CS-60 [Improvement] [Feature] - Send onboarding email for new employee

[github-actions]

This is an automated pull request to merge chas/send-onboarding-email-to-employee into dev.
It was created by the [Auto Pull Request] action.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app	Ready	Preview, Comment	Feb 4, 2026 5:13pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
portal	Skipped		Feb 4, 2026 5:13pm

[cursor]

PR Summary

Medium Risk
Adds an email-sending side effect to the member-creation path and changes invite-link generation based on environment variables, which could impact onboarding deliverability or link correctness but does not alter auth/permissions logic.

Overview
New members added via the “add employee without invite” flow now receive an onboarding/invite email. The server action addEmployeeWithoutInvite fetches the org name, builds an environment-dependent invite link, and calls sendInviteMemberEmail; email failures are treated as non-fatal and surfaced via emailSent/emailError in the response.

The invite UI (InviteMembersModal) now tracks partial success: if the member is created but email sending fails, it shows a warning toast listing affected emails.

Updates .env.example to point NEXT_PUBLIC_PORTAL_URL at http://localhost:3002.

^{Written by Cursor Bugbot for commit 602c001. This will update automatically on new commits. Configure here.}

[linear]

CS-60 [Improvement] [Feature] - Send onboarding email for new employee

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

[cursor]

Invite link uses wrong domain

High Severity

inviteLink is built from a hardcoded domain (app.trycomp.ai or localhost:3002) based on NEXT_PUBLIC_PORTAL_URL string matching, instead of using the actual configured portal base URL. This can send employees/contractors to the admin app (where they may be blocked) or to localhost in non-prod environments.