managarten/packages/shared-auth/src
Till JS b737240ec1 feat(auth): add access tier system for phased app releases
Introduces a tiered access control system so apps can be released
gradually (founder → alpha → beta → public) without extra infrastructure.
Users are gated at the AuthGate level based on their tier vs the app's
requiredTier. All apps remain deployed and reachable, but only users
with sufficient tier can enter.

- Add accessTier enum + column to users schema (default: 'public')
- Add tier claim to JWT payload in better-auth config
- Add requiredTier field to ManaApp interface + all 25 apps
- Add hasAppAccess(), getAccessibleManaApps(), ACCESS_TIER_LABELS
- Update AuthGate with tier check + access denied screen
- Update getPillAppItems + Home page to filter by user tier
- Update all 22 app layouts to pass user tier to PillNav
- Add admin API: GET/PUT /api/v1/admin/users/:id/tier
- Document access tier system in CLAUDE.md

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-30 21:50:06 +02:00
..
adapters fix(shared-auth): add UUID fallback for HTTP contexts 2025-12-05 04:26:34 +01:00
clients feat(contacts): integrate contacts into Todo and Calendar apps 2025-12-11 18:14:35 +01:00
core feat(auth): add access tier system for phased app releases 2026-03-30 21:50:06 +02:00
events feat(auth): add session expired banner when token refresh fails 2026-03-24 21:24:28 +01:00
interceptors refactor(shared-auth): single fetch interceptor for multiple URLs 2026-03-24 20:26:03 +01:00
types feat(auth): add access tier system for phased app releases 2026-03-30 21:50:06 +02:00
index.ts feat(auth): add session expired banner when token refresh fails 2026-03-24 21:24:28 +01:00