Arnaud
c31ab8771a
Widens the tier enum from free/pro to free/pro/team and every "free" | "pro" cast that assumed exactly two tiers (~30 call sites: every AI route's withAiQuota/checkAndIncrementTierLimit call, admin user/invite management, upload quota checks, OpenAPI schemas). Team sits above Pro with genuinely unlimited recipes/public-recipes (the -1 sentinel, which Pro doesn't actually use — Pro uses large finite numbers instead) and a higher AI-call/storage cap. Seeded via db:seed, editable afterward from Admin > Tiers. role (user/moderator/admin — permissions) and tier (free/pro/team — billing limits) stay separate concepts, as they already were; this does not touch role-based permissions. Requires migration 0043 to run against a live DB — not applied in this sandbox (no Docker here); run `pnpm db:migrate` then `pnpm db:seed`. v0.44.0
54 lines
1.6 KiB
TypeScript
54 lines
1.6 KiB
TypeScript
import { db, invites, eq, isNull } from "@epicure/db";
|
|
import { randomUUID, randomBytes } from "crypto";
|
|
|
|
export const INVITE_COOKIE = "epicure_invite";
|
|
|
|
export function generateInviteToken(): string {
|
|
return randomBytes(24).toString("base64url");
|
|
}
|
|
|
|
export async function findValidInvite(token: string, email?: string | null) {
|
|
const [invite] = await db.select().from(invites).where(eq(invites.token, token));
|
|
if (!invite) return null;
|
|
if (invite.usedAt) return null;
|
|
if (invite.expiresAt && invite.expiresAt < new Date()) return null;
|
|
if (invite.email && email && invite.email.toLowerCase() !== email.toLowerCase()) return null;
|
|
return invite;
|
|
}
|
|
|
|
export async function consumeInvite(inviteId: string, userId: string): Promise<void> {
|
|
await db
|
|
.update(invites)
|
|
.set({ usedAt: new Date(), usedById: userId })
|
|
.where(eq(invites.id, inviteId));
|
|
}
|
|
|
|
export async function createInvite(opts: {
|
|
createdById: string;
|
|
email?: string | null;
|
|
role?: "user" | "moderator" | "admin";
|
|
tier?: "free" | "pro" | "team";
|
|
expiresInDays?: number | null;
|
|
}) {
|
|
const [invite] = await db
|
|
.insert(invites)
|
|
.values({
|
|
id: randomUUID(),
|
|
token: generateInviteToken(),
|
|
email: opts.email || null,
|
|
role: opts.role ?? "user",
|
|
tier: opts.tier ?? "free",
|
|
createdById: opts.createdById,
|
|
expiresAt: opts.expiresInDays ? new Date(Date.now() + opts.expiresInDays * 86400_000) : null,
|
|
})
|
|
.returning();
|
|
return invite;
|
|
}
|
|
|
|
export async function listInvites() {
|
|
return db.query.invites.findMany({
|
|
where: isNull(invites.usedAt),
|
|
orderBy: (i, { desc }) => [desc(i.createdAt)],
|
|
});
|
|
}
|