feat(workspace): add in-product collaboration and direct Cloud launch

tests/unit_tests/workspace/test_invitation_delivery.py

@@ -0,0 +1,88 @@
+from __future__ import annotations
+
+from types import SimpleNamespace
+from unittest.mock import AsyncMock
+
+import pytest
+
+from langbot.pkg.workspace.invitation_delivery import (
+    InvitationDeliveryResult,
+    InvitationDeliveryService,
+)
+
+
+pytestmark = pytest.mark.asyncio
+
+
+def _app(config: dict) -> SimpleNamespace:
+    return SimpleNamespace(
+        instance_config=SimpleNamespace(data=config),
+        logger=SimpleNamespace(warning=lambda *args, **kwargs: None),
+    )
+
+
+async def test_link_only_delivery_builds_public_web_link_without_secret_capability():
+    service = InvitationDeliveryService(
+        _app(
+            {
+                'api': {
+                    'webui_url': 'https://public.langbot.example/',
+                    'webhook_prefix': 'http://internal:5300',
+                }
+            }
+        )
+    )
+
+    assert service.build_invitation_link('lbi_secret') == (
+        'https://public.langbot.example/invitations/accept#token=lbi_secret'
+    )
+    assert service.capability() == {'enabled': False, 'provider': None}
+    result = await service.deliver_invitation(
+        recipient_email='member@example.com',
+        workspace_name='Workspace',
+        invitation_link='https://public.langbot.example/invitations/accept#token=lbi_secret',
+    )
+    assert result == InvitationDeliveryResult(status='link_only', provider=None)
+
+
+async def test_configured_provider_failure_returns_failed_without_raising():
+    service = InvitationDeliveryService(
+        _app(
+            {
+                'workspace': {
+                    'invitations': {
+                        'email': {
+                            'provider': 'resend',
+                            'from': 'LangBot <noreply@example.com>',
+                            'resend': {'api_key': 'resend-secret'},
+                        }
+                    }
+                }
+            }
+        )
+    )
+    service._send_resend = AsyncMock(return_value=False)
+
+    assert service.capability() == {'enabled': True, 'provider': 'resend'}
+    result = await service.deliver_invitation(
+        recipient_email='member@example.com',
+        workspace_name='Workspace',
+        invitation_link='https://public.langbot.example/invitations/accept#token=lbi_secret',
+    )
+
+    assert result == InvitationDeliveryResult(status='failed', provider='resend')
+    service._send_resend.assert_awaited_once()
+
+
+async def test_environment_mapping_enables_provider_without_leaking_secret(monkeypatch):
+    monkeypatch.setenv('WORKSPACE__INVITATIONS__PUBLIC_WEB_URL', 'https://env.langbot.example/')
+    monkeypatch.setenv('WORKSPACE__INVITATIONS__EMAIL__PROVIDER', 'smtp')
+    monkeypatch.setenv('WORKSPACE__INVITATIONS__EMAIL__FROM', 'LangBot <noreply@example.com>')
+    monkeypatch.setenv('WORKSPACE__INVITATIONS__EMAIL__SMTP__HOST', 'smtp.example.com')
+    monkeypatch.setenv('WORKSPACE__INVITATIONS__EMAIL__SMTP__PASSWORD', 'smtp-secret')
+    service = InvitationDeliveryService(_app({'api': {'webui_url': 'https://config.example'}}))
+
+    assert service.build_invitation_link('lbi_secret') == (
+        'https://env.langbot.example/invitations/accept#token=lbi_secret'
+    )
+    assert service.capability() == {'enabled': True, 'provider': 'smtp'}