feat: add global settings for teams (#1391)

## Description

This PR introduces global settings for teams. At the moment, it allows
team admins to configure the following:
* The default visibility of the documents uploaded to the team account
* Whether to include the document owner (sender) details when sending
emails to the recipients.

### Include Sender Details

If the Sender Details setting is enabled, the emails sent by the team
will include the sender's name:

> "Example User" on behalf of "Example Team" has invited you to sign
"document.pdf"

Otherwise, the email will say:

> "Example Team" has invited you to sign "document.pdf"

### Default Document Visibility

This new option allows users to set the default visibility for the
documents uploaded to the team account. It can have the following
values:
* Everyone
* Manager and above
* Admins only

If the default document visibility isn't set, the document will be set
to the role of the user who created the document:
* If a user with the "User" role creates a document, the document's
visibility is set to "Everyone".
* Manager role -> "Manager and above"
* Admin role -> "Admins only"

Otherwise, if there is a default document visibility value, it uses that
value.

#### Gotcha

To avoid issues, the `document owner` and the `recipient` can access the
document irrespective of their role. For example:
* If a team member with the role "Member" uploads a document and the
default document visibility is "Admins", only the document owner and
admins can access the document.
  * Similar to the other scenarios.

* If an admin uploads a document and the default document visibility is
"Admins", the recipient can access the document.

* The admins have access to all the documents.
* Managers have access to documents with the visibility set to
"Everyone" and "Manager and above"
* Members have access only to the documents with the visibility set to
"Everyone".

## Testing Performed

Tested it locally.

packages/trpc/server/document-router/schema.ts

@@ -13,6 +13,7 @@ import {
   DocumentSigningOrder,
   DocumentSource,
   DocumentStatus,
+  DocumentVisibility,
   FieldType,
   RecipientRole,
 } from '@documenso/prisma/client';
@@ -82,7 +83,7 @@ export const ZSetSettingsForDocumentMutationSchema = z.object({
   data: z.object({
     title: z.string().min(1).optional(),
     externalId: z.string().nullish(),
-    visibility: z.string().optional(),
+    visibility: z.nativeEnum(DocumentVisibility).optional(),
     globalAccessAuth: ZDocumentAccessAuthTypesSchema.nullable().optional(),
     globalActionAuth: ZDocumentActionAuthTypesSchema.nullable().optional(),
   }),

packages/trpc/server/team-router/router.ts

@@ -31,6 +31,8 @@ import { requestTeamOwnershipTransfer } from '@documenso/lib/server-only/team/re
 import { resendTeamEmailVerification } from '@documenso/lib/server-only/team/resend-team-email-verification';
 import { resendTeamMemberInvitation } from '@documenso/lib/server-only/team/resend-team-member-invitation';
 import { updateTeam } from '@documenso/lib/server-only/team/update-team';
+import { updateTeamBrandingSettings } from '@documenso/lib/server-only/team/update-team-branding-settings';
+import { updateTeamDocumentSettings } from '@documenso/lib/server-only/team/update-team-document-settings';
 import { updateTeamEmail } from '@documenso/lib/server-only/team/update-team-email';
 import { updateTeamMember } from '@documenso/lib/server-only/team/update-team-member';
 import { updateTeamPublicProfile } from '@documenso/lib/server-only/team/update-team-public-profile';
@@ -62,6 +64,8 @@ import {
   ZRequestTeamOwnerhsipTransferMutationSchema,
   ZResendTeamEmailVerificationMutationSchema,
   ZResendTeamMemberInvitationMutationSchema,
+  ZUpdateTeamBrandingSettingsMutationSchema,
+  ZUpdateTeamDocumentSettingsMutationSchema,
   ZUpdateTeamEmailMutationSchema,
   ZUpdateTeamMemberMutationSchema,
   ZUpdateTeamMutationSchema,
@@ -556,6 +560,42 @@ export const teamRouter = router({
       } catch (err) {
         console.error(err);
 
+        throw AppError.parseErrorToTRPCError(err);
+      }
+    }),
+
+  updateTeamBrandingSettings: authenticatedProcedure
+    .input(ZUpdateTeamBrandingSettingsMutationSchema)
+    .mutation(async ({ ctx, input }) => {
+      const { teamId, settings } = input;
+
+      try {
+        return await updateTeamBrandingSettings({
+          userId: ctx.user.id,
+          teamId,
+          settings,
+        });
+      } catch (err) {
+        console.error(err);
+
+        throw AppError.parseErrorToTRPCError(err);
+      }
+    }),
+
+  updateTeamDocumentSettings: authenticatedProcedure
+    .input(ZUpdateTeamDocumentSettingsMutationSchema)
+    .mutation(async ({ ctx, input }) => {
+      const { teamId, settings } = input;
+
+      try {
+        return await updateTeamDocumentSettings({
+          userId: ctx.user.id,
+          teamId,
+          settings,
+        });
+      } catch (err) {
+        console.error(err);
+
         throw AppError.parseErrorToTRPCError(err);
       }
     }),

packages/trpc/server/team-router/schema.ts

@@ -1,7 +1,8 @@
 import { z } from 'zod';
 
+import { SUPPORTED_LANGUAGE_CODES } from '@documenso/lib/constants/i18n';
 import { PROTECTED_TEAM_URLS } from '@documenso/lib/constants/teams';
-import { TeamMemberRole } from '@documenso/prisma/client';
+import { DocumentVisibility, TeamMemberRole } from '@documenso/prisma/client';
 
 import { ZUpdatePublicProfileMutationSchema } from '../profile-router/schema';
 
@@ -150,6 +151,8 @@ export const ZUpdateTeamMutationSchema = z.object({
   data: z.object({
     name: ZTeamNameSchema,
     url: ZTeamUrlSchema,
+    documentVisibility: z.nativeEnum(DocumentVisibility).optional(),
+    includeSenderDetails: z.boolean().optional(),
   }),
 });
 
@@ -190,6 +193,28 @@ export const ZResendTeamMemberInvitationMutationSchema = z.object({
   invitationId: z.number(),
 });
 
+export const ZUpdateTeamBrandingSettingsMutationSchema = z.object({
+  teamId: z.number(),
+  settings: z.object({
+    brandingEnabled: z.boolean().optional().default(false),
+    brandingLogo: z.string().optional().default(''),
+    brandingUrl: z.string().optional().default(''),
+    brandingCompanyDetails: z.string().optional().default(''),
+  }),
+});
+
+export const ZUpdateTeamDocumentSettingsMutationSchema = z.object({
+  teamId: z.number(),
+  settings: z.object({
+    documentVisibility: z
+      .nativeEnum(DocumentVisibility)
+      .optional()
+      .default(DocumentVisibility.EVERYONE),
+    documentLanguage: z.enum(SUPPORTED_LANGUAGE_CODES).optional().default('en'),
+    includeSenderDetails: z.boolean().optional().default(false),
+  }),
+});
+
 export type TCreateTeamMutationSchema = z.infer<typeof ZCreateTeamMutationSchema>;
 export type TCreateTeamEmailVerificationMutationSchema = z.infer<
   typeof ZCreateTeamEmailVerificationMutationSchema
@@ -225,3 +250,9 @@ export type TResendTeamEmailVerificationMutationSchema = z.infer<
 export type TResendTeamMemberInvitationMutationSchema = z.infer<
   typeof ZResendTeamMemberInvitationMutationSchema
 >;
+export type TUpdateTeamBrandingSettingsMutationSchema = z.infer<
+  typeof ZUpdateTeamBrandingSettingsMutationSchema
+>;
+export type TUpdateTeamDocumentSettingsMutationSchema = z.infer<
+  typeof ZUpdateTeamDocumentSettingsMutationSchema
+>;