@jskit-ai/users-core 0.1.33 → 0.1.36

package/package.descriptor.mjs

@@ -1,9 +1,9 @@
 export default Object.freeze({
   packageVersion: 1,
   packageId: "@jskit-ai/users-core",
-  version: "0.1.33",
+  version: "0.1.36",
   kind: "runtime",
-  description: "Users/workspace domain runtime plus HTTP routes for workspace, account, and console features.",
+  description: "Users/account runtime plus HTTP routes for account and console features.",
   dependsOn: [
     "@jskit-ai/auth-core",
     "@jskit-ai/database-runtime",
@@ -44,11 +44,11 @@ export default Object.freeze({
         {
           subpath: "./server",
           summary:
-            "Exports UsersCoreServiceProvider, users/workspace/console repositories/services, feature route registration modules, and action definitions."
+            "Exports UsersCoreServiceProvider, users/console repositories and services, account feature route registration modules, and action definitions."
         },
         {
           subpath: "./shared",
-          summary: "Exports shared users/workspace role and settings utilities."
+          summary: "Exports shared users settings and tenancy utilities."
         },
         {
           subpath: "./client",
@@ -62,66 +62,6 @@ export default Object.freeze({
     },
     server: {
       routes: [
-        {
-          method: "POST",
-          path: "/api/workspaces",
-          summary: "Create a workspace for the authenticated user."
-        },
-        {
-          method: "GET",
-          path: "/api/workspaces",
-          summary: "List workspaces visible to authenticated user."
-        },
-        {
-          method: "GET",
-          path: "/api/workspace/invitations/pending",
-          summary: "List pending workspace invitations for authenticated user."
-        },
-        {
-          method: "POST",
-          path: "/api/workspace/invitations/redeem",
-          summary: "Accept or refuse a workspace invitation using an invite token."
-        },
-        {
-          method: "GET",
-          path: "/api/w/:workspaceSlug/settings",
-          summary: "Get workspace settings and role catalog by workspace slug."
-        },
-        {
-          method: "PATCH",
-          path: "/api/w/:workspaceSlug/settings",
-          summary: "Update workspace settings by workspace slug."
-        },
-        {
-          method: "GET",
-          path: "/api/w/:workspaceSlug/roles",
-          summary: "Get role catalog by workspace slug."
-        },
-        {
-          method: "GET",
-          path: "/api/w/:workspaceSlug/members",
-          summary: "List members by workspace slug."
-        },
-        {
-          method: "PATCH",
-          path: "/api/w/:workspaceSlug/members/:memberUserId/role",
-          summary: "Update workspace member role by workspace slug."
-        },
-        {
-          method: "GET",
-          path: "/api/w/:workspaceSlug/invites",
-          summary: "List workspace invites by workspace slug."
-        },
-        {
-          method: "POST",
-          path: "/api/w/:workspaceSlug/invites",
-          summary: "Create workspace invite by workspace slug."
-        },
-        {
-          method: "DELETE",
-          path: "/api/w/:workspaceSlug/invites/:inviteId",
-          summary: "Revoke workspace invite by workspace slug."
-        },
         {
           method: "GET",
           path: "/api/settings",
@@ -198,36 +138,29 @@ export default Object.freeze({
   mutations: {
     dependencies: {
       runtime: {
-        "@jskit-ai/auth-core": "0.1.23",
-        "@jskit-ai/database-runtime": "0.1.24",
-        "@jskit-ai/http-runtime": "0.1.23",
-        "@jskit-ai/kernel": "0.1.24",
-        "@jskit-ai/uploads-runtime": "0.1.2",
+        "@jskit-ai/auth-core": "0.1.25",
+        "@jskit-ai/database-runtime": "0.1.26",
+        "@jskit-ai/http-runtime": "0.1.25",
+        "@jskit-ai/kernel": "0.1.26",
+        "@jskit-ai/uploads-runtime": "0.1.4",
         "@fastify/type-provider-typebox": "^6.1.0",
-        "typebox": "^1.0.81"
+        typebox: "^1.0.81"
       },
       dev: {}
     },
     packageJson: {
-      scripts: {
-        "server:app": "SERVER_SURFACE=app node ./bin/server.js",
-        "server:admin": "SERVER_SURFACE=admin node ./bin/server.js",
-        "dev:app": "VITE_SURFACE=app vite",
-        "dev:admin": "VITE_SURFACE=admin vite",
-        "build:app": "VITE_SURFACE=app vite build",
-        "build:admin": "VITE_SURFACE=admin vite build"
-      }
+      scripts: {}
     },
     procfile: {},
     files: [
       {
         op: "install-migration",
-        from: "templates/migrations/users_core_initial.cjs",
+        from: "templates/migrations/users_core_generic_initial.cjs",
         toDir: "migrations",
         extension: ".cjs",
-        reason: "Install users/workspace core schema migration.",
+        reason: "Install users/account core schema migration.",
         category: "migration",
-        id: "users-core-initial-schema"
+        id: "users-core-generic-initial-schema"
       },
       {
         op: "install-migration",
@@ -243,36 +176,10 @@ export default Object.freeze({
         from: "templates/migrations/users_core_console_owner.cjs",
         toDir: "migrations",
         extension: ".cjs",
-        reason: "Install users/workspace console owner migration.",
+        reason: "Install console owner migration.",
         category: "migration",
         id: "users-core-console-owner-schema"
       },
-      {
-        op: "install-migration",
-        from: "templates/migrations/users_core_workspace_settings_single_name_source.cjs",
-        toDir: "migrations",
-        extension: ".cjs",
-        reason: "Remove workspace_settings name/avatar fields so workspace identity data comes from workspaces only.",
-        category: "migration",
-        id: "users-core-workspace-settings-single-name-source"
-      },
-      {
-        op: "install-migration",
-        from: "templates/migrations/users_core_workspaces_drop_color.cjs",
-        toDir: "migrations",
-        extension: ".cjs",
-        reason: "Drop legacy workspaces.color now that workspace theme colors live in workspace_settings.",
-        category: "migration",
-        id: "users-core-workspaces-drop-color"
-      },
-      {
-        from: "templates/packages/main/src/shared/resources/workspaceSettingsFields.js",
-        to: "packages/main/src/shared/resources/workspaceSettingsFields.js",
-        preserveOnRemove: true,
-        reason: "Install app-owned workspace settings field definitions.",
-        category: "users-core",
-        id: "users-core-app-owned-workspace-settings-fields"
-      },
       {
         from: "templates/packages/main/src/shared/resources/consoleSettingsFields.js",
         to: "packages/main/src/shared/resources/consoleSettingsFields.js",
@@ -288,14 +195,6 @@ export default Object.freeze({
         reason: "Install app-owned user settings field definitions.",
         category: "users-core",
         id: "users-core-app-owned-user-settings-fields"
-      },
-      {
-        from: "templates/config/roles.js",
-        to: "config/roles.js",
-        preserveOnRemove: true,
-        reason: "Install app-owned role catalog in a dedicated config file.",
-        category: "users-core",
-        id: "users-core-app-owned-role-catalog-config"
       }
     ],
     text: [
@@ -308,16 +207,6 @@ export default Object.freeze({
         category: "runtime-config",
         id: "users-core-auth-profile-mode"
       },
-      {
-        op: "append-text",
-        file: "packages/main/src/shared/index.js",
-        position: "top",
-        skipIfContains: "import \"./resources/workspaceSettingsFields.js\";",
-        value: "import \"./resources/workspaceSettingsFields.js\";\n",
-        reason: "Load app-owned workspace settings field definitions inside the main shared module.",
-        category: "users-core",
-        id: "users-core-main-shared-workspace-settings-field-import"
-      },
       {
         op: "append-text",
         file: "packages/main/src/shared/index.js",
@@ -357,125 +246,7 @@ export default Object.freeze({
         reason: "Ensure server runtime loads app-owned shared settings field registration.",
         category: "users-core",
         id: "users-core-server-import-main-shared"
-      },
-      {
-        op: "append-text",
-        file: "config/public.js",
-        position: "top",
-        skipIfContains: "import { roleCatalog } from \"./roles.js\";",
-        value: "import { roleCatalog } from \"./roles.js\";\n",
-        reason: "Load app-owned role catalog from dedicated config file.",
-        category: "users-core",
-        id: "users-core-role-catalog-public-import"
-      },
-      {
-        op: "append-text",
-        file: "config/public.js",
-        position: "top",
-        skipIfContains: "import { surfaceAccessPolicies } from \"./surfaceAccessPolicies.js\";",
-        value: "import { surfaceAccessPolicies } from \"./surfaceAccessPolicies.js\";\n",
-        reason: "Load app-owned surface access policy catalog from dedicated config file.",
-        category: "users-core",
-        id: "users-core-surface-access-policies-public-import"
-      },
-      {
-        op: "append-text",
-        file: "config/surfaceAccessPolicies.js",
-        position: "top",
-        skipIfContains: "export const surfaceAccessPolicies = {};",
-        value: "export const surfaceAccessPolicies = {};\n\n",
-        reason: "Initialize app-owned surface access policy config if missing.",
-        category: "users-core",
-        id: "users-core-surface-access-policies-config-init"
-      },
-      {
-        op: "append-text",
-        file: "config/surfaceAccessPolicies.js",
-        position: "bottom",
-        skipIfContains: "surfaceAccessPolicies.workspace_member = {",
-        value: "\nsurfaceAccessPolicies.workspace_member = {\n  requireAuth: true,\n  requireWorkspaceMembership: true\n};\n",
-        reason: "Register workspace-member surface access policy for workspace surfaces.",
-        category: "users-core",
-        id: "users-core-surface-access-policies-workspace-member"
-      },
-      {
-        op: "append-text",
-        file: "config/public.js",
-        position: "bottom",
-        skipIfContains: "config.surfaceDefinitions.app = {",
-        value:
-          "\nconfig.surfaceDefinitions.app = {\n  id: \"app\",\n  label: \"App\",\n  pagesRoot: \"w/[workspaceSlug]\",\n  enabled: true,\n  requiresAuth: true,\n  requiresWorkspace: true,\n  accessPolicyId: \"workspace_member\",\n  origin: \"\"\n};\n\nconfig.surfaceDefinitions.admin = {\n  id: \"admin\",\n  label: \"Admin\",\n  pagesRoot: \"w/[workspaceSlug]/admin\",\n  enabled: true,\n  requiresAuth: true,\n  requiresWorkspace: true,\n  accessPolicyId: \"workspace_member\",\n  origin: \"\"\n};\n",
-        reason: "Append workspace surface topology when tenancy enables workspace routing.",
-        category: "users-core",
-        id: "users-core-surface-config-workspace",
-        when: {
-          config: "tenancyMode",
-          in: ["personal", "workspaces"]
-        }
-      },
-      {
-        op: "append-text",
-        file: "config/public.js",
-        position: "bottom",
-        skipIfContains: "config.workspaceSwitching =",
-        value:
-          "\nconfig.workspaceSwitching = true;\nconfig.workspaceInvitations = {\n  enabled: true,\n  allowInPersonalMode: true\n};\nconfig.assistantEnabled = false;\nconfig.assistantRequiredPermission = \"\";\nconfig.socialEnabled = false;\nconfig.socialFederationEnabled = false;\n",
-        reason: "Append default public users/workspace feature toggles into app-owned config.",
-        category: "users-core",
-        id: "users-core-public-config"
-      },
-      {
-        op: "append-text",
-        file: "config/public.js",
-        position: "bottom",
-        skipIfContains: "config.roleCatalog = roleCatalog;",
-        value: "\nconfig.roleCatalog = roleCatalog;\n",
-        reason: "Bind app-owned role catalog onto public config.",
-        category: "users-core",
-        id: "users-core-role-catalog-public-config"
-      },
-      {
-        op: "append-text",
-        file: "config/public.js",
-        position: "bottom",
-        skipIfContains: "config.surfaceAccessPolicies = surfaceAccessPolicies;",
-        value: "\nconfig.surfaceAccessPolicies = surfaceAccessPolicies;\n",
-        reason: "Bind app-owned surface access policies onto public config.",
-        category: "users-core",
-        id: "users-core-surface-access-policies-public-config"
-      },
-      {
-        op: "append-text",
-        file: "config/server.js",
-        position: "bottom",
-        skipIfContains: "config.workspaceColor =",
-        value: "\nconfig.workspaceColor = \"#1867C0\";\n",
-        reason: "Append default server-only users/workspace settings into app-owned config.",
-        category: "users-core",
-        id: "users-core-server-config"
-      },
-      {
-        op: "append-text",
-        file: "config/server.js",
-        position: "bottom",
-        skipIfContains: "config.workspaceSettings =",
-        value:
-          "\nconfig.workspaceSettings = {\n  defaults: {\n    invitesEnabled: true\n  }\n};\n",
-        reason: "Append app-owned workspace settings defaults into the server config.",
-        category: "users-core",
-        id: "users-core-workspace-settings-server-config"
-      },
-      {
-        op: "append-text",
-        file: "config/server.js",
-        position: "bottom",
-        skipIfContains: "config.workspaceMembers =",
-        value:
-          "\nconfig.workspaceMembers = {\n  defaults: {\n    inviteExpiresInMs: 604800000\n  }\n};\n",
-        reason: "Append app-owned workspace member invite policy defaults into the server config.",
-        category: "users-core",
-        id: "users-core-workspace-members-server-config"
-      },
+      }
     ]
   }
 });

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "@jskit-ai/users-core",
-  "version": "0.1.33",
+  "version": "0.1.36",
   "type": "module",
   "scripts": {
     "test": "node --test"
   },
   "exports": {
-    "./server/support/workspaceActionSurfaces": "./src/server/support/workspaceActionSurfaces.js",
+    "./server/UsersWorkspacesServiceProvider": "./src/server/UsersWorkspacesServiceProvider.js",
     "./server/support/workspaceRouteInput": "./src/server/support/workspaceRouteInput.js",
     "./server/support/resolveWorkspace": "./src/server/support/resolveWorkspace.js",
     "./server/validators/routeParamsValidator": "./src/server/common/validators/routeParamsValidator.js",
@@ -24,11 +24,11 @@
     "./shared/resources/consoleSettingsFields": "./src/shared/resources/consoleSettingsFields.js"
   },
   "dependencies": {
-    "@jskit-ai/auth-core": "0.1.23",
-    "@jskit-ai/database-runtime": "0.1.24",
-    "@jskit-ai/http-runtime": "0.1.23",
-    "@jskit-ai/kernel": "0.1.24",
-    "@jskit-ai/uploads-runtime": "0.1.2",
+    "@jskit-ai/auth-core": "0.1.25",
+    "@jskit-ai/database-runtime": "0.1.26",
+    "@jskit-ai/http-runtime": "0.1.25",
+    "@jskit-ai/kernel": "0.1.26",
+    "@jskit-ai/uploads-runtime": "0.1.4",
     "@fastify/type-provider-typebox": "^6.1.0",
     "typebox": "^1.0.81"
   }

package/src/server/UsersCoreServiceProvider.js

@@ -1,14 +1,4 @@
 import { USERS_SHARED_API } from "../shared/index.js";
-import { bootWorkspaceDirectoryRoutes } from "./workspaceDirectory/bootWorkspaceDirectoryRoutes.js";
-import { registerWorkspaceDirectory } from "./workspaceDirectory/registerWorkspaceDirectory.js";
-import {
-  registerWorkspacePendingInvitations
-} from "./workspacePendingInvitations/registerWorkspacePendingInvitations.js";
-import { bootWorkspacePendingInvitations } from "./workspacePendingInvitations/bootWorkspacePendingInvitations.js";
-import { registerWorkspaceMembers } from "./workspaceMembers/registerWorkspaceMembers.js";
-import { bootWorkspaceMembers } from "./workspaceMembers/bootWorkspaceMembers.js";
-import { registerWorkspaceSettings } from "./workspaceSettings/registerWorkspaceSettings.js";
-import { bootWorkspaceSettings } from "./workspaceSettings/bootWorkspaceSettings.js";
 import { bootAccountProfileRoutes } from "./accountProfile/bootAccountProfileRoutes.js";
 import { bootAccountPreferencesRoutes } from "./accountPreferences/bootAccountPreferencesRoutes.js";
 import { bootAccountNotificationsRoutes } from "./accountNotifications/bootAccountNotificationsRoutes.js";
@@ -16,14 +6,13 @@ import { bootAccountSecurityRoutes } from "./accountSecurity/bootAccountSecurity
 import { bootConsoleSettingsRoutes } from "./consoleSettings/bootConsoleSettingsRoutes.js";
 import { registerSharedApi } from "./common/registerSharedApi.js";
 import { registerCommonRepositories } from "./common/registerCommonRepositories.js";
-import { registerWorkspaceCore } from "./registerWorkspaceCore.js";
-import { registerWorkspaceBootstrap } from "./registerWorkspaceBootstrap.js";
+import { registerUsersCore } from "./registerUsersCore.js";
+import { registerUsersBootstrap } from "./registerUsersBootstrap.js";
 import { registerAccountPreferences } from "./accountPreferences/registerAccountPreferences.js";
 import { registerAccountNotifications } from "./accountNotifications/registerAccountNotifications.js";
 import { registerAccountProfile } from "./accountProfile/registerAccountProfile.js";
 import { registerAccountSecurity } from "./accountSecurity/registerAccountSecurity.js";
 import { registerConsoleSettings } from "./consoleSettings/registerConsoleSettings.js";
-import { registerUsersCoreActionSurfaceSources } from "./support/workspaceActionSurfaces.js";
 
 class UsersCoreServiceProvider {
   static id = "users.core";
@@ -31,15 +20,10 @@ class UsersCoreServiceProvider {
   static dependsOn = ["runtime.server", "runtime.actions", "runtime.database", "runtime.storage", "auth.provider", "runtime.uploads"];
 
   register(app) {
-    registerUsersCoreActionSurfaceSources(app);
     registerSharedApi(app, USERS_SHARED_API);
     registerCommonRepositories(app);
-    registerWorkspaceCore(app);
-    registerWorkspaceBootstrap(app);
-    registerWorkspaceDirectory(app);
-    registerWorkspaceMembers(app);
-    registerWorkspaceSettings(app);
-    registerWorkspacePendingInvitations(app);
+    registerUsersCore(app);
+    registerUsersBootstrap(app);
 
     registerAccountProfile(app);
     registerAccountPreferences(app);
@@ -49,14 +33,6 @@ class UsersCoreServiceProvider {
   }
 
   async boot(app) {
-    if (app.make("users.workspace.enabled") === true) {
-      bootWorkspaceDirectoryRoutes(app);
-      if (app.make("users.workspace.invitations.enabled") === true) {
-        bootWorkspacePendingInvitations(app);
-      }
-      bootWorkspaceSettings(app);
-      bootWorkspaceMembers(app);
-    }
     bootAccountProfileRoutes(app);
     bootAccountPreferencesRoutes(app);
     bootAccountNotificationsRoutes(app);

package/src/server/UsersWorkspacesServiceProvider.js

@@ -0,0 +1,44 @@
+import { bootWorkspaceDirectoryRoutes } from "./workspaceDirectory/bootWorkspaceDirectoryRoutes.js";
+import { registerWorkspaceDirectory } from "./workspaceDirectory/registerWorkspaceDirectory.js";
+import {
+  registerWorkspacePendingInvitations
+} from "./workspacePendingInvitations/registerWorkspacePendingInvitations.js";
+import { bootWorkspacePendingInvitations } from "./workspacePendingInvitations/bootWorkspacePendingInvitations.js";
+import { registerWorkspaceMembers } from "./workspaceMembers/registerWorkspaceMembers.js";
+import { bootWorkspaceMembers } from "./workspaceMembers/bootWorkspaceMembers.js";
+import { registerWorkspaceSettings } from "./workspaceSettings/registerWorkspaceSettings.js";
+import { bootWorkspaceSettings } from "./workspaceSettings/bootWorkspaceSettings.js";
+import { registerWorkspaceRepositories } from "./registerWorkspaceRepositories.js";
+import { registerWorkspaceCore } from "./registerWorkspaceCore.js";
+import { registerWorkspaceBootstrap } from "./registerWorkspaceBootstrap.js";
+
+class UsersWorkspacesServiceProvider {
+  static id = "workspaces.core";
+
+  static dependsOn = ["users.core"];
+
+  register(app) {
+    registerWorkspaceRepositories(app);
+    registerWorkspaceCore(app);
+    registerWorkspaceBootstrap(app);
+    registerWorkspaceDirectory(app);
+    registerWorkspaceMembers(app);
+    registerWorkspaceSettings(app);
+    registerWorkspacePendingInvitations(app);
+  }
+
+  async boot(app) {
+    if (app.make("users.workspace.enabled") !== true) {
+      return;
+    }
+
+    bootWorkspaceDirectoryRoutes(app);
+    if (app.make("users.workspace.invitations.enabled") === true) {
+      bootWorkspacePendingInvitations(app);
+    }
+    bootWorkspaceSettings(app);
+    bootWorkspaceMembers(app);
+  }
+}
+
+export { UsersWorkspacesServiceProvider };

package/src/server/common/registerCommonRepositories.js

@@ -1,8 +1,5 @@
 import { createRepository as createUsersRepository } from "./repositories/usersRepository.js";
 import { createRepository as createUserSettingsRepository } from "./repositories/userSettingsRepository.js";
-import { createRepository as createWorkspacesRepository } from "./repositories/workspacesRepository.js";
-import { createRepository as createWorkspaceMembershipsRepository } from "./repositories/workspaceMembershipsRepository.js";
-import { createRepository as createWorkspaceInvitesRepository } from "./repositories/workspaceInvitesRepository.js";
 import { createRepository as createConsoleSettingsRepository } from "../consoleSettings/consoleSettingsRepository.js";
 
 function registerCommonRepositories(app) {
@@ -19,22 +16,6 @@ function registerCommonRepositories(app) {
     const knex = scope.make("jskit.database.knex");
     return createUserSettingsRepository(knex);
   });
-
-  app.singleton("workspacesRepository", (scope) => {
-    const knex = scope.make("jskit.database.knex");
-    return createWorkspacesRepository(knex);
-  });
-
-  app.singleton("workspaceMembershipsRepository", (scope) => {
-    const knex = scope.make("jskit.database.knex");
-    return createWorkspaceMembershipsRepository(knex);
-  });
-
-  app.singleton("workspaceInvitesRepository", (scope) => {
-    const knex = scope.make("jskit.database.knex");
-    return createWorkspaceInvitesRepository(knex);
-  });
-
   app.singleton("consoleSettingsRepository", (scope) => {
     const knex = scope.make("jskit.database.knex");
     return createConsoleSettingsRepository(knex);

package/src/server/common/repositories/userSettingsRepository.js

@@ -15,7 +15,6 @@ function mapRow(row) {
 
   const mapped = {
     userId: Number(row.user_id),
-    lastActiveWorkspaceId: row.last_active_workspace_id == null ? null : Number(row.last_active_workspace_id),
     passwordSignInEnabled: row.password_sign_in_enabled == null ? true : Boolean(row.password_sign_in_enabled),
     passwordSetupRequired: row.password_setup_required == null ? false : Boolean(row.password_setup_required),
     createdAt: toIsoString(row.created_at),
@@ -48,7 +47,6 @@ function normalizeBoolean(value, fallback = false) {
 function createInsertPayload(userId) {
   const payload = {
     user_id: Number(userId),
-    last_active_workspace_id: null,
     password_sign_in_enabled: DEFAULT_USER_SETTINGS.passwordSignInEnabled,
     password_setup_required: DEFAULT_USER_SETTINGS.passwordSetupRequired,
     created_at: nowDb(),
@@ -127,10 +125,6 @@ function createRepository(knex) {
     if (Object.hasOwn(source, "passwordSetupRequired")) {
       dbPatch.password_setup_required = normalizeBoolean(source.passwordSetupRequired, ensured.passwordSetupRequired);
     }
-    if (Object.hasOwn(source, "lastActiveWorkspaceId")) {
-      dbPatch.last_active_workspace_id = source.lastActiveWorkspaceId == null ? null : Number(source.lastActiveWorkspaceId);
-    }
-
     await client("user_settings").where({ user_id: Number(userId) }).update(dbPatch);
     return findByUserId(userId, { trx: client });
   }
@@ -160,10 +154,6 @@ function createRepository(knex) {
     return patchUserSettings(userId, { passwordSetupRequired: required }, options);
   }
 
-  async function updateLastActiveWorkspaceId(userId, workspaceId, options = {}) {
-    return patchUserSettings(userId, { lastActiveWorkspaceId: workspaceId }, options);
-  }
-
   return Object.freeze({
     findByUserId,
     ensureForUserId,
@@ -171,8 +161,7 @@ function createRepository(knex) {
     updatePreferences,
     updateNotifications,
     updatePasswordSignInEnabled,
-    updatePasswordSetupRequired,
-    updateLastActiveWorkspaceId
+    updatePasswordSetupRequired
   });
 }
 

package/src/server/registerUsersBootstrap.js

@@ -0,0 +1,22 @@
+import { registerBootstrapPayloadContributor } from "@jskit-ai/kernel/server/runtime";
+import { resolveAppConfig } from "@jskit-ai/kernel/server/support";
+import { createUsersBootstrapContributor } from "./usersBootstrapContributor.js";
+
+function registerUsersBootstrap(app) {
+  if (!app || typeof app.singleton !== "function") {
+    throw new Error("registerUsersBootstrap requires application singleton().");
+  }
+
+  registerBootstrapPayloadContributor(app, "users.core.bootstrap.payloadContributor", (scope) => {
+    return createUsersBootstrapContributor({
+      usersRepository: scope.make("usersRepository"),
+      userSettingsRepository: scope.make("userSettingsRepository"),
+      appConfig: resolveAppConfig(scope),
+      tenancyProfile: scope.make("users.tenancy.profile"),
+      authService: scope.make("authService"),
+      consoleService: scope.has("consoleService") ? scope.make("consoleService") : null
+    });
+  });
+}
+
+export { registerUsersBootstrap };

package/src/server/registerUsersCore.js

@@ -0,0 +1,30 @@
+import { resolveAppConfig } from "@jskit-ai/kernel/server/support";
+import { resolveTenancyProfile } from "../shared/tenancyProfile.js";
+import { createService as createAuthProfileSyncService } from "./common/services/authProfileSyncService.js";
+import { registerUsersCoreActionSurfaceSources } from "./support/workspaceActionSurfaces.js";
+
+function registerUsersCore(app) {
+  if (!app || typeof app.singleton !== "function") {
+    throw new Error("registerUsersCore requires application singleton().");
+  }
+
+  registerUsersCoreActionSurfaceSources(app);
+
+  app.singleton("users.profile.sync.service", (scope) => {
+    return createAuthProfileSyncService({
+      usersRepository: scope.make("usersRepository"),
+      userSettingsRepository: scope.make("userSettingsRepository"),
+      workspaceProvisioningService:
+        typeof scope.has === "function" && scope.has("users.workspace.service")
+          ? scope.make("users.workspace.service")
+          : null
+    });
+  });
+
+  app.singleton("users.tenancy.profile", (scope) => {
+    const appConfig = resolveAppConfig(scope);
+    return resolveTenancyProfile(appConfig);
+  });
+}
+
+export { registerUsersCore };

package/src/server/registerWorkspaceBootstrap.js

@@ -8,7 +8,7 @@ function registerWorkspaceBootstrap(app) {
     throw new Error("registerWorkspaceBootstrap requires application singleton().");
   }
 
-  registerBootstrapPayloadContributor(app, "users.core.workspace.bootstrap.payloadContributor", (scope) => {
+  registerBootstrapPayloadContributor(app, "workspaces.core.bootstrap.payloadContributor", (scope) => {
     const workspaceInvitationsEnabled = scope.make("users.workspace.invitations.enabled");
 
     return createWorkspaceBootstrapContributor({
@@ -18,11 +18,8 @@ function registerWorkspaceBootstrap(app) {
         : null,
       workspaceInvitationsEnabled,
       usersRepository: scope.make("usersRepository"),
-      userSettingsRepository: scope.make("userSettingsRepository"),
       appConfig: resolveAppConfig(scope),
-      tenancyProfile: scope.make("users.tenancy.profile"),
-      authService: scope.make("authService"),
-      consoleService: scope.has("consoleService") ? scope.make("consoleService") : null
+      tenancyProfile: scope.make("users.tenancy.profile")
     });
   });
 }