feat: no limit on anonymous invite links (0.8.1) (#307)

Drops the 5-per-account quota on Settings > Invite Anonymously. The
issuer's disabled flag still works as a kill switch, and every minted
invite is still recorded in issued_invites.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: ralyodio

docs/INVITES.md

@@ -91,17 +91,17 @@ Go to **Settings > Invite Anonymously** and click **Create invite link**, then s
 - The link is `https://qrypt.chat/anon?invite=qci1....`, an Ed25519-signed token.
 - It works once and expires in 7 days. Through the API, you can set `ttlSeconds` anywhere from 1 hour to 30 days.
 - The link does not reveal who invited them.
-- Each account has a limited number of invites, 5 by default (`invite_issuers.default_quota`). The panel shows how many you have left.
+- There is no limit on how many invites an account can create. Setting `invite_issuers.disabled` for `qryptchat-web` turns minting off for everyone.
 - The server needs `QRYPT_WEB_ISSUER_SEED` to be set. Without it the endpoint returns 503.
 
 The person opens the link, picks a username, and their browser generates their keys. They are then asked to set a 4–12 digit **Backup PIN**, which protects the key backup. To chat, start a conversation with their username as described in the next section.
 
 API:
 
 ```sh
-curl -H "Authorization: Bearer $ACCESS_TOKEN" https://qrypt.chat/api/auth/invite-anon         # quota
+curl -H "Authorization: Bearer $ACCESS_TOKEN" https://qrypt.chat/api/auth/invite-anon         # how many you have minted
 curl -X POST -H "Authorization: Bearer $ACCESS_TOKEN" -H 'Content-Type: application/json' \
-  -d '{"ttlSeconds":86400}' https://qrypt.chat/api/auth/invite-anon                            # -> { url, remaining }
+  -d '{"ttlSeconds":86400}' https://qrypt.chat/api/auth/invite-anon                            # -> { url }
 ```
 
 ## Chat with someone who already has an account

package.json

@@ -1,7 +1,7 @@
 {
   "name": "qryptchat-web",
   "private": true,
-  "version": "0.8.0",
+  "version": "0.8.1",
   "type": "module",
   "bin": {
     "qc": "./bin/qc.js",

src/app/api/auth/invite-anon/route.js

@@ -1,7 +1,7 @@
 /**
  * @fileoverview API endpoint that lets a signed-in account mint a single-use
  * anonymous invite for someone else. Mirrors AgentBBS's issuer role, but the
- * issuer is the web app itself (`qryptchat-web`), gated by a per-account quota.
+ * issuer is the web app itself (`qryptchat-web`). There is no per-account limit.
  *
  * Auth: `Authorization: Bearer <supabase access_token>` (anonymous or verified).
  * The minted token is redeemed at /anon?invite=... via /api/auth/register-anon.
@@ -16,9 +16,6 @@ import { mintInviteToken } from '@/lib/invites/mint.js';
 /** Issuer id registered in `invite_issuers` for the web app. */
 const WEB_ISSUER_ID = 'qryptchat-web';
 
-/** Fallback quota if the issuer row has none. */
-const DEFAULT_QUOTA = 5;
-
 /**
  * Build a service-role Supabase client (bypasses RLS).
  * @returns {import('@supabase/supabase-js').SupabaseClient}
@@ -39,20 +36,21 @@ function getBearerToken(authHeader) {
 }
 
 /**
- * GET /api/auth/invite-anon — report remaining quota for the caller.
+ * GET /api/auth/invite-anon — report how many invites the caller has minted.
+ * Invites are unlimited, so `remaining` and `quota` are null.
  * @param {import('next/server').NextRequest} request
  */
 export async function GET(request) {
 	const auth = await authenticate(request);
 	if (auth.error) return auth.error;
 	const { serviceSupabase, authUser } = auth;
 
-	const { quota, used, quotaError } = await getQuota(serviceSupabase, authUser.id);
+	const { used, quotaError } = await getQuota(serviceSupabase, authUser.id);
 	if (quotaError) {
 		console.error('invite-anon: failed to verify invite quota', quotaError);
 		return NextResponse.json({ error: 'Failed to verify invite quota' }, { status: 500 });
 	}
-	return NextResponse.json({ remaining: Math.max(0, quota - used), quota, used });
+	return NextResponse.json({ remaining: null, quota: null, used });
 }
 
 /**
@@ -88,21 +86,15 @@ export async function POST(request) {
 			return NextResponse.json({ error: 'Complete registration before inviting' }, { status: 403 });
 		}
 
-		// --- Enforce the per-account quota ---
-		const { quota, used, issuerDisabled, quotaError } = await getQuota(serviceSupabase, authUser.id);
-		if (quotaError) {
-			console.error('invite-anon: failed to verify invite quota', quotaError);
-			return NextResponse.json({ error: 'Failed to verify invite quota' }, { status: 500 });
-		}
-		if (issuerDisabled) {
+		// --- The issuer can still be switched off as a kill switch ---
+		const { data: issuer } = await serviceSupabase
+			.from('invite_issuers')
+			.select('disabled')
+			.eq('id', WEB_ISSUER_ID)
+			.single();
+		if (issuer?.disabled) {
 			return NextResponse.json({ error: 'Anonymous invites are disabled' }, { status: 503 });
 		}
-		if (used >= quota) {
-			return NextResponse.json(
-				{ error: 'Invite limit reached', code: 'quota_exceeded', quota, used },
-				{ status: 429 }
-			);
-		}
 
 		// --- Optional caller-supplied ttl, clamped to [1h, 30d] ---
 		let ttlSeconds = 7 * 24 * 60 * 60;
@@ -115,7 +107,7 @@ export async function POST(request) {
 			// no body — use default ttl
 		}
 
-		// --- Mint and record the invite (record burns a quota slot) ---
+		// --- Mint and record the invite ---
 		const { token, payload } = mintInviteToken({ seed, iss: WEB_ISSUER_ID, ttlSeconds, uses: 1 });
 
 		const { error: insertError } = await serviceSupabase.from('issued_invites').insert({
@@ -136,7 +128,7 @@ export async function POST(request) {
 			success: true,
 			token,
 			url,
-			remaining: Math.max(0, quota - used - 1)
+			remaining: null
 		});
 	} catch (error) {
 		console.error('invite-anon error:', error);
@@ -168,24 +160,16 @@ async function authenticate(request) {
 }
 
 /**
- * Resolve the caller's quota and current usage.
+ * Count the invites the caller has minted.
  * @param {any} serviceSupabase
  * @param {string} authUserId
- * @returns {Promise<{ quota: number, used: number, issuerDisabled: boolean, quotaError: any }>}
+ * @returns {Promise<{ used: number, quotaError: any }>}
  */
 async function getQuota(serviceSupabase, authUserId) {
-	const { data: issuer } = await serviceSupabase
-		.from('invite_issuers')
-		.select('default_quota, disabled')
-		.eq('id', WEB_ISSUER_ID)
-		.single();
-
-	const quota = issuer?.default_quota ?? DEFAULT_QUOTA;
-
 	const { count, error: countError } = await serviceSupabase
 		.from('issued_invites')
 		.select('jti', { count: 'exact', head: true })
 		.eq('issued_by', authUserId);
 
-	return { quota, used: count ?? 0, issuerDisabled: !!issuer?.disabled, quotaError: countError };
+	return { used: count ?? 0, quotaError: countError };
 }

src/app/api/auth/invite-anon/route.test.js

@@ -93,7 +93,7 @@ describe('GET /api/auth/invite-anon authentication', () => {
     const body = await response.json();
 
     expect(response.status).toBe(200);
-    expect(body).toEqual({ remaining: 4, quota: 5, used: 1 });
+    expect(body).toEqual({ remaining: null, quota: null, used: 1 });
     expect(mocks.authGetUser).toHaveBeenCalledWith('access-token-123');
   });
 
@@ -137,3 +137,63 @@ describe('GET /api/auth/invite-anon authentication', () => {
     expect(body).toEqual({ error: 'Failed to verify invite quota' });
   });
 });
+
+describe('POST /api/auth/invite-anon', () => {
+  beforeEach(() => {
+    vi.resetModules();
+    vi.clearAllMocks();
+    process.env.QRYPT_WEB_ISSUER_SEED = 'test-seed';
+
+    mocks.authGetUser.mockResolvedValue({
+      data: { user: { id: 'auth-user-id' } },
+      error: null
+    });
+    mocks.createSupabaseServerClient.mockResolvedValue({
+      auth: { getUser: mocks.authGetUser }
+    });
+    mocks.createClient.mockReturnValue({ from: mocks.from });
+  });
+
+  function postRequest() {
+    return new Request('https://qrypt.chat/api/auth/invite-anon', {
+      method: 'POST',
+      headers: { authorization: 'Bearer access-token-123' }
+    });
+  }
+
+  function mockTables({ disabled = false } = {}) {
+    const insert = vi.fn().mockResolvedValue({ error: null });
+    mocks.from.mockImplementation((table) => {
+      if (table === 'users') return createSingleQuery({ data: { id: 'user-id' }, error: null });
+      if (table === 'invite_issuers') {
+        return createSingleQuery({ data: { default_quota: 5, disabled }, error: null });
+      }
+      if (table === 'issued_invites') return { insert };
+      throw new Error(`Unexpected table: ${table}`);
+    });
+    return insert;
+  }
+
+  it('mints an invite with no per-account limit', async () => {
+    const insert = mockTables();
+    const { POST } = await import('./route.js');
+
+    const response = await POST(postRequest());
+    const body = await response.json();
+
+    expect(response.status).toBe(200);
+    expect(body).toMatchObject({ success: true, remaining: null });
+    expect(body.url).toBe('https://qrypt.chat/anon?invite=qci1.test-token');
+    expect(insert).toHaveBeenCalledOnce();
+  });
+
+  it('still refuses when the issuer is disabled', async () => {
+    const insert = mockTables({ disabled: true });
+    const { POST } = await import('./route.js');
+
+    const response = await POST(postRequest());
+
+    expect(response.status).toBe(503);
+    expect(insert).not.toHaveBeenCalled();
+  });
+});

src/lib/components/settings/InviteAnon.jsx

@@ -2,16 +2,13 @@
 
 /**
  * @fileoverview Settings panel that lets a signed-in user mint single-use
- * anonymous invite links for other people, subject to a per-account quota.
+ * anonymous invite links for other people. There is no limit.
  */
 
-import { useEffect, useState } from 'react';
+import { useState } from 'react';
 import { useAuthStore } from '@/lib/stores/auth.js';
 
 export default function InviteAnon() {
-	const [remaining, setRemaining] = useState(null);
-	const [quota, setQuota] = useState(null);
-	const [loading, setLoading] = useState(true);
 	const [minting, setMinting] = useState(false);
 	const [link, setLink] = useState('');
 	const [copied, setCopied] = useState(false);
@@ -23,27 +20,6 @@ export default function InviteAnon() {
 		return { Authorization: `Bearer ${session.access_token}` };
 	}
 
-	async function loadQuota() {
-		setLoading(true);
-		setError('');
-		try {
-			const headers = await authHeader();
-			const res = await fetch('/api/auth/invite-anon', { headers });
-			const data = await res.json().catch(() => ({}));
-			if (!res.ok) throw new Error(data.error || 'Failed to load invite quota');
-			setRemaining(data.remaining);
-			setQuota(data.quota);
-		} catch (e) {
-			setError(e.message);
-		} finally {
-			setLoading(false);
-		}
-	}
-
-	useEffect(() => {
-		loadQuota();
-	}, []);
-
 	async function createInvite() {
 		setMinting(true);
 		setError('');
@@ -57,15 +33,8 @@ export default function InviteAnon() {
 				body: JSON.stringify({})
 			});
 			const data = await res.json().catch(() => ({}));
-			if (!res.ok || !data.success) {
-				if (data.code === 'quota_exceeded') {
-					setRemaining(0);
-					throw new Error("You've used all your invites.");
-				}
-				throw new Error(data.error || 'Failed to create invite');
-			}
+			if (!res.ok || !data.success) throw new Error(data.error || 'Failed to create invite');
 			setLink(data.url);
-			setRemaining(data.remaining);
 		} catch (e) {
 			setError(e.message);
 		} finally {
@@ -83,8 +52,6 @@ export default function InviteAnon() {
 		}
 	}
 
-	const outOfInvites = remaining === 0;
-
 	return (
 		<div className="invite-anon">
 			<p className="invite-desc">
@@ -93,43 +60,29 @@ export default function InviteAnon() {
 				them.
 			</p>
 
-			{loading ? (
-				<p className="invite-muted">Loading…</p>
-			) : (
-				<>
-					{remaining !== null && (
-						<p className="invite-quota">
-							{remaining} of {quota} invites remaining
-						</p>
-					)}
+			<button
+				type="button"
+				className="invite-button"
+				onClick={createInvite}
+				disabled={minting}
+			>
+				{minting ? 'Creating…' : 'Create invite link'}
+			</button>
 
-					<button
-						type="button"
-						className="invite-button"
-						onClick={createInvite}
-						disabled={minting || outOfInvites}
-					>
-						{minting ? 'Creating…' : outOfInvites ? 'No invites left' : 'Create invite link'}
+			{link && (
+				<div className="invite-result">
+					<input className="invite-link" type="text" readOnly value={link} onFocus={(e) => e.target.select()} />
+					<button type="button" className="invite-copy" onClick={copyLink}>
+						{copied ? 'Copied!' : 'Copy'}
 					</button>
-
-					{link && (
-						<div className="invite-result">
-							<input className="invite-link" type="text" readOnly value={link} onFocus={(e) => e.target.select()} />
-							<button type="button" className="invite-copy" onClick={copyLink}>
-								{copied ? 'Copied!' : 'Copy'}
-							</button>
-						</div>
-					)}
-				</>
+				</div>
 			)}
 
 			{error && <p className="invite-error">{error}</p>}
 
 			<style>{`
         .invite-anon { display: flex; flex-direction: column; gap: .75rem; }
         .invite-desc { color: var(--color-text-secondary); font-size: .875rem; line-height: 1.5; margin: 0; }
-        .invite-quota { color: var(--color-text-primary); font-weight: 500; font-size: .875rem; margin: 0; }
-        .invite-muted { color: var(--color-text-secondary); font-size: .875rem; margin: 0; }
         .invite-button { padding: .625rem 1rem; background: var(--color-brand-primary); color: #fff; border: none; border-radius: .5rem; font-weight: 500; cursor: pointer; align-self: flex-start; }
         .invite-button:hover:not(:disabled) { background: var(--color-brand-secondary); }
         .invite-button:disabled { opacity: .6; cursor: not-allowed; }