@fonderie/workspaces 4.0.0 → 5.1.0

package/README.md

@@ -34,7 +34,7 @@ typed `EVENT_KEYS` are exported for your handlers and event consumers.
 You've shipped this plumbing before — auth, teams, billing, messaging —
 and the next project will ask for it again. Fonderie packages it once:
 plain TypeScript modules for
-[`@fonderie/core`](https://github.com/fonderie-js/sdk/tree/main/packages/core),
+[`@fonderie/core`](https://github.com/fonderiejs/sdk/tree/main/packages/core),
 PostgreSQL-backed, self-hosted, MIT. No external control plane, no
 per-seat anything. Register the modules you need; skip the ones you don't.
 
@@ -43,7 +43,7 @@ and role containers — the bricks scope their data by the workspace context
 this one provides.
 
 Browse the whole set at
-[fonderie-js/sdk](https://github.com/fonderie-js/sdk) · follow
+[fonderiejs/sdk](https://github.com/fonderiejs/sdk) · follow
 [@fonderiejs](https://x.com/fonderiejs)
 
 ## License

package/brain/outcomes.md

@@ -102,6 +102,7 @@ INSERT INTO fonderie_roles (name, workspace_id, is_system, description) VALUES (
 | DELETE | `/workspaces/roles/:roleId` | `requireAuth → wsCtx → role.remove` |
 | GET | `/workspaces/roles/:roleId` | `requireAuth → wsCtx → role.get` |
 | PUT | `/workspaces/roles/:roleId` | `requireAuth → wsCtx → validate(updateRoleSchema) → role.update` |
+| GET | `/workspaces/roles/:roleId/permissions` | `requireAuth → wsCtx → role.getPermissions` |
 | POST | `/workspaces/roles/:roleId/permissions` | `requireAuth → wsCtx → validate(setRolePermissionsSchema) → role.setPermissions` |
 | GET | `/workspaces/settings` | `requireAuth → wsCtx → workspace.getSettings` |
 | PUT | `/workspaces/settings` | `requireAuth → wsCtx → validate(updateSettingsSchema) → workspace.updateSettings` |

package/brain/signatures.md

@@ -204,4 +204,10 @@ interface IImportMembership {
     confirmed?: boolean;
     createdAt?: Date;
 }
+
+function deleteUserData(store: IStoreAdapter, userId: string): Promise<number>
+
+function exportUserData(store: IStoreAdapter, userId: string): Promise<unknown>
+
+function workspaceExportContributor(store: IStoreAdapter): { name: string; collect: (userId: string) => Promise<unknown>; }
 ```

package/dist/index.cjs

@@ -23,6 +23,8 @@ __export(index_exports, {
   EVENT_KEYS: () => EVENT_KEYS,
   MESSAGE_KEYS: () => MESSAGE_KEYS,
   WorkspacesModule: () => WorkspacesModule,
+  deleteUserData: () => deleteUserData,
+  exportUserData: () => exportUserData,
   importMembership: () => importMembership,
   importRole: () => importRole,
   importWorkspace: () => importWorkspace,
@@ -33,7 +35,8 @@ __export(index_exports, {
   toRoleDTO: () => toRoleDTO,
   toSettingsDTO: () => toSettingsDTO,
   toWorkspaceDTO: () => toWorkspaceDTO,
-  withWorkspace: () => withWorkspace
+  withWorkspace: () => withWorkspace,
+  workspaceExportContributor: () => workspaceExportContributor
 });
 module.exports = __toCommonJS(index_exports);
 
@@ -619,6 +622,19 @@ async function setRolePermissions(roleId, workspaceId, permissions, store) {
     }
   });
 }
+async function getRolePermissions(roleId, workspaceId, store) {
+  return store.query(
+    `SELECT permission_key AS "permissionKey",
+		        can_create     AS "canCreate",
+		        can_read       AS "canRead",
+		        can_update     AS "canUpdate",
+		        can_delete     AS "canDelete"
+		   FROM fonderie_role_permissions
+		  WHERE role_id = $1 AND workspace_id = $2
+		  ORDER BY permission_key`,
+    [roleId, workspaceId]
+  );
+}
 
 // src/models/role.model.ts
 var RoleModel = class {
@@ -647,6 +663,9 @@ var RoleModel = class {
   setPermissions(roleId, workspaceId, permissions) {
     return setRolePermissions(roleId, workspaceId, permissions, this.store);
   }
+  getPermissions(roleId, workspaceId) {
+    return getRolePermissions(roleId, workspaceId, this.store);
+  }
 };
 
 // src/dtos/workspace.ts
@@ -1027,6 +1046,24 @@ function roleController(store) {
       await roles.delete(roleId, ctx.workspace.id);
       return (0, import_core4.setApiResponse)(import_core4.HTTP.OK, "ROLE_DELETED", "Role deleted successfully.");
     },
+    async getPermissions(ctx) {
+      if (!ctx.workspace) {
+        return (0, import_core4.setApiResponse)(import_core4.HTTP.NOT_FOUND, "NOT_FOUND", "Workspace not found");
+      }
+      const params = ctx.meta["params"];
+      const roleId = params?.["roleId"];
+      if (!roleId) {
+        return (0, import_core4.setApiResponse)(import_core4.HTTP.UNPROCESSABLE, "INVALID_PARAMETER", "roleId is required");
+      }
+      const role = await roles.findById(roleId);
+      if (!role) {
+        return (0, import_core4.setApiResponse)(import_core4.HTTP.NOT_FOUND, "NOT_FOUND", "Role not found");
+      }
+      const permissions = await roles.getPermissions(roleId, ctx.workspace.id);
+      return (0, import_core4.setApiResponse)(import_core4.HTTP.OK, "PERMISSIONS_FETCHED", "Role permissions retrieved successfully.", {
+        permissions
+      });
+    },
     async setPermissions(ctx) {
       if (!ctx.workspace) {
         return (0, import_core4.setApiResponse)(import_core4.HTTP.NOT_FOUND, "NOT_FOUND", "Workspace not found");
@@ -1337,6 +1374,7 @@ function buildWorkspaceRoutes(store, config, bus) {
     R("getRole", "GET", "/workspaces/roles/:roleId", import_middlewares.requireAuth, wsCtx, role.get),
     R("updateRole", "PUT", "/workspaces/roles/:roleId", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(updateRoleSchema), role.update),
     R("removeRole", "DELETE", "/workspaces/roles/:roleId", import_middlewares.requireAuth, wsCtx, role.remove),
+    R("getRolePermissions", "GET", "/workspaces/roles/:roleId/permissions", import_middlewares.requireAuth, wsCtx, role.getPermissions),
     R("setRolePermissions", "POST", "/workspaces/roles/:roleId/permissions", import_middlewares.requireAuth, wsCtx, (0, import_middlewares.validate)(setRolePermissionsSchema), role.setPermissions),
     // ── Workspace lifecycle
     R("archive", "POST", "/workspaces/archive", import_middlewares.requireAuth, wsCtx, workspace.archive),
@@ -1493,11 +1531,36 @@ async function importMembership(store, m) {
     vals
   );
 }
+
+// src/retention.ts
+async function deleteUserData(store, userId) {
+  const rows = await store.query(
+    `DELETE FROM fonderie_role_user_workspaces WHERE user_id = $1 RETURNING user_id`,
+    [userId]
+  );
+  return rows.length;
+}
+async function exportUserData(store, userId) {
+  const rows = await store.query(
+    `SELECT ruw.workspace_id, ruw.role_id, r.name AS role_name
+		 FROM fonderie_role_user_workspaces ruw
+		 JOIN fonderie_roles r ON r.id = ruw.role_id
+		 WHERE ruw.user_id = $1 AND ruw.removed = false
+		 ORDER BY ruw.workspace_id`,
+    [userId]
+  );
+  return { memberships: rows };
+}
+function workspaceExportContributor(store) {
+  return { name: "workspaces", collect: (userId) => exportUserData(store, userId) };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   EVENT_KEYS,
   MESSAGE_KEYS,
   WorkspacesModule,
+  deleteUserData,
+  exportUserData,
   importMembership,
   importRole,
   importWorkspace,
@@ -1508,6 +1571,7 @@ async function importMembership(store, m) {
   toRoleDTO,
   toSettingsDTO,
   toWorkspaceDTO,
-  withWorkspace
+  withWorkspace,
+  workspaceExportContributor
 });
 //# sourceMappingURL=index.cjs.map