Wartungs-Abo (50 EUR/Monat) ueber Stripe mit Stundenkonto im Portal

- Bestellung auf der Portal-Startseite: Zusammenfassung, AGB- und
  Vorab-Leistungs-Zustimmung, Button 'Zahlungspflichtig bestellen',
  danach Stripe Checkout (Abo, Kleinunternehmer-Fusszeile)
- Stripe-Webhook /api/abo/webhook spiegelt Abos nach Appwrite
  (subscriptions) und schreibt je bezahlter Rechnung 60 min gut
  (hourCredits, idempotent ueber Invoice-ID, 12 Monate gueltig)
- Stundenkonto: FIFO-Verbrauch aus Worksheets mit countsToPlan,
  15-Minuten-Takt, Mehraufwand separat ausgewiesen
- Stripe-Kundenportal fuer Zahlungsart/Rechnungen/Kuendigung
- Oeffentlicher Kuendigungsbutton (§ 312k) und Widerrufsbutton
  (§ 356a) mit Eingangsbestaetigung per Mail
- Abo-Bedingungen inkl. Leistungsbeschreibung und Widerrufsbelehrung,
  als Anhang der Vertragsbestaetigung

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

scripts/setup-abo-collections.mjs

@@ -0,0 +1,138 @@
+#!/usr/bin/env node
+/**
+ * Wartungs-Abo: legt die Collections subscriptions + hourCredits in woms-database an
+ * und ergaenzt worksheets um das Flag countsToPlan ("zaehlt aufs Abo-Stundenkonto").
+ * Idempotent: existierende Collection/Attribute/Indexe werden uebersprungen.
+ * Usage (im Container): docker exec -w /app webklar-kundenbereich-server node scripts/setup-abo-collections.mjs
+ */
+const endpoint = (process.env.APPWRITE_ENDPOINT || 'https://ticket.webklar.com/v1').replace(/\/$/, '')
+const projectId = process.env.APPWRITE_PROJECT_ID || '6a1058610003c5a13a05'
+const apiKey = process.env.APPWRITE_API_KEY
+const databaseId = process.env.APPWRITE_DATABASE_ID || 'woms-database'
+
+if (!apiKey) {
+  console.error('APPWRITE_API_KEY erforderlich')
+  process.exit(1)
+}
+
+async function aw(path, { method = 'GET', body } = {}) {
+  const response = await fetch(`${endpoint}${path}`, {
+    method,
+    headers: {
+      'Content-Type': 'application/json',
+      'X-Appwrite-Project': projectId,
+      'X-Appwrite-Key': apiKey,
+    },
+    body: body ? JSON.stringify(body) : undefined,
+  })
+  const data = await response.json().catch(() => ({}))
+  if (!response.ok) {
+    const err = new Error(data.message || `Appwrite ${response.status}`)
+    err.status = response.status
+    throw err
+  }
+  return data
+}
+
+async function ensure(label, fn) {
+  try {
+    await fn()
+    console.log(`+ ${label}`)
+  } catch (e) {
+    if (e.status === 409 || /already exists/i.test(e.message)) {
+      console.log(`= ${label} (existiert)`)
+    } else {
+      throw new Error(`${label}: ${e.message}`)
+    }
+  }
+}
+
+async function waitForAttributes(collectionId, keys, maxSec = 60) {
+  for (let i = 0; i < maxSec; i += 1) {
+    const { attributes } = await aw(`/databases/${databaseId}/collections/${collectionId}/attributes`)
+    const pending = keys.filter((k) => attributes.find((a) => a.key === k)?.status !== 'available')
+    if (!pending.length) return
+    await new Promise((r) => setTimeout(r, 1000))
+  }
+  throw new Error(`Attribute in ${collectionId} wurden nicht verfuegbar`)
+}
+
+const col = (id) => `/databases/${databaseId}/collections/${id}`
+
+async function ensureCollection(id, name, attributes, indexes) {
+  // Keine Dokument-Permissions: Zugriff ausschliesslich ueber den Server-API-Key
+  await ensure(`Collection ${id}`, () =>
+    aw(`/databases/${databaseId}/collections`, {
+      method: 'POST',
+      body: { collectionId: id, name, permissions: [], documentSecurity: false },
+    })
+  )
+  for (const a of attributes) {
+    const { type, key, ...rest } = a
+    await ensure(`${id}.${key}`, () =>
+      aw(`${col(id)}/attributes/${type}`, { method: 'POST', body: { key, required: false, ...rest } })
+    )
+  }
+  await waitForAttributes(id, attributes.map((a) => a.key))
+  for (const idx of indexes) {
+    await ensure(`${id} index ${idx.key}`, () =>
+      aw(`${col(id)}/indexes`, { method: 'POST', body: idx })
+    )
+  }
+}
+
+await ensureCollection(
+  'subscriptions',
+  'Abos (Stripe)',
+  [
+    { type: 'string', key: 'customerId', size: 64 },
+    { type: 'string', key: 'email', size: 255 },
+    { type: 'string', key: 'stripeCustomerId', size: 64 },
+    { type: 'string', key: 'stripeSubscriptionId', size: 64 },
+    { type: 'string', key: 'status', size: 32 },
+    { type: 'string', key: 'planKey', size: 64 },
+    { type: 'integer', key: 'priceAmount' },
+    { type: 'datetime', key: 'startedAt' },
+    { type: 'datetime', key: 'currentPeriodEnd' },
+    { type: 'boolean', key: 'cancelAtPeriodEnd' },
+    { type: 'datetime', key: 'canceledAt' },
+    { type: 'datetime', key: 'endedAt' },
+    { type: 'string', key: 'termsVersion', size: 32 },
+    { type: 'datetime', key: 'termsAcceptedAt' },
+    { type: 'datetime', key: 'earlyStartConsentAt' },
+    { type: 'datetime', key: 'cancelRequestedAt' },
+    { type: 'datetime', key: 'withdrawalRequestedAt' },
+    { type: 'datetime', key: 'confirmationSentAt' },
+  ],
+  [
+    { key: 'idx_customer', type: 'key', attributes: ['customerId'] },
+    { key: 'idx_stripe_customer', type: 'key', attributes: ['stripeCustomerId'] },
+  ]
+)
+
+await ensureCollection(
+  'hourCredits',
+  'Abo-Stundengutschriften',
+  [
+    { type: 'string', key: 'customerId', size: 64 },
+    { type: 'string', key: 'stripeSubscriptionId', size: 64 },
+    { type: 'string', key: 'stripeInvoiceId', size: 64 },
+    { type: 'integer', key: 'minutes' },
+    { type: 'datetime', key: 'grantedAt' },
+    { type: 'datetime', key: 'expiresAt' },
+    { type: 'string', key: 'source', size: 32 },
+    { type: 'string', key: 'note', size: 500 },
+  ],
+  [{ key: 'idx_customer', type: 'key', attributes: ['customerId'] }]
+)
+
+// Worksheet-Flag: nur markierte Arbeitszeit wird vom Abo-Guthaben abgezogen
+await ensure('worksheets.countsToPlan', () =>
+  aw(`${col('worksheets')}/attributes/boolean`, {
+    method: 'POST',
+    body: { key: 'countsToPlan', required: false, default: false },
+  })
+)
+await waitForAttributes('worksheets', ['countsToPlan'])
+
+console.log('Fertig.')