2026-01-20 19:53:54 +00:00
|
|
|
<?php
|
|
|
|
|
|
|
|
|
|
declare(strict_types=1);
|
|
|
|
|
|
|
|
|
|
namespace App\Http\Controllers\Auth;
|
|
|
|
|
|
|
|
|
|
use App\Http\Controllers\Controller;
|
2026-04-15 01:22:04 +00:00
|
|
|
use App\Models\Invite;
|
|
|
|
|
use App\Models\Workspace;
|
2026-01-20 19:53:54 +00:00
|
|
|
use Illuminate\Http\RedirectResponse;
|
|
|
|
|
use Illuminate\Http\Request;
|
|
|
|
|
use Inertia\Inertia;
|
|
|
|
|
use Inertia\Response;
|
|
|
|
|
|
|
|
|
|
class AcceptInviteController extends Controller
|
|
|
|
|
{
|
|
|
|
|
/**
|
|
|
|
|
* Display the invite view.
|
|
|
|
|
*/
|
2026-04-15 01:22:04 +00:00
|
|
|
public function show(Invite $invite): Response
|
2026-01-20 19:53:54 +00:00
|
|
|
{
|
2026-04-15 01:22:04 +00:00
|
|
|
$invite->load('account');
|
2026-01-20 19:53:54 +00:00
|
|
|
|
feat: @mentions in comments, AI Action layer + MCP tools, settings tabs
Mentions in post comments
- @mention autocomplete (workspace members, current user excluded) with
marker syntax @[uuid] persisted, display names rendered via CommentBody
chips; live edit replaces markers with names and converts back on save.
- NotifyMentions action with workspace-scoped membership check, dedupes
same user, only newly-added mentions on update.
- Email + in-app via SendNotification job, respecting per-user
notification_preferences.mentioned_in_comment.
- Heartbeat-based presence (Cache, 60s TTL, 30s ping) so online recipients
get only the in-app notification — no email noise.
- Real-time bell on workspace.{id}.user.{id} private channel
(NotificationCreated event), scoped channel name avoids client-side
filtering and lays out a convention for future workspace channels.
- Mailable localized via lang/{en,es,pt-BR}/mail.php; Maizzle source
template for the email is committed and built into resources/views/mail.
AI generation refactor (Action layer + MCP)
- Extracted Actions/Ai/Generate{Image,Video} with QuotaExhaustedException
so agent tools and MCP tools share a single domain entry point.
- Mcp/Tools/Ai/Generate{Image,Video}Tool registered in TryPostServer; both
return MediaResource payloads.
- Orientation::imageApiSize maps non-OpenAI ratios to 1:1/2:3/3:2.
- config/ai.php is now the single source of truth driven by env, removing
the trypost.ai shim. Default text/image providers flipped to OpenAI.
Settings/UX
- /settings/workspace split into shadcn Tabs (Workspace / Brand / Users)
with three components.
- /assets and the in-editor MediaPicker open the ImagePreviewDialog
lightbox on image click while preserving action button behaviour.
- Comments tab landed via ?tab=comments&comment=<id> from notification
click (scroll-to + temporary highlight).
- Mention autocomplete popover flips above when near the viewport bottom.
- Real social platform PNGs replace Tabler brand glyphs in schedule
pills and post list, with hover tooltip carrying display_name + handle.
Bug fixes
- AcceptInvite: controller now passes workspace + role payload that the
Vue page expects; login/register CTAs preselect the invite email.
- WorkspaceInvite mailable: stopped referencing nonexistent
$invite->workspace and $invite->role; column added to the migration,
Invite model casts role to WorkspaceRole, CreateInvite persists it.
- PostCommentCreated: added broadcastAs so .PostCommentCreated actually
matches the Echo listener; payload now includes mentioned_users so
receivers render the chip correctly without a refetch.
- Preview components for X/Pinterest/Threads/Bluesky/LinkedIn/Mastodon/
TikTok/YouTube switched from item.type === 'image' to
!isVideoMedia(item) so media without a persisted type still renders.
- UpdatePostRequest now accepts media.*.{type,mime_type,size,...} so the
posts.media JSON keeps the metadata that the previews need.
- Removed throttle:6,1 from social connect routes (was 429ing legitimate
OAuth retries).
- Used MediaType enum cases instead of literal 'image'/'video' strings
when creating media rows.
Tests
- MentionParser unit tests, NotifyMentions feature tests including
online/offline channel selection and preference gating, MCP AI tool
happy paths, MentionedInComment mailable rendering, AcceptInvite +
search-members + index mentioned_users path. 1229 passing.
2026-05-01 23:59:03 +00:00
|
|
|
$firstWorkspaceId = collect($invite->workspaces ?? [])->first();
|
|
|
|
|
$workspace = $firstWorkspaceId ? Workspace::find($firstWorkspaceId) : null;
|
|
|
|
|
|
2026-06-22 17:24:19 +00:00
|
|
|
$role = $invite->role;
|
feat: @mentions in comments, AI Action layer + MCP tools, settings tabs
Mentions in post comments
- @mention autocomplete (workspace members, current user excluded) with
marker syntax @[uuid] persisted, display names rendered via CommentBody
chips; live edit replaces markers with names and converts back on save.
- NotifyMentions action with workspace-scoped membership check, dedupes
same user, only newly-added mentions on update.
- Email + in-app via SendNotification job, respecting per-user
notification_preferences.mentioned_in_comment.
- Heartbeat-based presence (Cache, 60s TTL, 30s ping) so online recipients
get only the in-app notification — no email noise.
- Real-time bell on workspace.{id}.user.{id} private channel
(NotificationCreated event), scoped channel name avoids client-side
filtering and lays out a convention for future workspace channels.
- Mailable localized via lang/{en,es,pt-BR}/mail.php; Maizzle source
template for the email is committed and built into resources/views/mail.
AI generation refactor (Action layer + MCP)
- Extracted Actions/Ai/Generate{Image,Video} with QuotaExhaustedException
so agent tools and MCP tools share a single domain entry point.
- Mcp/Tools/Ai/Generate{Image,Video}Tool registered in TryPostServer; both
return MediaResource payloads.
- Orientation::imageApiSize maps non-OpenAI ratios to 1:1/2:3/3:2.
- config/ai.php is now the single source of truth driven by env, removing
the trypost.ai shim. Default text/image providers flipped to OpenAI.
Settings/UX
- /settings/workspace split into shadcn Tabs (Workspace / Brand / Users)
with three components.
- /assets and the in-editor MediaPicker open the ImagePreviewDialog
lightbox on image click while preserving action button behaviour.
- Comments tab landed via ?tab=comments&comment=<id> from notification
click (scroll-to + temporary highlight).
- Mention autocomplete popover flips above when near the viewport bottom.
- Real social platform PNGs replace Tabler brand glyphs in schedule
pills and post list, with hover tooltip carrying display_name + handle.
Bug fixes
- AcceptInvite: controller now passes workspace + role payload that the
Vue page expects; login/register CTAs preselect the invite email.
- WorkspaceInvite mailable: stopped referencing nonexistent
$invite->workspace and $invite->role; column added to the migration,
Invite model casts role to WorkspaceRole, CreateInvite persists it.
- PostCommentCreated: added broadcastAs so .PostCommentCreated actually
matches the Echo listener; payload now includes mentioned_users so
receivers render the chip correctly without a refetch.
- Preview components for X/Pinterest/Threads/Bluesky/LinkedIn/Mastodon/
TikTok/YouTube switched from item.type === 'image' to
!isVideoMedia(item) so media without a persisted type still renders.
- UpdatePostRequest now accepts media.*.{type,mime_type,size,...} so the
posts.media JSON keeps the metadata that the previews need.
- Removed throttle:6,1 from social connect routes (was 429ing legitimate
OAuth retries).
- Used MediaType enum cases instead of literal 'image'/'video' strings
when creating media rows.
Tests
- MentionParser unit tests, NotifyMentions feature tests including
online/offline channel selection and preference gating, MCP AI tool
happy paths, MentionedInComment mailable rendering, AcceptInvite +
search-members + index mentioned_users path. 1229 passing.
2026-05-01 23:59:03 +00:00
|
|
|
|
2026-01-20 19:53:54 +00:00
|
|
|
return Inertia::render('auth/AcceptInvite', [
|
|
|
|
|
'invite' => [
|
|
|
|
|
'id' => $invite->id,
|
|
|
|
|
'email' => $invite->email,
|
2026-04-15 01:22:04 +00:00
|
|
|
'account' => [
|
|
|
|
|
'id' => $invite->account->id,
|
|
|
|
|
'name' => $invite->account->name,
|
2026-01-20 19:53:54 +00:00
|
|
|
],
|
feat: @mentions in comments, AI Action layer + MCP tools, settings tabs
Mentions in post comments
- @mention autocomplete (workspace members, current user excluded) with
marker syntax @[uuid] persisted, display names rendered via CommentBody
chips; live edit replaces markers with names and converts back on save.
- NotifyMentions action with workspace-scoped membership check, dedupes
same user, only newly-added mentions on update.
- Email + in-app via SendNotification job, respecting per-user
notification_preferences.mentioned_in_comment.
- Heartbeat-based presence (Cache, 60s TTL, 30s ping) so online recipients
get only the in-app notification — no email noise.
- Real-time bell on workspace.{id}.user.{id} private channel
(NotificationCreated event), scoped channel name avoids client-side
filtering and lays out a convention for future workspace channels.
- Mailable localized via lang/{en,es,pt-BR}/mail.php; Maizzle source
template for the email is committed and built into resources/views/mail.
AI generation refactor (Action layer + MCP)
- Extracted Actions/Ai/Generate{Image,Video} with QuotaExhaustedException
so agent tools and MCP tools share a single domain entry point.
- Mcp/Tools/Ai/Generate{Image,Video}Tool registered in TryPostServer; both
return MediaResource payloads.
- Orientation::imageApiSize maps non-OpenAI ratios to 1:1/2:3/3:2.
- config/ai.php is now the single source of truth driven by env, removing
the trypost.ai shim. Default text/image providers flipped to OpenAI.
Settings/UX
- /settings/workspace split into shadcn Tabs (Workspace / Brand / Users)
with three components.
- /assets and the in-editor MediaPicker open the ImagePreviewDialog
lightbox on image click while preserving action button behaviour.
- Comments tab landed via ?tab=comments&comment=<id> from notification
click (scroll-to + temporary highlight).
- Mention autocomplete popover flips above when near the viewport bottom.
- Real social platform PNGs replace Tabler brand glyphs in schedule
pills and post list, with hover tooltip carrying display_name + handle.
Bug fixes
- AcceptInvite: controller now passes workspace + role payload that the
Vue page expects; login/register CTAs preselect the invite email.
- WorkspaceInvite mailable: stopped referencing nonexistent
$invite->workspace and $invite->role; column added to the migration,
Invite model casts role to WorkspaceRole, CreateInvite persists it.
- PostCommentCreated: added broadcastAs so .PostCommentCreated actually
matches the Echo listener; payload now includes mentioned_users so
receivers render the chip correctly without a refetch.
- Preview components for X/Pinterest/Threads/Bluesky/LinkedIn/Mastodon/
TikTok/YouTube switched from item.type === 'image' to
!isVideoMedia(item) so media without a persisted type still renders.
- UpdatePostRequest now accepts media.*.{type,mime_type,size,...} so the
posts.media JSON keeps the metadata that the previews need.
- Removed throttle:6,1 from social connect routes (was 429ing legitimate
OAuth retries).
- Used MediaType enum cases instead of literal 'image'/'video' strings
when creating media rows.
Tests
- MentionParser unit tests, NotifyMentions feature tests including
online/offline channel selection and preference gating, MCP AI tool
happy paths, MentionedInComment mailable rendering, AcceptInvite +
search-members + index mentioned_users path. 1229 passing.
2026-05-01 23:59:03 +00:00
|
|
|
'workspace' => $workspace ? [
|
|
|
|
|
'id' => $workspace->id,
|
|
|
|
|
'name' => $workspace->name,
|
|
|
|
|
] : null,
|
|
|
|
|
'role' => [
|
|
|
|
|
'value' => $role->value,
|
|
|
|
|
'label' => $role->label(),
|
|
|
|
|
],
|
2026-01-20 19:53:54 +00:00
|
|
|
],
|
|
|
|
|
]);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Accept the invite.
|
|
|
|
|
*/
|
2026-04-15 01:22:04 +00:00
|
|
|
public function accept(Request $request, Invite $invite): RedirectResponse
|
2026-01-20 19:53:54 +00:00
|
|
|
{
|
|
|
|
|
$user = $request->user();
|
|
|
|
|
|
|
|
|
|
// Verify the invite is for this user
|
|
|
|
|
if ($invite->email !== $user->email) {
|
2026-01-22 01:08:18 +00:00
|
|
|
session()->flash('flash.banner', __('settings.members.flash.wrong_email'));
|
2026-01-20 19:53:54 +00:00
|
|
|
session()->flash('flash.bannerStyle', 'danger');
|
|
|
|
|
|
2026-03-29 22:24:28 +00:00
|
|
|
return redirect()->route('app.calendar');
|
2026-01-20 19:53:54 +00:00
|
|
|
}
|
|
|
|
|
|
2026-04-15 01:22:04 +00:00
|
|
|
// Check if already a member of the account
|
|
|
|
|
if ($user->account_id === $invite->account_id) {
|
|
|
|
|
$invite->update(['accepted_at' => now()]);
|
2026-01-20 19:53:54 +00:00
|
|
|
|
2026-01-22 01:08:18 +00:00
|
|
|
session()->flash('flash.banner', __('settings.members.flash.already_member'));
|
2026-01-20 19:53:54 +00:00
|
|
|
session()->flash('flash.bannerStyle', 'info');
|
|
|
|
|
|
2026-03-29 22:24:28 +00:00
|
|
|
return redirect()->route('app.calendar');
|
2026-01-20 19:53:54 +00:00
|
|
|
}
|
|
|
|
|
|
2026-04-15 01:22:04 +00:00
|
|
|
// Add user to the account
|
|
|
|
|
$user->update(['account_id' => $invite->account_id]);
|
|
|
|
|
|
|
|
|
|
// Attach user to the invited workspaces
|
|
|
|
|
if ($invite->workspaces) {
|
|
|
|
|
foreach ($invite->workspaces as $workspaceId) {
|
|
|
|
|
$workspace = Workspace::find($workspaceId);
|
|
|
|
|
|
|
|
|
|
if ($workspace && $workspace->account_id === $invite->account_id) {
|
|
|
|
|
$workspace->members()->syncWithoutDetaching([
|
2026-06-22 17:24:19 +00:00
|
|
|
$user->id => ['role' => $invite->role->value],
|
2026-04-15 01:22:04 +00:00
|
|
|
]);
|
|
|
|
|
|
|
|
|
|
// Set first workspace as current
|
|
|
|
|
if (! $user->current_workspace_id) {
|
|
|
|
|
$user->update(['current_workspace_id' => $workspace->id]);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$invite->update(['accepted_at' => now()]);
|
2026-01-20 19:53:54 +00:00
|
|
|
|
2026-01-22 01:08:18 +00:00
|
|
|
session()->flash('flash.banner', __('settings.members.flash.invite_accepted'));
|
2026-01-20 19:53:54 +00:00
|
|
|
session()->flash('flash.bannerStyle', 'success');
|
|
|
|
|
|
2026-03-29 22:24:28 +00:00
|
|
|
return redirect()->route('app.calendar');
|
2026-01-20 19:53:54 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Decline the invite.
|
|
|
|
|
*/
|
2026-04-15 01:22:04 +00:00
|
|
|
public function decline(Request $request, Invite $invite): RedirectResponse
|
2026-01-20 19:53:54 +00:00
|
|
|
{
|
|
|
|
|
$user = $request->user();
|
|
|
|
|
|
|
|
|
|
// Verify the invite is for this user
|
|
|
|
|
if ($invite->email !== $user->email) {
|
2026-01-22 01:08:18 +00:00
|
|
|
session()->flash('flash.banner', __('settings.members.flash.wrong_email'));
|
2026-01-20 19:53:54 +00:00
|
|
|
session()->flash('flash.bannerStyle', 'danger');
|
|
|
|
|
|
2026-03-29 22:24:28 +00:00
|
|
|
return redirect()->route('app.calendar');
|
2026-01-20 19:53:54 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
$invite->delete();
|
|
|
|
|
|
2026-01-22 01:08:18 +00:00
|
|
|
session()->flash('flash.banner', __('settings.members.flash.invite_declined'));
|
2026-01-20 19:53:54 +00:00
|
|
|
session()->flash('flash.bannerStyle', 'info');
|
|
|
|
|
|
2026-03-29 22:24:28 +00:00
|
|
|
return redirect()->route('app.calendar');
|
2026-01-20 19:53:54 +00:00
|
|
|
}
|
|
|
|
|
}
|