From b3c41f6dea05b040da8e89feb95e9494745e9ce3 Mon Sep 17 00:00:00 2001
From: Zak Bearman <Zak@amslabs.net>
Date: Tue, 1 Sep 2026 16:51:32 +1200
Subject: [PATCH] Add safe user preview for invites

---
 frontend/app/admin/invites/page.tsx   |  5 ++++
 frontend/app/profile/invites/page.tsx | 33 +++++++++++++++++++++++----
 2 files changed, 34 insertions(+), 4 deletions(-)

diff --git a/frontend/app/admin/invites/page.tsx b/frontend/app/admin/invites/page.tsx
index c87234a..0354bbd 100644
--- a/frontend/app/admin/invites/page.tsx
+++ b/frontend/app/admin/invites/page.tsx
@@ -1174,6 +1174,11 @@ export default function AdminInviteManagementPage() {
       title="Invites"
       subtitle="Create access links, apply account profiles, deliver invitations, and see what needs attention."
       rail={inviteManagementRail}
+      actions={
+        <button type="button" className="ghost-button" onClick={() => router.push('/profile/invites?view=user')}>
+          View as user
+        </button>
+      }
     >
       <section className="admin-section">
         {error && <div className="error-banner">{error}</div>}
diff --git a/frontend/app/profile/invites/page.tsx b/frontend/app/profile/invites/page.tsx
index e4e14db..bee4440 100644
--- a/frontend/app/profile/invites/page.tsx
+++ b/frontend/app/profile/invites/page.tsx
@@ -1,7 +1,7 @@
 'use client'
 
-import { useEffect, useMemo, useState } from 'react'
 import { useRouter } from 'next/navigation'
+import { useEffect, useMemo, useState } from 'react'
 import { authFetch, clearToken, getApiBase, getToken } from '../../lib/auth'
 
 type ProfileInfo = {
@@ -97,6 +97,7 @@ export default function ProfileInvitesPage() {
   const [inviteManagedByMaster, setInviteManagedByMaster] = useState(false)
   const [masterInviteTemplate, setMasterInviteTemplate] = useState<OwnedInvitesResponse['master_invite']>(null)
   const [loading, setLoading] = useState(true)
+  const [viewAsUser, setViewAsUser] = useState(false)
 
   const signupBaseUrl = useMemo(() => {
     if (typeof window === 'undefined') return '/signup'
@@ -135,6 +136,7 @@ export default function ProfileInvitesPage() {
   }
 
   useEffect(() => {
+    setViewAsUser(new URLSearchParams(window.location.search).get('view') === 'user')
     if (!getToken()) {
       router.push('/login')
       return
@@ -307,6 +309,11 @@ export default function ProfileInvitesPage() {
 
   const canManageInvites = profile?.role === 'admin' || inviteAccessEnabled
 
+  const enterUserView = () => {
+    setViewAsUser(true)
+    router.replace('/profile/invites?view=user')
+  }
+
   if (loading) {
     return <main className="card">Loading invite tools...</main>
   }
@@ -315,17 +322,35 @@ export default function ProfileInvitesPage() {
     <main className="card">
       <div className="user-directory-panel-header profile-page-header">
         <div>
-          <h1>My invites</h1>
-          <p className="lede">Create invite links, email them directly, and track who you have invited.</p>
+          <h1>{viewAsUser ? 'Invites' : 'My invites'}</h1>
+          <p className="lede">
+            {viewAsUser
+              ? 'Preview the invite workspace exactly as a permitted non-admin user sees it.'
+              : 'Create invite links, email them directly, and track who you have invited.'}
+          </p>
         </div>
         <div className="admin-inline-actions">
+          {profile?.role === 'admin' && !viewAsUser ? (
+            <button type="button" className="ghost-button" onClick={enterUserView}>
+              View as user
+            </button>
+          ) : null}
+          {profile?.role === 'admin' && viewAsUser ? (
+            <button type="button" onClick={() => router.push('/admin/invites')}>
+              Return to admin view
+            </button>
+          ) : null}
           <button type="button" className="ghost-button" onClick={() => router.push('/profile')}>
             Back to profile
           </button>
         </div>
       </div>
 
-      {profile ? (
+      {profile && viewAsUser ? (
+        <div className="status-banner">
+          <strong>User view preview.</strong> The non-admin presentation is active. Your admin permissions and invite data remain unchanged.
+        </div>
+      ) : profile ? (
         <div className="status-banner">
           Signed in as <strong>{profile.username}</strong> ({profile.role}).
         </div>