@shipfox/api-workspaces 11.0.0 → 12.0.0

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
 $ shipfox-swc
-Successfully compiled: 52 files with swc (485.39ms)
+Successfully compiled: 58 files with swc (398.24ms)

package/CHANGELOG.md

@@ -1,5 +1,39 @@
 # @shipfox/api-workspaces
 
+## 12.0.0
+
+### Minor Changes
+
+- 9ebc5b4: Add an authenticated, rate-limited workspace slug availability endpoint.
+- e1efaee: Add workspace slugs across the API and client workspace contracts.
+
+### Patch Changes
+
+- f78740d: Remove Unicode dash punctuation from package prose and source comments.
+- Updated dependencies [f78740d]
+- Updated dependencies [94aba88]
+- Updated dependencies [4eb18b8]
+- Updated dependencies [f13e8bb]
+- Updated dependencies [9ebc5b4]
+- Updated dependencies [8cc5a36]
+- Updated dependencies [34a5639]
+- Updated dependencies [032d316]
+- Updated dependencies [cb0abfa]
+- Updated dependencies [e1efaee]
+  - @shipfox/api-auth-dto@12.0.0
+  - @shipfox/api-common-dto@12.0.0
+  - @shipfox/inter-module@0.2.3
+  - @shipfox/node-fastify@0.4.1
+  - @shipfox/node-module@1.0.5
+  - @shipfox/api-workspaces-dto@12.0.0
+  - @shipfox/api-projects-dto@12.0.0
+  - @shipfox/node-postgres@0.5.0
+  - @shipfox/node-rate-limit@0.4.0
+  - @shipfox/api-auth-context@12.0.0
+  - @shipfox/api-runners-dto@12.0.0
+  - @shipfox/node-drizzle@0.3.5
+  - @shipfox/node-outbox@0.2.6
+
 ## 11.0.0
 
 ### Major Changes

package/README.md

@@ -9,7 +9,7 @@ Shipfox API Workspaces manages who can use a workspace and send or accept invite
 - **Invitation helpers**: Make, view, accept, list, and revoke invites.
 - **Workspace helpers**: Read workspaces and check a signed-in user's access.
 
-## Installation / Setup
+## Installation and setup
 
 ```sh
 pnpm add @shipfox/api-workspaces
@@ -38,13 +38,19 @@ const membership = await ensureMembership({
 | Variable | Default | Purpose |
 | --- | --- | --- |
 | `CLIENT_BASE_URL` | `http://localhost:5173` | Base URL used in workspace invitation links. |
+| `AUTH_ROOT_KEY` | none | Root key used to HMAC source IPs for the workspace slug availability rate limit. |
 
 Invitation email uses the shared `@shipfox/node-mailer` configuration.
 
 ## Routes / API / Data Model
 
-Routes mount under `/workspaces`. They make and list workspaces, manage members,
-and make, list, view, accept, or revoke invites. The composed module also mounts
+Routes mount under `/workspaces`. They make, list, and update workspaces, check
+workspace slug availability, manage members, and make, list, view, accept, or
+revoke invites. Every workspace has a unique `slug` used in client URLs;
+creating a workspace requires one, and `PATCH /workspaces/:workspaceId` can
+rename it. A taken slug returns `slug-conflict`. Updates write a
+`workspaces.workspace.updated` outbox event.
+The composed module also mounts
 `GET /admin/workspaces`, which requires the Auth `admin-observer` role and returns
 bounded workspace identity, lifecycle, member, project, and best-effort job-count
 summaries. Supporting count failures are represented as `unknown`. `POST
@@ -54,6 +60,18 @@ summaries. Supporting count failures are represented as `unknown`. `POST
 status, correlation_id}`. Both write a redacted `administration.action.performed`
 outbox event and record their result for idempotent retries.
 
+Workspace identity fields are:
+
+| Field | Constraint | Use |
+| --- | --- | --- |
+| `id` | UUID, stable | API resource identity and foreign references |
+| `name` | Required display text | Workspace label |
+| `slug` | Required, globally unique resource slug | Client navigation and display |
+
+The API keeps `id` in resource path parameters. `slug` is accepted on create and
+update, and a duplicate returns `409 slug-conflict`. A slug change frees the old
+value immediately. No API resource route resolves a workspace from its slug.
+
 The module creates these tables:
 
 - `workspaces`
@@ -61,8 +79,9 @@ The module creates these tables:
 - `workspaces_invitations`
 - `workspaces_outbox`
 - `workspaces_admin_command_results`
+- `workspaces_rate_limits`
 
-## Behavior Notes
+## Behavior notes
 
 `ensureMembership` uses a unique database rule to keep one row for `user_id`
 and `workspace_id`. Calls at the same time get the same row. It saves the email
@@ -72,6 +91,10 @@ counts only new rows.
 Invite acceptance keeps its current transaction. It does not change a row that
 is already there.
 
+`GET /workspaces/slug-availability?slug=acme` requires an authenticated user and
+returns only `{available: boolean}`. A malformed slug returns 400. Requests are
+limited to 60 per source IP in a five-minute window.
+
 `ensureMembership` fails when its workspace does not exist. Workspace checks
 throw `WorkspaceNotFoundError` or `MembershipRequiredError`. Invite helpers
 throw their exported token and email mismatch errors when an invite cannot be

package/dist/core/entities/workspace.d.ts

@@ -2,6 +2,7 @@ export type WorkspaceStatus = 'active' | 'suspended' | 'deleted';
 export interface Workspace {
     id: string;
     name: string;
+    slug: string;
     status: WorkspaceStatus;
     settings: Record<string, unknown>;
     createdBy: string | null;

package/dist/core/entities/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../../src/core/entities/workspace.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../../src/core/entities/workspace.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/dist/core/entities/workspace.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/core/entities/workspace.ts"],"sourcesContent":["export type WorkspaceStatus = 'active' | 'suspended' | 'deleted';\n\nexport interface Workspace {\n  id: string;\n  name: string;\n  status: WorkspaceStatus;\n  settings: Record<string, unknown>;\n  createdBy: string | null;\n  createdAt: Date;\n  updatedAt: Date;\n}\n"],"names":[],"mappings":"AAEA,WAQC"}
+{"version":3,"sources":["../../../src/core/entities/workspace.ts"],"sourcesContent":["export type WorkspaceStatus = 'active' | 'suspended' | 'deleted';\n\nexport interface Workspace {\n  id: string;\n  name: string;\n  slug: string;\n  status: WorkspaceStatus;\n  settings: Record<string, unknown>;\n  createdBy: string | null;\n  createdAt: Date;\n  updatedAt: Date;\n}\n"],"names":[],"mappings":"AAEA,WASC"}

package/dist/core/errors.d.ts

@@ -1,6 +1,9 @@
 export declare class WorkspaceNotFoundError extends Error {
     constructor(workspaceId: string);
 }
+export declare class WorkspaceSlugConflictError extends Error {
+    constructor(slug: string);
+}
 export declare class WorkspaceInactiveError extends Error {
     constructor(workspaceId: string);
 }

package/dist/core/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,sCAAuC,SAAQ,KAAK;;CAKhE;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,EAAE,EAAE,MAAM;CAIvB;AAED,qBAAa,gCAAiC,SAAQ,KAAK;;CAK1D;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAIhD;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,SAAS,EAAE,MAAM;CAI9B;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,KAAK,EAAE,MAAM;CAI1B;AAED,qBAAa,uBAAwB,SAAQ,KAAK;;CAKjD;AAED,qBAAa,qBAAsB,SAAQ,KAAK;;CAK/C;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,MAAM,CAAC,EAAE,MAAM;CAI5B;AAED,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED,qBAAa,qBAAsB,SAAQ,KAAK;;CAK/C;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,0BAA2B,SAAQ,KAAK;;CAKpD;AAED,qBAAa,4BAA6B,SAAQ,KAAK;;CAKtD;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,KAAK,EAAE,MAAM;CAI1B"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,IAAI,EAAE,MAAM;CAIzB;AAED,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,sCAAuC,SAAQ,KAAK;;CAKhE;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,EAAE,EAAE,MAAM;CAIvB;AAED,qBAAa,gCAAiC,SAAQ,KAAK;;CAK1D;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAIhD;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,SAAS,EAAE,MAAM;CAI9B;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,KAAK,EAAE,MAAM;CAI1B;AAED,qBAAa,uBAAwB,SAAQ,KAAK;;CAKjD;AAED,qBAAa,qBAAsB,SAAQ,KAAK;;CAK/C;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,MAAM,CAAC,EAAE,MAAM;CAI5B;AAED,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED,qBAAa,qBAAsB,SAAQ,KAAK;;CAK/C;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,WAAW,EAAE,MAAM;CAIhC;AAED,qBAAa,0BAA2B,SAAQ,KAAK;;CAKpD;AAED,qBAAa,4BAA6B,SAAQ,KAAK;;CAKtD;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,KAAK,EAAE,MAAM;CAI1B"}

package/dist/core/errors.js

@@ -4,6 +4,12 @@ export class WorkspaceNotFoundError extends Error {
         this.name = 'WorkspaceNotFoundError';
     }
 }
+export class WorkspaceSlugConflictError extends Error {
+    constructor(slug){
+        super(`Workspace slug is already taken: ${slug}`);
+        this.name = 'WorkspaceSlugConflictError';
+    }
+}
 export class WorkspaceInactiveError extends Error {
     constructor(workspaceId){
         super(`Workspace is not active: ${workspaceId}`);

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/errors.ts"],"sourcesContent":["export class WorkspaceNotFoundError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace not found: ${workspaceId}`);\n    this.name = 'WorkspaceNotFoundError';\n  }\n}\n\nexport class WorkspaceInactiveError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace is not active: ${workspaceId}`);\n    this.name = 'WorkspaceInactiveError';\n  }\n}\n\nexport class WorkspaceAlreadySuspendedError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace is already suspended: ${workspaceId}`);\n    this.name = 'WorkspaceAlreadySuspendedError';\n  }\n}\n\nexport class WorkspaceNotSuspendedError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace is not suspended: ${workspaceId}`);\n    this.name = 'WorkspaceNotSuspendedError';\n  }\n}\n\nexport class WorkspaceDeletedError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace is deleted: ${workspaceId}`);\n    this.name = 'WorkspaceDeletedError';\n  }\n}\n\nexport class WorkspaceAdminIdempotencyKeyReuseError extends Error {\n  constructor() {\n    super('Idempotency key was already used for a different workspace command');\n    this.name = 'WorkspaceAdminIdempotencyKeyReuseError';\n  }\n}\n\nexport class InvitationNotFoundError extends Error {\n  constructor(id: string) {\n    super(`Invitation not found: ${id}`);\n    this.name = 'InvitationNotFoundError';\n  }\n}\n\nexport class InvitationWorkspaceMismatchError extends Error {\n  constructor() {\n    super('Invitation does not belong to this workspace');\n    this.name = 'InvitationWorkspaceMismatchError';\n  }\n}\n\nexport class MembershipNotFoundError extends Error {\n  constructor(userId: string, workspaceId: string) {\n    super(`Membership not found for user ${userId} in workspace ${workspaceId}`);\n    this.name = 'MembershipNotFoundError';\n  }\n}\n\nexport class UserNotFoundError extends Error {\n  constructor(idOrEmail: string) {\n    super(`User not found: ${idOrEmail}`);\n    this.name = 'UserNotFoundError';\n  }\n}\n\nexport class EmailTakenError extends Error {\n  constructor(email: string) {\n    super(`Email already registered: ${email}`);\n    this.name = 'EmailTakenError';\n  }\n}\n\nexport class InvalidCredentialsError extends Error {\n  constructor() {\n    super('Invalid credentials');\n    this.name = 'InvalidCredentialsError';\n  }\n}\n\nexport class EmailNotVerifiedError extends Error {\n  constructor() {\n    super('Email not verified');\n    this.name = 'EmailNotVerifiedError';\n  }\n}\n\nexport class TokenInvalidError extends Error {\n  constructor(reason?: string) {\n    super(reason ? `Invalid token: ${reason}` : 'Invalid token');\n    this.name = 'TokenInvalidError';\n  }\n}\n\nexport class TokenExpiredError extends Error {\n  constructor() {\n    super('Token has expired');\n    this.name = 'TokenExpiredError';\n  }\n}\n\nexport class TokenAlreadyUsedError extends Error {\n  constructor() {\n    super('Token has already been used');\n    this.name = 'TokenAlreadyUsedError';\n  }\n}\n\nexport class MembershipRequiredError extends Error {\n  constructor(workspaceId: string) {\n    super(`Membership required for workspace: ${workspaceId}`);\n    this.name = 'MembershipRequiredError';\n  }\n}\n\nexport class LastMemberError extends Error {\n  constructor(workspaceId: string) {\n    super(`Cannot remove the last member of workspace: ${workspaceId}`);\n    this.name = 'LastMemberError';\n  }\n}\n\nexport class SelfRemovalNotAllowedError extends Error {\n  constructor() {\n    super('Cannot remove yourself from a workspace');\n    this.name = 'SelfRemovalNotAllowedError';\n  }\n}\n\nexport class InvitationEmailMismatchError extends Error {\n  constructor() {\n    super('Invitation email does not match authenticated user');\n    this.name = 'InvitationEmailMismatchError';\n  }\n}\n\nexport class OpenInvitationExistsError extends Error {\n  constructor(email: string) {\n    super(`An open invitation already exists for: ${email}`);\n    this.name = 'OpenInvitationExistsError';\n  }\n}\n"],"names":["WorkspaceNotFoundError","Error","workspaceId","name","WorkspaceInactiveError","WorkspaceAlreadySuspendedError","WorkspaceNotSuspendedError","WorkspaceDeletedError","WorkspaceAdminIdempotencyKeyReuseError","InvitationNotFoundError","id","InvitationWorkspaceMismatchError","MembershipNotFoundError","userId","UserNotFoundError","idOrEmail","EmailTakenError","email","InvalidCredentialsError","EmailNotVerifiedError","TokenInvalidError","reason","TokenExpiredError","TokenAlreadyUsedError","MembershipRequiredError","LastMemberError","SelfRemovalNotAllowedError","InvitationEmailMismatchError","OpenInvitationExistsError"],"mappings":"AAAA,OAAO,MAAMA,+BAA+BC;IAC1C,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,qBAAqB,EAAEA,aAAa;QAC3C,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,+BAA+BH;IAC1C,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,yBAAyB,EAAEA,aAAa;QAC/C,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAME,uCAAuCJ;IAClD,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,gCAAgC,EAAEA,aAAa;QACtD,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMG,mCAAmCL;IAC9C,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,4BAA4B,EAAEA,aAAa;QAClD,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMI,8BAA8BN;IACzC,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,sBAAsB,EAAEA,aAAa;QAC5C,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMK,+CAA+CP;IAC1D,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMM,gCAAgCR;IAC3C,YAAYS,EAAU,CAAE;QACtB,KAAK,CAAC,CAAC,sBAAsB,EAAEA,IAAI;QACnC,IAAI,CAACP,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMQ,yCAAyCV;IACpD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMS,gCAAgCX;IAC3C,YAAYY,MAAc,EAAEX,WAAmB,CAAE;QAC/C,KAAK,CAAC,CAAC,8BAA8B,EAAEW,OAAO,cAAc,EAAEX,aAAa;QAC3E,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMW,0BAA0Bb;IACrC,YAAYc,SAAiB,CAAE;QAC7B,KAAK,CAAC,CAAC,gBAAgB,EAAEA,WAAW;QACpC,IAAI,CAACZ,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMa,wBAAwBf;IACnC,YAAYgB,KAAa,CAAE;QACzB,KAAK,CAAC,CAAC,0BAA0B,EAAEA,OAAO;QAC1C,IAAI,CAACd,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMe,gCAAgCjB;IAC3C,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMgB,8BAA8BlB;IACzC,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMiB,0BAA0BnB;IACrC,YAAYoB,MAAe,CAAE;QAC3B,KAAK,CAACA,SAAS,CAAC,eAAe,EAAEA,QAAQ,GAAG;QAC5C,IAAI,CAAClB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMmB,0BAA0BrB;IACrC,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMoB,8BAA8BtB;IACzC,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMqB,gCAAgCvB;IAC3C,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,mCAAmC,EAAEA,aAAa;QACzD,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMsB,wBAAwBxB;IACnC,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,4CAA4C,EAAEA,aAAa;QAClE,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMuB,mCAAmCzB;IAC9C,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMwB,qCAAqC1B;IAChD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMyB,kCAAkC3B;IAC7C,YAAYgB,KAAa,CAAE;QACzB,KAAK,CAAC,CAAC,uCAAuC,EAAEA,OAAO;QACvD,IAAI,CAACd,IAAI,GAAG;IACd;AACF"}
+{"version":3,"sources":["../../src/core/errors.ts"],"sourcesContent":["export class WorkspaceNotFoundError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace not found: ${workspaceId}`);\n    this.name = 'WorkspaceNotFoundError';\n  }\n}\n\nexport class WorkspaceSlugConflictError extends Error {\n  constructor(slug: string) {\n    super(`Workspace slug is already taken: ${slug}`);\n    this.name = 'WorkspaceSlugConflictError';\n  }\n}\n\nexport class WorkspaceInactiveError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace is not active: ${workspaceId}`);\n    this.name = 'WorkspaceInactiveError';\n  }\n}\n\nexport class WorkspaceAlreadySuspendedError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace is already suspended: ${workspaceId}`);\n    this.name = 'WorkspaceAlreadySuspendedError';\n  }\n}\n\nexport class WorkspaceNotSuspendedError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace is not suspended: ${workspaceId}`);\n    this.name = 'WorkspaceNotSuspendedError';\n  }\n}\n\nexport class WorkspaceDeletedError extends Error {\n  constructor(workspaceId: string) {\n    super(`Workspace is deleted: ${workspaceId}`);\n    this.name = 'WorkspaceDeletedError';\n  }\n}\n\nexport class WorkspaceAdminIdempotencyKeyReuseError extends Error {\n  constructor() {\n    super('Idempotency key was already used for a different workspace command');\n    this.name = 'WorkspaceAdminIdempotencyKeyReuseError';\n  }\n}\n\nexport class InvitationNotFoundError extends Error {\n  constructor(id: string) {\n    super(`Invitation not found: ${id}`);\n    this.name = 'InvitationNotFoundError';\n  }\n}\n\nexport class InvitationWorkspaceMismatchError extends Error {\n  constructor() {\n    super('Invitation does not belong to this workspace');\n    this.name = 'InvitationWorkspaceMismatchError';\n  }\n}\n\nexport class MembershipNotFoundError extends Error {\n  constructor(userId: string, workspaceId: string) {\n    super(`Membership not found for user ${userId} in workspace ${workspaceId}`);\n    this.name = 'MembershipNotFoundError';\n  }\n}\n\nexport class UserNotFoundError extends Error {\n  constructor(idOrEmail: string) {\n    super(`User not found: ${idOrEmail}`);\n    this.name = 'UserNotFoundError';\n  }\n}\n\nexport class EmailTakenError extends Error {\n  constructor(email: string) {\n    super(`Email already registered: ${email}`);\n    this.name = 'EmailTakenError';\n  }\n}\n\nexport class InvalidCredentialsError extends Error {\n  constructor() {\n    super('Invalid credentials');\n    this.name = 'InvalidCredentialsError';\n  }\n}\n\nexport class EmailNotVerifiedError extends Error {\n  constructor() {\n    super('Email not verified');\n    this.name = 'EmailNotVerifiedError';\n  }\n}\n\nexport class TokenInvalidError extends Error {\n  constructor(reason?: string) {\n    super(reason ? `Invalid token: ${reason}` : 'Invalid token');\n    this.name = 'TokenInvalidError';\n  }\n}\n\nexport class TokenExpiredError extends Error {\n  constructor() {\n    super('Token has expired');\n    this.name = 'TokenExpiredError';\n  }\n}\n\nexport class TokenAlreadyUsedError extends Error {\n  constructor() {\n    super('Token has already been used');\n    this.name = 'TokenAlreadyUsedError';\n  }\n}\n\nexport class MembershipRequiredError extends Error {\n  constructor(workspaceId: string) {\n    super(`Membership required for workspace: ${workspaceId}`);\n    this.name = 'MembershipRequiredError';\n  }\n}\n\nexport class LastMemberError extends Error {\n  constructor(workspaceId: string) {\n    super(`Cannot remove the last member of workspace: ${workspaceId}`);\n    this.name = 'LastMemberError';\n  }\n}\n\nexport class SelfRemovalNotAllowedError extends Error {\n  constructor() {\n    super('Cannot remove yourself from a workspace');\n    this.name = 'SelfRemovalNotAllowedError';\n  }\n}\n\nexport class InvitationEmailMismatchError extends Error {\n  constructor() {\n    super('Invitation email does not match authenticated user');\n    this.name = 'InvitationEmailMismatchError';\n  }\n}\n\nexport class OpenInvitationExistsError extends Error {\n  constructor(email: string) {\n    super(`An open invitation already exists for: ${email}`);\n    this.name = 'OpenInvitationExistsError';\n  }\n}\n"],"names":["WorkspaceNotFoundError","Error","workspaceId","name","WorkspaceSlugConflictError","slug","WorkspaceInactiveError","WorkspaceAlreadySuspendedError","WorkspaceNotSuspendedError","WorkspaceDeletedError","WorkspaceAdminIdempotencyKeyReuseError","InvitationNotFoundError","id","InvitationWorkspaceMismatchError","MembershipNotFoundError","userId","UserNotFoundError","idOrEmail","EmailTakenError","email","InvalidCredentialsError","EmailNotVerifiedError","TokenInvalidError","reason","TokenExpiredError","TokenAlreadyUsedError","MembershipRequiredError","LastMemberError","SelfRemovalNotAllowedError","InvitationEmailMismatchError","OpenInvitationExistsError"],"mappings":"AAAA,OAAO,MAAMA,+BAA+BC;IAC1C,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,qBAAqB,EAAEA,aAAa;QAC3C,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,mCAAmCH;IAC9C,YAAYI,IAAY,CAAE;QACxB,KAAK,CAAC,CAAC,iCAAiC,EAAEA,MAAM;QAChD,IAAI,CAACF,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMG,+BAA+BL;IAC1C,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,yBAAyB,EAAEA,aAAa;QAC/C,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMI,uCAAuCN;IAClD,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,gCAAgC,EAAEA,aAAa;QACtD,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMK,mCAAmCP;IAC9C,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,4BAA4B,EAAEA,aAAa;QAClD,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMM,8BAA8BR;IACzC,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,sBAAsB,EAAEA,aAAa;QAC5C,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMO,+CAA+CT;IAC1D,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMQ,gCAAgCV;IAC3C,YAAYW,EAAU,CAAE;QACtB,KAAK,CAAC,CAAC,sBAAsB,EAAEA,IAAI;QACnC,IAAI,CAACT,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMU,yCAAyCZ;IACpD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMW,gCAAgCb;IAC3C,YAAYc,MAAc,EAAEb,WAAmB,CAAE;QAC/C,KAAK,CAAC,CAAC,8BAA8B,EAAEa,OAAO,cAAc,EAAEb,aAAa;QAC3E,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMa,0BAA0Bf;IACrC,YAAYgB,SAAiB,CAAE;QAC7B,KAAK,CAAC,CAAC,gBAAgB,EAAEA,WAAW;QACpC,IAAI,CAACd,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMe,wBAAwBjB;IACnC,YAAYkB,KAAa,CAAE;QACzB,KAAK,CAAC,CAAC,0BAA0B,EAAEA,OAAO;QAC1C,IAAI,CAAChB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMiB,gCAAgCnB;IAC3C,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMkB,8BAA8BpB;IACzC,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMmB,0BAA0BrB;IACrC,YAAYsB,MAAe,CAAE;QAC3B,KAAK,CAACA,SAAS,CAAC,eAAe,EAAEA,QAAQ,GAAG;QAC5C,IAAI,CAACpB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMqB,0BAA0BvB;IACrC,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMsB,8BAA8BxB;IACzC,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMuB,gCAAgCzB;IAC3C,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,mCAAmC,EAAEA,aAAa;QACzD,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMwB,wBAAwB1B;IACnC,YAAYC,WAAmB,CAAE;QAC/B,KAAK,CAAC,CAAC,4CAA4C,EAAEA,aAAa;QAClE,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMyB,mCAAmC3B;IAC9C,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAM0B,qCAAqC5B;IAChD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAM2B,kCAAkC7B;IAC7C,YAAYkB,KAAa,CAAE;QACzB,KAAK,CAAC,CAAC,uCAAuC,EAAEA,OAAO;QACvD,IAAI,CAAChB,IAAI,GAAG;IACd;AACF"}

package/dist/core/index.d.ts

@@ -2,8 +2,8 @@ export { type ListWorkspaceAdministratorSummariesParams, type ListWorkspaceAdmin
 export type { Invitation } from './entities/invitation.js';
 export type { Membership } from './entities/membership.js';
 export type { Workspace, WorkspaceStatus } from './entities/workspace.js';
-export { InvitationEmailMismatchError, InvitationNotFoundError, InvitationWorkspaceMismatchError, LastMemberError, MembershipNotFoundError, MembershipRequiredError, OpenInvitationExistsError, SelfRemovalNotAllowedError, TokenAlreadyUsedError, TokenExpiredError, WorkspaceAdminIdempotencyKeyReuseError, WorkspaceAlreadySuspendedError, WorkspaceDeletedError, WorkspaceNotFoundError, WorkspaceNotSuspendedError, } from './errors.js';
+export { InvitationEmailMismatchError, InvitationNotFoundError, InvitationWorkspaceMismatchError, LastMemberError, MembershipNotFoundError, MembershipRequiredError, OpenInvitationExistsError, SelfRemovalNotAllowedError, TokenAlreadyUsedError, TokenExpiredError, WorkspaceAdminIdempotencyKeyReuseError, WorkspaceAlreadySuspendedError, WorkspaceDeletedError, WorkspaceNotFoundError, WorkspaceNotSuspendedError, WorkspaceSlugConflictError, } from './errors.js';
 export { acceptWorkspaceInvitation, createWorkspaceInvitation, listWorkspaceInvitations, type PreviewInvitationResult, previewInvitation, revokeWorkspaceInvitation, } from './invitations.js';
 export { type EnsureMembershipParams, ensureMembership } from './memberships.js';
-export { createWorkspaceForUser, getWorkspace, listUserWorkspaceMemberships, listWorkspaceMembers, type RequireWorkspaceMembershipParams, type RequireWorkspaceMembershipResult, removeWorkspaceMember, requireWorkspaceMembership, } from './workspaces.js';
+export { checkWorkspaceSlugAvailability, createWorkspaceForUser, getWorkspace, listUserWorkspaceMemberships, listWorkspaceMembers, type RequireWorkspaceMembershipParams, type RequireWorkspaceMembershipResult, removeWorkspaceMember, requireWorkspaceMembership, updateWorkspaceDetails, } from './workspaces.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,yCAAyC,EAC9C,KAAK,yCAAyC,EAC9C,mCAAmC,EACnC,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC1C,KAAK,6BAA6B,GACnC,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AACzD,YAAY,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AACzD,YAAY,EAAC,SAAS,EAAE,eAAe,EAAC,MAAM,yBAAyB,CAAC;AACxE,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,gCAAgC,EAChC,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,sCAAsC,EACtC,8BAA8B,EAC9B,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,KAAK,sBAAsB,EAAE,gBAAgB,EAAC,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EACL,sBAAsB,EACtB,YAAY,EACZ,4BAA4B,EAC5B,oBAAoB,EACpB,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,yCAAyC,EAC9C,KAAK,yCAAyC,EAC9C,mCAAmC,EACnC,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,sCAAsC,EAC3C,KAAK,qCAAqC,EAC1C,KAAK,6BAA6B,GACnC,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AACzD,YAAY,EAAC,UAAU,EAAC,MAAM,0BAA0B,CAAC;AACzD,YAAY,EAAC,SAAS,EAAE,eAAe,EAAC,MAAM,yBAAyB,CAAC;AACxE,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,gCAAgC,EAChC,eAAe,EACf,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,sCAAsC,EACtC,8BAA8B,EAC9B,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,EACxB,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAC,KAAK,sBAAsB,EAAE,gBAAgB,EAAC,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,EACtB,YAAY,EACZ,4BAA4B,EAC5B,oBAAoB,EACpB,KAAK,gCAAgC,EACrC,KAAK,gCAAgC,EACrC,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,iBAAiB,CAAC"}

package/dist/core/index.js

@@ -1,7 +1,7 @@
 export { listWorkspaceAdministratorSummaries, reactivateWorkspace, suspendWorkspace } from './admin-workspaces.js';
-export { InvitationEmailMismatchError, InvitationNotFoundError, InvitationWorkspaceMismatchError, LastMemberError, MembershipNotFoundError, MembershipRequiredError, OpenInvitationExistsError, SelfRemovalNotAllowedError, TokenAlreadyUsedError, TokenExpiredError, WorkspaceAdminIdempotencyKeyReuseError, WorkspaceAlreadySuspendedError, WorkspaceDeletedError, WorkspaceNotFoundError, WorkspaceNotSuspendedError } from './errors.js';
+export { InvitationEmailMismatchError, InvitationNotFoundError, InvitationWorkspaceMismatchError, LastMemberError, MembershipNotFoundError, MembershipRequiredError, OpenInvitationExistsError, SelfRemovalNotAllowedError, TokenAlreadyUsedError, TokenExpiredError, WorkspaceAdminIdempotencyKeyReuseError, WorkspaceAlreadySuspendedError, WorkspaceDeletedError, WorkspaceNotFoundError, WorkspaceNotSuspendedError, WorkspaceSlugConflictError } from './errors.js';
 export { acceptWorkspaceInvitation, createWorkspaceInvitation, listWorkspaceInvitations, previewInvitation, revokeWorkspaceInvitation } from './invitations.js';
 export { ensureMembership } from './memberships.js';
-export { createWorkspaceForUser, getWorkspace, listUserWorkspaceMemberships, listWorkspaceMembers, removeWorkspaceMember, requireWorkspaceMembership } from './workspaces.js';
+export { checkWorkspaceSlugAvailability, createWorkspaceForUser, getWorkspace, listUserWorkspaceMemberships, listWorkspaceMembers, removeWorkspaceMember, requireWorkspaceMembership, updateWorkspaceDetails } from './workspaces.js';
 
 //# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/index.ts"],"sourcesContent":["export {\n  type ListWorkspaceAdministratorSummariesParams,\n  type ListWorkspaceAdministratorSummariesResult,\n  listWorkspaceAdministratorSummaries,\n  reactivateWorkspace,\n  suspendWorkspace,\n  type WorkspaceAdministrationMutationContext,\n  type WorkspaceAdministrationMutationResult,\n  type WorkspaceAdministratorSummary,\n} from './admin-workspaces.js';\nexport type {Invitation} from './entities/invitation.js';\nexport type {Membership} from './entities/membership.js';\nexport type {Workspace, WorkspaceStatus} from './entities/workspace.js';\nexport {\n  InvitationEmailMismatchError,\n  InvitationNotFoundError,\n  InvitationWorkspaceMismatchError,\n  LastMemberError,\n  MembershipNotFoundError,\n  MembershipRequiredError,\n  OpenInvitationExistsError,\n  SelfRemovalNotAllowedError,\n  TokenAlreadyUsedError,\n  TokenExpiredError,\n  WorkspaceAdminIdempotencyKeyReuseError,\n  WorkspaceAlreadySuspendedError,\n  WorkspaceDeletedError,\n  WorkspaceNotFoundError,\n  WorkspaceNotSuspendedError,\n} from './errors.js';\nexport {\n  acceptWorkspaceInvitation,\n  createWorkspaceInvitation,\n  listWorkspaceInvitations,\n  type PreviewInvitationResult,\n  previewInvitation,\n  revokeWorkspaceInvitation,\n} from './invitations.js';\nexport {type EnsureMembershipParams, ensureMembership} from './memberships.js';\nexport {\n  createWorkspaceForUser,\n  getWorkspace,\n  listUserWorkspaceMemberships,\n  listWorkspaceMembers,\n  type RequireWorkspaceMembershipParams,\n  type RequireWorkspaceMembershipResult,\n  removeWorkspaceMember,\n  requireWorkspaceMembership,\n} from './workspaces.js';\n"],"names":["listWorkspaceAdministratorSummaries","reactivateWorkspace","suspendWorkspace","InvitationEmailMismatchError","InvitationNotFoundError","InvitationWorkspaceMismatchError","LastMemberError","MembershipNotFoundError","MembershipRequiredError","OpenInvitationExistsError","SelfRemovalNotAllowedError","TokenAlreadyUsedError","TokenExpiredError","WorkspaceAdminIdempotencyKeyReuseError","WorkspaceAlreadySuspendedError","WorkspaceDeletedError","WorkspaceNotFoundError","WorkspaceNotSuspendedError","acceptWorkspaceInvitation","createWorkspaceInvitation","listWorkspaceInvitations","previewInvitation","revokeWorkspaceInvitation","ensureMembership","createWorkspaceForUser","getWorkspace","listUserWorkspaceMemberships","listWorkspaceMembers","removeWorkspaceMember","requireWorkspaceMembership"],"mappings":"AAAA,SAGEA,mCAAmC,EACnCC,mBAAmB,EACnBC,gBAAgB,QAIX,wBAAwB;AAI/B,SACEC,4BAA4B,EAC5BC,uBAAuB,EACvBC,gCAAgC,EAChCC,eAAe,EACfC,uBAAuB,EACvBC,uBAAuB,EACvBC,yBAAyB,EACzBC,0BAA0B,EAC1BC,qBAAqB,EACrBC,iBAAiB,EACjBC,sCAAsC,EACtCC,8BAA8B,EAC9BC,qBAAqB,EACrBC,sBAAsB,EACtBC,0BAA0B,QACrB,cAAc;AACrB,SACEC,yBAAyB,EACzBC,yBAAyB,EACzBC,wBAAwB,EAExBC,iBAAiB,EACjBC,yBAAyB,QACpB,mBAAmB;AAC1B,SAAqCC,gBAAgB,QAAO,mBAAmB;AAC/E,SACEC,sBAAsB,EACtBC,YAAY,EACZC,4BAA4B,EAC5BC,oBAAoB,EAGpBC,qBAAqB,EACrBC,0BAA0B,QACrB,kBAAkB"}
+{"version":3,"sources":["../../src/core/index.ts"],"sourcesContent":["export {\n  type ListWorkspaceAdministratorSummariesParams,\n  type ListWorkspaceAdministratorSummariesResult,\n  listWorkspaceAdministratorSummaries,\n  reactivateWorkspace,\n  suspendWorkspace,\n  type WorkspaceAdministrationMutationContext,\n  type WorkspaceAdministrationMutationResult,\n  type WorkspaceAdministratorSummary,\n} from './admin-workspaces.js';\nexport type {Invitation} from './entities/invitation.js';\nexport type {Membership} from './entities/membership.js';\nexport type {Workspace, WorkspaceStatus} from './entities/workspace.js';\nexport {\n  InvitationEmailMismatchError,\n  InvitationNotFoundError,\n  InvitationWorkspaceMismatchError,\n  LastMemberError,\n  MembershipNotFoundError,\n  MembershipRequiredError,\n  OpenInvitationExistsError,\n  SelfRemovalNotAllowedError,\n  TokenAlreadyUsedError,\n  TokenExpiredError,\n  WorkspaceAdminIdempotencyKeyReuseError,\n  WorkspaceAlreadySuspendedError,\n  WorkspaceDeletedError,\n  WorkspaceNotFoundError,\n  WorkspaceNotSuspendedError,\n  WorkspaceSlugConflictError,\n} from './errors.js';\nexport {\n  acceptWorkspaceInvitation,\n  createWorkspaceInvitation,\n  listWorkspaceInvitations,\n  type PreviewInvitationResult,\n  previewInvitation,\n  revokeWorkspaceInvitation,\n} from './invitations.js';\nexport {type EnsureMembershipParams, ensureMembership} from './memberships.js';\nexport {\n  checkWorkspaceSlugAvailability,\n  createWorkspaceForUser,\n  getWorkspace,\n  listUserWorkspaceMemberships,\n  listWorkspaceMembers,\n  type RequireWorkspaceMembershipParams,\n  type RequireWorkspaceMembershipResult,\n  removeWorkspaceMember,\n  requireWorkspaceMembership,\n  updateWorkspaceDetails,\n} from './workspaces.js';\n"],"names":["listWorkspaceAdministratorSummaries","reactivateWorkspace","suspendWorkspace","InvitationEmailMismatchError","InvitationNotFoundError","InvitationWorkspaceMismatchError","LastMemberError","MembershipNotFoundError","MembershipRequiredError","OpenInvitationExistsError","SelfRemovalNotAllowedError","TokenAlreadyUsedError","TokenExpiredError","WorkspaceAdminIdempotencyKeyReuseError","WorkspaceAlreadySuspendedError","WorkspaceDeletedError","WorkspaceNotFoundError","WorkspaceNotSuspendedError","WorkspaceSlugConflictError","acceptWorkspaceInvitation","createWorkspaceInvitation","listWorkspaceInvitations","previewInvitation","revokeWorkspaceInvitation","ensureMembership","checkWorkspaceSlugAvailability","createWorkspaceForUser","getWorkspace","listUserWorkspaceMemberships","listWorkspaceMembers","removeWorkspaceMember","requireWorkspaceMembership","updateWorkspaceDetails"],"mappings":"AAAA,SAGEA,mCAAmC,EACnCC,mBAAmB,EACnBC,gBAAgB,QAIX,wBAAwB;AAI/B,SACEC,4BAA4B,EAC5BC,uBAAuB,EACvBC,gCAAgC,EAChCC,eAAe,EACfC,uBAAuB,EACvBC,uBAAuB,EACvBC,yBAAyB,EACzBC,0BAA0B,EAC1BC,qBAAqB,EACrBC,iBAAiB,EACjBC,sCAAsC,EACtCC,8BAA8B,EAC9BC,qBAAqB,EACrBC,sBAAsB,EACtBC,0BAA0B,EAC1BC,0BAA0B,QACrB,cAAc;AACrB,SACEC,yBAAyB,EACzBC,yBAAyB,EACzBC,wBAAwB,EAExBC,iBAAiB,EACjBC,yBAAyB,QACpB,mBAAmB;AAC1B,SAAqCC,gBAAgB,QAAO,mBAAmB;AAC/E,SACEC,8BAA8B,EAC9BC,sBAAsB,EACtBC,YAAY,EACZC,4BAA4B,EAC5BC,oBAAoB,EAGpBC,qBAAqB,EACrBC,0BAA0B,EAC1BC,sBAAsB,QACjB,kBAAkB"}

package/dist/core/invitations.js

@@ -53,7 +53,7 @@ export async function previewInvitation(params) {
     }
     const workspace = await getWorkspaceById(invitation.workspaceId);
     if (!workspace) {
-        // Workspace cascade-deleted — the invitation row is orphaned. Treat as invalid.
+        // Workspace cascade-deleted: the invitation row is orphaned. Treat as invalid.
         return {
             status: 'invalid'
         };

package/dist/core/invitations.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/invitations.ts"],"sourcesContent":["import type {UserContextMembership} from '@shipfox/api-auth-context';\nimport {emailSchema} from '@shipfox/api-common-dto';\nimport {generateOpaqueToken, hashOpaqueToken} from '@shipfox/node-tokens';\nimport {config} from '#config.js';\nimport {\n  createInvitation,\n  findInvitationById,\n  findInvitationByToken,\n  listOpenInvitationsByWorkspace,\n  reconcileInvitationAcceptance,\n  revokeInvitation,\n} from '#db/invitations.js';\nimport {getWorkspaceById} from '#db/workspaces.js';\nimport type {Invitation} from './entities/invitation.js';\nimport type {Membership} from './entities/membership.js';\nimport {\n  InvitationEmailMismatchError,\n  InvitationNotFoundError,\n  InvitationWorkspaceMismatchError,\n  TokenAlreadyUsedError,\n  TokenExpiredError,\n  TokenInvalidError,\n} from './errors.js';\nimport {requireWorkspaceMembership} from './workspaces.js';\n\nconst INVITATION_TTL_DAYS = 7;\n\nfunction daysFromNow(days: number): Date {\n  return new Date(Date.now() + days * 24 * 60 * 60 * 1000);\n}\n\nfunction nonBlankOrFallback(value: string | null | undefined, fallback: string): string {\n  const trimmed = value?.trim();\n  return trimmed ? trimmed : fallback;\n}\n\nexport async function createWorkspaceInvitation(params: {\n  workspaceId: string;\n  email: string;\n  invitedByUserId: string;\n  invitedByDisplay?: string | null;\n  invitedByMemberships: ReadonlyArray<UserContextMembership>;\n}): Promise<Invitation> {\n  const email = emailSchema.parse(params.email);\n  const {workspace} = await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.invitedByUserId,\n    memberships: params.invitedByMemberships,\n    enforceWorkspaceStatus: false,\n  });\n\n  const rawToken = generateOpaqueToken('invitation');\n  const invitation = await createInvitation({\n    workspaceId: params.workspaceId,\n    email,\n    hashedToken: hashOpaqueToken(rawToken),\n    expiresAt: daysFromNow(INVITATION_TTL_DAYS),\n    invitedByUserId: params.invitedByUserId,\n    invitedByDisplay: params.invitedByDisplay ?? null,\n    sendEmail: {\n      workspaceName: nonBlankOrFallback(workspace.name, 'your workspace'),\n      inviterName: nonBlankOrFallback(params.invitedByDisplay, 'A teammate'),\n      inviteLink: `${config.CLIENT_BASE_URL}/invitations/accept?token=${rawToken}`,\n    },\n  });\n\n  return invitation;\n}\n\nexport async function peekInvitationByRawToken(params: {\n  token: string;\n}): Promise<Invitation | undefined> {\n  return await findInvitationByToken({hashedToken: hashOpaqueToken(params.token)});\n}\n\nexport type PreviewInvitationResult =\n  | {\n      status: 'pending';\n      workspaceId: string;\n      workspaceName: string;\n      email: string;\n      invitedByDisplay: string | null;\n      expiresAt: Date;\n    }\n  | {status: 'expired'; workspaceName: string; expiresAt: Date}\n  | {status: 'already_used'; workspaceName: string}\n  | {status: 'invalid'};\n\nexport interface AcceptedWorkspaceInvitation {\n  invitation: Invitation;\n  membership: Membership;\n  alreadyMember: boolean;\n}\n\nexport async function previewInvitation(params: {token: string}): Promise<PreviewInvitationResult> {\n  const invitation = await peekInvitationByRawToken({token: params.token});\n  if (!invitation) {\n    return {status: 'invalid'};\n  }\n\n  const workspace = await getWorkspaceById(invitation.workspaceId);\n  if (!workspace) {\n    // Workspace cascade-deleted — the invitation row is orphaned. Treat as invalid.\n    return {status: 'invalid'};\n  }\n\n  if (invitation.revokedAt !== null) {\n    return {status: 'invalid'};\n  }\n\n  if (invitation.acceptedAt !== null) {\n    return {status: 'already_used', workspaceName: workspace.name};\n  }\n\n  if (invitation.expiresAt.getTime() <= Date.now()) {\n    return {\n      status: 'expired',\n      workspaceName: workspace.name,\n      expiresAt: invitation.expiresAt,\n    };\n  }\n\n  return {\n    status: 'pending',\n    workspaceId: workspace.id,\n    workspaceName: workspace.name,\n    email: invitation.email,\n    invitedByDisplay: invitation.invitedByDisplay,\n    expiresAt: invitation.expiresAt,\n  };\n}\n\nexport async function acceptWorkspaceInvitation(params: {\n  token: string;\n  userId: string;\n  email: string;\n  name?: string | null | undefined;\n}): Promise<AcceptedWorkspaceInvitation> {\n  const result = await reconcileWorkspaceInvitationAcceptance({\n    token: params.token,\n    email: params.email,\n    userId: params.userId,\n    name: params.name,\n  });\n  if (result.status === 'accepted') {\n    return {\n      invitation: result.invitation,\n      membership: result.membership,\n      alreadyMember: result.alreadyMember,\n    };\n  }\n  if (result.status === 'already_accepted' || result.status === 'consumed_by_another_user') {\n    throw new TokenAlreadyUsedError();\n  }\n  if (result.status === 'expired') {\n    throw new TokenExpiredError();\n  }\n  if (result.status === 'email_mismatch') {\n    throw new InvitationEmailMismatchError();\n  }\n  throw new TokenInvalidError(\n    result.status === 'revoked' ? 'Invitation token has been revoked' : 'Invitation is invalid',\n  );\n}\n\nexport type WorkspaceInvitationReconciliation =\n  | {\n      status: 'accepted' | 'already_accepted';\n      invitation: Invitation;\n      membership: Membership;\n      alreadyMember: boolean;\n    }\n  | {\n      status: 'invalid' | 'expired' | 'revoked' | 'consumed_by_another_user' | 'email_mismatch';\n    };\n\nexport async function reconcileWorkspaceInvitationAcceptance(params: {\n  token: string;\n  userId: string;\n  email: string;\n  name?: string | null | undefined;\n}): Promise<WorkspaceInvitationReconciliation> {\n  const invitation = await peekInvitationByRawToken({token: params.token});\n  if (!invitation) return {status: 'invalid'};\n\n  const result = await reconcileInvitationAcceptance({\n    invitationId: invitation.id,\n    acceptedByUserId: params.userId,\n    email: emailSchema.parse(params.email),\n    acceptedByUserName: params.name,\n  });\n  if (result.status === 'accepted') {\n    return {\n      status: result.status,\n      invitation: result.invitation,\n      membership: result.membership,\n      alreadyMember: result.alreadyMember,\n    };\n  }\n  if (result.status === 'already_accepted') {\n    return {\n      status: result.status,\n      invitation: result.invitation,\n      membership: result.membership,\n      alreadyMember: true,\n    };\n  }\n  return result;\n}\n\nexport async function listWorkspaceInvitations(params: {\n  workspaceId: string;\n  requesterUserId: string;\n  requesterMemberships: ReadonlyArray<UserContextMembership>;\n}): Promise<Invitation[]> {\n  await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.requesterUserId,\n    memberships: params.requesterMemberships,\n    enforceWorkspaceStatus: false,\n  });\n\n  return listOpenInvitationsByWorkspace({workspaceId: params.workspaceId});\n}\n\nexport async function revokeWorkspaceInvitation(params: {\n  workspaceId: string;\n  requesterUserId: string;\n  requesterMemberships: ReadonlyArray<UserContextMembership>;\n  invitationId: string;\n}): Promise<void> {\n  await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.requesterUserId,\n    memberships: params.requesterMemberships,\n    enforceWorkspaceStatus: false,\n  });\n\n  const invitation = await findInvitationById({id: params.invitationId});\n  if (!invitation) {\n    throw new InvitationNotFoundError(params.invitationId);\n  }\n\n  if (invitation.workspaceId !== params.workspaceId) {\n    throw new InvitationWorkspaceMismatchError();\n  }\n\n  await revokeInvitation({invitationId: params.invitationId});\n}\n"],"names":["emailSchema","generateOpaqueToken","hashOpaqueToken","config","createInvitation","findInvitationById","findInvitationByToken","listOpenInvitationsByWorkspace","reconcileInvitationAcceptance","revokeInvitation","getWorkspaceById","InvitationEmailMismatchError","InvitationNotFoundError","InvitationWorkspaceMismatchError","TokenAlreadyUsedError","TokenExpiredError","TokenInvalidError","requireWorkspaceMembership","INVITATION_TTL_DAYS","daysFromNow","days","Date","now","nonBlankOrFallback","value","fallback","trimmed","trim","createWorkspaceInvitation","params","email","parse","workspace","workspaceId","userId","invitedByUserId","memberships","invitedByMemberships","enforceWorkspaceStatus","rawToken","invitation","hashedToken","expiresAt","invitedByDisplay","sendEmail","workspaceName","name","inviterName","inviteLink","CLIENT_BASE_URL","peekInvitationByRawToken","token","previewInvitation","status","revokedAt","acceptedAt","getTime","id","acceptWorkspaceInvitation","result","reconcileWorkspaceInvitationAcceptance","membership","alreadyMember","invitationId","acceptedByUserId","acceptedByUserName","listWorkspaceInvitations","requesterUserId","requesterMemberships","revokeWorkspaceInvitation"],"mappings":"AACA,SAAQA,WAAW,QAAO,0BAA0B;AACpD,SAAQC,mBAAmB,EAAEC,eAAe,QAAO,uBAAuB;AAC1E,SAAQC,MAAM,QAAO,aAAa;AAClC,SACEC,gBAAgB,EAChBC,kBAAkB,EAClBC,qBAAqB,EACrBC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,gBAAgB,QACX,qBAAqB;AAC5B,SAAQC,gBAAgB,QAAO,oBAAoB;AAGnD,SACEC,4BAA4B,EAC5BC,uBAAuB,EACvBC,gCAAgC,EAChCC,qBAAqB,EACrBC,iBAAiB,EACjBC,iBAAiB,QACZ,cAAc;AACrB,SAAQC,0BAA0B,QAAO,kBAAkB;AAE3D,MAAMC,sBAAsB;AAE5B,SAASC,YAAYC,IAAY;IAC/B,OAAO,IAAIC,KAAKA,KAAKC,GAAG,KAAKF,OAAO,KAAK,KAAK,KAAK;AACrD;AAEA,SAASG,mBAAmBC,KAAgC,EAAEC,QAAgB;IAC5E,MAAMC,UAAUF,OAAOG;IACvB,OAAOD,UAAUA,UAAUD;AAC7B;AAEA,OAAO,eAAeG,0BAA0BC,MAM/C;IACC,MAAMC,QAAQ9B,YAAY+B,KAAK,CAACF,OAAOC,KAAK;IAC5C,MAAM,EAACE,SAAS,EAAC,GAAG,MAAMf,2BAA2B;QACnDgB,aAAaJ,OAAOI,WAAW;QAC/BC,QAAQL,OAAOM,eAAe;QAC9BC,aAAaP,OAAOQ,oBAAoB;QACxCC,wBAAwB;IAC1B;IAEA,MAAMC,WAAWtC,oBAAoB;IACrC,MAAMuC,aAAa,MAAMpC,iBAAiB;QACxC6B,aAAaJ,OAAOI,WAAW;QAC/BH;QACAW,aAAavC,gBAAgBqC;QAC7BG,WAAWvB,YAAYD;QACvBiB,iBAAiBN,OAAOM,eAAe;QACvCQ,kBAAkBd,OAAOc,gBAAgB,IAAI;QAC7CC,WAAW;YACTC,eAAetB,mBAAmBS,UAAUc,IAAI,EAAE;YAClDC,aAAaxB,mBAAmBM,OAAOc,gBAAgB,EAAE;YACzDK,YAAY,GAAG7C,OAAO8C,eAAe,CAAC,0BAA0B,EAAEV,UAAU;QAC9E;IACF;IAEA,OAAOC;AACT;AAEA,OAAO,eAAeU,yBAAyBrB,MAE9C;IACC,OAAO,MAAMvB,sBAAsB;QAACmC,aAAavC,gBAAgB2B,OAAOsB,KAAK;IAAC;AAChF;AAqBA,OAAO,eAAeC,kBAAkBvB,MAAuB;IAC7D,MAAMW,aAAa,MAAMU,yBAAyB;QAACC,OAAOtB,OAAOsB,KAAK;IAAA;IACtE,IAAI,CAACX,YAAY;QACf,OAAO;YAACa,QAAQ;QAAS;IAC3B;IAEA,MAAMrB,YAAY,MAAMtB,iBAAiB8B,WAAWP,WAAW;IAC/D,IAAI,CAACD,WAAW;QACd,gFAAgF;QAChF,OAAO;YAACqB,QAAQ;QAAS;IAC3B;IAEA,IAAIb,WAAWc,SAAS,KAAK,MAAM;QACjC,OAAO;YAACD,QAAQ;QAAS;IAC3B;IAEA,IAAIb,WAAWe,UAAU,KAAK,MAAM;QAClC,OAAO;YAACF,QAAQ;YAAgBR,eAAeb,UAAUc,IAAI;QAAA;IAC/D;IAEA,IAAIN,WAAWE,SAAS,CAACc,OAAO,MAAMnC,KAAKC,GAAG,IAAI;QAChD,OAAO;YACL+B,QAAQ;YACRR,eAAeb,UAAUc,IAAI;YAC7BJ,WAAWF,WAAWE,SAAS;QACjC;IACF;IAEA,OAAO;QACLW,QAAQ;QACRpB,aAAaD,UAAUyB,EAAE;QACzBZ,eAAeb,UAAUc,IAAI;QAC7BhB,OAAOU,WAAWV,KAAK;QACvBa,kBAAkBH,WAAWG,gBAAgB;QAC7CD,WAAWF,WAAWE,SAAS;IACjC;AACF;AAEA,OAAO,eAAegB,0BAA0B7B,MAK/C;IACC,MAAM8B,SAAS,MAAMC,uCAAuC;QAC1DT,OAAOtB,OAAOsB,KAAK;QACnBrB,OAAOD,OAAOC,KAAK;QACnBI,QAAQL,OAAOK,MAAM;QACrBY,MAAMjB,OAAOiB,IAAI;IACnB;IACA,IAAIa,OAAON,MAAM,KAAK,YAAY;QAChC,OAAO;YACLb,YAAYmB,OAAOnB,UAAU;YAC7BqB,YAAYF,OAAOE,UAAU;YAC7BC,eAAeH,OAAOG,aAAa;QACrC;IACF;IACA,IAAIH,OAAON,MAAM,KAAK,sBAAsBM,OAAON,MAAM,KAAK,4BAA4B;QACxF,MAAM,IAAIvC;IACZ;IACA,IAAI6C,OAAON,MAAM,KAAK,WAAW;QAC/B,MAAM,IAAItC;IACZ;IACA,IAAI4C,OAAON,MAAM,KAAK,kBAAkB;QACtC,MAAM,IAAI1C;IACZ;IACA,MAAM,IAAIK,kBACR2C,OAAON,MAAM,KAAK,YAAY,sCAAsC;AAExE;AAaA,OAAO,eAAeO,uCAAuC/B,MAK5D;IACC,MAAMW,aAAa,MAAMU,yBAAyB;QAACC,OAAOtB,OAAOsB,KAAK;IAAA;IACtE,IAAI,CAACX,YAAY,OAAO;QAACa,QAAQ;IAAS;IAE1C,MAAMM,SAAS,MAAMnD,8BAA8B;QACjDuD,cAAcvB,WAAWiB,EAAE;QAC3BO,kBAAkBnC,OAAOK,MAAM;QAC/BJ,OAAO9B,YAAY+B,KAAK,CAACF,OAAOC,KAAK;QACrCmC,oBAAoBpC,OAAOiB,IAAI;IACjC;IACA,IAAIa,OAAON,MAAM,KAAK,YAAY;QAChC,OAAO;YACLA,QAAQM,OAAON,MAAM;YACrBb,YAAYmB,OAAOnB,UAAU;YAC7BqB,YAAYF,OAAOE,UAAU;YAC7BC,eAAeH,OAAOG,aAAa;QACrC;IACF;IACA,IAAIH,OAAON,MAAM,KAAK,oBAAoB;QACxC,OAAO;YACLA,QAAQM,OAAON,MAAM;YACrBb,YAAYmB,OAAOnB,UAAU;YAC7BqB,YAAYF,OAAOE,UAAU;YAC7BC,eAAe;QACjB;IACF;IACA,OAAOH;AACT;AAEA,OAAO,eAAeO,yBAAyBrC,MAI9C;IACC,MAAMZ,2BAA2B;QAC/BgB,aAAaJ,OAAOI,WAAW;QAC/BC,QAAQL,OAAOsC,eAAe;QAC9B/B,aAAaP,OAAOuC,oBAAoB;QACxC9B,wBAAwB;IAC1B;IAEA,OAAO/B,+BAA+B;QAAC0B,aAAaJ,OAAOI,WAAW;IAAA;AACxE;AAEA,OAAO,eAAeoC,0BAA0BxC,MAK/C;IACC,MAAMZ,2BAA2B;QAC/BgB,aAAaJ,OAAOI,WAAW;QAC/BC,QAAQL,OAAOsC,eAAe;QAC9B/B,aAAaP,OAAOuC,oBAAoB;QACxC9B,wBAAwB;IAC1B;IAEA,MAAME,aAAa,MAAMnC,mBAAmB;QAACoD,IAAI5B,OAAOkC,YAAY;IAAA;IACpE,IAAI,CAACvB,YAAY;QACf,MAAM,IAAI5B,wBAAwBiB,OAAOkC,YAAY;IACvD;IAEA,IAAIvB,WAAWP,WAAW,KAAKJ,OAAOI,WAAW,EAAE;QACjD,MAAM,IAAIpB;IACZ;IAEA,MAAMJ,iBAAiB;QAACsD,cAAclC,OAAOkC,YAAY;IAAA;AAC3D"}
+{"version":3,"sources":["../../src/core/invitations.ts"],"sourcesContent":["import type {UserContextMembership} from '@shipfox/api-auth-context';\nimport {emailSchema} from '@shipfox/api-common-dto';\nimport {generateOpaqueToken, hashOpaqueToken} from '@shipfox/node-tokens';\nimport {config} from '#config.js';\nimport {\n  createInvitation,\n  findInvitationById,\n  findInvitationByToken,\n  listOpenInvitationsByWorkspace,\n  reconcileInvitationAcceptance,\n  revokeInvitation,\n} from '#db/invitations.js';\nimport {getWorkspaceById} from '#db/workspaces.js';\nimport type {Invitation} from './entities/invitation.js';\nimport type {Membership} from './entities/membership.js';\nimport {\n  InvitationEmailMismatchError,\n  InvitationNotFoundError,\n  InvitationWorkspaceMismatchError,\n  TokenAlreadyUsedError,\n  TokenExpiredError,\n  TokenInvalidError,\n} from './errors.js';\nimport {requireWorkspaceMembership} from './workspaces.js';\n\nconst INVITATION_TTL_DAYS = 7;\n\nfunction daysFromNow(days: number): Date {\n  return new Date(Date.now() + days * 24 * 60 * 60 * 1000);\n}\n\nfunction nonBlankOrFallback(value: string | null | undefined, fallback: string): string {\n  const trimmed = value?.trim();\n  return trimmed ? trimmed : fallback;\n}\n\nexport async function createWorkspaceInvitation(params: {\n  workspaceId: string;\n  email: string;\n  invitedByUserId: string;\n  invitedByDisplay?: string | null;\n  invitedByMemberships: ReadonlyArray<UserContextMembership>;\n}): Promise<Invitation> {\n  const email = emailSchema.parse(params.email);\n  const {workspace} = await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.invitedByUserId,\n    memberships: params.invitedByMemberships,\n    enforceWorkspaceStatus: false,\n  });\n\n  const rawToken = generateOpaqueToken('invitation');\n  const invitation = await createInvitation({\n    workspaceId: params.workspaceId,\n    email,\n    hashedToken: hashOpaqueToken(rawToken),\n    expiresAt: daysFromNow(INVITATION_TTL_DAYS),\n    invitedByUserId: params.invitedByUserId,\n    invitedByDisplay: params.invitedByDisplay ?? null,\n    sendEmail: {\n      workspaceName: nonBlankOrFallback(workspace.name, 'your workspace'),\n      inviterName: nonBlankOrFallback(params.invitedByDisplay, 'A teammate'),\n      inviteLink: `${config.CLIENT_BASE_URL}/invitations/accept?token=${rawToken}`,\n    },\n  });\n\n  return invitation;\n}\n\nexport async function peekInvitationByRawToken(params: {\n  token: string;\n}): Promise<Invitation | undefined> {\n  return await findInvitationByToken({hashedToken: hashOpaqueToken(params.token)});\n}\n\nexport type PreviewInvitationResult =\n  | {\n      status: 'pending';\n      workspaceId: string;\n      workspaceName: string;\n      email: string;\n      invitedByDisplay: string | null;\n      expiresAt: Date;\n    }\n  | {status: 'expired'; workspaceName: string; expiresAt: Date}\n  | {status: 'already_used'; workspaceName: string}\n  | {status: 'invalid'};\n\nexport interface AcceptedWorkspaceInvitation {\n  invitation: Invitation;\n  membership: Membership;\n  alreadyMember: boolean;\n}\n\nexport async function previewInvitation(params: {token: string}): Promise<PreviewInvitationResult> {\n  const invitation = await peekInvitationByRawToken({token: params.token});\n  if (!invitation) {\n    return {status: 'invalid'};\n  }\n\n  const workspace = await getWorkspaceById(invitation.workspaceId);\n  if (!workspace) {\n    // Workspace cascade-deleted: the invitation row is orphaned. Treat as invalid.\n    return {status: 'invalid'};\n  }\n\n  if (invitation.revokedAt !== null) {\n    return {status: 'invalid'};\n  }\n\n  if (invitation.acceptedAt !== null) {\n    return {status: 'already_used', workspaceName: workspace.name};\n  }\n\n  if (invitation.expiresAt.getTime() <= Date.now()) {\n    return {\n      status: 'expired',\n      workspaceName: workspace.name,\n      expiresAt: invitation.expiresAt,\n    };\n  }\n\n  return {\n    status: 'pending',\n    workspaceId: workspace.id,\n    workspaceName: workspace.name,\n    email: invitation.email,\n    invitedByDisplay: invitation.invitedByDisplay,\n    expiresAt: invitation.expiresAt,\n  };\n}\n\nexport async function acceptWorkspaceInvitation(params: {\n  token: string;\n  userId: string;\n  email: string;\n  name?: string | null | undefined;\n}): Promise<AcceptedWorkspaceInvitation> {\n  const result = await reconcileWorkspaceInvitationAcceptance({\n    token: params.token,\n    email: params.email,\n    userId: params.userId,\n    name: params.name,\n  });\n  if (result.status === 'accepted') {\n    return {\n      invitation: result.invitation,\n      membership: result.membership,\n      alreadyMember: result.alreadyMember,\n    };\n  }\n  if (result.status === 'already_accepted' || result.status === 'consumed_by_another_user') {\n    throw new TokenAlreadyUsedError();\n  }\n  if (result.status === 'expired') {\n    throw new TokenExpiredError();\n  }\n  if (result.status === 'email_mismatch') {\n    throw new InvitationEmailMismatchError();\n  }\n  throw new TokenInvalidError(\n    result.status === 'revoked' ? 'Invitation token has been revoked' : 'Invitation is invalid',\n  );\n}\n\nexport type WorkspaceInvitationReconciliation =\n  | {\n      status: 'accepted' | 'already_accepted';\n      invitation: Invitation;\n      membership: Membership;\n      alreadyMember: boolean;\n    }\n  | {\n      status: 'invalid' | 'expired' | 'revoked' | 'consumed_by_another_user' | 'email_mismatch';\n    };\n\nexport async function reconcileWorkspaceInvitationAcceptance(params: {\n  token: string;\n  userId: string;\n  email: string;\n  name?: string | null | undefined;\n}): Promise<WorkspaceInvitationReconciliation> {\n  const invitation = await peekInvitationByRawToken({token: params.token});\n  if (!invitation) return {status: 'invalid'};\n\n  const result = await reconcileInvitationAcceptance({\n    invitationId: invitation.id,\n    acceptedByUserId: params.userId,\n    email: emailSchema.parse(params.email),\n    acceptedByUserName: params.name,\n  });\n  if (result.status === 'accepted') {\n    return {\n      status: result.status,\n      invitation: result.invitation,\n      membership: result.membership,\n      alreadyMember: result.alreadyMember,\n    };\n  }\n  if (result.status === 'already_accepted') {\n    return {\n      status: result.status,\n      invitation: result.invitation,\n      membership: result.membership,\n      alreadyMember: true,\n    };\n  }\n  return result;\n}\n\nexport async function listWorkspaceInvitations(params: {\n  workspaceId: string;\n  requesterUserId: string;\n  requesterMemberships: ReadonlyArray<UserContextMembership>;\n}): Promise<Invitation[]> {\n  await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.requesterUserId,\n    memberships: params.requesterMemberships,\n    enforceWorkspaceStatus: false,\n  });\n\n  return listOpenInvitationsByWorkspace({workspaceId: params.workspaceId});\n}\n\nexport async function revokeWorkspaceInvitation(params: {\n  workspaceId: string;\n  requesterUserId: string;\n  requesterMemberships: ReadonlyArray<UserContextMembership>;\n  invitationId: string;\n}): Promise<void> {\n  await requireWorkspaceMembership({\n    workspaceId: params.workspaceId,\n    userId: params.requesterUserId,\n    memberships: params.requesterMemberships,\n    enforceWorkspaceStatus: false,\n  });\n\n  const invitation = await findInvitationById({id: params.invitationId});\n  if (!invitation) {\n    throw new InvitationNotFoundError(params.invitationId);\n  }\n\n  if (invitation.workspaceId !== params.workspaceId) {\n    throw new InvitationWorkspaceMismatchError();\n  }\n\n  await revokeInvitation({invitationId: params.invitationId});\n}\n"],"names":["emailSchema","generateOpaqueToken","hashOpaqueToken","config","createInvitation","findInvitationById","findInvitationByToken","listOpenInvitationsByWorkspace","reconcileInvitationAcceptance","revokeInvitation","getWorkspaceById","InvitationEmailMismatchError","InvitationNotFoundError","InvitationWorkspaceMismatchError","TokenAlreadyUsedError","TokenExpiredError","TokenInvalidError","requireWorkspaceMembership","INVITATION_TTL_DAYS","daysFromNow","days","Date","now","nonBlankOrFallback","value","fallback","trimmed","trim","createWorkspaceInvitation","params","email","parse","workspace","workspaceId","userId","invitedByUserId","memberships","invitedByMemberships","enforceWorkspaceStatus","rawToken","invitation","hashedToken","expiresAt","invitedByDisplay","sendEmail","workspaceName","name","inviterName","inviteLink","CLIENT_BASE_URL","peekInvitationByRawToken","token","previewInvitation","status","revokedAt","acceptedAt","getTime","id","acceptWorkspaceInvitation","result","reconcileWorkspaceInvitationAcceptance","membership","alreadyMember","invitationId","acceptedByUserId","acceptedByUserName","listWorkspaceInvitations","requesterUserId","requesterMemberships","revokeWorkspaceInvitation"],"mappings":"AACA,SAAQA,WAAW,QAAO,0BAA0B;AACpD,SAAQC,mBAAmB,EAAEC,eAAe,QAAO,uBAAuB;AAC1E,SAAQC,MAAM,QAAO,aAAa;AAClC,SACEC,gBAAgB,EAChBC,kBAAkB,EAClBC,qBAAqB,EACrBC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,gBAAgB,QACX,qBAAqB;AAC5B,SAAQC,gBAAgB,QAAO,oBAAoB;AAGnD,SACEC,4BAA4B,EAC5BC,uBAAuB,EACvBC,gCAAgC,EAChCC,qBAAqB,EACrBC,iBAAiB,EACjBC,iBAAiB,QACZ,cAAc;AACrB,SAAQC,0BAA0B,QAAO,kBAAkB;AAE3D,MAAMC,sBAAsB;AAE5B,SAASC,YAAYC,IAAY;IAC/B,OAAO,IAAIC,KAAKA,KAAKC,GAAG,KAAKF,OAAO,KAAK,KAAK,KAAK;AACrD;AAEA,SAASG,mBAAmBC,KAAgC,EAAEC,QAAgB;IAC5E,MAAMC,UAAUF,OAAOG;IACvB,OAAOD,UAAUA,UAAUD;AAC7B;AAEA,OAAO,eAAeG,0BAA0BC,MAM/C;IACC,MAAMC,QAAQ9B,YAAY+B,KAAK,CAACF,OAAOC,KAAK;IAC5C,MAAM,EAACE,SAAS,EAAC,GAAG,MAAMf,2BAA2B;QACnDgB,aAAaJ,OAAOI,WAAW;QAC/BC,QAAQL,OAAOM,eAAe;QAC9BC,aAAaP,OAAOQ,oBAAoB;QACxCC,wBAAwB;IAC1B;IAEA,MAAMC,WAAWtC,oBAAoB;IACrC,MAAMuC,aAAa,MAAMpC,iBAAiB;QACxC6B,aAAaJ,OAAOI,WAAW;QAC/BH;QACAW,aAAavC,gBAAgBqC;QAC7BG,WAAWvB,YAAYD;QACvBiB,iBAAiBN,OAAOM,eAAe;QACvCQ,kBAAkBd,OAAOc,gBAAgB,IAAI;QAC7CC,WAAW;YACTC,eAAetB,mBAAmBS,UAAUc,IAAI,EAAE;YAClDC,aAAaxB,mBAAmBM,OAAOc,gBAAgB,EAAE;YACzDK,YAAY,GAAG7C,OAAO8C,eAAe,CAAC,0BAA0B,EAAEV,UAAU;QAC9E;IACF;IAEA,OAAOC;AACT;AAEA,OAAO,eAAeU,yBAAyBrB,MAE9C;IACC,OAAO,MAAMvB,sBAAsB;QAACmC,aAAavC,gBAAgB2B,OAAOsB,KAAK;IAAC;AAChF;AAqBA,OAAO,eAAeC,kBAAkBvB,MAAuB;IAC7D,MAAMW,aAAa,MAAMU,yBAAyB;QAACC,OAAOtB,OAAOsB,KAAK;IAAA;IACtE,IAAI,CAACX,YAAY;QACf,OAAO;YAACa,QAAQ;QAAS;IAC3B;IAEA,MAAMrB,YAAY,MAAMtB,iBAAiB8B,WAAWP,WAAW;IAC/D,IAAI,CAACD,WAAW;QACd,+EAA+E;QAC/E,OAAO;YAACqB,QAAQ;QAAS;IAC3B;IAEA,IAAIb,WAAWc,SAAS,KAAK,MAAM;QACjC,OAAO;YAACD,QAAQ;QAAS;IAC3B;IAEA,IAAIb,WAAWe,UAAU,KAAK,MAAM;QAClC,OAAO;YAACF,QAAQ;YAAgBR,eAAeb,UAAUc,IAAI;QAAA;IAC/D;IAEA,IAAIN,WAAWE,SAAS,CAACc,OAAO,MAAMnC,KAAKC,GAAG,IAAI;QAChD,OAAO;YACL+B,QAAQ;YACRR,eAAeb,UAAUc,IAAI;YAC7BJ,WAAWF,WAAWE,SAAS;QACjC;IACF;IAEA,OAAO;QACLW,QAAQ;QACRpB,aAAaD,UAAUyB,EAAE;QACzBZ,eAAeb,UAAUc,IAAI;QAC7BhB,OAAOU,WAAWV,KAAK;QACvBa,kBAAkBH,WAAWG,gBAAgB;QAC7CD,WAAWF,WAAWE,SAAS;IACjC;AACF;AAEA,OAAO,eAAegB,0BAA0B7B,MAK/C;IACC,MAAM8B,SAAS,MAAMC,uCAAuC;QAC1DT,OAAOtB,OAAOsB,KAAK;QACnBrB,OAAOD,OAAOC,KAAK;QACnBI,QAAQL,OAAOK,MAAM;QACrBY,MAAMjB,OAAOiB,IAAI;IACnB;IACA,IAAIa,OAAON,MAAM,KAAK,YAAY;QAChC,OAAO;YACLb,YAAYmB,OAAOnB,UAAU;YAC7BqB,YAAYF,OAAOE,UAAU;YAC7BC,eAAeH,OAAOG,aAAa;QACrC;IACF;IACA,IAAIH,OAAON,MAAM,KAAK,sBAAsBM,OAAON,MAAM,KAAK,4BAA4B;QACxF,MAAM,IAAIvC;IACZ;IACA,IAAI6C,OAAON,MAAM,KAAK,WAAW;QAC/B,MAAM,IAAItC;IACZ;IACA,IAAI4C,OAAON,MAAM,KAAK,kBAAkB;QACtC,MAAM,IAAI1C;IACZ;IACA,MAAM,IAAIK,kBACR2C,OAAON,MAAM,KAAK,YAAY,sCAAsC;AAExE;AAaA,OAAO,eAAeO,uCAAuC/B,MAK5D;IACC,MAAMW,aAAa,MAAMU,yBAAyB;QAACC,OAAOtB,OAAOsB,KAAK;IAAA;IACtE,IAAI,CAACX,YAAY,OAAO;QAACa,QAAQ;IAAS;IAE1C,MAAMM,SAAS,MAAMnD,8BAA8B;QACjDuD,cAAcvB,WAAWiB,EAAE;QAC3BO,kBAAkBnC,OAAOK,MAAM;QAC/BJ,OAAO9B,YAAY+B,KAAK,CAACF,OAAOC,KAAK;QACrCmC,oBAAoBpC,OAAOiB,IAAI;IACjC;IACA,IAAIa,OAAON,MAAM,KAAK,YAAY;QAChC,OAAO;YACLA,QAAQM,OAAON,MAAM;YACrBb,YAAYmB,OAAOnB,UAAU;YAC7BqB,YAAYF,OAAOE,UAAU;YAC7BC,eAAeH,OAAOG,aAAa;QACrC;IACF;IACA,IAAIH,OAAON,MAAM,KAAK,oBAAoB;QACxC,OAAO;YACLA,QAAQM,OAAON,MAAM;YACrBb,YAAYmB,OAAOnB,UAAU;YAC7BqB,YAAYF,OAAOE,UAAU;YAC7BC,eAAe;QACjB;IACF;IACA,OAAOH;AACT;AAEA,OAAO,eAAeO,yBAAyBrC,MAI9C;IACC,MAAMZ,2BAA2B;QAC/BgB,aAAaJ,OAAOI,WAAW;QAC/BC,QAAQL,OAAOsC,eAAe;QAC9B/B,aAAaP,OAAOuC,oBAAoB;QACxC9B,wBAAwB;IAC1B;IAEA,OAAO/B,+BAA+B;QAAC0B,aAAaJ,OAAOI,WAAW;IAAA;AACxE;AAEA,OAAO,eAAeoC,0BAA0BxC,MAK/C;IACC,MAAMZ,2BAA2B;QAC/BgB,aAAaJ,OAAOI,WAAW;QAC/BC,QAAQL,OAAOsC,eAAe;QAC9B/B,aAAaP,OAAOuC,oBAAoB;QACxC9B,wBAAwB;IAC1B;IAEA,MAAME,aAAa,MAAMnC,mBAAmB;QAACoD,IAAI5B,OAAOkC,YAAY;IAAA;IACpE,IAAI,CAACvB,YAAY;QACf,MAAM,IAAI5B,wBAAwBiB,OAAOkC,YAAY;IACvD;IAEA,IAAIvB,WAAWP,WAAW,KAAKJ,OAAOI,WAAW,EAAE;QACjD,MAAM,IAAIpB;IACZ;IAEA,MAAMJ,iBAAiB;QAACsD,cAAclC,OAAOkC,YAAY;IAAA;AAC3D"}

package/dist/core/rate-limit.d.ts

@@ -0,0 +1,39 @@
+import { RateLimitExceededError, type RateLimitOutcome, type RateLimitPolicy, RateLimitUnavailableError } from '@shipfox/node-rate-limit';
+export type WorkspacesRateLimitAction = 'slug-availability';
+export type WorkspacesRateLimitScope = 'ip';
+export type WorkspacesRateLimitOutcome = RateLimitOutcome;
+export type WorkspacesRateLimitPolicy = RateLimitPolicy;
+export interface CheckWorkspacesRateLimitParams extends WorkspacesRateLimitPolicy {
+    action: WorkspacesRateLimitAction;
+    scope: WorkspacesRateLimitScope;
+    identifier: string;
+    now?: Date | undefined;
+    timeoutMs?: number | undefined;
+}
+export declare class WorkspacesRateLimitExceededError extends RateLimitExceededError<WorkspacesRateLimitAction, WorkspacesRateLimitScope> {
+    constructor(params: {
+        action: WorkspacesRateLimitAction;
+        scope: WorkspacesRateLimitScope;
+        retryAfterSeconds: number;
+        identifierHmacPrefix: string;
+    });
+}
+export declare class WorkspacesRateLimitUnavailableError extends RateLimitUnavailableError<WorkspacesRateLimitAction, WorkspacesRateLimitScope> {
+    constructor(params: {
+        action: WorkspacesRateLimitAction;
+        scope: WorkspacesRateLimitScope;
+        identifierHmacPrefix: string;
+        cause: unknown;
+    });
+}
+export declare const WORKSPACE_SLUG_AVAILABILITY_RATE_LIMIT: {
+    readonly limit: 60;
+    readonly windowSeconds: number;
+};
+export declare function hashWorkspacesRateLimitIdentifier(params: {
+    action: WorkspacesRateLimitAction;
+    scope: WorkspacesRateLimitScope;
+    identifier: string;
+}): string;
+export declare function checkWorkspacesRateLimit(params: CheckWorkspacesRateLimitParams): Promise<void>;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/core/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/core/rate-limit.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,yBAAyB,EAC1B,MAAM,0BAA0B,CAAC;AAOlC,MAAM,MAAM,yBAAyB,GAAG,mBAAmB,CAAC;AAC5D,MAAM,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAC5C,MAAM,MAAM,0BAA0B,GAAG,gBAAgB,CAAC;AAC1D,MAAM,MAAM,yBAAyB,GAAG,eAAe,CAAC;AAExD,MAAM,WAAW,8BAA+B,SAAQ,yBAAyB;IAC/E,MAAM,EAAE,yBAAyB,CAAC;IAClC,KAAK,EAAE,wBAAwB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,qBAAa,gCAAiC,SAAQ,sBAAsB,CAC1E,yBAAyB,EACzB,wBAAwB,CACzB;gBACa,MAAM,EAAE;QAClB,MAAM,EAAE,yBAAyB,CAAC;QAClC,KAAK,EAAE,wBAAwB,CAAC;QAChC,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC;KAC9B;CAIF;AAED,qBAAa,mCAAoC,SAAQ,yBAAyB,CAChF,yBAAyB,EACzB,wBAAwB,CACzB;gBACa,MAAM,EAAE;QAClB,MAAM,EAAE,yBAAyB,CAAC;QAClC,KAAK,EAAE,wBAAwB,CAAC;QAChC,oBAAoB,EAAE,MAAM,CAAC;QAC7B,KAAK,EAAE,OAAO,CAAC;KAChB;CAIF;AAED,eAAO,MAAM,sCAAsC;;;CAGzC,CAAC;AAKX,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,MAAM,EAAE,yBAAyB,CAAC;IAClC,KAAK,EAAE,wBAAwB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAQT;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,8BAA8B,GACrC,OAAO,CAAC,IAAI,CAAC,CAoCf"}

package/dist/core/rate-limit.js

@@ -0,0 +1,70 @@
+import { rateLimitIdentifierKey } from '@shipfox/node-auth-root-key';
+import { checkRateLimit, hashRateLimitIdentifier, RateLimitExceededError, RateLimitUnavailableError } from '@shipfox/node-rate-limit';
+import { consumeWorkspacesRateLimit, pruneExpiredWorkspacesRateLimits } from '#db/rate-limits.js';
+import { recordWorkspaceRateLimitCheck, recordWorkspaceRateLimitPruneFailure } from '#metrics/instance.js';
+export class WorkspacesRateLimitExceededError extends RateLimitExceededError {
+    constructor(params){
+        super(params);
+        this.name = 'WorkspacesRateLimitExceededError';
+    }
+}
+export class WorkspacesRateLimitUnavailableError extends RateLimitUnavailableError {
+    constructor(params){
+        super(params);
+        this.name = 'WorkspacesRateLimitUnavailableError';
+    }
+}
+export const WORKSPACE_SLUG_AVAILABILITY_RATE_LIMIT = {
+    limit: 60,
+    windowSeconds: 5 * 60
+};
+const RATE_LIMIT_TIMEOUT_MS = 250;
+const IDENTIFIER_HASH_DOMAIN = 'shipfox.workspaces.rate-limit.identifier.v1';
+export function hashWorkspacesRateLimitIdentifier(params) {
+    return hashRateLimitIdentifier({
+        action: params.action,
+        scope: params.scope,
+        identifier: params.identifier,
+        secret: rateLimitIdentifierKey(),
+        domain: IDENTIFIER_HASH_DOMAIN
+    });
+}
+export async function checkWorkspacesRateLimit(params) {
+    try {
+        await checkRateLimit({
+            action: params.action,
+            scope: params.scope,
+            identifier: params.identifier,
+            limit: params.limit,
+            windowSeconds: params.windowSeconds,
+            identifierSecret: rateLimitIdentifierKey(),
+            identifierHashDomain: IDENTIFIER_HASH_DOMAIN,
+            consume: consumeWorkspacesRateLimit,
+            prune: pruneExpiredWorkspacesRateLimits,
+            onCheck: recordWorkspaceRateLimitCheck,
+            onPruneFailure: recordWorkspaceRateLimitPruneFailure,
+            now: params.now,
+            timeoutMs: params.timeoutMs ?? RATE_LIMIT_TIMEOUT_MS
+        });
+    } catch (error) {
+        if (error instanceof RateLimitExceededError) {
+            throw new WorkspacesRateLimitExceededError({
+                action: error.action,
+                scope: error.scope,
+                retryAfterSeconds: error.retryAfterSeconds,
+                identifierHmacPrefix: error.identifierHmacPrefix
+            });
+        }
+        if (error instanceof RateLimitUnavailableError) {
+            throw new WorkspacesRateLimitUnavailableError({
+                action: error.action,
+                scope: error.scope,
+                identifierHmacPrefix: error.identifierHmacPrefix,
+                cause: error.cause
+            });
+        }
+        throw error;
+    }
+}
+
+//# sourceMappingURL=rate-limit.js.map

package/dist/core/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/rate-limit.ts"],"sourcesContent":["import {rateLimitIdentifierKey} from '@shipfox/node-auth-root-key';\nimport {\n  checkRateLimit,\n  hashRateLimitIdentifier,\n  RateLimitExceededError,\n  type RateLimitOutcome,\n  type RateLimitPolicy,\n  RateLimitUnavailableError,\n} from '@shipfox/node-rate-limit';\nimport {consumeWorkspacesRateLimit, pruneExpiredWorkspacesRateLimits} from '#db/rate-limits.js';\nimport {\n  recordWorkspaceRateLimitCheck,\n  recordWorkspaceRateLimitPruneFailure,\n} from '#metrics/instance.js';\n\nexport type WorkspacesRateLimitAction = 'slug-availability';\nexport type WorkspacesRateLimitScope = 'ip';\nexport type WorkspacesRateLimitOutcome = RateLimitOutcome;\nexport type WorkspacesRateLimitPolicy = RateLimitPolicy;\n\nexport interface CheckWorkspacesRateLimitParams extends WorkspacesRateLimitPolicy {\n  action: WorkspacesRateLimitAction;\n  scope: WorkspacesRateLimitScope;\n  identifier: string;\n  now?: Date | undefined;\n  timeoutMs?: number | undefined;\n}\n\nexport class WorkspacesRateLimitExceededError extends RateLimitExceededError<\n  WorkspacesRateLimitAction,\n  WorkspacesRateLimitScope\n> {\n  constructor(params: {\n    action: WorkspacesRateLimitAction;\n    scope: WorkspacesRateLimitScope;\n    retryAfterSeconds: number;\n    identifierHmacPrefix: string;\n  }) {\n    super(params);\n    this.name = 'WorkspacesRateLimitExceededError';\n  }\n}\n\nexport class WorkspacesRateLimitUnavailableError extends RateLimitUnavailableError<\n  WorkspacesRateLimitAction,\n  WorkspacesRateLimitScope\n> {\n  constructor(params: {\n    action: WorkspacesRateLimitAction;\n    scope: WorkspacesRateLimitScope;\n    identifierHmacPrefix: string;\n    cause: unknown;\n  }) {\n    super(params);\n    this.name = 'WorkspacesRateLimitUnavailableError';\n  }\n}\n\nexport const WORKSPACE_SLUG_AVAILABILITY_RATE_LIMIT = {\n  limit: 60,\n  windowSeconds: 5 * 60,\n} as const;\n\nconst RATE_LIMIT_TIMEOUT_MS = 250;\nconst IDENTIFIER_HASH_DOMAIN = 'shipfox.workspaces.rate-limit.identifier.v1';\n\nexport function hashWorkspacesRateLimitIdentifier(params: {\n  action: WorkspacesRateLimitAction;\n  scope: WorkspacesRateLimitScope;\n  identifier: string;\n}): string {\n  return hashRateLimitIdentifier({\n    action: params.action,\n    scope: params.scope,\n    identifier: params.identifier,\n    secret: rateLimitIdentifierKey(),\n    domain: IDENTIFIER_HASH_DOMAIN,\n  });\n}\n\nexport async function checkWorkspacesRateLimit(\n  params: CheckWorkspacesRateLimitParams,\n): Promise<void> {\n  try {\n    await checkRateLimit({\n      action: params.action,\n      scope: params.scope,\n      identifier: params.identifier,\n      limit: params.limit,\n      windowSeconds: params.windowSeconds,\n      identifierSecret: rateLimitIdentifierKey(),\n      identifierHashDomain: IDENTIFIER_HASH_DOMAIN,\n      consume: consumeWorkspacesRateLimit,\n      prune: pruneExpiredWorkspacesRateLimits,\n      onCheck: recordWorkspaceRateLimitCheck,\n      onPruneFailure: recordWorkspaceRateLimitPruneFailure,\n      now: params.now,\n      timeoutMs: params.timeoutMs ?? RATE_LIMIT_TIMEOUT_MS,\n    });\n  } catch (error) {\n    if (error instanceof RateLimitExceededError) {\n      throw new WorkspacesRateLimitExceededError({\n        action: error.action,\n        scope: error.scope,\n        retryAfterSeconds: error.retryAfterSeconds,\n        identifierHmacPrefix: error.identifierHmacPrefix,\n      });\n    }\n    if (error instanceof RateLimitUnavailableError) {\n      throw new WorkspacesRateLimitUnavailableError({\n        action: error.action,\n        scope: error.scope,\n        identifierHmacPrefix: error.identifierHmacPrefix,\n        cause: error.cause,\n      });\n    }\n    throw error;\n  }\n}\n"],"names":["rateLimitIdentifierKey","checkRateLimit","hashRateLimitIdentifier","RateLimitExceededError","RateLimitUnavailableError","consumeWorkspacesRateLimit","pruneExpiredWorkspacesRateLimits","recordWorkspaceRateLimitCheck","recordWorkspaceRateLimitPruneFailure","WorkspacesRateLimitExceededError","params","name","WorkspacesRateLimitUnavailableError","WORKSPACE_SLUG_AVAILABILITY_RATE_LIMIT","limit","windowSeconds","RATE_LIMIT_TIMEOUT_MS","IDENTIFIER_HASH_DOMAIN","hashWorkspacesRateLimitIdentifier","action","scope","identifier","secret","domain","checkWorkspacesRateLimit","identifierSecret","identifierHashDomain","consume","prune","onCheck","onPruneFailure","now","timeoutMs","error","retryAfterSeconds","identifierHmacPrefix","cause"],"mappings":"AAAA,SAAQA,sBAAsB,QAAO,8BAA8B;AACnE,SACEC,cAAc,EACdC,uBAAuB,EACvBC,sBAAsB,EAGtBC,yBAAyB,QACpB,2BAA2B;AAClC,SAAQC,0BAA0B,EAAEC,gCAAgC,QAAO,qBAAqB;AAChG,SACEC,6BAA6B,EAC7BC,oCAAoC,QAC/B,uBAAuB;AAe9B,OAAO,MAAMC,yCAAyCN;IAIpD,YAAYO,MAKX,CAAE;QACD,KAAK,CAACA;QACN,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,4CAA4CR;IAIvD,YAAYM,MAKX,CAAE;QACD,KAAK,CAACA;QACN,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAME,yCAAyC;IACpDC,OAAO;IACPC,eAAe,IAAI;AACrB,EAAW;AAEX,MAAMC,wBAAwB;AAC9B,MAAMC,yBAAyB;AAE/B,OAAO,SAASC,kCAAkCR,MAIjD;IACC,OAAOR,wBAAwB;QAC7BiB,QAAQT,OAAOS,MAAM;QACrBC,OAAOV,OAAOU,KAAK;QACnBC,YAAYX,OAAOW,UAAU;QAC7BC,QAAQtB;QACRuB,QAAQN;IACV;AACF;AAEA,OAAO,eAAeO,yBACpBd,MAAsC;IAEtC,IAAI;QACF,MAAMT,eAAe;YACnBkB,QAAQT,OAAOS,MAAM;YACrBC,OAAOV,OAAOU,KAAK;YACnBC,YAAYX,OAAOW,UAAU;YAC7BP,OAAOJ,OAAOI,KAAK;YACnBC,eAAeL,OAAOK,aAAa;YACnCU,kBAAkBzB;YAClB0B,sBAAsBT;YACtBU,SAAStB;YACTuB,OAAOtB;YACPuB,SAAStB;YACTuB,gBAAgBtB;YAChBuB,KAAKrB,OAAOqB,GAAG;YACfC,WAAWtB,OAAOsB,SAAS,IAAIhB;QACjC;IACF,EAAE,OAAOiB,OAAO;QACd,IAAIA,iBAAiB9B,wBAAwB;YAC3C,MAAM,IAAIM,iCAAiC;gBACzCU,QAAQc,MAAMd,MAAM;gBACpBC,OAAOa,MAAMb,KAAK;gBAClBc,mBAAmBD,MAAMC,iBAAiB;gBAC1CC,sBAAsBF,MAAME,oBAAoB;YAClD;QACF;QACA,IAAIF,iBAAiB7B,2BAA2B;YAC9C,MAAM,IAAIQ,oCAAoC;gBAC5CO,QAAQc,MAAMd,MAAM;gBACpBC,OAAOa,MAAMb,KAAK;gBAClBe,sBAAsBF,MAAME,oBAAoB;gBAChDC,OAAOH,MAAMG,KAAK;YACpB;QACF;QACA,MAAMH;IACR;AACF"}

package/dist/core/workspaces.d.ts

@@ -17,10 +17,17 @@ export interface RequireWorkspaceMembershipResult {
 export declare function requireWorkspaceMembership(params: RequireWorkspaceMembershipParams): Promise<RequireWorkspaceMembershipResult>;
 export declare function createWorkspaceForUser(params: {
     name: string;
+    slug: string;
     userId: string;
     userEmail?: string | undefined;
     userName?: string | null | undefined;
 }): Promise<Workspace>;
+export declare function checkWorkspaceSlugAvailability(slug: string): Promise<boolean>;
+export declare function updateWorkspaceDetails(params: {
+    workspaceId: string;
+    name?: string | undefined;
+    slug?: string | undefined;
+}): Promise<Workspace>;
 export declare function getWorkspace(params: {
     workspaceId: string;
 }): Promise<Workspace>;

package/dist/core/workspaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/core/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAE7B,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,yBAAyB,CAAC;AASvD,MAAM,WAAW,gCAAgC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IAClD,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,gCAAgC,GACvC,OAAO,CAAC,gCAAgC,CAAC,CAe3C;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC,GAAG,OAAO,CAAC,SAAS,CAAC,CA0BrB;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE;IAAC,WAAW,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAOpF;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAAC,WAAW,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAG/F;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAG/B;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAErC;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAShC;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBhB"}
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../src/core/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,6BAA6B,CAAC;AAIrC,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAE7B,MAAM,oBAAoB,CAAC;AAK5B,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,yBAAyB,CAAC;AAUvD,MAAM,WAAW,gCAAgC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IAClD,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,SAAS,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,gCAAgC,GACvC,OAAO,CAAC,gCAAgC,CAAC,CAe3C;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC,GAAG,OAAO,CAAC,SAAS,CAAC,CA8BrB;AAED,wBAAsB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnF;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B,GAAG,OAAO,CAAC,SAAS,CAAC,CA0BrB;AAED,wBAAsB,YAAY,CAAC,MAAM,EAAE;IAAC,WAAW,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAOpF;AAED,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAAC,WAAW,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAG/F;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAG/B;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAErC;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAShC;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,aAAa,CAAC,qBAAqB,CAAC,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBhB"}

package/dist/core/workspaces.js

@@ -1,12 +1,13 @@
-import { WORKSPACES_WORKSPACE_CREATED } from '@shipfox/api-workspaces-dto';
+import { WORKSPACES_WORKSPACE_CREATED, WORKSPACES_WORKSPACE_UPDATED } from '@shipfox/api-workspaces-dto';
+import { isUniqueViolation } from '@shipfox/node-drizzle';
 import { writeOutboxEvent } from '@shipfox/node-outbox';
 import { db } from '#db/db.js';
 import { findMembership, listMembershipsByUser, listMembershipsByWorkspace, removeMembership } from '#db/memberships.js';
 import { memberships } from '#db/schema/memberships.js';
 import { workspacesOutbox } from '#db/schema/outbox.js';
 import { toWorkspace, workspaces } from '#db/schema/workspaces.js';
-import { getWorkspaceById } from '#db/workspaces.js';
-import { MembershipNotFoundError, MembershipRequiredError, SelfRemovalNotAllowedError, WorkspaceInactiveError, WorkspaceNotFoundError } from './errors.js';
+import { getWorkspaceById, isWorkspaceSlugAvailable, updateWorkspace } from '#db/workspaces.js';
+import { MembershipNotFoundError, MembershipRequiredError, SelfRemovalNotAllowedError, WorkspaceInactiveError, WorkspaceNotFoundError, WorkspaceSlugConflictError } from './errors.js';
 export async function requireWorkspaceMembership(params) {
     const membership = params.memberships.find((m)=>m.workspaceId === params.workspaceId);
     if (!membership) {
@@ -30,9 +31,14 @@ export async function createWorkspaceForUser(params) {
     return await db().transaction(async (tx)=>{
         const [workspaceRow] = await tx.insert(workspaces).values({
             name: params.name,
+            slug: params.slug,
             createdBy: params.userId
+        }).onConflictDoNothing({
+            target: workspaces.slug
         }).returning();
-        if (!workspaceRow) throw new Error('Insert returned no rows');
+        if (!workspaceRow) {
+            throw new WorkspaceSlugConflictError(params.slug);
+        }
         await tx.insert(memberships).values({
             userId: params.userId,
             userEmail: params.userEmail ?? `user-${params.userId}@example.local`,
@@ -45,12 +51,44 @@ export async function createWorkspaceForUser(params) {
             payload: {
                 workspaceId: workspace.id,
                 name: workspace.name,
+                slug: workspace.slug,
                 creatorUserId: params.userId
             }
         });
         return workspace;
     });
 }
+export async function checkWorkspaceSlugAvailability(slug) {
+    return await isWorkspaceSlugAvailable(slug);
+}
+export async function updateWorkspaceDetails(params) {
+    try {
+        return await db().transaction(async (tx)=>{
+            const workspace = await updateWorkspace({
+                id: params.workspaceId,
+                name: params.name,
+                slug: params.slug
+            }, {
+                tx
+            });
+            if (!workspace) throw new WorkspaceNotFoundError(params.workspaceId);
+            await writeOutboxEvent(tx, workspacesOutbox, {
+                type: WORKSPACES_WORKSPACE_UPDATED,
+                payload: {
+                    workspaceId: workspace.id,
+                    name: workspace.name,
+                    slug: workspace.slug
+                }
+            });
+            return workspace;
+        });
+    } catch (error) {
+        if (isUniqueViolation(error, 'workspaces_slug_unique') && params.slug) {
+            throw new WorkspaceSlugConflictError(params.slug);
+        }
+        throw error;
+    }
+}
 export async function getWorkspace(params) {
     const workspace = await getWorkspaceById(params.workspaceId);
     if (!workspace) {