Arnaud
c31ab8771a
Widens the tier enum from free/pro to free/pro/team and every "free" | "pro" cast that assumed exactly two tiers (~30 call sites: every AI route's withAiQuota/checkAndIncrementTierLimit call, admin user/invite management, upload quota checks, OpenAPI schemas). Team sits above Pro with genuinely unlimited recipes/public-recipes (the -1 sentinel, which Pro doesn't actually use — Pro uses large finite numbers instead) and a higher AI-call/storage cap. Seeded via db:seed, editable afterward from Admin > Tiers. role (user/moderator/admin — permissions) and tier (free/pro/team — billing limits) stay separate concepts, as they already were; this does not touch role-based permissions. Requires migration 0043 to run against a live DB — not applied in this sandbox (no Docker here); run `pnpm db:migrate` then `pnpm db:seed`. v0.44.0
58 lines
1.7 KiB
TypeScript
58 lines
1.7 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
import { requireAdmin } from "@/lib/api-auth";
|
|
import { db, auditLogs } from "@epicure/db";
|
|
import { createInvite, listInvites } from "@/lib/invites";
|
|
import { randomUUID } from "crypto";
|
|
|
|
const VALID_ROLES = ["user", "moderator", "admin"] as const;
|
|
const VALID_TIERS = ["free", "pro", "team"] as const;
|
|
|
|
export async function GET() {
|
|
const { response } = await requireAdmin();
|
|
if (response) return response;
|
|
|
|
const invites = await listInvites();
|
|
return NextResponse.json({ invites });
|
|
}
|
|
|
|
export async function POST(req: NextRequest) {
|
|
const { session, response } = await requireAdmin();
|
|
if (response) return response;
|
|
|
|
const body = (await req.json()) as {
|
|
email?: string;
|
|
role?: string;
|
|
tier?: string;
|
|
expiresInDays?: number;
|
|
};
|
|
|
|
const role = body.role ?? "user";
|
|
const tier = body.tier ?? "free";
|
|
if (!VALID_ROLES.includes(role as (typeof VALID_ROLES)[number])) {
|
|
return NextResponse.json({ error: "Invalid role" }, { status: 400 });
|
|
}
|
|
if (!VALID_TIERS.includes(tier as (typeof VALID_TIERS)[number])) {
|
|
return NextResponse.json({ error: "Invalid tier" }, { status: 400 });
|
|
}
|
|
|
|
const invite = await createInvite({
|
|
createdById: session!.user.id,
|
|
email: body.email,
|
|
role: role as (typeof VALID_ROLES)[number],
|
|
tier: tier as (typeof VALID_TIERS)[number],
|
|
expiresInDays: body.expiresInDays ?? 7,
|
|
});
|
|
|
|
await db.insert(auditLogs).values({
|
|
id: randomUUID(),
|
|
userId: session!.user.id,
|
|
action: "admin.invite.create",
|
|
targetType: "invite",
|
|
targetId: invite!.id,
|
|
metadata: JSON.stringify({ email: body.email, role, tier }),
|
|
createdAt: new Date(),
|
|
});
|
|
|
|
return NextResponse.json({ invite });
|
|
}
|