+
+
Notification Preferences
Choose which notifications you receive and how.
+
);
}
diff --git a/src/app/api/v1/admin/documenso/health/route.ts b/src/app/api/v1/admin/documenso/health/route.ts
new file mode 100644
index 0000000..f9f7218
--- /dev/null
+++ b/src/app/api/v1/admin/documenso/health/route.ts
@@ -0,0 +1,20 @@
+import { NextResponse } from 'next/server';
+
+import { withAuth, withPermission } from '@/lib/api/helpers';
+import { errorResponse } from '@/lib/errors';
+import { checkDocumensoHealth } from '@/lib/services/documenso-client';
+
+/**
+ * Admin probe — calls Documenso /api/v1/health using the port's effective
+ * config. Used by the "Test connection" button on /admin/documenso.
+ */
+export const POST = withAuth(
+ withPermission('admin', 'manage_settings', async (_req, ctx) => {
+ try {
+ const result = await checkDocumensoHealth(ctx.portId);
+ return NextResponse.json({ data: result });
+ } catch (error) {
+ return errorResponse(error);
+ }
+ }),
+);
diff --git a/src/app/api/v1/admin/invitations/[id]/resend/route.ts b/src/app/api/v1/admin/invitations/[id]/resend/route.ts
new file mode 100644
index 0000000..cd22300
--- /dev/null
+++ b/src/app/api/v1/admin/invitations/[id]/resend/route.ts
@@ -0,0 +1,22 @@
+import { NextResponse } from 'next/server';
+
+import { withAuth, withPermission } from '@/lib/api/helpers';
+import { errorResponse } from '@/lib/errors';
+import { resendCrmInvite } from '@/lib/services/crm-invite.service';
+
+export const POST = withAuth(
+ withPermission('admin', 'manage_users', async (_req, ctx, params) => {
+ try {
+ const id = params.id ?? '';
+ const result = await resendCrmInvite(id, {
+ userId: ctx.userId,
+ portId: ctx.portId,
+ ipAddress: ctx.ipAddress,
+ userAgent: ctx.userAgent,
+ });
+ return NextResponse.json({ data: result });
+ } catch (error) {
+ return errorResponse(error);
+ }
+ }),
+);
diff --git a/src/app/api/v1/admin/invitations/[id]/route.ts b/src/app/api/v1/admin/invitations/[id]/route.ts
new file mode 100644
index 0000000..e8aac2d
--- /dev/null
+++ b/src/app/api/v1/admin/invitations/[id]/route.ts
@@ -0,0 +1,22 @@
+import { NextResponse } from 'next/server';
+
+import { withAuth, withPermission } from '@/lib/api/helpers';
+import { errorResponse } from '@/lib/errors';
+import { revokeCrmInvite } from '@/lib/services/crm-invite.service';
+
+export const DELETE = withAuth(
+ withPermission('admin', 'manage_users', async (_req, ctx, params) => {
+ try {
+ const id = params.id ?? '';
+ await revokeCrmInvite(id, {
+ userId: ctx.userId,
+ portId: ctx.portId,
+ ipAddress: ctx.ipAddress,
+ userAgent: ctx.userAgent,
+ });
+ return NextResponse.json({ success: true });
+ } catch (error) {
+ return errorResponse(error);
+ }
+ }),
+);
diff --git a/src/app/api/v1/admin/invitations/route.ts b/src/app/api/v1/admin/invitations/route.ts
new file mode 100644
index 0000000..0d2eab5
--- /dev/null
+++ b/src/app/api/v1/admin/invitations/route.ts
@@ -0,0 +1,36 @@
+import { NextResponse } from 'next/server';
+import { z } from 'zod';
+
+import { withAuth, withPermission } from '@/lib/api/helpers';
+import { parseBody } from '@/lib/api/route-helpers';
+import { errorResponse } from '@/lib/errors';
+import { createCrmInvite, listCrmInvites } from '@/lib/services/crm-invite.service';
+
+export const GET = withAuth(
+ withPermission('admin', 'manage_users', async (_req, _ctx) => {
+ try {
+ const data = await listCrmInvites();
+ return NextResponse.json({ data });
+ } catch (error) {
+ return errorResponse(error);
+ }
+ }),
+);
+
+const createInviteSchema = z.object({
+ email: z.string().email(),
+ name: z.string().min(1).max(200).optional(),
+ isSuperAdmin: z.boolean().optional().default(false),
+});
+
+export const POST = withAuth(
+ withPermission('admin', 'manage_users', async (req, _ctx) => {
+ try {
+ const body = await parseBody(req, createInviteSchema);
+ const result = await createCrmInvite(body);
+ return NextResponse.json({ data: result }, { status: 201 });
+ } catch (error) {
+ return errorResponse(error);
+ }
+ }),
+);
diff --git a/src/app/api/v1/users/me/preferences/route.ts b/src/app/api/v1/users/me/preferences/route.ts
new file mode 100644
index 0000000..6de3ff5
--- /dev/null
+++ b/src/app/api/v1/users/me/preferences/route.ts
@@ -0,0 +1,47 @@
+import { eq } from 'drizzle-orm';
+import { NextResponse } from 'next/server';
+
+import { withAuth } from '@/lib/api/helpers';
+import { parseBody } from '@/lib/api/route-helpers';
+import { db } from '@/lib/db';
+import { userProfiles, type UserPreferences } from '@/lib/db/schema/users';
+import { errorResponse } from '@/lib/errors';
+import { updateUserPreferencesSchema } from '@/lib/validators/user-preferences';
+
+export const GET = withAuth(async (_req, ctx) => {
+ try {
+ const profile = await db.query.userProfiles.findFirst({
+ where: eq(userProfiles.userId, ctx.userId),
+ });
+ return NextResponse.json({ data: profile?.preferences ?? {} });
+ } catch (error) {
+ return errorResponse(error);
+ }
+});
+
+export const PATCH = withAuth(async (req, ctx) => {
+ try {
+ const patch = await parseBody(req, updateUserPreferencesSchema);
+
+ const profile = await db.query.userProfiles.findFirst({
+ where: eq(userProfiles.userId, ctx.userId),
+ });
+ if (!profile) {
+ return NextResponse.json({ error: 'Profile not found' }, { status: 404 });
+ }
+
+ const next: UserPreferences = {
+ ...(profile.preferences ?? {}),
+ ...patch,
+ };
+
+ await db
+ .update(userProfiles)
+ .set({ preferences: next })
+ .where(eq(userProfiles.userId, ctx.userId));
+
+ return NextResponse.json({ data: next });
+ } catch (error) {
+ return errorResponse(error);
+ }
+});
diff --git a/src/components/admin/documenso/documenso-test-button.tsx b/src/components/admin/documenso/documenso-test-button.tsx
new file mode 100644
index 0000000..6248c57
--- /dev/null
+++ b/src/components/admin/documenso/documenso-test-button.tsx
@@ -0,0 +1,64 @@
+'use client';
+
+import { useState } from 'react';
+import { Loader2, CheckCircle2, XCircle } from 'lucide-react';
+import { toast } from 'sonner';
+
+import { Button } from '@/components/ui/button';
+import { apiFetch } from '@/lib/api/client';
+
+interface HealthResponse {
+ ok: boolean;
+ status?: number;
+ error?: string;
+}
+
+export function DocumensoTestButton() {
+ const [pending, setPending] = useState(false);
+ const [result, setResult] = useState
(null);
+
+ async function runTest() {
+ setPending(true);
+ setResult(null);
+ try {
+ const res = await apiFetch<{ data: HealthResponse }>('/api/v1/admin/documenso/health', {
+ method: 'POST',
+ });
+ setResult(res.data);
+ if (res.data.ok) {
+ toast.success(`Documenso reachable (HTTP ${res.data.status ?? 200})`);
+ } else {
+ toast.error(
+ res.data.error ?? `Documenso responded with HTTP ${res.data.status ?? 'unknown'}`,
+ );
+ }
+ } catch (err) {
+ const message = err instanceof Error ? err.message : 'Test failed';
+ setResult({ ok: false, error: message });
+ toast.error(message);
+ } finally {
+ setPending(false);
+ }
+ }
+
+ return (
+
+ {result &&
+ (result.ok ? (
+
+
+ ) : (
+
+
+ ))}
+
+ {pending &&
+
+ );
+}
diff --git a/src/components/admin/invitations/invitations-manager.tsx b/src/components/admin/invitations/invitations-manager.tsx
new file mode 100644
index 0000000..b94788c
--- /dev/null
+++ b/src/components/admin/invitations/invitations-manager.tsx
@@ -0,0 +1,241 @@
+'use client';
+
+import { useState } from 'react';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { Loader2, Mail, RotateCw, Plus, Trash2 } from 'lucide-react';
+import { toast } from 'sonner';
+
+import { Button } from '@/components/ui/button';
+import { Input } from '@/components/ui/input';
+import { Label } from '@/components/ui/label';
+import { Switch } from '@/components/ui/switch';
+import { Sheet, SheetContent, SheetFooter, SheetHeader, SheetTitle } from '@/components/ui/sheet';
+import { ConfirmationDialog } from '@/components/shared/confirmation-dialog';
+import { apiFetch } from '@/lib/api/client';
+
+interface Invite {
+ id: string;
+ email: string;
+ name: string | null;
+ isSuperAdmin: boolean;
+ expiresAt: string;
+ usedAt: string | null;
+ createdAt: string;
+ status: 'pending' | 'accepted' | 'expired';
+}
+
+const STATUS_STYLES: Record = {
+ pending: 'bg-amber-100 text-amber-800 border-amber-200',
+ accepted: 'bg-green-100 text-green-800 border-green-200',
+ expired: 'bg-muted text-muted-foreground border-muted',
+};
+
+export function InvitationsManager() {
+ const qc = useQueryClient();
+ const [sheetOpen, setSheetOpen] = useState(false);
+ const [email, setEmail] = useState('');
+ const [name, setName] = useState('');
+ const [isSuperAdmin, setIsSuperAdmin] = useState(false);
+
+ const { data: invites = [], isLoading } = useQuery({
+ queryKey: ['admin', 'invitations'],
+ queryFn: () => apiFetch<{ data: Invite[] }>('/api/v1/admin/invitations').then((r) => r.data),
+ });
+
+ const createMutation = useMutation({
+ mutationFn: () =>
+ apiFetch('/api/v1/admin/invitations', {
+ method: 'POST',
+ body: { email, name: name || undefined, isSuperAdmin },
+ }),
+ onSuccess: () => {
+ toast.success(`Invite sent to ${email}`);
+ setSheetOpen(false);
+ setEmail('');
+ setName('');
+ setIsSuperAdmin(false);
+ qc.invalidateQueries({ queryKey: ['admin', 'invitations'] });
+ },
+ onError: (err) => toast.error(err instanceof Error ? err.message : 'Failed to send invite'),
+ });
+
+ const resendMutation = useMutation({
+ mutationFn: (id: string) =>
+ apiFetch(`/api/v1/admin/invitations/${id}/resend`, { method: 'POST' }),
+ onSuccess: () => {
+ toast.success('Invite resent');
+ qc.invalidateQueries({ queryKey: ['admin', 'invitations'] });
+ },
+ onError: (err) => toast.error(err instanceof Error ? err.message : 'Failed to resend'),
+ });
+
+ const revokeMutation = useMutation({
+ mutationFn: (id: string) => apiFetch(`/api/v1/admin/invitations/${id}`, { method: 'DELETE' }),
+ onSuccess: () => {
+ toast.success('Invite revoked');
+ qc.invalidateQueries({ queryKey: ['admin', 'invitations'] });
+ },
+ onError: (err) => toast.error(err instanceof Error ? err.message : 'Failed to revoke'),
+ });
+
+ return (
+
+
+
+
Pending invitations
+
+ Invitations expire 72 hours after issue. Resending mints a new token and emails it.
+
+
+
setSheetOpen(true)}>
+
+
+
+ {isLoading ? (
+
Loading…
+ ) : invites.length === 0 ? (
+
+
+
No invitations issued yet.
+
+ ) : (
+
+
+
+
+ Email
+ Name
+ Role
+ Status
+ Expires
+
+
+
+ {invites.map((i) => (
+
+ {i.email}
+ {i.name ?? '—'}
+
+ {i.isSuperAdmin ? 'Super admin' : 'Standard user'}
+
+
+
+ {i.status}
+
+
+
+ {new Date(i.expiresAt).toLocaleString()}
+
+
+ {i.status === 'pending' || i.status === 'expired' ? (
+
+ resendMutation.mutate(i.id)}
+ disabled={resendMutation.isPending || !!i.usedAt}
+ title="Resend invite"
+ >
+
+ {i.status === 'pending' && (
+
+
+ ) : (
+ —
+ )}
+
+
+ ))}
+
+
+
+ )}
+
+
+
+
+ Send invitation
+
+
+
+
+
>({});
+ const [originals, setOriginals] = useState>({});
+
+ const fetchValues = useCallback(async () => {
+ setLoading(true);
+ try {
+ const res = await apiFetch('/api/v1/admin/settings');
+ const next: Record = {};
+ for (const field of fields) {
+ const port = res.data.portSettings.find((s) => s.key === field.key);
+ const global = res.data.globalSettings.find((s) => s.key === field.key);
+ next[field.key] = port?.value ?? global?.value ?? field.defaultValue;
+ }
+ setValues(next);
+ setOriginals(next);
+ } finally {
+ setLoading(false);
+ }
+ }, [fields]);
+
+ useEffect(() => {
+ void fetchValues();
+ }, [fetchValues]);
+
+ function setField(key: string, value: unknown) {
+ setValues((prev) => ({ ...prev, [key]: value }));
+ }
+
+ async function handleSave() {
+ setSaving(true);
+ try {
+ const changedFields = fields.filter((f) => values[f.key] !== originals[f.key]);
+ if (changedFields.length === 0) {
+ toast.info('No changes to save');
+ return;
+ }
+ for (const f of changedFields) {
+ await apiFetch('/api/v1/admin/settings', {
+ method: 'PUT',
+ body: { key: f.key, value: values[f.key] },
+ });
+ }
+ toast.success(`Saved ${changedFields.length} setting(s)`);
+ setOriginals(values);
+ } catch (err) {
+ toast.error(err instanceof Error ? err.message : 'Save failed');
+ } finally {
+ setSaving(false);
+ }
+ }
+
+ if (loading) {
+ return (
+
+
+ {title}
+
+
+
+
+
+
+ );
+ }
+
+ const dirty = fields.some((f) => values[f.key] !== originals[f.key]);
+
+ return (
+
+
+ {title}
+ {description && {description} }
+
+
+ {fields.map((field) => (
+ setField(field.key, v)}
+ />
+ ))}
+
+
+ {extra}
+
+ {saving &&
+
+
+
+ );
+}
+
+function FieldRow({
+ field,
+ value,
+ onChange,
+}: {
+ field: SettingFieldDef;
+ value: unknown;
+ onChange: (v: unknown) => void;
+}) {
+ const id = `setting-${field.key}`;
+
+ switch (field.type) {
+ case 'boolean':
+ return (
+
+
+
{field.label}
+ {field.description && (
+
{field.description}
+ )}
+
+
onChange(checked)} />
+
+
{field.label}
+ {field.description && (
+
{field.description}
+ )}
+