@redeemid/emdash 0.0.4 → 0.0.6

package/README.md

@@ -2,18 +2,21 @@
 
 Shopify customer accounts, member levels and paywalls for [EmDash](https://github.com/emdash-cms/emdash) sites. Shopify runs the store and the customer account; EmDash runs the content.
 
-**Status: 0.0.4, early.** Runs on Node and Cloudflare Workers. Sign-in, the member mirror, webhooks, levels, rules, teasers, badges, the page gate, the Shopify cart and checkout are covered by an end-to-end test against a fake store.
+**Status: 0.0.6, early.** Runs on Node and Cloudflare Workers. Sign-in, the member mirror, webhooks, levels, rules, the meter and drip, teasers, badges, the page gate, the Shopify cart and checkout are covered by an end-to-end test against a fake store.
 
 ## What it does
 
 - **Sign in with the store's customer account.** Members click "Sign in" on your site, sign in on the store's account page and come back signed in. They become EmDash Subscribers. That role only means "signed in"; it never grants content.
 - **Mirrors the customer.** Email, name, tags and enabled/disabled status, kept current by signed Shopify webhooks.
 - **Levels from tags.** You map Shopify customer tags to levels. Set tags in Shopify Flow or any app; RedeemID only reads them.
-- **Rules like RedeemID's on WordPress.** Lock a collection, entries with a term (and its child terms), or set a site default; a term can also open its entries to everyone. When several term rules cover an entry, readers must pass all of them.
+- **Rules.** Lock a collection, entries with a term (and its child terms), or set a site default; a term can also open its entries to everyone. When several term rules cover an entry, readers must pass all of them.
+- **Meter and drip.** Signed-in readers may open a few locked entries free each month or week. A rule can also drip: members read its entries once they've held their level for so many days.
 - **Teasers and badges.** Locked entries can show their first paragraphs, up to a word count. `<AccessBadge>` names the level an entry needs and shows a lock to readers it keeps out.
 - **Plans, cart and checkout.** `<Plan>` shows a Shopify product's price and adds it to the visitor's Shopify cart; `<Cart>` shows the count and opens Shopify checkout.
 - **Account.** Members get an Account link to their Shopify customer account (orders, profile, addresses) and Sign out, which also ends the Shopify session.
 - **Paywall break block.** Editors write one body and drop a "Paywall break" block where members-only content starts, picking which levels may read on, or leaving it to the entry's rule. `<Content>` renders the body and leaves the rest off the page for everyone else.
+- **Members only block.** For a members part in the middle of a body: "Members only" (pick the levels) and "Members only: end". Everyone else sees the wall in its place and reads on after it.
+- **The wall.** Readers kept out see why and what to do next: sign in, or join, with each level's own wall text. `<Notices>` shows the messages sign-in, Buy, Cart and Account send readers back with.
 - **Plan block.** Editors add a Shopify product to any page with the "Plan" block: title, price and a buy button.
 - **In the admin.** RedeemID shows under Plugins with a Members page (Shopify customers, tags, levels), a Status page (secrets, store discovery, the URLs to give Shopify, levels and rules) and a dashboard widget.
 - **Keeps members out of EmDash's own APIs**, so the gate is the only way to read locked content.
@@ -34,7 +37,8 @@ const config = {
 	shop: "my-store.myshopify.com",
 	levels: [
 		{ slug: "member", name: "Member", tags: ["member"] },
-		{ slug: "pro", name: "Pro", tags: ["pro"] },
+		// wall: what the wall says to readers this level would let in; joinUrl overrides join.href.
+		{ slug: "pro", name: "Pro", tags: ["pro"], wall: "Pro members read every report." },
 		// match: "all" needs every tag, e.g. both memberships:
 		{ slug: "both", name: "Member + Pro", tags: ["member", "pro"], match: "all" },
 	],
@@ -42,8 +46,12 @@ const config = {
 		{ collection: "posts", taxonomy: "category", term: "members", levels: ["member", "pro"] },
 		{ collection: "posts", taxonomy: "category", term: "pro", levels: ["pro"] },
 	],
+	// Optional: where the wall's join link goes.
+	join: { href: "/join/", label: "Become a member" },
 	// Optional: locked posts with no paywall break show the paragraphs within their first 40 words.
 	teaser: { posts: 40 },
+	// Optional: signed-in readers may open 3 locked posts a month.
+	meter: { limit: 3, period: "month", collections: ["posts"] },
 };
 
 export default defineConfig({
@@ -90,8 +98,17 @@ Each rule names a collection and the levels, any of which may read. An empty `le
 | `{ collection: "posts", taxonomy: "tag", term: "free-to-read", levels: [], open: true }` | Opens entries with that term to everyone, whatever else covers them |
 | `{ collection: "*", levels: [] }` | The site default, for collections with no rule of their own |
 
+| `{ collection: "posts", taxonomy: "category", term: "archive", levels: ["member"], drip: 30 }` | Drip: members read these entries 30 days after their level started |
+| `{ collection: "posts", taxonomy: "category", term: "exclusive", levels: ["pro"], meter: false }` | The meter never opens these entries |
+
 Term rules beat the collection's rule, which beats the site default. When several term rules cover one entry (a story in Investigations, Gold, and Culture, Silver), readers must pass every one of them, so only Gold + Silver members read it. Set `combine: "any"` to let one of them be enough.
 
+### Meter and drip
+
+The meter lets a signed-in reader who can't read an entry open it anyway, `limit` entries per `period` (`"month"`, the default, or `"week"`, in UTC). Each entry counts once per period, when its own page renders through `<Content>` with an `id`; lists, feeds, search and the content API never count. Visitors get the wall and a nudge to sign in. While it runs, `<Content>` says how many free reads are left; when it runs out, the wall says so. Rules with `meter: false` are never metered, and the meter never opens an entry a member is waiting on by drip.
+
+Drip holds a rule's entries back from members who pass it until they've held their level for `drip` days. A level starts when the customer first had its tag (for a `match: "all"` level, the last of its tags); with several levels the earliest counts, and with none known, the first sign-in. RedeemID notes when each tag first arrives from sign-in and webhooks, and forgets a tag when Shopify removes it. The wall shows the date the entry opens.
+
 ## Use it in templates
 
 EmDash has no content filter hook, so templates decide what to render. Render the entry body with `<Content>` instead of `<PortableText>`:
@@ -100,12 +117,16 @@ EmDash has no content filter hook, so templates decide what to render. Render th
 ---
 import Content from "@redeemid/emdash/components/Content.astro";
 ---
-<Content value={post.data.content} collection="posts" terms={post.data.terms}>
+<Content value={post.data.content} collection="posts" terms={post.data.terms} id={post.id}>
 	<a slot="locked" href="/join/">Become a member</a>
 </Content>
 ```
 
-Everything before the first Paywall break block is shown to everyone. What follows reaches the page only for readers the break allows: the levels picked on it ("Signed in" for any member), or when none are picked the entry's rule. With none picked and no rule covering the entry, the break changes nothing, as on WordPress. A body with no break follows the entry's rule as a whole; readers it keeps out see the collection's `teaser` (the paragraphs within that many words, never half a paragraph), if one is set. Plain `<PortableText>` ignores the break and shows everything, so use `<Content>` for any body that may hold one.
+Everything before the first Paywall break block is shown to everyone. What follows reaches the page only for readers the break allows: the levels picked on it ("Signed in" for any member), or when none are picked the entry's rule. With none picked and no rule covering the entry, the break changes nothing. A body with no break follows the entry's rule as a whole; readers it keeps out see the collection's `teaser` (the paragraphs within that many words, never half a paragraph), if one is set. Plain `<PortableText>` ignores the break and shows everything, so use `<Content>` for any body that may hold one.
+
+A "Members only" block starts a part for the levels picked on it (none picked: the entry's rule, or any signed-in member) that runs to the next "Members only: end" block. Readers who can't read it see the wall there, and the body goes on after the end block.
+
+The wall is `<LockedPanel>`: it says why the reader is kept out and offers sign-in or the join link, with the wall text of the first level they are missing. `<Content>` and `<Gate>` show it; its default slot (and `<Content>`'s "locked" slot) goes on top.
 
 To lock a part of a template that isn't the body, wrap it in `<Gate>` (`<Gate levels={["pro"]}>…</Gate>`).
 
@@ -118,7 +139,9 @@ import AccessBadge from "@redeemid/emdash/components/AccessBadge.astro";
 <AccessBadge collection="posts" terms={post.data.terms} content={post.data.content} />
 ```
 
-In your own code (`@redeemid/emdash/access`), `entryRequirement(config, collection, terms)` gives what an entry needs (a list of clauses, each passed by any of its levels, or `null` when open), and `canRead(Astro, entry)` gives the verdict for the visitor.
+In your own code (`@redeemid/emdash/access`), `entryRequirement(config, collection, terms)` gives what an entry needs (a list of clauses, each passed by any of its levels, or `null` when open), `canRead(Astro, entry)` gives the verdict for the visitor, and `readEntry(Astro, { collection, terms, id })` gives it with drip and the meter applied (and counts a metered read).
+
+Put `<Notices />` near the top of your layout. It shows the message for a `?redeemid_notice=` code (see [docs/shopify-setup.md](docs/shopify-setup.md)) and nothing otherwise; pass `messages={{ cart_empty: "…" }}` to reword one.
 
 Add the account box and cart to your header. Visitors see Sign in; members see their name, levels, Account and Sign out. The cart shows how many items are in the visitor's Shopify cart and goes to its checkout:
 
@@ -149,6 +172,7 @@ import { canRead } from "@redeemid/emdash/access";
 
 const verdict = await canRead(Astro, { collection: "posts", terms: post.data.terms });
 // verdict.allowed, verdict.reason: open | allowed | sign_in | upgrade | disabled
+// readEntry() adds drip (verdict.opensAt) and metered (verdict.meterLeft)
 ```
 
 Pages rendered for a signed-in member are sent with `Cache-Control: private, no-store`; pages for visitors stay cacheable.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@redeemid/emdash",
-	"version": "0.0.4",
+	"version": "0.0.6",
 	"description": "Shopify customer accounts, member levels and paywalls for EmDash sites. Shopify runs commerce; EmDash runs content.",
 	"type": "module",
 	"license": "MIT",

package/src/access.ts

@@ -32,7 +32,7 @@ export interface Viewer {
 	levels: string[];
 }
 
-export type Reason = "open" | "allowed" | "sign_in" | "upgrade" | "disabled" | "unconfigured";
+export type Reason = "open" | "allowed" | "sign_in" | "upgrade" | "disabled" | "unconfigured" | "drip" | "metered";
 
 /**
  * What an entry needs, in conjunctive form: every clause must pass, and a
@@ -42,7 +42,7 @@ export type Reason = "open" | "allowed" | "sign_in" | "upgrade" | "disabled" | "
 export type Requirement = string[][] | null;
 
 /**
- * The built-in level every signed-in member holds, as on WordPress. A clause
+ * The built-in level every signed-in member holds. A clause
  * with it passes for any signed-in member, like an empty clause.
  */
 export const SIGNED_IN = "signed-in";
@@ -53,6 +53,12 @@ export interface Verdict {
 	/** What the entry needs (see Requirement). `[]` when it is open. */
 	required: string[][];
 	viewer: Viewer;
+	/** For "drip": when the entry opens for this member. */
+	opensAt?: Date;
+	/** For "metered", and for a locked "upgrade" when a meter runs: free entries left this period. */
+	meterLeft?: number;
+	/** The meter's size and period, when one ran. */
+	meter?: { limit: number; period: "month" | "week" };
 }
 
 /** A term as EmDash hydrates it onto an entry, or just its slug. */
@@ -102,26 +108,14 @@ function combined(rules: RuleConfig[], mode: "all" | "any"): string[][] {
 	return reduce(rules.map((r) => r.levels));
 }
 
-/**
- * What an entry needs (see Requirement), from the site's rules.
- *
- * Each term the entry carries is walked up its taxonomy (with `tree`) to the
- * nearest term that has a rule, so a child term takes its parent's rule unless
- * it has its own. Any matching `open` rule opens the entry.
- */
-export function requirement(
-	rules: RuleConfig[] = [],
-	collection: string,
-	terms: Terms = {},
-	options: { combine?: "all" | "any"; tree?: TermTree } = {},
-): Requirement {
-	const mode = options.combine ?? "all";
+/** The rules that decide an entry: matching term rules, else the collection's, else the site default. */
+function deciding(rules: RuleConfig[], collection: string, terms: Terms, tree?: TermTree): RuleConfig[] | "open" {
 	const forCollection = rules.filter((r) => r.collection === collection);
 	const matched: RuleConfig[] = [];
 	for (const [taxonomy, list] of Object.entries(terms)) {
 		const taxRules = forCollection.filter((r) => r.taxonomy === taxonomy && r.term);
 		if (taxRules.length === 0) continue;
-		const parents = options.tree?.[taxonomy] ?? {};
+		const parents = tree?.[taxonomy] ?? {};
 		for (const ref of list ?? []) {
 			let slug: string | null = slugOf(ref);
 			const seen = new Set<string>();
@@ -136,13 +130,87 @@ export function requirement(
 			}
 		}
 	}
-	if (matched.some((r) => r.open)) return null;
-	if (matched.length > 0) return combined(matched, mode);
+	if (matched.some((r) => r.open)) return "open";
+	if (matched.length > 0) return matched;
 	const whole = forCollection.filter((r) => !r.taxonomy && !r.term && !r.open);
-	if (whole.length > 0) return combined(whole, mode);
-	const site = rules.filter((r) => r.collection === "*" && !r.taxonomy && !r.term && !r.open);
-	if (site.length > 0) return combined(site, mode);
-	return null;
+	if (whole.length > 0) return whole;
+	return rules.filter((r) => r.collection === "*" && !r.taxonomy && !r.term && !r.open);
+}
+
+/**
+ * What an entry needs (see Requirement), from the site's rules.
+ *
+ * Each term the entry carries is walked up its taxonomy (with `tree`) to the
+ * nearest term that has a rule, so a child term takes its parent's rule unless
+ * it has its own. Any matching `open` rule opens the entry.
+ */
+export function requirement(
+	rules: RuleConfig[] = [],
+	collection: string,
+	terms: Terms = {},
+	options: { combine?: "all" | "any"; tree?: TermTree } = {},
+): Requirement {
+	const found = deciding(rules, collection, terms, options.tree);
+	if (found === "open" || found.length === 0) return null;
+	return combined(found, options.combine ?? "all");
+}
+
+/** Days of membership the entry's deciding rules ask for (the largest drip), or 0. */
+export function dripDays(rules: RuleConfig[] = [], collection: string, terms: Terms = {}, tree?: TermTree): number {
+	const found = deciding(rules, collection, terms, tree);
+	if (found === "open") return 0;
+	return Math.max(0, ...found.map((r) => (typeof r.drip === "number" && r.drip > 0 ? r.drip : 0)));
+}
+
+/** May the meter open the entry? Not when a deciding rule says `meter: false`. */
+export function meterable(rules: RuleConfig[] = [], collection: string, terms: Terms = {}, tree?: TermTree): boolean {
+	const found = deciding(rules, collection, terms, tree);
+	return found === "open" || !found.some((r) => r.meter === false);
+}
+
+/**
+ * When a member's membership started, for drip: the earliest start among the
+ * levels they hold now (a level starts when its last needed tag arrived),
+ * else when they first signed in. Null when neither is known.
+ */
+export function memberSince(member: MemberRecord, levels: LevelConfig[] = []): string | null {
+	const since = member.tagsSince ?? {};
+	const starts: string[] = [];
+	for (const slug of levelsFor(member.tags, levels)) {
+		const level = levels.find((l) => l.slug === slug);
+		const dates = (level?.tags ?? []).map((t) => since[t.toLowerCase()]).filter((d): d is string => Boolean(d)).sort();
+		if (dates.length === 0) continue;
+		const pick = level?.match === "all" ? dates[dates.length - 1] : dates[0];
+		if (pick) starts.push(pick);
+	}
+	starts.sort();
+	return starts[0] ?? member.linkedAt ?? null;
+}
+
+/** When drip opens an entry for this member: `since` plus `days`. */
+export function dripOpensAt(since: string | null, days: number): Date | null {
+	if (!since || days <= 0) return null;
+	const t = Date.parse(since);
+	return Number.isNaN(t) ? null : new Date(t + days * 86_400_000);
+}
+
+/** The meter period an instant falls in: "2026-11", or ISO week "2026-W45". UTC. */
+export function periodKey(at: Date, period: "month" | "week" = "month"): string {
+	if (period === "month") return `${at.getUTCFullYear()}-${String(at.getUTCMonth() + 1).padStart(2, "0")}`;
+	const d = new Date(Date.UTC(at.getUTCFullYear(), at.getUTCMonth(), at.getUTCDate()));
+	const day = d.getUTCDay() || 7;
+	d.setUTCDate(d.getUTCDate() + 4 - day);
+	const yearStart = Date.UTC(d.getUTCFullYear(), 0, 1);
+	const week = Math.ceil(((d.getTime() - yearStart) / 86_400_000 + 1) / 7);
+	return `${d.getUTCFullYear()}-W${String(week).padStart(2, "0")}`;
+}
+
+/** Count `id` against a meter: an item already counted stays free; a new one needs room. Pure. */
+export function consume(items: string[], id: string, limit: number): { allowed: boolean; items: string[]; left: number } {
+	if (items.includes(id)) return { allowed: true, items, left: Math.max(0, limit - items.length) };
+	if (items.length >= limit) return { allowed: false, items, left: 0 };
+	const next = [...items, id];
+	return { allowed: true, items: next, left: limit - next.length };
 }
 
 /** Does someone holding `held` pass `required`? Signed-in membership is checked by the caller. */
@@ -290,3 +358,60 @@ export function accountUrl(returnTo = "/"): string {
 export function signOutUrl(returnTo = "/"): string {
 	return `/_emdash/api/auth/redeemid/logout?return=${encodeURIComponent(safeReturn(returnTo))}`;
 }
+
+/**
+ * The entry's verdict with drip and the meter applied, for the entry's own
+ * page. Drip narrows a granted verdict; the meter opens a locked one for a
+ * signed-in reader while the period has room, and never opens a drip entry.
+ */
+export async function readEntry(
+	astro: AstroLike,
+	entry: { collection: string; terms?: Terms; id?: string },
+	override?: { required: string[][] },
+): Promise<Verdict> {
+	const verdict = await canRead(astro, entry, override);
+	const locals = astro.locals as Locals;
+	const config = siteConfig(locals.emdash?.config);
+	if (!config) return verdict;
+
+	if (verdict.allowed && verdict.reason === "allowed" && verdict.viewer.member) {
+		const tree = await termTree(config.rules, entry.collection, entry.terms);
+		const days = dripDays(config.rules, entry.collection, entry.terms, tree);
+		const opensAt = dripOpensAt(memberSince(verdict.viewer.member, config.levels), days);
+		if (days > 0 && (!opensAt || opensAt.getTime() > Date.now())) {
+			return { ...verdict, allowed: false, reason: "drip", opensAt: opensAt ?? undefined };
+		}
+		return verdict;
+	}
+
+	const meter = config.meter;
+	const user = locals.user;
+	const db = locals.emdash?.db;
+	if (
+		verdict.reason !== "upgrade" ||
+		!meter ||
+		!(meter.limit > 0) ||
+		!entry.id ||
+		!user?.id ||
+		!db ||
+		(meter.collections && !meter.collections.includes(entry.collection))
+	) {
+		return verdict;
+	}
+	if (!meterable(config.rules, entry.collection, entry.terms, await termTree(config.rules, entry.collection, entry.terms))) {
+		return verdict;
+	}
+	const period = meter.period ?? "month";
+	const key = `${user.id}:${periodKey(new Date(), period)}`;
+	try {
+		const s = stores(db);
+		const record = (await s.meter.get(key)) ?? { userId: user.id, period: periodKey(new Date(), period), items: [] };
+		const used = consume(record.items, `${entry.collection}:${entry.id}`, meter.limit);
+		const info = { limit: meter.limit, period };
+		if (!used.allowed) return { ...verdict, meterLeft: 0, meter: info };
+		if (used.items !== record.items) await s.meter.put(key, { ...record, items: used.items });
+		return { ...verdict, allowed: true, reason: "metered", meterLeft: used.left, meter: info };
+	} catch {
+		return verdict;
+	}
+}

package/src/blocks/PaywallBreak.astro

@@ -1,6 +1,7 @@
 ---
 /**
- * The paywall break itself renders nothing. <Content> splits the body here
- * and leaves out what follows for readers who can't read it.
+ * RedeemID's marker blocks (Paywall break, Members only and its end) render
+ * nothing themselves. <Content> splits the body at them and leaves out what
+ * readers can't read.
  */
 ---

package/src/blocks/index.ts

@@ -2,10 +2,12 @@
  * Site-side renderers for RedeemID's Portable Text blocks, picked up by
  * EmDash from the plugin's `componentsEntry`.
  */
-import PaywallBreak from "./PaywallBreak.astro";
+import Marker from "./PaywallBreak.astro";
 import PlanBlock from "./PlanBlock.astro";
 
 export const blockComponents = {
-	"redeemid-paywall": PaywallBreak,
+	"redeemid-paywall": Marker,
+	"redeemid-members": Marker,
+	"redeemid-members-end": Marker,
 	"redeemid-plan": PlanBlock,
 };

package/src/blocks-names.ts

@@ -1,6 +1,9 @@
 /** Portable Text block types RedeemID adds to the editor. */
 export const PAYWALL_BLOCK = "redeemid-paywall";
 export const PLAN_BLOCK = "redeemid-plan";
+/** Starts a members-only part of the body; it runs to the next end block. */
+export const MEMBERS_BLOCK = "redeemid-members";
+export const MEMBERS_END_BLOCK = "redeemid-members-end";
 
 type Node = { _type?: unknown; levels?: unknown };
 
@@ -26,7 +29,7 @@ export function splitAtPaywall<T>(value: T[] | null | undefined): {
 type TextNode = { _type?: unknown; children?: Array<{ text?: unknown }> };
 
 /**
- * The text blocks within the first `words` words of a body, as on WordPress:
+ * The text blocks within the first `words` words of a body:
  * a block is never cut in half, so a block that would pass the count ends the
  * teaser. Images and custom blocks are left out. 0 gives nothing.
  */
@@ -44,3 +47,39 @@ export function teaser<T>(value: T[] | null | undefined, words: number): T[] {
 	}
 	return out;
 }
+
+export interface Section<T> {
+	/** True for a part between a "Members only" block and its end. */
+	members: boolean;
+	/** Levels picked on the "Members only" block (empty = none picked). */
+	levels: string[];
+	blocks: T[];
+}
+
+const levelsOf = (raw: unknown) =>
+	Array.isArray(raw) ? raw.filter((l): l is string => typeof l === "string" && l !== "") : [];
+
+/**
+ * Split blocks into open parts and members-only parts. A "Members only" block
+ * starts a part that runs to the next "Members only: end" block (or the end of
+ * the blocks); the marker blocks themselves are dropped. A stray end block is
+ * dropped too.
+ */
+export function sections<T>(value: T[] | null | undefined): Section<T>[] {
+	const out: Section<T>[] = [];
+	let current: Section<T> = { members: false, levels: [], blocks: [] };
+	for (const b of Array.isArray(value) ? value : []) {
+		const type = (b as Node)?._type;
+		if (type === MEMBERS_BLOCK || type === MEMBERS_END_BLOCK) {
+			if (current.blocks.length > 0 || current.members) out.push(current);
+			current =
+				type === MEMBERS_BLOCK
+					? { members: true, levels: levelsOf((b as Node).levels), blocks: [] }
+					: { members: false, levels: [], blocks: [] };
+			continue;
+		}
+		current.blocks.push(b);
+	}
+	if (current.blocks.length > 0 || current.members) out.push(current);
+	return out;
+}

package/src/components/AccessBadge.astro

@@ -1,7 +1,7 @@
 ---
 /**
  * The level an entry needs, read from its rules (and from a paywall break
- * with levels), like the Access Badge block on WordPress:
+ * with levels):
  *
  *   <AccessBadge collection="posts" terms={post.data.terms} content={post.data.content} />
  *

package/src/components/Content.astro

@@ -1,60 +1,108 @@
 ---
 /**
- * An entry's body, with RedeemID's paywall break applied.
+ * An entry's body, with RedeemID's blocks applied.
  *
- *   <Content value={post.data.content} collection="posts" terms={post.data.terms} />
+ *   <Content value={post.data.content} collection="posts" terms={post.data.terms} id={post.id} />
  *
- * Everything before the first "Paywall break" block is shown to everyone.
- * What follows reaches the page only for readers who may read it: the levels
- * picked on the break, or when none are picked the entry's rule (with no rule,
- * the break changes nothing, as on WordPress). Others get the "locked" slot (or a built-in notice).
- * A body with no break follows the entry's rule as a whole; readers who can't
- * read it see the collection's teaser (config `teaser`, in words), if any.
+ * - "Paywall break": everything before the first one is shown to everyone.
+ *   What follows reaches the page only for readers who may read it: the
+ *   levels picked on the break, or when none are picked the entry's rule
+ *   (with no rule, the break changes nothing).
+ * - "Members only" … "Members only: end": the part between is for the levels
+ *   picked on the start block, or the entry's rule, or any signed-in member.
+ *   Readers who can't read it see the wall in its place, and the body goes on.
+ * - No break: the entry's rule covers the whole body; readers it keeps out see
+ *   the collection's teaser (config `teaser`, in words), if any.
+ *
+ * Readers kept out get the wall (LockedPanel), with the "locked" slot on top.
+ *
+ * Pass `id` on the entry's own page so drip and the meter apply: a rule's
+ * `drip` keeps it shut until the member has held their level that many days,
+ * and config `meter` lets signed-in readers open a few locked entries each
+ * period (each entry counts once). Leave `id` off in lists.
  */
 import { PortableText } from "emdash/ui";
 
-import { canRead, entryRequirement, signInUrl, type Terms } from "../access.js";
-import { splitAtPaywall, teaser } from "../blocks-names.js";
+import { canRead, entryRequirement, readEntry, type Terms, type Verdict } from "../access.js";
+import { sections, splitAtPaywall, teaser } from "../blocks-names.js";
 import { siteConfig } from "../site-config.js";
+import LockedPanel from "./LockedPanel.astro";
 
 interface Props {
 	value?: unknown[] | null;
 	collection?: string;
 	terms?: Terms;
+	/** The entry's id, on its own page: turns on drip and the meter. */
+	id?: string;
 }
 
-const { value, collection = "", terms } = Astro.props;
+const { value, collection = "", terms, id } = Astro.props;
 const split = splitAtPaywall(value);
 const config = siteConfig((Astro.locals as { emdash?: { config?: unknown } }).emdash?.config);
+const entryRule = await entryRequirement(config, collection, terms);
 // A break with levels picked locks the rest to them; with none picked it
 // follows the entry's rule, and does nothing when no rule covers the entry.
-const required = split.paywall
-	? split.levels.length
-		? [split.levels]
-		: await entryRequirement(config, collection, terms)
-	: undefined;
-const verdict =
+const required = split.paywall ? (split.levels.length ? [split.levels] : entryRule) : undefined;
+const verdict: Verdict | { allowed: true; reason: "open" } =
 	split.paywall && required === null
-		? { allowed: true, reason: "open" as const }
-		: await canRead(Astro, { collection, terms }, required ? { required } : undefined);
+		? { allowed: true, reason: "open" }
+		: id
+			? await readEntry(Astro, { collection, terms, id }, required ? { required } : undefined)
+			: await canRead(Astro, { collection, terms }, required ? { required } : undefined);
 const words = config?.teaser?.[collection] ?? 0;
 const shown = split.paywall ? split.open : verdict.allowed ? split.open : teaser(split.open, words);
-const here = Astro.url.pathname + Astro.url.search;
+const rest = verdict.allowed ? split.locked : [];
+
+// Each "Members only" part gets its own verdict.
+async function parts(blocks: unknown[]) {
+	const out: Array<{ blocks: unknown[]; verdict?: Verdict }> = [];
+	for (const section of sections(blocks)) {
+		if (!section.members) {
+			out.push({ blocks: section.blocks });
+			continue;
+		}
+		const needs = section.levels.length ? [section.levels] : (entryRule ?? [[]]);
+		out.push({ blocks: section.blocks, verdict: await canRead(Astro, { collection, terms }, { required: needs }) });
+	}
+	return out;
+}
+const before = await parts(shown);
+const after = await parts(rest);
+const metered = verdict.reason === "metered" ? (verdict as Verdict) : null;
+const per = metered?.meter?.period === "week" ? "this week" : "this month";
 ---
 
-{shown.length > 0 && <PortableText value={shown} />}
+{metered && (
+	<p class="redeemid-meter" role="status" data-redeemid-left={metered.meterLeft}>
+		{metered.meterLeft === 0
+			? `This is your last free read ${per}.`
+			: `You have ${metered.meterLeft} free ${metered.meterLeft === 1 ? "read" : "reads"} left ${per}.`}
+	</p>
+)}
+{before.map((p) =>
+	!p.verdict || p.verdict.allowed ? (
+		p.blocks.length > 0 && <PortableText value={p.blocks} />
+	) : (
+		<LockedPanel reason={p.verdict.reason} required={p.verdict.required} held={p.verdict.viewer.levels} />
+	),
+)}
 {verdict.allowed ? (
-	split.locked.length > 0 && <PortableText value={split.locked} />
+	after.map((p) =>
+		!p.verdict || p.verdict.allowed ? (
+			p.blocks.length > 0 && <PortableText value={p.blocks} />
+		) : (
+			<LockedPanel reason={p.verdict.reason} required={p.verdict.required} held={p.verdict.viewer.levels} />
+		),
+	)
 ) : (
-	<div class="redeemid-locked" data-redeemid-reason={verdict.reason}>
+	<LockedPanel
+		reason={verdict.reason}
+		required={verdict.required}
+		held={verdict.viewer.levels}
+		opensAt={verdict.opensAt}
+		meterLeft={verdict.meterLeft}
+		meterPeriod={verdict.meter?.period}
+	>
 		<slot name="locked" />
-		{verdict.reason === "sign_in" && (
-			<p>
-				This is for members. <a href={signInUrl(here)}>Sign in</a> to read on.
-			</p>
-		)}
-		{verdict.reason === "upgrade" && <p>Your membership doesn't include the rest of this yet.</p>}
-		{verdict.reason === "disabled" && <p>Your account is turned off. Contact the store for help.</p>}
-		{verdict.reason === "unconfigured" && <p>This is for members.</p>}
-	</div>
+	</LockedPanel>
 )}

package/src/components/Gate.astro

@@ -10,7 +10,8 @@
  *
  * Pass `levels` to lock a part of a page to specific levels instead.
  */
-import { canRead, signInUrl, type Terms } from "../access.js";
+import { canRead, type Terms } from "../access.js";
+import LockedPanel from "./LockedPanel.astro";
 
 interface Props {
 	collection?: string;
@@ -20,21 +21,12 @@ interface Props {
 
 const { collection = "", terms, levels } = Astro.props;
 const verdict = await canRead(Astro, { collection, terms }, levels ? { levels } : undefined);
-const here = Astro.url.pathname + Astro.url.search;
 ---
 
 {verdict.allowed ? (
 	<slot />
 ) : (
-	<div class="redeemid-locked" data-redeemid-reason={verdict.reason}>
+	<LockedPanel reason={verdict.reason} required={verdict.required} held={verdict.viewer.levels}>
 		<slot name="locked" />
-		{verdict.reason === "sign_in" && (
-			<p>
-				This is for members. <a href={signInUrl(here)}>Sign in</a> to read it.
-			</p>
-		)}
-		{verdict.reason === "upgrade" && <p>Your membership doesn't include this yet.</p>}
-		{verdict.reason === "disabled" && <p>Your account is turned off. Contact the store for help.</p>}
-		{verdict.reason === "unconfigured" && <p>This is for members.</p>}
-	</div>
+	</LockedPanel>
 )}

package/src/components/LockedPanel.astro

@@ -0,0 +1,64 @@
+---
+/**
+ * The wall readers see in place of what they can't read: why, and what to do
+ * next (sign in, or join). <Content> and <Gate> show it; use it directly for
+ * your own locked parts.
+ *
+ * The level it offers is the first one the reader is missing. Its `wall` text
+ * and `joinUrl` come from the level's config, the join link from `join`.
+ * Anything in the default slot is shown above the built-in text.
+ */
+import { passes, signInUrl, type Reason } from "../access.js";
+import { siteConfig } from "../site-config.js";
+
+interface Props {
+	reason: Reason;
+	/** What the locked part needs (Verdict.required). */
+	required?: string[][];
+	/** Levels the reader holds (Verdict.viewer.levels). */
+	held?: string[];
+	/** For "drip": when it opens (Verdict.opensAt). */
+	opensAt?: Date;
+	/** Free reads left when a meter ran (Verdict.meterLeft); 0 shows the meter-used text. */
+	meterLeft?: number;
+	meterPeriod?: "month" | "week";
+}
+
+const { reason, required = [], held = [], opensAt, meterLeft, meterPeriod } = Astro.props;
+const opens = opensAt
+	? new Intl.DateTimeFormat("en-US", { dateStyle: "long", timeZone: "UTC" }).format(opensAt)
+	: null;
+const config = siteConfig((Astro.locals as { emdash?: { config?: unknown } }).emdash?.config);
+const missing = required.find((clause) => clause.length > 0 && !passes(held, [clause]));
+const level = missing ? config?.levels?.find((l) => l.slug === missing[0]) : undefined;
+const joinHref = level?.joinUrl ?? config?.join?.href;
+const joinLabel = config?.join?.label ?? "Become a member";
+const here = Astro.url.pathname + Astro.url.search;
+---
+
+<div class="redeemid-locked" data-redeemid-reason={reason} data-redeemid-level={level?.slug}>
+	<slot />
+	{level?.wall && (reason === "sign_in" || reason === "upgrade") && <p class="redeemid-locked__wall">{level.wall}</p>}
+	{reason === "sign_in" && (
+		<p>
+			This is for members. <a href={signInUrl(here)}>Sign in</a> to read on.
+			{joinHref && <> Not a member yet? <a href={joinHref}>{joinLabel}</a>.</>}
+		</p>
+	)}
+	{reason === "upgrade" && meterLeft === 0 && (
+		<p class="redeemid-locked__meter">You've used your free reads {meterPeriod === "week" ? "this week" : "this month"}.</p>
+	)}
+	{reason === "drip" && (
+		<p>
+			{opens ? <>This opens for you on <time datetime={opensAt?.toISOString()}>{opens}</time>.</> : "This opens for you after you've been a member a little longer."}
+		</p>
+	)}
+	{reason === "upgrade" && (
+		<p>
+			{level ? `This is for ${level.name} members.` : "Your membership doesn't include this yet."}
+			{joinHref && <> <a href={joinHref}>{joinLabel}</a></>}
+		</p>
+	)}
+	{reason === "disabled" && <p>Your account is turned off. Contact the store for help.</p>}
+	{reason === "unconfigured" && <p>This is for members.</p>}
+</div>

package/src/components/Notices.astro

@@ -0,0 +1,36 @@
+---
+/**
+ * The message for a `?redeemid_notice=` code that sign-in, Buy, Cart and
+ * Account send readers back with. Renders nothing without one. Pass
+ * `messages` to reword any of them.
+ */
+interface Props {
+	messages?: Record<string, string>;
+}
+
+const DEFAULTS: Record<string, string> = {
+	not_configured: "Sign-in isn't set up on this site yet.",
+	sign_in_unavailable: "Sign-in isn't available right now. Try again in a few minutes.",
+	sign_in_expired: "That sign-in took too long. Try again.",
+	staff_account: "This account can't sign in here. Use a different email.",
+	site_not_ready: "This site isn't ready for sign-in yet.",
+	email_required: "Your account needs an email address to sign in.",
+	token_failed: "Sign-in didn't finish. Try again.",
+	bad_id_token: "Sign-in didn't finish. Try again.",
+	identity_failed: "Sign-in didn't finish. Try again.",
+	plan_unavailable: "That plan isn't available right now.",
+	checkout_failed: "Checkout didn't open. Try again.",
+	cart_empty: "Your cart is empty.",
+	account_unavailable: "Your account page isn't available right now. Try again in a few minutes.",
+};
+
+const { messages = {} } = Astro.props;
+const code = Astro.url.searchParams.get("redeemid_notice") ?? "";
+const text = code ? (messages[code] ?? DEFAULTS[code]) : undefined;
+---
+
+{text && (
+	<div class="redeemid-notice" role="status" data-redeemid-notice={code}>
+		<p>{text}</p>
+	</div>
+)}

package/src/config.ts

@@ -15,10 +15,14 @@ export interface LevelConfig {
 	tags: string[];
 	/** "any" (default): one of the tags is enough. "all": every tag is needed. */
 	match?: "any" | "all";
+	/** What the wall says to readers this level would let in, e.g. "Gold members read every investigation." */
+	wall?: string;
+	/** Where the wall's join link goes for this level. Falls back to `join.href`. */
+	joinUrl?: string;
 }
 
 /**
- * Who may read entries, like RedeemID's content rules on WordPress:
+ * Who may read entries:
  *
  * - A rule with `taxonomy` and `term` covers entries that carry that term, or
  *   a child of it in a hierarchical taxonomy (a child's own rule wins over its
@@ -41,9 +45,30 @@ export interface RuleConfig {
 	levels: string[];
 	/**
 	 * A term rule that opens its entries to everyone, whatever else covers them
-	 * ("Opens" on WordPress). `levels` is ignored.
+	 * `levels` is ignored.
 	 */
 	open?: boolean;
+	/**
+	 * Drip: readers who pass the rule may read its entries only once they have
+	 * been members this many days (from when they first held a level they
+	 * hold now, or else when they first signed in).
+	 */
+	drip?: number;
+	/** `false`: the meter never opens this rule's entries. */
+	meter?: false;
+}
+
+/**
+ * The meter: signed-in readers without access may open a few locked entries
+ * free each month (or week). Guests get the wall; an entry counts once per
+ * period, when its own page renders through <Content> with an `id`.
+ */
+export interface MeterConfig {
+	/** Free entries per period. */
+	limit: number;
+	period?: "month" | "week";
+	/** Collections the meter covers. All of them when left out. */
+	collections?: string[];
 }
 
 export interface RedeemIDConfig {
@@ -57,6 +82,9 @@ export interface RedeemIDConfig {
 	label?: string;
 	levels?: LevelConfig[];
 	rules?: RuleConfig[];
+	meter?: MeterConfig;
+	/** The wall's join link: where readers become members, e.g. { href: "/join/", label: "Become a member" }. */
+	join?: { href: string; label?: string };
 	/**
 	 * How several term rules on one entry combine: "all" (default, the most
 	 * restrictive: pass every rule) or "any" (pass one of them).

package/src/plugin.ts

@@ -6,14 +6,17 @@
  *     plugins: [redeemidPlugin(config)],
  *   })
  *
- * It adds two Portable Text blocks to the editor, a Members page, a Status
+ * It adds four Portable Text blocks to the editor, a Members page, a Status
  * page and a dashboard widget. Sign-in, webhooks and checkout stay on the
  * auth provider's routes.
  *
  * - "Paywall break" (`redeemid-paywall`): everything after it in the body is
  *   for members. Pick the levels that may read on ("Signed in" for any
  *   member); none picked means the entry's rule, and nothing is locked when
- *   no rule covers the entry, as on WordPress.
+ *   no rule covers the entry.
+ * - "Members only" (`redeemid-members`) and "Members only: end"
+ *   (`redeemid-members-end`): the part between is for the levels picked on
+ *   the start block; everyone else sees the wall there and reads on after.
  * - "Plan" (`redeemid-plan`): a Shopify product's title and price with a
  *   button that adds it to the cart and opens checkout.
  *
@@ -31,9 +34,9 @@ import { stores, type MemberRecord } from "./storage.js";
 import { PAGES, WIDGETS } from "./descriptor.js";
 import { VERSION } from "./version.js";
 
-import { PAYWALL_BLOCK, PLAN_BLOCK } from "./blocks-names.js";
+import { MEMBERS_BLOCK, MEMBERS_END_BLOCK, PAYWALL_BLOCK, PLAN_BLOCK } from "./blocks-names.js";
 
-export { PAYWALL_BLOCK, PLAN_BLOCK };
+export { MEMBERS_BLOCK, MEMBERS_END_BLOCK, PAYWALL_BLOCK, PLAN_BLOCK };
 
 function blocks(config: RedeemIDConfig) {
 	const levelOptions = [
@@ -55,6 +58,27 @@ function blocks(config: RedeemIDConfig) {
 				},
 			],
 		},
+		{
+			type: MEMBERS_BLOCK,
+			label: "Members only",
+			icon: "users",
+			description: "What follows, up to \"Members only: end\", is for members",
+			fields: [
+				{
+					type: "checkbox" as const,
+					action_id: "levels",
+					label: "Who can read it (none = the entry's rule, or any signed-in member)",
+					options: levelOptions,
+				},
+			],
+		},
+		{
+			type: MEMBERS_END_BLOCK,
+			label: "Members only: end",
+			icon: "users",
+			description: "Ends the members-only part; everyone reads on from here",
+			fields: [],
+		},
 		{
 			type: PLAN_BLOCK,
 			label: "Plan",
@@ -257,6 +281,7 @@ async function statusPage(config: RedeemIDConfig, request: Request) {
 						columns: [
 							{ key: "where", label: "Covers" },
 							{ key: "levels", label: "Who can read" },
+							{ key: "extra", label: "Drip and meter" },
 						],
 						rows: rules.map((r) => ({
 							where:
@@ -266,9 +291,16 @@ async function statusPage(config: RedeemIDConfig, request: Request) {
 										? "Site default (collections with no rule)"
 										: `All ${r.collection}`,
 							levels: r.open ? "Everyone (opens the entry)" : r.levels.length ? describe([r.levels], levels) : "Any signed-in member",
+							extra: [r.drip ? `Opens ${r.drip} days into membership` : "", r.meter === false ? "Never metered" : ""].filter(Boolean).join("; "),
 						})),
 					}
 				: { type: "context", text: "No rules. Entries are open unless their body has a paywall break." },
+			{
+				type: "context",
+				text: config.meter?.limit
+					? `Meter: signed-in readers may open ${config.meter.limit} locked ${config.meter.limit === 1 ? "entry" : "entries"} a ${config.meter.period ?? "month"}${config.meter.collections?.length ? ` (${config.meter.collections.join(", ")})` : ""}.`
+					: "Meter: off.",
+			},
 		],
 	};
 }

package/src/routes/callback.ts

@@ -17,7 +17,7 @@ import type { Kysely } from "kysely";
 
 import { env, ENV, PROVIDER_ID, readConfig, storeDomain } from "../config.js";
 import { discover, exchangeCode, identity, ShopifyError, verifyIdToken } from "../shopify.js";
-import { emptyMember, stores } from "../storage.js";
+import { emptyMember, stampTags, stores } from "../storage.js";
 import { callbackUrl, fail, FLOW_TTL_MS, SESSION_FLOW, SESSION_ID_TOKEN, type Flow } from "./shared.js";
 
 export const prerender = false;
@@ -83,16 +83,24 @@ export const GET: APIRoute = async ({ request, locals, session, redirect }) => {
 
 		const s = stores(emdash.db);
 		const member = (await s.members.get(who.customerId)) ?? emptyMember(who.customerId);
-		await s.members.put(who.customerId, {
-			...member,
-			userId: user.id,
-			email,
-			firstName: who.firstName,
-			lastName: who.lastName,
-			tags: who.tags,
-			syncedAt: new Date().toISOString(),
-			source: "sign-in",
-		});
+		const now = new Date().toISOString();
+		await s.members.put(
+			who.customerId,
+			stampTags(
+				{
+					...member,
+					userId: user.id,
+					email,
+					firstName: who.firstName,
+					lastName: who.lastName,
+					tags: who.tags,
+					syncedAt: now,
+					source: "sign-in",
+					linkedAt: member.linkedAt ?? now,
+				},
+				now,
+			),
+		);
 
 		session.regenerate?.();
 		session.set("user", { id: user.id });

package/src/storage.ts

@@ -31,6 +31,27 @@ export interface MemberRecord {
 	syncedAt: string;
 	/** What wrote it last: sign-in or a webhook topic. */
 	source: string;
+	/** When each tag (lowercased) was first seen on the customer, ISO. Kept for drip; a removed tag is forgotten. */
+	tagsSince?: Record<string, string>;
+	/** When the customer first signed in here, ISO. */
+	linkedAt?: string | null;
+}
+
+/** A signed-in reader's meter for one period: the locked items they opened free. */
+export interface MeterRecord {
+	userId: string;
+	/** "2026-11" for a month, "2026-W45" for a week. */
+	period: string;
+	items: string[];
+}
+
+/** Update `tagsSince` to the record's current tags: new tags start now, removed tags are dropped. */
+export function stampTags(m: MemberRecord, now = new Date().toISOString()): MemberRecord {
+	const before = m.tagsSince ?? {};
+	const since: Record<string, string> = {};
+	for (const t of m.tags.map((t) => t.toLowerCase())) since[t] = before[t] ?? now;
+	m.tagsSince = since;
+	return m;
 }
 
 export interface DeliveryRecord {
@@ -41,11 +62,13 @@ export interface DeliveryRecord {
 export const STORAGE_CONFIG = {
 	members: { indexes: ["email", "userId"] },
 	deliveries: { indexes: ["receivedAt"] },
+	meter: { indexes: ["userId"] },
 };
 
 export interface Stores {
 	members: StorageCollection<MemberRecord>;
 	deliveries: StorageCollection<DeliveryRecord>;
+	meter: StorageCollection<MeterRecord>;
 }
 
 export function stores(db: unknown): Stores {

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = "0.0.4";
+export const VERSION = "0.0.6";

package/src/webhooks.ts

@@ -6,7 +6,7 @@
  * only; a profile payload without `tags` never means "tags removed".
  */
 
-import { cleanTags, emptyMember, numericId, type MemberRecord, type Stores } from "./storage.js";
+import { cleanTags, emptyMember, numericId, stampTags, type MemberRecord, type Stores } from "./storage.js";
 
 export type Kind = "profile" | "delete" | "status" | "tags" | "merge" | "compliance" | "ignored";
 
@@ -114,7 +114,7 @@ export async function apply(s: Stores, topic: string, payload: Record<string, un
 			if (!survivor.userId) survivor.userId = old.userId;
 			survivor.syncedAt = new Date().toISOString();
 			survivor.source = topic;
-			await s.members.put(kept, survivor);
+			await s.members.put(kept, stampTags(survivor));
 		}
 		await s.members.delete(gone);
 		return "processed";
@@ -156,6 +156,6 @@ export async function apply(s: Stores, topic: string, payload: Record<string, un
 
 	current.syncedAt = new Date().toISOString();
 	current.source = topic;
-	await s.members.put(id, current);
+	await s.members.put(id, stampTags(current));
 	return "processed";
 }