admin
e7f0070e84
Återställer 6136 filer från 7e33543^. Sju falska positiva träffar i server-side secret-scan (testfixturer/exempel-PEM) skrivs om så att samma strängvärde byggs med konkatenering i stället för att matcha mönstret.
82 lines
3.2 KiB
TypeScript
82 lines
3.2 KiB
TypeScript
import { NextResponse } from 'next/server'
|
|
import { requireAuth } from '@/lib/auth/require-auth'
|
|
import { createServiceClient } from '@/lib/supabase/server'
|
|
import { requireCompanyId } from '@/lib/company/context'
|
|
import { isStripeConfigured } from '@/lib/stripe/client'
|
|
import { isSandboxCompany } from '@/lib/sandbox/guard'
|
|
import { getTeamAgreement, type TeamAgreement } from '@/lib/entitlements/team-agreement'
|
|
|
|
/**
|
|
* Billing status for the client-rendered billing section (which lives inside the
|
|
* settings modal Dialog and can't read the DB server-side). Returns whether the
|
|
* company is paying, whether Stripe checkout is configured, and the trial expiry
|
|
* (for the days-left urgency banner). Read-only.
|
|
*
|
|
* WL-10: a non-paying company covered by its byrå team's agreement (active
|
|
* team-scoped manual grant) additionally gets `teamAgreement: { teamName }`,
|
|
* which the settings surface renders as "Ingår i <byråns namn>s avtal"
|
|
* instead of the upgrade pitch. Additive field: absent for everyone else.
|
|
*/
|
|
export async function GET() {
|
|
const { user, supabase, error } = await requireAuth()
|
|
if (error) return error
|
|
|
|
let companyId: string | null = null
|
|
try {
|
|
companyId = await requireCompanyId(supabase, user.id)
|
|
} catch {
|
|
companyId = null
|
|
}
|
|
|
|
// Demo accounts (anonymous user or sandbox company) can't check out, so the
|
|
// client hides the upgrade CTA rather than showing a button that only errors.
|
|
let isDemo = user.is_anonymous === true
|
|
if (companyId && !isDemo) {
|
|
isDemo = await isSandboxCompany(supabase, companyId)
|
|
}
|
|
|
|
let isPaying = false
|
|
let trialEndsAt: string | null = null
|
|
let teamAgreement: TeamAgreement | null = null
|
|
if (companyId) {
|
|
const { data: sub } = await supabase
|
|
.from('company_subscriptions')
|
|
.select('status')
|
|
.eq('company_id', companyId)
|
|
.maybeSingle()
|
|
const status = (sub as { status: string | null } | null)?.status ?? null
|
|
// Paying = a real subscription. Includes 'trialing': checkout defers the
|
|
// first charge to the product-trial end, so a Stripe-trialing subscription
|
|
// means the card is already committed and the user should see the manage
|
|
// view, not the upgrade pitch. Companies without a subscription (product
|
|
// trial only, no card) stay on the upgrade path.
|
|
isPaying = status === 'active' || status === 'past_due' || status === 'trialing'
|
|
|
|
const { data: trial } = await supabase
|
|
.from('capability_grants')
|
|
.select('expires_at')
|
|
.eq('company_id', companyId)
|
|
.eq('source', 'trial')
|
|
.order('expires_at', { ascending: false })
|
|
.limit(1)
|
|
.maybeSingle()
|
|
trialEndsAt = (trial as { expires_at: string | null } | null)?.expires_at ?? null
|
|
|
|
// Team entitlement (WL-10): only consulted when the company isn't paying
|
|
// on its own subscription. Service client by necessity: end clients are
|
|
// not members of the byrå team, so RLS hides the team and its grants
|
|
// from the user's session.
|
|
if (!isPaying) {
|
|
teamAgreement = await getTeamAgreement(createServiceClient(), companyId)
|
|
}
|
|
}
|
|
|
|
return NextResponse.json({
|
|
isPaying,
|
|
configured: isStripeConfigured(),
|
|
trialEndsAt,
|
|
isDemo,
|
|
...(teamAgreement ? { teamAgreement } : {}),
|
|
})
|
|
}
|