1) user invitation 2) app access control 3) txn quota guard

app/order/api/engine/manage_invoice.php

@@ -2,6 +2,7 @@
     session_start();
     require '../../../assets/utils/db_auth.php';
     require_role($user_role, ['owner', 'admin', 'staff']);
+    require '../../../assets/utils/classes/UsageGuard.php';
     require '../../../assets/utils/classes/InvoiceManager.php';
 
     try {
@@ -17,12 +18,17 @@
             exit(json_encode($answer));
         }
 
+        $is_new = !(int)($data['id'] ?? 0);
+
         dbTransaction($pdo2, function($pdo) use ($data, $company_id, $logging) {
             $inv = new InvoiceManager($pdo, $company_id);
             $inv->saveInvoice($data, $logging);
         });
 
         $answer['success'] = 1;
+        if ($is_new) {
+            (new UsageGuard($pdo1, $company_id, $packages))->increment();
+        }
 
     } catch (PDOException $e) {
         $answer['message'] = 'Database error, please try again.';