Add monetization spine + Build Your Own Case (Min Sak)

- Stripe: StripeClient.php, checkout/portal/webhook endpoints, idempotent event handling - FreeTier: tier-aware credits (free/light/pro/pro_plus), bonus_balance, hourly caps per tier - pricing.php + billing.php: 4-tier cards, 3 topups, Customer Portal, balance breakdown - Min Sak: CaseStore.php, AzureDocIntelligence.php, AzureSearchAdmin.php — per-user hybrid RAG - api/case/: upload, list, delete, ingest-callback (HMAC-auth'd from n8n) - award-survey-credits: inter-site HMAC endpoint for dobetternorge.no survey bonus - dashboard.php: tier badge, balance breakdown card, Min Sak CTA, survey CTA - KorrespondAgent + all 3 other agents: use_my_case toggle wired to dbnToolsCaseContext() - bootstrap.php: dbnToolsCaseContext(), dbnToolsIntersiteSecret(), dbnToolsCurrentTier() Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-20 20:52:54 +02:00
parent ed5489d174
commit ba9cddf9a1
30 changed files with 2804 additions and 133 deletions
@@ -0,0 +1,73 @@
+<?php
+declare(strict_types=1);
+
+/**
+ * Called by the n8n Case Ingest workflow after a document is OCR'd + indexed.
+ * Auth: HMAC-SHA256 (same as award-survey-credits, shared INTERSITE_HMAC_SECRET).
+ *
+ * Body: { doc_id, status, page_count, doc_type, detected_date, parties, error_msg }
+ */
+
+require_once __DIR__ . '/../../includes/bootstrap.php';
+
+dbnToolsRequireMethod('POST');
+
+$secret = dbnToolsIntersiteSecret();
+if ($secret === '') {
+    dbnToolsError('Intersite secret not configured.', 500, 'misconfigured');
+}
+
+$ts = (int)($_SERVER['HTTP_X_INTERSITE_TIMESTAMP'] ?? 0);
+$sig = (string)($_SERVER['HTTP_X_INTERSITE_SIGNATURE'] ?? '');
+if ($ts === 0 || $sig === '' || abs(time() - $ts) > 300) {
+    dbnToolsError('Bad intersite auth.', 401, 'bad_auth');
+}
+
+$raw = file_get_contents('php://input');
+if (!is_string($raw) || $raw === '') {
+    dbnToolsError('Empty body.', 400, 'empty');
+}
+if (!hash_equals(hash_hmac('sha256', $ts . '.' . $raw, $secret), $sig)) {
+    dbnToolsError('Bad signature.', 401, 'bad_sig');
+}
+
+$data = json_decode($raw, true);
+if (!is_array($data)) {
+    dbnToolsError('Invalid JSON.', 400, 'invalid_json');
+}
+
+$docId = (int)($data['doc_id'] ?? 0);
+$status = (string)($data['status'] ?? 'failed');
+$pageCount = isset($data['page_count']) ? (int)$data['page_count'] : null;
+$docType = isset($data['doc_type']) ? (string)$data['doc_type'] : null;
+$detectedDate = isset($data['detected_date']) ? (string)$data['detected_date'] : null;
+$parties = $data['parties'] ?? null;
+$errorMsg = isset($data['error_msg']) ? (string)$data['error_msg'] : null;
+
+if ($docId <= 0) {
+    dbnToolsError('doc_id required.', 400, 'bad_input');
+}
+
+$db = dbnmDb();
+$db->prepare(
+    'UPDATE case_documents
+     SET ocr_status = ?,
+         page_count = COALESCE(?, page_count),
+         doc_type = COALESCE(?, doc_type),
+         detected_date = COALESCE(?, detected_date),
+         parties = COALESCE(?, parties),
+         ocr_error = COALESCE(?, ocr_error),
+         indexed_at = CASE WHEN ? = "ready" THEN NOW() ELSE indexed_at END
+     WHERE id = ?'
+)->execute([
+    $status,
+    $pageCount,
+    $docType,
+    $detectedDate,
+    $parties !== null ? json_encode($parties, JSON_UNESCAPED_UNICODE) : null,
+    $errorMsg,
+    $status,
+    $docId,
+]);
+
+dbnToolsRespond(['ok' => true]);