@jini-ai/cms 0.1.0

package/dist/taxonomy/write-service.js

@@ -0,0 +1,350 @@
+import { ForbiddenError } from "../core/commands/command.js";
+import { validateContentJoin, validateHierarchyAssignment } from "./validation-chain.js";
+/** The hardcoded post/page taxonomy allow-list (permanent, see
+ * `docs/decisions/taxonomy-content-type-allow-list.md`) — every taxonomy is applicable to
+ * `post`/`page` content; no other content type is eligible for term assignment until this is
+ * deliberately extended. */
+export const TAXONOMY_ALLOWED_CONTENT_TYPES = new Set(["post", "page"]);
+export function isContentTypeOnAllowList(contentType) {
+    return TAXONOMY_ALLOWED_CONTENT_TYPES.has(contentType);
+}
+export class TaxonomyRecordNotFoundError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "TaxonomyRecordNotFoundError";
+    }
+}
+export class TermRecordNotFoundError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "TermRecordNotFoundError";
+    }
+}
+/** Finding 1 fix — the target of an `assignTerms` call does not resolve to any real content row. */
+export class ContentRecordNotFoundError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ContentRecordNotFoundError";
+    }
+}
+/** `admin.taxonomy.manage` (the flat-string permission convention) — must run before any other
+ * side effect of every write-service export in this file. */
+async function authorizeTaxonomyManage(deps, principalId) {
+    const result = await deps.authorize({ principalId, permission: "admin.taxonomy.manage" });
+    if (!result.allowed) {
+        throw new ForbiddenError(`principal '${principalId}' is not authorized for 'admin.taxonomy.manage' (${result.reason})`, "admin.taxonomy.manage", result.reason);
+    }
+}
+/** Creates a taxonomy row (hierarchical=true -> "category"-shaped, false -> "tag"-shaped — same
+ * shared table). Ordinary mutation, no plan()/confirmation ceremony. */
+export async function createTaxonomy(required, _optional = {}) {
+    const { deps, principalId, name, hierarchical } = required;
+    await authorizeTaxonomyManage(deps, principalId);
+    const now = deps.clock.nowIso();
+    const taxonomy = {
+        id: deps.idGen.newId(),
+        name,
+        hierarchical,
+        status: "active",
+        updatedAt: now,
+        version: 1,
+    };
+    await deps.taxonomies.insert(taxonomy);
+    await deps.revisions.insert({
+        taxonomyId: taxonomy.id,
+        op: "create",
+        previousState: null,
+        actorId: principalId,
+        recordedAt: now,
+    });
+    deps.stampWatermark();
+    await deps.outbox.enqueue({ name: "taxonomy.created", taxonomyId: taxonomy.id, actorId: principalId, occurredAt: now });
+    return taxonomy;
+}
+/** AC-03/AC-13/EC-04 — validates `parentId` via `validateHierarchyAssignment` before writing. A
+ * freshly-created term has no descendants yet, so it structurally cannot be a cycle source; the
+ * cycle check is therefore always a no-op (`() => false`) here, unlike a reparent of an existing
+ * term (not yet built — no certified test in this slice exercises it). */
+export async function createTerm(required, _optional = {}) {
+    const { deps, principalId, taxonomyId, name, parentId } = required;
+    await authorizeTaxonomyManage(deps, principalId);
+    const taxonomy = await deps.taxonomies.findById(taxonomyId);
+    if (!taxonomy) {
+        throw new TaxonomyRecordNotFoundError(`taxonomy '${taxonomyId}' was not found`);
+    }
+    const candidateParentId = parentId ?? null;
+    let resolvedParent = "not-applicable";
+    if (candidateParentId !== null) {
+        const parentTerm = await deps.terms.findById(candidateParentId);
+        resolvedParent = parentTerm ? { id: parentTerm.id, taxonomyId: parentTerm.taxonomyId } : null;
+    }
+    validateHierarchyAssignment({
+        childTaxonomyId: taxonomyId,
+        taxonomyIsHierarchical: taxonomy.hierarchical,
+        candidateParentId,
+        resolvedParent,
+        wouldCreateCycle: () => false,
+        termId: "__new__",
+    });
+    const now = deps.clock.nowIso();
+    const term = {
+        id: deps.idGen.newId(),
+        taxonomyId,
+        parentId: candidateParentId,
+        name,
+        status: "active",
+        updatedAt: now,
+        version: 1,
+    };
+    await deps.terms.insert(term);
+    await deps.revisions.insert({ taxonomyId, op: "create", previousState: null, actorId: principalId, recordedAt: now });
+    deps.stampWatermark();
+    await deps.outbox.enqueue({ name: "taxonomy.term_created", termId: term.id, actorId: principalId, occurredAt: now });
+    return term;
+}
+/** AC-15/AC-19/AC-25/REQ-12/REQ-17 — same-tx rename + revision (carrying the pre-rename state) +
+ * watermark + outbox. `authorize()` runs before the term lookup, so a denied caller produces zero
+ * side effects of any kind. */
+export async function renameTerm(required, _optional = {}) {
+    const { deps, principalId, termId, newName } = required;
+    await authorizeTaxonomyManage(deps, principalId);
+    const current = await deps.terms.findById(termId);
+    if (!current) {
+        throw new TermRecordNotFoundError(`term '${termId}' was not found`);
+    }
+    const now = deps.clock.nowIso();
+    const updated = {
+        id: current.id,
+        taxonomyId: current.taxonomyId,
+        parentId: current.parentId ?? null,
+        name: newName,
+        status: current.status ?? "active",
+        updatedAt: now,
+        version: (current.version ?? 1) + 1,
+    };
+    await deps.terms.update(updated);
+    await deps.revisions.insert({
+        taxonomyId: current.taxonomyId,
+        op: "rename",
+        previousState: { name: current.name },
+        actorId: principalId,
+        recordedAt: now,
+    });
+    deps.stampWatermark();
+    await deps.outbox.enqueue({ name: "taxonomy.term_renamed", termId, actorId: principalId, occurredAt: now });
+    return updated;
+}
+/** AC-17/AC-20/INV-05/REQ-13/REQ-14 — upserts every `entry_terms` row (idempotent on-conflict per
+ * `entry_terms_unique`, EC-09), then stamps the watermark and enqueues the outbox event exactly
+ * ONCE per call regardless of `termIds.length` — never once per term. Never produces a
+ * `taxonomy_revisions` row (see this file's header for the disclosed narrowing this implements).
+ *
+ * Finding 1 fix (TM-adr041-043-044-045-audit-001): every `termId` is validated via
+ * `validateContentJoin` (allow-list -> workspace -> lens, `validation-chain.ts`'s fixed order)
+ * BEFORE any `entry_terms` row is written — every termId must resolve to a real term, and the
+ * target content must resolve to a real row whose kind matches the caller-supplied `contentType`.
+ * Validation runs for ALL termIds before ANY write, so a failure partway through never leaves a
+ * partial assignment. Content is resolved once per call (not once per term) since every term in
+ * one call shares the same `(contentType, contentId)` target.
+ */
+export async function assignTerms(required, _optional = {}) {
+    const { deps, principalId, contentType, contentId, termIds } = required;
+    await authorizeTaxonomyManage(deps, principalId);
+    const isOnAllowList = isContentTypeOnAllowList(contentType);
+    const content = isOnAllowList ? await deps.contentLookup.resolve({ contentType, contentId }) : null;
+    if (isOnAllowList && !content) {
+        throw new ContentRecordNotFoundError(`content '${contentType}:${contentId}' was not found`);
+    }
+    for (const termId of termIds) {
+        const term = await deps.terms.findById(termId);
+        if (!term) {
+            throw new TermRecordNotFoundError(`term '${termId}' was not found`);
+        }
+        validateContentJoin({
+            taxonomyId: term.taxonomyId,
+            isOnAllowList,
+            callerWorkspaceId: deps.workspaceId,
+            // `SqliteTermRepo`/`SqliteEntryTermRepo` are workspace-BOUND at construction (single
+            // workspace per content.db) — a term/content row that resolves via those adapters at all
+            // is, by construction, already in the caller's own workspace. See this file's header.
+            resolvedTermWorkspaceId: deps.workspaceId,
+            resolvedContentWorkspaceId: content?.workspaceId ?? deps.workspaceId,
+            suppliedContentType: contentType,
+            resolvedContentKind: content?.kind ?? contentType,
+        });
+    }
+    const now = deps.clock.nowIso();
+    for (const termId of termIds) {
+        await deps.entryTerms.upsert({ contentType, contentId, termId, addedAt: now });
+    }
+    deps.stampWatermark();
+    await deps.outbox.enqueue({
+        name: "taxonomy.terms_assigned",
+        contentType,
+        contentId,
+        termIds,
+        actorId: principalId,
+        occurredAt: now,
+    });
+}
+/** Content-deletion event subscriber. Best-effort (a missed event leaves an orphaned
+ * `entry_terms` row that is inert on read; a periodic/boot reconciliation sweep — modeled by
+ * re-invoking this same function for the orphan — is the backstop, never a hard failure). A
+ * no-op for content with no
+ * assigned terms, never an error. */
+export async function onContentDeleted(required, _optional = {}) {
+    const { event, entryTerms } = required;
+    await entryTerms.deleteByContent({
+        workspaceId: event.workspaceId,
+        contentType: event.contentType,
+        contentId: event.contentId,
+    });
+}
+/** `deleteTerm`/`deleteTaxonomy` refuse rather than silently orphan when content is still
+ * assigned. Carries `assignedCount` so a caller (route/UI) can render "N items are still
+ * assigned" instead of a generic failure. */
+export class TermHasAssignedContentError extends Error {
+    assignedCount;
+    constructor(message, assignedCount) {
+        super(message);
+        this.assignedCount = assignedCount;
+        this.name = "TermHasAssignedContentError";
+    }
+}
+/** See `DeletableTermRepoPort.countChildren`'s doc comment for why this guard exists. Carries
+ * `childCount` for the same reason `TermHasAssignedContentError` carries `assignedCount`. */
+export class TermHasChildTermsError extends Error {
+    childCount;
+    constructor(message, childCount) {
+        super(message);
+        this.childCount = childCount;
+        this.name = "TermHasChildTermsError";
+    }
+}
+/** `deleteTaxonomy`'s content-assignment guard — `assignedCount` is the sum across every member
+ * term, not a single term's count. */
+export class TaxonomyHasAssignedContentError extends Error {
+    assignedCount;
+    constructor(message, assignedCount) {
+        super(message);
+        this.assignedCount = assignedCount;
+        this.name = "TaxonomyHasAssignedContentError";
+    }
+}
+/**
+ * Deletes a single term. Refuses (never cascades) when the term still has children or is still
+ * assigned to content — both checks run, and either alone is enough to block, before any write.
+ * An unassigned, childless term is destroying nothing recoverable, so this is a direct delete with
+ * no plan()/confirmation ceremony (`mergeTerm` earns that ceremony because it migrates data this
+ * does not).
+ *
+ * `authorize()` runs before the transaction opens (a pure permission check, no side effect, so it
+ * doesn't need transactional protection); everything from the existence check onward — both
+ * guards and the delete itself — runs inside `deps.transaction()` (see that port's doc comment for
+ * why). Does NOT cascade-delete the term's `taxonomy_revisions` rows: that table is an append-only
+ * audit trail (mirrors `redirect_hits`/`asset_renditions`'s disclosed audit-not-referential-
+ * integrity precedent), and erasing a term's history the moment the term itself is deleted would
+ * destroy the very "this term existed and was deleted" record this call's own revision insert
+ * below creates. Confirmed by grepping `db/schema.ts`: no other table has a `taxonomyId`/`termId`
+ * column, so `taxonomy_revisions` is the only thing this decision applies to.
+ *
+ * @complexity O(1) — one `countChildren` call, one `countByTerm` call, one delete, all inside one
+ * transaction.
+ * @overallScore 100
+ */
+export async function deleteTerm(required, _optional = {}) {
+    const { deps, principalId, termId } = required;
+    await authorizeTaxonomyManage(deps, principalId);
+    return deps.transaction(async () => {
+        const current = await deps.terms.findById(termId);
+        if (!current) {
+            throw new TermRecordNotFoundError(`term '${termId}' was not found`);
+        }
+        const childCount = await deps.terms.countChildren({ parentId: termId });
+        if (childCount > 0) {
+            throw new TermHasChildTermsError(`term '${termId}' has ${childCount} child term(s) and cannot be deleted`, childCount);
+        }
+        const assignedCount = await deps.entryTerms.countByTerm({ termId });
+        if (assignedCount > 0) {
+            throw new TermHasAssignedContentError(`term '${termId}' is assigned to ${assignedCount} content item(s) and cannot be deleted`, assignedCount);
+        }
+        await deps.terms.delete(termId);
+        const now = deps.clock.nowIso();
+        await deps.revisions.insert({
+            taxonomyId: current.taxonomyId,
+            op: "delete",
+            previousState: { termId, name: current.name ?? null },
+            actorId: principalId,
+            recordedAt: now,
+        });
+        deps.stampWatermark();
+        await deps.outbox.enqueue({
+            name: "taxonomy.term_deleted",
+            termId,
+            taxonomyId: current.taxonomyId,
+            actorId: principalId,
+            occurredAt: now,
+        });
+        return { deletedTermId: termId };
+    });
+}
+/**
+ * Deletes a taxonomy together with its member terms, refusing when ANY member term is still
+ * assigned to content (the sum across all member terms, reported as one `assignedCount`). Unlike
+ * `deleteTerm`, this does cascade — but only over terms this same call has just confirmed, INSIDE
+ * the same transaction, are unassigned, so nothing recoverable is lost. `deleteTerm`'s own "has
+ * children" guard does not apply here: a member term's children are, by construction, also members
+ * of the same taxonomy (hierarchy never crosses taxonomies — `validateHierarchyAssignment`'s
+ * `ParentCrossTaxonomyError` enforces that on the write side), so deleting the full member set in
+ * one pass never leaves a `parentId` dangling outside the set being deleted.
+ *
+ * Same transaction-boundary and `taxonomy_revisions`-retention rationale as `deleteTerm` — see its
+ * doc comment. The taxonomy-level version of the same TOCTOU risk: `listByTaxonomy` and every
+ * per-term `countByTerm` call must see the SAME committed state the delete loop is about to act
+ * on, which is only guaranteed inside one transaction, not across N separate queries beforehand.
+ *
+ * @complexity O(t) in the taxonomy's own term count — one `countByTerm` per member term to total
+ * the guard, then one delete per member term plus one taxonomy delete, all inside one transaction.
+ * @overallScore 100
+ */
+export async function deleteTaxonomy(required, _optional = {}) {
+    const { deps, principalId, taxonomyId } = required;
+    await authorizeTaxonomyManage(deps, principalId);
+    return deps.transaction(async () => {
+        const taxonomy = await deps.taxonomies.findById(taxonomyId);
+        if (!taxonomy) {
+            throw new TaxonomyRecordNotFoundError(`taxonomy '${taxonomyId}' was not found`);
+        }
+        const memberTerms = await deps.terms.listByTaxonomy({ taxonomyId });
+        let totalAssigned = 0;
+        for (const term of memberTerms) {
+            totalAssigned += await deps.entryTerms.countByTerm({ termId: term.id });
+        }
+        if (totalAssigned > 0) {
+            throw new TaxonomyHasAssignedContentError(`taxonomy '${taxonomyId}' has ${totalAssigned} content assignment(s) across its terms and cannot be deleted`, totalAssigned);
+        }
+        for (const term of memberTerms) {
+            await deps.terms.delete(term.id);
+        }
+        await deps.taxonomies.delete(taxonomyId);
+        const now = deps.clock.nowIso();
+        const deletedTermIds = memberTerms.map((term) => term.id);
+        await deps.revisions.insert({
+            taxonomyId,
+            op: "delete",
+            previousState: { deletedTermIds },
+            actorId: principalId,
+            recordedAt: now,
+        });
+        deps.stampWatermark();
+        await deps.outbox.enqueue({
+            name: "taxonomy.deleted",
+            taxonomyId,
+            deletedTermIds,
+            actorId: principalId,
+            occurredAt: now,
+        });
+        return { deletedTaxonomyId: taxonomyId, deletedTermIds };
+    });
+}
+//# sourceMappingURL=write-service.js.map

package/dist/taxonomy/write-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-service.js","sourceRoot":"","sources":["../../src/taxonomy/write-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAgGzF;;;4BAG4B;AAC5B,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE7F,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,OAAO,8BAA8B,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AA4CD,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,oGAAoG;AACpG,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;6DAC6D;AAC7D,KAAK,UAAU,uBAAuB,CAAC,IAAsB,EAAE,WAAmB;IAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,cAAc,CACtB,cAAc,WAAW,oDAAoD,MAAM,CAAC,MAAM,GAAG,EAC7F,uBAAuB,EACvB,MAAM,CAAC,MAAM,CACd,CAAC;IACJ,CAAC;AACH,CAAC;AASD;wEACwE;AACxE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgC,EAChC,YAAmC,EAAE;IAErC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC;IAC3D,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa;QACzB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;QACtB,IAAI;QACJ,YAAY;QACZ,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,GAAG;QACd,OAAO,EAAE,CAAC;KACX,CAAC;IAEF,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC1B,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,EAAE,EAAE,QAAQ;QACZ,aAAa,EAAE,IAAI;QACnB,OAAO,EAAE,WAAW;QACpB,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,EAAE,CAAC;IACtB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAExH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAUD;;;0EAG0E;AAC1E,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAA4B,EAC5B,YAAmC,EAAE;IAErC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;IACnE,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,2BAA2B,CAAC,aAAa,UAAU,iBAAiB,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,IAAI,IAAI,CAAC;IAC3C,IAAI,cAAc,GAAiE,gBAAgB,CAAC;IACpG,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAChE,cAAc,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAChG,CAAC;IAED,2BAA2B,CAAC;QAC1B,eAAe,EAAE,UAAU;QAC3B,sBAAsB,EAAE,QAAQ,CAAC,YAAY;QAC7C,iBAAiB;QACjB,cAAc;QACd,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK;QAC7B,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,IAAI,GAAS;QACjB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;QACtB,UAAU;QACV,QAAQ,EAAE,iBAAiB;QAC3B,IAAI;QACJ,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,GAAG;QACd,OAAO,EAAE,CAAC;KACX,CAAC;IAEF,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACtH,IAAI,CAAC,cAAc,EAAE,CAAC;IACtB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAErH,OAAO,IAAI,CAAC;AACd,CAAC;AASD;;+BAE+B;AAC/B,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAA4B,EAC5B,YAAmC,EAAE;IAErC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IACxD,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,uBAAuB,CAAC,SAAS,MAAM,iBAAiB,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,OAAO,GAAS;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAG,OAAwC,CAAC,QAAQ,IAAI,IAAI;QACpE,IAAI,EAAE,OAAO;QACb,MAAM,EAAG,OAA+B,CAAC,MAAM,IAAI,QAAQ;QAC3D,SAAS,EAAE,GAAG;QACd,OAAO,EAAE,CAAE,OAAgC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC;KAC9D,CAAC;IAEF,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,EAAE,EAAE,QAAQ;QACZ,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;QACrC,OAAO,EAAE,WAAW;QACpB,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,EAAE,CAAC;IACtB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAE5G,OAAO,OAAO,CAAC;AACjB,CAAC;AAUD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAA6B,EAC7B,YAAmC,EAAE;IAErC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IACxE,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEjD,MAAM,aAAa,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpG,IAAI,aAAa,IAAI,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,0BAA0B,CAAC,YAAY,WAAW,IAAI,SAAS,iBAAiB,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,uBAAuB,CAAC,SAAS,MAAM,iBAAiB,CAAC,CAAC;QACtE,CAAC;QACD,mBAAmB,CAAC;YAClB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,aAAa;YACb,iBAAiB,EAAE,IAAI,CAAC,WAAW;YACnC,qFAAqF;YACrF,yFAAyF;YACzF,sFAAsF;YACtF,uBAAuB,EAAE,IAAI,CAAC,WAAW;YACzC,0BAA0B,EAAE,OAAO,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW;YACpE,mBAAmB,EAAE,WAAW;YAChC,mBAAmB,EAAE,OAAO,EAAE,IAAI,IAAI,WAAW;SAClD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;IACtB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QACxB,IAAI,EAAE,yBAAyB;QAC/B,WAAW;QACX,SAAS;QACT,OAAO;QACP,OAAO,EAAE,WAAW;QACpB,UAAU,EAAE,GAAG;KAChB,CAAC,CAAC;AACL,CAAC;AAWD;;;;qCAIqC;AACrC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAkC,EAClC,YAAmC,EAAE;IAErC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IACvC,MAAM,UAAU,CAAC,eAAe,CAAC;QAC/B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC;AAqCD;;6CAE6C;AAC7C,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACP;IAA7C,YAAY,OAAe,EAAkB,aAAqB;QAChE,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,kBAAa,GAAb,aAAa,CAAQ;QAEhE,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;6FAC6F;AAC7F,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACF;IAA7C,YAAY,OAAe,EAAkB,UAAkB;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,eAAU,GAAV,UAAU,CAAQ;QAE7D,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;sCACsC;AACtC,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACX;IAA7C,YAAY,OAAe,EAAkB,aAAqB;QAChE,KAAK,CAAC,OAAO,CAAC,CAAC;QAD4B,kBAAa,GAAb,aAAa,CAAQ;QAEhE,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AA6CD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAA4B,EAC5B,YAAmC,EAAE;IAErC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IAC/C,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEjD,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,uBAAuB,CAAC,SAAS,MAAM,iBAAiB,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,sBAAsB,CAAC,SAAS,MAAM,SAAS,UAAU,sCAAsC,EAAE,UAAU,CAAC,CAAC;QACzH,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,2BAA2B,CACnC,SAAS,MAAM,oBAAoB,aAAa,wCAAwC,EACxF,aAAa,CACd,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,EAAE,EAAE,QAAQ;YACZ,aAAa,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE;YACrD,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACxB,IAAI,EAAE,uBAAuB;YAC7B,MAAM;YACN,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QAEH,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAcD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAgC,EAChC,YAAmC,EAAE;IAErC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC;IACnD,MAAM,uBAAuB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEjD,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE;QACjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,2BAA2B,CAAC,aAAa,UAAU,iBAAiB,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAEpE,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,aAAa,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,+BAA+B,CACvC,aAAa,UAAU,SAAS,aAAa,+DAA+D,EAC5G,aAAa,CACd,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAC1B,UAAU;YACV,EAAE,EAAE,QAAQ;YACZ,aAAa,EAAE,EAAE,cAAc,EAAE;YACjC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACxB,IAAI,EAAE,kBAAkB;YACxB,UAAU;YACV,cAAc;YACd,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QAEH,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/workspace/agent-tools.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @file The Workspace domain's agent-tool catalog, instantiating this package's shared
+ * naming/callability convention (the same shape every other domain catalog in this package
+ * already uses).
+ *
+ * Purpose:
+ * A static, in-process catalog describing every agent-callable tool this domain exposes and the
+ * permission each one carries. This is the highest-stakes domain wired so far: a host's
+ * `workspaceId` is fixed at process composition (a v1 install always has exactly one addressable
+ * workspace row), so `create`/`delete` are deliberately excluded
+ * outright rather than treated as ordinary CRUD:
+ * - `CREATE_WORKSPACE` inserts a row no route can ever address afterwards (every other workspace
+ *   route resolves strictly against the boot-wired `workspaceId`, never a caller-supplied id)
+ *   — wiring it would let an agent mint permanently orphaned, unreferenceable rows with no
+ *   corresponding read/delete path back to them. Zero utility, non-zero clutter/spam surface.
+ * - `DELETE_WORKSPACE` is INV-03-guarded to always refuse in v1 (there is only ever one row), but
+ *   the moment that guard's precondition changes (a second addressable workspace exists), the same
+ *   tool becomes a lever that can remove the only workspace scope a request can reach — whole-scope,
+ *   no per-domain undo, the same blast-radius class as a forward database migration or a backup
+ *   restore. Excluded by design, mirroring those two.
+ * `UPDATE_WORKSPACE` is the one write kept: a narrow rename of `name`/`slug` on the single existing,
+ * already-addressable workspace, no cascading effects (`id`/`createdAt` immutable by convention —
+ * see `update.ts`), the same risk class as `identity_role_rename`.
+ *
+ * How it relates to the package:
+ * A host's server-side tool filter consumes this catalog to decide which tool names an
+ * agent session may even see; `authorize()` (the single-evaluator rule below) enforces the actual
+ * permission checks at call time — this module only declares the catalog shape, it performs no
+ * I/O and no enforcement itself.
+ *
+ * Architectural role:
+ * `workspace` domain logic. No dependencies.
+ */
+export type AgentToolSideEffect = "none" | "mutates-durable-state" | "mints-token";
+export type AgentToolActorClassRule = "confirmer-must-equal-own-delegatedBy" | "user-only" | "none";
+export interface AgentToolDefinition {
+    name: string;
+    description: string;
+    sideEffects: AgentToolSideEffect;
+    authorization: {
+        permission: string;
+    };
+    actorClassRule?: AgentToolActorClassRule;
+    /**
+     * JSON Schema for this tool's `input`, published to the model via `ToolDescriptor.inputSchema`
+     * by whichever host layer wires these tools (any such layer should refuse to wire a tool lacking
+     * one). Optional, matching this package's other domain catalogs — the two entries this dispatch
+     * leaves unwired (see file header) carry no schema at all, since one is never published for a
+     * tool the model never sees.
+     *
+     * Deliberately not widened to `| undefined` (unlike most optional fields in this port) — this
+     * type flows into `core/tools/registration-kit.ts`'s `WirableToolDefinition`, which declares both
+     * this field and `actorClassRule` above without `| undefined`. Widening only this catalog's copy
+     * would make it structurally incompatible with that shared interface under
+     * `exactOptionalPropertyTypes`, the same reason `navigation`'s and `identity`'s catalogs leave
+     * these two fields alone.
+     */
+    inputSchema?: Readonly<Record<string, unknown>>;
+}
+/**
+ * The Workspace domain's fixed agent-tool catalog.
+ *
+ * @complexity O(1) — a fixed, statically-defined list.
+ * @overallScore 100
+ */
+export declare function getWorkspaceAgentToolCatalog(): AgentToolDefinition[];
+//# sourceMappingURL=agent-tools.d.ts.map

package/dist/workspace/agent-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.d.ts","sourceRoot":"","sources":["../../src/workspace/agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,uBAAuB,GAAG,aAAa,CAAC;AAEnF,MAAM,MAAM,uBAAuB,GAAG,sCAAsC,GAAG,WAAW,GAAG,MAAM,CAAC;AAEpG,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,mBAAmB,CAAC;IACjC,aAAa,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,cAAc,CAAC,EAAE,uBAAuB,CAAC;IACzC;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjD;AA6BD;;;;;GAKG;AACH,wBAAgB,4BAA4B,IAAI,mBAAmB,EAAE,CAsCpE"}

package/dist/workspace/agent-tools.js

@@ -0,0 +1,103 @@
+/**
+ * @file The Workspace domain's agent-tool catalog, instantiating this package's shared
+ * naming/callability convention (the same shape every other domain catalog in this package
+ * already uses).
+ *
+ * Purpose:
+ * A static, in-process catalog describing every agent-callable tool this domain exposes and the
+ * permission each one carries. This is the highest-stakes domain wired so far: a host's
+ * `workspaceId` is fixed at process composition (a v1 install always has exactly one addressable
+ * workspace row), so `create`/`delete` are deliberately excluded
+ * outright rather than treated as ordinary CRUD:
+ * - `CREATE_WORKSPACE` inserts a row no route can ever address afterwards (every other workspace
+ *   route resolves strictly against the boot-wired `workspaceId`, never a caller-supplied id)
+ *   — wiring it would let an agent mint permanently orphaned, unreferenceable rows with no
+ *   corresponding read/delete path back to them. Zero utility, non-zero clutter/spam surface.
+ * - `DELETE_WORKSPACE` is INV-03-guarded to always refuse in v1 (there is only ever one row), but
+ *   the moment that guard's precondition changes (a second addressable workspace exists), the same
+ *   tool becomes a lever that can remove the only workspace scope a request can reach — whole-scope,
+ *   no per-domain undo, the same blast-radius class as a forward database migration or a backup
+ *   restore. Excluded by design, mirroring those two.
+ * `UPDATE_WORKSPACE` is the one write kept: a narrow rename of `name`/`slug` on the single existing,
+ * already-addressable workspace, no cascading effects (`id`/`createdAt` immutable by convention —
+ * see `update.ts`), the same risk class as `identity_role_rename`.
+ *
+ * How it relates to the package:
+ * A host's server-side tool filter consumes this catalog to decide which tool names an
+ * agent session may even see; `authorize()` (the single-evaluator rule below) enforces the actual
+ * permission checks at call time — this module only declares the catalog shape, it performs no
+ * I/O and no enforcement itself.
+ *
+ * Architectural role:
+ * `workspace` domain logic. No dependencies.
+ */
+/** No arguments — `workspace_get` takes none; it always reports the caller's own boot-wired workspace. */
+const NO_INPUT_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: [],
+    properties: {},
+};
+/** `workspace_update`'s input — mirrors `update.ts`'s `UpdateWorkspaceInput` minus `id` (the tool
+ * always targets the caller's own boot-wired workspace, exactly like an admin route's
+ * `:workspaceId` path param, which is checked against the host's own `workspaceId` and never
+ * trusted otherwise). At least one of `name`/`slug` must be present — enforced by `updateWorkspace`
+ * itself (`WorkspaceValidationError` on an empty update), not expressible in this package's
+ * plain-JSON-Schema-subset convention (no domain catalog uses `anyOf`/`oneOf` today). */
+const UPDATE_WORKSPACE_SCHEMA = {
+    type: "object",
+    additionalProperties: false,
+    required: [],
+    properties: {
+        name: { type: "string", description: "New workspace name. Omit to leave unchanged. At least one of name/slug is required." },
+        slug: {
+            type: "string",
+            description: "New workspace slug (lowercase letters, numbers, dashes only). Omit to leave unchanged. At least one of name/slug is required.",
+        },
+    },
+};
+/**
+ * The Workspace domain's fixed agent-tool catalog.
+ *
+ * @complexity O(1) — a fixed, statically-defined list.
+ * @overallScore 100
+ */
+export function getWorkspaceAgentToolCatalog() {
+    return [
+        {
+            name: "workspace_get",
+            description: "Reports the caller's own workspace: id, name, slug, and creation time. v1 always has exactly one addressable workspace.",
+            sideEffects: "none",
+            authorization: { permission: "workspace.manage" },
+            inputSchema: NO_INPUT_SCHEMA,
+        },
+        {
+            name: "workspace_update",
+            description: "Renames the caller's own workspace: updates name and/or slug. At least one field is required. Does not change the workspace's id or creation time, and has no cascading effects on other domains.",
+            sideEffects: "mutates-durable-state",
+            authorization: { permission: "workspace.manage" },
+            inputSchema: UPDATE_WORKSPACE_SCHEMA,
+        },
+        {
+            // EXCLUDED BY DESIGN, never wired: see this file's header. Inserts a row no other route can
+            // ever address (every workspace route resolves strictly against the boot-wired
+            // `workspaceId`), so wiring this would only let an agent mint permanently orphaned rows.
+            name: "workspace_create",
+            description: "Creates a new workspace row. NEVER agent-callable — see file header.",
+            sideEffects: "mutates-durable-state",
+            authorization: { permission: "workspace.manage" },
+        },
+        {
+            // EXCLUDED BY DESIGN, never wired: see this file's header. INV-03-guarded to always refuse
+            // today (v1 has exactly one workspace row), but the lever itself removes the only addressable
+            // workspace scope the moment that guard's precondition ever changes — whole-scope,
+            // irreversible, no per-domain undo. Same exclusion class as a forward database migration or a
+            // backup restore.
+            name: "workspace_delete",
+            description: "Deletes a workspace row. NEVER agent-callable — see file header.",
+            sideEffects: "mutates-durable-state",
+            authorization: { permission: "workspace.manage" },
+        },
+    ];
+}
+//# sourceMappingURL=agent-tools.js.map

package/dist/workspace/agent-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tools.js","sourceRoot":"","sources":["../../src/workspace/agent-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AA6BH,0GAA0G;AAC1G,MAAM,eAAe,GAAG;IACtB,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;CACN,CAAC;AAEX;;;;;yFAKyF;AACzF,MAAM,uBAAuB,GAAG;IAC9B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qFAAqF,EAAE;QAC5H,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,+HAA+H;SAC7I;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,yHAAyH;YACtI,WAAW,EAAE,MAAM;YACnB,aAAa,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;YACjD,WAAW,EAAE,eAAe;SAC7B;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,WAAW,EACT,mMAAmM;YACrM,WAAW,EAAE,uBAAuB;YACpC,aAAa,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;YACjD,WAAW,EAAE,uBAAuB;SACrC;QACD;YACE,4FAA4F;YAC5F,+EAA+E;YAC/E,yFAAyF;YACzF,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,sEAAsE;YACnF,WAAW,EAAE,uBAAuB;YACpC,aAAa,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;SAClD;QACD;YACE,2FAA2F;YAC3F,8FAA8F;YAC9F,mFAAmF;YACnF,8FAA8F;YAC9F,kBAAkB;YAClB,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,kEAAkE;YAC/E,WAAW,EAAE,uBAAuB;YACpC,aAAa,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;SAClD;KACF,CAAC;AACJ,CAAC"}

package/dist/workspace/create.d.ts

@@ -0,0 +1,116 @@
+import type { ClockPort, IdGeneratorPort, OutboxPort, UUID } from "../core/ports.js";
+/**
+ * @file Workspace creation vertical slice (domain logic).
+ *
+ * Purpose:
+ * Encapsulates business rules for creating a workspace. Also owns the shared
+ * `WorkspaceRepoPort` contract and record shape for the whole feature slice
+ * (`update.ts`/`delete.ts` import from here rather than duplicating
+ * the port) — mirrors `identity/types.ts`+`identity/ports.ts` owning the
+ * shared shapes their sibling transition files (`grant-service.ts`) import.
+ *
+ * How it relates to the package:
+ * - Imports abstractions from `../core/ports.js` (no framework/db coupling).
+ * - Uses `WorkspaceRepoPort` for persistence and `OutboxPort` for event enqueue.
+ * - Is invoked by a host's own admin create-workspace route (moved off the
+ *   original unauthenticated `POST /workspaces` route in the host's composition root).
+ * - Is verified by tests in `./__tests__`.
+ *
+ * Architectural role:
+ * Demonstrates the intended slice pattern:
+ * validate -> check constraints -> persist -> enqueue domain event.
+ */
+export interface WorkspaceRecord {
+    id: UUID;
+    name: string;
+    slug: string;
+    createdAt: string;
+}
+/**
+ * Workspace persistence contract for this slice. `findById`/`list`/`update`/`delete` were
+ * later additions (both adapters — this package's `repo.memory.ts` and a host's own SQLite
+ * adapter — implement all seven methods; `insert`/`findBySlug`'s existing contract is unchanged).
+ */
+export interface WorkspaceRepoPort {
+    insert(record: WorkspaceRecord): Promise<void>;
+    findBySlug(slug: string): Promise<WorkspaceRecord | null>;
+    findById(id: UUID): Promise<WorkspaceRecord | null>;
+    /** A v1 install always has exactly one row (see `delete.ts`'s header);
+     * the port itself is not limited to one. */
+    list(): Promise<WorkspaceRecord[]>;
+    /** Replaces the full record (id/createdAt immutable by convention — see
+     * `update.ts`, which never changes them). */
+    update(record: WorkspaceRecord): Promise<void>;
+    /** Callers (see `delete.ts`) must apply the last-workspace guard
+     * themselves — this port method performs the row deletion only, no business rule. */
+    delete(id: UUID): Promise<void>;
+}
+/**
+ * Shared `name`/`slug` validation — used by both `createWorkspace` below
+ * and `updateWorkspace` (`update.ts`) so the two transitions can never drift on what counts as a
+ * valid name/slug. Returns the normalized (trimmed name, trimmed+lowercased slug) pair; throws
+ * `WorkspaceValidationError` on either being invalid.
+ *
+ * @complexity O(1) — two regex/trim checks.
+ * @overallScore 100
+ */
+export declare function validateWorkspaceNameAndSlug(input: {
+    name: string;
+    slug: string;
+}): {
+    name: string;
+    slug: string;
+};
+/** Command payload for workspace creation. */
+export interface CreateWorkspaceInput {
+    name: string;
+    slug: string;
+}
+/** Dependencies required by the create-workspace slice. */
+export interface CreateWorkspaceDeps {
+    idGen: IdGeneratorPort;
+    clock: ClockPort;
+    repo: WorkspaceRepoPort;
+    outbox: OutboxPort;
+}
+/** Required parameters for createWorkspace. */
+export interface CreateWorkspaceRequired {
+    deps: CreateWorkspaceDeps;
+    input: CreateWorkspaceInput;
+}
+/** Optional parameters for createWorkspace. Reserved for future use. */
+export interface CreateWorkspaceOptional {
+}
+/** Thrown when incoming command data is invalid. */
+export declare class WorkspaceValidationError extends Error {
+}
+/** Thrown when uniqueness constraints are violated. */
+export declare class WorkspaceConflictError extends Error {
+}
+/** Thrown when a `:workspaceId` does not resolve to a row. */
+export declare class WorkspaceNotFoundError extends Error {
+}
+/**
+ * Thrown when `deleteWorkspace` (`delete.ts`) would remove the install's
+ * last remaining workspace row. Named distinctly from `WorkspaceConflictError` (a 409, same as this
+ * maps to) so a caller can tell "duplicate slug" apart from "would brick the install" without
+ * string-matching the message — mirrors this codebase's `GrantExceedsIssuerError` being kept distinct
+ * from `IdentityForbiddenError` for the identical reason (typed-reason clarity).
+ */
+export declare class WorkspaceLastRemainingError extends Error {
+}
+/**
+ * Execute create-workspace command.
+ *
+ * Synchronous path:
+ * - validate input
+ * - check uniqueness
+ * - write workspace record
+ *
+ * Asynchronous path:
+ * - enqueue `workspace.created` domain event to outbox
+ */
+export declare function createWorkspace(required: CreateWorkspaceRequired, _optional?: CreateWorkspaceOptional): Promise<{
+    id: UUID;
+}>;
+//# sourceMappingURL=create.d.ts.map