@redeemid/emdash 0.0.5 → 0.0.6

package/README.md

@@ -2,14 +2,15 @@
 
 Shopify customer accounts, member levels and paywalls for [EmDash](https://github.com/emdash-cms/emdash) sites. Shopify runs the store and the customer account; EmDash runs the content.
 
-**Status: 0.0.5, early.** Runs on Node and Cloudflare Workers. Sign-in, the member mirror, webhooks, levels, rules, teasers, badges, the page gate, the Shopify cart and checkout are covered by an end-to-end test against a fake store.
+**Status: 0.0.6, early.** Runs on Node and Cloudflare Workers. Sign-in, the member mirror, webhooks, levels, rules, the meter and drip, teasers, badges, the page gate, the Shopify cart and checkout are covered by an end-to-end test against a fake store.
 
 ## What it does
 
 - **Sign in with the store's customer account.** Members click "Sign in" on your site, sign in on the store's account page and come back signed in. They become EmDash Subscribers. That role only means "signed in"; it never grants content.
 - **Mirrors the customer.** Email, name, tags and enabled/disabled status, kept current by signed Shopify webhooks.
 - **Levels from tags.** You map Shopify customer tags to levels. Set tags in Shopify Flow or any app; RedeemID only reads them.
-- **Rules like RedeemID's on WordPress.** Lock a collection, entries with a term (and its child terms), or set a site default; a term can also open its entries to everyone. When several term rules cover an entry, readers must pass all of them.
+- **Rules.** Lock a collection, entries with a term (and its child terms), or set a site default; a term can also open its entries to everyone. When several term rules cover an entry, readers must pass all of them.
+- **Meter and drip.** Signed-in readers may open a few locked entries free each month or week. A rule can also drip: members read its entries once they've held their level for so many days.
 - **Teasers and badges.** Locked entries can show their first paragraphs, up to a word count. `<AccessBadge>` names the level an entry needs and shows a lock to readers it keeps out.
 - **Plans, cart and checkout.** `<Plan>` shows a Shopify product's price and adds it to the visitor's Shopify cart; `<Cart>` shows the count and opens Shopify checkout.
 - **Account.** Members get an Account link to their Shopify customer account (orders, profile, addresses) and Sign out, which also ends the Shopify session.
@@ -49,6 +50,8 @@ const config = {
 	join: { href: "/join/", label: "Become a member" },
 	// Optional: locked posts with no paywall break show the paragraphs within their first 40 words.
 	teaser: { posts: 40 },
+	// Optional: signed-in readers may open 3 locked posts a month.
+	meter: { limit: 3, period: "month", collections: ["posts"] },
 };
 
 export default defineConfig({
@@ -95,8 +98,17 @@ Each rule names a collection and the levels, any of which may read. An empty `le
 | `{ collection: "posts", taxonomy: "tag", term: "free-to-read", levels: [], open: true }` | Opens entries with that term to everyone, whatever else covers them |
 | `{ collection: "*", levels: [] }` | The site default, for collections with no rule of their own |
 
+| `{ collection: "posts", taxonomy: "category", term: "archive", levels: ["member"], drip: 30 }` | Drip: members read these entries 30 days after their level started |
+| `{ collection: "posts", taxonomy: "category", term: "exclusive", levels: ["pro"], meter: false }` | The meter never opens these entries |
+
 Term rules beat the collection's rule, which beats the site default. When several term rules cover one entry (a story in Investigations, Gold, and Culture, Silver), readers must pass every one of them, so only Gold + Silver members read it. Set `combine: "any"` to let one of them be enough.
 
+### Meter and drip
+
+The meter lets a signed-in reader who can't read an entry open it anyway, `limit` entries per `period` (`"month"`, the default, or `"week"`, in UTC). Each entry counts once per period, when its own page renders through `<Content>` with an `id`; lists, feeds, search and the content API never count. Visitors get the wall and a nudge to sign in. While it runs, `<Content>` says how many free reads are left; when it runs out, the wall says so. Rules with `meter: false` are never metered, and the meter never opens an entry a member is waiting on by drip.
+
+Drip holds a rule's entries back from members who pass it until they've held their level for `drip` days. A level starts when the customer first had its tag (for a `match: "all"` level, the last of its tags); with several levels the earliest counts, and with none known, the first sign-in. RedeemID notes when each tag first arrives from sign-in and webhooks, and forgets a tag when Shopify removes it. The wall shows the date the entry opens.
+
 ## Use it in templates
 
 EmDash has no content filter hook, so templates decide what to render. Render the entry body with `<Content>` instead of `<PortableText>`:
@@ -105,12 +117,12 @@ EmDash has no content filter hook, so templates decide what to render. Render th
 ---
 import Content from "@redeemid/emdash/components/Content.astro";
 ---
-<Content value={post.data.content} collection="posts" terms={post.data.terms}>
+<Content value={post.data.content} collection="posts" terms={post.data.terms} id={post.id}>
 	<a slot="locked" href="/join/">Become a member</a>
 </Content>
 ```
 
-Everything before the first Paywall break block is shown to everyone. What follows reaches the page only for readers the break allows: the levels picked on it ("Signed in" for any member), or when none are picked the entry's rule. With none picked and no rule covering the entry, the break changes nothing, as on WordPress. A body with no break follows the entry's rule as a whole; readers it keeps out see the collection's `teaser` (the paragraphs within that many words, never half a paragraph), if one is set. Plain `<PortableText>` ignores the break and shows everything, so use `<Content>` for any body that may hold one.
+Everything before the first Paywall break block is shown to everyone. What follows reaches the page only for readers the break allows: the levels picked on it ("Signed in" for any member), or when none are picked the entry's rule. With none picked and no rule covering the entry, the break changes nothing. A body with no break follows the entry's rule as a whole; readers it keeps out see the collection's `teaser` (the paragraphs within that many words, never half a paragraph), if one is set. Plain `<PortableText>` ignores the break and shows everything, so use `<Content>` for any body that may hold one.
 
 A "Members only" block starts a part for the levels picked on it (none picked: the entry's rule, or any signed-in member) that runs to the next "Members only: end" block. Readers who can't read it see the wall there, and the body goes on after the end block.
 
@@ -127,7 +139,7 @@ import AccessBadge from "@redeemid/emdash/components/AccessBadge.astro";
 <AccessBadge collection="posts" terms={post.data.terms} content={post.data.content} />
 ```
 
-In your own code (`@redeemid/emdash/access`), `entryRequirement(config, collection, terms)` gives what an entry needs (a list of clauses, each passed by any of its levels, or `null` when open), and `canRead(Astro, entry)` gives the verdict for the visitor.
+In your own code (`@redeemid/emdash/access`), `entryRequirement(config, collection, terms)` gives what an entry needs (a list of clauses, each passed by any of its levels, or `null` when open), `canRead(Astro, entry)` gives the verdict for the visitor, and `readEntry(Astro, { collection, terms, id })` gives it with drip and the meter applied (and counts a metered read).
 
 Put `<Notices />` near the top of your layout. It shows the message for a `?redeemid_notice=` code (see [docs/shopify-setup.md](docs/shopify-setup.md)) and nothing otherwise; pass `messages={{ cart_empty: "…" }}` to reword one.
 
@@ -160,6 +172,7 @@ import { canRead } from "@redeemid/emdash/access";
 
 const verdict = await canRead(Astro, { collection: "posts", terms: post.data.terms });
 // verdict.allowed, verdict.reason: open | allowed | sign_in | upgrade | disabled
+// readEntry() adds drip (verdict.opensAt) and metered (verdict.meterLeft)
 ```
 
 Pages rendered for a signed-in member are sent with `Cache-Control: private, no-store`; pages for visitors stay cacheable.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@redeemid/emdash",
-	"version": "0.0.5",
+	"version": "0.0.6",
 	"description": "Shopify customer accounts, member levels and paywalls for EmDash sites. Shopify runs commerce; EmDash runs content.",
 	"type": "module",
 	"license": "MIT",

package/src/access.ts

@@ -32,7 +32,7 @@ export interface Viewer {
 	levels: string[];
 }
 
-export type Reason = "open" | "allowed" | "sign_in" | "upgrade" | "disabled" | "unconfigured";
+export type Reason = "open" | "allowed" | "sign_in" | "upgrade" | "disabled" | "unconfigured" | "drip" | "metered";
 
 /**
  * What an entry needs, in conjunctive form: every clause must pass, and a
@@ -42,7 +42,7 @@ export type Reason = "open" | "allowed" | "sign_in" | "upgrade" | "disabled" | "
 export type Requirement = string[][] | null;
 
 /**
- * The built-in level every signed-in member holds, as on WordPress. A clause
+ * The built-in level every signed-in member holds. A clause
  * with it passes for any signed-in member, like an empty clause.
  */
 export const SIGNED_IN = "signed-in";
@@ -53,6 +53,12 @@ export interface Verdict {
 	/** What the entry needs (see Requirement). `[]` when it is open. */
 	required: string[][];
 	viewer: Viewer;
+	/** For "drip": when the entry opens for this member. */
+	opensAt?: Date;
+	/** For "metered", and for a locked "upgrade" when a meter runs: free entries left this period. */
+	meterLeft?: number;
+	/** The meter's size and period, when one ran. */
+	meter?: { limit: number; period: "month" | "week" };
 }
 
 /** A term as EmDash hydrates it onto an entry, or just its slug. */
@@ -102,26 +108,14 @@ function combined(rules: RuleConfig[], mode: "all" | "any"): string[][] {
 	return reduce(rules.map((r) => r.levels));
 }
 
-/**
- * What an entry needs (see Requirement), from the site's rules.
- *
- * Each term the entry carries is walked up its taxonomy (with `tree`) to the
- * nearest term that has a rule, so a child term takes its parent's rule unless
- * it has its own. Any matching `open` rule opens the entry.
- */
-export function requirement(
-	rules: RuleConfig[] = [],
-	collection: string,
-	terms: Terms = {},
-	options: { combine?: "all" | "any"; tree?: TermTree } = {},
-): Requirement {
-	const mode = options.combine ?? "all";
+/** The rules that decide an entry: matching term rules, else the collection's, else the site default. */
+function deciding(rules: RuleConfig[], collection: string, terms: Terms, tree?: TermTree): RuleConfig[] | "open" {
 	const forCollection = rules.filter((r) => r.collection === collection);
 	const matched: RuleConfig[] = [];
 	for (const [taxonomy, list] of Object.entries(terms)) {
 		const taxRules = forCollection.filter((r) => r.taxonomy === taxonomy && r.term);
 		if (taxRules.length === 0) continue;
-		const parents = options.tree?.[taxonomy] ?? {};
+		const parents = tree?.[taxonomy] ?? {};
 		for (const ref of list ?? []) {
 			let slug: string | null = slugOf(ref);
 			const seen = new Set<string>();
@@ -136,13 +130,87 @@ export function requirement(
 			}
 		}
 	}
-	if (matched.some((r) => r.open)) return null;
-	if (matched.length > 0) return combined(matched, mode);
+	if (matched.some((r) => r.open)) return "open";
+	if (matched.length > 0) return matched;
 	const whole = forCollection.filter((r) => !r.taxonomy && !r.term && !r.open);
-	if (whole.length > 0) return combined(whole, mode);
-	const site = rules.filter((r) => r.collection === "*" && !r.taxonomy && !r.term && !r.open);
-	if (site.length > 0) return combined(site, mode);
-	return null;
+	if (whole.length > 0) return whole;
+	return rules.filter((r) => r.collection === "*" && !r.taxonomy && !r.term && !r.open);
+}
+
+/**
+ * What an entry needs (see Requirement), from the site's rules.
+ *
+ * Each term the entry carries is walked up its taxonomy (with `tree`) to the
+ * nearest term that has a rule, so a child term takes its parent's rule unless
+ * it has its own. Any matching `open` rule opens the entry.
+ */
+export function requirement(
+	rules: RuleConfig[] = [],
+	collection: string,
+	terms: Terms = {},
+	options: { combine?: "all" | "any"; tree?: TermTree } = {},
+): Requirement {
+	const found = deciding(rules, collection, terms, options.tree);
+	if (found === "open" || found.length === 0) return null;
+	return combined(found, options.combine ?? "all");
+}
+
+/** Days of membership the entry's deciding rules ask for (the largest drip), or 0. */
+export function dripDays(rules: RuleConfig[] = [], collection: string, terms: Terms = {}, tree?: TermTree): number {
+	const found = deciding(rules, collection, terms, tree);
+	if (found === "open") return 0;
+	return Math.max(0, ...found.map((r) => (typeof r.drip === "number" && r.drip > 0 ? r.drip : 0)));
+}
+
+/** May the meter open the entry? Not when a deciding rule says `meter: false`. */
+export function meterable(rules: RuleConfig[] = [], collection: string, terms: Terms = {}, tree?: TermTree): boolean {
+	const found = deciding(rules, collection, terms, tree);
+	return found === "open" || !found.some((r) => r.meter === false);
+}
+
+/**
+ * When a member's membership started, for drip: the earliest start among the
+ * levels they hold now (a level starts when its last needed tag arrived),
+ * else when they first signed in. Null when neither is known.
+ */
+export function memberSince(member: MemberRecord, levels: LevelConfig[] = []): string | null {
+	const since = member.tagsSince ?? {};
+	const starts: string[] = [];
+	for (const slug of levelsFor(member.tags, levels)) {
+		const level = levels.find((l) => l.slug === slug);
+		const dates = (level?.tags ?? []).map((t) => since[t.toLowerCase()]).filter((d): d is string => Boolean(d)).sort();
+		if (dates.length === 0) continue;
+		const pick = level?.match === "all" ? dates[dates.length - 1] : dates[0];
+		if (pick) starts.push(pick);
+	}
+	starts.sort();
+	return starts[0] ?? member.linkedAt ?? null;
+}
+
+/** When drip opens an entry for this member: `since` plus `days`. */
+export function dripOpensAt(since: string | null, days: number): Date | null {
+	if (!since || days <= 0) return null;
+	const t = Date.parse(since);
+	return Number.isNaN(t) ? null : new Date(t + days * 86_400_000);
+}
+
+/** The meter period an instant falls in: "2026-11", or ISO week "2026-W45". UTC. */
+export function periodKey(at: Date, period: "month" | "week" = "month"): string {
+	if (period === "month") return `${at.getUTCFullYear()}-${String(at.getUTCMonth() + 1).padStart(2, "0")}`;
+	const d = new Date(Date.UTC(at.getUTCFullYear(), at.getUTCMonth(), at.getUTCDate()));
+	const day = d.getUTCDay() || 7;
+	d.setUTCDate(d.getUTCDate() + 4 - day);
+	const yearStart = Date.UTC(d.getUTCFullYear(), 0, 1);
+	const week = Math.ceil(((d.getTime() - yearStart) / 86_400_000 + 1) / 7);
+	return `${d.getUTCFullYear()}-W${String(week).padStart(2, "0")}`;
+}
+
+/** Count `id` against a meter: an item already counted stays free; a new one needs room. Pure. */
+export function consume(items: string[], id: string, limit: number): { allowed: boolean; items: string[]; left: number } {
+	if (items.includes(id)) return { allowed: true, items, left: Math.max(0, limit - items.length) };
+	if (items.length >= limit) return { allowed: false, items, left: 0 };
+	const next = [...items, id];
+	return { allowed: true, items: next, left: limit - next.length };
 }
 
 /** Does someone holding `held` pass `required`? Signed-in membership is checked by the caller. */
@@ -290,3 +358,60 @@ export function accountUrl(returnTo = "/"): string {
 export function signOutUrl(returnTo = "/"): string {
 	return `/_emdash/api/auth/redeemid/logout?return=${encodeURIComponent(safeReturn(returnTo))}`;
 }
+
+/**
+ * The entry's verdict with drip and the meter applied, for the entry's own
+ * page. Drip narrows a granted verdict; the meter opens a locked one for a
+ * signed-in reader while the period has room, and never opens a drip entry.
+ */
+export async function readEntry(
+	astro: AstroLike,
+	entry: { collection: string; terms?: Terms; id?: string },
+	override?: { required: string[][] },
+): Promise<Verdict> {
+	const verdict = await canRead(astro, entry, override);
+	const locals = astro.locals as Locals;
+	const config = siteConfig(locals.emdash?.config);
+	if (!config) return verdict;
+
+	if (verdict.allowed && verdict.reason === "allowed" && verdict.viewer.member) {
+		const tree = await termTree(config.rules, entry.collection, entry.terms);
+		const days = dripDays(config.rules, entry.collection, entry.terms, tree);
+		const opensAt = dripOpensAt(memberSince(verdict.viewer.member, config.levels), days);
+		if (days > 0 && (!opensAt || opensAt.getTime() > Date.now())) {
+			return { ...verdict, allowed: false, reason: "drip", opensAt: opensAt ?? undefined };
+		}
+		return verdict;
+	}
+
+	const meter = config.meter;
+	const user = locals.user;
+	const db = locals.emdash?.db;
+	if (
+		verdict.reason !== "upgrade" ||
+		!meter ||
+		!(meter.limit > 0) ||
+		!entry.id ||
+		!user?.id ||
+		!db ||
+		(meter.collections && !meter.collections.includes(entry.collection))
+	) {
+		return verdict;
+	}
+	if (!meterable(config.rules, entry.collection, entry.terms, await termTree(config.rules, entry.collection, entry.terms))) {
+		return verdict;
+	}
+	const period = meter.period ?? "month";
+	const key = `${user.id}:${periodKey(new Date(), period)}`;
+	try {
+		const s = stores(db);
+		const record = (await s.meter.get(key)) ?? { userId: user.id, period: periodKey(new Date(), period), items: [] };
+		const used = consume(record.items, `${entry.collection}:${entry.id}`, meter.limit);
+		const info = { limit: meter.limit, period };
+		if (!used.allowed) return { ...verdict, meterLeft: 0, meter: info };
+		if (used.items !== record.items) await s.meter.put(key, { ...record, items: used.items });
+		return { ...verdict, allowed: true, reason: "metered", meterLeft: used.left, meter: info };
+	} catch {
+		return verdict;
+	}
+}

package/src/blocks-names.ts

@@ -29,7 +29,7 @@ export function splitAtPaywall<T>(value: T[] | null | undefined): {
 type TextNode = { _type?: unknown; children?: Array<{ text?: unknown }> };
 
 /**
- * The text blocks within the first `words` words of a body, as on WordPress:
+ * The text blocks within the first `words` words of a body:
  * a block is never cut in half, so a block that would pass the count ends the
  * teaser. Images and custom blocks are left out. 0 gives nothing.
  */

package/src/components/AccessBadge.astro

@@ -1,7 +1,7 @@
 ---
 /**
  * The level an entry needs, read from its rules (and from a paywall break
- * with levels), like the Access Badge block on WordPress:
+ * with levels):
  *
  *   <AccessBadge collection="posts" terms={post.data.terms} content={post.data.content} />
  *

package/src/components/Content.astro

@@ -2,12 +2,12 @@
 /**
  * An entry's body, with RedeemID's blocks applied.
  *
- *   <Content value={post.data.content} collection="posts" terms={post.data.terms} />
+ *   <Content value={post.data.content} collection="posts" terms={post.data.terms} id={post.id} />
  *
  * - "Paywall break": everything before the first one is shown to everyone.
  *   What follows reaches the page only for readers who may read it: the
  *   levels picked on the break, or when none are picked the entry's rule
- *   (with no rule, the break changes nothing, as on WordPress).
+ *   (with no rule, the break changes nothing).
  * - "Members only" … "Members only: end": the part between is for the levels
  *   picked on the start block, or the entry's rule, or any signed-in member.
  *   Readers who can't read it see the wall in its place, and the body goes on.
@@ -15,10 +15,15 @@
  *   the collection's teaser (config `teaser`, in words), if any.
  *
  * Readers kept out get the wall (LockedPanel), with the "locked" slot on top.
+ *
+ * Pass `id` on the entry's own page so drip and the meter apply: a rule's
+ * `drip` keeps it shut until the member has held their level that many days,
+ * and config `meter` lets signed-in readers open a few locked entries each
+ * period (each entry counts once). Leave `id` off in lists.
  */
 import { PortableText } from "emdash/ui";
 
-import { canRead, entryRequirement, type Terms, type Verdict } from "../access.js";
+import { canRead, entryRequirement, readEntry, type Terms, type Verdict } from "../access.js";
 import { sections, splitAtPaywall, teaser } from "../blocks-names.js";
 import { siteConfig } from "../site-config.js";
 import LockedPanel from "./LockedPanel.astro";
@@ -27,9 +32,11 @@ interface Props {
 	value?: unknown[] | null;
 	collection?: string;
 	terms?: Terms;
+	/** The entry's id, on its own page: turns on drip and the meter. */
+	id?: string;
 }
 
-const { value, collection = "", terms } = Astro.props;
+const { value, collection = "", terms, id } = Astro.props;
 const split = splitAtPaywall(value);
 const config = siteConfig((Astro.locals as { emdash?: { config?: unknown } }).emdash?.config);
 const entryRule = await entryRequirement(config, collection, terms);
@@ -39,7 +46,9 @@ const required = split.paywall ? (split.levels.length ? [split.levels] : entryRu
 const verdict: Verdict | { allowed: true; reason: "open" } =
 	split.paywall && required === null
 		? { allowed: true, reason: "open" }
-		: await canRead(Astro, { collection, terms }, required ? { required } : undefined);
+		: id
+			? await readEntry(Astro, { collection, terms, id }, required ? { required } : undefined)
+			: await canRead(Astro, { collection, terms }, required ? { required } : undefined);
 const words = config?.teaser?.[collection] ?? 0;
 const shown = split.paywall ? split.open : verdict.allowed ? split.open : teaser(split.open, words);
 const rest = verdict.allowed ? split.locked : [];
@@ -59,8 +68,17 @@ async function parts(blocks: unknown[]) {
 }
 const before = await parts(shown);
 const after = await parts(rest);
+const metered = verdict.reason === "metered" ? (verdict as Verdict) : null;
+const per = metered?.meter?.period === "week" ? "this week" : "this month";
 ---
 
+{metered && (
+	<p class="redeemid-meter" role="status" data-redeemid-left={metered.meterLeft}>
+		{metered.meterLeft === 0
+			? `This is your last free read ${per}.`
+			: `You have ${metered.meterLeft} free ${metered.meterLeft === 1 ? "read" : "reads"} left ${per}.`}
+	</p>
+)}
 {before.map((p) =>
 	!p.verdict || p.verdict.allowed ? (
 		p.blocks.length > 0 && <PortableText value={p.blocks} />
@@ -77,7 +95,14 @@ const after = await parts(rest);
 		),
 	)
 ) : (
-	<LockedPanel reason={verdict.reason} required={verdict.required} held={verdict.viewer.levels}>
+	<LockedPanel
+		reason={verdict.reason}
+		required={verdict.required}
+		held={verdict.viewer.levels}
+		opensAt={verdict.opensAt}
+		meterLeft={verdict.meterLeft}
+		meterPeriod={verdict.meter?.period}
+	>
 		<slot name="locked" />
 	</LockedPanel>
 )}

package/src/components/LockedPanel.astro

@@ -17,9 +17,17 @@ interface Props {
 	required?: string[][];
 	/** Levels the reader holds (Verdict.viewer.levels). */
 	held?: string[];
+	/** For "drip": when it opens (Verdict.opensAt). */
+	opensAt?: Date;
+	/** Free reads left when a meter ran (Verdict.meterLeft); 0 shows the meter-used text. */
+	meterLeft?: number;
+	meterPeriod?: "month" | "week";
 }
 
-const { reason, required = [], held = [] } = Astro.props;
+const { reason, required = [], held = [], opensAt, meterLeft, meterPeriod } = Astro.props;
+const opens = opensAt
+	? new Intl.DateTimeFormat("en-US", { dateStyle: "long", timeZone: "UTC" }).format(opensAt)
+	: null;
 const config = siteConfig((Astro.locals as { emdash?: { config?: unknown } }).emdash?.config);
 const missing = required.find((clause) => clause.length > 0 && !passes(held, [clause]));
 const level = missing ? config?.levels?.find((l) => l.slug === missing[0]) : undefined;
@@ -37,6 +45,14 @@ const here = Astro.url.pathname + Astro.url.search;
 			{joinHref && <> Not a member yet? <a href={joinHref}>{joinLabel}</a>.</>}
 		</p>
 	)}
+	{reason === "upgrade" && meterLeft === 0 && (
+		<p class="redeemid-locked__meter">You've used your free reads {meterPeriod === "week" ? "this week" : "this month"}.</p>
+	)}
+	{reason === "drip" && (
+		<p>
+			{opens ? <>This opens for you on <time datetime={opensAt?.toISOString()}>{opens}</time>.</> : "This opens for you after you've been a member a little longer."}
+		</p>
+	)}
 	{reason === "upgrade" && (
 		<p>
 			{level ? `This is for ${level.name} members.` : "Your membership doesn't include this yet."}

package/src/config.ts

@@ -22,7 +22,7 @@ export interface LevelConfig {
 }
 
 /**
- * Who may read entries, like RedeemID's content rules on WordPress:
+ * Who may read entries:
  *
  * - A rule with `taxonomy` and `term` covers entries that carry that term, or
  *   a child of it in a hierarchical taxonomy (a child's own rule wins over its
@@ -45,9 +45,30 @@ export interface RuleConfig {
 	levels: string[];
 	/**
 	 * A term rule that opens its entries to everyone, whatever else covers them
-	 * ("Opens" on WordPress). `levels` is ignored.
+	 * `levels` is ignored.
 	 */
 	open?: boolean;
+	/**
+	 * Drip: readers who pass the rule may read its entries only once they have
+	 * been members this many days (from when they first held a level they
+	 * hold now, or else when they first signed in).
+	 */
+	drip?: number;
+	/** `false`: the meter never opens this rule's entries. */
+	meter?: false;
+}
+
+/**
+ * The meter: signed-in readers without access may open a few locked entries
+ * free each month (or week). Guests get the wall; an entry counts once per
+ * period, when its own page renders through <Content> with an `id`.
+ */
+export interface MeterConfig {
+	/** Free entries per period. */
+	limit: number;
+	period?: "month" | "week";
+	/** Collections the meter covers. All of them when left out. */
+	collections?: string[];
 }
 
 export interface RedeemIDConfig {
@@ -61,6 +82,7 @@ export interface RedeemIDConfig {
 	label?: string;
 	levels?: LevelConfig[];
 	rules?: RuleConfig[];
+	meter?: MeterConfig;
 	/** The wall's join link: where readers become members, e.g. { href: "/join/", label: "Become a member" }. */
 	join?: { href: string; label?: string };
 	/**

package/src/plugin.ts

@@ -13,7 +13,7 @@
  * - "Paywall break" (`redeemid-paywall`): everything after it in the body is
  *   for members. Pick the levels that may read on ("Signed in" for any
  *   member); none picked means the entry's rule, and nothing is locked when
- *   no rule covers the entry, as on WordPress.
+ *   no rule covers the entry.
  * - "Members only" (`redeemid-members`) and "Members only: end"
  *   (`redeemid-members-end`): the part between is for the levels picked on
  *   the start block; everyone else sees the wall there and reads on after.
@@ -281,6 +281,7 @@ async function statusPage(config: RedeemIDConfig, request: Request) {
 						columns: [
 							{ key: "where", label: "Covers" },
 							{ key: "levels", label: "Who can read" },
+							{ key: "extra", label: "Drip and meter" },
 						],
 						rows: rules.map((r) => ({
 							where:
@@ -290,9 +291,16 @@ async function statusPage(config: RedeemIDConfig, request: Request) {
 										? "Site default (collections with no rule)"
 										: `All ${r.collection}`,
 							levels: r.open ? "Everyone (opens the entry)" : r.levels.length ? describe([r.levels], levels) : "Any signed-in member",
+							extra: [r.drip ? `Opens ${r.drip} days into membership` : "", r.meter === false ? "Never metered" : ""].filter(Boolean).join("; "),
 						})),
 					}
 				: { type: "context", text: "No rules. Entries are open unless their body has a paywall break." },
+			{
+				type: "context",
+				text: config.meter?.limit
+					? `Meter: signed-in readers may open ${config.meter.limit} locked ${config.meter.limit === 1 ? "entry" : "entries"} a ${config.meter.period ?? "month"}${config.meter.collections?.length ? ` (${config.meter.collections.join(", ")})` : ""}.`
+					: "Meter: off.",
+			},
 		],
 	};
 }

package/src/routes/callback.ts

@@ -17,7 +17,7 @@ import type { Kysely } from "kysely";
 
 import { env, ENV, PROVIDER_ID, readConfig, storeDomain } from "../config.js";
 import { discover, exchangeCode, identity, ShopifyError, verifyIdToken } from "../shopify.js";
-import { emptyMember, stores } from "../storage.js";
+import { emptyMember, stampTags, stores } from "../storage.js";
 import { callbackUrl, fail, FLOW_TTL_MS, SESSION_FLOW, SESSION_ID_TOKEN, type Flow } from "./shared.js";
 
 export const prerender = false;
@@ -83,16 +83,24 @@ export const GET: APIRoute = async ({ request, locals, session, redirect }) => {
 
 		const s = stores(emdash.db);
 		const member = (await s.members.get(who.customerId)) ?? emptyMember(who.customerId);
-		await s.members.put(who.customerId, {
-			...member,
-			userId: user.id,
-			email,
-			firstName: who.firstName,
-			lastName: who.lastName,
-			tags: who.tags,
-			syncedAt: new Date().toISOString(),
-			source: "sign-in",
-		});
+		const now = new Date().toISOString();
+		await s.members.put(
+			who.customerId,
+			stampTags(
+				{
+					...member,
+					userId: user.id,
+					email,
+					firstName: who.firstName,
+					lastName: who.lastName,
+					tags: who.tags,
+					syncedAt: now,
+					source: "sign-in",
+					linkedAt: member.linkedAt ?? now,
+				},
+				now,
+			),
+		);
 
 		session.regenerate?.();
 		session.set("user", { id: user.id });

package/src/storage.ts

@@ -31,6 +31,27 @@ export interface MemberRecord {
 	syncedAt: string;
 	/** What wrote it last: sign-in or a webhook topic. */
 	source: string;
+	/** When each tag (lowercased) was first seen on the customer, ISO. Kept for drip; a removed tag is forgotten. */
+	tagsSince?: Record<string, string>;
+	/** When the customer first signed in here, ISO. */
+	linkedAt?: string | null;
+}
+
+/** A signed-in reader's meter for one period: the locked items they opened free. */
+export interface MeterRecord {
+	userId: string;
+	/** "2026-11" for a month, "2026-W45" for a week. */
+	period: string;
+	items: string[];
+}
+
+/** Update `tagsSince` to the record's current tags: new tags start now, removed tags are dropped. */
+export function stampTags(m: MemberRecord, now = new Date().toISOString()): MemberRecord {
+	const before = m.tagsSince ?? {};
+	const since: Record<string, string> = {};
+	for (const t of m.tags.map((t) => t.toLowerCase())) since[t] = before[t] ?? now;
+	m.tagsSince = since;
+	return m;
 }
 
 export interface DeliveryRecord {
@@ -41,11 +62,13 @@ export interface DeliveryRecord {
 export const STORAGE_CONFIG = {
 	members: { indexes: ["email", "userId"] },
 	deliveries: { indexes: ["receivedAt"] },
+	meter: { indexes: ["userId"] },
 };
 
 export interface Stores {
 	members: StorageCollection<MemberRecord>;
 	deliveries: StorageCollection<DeliveryRecord>;
+	meter: StorageCollection<MeterRecord>;
 }
 
 export function stores(db: unknown): Stores {

package/src/version.ts

@@ -1 +1 @@
-export const VERSION = "0.0.5";
+export const VERSION = "0.0.6";

package/src/webhooks.ts

@@ -6,7 +6,7 @@
  * only; a profile payload without `tags` never means "tags removed".
  */
 
-import { cleanTags, emptyMember, numericId, type MemberRecord, type Stores } from "./storage.js";
+import { cleanTags, emptyMember, numericId, stampTags, type MemberRecord, type Stores } from "./storage.js";
 
 export type Kind = "profile" | "delete" | "status" | "tags" | "merge" | "compliance" | "ignored";
 
@@ -114,7 +114,7 @@ export async function apply(s: Stores, topic: string, payload: Record<string, un
 			if (!survivor.userId) survivor.userId = old.userId;
 			survivor.syncedAt = new Date().toISOString();
 			survivor.source = topic;
-			await s.members.put(kept, survivor);
+			await s.members.put(kept, stampTags(survivor));
 		}
 		await s.members.delete(gone);
 		return "processed";
@@ -156,6 +156,6 @@ export async function apply(s: Stores, topic: string, payload: Record<string, un
 
 	current.syncedAt = new Date().toISOString();
 	current.source = topic;
-	await s.members.put(id, current);
+	await s.members.put(id, stampTags(current));
 	return "processed";
 }