Upload folder using huggingface_hub

.env.example

@@ -1,40 +1,45 @@
-# Database Configuration
-DATABASE_URL=postgresql://username:password@host:port/database
-
-# Supabase Configuration
-NEXT_PUBLIC_SUPABASE_URL=https://your-project.supabase.co
-SUPABASE_SERVICE_ROLE_KEY=your-supabase-service-role-key
-SUPABASE_STORAGE_BUCKET=tender-documents
-
-# WebAI Model Configuration
-# Optional: Override default model name
-# WEBAI_MODEL_NAME=webAI-Official/webAI-ColVec1-4b
-
-# Optional: Configure quantization (default: 8-bit for 4B model)
-# USE_8BIT_QUANTIZATION=true
-# USE_4BIT_QUANTIZATION=false
-
-# Optional: Configure FlashAttention-2 for memory optimization (default: true)
-# USE_FLASH_ATTENTION_2=true
-
-# Optional: Configure DPI for PDF conversion (default: 200)
-# Higher DPI improves extraction quality but uses more memory
-# PDF_DPI=300
-
-# Optional: Enable adaptive DPI scaling based on available memory (default: true)
-# ADAPTIVE_DPI=true
-
-# Optional: Configure max tokens (default: 512)
-# MAX_NEW_TOKENS=512
-
-# Optional: Configure image size (default: 336)
-# IMAGE_SIZE=336
-
-# Optional: Configure batch size (default: 1)
-# BATCH_SIZE=1
-
-# Optional: Configure timeout (default: 300)
-# TIMEOUT_SECONDS=300
-
-# HF Spaces Configuration
-PORT=7860
+# Web
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+
+# Supabase
+NEXT_PUBLIC_SUPABASE_URL=https://weeiosqgiyjeeftvpyjr.supabase.co
+NEXT_PUBLIC_SUPABASE_ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6IndlZWlvc3FnaXlqZWVmdHZweWpyIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzU1NzA4NTQsImV4cCI6MjA5MTE0Njg1NH0.15tz39svACp7QZZJeyVVDzhU-IuXwlW6BG5RZQDF97g
+SUPABASE_SERVICE_ROLE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6IndlZWlvc3FnaXlqZWVmdHZweWpyIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImlhdCI6MTc3NTU3MDg1NCwiZXhwIjoyMDkxMTQ2ODU0fQ.rs0jJRVhEOGrdUDXvGm_a5M9Q717w0I56HddiD8m2WE
+SUPABASE_STORAGE_BUCKET=TenderDocs
+# Local dev identity fallback (must be valid UUIDs)
+DEV_ORGANIZATION_ID=
+DEV_USER_ID=
+DEV_AUTO_BOOTSTRAP=1
+INLINE_PROCESSING_ENABLED=0
+
+# Worker
+DATABASE_URL=
+# Optional fallback IP for DATABASE_URL host resolution issues
+DATABASE_HOSTADDR=
+WORKER_POLL_INTERVAL_SECONDS=5
+WORKER_RUN_ONCE=0
+
+# LLM Configuration
+LLM_ENABLED=true
+LLM_PRIMARY_MODEL=claude-3-5-sonnet-20241022
+LLM_FALLBACK_MODELS=gpt-4.1-mini,gpt-3.5-turbo
+LLM_TIMEOUT_SECONDS=60.0
+
+# AI Gateway (LiteLLM compatible)
+LITELLM_BASE_URL=http://localhost:4000
+LITELLM_API_KEY=
+LITELLM_EXTRACT_MODEL=anthropic/claude-3-5-sonnet
+LITELLM_DRAFT_MODEL=openai/gpt-4.1-mini
+# Optional comma-separated fallback chain for draft generation retries
+LITELLM_DRAFT_FALLBACK_MODELS=
+# Retry controls for transient provider failures / rate limits
+LITELLM_RETRY_MAX_ATTEMPTS=2
+LITELLM_RETRY_BACKOFF_MS=500
+LITELLM_REQUEST_TIMEOUT_MS=45000
+
+# Billing
+MPESA_CONSUMER_KEY=
+MPESA_CONSUMER_SECRET=
+MPESA_PASSKEY=
+MPESA_SHORTCODE=
+MPESA_CALLBACK_URL=

.gitattributes

@@ -33,3 +33,4 @@ saved_model/**/* filter=lfs diff=lfs merge=lfs -text
 *.zip filter=lfs diff=lfs merge=lfs -text
 *.zst filter=lfs diff=lfs merge=lfs -text
 *tfevents* filter=lfs diff=lfs merge=lfs -text
+tender-win-engine/bun.lockb filter=lfs diff=lfs merge=lfs -text

.gitignore

@@ -0,0 +1,25 @@
+node_modules
+.next
+out
+dist
+build
+.turbo
+.vercel
+.env
+.env.local
+.env.*.local
+*.log
+coverage
+tmp
+temp
+apps/web/.next
+apps/web/node_modules
+packages/schemas/node_modules
+.venv
+__pycache__
+*.pyc
+*.egg-info
+.git-credentials
+
+.vercel
+.env*.local

.pytest_cache/.gitignore

@@ -0,0 +1,2 @@
+# Created by pytest automatically.
+*

.pytest_cache/CACHEDIR.TAG

@@ -0,0 +1,4 @@
+Signature: 8a477f597d28d172789f06886806bc55
+# This file is a cache directory tag created by pytest.
+# For information about cache directory tags, see:
+#	https://bford.info/cachedir/spec.html

.pytest_cache/README.md

@@ -0,0 +1,8 @@
+# pytest cache directory #
+
+This directory contains data from the pytest's cache plugin,
+which provides the `--lf` and `--ff` options, as well as the `cache` fixture.
+
+**Do not** commit this to version control.
+
+See [the docs](https://docs.pytest.org/en/stable/how-to/cache.html) for more information.

.pytest_cache/v/cache/nodeids

@@ -0,0 +1 @@
+[]

AGENTS.md

@@ -0,0 +1,8 @@
+# Agent Context & Rules
+This file contains rules, project knowledge, and context for AI agents working on this project. Future agent iterations will read this to maintain context.
+
+## Discovered Patterns
+- (None yet)
+
+## Gotchas
+- (None yet)

TenderHub Kenya Build Plan.md

@@ -0,0 +1,66 @@
+# TenderHub Kenya Build Plan
+
+## Summary
+- Build one product first: a mobile-first Tender-Winning Engine for Kenyan SMEs that starts with an uploaded tender PDF and ends with a compliance matrix, bid/no-bid recommendation, and editable proposal draft.
+- Optimize for a solo founder: keep the product surface narrow, avoid scraper-heavy scope, and ship an upload-first workflow that proves people will pay for analysis and drafting.
+- Prioritize open-source building blocks where they reduce lock-in or variable cost, but use managed hosting where it materially improves speed and reliability.
+
+## Product Plan
+- Launch wedge: self-serve Kenyan contractors, not full consultant white-label. This keeps onboarding, permissions, and support simple while still solving the highest-value workflow.
+- Free experience: sign up, create company profile, upload PDF, and see a preview with procuring entity, deadline, tender category, and top blockers.
+- Paid experience: unlock full mandatory-requirements matrix, risk summary, bid/no-bid score, and editable draft sections.
+- Output format: generate DOCX first, not PDF. Users will edit proposals before submission, and DOCX is cheaper and more reliable to produce.
+- Explicitly defer from v1: large-scale portal scraping, full white-label branding, shared team workspaces, and deep consultant collaboration flows.
+- Build the data model with `organizations` and `company_profiles` now so consultant and white-label expansion does not require a painful migration later.
+
+## Architecture And Tooling
+- Frontend: Next.js 15 PWA with App Router, mobile-first dashboard, resumable uploads, background job polling, and offline-friendly caching for weak mobile connections.
+- Core data layer: Supabase Cloud for PostgreSQL, Auth, Storage, and pgvector. This is open-core, fast to launch, and good enough until volume justifies more self-hosting.
+- Backend split: TypeScript for the web/control plane and Python for document processing. This is the best speed-to-quality tradeoff because PDF/OCR tooling is materially stronger in Python.
+- Repo shape: monorepo with `apps/web`, `apps/worker`, and `packages/schemas` for shared request/response and extraction contracts.
+- Queue/orchestration: Postgres-backed job system using a `processing_jobs` table, retries, idempotency keys, and `FOR UPDATE SKIP LOCKED`. Do not add Redis or Temporal in v1.
+- Storage: original PDFs, OCR-normalized PDFs, extracted artifacts, and generated DOCX files in Supabase Storage with signed access URLs.
+- Observability: PostHog for product analytics, Sentry for exceptions, OpenTelemetry-based structured logging for long-running jobs.
+
+## AI Engine
+- Put an internal AI gateway between the app and model vendors. Use LiteLLM so the product talks to one interface and can switch between Anthropic, OpenAI, Gemini, OpenRouter, vLLM, or Ollama later.
+- Define task contracts, not provider-specific calls: `extractTenderStructure`, `generateComplianceMatrix`, `scoreBid`, `draftProposalSection`, and `embedChunks`.
+- Keep prompts versioned and schema-bound. Every model response must parse into strict typed JSON with evidence spans such as page number and source chunk ID.
+- Use deterministic scoring for hard blockers and most of the bid/no-bid result. The LLM should explain and synthesize, not decide mandatory eligibility on its own.
+- Primary extraction path: PyMuPDF for text extraction and rendering, selective `pdfplumber` or Camelot for tables, and OCRmyPDF plus Tesseract only when the file lacks a usable text layer.
+- Retrieval layer: normalize the tender into sections, chunk by semantic headings, store embeddings in pgvector, and anchor every generated output to retrieved evidence.
+- Embeddings: run a local open-source model such as `bge-small-en-v1.5` or `e5-base-v2` through FastEmbed/ONNX in the worker so chunking and retrieval do not consume third-party API quota.
+- Model policy: use a strong frontier model for extraction and legal-style reasoning, a cheaper fallback model for retries and lower-value drafting, and reserve local open-source LLMs for later experimentation rather than core extraction quality on day one.
+- Rate-limit strategy: cache by file hash, run extraction once per document, reuse structured results for scoring and drafting, generate drafts section-by-section, and let LiteLLM handle retry/fallback for 429s and timeouts.
+
+## Data Model And Interfaces
+- Core tables: `organizations`, `members`, `company_profiles`, `tenders`, `documents`, `processing_jobs`, `extractions`, `compliance_items`, `bid_scores`, `drafts`, `payments`, `usage_events`, `provider_logs`.
+- `CompanyProfile` should include legal entity details, AGPO status, KRA/VAT status, registration classes such as NCA, operating counties, past projects, team capacity, and reusable proposal facts.
+- `TenderExtraction` should include procuring entity, deadline, mandatory documents, technical scope, evaluation criteria, commercial terms, penalty clauses, ambiguity flags, and evidence spans.
+- `ComplianceItem` should include requirement text, severity, pass/fail/unknown state, evidence pointer, and remediation guidance.
+- `BidScore` should include weighted factors, hard blockers, explanation, confidence, and explicit reason codes that the UI can render.
+- Public APIs: `POST /api/uploads/init`, `POST /api/tenders/:id/process`, `GET /api/tenders/:id/status`, `GET /api/tenders/:id/preview`, `POST /api/tenders/:id/unlock`, `GET /api/tenders/:id/analysis`, `POST /api/tenders/:id/drafts`, and `POST /api/payments/mpesa/callback`.
+- All schemas should be shared between web and worker so model swaps do not change the product contract.
+
+## Delivery Plan
+- Week 1: set up monorepo, Supabase project, auth, org/company-profile schema, storage buckets, upload flow, preview UI shell, and job-state plumbing.
+- Week 2: build the extraction pipeline, OCR fallback, strict JSON parsing, evidence-linked preview, local embeddings, and pgvector retrieval.
+- Week 3: implement blocker detection, bid/no-bid scoring, compliance matrix UI, draft generation, usage metering, and paywall boundaries.
+- Week 4: integrate M-Pesa STK Push and webhook reconciliation, harden retries and provider fallback, add analytics/monitoring, and run a manual-review-assisted beta.
+
+## Test Plan
+- Digital PDF path: upload, extract, preview, unlock, analyze, and download DOCX successfully.
+- Scanned PDF path: OCR fallback triggers automatically and still returns deadline, mandatory docs, and cited evidence.
+- Hard-blocker path: missing bid bond, AGPO mismatch, or invalid registration produces deterministic fail states even if the LLM output is uncertain.
+- Rate-limit path: primary model 429/timeout retries cleanly and falls back without duplicate jobs or duplicate charges.
+- Idempotency path: repeated upload, process, unlock, or webhook calls do not create duplicate tenders, payments, or drafts.
+- Security path: one organization cannot read another organization’s files, drafts, or analysis records.
+- Quality path: generated text always cites extracted evidence and never invents unsupported facts.
+- Performance targets: preview in under 60 seconds for normal digital PDFs, full analysis in 2 to 5 minutes for typical 30 to 80 page tenders, OCR-heavy cases in under 10 minutes with visible progress and manual-review fallback.
+
+## Assumptions
+- Kenya is the only launch market and most tender documents are English-language PDFs.
+- v1 is upload-first. Tender scraping is intentionally out of the critical path because it adds fragility without proving willingness to pay.
+- Supabase Cloud is acceptable even with an open-source bias because it dramatically shortens time to market while preserving open-source primitives underneath.
+- White-label is a phase-2 revenue expansion, not a launch requirement.
+- The first business milestone is paid validation, not perfect autonomy. During beta, low-confidence jobs can route to a manual review queue.

WORKERS_ARCHITECTURE.md

@@ -0,0 +1,438 @@
+# TenderHub Workers Architecture
+
+This document describes the technical architecture and implementation details of both workers in the TenderHub platform: the primary worker and the WebAI verification worker.
+
+## Overview
+
+TenderHub employs a dual-worker architecture for tender document processing:
+
+1. **Primary Worker**: Text-based extraction and analysis using traditional OCR + LLM pipeline
+2. **WebAI Verification Worker**: Multimodal vision-language model for cross-validation
+
+This approach provides redundancy, quality assurance, and competitive advantage through multiple AI analysis perspectives.
+
+---
+
+## Primary Worker Architecture
+
+### Purpose
+The primary worker handles the main document processing pipeline for tender analysis and proposal generation.
+
+### Technology Stack
+- **Language**: Python 3.11
+- **Database**: PostgreSQL with psycopg
+- **Storage**: Supabase for document storage
+- **OCR**: Stirling-PDF (optional, for image-only PDFs)
+- **Text Extraction**: Kreuzberg with marker LLM mode
+- **AI Analysis**: Google Gemini with caching
+- **Deployment**: Docker/Local execution
+
+### Processing Pipeline
+
+#### 1. Document Ingestion
+```python
+# Downloads documents from Supabase storage
+document_bytes = download_storage_object(config, storage_path)
+mime_type = infer_mime_type(storage_path)
+```
+
+#### 2. PDF Signal Analysis
+```python
+# Analyzes PDF characteristics
+signal = analyze_pdf_signal(pdf_bytes)
+page_count = signal["page_count"]
+is_image_only = signal["is_image_only"]
+avg_chars_per_page = signal["average_chars_per_page"]
+```
+
+#### 3. OCR Processing (if needed)
+For image-only PDFs:
+```python
+stirling = StirlingClient(config)
+ocr_bytes = stirling.ocr_pdf(source_bytes)
+compressed = stirling.compress_pdf(ocr_bytes)
+```
+
+#### 4. Text Extraction
+```python
+# Batch processing with Kreuzberg
+batches = split_pdf_batches(pdf_bytes, config.kreuzberg_batch_pages)
+for batch in batches:
+    markdown, tables, elements = extract_with_kreuzberg(
+        batch["pdf_bytes"], mime_type, config.marker_llm_mode
+    )
+```
+
+#### 5. AI Analysis with Gemini
+```python
+# Creates cache for efficient processing
+cache = gemini.create_cache(
+    display_name=f"tender-{tender_id[:8]}-{doc_hash[:8]}",
+    content=markdown_text,
+    ttl_hours=config.gemini_cache_ttl_hours,
+)
+
+# Generates structured analysis
+analysis = gemini.generate_json_with_cache(cache_name=cache_name, prompt=prompt)
+```
+
+#### 6. Database Storage
+```python
+# Stores structured results
+upsert_analysis(conn, tender_id, organization_id, analysis)
+```
+
+### Key Features
+
+#### Memory Optimization
+- **4-bit/8-bit Quantization**: Reduces model memory footprint
+- **Batch Processing**: Processes documents in configurable batch sizes
+- **GC Flush**: Optional garbage collection between batches
+- **Marker LLM Mode**: Enhanced text extraction quality
+
+#### Caching Strategy
+- **Gemini Cache**: 72-hour TTL for document content
+- **Cache Validation**: Hash-based cache invalidation
+- **Reuse Logic**: Automatic cache reuse for identical documents
+
+#### Error Handling
+- **Retry Logic**: Configurable retry delays and max attempts
+- **Fallback Mechanisms**: Graceful degradation on component failures
+- **Comprehensive Logging**: Structured JSON logging for monitoring
+
+### Job Types
+
+#### ANALYZE Jobs
+- Extracts and analyzes tender documents
+- Generates compliance items and bid scores
+- Produces structured JSON output
+
+#### DRAFT Jobs
+- Generates proposal sections (Executive Summary, Technical Approach, etc.)
+- Supports different tones (Formal, Persuasive, Concise)
+- Uses cached analysis for consistency
+
+---
+
+## WebAI Verification Worker Architecture
+
+### Purpose
+The WebAI verification worker provides a secondary analysis pipeline using multimodal AI to cross-validate primary worker results.
+
+### Technology Stack
+- **Language**: Python 3.11
+- **Framework**: Gradio + HF Spaces
+- **Model**: webAI-ColVec1-4b (multimodal vision-language)
+- **GPU**: ZeroGPU for on-demand acceleration
+- **Memory**: FlashAttention-2 + 8-bit quantization
+- **Deployment**: Hugging Face Spaces
+
+### Processing Pipeline
+
+#### 1. Document Ingestion
+```python
+# Same storage access as primary worker
+document_bytes = download_document(context["storage_path"])
+mime_type = infer_mime_type(context["storage_path"])
+```
+
+#### 2. High DPI Image Conversion
+```python
+# Adaptive DPI based on available memory
+optimal_dpi = get_optimal_dpi(config)
+images = convert_from_bytes(
+    document_bytes, 
+    dpi=optimal_dpi,
+    first_page=True,
+    fmt='JPEG'
+)
+```
+
+#### 3. Vision-Language Processing
+```python
+# Direct multimodal understanding
+@spaces.GPU
+def process_with_webai(image: Image.Image, prompt: str):
+    inputs = processor(images=image, text=prompt, return_tensors="pt").to("cuda")
+    outputs = model.generate(**inputs, max_new_tokens=512)
+    response = processor.tokenizer.decode(outputs[0], skip_special_tokens=True)
+    return response
+```
+
+#### 4. Structured Analysis
+```python
+# Parses JSON response from multimodal model
+webai_analysis = parse_webai_response(response_text)
+```
+
+#### 5. Cross-Validation
+```python
+# Compares with primary worker results
+comparison = compare_analyses(primary_analysis, webai_analysis)
+agreement_score = comparison["agreement_score"]
+```
+
+#### 6. Aggressive Memory Cleanup
+```python
+# Prevents ghost memory from vision tensors
+def aggressive_memory_cleanup():
+    torch.cuda.empty_cache()
+    gc.collect()  # Multiple generations
+    # Clear PIL caches and monitor effectiveness
+```
+
+### Key Features
+
+#### Memory Optimization
+- **4B Model**: Smaller footprint vs 9B models
+- **8-bit Quantization**: Balance of quality and memory efficiency
+- **FlashAttention-2**: 40% reduction in attention memory
+- **Aggressive Cleanup**: Prevents 4GB+ ghost memory accumulation
+
+#### Adaptive DPI Scaling
+```python
+# Memory-aware DPI adjustment
+if available_memory_gb >= 12: optimal_dpi = 300
+elif available_memory_gb >= 8: optimal_dpi = 250
+elif available_memory_gb >= 4: optimal_dpi = 200
+else: optimal_dpi = 150
+```
+
+#### ZeroGPU Integration
+- **On-demand GPU**: Dynamic allocation for processing tasks
+- **Cost Efficiency**: Free tier with automatic scaling
+- **Fallback**: CPU processing when GPU unavailable
+
+### Comparison Engine
+
+The verification worker implements sophisticated comparison logic:
+
+#### Agreement Scoring
+```python
+# Weighted agreement calculation
+agreement_factors = [
+    bid_decision_agreement * 0.4,    # Bid decision (40%)
+    confidence_similarity * 0.3,     # Confidence scores (30%)
+    category_similarity * 0.2,       # Tender categories (20%)
+    deadline_agreement * 0.1         # Deadlines (10%)
+]
+agreement_score = sum(agreement_factors)
+```
+
+#### Discrepancy Detection
+- **High Severity**: Bid decision differences
+- **Medium Severity**: Confidence score gaps > 0.3
+- **Low Severity**: Category or deadline mismatches
+
+---
+
+## Database Integration
+
+### Shared Tables
+Both workers interact with these core tables:
+
+#### tenders
+```sql
+CREATE TABLE tenders (
+    id UUID PRIMARY KEY,
+    organization_id UUID,
+    title TEXT,
+    status TEXT, -- PROCESSING, ANALYSIS_READY, FAILED
+    storage_path TEXT,
+    verification_status TEXT, -- PENDING, PROCESSING, COMPLETED
+    verification_score FLOAT
+);
+```
+
+#### processing_jobs
+```sql
+CREATE TABLE processing_jobs (
+    id UUID PRIMARY KEY,
+    tender_id UUID,
+    job_type TEXT, -- ANALYZE, DRAFT, VERIFY
+    status TEXT, -- QUEUED, RUNNING, SUCCEEDED, FAILED
+    payload JSONB,
+    attempt_count INTEGER,
+    max_attempts INTEGER,
+    lock_owner TEXT,
+    available_at TIMESTAMP,
+    created_at TIMESTAMP,
+    updated_at TIMESTAMP
+);
+```
+
+#### extractions (Primary Worker)
+```sql
+CREATE TABLE extractions (
+    tender_id UUID PRIMARY KEY,
+    structured_output JSONB,
+    summary TEXT,
+    updated_at TIMESTAMP
+);
+```
+
+#### webai_verifications (Verification Worker)
+```sql
+CREATE TABLE webai_verifications (
+    id UUID PRIMARY KEY,
+    tender_id UUID,
+    analysis JSONB,
+    comparison JSONB,
+    created_at TIMESTAMP,
+    updated_at TIMESTAMP
+);
+```
+
+### Job Queue System
+
+#### Job Claiming
+```python
+# Atomic job claiming with row-level locking
+cur.execute("""
+    SELECT * FROM processing_jobs
+    WHERE status = 'QUEUED' AND available_at <= now()
+    ORDER BY created_at ASC
+    FOR UPDATE SKIP LOCKED
+    LIMIT 1
+""")
+```
+
+#### Status Management
+- **QUEUED**: Ready for processing
+- **RUNNING**: Being processed by a worker
+- **SUCCEEDED**: Completed successfully
+- **FAILED**: Failed after max retries
+
+---
+
+## Performance Characteristics
+
+### Primary Worker
+- **Throughput**: ~15-25 documents/hour (CPU optimized)
+- **Memory Usage**: ~2-4GB per document
+- **Accuracy**: High for text-heavy documents
+- **Strengths**: Structured data extraction, compliance analysis
+
+### WebAI Verification Worker
+- **Throughput**: ~20-30 documents/hour (GPU accelerated)
+- **Memory Usage**: ~4-8GB per document (with cleanup)
+- **Accuracy**: Superior for visually complex documents
+- **Strengths**: Multimodal understanding, cross-validation
+
+### Memory Optimization Strategies
+
+#### Primary Worker
+1. **Quantization**: 4-bit/8-bit model loading
+2. **Batching**: Configurable batch sizes (10-20 pages)
+3. **GC Management**: Optional garbage collection
+4. **Caching**: Gemini content caching
+
+#### WebAI Worker
+1. **Model Selection**: 4B vs 9B model choice
+2. **FlashAttention-2**: Attention mechanism optimization
+3. **Aggressive Cleanup**: Prevent ghost memory
+4. **Adaptive DPI**: Memory-aware resolution scaling
+
+---
+
+## Deployment Architecture
+
+### Primary Worker
+- **Environment**: Docker containers or local execution
+- **Scaling**: Horizontal scaling via multiple instances
+- **Monitoring**: Structured logging + health checks
+- **Configuration**: Environment-based configuration
+
+### WebAI Verification Worker
+- **Platform**: Hugging Face Spaces
+- **GPU**: ZeroGPU on-demand allocation
+- **Interface**: Gradio web interface + API
+- **Cost**: Free tier with dynamic scaling
+
+---
+
+## Cross-Validation Benefits
+
+### Quality Assurance
+1. **Dual Perspectives**: Text-only vs multimodal analysis
+2. **Discrepancy Detection**: Automatic identification of differences
+3. **Confidence Scoring**: Agreement metrics for reliability assessment
+4. **Human Review**: Flagged items for manual verification
+
+### Competitive Advantages
+1. **Accuracy**: Multiple AI approaches reduce error rates
+2. **Reliability**: Cross-validation prevents single-model failures
+3. **Insights**: Different models catch different issues
+4. **Trust**: Transparent verification builds user confidence
+
+### Use Cases
+- **High-Value Tenders**: Critical bids requiring maximum accuracy
+- **Complex Documents**: Visually dense or poorly scanned PDFs
+- **Regulatory Compliance**: Industries requiring verification
+- **Quality Control**: Organizations with zero-tolerance for errors
+
+---
+
+## Monitoring and Observability
+
+### Logging Strategy
+Both workers use structured JSON logging:
+```json
+{
+  "timestamp": "2024-01-01T12:00:00Z",
+  "event": "job.completed",
+  "service": "primary-worker",
+  "tender_id": "uuid",
+  "job_type": "ANALYZE",
+  "processing_time_ms": 15000,
+  "memory_peak_gb": 3.2
+}
+```
+
+### Key Metrics
+- **Throughput**: Documents processed per hour
+- **Latency**: Processing time per document
+- **Memory**: Peak memory usage
+- **Success Rate**: Job completion percentage
+- **Agreement Score**: Cross-validation accuracy
+
+### Health Checks
+- **Database Connectivity**: Connection pool status
+- **Storage Access**: Supabase connectivity
+- **Model Availability**: AI service health
+- **Memory Usage**: System resource monitoring
+
+---
+
+## Future Enhancements
+
+### Primary Worker
+- **Advanced OCR**: Integration with additional OCR services
+- **Multi-language**: Support for non-English documents
+- **Parallel Processing**: Multi-threaded document processing
+- **Enhanced Caching**: Redis-based caching layer
+
+### WebAI Verification Worker
+- **Model Upgrades**: Latest multimodal models
+- **Batch Processing**: Multiple document processing
+- **Custom Training**: Fine-tuned models for tender documents
+- **Real-time Processing**: Streaming document analysis
+
+### Integration Improvements
+- **Unified API**: Single endpoint for both workers
+- **Load Balancing**: Intelligent job routing
+- **Failover**: Automatic worker switching
+- **Metrics Dashboard**: Real-time monitoring interface
+
+---
+
+## Conclusion
+
+The dual-worker architecture provides TenderHub with a robust, scalable, and accurate document processing system. By combining traditional text-based extraction with modern multimodal AI, the platform achieves:
+
+- **Higher Accuracy**: Cross-validation reduces errors
+- **Better Reliability**: Multiple processing paths prevent failures
+- **Competitive Advantage**: Superior analysis quality
+- **Future-Proof**: Extensible architecture for new AI models
+
+This architecture positions TenderHub as a leader in AI-powered tender analysis, providing customers with the confidence and accuracy needed for critical business decisions.

apps/web/.gitignore

@@ -0,0 +1,2 @@
+.vercel
+.env*.local

apps/web/e2e/basic.spec.ts

@@ -0,0 +1,15 @@
+import { test, expect } from '@playwright/test';
+
+test.describe('TenderHub Core Flows', () => {
+  test('landing page loads and has expected elements', async ({ page }) => {
+    await page.goto('/');
+
+    // Check for standard landing page elements.
+    // If the landing page changes, update these assertions.
+    await expect(page).toHaveTitle(/TenderHub/i);
+    
+    // Check if the dashboard console is still reachable (for dev check)
+    await page.goto('/console');
+    await expect(page.locator('body')).toBeVisible();
+  });
+});

apps/web/eslint.config.mjs

@@ -0,0 +1,5 @@
+import nextVitals from "eslint-config-next/core-web-vitals";
+
+const config = [...nextVitals];
+
+export default config;

apps/web/jest.config.cjs

@@ -0,0 +1,28 @@
+/** @type {import('ts-jest').JestConfigWithTsJest} */
+module.exports = {
+  preset: 'ts-jest',
+  testEnvironment: 'jsdom',
+  setupFilesAfterEnv: ['<rootDir>/jest.setup.js'],
+  testPathIgnorePatterns: [
+    '<rootDir>/node_modules/',
+    '<rootDir>/.next/',
+  ],
+  moduleNameMapper: {
+    '^@/(.*)$': '<rootDir>/src/$1',
+    '^@tenderhub/schemas$': '<rootDir>/../../packages/schemas/src/index.ts',
+  },
+  transform: {
+    '^.+\\.tsx?$': [
+      'ts-jest',
+      {
+        tsconfig: {
+          jsx: 'react-jsx',
+        },
+      },
+    ],
+  },
+  testMatch: [
+    '**/__tests__/**/*.test.ts',
+    '**/__tests__/**/*.test.tsx',
+  ],
+};

apps/web/jest.setup.js

@@ -0,0 +1,37 @@
+/**
+ * Jest Setup
+ * Configure test environment
+ */
+require('@testing-library/jest-dom')
+
+// Mock Next.js headers
+jest.mock('next/headers', () => ({
+  cookies: jest.fn(() => ({
+    get: jest.fn(),
+    set: jest.fn(),
+  })),
+  headers: jest.fn(() => new Headers()),
+}))
+
+// Mock environment variables
+process.env.NEXT_PUBLIC_SUPABASE_URL = 'http://localhost:54321'
+process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY = 'test-anon-key'
+process.env.SUPABASE_SERVICE_ROLE_KEY = 'test-service-role-key'
+process.env.LITELLM_BASE_URL = 'http://localhost:4000'
+process.env.LITELLM_API_KEY = 'test-litellm-key'
+
+// Global test utilities
+global.mockFetch = (response) => {
+  global.fetch = jest.fn(() =>
+    Promise.resolve({
+      ok: true,
+      json: () => Promise.resolve(response),
+      text: () => Promise.resolve(JSON.stringify(response)),
+    })
+  )
+}
+
+// Clean up after each test
+afterEach(() => {
+  jest.clearAllMocks()
+})

apps/web/netlify.toml

@@ -0,0 +1,6 @@
+[build]
+  command = "npm run build"
+  publish = ".next"
+
+[[plugins]]
+  package = "@netlify/plugin-nextjs"

apps/web/next-env.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+import "./.next/dev/types/routes.d.ts";
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

apps/web/next.config.ts

@@ -0,0 +1,14 @@
+import type { NextConfig } from "next";
+import withPWAInit from "@ducanh2912/next-pwa";
+
+const withPWA = withPWAInit({
+  dest: "public",
+  disable: process.env.NODE_ENV === "development",
+  register: true,
+});
+
+const nextConfig: NextConfig = {
+  transpilePackages: ["@tenderhub/schemas"]
+};
+
+export default withPWA(nextConfig);

apps/web/package.json

@@ -0,0 +1,92 @@
+{
+  "name": "@tenderhub/web",
+  "private": true,
+  "version": "0.1.0",
+  "type": "module",
+  "scripts": {
+    "dev": "next dev --webpack",
+    "build": "next build --webpack",
+    "start": "next start",
+    "lint": "eslint . --max-warnings=0",
+    "typecheck": "tsc --noEmit",
+    "test": "jest"
+  },
+  "dependencies": {
+    "@ducanh2912/next-pwa": "^10.2.9",
+    "@hookform/resolvers": "^5.2.2",
+    "@radix-ui/react-accordion": "^1.2.12",
+    "@radix-ui/react-alert-dialog": "^1.1.15",
+    "@radix-ui/react-aspect-ratio": "^1.1.8",
+    "@radix-ui/react-avatar": "^1.1.11",
+    "@radix-ui/react-checkbox": "^1.3.3",
+    "@radix-ui/react-collapsible": "^1.1.12",
+    "@radix-ui/react-context-menu": "^2.2.16",
+    "@radix-ui/react-dialog": "^1.1.15",
+    "@radix-ui/react-dropdown-menu": "^2.1.16",
+    "@radix-ui/react-hover-card": "^1.1.15",
+    "@radix-ui/react-label": "^2.1.8",
+    "@radix-ui/react-menubar": "^1.1.16",
+    "@radix-ui/react-navigation-menu": "^1.2.14",
+    "@radix-ui/react-popover": "^1.1.15",
+    "@radix-ui/react-progress": "^1.1.8",
+    "@radix-ui/react-radio-group": "^1.3.8",
+    "@radix-ui/react-scroll-area": "^1.2.10",
+    "@radix-ui/react-select": "^2.2.6",
+    "@radix-ui/react-separator": "^1.1.8",
+    "@radix-ui/react-slider": "^1.3.6",
+    "@radix-ui/react-slot": "^1.2.4",
+    "@radix-ui/react-switch": "^1.2.6",
+    "@radix-ui/react-tabs": "^1.1.13",
+    "@radix-ui/react-toast": "^1.2.15",
+    "@radix-ui/react-toggle": "^1.1.10",
+    "@radix-ui/react-toggle-group": "^1.1.11",
+    "@radix-ui/react-tooltip": "^1.2.8",
+    "@sentry/nextjs": "^10.48.0",
+    "@supabase/ssr": "^0.10.2",
+    "@supabase/supabase-js": "^2.49.4",
+    "@tailwindcss/postcss": "^4.2.2",
+    "@tanstack/react-query": "^5.99.0",
+    "@tenderhub/schemas": "0.1.0",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "cmdk": "^1.1.1",
+    "date-fns": "^4.1.0",
+    "docx": "^9.6.1",
+    "embla-carousel-react": "^8.6.0",
+    "input-otp": "^1.4.2",
+    "lucide-react": "^1.8.0",
+    "next": "^16.2.2",
+    "next-themes": "^0.4.6",
+    "posthog-js": "^1.367.0",
+    "react": "^19.2.0",
+    "react-day-picker": "^9.14.0",
+    "react-dom": "^19.2.0",
+    "react-hook-form": "^7.72.1",
+    "react-resizable-panels": "^4.10.0",
+    "recharts": "^3.8.1",
+    "sonner": "^2.0.7",
+    "tailwind-merge": "^3.5.0",
+    "tailwindcss-animate": "^1.0.7",
+    "vaul": "^1.1.2",
+    "zod": "^3.24.4"
+  },
+  "devDependencies": {
+    "@playwright/test": "^1.49.1",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^16.3.2",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^22.19.17",
+    "@types/react": "^19.1.2",
+    "@types/react-dom": "^19.1.2",
+    "autoprefixer": "^10.5.0",
+    "eslint": "^9.25.0",
+    "eslint-config-next": "^16.2.2",
+    "jest": "^30.3.0",
+    "jest-environment-jsdom": "^30.3.0",
+    "node-mocks-http": "^1.17.2",
+    "postcss": "^8.4.31",
+    "tailwindcss": "^4.2.2",
+    "ts-jest": "^29.4.9",
+    "typescript": "^5.8.3"
+  }
+}

apps/web/playwright.config.ts

@@ -0,0 +1,28 @@
+import { defineConfig, devices } from '@playwright/test';
+
+/**
+ * See https://playwright.dev/docs/test-configuration.
+ */
+export default defineConfig({
+  testDir: './e2e',
+  fullyParallel: true,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 2 : 0,
+  workers: process.env.CI ? 1 : undefined,
+  reporter: 'html',
+  use: {
+    baseURL: process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000',
+    trace: 'on-first-retry',
+  },
+  projects: [
+    {
+      name: 'chromium',
+      use: { ...devices['Desktop Chrome'] },
+    },
+  ],
+  webServer: {
+    command: 'npm run dev',
+    url: 'http://localhost:3000',
+    reuseExistingServer: !process.env.CI,
+  },
+});

apps/web/postcss.config.js

@@ -0,0 +1,6 @@
+export default {
+  plugins: {
+    "@tailwindcss/postcss": {},
+    autoprefixer: {},
+  },
+};

apps/web/public/manifest.json

@@ -0,0 +1,27 @@
+{
+  "name": "TenderHub Kenya",
+  "short_name": "TenderHub",
+  "description": "AI-powered tender execution platform for Kenyan SMEs and consultants",
+  "start_url": "/dashboard",
+  "display": "standalone",
+  "background_color": "#f8fafb",
+  "theme_color": "#059669",
+  "orientation": "portrait-primary",
+  "icons": [
+    {
+      "src": "/icons/icon-192.png",
+      "sizes": "192x192",
+      "type": "image/png",
+      "purpose": "any maskable"
+    },
+    {
+      "src": "/icons/icon-512.png",
+      "sizes": "512x512",
+      "type": "image/png",
+      "purpose": "any maskable"
+    }
+  ],
+  "categories": ["business", "productivity"],
+  "lang": "en",
+  "dir": "ltr"
+}

apps/web/public/sw.js

@@ -0,0 +1 @@
+if(!self.define){let e,s={};const t=(t,n)=>(t=new URL(t+".js",n).href,s[t]||new Promise(s=>{if("document"in self){const e=document.createElement("script");e.src=t,e.onload=s,document.head.appendChild(e)}else e=t,importScripts(t),s()}).then(()=>{let e=s[t];if(!e)throw new Error(`Module ${t} didn’t register its module`);return e}));self.define=(n,a)=>{const i=e||("document"in self?document.currentScript.src:"")||location.href;if(s[i])return;let c={};const d=e=>t(e,i),r={module:{uri:i},exports:c,require:d};s[i]=Promise.all(n.map(e=>r[e]||d(e))).then(e=>(a(...e),c))}}define(["./workbox-b52a85cb"],function(e){"use strict";importScripts(),self.skipWaiting(),e.clientsClaim(),e.precacheAndRoute([{url:"/_next/static/L4hQgc15WqfIHZwcLSX3G/_buildManifest.js",revision:"1f8cdb6d84803b62bc3866b6c120a3d8"},{url:"/_next/static/L4hQgc15WqfIHZwcLSX3G/_ssgManifest.js",revision:"b6652df95db52feb4daf4eca35380933"},{url:"/_next/static/chunks/1446.2a26417c759e67b8.js",revision:"2a26417c759e67b8"},{url:"/_next/static/chunks/445-80c5b3bdef721e07.js",revision:"80c5b3bdef721e07"},{url:"/_next/static/chunks/6387.9a7bf416cbcd193d.js",revision:"9a7bf416cbcd193d"},{url:"/_next/static/chunks/7453-5362801bf71a3662.js",revision:"5362801bf71a3662"},{url:"/_next/static/chunks/75504863-ea0a4eadd7cf0a00.js",revision:"ea0a4eadd7cf0a00"},{url:"/_next/static/chunks/87c73c54-f46fec743414da25.js",revision:"f46fec743414da25"},{url:"/_next/static/chunks/9348.63f2aee1edfebcb6.js",revision:"63f2aee1edfebcb6"},{url:"/_next/static/chunks/app/_global-error/page-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/_not-found/page-9606f522f24bf594.js",revision:"9606f522f24bf594"},{url:"/_next/static/chunks/app/admin/layout-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/admin/page-7814eb33274edf87.js",revision:"7814eb33274edf87"},{url:"/_next/static/chunks/app/api/admin/activity/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/admin/check/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/admin/jobs/retry/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/admin/jobs/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/admin/stats/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/admin/users/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/admin/users/toggle-superuser/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/company-profile/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/payments/mpesa/callback/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/payments/mpesa/status/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/payments/mpesa/stk/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/analysis/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/drafts/batch/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/drafts/export/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/drafts/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/events/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/jobs/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/outcome/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/preview/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/process/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/review-action/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/status/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/%5Bid%5D/unlock/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/review-queue/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/tenders/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/api/uploads/init/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/auth/callback/route-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/console/page-0fbc7f6f1669ba32.js",revision:"0fbc7f6f1669ba32"},{url:"/_next/static/chunks/app/dashboard/layout-1b9b9baa668911be.js",revision:"1b9b9baa668911be"},{url:"/_next/static/chunks/app/dashboard/page-784500552c688434.js",revision:"784500552c688434"},{url:"/_next/static/chunks/app/dashboard/profile/page-416e752a44c50a5d.js",revision:"416e752a44c50a5d"},{url:"/_next/static/chunks/app/dashboard/tenders/%5Bid%5D/page-9ab4af1e3c7459b1.js",revision:"9ab4af1e3c7459b1"},{url:"/_next/static/chunks/app/dashboard/upload/page-b6a0282b19a09a9b.js",revision:"b6a0282b19a09a9b"},{url:"/_next/static/chunks/app/layout-b8eea8c8fef7c339.js",revision:"b8eea8c8fef7c339"},{url:"/_next/static/chunks/app/login/page-a70d1683c9c64722.js",revision:"a70d1683c9c64722"},{url:"/_next/static/chunks/app/page-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/app/signup/page-3a7db5ae5b62c86f.js",revision:"3a7db5ae5b62c86f"},{url:"/_next/static/chunks/framework-af3c63e39f557570.js",revision:"af3c63e39f557570"},{url:"/_next/static/chunks/main-app-6f1d7875af57e840.js",revision:"6f1d7875af57e840"},{url:"/_next/static/chunks/main-d6e97713b784943a.js",revision:"d6e97713b784943a"},{url:"/_next/static/chunks/next/dist/client/components/builtin/app-error-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/next/dist/client/components/builtin/forbidden-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/next/dist/client/components/builtin/global-error-99b983b19fb84353.js",revision:"99b983b19fb84353"},{url:"/_next/static/chunks/next/dist/client/components/builtin/not-found-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/next/dist/client/components/builtin/unauthorized-744358325e4fdd6e.js",revision:"744358325e4fdd6e"},{url:"/_next/static/chunks/polyfills-42372ed130431b0a.js",revision:"846118c33b2c0e922d7b3a7676f81f6f"},{url:"/_next/static/chunks/webpack-7854310dc8f9cd55.js",revision:"7854310dc8f9cd55"},{url:"/_next/static/css/0ac91d5f0f908c34.css",revision:"0ac91d5f0f908c34"},{url:"/icons/icon-192.png",revision:"2a637d3d825673c0e3462fa4ed9a1c5c"},{url:"/icons/icon-512.png",revision:"2a637d3d825673c0e3462fa4ed9a1c5c"},{url:"/manifest.json",revision:"5c60071d592bb2d645b2268625f4b573"}],{ignoreURLParametersMatching:[/^utm_/,/^fbclid$/]}),e.cleanupOutdatedCaches(),e.registerRoute("/",new e.NetworkFirst({cacheName:"start-url",plugins:[{cacheWillUpdate:async({response:e})=>e&&"opaqueredirect"===e.type?new Response(e.body,{status:200,statusText:"OK",headers:e.headers}):e}]}),"GET"),e.registerRoute(/^https:\/\/fonts\.(?:gstatic)\.com\/.*/i,new e.CacheFirst({cacheName:"google-fonts-webfonts",plugins:[new e.ExpirationPlugin({maxEntries:4,maxAgeSeconds:31536e3})]}),"GET"),e.registerRoute(/^https:\/\/fonts\.(?:googleapis)\.com\/.*/i,new e.StaleWhileRevalidate({cacheName:"google-fonts-stylesheets",plugins:[new e.ExpirationPlugin({maxEntries:4,maxAgeSeconds:604800})]}),"GET"),e.registerRoute(/\.(?:eot|otf|ttc|ttf|woff|woff2|font.css)$/i,new e.StaleWhileRevalidate({cacheName:"static-font-assets",plugins:[new e.ExpirationPlugin({maxEntries:4,maxAgeSeconds:604800})]}),"GET"),e.registerRoute(/\.(?:jpg|jpeg|gif|png|svg|ico|webp)$/i,new e.StaleWhileRevalidate({cacheName:"static-image-assets",plugins:[new e.ExpirationPlugin({maxEntries:64,maxAgeSeconds:2592e3})]}),"GET"),e.registerRoute(/\/_next\/static.+\.js$/i,new e.CacheFirst({cacheName:"next-static-js-assets",plugins:[new e.ExpirationPlugin({maxEntries:64,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(/\/_next\/image\?url=.+$/i,new e.StaleWhileRevalidate({cacheName:"next-image",plugins:[new e.ExpirationPlugin({maxEntries:64,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(/\.(?:mp3|wav|ogg)$/i,new e.CacheFirst({cacheName:"static-audio-assets",plugins:[new e.RangeRequestsPlugin,new e.ExpirationPlugin({maxEntries:32,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(/\.(?:mp4|webm)$/i,new e.CacheFirst({cacheName:"static-video-assets",plugins:[new e.RangeRequestsPlugin,new e.ExpirationPlugin({maxEntries:32,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(/\.(?:js)$/i,new e.StaleWhileRevalidate({cacheName:"static-js-assets",plugins:[new e.ExpirationPlugin({maxEntries:48,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(/\.(?:css|less)$/i,new e.StaleWhileRevalidate({cacheName:"static-style-assets",plugins:[new e.ExpirationPlugin({maxEntries:32,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(/\/_next\/data\/.+\/.+\.json$/i,new e.StaleWhileRevalidate({cacheName:"next-data",plugins:[new e.ExpirationPlugin({maxEntries:32,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(/\.(?:json|xml|csv)$/i,new e.NetworkFirst({cacheName:"static-data-assets",plugins:[new e.ExpirationPlugin({maxEntries:32,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(({sameOrigin:e,url:{pathname:s}})=>!(!e||s.startsWith("/api/auth/callback")||!s.startsWith("/api/")),new e.NetworkFirst({cacheName:"apis",networkTimeoutSeconds:10,plugins:[new e.ExpirationPlugin({maxEntries:16,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(({request:e,url:{pathname:s},sameOrigin:t})=>"1"===e.headers.get("RSC")&&"1"===e.headers.get("Next-Router-Prefetch")&&t&&!s.startsWith("/api/"),new e.NetworkFirst({cacheName:"pages-rsc-prefetch",plugins:[new e.ExpirationPlugin({maxEntries:32,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(({request:e,url:{pathname:s},sameOrigin:t})=>"1"===e.headers.get("RSC")&&t&&!s.startsWith("/api/"),new e.NetworkFirst({cacheName:"pages-rsc",plugins:[new e.ExpirationPlugin({maxEntries:32,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(({url:{pathname:e},sameOrigin:s})=>s&&!e.startsWith("/api/"),new e.NetworkFirst({cacheName:"pages",plugins:[new e.ExpirationPlugin({maxEntries:32,maxAgeSeconds:86400})]}),"GET"),e.registerRoute(({sameOrigin:e})=>!e,new e.NetworkFirst({cacheName:"cross-origin",networkTimeoutSeconds:10,plugins:[new e.ExpirationPlugin({maxEntries:32,maxAgeSeconds:3600})]}),"GET")});

apps/web/public/workbox-b52a85cb.js

@@ -0,0 +1 @@
+define(["exports"],function(t){"use strict";try{self["workbox:core:7.0.0"]&&_()}catch(t){}const e=(t,...e)=>{let s=t;return e.length>0&&(s+=` :: ${JSON.stringify(e)}`),s};class s extends Error{constructor(t,s){super(e(t,s)),this.name=t,this.details=s}}try{self["workbox:routing:7.0.0"]&&_()}catch(t){}const n=t=>t&&"object"==typeof t?t:{handle:t};class r{constructor(t,e,s="GET"){this.handler=n(e),this.match=t,this.method=s}setCatchHandler(t){this.catchHandler=n(t)}}class i extends r{constructor(t,e,s){super(({url:e})=>{const s=t.exec(e.href);if(s&&(e.origin===location.origin||0===s.index))return s.slice(1)},e,s)}}class a{constructor(){this.t=new Map,this.i=new Map}get routes(){return this.t}addFetchListener(){self.addEventListener("fetch",t=>{const{request:e}=t,s=this.handleRequest({request:e,event:t});s&&t.respondWith(s)})}addCacheListener(){self.addEventListener("message",t=>{if(t.data&&"CACHE_URLS"===t.data.type){const{payload:e}=t.data,s=Promise.all(e.urlsToCache.map(e=>{"string"==typeof e&&(e=[e]);const s=new Request(...e);return this.handleRequest({request:s,event:t})}));t.waitUntil(s),t.ports&&t.ports[0]&&s.then(()=>t.ports[0].postMessage(!0))}})}handleRequest({request:t,event:e}){const s=new URL(t.url,location.href);if(!s.protocol.startsWith("http"))return;const n=s.origin===location.origin,{params:r,route:i}=this.findMatchingRoute({event:e,request:t,sameOrigin:n,url:s});let a=i&&i.handler;const o=t.method;if(!a&&this.i.has(o)&&(a=this.i.get(o)),!a)return;let c;try{c=a.handle({url:s,request:t,event:e,params:r})}catch(t){c=Promise.reject(t)}const h=i&&i.catchHandler;return c instanceof Promise&&(this.o||h)&&(c=c.catch(async n=>{if(h)try{return await h.handle({url:s,request:t,event:e,params:r})}catch(t){t instanceof Error&&(n=t)}if(this.o)return this.o.handle({url:s,request:t,event:e});throw n})),c}findMatchingRoute({url:t,sameOrigin:e,request:s,event:n}){const r=this.t.get(s.method)||[];for(const i of r){let r;const a=i.match({url:t,sameOrigin:e,request:s,event:n});if(a)return r=a,(Array.isArray(r)&&0===r.length||a.constructor===Object&&0===Object.keys(a).length||"boolean"==typeof a)&&(r=void 0),{route:i,params:r}}return{}}setDefaultHandler(t,e="GET"){this.i.set(e,n(t))}setCatchHandler(t){this.o=n(t)}registerRoute(t){this.t.has(t.method)||this.t.set(t.method,[]),this.t.get(t.method).push(t)}unregisterRoute(t){if(!this.t.has(t.method))throw new s("unregister-route-but-not-found-with-method",{method:t.method});const e=this.t.get(t.method).indexOf(t);if(!(e>-1))throw new s("unregister-route-route-not-registered");this.t.get(t.method).splice(e,1)}}let o;const c=()=>(o||(o=new a,o.addFetchListener(),o.addCacheListener()),o);function h(t,e,n){let a;if("string"==typeof t){const s=new URL(t,location.href);a=new r(({url:t})=>t.href===s.href,e,n)}else if(t instanceof RegExp)a=new i(t,e,n);else if("function"==typeof t)a=new r(t,e,n);else{if(!(t instanceof r))throw new s("unsupported-route-type",{moduleName:"workbox-routing",funcName:"registerRoute",paramName:"capture"});a=t}return c().registerRoute(a),a}try{self["workbox:strategies:7.0.0"]&&_()}catch(t){}const u={cacheWillUpdate:async({response:t})=>200===t.status||0===t.status?t:null},l={googleAnalytics:"googleAnalytics",precache:"precache-v2",prefix:"workbox",runtime:"runtime",suffix:"undefined"!=typeof registration?registration.scope:""},f=t=>[l.prefix,t,l.suffix].filter(t=>t&&t.length>0).join("-"),w=t=>t||f(l.precache),d=t=>t||f(l.runtime);function p(t,e){const s=new URL(t);for(const t of e)s.searchParams.delete(t);return s.href}class y{constructor(){this.promise=new Promise((t,e)=>{this.resolve=t,this.reject=e})}}const g=new Set;function m(t){return"string"==typeof t?new Request(t):t}class v{constructor(t,e){this.h={},Object.assign(this,e),this.event=e.event,this.u=t,this.l=new y,this.p=[],this.m=[...t.plugins],this.v=new Map;for(const t of this.m)this.v.set(t,{});this.event.waitUntil(this.l.promise)}async fetch(t){const{event:e}=this;let n=m(t);if("navigate"===n.mode&&e instanceof FetchEvent&&e.preloadResponse){const t=await e.preloadResponse;if(t)return t}const r=this.hasCallback("fetchDidFail")?n.clone():null;try{for(const t of this.iterateCallbacks("requestWillFetch"))n=await t({request:n.clone(),event:e})}catch(t){if(t instanceof Error)throw new s("plugin-error-request-will-fetch",{thrownErrorMessage:t.message})}const i=n.clone();try{let t;t=await fetch(n,"navigate"===n.mode?void 0:this.u.fetchOptions);for(const s of this.iterateCallbacks("fetchDidSucceed"))t=await s({event:e,request:i,response:t});return t}catch(t){throw r&&await this.runCallbacks("fetchDidFail",{error:t,event:e,originalRequest:r.clone(),request:i.clone()}),t}}async fetchAndCachePut(t){const e=await this.fetch(t),s=e.clone();return this.waitUntil(this.cachePut(t,s)),e}async cacheMatch(t){const e=m(t);let s;const{cacheName:n,matchOptions:r}=this.u,i=await this.getCacheKey(e,"read"),a=Object.assign(Object.assign({},r),{cacheName:n});s=await caches.match(i,a);for(const t of this.iterateCallbacks("cachedResponseWillBeUsed"))s=await t({cacheName:n,matchOptions:r,cachedResponse:s,request:i,event:this.event})||void 0;return s}async cachePut(t,e){const n=m(t);var r;await(r=0,new Promise(t=>setTimeout(t,r)));const i=await this.getCacheKey(n,"write");if(!e)throw new s("cache-put-with-no-response",{url:(a=i.url,new URL(String(a),location.href).href.replace(new RegExp(`^${location.origin}`),""))});var a;const o=await this.R(e);if(!o)return!1;const{cacheName:c,matchOptions:h}=this.u,u=await self.caches.open(c),l=this.hasCallback("cacheDidUpdate"),f=l?await async function(t,e,s,n){const r=p(e.url,s);if(e.url===r)return t.match(e,n);const i=Object.assign(Object.assign({},n),{ignoreSearch:!0}),a=await t.keys(e,i);for(const e of a)if(r===p(e.url,s))return t.match(e,n)}(u,i.clone(),["__WB_REVISION__"],h):null;try{await u.put(i,l?o.clone():o)}catch(t){if(t instanceof Error)throw"QuotaExceededError"===t.name&&await async function(){for(const t of g)await t()}(),t}for(const t of this.iterateCallbacks("cacheDidUpdate"))await t({cacheName:c,oldResponse:f,newResponse:o.clone(),request:i,event:this.event});return!0}async getCacheKey(t,e){const s=`${t.url} | ${e}`;if(!this.h[s]){let n=t;for(const t of this.iterateCallbacks("cacheKeyWillBeUsed"))n=m(await t({mode:e,request:n,event:this.event,params:this.params}));this.h[s]=n}return this.h[s]}hasCallback(t){for(const e of this.u.plugins)if(t in e)return!0;return!1}async runCallbacks(t,e){for(const s of this.iterateCallbacks(t))await s(e)}*iterateCallbacks(t){for(const e of this.u.plugins)if("function"==typeof e[t]){const s=this.v.get(e),n=n=>{const r=Object.assign(Object.assign({},n),{state:s});return e[t](r)};yield n}}waitUntil(t){return this.p.push(t),t}async doneWaiting(){let t;for(;t=this.p.shift();)await t}destroy(){this.l.resolve(null)}async R(t){let e=t,s=!1;for(const t of this.iterateCallbacks("cacheWillUpdate"))if(e=await t({request:this.request,response:e,event:this.event})||void 0,s=!0,!e)break;return s||e&&200!==e.status&&(e=void 0),e}}class R{constructor(t={}){this.cacheName=d(t.cacheName),this.plugins=t.plugins||[],this.fetchOptions=t.fetchOptions,this.matchOptions=t.matchOptions}handle(t){const[e]=this.handleAll(t);return e}handleAll(t){t instanceof FetchEvent&&(t={event:t,request:t.request});const e=t.event,s="string"==typeof t.request?new Request(t.request):t.request,n="params"in t?t.params:void 0,r=new v(this,{event:e,request:s,params:n}),i=this.q(r,s,e);return[i,this.D(i,r,s,e)]}async q(t,e,n){let r;await t.runCallbacks("handlerWillStart",{event:n,request:e});try{if(r=await this.U(e,t),!r||"error"===r.type)throw new s("no-response",{url:e.url})}catch(s){if(s instanceof Error)for(const i of t.iterateCallbacks("handlerDidError"))if(r=await i({error:s,event:n,request:e}),r)break;if(!r)throw s}for(const s of t.iterateCallbacks("handlerWillRespond"))r=await s({event:n,request:e,response:r});return r}async D(t,e,s,n){let r,i;try{r=await t}catch(i){}try{await e.runCallbacks("handlerDidRespond",{event:n,request:s,response:r}),await e.doneWaiting()}catch(t){t instanceof Error&&(i=t)}if(await e.runCallbacks("handlerDidComplete",{event:n,request:s,response:r,error:i}),e.destroy(),i)throw i}}function b(t){t.then(()=>{})}function q(){return q=Object.assign?Object.assign.bind():function(t){for(var e=1;e<arguments.length;e++){var s=arguments[e];for(var n in s)({}).hasOwnProperty.call(s,n)&&(t[n]=s[n])}return t},q.apply(null,arguments)}let D,U;const x=new WeakMap,L=new WeakMap,I=new WeakMap,C=new WeakMap,E=new WeakMap;let N={get(t,e,s){if(t instanceof IDBTransaction){if("done"===e)return L.get(t);if("objectStoreNames"===e)return t.objectStoreNames||I.get(t);if("store"===e)return s.objectStoreNames[1]?void 0:s.objectStore(s.objectStoreNames[0])}return k(t[e])},set:(t,e,s)=>(t[e]=s,!0),has:(t,e)=>t instanceof IDBTransaction&&("done"===e||"store"===e)||e in t};function O(t){return t!==IDBDatabase.prototype.transaction||"objectStoreNames"in IDBTransaction.prototype?(U||(U=[IDBCursor.prototype.advance,IDBCursor.prototype.continue,IDBCursor.prototype.continuePrimaryKey])).includes(t)?function(...e){return t.apply(B(this),e),k(x.get(this))}:function(...e){return k(t.apply(B(this),e))}:function(e,...s){const n=t.call(B(this),e,...s);return I.set(n,e.sort?e.sort():[e]),k(n)}}function T(t){return"function"==typeof t?O(t):(t instanceof IDBTransaction&&function(t){if(L.has(t))return;const e=new Promise((e,s)=>{const n=()=>{t.removeEventListener("complete",r),t.removeEventListener("error",i),t.removeEventListener("abort",i)},r=()=>{e(),n()},i=()=>{s(t.error||new DOMException("AbortError","AbortError")),n()};t.addEventListener("complete",r),t.addEventListener("error",i),t.addEventListener("abort",i)});L.set(t,e)}(t),e=t,(D||(D=[IDBDatabase,IDBObjectStore,IDBIndex,IDBCursor,IDBTransaction])).some(t=>e instanceof t)?new Proxy(t,N):t);var e}function k(t){if(t instanceof IDBRequest)return function(t){const e=new Promise((e,s)=>{const n=()=>{t.removeEventListener("success",r),t.removeEventListener("error",i)},r=()=>{e(k(t.result)),n()},i=()=>{s(t.error),n()};t.addEventListener("success",r),t.addEventListener("error",i)});return e.then(e=>{e instanceof IDBCursor&&x.set(e,t)}).catch(()=>{}),E.set(e,t),e}(t);if(C.has(t))return C.get(t);const e=T(t);return e!==t&&(C.set(t,e),E.set(e,t)),e}const B=t=>E.get(t);const P=["get","getKey","getAll","getAllKeys","count"],M=["put","add","delete","clear"],W=new Map;function j(t,e){if(!(t instanceof IDBDatabase)||e in t||"string"!=typeof e)return;if(W.get(e))return W.get(e);const s=e.replace(/FromIndex$/,""),n=e!==s,r=M.includes(s);if(!(s in(n?IDBIndex:IDBObjectStore).prototype)||!r&&!P.includes(s))return;const i=async function(t,...e){const i=this.transaction(t,r?"readwrite":"readonly");let a=i.store;return n&&(a=a.index(e.shift())),(await Promise.all([a[s](...e),r&&i.done]))[0]};return W.set(e,i),i}N=(t=>q({},t,{get:(e,s,n)=>j(e,s)||t.get(e,s,n),has:(e,s)=>!!j(e,s)||t.has(e,s)}))(N);try{self["workbox:expiration:7.0.0"]&&_()}catch(t){}const S="cache-entries",K=t=>{const e=new URL(t,location.href);return e.hash="",e.href};class A{constructor(t){this._=null,this.L=t}I(t){const e=t.createObjectStore(S,{keyPath:"id"});e.createIndex("cacheName","cacheName",{unique:!1}),e.createIndex("timestamp","timestamp",{unique:!1})}C(t){this.I(t),this.L&&function(t,{blocked:e}={}){const s=indexedDB.deleteDatabase(t);e&&s.addEventListener("blocked",t=>e(t.oldVersion,t)),k(s).then(()=>{})}(this.L)}async setTimestamp(t,e){const s={url:t=K(t),timestamp:e,cacheName:this.L,id:this.N(t)},n=(await this.getDb()).transaction(S,"readwrite",{durability:"relaxed"});await n.store.put(s),await n.done}async getTimestamp(t){const e=await this.getDb(),s=await e.get(S,this.N(t));return null==s?void 0:s.timestamp}async expireEntries(t,e){const s=await this.getDb();let n=await s.transaction(S).store.index("timestamp").openCursor(null,"prev");const r=[];let i=0;for(;n;){const s=n.value;s.cacheName===this.L&&(t&&s.timestamp<t||e&&i>=e?r.push(n.value):i++),n=await n.continue()}const a=[];for(const t of r)await s.delete(S,t.id),a.push(t.url);return a}N(t){return this.L+"|"+K(t)}async getDb(){return this._||(this._=await function(t,e,{blocked:s,upgrade:n,blocking:r,terminated:i}={}){const a=indexedDB.open(t,e),o=k(a);return n&&a.addEventListener("upgradeneeded",t=>{n(k(a.result),t.oldVersion,t.newVersion,k(a.transaction),t)}),s&&a.addEventListener("blocked",t=>s(t.oldVersion,t.newVersion,t)),o.then(t=>{i&&t.addEventListener("close",()=>i()),r&&t.addEventListener("versionchange",t=>r(t.oldVersion,t.newVersion,t))}).catch(()=>{}),o}("workbox-expiration",1,{upgrade:this.C.bind(this)})),this._}}class F{constructor(t,e={}){this.O=!1,this.T=!1,this.k=e.maxEntries,this.B=e.maxAgeSeconds,this.P=e.matchOptions,this.L=t,this.M=new A(t)}async expireEntries(){if(this.O)return void(this.T=!0);this.O=!0;const t=this.B?Date.now()-1e3*this.B:0,e=await this.M.expireEntries(t,this.k),s=await self.caches.open(this.L);for(const t of e)await s.delete(t,this.P);this.O=!1,this.T&&(this.T=!1,b(this.expireEntries()))}async updateTimestamp(t){await this.M.setTimestamp(t,Date.now())}async isURLExpired(t){if(this.B){const e=await this.M.getTimestamp(t),s=Date.now()-1e3*this.B;return void 0===e||e<s}return!1}async delete(){this.T=!1,await this.M.expireEntries(1/0)}}try{self["workbox:range-requests:7.0.0"]&&_()}catch(t){}async function H(t,e){try{if(206===e.status)return e;const n=t.headers.get("range");if(!n)throw new s("no-range-header");const r=function(t){const e=t.trim().toLowerCase();if(!e.startsWith("bytes="))throw new s("unit-must-be-bytes",{normalizedRangeHeader:e});if(e.includes(","))throw new s("single-range-only",{normalizedRangeHeader:e});const n=/(\d*)-(\d*)/.exec(e);if(!n||!n[1]&&!n[2])throw new s("invalid-range-values",{normalizedRangeHeader:e});return{start:""===n[1]?void 0:Number(n[1]),end:""===n[2]?void 0:Number(n[2])}}(n),i=await e.blob(),a=function(t,e,n){const r=t.size;if(n&&n>r||e&&e<0)throw new s("range-not-satisfiable",{size:r,end:n,start:e});let i,a;return void 0!==e&&void 0!==n?(i=e,a=n+1):void 0!==e&&void 0===n?(i=e,a=r):void 0!==n&&void 0===e&&(i=r-n,a=r),{start:i,end:a}}(i,r.start,r.end),o=i.slice(a.start,a.end),c=o.size,h=new Response(o,{status:206,statusText:"Partial Content",headers:e.headers});return h.headers.set("Content-Length",String(c)),h.headers.set("Content-Range",`bytes ${a.start}-${a.end-1}/${i.size}`),h}catch(t){return new Response("",{status:416,statusText:"Range Not Satisfiable"})}}function $(t,e){const s=e();return t.waitUntil(s),s}try{self["workbox:precaching:7.0.0"]&&_()}catch(t){}function z(t){if(!t)throw new s("add-to-cache-list-unexpected-type",{entry:t});if("string"==typeof t){const e=new URL(t,location.href);return{cacheKey:e.href,url:e.href}}const{revision:e,url:n}=t;if(!n)throw new s("add-to-cache-list-unexpected-type",{entry:t});if(!e){const t=new URL(n,location.href);return{cacheKey:t.href,url:t.href}}const r=new URL(n,location.href),i=new URL(n,location.href);return r.searchParams.set("__WB_REVISION__",e),{cacheKey:r.href,url:i.href}}class G{constructor(){this.updatedURLs=[],this.notUpdatedURLs=[],this.handlerWillStart=async({request:t,state:e})=>{e&&(e.originalRequest=t)},this.cachedResponseWillBeUsed=async({event:t,state:e,cachedResponse:s})=>{if("install"===t.type&&e&&e.originalRequest&&e.originalRequest instanceof Request){const t=e.originalRequest.url;s?this.notUpdatedURLs.push(t):this.updatedURLs.push(t)}return s}}}class V{constructor({precacheController:t}){this.cacheKeyWillBeUsed=async({request:t,params:e})=>{const s=(null==e?void 0:e.cacheKey)||this.W.getCacheKeyForURL(t.url);return s?new Request(s,{headers:t.headers}):t},this.W=t}}let J,Q;async function X(t,e){let n=null;if(t.url){n=new URL(t.url).origin}if(n!==self.location.origin)throw new s("cross-origin-copy-response",{origin:n});const r=t.clone(),i={headers:new Headers(r.headers),status:r.status,statusText:r.statusText},a=e?e(i):i,o=function(){if(void 0===J){const t=new Response("");if("body"in t)try{new Response(t.body),J=!0}catch(t){J=!1}J=!1}return J}()?r.body:await r.blob();return new Response(o,a)}class Y extends R{constructor(t={}){t.cacheName=w(t.cacheName),super(t),this.j=!1!==t.fallbackToNetwork,this.plugins.push(Y.copyRedirectedCacheableResponsesPlugin)}async U(t,e){const s=await e.cacheMatch(t);return s||(e.event&&"install"===e.event.type?await this.S(t,e):await this.K(t,e))}async K(t,e){let n;const r=e.params||{};if(!this.j)throw new s("missing-precache-entry",{cacheName:this.cacheName,url:t.url});{const s=r.integrity,i=t.integrity,a=!i||i===s;n=await e.fetch(new Request(t,{integrity:"no-cors"!==t.mode?i||s:void 0})),s&&a&&"no-cors"!==t.mode&&(this.A(),await e.cachePut(t,n.clone()))}return n}async S(t,e){this.A();const n=await e.fetch(t);if(!await e.cachePut(t,n.clone()))throw new s("bad-precaching-response",{url:t.url,status:n.status});return n}A(){let t=null,e=0;for(const[s,n]of this.plugins.entries())n!==Y.copyRedirectedCacheableResponsesPlugin&&(n===Y.defaultPrecacheCacheabilityPlugin&&(t=s),n.cacheWillUpdate&&e++);0===e?this.plugins.push(Y.defaultPrecacheCacheabilityPlugin):e>1&&null!==t&&this.plugins.splice(t,1)}}Y.defaultPrecacheCacheabilityPlugin={cacheWillUpdate:async({response:t})=>!t||t.status>=400?null:t},Y.copyRedirectedCacheableResponsesPlugin={cacheWillUpdate:async({response:t})=>t.redirected?await X(t):t};class Z{constructor({cacheName:t,plugins:e=[],fallbackToNetwork:s=!0}={}){this.F=new Map,this.H=new Map,this.$=new Map,this.u=new Y({cacheName:w(t),plugins:[...e,new V({precacheController:this})],fallbackToNetwork:s}),this.install=this.install.bind(this),this.activate=this.activate.bind(this)}get strategy(){return this.u}precache(t){this.addToCacheList(t),this.G||(self.addEventListener("install",this.install),self.addEventListener("activate",this.activate),this.G=!0)}addToCacheList(t){const e=[];for(const n of t){"string"==typeof n?e.push(n):n&&void 0===n.revision&&e.push(n.url);const{cacheKey:t,url:r}=z(n),i="string"!=typeof n&&n.revision?"reload":"default";if(this.F.has(r)&&this.F.get(r)!==t)throw new s("add-to-cache-list-conflicting-entries",{firstEntry:this.F.get(r),secondEntry:t});if("string"!=typeof n&&n.integrity){if(this.$.has(t)&&this.$.get(t)!==n.integrity)throw new s("add-to-cache-list-conflicting-integrities",{url:r});this.$.set(t,n.integrity)}if(this.F.set(r,t),this.H.set(r,i),e.length>0){const t=`Workbox is precaching URLs without revision info: ${e.join(", ")}\nThis is generally NOT safe. Learn more at https://bit.ly/wb-precache`;console.warn(t)}}}install(t){return $(t,async()=>{const e=new G;this.strategy.plugins.push(e);for(const[e,s]of this.F){const n=this.$.get(s),r=this.H.get(e),i=new Request(e,{integrity:n,cache:r,credentials:"same-origin"});await Promise.all(this.strategy.handleAll({params:{cacheKey:s},request:i,event:t}))}const{updatedURLs:s,notUpdatedURLs:n}=e;return{updatedURLs:s,notUpdatedURLs:n}})}activate(t){return $(t,async()=>{const t=await self.caches.open(this.strategy.cacheName),e=await t.keys(),s=new Set(this.F.values()),n=[];for(const r of e)s.has(r.url)||(await t.delete(r),n.push(r.url));return{deletedURLs:n}})}getURLsToCacheKeys(){return this.F}getCachedURLs(){return[...this.F.keys()]}getCacheKeyForURL(t){const e=new URL(t,location.href);return this.F.get(e.href)}getIntegrityForCacheKey(t){return this.$.get(t)}async matchPrecache(t){const e=t instanceof Request?t.url:t,s=this.getCacheKeyForURL(e);if(s){return(await self.caches.open(this.strategy.cacheName)).match(s)}}createHandlerBoundToURL(t){const e=this.getCacheKeyForURL(t);if(!e)throw new s("non-precached-url",{url:t});return s=>(s.request=new Request(t),s.params=Object.assign({cacheKey:e},s.params),this.strategy.handle(s))}}const tt=()=>(Q||(Q=new Z),Q);class et extends r{constructor(t,e){super(({request:s})=>{const n=t.getURLsToCacheKeys();for(const r of function*(t,{ignoreURLParametersMatching:e=[/^utm_/,/^fbclid$/],directoryIndex:s="index.html",cleanURLs:n=!0,urlManipulation:r}={}){const i=new URL(t,location.href);i.hash="",yield i.href;const a=function(t,e=[]){for(const s of[...t.searchParams.keys()])e.some(t=>t.test(s))&&t.searchParams.delete(s);return t}(i,e);if(yield a.href,s&&a.pathname.endsWith("/")){const t=new URL(a.href);t.pathname+=s,yield t.href}if(n){const t=new URL(a.href);t.pathname+=".html",yield t.href}if(r){const t=r({url:i});for(const e of t)yield e.href}}(s.url,e)){const e=n.get(r);if(e){return{cacheKey:e,integrity:t.getIntegrityForCacheKey(e)}}}},t.strategy)}}t.CacheFirst=class extends R{async U(t,e){let n,r=await e.cacheMatch(t);if(!r)try{r=await e.fetchAndCachePut(t)}catch(t){t instanceof Error&&(n=t)}if(!r)throw new s("no-response",{url:t.url,error:n});return r}},t.ExpirationPlugin=class{constructor(t={}){this.cachedResponseWillBeUsed=async({event:t,request:e,cacheName:s,cachedResponse:n})=>{if(!n)return null;const r=this.V(n),i=this.J(s);b(i.expireEntries());const a=i.updateTimestamp(e.url);if(t)try{t.waitUntil(a)}catch(t){}return r?n:null},this.cacheDidUpdate=async({cacheName:t,request:e})=>{const s=this.J(t);await s.updateTimestamp(e.url),await s.expireEntries()},this.X=t,this.B=t.maxAgeSeconds,this.Y=new Map,t.purgeOnQuotaError&&function(t){g.add(t)}(()=>this.deleteCacheAndMetadata())}J(t){if(t===d())throw new s("expire-custom-caches-only");let e=this.Y.get(t);return e||(e=new F(t,this.X),this.Y.set(t,e)),e}V(t){if(!this.B)return!0;const e=this.Z(t);if(null===e)return!0;return e>=Date.now()-1e3*this.B}Z(t){if(!t.headers.has("date"))return null;const e=t.headers.get("date"),s=new Date(e).getTime();return isNaN(s)?null:s}async deleteCacheAndMetadata(){for(const[t,e]of this.Y)await self.caches.delete(t),await e.delete();this.Y=new Map}},t.NetworkFirst=class extends R{constructor(t={}){super(t),this.plugins.some(t=>"cacheWillUpdate"in t)||this.plugins.unshift(u),this.tt=t.networkTimeoutSeconds||0}async U(t,e){const n=[],r=[];let i;if(this.tt){const{id:s,promise:a}=this.et({request:t,logs:n,handler:e});i=s,r.push(a)}const a=this.st({timeoutId:i,request:t,logs:n,handler:e});r.push(a);const o=await e.waitUntil((async()=>await e.waitUntil(Promise.race(r))||await a)());if(!o)throw new s("no-response",{url:t.url});return o}et({request:t,logs:e,handler:s}){let n;return{promise:new Promise(e=>{n=setTimeout(async()=>{e(await s.cacheMatch(t))},1e3*this.tt)}),id:n}}async st({timeoutId:t,request:e,logs:s,handler:n}){let r,i;try{i=await n.fetchAndCachePut(e)}catch(t){t instanceof Error&&(r=t)}return t&&clearTimeout(t),!r&&i||(i=await n.cacheMatch(e)),i}},t.RangeRequestsPlugin=class{constructor(){this.cachedResponseWillBeUsed=async({request:t,cachedResponse:e})=>e&&t.headers.has("range")?await H(t,e):e}},t.StaleWhileRevalidate=class extends R{constructor(t={}){super(t),this.plugins.some(t=>"cacheWillUpdate"in t)||this.plugins.unshift(u)}async U(t,e){const n=e.fetchAndCachePut(t).catch(()=>{});e.waitUntil(n);let r,i=await e.cacheMatch(t);if(i);else try{i=await n}catch(t){t instanceof Error&&(r=t)}if(!i)throw new s("no-response",{url:t.url,error:r});return i}},t.cleanupOutdatedCaches=function(){self.addEventListener("activate",t=>{const e=w();t.waitUntil((async(t,e="-precache-")=>{const s=(await self.caches.keys()).filter(s=>s.includes(e)&&s.includes(self.registration.scope)&&s!==t);return await Promise.all(s.map(t=>self.caches.delete(t))),s})(e).then(t=>{}))})},t.clientsClaim=function(){self.addEventListener("activate",()=>self.clients.claim())},t.precacheAndRoute=function(t,e){!function(t){tt().precache(t)}(t),function(t){const e=tt();h(new et(e,t))}(e)},t.registerRoute=h});

apps/web/scratch/check_user.cjs

@@ -0,0 +1,31 @@
+const { createClient } = require('@supabase/supabase-js');
+const dotenv = require('dotenv');
+const path = require('path');
+
+dotenv.config({ path: path.resolve(__dirname, '../../../.env.local') });
+
+const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+const supabaseServiceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
+
+if (!supabaseUrl || !supabaseServiceKey) {
+  console.error('Missing Supabase credentials');
+  process.exit(1);
+}
+
+const supabase = createClient(supabaseUrl, supabaseServiceKey);
+
+async function checkUser() {
+  const { data: { users }, error } = await supabase.auth.admin.listUsers();
+  if (error) {
+    console.error('Error listing users:', error);
+    return;
+  }
+  const tester = users.find(u => u.email === 'tester@tenderhub.co.ke');
+  if (tester) {
+    console.log('User exists:', tester.id);
+  } else {
+    console.log('User does not exist');
+  }
+}
+
+checkUser();

apps/web/scratch/delete_user.cjs

@@ -0,0 +1,37 @@
+const { createClient } = require('@supabase/supabase-js');
+const dotenv = require('dotenv');
+const path = require('path');
+
+dotenv.config({ path: path.resolve(__dirname, '../../../.env.local') });
+
+const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+const supabaseServiceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
+
+if (!supabaseUrl || !supabaseServiceKey) {
+  console.error('Missing Supabase credentials');
+  process.exit(1);
+}
+
+const supabase = createClient(supabaseUrl, supabaseServiceKey);
+
+async function deleteUser() {
+  const { data: { users }, error: listError } = await supabase.auth.admin.listUsers();
+  if (listError) {
+    console.error('Error listing users:', listError);
+    return;
+  }
+  const tester = users.find(u => u.email === 'tester@tenderhub.co.ke');
+  if (tester) {
+    console.log('User found:', tester.id, '. Deleting...');
+    const { error: deleteError } = await supabase.auth.admin.deleteUser(tester.id);
+    if (deleteError) {
+      console.error('Error deleting user:', deleteError);
+    } else {
+      console.log('User deleted successfully.');
+    }
+  } else {
+    console.log('User not found, nothing to delete.');
+  }
+}
+
+deleteUser();

apps/web/scratch/get_org_id.cjs

@@ -0,0 +1,51 @@
+const { createClient } = require('@supabase/supabase-js');
+const dotenv = require('dotenv');
+const path = require('path');
+
+dotenv.config({ path: path.resolve(__dirname, '../../../.env.local') });
+
+const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+const supabaseServiceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
+
+if (!supabaseUrl || !supabaseServiceKey) {
+  console.error('Missing Supabase credentials');
+  process.exit(1);
+}
+
+const supabase = createClient(supabaseUrl, supabaseServiceKey);
+
+async function getOrgId() {
+  // 1. Get user ID from email
+  const { data: { users }, error: userError } = await supabase.auth.admin.listUsers();
+  if (userError) {
+    console.error('Error listing users:', userError);
+    return;
+  }
+  const tester = users.find(u => u.email === 'tester@tenderhub.co.ke');
+  if (!tester) {
+    console.error('Tester user not found');
+    return;
+  }
+  console.log('User ID:', tester.id);
+
+  // 2. Get organization ID from memberships
+  const { data: memberships, error: membershipError } = await supabase
+    .from('members')
+    .select('organization_id')
+    .eq('user_id', tester.id);
+
+  if (membershipError) {
+    console.error('Error getting memberships:', membershipError);
+    return;
+  }
+
+  if (memberships.length === 0) {
+    console.error('No organization membership found for user');
+    return;
+  }
+
+  const orgId = memberships[0].organization_id;
+  console.log('Organization ID:', orgId);
+}
+
+getOrgId();

apps/web/scratch/setup_org.cjs

@@ -0,0 +1,42 @@
+const { createClient } = require('@supabase/supabase-js');
+const dotenv = require('dotenv');
+const path = require('path');
+
+dotenv.config({ path: path.resolve(__dirname, '../../../.env.local') });
+
+const supabaseUrl = process.env.NEXT_PUBLIC_SUPABASE_URL;
+const supabaseServiceKey = process.env.SUPABASE_SERVICE_ROLE_KEY;
+
+if (!supabaseUrl || !supabaseServiceKey) {
+  console.error('Missing Supabase credentials');
+  process.exit(1);
+}
+
+const supabase = createClient(supabaseUrl, supabaseServiceKey);
+const orgId = '4584c0bd-128d-40c1-b212-4ac7d51b554e';
+
+async function setupOrg() {
+  const branding = {
+    logo_url: 'https://tenderhubkenya.vercel.app/logo.png',
+    primary_color: '#2563eb',
+    theme: 'dark',
+    company_name: 'Test Corp - White Label'
+  };
+
+  console.log('Updating organization:', orgId);
+  const { data, error } = await supabase
+    .from('organizations')
+    .update({
+      plan_type: 'WHITE_LABEL',
+      white_label_branding: branding
+    })
+    .eq('id', orgId);
+
+  if (error) {
+    console.error('Error updating organization:', error);
+  } else {
+    console.log('Organization updated successfully.');
+  }
+}
+
+setupOrg();

apps/web/src/__tests__/api/mpesa-stk.test.ts

@@ -0,0 +1,18 @@
+import { POST as stkPush } from "../../app/api/payments/mpesa/stk/route";
+
+describe("M-Pesa STK API", () => {
+  it("returns 400 for invalid payload", async () => {
+    // Construct a standard Fetch Request as expected by App Router
+    const req = new Request("http://localhost/api/payments/mpesa/stk", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({}),
+    });
+
+    const res = await stkPush(req);
+    expect(res.status).toBe(400);
+    
+    const data = await res.json();
+    expect(data.error).toBe("Invalid STK push payload");
+  });
+});

apps/web/src/__tests__/api/tenders-drafts-export.test.ts

@@ -0,0 +1,14 @@
+import { POST as exportDrafts } from "../../app/api/tenders/[id]/drafts/export/route";
+
+describe("Tenders Drafts Export API", () => {
+  it("returns 400 or 401 when requested incorrectly", async () => {
+    // Construct a standard Fetch Request as expected by App Router
+    const req = new Request("http://localhost/api/tenders/test-id/drafts/export", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+    });
+
+    const res = await exportDrafts(req, { params: { id: "test-id" } } as any);
+    expect(res.status).toBeGreaterThanOrEqual(400);
+  });
+});

apps/web/src/__tests__/api/tenders-unlock.test.ts

@@ -0,0 +1,16 @@
+import { POST as unlockTender } from "../../app/api/tenders/[id]/unlock/route";
+
+describe("Tenders Unlock API", () => {
+  it("returns 400 or 401 when missing proper headers/payloads", async () => {
+    // Construct a standard Fetch Request as expected by App Router
+    const req = new Request("http://localhost/api/tenders/test-id/unlock", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({}),
+    });
+
+    const res = await unlockTender(req, { params: { id: "test-id" } } as any);
+    // Should fail cleanly (either 400 or 401)
+    expect(res.status).toBeGreaterThanOrEqual(400);
+  });
+});

apps/web/src/__tests__/api/uploads-init.test.ts

@@ -0,0 +1,18 @@
+import { POST as initUpload } from "../../app/api/uploads/init/route";
+
+describe("Uploads API", () => {
+  it("returns 400 for invalid payload", async () => {
+    // Construct a standard Fetch Request as expected by App Router
+    const req = new Request("http://localhost/api/uploads/init", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({}),
+    });
+
+    const res = await initUpload(req);
+    expect(res.status).toBe(400);
+    
+    const data = await res.json();
+    expect(data.error).toBe("Invalid upload init payload");
+  });
+});

apps/web/src/app/(dashboard)/consultant/page.tsx

@@ -0,0 +1,118 @@
+"use client";
+
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Users, Building2, FileText, BarChart3, Plus } from "lucide-react";
+
+const clients = [
+  { name: "BuildRight Construction", tenders: 12, won: 5, active: 3 },
+  { name: "MedSupply Kenya", tenders: 8, won: 3, active: 2 },
+  { name: "CleanPro Services", tenders: 15, won: 7, active: 4 },
+  { name: "TechVentures Ltd", tenders: 6, won: 2, active: 1 },
+];
+
+export default function ConsultantPortalPage() {
+  return (
+    <div className="space-y-6 animate-fade-in">
+      <div className="flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4">
+        <div>
+          <div className="flex items-center gap-2 mb-1">
+            <h1 className="text-2xl font-bold text-foreground">Consultant Dashboard</h1>
+            <Badge className="bg-primary text-primary-foreground">White-Label</Badge>
+          </div>
+          <p className="text-muted-foreground text-sm">Manage multiple clients from one portal</p>
+        </div>
+        <Button className="gap-2">
+          <Plus className="h-4 w-4" /> Add Client
+        </Button>
+      </div>
+
+      {/* Stats */}
+      <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
+        <Card>
+          <CardContent className="p-4">
+            <div className="flex items-center justify-between mb-2">
+              <span className="text-sm text-muted-foreground">Total Clients</span>
+              <Users className="h-4 w-4 text-muted-foreground" />
+            </div>
+            <div className="text-2xl font-bold text-foreground">4</div>
+          </CardContent>
+        </Card>
+        <Card>
+          <CardContent className="p-4">
+            <div className="flex items-center justify-between mb-2">
+              <span className="text-sm text-muted-foreground">Active Tenders</span>
+              <FileText className="h-4 w-4 text-muted-foreground" />
+            </div>
+            <div className="text-2xl font-bold text-foreground">10</div>
+          </CardContent>
+        </Card>
+        <Card>
+          <CardContent className="p-4">
+            <div className="flex items-center justify-between mb-2">
+              <span className="text-sm text-muted-foreground">Total Won</span>
+              <BarChart3 className="h-4 w-4 text-muted-foreground" />
+            </div>
+            <div className="text-2xl font-bold text-success">17</div>
+          </CardContent>
+        </Card>
+        <Card>
+          <CardContent className="p-4">
+            <div className="flex items-center justify-between mb-2">
+              <span className="text-sm text-muted-foreground">Win Rate</span>
+              <BarChart3 className="h-4 w-4 text-muted-foreground" />
+            </div>
+            <div className="text-2xl font-bold text-foreground">41%</div>
+          </CardContent>
+        </Card>
+      </div>
+
+      {/* Clients */}
+      <Card>
+        <CardHeader>
+          <CardTitle className="text-lg">Your Clients</CardTitle>
+        </CardHeader>
+        <CardContent>
+          <div className="space-y-3">
+            {clients.map((client) => (
+              <div key={client.name} className="flex items-center gap-4 p-4 rounded-lg hover:bg-muted/50 transition-colors cursor-pointer">
+                <div className="w-10 h-10 rounded-lg bg-primary/10 flex items-center justify-center shrink-0">
+                  <Building2 className="h-5 w-5 text-primary" />
+                </div>
+                <div className="flex-1 min-w-0">
+                  <p className="font-medium text-foreground">{client.name}</p>
+                  <p className="text-xs text-muted-foreground">{client.active} active tenders</p>
+                </div>
+                <div className="flex items-center gap-4 text-sm shrink-0">
+                  <div className="text-center hidden sm:block">
+                    <div className="font-semibold text-foreground">{client.tenders}</div>
+                    <div className="text-xs text-muted-foreground">Total</div>
+                  </div>
+                  <div className="text-center hidden sm:block">
+                    <div className="font-semibold text-success">{client.won}</div>
+                    <div className="text-xs text-muted-foreground">Won</div>
+                  </div>
+                  <Badge variant="outline" className="text-xs">
+                    {Math.round((client.won / client.tenders) * 100)}% win
+                  </Badge>
+                </div>
+              </div>
+            ))}
+          </div>
+        </CardContent>
+      </Card>
+
+      {/* Placeholder notice */}
+      <Card className="border-dashed border-2">
+        <CardContent className="py-12 text-center">
+          <Users className="h-12 w-12 text-muted-foreground mx-auto mb-3" />
+          <h3 className="text-lg font-semibold text-foreground mb-1">White-Label Features Coming Soon</h3>
+          <p className="text-sm text-muted-foreground max-w-md mx-auto">
+            Custom branding, client-specific portals, team collaboration, and API access will be available in the Consultant tier.
+          </p>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}

apps/web/src/app/(dashboard)/dashboard/page.tsx

@@ -0,0 +1,170 @@
+"use client";
+
+import { useTenders } from "@/hooks/use-tenders";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { 
+  FileText, 
+  TrendingUp, 
+  AlertCircle, 
+  Clock, 
+  ArrowRight, 
+  Plus, 
+  CheckCircle2,
+  Loader2
+} from "lucide-react";
+import Link from "next/link";
+
+export default function DashboardPage() {
+  const { data: tenders, isLoading } = useTenders({ limit: 5 });
+
+  // Simple stats calculation based on available data
+  const stats = {
+    totalAnalyzed: tenders?.length || 0,
+    winningChances: "72%", // Mocked for now as score needs deeper join
+    complianceAlerts: tenders?.filter(t => t.status === "FAILED").length || 0,
+    proposalsGenerated: 5 // Mocked for now
+  };
+
+  if (isLoading) {
+    return (
+      <div className="flex items-center justify-center h-[60vh]">
+        <Loader2 className="h-8 w-8 animate-spin text-primary" />
+      </div>
+    );
+  }
+
+  return (
+    <div className="space-y-6 animate-fade-in">
+      <div className="flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4">
+        <div>
+          <h1 className="text-2xl font-bold text-foreground">Overview</h1>
+          <p className="text-muted-foreground text-sm">Welcome back to your tender control center</p>
+        </div>
+        <Link href="/upload">
+          <Button className="gap-2">
+            <Plus className="h-4 w-4" /> New Analysis
+          </Button>
+        </Link>
+      </div>
+
+      {/* Stats Grid */}
+      <div className="grid grid-cols-2 lg:grid-cols-4 gap-4">
+        {[
+          { label: "Total Analyzed", value: stats.totalAnalyzed, icon: FileText, color: "text-primary" },
+          { label: "Winning Chances", value: stats.winningChances, icon: TrendingUp, color: "text-success" },
+          { label: "Compliance Alerts", value: stats.complianceAlerts, icon: AlertCircle, color: "text-warning" },
+          { label: "Proposals Generated", value: stats.proposalsGenerated, icon: CheckCircle2, color: "text-primary" },
+        ].map((stat) => (
+          <Card key={stat.label}>
+            <CardContent className="p-4">
+              <div className="flex items-center justify-between mb-2">
+                <span className="text-xs font-medium text-muted-foreground">{stat.label}</span>
+                <stat.icon className={`h-4 w-4 ${stat.color}`} />
+              </div>
+              <div className="text-2xl font-bold text-foreground">{stat.value}</div>
+            </CardContent>
+          </Card>
+        ))}
+      </div>
+
+      <div className="grid lg:grid-cols-3 gap-6">
+        {/* Recent Tenders */}
+        <Card className="lg:col-span-2">
+          <CardHeader className="flex flex-row items-center justify-between pb-2">
+            <CardTitle className="text-lg font-semibold">Recent Tenders</CardTitle>
+            <Link href="/tenders">
+              <Button variant="ghost" size="sm" className="text-xs text-primary gap-1">
+                View All <ArrowRight className="h-3 w-3" />
+              </Button>
+            </Link>
+          </CardHeader>
+          <CardContent>
+            <div className="space-y-4">
+              {tenders?.length === 0 ? (
+                <div className="text-center py-8 text-muted-foreground">
+                  No tenders found. Upload your first tender PDF to get started.
+                </div>
+              ) : (
+                tenders?.map((tender) => (
+                  <Link key={tender.tenderId} href={`/tenders/${tender.tenderId}`}>
+                    <div className="flex items-center gap-4 p-3 rounded-lg hover:bg-muted/50 transition-colors cursor-pointer group">
+                      <div className="w-10 h-10 rounded-lg bg-primary/10 flex items-center justify-center shrink-0">
+                        <FileText className="h-5 w-5 text-primary" />
+                      </div>
+                      <div className="flex-1 min-w-0">
+                        <p className="text-sm font-medium text-foreground truncate group-hover:text-primary transition-colors">
+                          {tender.fileName}
+                        </p>
+                        <div className="flex items-center gap-2 mt-0.5">
+                          <span className="text-xs text-muted-foreground">Updated {new Date(tender.updatedAt).toLocaleDateString()}</span>
+                          <span className="text-xs text-muted-foreground">•</span>
+                          {tender.unlocked ? (
+                            <Badge variant="secondary" className="text-[10px] h-4">Unlocked</Badge>
+                          ) : (
+                            <Badge variant="outline" className="text-[10px] h-4">Locked</Badge>
+                          )}
+                        </div>
+                      </div>
+                      <div className="flex items-center gap-3 shrink-0">
+                        <div className="text-right">
+                          <div className="text-sm font-semibold text-success">{tender.score || "--"}</div>
+                          <div className="text-[10px] text-muted-foreground">Score</div>
+                        </div>
+                        <ChevronRight className="h-4 w-4 text-muted-foreground group-hover:text-primary transition-colors" />
+                      </div>
+                    </div>
+                  </Link>
+                ))
+              )}
+            </div>
+          </CardContent>
+        </Card>
+
+        {/* System Status / Upgrades */}
+        <Card className="bg-primary/5 border-primary/10">
+          <CardHeader>
+            <CardTitle className="text-lg font-semibold text-primary">Win More Tenders</CardTitle>
+          </CardHeader>
+          <CardContent className="space-y-4">
+            <p className="text-sm text-muted-foreground">
+              Upgrade to the <span className="font-semibold text-foreground">Unlimited Plan</span> to access deep compliance validation and AI-powered proposal scoring.
+            </p>
+            <div className="space-y-2">
+              <div className="flex items-center gap-2 text-xs text-foreground">
+                <CheckCircle2 className="h-4 w-4 text-success" /> Unlimited AI Analysis
+              </div>
+              <div className="flex items-center gap-2 text-xs text-foreground">
+                <CheckCircle2 className="h-4 w-4 text-success" /> Export to PDF/Word
+              </div>
+              <div className="flex items-center gap-2 text-xs text-foreground">
+                <CheckCircle2 className="h-4 w-4 text-success" /> Consultant Portal Access
+              </div>
+            </div>
+            <Button className="w-full mt-4 bg-primary hover:bg-primary/90">Upgrade Now</Button>
+          </CardContent>
+        </Card>
+      </div>
+    </div>
+  );
+}
+
+function ChevronRight(props: any) {
+  return (
+    <svg
+      {...props}
+      xmlns="http://www.w3.org/2000/svg"
+      width="24"
+      height="24"
+      viewBox="0 0 24 24"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth="2"
+      strokeLinecap="round"
+      strokeLinejoin="round"
+    >
+      <path d="m9 18 6-6-6-6" />
+    </svg>
+  );
+}

apps/web/src/app/(dashboard)/layout.tsx

@@ -0,0 +1,29 @@
+"use client";
+
+import { SidebarProvider, SidebarTrigger } from "@/components/ui/sidebar";
+import { AppSidebar } from "@/components/AppSidebar";
+
+export default function DashboardLayout({
+  children,
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <SidebarProvider>
+      <div className="min-h-screen flex w-full">
+        <AppSidebar />
+        <div className="flex-1 flex flex-col min-w-0">
+          <header className="h-14 flex items-center border-b bg-card px-4 gap-3">
+            <SidebarTrigger />
+            <div className="flex items-center gap-2">
+              <span className="text-sm font-medium text-muted-foreground">TenderHub</span>
+            </div>
+          </header>
+          <main className="flex-1 p-4 md:p-6 overflow-auto">
+            {children}
+          </main>
+        </div>
+      </div>
+    </SidebarProvider>
+  );
+}

apps/web/src/app/(dashboard)/proposals/[id]/page.tsx

@@ -0,0 +1,203 @@
+"use client";
+
+import { use, useState, useEffect } from "react";
+import { useTenderDrafts, useGenerateDraft } from "@/hooks/use-proposals";
+import { useTenderStatus } from "@/hooks/use-tenders";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Textarea } from "@/components/ui/textarea";
+import { Tabs, TabsContent, TabsList, TabsTrigger } from "@/components/ui/tabs";
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@/components/ui/select";
+import { ArrowLeft, Download, FileText, Edit3, Save, Loader2, Sparkles, AlertTriangle } from "lucide-react";
+import Link from "next/link";
+import { toast } from "sonner";
+
+export default function ProposalBuilderPage({ params }: { params: Promise<{ id: string }> }) {
+  const { id } = use(params);
+  const { data: statusData } = useTenderStatus(id);
+  const { data: draftsData, isLoading: draftsLoading, error: draftsError } = useTenderDrafts(id);
+  const generateMutation = useGenerateDraft(id);
+
+  const [activeTab, setActiveTab] = useState("EXECUTIVE_SUMMARY");
+  const [tone, setTone] = useState("professional");
+  const [editingContent, setEditingContent] = useState<string>("");
+  const [isEditing, setIsEditing] = useState(false);
+
+  // Sync editing content when tab changes or drafts load
+  useEffect(() => {
+    const currentDraft = draftsData?.drafts.find(d => d.section === activeTab);
+    setEditingContent(currentDraft?.content || "");
+    setIsEditing(false);
+  }, [activeTab, draftsData]);
+
+  const handleGenerate = () => {
+    generateMutation.mutate({ section: activeTab, tone }, {
+      onSuccess: () => {
+        toast.success(`Generated ${activeTab.replace("_", " ")} successfully!`);
+      },
+      onError: (err) => {
+        toast.error(`Generation failed: ${err.message}`);
+      }
+    });
+  };
+
+  if (draftsLoading) {
+    return (
+      <div className="flex flex-col items-center justify-center h-[70vh] gap-4">
+        <Loader2 className="h-10 w-10 animate-spin text-primary" />
+        <p className="text-muted-foreground animate-pulse">Loading proposal drafts...</p>
+      </div>
+    );
+  }
+
+  if (draftsError?.message === "PAYMENT_REQUIRED") {
+    return (
+      <div className="flex flex-col items-center justify-center h-[70vh] gap-6 text-center max-w-md mx-auto">
+        <AlertTriangle className="h-12 w-12 text-warning" />
+        <h2 className="text-2xl font-bold">Proposal Builder Locked</h2>
+        <p className="text-muted-foreground">
+          You need to unlock the analysis for this tender before you can generate AI-powered proposal drafts.
+        </p>
+        <Link href={`/tenders/${id}`}>
+          <Button size="lg">Unlock Analysis First</Button>
+        </Link>
+      </div>
+    );
+  }
+
+  const sections = [
+    { id: "EXECUTIVE_SUMMARY", title: "Executive Summary" },
+    { id: "TECHNICAL_APPROACH", title: "Technical Approach" },
+    { id: "PROJECT_TEAM", title: "Project Team" },
+    { id: "WORKPLAN", title: "Workplan" },
+    { id: "COMMERCIAL_RESPONSE", title: "Commercial Response" },
+  ];
+
+  return (
+    <div className="space-y-6 animate-fade-in">
+      {/* Header */}
+      <div className="flex flex-col gap-4">
+        <Link href={`/tenders/${id}`} className="flex items-center gap-1 text-sm text-muted-foreground hover:text-foreground transition-colors w-fit">
+          <ArrowLeft className="h-4 w-4" /> Back to Analysis
+        </Link>
+        <div className="flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4">
+          <div>
+            <h1 className="text-xl md:text-2xl font-bold text-foreground">Proposal Builder</h1>
+            <p className="text-muted-foreground text-sm">{statusData?.fileName || "Tender Document"}</p>
+          </div>
+          <div className="flex items-center gap-3">
+            <Select value={tone} onValueChange={setTone}>
+              <SelectTrigger className="w-32 h-9">
+                <SelectValue placeholder="Tone" />
+              </SelectTrigger>
+              <SelectContent>
+                <SelectItem value="professional">Professional</SelectItem>
+                <SelectItem value="persuasive">Persuasive</SelectItem>
+                <SelectItem value="technical">Technical</SelectItem>
+              </SelectContent>
+            </Select>
+            <Button variant="outline" className="gap-2 h-9" disabled>
+              <Download className="h-4 w-4" /> Export
+            </Button>
+          </div>
+        </div>
+      </div>
+
+      {/* Proposal Editor */}
+      <Tabs value={activeTab} onValueChange={setActiveTab}>
+        <TabsList className="w-full justify-start flex-wrap h-auto gap-1 bg-transparent p-0">
+          {sections.map((section) => (
+            <TabsTrigger
+              key={section.id}
+              value={section.id}
+              className="data-[state=active]:bg-primary data-[state=active]:text-primary-foreground rounded-lg px-4"
+            >
+              {section.title}
+            </TabsTrigger>
+          ))}
+        </TabsList>
+
+        {sections.map((section) => (
+          <TabsContent key={section.id} value={section.id}>
+            <Card>
+              <CardHeader className="flex flex-row items-center justify-between space-y-0">
+                <CardTitle className="text-lg flex items-center gap-2">
+                  <FileText className="h-5 w-5 text-primary" />
+                  {section.title}
+                </CardTitle>
+                <div className="flex items-center gap-2">
+                  <Button
+                    variant="outline"
+                    size="sm"
+                    className="gap-1.5 bg-primary/5 text-primary border-primary/20 hover:bg-primary/10"
+                    onClick={handleGenerate}
+                    disabled={generateMutation.isPending}
+                  >
+                    {generateMutation.isPending ? (
+                      <Loader2 className="h-3.5 w-3.5 animate-spin" />
+                    ) : (
+                      <Sparkles className="h-3.5 w-3.5" />
+                    )}
+                    {editingContent ? "Regenerate" : "Generate Draft"}
+                  </Button>
+                  {editingContent && (
+                    <Button
+                      variant="ghost"
+                      size="sm"
+                      className="gap-1"
+                      onClick={() => setIsEditing(!isEditing)}
+                    >
+                      {isEditing ? (
+                        <>
+                          <Save className="h-4 w-4" /> Save
+                        </>
+                      ) : (
+                        <>
+                          <Edit3 className="h-4 w-4" /> Edit
+                        </>
+                      )}
+                    </Button>
+                  )}
+                </div>
+              </CardHeader>
+              <CardContent>
+                {generateMutation.isPending && !editingContent ? (
+                  <div className="min-h-[400px] flex flex-col items-center justify-center gap-3 text-muted-foreground border rounded-lg border-dashed">
+                    <Sparkles className="h-8 w-8 animate-pulse text-primary" />
+                    <p>AI is drafting your proposal section...</p>
+                  </div>
+                ) : editingContent ? (
+                  isEditing ? (
+                    <Textarea
+                      value={editingContent}
+                      onChange={(e) => setEditingContent(e.target.value)}
+                      className="min-h-[500px] font-mono text-sm"
+                    />
+                  ) : (
+                    <div className="bg-muted/30 rounded-lg p-6">
+                      <pre className="whitespace-pre-wrap text-sm text-foreground leading-relaxed font-sans">
+                        {editingContent}
+                      </pre>
+                    </div>
+                  )
+                ) : (
+                  <div className="min-h-[400px] flex flex-col items-center justify-center gap-4 text-center border-2 border-dashed rounded-xl">
+                    <Sparkles className="h-10 w-10 text-muted-foreground" />
+                    <div className="space-y-1">
+                      <h3 className="font-semibold">No Draft Ready</h3>
+                      <p className="text-sm text-muted-foreground max-w-xs mx-auto">
+                        Click "Generate Draft" to use AI to write this section based on the tender requirements.
+                      </p>
+                    </div>
+                    <Button onClick={handleGenerate} size="sm">Generate with AI</Button>
+                  </div>
+                )}
+              </CardContent>
+            </Card>
+          </TabsContent>
+        ))}
+      </Tabs>
+    </div>
+  );
+}

apps/web/src/app/(dashboard)/proposals/page.tsx

@@ -0,0 +1,68 @@
+"use client";
+
+import { useProposals } from "@/hooks/use-proposals";
+import { Card, CardContent } from "@/components/ui/card";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { FileEdit, Clock, ArrowRight, Plus, Loader2 } from "lucide-react";
+import Link from "next/link";
+
+export default function ProposalsListPage() {
+  const { data: proposals, isLoading } = useProposals();
+
+  return (
+    <div className="space-y-6 animate-fade-in">
+      <div className="flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4">
+        <div>
+          <h1 className="text-2xl font-bold text-foreground">Proposals</h1>
+          <p className="text-muted-foreground text-sm">Manage your generated proposal drafts</p>
+        </div>
+        <Link href="/upload">
+          <Button className="gap-2">
+            <Plus className="h-4 w-4" /> New Proposal
+          </Button>
+        </Link>
+      </div>
+
+      <div className="space-y-3">
+        {isLoading ? (
+          <div className="flex justify-center py-12">
+            <Loader2 className="h-8 w-8 animate-spin text-primary" />
+          </div>
+        ) : proposals?.length === 0 ? (
+          <div className="text-center py-12 border-2 border-dashed rounded-xl">
+            <FileEdit className="h-12 w-12 text-muted-foreground mx-auto mb-3" />
+            <p className="text-muted-foreground">No proposals found. Analyze a tender to start drafting.</p>
+            <Link href="/upload">
+              <Button variant="link" className="mt-1">Upload a tender document</Button>
+            </Link>
+          </div>
+        ) : (
+          proposals?.map((p: any) => (
+            <Link key={p.tenderId} href={`/proposals/${p.tenderId}`}>
+              <Card className="hover:shadow-md transition-all hover:border-primary/20 cursor-pointer">
+                <CardContent className="p-4 flex items-center gap-4">
+                  <div className="w-10 h-10 rounded-lg bg-primary/10 flex items-center justify-center shrink-0">
+                    <FileEdit className="h-5 w-5 text-primary" />
+                  </div>
+                  <div className="flex-1 min-w-0">
+                    <p className="text-sm font-medium text-foreground truncate">{p.fileName}</p>
+                    <span className="text-xs text-muted-foreground flex items-center gap-1">
+                      <Clock className="h-3 w-3" /> Updated {new Date(p.updatedAt).toLocaleDateString()}
+                    </span>
+                  </div>
+                  <div className="flex items-center gap-3 shrink-0">
+                    <Badge variant="outline" className="text-xs">
+                      {p.unlocked ? "Analysis Ready" : "Locked"}
+                    </Badge>
+                    <ArrowRight className="h-4 w-4 text-muted-foreground hidden sm:block" />
+                  </div>
+                </CardContent>
+              </Card>
+            </Link>
+          ))
+        )}
+      </div>
+    </div>
+  );
+}

apps/web/src/app/(dashboard)/settings/page.tsx

@@ -0,0 +1,223 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { useCompanyProfile, useUpdateCompanyProfile, CompanyProfile } from "@/hooks/use-company-profile";
+import { Card, CardContent, CardHeader, CardTitle, CardDescription } from "@/components/ui/card";
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { Button } from "@/components/ui/button";
+import { Badge } from "@/components/ui/badge";
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@/components/ui/select";
+import { Separator } from "@/components/ui/separator";
+import { Building2, CreditCard, User, Loader2, Save, CheckCircle2 } from "lucide-react";
+import { toast } from "sonner";
+import { useAuth } from "@/components/AuthProvider";
+
+export default function SettingsPage() {
+  const { user } = useAuth();
+  const { data: profile, isLoading } = useCompanyProfile();
+  const updateMutation = useUpdateCompanyProfile();
+
+  const [formData, setFormData] = useState<CompanyProfile>({
+    legalName: "",
+    kraPin: "",
+    agpoCategory: "none",
+    ncaCategory: "none",
+    counties: [],
+    teamSize: 0,
+    pastProjectsSummary: "",
+  });
+
+  useEffect(() => {
+    if (profile) {
+      setFormData({
+        legalName: profile.legalName || "",
+        kraPin: profile.kraPin || "",
+        agpoCategory: profile.agpoCategory || "none",
+        ncaCategory: profile.ncaCategory || "none",
+        counties: profile.counties || [],
+        teamSize: profile.teamSize || 0,
+        pastProjectsSummary: profile.pastProjectsSummary || "",
+      });
+    }
+  }, [profile]);
+
+  const handleSaveProfile = () => {
+    updateMutation.mutate(formData, {
+      onSuccess: () => {
+        toast.success("Profile updated successfully!");
+      },
+      onError: (err) => {
+        toast.error(`Failed to update profile: ${err.message}`);
+      }
+    });
+  };
+
+  if (isLoading) {
+    return (
+      <div className="flex justify-center items-center h-[60vh]">
+        <Loader2 className="h-8 w-8 animate-spin text-primary" />
+      </div>
+    );
+  }
+
+  return (
+    <div className="space-y-6 animate-fade-in max-w-3xl pb-10">
+      <div>
+        <h1 className="text-2xl font-bold text-foreground">Settings</h1>
+        <p className="text-muted-foreground text-sm">Manage your company profile and account</p>
+      </div>
+
+      {/* Company Profile */}
+      <Card>
+        <CardHeader>
+          <div className="flex items-center justify-between">
+            <div className="space-y-1">
+              <CardTitle className="text-lg flex items-center gap-2">
+                <Building2 className="h-5 w-5 text-primary" /> Company Profile
+              </CardTitle>
+              <CardDescription>These details are used for Bid/No-Bid scoring</CardDescription>
+            </div>
+            <Button 
+                size="sm" 
+                className="gap-2" 
+                onClick={handleSaveProfile} 
+                disabled={updateMutation.isPending}
+            >
+              {updateMutation.isPending ? <Loader2 className="h-4 w-4 animate-spin" /> : <Save className="h-4 w-4" />}
+              Save Changes
+            </Button>
+          </div>
+        </CardHeader>
+        <Separator />
+        <CardContent className="space-y-4 pt-6">
+          <div className="grid sm:grid-cols-2 gap-4">
+            <div className="space-y-2">
+              <Label htmlFor="companyName">Legal Company Name</Label>
+              <Input 
+                id="companyName" 
+                value={formData.legalName} 
+                onChange={(e) => setFormData({...formData, legalName: e.target.value})}
+                placeholder="e.g. TechPro Solutions Ltd"
+              />
+            </div>
+            <div className="space-y-2">
+              <Label htmlFor="taxPin">KRA Tax PIN</Label>
+              <Input 
+                id="taxPin" 
+                value={formData.kraPin} 
+                onChange={(e) => setFormData({...formData, kraPin: e.target.value})}
+                placeholder="e.g. P051234567X"
+              />
+            </div>
+          </div>
+          <div className="grid sm:grid-cols-2 gap-4">
+            <div className="space-y-2">
+              <Label htmlFor="agpo">AGPO Category</Label>
+              <Select 
+                value={formData.agpoCategory} 
+                onValueChange={(val) => setFormData({...formData, agpoCategory: val})}
+              >
+                <SelectTrigger>
+                  <SelectValue placeholder="Select category" />
+                </SelectTrigger>
+                <SelectContent>
+                  <SelectItem value="youth">Youth</SelectItem>
+                  <SelectItem value="women">Women</SelectItem>
+                  <SelectItem value="pwd">Persons with Disability</SelectItem>
+                  <SelectItem value="none">Not Registered</SelectItem>
+                </SelectContent>
+              </Select>
+            </div>
+            <div className="space-y-2">
+              <Label htmlFor="nca">NCA Registration Class</Label>
+              <Select 
+                value={formData.ncaCategory} 
+                onValueChange={(val) => setFormData({...formData, ncaCategory: val})}
+              >
+                <SelectTrigger>
+                  <SelectValue placeholder="Select class" />
+                </SelectTrigger>
+                <SelectContent>
+                  <SelectItem value="nca1">NCA 1</SelectItem>
+                  <SelectItem value="nca2">NCA 2</SelectItem>
+                  <SelectItem value="nca3">NCA 3</SelectItem>
+                  <SelectItem value="nca4">NCA 4</SelectItem>
+                  <SelectItem value="nca5">NCA 5</SelectItem>
+                  <SelectItem value="nca6">NCA 6</SelectItem>
+                  <SelectItem value="nca7">NCA 7</SelectItem>
+                  <SelectItem value="nca8">NCA 8</SelectItem>
+                  <SelectItem value="none">Not Registered</SelectItem>
+                </SelectContent>
+              </Select>
+            </div>
+          </div>
+          <div className="grid sm:grid-cols-2 gap-4">
+            <div className="space-y-2">
+              <Label htmlFor="employees">Number of Employees</Label>
+              <Input 
+                id="employees" 
+                type="number" 
+                value={formData.teamSize} 
+                onChange={(e) => setFormData({...formData, teamSize: parseInt(e.target.value) || 0})}
+              />
+            </div>
+          </div>
+        </CardContent>
+      </Card>
+
+      {/* Subscription */}
+      <Card>
+        <CardHeader>
+          <CardTitle className="text-lg flex items-center gap-2">
+            <CreditCard className="h-5 w-5 text-primary" /> Subscription
+          </CardTitle>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          <div className="flex items-center justify-between p-4 rounded-lg bg-primary/5 border border-primary/10">
+            <div>
+              <div className="flex items-center gap-2">
+                <span className="font-semibold text-foreground">Unlimited Plan</span>
+                <Badge className="bg-success text-success-foreground">Active</Badge>
+              </div>
+              <p className="text-sm text-muted-foreground mt-1">KES 4,999/month · Renews Soon</p>
+            </div>
+            <Button variant="outline" size="sm">Manage Billing</Button>
+          </div>
+        </CardContent>
+      </Card>
+
+      {/* Account */}
+      <Card>
+        <CardHeader>
+          <CardTitle className="text-lg flex items-center gap-2">
+            <User className="h-5 w-5 text-primary" /> Account
+          </CardTitle>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          <div className="grid sm:grid-cols-2 gap-4">
+            <div className="space-y-2">
+              <Label htmlFor="name">Full Name</Label>
+              <Input id="name" defaultValue={user?.user_metadata?.full_name || "James Kamau"} disabled />
+            </div>
+            <div className="space-y-2">
+              <Label htmlFor="email">Email</Label>
+              <Input id="email" type="email" defaultValue={user?.email || ""} disabled />
+            </div>
+          </div>
+          <p className="text-xs text-muted-foreground">Contact support to change your account email or phone number.</p>
+          <Separator />
+          <div className="flex gap-3">
+            <Button 
+                variant="outline" 
+                className="text-destructive hover:bg-destructive/10 border-destructive/20"
+                onClick={() => signOut()}
+            >
+                Sign Out
+            </Button>
+          </div>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}

apps/web/src/app/(dashboard)/tenders/[id]/page.tsx

@@ -0,0 +1,276 @@
+"use client";
+
+import { use, useState, useEffect } from "react";
+import { useTenderAnalysis, useTenderStatus } from "@/hooks/use-tenders";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Tabs, TabsContent, TabsList, TabsTrigger } from "@/components/ui/tabs";
+import {
+  CheckCircle2,
+  XCircle,
+  AlertTriangle,
+  FileEdit,
+  Trophy,
+  Shield,
+  ArrowLeft,
+  Clock,
+  Calendar,
+  BarChart3,
+  Loader2,
+  Lock
+} from "lucide-react";
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from "@/components/ui/table";
+import Link from "next/link";
+import ScoreGauge from "@/components/tender/ScoreGauge";
+import TenderSummaryCard from "@/components/tender/TenderSummaryCard";
+import DeadlinesTimeline from "@/components/tender/DeadlinesTimeline";
+import BudgetCard from "@/components/tender/BudgetCard";
+import EligibilitySection from "@/components/tender/EligibilitySection";
+import EvaluationCriteria from "@/components/tender/EvaluationCriteria";
+import ValidationAgent from "@/components/tender/ValidationAgent";
+
+export default function TenderDetailPage({ params }: { params: Promise<{ id: string }> }) {
+  const { id } = use(params);
+  const { data: statusData, isLoading: statusLoading } = useTenderStatus(id);
+  const { data: analysisData, isLoading: analysisLoading, error: analysisError } = useTenderAnalysis(id);
+
+  if (statusLoading || analysisLoading) {
+    return (
+      <div className="flex flex-col items-center justify-center h-[70vh] gap-4">
+        <Loader2 className="h-10 w-10 animate-spin text-primary" />
+        <p className="text-muted-foreground animate-pulse">Analyzing tender document...</p>
+      </div>
+    );
+  }
+
+  // Handle Locked State
+  if (analysisError?.message === "PAYMENT_REQUIRED" || statusData?.unlocked === false) {
+    return (
+      <div className="flex flex-col items-center justify-center h-[70vh] gap-6 text-center max-w-md mx-auto">
+        <div className="w-20 h-20 rounded-full bg-primary/10 flex items-center justify-center">
+          <Lock className="h-10 w-10 text-primary" />
+        </div>
+        <div className="space-y-2">
+          <h2 className="text-2xl font-bold">Analysis Locked</h2>
+          <p className="text-muted-foreground">
+            Complete the payment to unlock the full AI-powered analysis, compliance matrix, and proposal builder for this tender.
+          </p>
+        </div>
+        <Button className="w-full gap-2" size="lg">
+          Unlock Analysis (KES 1,500)
+        </Button>
+      </div>
+    );
+  }
+
+  // Handle Processing State
+  if (statusData?.status === "PROCESSING" || statusData?.status === "UPLOADED") {
+    return (
+      <div className="flex flex-col items-center justify-center h-[70vh] gap-6 text-center max-w-md mx-auto">
+        <Loader2 className="h-12 w-12 animate-spin text-primary" />
+        <div className="space-y-2">
+          <h2 className="text-2xl font-bold">Processing...</h2>
+          <p className="text-muted-foreground">
+            Our AI is currently extracting requirements and calculating your bid score. This usually takes 30-60 seconds.
+          </p>
+        </div>
+      </div>
+    );
+  }
+
+  if (!analysisData) {
+    return (
+      <div className="text-center py-20">
+        <AlertTriangle className="h-12 w-12 text-warning mx-auto mb-4" />
+        <h2 className="text-xl font-bold">Analysis Unavailable</h2>
+        <p className="text-muted-foreground">We couldn't load the analysis for this tender.</p>
+        <Button variant="outline" className="mt-4" onClick={() => window.location.reload()}>Retry</Button>
+      </div>
+    );
+  }
+
+  const analysis = analysisData;
+  const tender = {
+    title: statusData?.fileName || "Tender Document",
+    entity: analysis.score?.procuringEntity || "Government Agency",
+    referenceNo: analysis.score?.referenceNo || "REF-001",
+    closingDate: analysis.score?.submissionDeadline || "2026-04-30",
+    category: analysis.score?.tenderCategory || "General",
+    score: analysis.bidScore?.score || 0,
+    summary: analysis.summary || "No summary available.",
+    procurementMethod: "Open National Tender",
+  };
+
+  return (
+    <div className="space-y-6 animate-fade-in">
+      {/* Header */}
+      <div className="flex flex-col gap-4">
+        <Link href="/tenders" className="flex items-center gap-1 text-sm text-muted-foreground hover:text-foreground transition-colors w-fit">
+          <ArrowLeft className="h-4 w-4" /> Back to Tenders
+        </Link>
+        <div className="flex flex-col sm:flex-row sm:items-start sm:justify-between gap-4">
+          <div>
+            <h1 className="text-xl md:text-2xl font-bold text-foreground">{tender.title}</h1>
+            <div className="flex items-center gap-3 mt-2 flex-wrap">
+              <span className="text-sm text-muted-foreground">{tender.entity}</span>
+              <Badge variant="outline">{tender.category}</Badge>
+              <span className="text-sm text-muted-foreground flex items-center gap-1">
+                <Clock className="h-3 w-3" /> Closes {new Date(tender.closingDate).toLocaleDateString()}
+              </span>
+            </div>
+          </div>
+          <div className="flex gap-2">
+            <Link href={`/proposals/${id}`}>
+              <Button className="gap-2">
+                <FileEdit className="h-4 w-4" /> Generate Proposal
+              </Button>
+            </Link>
+            <Button variant="outline" className="gap-2">
+              <Trophy className="h-4 w-4" /> Mark Won
+            </Button>
+          </div>
+        </div>
+      </div>
+
+      {/* Validation Agent */}
+      <ValidationAgent referenceNo={tender.referenceNo} />
+
+      {/* Summary + Score Row */}
+      <div className="grid lg:grid-cols-3 gap-6">
+        <TenderSummaryCard
+          summary={tender.summary}
+          entity={tender.entity}
+          method={tender.procurementMethod}
+          category={tender.category}
+          referenceNo={tender.referenceNo}
+        />
+        <Card>
+          <CardHeader>
+            <CardTitle className="text-lg">Bid/No-Bid Score</CardTitle>
+          </CardHeader>
+          <CardContent>
+            <ScoreGauge score={tender.score} />
+            <p className="text-center text-sm text-muted-foreground mt-4">
+              {analysis.bidScore?.explanation || (tender.score >= 70
+                ? "Strong match — recommended to bid"
+                : tender.score >= 40
+                ? "Moderate match — review red flags"
+                : "Weak match — consider skipping")}
+            </p>
+          </CardContent>
+        </Card>
+      </div>
+
+      {/* Tabbed Sections */}
+      <Tabs defaultValue="overview" className="w-full">
+        <TabsList className="w-full justify-start flex-wrap h-auto gap-1 bg-muted/50 p-1">
+          <TabsTrigger value="overview" className="gap-1.5">
+            <Calendar className="h-3.5 w-3.5" /> Overview
+          </TabsTrigger>
+          <TabsTrigger value="compliance" className="gap-1.5">
+            <Shield className="h-3.5 w-3.5" /> Compliance
+          </TabsTrigger>
+          <TabsTrigger value="red-flags" className="gap-1.5">
+            <AlertTriangle className="h-3.5 w-3.5" /> Red Flags
+          </TabsTrigger>
+          <TabsTrigger value="evaluation" className="gap-1.5">
+            <BarChart3 className="h-3.5 w-3.5" /> Evaluation
+          </TabsTrigger>
+        </TabsList>
+
+        {/* Overview Tab */}
+        <TabsContent value="overview" className="space-y-6">
+          <div className="grid md:grid-cols-2 gap-6">
+            <DeadlinesTimeline deadlines={[]} /> {/* Partially mocked or need another endpoint */}
+            <BudgetCard budget={{
+              estimatedBudget: "KES TBD",
+              bidSecurity: "TBD",
+              lots: "TBD",
+              paymentTerms: "TBD",
+              currency: "KES"
+            }} />
+          </div>
+          <EligibilitySection items={[]} />
+        </TabsContent>
+
+        {/* Compliance Tab */}
+        <TabsContent value="compliance">
+          <Card>
+            <CardHeader>
+              <CardTitle className="text-lg flex items-center gap-2">
+                <Shield className="h-5 w-5 text-primary" /> Compliance Matrix
+              </CardTitle>
+            </CardHeader>
+            <CardContent>
+              <div className="space-y-3">
+                {analysis.complianceItems?.map((item: any) => (
+                  <div key={item.id} className="flex items-start gap-4 p-3 rounded-lg hover:bg-muted/30 transition-colors border border-transparent hover:border-border">
+                    {item.status === "PASS" && <CheckCircle2 className="h-5 w-5 text-success shrink-0 mt-0.5" />}
+                    {item.status === "FAIL" && <XCircle className="h-5 w-5 text-destructive shrink-0 mt-0.5" />}
+                    {item.status === "UNKNOWN" && <AlertTriangle className="h-5 w-5 text-warning shrink-0 mt-0.5" />}
+                    <div className="min-w-0 flex-1">
+                      <div className="flex items-center gap-2 mb-1">
+                        <p className="text-sm font-semibold text-foreground">{item.title}</p>
+                        <Badge variant="outline" className="text-[10px] uppercase">{item.severity}</Badge>
+                      </div>
+                      <p className="text-xs text-muted-foreground mb-2">{item.requirementText}</p>
+                      {item.remediation && (
+                        <div className="bg-primary/5 p-2 rounded text-xs text-primary border border-primary/10">
+                          <span className="font-semibold">Remediation:</span> {item.remediation}
+                        </div>
+                      )}
+                    </div>
+                  </div>
+                ))}
+              </div>
+            </CardContent>
+          </Card>
+        </TabsContent>
+
+        {/* Red Flags Tab */}
+        <TabsContent value="red-flags">
+          <Card>
+            <CardHeader>
+              <CardTitle className="text-lg flex items-center gap-2">
+                <AlertTriangle className="h-5 w-5 text-warning" /> Red Flags & Blockers
+              </CardTitle>
+            </CardHeader>
+            <CardContent>
+              <div className="space-y-4">
+                {analysis.bidScore?.blockers?.map((blocker: string, i: number) => (
+                  <Card key={i} className="border-l-4 border-l-destructive">
+                    <CardContent className="p-4 flex gap-3">
+                      <AlertTriangle className="h-5 w-5 text-destructive shrink-0 mt-0.5" />
+                      <div>
+                        <h4 className="text-sm font-semibold text-foreground mb-1">Critical Blocker #{i+1}</h4>
+                        <p className="text-xs text-muted-foreground">{blocker}</p>
+                      </div>
+                    </CardContent>
+                  </Card>
+                ))}
+                {analysis.bidScore?.blockers?.length === 0 && (
+                  <div className="text-center py-8 text-muted-foreground">
+                    No critical red flags or blockers identified.
+                  </div>
+                )}
+              </div>
+            </CardContent>
+          </Card>
+        </TabsContent>
+
+        {/* Evaluation Tab */}
+        <TabsContent value="evaluation">
+          <EvaluationCriteria criteria={[]} />
+        </TabsContent>
+      </Tabs>
+    </div>
+  );
+}

apps/web/src/app/(dashboard)/tenders/page.tsx

@@ -0,0 +1,113 @@
+"use client";
+
+import { useState } from "react";
+import { useTenders } from "@/hooks/use-tenders";
+import { Card, CardContent } from "@/components/ui/card";
+import { Badge } from "@/components/ui/badge";
+import { Input } from "@/components/ui/input";
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue } from "@/components/ui/select";
+import { FileText, Search, Clock, ArrowRight, Loader2 } from "lucide-react";
+import Link from "next/link";
+
+const statusColors: Record<string, string> = {
+  PROCESSING: "bg-warning/10 text-warning border-warning/20",
+  ANALYSIS_READY: "bg-primary/10 text-primary border-primary/20",
+  FAILED: "bg-destructive/10 text-destructive border-destructive/20",
+  UPLOADED: "bg-muted text-muted-foreground border-border",
+};
+
+function getScoreColor(score: number | undefined) {
+  if (!score) return "text-muted-foreground";
+  if (score >= 70) return "text-success";
+  if (score >= 40) return "text-warning";
+  return "text-destructive";
+}
+
+export default function TendersListPage() {
+  const [search, setSearch] = useState("");
+  const [statusFilter, setStatusFilter] = useState("all");
+
+  const { data: tenders, isLoading } = useTenders({
+    status: statusFilter === "all" ? undefined : statusFilter,
+    q: search || undefined
+  });
+
+  return (
+    <div className="space-y-6 animate-fade-in">
+      <div>
+        <h1 className="text-2xl font-bold text-foreground">My Tenders</h1>
+        <p className="text-muted-foreground text-sm">Manage and track all your uploaded tenders</p>
+      </div>
+
+      {/* Filters */}
+      <div className="flex flex-col sm:flex-row gap-3">
+        <div className="relative flex-1">
+          <Search className="absolute left-3 top-1/2 -translate-y-1/2 h-4 w-4 text-muted-foreground" />
+          <Input
+            placeholder="Search tenders..."
+            className="pl-9"
+            value={search}
+            onChange={(e) => setSearch(e.target.value)}
+          />
+        </div>
+        <Select value={statusFilter} onValueChange={setStatusFilter}>
+          <SelectTrigger className="w-full sm:w-40">
+            <SelectValue placeholder="Status" />
+          </SelectTrigger>
+          <SelectContent>
+            <SelectItem value="all">All Status</SelectItem>
+            <SelectItem value="PROCESSING">Processing</SelectItem>
+            <SelectItem value="ANALYSIS_READY">Ready</SelectItem>
+            <SelectItem value="FAILED">Failed</SelectItem>
+          </SelectContent>
+        </Select>
+      </div>
+
+      {/* Tenders List */}
+      <div className="space-y-3">
+        {isLoading ? (
+          <div className="flex justify-center py-12">
+            <Loader2 className="h-8 w-8 animate-spin text-primary" />
+          </div>
+        ) : tenders?.length === 0 ? (
+          <div className="text-center py-12">
+            <FileText className="h-12 w-12 text-muted-foreground mx-auto mb-3" />
+            <p className="text-muted-foreground">No tenders found matching your criteria.</p>
+          </div>
+        ) : (
+          tenders?.map((tender) => (
+            <Link key={tender.tenderId} href={`/tenders/${tender.tenderId}`}>
+              <Card className="hover:shadow-md transition-all hover:border-primary/20 cursor-pointer">
+                <CardContent className="p-4 flex items-center gap-4">
+                  <div className="hidden sm:flex w-12 h-12 rounded-xl bg-primary/5 items-center justify-center shrink-0">
+                    <FileText className="h-5 w-5 text-primary" />
+                  </div>
+                  <div className="flex-1 min-w-0">
+                    <p className="text-sm font-medium text-foreground truncate">{tender.fileName}</p>
+                    <div className="flex items-center gap-2 mt-1 flex-wrap">
+                      <span className="text-xs text-muted-foreground flex items-center gap-1">
+                        <Clock className="h-3 w-3" /> {new Date(tender.createdAt).toLocaleDateString()}
+                      </span>
+                      {tender.unlocked && (
+                        <Badge variant="secondary" className="text-[10px] h-4">Unlocked</Badge>
+                      )}
+                    </div>
+                  </div>
+                  <div className="flex items-center gap-3 shrink-0">
+                    <span className={`text-lg font-bold ${getScoreColor(tender.score)}`}>
+                      {tender.score || "--"}
+                    </span>
+                    <Badge variant="outline" className={`text-xs ${statusColors[tender.status] || ""}`}>
+                      {tender.status.replace("_", " ")}
+                    </Badge>
+                    <ArrowRight className="h-4 w-4 text-muted-foreground hidden sm:block" />
+                  </div>
+                </CardContent>
+              </Card>
+            </Link>
+          ))
+        )}
+      </div>
+    </div>
+  );
+}

apps/web/src/app/(dashboard)/upload/page.tsx

@@ -0,0 +1,217 @@
+"use client";
+
+import { useState } from "react";
+import { useTenders } from "@/hooks/use-tenders";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Button } from "@/components/ui/button";
+import { Badge } from "@/components/ui/badge";
+import { Progress } from "@/components/ui/progress";
+import { Upload, FileText, CheckCircle2, AlertCircle, Loader2 } from "lucide-react";
+import { useRouter } from "next/navigation";
+import { toast } from "sonner";
+
+interface UploadedFile {
+  id: string;
+  name: string;
+  size: string;
+  status: "uploading" | "complete" | "error";
+  progress: number;
+}
+
+export default function UploadTenderPage() {
+  const router = useRouter();
+  const [isDragging, setIsDragging] = useState(false);
+  const [uploadingFile, setUploadingFile] = useState<UploadedFile | null>(null);
+  const { data: history, isLoading: historyLoading } = useTenders({ limit: 5 });
+
+  const handleFileUpload = async (file: File) => {
+    if (file.type !== "application/pdf") {
+      toast.error("Please upload a PDF file");
+      return;
+    }
+
+    setUploadingFile({
+      id: "pending",
+      name: file.name,
+      size: `${(file.size / (1024 * 1024)).toFixed(1)} MB`,
+      status: "uploading",
+      progress: 0,
+    });
+
+    try {
+      // 1. Initialize upload session
+      const initRes = await fetch("/api/uploads/init", {
+        method: "POST",
+        body: JSON.stringify({
+          fileName: file.name,
+          fileSize: file.size,
+          contentType: file.type,
+        }),
+      });
+
+      if (!initRes.ok) throw new Error("Failed to initialize upload");
+      const { data: session } = await initRes.json();
+
+      // 2. Upload to Supabase Storage
+      const uploadRes = await fetch(session.uploadUrl, {
+        method: "PUT",
+        headers: {
+          "Authorization": `Bearer ${session.uploadToken}`,
+          "Content-Type": file.type,
+        },
+        body: file,
+      });
+
+      if (!uploadRes.ok) throw new Error("Upload to storage failed");
+      setUploadingFile(prev => prev ? { ...prev, progress: 90 } : null);
+
+      // 3. Trigger processing
+      const processRes = await fetch(`/api/tenders/${session.tenderId}/process`, {
+        method: "POST",
+        body: JSON.stringify({ forceReprocess: false }),
+      });
+
+      if (!processRes.ok) throw new Error("Failed to start analysis");
+      
+      setUploadingFile(prev => prev ? { ...prev, progress: 100, status: "complete" } : null);
+      toast.success("Upload successful! Redirecting to analysis...");
+      
+      // Redirect to the tender detail page after a short delay
+      setTimeout(() => {
+        router.push(`/tenders/${session.tenderId}`);
+      }, 1500);
+
+    } catch (error) {
+      console.error(error);
+      setUploadingFile(prev => prev ? { ...prev, status: "error" } : null);
+      toast.error(error instanceof Error ? error.message : "Upload failed");
+    }
+  };
+
+  const onFileSelect = (e: React.ChangeEvent<HTMLInputElement>) => {
+    if (e.target.files?.[0]) {
+      handleFileUpload(e.target.files[0]);
+    }
+  };
+
+  return (
+    <div className="space-y-6 animate-fade-in">
+      <div>
+        <h1 className="text-2xl font-bold text-foreground">Upload Tender</h1>
+        <p className="text-muted-foreground text-sm">Upload a tender PDF for AI-powered analysis</p>
+      </div>
+
+      {/* Drop Zone */}
+      <Card
+        className={`border-2 border-dashed transition-colors cursor-pointer relative ${
+          isDragging ? "border-primary bg-primary/5" : "border-border hover:border-primary/50"
+        }`}
+        onDragOver={(e) => { e.preventDefault(); setIsDragging(true); }}
+        onDragLeave={() => setIsDragging(false)}
+        onDrop={(e) => {
+          e.preventDefault();
+          setIsDragging(false);
+          const file = e.dataTransfer.files[0];
+          if (file) handleFileUpload(file);
+        }}
+        onClick={() => document.getElementById("file-input")?.click()}
+      >
+        <CardContent className="py-16 flex flex-col items-center text-center">
+          <input
+            id="file-input"
+            type="file"
+            accept=".pdf"
+            className="hidden"
+            onChange={onFileSelect}
+          />
+          <div className="w-16 h-16 rounded-2xl bg-primary/10 flex items-center justify-center mb-4">
+            <Upload className="h-8 w-8 text-primary" />
+          </div>
+          <h3 className="text-lg font-semibold text-foreground mb-1">
+            {isDragging ? "Drop your file here" : "Drag & drop your tender PDF"}
+          </h3>
+          <p className="text-sm text-muted-foreground mb-4">
+            or click to browse. Supports PDF files up to 50MB.
+          </p>
+          <Button variant="outline" size="sm">Browse Files</Button>
+        </CardContent>
+      </Card>
+
+      {/* Upload Info */}
+      <div className="flex flex-wrap gap-3">
+        <Badge variant="secondary" className="gap-1">
+          <CheckCircle2 className="h-3 w-3" /> PDF format only
+        </Badge>
+        <Badge variant="secondary" className="gap-1">
+          <CheckCircle2 className="h-3 w-3" /> Max 50MB
+        </Badge>
+        <Badge variant="secondary" className="gap-1">
+          <CheckCircle2 className="h-3 w-3" /> Scanned docs supported (OCR)
+        </Badge>
+      </div>
+
+      {/* Active Upload */}
+      {uploadingFile && (
+        <Card>
+          <CardHeader>
+            <CardTitle className="text-lg">Current Upload</CardTitle>
+          </CardHeader>
+          <CardContent>
+            <div className="flex items-center gap-3 p-3 rounded-lg bg-muted/30">
+              <FileText className="h-5 w-5 text-primary shrink-0" />
+              <div className="flex-1 min-w-0">
+                <p className="text-sm font-medium text-foreground truncate">{uploadingFile.name}</p>
+                <p className="text-xs text-muted-foreground">{uploadingFile.size}</p>
+                {uploadingFile.status === "uploading" && (
+                  <Progress value={uploadingFile.progress} className="mt-2 h-1.5" />
+                )}
+              </div>
+              <div className="shrink-0">
+                {uploadingFile.status === "complete" && (
+                  <CheckCircle2 className="h-5 w-5 text-success" />
+                )}
+                {uploadingFile.status === "uploading" && (
+                  <Loader2 className="h-4 w-4 animate-spin text-primary" />
+                )}
+                {uploadingFile.status === "error" && (
+                  <AlertCircle className="h-5 w-5 text-destructive" />
+                )}
+              </div>
+            </div>
+          </CardContent>
+        </Card>
+      )}
+
+      {/* Recent Uploads */}
+      <Card>
+        <CardHeader>
+          <CardTitle className="text-lg">Recent Uploads</CardTitle>
+        </CardHeader>
+        <CardContent>
+          <div className="space-y-3">
+            {historyLoading ? (
+              <div className="flex justify-center py-4">
+                <Loader2 className="h-6 w-6 animate-spin text-primary" />
+              </div>
+            ) : history?.length === 0 ? (
+              <p className="text-sm text-muted-foreground text-center py-4">No recent uploads found.</p>
+            ) : (
+              history?.map((tender) => (
+                <Link key={tender.tenderId} href={`/tenders/${tender.tenderId}`}>
+                  <div className="flex items-center gap-3 p-3 rounded-lg bg-muted/30 hover:bg-muted/50 transition-colors cursor-pointer">
+                    <FileText className="h-5 w-5 text-primary shrink-0" />
+                    <div className="flex-1 min-w-0">
+                      <p className="text-sm font-medium text-foreground truncate">{tender.fileName}</p>
+                      <p className="text-xs text-muted-foreground">{new Date(tender.createdAt).toLocaleDateString()}</p>
+                    </div>
+                    <Badge variant="outline" className="text-[10px]">{tender.status}</Badge>
+                  </div>
+                </Link>
+              ))
+            )}
+          </div>
+        </CardContent>
+      </Card>
+    </div>
+  );
+}

apps/web/src/app/admin/layout.tsx

@@ -0,0 +1,249 @@
+export const metadata = {
+  title: "Admin Panel | TenderHub Kenya",
+  description: "Superuser administration panel",
+};
+
+export default function AdminLayout({
+  children,
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <>
+      <style>{`
+        .admin-container {
+          min-height: 100vh;
+          background: #0f172a;
+          color: #e2e8f0;
+        }
+        
+        .admin-header {
+          display: flex;
+          justify-content: space-between;
+          align-items: center;
+          padding: 1rem 2rem;
+          background: #1e293b;
+          border-bottom: 1px solid #334155;
+        }
+        
+        .admin-brand {
+          display: flex;
+          align-items: center;
+          gap: 1rem;
+        }
+        
+        .admin-brand h1 {
+          margin: 0;
+          font-size: 1.5rem;
+          font-weight: 600;
+        }
+        
+        .admin-badge {
+          background: #dc2626;
+          color: white;
+          padding: 0.25rem 0.75rem;
+          border-radius: 9999px;
+          font-size: 0.75rem;
+          font-weight: 600;
+        }
+        
+        .admin-nav {
+          display: flex;
+          gap: 0.5rem;
+          align-items: center;
+        }
+        
+        .admin-nav button {
+          padding: 0.5rem 1rem;
+          border-radius: 0.375rem;
+          border: none;
+          background: transparent;
+          color: #94a3b8;
+          cursor: pointer;
+          font-size: 0.875rem;
+          transition: all 0.2s;
+        }
+        
+        .admin-nav button:hover {
+          background: #334155;
+          color: #e2e8f0;
+        }
+        
+        .admin-nav button.active {
+          background: #3b82f6;
+          color: white;
+        }
+        
+        .admin-main {
+          padding: 2rem;
+          max-width: 1400px;
+          margin: 0 auto;
+        }
+        
+        .admin-loading,
+        .admin-unauthorized {
+          min-height: 100vh;
+          display: flex;
+          flex-direction: column;
+          align-items: center;
+          justify-content: center;
+          gap: 1rem;
+        }
+        
+        .admin-error {
+          background: #dc2626;
+          color: white;
+          padding: 1rem;
+          border-radius: 0.5rem;
+          margin-bottom: 1rem;
+          display: flex;
+          justify-content: space-between;
+          align-items: center;
+        }
+        
+        .admin-error button {
+          background: white;
+          color: #dc2626;
+          border: none;
+          padding: 0.25rem 0.75rem;
+          border-radius: 0.25rem;
+          cursor: pointer;
+        }
+        
+        .stats-grid {
+          display: grid;
+          grid-template-columns: repeat(auto-fit, minmax(200px, 1fr));
+          gap: 1.5rem;
+          margin-bottom: 2rem;
+        }
+        
+        .stat-card {
+          background: #1e293b;
+          border: 1px solid #334155;
+          border-radius: 0.5rem;
+          padding: 1.5rem;
+          text-align: center;
+        }
+        
+        .stat-value {
+          font-size: 2rem;
+          font-weight: 700;
+          color: #3b82f6;
+        }
+        
+        .stat-label {
+          font-size: 0.875rem;
+          color: #94a3b8;
+          margin-top: 0.5rem;
+        }
+        
+        .admin-table {
+          width: 100%;
+          border-collapse: collapse;
+          background: #1e293b;
+          border-radius: 0.5rem;
+          overflow: hidden;
+        }
+        
+        .admin-table th,
+        .admin-table td {
+          padding: 1rem;
+          text-align: left;
+          border-bottom: 1px solid #334155;
+        }
+        
+        .admin-table th {
+          background: #0f172a;
+          font-weight: 600;
+          font-size: 0.875rem;
+          color: #94a3b8;
+          text-transform: uppercase;
+          letter-spacing: 0.05em;
+        }
+        
+        .admin-table tbody tr:hover {
+          background: #334155;
+        }
+        
+        .badge-superuser {
+          background: #dc2626;
+          color: white;
+          padding: 0.25rem 0.5rem;
+          border-radius: 0.25rem;
+          font-size: 0.75rem;
+          font-weight: 600;
+        }
+        
+        .badge-user {
+          background: #334155;
+          color: #94a3b8;
+          padding: 0.25rem 0.5rem;
+          border-radius: 0.25rem;
+          font-size: 0.75rem;
+        }
+        
+        .btn-sm {
+          padding: 0.25rem 0.75rem;
+          border-radius: 0.25rem;
+          border: none;
+          background: #3b82f6;
+          color: white;
+          cursor: pointer;
+          font-size: 0.75rem;
+        }
+        
+        .btn-sm:hover {
+          background: #2563eb;
+        }
+        
+        .quick-actions {
+          display: flex;
+          gap: 1rem;
+          margin-top: 1rem;
+        }
+        
+        .quick-actions button {
+          padding: 0.75rem 1.5rem;
+          border-radius: 0.375rem;
+          border: none;
+          background: #3b82f6;
+          color: white;
+          cursor: pointer;
+          font-weight: 500;
+        }
+        
+        .quick-actions button:hover {
+          background: #2563eb;
+        }
+        
+        .spinner {
+          width: 40px;
+          height: 40px;
+          border: 4px solid #334155;
+          border-top-color: #3b82f6;
+          border-radius: 50%;
+          animation: spin 1s linear infinite;
+        }
+        
+        @keyframes spin {
+          to { transform: rotate(360deg); }
+        }
+        
+        h2 {
+          margin-bottom: 1.5rem;
+          font-size: 1.25rem;
+          font-weight: 600;
+        }
+        
+        h3 {
+          margin-top: 2rem;
+          margin-bottom: 1rem;
+          font-size: 1rem;
+          font-weight: 600;
+          color: #94a3b8;
+        }
+      `}</style>
+      {children}
+    </>
+  );
+}

apps/web/src/app/admin/page.tsx

@@ -0,0 +1,590 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { useRouter } from "next/navigation";
+import { getSupabaseBrowser } from "@/lib/supabase/browser";
+
+type Stats = {
+  totalUsers: number;
+  totalOrgs: number;
+  totalTenders: number;
+  totalPayments: number;
+  recentLogins: number;
+};
+
+type RecentActivity = {
+  id: string;
+  action: string;
+  resourceType: string;
+  resourceId: string | null;
+  createdAt: string;
+  adminEmail?: string;
+};
+
+type UserWithOrg = {
+  userId: string;
+  email: string;
+  orgName: string;
+  orgSlug: string;
+  isSuperuser: boolean;
+  createdAt: string;
+  lastSignIn: string | null;
+};
+
+type FailedJob = {
+  id: string;
+  tender_id: string;
+  status: string;
+  last_error: string;
+  attempt_count: number;
+  created_at: string;
+  tenders: { source_filename: string; organization_id: string } | null;
+};
+
+type ReviewQueueItem = {
+  tenderId: string;
+  fileName: string;
+  status: string;
+  unlocked: boolean;
+  updatedAt: string;
+  decision: "BID" | "NO_BID" | "REVIEW" | null;
+  confidence: number | null;
+  blockerCount: number;
+  criticalFailCount: number;
+  highFailCount: number;
+  riskScore: number;
+  latestFailureReason: string | null;
+  reasonCodes: string[];
+};
+
+type ReviewQueueSummary = {
+  total: number;
+  requiresAction: number;
+  failed: number;
+  reviewDecision: number;
+  lowConfidence: number;
+  hardBlockers: number;
+  criticalCompliance: number;
+};
+
+type ReviewActionType = "ACKNOWLEDGE" | "REQUEST_REPROCESS" | "APPROVE_FOR_DRAFT" | "ESCALATE";
+
+export default function AdminPage() {
+  const router = useRouter();
+  const [loading, setLoading] = useState(true);
+  const [isAdmin, setIsAdmin] = useState(false);
+  const [stats, setStats] = useState<Stats | null>(null);
+  const [users, setUsers] = useState<UserWithOrg[]>([]);
+  const [activity, setActivity] = useState<RecentActivity[]>([]);
+  const [failedJobs, setFailedJobs] = useState<FailedJob[]>([]);
+  const [activeTab, setActiveTab] = useState<"overview" | "users" | "interventions" | "review" | "activity">("overview");
+  const [reviewItems, setReviewItems] = useState<ReviewQueueItem[]>([]);
+  const [reviewSummary, setReviewSummary] = useState<ReviewQueueSummary | null>(null);
+  const [reviewLoading, setReviewLoading] = useState(false);
+  const [reviewFilters, setReviewFilters] = useState({
+    minConfidence: "0.70",
+    requireActionOnly: true,
+    reasonFilter: "all" as "all" | ReviewQueueItem["reasonCodes"][number],
+    sort: "RISK_DESC" as "RISK_DESC" | "UPDATED_DESC" | "CONFIDENCE_ASC"
+  });
+  const [reviewActionByTender, setReviewActionByTender] = useState<Record<string, ReviewActionType>>({});
+  const [reviewNoteByTender, setReviewNoteByTender] = useState<Record<string, string>>({});
+  const [error, setError] = useState<string | null>(null);
+
+  useEffect(() => {
+    checkAdminAccess();
+  }, []);
+
+  async function checkAdminAccess() {
+    try {
+      const supabase = getSupabaseBrowser();
+      const { data: { user } } = await supabase.auth.getUser();
+      if (!user) {
+        router.push("/login?redirect=/admin");
+        return;
+      }
+
+      const response = await fetch("/api/admin/check", {
+        headers: { "content-type": "application/json" },
+      });
+
+      if (!response.ok) {
+        router.push("/dashboard");
+        return;
+      }
+
+      setIsAdmin(true);
+      loadData();
+    } catch (err) {
+      setError("Failed to verify admin access");
+      setLoading(false);
+    }
+  }
+
+  async function loadData() {
+    setLoading(true);
+    try {
+      const [statsRes, usersRes, activityRes, jobsRes] = await Promise.all([
+        fetch("/api/admin/stats"),
+        fetch("/api/admin/users"),
+        fetch("/api/admin/activity"),
+        fetch("/api/admin/jobs"),
+      ]);
+
+      if (statsRes.ok) {
+        const statsData = await statsRes.json();
+        if (statsData.ok) setStats(statsData.data);
+      }
+
+      if (usersRes.ok) {
+        const usersData = await usersRes.json();
+        if (usersData.ok) setUsers(usersData.data.users);
+      }
+
+      if (activityRes.ok) {
+        const activityData = await activityRes.json();
+        if (activityData.ok) setActivity(activityData.data.activity);
+      }
+
+      if (jobsRes.ok) {
+        const jobsData = await jobsRes.json();
+        if (jobsData.ok) setFailedJobs(jobsData.data.failedJobs);
+      }
+    } catch (err) {
+      setError("Failed to load admin data");
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  async function toggleSuperuser(userId: string, currentValue: boolean) {
+    try {
+      const response = await fetch("/api/admin/users/toggle-superuser", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ userId, isSuperuser: !currentValue }),
+      });
+
+      if (response.ok) {
+        setUsers(users.map(u => 
+          u.userId === userId ? { ...u, isSuperuser: !currentValue } : u
+        ));
+      }
+    } catch (err) {
+      setError("Failed to update user");
+    }
+  }
+
+  async function retryJob(jobId: string, tenderId: string) {
+    try {
+      const res = await fetch("/api/admin/jobs/retry", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ jobId, tenderId }),
+      });
+      if (res.ok) {
+        setFailedJobs(failedJobs.filter(j => j.id !== jobId));
+      } else {
+        setError("Failed to retry job");
+      }
+    } catch (err) {
+      setError("An error occurred trying to retry");
+    }
+  }
+
+  async function loadReviewQueue() {
+    setReviewLoading(true);
+    try {
+      const params = new URLSearchParams({
+        limit: "20",
+        minConfidence: reviewFilters.minConfidence,
+        requireAction: reviewFilters.requireActionOnly ? "true" : "false",
+        sort: reviewFilters.sort,
+      });
+      if (reviewFilters.reasonFilter !== "all") {
+        params.set("reason", reviewFilters.reasonFilter);
+      }
+
+      const res = await fetch(`/api/tenders/review-queue?${params.toString()}`);
+      const data = await res.json();
+      if (data.ok) {
+        setReviewItems(data.data.items || []);
+        setReviewSummary(data.data.summary || null);
+      } else {
+        setError("Failed to load review queue");
+      }
+    } catch {
+      setError("Failed to load review queue");
+    } finally {
+      setReviewLoading(false);
+    }
+  }
+
+  async function submitReviewAction(tenderId: string) {
+    const action = reviewActionByTender[tenderId] ?? "ACKNOWLEDGE";
+    const note = (reviewNoteByTender[tenderId] ?? "").trim();
+
+    try {
+      const res = await fetch(`/api/tenders/${tenderId}/review-action`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+          action,
+          note: note.length > 0 ? note : undefined,
+        }),
+      });
+
+      if (res.ok) {
+        await loadReviewQueue();
+      } else {
+        setError("Failed to submit review action");
+      }
+    } catch {
+      setError("Failed to submit review action");
+    }
+  }
+
+  if (loading) {
+    return (
+      <div className="admin-loading">
+        <div className="spinner"></div>
+        <p>Loading admin panel...</p>
+      </div>
+    );
+  }
+
+  if (!isAdmin) {
+    return (
+      <div className="admin-unauthorized">
+        <h1>Unauthorized</h1>
+        <p>You do not have permission to access this page.</p>
+        <button onClick={() => router.push("/dashboard")}>
+          Go to Dashboard
+        </button>
+      </div>
+    );
+  }
+
+  return (
+    <div className="admin-container">
+      <header className="admin-header">
+        <div className="admin-brand">
+          <span className="admin-badge">SUPERUSER</span>
+          <h1>Admin Panel</h1>
+        </div>
+        <nav className="admin-nav">
+          <button 
+            className={activeTab === "overview" ? "active" : ""}
+            onClick={() => setActiveTab("overview")}
+          >
+            Overview
+          </button>
+          <button 
+            className={activeTab === "users" ? "active" : ""}
+            onClick={() => setActiveTab("users")}
+          >
+            Users
+          </button>
+          <button 
+            className={activeTab === "interventions" ? "active" : ""}
+            onClick={() => setActiveTab("interventions")}
+          >
+            Interventions
+          </button>
+          <button
+            className={activeTab === "review" ? "active" : ""}
+            onClick={() => {
+              setActiveTab("review");
+              void loadReviewQueue();
+            }}
+          >
+            Review Queue
+          </button>
+          <button
+            className={activeTab === "activity" ? "active" : ""}
+            onClick={() => setActiveTab("activity")}
+          >
+            Audit Log
+          </button>
+          <button onClick={() => getSupabaseBrowser().auth.signOut()}>
+            Sign Out
+          </button>
+        </nav>
+      </header>
+
+      <main className="admin-main">
+        {error && (
+          <div className="admin-error">
+            {error}
+            <button onClick={() => setError(null)}>Dismiss</button>
+          </div>
+        )}
+
+        {activeTab === "overview" && stats && (
+          <section className="admin-overview">
+            <h2>Platform Overview</h2>
+            <div className="stats-grid">
+              <div className="stat-card">
+                <div className="stat-value">{stats.totalUsers}</div>
+                <div className="stat-label">Total Users</div>
+              </div>
+              <div className="stat-card">
+                <div className="stat-value">{stats.totalOrgs}</div>
+                <div className="stat-label">Organizations</div>
+              </div>
+              <div className="stat-card">
+                <div className="stat-value">{stats.totalTenders}</div>
+                <div className="stat-label">Tenders</div>
+              </div>
+              <div className="stat-card">
+                <div className="stat-value">{stats.totalPayments}</div>
+                <div className="stat-label">Payments</div>
+              </div>
+              <div className="stat-card">
+                <div className="stat-value">{stats.recentLogins}</div>
+                <div className="stat-label">Logins (24h)</div>
+              </div>
+            </div>
+
+            <h3>Quick Actions</h3>
+            <div className="quick-actions">
+              <button onClick={() => loadData()}>
+                Refresh Data
+              </button>
+            </div>
+          </section>
+        )}
+
+        {activeTab === "users" && (
+          <section className="admin-users">
+            <h2>User Management</h2>
+            <table className="admin-table">
+              <thead>
+                <tr>
+                  <th>Email</th>
+                  <th>Organization</th>
+                  <th>Created</th>
+                  <th>Last Sign In</th>
+                  <th>Superuser</th>
+                  <th>Actions</th>
+                </tr>
+              </thead>
+              <tbody>
+                {users.map(user => (
+                  <tr key={user.userId}>
+                    <td>{user.email}</td>
+                    <td>{user.orgName} ({user.orgSlug})</td>
+                    <td>{new Date(user.createdAt).toLocaleDateString()}</td>
+                    <td>{user.lastSignIn ? new Date(user.lastSignIn).toLocaleDateString() : "Never"}</td>
+                    <td>
+                      <span className={user.isSuperuser ? "badge-superuser" : "badge-user"}>
+                        {user.isSuperuser ? "Yes" : "No"}
+                      </span>
+                    </td>
+                    <td>
+                      <button 
+                        onClick={() => toggleSuperuser(user.userId, user.isSuperuser)}
+                        className="btn-sm"
+                      >
+                        {user.isSuperuser ? "Remove Superuser" : "Make Superuser"}
+                      </button>
+                    </td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </section>
+        )}
+
+        {activeTab === "interventions" && (
+          <section className="admin-users">
+            <h2>Tender Interventions (Failed Jobs)</h2>
+            {failedJobs.length === 0 ? (
+              <p>No failed jobs found. Everything is running smoothly!</p>
+            ) : (
+              <table className="admin-table">
+                <thead>
+                  <tr>
+                    <th>Tender File</th>
+                    <th>Attempts</th>
+                    <th>Last Error</th>
+                    <th>Failed At</th>
+                    <th>Actions</th>
+                  </tr>
+                </thead>
+                <tbody>
+                  {failedJobs.map(job => (
+                    <tr key={job.id}>
+                      <td>{job.tenders?.source_filename || job.tender_id}</td>
+                      <td>{job.attempt_count}</td>
+                      <td style={{ maxWidth: '300px', overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' }}>
+                        {job.last_error || "Unknown Error"}
+                      </td>
+                      <td>{new Date(job.created_at).toLocaleString()}</td>
+                      <td>
+                        <button 
+                          onClick={() => retryJob(job.id, job.tender_id)}
+                          className="btn-sm"
+                        >
+                          Retry Job
+                        </button>
+                      </td>
+                    </tr>
+                  ))}
+                </tbody>
+              </table>
+            )}
+          </section>
+        )}
+
+        {activeTab === "review" && (
+          <section className="admin-review">
+            <h2>Review Queue</h2>
+            {reviewSummary && (
+              <div className="stats-grid" style={{ marginBottom: "1.5rem" }}>
+                <div className="stat-card">
+                  <div className="stat-value">{reviewSummary.total}</div>
+                  <div className="stat-label">Total</div>
+                </div>
+                <div className="stat-card">
+                  <div className="stat-value">{reviewSummary.requiresAction}</div>
+                  <div className="stat-label">Needs Action</div>
+                </div>
+                <div className="stat-card">
+                  <div className="stat-value">{reviewSummary.failed}</div>
+                  <div className="stat-label">Failed</div>
+                </div>
+                <div className="stat-card">
+                  <div className="stat-value">{reviewSummary.lowConfidence}</div>
+                  <div className="stat-label">Low Confidence</div>
+                </div>
+              </div>
+            )}
+
+            <div className="review-filters" style={{ display: "flex", gap: "1rem", marginBottom: "1rem", flexWrap: "wrap" }}>
+              <label>
+                Min Confidence
+                <input
+                  type="number"
+                  step="0.05"
+                  min="0"
+                  max="1"
+                  value={reviewFilters.minConfidence}
+                  onChange={(e) => setReviewFilters(f => ({ ...f, minConfidence: e.target.value }))}
+                  style={{ marginLeft: "0.5rem", width: "80px" }}
+                />
+              </label>
+              <label>
+                <input
+                  type="checkbox"
+                  checked={reviewFilters.requireActionOnly}
+                  onChange={(e) => setReviewFilters(f => ({ ...f, requireActionOnly: e.target.checked }))}
+                />
+                Action Required Only
+              </label>
+              <select
+                value={reviewFilters.sort}
+                onChange={(e) => setReviewFilters(f => ({ ...f, sort: e.target.value as typeof reviewFilters.sort }))}
+              >
+                <option value="RISK_DESC">Risk (High to Low)</option>
+                <option value="UPDATED_DESC">Updated (Newest)</option>
+                <option value="CONFIDENCE_ASC">Confidence (Low to High)</option>
+              </select>
+              <button onClick={() => loadReviewQueue()} disabled={reviewLoading}>
+                {reviewLoading ? "Loading..." : "Refresh"}
+              </button>
+            </div>
+
+            {reviewItems.length === 0 ? (
+              <p>No items in review queue.</p>
+            ) : (
+              <table className="admin-table">
+                <thead>
+                  <tr>
+                    <th>File</th>
+                    <th>Decision</th>
+                    <th>Confidence</th>
+                    <th>Risk Score</th>
+                    <th>Blockers</th>
+                    <th>Reasons</th>
+                    <th>Actions</th>
+                  </tr>
+                </thead>
+                <tbody>
+                  {reviewItems.map((item) => (
+                    <tr key={item.tenderId}>
+                      <td>{item.fileName}</td>
+                      <td>
+                        <span className={`badge ${item.decision?.toLowerCase() || "unknown"}`}>
+                          {item.decision || "Pending"}
+                        </span>
+                      </td>
+                      <td>{item.confidence ? `${Math.round(item.confidence * 100)}%` : "N/A"}</td>
+                      <td>{item.riskScore}</td>
+                      <td>{item.blockerCount} ({item.criticalFailCount} critical)</td>
+                      <td>{item.reasonCodes.join(", ")}</td>
+                      <td>
+                        <div style={{ display: "flex", gap: "0.5rem", flexDirection: "column" }}>
+                          <select
+                            value={reviewActionByTender[item.tenderId] || "ACKNOWLEDGE"}
+                            onChange={(e) => setReviewActionByTender(prev => ({ ...prev, [item.tenderId]: e.target.value as ReviewActionType }))}
+                            className="btn-sm"
+                          >
+                            <option value="ACKNOWLEDGE">Acknowledge</option>
+                            <option value="REQUEST_REPROCESS">Reprocess</option>
+                            <option value="APPROVE_FOR_DRAFT">Approve for Draft</option>
+                            <option value="ESCALATE">Escalate</option>
+                          </select>
+                          <input
+                            type="text"
+                            placeholder="Note (optional)"
+                            value={reviewNoteByTender[item.tenderId] || ""}
+                            onChange={(e) => setReviewNoteByTender(prev => ({ ...prev, [item.tenderId]: e.target.value }))}
+                            className="btn-sm"
+                            style={{ minWidth: "120px" }}
+                          />
+                          <button
+                            onClick={() => submitReviewAction(item.tenderId)}
+                            className="btn-sm"
+                          >
+                            Submit
+                          </button>
+                        </div>
+                      </td>
+                    </tr>
+                  ))}
+                </tbody>
+              </table>
+            )}
+          </section>
+        )}
+
+        {activeTab === "activity" && (
+          <section className="admin-activity">
+            <h2>Audit Log</h2>
+            <table className="admin-table">
+              <thead>
+                <tr>
+                  <th>Time</th>
+                  <th>Admin</th>
+                  <th>Action</th>
+                  <th>Resource</th>
+                </tr>
+              </thead>
+              <tbody>
+                {activity.map(item => (
+                  <tr key={item.id}>
+                    <td>{new Date(item.createdAt).toLocaleString()}</td>
+                    <td>{item.adminEmail || "Unknown"}</td>
+                    <td>{item.action}</td>
+                    <td>{item.resourceType} {item.resourceId && `(${item.resourceId.slice(0, 8)}...)`}</td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </section>
+        )}
+      </main>
+    </div>
+  );
+}

apps/web/src/app/api/admin/activity/route.ts

@@ -0,0 +1,68 @@
+import { createServerClient } from "@supabase/ssr";
+import { cookies } from "next/headers";
+import { NextResponse } from "next/server";
+
+async function checkAdminAccess(supabase: ReturnType<typeof createServerClient>) {
+  const { data: { user } } = await supabase.auth.getUser();
+  if (!user) return false;
+
+  const { data: member } = await supabase
+    .from("members")
+    .select("is_superuser")
+    .eq("user_id", user.id)
+    .single();
+
+  return member?.is_superuser === true;
+}
+
+export async function GET() {
+  const cookieStore = await cookies();
+  
+  const supabase = createServerClient(
+    process.env.NEXT_PUBLIC_SUPABASE_URL!,
+    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+    {
+      cookies: {
+        getAll() {
+          return cookieStore.getAll();
+        },
+        setAll() {},
+      },
+    }
+  );
+
+  const isAdmin = await checkAdminAccess(supabase);
+  if (!isAdmin) {
+    return NextResponse.json({ ok: false, error: "Forbidden" }, { status: 403 });
+  }
+
+  try {
+    // Get recent audit log entries
+    const { data: logs } = await supabase
+      .from("admin_audit_log")
+      .select("*")
+      .order("created_at", { ascending: false })
+      .limit(50);
+
+    // Get user emails for the logs
+    const adminIds = [...new Set(logs?.map((l) => l.admin_user_id) ?? [])];
+    const { data: authData } = await supabase.auth.admin.listUsers();
+    const userMap = new Map(authData?.users?.map((u) => [u.id, u.email]) ?? []);
+
+    const activity = logs?.map((log) => ({
+      id: log.id,
+      action: log.action,
+      resourceType: log.resource_type,
+      resourceId: log.resource_id,
+      createdAt: log.created_at,
+      adminEmail: userMap.get(log.admin_user_id) ?? "Unknown",
+    })) ?? [];
+
+    return NextResponse.json({ ok: true, data: { activity } });
+  } catch (error) {
+    return NextResponse.json(
+      { ok: false, error: "Failed to fetch activity" },
+      { status: 500 }
+    );
+  }
+}

apps/web/src/app/api/admin/check/route.ts

@@ -0,0 +1,41 @@
+import { createServerClient } from "@supabase/ssr";
+import { cookies } from "next/headers";
+import { NextResponse } from "next/server";
+
+export async function GET() {
+  const cookieStore = await cookies();
+  
+  const supabase = createServerClient(
+    process.env.NEXT_PUBLIC_SUPABASE_URL!,
+    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+    {
+      cookies: {
+        getAll() {
+          return cookieStore.getAll();
+        },
+        setAll() {
+          // Read-only in route handlers
+        },
+      },
+    }
+  );
+
+  const { data: { user } } = await supabase.auth.getUser();
+
+  if (!user) {
+    return NextResponse.json({ ok: false, error: "Unauthorized" }, { status: 401 });
+  }
+
+  // Check if user is superuser
+  const { data: member } = await supabase
+    .from("members")
+    .select("is_superuser")
+    .eq("user_id", user.id)
+    .single();
+
+  if (!member?.is_superuser) {
+    return NextResponse.json({ ok: false, error: "Forbidden" }, { status: 403 });
+  }
+
+  return NextResponse.json({ ok: true, data: { isAdmin: true } });
+}

apps/web/src/app/api/admin/jobs/retry/route.ts

@@ -0,0 +1,74 @@
+import { getSupabaseAdmin } from "@/lib/supabase/admin";
+import { createServerClient } from "@supabase/ssr";
+import { cookies } from "next/headers";
+import { NextResponse } from "next/server";
+
+async function checkAdminAccess(supabase: ReturnType<typeof createServerClient>) {
+  const { data: { user } } = await supabase.auth.getUser();
+  if (!user) return false;
+
+  const { data: member } = await supabase
+    .from("members")
+    .select("is_superuser")
+    .eq("user_id", user.id)
+    .single();
+
+  return member?.is_superuser === true;
+}
+
+export async function POST(req: Request) {
+  const cookieStore = await cookies();
+  const supabaseAuth = createServerClient(
+    process.env.NEXT_PUBLIC_SUPABASE_URL!,
+    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+    {
+      cookies: {
+        getAll() {
+          return cookieStore.getAll();
+        },
+        setAll() {},
+      },
+    }
+  );
+
+  if (!(await checkAdminAccess(supabaseAuth))) {
+    return NextResponse.json({ ok: false, error: "Forbidden" }, { status: 403 });
+  }
+
+  try {
+    const body = await req.json();
+    const { jobId, tenderId } = body;
+    if (!jobId || !tenderId) {
+      return NextResponse.json({ ok: false, error: "Missing parameters" }, { status: 400 });
+    }
+
+    const supabaseAdmin = getSupabaseAdmin();
+    
+    // Reset the job
+    const { error: jobError } = await supabaseAdmin
+      .from("processing_jobs")
+      .update({
+        status: "QUEUED",
+        locked_at: null,
+        lock_owner: null,
+        attempt_count: 0,
+        last_error: null,
+        updated_at: new Date().toISOString()
+      })
+      .eq("id", jobId);
+
+    if (jobError) throw jobError;
+
+    // Set tender to PROCESSING
+    const { error: tenderError } = await supabaseAdmin
+      .from("tenders")
+      .update({ status: "PROCESSING", updated_at: new Date().toISOString() })
+      .eq("id", tenderId);
+
+    if (tenderError) throw tenderError;
+
+    return NextResponse.json({ ok: true });
+  } catch (error) {
+    return NextResponse.json({ ok: false, error: "Failed to retry job" }, { status: 500 });
+  }
+}

apps/web/src/app/api/admin/jobs/route.ts

@@ -0,0 +1,53 @@
+import { getSupabaseAdmin } from "@/lib/supabase/admin";
+import { createServerClient } from "@supabase/ssr";
+import { cookies } from "next/headers";
+import { NextResponse } from "next/server";
+
+async function checkAdminAccess(supabase: ReturnType<typeof createServerClient>) {
+  const { data: { user } } = await supabase.auth.getUser();
+  if (!user) return false;
+
+  const { data: member } = await supabase
+    .from("members")
+    .select("is_superuser")
+    .eq("user_id", user.id)
+    .single();
+
+  return member?.is_superuser === true;
+}
+
+export async function GET() {
+  const cookieStore = await cookies();
+  const supabaseAuth = createServerClient(
+    process.env.NEXT_PUBLIC_SUPABASE_URL!,
+    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
+    {
+      cookies: {
+        getAll() {
+          return cookieStore.getAll();
+        },
+        setAll() {},
+      },
+    }
+  );
+
+  if (!(await checkAdminAccess(supabaseAuth))) {
+    return NextResponse.json({ ok: false, error: "Forbidden" }, { status: 403 });
+  }
+
+  try {
+    const supabaseAdmin = getSupabaseAdmin();
+    // Get failed jobs
+    const { data: failedJobs, error } = await supabaseAdmin
+      .from("processing_jobs")
+      .select("id, tender_id, status, last_error, attempt_count, max_attempts, created_at, tenders(source_filename, organization_id)")
+      .eq("status", "FAILED")
+      .order("created_at", { ascending: false })
+      .limit(50);
+
+    if (error) throw error;
+    return NextResponse.json({ ok: true, data: { failedJobs } });
+  } catch (error) {
+    return NextResponse.json({ ok: false, error: "Failed to fetch jobs" }, { status: 500 });
+  }
+}