feat: invite workspace members via link (#196)

* feat: add workspace invite links schema

* feat: update workspace invite schema

* feat: add repo funcs and share link toggle

* feat: redirect to next param on authentication

* feat: add invite page

* feat: switch to workspace on invite success

* refactor: tweak light mode styles

* feat(cloud): update subscription for cloud

* feat: only allow admin users to create links

* chore: add translations

packages/db/migrations/20250923211958_AddWorkspaceInviteLinks.sql

@@ -0,0 +1,34 @@
+CREATE TYPE "public"."invite_link_status" AS ENUM('active', 'inactive');--> statement-breakpoint
+CREATE TABLE IF NOT EXISTS "workspace_invite_links" (
+	"id" bigserial PRIMARY KEY NOT NULL,
+	"publicId" varchar(12) NOT NULL,
+	"workspaceId" bigint NOT NULL,
+	"code" varchar(12) NOT NULL,
+	"status" "invite_link_status" DEFAULT 'active' NOT NULL,
+	"expiresAt" timestamp,
+	"createdAt" timestamp DEFAULT now() NOT NULL,
+	"createdBy" uuid,
+	"updatedAt" timestamp,
+	"updatedBy" uuid,
+	CONSTRAINT "workspace_invite_links_publicId_unique" UNIQUE("publicId"),
+	CONSTRAINT "workspace_invite_links_code_unique" UNIQUE("code")
+);
+--> statement-breakpoint
+ALTER TABLE "workspace_invite_links" ENABLE ROW LEVEL SECURITY;--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "workspace_invite_links" ADD CONSTRAINT "workspace_invite_links_workspaceId_workspace_id_fk" FOREIGN KEY ("workspaceId") REFERENCES "public"."workspace"("id") ON DELETE cascade ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "workspace_invite_links" ADD CONSTRAINT "workspace_invite_links_createdBy_user_id_fk" FOREIGN KEY ("createdBy") REFERENCES "public"."user"("id") ON DELETE set null ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;
+--> statement-breakpoint
+DO $$ BEGIN
+ ALTER TABLE "workspace_invite_links" ADD CONSTRAINT "workspace_invite_links_updatedBy_user_id_fk" FOREIGN KEY ("updatedBy") REFERENCES "public"."user"("id") ON DELETE set null ON UPDATE no action;
+EXCEPTION
+ WHEN duplicate_object THEN null;
+END $$;

packages/db/migrations/meta/_journal.json

@@ -106,6 +106,13 @@
       "when": 1758226671081,
       "tag": "20250918201751_AddPausedMemberStatus",
       "breakpoints": true
+    },
+    {
+      "idx": 15,
+      "version": "7",
+      "when": 1758662398166,
+      "tag": "20250923211958_AddWorkspaceInviteLinks",
+      "breakpoints": true
     }
   ]
 }

packages/db/src/repository/inviteLink.repo.ts

@@ -0,0 +1,71 @@
+import { and, eq, gt } from "drizzle-orm";
+
+import type { dbClient } from "@kan/db/client";
+import { workspaceInviteLinks } from "@kan/db/schema";
+import { generateUID } from "@kan/shared/utils";
+
+export const createInviteLink = async (
+  db: dbClient,
+  args: {
+    workspaceId: number;
+    code: string;
+    expiresAt: Date | null;
+    createdBy: string;
+  },
+) => {
+  const [result] = await db
+    .insert(workspaceInviteLinks)
+    .values({
+      publicId: generateUID(),
+      workspaceId: args.workspaceId,
+      code: args.code,
+      expiresAt: args.expiresAt ?? null,
+      status: "active",
+      createdBy: args.createdBy,
+    })
+    .returning({
+      publicId: workspaceInviteLinks.publicId,
+      code: workspaceInviteLinks.code,
+      status: workspaceInviteLinks.status,
+      expiresAt: workspaceInviteLinks.expiresAt,
+    });
+  return result;
+};
+
+export const deactivateAllActiveForWorkspace = async (
+  db: dbClient,
+  args: { workspaceId: number; updatedBy: string },
+) => {
+  await db
+    .update(workspaceInviteLinks)
+    .set({
+      status: "inactive",
+      updatedBy: args.updatedBy,
+      updatedAt: new Date(),
+    })
+    .where(
+      and(
+        eq(workspaceInviteLinks.workspaceId, args.workspaceId),
+        eq(workspaceInviteLinks.status, "active"),
+      ),
+    );
+};
+
+export const getActiveForWorkspace = async (
+  db: dbClient,
+  workspaceId: number,
+) => {
+  return db.query.workspaceInviteLinks.findFirst({
+    where: and(
+      eq(workspaceInviteLinks.workspaceId, workspaceId),
+      eq(workspaceInviteLinks.status, "active"),
+    ),
+    orderBy: (links, { desc }) => [desc(links.createdAt)],
+  });
+};
+
+export const getByCode = async (db: dbClient, code: string) => {
+  return db.query.workspaceInviteLinks.findFirst({
+    where: eq(workspaceInviteLinks.code, code),
+  });
+};

packages/db/src/repository/workspace.repo.ts

@@ -87,11 +87,25 @@ export const getByPublicId = (db: dbClient, workspacePublicId: string) => {
       publicId: true,
       name: true,
       plan: true,
+      slug: true,
     },
     where: eq(workspaces.publicId, workspacePublicId),
   });
 };
 
+export const getById = (db: dbClient, workspaceId: number) => {
+  return db.query.workspaces.findFirst({
+    columns: {
+      id: true,
+      publicId: true,
+      name: true,
+      plan: true,
+      slug: true,
+    },
+    where: eq(workspaces.id, workspaceId),
+  });
+};
+
 export const getByPublicIdWithMembers = (
   db: dbClient,
   workspacePublicId: string,

packages/db/src/schema/index.ts

@@ -11,3 +11,4 @@ export * from "./users";
 export * from "./integrations";
 export * from "./workspaces";
 export * from "./subscriptions";
+export * from "./workspaceInviteLinks";

packages/db/src/schema/workspaceInviteLinks.ts

@@ -0,0 +1,38 @@
+import {
+  bigint,
+  bigserial,
+  pgEnum,
+  pgTable,
+  timestamp,
+  uuid,
+  varchar,
+} from "drizzle-orm/pg-core";
+
+import { users } from "./users";
+import { workspaces } from "./workspaces";
+
+export const inviteLinkStatuses = ["active", "inactive"] as const;
+export type InviteLinkStatus = (typeof inviteLinkStatuses)[number];
+export const inviteLinkStatusEnum = pgEnum(
+  "invite_link_status",
+  inviteLinkStatuses,
+);
+
+export const workspaceInviteLinks = pgTable("workspace_invite_links", {
+  id: bigserial("id", { mode: "number" }).primaryKey(),
+  publicId: varchar("publicId", { length: 12 }).notNull().unique(),
+  workspaceId: bigint("workspaceId", { mode: "number" })
+    .notNull()
+    .references(() => workspaces.id, { onDelete: "cascade" }),
+  code: varchar("code", { length: 12 }).notNull().unique(),
+  status: inviteLinkStatusEnum("status").notNull().default("active"),
+  expiresAt: timestamp("expiresAt"),
+  createdAt: timestamp("createdAt").defaultNow().notNull(),
+  createdBy: uuid("createdBy").references(() => users.id, {
+    onDelete: "set null",
+  }),
+  updatedAt: timestamp("updatedAt"),
+  updatedBy: uuid("updatedBy").references(() => users.id, {
+    onDelete: "set null",
+  }),
+}).enableRLS();