🎨 Palette: Add password visibility toggle to login page

.Jules/palette.md

@@ -0,0 +1,3 @@
+## 2025-02-20 - Password Visibility Toggle
+**Learning:** Adding a password visibility toggle is a high-value micro-UX improvement for login forms, especially on mobile. Using MUI's `InputAdornment` and `IconButton` with `Visibility/VisibilityOff` icons makes this easy and consistent with the design system. Crucially, `onMouseDown={e => e.preventDefault()}` is needed to prevent focus loss from the input field when clicking the toggle.
+**Action:** Always verify keyboard accessibility and focus management when adding interactive elements inside form fields.

.github/workflows/weekly-backup.yml

@@ -0,0 +1,15 @@
+name: Weekly Database Backup
+on:
+  schedule:
+    - cron: '0 0 * * 0' # Every Sunday at midnight UTC
+  workflow_dispatch: # Allow manual trigger from GitHub Actions tab
+
+jobs:
+  run-backup:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger Backup API
+        run: |
+          curl -X POST ${{ secrets.APP_URL }}/api/admin/backup \
+          -H "x-backup-secret: ${{ secrets.BACKUP_SECRET }}" \
+          -H "Content-Type: application/json"

.gitignore

@@ -1,41 +1,48 @@
-# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
-
-# dependencies
+# Dependencies
 /node_modules
 /.pnp
-.pnp.*
-.yarn/*
-!.yarn/patches
-!.yarn/plugins
-!.yarn/releases
-!.yarn/versions
-
-# testing
+.pnp.js
+
+# Testing
 /coverage
 
-# next.js
+# Next.js
 /.next/
 /out/
 
-# production
+# Production
 /build
 
-# misc
+# Environment Variables
+.env
+.env.local
+.env.production
+.env.development
+.env.test
+.env*.local
+
+# Firebase
+.firebase/
+firebase-debug.log
+firebase-debug.log*
+
+# Vercel
+.vercel/
+
+# System & Editor
 .DS_Store
+.vscode/
+.idea/
 *.pem
 
-# debug
+# TypeScript
+*.tsbuildinfo
+
+# Debug Logs
 npm-debug.log*
 yarn-debug.log*
-yarn-error.log*
-.pnpm-debug.log*
-
-# env files (can opt-in for committing if needed)
-.env*
+pnpm-debug.log*
 
-# vercel
-.vercel
-
-# typescript
-*.tsbuildinfo
-next-env.d.ts
+# Local Security/Keys (Preserved from previous configuration)
+certificates/
+serviceAccountKey.json

ADMIN_TIER_GUIDE.md

@@ -0,0 +1,71 @@
+# Admin Tier Management Guide
+
+## ✅ Functionality Already Exists!
+
+Admin can change any user's tier and it saves to Firebase automatically.
+
+## How to Change User Tiers
+
+### Step 1: Access User Management
+Navigate to: `/admin/users`
+
+### Step 2: Find the User
+- **Users Tab**: Regular users
+- **Admins Tab**: Admin users
+
+### Step 3: Edit User
+Click the **Edit** button (pencil icon) on any user row
+
+### Step 4: Select New Tier
+In the dialog, choose from the dropdown:
+- **Free** - Limited features (5 scans/day, basic AI)
+- **Plus** - Enhanced features (20 scans/day, global search, 10 AI chats/day)
+- **Pro** - Full features (unlimited scans, meal planner, PC builder, visual search)
+- **Ultimate** - All Pro + white label, beta access, unlimited compare
+
+### Step 5: Save
+Click **"Save Changes"** button
+
+## What Happens When You Change a Tier
+
+1. **Immediate Firebase Update**: Tier is saved to `users/{userId}/subscription/tier`
+2. **Timestamp Added**: `updatedAt` field is automatically updated
+3. **Features Update**: User immediately gets access to new tier features
+4. **Real-time Effect**: Next time user refreshes or navigates, new features appear
+
+## Backend Details
+
+**API Endpoint**: `/api/admin/action`
+**Action**: `updateTier`
+**Firebase Path**: `users/{userId}/subscription`
+
+```typescript
+// Backend saves as:
+{
+  subscription: {
+    tier: 'pro',  // or free, plus, ultimate
+    updatedAt: new Date()
+  }
+}
+```
+
+## Feature Access by Tier
+
+| Feature | Free | Plus | Pro | Ultimate |
+|---------|:----:|:----:|:---:|:--------:|
+| Daily Scans | 5 | 20 | ∞ | ∞ |
+| History | 10 | 50 | ∞ | ∞ |
+| AI Chat | ❌ | 10/day | ∞ | ∞ |
+| Global Search | ❌ | ✅ | ✅ | ✅ |
+| Visual Search | ❌ | ❌ | ✅ | ✅ |
+| Meal Planner | ❌ | ❌ | ✅ | ✅ |
+| PC Builder | ❌ | ❌ | ✅ | ✅ |
+| Product Compare | 0 | 2 | 5 | ∞ |
+| Beta Access | ❌ | ❌ | ❌ | ✅ |
+
+## Notes
+
+- **Admin Role**: Admins automatically get Ultimate-level features regardless of tier
+- **Instant Effect**: Changes take effect immediately upon save
+- **Safe Operation**: Uses Firebase `merge: true` to prevent data loss
+- **Audit Trail**: `updatedAt` timestamp tracks when tier was last changed

LICENSE

@@ -0,0 +1,10 @@
+Copyright (c) 2024 Youssef Boubli (TRADMSS)
+
+All rights reserved.
+
+This software and its documentation are the property of Youssef Boubli. 
+Unauthorized copying, modification, distribution, or use of this software, 
+via any medium, is strictly prohibited without the express written permission 
+of the copyright holder.
+
+This software is NOT open source. It is proprietary software.