@jini-ai/cms 0.1.0

package/dist/workspace/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../src/workspace/create.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAe,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAElG;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAC1D,QAAQ,CAAC,EAAE,EAAE,IAAI,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACpD;gDAC4C;IAC5C,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACnC;iDAC6C;IAC7C,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C;yFACqF;IACrF,MAAM,CAAC,EAAE,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAUA;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,eAAe,CAAC;IACvB,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,+CAA+C;AAC/C,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,wEAAwE;AACxE,MAAM,WAAW,uBAAuB;CAAG;AAE3C,oDAAoD;AACpD,qBAAa,wBAAyB,SAAQ,KAAK;CAAG;AAEtD,uDAAuD;AACvD,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AAEpD,8DAA8D;AAC9D,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AAEpD;;;;;;GAMG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;CAAG;AAEzD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,uBAAuB,EACjC,SAAS,GAAE,uBAA4B,GACtC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAuBvB"}

package/dist/workspace/create.js

@@ -0,0 +1,69 @@
+/**
+ * Shared `name`/`slug` validation — used by both `createWorkspace` below
+ * and `updateWorkspace` (`update.ts`) so the two transitions can never drift on what counts as a
+ * valid name/slug. Returns the normalized (trimmed name, trimmed+lowercased slug) pair; throws
+ * `WorkspaceValidationError` on either being invalid.
+ *
+ * @complexity O(1) — two regex/trim checks.
+ * @overallScore 100
+ */
+export function validateWorkspaceNameAndSlug(input) {
+    const name = input.name.trim();
+    const slug = input.slug.trim().toLowerCase();
+    if (!name)
+        throw new WorkspaceValidationError("name is required");
+    if (!slug.match(/^[a-z0-9-]+$/)) {
+        throw new WorkspaceValidationError("slug must use lowercase letters, numbers, and dashes");
+    }
+    return { name, slug };
+}
+/** Thrown when incoming command data is invalid. */
+export class WorkspaceValidationError extends Error {
+}
+/** Thrown when uniqueness constraints are violated. */
+export class WorkspaceConflictError extends Error {
+}
+/** Thrown when a `:workspaceId` does not resolve to a row. */
+export class WorkspaceNotFoundError extends Error {
+}
+/**
+ * Thrown when `deleteWorkspace` (`delete.ts`) would remove the install's
+ * last remaining workspace row. Named distinctly from `WorkspaceConflictError` (a 409, same as this
+ * maps to) so a caller can tell "duplicate slug" apart from "would brick the install" without
+ * string-matching the message — mirrors this codebase's `GrantExceedsIssuerError` being kept distinct
+ * from `IdentityForbiddenError` for the identical reason (typed-reason clarity).
+ */
+export class WorkspaceLastRemainingError extends Error {
+}
+/**
+ * Execute create-workspace command.
+ *
+ * Synchronous path:
+ * - validate input
+ * - check uniqueness
+ * - write workspace record
+ *
+ * Asynchronous path:
+ * - enqueue `workspace.created` domain event to outbox
+ */
+export async function createWorkspace(required, _optional = {}) {
+    const { deps, input } = required;
+    const { name, slug } = validateWorkspaceNameAndSlug(input);
+    const existing = await deps.repo.findBySlug(slug);
+    if (existing)
+        throw new WorkspaceConflictError(`slug '${slug}' already exists`);
+    const now = deps.clock.nowIso();
+    const id = deps.idGen.newId();
+    await deps.repo.insert({ id, name, slug, createdAt: now });
+    const event = {
+        id: deps.idGen.newId(),
+        name: "workspace.created",
+        occurredAt: now,
+        aggregateId: id,
+        workspaceId: id,
+        payload: { workspaceId: id, slug },
+    };
+    await deps.outbox.enqueue(event);
+    return { id };
+}
+//# sourceMappingURL=create.js.map

package/dist/workspace/create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../src/workspace/create.ts"],"names":[],"mappings":"AAkDA;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAAC,KAAqC;IAIhF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE7C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,wBAAwB,CAAC,sDAAsD,CAAC,CAAC;IAC7F,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAyBD,oDAAoD;AACpD,MAAM,OAAO,wBAAyB,SAAQ,KAAK;CAAG;AAEtD,uDAAuD;AACvD,MAAM,OAAO,sBAAuB,SAAQ,KAAK;CAAG;AAEpD,8DAA8D;AAC9D,MAAM,OAAO,sBAAuB,SAAQ,KAAK;CAAG;AAEpD;;;;;;GAMG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;CAAG;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAiC,EACjC,YAAqC,EAAE;IAEvC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IACjC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;IAEhF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAE9B,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAE3D,MAAM,KAAK,GAAqD;QAC9D,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;QACtB,IAAI,EAAE,mBAAmB;QACzB,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE;KACnC,CAAC;IAEF,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,EAAE,EAAE,EAAE,CAAC;AAChB,CAAC"}

package/dist/workspace/delete.d.ts

@@ -0,0 +1,50 @@
+import type { UUID } from "../core/ports.js";
+import { type WorkspaceRepoPort } from "./create.js";
+/**
+ * @file `DELETE_WORKSPACE` — hard-delete a workspace, guarded so the
+ * install is never left with zero workspace rows.
+ *
+ * Purpose:
+ * Because a v1 install always has exactly one workspace row (a host's `workspaceId` is fixed at
+ * process composition, so no request can ever address a second, even-if-present workspace row
+ * today), `deleteWorkspace` **always refuses in v1**. That is correct,
+ * guarded behavior, not a stub: the precondition, the atomicity, and the typed refusal all exist and
+ * are exercised by tests now, so the day a second, genuinely addressable workspace exists, delete
+ * works without further design.
+ *
+ * Architectural role:
+ * Ordinary slice function — not a port. `deps.repo.list()` is the count source; the guard
+ * check and the delete happen inside one `async` function body with no `await` yielded to another
+ * caller in between the count read and the delete write, which — under a single Node.js
+ * event-loop, no-concurrent-DB-transaction execution model (the same "atomic by construction"
+ * reasoning `identity/grant-service.ts`'s own header comment documents for its transitions, and the
+ * same model `DISABLE_PRINCIPAL`'s INV-08 count-check-then-disable already relies on) — is the
+ * atomicity INV-03 requires. A future multi-process/multi-connection deployment would need a real
+ * DB-level transaction here; flagged, not silently assumed away.
+ */
+/** Command payload for `DELETE_WORKSPACE`. */
+export interface DeleteWorkspaceInput {
+    id: UUID;
+}
+/** Dependencies required by the delete-workspace slice. */
+export interface DeleteWorkspaceDeps {
+    repo: WorkspaceRepoPort;
+}
+/** Required parameters for `deleteWorkspace`. */
+export interface DeleteWorkspaceRequired {
+    deps: DeleteWorkspaceDeps;
+    input: DeleteWorkspaceInput;
+}
+/**
+ * Execute `DELETE_WORKSPACE` (REQ-05). Throws `WorkspaceNotFoundError` if `input.id` does not
+ * resolve to a row, else `WorkspaceLastRemainingError` (INV-03) if it is the only workspace row —
+ * which is always true in v1, so this transition always refuses today. No row is deleted on either
+ * rejection.
+ *
+ * @complexity O(n) in the total workspace count (`repo.list()`) — bounded by the same
+ * operator-managed-roster assumption `identity`'s `PrincipalRepoPort.list()` already makes; not a
+ * caller-controlled collection.
+ * @overallScore 100
+ */
+export declare function deleteWorkspace(required: DeleteWorkspaceRequired): Promise<void>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/workspace/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../src/workspace/delete.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAuD,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE1G;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,IAAI,CAAC;CACV;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CActF"}

package/dist/workspace/delete.js

@@ -0,0 +1,24 @@
+import { WorkspaceLastRemainingError, WorkspaceNotFoundError } from "./create.js";
+/**
+ * Execute `DELETE_WORKSPACE` (REQ-05). Throws `WorkspaceNotFoundError` if `input.id` does not
+ * resolve to a row, else `WorkspaceLastRemainingError` (INV-03) if it is the only workspace row —
+ * which is always true in v1, so this transition always refuses today. No row is deleted on either
+ * rejection.
+ *
+ * @complexity O(n) in the total workspace count (`repo.list()`) — bounded by the same
+ * operator-managed-roster assumption `identity`'s `PrincipalRepoPort.list()` already makes; not a
+ * caller-controlled collection.
+ * @overallScore 100
+ */
+export async function deleteWorkspace(required) {
+    const { deps, input } = required;
+    const existing = await deps.repo.findById(input.id);
+    if (!existing)
+        throw new WorkspaceNotFoundError(`workspace '${input.id}' was not found`);
+    const all = await deps.repo.list();
+    if (all.length <= 1) {
+        throw new WorkspaceLastRemainingError("the install's last remaining workspace cannot be deleted (INV-03)");
+    }
+    await deps.repo.delete(input.id);
+}
+//# sourceMappingURL=delete.js.map

package/dist/workspace/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../src/workspace/delete.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAA0B,MAAM,aAAa,CAAC;AAyC1G;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAiC;IACrE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAEjC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,cAAc,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAEzF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,2BAA2B,CACnC,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/workspace/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @file Public surface (barrel) for the `workspace` library.
+ *
+ * A module's public contract is its `index.ts` (module-boundary convention) — deep imports from
+ * outside this directory should go through here.
+ */
+export { createWorkspace, validateWorkspaceNameAndSlug, WorkspaceConflictError, WorkspaceLastRemainingError, WorkspaceNotFoundError, WorkspaceValidationError, type CreateWorkspaceDeps, type CreateWorkspaceInput, type CreateWorkspaceRequired, type CreateWorkspaceOptional, type WorkspaceRecord, type WorkspaceRepoPort, } from "./create.js";
+export { updateWorkspace, type UpdateWorkspaceDeps, type UpdateWorkspaceInput, type UpdateWorkspaceRequired, } from "./update.js";
+export { deleteWorkspace, type DeleteWorkspaceDeps, type DeleteWorkspaceInput, type DeleteWorkspaceRequired, } from "./delete.js";
+export { InMemoryWorkspaceRepo } from "./repo.memory.js";
+/** The agent-tool surface for this domain (see `agent-tools.ts` for what is deliberately omitted). */
+export { getWorkspaceAgentToolCatalog, type AgentToolDefinition as WorkspaceAgentToolDefinition, type AgentToolSideEffect as WorkspaceAgentToolSideEffect, type AgentToolActorClassRule as WorkspaceAgentToolActorClassRule, } from "./agent-tools.js";
+/**
+ * The agent-tool wiring for this domain.
+ *
+ * `WorkspaceToolDeps` is declared structurally rather than derived from any host's request-scoped
+ * dependency bag, which is what lets a host satisfy it by passing whatever object it already has —
+ * the shape is the contract, so no host type needs to be named here.
+ */
+export { buildWorkspaceRegistrations, workspaceDerivedRisk, type WorkspaceToolDeps, } from "./tool-registrations.js";
+/**
+ * There is no SQLite adapter export here, deliberately. A concrete `WorkspaceRepoPort` over a
+ * specific database handle names that host's schema, which would put one host's persistence choice
+ * on this library's public contract and drag its schema into every consumer's dependency closure.
+ * Hosts compose their own; this entry point exports the port they compose against.
+ */
+//# sourceMappingURL=index.d.ts.map

package/dist/workspace/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workspace/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,eAAe,EACf,4BAA4B,EAC5B,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,sGAAsG;AACtG,OAAO,EACL,4BAA4B,EAC5B,KAAK,mBAAmB,IAAI,4BAA4B,EACxD,KAAK,mBAAmB,IAAI,4BAA4B,EACxD,KAAK,uBAAuB,IAAI,gCAAgC,GACjE,MAAM,kBAAkB,CAAC;AAE1B;;;;;;GAMG;AACH,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,EACpB,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AAEjC;;;;;GAKG"}

package/dist/workspace/index.js

@@ -0,0 +1,27 @@
+/**
+ * @file Public surface (barrel) for the `workspace` library.
+ *
+ * A module's public contract is its `index.ts` (module-boundary convention) — deep imports from
+ * outside this directory should go through here.
+ */
+export { createWorkspace, validateWorkspaceNameAndSlug, WorkspaceConflictError, WorkspaceLastRemainingError, WorkspaceNotFoundError, WorkspaceValidationError, } from "./create.js";
+export { updateWorkspace, } from "./update.js";
+export { deleteWorkspace, } from "./delete.js";
+export { InMemoryWorkspaceRepo } from "./repo.memory.js";
+/** The agent-tool surface for this domain (see `agent-tools.ts` for what is deliberately omitted). */
+export { getWorkspaceAgentToolCatalog, } from "./agent-tools.js";
+/**
+ * The agent-tool wiring for this domain.
+ *
+ * `WorkspaceToolDeps` is declared structurally rather than derived from any host's request-scoped
+ * dependency bag, which is what lets a host satisfy it by passing whatever object it already has —
+ * the shape is the contract, so no host type needs to be named here.
+ */
+export { buildWorkspaceRegistrations, workspaceDerivedRisk, } from "./tool-registrations.js";
+/**
+ * There is no SQLite adapter export here, deliberately. A concrete `WorkspaceRepoPort` over a
+ * specific database handle names that host's schema, which would put one host's persistence choice
+ * on this library's public contract and drag its schema into every consumer's dependency closure.
+ * Hosts compose their own; this entry point exports the port they compose against.
+ */
+//# sourceMappingURL=index.js.map

package/dist/workspace/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workspace/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,eAAe,EACf,4BAA4B,EAC5B,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,EACtB,wBAAwB,GAOzB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,GAIhB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,eAAe,GAIhB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,sGAAsG;AACtG,OAAO,EACL,4BAA4B,GAI7B,MAAM,kBAAkB,CAAC;AAE1B;;;;;;GAMG;AACH,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,GAErB,MAAM,yBAAyB,CAAC;AAEjC;;;;;GAKG"}

package/dist/workspace/repo.memory.d.ts

@@ -0,0 +1,34 @@
+import type { WorkspaceRecord, WorkspaceRepoPort } from "./create.js";
+/**
+ * @file In-memory workspace repository adapter.
+ *
+ * Purpose:
+ * Provides a local `WorkspaceRepoPort` implementation for development/tests.
+ *
+ * How it relates to the package:
+ * - Satisfies the repository contract defined in `./create.ts`.
+ * - Injected by a host during runtime composition.
+ * - Used by slice tests for database-free verification.
+ *
+ * Architectural role:
+ * Temporary/local adapter. A database-backed adapter (which a host owns, since it names that
+ * host's schema) implements the same interface so slice logic remains unchanged.
+ */
+export declare class InMemoryWorkspaceRepo implements WorkspaceRepoPort {
+    /** Internal record storage. */
+    private rows;
+    constructor(initialRows?: WorkspaceRecord[]);
+    /** Insert one workspace record. */
+    insert(record: WorkspaceRecord): Promise<void>;
+    /** Find workspace by unique slug. */
+    findBySlug(slug: string): Promise<WorkspaceRecord | null>;
+    /** Find workspace by id. */
+    findById(id: string): Promise<WorkspaceRecord | null>;
+    /** All workspace rows (v1 always has exactly one — see `delete.ts`'s header). */
+    list(): Promise<WorkspaceRecord[]>;
+    /** Replace the row matching `record.id` in place. */
+    update(record: WorkspaceRecord): Promise<void>;
+    /** Remove the row matching `id`, if present (idempotent). */
+    delete(id: string): Promise<void>;
+}
+//# sourceMappingURL=repo.memory.d.ts.map

package/dist/workspace/repo.memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.memory.d.ts","sourceRoot":"","sources":["../../src/workspace/repo.memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEtE;;;;;;;;;;;;;;GAcG;AACH,qBAAa,qBAAsB,YAAW,iBAAiB;IAC7D,+BAA+B;IAC/B,OAAO,CAAC,IAAI,CAAoB;gBAEpB,WAAW,GAAE,eAAe,EAAO;IAI/C,mCAAmC;IAC7B,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpD,qCAAqC;IAC/B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAI/D,4BAA4B;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAI3D,iFAAiF;IAC3E,IAAI,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAIxC,qDAAqD;IAC/C,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpD,6DAA6D;IACvD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGxC"}

package/dist/workspace/repo.memory.js

@@ -0,0 +1,50 @@
+/**
+ * @file In-memory workspace repository adapter.
+ *
+ * Purpose:
+ * Provides a local `WorkspaceRepoPort` implementation for development/tests.
+ *
+ * How it relates to the package:
+ * - Satisfies the repository contract defined in `./create.ts`.
+ * - Injected by a host during runtime composition.
+ * - Used by slice tests for database-free verification.
+ *
+ * Architectural role:
+ * Temporary/local adapter. A database-backed adapter (which a host owns, since it names that
+ * host's schema) implements the same interface so slice logic remains unchanged.
+ */
+export class InMemoryWorkspaceRepo {
+    /** Internal record storage. */
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    /** Insert one workspace record. */
+    async insert(record) {
+        this.rows.push(record);
+    }
+    /** Find workspace by unique slug. */
+    async findBySlug(slug) {
+        return this.rows.find((row) => row.slug === slug) ?? null;
+    }
+    /** Find workspace by id. */
+    async findById(id) {
+        return this.rows.find((row) => row.id === id) ?? null;
+    }
+    /** All workspace rows (v1 always has exactly one — see `delete.ts`'s header). */
+    async list() {
+        return [...this.rows];
+    }
+    /** Replace the row matching `record.id` in place. */
+    async update(record) {
+        const index = this.rows.findIndex((row) => row.id === record.id);
+        if (index === -1)
+            return;
+        this.rows[index] = record;
+    }
+    /** Remove the row matching `id`, if present (idempotent). */
+    async delete(id) {
+        this.rows = this.rows.filter((row) => row.id !== id);
+    }
+}
+//# sourceMappingURL=repo.memory.js.map

package/dist/workspace/repo.memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.memory.js","sourceRoot":"","sources":["../../src/workspace/repo.memory.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,qBAAqB;IAChC,+BAA+B;IACvB,IAAI,CAAoB;IAEhC,YAAY,cAAiC,EAAE;QAC7C,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,mCAAmC;IACnC,KAAK,CAAC,MAAM,CAAC,MAAuB;QAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;IAC5D,CAAC;IAED,4BAA4B;IAC5B,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;IACxD,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,MAAM,CAAC,MAAuB;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO;QACzB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;CACF"}

package/dist/workspace/tool-registrations.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @file Workspace's half of the cross-domain agent-tool wiring split: maps the wireable subset of
+ * `agent-tools.ts`'s four catalog entries onto the current-workspace read and the narrow rename
+ * write, as `ToolRegistration`s.
+ *
+ * Risk framing: this is the highest-stakes domain wired so far — `create` and `delete` are
+ * deliberately excluded, each with its reason recorded on {@link UNWIRED_WORKSPACE_TOOL_IDS}; see
+ * `./agent-tools.ts`'s own file header for the full reasoning. Only a plain rename (`update`) is
+ * wired, alongside a read.
+ *
+ * Authorization shape: neither `updateWorkspace` (`update.ts`) nor a direct `workspaceRepo.findById`
+ * read calls `authorize()` internally — a host's admin routes gate inline — so both handlers here
+ * call the kit's `requireToolPermission` themselves, mirroring those routes' identical
+ * `workspace.manage` check.
+ */
+import type { AuthorizeFn } from "../core/commands/command.js";
+import { type DerivedRiskByToolId, type ToolRegistration } from "../core/tools/registration-kit.js";
+import type { WorkspaceRepoPort } from "./create.js";
+/**
+ * The exact slice of a host's route-deps bag Workspace's tool handlers read. Declared structurally
+ * (rather than importing any host's `RouteDeps`) so this module carries no back-edge into a
+ * composition root. A host satisfies this structurally by passing its existing deps object;
+ * nothing there changes.
+ */
+export interface WorkspaceToolDeps {
+    authorize: AuthorizeFn;
+    workspaceId: string;
+    workspaceRepo: WorkspaceRepoPort;
+}
+/**
+ * This wiring layer's OWN risk classification, authored from what each handler below actually
+ * calls. See `DerivedRiskByToolId` in the kit for why it is independent of the catalog's own
+ * `sideEffects` declaration — and note that the two excluded tools appear NOWHERE here, which is
+ * itself the strongest of the guards: an unclassified id cannot be wired at all.
+ */
+export declare const workspaceDerivedRisk: DerivedRiskByToolId;
+export declare function buildWorkspaceRegistrations(routeDeps: WorkspaceToolDeps): ToolRegistration[];
+//# sourceMappingURL=tool-registrations.d.ts.map

package/dist/workspace/tool-registrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registrations.d.ts","sourceRoot":"","sources":["../../src/workspace/tool-registrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAQL,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACtB,MAAM,mCAAmC,CAAC;AAG3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIrD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,WAAW,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,iBAAiB,CAAC;CAClC;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,mBAQjC,CAAC;AAcH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,iBAAiB,GAAG,gBAAgB,EAAE,CA2C5F"}

package/dist/workspace/tool-registrations.js

@@ -0,0 +1,71 @@
+import { buildDomainRegistrations, indexCatalogById, optionalString, requireInputRecord, requireNoInput, requireToolPermission, } from "../core/tools/registration-kit.js";
+import { getWorkspaceAgentToolCatalog } from "./agent-tools.js";
+import { updateWorkspace } from "./update.js";
+const CATALOG_BY_ID = indexCatalogById(getWorkspaceAgentToolCatalog());
+/**
+ * This wiring layer's OWN risk classification, authored from what each handler below actually
+ * calls. See `DerivedRiskByToolId` in the kit for why it is independent of the catalog's own
+ * `sideEffects` declaration — and note that the two excluded tools appear NOWHERE here, which is
+ * itself the strongest of the guards: an unclassified id cannot be wired at all.
+ */
+export const workspaceDerivedRisk = new Map([
+    // -> routeDeps.workspaceRepo.findById(): one read, no domain function of its own (mirrors a
+    //    host's own admin workspace-get route making the same direct repo call).
+    ["workspace_get", "none"],
+    // -> updateWorkspace (update.ts) -> repo.findById + repo.findBySlug + repo.update: validates,
+    //    checks slug uniqueness excluding the row itself, writes. No domain event enqueued (matches
+    //    update.ts's own header: REQ-04 doesn't ask for one).
+    ["workspace_update", "mutates-durable-state"],
+]);
+/** Workspace catalog entries this pass does not wire, and why — see `./agent-tools.ts`'s own per-entry comments for the full reasoning. */
+const UNWIRED_WORKSPACE_TOOL_IDS = new Set([
+    // EXCLUDED BY DESIGN: inserts a row no other route can ever address (every workspace route
+    // resolves strictly against the boot-wired `workspaceId`) — zero utility, non-zero
+    // orphaned-row/clutter surface.
+    "workspace_create",
+    // EXCLUDED BY DESIGN: INV-03-guarded to always refuse today, but the lever removes the only
+    // addressable workspace scope the moment that guard's precondition ever changes — whole-scope,
+    // no per-domain undo, same exclusion class as a forward database migration or a backup restore.
+    "workspace_delete",
+]);
+export function buildWorkspaceRegistrations(routeDeps) {
+    const handlers = {
+        workspace_get: async (ctx) => {
+            requireNoInput(ctx.input);
+            await requireToolPermission(routeDeps, { principalId: ctx.principal.id, permission: "workspace.manage", entityType: "workspace" });
+            const workspace = await routeDeps.workspaceRepo.findById(routeDeps.workspaceId);
+            if (!workspace) {
+                // Defensive: the boot-wired workspaceId always resolves to a real row by construction.
+                // Not an expected runtime path.
+                throw new Error(`workspace '${routeDeps.workspaceId}' was not found`);
+            }
+            return { workspace };
+        },
+        workspace_update: async (ctx) => {
+            const input = requireInputRecord(ctx.input);
+            await requireToolPermission(routeDeps, { principalId: ctx.principal.id, permission: "workspace.manage", entityType: "workspace" });
+            // WorkspaceValidationError/WorkspaceConflictError/WorkspaceNotFoundError (all real `Error`
+            // subclasses, see `create.ts`) propagate as-is — a `ToolExecutor` treats any thrown error as
+            // a failed execution, matching every other domain's handler convention of not rewrapping
+            // typed domain errors before letting them surface.
+            const { workspace } = await updateWorkspace({
+                deps: { repo: routeDeps.workspaceRepo },
+                input: {
+                    id: routeDeps.workspaceId,
+                    name: optionalString(input, "name"),
+                    slug: optionalString(input, "slug"),
+                },
+            });
+            return { workspace };
+        },
+    };
+    return buildDomainRegistrations({
+        domain: "workspace",
+        catalogModule: "workspace/agent-tools.ts",
+        catalog: CATALOG_BY_ID,
+        handlers,
+        derivedRisk: workspaceDerivedRisk,
+        unwiredToolIds: UNWIRED_WORKSPACE_TOOL_IDS,
+    });
+}
+//# sourceMappingURL=tool-registrations.js.map

package/dist/workspace/tool-registrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registrations.js","sourceRoot":"","sources":["../../src/workspace/tool-registrations.ts"],"names":[],"mappings":"AAgBA,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,qBAAqB,GAKtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,aAAa,GAAG,gBAAgB,CAAC,4BAA4B,EAAE,CAAC,CAAC;AAcvE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAA8B;IAC5F,4FAA4F;IAC5F,6EAA6E;IAC7E,CAAC,eAAe,EAAE,MAAM,CAAC;IACzB,8FAA8F;IAC9F,gGAAgG;IAChG,0DAA0D;IAC1D,CAAC,kBAAkB,EAAE,uBAAuB,CAAC;CAC9C,CAAC,CAAC;AAEH,2IAA2I;AAC3I,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,2FAA2F;IAC3F,mFAAmF;IACnF,gCAAgC;IAChC,kBAAkB;IAClB,4FAA4F;IAC5F,+FAA+F;IAC/F,gGAAgG;IAChG,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,UAAU,2BAA2B,CAAC,SAA4B;IACtE,MAAM,QAAQ,GAAgC;QAC5C,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC3B,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YAEnI,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAChF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,uFAAuF;gBACvF,gCAAgC;gBAChC,MAAM,IAAI,KAAK,CAAC,cAAc,SAAS,CAAC,WAAW,iBAAiB,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;QAED,gBAAgB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,qBAAqB,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YAEnI,2FAA2F;YAC3F,6FAA6F;YAC7F,yFAAyF;YACzF,mDAAmD;YACnD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,eAAe,CAAC;gBAC1C,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,aAAa,EAAE;gBACvC,KAAK,EAAE;oBACL,EAAE,EAAE,SAAS,CAAC,WAAW;oBACzB,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC;oBACnC,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC;iBACpC;aACF,CAAC,CAAC;YACH,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;IAEF,OAAO,wBAAwB,CAAC;QAC9B,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,0BAA0B;QACzC,OAAO,EAAE,aAAa;QACtB,QAAQ;QACR,WAAW,EAAE,oBAAoB;QACjC,cAAc,EAAE,0BAA0B;KAC3C,CAAC,CAAC;AACL,CAAC"}

package/dist/workspace/update.d.ts

@@ -0,0 +1,52 @@
+import type { UUID } from "../core/ports.js";
+import { type WorkspaceRecord, type WorkspaceRepoPort } from "./create.js";
+/**
+ * @file `UPDATE_WORKSPACE` — rename a workspace's `name` and/or `slug`.
+ *
+ * Purpose:
+ * The one mutating transition this feature adds beyond create/delete. Mirrors `create.ts`'s
+ * validate -> check-constraints -> persist shape (no domain event is enqueued here — the
+ * requirement doesn't ask for one, and no consumer subscribes to a workspace-renamed topic yet; add
+ * one the same way `createWorkspace` does if a real consumer appears, rather than emitting a
+ * speculative event now).
+ *
+ * Architectural role:
+ * Ordinary slice function, not a port — one implementation, the rule-of-two doesn't
+ * apply to business logic, only to the repo/outbox seams it calls through `WorkspaceRepoPort`.
+ */
+/** Command payload for `UPDATE_WORKSPACE`. At least one of `name`/`slug` must be present (EC-01). */
+export interface UpdateWorkspaceInput {
+    id: UUID;
+    name?: string | undefined;
+    slug?: string | undefined;
+}
+/** Dependencies required by the update-workspace slice. */
+export interface UpdateWorkspaceDeps {
+    repo: WorkspaceRepoPort;
+}
+/** Required parameters for `updateWorkspace`. */
+export interface UpdateWorkspaceRequired {
+    deps: UpdateWorkspaceDeps;
+    input: UpdateWorkspaceInput;
+}
+/**
+ * Execute `UPDATE_WORKSPACE` (REQ-04). At least one of `name`/`slug` must be present in the input
+ * (EC-01 — an empty-object update is rejected, not a silent no-op, so a client-side bug that drops
+ * both fields fails loudly instead of masquerading as a successful save). When only one field is
+ * given, the other keeps its current stored value; both are re-validated together through
+ * `validateWorkspaceNameAndSlug` either way, so a `slug`-only update still catches a blank stored
+ * `name` (defensive; `name` can never actually be blank in practice since `createWorkspace` already
+ * rejects that, but re-validating both together — rather than only the changed field — keeps this
+ * function's invariant identical to `createWorkspace`'s with no special-cased partial path).
+ *
+ * The slug-uniqueness check excludes the row being updated (EC-02 — a workspace is never "in
+ * conflict with itself"): `findBySlug` naturally excludes it whenever the row's own `id` matches,
+ * since that's a no-op rename, not a collision with a *different* row.
+ *
+ * @complexity O(1) — one lookup by id, one lookup by slug, one write.
+ * @overallScore 100
+ */
+export declare function updateWorkspace(required: UpdateWorkspaceRequired): Promise<{
+    workspace: WorkspaceRecord;
+}>;
+//# sourceMappingURL=update.d.ts.map

package/dist/workspace/update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../src/workspace/update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,aAAa,CAAC;AAErB;;;;;;;;;;;;;GAaG;AAEH,qGAAqG;AACrG,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,mBAAmB,CAAC;IAC1B,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,eAAe,CAAA;CAAE,CAAC,CAyBhH"}

package/dist/workspace/update.js

@@ -0,0 +1,41 @@
+import { validateWorkspaceNameAndSlug, WorkspaceConflictError, WorkspaceNotFoundError, WorkspaceValidationError, } from "./create.js";
+/**
+ * Execute `UPDATE_WORKSPACE` (REQ-04). At least one of `name`/`slug` must be present in the input
+ * (EC-01 — an empty-object update is rejected, not a silent no-op, so a client-side bug that drops
+ * both fields fails loudly instead of masquerading as a successful save). When only one field is
+ * given, the other keeps its current stored value; both are re-validated together through
+ * `validateWorkspaceNameAndSlug` either way, so a `slug`-only update still catches a blank stored
+ * `name` (defensive; `name` can never actually be blank in practice since `createWorkspace` already
+ * rejects that, but re-validating both together — rather than only the changed field — keeps this
+ * function's invariant identical to `createWorkspace`'s with no special-cased partial path).
+ *
+ * The slug-uniqueness check excludes the row being updated (EC-02 — a workspace is never "in
+ * conflict with itself"): `findBySlug` naturally excludes it whenever the row's own `id` matches,
+ * since that's a no-op rename, not a collision with a *different* row.
+ *
+ * @complexity O(1) — one lookup by id, one lookup by slug, one write.
+ * @overallScore 100
+ */
+export async function updateWorkspace(required) {
+    const { deps, input } = required;
+    if (input.name === undefined && input.slug === undefined) {
+        throw new WorkspaceValidationError("at least one of name or slug is required");
+    }
+    const existing = await deps.repo.findById(input.id);
+    if (!existing)
+        throw new WorkspaceNotFoundError(`workspace '${input.id}' was not found`);
+    const { name, slug } = validateWorkspaceNameAndSlug({
+        name: input.name ?? existing.name,
+        slug: input.slug ?? existing.slug,
+    });
+    if (slug !== existing.slug) {
+        const collision = await deps.repo.findBySlug(slug);
+        if (collision && collision.id !== existing.id) {
+            throw new WorkspaceConflictError(`slug '${slug}' already exists`);
+        }
+    }
+    const updated = { ...existing, name, slug };
+    await deps.repo.update(updated);
+    return { workspace: updated };
+}
+//# sourceMappingURL=update.js.map

package/dist/workspace/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/workspace/update.ts"],"names":[],"mappings":"AACA,OAAO,EACL,4BAA4B,EAC5B,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,GAGzB,MAAM,aAAa,CAAC;AAmCrB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAiC;IACrE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAEjC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,wBAAwB,CAAC,0CAA0C,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,cAAc,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAEzF,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,4BAA4B,CAAC;QAClD,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;QACjC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;KAClC,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,SAAS,IAAI,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,IAAI,sBAAsB,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAoB,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7D,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC"}