update docs

Author: icecrasher321

apps/docs/content/docs/en/execution/costs.mdx

@@ -308,6 +308,17 @@ By default, your usage is capped at the credits included in your plan. To allow
 
 ## Plan Limits
 
+### Workspaces
+
+| Plan | Personal Workspaces | Shared (Organization) Workspaces |
+|------|---------------------|----------------------------------|
+| **Free** | 1 | — |
+| **Pro** | Up to 3 | — |
+| **Max** | Up to 10 | — |
+| **Team / Enterprise** | Unlimited | Unlimited |
+
+Team and Enterprise plans unlock shared workspaces that belong to your organization. Members invited to a shared workspace automatically join the organization and count toward your seat total. When a Team or Enterprise subscription is cancelled or downgraded, existing shared workspaces remain accessible to current members but new invites are disabled until the organization is upgraded again.
+
 ### Rate Limits
 
 | Plan | Sync (req/min) | Async (req/min) |

apps/docs/content/docs/en/permissions/roles-and-permissions.mdx

@@ -2,10 +2,31 @@
 title: "Roles and Permissions"
 ---
 
+import { Callout } from 'fumadocs-ui/components/callout'
 import { Video } from '@/components/ui/video'
 
 When you invite team members to your organization or workspace, you'll need to choose what level of access to give them. This guide explains what each permission level allows users to do, helping you understand team roles and what access each permission level provides.
 
+## Workspaces and Organizations
+
+Sim has two kinds of workspaces:
+
+- **Personal workspaces** live under your individual account. The number you can create depends on your plan.
+- **Shared (organization) workspaces** live under an organization and are available on Team and Enterprise plans. Any organization Owner or Admin can create them. Members invited to a shared workspace automatically join the organization and count toward your seat total.
+
+### Workspace Limits by Plan
+
+| Plan | Personal Workspaces | Shared Workspaces |
+|------|---------------------|-------------------|
+| **Free** | 1 | — |
+| **Pro** | Up to 3 | — |
+| **Max** | Up to 10 | — |
+| **Team / Enterprise** | Unlimited | Unlimited (seat-gated invites) |
+
+<Callout type="info">
+  When a Team or Enterprise subscription is cancelled or downgraded, existing shared workspaces stay accessible to current members. New invitations are blocked until the organization is upgraded again.
+</Callout>
+
 ## How to Invite Someone to a Workspace
 
 <div className="mx-auto w-full overflow-hidden rounded-lg">
@@ -88,6 +109,10 @@ Every workspace has one **Owner** (the person who created it) plus any number of
 - Can do everything except delete the workspace or remove the owner
 - Can be removed from the workspace by the owner or other admins
 
+<Callout type="info">
+  For shared (organization) workspaces, the organization's Owner and Admins are treated as Admins of every workspace in the organization, even without an explicit per-workspace invite.
+</Callout>
+
 ---
 
 ## Common Scenarios
@@ -145,25 +170,38 @@ Periodically review who has access to what, especially when team members change
 
 ## Organization Roles
 
-When inviting someone to your organization, you can assign one of two roles:
+An organization has three roles: **Owner**, **Admin**, and **Member**.
+
+### Organization Owner
+**What they can do:**
+- Everything an Admin can do
+- Transfer organization ownership to another user
+- Only one Owner exists per organization
 
 ### Organization Admin
 **What they can do:**
 - Invite and remove team members from the organization
-- Create new workspaces
-- Manage billing and subscription settings
-- Access all workspaces within the organization
+- Create new shared workspaces under the organization
+- Manage billing, seat count, and subscription settings
+- Access all shared workspaces within the organization as a workspace Admin
+- Promote members to Admin or demote Admins to Member
+
+<Callout type="info">
+  Owners and Admins have the same day-to-day permissions. The only action reserved for the Owner is transferring ownership.
+</Callout>
 
 ### Organization Member
 **What they can do:**
-- Access workspaces they've been specifically invited to
+- Access shared workspaces they've been specifically invited to
 - View the list of organization members
-- Cannot invite new people or manage organization settings
+- Cannot invite new people, create shared workspaces, or manage organization settings
 
 import { FAQ } from '@/components/ui/faq'
 
 <FAQ items={[
-  { question: "What is the difference between organization roles and workspace permissions?", answer: "Organization roles (Admin or Member) control who can manage the organization itself, including inviting people, creating workspaces, and handling billing. Workspace permissions (Read, Write, Admin) control what a user can do within a specific workspace, such as viewing, editing, or managing workflows. A user needs both an organization role and a workspace permission to work within a workspace." },
+  { question: "What is the difference between organization roles and workspace permissions?", answer: "Organization roles (Owner, Admin, or Member) control who can manage the organization itself, including inviting people, creating shared workspaces, and handling billing. Workspace permissions (Read, Write, Admin) control what a user can do within a specific workspace, such as viewing, editing, or managing workflows. A user needs both an organization role and a workspace permission to work within a shared workspace." },
+  { question: "How many workspaces can I create?", answer: "Free users get 1 personal workspace. Pro users get up to 3 personal workspaces. Max users get up to 10 personal workspaces. Team and Enterprise plans support unlimited shared workspaces under the organization — new invites are gated by your seat count." },
+  { question: "What happens to my shared workspaces if I cancel or downgrade my Team plan?", answer: "Existing shared workspaces remain accessible to current members, but new invitations are disabled until you upgrade back to a Team or Enterprise plan. No workspaces or members are deleted — the organization is simply dormant until billing is re-enabled." },
   { question: "Can I restrict which integrations or model providers a team member can use?", answer: "Yes. Organization admins can create permission groups with fine-grained controls, including restricting allowed integrations and allowed model providers to specific lists. You can also disable access to MCP tools, custom tools, skills, and various platform features like the knowledge base, API keys, or Copilot on a per-group basis." },
   { question: "What happens when a personal environment variable has the same name as a workspace variable?", answer: "The personal environment variable takes priority. When a workflow runs, if both a personal and workspace variable share the same name, the personal value is used. This allows individual users to override shared workspace configuration when needed." },
   { question: "Can an Admin remove the workspace owner?", answer: "No. The workspace owner cannot be removed from the workspace by anyone. Only the workspace owner can delete the workspace or transfer ownership to another user. Admins can do everything else, including inviting and removing other users and managing workspace settings." },

apps/sim/app/(landing)/components/pricing/pricing.tsx

@@ -39,6 +39,7 @@ const PRICING_TIERS: PricingTier[] = [
       '1,000 credits (trial)',
       '5GB file storage',
       '3 tables · 1,000 rows each',
+      '1 personal workspace',
       '5 min execution limit',
       '7-day log retention',
       'CLI/SDK/MCP Access',
@@ -56,6 +57,7 @@ const PRICING_TIERS: PricingTier[] = [
       '6,000 credits/mo · +50/day',
       '50GB file storage',
       '25 tables · 5,000 rows each',
+      'Up to 3 personal workspaces',
       '50 min execution · 150 runs/min',
       'Unlimited log retention',
       'CLI/SDK/MCP Access',
@@ -73,6 +75,7 @@ const PRICING_TIERS: PricingTier[] = [
       '25,000 credits/mo · +200/day',
       '500GB file storage',
       '25 tables · 5,000 rows each',
+      'Up to 10 personal workspaces',
       '50 min execution · 300 runs/min',
       'Unlimited log retention',
       'CLI/SDK/MCP Access',
@@ -89,6 +92,7 @@ const PRICING_TIERS: PricingTier[] = [
       'Custom credits & infra limits',
       'Custom file storage',
       '10,000 tables · 1M rows each',
+      'Unlimited shared workspaces',
       'Custom execution limits',
       'Unlimited log retention',
       'SSO & SCIM · SOC2',
@@ -264,10 +268,12 @@ export default function Pricing() {
             Pricing
           </h2>
           <p className='sr-only'>
-            Sim pricing: Community plan is free with 1,000 credits and 5GB storage. Pro plan is $25
-            per month with 6,000 credits and 50GB storage. Max plan is $100 per month with 25,000
-            credits and 500GB storage. Enterprise pricing is custom with SSO, SCIM, SOC2 compliance,
-            self-hosting, and dedicated support. All plans include CLI, SDK, and MCP access.
+            Sim pricing: Community plan is free with 1,000 credits, 5GB storage, and 1 personal
+            workspace. Pro plan is $25 per month with 6,000 credits, 50GB storage, and up to 3
+            personal workspaces. Max plan is $100 per month with 25,000 credits, 500GB storage, and
+            up to 10 personal workspaces. Enterprise pricing is custom with unlimited shared
+            workspaces, SSO, SCIM, SOC2 compliance, self-hosting, and dedicated support. All plans
+            include CLI, SDK, and MCP access.
           </p>
         </div>
 

apps/sim/app/api/workspaces/invitations/route.test.ts

@@ -135,6 +135,7 @@ vi.mock('@/lib/core/telemetry', () => ({
   },
 }))
 
+import { UPGRADE_TO_INVITE_REASON } from '@/lib/workspaces/policy-constants'
 import { POST } from '@/app/api/workspaces/invitations/route'
 
 describe('POST /api/workspaces/invitations', () => {
@@ -187,7 +188,7 @@ describe('POST /api/workspaces/invitations', () => {
     })
     mockGetWorkspaceInvitePolicy.mockResolvedValueOnce({
       allowed: false,
-      reason: 'Upgrade to invite more members',
+      reason: UPGRADE_TO_INVITE_REASON,
       requiresSeat: false,
       organizationId: null,
       upgradeRequired: true,
@@ -204,7 +205,7 @@ describe('POST /api/workspaces/invitations', () => {
     const data = await response.json()
 
     expect(response.status).toBe(403)
-    expect(data.error).toBe('Upgrade to invite more members')
+    expect(data.error).toBe(UPGRADE_TO_INVITE_REASON)
     expect(data.upgradeRequired).toBe(true)
   })
 
@@ -219,7 +220,7 @@ describe('POST /api/workspaces/invitations', () => {
     })
     mockGetWorkspaceInvitePolicy.mockResolvedValueOnce({
       allowed: false,
-      reason: 'Upgrade to invite more members',
+      reason: UPGRADE_TO_INVITE_REASON,
       requiresSeat: false,
       organizationId: null,
       upgradeRequired: true,

apps/sim/app/workspace/[workspaceId]/settings/components/subscription/plan-configs.ts

@@ -2,6 +2,7 @@ import {
   Clock,
   HardDrive,
   HeadphonesIcon,
+  LayoutGrid,
   Server,
   ShieldCheck,
   Table2,
@@ -18,6 +19,7 @@ export const PRO_PLAN_FEATURES: PlanFeature[] = [
   { icon: Timer, text: '50 min sync run limit' },
   { icon: HardDrive, text: '50GB file storage' },
   { icon: Table2, text: '25 tables · 5,000 rows each' },
+  { icon: LayoutGrid, text: 'Up to 3 personal workspaces' },
 ]
 
 export const MAX_PLAN_FEATURES: PlanFeature[] = [
@@ -26,19 +28,22 @@ export const MAX_PLAN_FEATURES: PlanFeature[] = [
   { icon: Timer, text: '50 min sync run limit' },
   { icon: HardDrive, text: '500GB file storage' },
   { icon: Table2, text: '25 tables · 5,000 rows each' },
+  { icon: LayoutGrid, text: 'Up to 10 personal workspaces' },
 ]
 
 export const TEAM_INLINE_FEATURES: PlanFeature[] = [
   { icon: Users, text: 'Shared credit pool' },
   { icon: Zap, text: 'Max plan rate limits' },
   { icon: HardDrive, text: 'Max plan file storage' },
   { icon: Table2, text: '100 tables · 10,000 rows each' },
+  { icon: LayoutGrid, text: 'Unlimited shared workspaces' },
   { icon: ShieldCheck, text: 'Access controls' },
   { icon: SlackMonoIcon, text: 'Dedicated Slack channel' },
 ]
 
 export const ENTERPRISE_PLAN_FEATURES: PlanFeature[] = [
   { icon: Zap, text: 'Custom infra limits' },
+  { icon: LayoutGrid, text: 'Unlimited shared workspaces' },
   { icon: Server, text: 'SSO' },
   { icon: ShieldCheck, text: 'SOC2' },
   { icon: HardDrive, text: 'Self hosting' },

apps/sim/app/workspace/[workspaceId]/w/components/sidebar/components/workspace-header/components/invite-modal/invite-modal.tsx

@@ -2,7 +2,7 @@
 
 import { useCallback, useEffect, useMemo, useRef, useState } from 'react'
 import { createLogger } from '@sim/logger'
-import { useParams } from 'next/navigation'
+import { useParams, useRouter } from 'next/navigation'
 import {
   Button,
   type FileInputOptions,
@@ -27,6 +27,7 @@ import {
   useResendWorkspaceInvitation,
   useUpdateWorkspacePermissions,
 } from '@/hooks/queries/invitations'
+import { useOrganizationBilling } from '@/hooks/queries/organization'
 import type { PermissionType, UserPermissions } from './components/types'
 
 const logger = createLogger('InviteModal')
@@ -36,14 +37,17 @@ interface InviteModalProps {
   onOpenChange: (open: boolean) => void
   workspaceName?: string
   inviteDisabledReason?: string | null
+  organizationId?: string | null
 }
 
 export function InviteModal({
   open,
   onOpenChange,
   workspaceName,
   inviteDisabledReason = null,
+  organizationId = null,
 }: InviteModalProps) {
+  const router = useRouter()
   const formRef = useRef<HTMLFormElement>(null)
   const [emailItems, setEmailItems] = useState<TagItem[]>([])
   const [userPermissions, setUserPermissions] = useState<UserPermissions[]>([])
@@ -76,6 +80,8 @@ export function InviteModal({
   const { data: pendingInvitations = [], isLoading: isPendingInvitationsLoading } =
     usePendingInvitations(open ? workspaceId : undefined)
 
+  const { data: organizationBillingData } = useOrganizationBilling(organizationId ?? '')
+
   const batchSendInvitations = useBatchSendWorkspaceInvitations()
   const cancelInvitation = useCancelWorkspaceInvitation()
   const resendInvitation = useResendWorkspaceInvitation()
@@ -87,6 +93,22 @@ export function InviteModal({
   const hasNewInvites = validEmails.length > 0
   const canInviteMembers = userPerms.canAdmin && !inviteDisabledReason
 
+  const totalSeats = organizationBillingData?.data?.totalSeats ?? 0
+  const usedSeats = organizationBillingData?.data?.usedSeats ?? 0
+  const availableSeats = Math.max(0, totalSeats - usedSeats)
+  const hasSeatData = !!organizationId && totalSeats > 0
+  const exceedsSeatCapacity =
+    hasSeatData && userPerms.canAdmin && validEmails.length > availableSeats
+  const isAtSeatCapacity = hasSeatData && userPerms.canAdmin && availableSeats === 0
+  const isOutOfSeats = exceedsSeatCapacity || isAtSeatCapacity
+  const seatLimitReason = hasSeatData
+    ? availableSeats === 0
+      ? `No available seats. Using ${usedSeats} of ${totalSeats}.`
+      : exceedsSeatCapacity
+        ? `Only ${availableSeats} seat${availableSeats === 1 ? '' : 's'} available.`
+        : null
+    : null
+
   const isSubmitting = batchSendInvitations.isPending
   const isSaving = updatePermissionsMutation.isPending
   const isRemovingMember = removeMember.isPending
@@ -399,12 +421,23 @@ export function InviteModal({
     [workspaceId, userPerms.canAdmin, resendCooldowns, resendingInvitationIds, resendInvitation]
   )
 
+  const handleUpgradeRedirect = useCallback(() => {
+    if (!workspaceId) return
+    onOpenChange(false)
+    router.push(`/workspace/${workspaceId}/settings/subscription`)
+  }, [onOpenChange, router, workspaceId])
+
   const handleSubmit = useCallback(
     (e: React.FormEvent) => {
       e.preventDefault()
 
       setErrorMessage(null)
 
+      if (isOutOfSeats) {
+        handleUpgradeRedirect()
+        return
+      }
+
       if (!canInviteMembers || validEmails.length === 0 || !workspaceId) {
         return
       }
@@ -439,7 +472,15 @@ export function InviteModal({
         }
       )
     },
-    [canInviteMembers, validEmails, workspaceId, userPermissions, batchSendInvitations]
+    [
+      canInviteMembers,
+      isOutOfSeats,
+      handleUpgradeRedirect,
+      validEmails,
+      workspaceId,
+      userPermissions,
+      batchSendInvitations,
+    ]
   )
 
   const resetState = useCallback(() => {
@@ -543,6 +584,9 @@ export function InviteModal({
               {inviteDisabledReason && (
                 <p className='mt-1 text-[var(--text-muted)] text-caption'>{inviteDisabledReason}</p>
               )}
+              {isOutOfSeats && seatLimitReason && (
+                <p className='mt-1 text-[var(--text-muted)] text-caption'>{seatLimitReason}</p>
+              )}
               {errorMessage && (
                 <p className='mt-1 text-[var(--text-error)] text-caption'>{errorMessage}</p>
               )}
@@ -596,9 +640,20 @@ export function InviteModal({
             <Button
               type='button'
               variant='primary'
-              onClick={() => formRef.current?.requestSubmit()}
+              onClick={() => {
+                if (isOutOfSeats) {
+                  handleUpgradeRedirect()
+                  return
+                }
+                formRef.current?.requestSubmit()
+              }}
               disabled={
-                !canInviteMembers || isSubmitting || isSaving || !workspaceId || !hasNewInvites
+                !userPerms.canAdmin ||
+                !!inviteDisabledReason ||
+                isSubmitting ||
+                isSaving ||
+                !workspaceId ||
+                (!isOutOfSeats && !hasNewInvites)
               }
               className='ml-auto'
             >
@@ -608,7 +663,9 @@ export function InviteModal({
                   ? 'Admin Access Required'
                   : isSubmitting
                     ? 'Inviting...'
-                    : 'Invite'}
+                    : isOutOfSeats
+                      ? 'Upgrade to invite'
+                      : 'Invite'}
             </Button>
           </ModalFooter>
         </form>

apps/sim/app/workspace/[workspaceId]/w/components/sidebar/components/workspace-header/workspace-header.tsx

@@ -814,6 +814,7 @@ function WorkspaceHeaderImpl({
         onOpenChange={setIsInviteModalOpen}
         workspaceName={activeWorkspace?.name || 'Workspace'}
         inviteDisabledReason={inviteDisabledReason}
+        organizationId={activeWorkspaceFull?.organizationId ?? null}
       />
       {/* Delete Confirmation Modal */}
       <DeleteModal