@fonderie/workspaces 1.2.2 → 2.1.0

package/brain/signatures.md

@@ -15,6 +15,7 @@ new WorkspacesModule(store: IStoreAdapter, config?: IWorkspacesConfig, bus?: Eve
 interface IWorkspacesConfig {
     invitationTtl?: string;
     personalWorkspace?: boolean;
+    routes?: Partial<Record<WorkspaceRouteId, WorkspaceRouteOverride>>;
 }
 
 type WorkspacesMessageKey = (typeof MESSAGE_KEYS)[keyof typeof MESSAGE_KEYS];

package/dist/index.cjs

@@ -1061,7 +1061,6 @@ function roleController(store) {
 // src/controllers/invitation.controller.ts
 var import_core5 = require("@fonderie/core");
 var import_events = require("@fonderie/events");
-var import_billing = require("@fonderie/billing");
 
 // src/services/invitations.ts
 var import_node_crypto = require("crypto");
@@ -1183,6 +1182,12 @@ var InvitationModel = class {
 };
 
 // src/controllers/invitation.controller.ts
+function seatLimitFromMeta(ctx) {
+  const billing = ctx.meta["billing"];
+  const status = billing?.statuses?.["seats"];
+  if (!status || status.type === "feature" || typeof status.limit !== "number") return null;
+  return status.limit;
+}
 function invitationController(store, ttl, bus) {
   const invitations = new InvitationModel(store);
   return {
@@ -1212,7 +1217,7 @@ function invitationController(store, ttl, bus) {
           return (0, import_core5.setApiResponse)(import_core5.HTTP.UNPROCESSABLE, "INVALID_PARAMETER", "email is required for every invite");
         }
       }
-      const seatLimit = (0, import_billing.getPlanLimit)(ctx, "seats");
+      const seatLimit = seatLimitFromMeta(ctx);
       if (seatLimit !== null) {
         const [countRow] = await store.query(
           `SELECT COUNT(*) AS count FROM fonderie_role_user_workspaces
@@ -1302,38 +1307,45 @@ function buildWorkspaceRoutes(store, config, bus) {
   const member = memberController(store);
   const role = roleController(store);
   const invitation = invitationController(store, ttl, bus);
+  const R = (id, method, path, ...handlers) => {
+    const o = config.routes?.[id];
+    if (!o) return [method, path, ...handlers];
+    if (typeof o === "string") return [method, o, ...handlers];
+    return [o.method ?? method, o.path ?? path, ...handlers];
+  };
   return [
     // ── Workspace creation + listing (no workspace context required)
-    ["POST", "/workspaces", import_middlewares.requireAuth, (0, import_middlewares.validate)(createWorkspaceSchema), workspace.create],
-    ["GET", "/workspaces", import_middlewares.requireAuth, workspace.list],
+    R("createWorkspace", "POST", "/workspaces", import_middlewares.requireAuth, (0, import_middlewares.validate)(createWorkspaceSchema), workspace.create),
+    R("listWorkspaces", "GET", "/workspaces", import_middlewares.requireAuth, workspace.list),
     // ── Members (workspace resolved from X-Workspace-ID header)
-    ["GET", "/workspaces/members", import_middlewares.requireAuth, wsCtx, member.list],
-    ["DELETE", "/workspaces/members/:userId", import_middlewares.requireAuth, wsCtx, member.remove],
-    ["GET", "/workspaces/members/:userId/roles", import_middlewares.requireAuth, wsCtx, member.getUserRoles],
-    ["POST", "/workspaces/members/:userId/roles", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(addMemberRoleSchema), member.addRole],
-    ["DELETE", "/workspaces/members/:userId/roles/:roleId", import_middlewares.requireAuth, wsCtx, member.removeRole],
+    R("listMembers", "GET", "/workspaces/members", import_middlewares.requireAuth, wsCtx, member.list),
+    R("removeMember", "DELETE", "/workspaces/members/:userId", import_middlewares.requireAuth, wsCtx, member.remove),
+    R("getMemberRoles", "GET", "/workspaces/members/:userId/roles", import_middlewares.requireAuth, wsCtx, member.getUserRoles),
+    R("addMemberRole", "POST", "/workspaces/members/:userId/roles", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(addMemberRoleSchema), member.addRole),
+    R("removeMemberRole", "DELETE", "/workspaces/members/:userId/roles/:roleId", import_middlewares.requireAuth, wsCtx, member.removeRole),
     // ── Invitations
-    ["GET", "/workspaces/invitations", import_middlewares.requireAuth, wsCtx, invitation.list],
-    ["POST", "/workspaces/invitations", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(createInvitationsSchema), invitation.invite],
-    ["DELETE", "/workspaces/invitations/:inviteId", import_middlewares.requireAuth, wsCtx, invitation.cancel],
-    ["POST", "/workspaces/invitations/accept", import_middlewares.requireAuth, (0, import_middlewares.validate)(acceptInvitationSchema), invitation.accept],
+    R("listInvitations", "GET", "/workspaces/invitations", import_middlewares.requireAuth, wsCtx, invitation.list),
+    R("invite", "POST", "/workspaces/invitations", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(createInvitationsSchema), invitation.invite),
+    R("cancelInvitation", "DELETE", "/workspaces/invitations/:inviteId", import_middlewares.requireAuth, wsCtx, invitation.cancel),
+    R("acceptInvitation", "POST", "/workspaces/invitations/accept", import_middlewares.requireAuth, (0, import_middlewares.validate)(acceptInvitationSchema), invitation.accept),
     // ── Roles
-    ["POST", "/workspaces/roles", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(createRoleSchema), role.create],
-    ["GET", "/workspaces/roles", import_middlewares.requireAuth, wsCtx, role.list],
-    ["GET", "/workspaces/roles/:roleId", import_middlewares.requireAuth, wsCtx, role.get],
-    ["PUT", "/workspaces/roles/:roleId", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(updateRoleSchema), role.update],
-    ["DELETE", "/workspaces/roles/:roleId", import_middlewares.requireAuth, wsCtx, role.remove],
-    ["POST", "/workspaces/roles/:roleId/permissions", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(setRolePermissionsSchema), role.setPermissions],
+    R("createRole", "POST", "/workspaces/roles", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(createRoleSchema), role.create),
+    R("listRoles", "GET", "/workspaces/roles", import_middlewares.requireAuth, wsCtx, role.list),
+    R("getRole", "GET", "/workspaces/roles/:roleId", import_middlewares.requireAuth, wsCtx, role.get),
+    R("updateRole", "PUT", "/workspaces/roles/:roleId", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(updateRoleSchema), role.update),
+    R("removeRole", "DELETE", "/workspaces/roles/:roleId", import_middlewares.requireAuth, wsCtx, role.remove),
+    R("setRolePermissions", "POST", "/workspaces/roles/:roleId/permissions", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(setRolePermissionsSchema), role.setPermissions),
     // ── Workspace lifecycle
-    ["POST", "/workspaces/archive", import_middlewares.requireAuth, wsCtx, workspace.archive],
-    ["POST", "/workspaces/restore", import_middlewares.requireAuth, wsCtx, workspace.restore],
-    ["GET", "/workspaces/settings", import_middlewares.requireAuth, wsCtx, workspace.getSettings],
-    ["PUT", "/workspaces/settings", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(updateSettingsSchema), workspace.updateSettings],
+    R("archive", "POST", "/workspaces/archive", import_middlewares.requireAuth, wsCtx, workspace.archive),
+    R("restore", "POST", "/workspaces/restore", import_middlewares.requireAuth, wsCtx, workspace.restore),
+    R("getSettings", "GET", "/workspaces/settings", import_middlewares.requireAuth, wsCtx, workspace.getSettings),
+    R("updateSettings", "PUT", "/workspaces/settings", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(updateSettingsSchema), workspace.updateSettings),
     // ── Path-based lookup by ID (admin / cross-workspace use)
-    ["GET", "/workspaces/:id", import_middlewares.requireAuth, wsCtx, workspace.get],
-    // ── Update current workspace — ID resolved from X-Workspace-ID header
-    // (or personal workspace fallback when header is absent)
-    ["PUT", "/workspaces", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(updateWorkspaceSchema), workspace.update]
+    R("getWorkspace", "GET", "/workspaces/:id", import_middlewares.requireAuth, wsCtx, workspace.get),
+    // ── Update current workspace — ID from :id path param (wsCtx) or the
+    // X-Workspace-ID header (or personal-workspace fallback when absent). Set
+    // routes.updateWorkspace = '/workspaces/:id' to match a path-id frontend.
+    R("updateWorkspace", "PUT", "/workspaces", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(updateWorkspaceSchema), workspace.update)
   ];
 }
 
@@ -1349,7 +1361,9 @@ var WorkspacesModule = class {
   config;
   bus;
   name = "@fonderie/workspaces";
-  deps = ["@fonderie/auth", "@fonderie/billing"];
+  // billing is OPTIONAL — seat limits activate if it's registered (read via
+  // ctx.meta['billing']), otherwise invitations are unlimited. Not a hard dep.
+  deps = ["@fonderie/auth"];
   install(app) {
     if (this.bus && this.config.personalWorkspace !== false) {
       this.bus.on(