Integration: team platform-updates + redesign + free-model

AGENTS.md

@@ -0,0 +1,41 @@
+# TravelorAI — Agent Rules (Codex, Claude, etc.)
+
+**READ THIS FIRST. These rules are mandatory for all AI agents working in this repo.**
+
+## 1. Git: which code is current
+
+- The source of truth is the **`integration/full-merge`** branch (mirrored to local `main`).
+- **Before ANY work:** `git fetch origin && git log --oneline -3 origin/integration/full-merge` — make sure your working tree contains those commits. If your checkout is behind, **STOP and update first**. Working on a stale base has already destroyed a day of work once.
+- Never commit directly to `main` (it is protected on GitHub; changes go through PR).
+- Do not leave work uncommitted. Commit to a feature branch and push.
+
+## 2. Architecture facts (do not regress these)
+
+- **Website agency portal is multi-page (portal v2):** `app/agency/{page,leads,tours,tours/new,tours/[id],profile}` + `components/agency/{AgencyShell,AuthScreen,OnboardingScreen,TourEditor,LeadsBoard,...}` + `lib/agency/{api,session,types}`.
+  - `components/agency/AgencyPortal.tsx` (old 1500-line monolith) is **DELETED**. Never recreate or edit it.
+- **Admin panel is multi-page:** `app/admin/{page,moderation,leads,agencies,places,stories,hero}` with `components/admin/AdminShell`. `LandingContentAdmin.tsx` is orphaned — do not extend it.
+- Backend `server.js` uses `dotenv {override:true}`; runtime secrets live in the container's `/app/.env` (Google client allowlist, company SMTP). Do not remove.
+- Agency Google login: backend route `POST /agency/auth/google` + `googleAuthSchema` + `AgencyAccount.googleId` — required for the website Google button.
+
+## 3. Production deploy (178.18.245.174) — STRICT
+
+- **Containers run under PODMAN**: `travelorai_website` (port 3100), `voyageai_backend` (4000). Postgres+redis run under snap-docker (moby) — do not touch.
+- **NEVER create new containers, never `docker run`/`compose up` new instances.** The `docker` CLI on the server is symlinked to podman. Creating a second container on the same port causes a restart-policy port war that silently swallows deploys (this happened on 2026-06-12 and wiped live fixes).
+- Correct website deploy:
+  1. `podman cp <src.tar.gz> travelorai_website:/tmp/` then `podman exec travelorai_website sh -c "cd /app && tar xzf /tmp/src.tar.gz"`
+  2. Build inside: `podman exec -e NODE_ENV=production -e NEXT_PUBLIC_SITE_URL=https://travelorai.com -e NEXT_PUBLIC_API_URL=https://travelorai.com/api/v1 -e NEXT_PUBLIC_GOOGLE_WEB_CLIENT_ID=401741517790-11c61fghvchvld521kdi0fu4ee1mo2af.apps.googleusercontent.com travelorai_website sh -c "cd /app && node node_modules/next/dist/bin/next build"`
+  3. `podman restart travelorai_website`
+  4. Also sync the same files to `/opt/voyageai/website/` (host copy for future image builds).
+- Correct backend deploy: same pattern with `voyageai_backend`; run `npx prisma generate && npx prisma migrate deploy` inside the container before restart. Keep `/app/.env` intact.
+- After deploy ALWAYS verify: `curl -s localhost:4000/api/v1/health`, key pages return 200, and `podman ps` + `ctr -a /run/snap.docker/containerd/containerd.sock -n moby tasks list` show no duplicate port holders.
+- `NEXT_PUBLIC_GOOGLE_WEB_CLIENT_ID` must be `401741517790-11c61f...` (NOT `65326209075-...` — that project is inaccessible).
+
+## 4. Mobile
+
+- Expo bare workflow. JS-only changes ship via OTA: `npx eas update --channel production --platform android -m "msg"` (runtimeVersion must stay `1.0.7` unless a new binary is released).
+- Release AAB: `eas build -p android --profile production` (EAS keystore == Play upload key). versionCode is local-source in `android/app/build.gradle` — bump it for every Play upload.
+- Never run local Gradle release builds — the upload keystore is EAS-managed.
+
+## 5. Language & product
+
+- UI text in Uzbek only (no i18n yet — explicit product decision). Free lead model: no payments, no commissions; booking must work for guests (name+phone, no forced auth).

backend/app.js

@@ -291,7 +291,7 @@ app.use('/uploads', express.static(path.join(__dirname, 'uploads'), {
   fallthrough: false,
   maxAge: process.env.NODE_ENV === 'production' ? '30d' : 0,
 }));
-app.use(express.json({ limit: '12mb' }));
+app.use(express.json({ limit: '16mb' }));
 app.use(loggerMiddleware);
 
 app.get(['/account-deletion', '/delete-account'], (req, res) => {

backend/package.json

@@ -12,6 +12,7 @@
     "test": "jest --coverage --passWithNoTests"
   },
   "dependencies": {
+    "@anthropic-ai/sdk": "^0.104.1",
     "@prisma/client": "^5.7.0",
     "axios": "^1.6.2",
     "bcryptjs": "^2.4.3",

backend/prisma/migrations/20260601120000_agency_telegram/migration.sql

@@ -0,0 +1,5 @@
+-- Add telegram contact handle for tour agencies (free user↔agency connection)
+ALTER TABLE "TourAgency" ADD COLUMN "telegram" TEXT;
+
+-- Email is now optional for tour booking leads (phone OR email is enough)
+ALTER TABLE "TourBooking" ALTER COLUMN "customerEmail" DROP NOT NULL;

backend/prisma/migrations/20260607170000_agency_email_images_booking_deadline/migration.sql

@@ -0,0 +1,25 @@
+ALTER TYPE "AuthCodeType" ADD VALUE IF NOT EXISTS 'EMAIL_CHANGE';
+
+ALTER TABLE "AgencyAccount"
+  ADD COLUMN IF NOT EXISTS "pendingEmail" TEXT,
+  ADD COLUMN IF NOT EXISTS "emailChangeResendCount" INTEGER NOT NULL DEFAULT 0,
+  ADD COLUMN IF NOT EXISTS "emailChangeRequestedAt" TIMESTAMP(3);
+
+CREATE UNIQUE INDEX IF NOT EXISTS "AgencyAccount_pendingEmail_key"
+  ON "AgencyAccount"("pendingEmail");
+
+ALTER TABLE "AgencyApplication"
+  ADD COLUMN IF NOT EXISTS "imageUrl" TEXT;
+
+ALTER TABLE "Tour"
+  ADD COLUMN IF NOT EXISTS "responseTimeMinutes" INTEGER NOT NULL DEFAULT 45;
+
+ALTER TABLE "TourBooking"
+  ADD COLUMN IF NOT EXISTS "responseDeadlineAt" TIMESTAMP(3);
+
+UPDATE "TourBooking" AS booking
+SET "responseDeadlineAt" =
+  booking."createdAt" + make_interval(mins => COALESCE(tour."responseTimeMinutes", 45))
+FROM "Tour" AS tour
+WHERE booking."tourId" = tour."id"
+  AND booking."responseDeadlineAt" IS NULL;

backend/prisma/migrations/20260607193000_user_email_change_account_delete_codes/migration.sql

@@ -0,0 +1,10 @@
+ALTER TYPE "AuthCodeType" ADD VALUE IF NOT EXISTS 'ACCOUNT_DELETE';
+
+ALTER TABLE "User"
+ADD COLUMN "pendingEmail" TEXT,
+ADD COLUMN "emailChangeResendCount" INTEGER NOT NULL DEFAULT 0,
+ADD COLUMN "emailChangeRequestedAt" TIMESTAMP(3),
+ADD COLUMN "accountDeleteResendCount" INTEGER NOT NULL DEFAULT 0,
+ADD COLUMN "accountDeleteRequestedAt" TIMESTAMP(3);
+
+CREATE UNIQUE INDEX "User_pendingEmail_key" ON "User"("pendingEmail");

backend/prisma/migrations/20260612100000_publish_approved_agency_tours/migration.sql

@@ -0,0 +1,40 @@
+-- Backfill older approved agency tours so the mobile/home public APIs can see them.
+UPDATE "TourAgency"
+SET
+  "active" = TRUE,
+  "approvedAt" = COALESCE("approvedAt", "updatedAt"),
+  "rejectedAt" = NULL
+WHERE "approvalStatus" = 'approved';
+
+UPDATE "Tour"
+SET
+  "active" = TRUE,
+  "badge" = CASE
+    WHEN lower(COALESCE("badge", '')) = 'popular' THEN 'Popular'
+    ELSE 'Latest'
+  END,
+  "approvedAt" = COALESCE("approvedAt", "updatedAt"),
+  "rejectedAt" = NULL
+WHERE "approvalStatus" = 'approved';
+
+UPDATE "TourAgency" AS agency
+SET "toursCount" = counts."approvedCount"
+FROM (
+  SELECT "agencyId", COUNT(*)::INTEGER AS "approvedCount"
+  FROM "Tour"
+  WHERE "agencyId" IS NOT NULL
+    AND "active" = TRUE
+    AND "approvalStatus" = 'approved'
+  GROUP BY "agencyId"
+) AS counts
+WHERE agency."id" = counts."agencyId";
+
+UPDATE "TourAgency" AS agency
+SET "toursCount" = 0
+WHERE NOT EXISTS (
+  SELECT 1
+  FROM "Tour" AS tour
+  WHERE tour."agencyId" = agency."id"
+    AND tour."active" = TRUE
+    AND tour."approvalStatus" = 'approved'
+);

backend/prisma/migrations/20260612101500_backfill_tour_images/migration.sql

@@ -0,0 +1,17 @@
+-- Ensure approved tours without uploaded covers still render with a useful image in mobile/web.
+UPDATE "Tour"
+SET "imageUrl" = 'https://images.unsplash.com/photo-1512453979798-5ea266f8880c?auto=format&fit=crop&w=1400&q=80'
+WHERE "approvalStatus" = 'approved'
+  AND ("imageUrl" IS NULL OR trim("imageUrl") = '')
+  AND (
+    lower(COALESCE("title", '')) LIKE '%dubai%'
+    OR lower(COALESCE("title", '')) LIKE '%dubay%'
+    OR lower(COALESCE("city", '')) LIKE '%dubai%'
+    OR lower(COALESCE("city", '')) LIKE '%dubay%'
+    OR lower(COALESCE("city", '')) LIKE '%uae%'
+  );
+
+UPDATE "Tour"
+SET "imageUrl" = 'https://images.unsplash.com/photo-1469854523086-cc02fe5d8800?auto=format&fit=crop&w=1400&q=80'
+WHERE "approvalStatus" = 'approved'
+  AND ("imageUrl" IS NULL OR trim("imageUrl") = '');

backend/prisma/migrations/20260612103000_tour_package_details/migration.sql

@@ -0,0 +1,37 @@
+-- Structured package details for agency tours. All new fields are nullable/defaulted
+-- so existing tours stay intact and can be completed later from the agency panel.
+ALTER TABLE "Tour"
+  ADD COLUMN IF NOT EXISTS "priceCurrency" TEXT,
+  ADD COLUMN IF NOT EXISTS "priceBasis" TEXT,
+  ADD COLUMN IF NOT EXISTS "departureCity" TEXT,
+  ADD COLUMN IF NOT EXISTS "destinationCountry" TEXT,
+  ADD COLUMN IF NOT EXISTS "tourGroup" TEXT,
+  ADD COLUMN IF NOT EXISTS "nights" INTEGER,
+  ADD COLUMN IF NOT EXISTS "hotelIncluded" BOOLEAN NOT NULL DEFAULT FALSE,
+  ADD COLUMN IF NOT EXISTS "hotelName" TEXT,
+  ADD COLUMN IF NOT EXISTS "hotelCategory" TEXT,
+  ADD COLUMN IF NOT EXISTS "hotelLocation" TEXT,
+  ADD COLUMN IF NOT EXISTS "roomType" TEXT,
+  ADD COLUMN IF NOT EXISTS "mealPlan" TEXT,
+  ADD COLUMN IF NOT EXISTS "mealPlanLabel" TEXT,
+  ADD COLUMN IF NOT EXISTS "childPolicy" TEXT,
+  ADD COLUMN IF NOT EXISTS "flightSeatStatus" TEXT,
+  ADD COLUMN IF NOT EXISTS "availabilityStatus" TEXT,
+  ADD COLUMN IF NOT EXISTS "instantConfirmation" BOOLEAN NOT NULL DEFAULT FALSE,
+  ADD COLUMN IF NOT EXISTS "stopSale" BOOLEAN NOT NULL DEFAULT FALSE,
+  ADD COLUMN IF NOT EXISTS "promo" BOOLEAN NOT NULL DEFAULT FALSE,
+  ADD COLUMN IF NOT EXISTS "priceIncludes" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[],
+  ADD COLUMN IF NOT EXISTS "priceExcludes" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[];
+
+UPDATE "Tour"
+SET
+  "priceIncludes" = COALESCE("priceIncludes", ARRAY[]::TEXT[]),
+  "priceExcludes" = COALESCE("priceExcludes", ARRAY[]::TEXT[]),
+  "hotelIncluded" = COALESCE("hotelIncluded", FALSE),
+  "instantConfirmation" = COALESCE("instantConfirmation", FALSE),
+  "stopSale" = COALESCE("stopSale", FALSE),
+  "promo" = COALESCE("promo", FALSE);
+
+CREATE INDEX IF NOT EXISTS "Tour_mealPlan_idx" ON "Tour"("mealPlan");
+CREATE INDEX IF NOT EXISTS "Tour_hotelCategory_idx" ON "Tour"("hotelCategory");
+CREATE INDEX IF NOT EXISTS "Tour_availabilityStatus_idx" ON "Tour"("availabilityStatus");

backend/prisma/migrations/20260613090000_agency_google_id/migration.sql

@@ -0,0 +1,3 @@
+-- AgencyAccount.googleId (prod DB da allaqachon bor bo'lishi mumkin)
+ALTER TABLE "AgencyAccount" ADD COLUMN IF NOT EXISTS "googleId" TEXT;
+CREATE UNIQUE INDEX IF NOT EXISTS "AgencyAccount_googleId_key" ON "AgencyAccount"("googleId");

backend/prisma/migrations/20260613110000_user_push_token/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE "User" ADD COLUMN IF NOT EXISTS "expoPushToken" TEXT;

backend/prisma/migrations/20260616100000_tour_v2_fields/migration.sql

@@ -0,0 +1,7 @@
+-- Tour form v2: from/to dropdowns, nights+days, hotel/flight checkboxes, discount, price basis people, price lock
+ALTER TABLE "Tour" ADD COLUMN IF NOT EXISTS "days" INTEGER;
+ALTER TABLE "Tour" ADD COLUMN IF NOT EXISTS "flightIncluded" BOOLEAN NOT NULL DEFAULT false;
+ALTER TABLE "Tour" ADD COLUMN IF NOT EXISTS "discount" TEXT;
+ALTER TABLE "Tour" ADD COLUMN IF NOT EXISTS "priceBasisPeople" INTEGER;
+ALTER TABLE "Tour" ADD COLUMN IF NOT EXISTS "priceLockMinutes" INTEGER;
+ALTER TABLE "Tour" ADD COLUMN IF NOT EXISTS "priceLockUntil" TIMESTAMP(3);