]: v }));
+
+  const handle = async () => {
+    setSaving(true); setError('');
+    try {
+      const { tenant: updated } = await api.updateTenant(tenant.slug, {
+        name: form.name || undefined,
+        plan: form.plan,
+        customDomain: form.customDomain || null,
+      });
+      onDone(updated);
+    } catch (e) { setError(e.message); }
+    finally { setSaving(false); }
+  };
+
+  return (
+    <Modal title={`Edit — ${tenant.slug}`} onClose={onClose}>
+      <div style={{ display: 'flex', flexDirection: 'column', gap: 16 }}>
+        {error && <div style={{ padding: '10px 14px', background: '#fce8e6', color: '#d93025',
+          borderRadius: 6, fontSize: 13 }}>{error}</div>}
+        <Input label="Display Name" value={form.name} onChange={set('name')} required />
+        <Select label="Plan" value={form.plan} onChange={set('plan')} options={PLANS} />
+        <Input label="Custom Domain" value={form.customDomain} onChange={set('customDomain')}
+          placeholder="chat.example.com" hint="Leave blank to remove custom domain" />
+        <div style={{ display: 'flex', justifyContent: 'flex-end', gap: 8 }}>
+          <Btn onClick={onClose} variant="secondary">Cancel</Btn>
+          <Btn onClick={handle} variant="primary" disabled={saving}>{saving ? 'Saving…' : 'Save Changes'}</Btn>
+        </div>
+      </div>
+    </Modal>
+  );
+}
+
+// ── Delete confirmation modal ──────────────────────────────────────────────────
+
+function DeleteModal({ api, tenant, onClose, onDone }) {
+  const [confirm, setConfirm] = useState('');
+  const [deleting, setDeleting] = useState(false);
+  const [error, setError] = useState('');
+  const expected = `DELETE ${tenant.slug}`;
+
+  const handle = async () => {
+    setDeleting(true); setError('');
+    try {
+      await api.deleteTenant(tenant.slug);
+      onDone(tenant.slug);
+    } catch (e) { setError(e.message); }
+    finally { setDeleting(false); }
+  };
+
+  return (
+    <Modal title="Delete Tenant" onClose={onClose}>
+      <div style={{ display: 'flex', flexDirection: 'column', gap: 16 }}>
+        <div style={{ padding: '12px 16px', background: '#fce8e6', borderRadius: 8, fontSize: 13, color: '#d93025' }}>
+          <strong>This is permanent.</strong> The tenant's Postgres schema and all data —
+          messages, events, users, uploads — will be deleted and cannot be recovered.
+        </div>
+        <div style={{ fontSize: 14, color: '#202124' }}>
+          To confirm, type <code style={{ background: '#f1f3f4', padding: '2px 6px',
+          borderRadius: 4, fontFamily: 'monospace' }}>{expected}</code> below:
+        </div>
+        {error && <div style={{ color: '#d93025', fontSize: 13 }}>{error}</div>}
+        <Input value={confirm} onChange={setConfirm} placeholder={expected} />
+        <div style={{ display: 'flex', justifyContent: 'flex-end', gap: 8 }}>
+          <Btn onClick={onClose} variant="secondary">Cancel</Btn>
+          <Btn onClick={handle} variant="danger" disabled={confirm !== expected || deleting}>
+            {deleting ? 'Deleting…' : 'Permanently Delete'}
+          </Btn>
+        </div>
+      </div>
+    </Modal>
+  );
+}
+
+// ── Tenant row ────────────────────────────────────────────────────────────────
+
+function TenantRow({ tenant, baseDomain, api, onRefresh, onToast }) {
+  const [editing, setEditing]   = useState(false);
+  const [deleting, setDeleting] = useState(false);
+  const [busy, setBusy]         = useState(false);
+  const subdomainUrl  = `https://${tenant.slug}.${baseDomain}`;
+  const url = tenant.custom_domain ? `https://${tenant.custom_domain}` : subdomainUrl;
+
+  const toggleStatus = async () => {
+    setBusy(true);
+    try {
+      if (tenant.status === 'active') await api.suspendTenant(tenant.slug);
+      else await api.activateTenant(tenant.slug);
+      onRefresh();
+      onToast(`Tenant ${tenant.slug} ${tenant.status === 'active' ? 'suspended' : 'activated'}`, 'success');
+    } catch (e) { onToast(e.message, 'error'); }
+    finally { setBusy(false); }
+  };
+
+  return (
+    <>
+      <tr style={{ borderBottom: '1px solid #e0e0e0' }}>
+        <td style={{ padding: '12px 16px' }}>
+          <div style={{ fontWeight: 600, fontSize: 14 }}>{tenant.name}</div>
+          <div style={{ fontSize: 12, color: '#9aa0a6', fontFamily: 'monospace' }}>{tenant.slug}</div>
+        </td>
+        <td style={{ padding: '12px 16px' }}>
+          <Badge value={tenant.plan} map={PLAN_BADGE} />
+        </td>
+        <td style={{ padding: '12px 16px' }}>
+          <Badge value={tenant.status} map={STATUS_BADGE} />
+        </td>
+        <td style={{ padding: '12px 16px' }}>
+          <a href={url} target="_blank" rel="noreferrer"
+            style={{ fontSize: 12, color: '#1a73e8', textDecoration: 'none' }}>
+            {url} ↗
+          </a>
+          {tenant.custom_domain && (
+            <div style={{ fontSize: 11, color: '#9aa0a6' }}>{subdomainUrl}</div>
+          )}
+        </td>
+        <td style={{ padding: '12px 16px', fontSize: 12, color: '#9aa0a6', whiteSpace: 'nowrap' }}>
+          {new Date(tenant.created_at).toLocaleDateString()}
+        </td>
+        <td style={{ padding: '12px 16px' }}>
+          <div style={{ display: 'flex', gap: 6, justifyContent: 'flex-end' }}>
+            <Btn size="sm" variant="ghost" onClick={() => setEditing(true)}>Edit</Btn>
+            <Btn size="sm" variant={tenant.status === 'active' ? 'warning' : 'success'}
+              onClick={toggleStatus} disabled={busy}>
+              {busy ? '…' : tenant.status === 'active' ? 'Suspend' : 'Activate'}
+            </Btn>
+            <Btn size="sm" variant="danger" onClick={() => setDeleting(true)}>Delete</Btn>
+          </div>
+        </td>
+      </tr>
+
+      {editing && (
+        <EditModal api={api} tenant={tenant} onClose={() => setEditing(false)}
+          onDone={() => { setEditing(false); onRefresh(); onToast('Tenant updated', 'success'); }} />
+      )}
+      {deleting && (
+        <DeleteModal api={api} tenant={tenant} onClose={() => setDeleting(false)}
+          onDone={() => { setDeleting(false); onRefresh(); onToast('Tenant deleted', 'success'); }} />
+      )}
+    </>
+  );
+}
+
+// ── Key entry screen ──────────────────────────────────────────────────────────
+
+function KeyEntry({ onSubmit }) {
+  const [key, setKey] = useState('');
+  const [error, setError] = useState('');
+
+  const handle = async () => {
+    if (!key.trim()) return setError('Admin key required');
+    setError('');
+    const res = await fetch('/api/host/status', {
+      headers: { 'X-Host-Admin-Key': key.trim() },
+    });
+    if (res.ok) {
+      sessionStorage.setItem('jama-host-key', key.trim());
+      onSubmit(key.trim());
+    } else {
+      setError('Invalid admin key');
+    }
+  };
+
+  return (
+    <div style={{ minHeight: '100vh', display: 'flex', alignItems: 'center', justifyContent: 'center',
+      background: '#f1f3f4' }}>
+      <div style={{ background: '#fff', borderRadius: 12, padding: 40, width: '100%', maxWidth: 380,
+        boxShadow: '0 2px 16px rgba(0,0,0,0.12)', textAlign: 'center' }}>
+        <div style={{ fontSize: 32, marginBottom: 8 }}>🏠</div>
+        <h1 style={{ fontSize: 20, fontWeight: 700, margin: '0 0 4px' }}>JAMA-HOST</h1>
+        <p style={{ color: '#5f6368', fontSize: 13, margin: '0 0 24px' }}>Host Administration Panel</p>
+        {error && <div style={{ padding: '8px 12px', background: '#fce8e6', color: '#d93025',
+          borderRadius: 6, fontSize: 13, marginBottom: 16 }}>{error}</div>}
+        <input
+          type="password" value={key} onChange={e => setKey(e.target.value)}
+          onKeyDown={e => e.key === 'Enter' && handle()}
+          placeholder="Host admin key" autoFocus
+          style={{ width: '100%', padding: '10px 12px', border: '1px solid #e0e0e0', borderRadius: 6,
+            fontSize: 14, outline: 'none', boxSizing: 'border-box', marginBottom: 12 }}
+        />
+        <Btn onClick={handle} variant="primary" style={{ width: '100%', justifyContent: 'center' }}>
+          Sign In
+        </Btn>
+      </div>
+    </div>
+  );
+}
+
+// ── Main host admin panel ─────────────────────────────────────────────────────
+
+export default function HostAdmin() {
+  const [adminKey, setAdminKey] = useState(() => sessionStorage.getItem('jama-host-key') || '');
+  const [status,   setStatus]   = useState(null);
+  const [tenants,  setTenants]  = useState([]);
+  const [loading,  setLoading]  = useState(false);
+  const [provisioning, setProvisioning] = useState(false);
+  const [migrating,    setMigrating]    = useState(false);
+  const [toasts,  setToasts]    = useState([]);
+  const [search,  setSearch]    = useState('');
+
+  const api = useHostApi(adminKey);
+
+  const toast = useCallback((msg, type = 'success') => {
+    const id = Date.now();
+    setToasts(t => [...t, { id, msg, type }]);
+    setTimeout(() => setToasts(t => t.filter(x => x.id !== id)), 4000);
+  }, []);
+
+  const load = useCallback(async () => {
+    setLoading(true);
+    try {
+      const [s, t] = await Promise.all([api.getStatus(), api.getTenants()]);
+      setStatus(s);
+      setTenants(t.tenants);
+    } catch (e) {
+      toast(e.message, 'error');
+      if (e.message.includes('Invalid') || e.message.includes('401')) {
+        sessionStorage.removeItem('jama-host-key');
+        setAdminKey('');
+      }
+    } finally { setLoading(false); }
+  }, [api, toast]);
+
+  useEffect(() => { if (adminKey) load(); }, [adminKey]);
+
+  const handleMigrateAll = async () => {
+    setMigrating(true);
+    try {
+      const { results } = await api.migrateAll();
+      const errors = results.filter(r => r.status === 'error');
+      if (errors.length) toast(`${errors.length} migration(s) failed — check logs`, 'error');
+      else toast(`Migrations applied to ${results.length} tenant(s)`, 'success');
+    } catch (e) { toast(e.message, 'error'); }
+    finally { setMigrating(false); }
+  };
+
+  if (!adminKey) return <KeyEntry onSubmit={setAdminKey} />;
+
+  const filtered = tenants.filter(t =>
+    !search || t.name.toLowerCase().includes(search.toLowerCase()) ||
+    t.slug.toLowerCase().includes(search.toLowerCase())
+  );
+  const baseDomain = status?.baseDomain || 'jamachat.com';
+
+  return (
+    <div style={{ minHeight: '100vh', background: '#f1f3f4', fontFamily: '-apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif' }}>
+      {/* Header */}
+      <div style={{ background: '#1a73e8', color: '#fff', padding: '0 24px' }}>
+        <div style={{ maxWidth: 1100, margin: '0 auto', display: 'flex', alignItems: 'center',
+          justifyContent: 'space-between', height: 56 }}>
+          <div style={{ display: 'flex', alignItems: 'center', gap: 10 }}>
+            <span style={{ fontSize: 20 }}>🏠</span>
+            <span style={{ fontWeight: 700, fontSize: 16 }}>JAMA-HOST</span>
+            <span style={{ opacity: 0.7, fontSize: 13 }}>/ {baseDomain}</span>
+          </div>
+          <div style={{ display: 'flex', alignItems: 'center', gap: 16 }}>
+            {status && (
+              <span style={{ fontSize: 12, opacity: 0.85 }}>
+                {status.tenants.active} active · {status.tenants.total} total
+              </span>
+            )}
+            <Btn size="sm" variant="secondary" onClick={() => { sessionStorage.removeItem('jama-host-key'); setAdminKey(''); }}>
+              Sign Out
+            </Btn>
+          </div>
+        </div>
+      </div>
+
+      {/* Main */}
+      <div style={{ maxWidth: 1100, margin: '0 auto', padding: 24 }}>
+
+        {/* Stat cards */}
+        {status && (
+          <div style={{ display: 'grid', gridTemplateColumns: 'repeat(4, 1fr)', gap: 16, marginBottom: 24 }}>
+            {[
+              { label: 'Total Tenants',  value: status.tenants.total,                     color: '#1a73e8' },
+              { label: 'Active',         value: status.tenants.active,                    color: '#188038' },
+              { label: 'Suspended',      value: status.tenants.total - status.tenants.active, color: '#e37400' },
+              { label: 'Mode',           value: status.appType,                           color: '#5f6368' },
+            ].map(s => (
+              <div key={s.label} style={{ background: '#fff', borderRadius: 10, padding: '16px 20px',
+                boxShadow: '0 1px 4px rgba(0,0,0,0.08)' }}>
+                <div style={{ fontSize: 24, fontWeight: 700, color: s.color }}>{s.value}</div>
+                <div style={{ fontSize: 12, color: '#9aa0a6', marginTop: 2 }}>{s.label}</div>
+              </div>
+            ))}
+          </div>
+        )}
+
+        {/* Toolbar */}
+        <div style={{ background: '#fff', borderRadius: 10, boxShadow: '0 1px 4px rgba(0,0,0,0.08)',
+          overflow: 'hidden' }}>
+          <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between',
+            padding: '16px 20px', borderBottom: '1px solid #e0e0e0', gap: 12, flexWrap: 'wrap' }}>
+            <div style={{ fontWeight: 700, fontSize: 15 }}>Tenants</div>
+            <div style={{ display: 'flex', gap: 8, alignItems: 'center', flex: 1, justifyContent: 'flex-end', flexWrap: 'wrap' }}>
+              <input value={search} onChange={e => setSearch(e.target.value)}
+                placeholder="Search tenants…" autoComplete="off"
+                style={{ padding: '7px 10px', border: '1px solid #e0e0e0', borderRadius: 6,
+                  fontSize: 13, outline: 'none', width: 200 }} />
+              <Btn size="sm" variant="secondary" onClick={load} disabled={loading}>
+                {loading ? '…' : '↻ Refresh'}
+              </Btn>
+              <Btn size="sm" variant="secondary" onClick={handleMigrateAll} disabled={migrating}>
+                {migrating ? 'Migrating…' : '⬆ Migrate All'}
+              </Btn>
+              <Btn size="sm" variant="primary" onClick={() => setProvisioning(true)}>
+                ✦ New Tenant
+              </Btn>
+            </div>
+          </div>
+
+          {/* Table */}
+          {loading && tenants.length === 0 ? (
+            <div style={{ padding: 40, textAlign: 'center', color: '#9aa0a6' }}>Loading…</div>
+          ) : filtered.length === 0 ? (
+            <div style={{ padding: 40, textAlign: 'center', color: '#9aa0a6' }}>
+              {search ? 'No tenants match your search.' : 'No tenants yet. Provision your first one!'}
+            </div>
+          ) : (
+            <div style={{ overflowX: 'auto' }}>
+              <table style={{ width: '100%', borderCollapse: 'collapse' }}>
+                <thead>
+                  <tr style={{ borderBottom: '2px solid #e0e0e0' }}>
+                    {['Tenant', 'Plan', 'Status', 'URL', 'Created', 'Actions'].map(h => (
+                      <th key={h} style={{ padding: '10px 16px', textAlign: h === 'Actions' ? 'right' : 'left',
+                        fontSize: 11, fontWeight: 700, color: '#9aa0a6', textTransform: 'uppercase',
+                        letterSpacing: '0.5px', whiteSpace: 'nowrap' }}>{h}</th>
+                    ))}
+                  </tr>
+                </thead>
+                <tbody>
+                  {filtered.map(t => (
+                    <TenantRow key={t.slug} tenant={t} baseDomain={baseDomain}
+                      api={api} onRefresh={load} onToast={toast} />
+                  ))}
+                </tbody>
+              </table>
+            </div>
+          )}
+        </div>
+
+        {/* Footer */}
+        <div style={{ textAlign: 'center', marginTop: 24, fontSize: 12, color: '#9aa0a6' }}>
+          JAMA-HOST Control Plane · {baseDomain}
+        </div>
+      </div>
+
+      {/* Provision modal */}
+      {provisioning && (
+        <ProvisionModal api={api} baseDomain={baseDomain} onClose={() => setProvisioning(false)}
+          onDone={tenant => {
+            setProvisioning(false);
+            load();
+            toast(`Tenant '${tenant.slug}' provisioned at https://${tenant.slug}.${baseDomain}`, 'success');
+          }} />
+      )}
+
+      <Toast toasts={toasts} />
+    </div>
+  );
+}