@jskit-ai/workspaces-core 0.1.223 → 0.1.225

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jskit-ai/workspaces-core",
-  "version": "0.1.223",
+  "version": "0.1.225",
   "type": "module",
   "scripts": {
     "test": "node --test --test-concurrency=1"
@@ -18,11 +18,11 @@
     "./shared/resources/workspaceSettingsResource": "./src/shared/resources/workspaceSettingsResource.js"
   },
   "dependencies": {
-    "@jskit-ai/database-runtime": "0.1.245",
-    "@jskit-ai/json-rest-api-core": "0.1.189",
-    "@jskit-ai/resource-core": "0.1.187",
-    "@jskit-ai/resource-crud-core": "0.1.187",
-    "@jskit-ai/users-core": "0.1.258",
+    "@jskit-ai/database-runtime": "0.1.247",
+    "@jskit-ai/json-rest-api-core": "0.1.191",
+    "@jskit-ai/resource-core": "0.1.189",
+    "@jskit-ai/resource-crud-core": "0.1.189",
+    "@jskit-ai/users-core": "0.1.260",
     "json-rest-schema": "^1.0.17"
   },
   "description": "Workspace tenancy runtime plus HTTP routes, role catalog, and workspace config scaffolding.",
@@ -169,8 +169,8 @@
     }
   },
   "peerDependencies": {
-    "@jskit-ai/auth-core": "0.1.243",
-    "@jskit-ai/http-runtime": "0.1.243",
-    "@jskit-ai/kernel": "0.1.245"
+    "@jskit-ai/auth-core": "0.1.245",
+    "@jskit-ai/http-runtime": "0.1.245",
+    "@jskit-ai/kernel": "0.1.247"
   }
 }

package/patterns/workspace-server/PATTERN.md

@@ -23,6 +23,12 @@ substitute for a simpler domain ownership column.
 Choose workspace creation policy, roles, invitation policy, expiry, email copy,
 member permissions, personal-workspace behavior, and surface access rules.
 
+In `workspaces` mode, `tenancyPolicy.workspace.autoProvision: true` gives every
+user a personal workspace in addition to shared ones; the server config function
+`personalWorkspaceName(user)` names it. `workspaceSettings.defaults` sets
+`invitesEnabled` and the colours (`lightPrimaryColor`, `darkPrimaryColor` and
+the other palette fields) that new workspaces start with.
+
 ## Framework APIs
 
 Use workspace routes, resources, scope helpers, tenancy profiles, and settings

package/src/server/WorkspacesFeature.js

@@ -9,6 +9,7 @@ import { workspaceMembershipsResource } from "../shared/resources/workspaceMembe
 import { workspaceResource } from "../shared/resources/workspaceResource.js";
 import { workspaceSettingsResource } from "../shared/resources/workspaceSettingsResource.js";
 import { createWorkspaceRoleCatalog } from "../shared/roles.js";
+import { WORKSPACE_SETTINGS_COLOR_FIELDS, normalizeWorkspaceHexColor } from "../shared/settings.js";
 import { resolveTenancyProfile } from "../shared/tenancyProfile.js";
 import { createRepository as createWorkspaceInvitesRepository } from "./common/repositories/workspaceInvitesRepository.js";
 import { createRepository as createWorkspaceMembershipsRepository } from "./common/repositories/workspaceMembershipsRepository.js";
@@ -49,6 +50,21 @@ function requireBoolean(value, label) {
   return value;
 }
 
+function requireWorkspaceColorDefaults(defaults) {
+  const colors = {};
+  for (const fieldName of WORKSPACE_SETTINGS_COLOR_FIELDS) {
+    if (defaults?.[fieldName] === undefined) {
+      continue;
+    }
+    const color = normalizeWorkspaceHexColor(defaults[fieldName]);
+    if (!color) {
+      throw new TypeError(`runtime.config.workspaceSettings.defaults.${fieldName} must be a hex color like #1867C0.`);
+    }
+    colors[fieldName] = color;
+  }
+  return colors;
+}
+
 function resolveInviteEmailTemplate(config) {
   const template =
     config.workspaceInviteEmailTemplate ||
@@ -92,7 +108,8 @@ function createWorkspacesRuntime({ config, env, jsonRestApi } = {}) {
     defaultInvitesEnabled: requireBoolean(
       config?.workspaceSettings?.defaults?.invitesEnabled,
       "runtime.config.workspaceSettings.defaults.invitesEnabled"
-    )
+    ),
+    defaultColorSettings: requireWorkspaceColorDefaults(config?.workspaceSettings?.defaults)
   });
   const workspacesRepository = createWorkspacesRepository({ api: jsonRestApi });
   const workspaceMembershipsRepository = createWorkspaceMembershipsRepository({ api: jsonRestApi });

package/src/server/WorkspacesIntegrationsProvider.js

@@ -7,6 +7,16 @@ import {
   resolveWorkspaceSurfaceIdsFromAppConfig
 } from "./support/workspaceActionSurfaces.js";
 
+// Every active membership puts the actor in the workspace audience and in its
+// own workspace-user audience.
+async function resolveWorkspaceRealtimeScopes(workspaceMemberships, actorId) {
+  const workspaceIds = await workspaceMemberships.listActiveWorkspaceIdsByUserId(actorId);
+  return workspaceIds.flatMap((workspaceId) => [
+    { kind: "workspace", id: workspaceId },
+    { kind: "workspace_user", workspaceId, userId: actorId }
+  ]);
+}
+
 const WorkspacesIntegrationsProvider = defineProvider({
   id: "workspaces.integrations",
   requires: {
@@ -17,7 +27,10 @@ const WorkspacesIntegrationsProvider = defineProvider({
     usersExtensions: "users.extensions",
     workspaces: "workspaces.core"
   },
-  setup({ actions, authExtensions, config, http, usersExtensions, workspaces }) {
+  optional: {
+    realtime: "runtime.realtime"
+  },
+  setup({ actions, authExtensions, config, http, realtime, usersExtensions, workspaces }) {
     const workspaceService = workspaces.services.directory;
     const membershipOptionalSurfaceIds = resolveWorkspaceMembershipOptionalSurfaceIdsFromAppConfig(config);
     const workspaceSurfaceIds = resolveWorkspaceSurfaceIdsFromAppConfig(config);
@@ -58,6 +71,14 @@ const WorkspacesIntegrationsProvider = defineProvider({
       }
     });
 
+    realtime?.registerAudienceContributor({
+      id: "workspaces.memberships",
+      resolveActorScopes: (actorId) => resolveWorkspaceRealtimeScopes(
+        workspaces.repositories.workspaceMemberships,
+        actorId
+      )
+    });
+
     if (workspaces.invitationsEnabled) {
       authExtensions.registerInvitationContextResolver({
         resolverId: "workspaces.invitation",

package/src/server/common/contributors/workspaceActionContextContributor.js

@@ -1,7 +1,5 @@
-import {
-  normalizeObject,
-  requireServiceMethod
-} from "@jskit-ai/kernel/shared/actions/actionContributorHelpers";
+import { requireServiceMethod } from "@jskit-ai/kernel/server/actions/actionContributorHelpers";
+import { normalizeObject } from "@jskit-ai/kernel/shared/support/normalize";
 import { normalizeSurfaceId } from "@jskit-ai/kernel/shared/surface/registry";
 import {
   checkRouteVisibility,

package/src/server/common/formatters/workspaceFormatter.js

@@ -1,5 +1,5 @@
 import { resolveWorkspaceThemePalettes } from "@jskit-ai/workspaces-core/shared/settings";
-import { normalizeLowerText, normalizeText } from "@jskit-ai/kernel/shared/actions/textNormalization";
+import { normalizeLowerText, normalizeText } from "@jskit-ai/kernel/shared/support/normalize";
 import { normalizeRecordId } from "@jskit-ai/kernel/shared/support/normalize";
 
 function mapWorkspaceSummary(workspace, membership, roleCatalog = null) {

package/src/server/common/services/workspaceContextService.js

@@ -11,7 +11,7 @@ import {
 import {
   mapWorkspaceSummary
 } from "../formatters/workspaceFormatter.js";
-import { normalizeLowerText, normalizeText } from "@jskit-ai/kernel/shared/actions/textNormalization";
+import { normalizeLowerText, normalizeText } from "@jskit-ai/kernel/shared/support/normalize";
 import { normalizeRecordId } from "@jskit-ai/kernel/shared/support/normalize";
 
 function toSlugPart(value) {
@@ -84,6 +84,8 @@ function createService({
   const resolvedTenancyProfile = resolveTenancyProfile(appConfig);
   const resolvedTenancyMode = resolvedTenancyProfile.mode;
   const workspacePolicy = resolvedTenancyProfile.workspace;
+  const personalWorkspaceName =
+    typeof appConfig.personalWorkspaceName === "function" ? appConfig.personalWorkspaceName : null;
   async function ensureUniqueWorkspaceSlug(baseSlug, options = {}) {
     let suffix = 0;
     while (suffix < 1000) {
@@ -121,7 +123,7 @@ function createService({
     const inserted = await workspacesRepository.insert(
       {
         slug,
-        name: buildWorkspaceName(user),
+        name: normalizeText(personalWorkspaceName?.(user)) || buildWorkspaceName(user),
         ownerUserId: normalizedUserId,
         isPersonal: true,
         avatarUrl: ""

package/src/server/workspaceBootstrapContributor.js

@@ -1,6 +1,6 @@
-import { requireServiceMethod } from "@jskit-ai/kernel/shared/actions/actionContributorHelpers";
+import { requireServiceMethod } from "@jskit-ai/kernel/server/actions/actionContributorHelpers";
 import { normalizeRecordId } from "@jskit-ai/kernel/shared/support/normalize";
-import { normalizeLowerText } from "@jskit-ai/kernel/shared/actions/textNormalization";
+import { normalizeLowerText } from "@jskit-ai/kernel/shared/support/normalize";
 import {
   TENANCY_MODE_NONE,
   resolveTenancyProfile

package/src/server/workspaceDirectory/workspaceDirectoryActions.js

@@ -1,7 +1,7 @@
 import {
   emptyInputValidator,
   resolveRequest
-} from "@jskit-ai/kernel/shared/actions/actionContributorHelpers";
+} from "@jskit-ai/kernel/server/actions/actionContributorHelpers";
 import { returnJsonApiData } from "@jskit-ai/http-runtime/shared";
 import { composeSchemaDefinitions } from "@jskit-ai/kernel/shared/validators";
 import { workspaceResource } from "../../shared/resources/workspaceResource.js";
@@ -40,10 +40,6 @@ const workspaceDirectoryActionSpecifications = Object.freeze([
       }
     },
     idempotency: "none",
-    audit: {
-      actionName: "workspace.workspaces.create"
-    },
-    observability: {},
     async run(workspaceService, input, context) {
       return returnJsonApiData(await workspaceService.createWorkspaceForAuthenticatedUser(resolveActionUser(context, input), input, {
         request: resolveRequest(context),
@@ -74,10 +70,6 @@ const workspaceDirectoryActionSpecifications = Object.freeze([
       }
     },
     idempotency: "none",
-    audit: {
-      actionName: "workspace.workspaces.list"
-    },
-    observability: {},
     async run(workspaceService, input, context) {
       return returnJsonApiData({
         items: await workspaceService.listWorkspacesForAuthenticatedUser(resolveActionUser(context, input), {
@@ -108,10 +100,6 @@ const workspaceDirectoryActionSpecifications = Object.freeze([
       }
     },
     idempotency: "none",
-    audit: {
-      actionName: "workspace.workspaces.read"
-    },
-    observability: {},
     async run(workspaceService, input, context) {
       return returnJsonApiData(await workspaceService.getWorkspaceForAuthenticatedUser(
         resolveActionUser(context, input),
@@ -143,10 +131,6 @@ const workspaceDirectoryActionSpecifications = Object.freeze([
       }
     },
     idempotency: "optional",
-    audit: {
-      actionName: "workspace.workspaces.update"
-    },
-    observability: {},
     async run(workspaceService, input, context) {
       const { workspaceSlug, ...patch } = input;
       return returnJsonApiData(await workspaceService.updateWorkspaceForAuthenticatedUser(

package/src/server/workspaceMembers/workspaceMembersActions.js

@@ -85,10 +85,6 @@ const workspaceMembersActionSpecifications = Object.freeze([
       }
     },
     idempotency: "none",
-    audit: {
-      actionName: "workspace.roles.list"
-    },
-    observability: {},
     async run(workspaceMembersService, _input, context) {
       return returnJsonApiData(await workspaceMembersService.listRoles({ context }));
     }
@@ -113,10 +109,6 @@ const workspaceMembersActionSpecifications = Object.freeze([
       }
     },
     idempotency: "none",
-    audit: {
-      actionName: "workspace.members.list"
-    },
-    observability: {},
     async run(workspaceMembersService, input, context) {
       return returnJsonApiData(await workspaceMembersService.listMembers(resolveWorkspace(context, input), {
         context
@@ -143,10 +135,6 @@ const workspaceMembersActionSpecifications = Object.freeze([
       }
     },
     idempotency: "optional",
-    audit: {
-      actionName: "workspace.member.role.update"
-    },
-    observability: {},
     events: WORKSPACE_MEMBER_CHANGED_EVENTS,
     async run(workspaceMembersService, input, context) {
       return returnJsonApiData(await workspaceMembersService.updateMemberRole(resolveWorkspace(context, input), {
@@ -177,10 +165,6 @@ const workspaceMembersActionSpecifications = Object.freeze([
       }
     },
     idempotency: "optional",
-    audit: {
-      actionName: "workspace.member.remove"
-    },
-    observability: {},
     events: WORKSPACE_MEMBER_CHANGED_EVENTS,
     async run(workspaceMembersService, input, context) {
       return returnJsonApiData(await workspaceMembersService.removeMember(resolveWorkspace(context, input), {
@@ -210,10 +194,6 @@ const workspaceMembersActionSpecifications = Object.freeze([
       }
     },
     idempotency: "none",
-    audit: {
-      actionName: "workspace.invites.list"
-    },
-    observability: {},
     async run(workspaceMembersService, input, context) {
       return returnJsonApiData(await workspaceMembersService.listInvites(resolveWorkspace(context, input), {
         context
@@ -245,10 +225,6 @@ const workspaceMembersActionSpecifications = Object.freeze([
       }
     },
     idempotency: "optional",
-    audit: {
-      actionName: "workspace.invite.create"
-    },
-    observability: {},
     events: WORKSPACE_INVITE_CREATED_EVENTS,
     async run(workspaceMembersService, input, context) {
       return returnJsonApiData(await workspaceMembersService.createInvite(
@@ -284,10 +260,6 @@ const workspaceMembersActionSpecifications = Object.freeze([
       }
     },
     idempotency: "optional",
-    audit: {
-      actionName: "workspace.invite.revoke"
-    },
-    observability: {},
     events: WORKSPACE_INVITE_REVOKED_EVENTS,
     async run(workspaceMembersService, input, context) {
       return returnJsonApiData(await workspaceMembersService.revokeInvite(resolveWorkspace(context, input), input.inviteId, {

package/src/server/workspaceMembers/workspaceMembersService.js

@@ -1,5 +1,5 @@
 import { normalizeRecordId } from "@jskit-ai/kernel/shared/support/normalize";
-import { normalizeLowerText, normalizeText } from "@jskit-ai/kernel/shared/actions/textNormalization";
+import { normalizeLowerText, normalizeText } from "@jskit-ai/kernel/shared/support/normalize";
 import { encodeInviteTokenHash } from "@jskit-ai/auth-core/shared/inviteTokens";
 import { resolveInviteTokenHash, buildInviteToken, hashInviteToken } from "@jskit-ai/auth-core/server/inviteTokens";
 import { AppError } from "@jskit-ai/kernel/server/runtime/errors";

package/src/server/workspacePendingInvitations/workspacePendingInvitationsActions.js

@@ -1,7 +1,7 @@
 import { pendingInvitationsAssistantOutput } from "../../shared/resources/workspaceAssistantOutputs.js";
 import {
   emptyInputValidator
-} from "@jskit-ai/kernel/shared/actions/actionContributorHelpers";
+} from "@jskit-ai/kernel/server/actions/actionContributorHelpers";
 import { returnJsonApiData } from "@jskit-ai/http-runtime/shared";
 import { workspaceMembersResource } from "../../shared/resources/workspaceMembersResource.js";
 import { workspacePendingInvitationsResource } from "../../shared/resources/workspacePendingInvitationsResource.js";
@@ -28,10 +28,6 @@ const workspacePendingInvitationsActionSpecifications = Object.freeze([
       }
     },
     idempotency: "none",
-    audit: {
-      actionName: "workspace.invitation.resolve"
-    },
-    observability: {},
     async run(workspacePendingInvitationsService, input, context) {
       return returnJsonApiData(
         await workspacePendingInvitationsService.resolveInviteByToken(input?.token, {
@@ -64,10 +60,6 @@ const workspacePendingInvitationsActionSpecifications = Object.freeze([
       }
     },
     idempotency: "none",
-    audit: {
-      actionName: "workspace.invitations.pending.list"
-    },
-    observability: {},
     async run(workspacePendingInvitationsService, input, context) {
       return returnJsonApiData({
         pendingInvites: await workspacePendingInvitationsService.listPendingInvitesForUser(resolveActionUser(context, input), {
@@ -93,10 +85,6 @@ const workspacePendingInvitationsActionSpecifications = Object.freeze([
       }
     },
     idempotency: "optional",
-    audit: {
-      actionName: "workspace.invite.redeem"
-    },
-    observability: {},
     events: WORKSPACE_INVITE_DECISION_EVENTS,
     async run(workspacePendingInvitationsService, input, context) {
       const payload = input || {};

package/src/server/workspacePendingInvitations/workspacePendingInvitationsService.js

@@ -1,7 +1,7 @@
 import { resolveInviteTokenHash } from "@jskit-ai/auth-core/server/inviteTokens";
 import { encodeInviteTokenHash } from "@jskit-ai/auth-core/shared/inviteTokens";
 import { AppError } from "@jskit-ai/kernel/server/runtime/errors";
-import { normalizeLowerText, normalizeText } from "@jskit-ai/kernel/shared/actions/textNormalization";
+import { normalizeLowerText, normalizeText } from "@jskit-ai/kernel/shared/support/normalize";
 import { normalizeRecordId } from "@jskit-ai/kernel/shared/support/normalize";
 
 function createService({

package/src/server/workspaceSettings/workspaceSettingsActions.js

@@ -40,10 +40,6 @@ const workspaceSettingsActionSpecifications = Object.freeze([
       }
     },
     idempotency: "none",
-    audit: {
-      actionName: "workspace.settings.read"
-    },
-    observability: {},
     async run(workspaceSettingsService, input, context) {
       const response = await workspaceSettingsService.getWorkspaceSettings(resolveWorkspace(context, input), {
         context
@@ -72,10 +68,6 @@ const workspaceSettingsActionSpecifications = Object.freeze([
       }
     },
     idempotency: "optional",
-    audit: {
-      actionName: "workspace.settings.update"
-    },
-    observability: {},
     events: WORKSPACE_SETTINGS_CHANGED_EVENTS,
     async run(workspaceSettingsService, input, context) {
       const { workspaceSlug, ...patch } = input;

package/src/server/workspaceSettings/workspaceSettingsRepository.js

@@ -6,34 +6,12 @@ import {
   createJsonRestContext,
   extractJsonRestCollectionRows
 } from "@jskit-ai/json-rest-api-core/server/jsonRestApiHost";
+import { pickOwnProperties } from "@jskit-ai/kernel/shared/support";
+import { WORKSPACE_SETTINGS_FIELD_KEYS } from "../../shared/resources/workspaceSettingsResource.js";
 import { resolveWorkspaceThemePalettes } from "../../shared/settings.js";
 
-const WORKSPACE_SETTINGS_PATCH_FIELDS = Object.freeze([
-  "lightPrimaryColor",
-  "lightSecondaryColor",
-  "lightSurfaceColor",
-  "lightSurfaceVariantColor",
-  "darkPrimaryColor",
-  "darkSecondaryColor",
-  "darkSurfaceColor",
-  "darkSurfaceVariantColor",
-  "invitesEnabled"
-]);
-
-function pickPatchFields(source = {}) {
-  const patch = {};
-
-  for (const fieldName of WORKSPACE_SETTINGS_PATCH_FIELDS) {
-    if (Object.hasOwn(source, fieldName)) {
-      patch[fieldName] = source[fieldName];
-    }
-  }
-
-  return patch;
-}
-
-function createDefaultWorkspaceSettingsCreatePayload(workspaceId, defaultInvitesEnabled) {
-  const palettes = resolveWorkspaceThemePalettes({});
+function createDefaultWorkspaceSettingsCreatePayload(workspaceId, defaultInvitesEnabled, defaultColorSettings = {}) {
+  const palettes = resolveWorkspaceThemePalettes(defaultColorSettings);
 
   return {
     id: workspaceId,
@@ -49,7 +27,7 @@ function createDefaultWorkspaceSettingsCreatePayload(workspaceId, defaultInvites
   };
 }
 
-function createRepository({ api, defaultInvitesEnabled = true } = {}) {
+function createRepository({ api, defaultInvitesEnabled = true, defaultColorSettings = {} } = {}) {
   if (!api?.resources?.workspaceSettings) {
     throw new TypeError("workspaceSettingsRepository requires json-rest-api workspaceSettings resource.");
   }
@@ -95,7 +73,11 @@ function createRepository({ api, defaultInvitesEnabled = true } = {}) {
     try {
       await api.resources.workspaceSettings.post(
         {
-          data: createDefaultWorkspaceSettingsCreatePayload(normalizedWorkspaceId, defaultInvitesEnabled === true),
+          data: createDefaultWorkspaceSettingsCreatePayload(
+            normalizedWorkspaceId,
+            defaultInvitesEnabled === true,
+            defaultColorSettings
+          ),
           format: "plain",
           returning: "full",
           transaction: options?.trx || null
@@ -119,7 +101,7 @@ function createRepository({ api, defaultInvitesEnabled = true } = {}) {
 
     await ensureForWorkspaceId(normalizedWorkspaceId, options);
     const source = patch && typeof patch === "object" && !Array.isArray(patch) ? patch : {};
-    const updatePayload = pickPatchFields(source);
+    const updatePayload = pickOwnProperties(source, WORKSPACE_SETTINGS_FIELD_KEYS);
 
     if (Object.keys(updatePayload).length < 1) {
       return findByWorkspaceId(normalizedWorkspaceId, options);

package/src/shared/resources/workspaceSettingsResource.js

@@ -3,19 +3,14 @@ import { deepFreeze } from "@jskit-ai/kernel/shared/support/deepFreeze";
 import { RECORD_ID_PATTERN } from "@jskit-ai/kernel/shared/validators";
 import { defineCrudResource } from "@jskit-ai/resource-crud-core/shared/crudResource";
 import { workspaceRoleCatalogSchema } from "./workspaceRoleCatalogSchema.js";
-import { normalizeWorkspaceHexColor, DEFAULT_WORKSPACE_DARK_PALETTE, DEFAULT_WORKSPACE_LIGHT_PALETTE } from "../settings.js";
+import {
+  normalizeWorkspaceHexColor,
+  DEFAULT_WORKSPACE_DARK_PALETTE,
+  DEFAULT_WORKSPACE_LIGHT_PALETTE,
+  WORKSPACE_SETTINGS_COLOR_FIELDS
+} from "../settings.js";
 
-const WORKSPACE_SETTINGS_FIELD_KEYS = deepFreeze([
-  "lightPrimaryColor",
-  "lightSecondaryColor",
-  "lightSurfaceColor",
-  "lightSurfaceVariantColor",
-  "darkPrimaryColor",
-  "darkSecondaryColor",
-  "darkSurfaceColor",
-  "darkSurfaceVariantColor",
-  "invitesEnabled"
-]);
+const WORKSPACE_SETTINGS_FIELD_KEYS = deepFreeze([...WORKSPACE_SETTINGS_COLOR_FIELDS, "invitesEnabled"]);
 
 const workspaceSettingsBodySchema = createSchema({
   lightPrimaryColor: {

package/src/shared/settings.js

@@ -18,6 +18,17 @@ const DEFAULT_WORKSPACE_DARK_PALETTE = Object.freeze({
 
 const DEFAULT_WORKSPACE_COLOR = DEFAULT_WORKSPACE_LIGHT_PALETTE.color;
 
+const WORKSPACE_SETTINGS_COLOR_FIELDS = Object.freeze([
+  "lightPrimaryColor",
+  "lightSecondaryColor",
+  "lightSurfaceColor",
+  "lightSurfaceVariantColor",
+  "darkPrimaryColor",
+  "darkSecondaryColor",
+  "darkSurfaceColor",
+  "darkSurfaceVariantColor"
+]);
+
 function normalizeWorkspaceHexColor(value) {
   const normalized = String(value || "").trim();
   if (!HEX_COLOR_PATTERN.test(normalized)) {
@@ -113,6 +124,7 @@ export {
   normalizeWorkspaceThemeMode,
   resolveWorkspaceThemeDefaultPalette,
   resolveWorkspaceThemePalettes,
+  WORKSPACE_SETTINGS_COLOR_FIELDS,
   WORKSPACE_THEME_MODE_DARK,
   WORKSPACE_THEME_MODE_LIGHT,
   resolveWorkspaceThemePalette

package/src/shared/tenancyProfile.js

@@ -15,7 +15,8 @@ function resolveWorkspacePolicyOverrides(appConfig = {}) {
   const workspacePolicy = isRecord(tenancyPolicy.workspace) ? tenancyPolicy.workspace : {};
 
   return Object.freeze({
-    allowSelfCreate: typeof workspacePolicy.allowSelfCreate === "boolean" ? workspacePolicy.allowSelfCreate : null
+    allowSelfCreate: typeof workspacePolicy.allowSelfCreate === "boolean" ? workspacePolicy.allowSelfCreate : null,
+    autoProvision: typeof workspacePolicy.autoProvision === "boolean" ? workspacePolicy.autoProvision : null
   });
 }
 
@@ -40,7 +41,7 @@ function resolveWorkspacePolicy(mode, overrides = {}) {
 
   return Object.freeze({
     enabled: true,
-    autoProvision: false,
+    autoProvision: overrides.autoProvision === true,
     allowSelfCreate: overrides.allowSelfCreate === true,
     slugPolicy: WORKSPACE_SLUG_POLICY_USER_SELECTED
   });

package/test/featureRuntime.test.js

@@ -5,7 +5,7 @@ import { createActionProvider } from "@jskit-ai/kernel/server/actions";
 import { createCapabilityRuntime, defineProvider } from "@jskit-ai/kernel/shared/capabilities";
 import { createBootstrapRuntime } from "@jskit-ai/kernel/server/runtime";
 import { createUsersExtensions } from "@jskit-ai/users-core/server/usersExtensions";
-import { WorkspacesFeature } from "../src/server/WorkspacesFeature.js";
+import { WorkspacesFeature, createWorkspacesRuntime } from "../src/server/WorkspacesFeature.js";
 import { WorkspacesIntegrationsProvider } from "../src/server/WorkspacesIntegrationsProvider.js";
 
 function createJsonRestApiFixture() {
@@ -50,6 +50,7 @@ function runtimeConfig() {
 test("WorkspacesFeature assembles workspace behavior and explicit integrations", async () => {
   const routes = [];
   const visibilityResolvers = [];
+  const audienceContributors = [];
   const bootstrap = createBootstrapRuntime();
   const authExtensions = createAuthExtensions();
   const usersExtensions = createUsersExtensions();
@@ -86,6 +87,11 @@ test("WorkspacesFeature assembles workspace behavior and explicit integrations",
         }
       },
       "runtime.json-rest-api": jsonRestApi,
+      "runtime.realtime": {
+        registerAudienceContributor(contributor) {
+          audienceContributors.push(contributor);
+        }
+      },
       "users.core": {
         repositories: {
           userProfiles: { async findById() { return null; } }
@@ -117,4 +123,49 @@ test("WorkspacesFeature assembles workspace behavior and explicit integrations",
   assert.deepEqual(usersExtensions.diagnostics().profileSyncLifecycleContributorIds, ["workspaces.provisioning"]);
   assert.deepEqual(authExtensions.diagnostics().invitationContextResolverIds, ["workspaces.invitation"]);
   assert.deepEqual(authExtensions.diagnostics().policyContextResolverIds, ["workspaces.policy"]);
+  assert.deepEqual(audienceContributors.map((entry) => entry.id), ["workspaces.memberships"]);
+});
+
+test("workspace realtime audiences are the actor's active memberships", async () => {
+  const audienceContributors = [];
+  const noop = () => {};
+  WorkspacesIntegrationsProvider.setup({
+    actions: { registerContextContributor: noop },
+    authExtensions: { registerPolicyContextResolver: noop },
+    config: runtimeConfig(),
+    http: { registerVisibilityResolver: noop },
+    realtime: { registerAudienceContributor: (entry) => audienceContributors.push(entry) },
+    usersExtensions: { registerProfileSyncLifecycleContributor: noop },
+    workspaces: {
+      invitationsEnabled: false,
+      services: { directory: { async resolveWorkspaceContextForUserBySlug() { return null; } } },
+      repositories: {
+        workspaceMemberships: {
+          async listActiveWorkspaceIdsByUserId(userId) {
+            assert.equal(userId, "9");
+            return ["11", "12"];
+          }
+        }
+      }
+    }
+  });
+  assert.equal(audienceContributors.length, 1);
+  assert.deepEqual(await audienceContributors[0].resolveActorScopes("9"), [
+    { kind: "workspace", id: "11" },
+    { kind: "workspace_user", workspaceId: "11", userId: "9" },
+    { kind: "workspace", id: "12" },
+    { kind: "workspace_user", workspaceId: "12", userId: "9" }
+  ]);
+});
+
+test("workspace settings color defaults must be hex colors", () => {
+  const config = runtimeConfig();
+  config.workspaceSettings.defaults.lightPrimaryColor = "charcoal";
+  const jsonRestApi = createJsonRestApiFixture();
+  jsonRestApi.resources.workspaceSettings = {};
+
+  assert.throws(
+    () => createWorkspacesRuntime({ config, env: {}, jsonRestApi }),
+    /runtime\.config\.workspaceSettings\.defaults\.lightPrimaryColor must be a hex color/
+  );
 });

package/test/resourcesCanonical.test.js

@@ -3,7 +3,7 @@ import assert from "node:assert/strict";
 import path from "node:path";
 import { existsSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-import { resolveStructuredSchemaTransportSchema } from "@jskit-ai/kernel/shared/validators";
+import { resolveSchemaTransportSchemaDefinition } from "@jskit-ai/kernel/shared/validators";
 import { workspaceMembersResource } from "../src/shared/resources/workspaceMembersResource.js";
 import { workspacePendingInvitationsResource } from "../src/shared/resources/workspacePendingInvitationsResource.js";
 import { workspaceInvitesResource } from "../src/shared/resources/workspaceInvitesResource.js";
@@ -87,7 +87,7 @@ test("workspaces-core specialized resource operations expose messages and valida
   for (const { label, operation } of operationSpecs) {
     assert.equal(typeof operation?.messages, "object", `${label}.messages must be an object.`);
     assert.equal(
-      typeof resolveStructuredSchemaTransportSchema(operation?.output, {
+      typeof resolveSchemaTransportSchemaDefinition(operation?.output, {
         context: `${label}.output`,
         defaultMode: "replace"
       }),

package/test/tenancyProfile.test.js

@@ -65,3 +65,19 @@ test("resolveTenancyProfile allows explicit workspace self-create policy overrid
   assert.equal(workspaceProfile.mode, TENANCY_MODE_WORKSPACES);
   assert.equal(workspaceProfile.workspace.allowSelfCreate, true);
 });
+
+test("resolveTenancyProfile lets workspace mode opt into a personal workspace for every user", () => {
+  const tenancyPolicy = { workspace: { autoProvision: true } };
+  assert.equal(
+    resolveTenancyProfile({ tenancyMode: TENANCY_MODE_WORKSPACES, tenancyPolicy }).workspace.autoProvision,
+    true
+  );
+  assert.equal(resolveTenancyProfile({ tenancyMode: TENANCY_MODE_NONE, tenancyPolicy }).workspace.autoProvision, false);
+  assert.equal(
+    resolveTenancyProfile({
+      tenancyMode: TENANCY_MODE_PERSONAL,
+      tenancyPolicy: { workspace: { autoProvision: false } }
+    }).workspace.autoProvision,
+    true
+  );
+});

package/test/usersRouteResources.test.js

@@ -4,7 +4,7 @@ import path from "node:path";
 import { existsSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { deriveResourceRequiredMetadata } from "@jskit-ai/kernel/_testable";
-import { resolveStructuredSchemaTransportSchema } from "@jskit-ai/kernel/shared/validators";
+import { resolveSchemaTransportSchemaDefinition } from "@jskit-ai/kernel/shared/validators";
 import { workspaceMembersResource } from "../src/shared/resources/workspaceMembersResource.js";
 import { workspacePendingInvitationsResource } from "../src/shared/resources/workspacePendingInvitationsResource.js";
 import { workspaceResource } from "../src/shared/resources/workspaceResource.js";
@@ -29,7 +29,7 @@ function assertResourceShape(resource, label) {
       `${label}.operations.${operationName} must resolve messages from operation.messages or resource.messages.`
     );
     assert.equal(
-      typeof resolveStructuredSchemaTransportSchema(operation.output, {
+      typeof resolveSchemaTransportSchemaDefinition(operation.output, {
         context: `${label}.operations.${operationName}.output`,
         defaultMode: "replace"
       }),
@@ -76,7 +76,7 @@ test("workspace settings and invite operations expose canonical validators", ()
   for (const { label, operation } of operationSpecs) {
     assert.equal(typeof operation?.method, "string", `${label}.method must exist.`);
     assert.equal(
-      typeof resolveStructuredSchemaTransportSchema(operation?.output, {
+      typeof resolveSchemaTransportSchemaDefinition(operation?.output, {
         context: `${label}.output`,
         defaultMode: "replace"
       }),

package/test/workspaceInternalCrudResources.test.js

@@ -1,7 +1,7 @@
 import assert from "node:assert/strict";
 import test from "node:test";
 import { validateOperationSection } from "@jskit-ai/http-runtime/shared/validators/operationValidation";
-import { resolveStructuredSchemaTransportSchema } from "@jskit-ai/kernel/shared/validators";
+import { resolveSchemaTransportSchemaDefinition } from "@jskit-ai/kernel/shared/validators";
 import { workspaceInvitesResource } from "../src/shared/resources/workspaceInvitesResource.js";
 import { workspaceMembershipsResource } from "../src/shared/resources/workspaceMembershipsResource.js";
 
@@ -24,7 +24,7 @@ test("workspace internal CRUD resources expose canonical derived operation sets"
     assert.equal(typeof resource.operations.create.body?.schema, "object", `${label}.operations.create.body.schema is required.`);
     assert.equal(typeof resource.operations.patch.body?.schema, "object", `${label}.operations.patch.body.schema is required.`);
     assert.equal(
-      typeof resolveStructuredSchemaTransportSchema(resource.operations.view.output, {
+      typeof resolveSchemaTransportSchemaDefinition(resource.operations.view.output, {
         context: `${label}.operations.view.output`,
         defaultMode: "replace"
       }),

package/test/workspaceMembersResource.test.js

@@ -1,10 +1,10 @@
 import test from "node:test";
 import assert from "node:assert/strict";
-import { resolveStructuredSchemaTransportSchema } from "@jskit-ai/kernel/shared/validators";
+import { resolveSchemaTransportSchemaDefinition } from "@jskit-ai/kernel/shared/validators";
 import { workspaceMembersResource } from "../src/shared/resources/workspaceMembersResource.js";
 
 function resolveOutputSchema(operationName) {
-  return resolveStructuredSchemaTransportSchema(workspaceMembersResource.operations[operationName].output, {
+  return resolveSchemaTransportSchemaDefinition(workspaceMembersResource.operations[operationName].output, {
     context: `workspaceMembers.${operationName}.output`,
     defaultMode: "replace"
   });

package/test/workspacePendingInvitationsResource.test.js

@@ -1,10 +1,10 @@
 import test from "node:test";
 import assert from "node:assert/strict";
-import { resolveStructuredSchemaTransportSchema } from "@jskit-ai/kernel/shared/validators";
+import { resolveSchemaTransportSchemaDefinition } from "@jskit-ai/kernel/shared/validators";
 import { workspacePendingInvitationsResource } from "../src/shared/resources/workspacePendingInvitationsResource.js";
 
 test("workspacePendingInvitationsResource output schema accepts already-shaped invite payloads", () => {
-  const outputSchema = resolveStructuredSchemaTransportSchema(workspacePendingInvitationsResource.operations.list.output, {
+  const outputSchema = resolveSchemaTransportSchemaDefinition(workspacePendingInvitationsResource.operations.list.output, {
     context: "workspacePendingInvitations.list.output",
     defaultMode: "replace"
   });
@@ -33,11 +33,11 @@ test("workspacePendingInvitationsResource output schema accepts already-shaped i
 });
 
 test("workspacePendingInvitationsResource exposes public resolve query and terminal statuses", () => {
-  const querySchema = resolveStructuredSchemaTransportSchema(workspacePendingInvitationsResource.operations.resolve.query, {
+  const querySchema = resolveSchemaTransportSchemaDefinition(workspacePendingInvitationsResource.operations.resolve.query, {
     context: "workspacePendingInvitations.resolve.query",
     defaultMode: "replace"
   });
-  const outputSchema = resolveStructuredSchemaTransportSchema(workspacePendingInvitationsResource.operations.resolve.output, {
+  const outputSchema = resolveSchemaTransportSchemaDefinition(workspacePendingInvitationsResource.operations.resolve.output, {
     context: "workspacePendingInvitations.resolve.output",
     defaultMode: "replace"
   });

package/test/workspaceService.test.js

@@ -27,6 +27,7 @@ function createWorkspaceServiceFixture({
   additionalWorkspaces = [],
   userWorkspaceRows = null,
   membershipResolver = null,
+  personalWorkspaceName = undefined,
   personalWorkspace = {
     id: "1",
     slug: "tonymobily3",
@@ -72,6 +73,7 @@ function createWorkspaceServiceFixture({
     appConfig: {
       tenancyMode,
       tenancyPolicy,
+      personalWorkspaceName,
       roleCatalog: roleCatalog && typeof roleCatalog === "object" ? { ...roleCatalog } : roleCatalog
     },
     workspacesRepository: {
@@ -278,6 +280,32 @@ test("workspaceService.ensureProvisionedWorkspaceForAuthenticatedUser provisions
   assert.equal(calls.ensureOwnerMembership, 1);
   assert.equal(calls.ensureWorkspaceSettings, 1);
   assert.equal(insertedPayloads[0].isPersonal, true);
+  assert.equal(insertedPayloads[0].name, "Chiara's Workspace");
+});
+
+test("workspaceService.ensureProvisionedWorkspaceForAuthenticatedUser provisions a named personal workspace when workspace tenancy opts in", async () => {
+  const { service, calls, insertedPayloads } = createWorkspaceServiceFixture({
+    tenancyMode: "workspaces",
+    tenancyPolicy: {
+      workspace: {
+        autoProvision: true
+      }
+    },
+    personalWorkspaceName: (user) => `${user.displayName}'s home`,
+    personalWorkspace: null
+  });
+
+  const workspace = await service.ensureProvisionedWorkspaceForAuthenticatedUser({
+    id: "7",
+    email: "chiaramobily@gmail.com",
+    displayName: "Chiara"
+  });
+
+  assert.equal(Number(workspace.ownerUserId), 7);
+  assert.equal(calls.insert, 1);
+  assert.equal(calls.ensureOwnerMembership, 1);
+  assert.equal(insertedPayloads[0].isPersonal, true);
+  assert.equal(insertedPayloads[0].name, "Chiara's home");
 });
 
 test("workspaceService.ensureProvisionedWorkspaceForAuthenticatedUser reuses the existing personal workspace in personal tenancy", async () => {

package/test/workspaceSettingsRepository.test.js

@@ -181,6 +181,25 @@ test("workspaceSettingsRepository.ensureForWorkspaceId delegates defaults to the
   assert.equal(record.id, "5");
 });
 
+test("workspaceSettingsRepository.ensureForWorkspaceId starts new workspaces from the app's default colors", async () => {
+  const { api, state, DEFAULT_WORKSPACE_THEME } = createWorkspaceSettingsApiStub();
+  state.row = null;
+  const repository = createRepository({
+    api,
+    defaultColorSettings: {
+      lightPrimaryColor: "#1C1C1C",
+      darkPrimaryColor: "#F5F5F5"
+    }
+  });
+
+  await repository.ensureForWorkspaceId("5");
+
+  assert.equal(state.postPayload.data.lightPrimaryColor, "#1C1C1C");
+  assert.equal(state.postPayload.data.darkPrimaryColor, "#F5F5F5");
+  assert.equal(state.postPayload.data.lightSecondaryColor, DEFAULT_WORKSPACE_THEME.light.secondaryColor);
+  assert.equal(state.postPayload.data.darkSurfaceColor, DEFAULT_WORKSPACE_THEME.dark.surfaceColor);
+});
+
 test("workspaceSettingsRepository.updateSettingsByWorkspaceId updates workspace settings fields", async () => {
   const { api, state } = createWorkspaceSettingsApiStub();
   const repository = createRepository({

package/test/workspaceSettingsResource.test.js

@@ -1,7 +1,7 @@
 import test from "node:test";
 import assert from "node:assert/strict";
 import { validateOperationSection } from "@jskit-ai/http-runtime/shared/validators/operationValidation";
-import { resolveStructuredSchemaTransportSchema } from "@jskit-ai/kernel/shared/validators";
+import { resolveSchemaTransportSchemaDefinition } from "@jskit-ai/kernel/shared/validators";
 import { resolveWorkspaceThemePalettes } from "@jskit-ai/workspaces-core/shared/settings";
 import {
   WORKSPACE_SETTINGS_FIELD_KEYS,
@@ -102,7 +102,7 @@ test("workspace settings create body requires full-write fields", async () => {
 });
 
 test("workspace settings output schema accepts already-shaped service payloads", () => {
-  const outputSchema = resolveStructuredSchemaTransportSchema(workspaceSettingsResource.operations.view.output, {
+  const outputSchema = resolveSchemaTransportSchemaDefinition(workspaceSettingsResource.operations.view.output, {
     context: "workspaceSettings.view.output",
     defaultMode: "replace"
   });