f871f4f588
Implements plans/STRIPE_PLAN.md sections 1-9 for solo Pro/Family
billing (family multi-user sharing, section 1a, deliberately deferred
-- flagged in that plan as the most novel/error-prone piece).
Decisions locked in: cancel/downgrade at period end (Stripe Portal
default), no trial period.
- lib/stripe.ts: single client factory reading STRIPE_SECRET_KEY via
site-settings (DB overrides env, same pattern as every other
provider key in this codebase).
- Webhook route rewritten on the real `stripe` SDK
(stripe.webhooks.constructEvent replaces the hand-rolled HMAC
verifier) and now handles the full event set: checkout.session.completed,
customer.subscription.{updated,deleted}, invoice.{payment_failed,paid}.
past_due deliberately never downgrades tier on its own -- Stripe
retries the card first, recovering via invoice.paid or eventually
giving up via subscription.deleted. Every handler audit-logs under
billing.<event>. Dedup via the existing processed_stripe_events
table, unchanged.
- Schema: tierDefinitions gained stripe{ProductId,PriceIdMonthly,
PriceIdYearly} (the lookup table mapping a Price back to a tier on
checkout); users gained stripeSubscriptionId/subscriptionStatus/
currentPeriodEnd.
- New POST /api/v1/billing/checkout (creates a subscription Checkout
Session, allow_promotion_codes: true), POST /api/v1/billing/portal
(Stripe's hosted self-serve cancel/upgrade/card-update), GET
/api/v1/billing/status.
- /settings/billing: current plan + renewal date, past_due warning,
usage-vs-limits (reuses the existing UsageQuotaSection), plan
comparison cards with per-tier Checkout buttons, manage-billing
button once a Stripe customer exists.
- /admin/billing: connection status (test/live mode detection),
subscriber counts, past-due list, recent billing audit events, link
to Stripe Dashboard. Tier Limits page extended with the three Stripe
price fields per tier (own render branch, not the numeric+Unlimited-
switch machinery the existing fields use).
Before going live: an admin needs to create real Products/Prices in
Stripe, enter the IDs on Tier Limits, and configure the Stripe-side
webhook endpoint -- all operational steps the plan always called for,
none of it code.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
79 lines
3.9 KiB
TypeScript
79 lines
3.9 KiB
TypeScript
import Link from "next/link";
|
|
import { Shield, Users, BookOpen, Settings, BarChart3, ClipboardList, HardDrive, Bot, ArrowLeft, Gauge, Mail, Flag, History, LifeBuoy, TrendingUp, Webhook, CreditCard } from "lucide-react";
|
|
import { cn } from "@/lib/utils";
|
|
import { getStaffRole } from "@/lib/require-admin-page";
|
|
import { redirect } from "next/navigation";
|
|
|
|
// adminOnly items are hidden from moderators (and, redundantly but safely,
|
|
// each of those pages also redirects moderators away server-side via
|
|
// requireFullAdminPage — the nav filter here is UX, not the real gate).
|
|
const adminNav = [
|
|
{ href: "/admin", label: "Overview", icon: BarChart3, adminOnly: true },
|
|
{ href: "/admin/insights", label: "Insights", icon: TrendingUp, adminOnly: true },
|
|
{ href: "/admin/users", label: "Users", icon: Users, adminOnly: true },
|
|
{ href: "/admin/invites", label: "Invites", icon: Mail, adminOnly: true },
|
|
{ href: "/admin/recipes", label: "Recipes", icon: BookOpen, adminOnly: false },
|
|
{ href: "/admin/reports", label: "Reports", icon: Flag, adminOnly: false },
|
|
{ href: "/admin/support", label: "Support", icon: LifeBuoy, adminOnly: true },
|
|
{ href: "/admin/tiers", label: "Tier Limits", icon: Gauge, adminOnly: true },
|
|
{ href: "/admin/billing", label: "Billing", icon: CreditCard, adminOnly: true },
|
|
{ href: "/admin/webhooks", label: "Webhooks", icon: Webhook, adminOnly: true },
|
|
{ href: "/admin/audit-logs", label: "Audit Logs", icon: ClipboardList, adminOnly: true },
|
|
{ href: "/admin/storage", label: "Storage", icon: HardDrive, adminOnly: true },
|
|
{ href: "/admin/ai-config", label: "AI Config", icon: Bot, adminOnly: true },
|
|
{ href: "/admin/settings", label: "Settings", icon: Settings, adminOnly: true },
|
|
{ href: "/admin/changelog", label: "Changelog", icon: History, adminOnly: true },
|
|
];
|
|
|
|
export default async function AdminLayout({ children }: { children: React.ReactNode }) {
|
|
const role = await getStaffRole();
|
|
if (!role) redirect("/recipes");
|
|
|
|
const visibleNav = role === "admin" ? adminNav : adminNav.filter((item) => !item.adminOnly);
|
|
|
|
return (
|
|
<div className="flex flex-col md:flex-row min-h-screen">
|
|
<aside className="w-full md:w-56 md:shrink-0 border-b md:border-b-0 md:border-r bg-muted/30 flex flex-col md:sticky md:top-0 md:h-screen">
|
|
<div className="flex items-center justify-between gap-2 p-4 border-b font-semibold">
|
|
<span className="flex items-center gap-2">
|
|
<Shield className="h-4 w-4 text-destructive" />
|
|
{role === "admin" ? "Admin" : "Moderator"}
|
|
</span>
|
|
<Link
|
|
href="/recipes"
|
|
className="md:hidden flex items-center gap-1 text-xs font-normal text-muted-foreground hover:text-foreground"
|
|
>
|
|
<ArrowLeft className="h-3.5 w-3.5" />
|
|
Back to app
|
|
</Link>
|
|
</div>
|
|
<nav className="flex overflow-x-auto gap-1 p-2 md:flex-col md:overflow-visible md:flex-1 [scrollbar-width:none] [&::-webkit-scrollbar]:hidden">
|
|
{visibleNav.map(({ href, label, icon: Icon }) => (
|
|
<Link
|
|
key={href}
|
|
href={href}
|
|
className={cn(
|
|
"flex items-center gap-2 rounded-md px-3 py-2 text-sm whitespace-nowrap shrink-0 md:shrink transition-colors",
|
|
"hover:bg-accent hover:text-accent-foreground"
|
|
)}
|
|
>
|
|
<Icon className="h-4 w-4" />
|
|
{label}
|
|
</Link>
|
|
))}
|
|
</nav>
|
|
<div className="p-2 border-t hidden md:block">
|
|
<Link
|
|
href="/recipes"
|
|
className="flex items-center gap-2 rounded-md px-3 py-2 text-sm text-muted-foreground hover:text-foreground hover:bg-accent transition-colors"
|
|
>
|
|
<ArrowLeft className="h-4 w-4" />
|
|
Back to app
|
|
</Link>
|
|
</div>
|
|
</aside>
|
|
<main className="flex-1 p-4 md:p-8 overflow-auto min-w-0">{children}</main>
|
|
</div>
|
|
);
|
|
}
|