@fonderie/workspaces 1.2.2 → 2.1.0

package/dist/index.js

@@ -1031,7 +1031,6 @@ function roleController(store) {
 // src/controllers/invitation.controller.ts
 import { setApiResponse as setApiResponse5, HTTP as HTTP5 } from "@fonderie/core";
 import { NOTIFICATION_EVENT } from "@fonderie/events";
-import { getPlanLimit } from "@fonderie/billing";
 
 // src/services/invitations.ts
 import { randomBytes } from "crypto";
@@ -1153,6 +1152,12 @@ var InvitationModel = class {
 };
 
 // src/controllers/invitation.controller.ts
+function seatLimitFromMeta(ctx) {
+  const billing = ctx.meta["billing"];
+  const status = billing?.statuses?.["seats"];
+  if (!status || status.type === "feature" || typeof status.limit !== "number") return null;
+  return status.limit;
+}
 function invitationController(store, ttl, bus) {
   const invitations = new InvitationModel(store);
   return {
@@ -1182,7 +1187,7 @@ function invitationController(store, ttl, bus) {
           return setApiResponse5(HTTP5.UNPROCESSABLE, "INVALID_PARAMETER", "email is required for every invite");
         }
       }
-      const seatLimit = getPlanLimit(ctx, "seats");
+      const seatLimit = seatLimitFromMeta(ctx);
       if (seatLimit !== null) {
         const [countRow] = await store.query(
           `SELECT COUNT(*) AS count FROM fonderie_role_user_workspaces
@@ -1272,38 +1277,45 @@ function buildWorkspaceRoutes(store, config, bus) {
   const member = memberController(store);
   const role = roleController(store);
   const invitation = invitationController(store, ttl, bus);
+  const R = (id, method, path, ...handlers) => {
+    const o = config.routes?.[id];
+    if (!o) return [method, path, ...handlers];
+    if (typeof o === "string") return [method, o, ...handlers];
+    return [o.method ?? method, o.path ?? path, ...handlers];
+  };
   return [
     // ── Workspace creation + listing (no workspace context required)
-    ["POST", "/workspaces", requireAuth, validate(createWorkspaceSchema), workspace.create],
-    ["GET", "/workspaces", requireAuth, workspace.list],
+    R("createWorkspace", "POST", "/workspaces", requireAuth, validate(createWorkspaceSchema), workspace.create),
+    R("listWorkspaces", "GET", "/workspaces", requireAuth, workspace.list),
     // ── Members (workspace resolved from X-Workspace-ID header)
-    ["GET", "/workspaces/members", requireAuth, wsCtx, member.list],
-    ["DELETE", "/workspaces/members/:userId", requireAuth, wsCtx, member.remove],
-    ["GET", "/workspaces/members/:userId/roles", requireAuth, wsCtx, member.getUserRoles],
-    ["POST", "/workspaces/members/:userId/roles", requireAuth, wsCtx, validate(addMemberRoleSchema), member.addRole],
-    ["DELETE", "/workspaces/members/:userId/roles/:roleId", requireAuth, wsCtx, member.removeRole],
+    R("listMembers", "GET", "/workspaces/members", requireAuth, wsCtx, member.list),
+    R("removeMember", "DELETE", "/workspaces/members/:userId", requireAuth, wsCtx, member.remove),
+    R("getMemberRoles", "GET", "/workspaces/members/:userId/roles", requireAuth, wsCtx, member.getUserRoles),
+    R("addMemberRole", "POST", "/workspaces/members/:userId/roles", requireAuth, wsCtx, validate(addMemberRoleSchema), member.addRole),
+    R("removeMemberRole", "DELETE", "/workspaces/members/:userId/roles/:roleId", requireAuth, wsCtx, member.removeRole),
     // ── Invitations
-    ["GET", "/workspaces/invitations", requireAuth, wsCtx, invitation.list],
-    ["POST", "/workspaces/invitations", requireAuth, wsCtx, validate(createInvitationsSchema), invitation.invite],
-    ["DELETE", "/workspaces/invitations/:inviteId", requireAuth, wsCtx, invitation.cancel],
-    ["POST", "/workspaces/invitations/accept", requireAuth, validate(acceptInvitationSchema), invitation.accept],
+    R("listInvitations", "GET", "/workspaces/invitations", requireAuth, wsCtx, invitation.list),
+    R("invite", "POST", "/workspaces/invitations", requireAuth, wsCtx, validate(createInvitationsSchema), invitation.invite),
+    R("cancelInvitation", "DELETE", "/workspaces/invitations/:inviteId", requireAuth, wsCtx, invitation.cancel),
+    R("acceptInvitation", "POST", "/workspaces/invitations/accept", requireAuth, validate(acceptInvitationSchema), invitation.accept),
     // ── Roles
-    ["POST", "/workspaces/roles", requireAuth, wsCtx, validate(createRoleSchema), role.create],
-    ["GET", "/workspaces/roles", requireAuth, wsCtx, role.list],
-    ["GET", "/workspaces/roles/:roleId", requireAuth, wsCtx, role.get],
-    ["PUT", "/workspaces/roles/:roleId", requireAuth, wsCtx, validate(updateRoleSchema), role.update],
-    ["DELETE", "/workspaces/roles/:roleId", requireAuth, wsCtx, role.remove],
-    ["POST", "/workspaces/roles/:roleId/permissions", requireAuth, wsCtx, validate(setRolePermissionsSchema), role.setPermissions],
+    R("createRole", "POST", "/workspaces/roles", requireAuth, wsCtx, validate(createRoleSchema), role.create),
+    R("listRoles", "GET", "/workspaces/roles", requireAuth, wsCtx, role.list),
+    R("getRole", "GET", "/workspaces/roles/:roleId", requireAuth, wsCtx, role.get),
+    R("updateRole", "PUT", "/workspaces/roles/:roleId", requireAuth, wsCtx, validate(updateRoleSchema), role.update),
+    R("removeRole", "DELETE", "/workspaces/roles/:roleId", requireAuth, wsCtx, role.remove),
+    R("setRolePermissions", "POST", "/workspaces/roles/:roleId/permissions", requireAuth, wsCtx, validate(setRolePermissionsSchema), role.setPermissions),
     // ── Workspace lifecycle
-    ["POST", "/workspaces/archive", requireAuth, wsCtx, workspace.archive],
-    ["POST", "/workspaces/restore", requireAuth, wsCtx, workspace.restore],
-    ["GET", "/workspaces/settings", requireAuth, wsCtx, workspace.getSettings],
-    ["PUT", "/workspaces/settings", requireAuth, wsCtx, validate(updateSettingsSchema), workspace.updateSettings],
+    R("archive", "POST", "/workspaces/archive", requireAuth, wsCtx, workspace.archive),
+    R("restore", "POST", "/workspaces/restore", requireAuth, wsCtx, workspace.restore),
+    R("getSettings", "GET", "/workspaces/settings", requireAuth, wsCtx, workspace.getSettings),
+    R("updateSettings", "PUT", "/workspaces/settings", requireAuth, wsCtx, validate(updateSettingsSchema), workspace.updateSettings),
     // ── Path-based lookup by ID (admin / cross-workspace use)
-    ["GET", "/workspaces/:id", requireAuth, wsCtx, workspace.get],
-    // ── Update current workspace — ID resolved from X-Workspace-ID header
-    // (or personal workspace fallback when header is absent)
-    ["PUT", "/workspaces", requireAuth, wsCtx, validate(updateWorkspaceSchema), workspace.update]
+    R("getWorkspace", "GET", "/workspaces/:id", requireAuth, wsCtx, workspace.get),
+    // ── Update current workspace — ID from :id path param (wsCtx) or the
+    // X-Workspace-ID header (or personal-workspace fallback when absent). Set
+    // routes.updateWorkspace = '/workspaces/:id' to match a path-id frontend.
+    R("updateWorkspace", "PUT", "/workspaces", requireAuth, wsCtx, validate(updateWorkspaceSchema), workspace.update)
   ];
 }
 
@@ -1319,7 +1331,9 @@ var WorkspacesModule = class {
   config;
   bus;
   name = "@fonderie/workspaces";
-  deps = ["@fonderie/auth", "@fonderie/billing"];
+  // billing is OPTIONAL — seat limits activate if it's registered (read via
+  // ctx.meta['billing']), otherwise invitations are unlimited. Not a hard dep.
+  deps = ["@fonderie/auth"];
   install(app) {
     if (this.bus && this.config.personalWorkspace !== false) {
       this.bus.on(