fix: return JSON from invite handler, use BaseURL from config

cmd/server/main.go

···
 	if sessionSecret == "" {
 		sessionSecret = "dev-secret-change-in-production"
 	}
+	baseURL := os.Getenv("BASE_URL")
+	if baseURL == "" {
+		baseURL = "http://127.0.0.1:8080"
+	}
 
 	// Init
 	auth.InitStore(sessionSecret)
···
 			"templates/"+name,
 		))
 	}
-	h := handler.New(database, tmpls)
+	h := handler.New(database, tmpls, baseURL)
 
 	// Routes
 	mux := http.NewServeMux()

internal/handler/handler.go

···
 	"html/template"
 	"log"
 	"net/http"
-	"os"
 	"regexp"
 	"strings"
 	"time"
···
 const collectionDocument = "com.diffdown.document"
 
 type Handler struct {
-	DB    *db.DB
-	Tmpls map[string]*template.Template
+	DB      *db.DB
+	Tmpls   map[string]*template.Template
+	BaseURL string
 }
 
-func New(database *db.DB, tmpls map[string]*template.Template) *Handler {
-	return &Handler{DB: database, Tmpls: tmpls}
+func New(database *db.DB, tmpls map[string]*template.Template, baseURL string) *Handler {
+	return &Handler{DB: database, Tmpls: tmpls, BaseURL: baseURL}
 }
 
 // --- Template helpers ---
···
 	}
 }
 
-func (h *Handler) jsonResponse(w http.ResponseWriter, data interface{}) {
+func (h *Handler) jsonResponse(w http.ResponseWriter, data interface{}, statusCode int) {
 	w.Header().Set("Content-Type", "application/json")
+	w.WriteHeader(statusCode)
 	json.NewEncoder(w).Encode(data)
 }
 
···
 		return
 	}
 
-	h.jsonResponse(w, map[string]string{"status": "ok"})
+	h.jsonResponse(w, map[string]string{"status": "ok"}, http.StatusOK)
 }
 
 // APIDocumentAutoSave is the same as save, called on debounce from editor.
···
 		return
 	}
 
-	h.jsonResponse(w, map[string]string{"status": "ok"})
+	h.jsonResponse(w, map[string]string{"status": "ok"}, http.StatusOK)
 }
 
 // DocumentInvite creates an invite link for a document.
···
 		return
 	}
 
-	ownerDID := strings.TrimPrefix(doc.URI, "at://")
-	if idx := strings.Index(ownerDID, "/"); idx > 0 {
-		ownerDID = ownerDID[:idx]
+	parts := strings.Split(doc.URI, "/")
+	ownerDID := ""
+	if len(parts) >= 2 {
+		ownerDID = parts[1]
 	}
 	if ownerDID == "" || session.DID != ownerDID {
 		http.Error(w, "Unauthorized", http.StatusForbidden)
···
 		return
 	}
 
-	baseURL := os.Getenv("BASE_URL")
-	if baseURL == "" {
-		baseURL = "http://127.0.0.1:8080"
-	}
-	inviteLink := fmt.Sprintf("%s/doc/%s?invite=%s", baseURL, rkey, invite.Token)
-	h.render(w, "document_edit.html", PageData{
-		Title: "Edit " + doc.Title,
-		User:  user,
-		Content: map[string]interface{}{
-			"document":   doc,
-			"inviteLink": inviteLink,
-		},
-	})
+	inviteLink := fmt.Sprintf("%s/doc/%s?invite=%s", h.BaseURL, rkey, invite.Token)
+	h.jsonResponse(w, map[string]string{"inviteLink": inviteLink}, http.StatusOK)
 }
 
 // --- API: Render markdown ---
···
 		return
 	}
 
-	h.jsonResponse(w, map[string]string{"html": rendered})
+	h.jsonResponse(w, map[string]string{"html": rendered}, http.StatusOK)
 }