CBS Cert · Seller Admin

Welcome

CBS Cert seller. After sign-in: Dashboard · Customers · Staff · Updates · Insights · Informations. This is not the customer company web, and not BWOF at admin.cbsl.co.nz.

Sign in (top right).

Dashboard

Morning board. Glance the four numbers, then do the numbered work that is present. Empty steps are hidden. Mail is Outlook for admin@cbsl.co.nz — not an in-app inbox.

This morning

1 Issue (fix or tell the customer) · 2 Unpaid (Mark paid) · 3 Trial ≤10d (invoice) · 4 Pending (Approve) · 5 Plan (same account — Save) · 6 Mail. A new Buyer web signup is already a customer — not a task.

6 · Mail Open Outlook

admin@cbsl.co.nz received mail. S1 the same day.

Insights

Aggregates only — no customer names, addresses, or certificate numbers. Use for product strategy, not case management.

Certificates (hub)

0

Buyers approved

0

Workers active / total

0

Beta access requests

0

Certs by type

Type	Count

Certs by month (UTC)

Month	Count

Beta download / invite by SKU

SKU	Events

App updates (Android)

Android only — invite text always states iPhone/iOS is not supported. Set APK / manual URLs and version codes for the four beta SKUs. For each Homepage request: pick SKU → Provision & copy invite (creates Hub worker for Web+App; App-only is APK-only). Tracked downloads use /api/beta/download/:sku (counts without PII). Customers get whichever track you pick below (Beta or Official). Each SKU has a beta APK URL and an optional official APK URL. Empty official = use the beta file. Homepage plans map appBasic→betaAppBasic, appFull→betaAppFull, webAppBasic→betaWebBasic, webAppFull→betaWebFull. Access requests below are Homepage testers, not the Customers list. Server / Homepage upload steps live only on Updates → Releases.

Customers download now

Plans page, QR, and Download APK use this choice. You can switch without a developer. Official with an empty official URL still serves the beta APK for that SKU.

Beta Official

Pick Beta or Official → Save choice.
Set the APK URL for each SKU (and official URL when you have a paid build).
Access requests → Provision if you still invite testers by email.

Access requests (from Homepage)

When	Name	Company	Email	Android	SKU	Until	Purpose / notes	Status

Client errors

Error text only (consent on app/web). No certificates, passwords, or form answers. Each new report emails admin@cbsl.co.nz. Known classes also send a follow-up (connection → Connect & check; QR 404 → in-browser QR). The server does not rewrite Kotlin/JS or deploy a patch. After a human fix, upload from Updates → Releases (office PC 관리자-올리기.bat). This page has no upload buttons.

When	Platform	Kind	Version	Status	Heal	Message / note

Releases

Send a new version out. Three things: server + Admin web + Buyer web, Homepage, Android app. How: office PC 관리자-올리기.bat for card 1. Card 2 Publish homepage runs here. Play Store is not on yet.

Send a new version to customers.

1. Server + admin web

Uploads Nest (API, error table, mail) and this Seller/Buyer portal. Office PC: 관리자-올리기.bat → 1. Upload server + admin web. Wait for NEST_DEPLOY_OK and DEPLOY_OK, then Ctrl+F5 here. A black window may ask for the VPS password — type it there only, never in chat.

2. Homepage

Puts the customer homepage live (www.cbsl.co.nz plans and signup). Click Publish homepage here. Optional: attach the zip from the office PC (cbsl-website-deploy.zip). If the server has no files yet, run office 관리자-올리기.bat button 1 or 2 first.

Zip (optional)

3. Android app

The manager window cannot install APKs. After a new build, save the APK URL in Updates → App updates, then email https://www.cbsl.co.nz/app-download.html?sku=…. Customer: Download → Open → Install (unknown apps). Not Play Store. After the APK URL is saved, click Notify workers to update so every Worker app shows Update — tap starts the download.

Card 2 Publish homepage runs on the server. Card 1 still needs the office PC window (VPS password).

Open Homepage

SKU	versionName	versionCode	Active	APK URL

Pending approvals

Buyers waiting for seller approval. Refresh after changes elsewhere.

Name	Email	Department	Action

Staff

One list. Office is the seller-web login (what used to be called Admin — Super manager / Manager, including james@cbsl.co.nz and seogidong67@gmail.com). Field is a company worker under a customer. Neither is a customer. Add staff makes an Office login. Manage edits name, password, group, and Read / Write / Delete / Add.

Name	Login ID	Kind	Group	Under customer	Access	Active

Overview

Daily change for the last 30 days (NZ). Click a chart to open that list. Joined / Left / Complaint are that day’s count. Unpaid is how many were unpaid at end of day (today is live; earlier days fill as you open this page).

Last 30 days

Customers

Customer = row in customer_register. Not the users dump. users is every login (seller, staff, customer). Seller and staff are not customers.

Customers only — customer_register. Logins that are not customers are under Staff (JSON) or Staff.

Hub	Name	Email	Added by	Kind	Channel	Status	Active	Max workers

Edit buyer

Company name

Contact name

Login email

Phone

Address

Password reminder

Change plan

Same account. Pick one, then Save. App only: they will not have company web Staff, Issued, Scheduler, Sent mail, office notices. Phone still issues certificates. One person. Pay first if the new plan costs more (Mark paid), then they download. App-only is 1 seat. Web +$5 waived at 2+ workers.

App — CoC + Tag · NZD $9/seat/mo App — Full · NZD $15/seat/mo Web + App — CoC + Tag · NZD $9/seat + $5* Web Web + App — Full · NZD $15/seat + $5* Web

Max workers

Approved Active

Billing

Status · trial · paid through — load buyer.

Invoice draft (prepaid)

Load a buyer with a product plan to see GST 15% totals.

Prepaid. Email is a draft (does not unlock). Confirm money, then Mark paid. Expire trial is for smoke only. Worker must Connect again to pick up the lock/unlock.

Add buyer

* = required.

Product: App = Worker app certs. Web+App = same certs + company portal. Basic = CoC+Tag. Full = CoC+RoI+CoV+Tag.

Forgot password: Buyer uses Forgot password on the company portal (SMTP). Or seller sets a new temp password later (Customers). Recovery email is used for reset mail when different from login.

james@cbsl.co.nz is Seller only — cannot be Buyer Login (one email = one role). For your test company use e.g. cbs@cbsl.co.nz; Contact name can still be Gidong Seo.

After Create: company portal with that buyer email, or Seller james@ → Act as buyer. Then Add staff.

Company name

Contact name

Login email

Phone

Address

Product App — CoC + Tag · NZD $9/seat/mo App — Full · NZD $15/seat/mo Web + App — CoC + Tag · NZD $9/seat + $5* Web Web + App — Full · NZD $15/seat + $5* Web

Select a product for monthly quote (+GST).

Temporary password

Recovery email

Change password on first login

Max workers

Approve now

Hub & portals

Same idea as Buyer Admin → Informations → Hub & browser. Portals talk only through Nest (/api). Separate JWT sessions (ADMIN vs MANAGER) — no SSO between tabs.

This browser API base Seller (admin) portal URL Buyer (company) portal URL

Open buyer portal

Connection path: Seller approves buyers and sets certificate products → Nest hub → Buyer portal / Worker apps pull the same company scope. Opening the buyer portal in another tab does not copy your seller login (sign in as MANAGER there).

Certificate products

Seller write only. The customer company web shows the same list read-only (Informations → Certificate products). Pick an approved buyer, choose products, then save. Optional valid-from / valid-to applies to all selected products on save; leave empty for no date limit.

Valid from Valid to

Audit log

Security and entitlement-related events from the server.

Time	Role	Event

Sent mail

Certificate Send attempts via Hub SMTP (who, when, to, ok/failed). Does not store PDF or inbox replies.

Time	Status	From	To	Cert	By

Staff (JSON)

Dump of every login in staff (was users): seller, staff, customer, probes. This is not the customer register. Refresh heals leftover logins into customer_register. Raw JSON is underneath.

Email	Name	After process

Raw JSON

{}