westfarn
841c0962d9
## Summary Implements [#16](#16), [#17](#17), and [#36](#36) in one backend PR. - **#36 Multi-plan catalog**: Founders ($10, public), Standard ($15), Pro ($40), Business ($99), Backer ($0). Future tiers seeded but hidden/`is_selectable=false`. Backer email whitelist auto-assigns Founders-level access with no checkout. - **#36 Feature + prompt gating**: plan feature flags (text vs image); rolling **6h** prompt windows (100 / 200 / 300 / 300 / 300). Enforced in both chat consumers when `ENFORCE_SUBSCRIPTION_GATES=true`. - **#17 Token-period quotas**: optional `monthly_token_quota` on plans + per-user override; calendar-month aggregation from `PromptMetric`; warn/block when reported token totals exceed cap. Null provider usage never fabricated as 0; tracked via `turns_missing_token_usage`. - **#16 Token API exposure**: `tokens_in` / `tokens_out` on conversation + prompt serializers (null when unknown). `GET /api/finance/subscription/` returns plan + usage snapshot for the FE. - Checkout defaults to **Founders**; Stripe paid webhooks assign Founders. Registration/OAuth redeem Backer whitelist and return `needs_checkout`. Companion FE PR: `chat_web_app` branch `feature/plans-quotas-token-usage`. ## Test plan - [ ] `manage.py migrate` seeds five plans; admin can add Backer emails - [ ] Public `GET /api/finance/plans/` returns only Founders - [ ] Register with Backer email → active Backer, `needs_checkout=false`, checkout rejected - [ ] Founders checkout + paid webhook → active Founders subscription - [ ] Chat turn blocked without subscription / when prompt window exceeded / when token period exceeded - [ ] Standard plan denies image feature; Pro/Founders/Backer allow - [ ] Conversation/prompt API returns `null` tokens when unreported, sums when present - [ ] `finance.tests.test_plans_quotas` + existing finance/checkout tests passReviewed-on: #37
68 lines
2.5 KiB
Bash
68 lines
2.5 KiB
Bash
# Local development environment file (copy to .env).
|
|
# For production server values, use .env.prod.example instead.
|
|
DJANGO_ENV=dev
|
|
DJANGO_DEBUG=true
|
|
DJANGO_SECRET_KEY=change-me-for-local-development
|
|
DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1,0.0.0.0
|
|
# Optional; when unset, http:// origins are derived for local hosts.
|
|
# DJANGO_CSRF_TRUSTED_ORIGINS=http://localhost:8003,http://127.0.0.1:8003
|
|
|
|
# Database (docker-compose sets DATABASE_URL for the web service)
|
|
DATABASE_URL=postgres://chat_backend:chat_backend@db:5432/chat_backend
|
|
|
|
# Ollama — local loopback when Ollama runs on this machine; LAN IP for GPU host.
|
|
OLLAMA_BASE_URL=http://127.0.0.1:11434
|
|
# OLLAMA_MODEL=llama3.2
|
|
# OLLAMA_EMBED_MODEL=llama3.2
|
|
|
|
# Email (SMTP2GO) — optional for local
|
|
EMAIL_HOST=mail.smtp2go.com
|
|
EMAIL_HOST_USER=
|
|
EMAIL_HOST_PASSWORD=
|
|
EMAIL_PORT=2525
|
|
EMAIL_USE_TLS=true
|
|
|
|
# Captcha (optional local)
|
|
CAPTCHA_SECRET_KEY=
|
|
|
|
# Self-serve sign-up (default false — set true to allow /user/create/)
|
|
ENABLE_ACCOUNT_REGISTRATION=false
|
|
|
|
# OAuth SSO — Google / Microsoft (#24). Leave blank to hide SSO buttons.
|
|
# Redirect URIs (register in each IdP console):
|
|
# {OAUTH_CALLBACK_BASE_URL}/api/auth/oauth/google/callback/
|
|
# {OAUTH_CALLBACK_BASE_URL}/api/auth/oauth/microsoft/callback/
|
|
GOOGLE_OAUTH_CLIENT_ID=
|
|
GOOGLE_OAUTH_CLIENT_SECRET=
|
|
MICROSOFT_OAUTH_CLIENT_ID=
|
|
MICROSOFT_OAUTH_CLIENT_SECRET=
|
|
MICROSOFT_OAUTH_TENANT=common
|
|
# Optional; defaults to request host. Example local: http://127.0.0.1:8001
|
|
OAUTH_CALLBACK_BASE_URL=http://127.0.0.1:8001
|
|
|
|
# Stripe / finance (optional local — required for checkout + webhooks)
|
|
STRIPE_SECRET_KEY=
|
|
STRIPE_PUBLISHABLE_KEY=
|
|
STRIPE_WEBHOOK_SECRET=
|
|
# Optional: pre-created Stripe Price ID for Founders. When empty, Checkout uses
|
|
# SubscriptionPlan.price_cents / SUBSCRIPTION_PRICE_* ($10 USD / month Founders).
|
|
STRIPE_PRICE_ID=
|
|
# SUBSCRIPTION_PRICE_AMOUNT_CENTS=1000
|
|
# SUBSCRIPTION_PRICE_CURRENCY=usd
|
|
# SUBSCRIPTION_PRICE_INTERVAL=month
|
|
# SUBSCRIPTION_PRODUCT_NAME=Founders
|
|
# Enforce plan feature + prompt/token quotas on chat turns (default true).
|
|
# ENFORCE_SUBSCRIPTION_GATES=true
|
|
FRONTEND_BASE_URL=http://localhost:3000
|
|
# STRIPE_CHECKOUT_SUCCESS_URL=http://localhost:3000/billing/success?session_id={CHECKOUT_SESSION_ID}
|
|
# STRIPE_CHECKOUT_CANCEL_URL=http://localhost:3000/billing/cancel
|
|
# Customer Portal return URL (plan change / cancel / payment method).
|
|
# STRIPE_PORTAL_RETURN_URL=http://localhost:3000/account/
|
|
|
|
# Gunicorn / ASGI
|
|
GUNICORN_WORKERS=2
|
|
GUNICORN_BIND=0.0.0.0:8000
|
|
|
|
# Host port for docker-compose.prod.yml
|
|
WEB_PORT=8003
|