Exclude deleted teams from access and invalidate join codes

src/app/api/teams/join/route.ts

@@ -20,6 +20,7 @@ export async function POST(request: Request) {
   const team = await findTeam({
     where: {
       accessCode,
+      deletedAt: null,
     },
   });
 

src/permissions/website.ts

@@ -94,6 +94,7 @@ export async function canViewBatchWebsites({ user, shareToken }: Auth, websiteId
           teamId: {
             in: teamIds,
           },
+          team: { deletedAt: null },
         },
         select: {
           teamId: true,

src/queries/prisma/team.ts

@@ -193,6 +193,7 @@ export async function deleteTeam(teamId: string) {
       client.team.update({
         data: {
           deletedAt: new Date(),
+          accessCode: null,
         },
         where: {
           id: teamId,

src/queries/prisma/teamUser.ts

@@ -21,6 +21,7 @@ export async function getTeamUser(teamId: string, userId: string) {
     where: {
       teamId,
       userId,
+      team: { deletedAt: null },
     },
   });
 }