whale-code 6.5.4 → 6.5.6

package/dist/server/handlers/billing.js

@@ -1,272 +1,363 @@
+// handlers/billing.ts — Usage tracking and plan enforcement
+
 const DEFAULT_PLANS = {
-    free: {
-        messages_per_month: 500,
-        agent_invocations_per_month: 100,
-        tokens_per_month: 500_000,
-        nodes_max: 1,
-        channels_per_node: 2,
-    },
-    starter: {
-        messages_per_month: 5_000,
-        agent_invocations_per_month: 1_000,
-        tokens_per_month: 5_000_000,
-        nodes_max: 3,
-        channels_per_node: 5,
-    },
-    pro: {
-        messages_per_month: 50_000,
-        agent_invocations_per_month: 10_000,
-        tokens_per_month: 50_000_000,
-        nodes_max: 5,
-        channels_per_node: 10,
-    },
-    enterprise: {
-        messages_per_month: -1, // unlimited
-        agent_invocations_per_month: -1,
-        tokens_per_month: -1,
-        nodes_max: 50,
-        channels_per_node: 50,
-    },
+  free: {
+    messages_per_month: 500,
+    agent_invocations_per_month: 100,
+    tokens_per_month: 500_000,
+    nodes_max: 1,
+    channels_per_node: 2
+  },
+  starter: {
+    messages_per_month: 5_000,
+    agent_invocations_per_month: 1_000,
+    tokens_per_month: 5_000_000,
+    nodes_max: 3,
+    channels_per_node: 5
+  },
+  pro: {
+    messages_per_month: 50_000,
+    agent_invocations_per_month: 10_000,
+    tokens_per_month: 50_000_000,
+    nodes_max: 5,
+    channels_per_node: 10
+  },
+  enterprise: {
+    messages_per_month: -1,
+    // unlimited
+    agent_invocations_per_month: -1,
+    tokens_per_month: -1,
+    nodes_max: 50,
+    channels_per_node: 50
+  }
 };
+
 /** Get current billing period string (YYYY-MM) */
 function getCurrentPeriod() {
-    const now = new Date();
-    return `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`;
+  const now = new Date();
+  return `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}`;
 }
+
 /** Increment usage counters for a store */
 export async function incrementUsage(supabase, storeId, counters) {
-    const period = getCurrentPeriod();
-    // Upsert the usage row
-    const { data: existing } = await supabase
-        .from("store_usage")
-        .select("id, messages_in, messages_out, agent_invocations, tokens_used, api_calls")
-        .eq("store_id", storeId)
-        .eq("period", period)
-        .single();
-    if (existing) {
-        await supabase
-            .from("store_usage")
-            .update({
-            messages_in: (existing.messages_in || 0) + (counters.messages_in || 0),
-            messages_out: (existing.messages_out || 0) + (counters.messages_out || 0),
-            agent_invocations: (existing.agent_invocations || 0) + (counters.agent_invocations || 0),
-            tokens_used: (existing.tokens_used || 0) + (counters.tokens_used || 0),
-            api_calls: (existing.api_calls || 0) + (counters.api_calls || 0),
-            updated_at: new Date().toISOString(),
-        })
-            .eq("id", existing.id);
-    }
-    else {
-        await supabase.from("store_usage").insert({
-            store_id: storeId,
-            period,
-            messages_in: counters.messages_in || 0,
-            messages_out: counters.messages_out || 0,
-            agent_invocations: counters.agent_invocations || 0,
-            tokens_used: counters.tokens_used || 0,
-            api_calls: counters.api_calls || 0,
-        });
-    }
+  const period = getCurrentPeriod();
+
+  // Upsert the usage row
+  const {
+    data: existing
+  } = await supabase.from("store_usage").select("id, messages_in, messages_out, agent_invocations, tokens_used, api_calls").eq("store_id", storeId).eq("period", period).single();
+  if (existing) {
+    await supabase.from("store_usage").update({
+      messages_in: (existing.messages_in || 0) + (counters.messages_in || 0),
+      messages_out: (existing.messages_out || 0) + (counters.messages_out || 0),
+      agent_invocations: (existing.agent_invocations || 0) + (counters.agent_invocations || 0),
+      tokens_used: (existing.tokens_used || 0) + (counters.tokens_used || 0),
+      api_calls: (existing.api_calls || 0) + (counters.api_calls || 0),
+      updated_at: new Date().toISOString()
+    }).eq("id", existing.id);
+  } else {
+    await supabase.from("store_usage").insert({
+      store_id: storeId,
+      period,
+      messages_in: counters.messages_in || 0,
+      messages_out: counters.messages_out || 0,
+      agent_invocations: counters.agent_invocations || 0,
+      tokens_used: counters.tokens_used || 0,
+      api_calls: counters.api_calls || 0
+    });
+  }
 }
+
 /** Check if a store is within its plan limits */
 export async function checkPlanLimits(supabase, storeId, action) {
-    const period = getCurrentPeriod();
-    // Get store plan
-    const { data: planRow } = await supabase
-        .from("store_plans")
-        .select("plan, limits")
-        .eq("store_id", storeId)
-        .single();
-    const planName = planRow?.plan || "free";
-    const limits = planRow?.limits || DEFAULT_PLANS[planName] || DEFAULT_PLANS.free;
-    // Get current usage
-    const { data: usage } = await supabase
-        .from("store_usage")
-        .select("messages_in, messages_out, agent_invocations, tokens_used, api_calls")
-        .eq("store_id", storeId)
-        .eq("period", period)
-        .single();
-    const currentUsage = usage || { messages_in: 0, messages_out: 0, agent_invocations: 0, tokens_used: 0, api_calls: 0 };
-    switch (action) {
-        case "message": {
-            const total = (currentUsage.messages_in || 0) + (currentUsage.messages_out || 0);
-            if (limits.messages_per_month > 0 && total >= limits.messages_per_month) {
-                return { allowed: false, reason: `Message limit reached (${total}/${limits.messages_per_month} this month)` };
-            }
-            break;
+  const period = getCurrentPeriod();
+
+  // Get store plan
+  const {
+    data: planRow
+  } = await supabase.from("store_plans").select("plan, limits").eq("store_id", storeId).single();
+  const planName = planRow?.plan || "free";
+  const limits = planRow?.limits || DEFAULT_PLANS[planName] || DEFAULT_PLANS.free;
+
+  // Get current usage
+  const {
+    data: usage
+  } = await supabase.from("store_usage").select("messages_in, messages_out, agent_invocations, tokens_used, api_calls").eq("store_id", storeId).eq("period", period).single();
+  const currentUsage = usage || {
+    messages_in: 0,
+    messages_out: 0,
+    agent_invocations: 0,
+    tokens_used: 0,
+    api_calls: 0
+  };
+  switch (action) {
+    case "message":
+      {
+        const total = (currentUsage.messages_in || 0) + (currentUsage.messages_out || 0);
+        if (limits.messages_per_month > 0 && total >= limits.messages_per_month) {
+          return {
+            allowed: false,
+            reason: `Message limit reached (${total}/${limits.messages_per_month} this month)`
+          };
         }
-        case "agent_invocation": {
-            if (limits.agent_invocations_per_month > 0 && (currentUsage.agent_invocations || 0) >= limits.agent_invocations_per_month) {
-                return { allowed: false, reason: `Agent invocation limit reached (${currentUsage.agent_invocations}/${limits.agent_invocations_per_month} this month)` };
-            }
-            break;
+        break;
+      }
+    case "agent_invocation":
+      {
+        if (limits.agent_invocations_per_month > 0 && (currentUsage.agent_invocations || 0) >= limits.agent_invocations_per_month) {
+          return {
+            allowed: false,
+            reason: `Agent invocation limit reached (${currentUsage.agent_invocations}/${limits.agent_invocations_per_month} this month)`
+          };
         }
-        case "api_call": {
-            // API calls are generous — don't limit for now
-            break;
-        }
-    }
-    return { allowed: true };
+        break;
+      }
+    case "api_call":
+      {
+        // API calls are generous — don't limit for now
+        break;
+      }
+  }
+  return {
+    allowed: true
+  };
 }
+
 /** Handle billing-related API routes */
 export async function handleBillingRoutes(pathname, method, body, supabase, auth) {
-    // GET /usage — current period usage for a store
-    if (pathname === "/usage" && (method === "GET" || method === "POST")) {
-        const storeId = body?.store_id;
-        if (!storeId) {
-            return { status: 400, body: { error: "store_id required" } };
+  // GET /usage — current period usage for a store
+  if (pathname === "/usage" && (method === "GET" || method === "POST")) {
+    const storeId = body?.store_id;
+    if (!storeId) {
+      return {
+        status: 400,
+        body: {
+          error: "store_id required"
         }
-        const period = getCurrentPeriod();
-        const [usageResult, planResult] = await Promise.all([
-            supabase.from("store_usage")
-                .select("*")
-                .eq("store_id", storeId)
-                .eq("period", period)
-                .single(),
-            supabase.from("store_plans")
-                .select("plan, limits")
-                .eq("store_id", storeId)
-                .single(),
-        ]);
-        const usage = usageResult.data || {
-            messages_in: 0, messages_out: 0, agent_invocations: 0, tokens_used: 0, api_calls: 0,
-        };
-        const planName = planResult.data?.plan || "free";
-        const limits = planResult.data?.limits || DEFAULT_PLANS[planName] || DEFAULT_PLANS.free;
-        return {
-            status: 200,
-            body: {
-                success: true,
-                period,
-                plan: planName,
-                usage,
-                limits,
-            },
-        };
+      };
     }
-    // GET /usage/history — usage history for a store
-    if (pathname === "/usage/history" && (method === "GET" || method === "POST")) {
-        const storeId = body?.store_id;
-        if (!storeId) {
-            return { status: 400, body: { error: "store_id required" } };
-        }
-        const { data: history, error } = await supabase
-            .from("store_usage")
-            .select("*")
-            .eq("store_id", storeId)
-            .order("period", { ascending: false })
-            .limit(12);
-        if (error) {
-            return { status: 500, body: { error: error.message } };
+    const period = getCurrentPeriod();
+    const [usageResult, planResult] = await Promise.all([supabase.from("store_usage").select("*").eq("store_id", storeId).eq("period", period).single(), supabase.from("store_plans").select("plan, limits").eq("store_id", storeId).single()]);
+    const usage = usageResult.data || {
+      messages_in: 0,
+      messages_out: 0,
+      agent_invocations: 0,
+      tokens_used: 0,
+      api_calls: 0
+    };
+    const planName = planResult.data?.plan || "free";
+    const limits = planResult.data?.limits || DEFAULT_PLANS[planName] || DEFAULT_PLANS.free;
+    return {
+      status: 200,
+      body: {
+        success: true,
+        period,
+        plan: planName,
+        usage,
+        limits
+      }
+    };
+  }
+
+  // GET /usage/history — usage history for a store
+  if (pathname === "/usage/history" && (method === "GET" || method === "POST")) {
+    const storeId = body?.store_id;
+    if (!storeId) {
+      return {
+        status: 400,
+        body: {
+          error: "store_id required"
         }
-        return { status: 200, body: { success: true, history: history || [] } };
+      };
     }
-    // POST /billing/checkout — create a Stripe Checkout session for plan upgrade
-    if (pathname === "/billing/checkout" && method === "POST") {
-        const storeId = body?.store_id;
-        const planId = body?.plan_id;
-        if (!storeId || !planId) {
-            return { status: 400, body: { error: "store_id and plan_id required" } };
-        }
-        const stripeKey = process.env.STRIPE_SECRET_KEY;
-        if (!stripeKey) {
-            return { status: 500, body: { error: "Stripe not configured" } };
+    const {
+      data: history,
+      error
+    } = await supabase.from("store_usage").select("*").eq("store_id", storeId).order("period", {
+      ascending: false
+    }).limit(12);
+    if (error) {
+      return {
+        status: 500,
+        body: {
+          error: error.message
         }
-        // Map plan IDs to Stripe price IDs (set in env)
-        const priceMap = {
-            starter: process.env.STRIPE_PRICE_STARTER || "",
-            pro: process.env.STRIPE_PRICE_PRO || "",
-            enterprise: process.env.STRIPE_PRICE_ENTERPRISE || "",
-        };
-        const priceId = priceMap[planId];
-        if (!priceId) {
-            return { status: 400, body: { error: `No Stripe price configured for plan: ${planId}` } };
+      };
+    }
+    return {
+      status: 200,
+      body: {
+        success: true,
+        history: history || []
+      }
+    };
+  }
+
+  // POST /billing/checkout — create a Stripe Checkout session for plan upgrade
+  if (pathname === "/billing/checkout" && method === "POST") {
+    const storeId = body?.store_id;
+    const planId = body?.plan_id;
+    if (!storeId || !planId) {
+      return {
+        status: 400,
+        body: {
+          error: "store_id and plan_id required"
         }
-        // Check if store already has a Stripe customer
-        const { data: planRow } = await supabase
-            .from("store_plans")
-            .select("stripe_customer_id")
-            .eq("store_id", storeId)
-            .single();
-        const successUrl = body?.success_url || "https://whaletools.app/settings/billing?success=true";
-        const cancelUrl = body?.cancel_url || "https://whaletools.app/settings/billing?canceled=true";
-        const params = new URLSearchParams();
-        params.set("mode", "subscription");
-        params.set("line_items[0][price]", priceId);
-        params.set("line_items[0][quantity]", "1");
-        params.set("success_url", successUrl);
-        params.set("cancel_url", cancelUrl);
-        params.set("metadata[store_id]", storeId);
-        if (auth.userId)
-            params.set("metadata[user_id]", auth.userId);
-        if (planRow?.stripe_customer_id) {
-            params.set("customer", planRow.stripe_customer_id);
+      };
+    }
+    const stripeKey = process.env.STRIPE_SECRET_KEY;
+    if (!stripeKey) {
+      return {
+        status: 500,
+        body: {
+          error: "Stripe not configured"
         }
-        else if (auth.userId) {
-            // Look up user email for pre-fill
-            const { data: profile } = await supabase.from("profiles").select("email").eq("id", auth.userId).single();
-            if (profile?.email)
-                params.set("customer_email", profile.email);
+      };
+    }
+
+    // Map plan IDs to Stripe price IDs (set in env)
+    const priceMap = {
+      starter: process.env.STRIPE_PRICE_STARTER || "",
+      pro: process.env.STRIPE_PRICE_PRO || "",
+      enterprise: process.env.STRIPE_PRICE_ENTERPRISE || ""
+    };
+    const priceId = priceMap[planId];
+    if (!priceId) {
+      return {
+        status: 400,
+        body: {
+          error: `No Stripe price configured for plan: ${planId}`
         }
-        try {
-            const res = await fetch("https://api.stripe.com/v1/checkout/sessions", {
-                method: "POST",
-                headers: {
-                    "Authorization": `Basic ${Buffer.from(stripeKey + ":").toString("base64")}`,
-                    "Content-Type": "application/x-www-form-urlencoded",
-                },
-                body: params.toString(),
-            });
-            const session = await res.json();
-            if (!res.ok) {
-                return { status: 500, body: { error: session.error?.message || "Stripe error" } };
-            }
-            return { status: 200, body: { success: true, url: session.url } };
+      };
+    }
+
+    // Check if store already has a Stripe customer
+    const {
+      data: planRow
+    } = await supabase.from("store_plans").select("stripe_customer_id").eq("store_id", storeId).single();
+    const successUrl = body?.success_url || "https://whaletools.app/settings/billing?success=true";
+    const cancelUrl = body?.cancel_url || "https://whaletools.app/settings/billing?canceled=true";
+    const params = new URLSearchParams();
+    params.set("mode", "subscription");
+    params.set("line_items[0][price]", priceId);
+    params.set("line_items[0][quantity]", "1");
+    params.set("success_url", successUrl);
+    params.set("cancel_url", cancelUrl);
+    params.set("metadata[store_id]", storeId);
+    if (auth.userId) params.set("metadata[user_id]", auth.userId);
+    if (planRow?.stripe_customer_id) {
+      params.set("customer", planRow.stripe_customer_id);
+    } else if (auth.userId) {
+      // Look up user email for pre-fill
+      const {
+        data: profile
+      } = await supabase.from("profiles").select("email").eq("id", auth.userId).single();
+      if (profile?.email) params.set("customer_email", profile.email);
+    }
+    try {
+      const res = await fetch("https://api.stripe.com/v1/checkout/sessions", {
+        method: "POST",
+        headers: {
+          "Authorization": `Basic ${Buffer.from(stripeKey + ":").toString("base64")}`,
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: params.toString()
+      });
+      const session = await res.json();
+      if (!res.ok) {
+        return {
+          status: 500,
+          body: {
+            error: session.error?.message || "Stripe error"
+          }
+        };
+      }
+      return {
+        status: 200,
+        body: {
+          success: true,
+          url: session.url
         }
-        catch (err) {
-            return { status: 500, body: { error: `Stripe checkout failed: ${err.message}` } };
+      };
+    } catch (err) {
+      return {
+        status: 500,
+        body: {
+          error: `Stripe checkout failed: ${err.message}`
         }
+      };
     }
-    // POST /billing/portal — create a Stripe Customer Portal session
-    if (pathname === "/billing/portal" && method === "POST") {
-        const storeId = body?.store_id;
-        if (!storeId) {
-            return { status: 400, body: { error: "store_id required" } };
+  }
+
+  // POST /billing/portal — create a Stripe Customer Portal session
+  if (pathname === "/billing/portal" && method === "POST") {
+    const storeId = body?.store_id;
+    if (!storeId) {
+      return {
+        status: 400,
+        body: {
+          error: "store_id required"
         }
-        const stripeKey = process.env.STRIPE_SECRET_KEY;
-        if (!stripeKey) {
-            return { status: 500, body: { error: "Stripe not configured" } };
+      };
+    }
+    const stripeKey = process.env.STRIPE_SECRET_KEY;
+    if (!stripeKey) {
+      return {
+        status: 500,
+        body: {
+          error: "Stripe not configured"
         }
-        const { data: planRow } = await supabase
-            .from("store_plans")
-            .select("stripe_customer_id")
-            .eq("store_id", storeId)
-            .single();
-        if (!planRow?.stripe_customer_id) {
-            return { status: 400, body: { error: "No Stripe customer found. Subscribe to a plan first." } };
+      };
+    }
+    const {
+      data: planRow
+    } = await supabase.from("store_plans").select("stripe_customer_id").eq("store_id", storeId).single();
+    if (!planRow?.stripe_customer_id) {
+      return {
+        status: 400,
+        body: {
+          error: "No Stripe customer found. Subscribe to a plan first."
         }
-        const returnUrl = body?.return_url || "https://whaletools.app/settings/billing";
-        const params = new URLSearchParams();
-        params.set("customer", planRow.stripe_customer_id);
-        params.set("return_url", returnUrl);
-        try {
-            const res = await fetch("https://api.stripe.com/v1/billing_portal/sessions", {
-                method: "POST",
-                headers: {
-                    "Authorization": `Basic ${Buffer.from(stripeKey + ":").toString("base64")}`,
-                    "Content-Type": "application/x-www-form-urlencoded",
-                },
-                body: params.toString(),
-            });
-            const session = await res.json();
-            if (!res.ok) {
-                return { status: 500, body: { error: session.error?.message || "Stripe error" } };
-            }
-            return { status: 200, body: { success: true, url: session.url } };
+      };
+    }
+    const returnUrl = body?.return_url || "https://whaletools.app/settings/billing";
+    const params = new URLSearchParams();
+    params.set("customer", planRow.stripe_customer_id);
+    params.set("return_url", returnUrl);
+    try {
+      const res = await fetch("https://api.stripe.com/v1/billing_portal/sessions", {
+        method: "POST",
+        headers: {
+          "Authorization": `Basic ${Buffer.from(stripeKey + ":").toString("base64")}`,
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: params.toString()
+      });
+      const session = await res.json();
+      if (!res.ok) {
+        return {
+          status: 500,
+          body: {
+            error: session.error?.message || "Stripe error"
+          }
+        };
+      }
+      return {
+        status: 200,
+        body: {
+          success: true,
+          url: session.url
         }
-        catch (err) {
-            return { status: 500, body: { error: `Portal session failed: ${err.message}` } };
+      };
+    } catch (err) {
+      return {
+        status: 500,
+        body: {
+          error: `Portal session failed: ${err.message}`
         }
+      };
     }
-    return null;
+  }
+  return null;
 }
+//# sourceMappingURL=billing.js.map