Phase 3.3: topic sensitivity + Phase 3.4: auth foundation

Phase 3.3 — Session Topic Sensitivity (complete):
- Backend: topic_sensitivity column + session_sensitivity_log, sensitivity service
  (flip with one-way-latch + audit), PATCH /api/shared/chat/sessions/:id/topic,
  topic carried in pairing + extension WS payloads, CC filter + sensitive stats
  + per-mitra sensitive columns on activity page
- client_app: TopicSelectionBottomSheet before pricing, topic flows through
  pairing request, silent WS handler for session_topic_updated
- mitra_app: SensitivityBadge + SensitivityTheme + sensitivityConfigProvider,
  overlay badge + yellow accent, chat screen app-bar toggle with configurable
  confirmation + latch, extension card shows current flag, history + transcript
  yellow theme
- control_center: Sensitivitas Topik settings section, topic filter + column
  with inline audit log, sensitive stats dashboard card, mitra activity
  sensitive columns with QC flag

Phase 3.4 — Self-Managed Auth (foundation only):
- Migration: auth_sessions + otp_requests tables, social identity columns on
  customers, password_hash + lockout on control_center_users, OTP + CC lockout
  app_config keys
- New services: password (bcrypt + complexity), token (JWT HS256 + refresh
  rotation, session_id claim pre-wires future Valkey revocation),
  social-identity (Google + Apple JWKS), OTP (Fazpass stub — real API TBD)
- Constants: AuthProvider + OtpChannel
- Middleware, auth route rewrites, WS auth update, Firebase → FCM isolation
  still pending (next chunk); Fazpass docs + Apple Developer setup still
  required before E2E testing

Docs:
- requirement/phase3.3.md, phase3.3-plan.md, phase3.3-testing.md
- requirement/phase3.4.md, phase3.4-plan.md

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

backend/src/services/dashboard.service.js

@@ -1,13 +1,23 @@
 import { getDb } from '../db/client.js'
-import { SessionStatus } from '../constants.js'
+import { SessionStatus, TopicSensitivity } from '../constants.js'
 
 const sql = getDb()
 
 export const getDashboardStats = async () => {
-  const [[{ active_chats }], [{ online_mitras }], [{ pending_requests }]] = await Promise.all([
+  const [
+    [{ active_chats }],
+    [{ online_mitras }],
+    [{ pending_requests }],
+    [{ sensitive_total }],
+    [{ sensitive_last_30d_total }],
+    [{ sensitive_last_30d_sensitive }],
+  ] = await Promise.all([
     sql`SELECT COUNT(*) AS active_chats FROM chat_sessions WHERE status IN (${SessionStatus.ACTIVE}, ${SessionStatus.PENDING_PAYMENT})`,
     sql`SELECT COUNT(*) AS online_mitras FROM mitra_online_status WHERE is_online = true`,
     sql`SELECT COUNT(*) AS pending_requests FROM chat_sessions WHERE status IN (${SessionStatus.SEARCHING}, ${SessionStatus.PENDING_ACCEPTANCE})`,
+    sql`SELECT COUNT(*) AS sensitive_total FROM chat_sessions WHERE topic_sensitivity = ${TopicSensitivity.SENSITIVE}`,
+    sql`SELECT COUNT(*) AS sensitive_last_30d_total FROM chat_sessions WHERE created_at >= NOW() - INTERVAL '30 days'`,
+    sql`SELECT COUNT(*) AS sensitive_last_30d_sensitive FROM chat_sessions WHERE created_at >= NOW() - INTERVAL '30 days' AND topic_sensitivity = ${TopicSensitivity.SENSITIVE}`,
   ])
 
   const customersPerMitra = await sql`
@@ -20,10 +30,19 @@ export const getDashboardStats = async () => {
     ORDER BY active_session_count DESC
   `
 
+  const last30dTotal = Number(sensitive_last_30d_total)
+  const last30dSensitive = Number(sensitive_last_30d_sensitive)
+
   return {
     active_chats: Number(active_chats),
     online_mitras: Number(online_mitras),
     pending_requests: Number(pending_requests),
     customers_per_mitra: customersPerMitra,
+    sensitive: {
+      total: Number(sensitive_total),
+      last_30d_total: last30dTotal,
+      last_30d_sensitive: last30dSensitive,
+      last_30d_percent: last30dTotal > 0 ? Math.round((last30dSensitive / last30dTotal) * 1000) / 10 : 0,
+    },
   }
 }