cf021e2f91
Convert OIG/SAM from one-time $299/yr to recurring $79/month (card+ACH only) - the first real recurring-billing product in the system. Exclusion screening is a *monthly* federal obligation, so recurring monitoring fits the requirement and is the biggest valuation lever (vs a one-time annual run). Catalog (single source of truth): - service-catalog.ts: add billing_interval + allowed_methods to ComplianceService; oig-sam-screening -> 7900c, billing_interval:"month", allowed_methods:[card,ach], name "(Monthly Monitoring)". - gen-service-catalog.py + check-service-catalog-drift.py: carry/guard the two new fields; regenerate site catalog. Checkout (api/src/routes/checkout.ts): - mode:"subscription" with recurring price_data when billing_interval is set; surcharge absorbed for recurring (clean $79/mo); server-side METHOD_NOT_ALLOWED re-validation against allowed_methods. - ensureColumns + migration 100: compliance_orders.stripe_subscription_id, bundle_upsell_sent_at (+ subscription index). Webhooks (api/src/routes/webhooks.ts): - record stripe_subscription_id on checkout.session.completed (subscription mode). - invoice.paid (subscription_cycle only) -> re-dispatch screening for the cycle; invoice.payment_failed -> admin alert + first-failure customer nudge; customer.subscription.deleted -> mark order cancelled. (API 2026-03-25 moved the subscription link to invoice.parent.subscription_details.subscription.) Fulfillment: - job_server.py: pass recurring_cycle/invoice_id into the order. - npi_provider.py: OIG handler labels renewal cycles "[Monthly cycle]" + re-screen note; bundle action runs only the FIRST screening + flags the $79/mo upsell. Bundle land-and-expand: - Provider Compliance Bundle now includes only the first OIG/SAM screening (was giving away $948/yr of monitoring inside an $899 bundle). - new worker scripts/workers/bundle_upsell.py (+ pw-bundle-upsell timer): ~3 weeks after a paid bundle, emails the customer to continue $79/mo monitoring; dedup via bundle_upsell_sent_at; skips customers who already have an OIG/SAM order. Surfaces updated to $79/mo: PaymentStep (filters methods, "Billed every month, cancel anytime"), order pages, healthcare index, npi-compliance-check tool (also fixed stale $699 bundle drift -> $899), hc_oig_screening + hc_compliance_bundle emails. Docs: billing.md gains a "Stripe-native Subscriptions" section + a reality-check banner (Adyen/ERPNext-gateway model documented there is NOT live; Stripe is the real rail). Fixed run-migrations.yml container name bug (performancewest-postgres-1 -> performancewest-api-postgres-1, overridable). Tests: api/tests/recurring-subscription.test.ts (28 assertions) covers catalog gating, method validation, surcharge suppression, recurring line-item build, invoiceSubscriptionId extraction, renewal-cycle gating. tsc clean; site build clean; catalog drift OK. Manual deploy step: enable invoice.paid, invoice.payment_failed, customer.subscription.deleted on the Stripe webhook endpoint.
83 lines
3.4 KiB
Python
83 lines
3.4 KiB
Python
#!/usr/bin/env python3
|
|
"""Drift guard: the site's generated catalog MUST match the API source.
|
|
|
|
Run in deploy.sh before the site build. Re-parses the API catalog and compares
|
|
it to the committed site/src/lib/service-catalog.generated.ts. Exits 1 on any
|
|
difference, so a price edited in the API but not regenerated (or a hand-edited
|
|
generated file) is caught before it reaches customers.
|
|
|
|
Usage: python3 scripts/check-service-catalog-drift.py
|
|
"""
|
|
import re
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
ROOT = Path(__file__).resolve().parent.parent
|
|
sys.path.insert(0, str(ROOT / "scripts"))
|
|
import importlib.util
|
|
|
|
spec = importlib.util.spec_from_file_location("gen_catalog", ROOT / "scripts/gen-service-catalog.py")
|
|
gen = importlib.util.module_from_spec(spec)
|
|
spec.loader.exec_module(gen)
|
|
|
|
GEN = ROOT / "site/src/lib/service-catalog.generated.ts"
|
|
|
|
|
|
def parse_generated(ts: str) -> dict:
|
|
m = re.search(r"export const SERVICE_META[^=]*=\s*\{(.*)\n\};", ts, re.S)
|
|
if not m:
|
|
raise SystemExit("drift-check: cannot parse generated SERVICE_META")
|
|
body = m.group(1)
|
|
out = {}
|
|
for em in re.finditer(r'"([a-z0-9\-]+)":\s*\{(.*?)\},', body):
|
|
slug = em.group(1)
|
|
inner = em.group(2)
|
|
name_m = re.search(r'name:\s*"((?:[^"\\]|\\.)*)"', inner)
|
|
price_m = re.search(r"price_cents:\s*(\d+)", inner)
|
|
gov_m = re.search(r'gov_fee_label:\s*"((?:[^"\\]|\\.)*)"', inner)
|
|
interval_m = re.search(r'billing_interval:\s*"(month|year)"', inner)
|
|
methods_m = re.search(r"allowed_methods:\s*\[([^\]]*)\]", inner)
|
|
entry = {"name": gen._unescape(name_m.group(1)), "price_cents": int(price_m.group(1))}
|
|
if gov_m:
|
|
entry["gov_fee_label"] = gen._unescape(gov_m.group(1))
|
|
if interval_m:
|
|
entry["billing_interval"] = interval_m.group(1)
|
|
if methods_m:
|
|
entry["allowed_methods"] = re.findall(r'"([a-z]+)"', methods_m.group(1))
|
|
out[slug] = entry
|
|
return out
|
|
|
|
|
|
def main() -> int:
|
|
api = gen.parse_catalog(gen.SRC.read_text())
|
|
have = parse_generated(GEN.read_text())
|
|
problems = []
|
|
for slug, a in api.items():
|
|
g = have.get(slug)
|
|
if not g:
|
|
problems.append(f"{slug}: missing from generated file")
|
|
continue
|
|
if a["price_cents"] != g["price_cents"]:
|
|
problems.append(f"{slug}: price API={a['price_cents']} generated={g['price_cents']}")
|
|
if a["name"] != g["name"]:
|
|
problems.append(f"{slug}: name mismatch")
|
|
if a.get("gov_fee_label") != g.get("gov_fee_label"):
|
|
problems.append(f"{slug}: gov_fee_label mismatch")
|
|
if a.get("billing_interval") != g.get("billing_interval"):
|
|
problems.append(f"{slug}: billing_interval API={a.get('billing_interval')} generated={g.get('billing_interval')}")
|
|
if a.get("allowed_methods") != g.get("allowed_methods"):
|
|
problems.append(f"{slug}: allowed_methods API={a.get('allowed_methods')} generated={g.get('allowed_methods')}")
|
|
for slug in have:
|
|
if slug not in api:
|
|
problems.append(f"{slug}: in generated file but not in API")
|
|
if problems:
|
|
print("SERVICE CATALOG DRIFT DETECTED (run: python3 scripts/gen-service-catalog.py):", file=sys.stderr)
|
|
for p in problems:
|
|
print(" - " + p, file=sys.stderr)
|
|
return 1
|
|
print(f"drift-check: OK -- {len(api)} services, API and generated catalog match.")
|
|
return 0
|
|
|
|
|
|
if __name__ == "__main__":
|
|
sys.exit(main())
|