Method CheckUserLimit

internal/store/limits.go:114–148

CheckUserLimit checks a user-level limit (not workspace-scoped), such as total workspace count or total API tokens.

(userID, feature string)

// CheckUserLimit checks a user-level limit (not workspace-scoped), such as
// total workspace count or total API tokens.
func (s *Store) CheckUserLimit(userID, feature string) (*LimitResult, error) {
	user, err := s.GetUser(userID)
	if err != nil {
		return nil, fmt.Errorf("check user limit: get user: %w", err)
	}
	if user == nil {
		return nil, fmt.Errorf("check user limit: user not found")
	}

	plan := user.Plan
	if plan == "" {
		plan = "free"
	}
	if plan == "self-hosted" || plan == "pro" {
		return &LimitResult{Allowed: true, Feature: feature, Limit: -1, Current: 0, Plan: plan}, nil
	}

	limit := s.resolveLimit(plan, feature, user.PlanOverrides)
	if limit < 0 {
		return &LimitResult{Allowed: true, Feature: feature, Limit: -1, Current: 0, Plan: plan}, nil
	}

	current, err := s.userFeatureCount(userID, feature)
	if err != nil {
		return nil, fmt.Errorf("check user limit: count %s: %w", feature, err)
	}

	return &LimitResult{
		Allowed: current < limit,
		Feature: feature,
		Limit:   limit,
		Current: current,
		Plan:    plan,
	}, nil
}

// resolveLimit resolves the limit for a feature using the three-tier resolution:
// user overrides → DB-stored plan defaults → hardcoded fallback.