Implement v2 invites API with metadata support and tests (#140)

Add GET /api/v2/invites/:slug endpoint that decodes base64url-encoded protobuf invites with signature verification and returns metadata fields (name, description, imageURL).

Key changes:
- Add v2 invite protobuf schema with optional metadata fields
- Implement slug decoding with secp256k1 signature recovery
- Add 2048-char slug length limit for DoS protection (413 response)
- Add test suite covering error cases and security
- Fix Docker build to install devDependencies for code generation
- Update Claude Code workflow to use CLAUDE_MODEL repo var

Author: lourou

.github/workflows/claude-code-review.yml

@@ -39,8 +39,8 @@ jobs:
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
 
-          # Optional: Specify model (defaults to Claude Sonnet 4, uncomment for Claude Opus 4)
-          # model: "claude-opus-4-20250514"
+          # Optional: Specify model (defaults to Claude Sonnet)
+          model: ${{ vars.CLAUDE_MODEL || 'claude-sonnet-4-5-20250929' }}
 
           # Direct prompt for automated review (no @claude mention needed)
           direct_prompt: |

.github/workflows/claude.yml

@@ -40,8 +40,8 @@ jobs:
           additional_permissions: |
             actions: read
 
-          # Optional: Specify model (defaults to Claude Sonnet 4, uncomment for Claude Opus 4)
-          # model: "claude-opus-4-20250514"
+          # Optional: Specify model (defaults to Claude Sonnet)
+          model: ${{ vars.CLAUDE_MODEL || 'claude-sonnet-4-5-20250929' }}
 
           # Optional: Customize the trigger phrase (default: @claude)
           # trigger_phrase: "/claude"

.github/workflows/validate-code-quality.yml

@@ -18,6 +18,7 @@ jobs:
         with:
           bun-version-file: ".bun-version"
       - run: bun install
+      - run: bun run buf:generate
       - run: ./dev/up
         env:
           TEST_NOTIFICATION_DELIVERY_URL: "http://host.docker.internal:8081"

.gitignore

@@ -64,6 +64,8 @@ logs
 # Prisma generated files
 /prisma/generated/
 
+# Protobuf generated files
+/src/gen/
+
 # Claude
 .claude
-

Dockerfile

@@ -11,18 +11,28 @@ RUN curl -fsSL https://bun.sh/install | bash -s "bun-v1.2.2" && \
   ln -s $HOME/.bun/bin/bun /usr/local/bin/bun
 
 RUN mkdir -p /temp/prod
-COPY package.json bun.lock tsconfig.json /temp/prod/
+COPY package.json bun.lock tsconfig.json buf.yaml buf.gen.yaml /temp/prod/
 RUN mkdir -p /temp/prod/src
 COPY src /temp/prod/src
 RUN mkdir -p /temp/prod/prisma
 COPY prisma /temp/prod/prisma
-RUN cd /temp/prod && bun install --frozen-lockfile --production
+RUN mkdir -p /temp/prod/proto
+COPY proto /temp/prod/proto
+
+# Install all dependencies (including devDependencies needed for code generation)
+RUN cd /temp/prod && bun install --frozen-lockfile
 
 ENV NODE_ENV=production
 
+# generate protobuf types
+RUN cd /temp/prod && bun run buf:generate
+
 # generate Prisma client
 RUN cd /temp/prod && bun prisma generate
 
+# Remove devDependencies to keep the image small
+RUN cd /temp/prod && bun install --frozen-lockfile --production
+
 FROM base AS release
 
 # install bun

buf.gen.yaml

@@ -1,6 +1,6 @@
 version: v2
 plugins:
   - local: protoc-gen-es
-    out: src/notifications/gen
+    out: src/gen
     include_imports: true
     opt: target=ts

bun.lock

@@ -14,7 +14,7 @@ const gitignorePath = path.resolve(__dirname, ".gitignore");
 export default tseslint.config(
   includeIgnoreFile(gitignorePath),
   {
-    ignores: [".yarn/**/*", "src/notifications/gen/**"],
+    ignores: [".yarn/**/*", "src/gen/**"],
   },
   eslint.configs.recommended,
   ...tseslint.configs.strictTypeChecked,

eslint.config.js

@@ -52,6 +52,8 @@
     "pino": "^9.6.0",
     "pino-http": "^10.4.0",
     "pino-pretty": "^13.0.0",
+    "protobufjs": "^7.5.4",
+    "secp256k1": "^5.0.1",
     "thirdweb": "^5.88.2",
     "uint8array-extras": "^1.4.0",
     "uuid": "^11.0.5",

package.json

@@ -0,0 +1,29 @@
+syntax = "proto3";
+
+package invite.v2;
+
+// InvitePayload represents the core invite data
+message InvitePayload {
+    // The encrypted conversation id
+    string conversationToken = 1;
+
+    // The creator's inbox ID
+    string creator_inbox_id = 2;
+
+    // The tag to mark which conversation this corresponds to, lives in `ConversationCustomMetadata`
+    string tag = 3;
+
+    // optional conversation metadata
+    optional string name = 4;
+    optional string description = 5;
+    optional string imageURL = 6;
+}
+
+// SignedInvite represents an invite with its cryptographic signature
+message SignedInvite {
+    // The invite payload containing the actual invite data
+    InvitePayload payload = 1;
+
+    // The cryptographic signature (typically 65 bytes for ECDSA with recovery)
+    bytes signature = 2;
+}