Function hasConsoleBillingAccessForSession

src/utils/billing.ts:6–36

(
  session: Pick<
    ResolvedAuthSession,
    'principalKind' | 'providerAuthKind' | 'subscription'
  >,
  roles: {
    organizationRole: string | null | undefined
    workspaceRole: string | null | undefined
  },
)

import { isEnvTruthy } from './envUtils.js'

export function hasConsoleBillingAccessForSession(
  session: Pick<
    ResolvedAuthSession,
    'principalKind' | 'providerAuthKind' | 'subscription'
  >,
  roles: {
    organizationRole: string | null | undefined
    workspaceRole: string | null | undefined
  },
): boolean {
  if (session.providerAuthKind !== 'noumena_first_party') {
    return false
  }

  if (session.principalKind === 'none' || session.principalKind === 'third_party_provider') {
    return false
  }

  if (session.subscription.subscriptionType !== null) {
    return false
  }

  if (!roles.organizationRole && !roles.workspaceRole) {
    return false
  }

  return (
    ['admin', 'billing'].includes(roles.organizationRole) ||
    ['workspace_admin', 'workspace_billing'].includes(roles.workspaceRole)
  )
}

export function hasManagedPlanBillingAccessForSession(
  session: Pick<ResolvedAuthSession, 'principalSource' | 'sessionState' | 'subscription'>,