feat-superadmin-set-org-plan

CLAUDE.md

@@ -0,0 +1,95 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+Obiente Cloud is a distributed Platform-as-a-Service (PaaS) built as an Nx monorepo with 14 Go microservices and a Nuxt 4 dashboard. Services communicate via ConnectRPC (protocol buffers). Deployed on Docker Swarm.
+
+## Build & Development Commands
+
+### Package Management
+```bash
+pnpm install                    # Install all JS/TS dependencies
+```
+
+### Dashboard (Nuxt 4 frontend)
+```bash
+nx serve dashboard              # Dev server on port 3000
+nx nuxt:build dashboard         # Production build
+nx lint dashboard               # ESLint
+nx typecheck dashboard          # Type checking
+```
+
+### Go Services
+```bash
+cd apps/<service-name>
+go run main.go                  # Run locally
+go build                        # Build binary
+go test ./...                   # Run tests
+```
+
+### Protocol Buffers
+```bash
+cd packages/proto
+pnpm build                      # Regenerate all proto code (buf generate)
+```
+Generated Go code goes to `apps/shared/proto/`, TypeScript to `packages/proto/src/generated/`.
+
+### Docker
+```bash
+docker compose up -d                          # Local dev (all services)
+docker build -f apps/<svc>/Dockerfile -t ghcr.io/obiente/cloud-<svc>:latest .  # Build image
+./scripts/deploy-swarm-dev.sh                 # Swarm dev deploy
+./scripts/deploy-swarm-dev.sh -b              # Build + deploy
+```
+
+### Nx
+Always prefer running tasks through `nx` rather than underlying tooling directly. Use `nx run`, `nx run-many`, `nx affected`.
+
+## Architecture
+
+### Service Ports
+| Service | Port |
+|---------|------|
+| Dashboard | 3000 |
+| API Gateway | 3001 |
+| Auth | 3002 |
+| Organizations | 3003 |
+| Billing | 3004 |
+| Deployments | 3005 |
+| GameServers | 3006 |
+| Orchestrator | 3007 |
+| VPS | 3008 |
+| Support | 3009 |
+| Audit | 3010 |
+| Superadmin | 3011 |
+| Notifications | 3012 |
+| DNS | 8053 |
+
+### Key Architectural Patterns
+
+- **API Gateway** routes all external requests to backend services. Supports both direct service routing and Traefik-based routing.
+- **ConnectRPC** is used for all inter-service communication. Proto definitions live in `packages/proto/proto/obiente/cloud/`. Buf generates both Go and TypeScript clients.
+- **Go workspace** (`go.work`) links all 15 Go modules. Shared code is in `apps/shared/` with packages for auth, database, docker, middleware, orchestrator, quota, etc.
+- **Auth** is handled via Zitadel integration with RBAC. The auth-service validates tokens and manages roles/permissions.
+- **Orchestrator** handles intelligent node selection and load balancing across the Docker Swarm cluster.
+- **Database**: PostgreSQL (primary), TimescaleDB (metrics/audit), Redis (cache, build logs).
+- **Dashboard** uses Nuxt 4, Vue 3, Tailwind CSS v4, Pinia for state, Ark UI for components, and `@connectrpc/connect-web` for API calls.
+
+### Monorepo Structure
+- `apps/` - All microservices + dashboard
+- `packages/proto/` - Protobuf definitions and generated code
+- `packages/database/` - Drizzle ORM schemas and migrations
+- `packages/config/` - Shared ESLint, Prettier, TypeScript configs
+- `packages/types/` - Shared TypeScript types
+- `tools/nxsh/` - Custom Nx shell executor
+- `monitoring/` - Prometheus & Grafana configs
+- `scripts/` - Deployment and operational scripts
+
+### Docker Compose Files
+- `docker-compose.yml` - Local development
+- `docker-compose.base.yml` - Shared env vars (YAML anchors)
+- `docker-compose.swarm.yml` - Production swarm
+- `docker-compose.swarm.dev.yml` - Dev swarm (must use `docker stack deploy`, not `docker compose`)
+- `docker-compose.swarm.ha.yml` - HA production with PostgreSQL cluster

apps/dashboard/app/pages/superadmin/organizations/index.vue

@@ -130,6 +130,61 @@
         </OuiFlex>
       </OuiStack>
     </OuiDialog>
+
+    <!-- Set Plan Dialog -->
+    <OuiDialog v-model:open="setPlanDialogOpen" title="Set Plan">
+      <OuiStack gap="lg">
+        <OuiStack gap="xs">
+          <OuiText size="sm" color="muted">Organization</OuiText>
+          <OuiText size="sm" weight="medium">{{ selectedOrgName }}</OuiText>
+        </OuiStack>
+
+        <OuiStack gap="xs">
+          <OuiText size="sm" color="muted">Current Plan</OuiText>
+          <OuiBadge :variant="selectedOrgCurrentPlan ? 'primary' : 'secondary'" size="sm">
+            {{ prettyPlan(selectedOrgCurrentPlan) || 'None' }}
+          </OuiBadge>
+        </OuiStack>
+
+        <OuiSelect
+          v-model="selectedPlanId"
+          label="New Plan"
+          :items="planSelectItems"
+          placeholder="Choose a plan..."
+          clearable
+        />
+
+        <template v-if="selectedPlanInfo">
+          <OuiStack gap="sm" class="rounded-lg border border-border-muted p-3 bg-surface-muted/50">
+            <OuiText size="xs" weight="medium" color="muted" class="uppercase tracking-wide">Plan Resources</OuiText>
+            <div class="grid grid-cols-2 gap-x-4 gap-y-1">
+              <OuiText size="sm" color="secondary">CPU</OuiText>
+              <OuiText size="sm" class="font-mono text-right">{{ selectedPlanInfo.cpuCores || '∞' }} cores</OuiText>
+              <OuiText size="sm" color="secondary">Memory</OuiText>
+              <OuiText size="sm" class="font-mono text-right">{{ selectedPlanInfo.memoryBytes ? formatBytes(Number(selectedPlanInfo.memoryBytes)) : '∞' }}</OuiText>
+              <OuiText size="sm" color="secondary">Deployments</OuiText>
+              <OuiText size="sm" class="font-mono text-right">{{ selectedPlanInfo.deploymentsMax || '∞' }}</OuiText>
+              <OuiText size="sm" color="secondary">VPS Instances</OuiText>
+              <OuiText size="sm" class="font-mono text-right">{{ selectedPlanInfo.maxVpsInstances || '∞' }}</OuiText>
+              <OuiText size="sm" color="secondary">Monthly Credits</OuiText>
+              <OuiText size="sm" class="font-mono text-right"><OuiCurrency :value="Number(selectedPlanInfo.monthlyFreeCreditsCents || 0)" /></OuiText>
+            </div>
+          </OuiStack>
+        </template>
+      </OuiStack>
+
+      <template #footer>
+        <OuiFlex justify="end" gap="sm">
+          <OuiButton variant="ghost" @click="setPlanDialogOpen = false">Cancel</OuiButton>
+          <OuiButton
+            @click="setPlan"
+            :disabled="!selectedPlanId || setPlanLoading"
+          >
+            {{ setPlanLoading ? 'Updating...' : 'Set Plan' }}
+          </OuiButton>
+        </OuiFlex>
+      </template>
+    </OuiDialog>
 </template>
 
 <script setup lang="ts">
@@ -140,7 +195,7 @@ definePageMeta({
 import { PlusIcon, MinusIcon } from "@heroicons/vue/24/outline";
 import { computed, ref } from "vue";
 import { useOrganizationsStore } from "~/stores/organizations";
-import { OrganizationService } from "@obiente/proto";
+import { OrganizationService, SuperadminService } from "@obiente/proto";
 import { useConnectClient } from "~/lib/connect-client";
 import { useToast } from "~/composables/useToast";
 import SuperadminPageLayout from "~/components/superadmin/SuperadminPageLayout.vue";
@@ -156,7 +211,36 @@ const statusFilter = ref<string>("all");
 const router = useRouter();
 const organizationsStore = useOrganizationsStore();
 const orgClient = useConnectClient(OrganizationService);
+const saClient = useConnectClient(SuperadminService);
 const isLoading = ref(false);
+const setPlanDialogOpen = ref(false);
+const selectedPlanId = ref(null);
+const setPlanLoading = ref(false);
+const selectedOrgId = ref(null);
+
+const selectedOrgName = computed(() => {
+  if (!selectedOrgId.value) return '';
+  const org = organizations.value.find(o => o.id === selectedOrgId.value);
+  return org?.name || org?.slug || selectedOrgId.value;
+});
+
+const selectedOrgCurrentPlan = computed(() => {
+  if (!selectedOrgId.value) return null;
+  const org = organizations.value.find(o => o.id === selectedOrgId.value);
+  return org?.plan || null;
+});
+
+const planSelectItems = computed(() =>
+  (availablePlans.value || []).map(plan => ({
+    label: plan.name || prettyPlan(plan.id),
+    value: plan.id,
+  }))
+);
+
+const selectedPlanInfo = computed(() => {
+  if (!selectedPlanId.value) return null;
+  return (availablePlans.value || []).find(p => p.id === selectedPlanId.value) || null;
+});
 
 const planOptions = computed(() => {
   const plans = new Set<string>();
@@ -203,8 +287,8 @@ function handleFilterChange(key: string, value: string) {
   }
 }
 
+const manageOrgId = ref<string | null>(null);
 const manageCreditsDialogOpen = ref(false);
-const manageCreditsOrgId = ref<string | null>(null);
 const manageCreditsCurrentBalance = ref<number>(0);
 const manageCreditsAmount = ref("");
 const manageCreditsAction = ref<"add" | "remove">("add");
@@ -221,6 +305,13 @@ const { data: organizationsData, refresh: refreshOrganizations } = await useClie
     return response.organizations || [];
   }
 );
+const { data: availablePlans, refresh: refreshPlans } = await useClientFetch(
+  "superadmin-plans-list",
+  async () => {
+    const response = await saClient.listPlans({});
+    return response.plans || [];
+  }
+);
 
 const organizations = computed(() => organizationsData.value || []);
 
@@ -269,7 +360,7 @@ watch(organizations, () => {
 }, { immediate: true });
 
 const openManageCredits = (orgId: string, currentBalance: number | bigint) => {
-  manageCreditsOrgId.value = orgId;
+  manageOrgId.value = orgId;
   const balance = typeof currentBalance === 'bigint' ? currentBalance : BigInt(Number(currentBalance) || 0);
   manageCreditsCurrentBalance.value = Number(balance);
   manageCreditsAmount.value = "";
@@ -362,7 +453,7 @@ function viewOrganization(orgId: string) {
 }
 
 const numberFormatter = new Intl.NumberFormat();
-const { formatDate, formatCurrency } = useUtils();
+const { formatDate, formatCurrency, formatBytes } = useUtils();
 
 function formatNumber(value?: number | bigint | null) {
   if (value === undefined || value === null) return "0";
@@ -397,6 +488,15 @@ const getOrgActions = (row: any): Action[] => {
       label: "Deployments",
       onClick: () => openDeployments(row.id),
     },
+    {
+      key: "setPlan",
+      label: "Set Plan",
+      onClick: () => {
+        selectedOrgId.value = row.id;
+        selectedPlanId.value = null;
+        setPlanDialogOpen.value = true;
+      },
+    },
     {
       key: "manage",
       label: "Manage",
@@ -407,7 +507,7 @@ const getOrgActions = (row: any): Action[] => {
 };
 
 async function manageCredits() {
-  if (!manageCreditsOrgId.value || !manageCreditsAmount.value) return;
+  if (!manageOrgId.value || !manageCreditsAmount.value) return;
   const amount = parseFloat(manageCreditsAmount.value);
   if (isNaN(amount) || amount <= 0) {
     return;
@@ -420,14 +520,14 @@ async function manageCredits() {
     let response;
     if (manageCreditsAction.value === "add") {
       response = await orgClient.adminAddCredits({
-        organizationId: manageCreditsOrgId.value,
+        organizationId: manageOrgId.value,
         amountCents,
         note: manageCreditsNote.value || undefined,
       });
       toast.success(`Successfully added ${formatCurrency(Number(amountCents))} in credits`);
     } else {
       response = await orgClient.adminRemoveCredits({
-        organizationId: manageCreditsOrgId.value,
+        organizationId: manageOrgId.value,
         amountCents,
         note: manageCreditsNote.value || undefined,
       });
@@ -445,5 +545,29 @@ async function manageCredits() {
     manageCreditsLoading.value = false;
   }
 }
+
+async function setPlan() {
+  if (!selectedOrgId.value || !selectedPlanId.value) return;
+
+  setPlanLoading.value = true;
+  const { toast } = useToast();
+  try {
+    await orgClient.adminSetPlan({
+      organizationId: selectedOrgId.value,
+      planId: selectedPlanId.value,
+    });
+    const planName = selectedPlanInfo.value?.name || prettyPlan(selectedPlanId.value);
+    toast.success(`Plan updated to ${planName}`);
+    setPlanDialogOpen.value = false;
+    selectedPlanId.value = null;
+    await refresh();
+  } catch (err: any) {
+    toast.error(err?.message || 'Failed to update plan');
+  } finally {
+    setPlanLoading.value = false;
+  }
+}
+
+
 </script>
 

apps/dashboard/nuxt.config.ts

@@ -168,7 +168,7 @@ export default defineNuxtConfig({
     // Use API Gateway for all requests (routes to microservices)
     // When running locally (not in Docker), use localhost with Traefik port
     // When running in Docker, use api-gateway service name
-    apiHostInternal: process.env.NUXT_API_HOST_INTERNAL || process.env.NUXT_PUBLIC_API_HOST || "http://localhost:80",
+    apiHostInternal: process.env.NUXT_API_HOST_INTERNAL || process.env.NUXT_PUBLIC_API_HOST || "http://api.localhost",
     githubClientSecret: process.env.GITHUB_CLIENT_SECRET || "", // Server-side only - never expose to client
     session: {
       password: "changeme_" + crypto.randomUUID(), // CHANGE THIS IN PRODUCTION, should be at least 32 characters
@@ -196,6 +196,9 @@ export default defineNuxtConfig({
     port: 3000,
     host: "0.0.0.0",
   },
+  future: {
+    compatibilityVersion: 4
+  },
 
   app: {
     head: {