Add API endpoint for partner deactivation

apps/web/app/(ee)/api/partners/deactivate/route.ts

@@ -0,0 +1,64 @@
+import { DubApiError } from "@/lib/api/errors";
+import { deactivatePartner } from "@/lib/api/partners/deactivate-partner";
+import { getDefaultProgramIdOrThrow } from "@/lib/api/programs/get-default-program-id-or-throw";
+import { parseRequestBody } from "@/lib/api/utils";
+import { withWorkspace } from "@/lib/auth";
+
+import { throwIfNoPartnerIdOrTenantId } from "@/lib/partners/throw-if-no-partnerid-tenantid";
+import { deactivatePartnerApiSchema } from "@/lib/zod/schemas/partners";
+import { prisma } from "@dub/prisma";
+import { NextResponse } from "next/server";
+
+// POST /api/partners/deactivate – Deactivate a partner via API
+export const POST = withWorkspace(
+  async ({ workspace, req, session }) => {
+    let { partnerId, tenantId } = deactivatePartnerApiSchema.parse(
+      await parseRequestBody(req),
+    );
+
+    throwIfNoPartnerIdOrTenantId({
+      partnerId,
+      tenantId,
+    });
+
+    const programId = getDefaultProgramIdOrThrow(workspace);
+
+    if (tenantId && !partnerId) {
+      const programEnrollment = await prisma.programEnrollment.findUnique({
+        where: {
+          tenantId_programId: {
+            tenantId,
+            programId,
+          },
+        },
+        select: {
+          partnerId: true,
+        },
+      });
+
+      if (!programEnrollment) {
+        throw new DubApiError({
+          code: "not_found",
+          message: `Partner with tenantId ${tenantId} not found in program.`,
+        });
+      }
+
+      partnerId = programEnrollment.partnerId;
+    }
+
+    await deactivatePartner({
+      workspaceId: workspace.id,
+      programId,
+      partnerId: partnerId!, // coerce here because we're already throwing if no partnerId or tenantId
+      user: session.user,
+    });
+
+    return NextResponse.json({
+      partnerId,
+    });
+  },
+  {
+    requiredPlan: ["advanced", "enterprise"],
+    requiredRoles: ["owner", "member"],
+  },
+);

apps/web/lib/actions/partners/deactivate-partner.ts

@@ -1,6 +1,6 @@
 "use server";
 
-import { bulkDeactivatePartners } from "@/lib/api/partners/bulk-deactivate-partners";
+import { deactivatePartner } from "@/lib/api/partners/deactivate-partner";
 import { getDefaultProgramIdOrThrow } from "@/lib/api/programs/get-default-program-id-or-throw";
 import { deactivatePartnerSchema } from "@/lib/zod/schemas/partners";
 import { authActionClient } from "../safe-action";
@@ -20,10 +20,10 @@ export const deactivatePartnerAction = authActionClient
 
     const programId = getDefaultProgramIdOrThrow(workspace);
 
-    await bulkDeactivatePartners({
+    await deactivatePartner({
       workspaceId: workspace.id,
       programId,
-      partnerIds: [partnerId],
+      partnerId,
       user,
     });
   });

apps/web/lib/api/partners/bulk-deactivate-partners.ts

@@ -1,10 +1,7 @@
 import { Session } from "@/lib/auth";
-import { qstash } from "@/lib/cron";
 import { ACTIVE_ENROLLMENT_STATUSES } from "@/lib/zod/schemas/partners";
 import { prisma } from "@dub/prisma";
-import { APP_DOMAIN_WITH_NGROK } from "@dub/utils";
-import { waitUntil } from "@vercel/functions";
-import { recordAuditLog } from "../audit-logs/record-audit-log";
+import { processPartnerDeactivation } from "./process-partner-deactivation";
 
 interface BulkDeactivatePartnersParams {
   workspaceId: string;
@@ -52,94 +49,13 @@ export async function bulkDeactivatePartners({
     return;
   }
 
-  const partnerIdsToDeactivate = programEnrollments.map(
-    ({ partner }) => partner.id,
-  );
+  const partners = programEnrollments.map(({ partner }) => partner);
 
-  await prisma.$transaction([
-    prisma.link.updateMany({
-      where: {
-        programId,
-        partnerId: {
-          in: partnerIdsToDeactivate,
-        },
-      },
-      data: {
-        expiresAt: new Date(),
-      },
-    }),
-
-    prisma.programEnrollment.updateMany({
-      where: {
-        partnerId: {
-          in: partnerIdsToDeactivate,
-        },
-        programId,
-        status: {
-          in: ACTIVE_ENROLLMENT_STATUSES,
-        },
-      },
-      data: {
-        status: "deactivated",
-        clickRewardId: null,
-        leadRewardId: null,
-        saleRewardId: null,
-        discountId: null,
-      },
-    }),
-  ]);
-
-  console.log("[bulkDeactivatePartners] Deactivated partners in program.", {
+  await processPartnerDeactivation({
+    workspaceId,
     programId,
-    partnerIds: partnerIdsToDeactivate,
+    partners,
+    user,
+    programDeactivated,
   });
-
-  if (user) {
-    waitUntil(
-      recordAuditLog(
-        programEnrollments.map(({ partner }) => ({
-          workspaceId,
-          programId,
-          action: "partner.deactivated",
-          description: `Partner ${partner.id} deactivated`,
-          actor: user,
-          targets: [
-            {
-              type: "partner",
-              id: partner.id,
-              metadata: {
-                name: partner.name,
-                email: partner.email ?? null,
-              },
-            },
-          ],
-        })),
-      ),
-    );
-  }
-
-  const qstashResponse = await qstash.publishJSON({
-    url: `${APP_DOMAIN_WITH_NGROK}/api/cron/partners/deactivate`,
-    body: {
-      programId,
-      partnerIds: partnerIdsToDeactivate,
-      programDeactivated,
-    },
-  });
-
-  if (qstashResponse.messageId) {
-    console.log(
-      "[bulkDeactivatePartners] Deactivation job enqueued successfully.",
-      {
-        response: qstashResponse,
-      },
-    );
-  } else {
-    console.error(
-      "[bulkDeactivatePartners] Failed to enqueue deactivation job",
-      {
-        response: qstashResponse,
-      },
-    );
-  }
 }

apps/web/lib/api/partners/deactivate-partner.ts

@@ -0,0 +1,47 @@
+import { Session } from "@/lib/auth";
+import { ACTIVE_ENROLLMENT_STATUSES } from "@/lib/zod/schemas/partners";
+import { DubApiError } from "../errors";
+import { getProgramEnrollmentOrThrow } from "../programs/get-program-enrollment-or-throw";
+import { processPartnerDeactivation } from "./process-partner-deactivation";
+
+interface DeactivatePartnerParams {
+  workspaceId: string;
+  programId: string;
+  partnerId: string;
+  user?: Session["user"];
+}
+
+export async function deactivatePartner({
+  workspaceId,
+  programId,
+  partnerId,
+  user,
+}: DeactivatePartnerParams) {
+  const programEnrollment = await getProgramEnrollmentOrThrow({
+    programId,
+    partnerId,
+    include: {
+      partner: true,
+    },
+  });
+
+  if (
+    !ACTIVE_ENROLLMENT_STATUSES.includes(
+      programEnrollment.status as (typeof ACTIVE_ENROLLMENT_STATUSES)[number],
+    )
+  ) {
+    throw new DubApiError({
+      code: "bad_request",
+      message: `Only partners with an "approved" or "archived" status can be deactivated. The partner's status in this program is "${programEnrollment.status}".`,
+    });
+  }
+
+  const { partner } = programEnrollment;
+
+  await processPartnerDeactivation({
+    workspaceId,
+    programId,
+    partners: [partner],
+    user,
+  });
+}

apps/web/lib/api/partners/process-partner-deactivation.ts

@@ -0,0 +1,115 @@
+import { Session } from "@/lib/auth";
+import { qstash } from "@/lib/cron";
+import { prisma } from "@dub/prisma";
+import { Partner } from "@dub/prisma/client";
+import { APP_DOMAIN_WITH_NGROK } from "@dub/utils";
+import { waitUntil } from "@vercel/functions";
+import { recordAuditLog } from "../audit-logs/record-audit-log";
+
+interface ProcessPartnerDeactivationParams {
+  workspaceId: string;
+  programId: string;
+  partners: Pick<Partner, "id" | "name" | "email">[];
+  user?: Session["user"];
+  programDeactivated?: boolean;
+}
+
+// Core function that executes the deactivation logic
+// Called by both deactivatePartner and bulkDeactivatePartners
+export async function processPartnerDeactivation({
+  workspaceId,
+  programId,
+  partners,
+  user,
+  programDeactivated = false,
+}: ProcessPartnerDeactivationParams) {
+  if (partners.length === 0) {
+    return;
+  }
+
+  const partnerIds = partners.map((p) => p.id);
+
+  await prisma.$transaction([
+    prisma.link.updateMany({
+      where: {
+        programId,
+        partnerId: {
+          in: partnerIds,
+        },
+      },
+      data: {
+        expiresAt: new Date(),
+      },
+    }),
+
+    prisma.programEnrollment.updateMany({
+      where: {
+        partnerId: {
+          in: partnerIds,
+        },
+        programId,
+      },
+      data: {
+        status: "deactivated",
+        clickRewardId: null,
+        leadRewardId: null,
+        saleRewardId: null,
+        discountId: null,
+      },
+    }),
+  ]);
+
+  console.log("[processPartnerDeactivation] Deactivated partners in program.", {
+    programId,
+    partnerIds,
+  });
+
+  if (user) {
+    waitUntil(
+      recordAuditLog(
+        partners.map((partner) => ({
+          workspaceId,
+          programId,
+          action: "partner.deactivated",
+          description: `Partner ${partner.id} deactivated`,
+          actor: user,
+          targets: [
+            {
+              type: "partner",
+              id: partner.id,
+              metadata: {
+                name: partner.name,
+                email: partner.email,
+              },
+            },
+          ],
+        })),
+      ),
+    );
+  }
+
+  const qstashResponse = await qstash.publishJSON({
+    url: `${APP_DOMAIN_WITH_NGROK}/api/cron/partners/deactivate`,
+    body: {
+      programId,
+      partnerIds,
+      programDeactivated,
+    },
+  });
+
+  if (qstashResponse.messageId) {
+    console.log(
+      "[processPartnerDeactivation] Deactivation job enqueued successfully.",
+      {
+        response: qstashResponse,
+      },
+    );
+  } else {
+    console.error(
+      "[processPartnerDeactivation] Failed to enqueue deactivation job",
+      {
+        response: qstashResponse,
+      },
+    );
+  }
+}

apps/web/lib/openapi/partners/deactivate-partner.ts

@@ -0,0 +1,36 @@
+import { openApiErrorResponses } from "@/lib/openapi/responses";
+import { deactivatePartnerApiSchema } from "@/lib/zod/schemas/partners";
+import { ZodOpenApiOperationObject } from "zod-openapi";
+import * as z from "zod/v4";
+
+export const deactivatePartner: ZodOpenApiOperationObject = {
+  operationId: "deactivatePartner",
+  "x-speakeasy-name-override": "deactivate",
+  summary: "Deactivate a partner",
+  description:
+    "This will deactivate the partner from your program and disable all their active links. Their commissions and payouts will remain intact. You can reactivate them later if needed.",
+  requestBody: {
+    content: {
+      "application/json": {
+        schema: deactivatePartnerApiSchema,
+      },
+    },
+  },
+  responses: {
+    "200": {
+      description: "The deactivated partner",
+      content: {
+        "application/json": {
+          schema: z.object({
+            partnerId: z
+              .string()
+              .describe("The ID of the deactivated partner."),
+          }),
+        },
+      },
+    },
+    ...openApiErrorResponses,
+  },
+  tags: ["Partners"],
+  security: [{ token: [] }],
+};