feat: teams plan

donut-sync/src/auth/auth.guard.ts

@@ -43,6 +43,7 @@ export class AuthGuard implements CanActivate {
         prefix: "",
         teamPrefix: null,
         profileLimit: 0,
+        teamProfileLimit: 0,
       } satisfies UserContext;
       return true;
     }
@@ -59,6 +60,7 @@ export class AuthGuard implements CanActivate {
           prefix: decoded.prefix || `users/${decoded.sub}/`,
           teamPrefix: decoded.teamPrefix || null,
           profileLimit: decoded.profileLimit || 0,
+          teamProfileLimit: decoded.teamProfileLimit || 0,
         } satisfies UserContext;
         return true;
       } catch (err) {

donut-sync/src/auth/user-context.interface.ts

@@ -3,4 +3,5 @@ export interface UserContext {
   prefix: string; // '' for self-hosted, 'users/{id}/' for cloud
   teamPrefix: string | null; // 'teams/{id}/' or null
   profileLimit: number; // 0 for unlimited (self-hosted)
+  teamProfileLimit: number; // 0 for unlimited or non-team users
 }