Function grantWorkspaceAccessDirectly

apps/sim/lib/invitations/direct-grant.ts:94–235

(
  input: GrantWorkspaceAccessDirectlyInput
)

 * or upgrade an existing member's permission.
 */
export async function grantWorkspaceAccessDirectly(
  input: GrantWorkspaceAccessDirectlyInput
): Promise<DirectGrantOutcome> {
  const normalizedEmail = normalizeEmail(input.email)

  const result = await db.transaction(async (tx): Promise<DirectGrantOutcome> => {
    const [existing] = await tx
      .select({ id: permissions.id, permissionType: permissions.permissionType })
      .from(permissions)
      .where(
        and(
          eq(permissions.entityId, input.workspaceId),
          eq(permissions.entityType, 'workspace'),
          eq(permissions.userId, input.userId)
        )
      )
      .limit(1)

    if (existing) {
      return { outcome: 'unchanged', permission: existing.permissionType as PermissionType }
    }

    const inserted = await tx
      .insert(permissions)
      .values({
        id: generateId(),
        entityType: 'workspace',
        entityId: input.workspaceId,
        userId: input.userId,
        permissionType: input.permission,
        createdAt: new Date(),
        updatedAt: new Date(),
      })
      .onConflictDoNothing()
      .returning({ id: permissions.id })

    if (inserted.length === 0) {
      return { outcome: 'unchanged', permission: input.permission }
    }

    return { outcome: 'added', permission: input.permission }
  })

  if (result.outcome === 'unchanged') {
    return result
  }

  try {
    await supersedePendingWorkspaceInvites(input.workspaceId, normalizedEmail)
  } catch (error) {
    logger.error('Failed to supersede pending workspace invitations after direct grant', {
      workspaceId: input.workspaceId,
      error,
    })
  }

  try {
    const [wsEnvRow] = await db