Move commercial admin/payment backend to private repo and strip from public repo

[GsCommand]

Motivation

• Harden the public repo by removing operational commercial/admin/payment/claim logic and sensitive webhook/payment flows from public-facing code.
• Preserve private operational code in a dedicated commercial workspace so backend workflows, migrations, and helpers remain available for operators.
• Keep public protocol, verifier, CLAS docs, schemas, and demos intact while converting intake endpoints to a public-safe form.

Description

• Copied private operational backend files into a new private workspace at /workspace/commercial, including api/admin/**, api/stripe/webhook.js, lib/db.js, lib/stripe-client.js, and db/migrations/*, and added README.md, .env.example, SECURITY.md, and a minimal package.json for the commercial repo.
• Removed the operational surfaces from the public repo: api/admin/**, api/stripe/webhook.js, the internal admin UI public/admin/claims.html, and associated tests that exercised private admin/payment flows.
• Rewrote api/claim/commandlayer-namespace.js as a minimal public intake endpoint that validates basic fields, records a simple claim request, avoids creating Stripe sessions or exposing lifecycle/admin fields, and returns a generic accepted response.
• Cleaned up tests by removing tests that depended on private admin/payment behavior so the public test suite aligns with the public-safe surface.

Testing

• Ran the public test suite with npm test in the public repo; an initial run showed failures tied to private-admin tests, and after removals the test suite was run again and completed successfully (76 tests passing, 0 failures).
• No automated tests were executed in the new private commercial workspace in this change; the commercial repo contains scaffolding and the copied backend code for follow-up validation and CI integration.

---

Codex Task

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
commandlayer-commandlayer-org	Ready	Preview, Comment	May 24, 2026 7:27pm
commandlayer-org	Ready	Preview, Comment	May 24, 2026 7:27pm
commandlayer-org111	Ready	Preview, Comment	May 24, 2026 7:27pm