prep for the nook

src/routes/api/the-nook/status.ts

@@ -0,0 +1,51 @@
+import type { APIEvent } from "@solidjs/start/server";
+import { NookConnectionFactory } from "~/server/db-connections";
+import { nookSchemaBootstrap, verifyLicenseKey } from "~/server/nook";
+import { json, error, isUuid } from "./_lib";
+
+/**
+ * POST /api/the-nook/status
+ * Body: { key, deviceFingerprint }
+ *
+ * POST (not GET) because the license key is sensitive in URLs/logs.
+ * Returns the license state: "valid" | "revoked" | "unknown_key" with the
+ * current active activation count (for the 3-seat cap display).
+ */
+export async function POST(event: APIEvent) {
+  let body: unknown;
+  try {
+    body = await event.request.json();
+  } catch {
+    return error("Invalid JSON", 400);
+  }
+  const b = (body ?? {}) as Record<string, unknown>;
+  const key = typeof b.key === "string" ? b.key : "";
+
+  if (!key) {
+    return error("Invalid request", 400);
+  }
+
+  await nookSchemaBootstrap;
+  const conn = NookConnectionFactory();
+
+  const licenseRes = await conn.execute({
+    sql: "SELECT id, revoked FROM licenses WHERE key = ?",
+    args: [key]
+  });
+  if (licenseRes.rows.length === 0) {
+    return json({ state: "unknown_key", activatedCount: 0 });
+  }
+  const license = licenseRes.rows[0] as { id: string; revoked: number };
+
+  if (license.revoked === 1) {
+    return json({ state: "revoked", activatedCount: 0 });
+  }
+
+  const countRes = await conn.execute({
+    sql: "SELECT COUNT(*) AS n FROM activations WHERE license_id = ? AND deactivated_at IS NULL",
+    args: [license.id]
+  });
+  const activatedCount = Number((countRes.rows[0] as { n: number | bigint }).n);
+
+  return json({ state: "valid", activatedCount });
+}