chore(api): promote test → main (GET /api/admins/artists/pro migration)

[sweetmantech]

Promotes the single change on `test` to `main`.

Includes

• feat(api): migrate GET /api/artists/pro #477 — feat(api): migrate GET /api/artists/pro — new admin-scoped route at `/api/admins/artists/pro`, Stripe→local-subscriptions-mirror refactor, generalized `selectSubscriptions` helper

Test plan

• feat(api): migrate GET /api/artists/pro #477 preview-verified end-to-end via smoke test (8/8 probes passed — auth, method, CORS, dedup, 284 pro artists returned). See feat(api): migrate GET /api/artists/pro #477 (comment).
• All CI green on the feature branch (format, lint, unit tests, Vercel, CodeRabbit).

🤖 Generated with Claude Code

---

Summary by cubic

Adds an admin-only endpoint at GET /api/admins/artists/pro that returns a deduped list of artist IDs for “pro” accounts, sourced from enterprise email domains and the local subscriptions mirror.

• New Features

  • New route with CORS preflight and admin auth validation.
  • Aggregates and dedupes artist IDs from enterprise-domain accounts and active subscriptions.
  • Returns safe 500 errors without leaking internals.

• Refactors

  • Introduced selectSubscriptions({ accountIds?, active? }) to query the local billing mirror.
  • Extended selectAccountEmails with a domain filter; added getEnterpriseAccountIds and selectAccountArtistIds helpers.

^{Written for commit 73fa2ad. Summary will update on new commits.}

Summary by CodeRabbit

• New Features
  • Added a new admin-only API endpoint to retrieve professional artists based on enterprise account affiliations and subscription status, with built-in CORS and error handling support.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
api	Ready	Preview	Apr 24, 2026 7:23pm

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

Introduces a new admin API endpoint for retrieving pro artists, combining enterprise domain-based accounts with active Stripe subscription holders. The implementation includes request validation, business logic to fetch and deduplicate artist records, and supporting database query helpers.

Changes

Cohort / File(s)	Summary
API Route app/api/admins/artists/pro/route.ts	Exports OPTIONS for CORS preflight and GET that forwards requests to getArtistsProHandler.
Request Handling lib/artists/validateGetArtistsProRequest.ts, lib/artists/getArtistsProHandler.ts	Adds admin authorization validation and route handler with error handling; returns NextResponse with CORS headers and error messages on failure.
Business Logic lib/artists/getProArtists.ts	Fetches pro artists by merging enterprise account IDs with active Stripe subscription IDs, deduplicates results, and retrieves associated artist records.
Enterprise Configuration lib/enterprise/consts.ts, lib/enterprise/getEnterpriseAccountIds.ts	Defines immutable set of enterprise domains and queries database for accounts matching those domain email patterns.
Data Access Layer lib/supabase/account_artist_ids/selectAccountArtistIds.ts, lib/supabase/account_emails/selectAccountEmails.ts, lib/supabase/subscriptions/selectSubscriptions.ts	Adds new Supabase query helpers: filters artist IDs by account IDs, extends email queries to support domain-based filtering, and introduces subscriptions query with optional filtering by account ID and active status.

Sequence Diagram

sequenceDiagram
    participant Client as Admin Client
    participant Route as GET /api/admins/artists/pro
    participant Validator as validateGetArtistsProRequest
    participant Handler as getArtistsProHandler
    participant ProLogic as getProArtists
    participant Enterprise as getEnterpriseAccountIds
    participant Subscriptions as selectSubscriptions
    participant ArtistSelect as selectAccountArtistIds
    participant DB as Supabase DB

    Client->>Route: GET /api/admins/artists/pro
    Route->>Validator: validate request
    Validator->>Validator: check admin auth
    alt Auth fails
        Validator-->>Route: NextResponse error
        Route-->>Client: 401/403 response
    else Auth succeeds
        Validator-->>Route: {}
        Route->>Handler: forward request
        Handler->>ProLogic: getProArtists()
        par Fetch Enterprise Accounts
            ProLogic->>Enterprise: getEnterpriseAccountIds()
            Enterprise->>DB: selectAccountEmails(domain filters)
            DB-->>Enterprise: accounts by enterprise domain
            Enterprise-->>ProLogic: enterprise account IDs
        and Fetch Subscription Accounts
            ProLogic->>Subscriptions: selectSubscriptions({active: true})
            Subscriptions->>DB: query active subscriptions
            DB-->>Subscriptions: subscription rows
            Subscriptions-->>ProLogic: subscription account IDs
        end
        ProLogic->>ProLogic: merge & deduplicate IDs
        alt No pro accounts found
            ProLogic-->>Handler: []
        else Pro accounts exist
            ProLogic->>ArtistSelect: selectAccountArtistIds(merged IDs)
            ArtistSelect->>DB: query account_artist_ids table
            DB-->>ArtistSelect: artist rows
            ArtistSelect-->>ProLogic: artist IDs
        end
        ProLogic-->>Handler: artist IDs array
        Handler->>Handler: format response with CORS headers
        Handler-->>Route: NextResponse.json(artists)
        Route-->>Client: 200 with pro artists list
    end

Loading

Estimated code review effort

🎯 4 (Complex) | ⏱️ ~45 minutes

Possibly related PRs

• feat(api): migrate GET /api/artists/pro #477: Implements the same pro-artists endpoint with identical handler, validation, business logic, and database query implementations.

Poem

🎨 Pro Artists Rise 🚀

Enterprise domains dance, subscriptions align,
Deduplicating artists in a JSON design,
CORS headers bloom, admin gates secure—
Pro status confirmed, the endpoint's pure! ✨

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Solid & Clean Code	⚠️ Warning	PR violates clean code principles by leaving stale documentation and unresolved security vulnerability despite explicit review feedback with proposed fixes.	Update docstrings in three files to reference local subscriptions mirror instead of Stripe, and fix email domain pattern in selectAccountEmails.ts by removing trailing wildcard to prevent domain suffix attacks.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch test

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}