mirror of
https://github.com/hanzoai/team-go.git
synced 2026-10-30 20:22:42 +00:00
zeekay
c6dc8ac2f7
The Go transactor and account service for Hanzo Team. History starts here. The previous 107 commits carried the fork's origin in their messages and their tree, and none of it described this code: the Go under pkg/transactor is Hanzo's own work implementing a wire protocol, not a port of anyone's implementation. pkg/transactor/model.json remains, and remains attributed. It is a compiled platform model this transactor loads through go:embed, governed by EPL-2.0 and named in NOTICE. Removing it is a replacement project -- a new compiler and a move off the protocol -- not a deletion.
111 lines
3.3 KiB
Go
111 lines
3.3 KiB
Go
// Package billing is a thin proxy onto commerce.hanzo.ai.
|
|
//
|
|
// Per docs (hanzo/universe/CLAUDE.md): Commerce is the single source
|
|
// of truth for billing, credits, usage and subscription state across
|
|
// every Hanzo service. team-go does not own any of that — it just
|
|
// reverse-proxies authenticated requests to /v1/billing/* into the
|
|
// Commerce REST surface, attaching X-User-Id + X-Org-Id from the
|
|
// JWT-validated request context.
|
|
//
|
|
// GET /v1/billing/subscription — current plan
|
|
// GET /v1/billing/usage?from=&to= — usage records
|
|
// GET /v1/billing/invoices — invoice list
|
|
// POST /v1/billing/checkout — start checkout session
|
|
//
|
|
// The Commerce endpoint is read from COMMERCE_ENDPOINT
|
|
// (default https://commerce.hanzo.ai). In-cluster, set to
|
|
// http://commerce.hanzo.svc:8001 to avoid a public hop. Commerce's
|
|
// own surface is already on /v1/billing/*, so the proxy is a 1:1
|
|
// path mapping — no rewrite.
|
|
package billing
|
|
|
|
import (
|
|
"io"
|
|
"net/http"
|
|
"net/url"
|
|
"os"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/hanzoai/base/core"
|
|
"github.com/hanzoai/base/tools/hook"
|
|
)
|
|
|
|
const (
|
|
defaultEndpoint = "https://commerce.hanzo.ai"
|
|
envEndpoint = "COMMERCE_ENDPOINT"
|
|
)
|
|
|
|
// Register binds the /v1/billing/* proxy onto app.
|
|
func Register(app core.App) {
|
|
endpoint, err := url.Parse(commerceEndpoint())
|
|
if err != nil {
|
|
app.Logger().Error("billing: invalid COMMERCE_ENDPOINT", "err", err)
|
|
return
|
|
}
|
|
|
|
client := &http.Client{Timeout: 15 * time.Second}
|
|
|
|
app.OnServe().Bind(&hook.Handler[*core.ServeEvent]{
|
|
Func: func(e *core.ServeEvent) error {
|
|
e.Router.Any("/v1/billing/{path...}", func(re *core.RequestEvent) error {
|
|
return proxy(re, endpoint, client)
|
|
})
|
|
return e.Next()
|
|
},
|
|
})
|
|
}
|
|
|
|
func commerceEndpoint() string {
|
|
if v := os.Getenv(envEndpoint); v != "" {
|
|
return v
|
|
}
|
|
return defaultEndpoint
|
|
}
|
|
|
|
func proxy(re *core.RequestEvent, endpoint *url.URL, client *http.Client) error {
|
|
if re.Auth == nil {
|
|
return re.UnauthorizedError("billing requires auth", nil)
|
|
}
|
|
|
|
// /v1/billing/foo → COMMERCE/v1/billing/foo (Commerce already serves
|
|
// /v1/billing/* natively, so the proxy is a 1:1 path mapping).
|
|
upstream := *endpoint
|
|
upstream.Path = strings.TrimRight(endpoint.Path, "/") + re.Request.URL.Path
|
|
upstream.RawQuery = re.Request.URL.RawQuery
|
|
|
|
req, err := http.NewRequestWithContext(re.Request.Context(),
|
|
re.Request.Method, upstream.String(), re.Request.Body)
|
|
if err != nil {
|
|
return re.InternalServerError("billing proxy build failed", err)
|
|
}
|
|
for k, v := range re.Request.Header {
|
|
// Strip client-supplied identity headers — only the JWT-
|
|
// validated path sets identity (per Hanzo HTTP header
|
|
// convention). Authorization is forwarded.
|
|
if k == "X-User-Id" || k == "X-Org-Id" || k == "X-User-Email" {
|
|
continue
|
|
}
|
|
req.Header[k] = v
|
|
}
|
|
// Re-mint identity from validated auth ctx.
|
|
req.Header.Set("X-User-Id", re.Auth.Id)
|
|
req.Header.Set("X-User-Email", re.Auth.Email())
|
|
if owner := re.Auth.GetString("owner"); owner != "" {
|
|
req.Header.Set("X-Org-Id", owner)
|
|
}
|
|
|
|
resp, err := client.Do(req)
|
|
if err != nil {
|
|
return re.InternalServerError("commerce unreachable", err)
|
|
}
|
|
defer resp.Body.Close()
|
|
|
|
for k, v := range resp.Header {
|
|
re.Response.Header()[k] = v
|
|
}
|
|
re.Response.WriteHeader(resp.StatusCode)
|
|
_, _ = io.Copy(re.Response, resp.Body)
|
|
return nil
|
|
}
|