2026-04-16-3 add secur ,billing ,documents ,

apps/api/src/auth/auth.service.ts

@@ -185,7 +185,7 @@ export class AuthService {
       } else {
         // 3. Create new if neither found
         this.logger.log(`Creating new tenant for Firebase user: ${email} (${uid})`);
-        const isAdmin = email === 'hamzaaleghwairyeen@gmail.com' || email === 'hamzadoctor@gmail.com';
+        const isAdmin = email === 'hamzaaleghwairyeen@gmail.com' || email === 'hamzadoctor@gmail.com' || email === 'hamzaayedpython@gmail.com';
         tenant = await this.tenantRepository.save({
           firebaseUid: uid,
           email,
@@ -197,7 +197,7 @@ export class AuthService {
       }
     } else {
       // Auto-upgrade admins if they exist but are on lower plan
-      const isAdmin = email === 'hamzaaleghwairyeen@gmail.com' || email === 'hamzadoctor@gmail.com';
+      const isAdmin = email === 'hamzaaleghwairyeen@gmail.com' || email === 'hamzadoctor@gmail.com' || email === 'hamzaayedpython@gmail.com';
       if (isAdmin && tenant.plan !== TenantPlan.ENTERPRISE) {
         tenant.plan = TenantPlan.ENTERPRISE;
         await this.tenantRepository.save(tenant);

apps/api/src/auth/entities/tenant.entity.ts

@@ -3,6 +3,7 @@ import { ApiKey } from './api-key.entity';
 
 export enum TenantPlan {
   FREE = 'FREE',
+  STARTER = 'STARTER',
   PRO = 'PRO',
   ENTERPRISE = 'ENTERPRISE',
 }

apps/api/src/auth/tenant.controller.ts

@@ -1,4 +1,4 @@
-import { Controller, Get, Post, Body, Param, UseGuards, Req } from '@nestjs/common';
+import { Controller, Get, Post, Body, Param, UseGuards, Req, ForbiddenException } from '@nestjs/common';
 import { AuthService } from './auth.service';
 import { CreateKeyDto } from './dto/management/create-key.dto';
 import { ApiTags, ApiOperation, ApiBearerAuth } from '@nestjs/swagger';
@@ -17,6 +17,10 @@ export class TenantController {
     @Req() req: any,
     @Body() dto: CreateKeyDto
   ) {
+    if (req.user && req.user.email_verified === false) {
+      throw new ForbiddenException('You must verify your email address before creating an API key.');
+    }
+
     const tenantId = req.tenant.id;
     return this.authService.createApiKey(
       tenantId,