feat: subscriptions

app/Http/Controllers/AuthController.php

@@ -305,6 +305,7 @@ class AuthController extends Controller
     public function destroy(Request $request): JsonResponse
     {
         $user = $request->user();
+        $identityVerificationRequest = $user->identityVerificationRequest()->first();
         $storagePaths = collect([$user->avatar_url])
             ->merge($user->mealPosts()->withTrashed()->pluck('image_url'))
             ->filter(fn (?string $path): bool => $this->isPublicStoragePath($path))
@@ -330,6 +331,11 @@ class AuthController extends Controller
             Storage::disk()->delete($storagePaths);
         }
 
+        if ($identityVerificationRequest?->hasDocument()) {
+            Storage::disk($identityVerificationRequest->document_disk)
+                ->delete($identityVerificationRequest->document_path);
+        }
+
         if ($request->hasSession()) {
             Auth::guard('web')->logout();
             $request->session()->invalidate();
@@ -354,6 +360,11 @@ class AuthController extends Controller
         $userAttributes['email'] = strtolower($data['email']);
         $userAttributes['password'] = Hash::make($data['password']);
         $userAttributes['avatar_url'] = $avatarPath;
+        $trialDays = max(0, (int) config('billing.trial_days', 7));
+
+        if ($trialDays > 0) {
+            $userAttributes['trial_ends_at'] = now()->addDays($trialDays);
+        }
 
         $user = User::create($userAttributes);
 

app/Http/Controllers/BillingController.php

@@ -2,7 +2,7 @@
 
 namespace App\Http\Controllers;
 
-use App\Enums\CreditProductType;
+use App\Enums\BillingProductPurpose;
 use App\Http\Resources\CreditProductResource;
 use App\Models\CreditProduct;
 use App\Services\MobileDeepLink;
@@ -18,6 +18,7 @@ class BillingController extends Controller
     {
         $products = CreditProduct::query()
             ->active()
+            ->whereNotNull('purpose')
             ->whereNotNull('stripe_price_id')
             ->orderBy('sort_order')
             ->orderBy('amount')
@@ -32,6 +33,7 @@ class BillingController extends Controller
         PaymentTransactionRecorder $transactions,
     ): JsonResponse {
         abort_unless($creditProduct->is_active, 404);
+        abort_unless($creditProduct->purpose !== null, 404);
         abort_unless(filled($creditProduct->stripe_price_id), 404);
 
         $user = $request->user();
@@ -39,8 +41,7 @@ class BillingController extends Controller
 
         $metadata = [
             'credit_product_id' => $creditProduct->getKey(),
-            'credit_product_type' => $creditProduct->type->value,
-            'credits' => (string) $creditProduct->credits,
+            'billing_product_purpose' => $creditProduct->purpose->value,
         ];
         $sessionOptions = [
             'success_url' => $this->redirectUrl('success'),
@@ -49,7 +50,7 @@ class BillingController extends Controller
             'client_reference_id' => $creditProduct->getKey(),
         ];
 
-        if ($creditProduct->type === CreditProductType::MONTHLY) {
+        if ($creditProduct->purpose === BillingProductPurpose::SUBSCRIPTION) {
             if ($user->subscribed('default')) {
                 return response()->json([
                     'message' => __('api.billing.active_subscription_exists'),
@@ -61,6 +62,12 @@ class BillingController extends Controller
                 ->withMetadata($metadata)
                 ->checkout($sessionOptions);
         } else {
+            if ($user->hasPurchasedCertification() || $user->account_verified_at !== null) {
+                return response()->json([
+                    'message' => __('api.billing.certification_already_purchased'),
+                ], 409);
+            }
+
             $sessionOptions['invoice_creation'] = [
                 'enabled' => true,
                 'invoice_data' => [

app/Http/Controllers/CertificationController.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Actions\SubmitIdentityVerification;
+use App\Enums\IdentityVerificationStatus;
+use App\Http\Requests\StoreIdentityVerificationRequest;
+use App\Http\Resources\IdentityVerificationResource;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class CertificationController extends Controller
+{
+    public function show(Request $request): JsonResponse
+    {
+        $user = $request->user();
+        $verificationRequest = $user->identityVerificationRequest()->first();
+
+        return response()->json([
+            'data' => [
+                'entitlementPurchased' => $user->hasPurchasedCertification(),
+                'accountVerified' => $user->account_verified_at !== null,
+                'canSubmitIdentity' => $user->hasPurchasedCertification()
+                    && $user->account_verified_at === null
+                    && $verificationRequest?->status !== IdentityVerificationStatus::PENDING,
+                'verification' => $verificationRequest
+                    ? (new IdentityVerificationResource($verificationRequest))->resolve($request)
+                    : null,
+            ],
+        ]);
+    }
+
+    public function store(
+        StoreIdentityVerificationRequest $request,
+        SubmitIdentityVerification $submitIdentityVerification,
+    ): JsonResponse {
+        $submitIdentityVerification->execute(
+            $request->user(),
+            $request->file('document'),
+        );
+
+        return $this->show($request);
+    }
+}

app/Http/Controllers/MealImageAnalysisController.php

@@ -7,7 +7,6 @@ use App\Enums\AiUsageType;
 use App\Enums\IngredientUnit;
 use App\Enums\MealPostType;
 use App\Http\Requests\MealImageAnalysisRequest;
-use App\Services\AiCreditService;
 use App\Services\AiUsageRecorder;
 use Illuminate\Contracts\Support\Arrayable;
 use Illuminate\Http\JsonResponse;
@@ -20,19 +19,15 @@ class MealImageAnalysisController extends Controller
 {
     public function store(
         MealImageAnalysisRequest $request,
-        AiCreditService $aiCredits,
         AiUsageRecorder $aiUsageRecorder,
     ): JsonResponse {
         $user = $request->user();
         $image = $request->file('image');
         $input = $this->analysisInput($image);
 
-        if (! $aiCredits->consume($user)) {
+        if (! $user->canAnalyzeMeals()) {
             return response()->json([
-                'message' => __('api.meal_image_analysis.insufficient_credits'),
-                'credits' => [
-                    'balance' => $user->ai_credits_balance,
-                ],
+                'message' => __('api.meal_image_analysis.subscription_required'),
             ], 402);
         }
 
@@ -45,8 +40,6 @@ class MealImageAnalysisController extends Controller
         } catch (Throwable $exception) {
             report($exception);
 
-            $aiCredits->refund($user);
-
             $aiUsageRecorder->failed(
                 user: $user,
                 type: AiUsageType::MEAL_IMAGE_ANALYSIS,
@@ -79,9 +72,6 @@ class MealImageAnalysisController extends Controller
 
         return response()->json([
             'data' => $draft,
-            'credits' => [
-                'balance' => $user->fresh()->ai_credits_balance,
-            ],
         ]);
     }
 

app/Http/Requests/StoreIdentityVerificationRequest.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Http\Requests;
+
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rules\File;
+
+class StoreIdentityVerificationRequest extends FormRequest
+{
+    public function authorize(): bool
+    {
+        $user = $this->user();
+
+        return $user?->hasPurchasedCertification() === true
+            && $user->account_verified_at === null;
+    }
+
+    public function rules(): array
+    {
+        return [
+            'document' => [
+                'required',
+                File::types(['jpg', 'jpeg', 'png', 'pdf'])->max('10mb'),
+                'mimetypes:image/jpeg,image/png,application/pdf',
+            ],
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'document.required' => __('api.certification.document_required'),
+            'document.mimetypes' => __('api.certification.document_type'),
+            'document.max' => __('api.certification.document_max'),
+        ];
+    }
+}

app/Http/Resources/CreditProductResource.php

@@ -16,8 +16,7 @@ class CreditProductResource extends JsonResource
             'id' => $this->id,
             'name' => $this->name,
             'description' => $this->description,
-            'type' => $this->type,
-            'credits' => $this->credits,
+            'purpose' => $this->purpose,
             'amount' => $this->amount,
             'currency' => $this->currency,
             'formattedAmount' => $this->formattedAmount(),

app/Http/Resources/IdentityVerificationResource.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Http\Resources;
+
+use Illuminate\Http\Request;
+use Illuminate\Http\Resources\Json\JsonResource;
+
+class IdentityVerificationResource extends JsonResource
+{
+    public function toArray(Request $request): array
+    {
+        return [
+            'status' => $this->status,
+            'submittedAt' => $this->submitted_at?->toISOString(),
+            'reviewedAt' => $this->reviewed_at?->toISOString(),
+            'rejectionReason' => $this->rejection_reason,
+        ];
+    }
+}

app/Http/Resources/UserResource.php

@@ -27,7 +27,10 @@ class UserResource extends JsonResource
             'bio' => $this->bio,
             'role' => $this->role,
             'accountVerified' => $this->account_verified_at !== null,
-            'aiCreditsBalance' => (int) $this->ai_credits_balance,
+            'certificationPurchased' => $this->hasPurchasedCertification(),
+            'canAnalyzeMeals' => $this->canAnalyzeMeals(),
+            'analysisAccessLevel' => $this->analysisAccessLevel(),
+            'trialEndsAt' => $this->trial_ends_at?->toISOString(),
             'hasActiveSubscription' => $this->subscribed('default'),
             'suspendedAt' => $this->suspended_at?->toISOString(),
             'physicalActivityLevel' => $this->physical_activity_level,