From 17f876160db2f32ca33b6e715c5d3a91f7da81f0 Mon Sep 17 00:00:00 2001
From: Henry <henry_ball@hotmail.co.uk>
Date: Tue, 23 Sep 2025 22:58:59 +0100
Subject: [PATCH] feat: add repo funcs and share link toggle

---
 .../members/components/InviteMemberForm.tsx   | 135 ++++++-
 packages/api/src/routers/member.ts            | 343 +++++++++++++++++-
 packages/db/src/repository/inviteLink.repo.ts |  71 ++++
 packages/db/src/repository/workspace.repo.ts  |  14 +
 packages/db/src/schema/index.ts               |   1 +
 .../db/src/schema/workspaceInviteLinks.ts     |  10 +
 6 files changed, 563 insertions(+), 11 deletions(-)
 create mode 100644 packages/db/src/repository/inviteLink.repo.ts

diff --git a/apps/web/src/views/members/components/InviteMemberForm.tsx b/apps/web/src/views/members/components/InviteMemberForm.tsx
index 3646ef62..cdb26545 100644
--- a/apps/web/src/views/members/components/InviteMemberForm.tsx
+++ b/apps/web/src/views/members/components/InviteMemberForm.tsx
@@ -3,7 +3,12 @@ import { t } from "@lingui/core/macro";
 import { env } from "next-runtime-env";
 import { useEffect, useState } from "react";
 import { useForm } from "react-hook-form";
-import { HiXMark } from "react-icons/hi2";
+import {
+  HiInformationCircle,
+  HiMiniCheck,
+  HiOutlineDocumentDuplicate,
+  HiXMark,
+} from "react-icons/hi2";
 import { z } from "zod";
 
 import type { InviteMemberInput } from "@kan/api/types";
@@ -31,7 +36,11 @@ export function InviteMemberForm({
   userId: string | undefined;
 }) {
   const utils = api.useUtils();
-  const [isCreateAnotherEnabled, setIsCreateAnotherEnabled] = useState(false);
+  const [isShareInviteLinkEnabled, setIsShareInviteLinkEnabled] =
+    useState(false);
+  const [inviteLink, setInviteLink] = useState<string>("");
+  const [isLoadingInviteLink, setIsLoadingInviteLink] = useState(false);
+  const [copied, setCopied] = useState(false);
   const { closeModal } = useModal();
   const { workspace } = useWorkspace();
   const { showPopup } = usePopup();
@@ -56,6 +65,21 @@ export function InviteMemberForm({
 
   const refetchBoards = () => utils.board.all.refetch();
 
+  // Fetch active invite link on component mount
+  const { data: activeInviteLink, refetch: refetchInviteLink } =
+    api.member.getActiveInviteLink.useQuery(
+      { workspacePublicId: workspace.publicId || "" },
+      { enabled: !!workspace.publicId },
+    );
+
+  // Set initial state based on active invite link
+  useEffect(() => {
+    if (activeInviteLink) {
+      setIsShareInviteLinkEnabled(activeInviteLink.isActive);
+      setInviteLink(activeInviteLink.inviteLink || "");
+    }
+  }, [activeInviteLink]);
+
   const inviteMember = api.member.invite.useMutation({
     onSuccess: async () => {
       closeModal();
@@ -64,7 +88,7 @@ export function InviteMemberForm({
     },
     onError: (error) => {
       reset();
-      if (!isCreateAnotherEnabled) closeModal();
+      if (!isShareInviteLinkEnabled) closeModal();
 
       if (error.data?.code === "CONFLICT") {
         showPopup({
@@ -82,6 +106,36 @@ export function InviteMemberForm({
     },
   });
 
+  const createInviteLink = api.member.createInviteLink.useMutation({
+    onSuccess: (data) => {
+      setInviteLink(data.inviteLink);
+      setIsLoadingInviteLink(false);
+    },
+    onError: () => {
+      setIsLoadingInviteLink(false);
+      showPopup({
+        header: t`Error creating invite link`,
+        message: t`Please try again later.`,
+        icon: "error",
+      });
+    },
+  });
+
+  const deactivateInviteLink = api.member.deactivateInviteLink.useMutation({
+    onSuccess: () => {
+      setInviteLink("");
+      setIsLoadingInviteLink(false);
+    },
+    onError: () => {
+      setIsLoadingInviteLink(false);
+      showPopup({
+        header: t`Error deactivating invite link`,
+        message: t`Please try again later.`,
+        icon: "error",
+      });
+    },
+  });
+
   const teamSubscription = getSubscriptionByPlan(subscriptions, "team");
   const proSubscription = getSubscriptionByPlan(subscriptions, "pro");
 
@@ -109,6 +163,43 @@ export function InviteMemberForm({
     inviteMember.mutate(member);
   };
 
+  const handleInviteLinkToggle = async () => {
+    setIsLoadingInviteLink(true);
+
+    if (isShareInviteLinkEnabled && workspace.publicId) {
+      // Deactivate invite link
+      await deactivateInviteLink.mutateAsync({
+        workspacePublicId: workspace.publicId,
+      });
+      setIsShareInviteLinkEnabled(false);
+    } else {
+      // Create new invite link
+      await createInviteLink.mutateAsync({
+        workspacePublicId: workspace.publicId,
+      });
+      setIsShareInviteLinkEnabled(true);
+    }
+  };
+
+  const copyToClipboard = async () => {
+    try {
+      await navigator.clipboard.writeText(inviteLink);
+      setCopied(true);
+      setTimeout(() => setCopied(false), 2000);
+      showPopup({
+        header: t`Invite link copied`,
+        message: t`Invite link copied to clipboard`,
+        icon: "success",
+      });
+    } catch (error) {
+      showPopup({
+        header: t`Error`,
+        message: t`Failed to copy invite link`,
+        icon: "error",
+      });
+    }
+  };
+
   const handleUpgrade = async () => {
     const { data, error } = await authClient.subscription.upgrade({
       plan: "team",
@@ -173,6 +264,34 @@ export function InviteMemberForm({
           }}
           errorMessage={errors.email?.message}
         />
+        {isShareInviteLinkEnabled && inviteLink && (
+          <div className="my-4">
+            <div className="relative">
+              <Input
+                value={inviteLink}
+                className="pr-10 text-sm text-light-900 dark:text-dark-900"
+                readOnly
+              />
+              <button
+                type="button"
+                className="absolute inset-y-0 right-0 flex items-center pr-3 text-light-900 hover:text-light-950 dark:text-dark-900 dark:hover:text-dark-950"
+                onClick={copyToClipboard}
+              >
+                {copied ? (
+                  <HiMiniCheck className="h-5 w-5 text-green-600" />
+                ) : (
+                  <HiOutlineDocumentDuplicate className="h-5 w-5" />
+                )}
+              </button>
+            </div>
+            <div className="mt-2 flex items-start gap-1">
+              <HiInformationCircle className="mt-0.5 h-4 w-4 text-dark-900" />
+              <p className="text-xs text-gray-500 dark:text-dark-900">
+                {t`Anyone with this link can join your workspace`}
+              </p>
+            </div>
+          </div>
+        )}
 
         {env("NEXT_PUBLIC_KAN_ENV") === "cloud" && (
           <div className="mt-3 rounded-md bg-light-100 p-3 text-xs text-light-900 dark:bg-dark-200 dark:text-dark-900">
@@ -205,11 +324,9 @@ export function InviteMemberForm({
         {(hasTeamSubscription || hasProSubscription) &&
           env("NEXT_PUBLIC_KAN_ENV") === "cloud" && (
             <Toggle
-              label={t`Invite another`}
-              isChecked={isCreateAnotherEnabled}
-              onChange={() =>
-                setIsCreateAnotherEnabled(!isCreateAnotherEnabled)
-              }
+              label={t`Share invite link`}
+              isChecked={isShareInviteLinkEnabled}
+              onChange={handleInviteLinkToggle}
             />
           )}
         <div>
@@ -226,7 +343,7 @@ export function InviteMemberForm({
           ) : (
             <Button
               type="submit"
-              disabled={inviteMember.isPending}
+              disabled={inviteMember.isPending || isShareInviteLinkEnabled}
               isLoading={inviteMember.isPending}
               className="inline-flex w-full justify-center rounded-md bg-light-1000 px-3 py-2 text-sm font-semibold text-light-50 shadow-sm focus-visible:outline-none dark:bg-dark-1000 dark:text-dark-50"
             >
diff --git a/packages/api/src/routers/member.ts b/packages/api/src/routers/member.ts
index 17134d0e..68fd447b 100644
--- a/packages/api/src/routers/member.ts
+++ b/packages/api/src/routers/member.ts
@@ -1,14 +1,19 @@
 import { TRPCError } from "@trpc/server";
 import { z } from "zod";
 
+import * as inviteLinkRepo from "@kan/db/repository/inviteLink.repo";
 import * as memberRepo from "@kan/db/repository/member.repo";
 import * as subscriptionRepo from "@kan/db/repository/subscription.repo";
 import * as userRepo from "@kan/db/repository/user.repo";
 import * as workspaceRepo from "@kan/db/repository/workspace.repo";
-import { getSubscriptionByPlan, hasUnlimitedSeats } from "@kan/shared/utils";
+import {
+  generateUID,
+  getSubscriptionByPlan,
+  hasUnlimitedSeats,
+} from "@kan/shared/utils";
 import { updateSubscriptionSeats } from "@kan/stripe";
 
-import { createTRPCRouter, protectedProcedure } from "../trpc";
+import { createTRPCRouter, protectedProcedure, publicProcedure } from "../trpc";
 import { assertUserInWorkspace } from "../utils/auth";
 
 export const memberRouter = createTRPCRouter({
@@ -241,4 +246,338 @@ export const memberRouter = createTRPCRouter({
 
       return { success: true };
     }),
+  getActiveInviteLink: protectedProcedure
+    .meta({
+      openapi: {
+        summary: "Get active invite link for workspace",
+        method: "GET",
+        path: "/workspaces/{workspacePublicId}/invite",
+        description: "Gets the active invite link for a workspace",
+        tags: ["Invites"],
+        protect: true,
+      },
+    })
+    .input(
+      z.object({
+        workspacePublicId: z.string().min(12),
+      }),
+    )
+    .output(
+      z.object({
+        id: z.number().optional(),
+        inviteCode: z.string().optional(),
+        inviteLink: z.string().optional(),
+        isActive: z.boolean(),
+        expiresAt: z.date().optional(),
+      }),
+    )
+    .query(async ({ ctx, input }) => {
+      const userId = ctx.user?.id;
+
+      if (!userId)
+        throw new TRPCError({
+          message: `User not authenticated`,
+          code: "UNAUTHORIZED",
+        });
+
+      const workspace = await workspaceRepo.getByPublicId(
+        ctx.db,
+        input.workspacePublicId,
+      );
+
+      if (!workspace)
+        throw new TRPCError({
+          message: `Workspace not found`,
+          code: "NOT_FOUND",
+        });
+
+      // Check if user is in workspace
+      await assertUserInWorkspace(ctx.db, userId, workspace.id);
+
+      // Get active invite link for this workspace
+      const activeInviteLink = await inviteLinkRepo.getActiveForWorkspace(
+        ctx.db,
+        workspace.id,
+      );
+
+      if (
+        activeInviteLink &&
+        (!activeInviteLink.expiresAt || new Date() < activeInviteLink.expiresAt)
+      ) {
+        return {
+          id: activeInviteLink.id,
+          inviteCode: activeInviteLink.code,
+          inviteLink: `${process.env.NEXT_PUBLIC_BASE_URL}/invite/${activeInviteLink.code}`,
+          isActive: true,
+          expiresAt: activeInviteLink.expiresAt ?? undefined,
+        };
+      }
+
+      return { isActive: false };
+    }),
+  createInviteLink: protectedProcedure
+    .meta({
+      openapi: {
+        summary: "Create invite link for workspace",
+        method: "POST",
+        path: "/workspaces/{workspacePublicId}/invites",
+        description: "Create invite link for a workspace",
+        tags: ["Invites"],
+        protect: true,
+      },
+    })
+    .input(
+      z.object({
+        workspacePublicId: z.string().min(12),
+      }),
+    )
+    .output(
+      z.object({
+        publicId: z.string().min(12),
+        inviteCode: z.string(),
+        inviteLink: z.string(),
+        expiresAt: z.date().nullable(),
+      }),
+    )
+    .mutation(async ({ ctx, input }) => {
+      const userId = ctx.user?.id;
+
+      if (!userId)
+        throw new TRPCError({
+          message: `User not authenticated`,
+          code: "UNAUTHORIZED",
+        });
+
+      const workspace = await workspaceRepo.getByPublicId(
+        ctx.db,
+        input.workspacePublicId,
+      );
+
+      if (!workspace)
+        throw new TRPCError({
+          message: `Workspace not found`,
+          code: "NOT_FOUND",
+        });
+
+      // Check if user is in workspace
+      await assertUserInWorkspace(ctx.db, userId, workspace.id);
+
+      // Deactivate any existing active invite links
+      await inviteLinkRepo.deactivateAllActiveForWorkspace(ctx.db, {
+        workspaceId: workspace.id,
+        updatedBy: userId,
+      });
+
+      // Generate new invite code
+      const inviteCode = generateUID();
+      const expiresAt = new Date();
+      expiresAt.setDate(expiresAt.getDate() + 7);
+
+      // Create new invite link
+      const inviteLink = await inviteLinkRepo.createInviteLink(ctx.db, {
+        workspaceId: workspace.id,
+        code: inviteCode,
+        expiresAt,
+        createdBy: userId,
+      });
+
+      if (!inviteLink) {
+        throw new TRPCError({
+          message: `Failed to create invite link`,
+          code: "INTERNAL_SERVER_ERROR",
+        });
+      }
+
+      return {
+        publicId: inviteLink.publicId,
+        inviteCode: inviteLink.code,
+        inviteLink: `${process.env.NEXT_PUBLIC_BASE_URL}/invite/${inviteLink.code}`,
+        expiresAt: inviteLink.expiresAt,
+      };
+    }),
+  deactivateInviteLink: protectedProcedure
+    .meta({
+      openapi: {
+        summary: "Deactivate invite link for workspace",
+        method: "DELETE",
+        path: "/workspaces/{workspacePublicId}/invites",
+        description: "Deactivates the invite link for a workspace",
+        tags: ["Invites"],
+        protect: true,
+      },
+    })
+    .input(
+      z.object({
+        workspacePublicId: z.string().min(12),
+      }),
+    )
+    .output(
+      z.object({
+        success: z.boolean(),
+      }),
+    )
+    .mutation(async ({ ctx, input }) => {
+      const userId = ctx.user?.id;
+
+      if (!userId)
+        throw new TRPCError({
+          message: `User not authenticated`,
+          code: "UNAUTHORIZED",
+        });
+
+      const workspace = await workspaceRepo.getByPublicId(
+        ctx.db,
+        input.workspacePublicId,
+      );
+
+      if (!workspace)
+        throw new TRPCError({
+          message: `Workspace not found`,
+          code: "NOT_FOUND",
+        });
+
+      // Check if user is in workspace
+      await assertUserInWorkspace(ctx.db, userId, workspace.id);
+
+      // Deactivate all active invite links
+      await inviteLinkRepo.deactivateAllActiveForWorkspace(ctx.db, {
+        workspaceId: workspace.id,
+        updatedBy: userId,
+      });
+
+      return { success: true };
+    }),
+  getInviteByCode: publicProcedure
+    .meta({
+      openapi: {
+        summary: "Get invite information by code",
+        method: "GET",
+        path: "/workspaces/{workspacePublicId}/invites/{inviteCode}",
+        description: "Get invite information by invite code",
+        tags: ["Invites"],
+        protect: false,
+      },
+    })
+    .input(
+      z.object({
+        inviteCode: z.string().min(12),
+      }),
+    )
+    .output(
+      z
+        .object({
+          publicId: z.string().min(12),
+          status: z.string(),
+          expiresAt: z.date().nullable(),
+        })
+        .optional(),
+    )
+    .query(async ({ ctx, input }) => {
+      const invite = await inviteLinkRepo.getByCode(ctx.db, input.inviteCode);
+
+      if (
+        !invite ||
+        invite.status !== "active" ||
+        (invite.expiresAt && new Date() > invite.expiresAt)
+      ) {
+        throw new TRPCError({
+          message: `Invalid or expired invite link`,
+          code: "BAD_REQUEST",
+        });
+      }
+
+      return {
+        publicId: invite.publicId,
+        status: invite.status,
+        expiresAt: invite.expiresAt ?? null,
+      };
+    }),
+  acceptInviteLink: publicProcedure
+    .meta({
+      openapi: {
+        summary: "Accept an invite link",
+        method: "POST",
+        path: "/workspaces/{workspacePublicId}/invites/accept",
+        description: "Accepts an invitation via invite link",
+        tags: ["Invites"],
+        protect: false,
+      },
+    })
+    .input(
+      z.object({
+        inviteCode: z.string().min(12),
+      }),
+    )
+    .output(
+      z.object({
+        success: z.boolean(),
+        workspacePublicId: z.string().optional(),
+        workspaceSlug: z.string().optional(),
+      }),
+    )
+    .mutation(async ({ ctx, input }) => {
+      const userId = ctx.user?.id;
+
+      if (!userId)
+        throw new TRPCError({
+          message: `User not authenticated`,
+          code: "UNAUTHORIZED",
+        });
+
+      const invite = await inviteLinkRepo.getByCode(ctx.db, input.inviteCode);
+
+      if (
+        !invite ||
+        invite.status !== "active" ||
+        (invite.expiresAt && new Date() > invite.expiresAt)
+      )
+        throw new TRPCError({
+          message: `Invalid or expired invite link`,
+          code: "BAD_REQUEST",
+        });
+
+      const workspace = await workspaceRepo.getById(ctx.db, invite.workspaceId);
+
+      if (!workspace)
+        throw new TRPCError({
+          message: `Workspace not found`,
+          code: "NOT_FOUND",
+        });
+
+      const isMember = await workspaceRepo.isUserInWorkspace(
+        ctx.db,
+        userId,
+        invite.workspaceId,
+      );
+
+      if (isMember) {
+        throw new TRPCError({
+          message: `User is already a member of this workspace`,
+          code: "CONFLICT",
+        });
+      }
+
+      const user = await userRepo.getById(ctx.db, userId);
+
+      if (!user)
+        throw new TRPCError({
+          message: `User not found`,
+          code: "NOT_FOUND",
+        });
+
+      await memberRepo.create(ctx.db, {
+        workspaceId: invite.workspaceId,
+        email: user.email,
+        userId: user.id,
+        createdBy: user.id,
+        role: "member",
+        status: "active",
+      });
+
+      return {
+        success: true,
+        workspacePublicId: workspace.publicId,
+        workspaceSlug: workspace.slug,
+      };
+    }),
 });
diff --git a/packages/db/src/repository/inviteLink.repo.ts b/packages/db/src/repository/inviteLink.repo.ts
new file mode 100644
index 00000000..e4a73dec
--- /dev/null
+++ b/packages/db/src/repository/inviteLink.repo.ts
@@ -0,0 +1,71 @@
+import { and, eq, gt } from "drizzle-orm";
+
+import type { dbClient } from "@kan/db/client";
+import { workspaceInviteLinks } from "@kan/db/schema";
+import { generateUID } from "@kan/shared/utils";
+
+export const createInviteLink = async (
+  db: dbClient,
+  args: {
+    workspaceId: number;
+    code: string;
+    expiresAt: Date | null;
+    createdBy: string;
+  },
+) => {
+  const [result] = await db
+    .insert(workspaceInviteLinks)
+    .values({
+      publicId: generateUID(),
+      workspaceId: args.workspaceId,
+      code: args.code,
+      expiresAt: args.expiresAt ?? null,
+      status: "active",
+      createdBy: args.createdBy,
+    })
+    .returning({
+      publicId: workspaceInviteLinks.publicId,
+      code: workspaceInviteLinks.code,
+      status: workspaceInviteLinks.status,
+      expiresAt: workspaceInviteLinks.expiresAt,
+    });
+  return result;
+};
+
+export const deactivateAllActiveForWorkspace = async (
+  db: dbClient,
+  args: { workspaceId: number; updatedBy: string },
+) => {
+  await db
+    .update(workspaceInviteLinks)
+    .set({
+      status: "inactive",
+      updatedBy: args.updatedBy,
+      updatedAt: new Date(),
+    })
+    .where(
+      and(
+        eq(workspaceInviteLinks.workspaceId, args.workspaceId),
+        eq(workspaceInviteLinks.status, "active"),
+      ),
+    );
+};
+
+export const getActiveForWorkspace = async (
+  db: dbClient,
+  workspaceId: number,
+) => {
+  return db.query.workspaceInviteLinks.findFirst({
+    where: and(
+      eq(workspaceInviteLinks.workspaceId, workspaceId),
+      eq(workspaceInviteLinks.status, "active"),
+    ),
+    orderBy: (links, { desc }) => [desc(links.createdAt)],
+  });
+};
+
+export const getByCode = async (db: dbClient, code: string) => {
+  return db.query.workspaceInviteLinks.findFirst({
+    where: eq(workspaceInviteLinks.code, code),
+  });
+};
diff --git a/packages/db/src/repository/workspace.repo.ts b/packages/db/src/repository/workspace.repo.ts
index 3ef933d5..610ff28f 100644
--- a/packages/db/src/repository/workspace.repo.ts
+++ b/packages/db/src/repository/workspace.repo.ts
@@ -87,11 +87,25 @@ export const getByPublicId = (db: dbClient, workspacePublicId: string) => {
       publicId: true,
       name: true,
       plan: true,
+      slug: true,
     },
     where: eq(workspaces.publicId, workspacePublicId),
   });
 };
 
+export const getById = (db: dbClient, workspaceId: number) => {
+  return db.query.workspaces.findFirst({
+    columns: {
+      id: true,
+      publicId: true,
+      name: true,
+      plan: true,
+      slug: true,
+    },
+    where: eq(workspaces.id, workspaceId),
+  });
+};
+
 export const getByPublicIdWithMembers = (
   db: dbClient,
   workspacePublicId: string,
diff --git a/packages/db/src/schema/index.ts b/packages/db/src/schema/index.ts
index 520651bc..bf963f29 100644
--- a/packages/db/src/schema/index.ts
+++ b/packages/db/src/schema/index.ts
@@ -11,3 +11,4 @@ export * from "./users";
 export * from "./integrations";
 export * from "./workspaces";
 export * from "./subscriptions";
+export * from "./workspaceInviteLinks";
diff --git a/packages/db/src/schema/workspaceInviteLinks.ts b/packages/db/src/schema/workspaceInviteLinks.ts
index 730c6c5d..780a3863 100644
--- a/packages/db/src/schema/workspaceInviteLinks.ts
+++ b/packages/db/src/schema/workspaceInviteLinks.ts
@@ -4,9 +4,11 @@ import {
   pgEnum,
   pgTable,
   timestamp,
+  uuid,
   varchar,
 } from "drizzle-orm/pg-core";
 
+import { users } from "./users";
 import { workspaces } from "./workspaces";
 
 export const inviteLinkStatuses = ["active", "inactive"] as const;
@@ -18,6 +20,7 @@ export const inviteLinkStatusEnum = pgEnum(
 
 export const workspaceInviteLinks = pgTable("workspace_invite_links", {
   id: bigserial("id", { mode: "number" }).primaryKey(),
+  publicId: varchar("publicId", { length: 12 }).notNull().unique(),
   workspaceId: bigint("workspaceId", { mode: "number" })
     .notNull()
     .references(() => workspaces.id, { onDelete: "cascade" }),
@@ -25,4 +28,11 @@ export const workspaceInviteLinks = pgTable("workspace_invite_links", {
   status: inviteLinkStatusEnum("status").notNull().default("active"),
   expiresAt: timestamp("expiresAt"),
   createdAt: timestamp("createdAt").defaultNow().notNull(),
+  createdBy: uuid("createdBy").references(() => users.id, {
+    onDelete: "set null",
+  }),
+  updatedAt: timestamp("updatedAt"),
+  updatedBy: uuid("updatedBy").references(() => users.id, {
+    onDelete: "set null",
+  }),
 }).enableRLS();