✅ Landing page dinamis — hero, features, testimoni, pricing, FAQ — semua editable dari admin (no code)
✅ API Documentation — /docs siap pakai untuk customer integrasi
✅ Legal pages: Terms of Service, Privacy Policy (UU PDP Indonesia), Refund Policy
✅ SEO ready — meta tags, OG image, Google Analytics, Facebook Pixel — configurable di admin
✅ Register / Login / Email verification / Forgot password
✅ Connect WhatsApp via QR scan (real Baileys, multi-device support)
✅ Send Message — text, image, document, voice
✅ Broadcast Campaign — kirim ke ribuan kontak dengan progress real-time + rate-limit anti-ban
✅ Inbox & Logs — riwayat pesan in/out dengan search
✅ Contact Management — CRUD + import CSV
✅ Chatbot Auto-reply — keyword matching (contains/exact)
✅ API Keys — generate, revoke, monitoring requests
✅ Webhook URL per device — receive incoming messages real-time
✅ Live stats — chart 7 hari, quota meter
✅ Account self-service — ganti password, ganti email, export semua data (UU PDP), hapus akun permanen
🛡️ Admin Panel (/admin) — 9 Halaman
📊 Overview — total users, devices, messages, MRR, plan distribution donut chart, license status
👥 Users — search, edit, suspend, hapus, dedicated subscription editor dengan quick action perpanjang 30/90/365 hari
📱 All Devices — cross-user dengan bulk delete (semua / hanya disconnected)
💬 All Messages — cross-user dengan bulk delete (>30 hari, status failed, semua)
💎 Plans & Billing — editor lengkap (harga, max device, broadcast/hari, API calls/hari, durasi, fitur list)
💳 Transactions — riwayat semua transaksi + manual mark paid / refund / cancel + entry pembayaran manual untuk transfer bank
General — nama situs, kontak, copyright, maintenance mode
SEO — meta tags, OG image, Google Analytics, Facebook Pixel
Payment — Tripay & iPaymu credentials (live editable, no .env)
Landing Page — hero copy, fitur, testimoni, CTA — semua editable
🕐 Audit Log — semua admin action tercatat (user, IP, timestamp, metadata)
🔄 Software Update — upload ZIP update dari vendor → auto-backup, validasi, apply, rollback per click
💰 Sistem Subscription & Billing
✅ Paywall enforcement — user tidak bisa connect device tanpa subscription aktif (HTTP 402)
✅ Tripay integration — closed payment + HMAC signature verify callback
✅ iPaymu integration — redirect payment v2 + signature verify
✅ Plan editable di admin — harga, durasi, kuota — no hardcode
✅ Auto-activation setelah callback success
✅ Invoice email otomatis terkirim
✅ Cron auto-downgrade subscription expired
✅ Email reminder 7 hari & 1 hari sebelum expired
✅ Quota enforcement per plan (broadcast/hari, API calls/hari, max device)
✅ POST /v1/messages — kirim pesan (Bearer API key auth)
✅ GET /v1/messages/:id — cek status (pending/delivered/read/failed)
✅ GET /v1/devices — list devices customer
✅ Per-key rate limiting (60 req/min default, configurable)
✅ Code examples cURL, Node.js, PHP, Python di docs
✅ bcrypt password hashing (10 rounds)
✅ API keys hashed SHA-256 (raw shown sekali)
✅ JWT 30-day expiry + secret enforcement di production
✅ Helmet security headers
✅ Rate limiting auth/api/public configurable
✅ CORS allowlist configurable
✅ Multi-tenant isolation verified 9/9 (user A tidak bisa akses data user B)
✅ SQL injection protection (parameterized queries)
✅ XSS protection (HTML escape on render)
✅ Audit log untuk semua admin action
✅ UU PDP compliance — export data + hapus akun built-in
✅ License protection (Flavesite integration) — 6-layer guard, anti-piracy
✅ Auto-downgrade subscription expired
✅ Email reminder expiry (7d & 1d)
✅ Cleanup expired QR codes
✅ Auto-expire pending transactions >24h
✅ Database backup harian (rotate 7 hari)
🔄 Software Updater Built-in (KILLER FEATURE)
✅ Upload ZIP update via admin UI (drag & drop)
✅ Validasi manifest + path security (.env/.git/data/ ditolak)
✅ Preview changelog sebelum apply
✅ Auto-backup sebelum overwrite
✅ One-click rollback ke versi sebelumnya
✅ Riwayat semua update + status