Phase 2 Task 42: public pricing page gated by SELF_SERVE_ENABLED.
Backend:
- New `GET /api/v1/plans/public` (no auth) returns plan_billing rows
joined with plan_limits.max_users (as `max_seats`), filtered to
is_public=true AND is_archived=false, ordered by sort_order ASC,
plan ASC. Uses get_admin_db (cross-tenant catalog read, same pattern
as /config/public).
- `PublicPlanResponse` schema in app/schemas/billing.py.
- Registered as PUBLIC in api router.
Frontend:
- `plansApi.getPublic()` client (frontend/src/api/plans.ts).
- `PricingPage` at /pricing with hero / 3 plan cards (Pro recommended,
Enterprise hides price) / hardcoded v1 comparison table / testimonial
placeholder / soft trust strip.
- Reads `useAppConfig().self_serve_enabled`; renders a 404 fallback
when disabled, never calls the API in that path.
- Start free trial CTAs link to /register?plan=starter|pro; Talk to sales
links to /contact-sales (page wired in Task 43).
Tests:
- Backend: only-public-rows + sort-order ordering.
- Frontend (Vitest): three plan cards with API prices, /register?plan=pro
CTA, /contact-sales CTA, 404 when self_serve_enabled is false, soft
trust language (no SOC2 claim).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Authed users can now request a Stripe-hosted Customer Portal URL for card
updates and cancellation via GET /api/v1/billing/portal-session. The path is
already in both _SUBSCRIPTION_GUARD_ALLOWLIST and _EMAIL_VERIFICATION_ALLOWLIST
so canceled or unverified-past-grace users can still update billing.
- Returns 503 with {"error": "stripe_not_configured"} when STRIPE_SECRET_KEY unset.
- Returns 400 with {"error": "no_stripe_customer"} when account has no
stripe_customer_id (must complete checkout first).
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
