feat: RBAC, atomic deployments, fleet backups, and licensing (Pro) (#185)

* feat: add RBAC viewer accounts, atomic deployments, and fleet-wide backups (Pro)

Introduces three Pro-tier features:

- RBAC: Multi-user system with admin/viewer roles, user management UI,
  automatic migration from single-admin credentials, viewer restrictions
  across the entire UI (read-only editor, hidden action buttons)

- Atomic Deployments: Pre-deploy file backup to .sencho-backup/, automatic
  rollback on health probe failure, manual rollback button, health probes
  added to stack updates, webhook-triggered deploys use atomic rollback

- Fleet-Wide Backups: Point-in-time snapshots of compose files across all
  nodes (local + remote), stored centrally in SQLite, per-stack restore
  with optional redeploy, graceful handling of offline nodes

* fix(settings): use correct ProGate prop name in UsersSection

* fix(settings): remove unused isPro prop from UsersSection

* fix(auth): fetch user info after login and setup so isAdmin is set correctly

* feat(pricing): revise pricing strategy and enforce variant-based seat limits

Raise Personal Pro from $49/yr to $69/yr with 3 viewer seats (up from 1).
Add $15/mo billing option for Team Pro. Mark lifetime pricing as a
90-day early-adopter offer. Store Lemon Squeezy variant_name on
activation/validation and enforce seat limits server-side per variant.

* feat(licensing): add Lemon Squeezy checkout, webhook, and billing portal integration

Server-side checkout URL generation (POST /api/checkout) with admin email
pre-fill and instance_id custom data. HMAC-SHA256 verified webhook endpoint
(POST /api/webhooks/lemonsqueezy) handling order, subscription, and payment
lifecycle events for automatic license activation. Customer billing portal
link stored from webhook events and exposed via GET /api/billing/portal.
In-app checkout buttons in Settings with manual license key fallback.

* fix(licensing): exempt Lemon Squeezy webhook from auth middleware

The catch-all auth middleware on /api/* was blocking the public webhook
endpoint. Added /webhooks/lemonsqueezy to the exemption list alongside
/auth/* and /webhooks/:id/trigger.

* feat(pricing): update pricing to final live rates

Personal Pro: $7.99/month, $69.99/year, $249 lifetime.
Team Pro: $49.99/month, $499.99/year, $1,499 lifetime.
Added personal_monthly checkout variant across backend, frontend, and website.

* refactor(licensing): remove server-side checkout/webhook for self-hosted model

Sencho is self-hosted — each user runs their own instance, so there is
no central server to receive webhooks or hold the store API key. Replaced
in-app checkout buttons with a "View Pricing" redirect to sencho.io and
kept manual license key activation as the primary flow.

- Delete LemonSqueezyService (checkout, webhook, HMAC verification)
- Remove POST /api/checkout, GET /api/billing/portal, POST /api/webhooks/lemonsqueezy
- Remove raw body parser and auth exemption for webhook route
- Remove all LEMONSQUEEZY_* env vars from .env.example
- Replace checkout buttons in SettingsModal with single "View Pricing" button
- Simplify LicenseContext checkout to open sencho.io pricing page
- Update licensing docs to reflect website-based purchase flow

* chore: normalize em-dashes to hyphens across codebase (linter)

* chore: remove accidentally tracked directories from index

backend/src/services/ComposeService.ts

@@ -134,7 +134,7 @@ export class ComposeService {
     } catch (deployError) {
       // Atomic: auto-rollback on failure
       if (atomic) {
-        sendOutput('\n=== Deployment failed — rolling back to previous version ===\n');
+        sendOutput('\n=== Deployment failed - rolling back to previous version ===\n');
         try {
           const fsSvc = FileSystemService.getInstance(this.nodeId);
           await fsSvc.restoreStackFiles(stackName);
@@ -142,7 +142,7 @@ export class ComposeService {
           sendOutput('=== Rolled back successfully ===\n');
         } catch (rollbackError) {
           console.error(`Rollback failed for ${stackName}:`, rollbackError);
-          sendOutput('=== Rollback failed — manual intervention may be required ===\n');
+          sendOutput('=== Rollback failed - manual intervention may be required ===\n');
         }
       }
       throw deployError;
@@ -322,7 +322,7 @@ export class ComposeService {
     } catch (updateError) {
       // Atomic: auto-rollback on failure
       if (atomic) {
-        sendOutput('\n=== Update failed — rolling back to previous version ===\n');
+        sendOutput('\n=== Update failed - rolling back to previous version ===\n');
         try {
           const fsSvc = FileSystemService.getInstance(this.nodeId);
           await fsSvc.restoreStackFiles(stackName);
@@ -330,7 +330,7 @@ export class ComposeService {
           sendOutput('=== Rolled back successfully ===\n');
         } catch (rollbackError) {
           console.error(`Rollback failed for ${stackName}:`, rollbackError);
-          sendOutput('=== Rollback failed — manual intervention may be required ===\n');
+          sendOutput('=== Rollback failed - manual intervention may be required ===\n');
         }
       }
       throw updateError;

backend/src/services/DatabaseService.ts

@@ -722,6 +722,11 @@ export class DatabaseService {
         return (this.db.prepare("SELECT COUNT(*) as count FROM users WHERE role = 'admin'").get() as { count: number })?.count || 0;
     }
 
+    public getViewerCount(): number {
+        return (this.db.prepare("SELECT COUNT(*) as count FROM users WHERE role = 'viewer'").get() as { count: number })?.count || 0;
+    }
+
+
     // --- Fleet Snapshots ---
 
     public createSnapshot(description: string, createdBy: string, nodeCount: number, stackCount: number, skippedNodes: string): number {

backend/src/services/LicenseService.ts

@@ -5,17 +5,32 @@ import { DatabaseService } from './DatabaseService';
 export type LicenseTier = 'community' | 'pro';
 export type LicenseStatus = 'community' | 'trial' | 'active' | 'expired' | 'disabled';
 
+export type LicenseVariant = 'personal' | 'team' | null;
+
 export interface LicenseInfo {
     tier: LicenseTier;
     status: LicenseStatus;
+    variant: LicenseVariant;
     customerName: string | null;
     productName: string | null;
     maskedKey: string | null;
     validUntil: string | null;
     trialDaysRemaining: number | null;
     instanceId: string;
+    portalUrl: string | null;
 }
 
+/** Seat limits per variant. null = unlimited. */
+export interface SeatLimits {
+    maxAdmins: number | null;
+    maxViewers: number | null;
+}
+
+const SEAT_LIMITS: Record<string, SeatLimits> = {
+    personal: { maxAdmins: 1, maxViewers: 3 },
+    team: { maxAdmins: null, maxViewers: null },
+};
+
 interface LemonSqueezyActivationResponse {
     activated: boolean;
     error?: string;
@@ -82,7 +97,7 @@ export class LicenseService {
     private static instance: LicenseService;
     private validationTimer: ReturnType<typeof setInterval> | null = null;
 
-    private constructor() {}
+    private constructor() { }
 
     public static getInstance(): LicenseService {
         if (!LicenseService.instance) {
@@ -118,7 +133,7 @@ export class LicenseService {
     }
 
     /**
-     * Returns the current license tier. Synchronous — reads from cached DB state only.
+     * Returns the current license tier. Synchronous - reads from cached DB state only.
      */
     public getTier(): LicenseTier {
         const db = DatabaseService.getInstance();
@@ -132,7 +147,7 @@ export class LicenseService {
             if (validUntil && new Date(validUntil) > new Date()) {
                 return 'pro';
             }
-            // Trial expired — update status
+            // Trial expired - update status
             db.setSystemState('license_status', 'community');
             return 'community';
         }
@@ -162,6 +177,31 @@ export class LicenseService {
         return 'community';
     }
 
+    /**
+     * Get the license variant (personal or team) from stored metadata.
+     * Trial licenses default to "team" so users can explore all features.
+     */
+    public getVariant(): LicenseVariant {
+        const db = DatabaseService.getInstance();
+        const status = db.getSystemState('license_status');
+        if (status === 'trial') return 'team';
+        const variantName = db.getSystemState('license_variant_name');
+        if (!variantName) return null;
+        const lower = variantName.toLowerCase();
+        if (lower.includes('team')) return 'team';
+        if (lower.includes('personal')) return 'personal';
+        return 'personal'; // default activated licenses to personal
+    }
+
+    /**
+     * Get seat limits for the current license variant.
+     */
+    public getSeatLimits(): SeatLimits {
+        const variant = this.getVariant();
+        if (!variant) return { maxAdmins: 1, maxViewers: 0 }; // community
+        return SEAT_LIMITS[variant] || SEAT_LIMITS.personal;
+    }
+
     /**
      * Get full license information for the API response.
      */
@@ -181,12 +221,14 @@ export class LicenseService {
         return {
             tier: this.getTier(),
             status,
+            variant: this.getVariant(),
             customerName: db.getSystemState('license_customer_name'),
             productName: db.getSystemState('license_product_name'),
             maskedKey: key ? `****-****-****-${key.slice(-4)}` : null,
             validUntil,
             trialDaysRemaining,
             instanceId,
+            portalUrl: db.getSystemState('customer_portal_url') || null,
         };
     }
 
@@ -221,7 +263,7 @@ export class LicenseService {
             if (data.license_key?.expires_at) {
                 db.setSystemState('license_valid_until', data.license_key.expires_at);
             } else {
-                // Lifetime license — no expiry
+                // Lifetime license - no expiry
                 db.setSystemState('license_valid_until', '');
             }
 
@@ -231,6 +273,9 @@ export class LicenseService {
             if (data.meta?.product_name) {
                 db.setSystemState('license_product_name', data.meta.product_name);
             }
+            if (data.meta?.variant_name) {
+                db.setSystemState('license_variant_name', data.meta.variant_name);
+            }
 
             console.log('[License] Activated successfully.');
             return { success: true };
@@ -278,6 +323,13 @@ export class LicenseService {
             'license_last_validated',
             'license_customer_name',
             'license_product_name',
+            'license_variant_name',
+            'subscription_id',
+            'customer_id',
+            'customer_portal_url',
+            'update_payment_url',
+            'order_id',
+            'receipt_url',
         ];
         for (const key of keysToRemove) {
             db.setSystemState(key, '');
@@ -345,11 +397,14 @@ export class LicenseService {
             if (data.meta?.product_name) {
                 db.setSystemState('license_product_name', data.meta.product_name);
             }
+            if (data.meta?.variant_name) {
+                db.setSystemState('license_variant_name', data.meta.variant_name);
+            }
 
             console.log('[License] Validation successful.');
             return { success: true };
         } catch (err) {
-            // Network failure — don't change status, just log
+            // Network failure - don't change status, just log
             console.warn('[License] Validation network error (keeping current status):', (err as Error).message);
             return { success: false, error: 'Unable to reach license server' };
         }