d3ro-voice/server/supabase/functions/team-invite/index.ts

// server/supabase/functions/team-invite/index.ts
// 팀 초대 생성 — 이메일 기반 초대 토큰 발급.
// 초대 링크는 클라이언트가 이메일로 공유 (추후 Edge Function에서 SMTP/Resend 연동).

import { corsHeaders, handleCorsPreflightRequest } from '../_shared/cors.ts'
import { requireUser, authErrorResponse, type AuthError } from '../_shared/auth.ts'
import { createServiceRoleClient } from '../_shared/quota.ts'

interface InviteRequest {
  team_id: string
  email: string
  role?: 'admin' | 'member'
}

// @ts-expect-error — Deno 런타임 전역
Deno.serve(async (req: Request) => {
  const preflight = handleCorsPreflightRequest(req)
  if (preflight) return preflight

  if (req.method !== 'POST') {
    return new Response(JSON.stringify({ error: 'Method not allowed' }), {
      status: 405,
      headers: { ...corsHeaders, 'Content-Type': 'application/json' }
    })
  }

  try {
    const user = await requireUser(req)
    const body = (await req.json()) as InviteRequest

    if (!body.team_id || !body.email) {
      return new Response(
        JSON.stringify({ error: 'team_id and email are required' }),
        { status: 400, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
      )
    }

    const serviceClient = createServiceRoleClient()

    // 권한 확인: 요청자가 해당 팀의 owner/admin 인가?
    const { data: membership } = await serviceClient
      .from('team_members')
      .select('role')
      .eq('team_id', body.team_id)
      .eq('user_id', user.id)
      .maybeSingle()

    const role = (membership?.role as string | undefined) ?? null
    if (role !== 'owner' && role !== 'admin') {
      return new Response(
        JSON.stringify({ error: 'forbidden', message: '팀 owner/admin만 초대할 수 있습니다.' }),
        { status: 403, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
      )
    }

    // 토큰 생성 (service_role RPC)
    const { data: tokenData, error: tokenErr } = await serviceClient.rpc('generate_invite_token')
    if (tokenErr || !tokenData) {
      throw new Error(`토큰 생성 실패: ${tokenErr?.message ?? 'unknown'}`)
    }
    const token = tokenData as string

    // 초대 INSERT
    const { data: invite, error: insertErr } = await serviceClient
      .from('team_invites')
      .insert({
        team_id: body.team_id,
        invited_by: user.id,
        email: body.email.toLowerCase().trim(),
        role: body.role ?? 'member',
        token
      })
      .select('id, token, expires_at')
      .single()

    if (insertErr || !invite) {
      throw new Error(`초대 생성 실패: ${insertErr?.message ?? 'unknown'}`)
    }

    // 초대 링크 구성 (클라이언트에서 이메일로 공유)
    // @ts-expect-error — Deno.env
    const siteUrl = Deno.env.get('SITE_URL') ?? 'https://d3ro.dev'
    const inviteUrl = `${siteUrl}/accept-invite?token=${encodeURIComponent(token)}`

    // Resend API로 이메일 발송 (옵션 — RESEND_API_KEY 설정 시에만)
    // @ts-expect-error — Deno.env
    const resendKey = Deno.env.get('RESEND_API_KEY') ?? ''
    // @ts-expect-error — Deno.env
    const fromAddress = Deno.env.get('RESEND_FROM') ?? 'D3RO Voice <noreply@d3ro.dev>'
    let emailSent = false
    let emailError: string | null = null

    if (resendKey) {
      try {
        // 팀 이름 조회 (이메일 본문용)
        const { data: teamRow } = await serviceClient
          .from('teams')
          .select('name')
          .eq('id', body.team_id)
          .maybeSingle()
        const teamName = (teamRow?.name as string | undefined) ?? '팀'

        const inviterEmail = user.email ?? '(알 수 없음)'

        const resendResp = await fetch('https://api.resend.com/emails', {
          method: 'POST',
          headers: {
            Authorization: `Bearer ${resendKey}`,
            'Content-Type': 'application/json'
          },
          body: JSON.stringify({
            from: fromAddress,
            to: [body.email.toLowerCase().trim()],
            subject: `${teamName} 팀에 초대되었습니다 — D3RO Voice`,
            html: `
              <div style="font-family: system-ui, sans-serif; max-width: 560px; margin: 0 auto; padding: 24px; color: #1a1a1c;">
                <h1 style="color: #f25b29; font-weight: 300; letter-spacing: -1px;">D3RO VOICE</h1>
                <p>안녕하세요.</p>
                <p><strong>${inviterEmail}</strong> 님이 당신을 <strong>${teamName}</strong> 팀(${body.role ?? 'member'})에 초대했습니다.</p>
                <p style="margin: 32px 0;">
                  <a href="${inviteUrl}"
                     style="display: inline-block; padding: 14px 32px; background: #f25b29; color: #ffffff; text-decoration: none; border-radius: 8px; font-weight: 600;">
                    초대 수락하기
                  </a>
                </p>
                <p style="color: #8e8e93; font-size: 13px;">
                  이 초대는 7일 후 만료됩니다. 직접 링크를 복사하려면:
                </p>
                <p style="background: #f5f5f7; padding: 12px; border-radius: 6px; font-family: monospace; font-size: 11px; word-break: break-all;">
                  ${inviteUrl}
                </p>
                <hr style="margin: 32px 0; border: 0; border-top: 1px solid #eee;" />
                <p style="color: #8e8e93; font-size: 11px;">
                  D3RO Voice — 로컬+클라우드 하이브리드 AI 음성 어시스턴트
                </p>
              </div>
            `
          })
        })

        if (resendResp.ok) {
          emailSent = true
        } else {
          emailError = `Resend ${resendResp.status}: ${await resendResp.text()}`
        }
      } catch (e) {
        emailError = e instanceof Error ? e.message : String(e)
      }
    }

    return new Response(
      JSON.stringify({
        id: invite.id,
        url: inviteUrl,
        expires_at: invite.expires_at,
        email_sent: emailSent,
        email_error: emailError
      }),
      { status: 200, headers: { ...corsHeaders, 'Content-Type': 'application/json' } }
    )
  } catch (err) {
    if (err && typeof err === 'object' && 'status' in err && 'message' in err) {
      return authErrorResponse(err as AuthError, corsHeaders)
    }
    const message = err instanceof Error ? err.message : 'Unknown error'
    return new Response(JSON.stringify({ error: message }), {
      status: 500,
      headers: { ...corsHeaders, 'Content-Type': 'application/json' }
    })
  }
})