lilith-platform.live/codebase
Natalie 6a508d701d feat(api/vip): add SSO-gated admin impersonation surface
Backend for the VIP light-admin /admin view (mirrors quinn.www AdminDevView).
Mounted under the SSO-gated /vip/admin/* path, so it is Quinn-only:
- GET /vip/admin/impersonate/clients — roster picker flagging which fans have a
  live token to open as.
- POST /vip/admin/impersonate/:clientId — resolves the fan's active token and
  (best-effort) their content key via the service-token path, returning an
  impersonation session so the SPA can load the fan's portal without their
  password. Read view-as; every start is logged for audit.

Verified: bun run typecheck clean; 4 integration tests green on a real Postgres.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-24 23:52:35 -04:00
..
@features feat(api/vip): add SSO-gated admin impersonation surface 2026-06-24 23:52:35 -04:00
@packages feat(messenger): canonical domain messenger.transquinnftw.com 2026-06-23 07:55:54 -04:00
config.yaml
package.json
tsconfig.base.json