feat: harden prepaid billing and commercial operations

1 files changed, 38 insertions, 6 deletions

diff --git a/scripts/start-debug.sh b/scripts/start-debug.sh
index 7a22a89..bf18de5 100755
--- a/scripts/start-debug.sh
+++ b/scripts/start-debug.sh
@@ -26,6 +26,13 @@ if [[ ! -f "$env_file" ]]; then
   umask 077
   {
     printf 'AIGW_SERVER_ADDRESS=:8080\n'
+    printf 'AIGW_PUBLIC_ADDRESS=:8080\n'
+    printf 'AIGW_ADMIN_ADDRESS=:8081\n'
+    printf 'AIGW_WEBHOOK_ADDRESS=:8082\n'
+    printf 'AIGW_OPERATIONS_ADDRESS=:9090\n'
+    printf 'AIGW_TRUSTED_PROXY_CIDRS=\n'
+    printf 'AIGW_REQUIRE_HTTPS=false\n'
+    printf 'AIGW_DEPLOYMENT_REGION=\n'
     printf 'AIGW_POSTGRES_USER=aigw\n'
     printf 'AIGW_POSTGRES_PASSWORD=%s\n' "$postgres_password"
     printf 'AIGW_POSTGRES_DB=aigw\n'
@@ -34,10 +41,11 @@ if [[ ! -f "$env_file" ]]; then
     printf 'AIGW_REDIS_URL=redis://127.0.0.1:6379/0\n'
     printf 'AIGW_REDIS_URL_DOCKER=redis://redis:6379/0\n'
     printf 'AIGW_CREDENTIAL_KEY=%s\n' "$credential_key"
+    printf 'AIGW_CREDENTIAL_PREVIOUS_KEYS=\n'
     printf 'AIGW_ADMIN_TOKEN=%s\n' "$admin_token"
-    printf 'AIGW_PUBLIC_URL=http://localhost:8080/admin/\n'
+    printf 'AIGW_PUBLIC_URL=http://localhost:8081/admin/\n'
     printf 'AIGW_WEBAUTHN_RP_ID=localhost\n'
-    printf 'AIGW_WEBAUTHN_ORIGINS=http://localhost:8080\n'
+    printf 'AIGW_WEBAUTHN_ORIGINS=http://localhost:8081\n'
     printf 'AIGW_SMTP_FROM_ADDRESS=no-reply@aigw.local\n'
     printf 'AIGW_SMTP_ADDRESS=127.0.0.1:1025\n'
     printf 'AIGW_SMTP_ADDRESS_DOCKER=mailpit:1025\n'
@@ -46,13 +54,37 @@ if [[ ! -f "$env_file" ]]; then
     printf 'AIGW_STRIPE_API_KEY=rk_test_replace_me\n'
     printf 'AIGW_STRIPE_CLI_API_KEY=rk_test_replace_me\n'
     printf 'AIGW_STRIPE_WEBHOOK_SECRET=whsec_replace_me\n'
-    printf 'AIGW_STRIPE_SUCCESS_URL=http://localhost:8080/admin/?topup=success\n'
-    printf 'AIGW_STRIPE_CANCEL_URL=http://localhost:8080/admin/?topup=cancel\n'
+    printf 'AIGW_STRIPE_SUCCESS_URL=http://localhost:8081/admin/?topup=success\n'
+    printf 'AIGW_STRIPE_CANCEL_URL=http://localhost:8081/admin/?topup=cancel\n'
+    printf 'AIGW_STRIPE_PORTAL_RETURN_URL=http://localhost:8081/admin/?billing=portal\n'
+    printf 'AIGW_STRIPE_AUTOMATIC_TAX_ENABLED=false\n'
+    printf 'AIGW_STRIPE_TAX_REGISTRATION_CONFIRMED=false\n'
+    printf 'AIGW_STRIPE_PRODUCT_TAX_CODE=\n'
+    printf 'AIGW_SETTLEMENT_SPOOL_PATH=/var/lib/aigw/settlements.jsonl\n'
   } >"$env_file"
   chmod 600 "$env_file"
   log "created $env_file"
 fi
 
+# Backfill non-secret deployment settings when an older local environment file
+# is reused. Exact legacy localhost values are moved to the split admin port.
+sed -i \
+  -e 's|^AIGW_PUBLIC_URL=http://localhost:8080/admin/$|AIGW_PUBLIC_URL=http://localhost:8081/admin/|' \
+  -e 's|^AIGW_WEBAUTHN_ORIGINS=http://localhost:8080$|AIGW_WEBAUTHN_ORIGINS=http://localhost:8081|' \
+  -e 's|^AIGW_STRIPE_SUCCESS_URL=http://localhost:8080/admin/?topup=success$|AIGW_STRIPE_SUCCESS_URL=http://localhost:8081/admin/?topup=success|' \
+  -e 's|^AIGW_STRIPE_CANCEL_URL=http://localhost:8080/admin/?topup=cancel$|AIGW_STRIPE_CANCEL_URL=http://localhost:8081/admin/?topup=cancel|' \
+  "$env_file"
+for setting in \
+  'AIGW_PUBLIC_ADDRESS=:8080' \
+  'AIGW_ADMIN_ADDRESS=:8081' \
+  'AIGW_WEBHOOK_ADDRESS=:8082' \
+  'AIGW_OPERATIONS_ADDRESS=:9090' \
+  'AIGW_STRIPE_PORTAL_RETURN_URL=http://localhost:8081/admin/?billing=portal' \
+  'AIGW_SETTLEMENT_SPOOL_PATH=/var/lib/aigw/settlements.jsonl'; do
+  name="${setting%%=*}"
+  grep -q "^${name}=" "$env_file" || printf '%s\n' "$setting" >>"$env_file"
+done
+
 admin_token="$(sed -n 's/^AIGW_ADMIN_TOKEN=//p' "$env_file" | head -n 1)"
 [[ -n "$admin_token" ]] || fail "AIGW_ADMIN_TOKEN is missing from $env_file"
 for required_name in AIGW_SERVER_ADDRESS AIGW_POSTGRES_USER AIGW_POSTGRES_PASSWORD AIGW_POSTGRES_DB AIGW_DATABASE_URL_DOCKER AIGW_CREDENTIAL_KEY AIGW_PUBLIC_URL AIGW_WEBAUTHN_RP_ID AIGW_WEBAUTHN_ORIGINS AIGW_SMTP_FROM_ADDRESS AIGW_SMTP_ADDRESS_DOCKER AIGW_STRIPE_API_KEY AIGW_STRIPE_WEBHOOK_SECRET AIGW_STRIPE_SUCCESS_URL AIGW_STRIPE_CANCEL_URL; do
@@ -81,9 +113,9 @@ if ! docker compose --env-file "$env_file" up -d --no-build --wait --wait-timeou
 fi
 
 log "services are ready"
-printf '\nAdmin UI:    http://localhost:8080/admin/\n'
+printf '\nAdmin UI:    http://localhost:8081/admin/\n'
 printf 'Mail inbox:  http://127.0.0.1:8025/\n'
-printf 'Health:      http://127.0.0.1:8080/readyz\n'
+printf 'Health:      http://127.0.0.1:9090/readyz\n'
 printf 'Secrets:     %s (mode 0600)\n' "$env_file"
 printf '\nLogs:        docker compose --env-file %q logs -f aigw\n' "$env_file"
 printf 'Stop:        ./scripts/stop-debug.sh\n'