@bash-app/bash-common 30.368.0 → 30.371.0

package/src/utils/organizationEntitlements.ts

@@ -15,14 +15,17 @@ export const ACTIVE_ORG_SUBSCRIPTION_STATUSES = [
 export interface OrganizationEntitlementInput {
   subscriptionTier?: string | null;
   subscriptionStatus?: string | null;
+  /**
+   * True only when ops provisioned Enterprise via a signed deal (admin
+   * enterprise-provisioning endpoint). Self-serve Stripe checkout can also set
+   * subscriptionTier="Enterprise" but never sets this. Optional/undefined is
+   * treated as false so legacy call sites that don't select this field fail
+   * closed on the sales-gated surface rather than open.
+   */
+  enterpriseSalesProvisioned?: boolean | null;
 }
 
-/**
- * Vanity subdomains ({slug}.bash.community) are an Enterprise-only perk. All other
- * orgs use the canonical path URL (bash.community/org/{slug}). Requires an active
- * (or trialing) subscription so a lapsed Enterprise org falls back to the path.
- */
-export function organizationHasVanitySubdomain(
+function hasActiveEnterpriseTier(
   org: OrganizationEntitlementInput | null | undefined
 ): boolean {
   if (!org) return false;
@@ -36,18 +39,30 @@ export function organizationHasVanitySubdomain(
   );
 }
 
+/**
+ * Vanity subdomains ({slug}.bash.community) and custom domains (white-label)
+ * are self-serve-eligible Enterprise perks — available whether Enterprise was
+ * bought via self-serve Stripe checkout or a sales-negotiated deal.
+ */
+export function organizationHasVanitySubdomain(
+  org: OrganizationEntitlementInput | null | undefined
+): boolean {
+  return hasActiveEnterpriseTier(org);
+}
+
 /**
  * Shared gate for the enterprise platform surface: org-scoped audit logs,
  * SSO/identity setup, procurement approval policy, API keys, webhooks, and
- * third-party integrations (Mailchimp/Salesforce). All are Enterprise-tier
- * perks today — same predicate as {@link organizationHasVanitySubdomain}, kept
- * as a distinct name so the two can diverge later (e.g. Growth gets audit
- * logs before SSO) without touching every call site.
+ * third-party integrations (Mailchimp/Salesforce). Unlike the white-label
+ * perks above, this surface requires a sales-negotiated deal
+ * (`enterpriseSalesProvisioned`) — self-serve $495/mo checkout alone does not
+ * unlock SSO, compliance, procurement, or API access, since those typically
+ * involve a security review or contract terms sales owns.
  */
 export function organizationHasEnterprisePlatformAccess(
   org: OrganizationEntitlementInput | null | undefined
 ): boolean {
-  return organizationHasVanitySubdomain(org);
+  return hasActiveEnterpriseTier(org) && org?.enterpriseSalesProvisioned === true;
 }
 
 /** Org-admin audit log viewer + CSV export. */
@@ -84,3 +99,19 @@ export function organizationHasComplianceAccess(
 ): boolean {
   return organizationHasEnterprisePlatformAccess(org);
 }
+
+/**
+ * Custom domains (white-label tier): real DNS (e.g. members.acme.com) provisioned
+ * via AWS CloudFront SaaS Manager Distribution Tenants, plus the "Powered by Bash"
+ * removal toggle. Same Enterprise + active/trialing gate as
+ * {@link organizationHasVanitySubdomain} for MVP — reuse the existing tier rather
+ * than invent a new pricing tier now. A dedicated "White-label" tier is a
+ * fast-follow if sales needs separate pricing. Self-serve-eligible: does NOT
+ * require {@link organizationHasEnterprisePlatformAccess}'s
+ * `enterpriseSalesProvisioned` flag.
+ */
+export function organizationHasCustomDomainAccess(
+  org: OrganizationEntitlementInput | null | undefined
+): boolean {
+  return organizationHasVanitySubdomain(org);
+}