ltcai 1.0.1 → 1.1.0

package/latticeai/server_app.py

@@ -96,6 +96,11 @@ from latticeai.core.workspace_os import (
     WorkspaceOSStore,
     remove_skill_directory,
 )
+from latticeai.core.enterprise import (
+    EnterpriseCapability,
+    capability_registry,
+    detect_edition,
+)
 from latticeai.core.agent import (
     AgentState,
     AgentRunContext,
@@ -1507,6 +1512,29 @@ class WorkspaceVSCodeRequest(BaseModel):
     prompt: str = ""
 
 
+class WorkspaceCreateRequest(BaseModel):
+    name: str
+    settings: Dict = {}
+
+
+class WorkspaceUpdateRequest(BaseModel):
+    name: Optional[str] = None
+    settings: Optional[Dict] = None
+
+
+class WorkspaceMemberRequest(BaseModel):
+    user_id: str
+    role: str = "member"
+
+
+class WorkspaceMemberRoleRequest(BaseModel):
+    role: str
+
+
+class WorkspaceActivateRequest(BaseModel):
+    workspace_id: str
+
+
 class GardenRequest(BaseModel):
     raw_data: str
     category: Optional[str] = None       # 10_Wiki / 00_Raw / Skills
@@ -1708,12 +1736,27 @@ def _workspace_graph():
     return KNOWLEDGE_GRAPH if (ENABLE_GRAPH and KNOWLEDGE_GRAPH) else None
 
 
+def _workspace_scope(request: Request) -> Optional[str]:
+    """Resolve the active workspace for scoping from an optional header/query.
+
+    Returns ``None`` when unset so the store falls back to the active workspace
+    (Personal by default), preserving pre-1.1 behaviour for legacy clients.
+    """
+    header = request.headers.get("X-Workspace-Id")
+    if header and header.strip():
+        return header.strip()
+    query = request.query_params.get("workspace_id")
+    return query.strip() if query and query.strip() else None
+
+
 @app.get("/workspace/os")
 async def workspace_os_summary(request: Request):
-    require_user(request)
+    user = require_user(request)
     summary = WORKSPACE_OS.summary()
     summary["graph"] = _graph_stats_safe()
     summary["models"] = _workspace_models_payload()
+    summary["workspace_registry"] = WORKSPACE_OS.list_workspaces(user_id=user or None)
+    summary["edition"] = capability_registry.describe()
     return summary
 
 
@@ -1770,7 +1813,7 @@ async def workspace_onboarding_model_recommendations(request: Request):
 @app.get("/workspace/traces")
 async def workspace_traces(request: Request, conversation_id: Optional[str] = None, limit: int = 50):
     require_user(request)
-    return WORKSPACE_OS.list_traces(conversation_id=conversation_id, limit=limit)
+    return WORKSPACE_OS.list_traces(conversation_id=conversation_id, limit=limit, workspace_id=_workspace_scope(request))
 
 
 @app.get("/workspace/indexing")
@@ -1805,7 +1848,7 @@ async def workspace_indexing_remove(source_id: str, request: Request):
 @app.get("/workspace/snapshots")
 async def workspace_snapshots(request: Request):
     require_user(request)
-    return WORKSPACE_OS.list_snapshots()
+    return WORKSPACE_OS.list_snapshots(workspace_id=_workspace_scope(request))
 
 
 @app.post("/workspace/snapshots")
@@ -1817,6 +1860,7 @@ async def workspace_snapshot_create(req: WorkspaceSnapshotRequest, request: Requ
         history=get_history(),
         settings=_workspace_settings_payload(),
         models=_workspace_models_payload(),
+        workspace_id=_workspace_scope(request),
     )
     append_audit_event("workspace_snapshot", user_email=current_user, snapshot_id=result["snapshot"]["id"])
     return result
@@ -1863,7 +1907,7 @@ async def workspace_snapshot_export(snapshot_id: str, request: Request):
 @app.get("/workspace/time-machine")
 async def workspace_time_machine(request: Request, limit: int = 100):
     require_user(request)
-    return WORKSPACE_OS.timeline(get_audit_log(), limit=limit)
+    return WORKSPACE_OS.timeline(get_audit_log(), limit=limit, workspace_id=_workspace_scope(request))
 
 
 @app.get("/workspace/time-machine/{snapshot_id}/{area}")
@@ -1878,13 +1922,13 @@ async def workspace_time_machine_view(snapshot_id: str, area: str, request: Requ
 @app.get("/workspace/memories")
 async def workspace_memories(request: Request, kind: Optional[str] = None):
     current_user = require_user(request)
-    return WORKSPACE_OS.list_memories(user_email=current_user or None, kind=kind)
+    return WORKSPACE_OS.list_memories(user_email=current_user or None, kind=kind, workspace_id=_workspace_scope(request))
 
 
 @app.get("/workspace/memories/search")
 async def workspace_memory_search(q: str, request: Request, limit: int = 20):
     current_user = require_user(request)
-    return WORKSPACE_OS.search_memories(q, user_email=current_user or None, limit=limit)
+    return WORKSPACE_OS.search_memories(q, user_email=current_user or None, limit=limit, workspace_id=_workspace_scope(request))
 
 
 @app.post("/workspace/memories")
@@ -1899,6 +1943,7 @@ async def workspace_memory_upsert(req: WorkspaceMemoryRequest, request: Request)
             metadata=req.metadata,
             user_email=current_user or None,
             graph=_workspace_graph(),
+            workspace_id=_workspace_scope(request),
         )
     except ValueError as exc:
         raise HTTPException(status_code=400, detail=str(exc)) from exc
@@ -1917,7 +1962,7 @@ async def workspace_memory_delete(memory_id: str, request: Request):
 @app.get("/workspace/agents")
 async def workspace_agents(request: Request):
     require_user(request)
-    return WORKSPACE_OS.list_agents()
+    return WORKSPACE_OS.list_agents(workspace_id=_workspace_scope(request))
 
 
 @app.post("/workspace/agents/runs")
@@ -1932,6 +1977,7 @@ async def workspace_agent_run(req: WorkspaceAgentRunRequest, request: Request):
         relationships=req.relationships,
         user_email=current_user or None,
         graph=_workspace_graph(),
+        workspace_id=_workspace_scope(request),
     )
     return {"run": run}
 
@@ -1974,7 +2020,7 @@ async def workspace_computer_memory_activity(req: WorkspaceComputerActivityReque
 @app.get("/workspace/workflows")
 async def workspace_workflows(request: Request, q: str = ""):
     require_user(request)
-    return WORKSPACE_OS.list_workflows(query=q)
+    return WORKSPACE_OS.list_workflows(query=q, workspace_id=_workspace_scope(request))
 
 
 @app.post("/workspace/workflows")
@@ -1986,6 +2032,7 @@ async def workspace_workflow_create(req: WorkspaceWorkflowRequest, request: Requ
         metadata=req.metadata,
         user_email=current_user or None,
         graph=_workspace_graph(),
+        workspace_id=_workspace_scope(request),
     )
     return {"workflow": workflow}
 
@@ -2114,6 +2161,139 @@ async def workspace_vscode_send(req: WorkspaceVSCodeRequest, request: Request):
     return {"status": "ok", "workflow": workflow}
 
 
+# ── Organization Workspaces, membership, roles, and edition seam ─────────────────
+
+@app.get("/workspace/registry")
+async def workspace_registry(request: Request):
+    user = require_user(request)
+    return WORKSPACE_OS.list_workspaces(user_id=user or None)
+
+
+@app.get("/workspace/editions")
+async def workspace_editions(request: Request):
+    require_user(request)
+    return capability_registry.describe()
+
+
+@app.post("/workspace/activate")
+async def workspace_activate(req: WorkspaceActivateRequest, request: Request):
+    user = require_user(request)
+    try:
+        return WORKSPACE_OS.set_active_workspace(req.workspace_id, user_id=user or None)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=404, detail=f"Workspace not found: {exc}") from exc
+    except PermissionError as exc:
+        raise HTTPException(status_code=403, detail=str(exc)) from exc
+
+
+@app.post("/workspace/orgs")
+async def workspace_org_create(req: WorkspaceCreateRequest, request: Request):
+    user = require_user(request)
+    try:
+        workspace = WORKSPACE_OS.create_organization_workspace(
+            name=req.name,
+            owner_user_id=user or None,
+            settings=req.settings,
+        )
+    except ValueError as exc:
+        raise HTTPException(status_code=400, detail=str(exc)) from exc
+    append_audit_event("workspace_created", user_email=user, workspace_id=workspace["workspace_id"])
+    return {"workspace": workspace}
+
+
+@app.get("/workspace/orgs/{workspace_id}")
+async def workspace_org_get(workspace_id: str, request: Request):
+    user = require_user(request)
+    try:
+        return {"workspace": WORKSPACE_OS.get_workspace(workspace_id, user_id=user or None)}
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=404, detail=f"Workspace not found: {exc}") from exc
+
+
+@app.get("/workspace/orgs/{workspace_id}/summary")
+async def workspace_org_summary(workspace_id: str, request: Request):
+    user = require_user(request)
+    try:
+        return WORKSPACE_OS.workspace_summary(workspace_id, user_id=user or None)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=404, detail=f"Workspace not found: {exc}") from exc
+
+
+@app.patch("/workspace/orgs/{workspace_id}")
+async def workspace_org_update(workspace_id: str, req: WorkspaceUpdateRequest, request: Request):
+    user = require_user(request)
+    try:
+        workspace = WORKSPACE_OS.update_workspace(workspace_id, name=req.name, settings=req.settings, actor=user or None)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=404, detail=f"Workspace not found: {exc}") from exc
+    except PermissionError as exc:
+        raise HTTPException(status_code=403, detail=str(exc)) from exc
+    except ValueError as exc:
+        raise HTTPException(status_code=400, detail=str(exc)) from exc
+    append_audit_event("workspace_updated", user_email=user, workspace_id=workspace_id)
+    return {"workspace": workspace}
+
+
+@app.post("/workspace/orgs/{workspace_id}/archive")
+async def workspace_org_archive(workspace_id: str, request: Request):
+    user = require_user(request)
+    try:
+        workspace = WORKSPACE_OS.archive_workspace(workspace_id, actor=user or None)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=404, detail=f"Workspace not found: {exc}") from exc
+    except PermissionError as exc:
+        raise HTTPException(status_code=403, detail=str(exc)) from exc
+    except ValueError as exc:
+        raise HTTPException(status_code=400, detail=str(exc)) from exc
+    append_audit_event("workspace_archived", user_email=user, workspace_id=workspace_id)
+    return {"workspace": workspace}
+
+
+@app.post("/workspace/orgs/{workspace_id}/members")
+async def workspace_org_add_member(workspace_id: str, req: WorkspaceMemberRequest, request: Request):
+    user = require_user(request)
+    try:
+        workspace = WORKSPACE_OS.add_member(workspace_id, user_id=req.user_id, role=req.role, actor=user or None)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=404, detail=f"Workspace not found: {exc}") from exc
+    except PermissionError as exc:
+        raise HTTPException(status_code=403, detail=str(exc)) from exc
+    except ValueError as exc:
+        raise HTTPException(status_code=400, detail=str(exc)) from exc
+    append_audit_event("workspace_member_added", user_email=user, workspace_id=workspace_id, member=req.user_id, role=req.role)
+    return {"workspace": workspace}
+
+
+@app.patch("/workspace/orgs/{workspace_id}/members/{user_id}")
+async def workspace_org_update_member(workspace_id: str, user_id: str, req: WorkspaceMemberRoleRequest, request: Request):
+    user = require_user(request)
+    try:
+        workspace = WORKSPACE_OS.update_member_role(workspace_id, user_id=user_id, role=req.role, actor=user or None)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=404, detail=f"Not found: {exc}") from exc
+    except PermissionError as exc:
+        raise HTTPException(status_code=403, detail=str(exc)) from exc
+    except ValueError as exc:
+        raise HTTPException(status_code=400, detail=str(exc)) from exc
+    append_audit_event("workspace_member_role_updated", user_email=user, workspace_id=workspace_id, member=user_id, role=req.role)
+    return {"workspace": workspace}
+
+
+@app.delete("/workspace/orgs/{workspace_id}/members/{user_id}")
+async def workspace_org_remove_member(workspace_id: str, user_id: str, request: Request):
+    user = require_user(request)
+    try:
+        workspace = WORKSPACE_OS.remove_member(workspace_id, user_id=user_id, actor=user or None)
+    except FileNotFoundError as exc:
+        raise HTTPException(status_code=404, detail=f"Not found: {exc}") from exc
+    except PermissionError as exc:
+        raise HTTPException(status_code=403, detail=str(exc)) from exc
+    except ValueError as exc:
+        raise HTTPException(status_code=400, detail=str(exc)) from exc
+    append_audit_event("workspace_member_removed", user_email=user, workspace_id=workspace_id, member=user_id)
+    return {"workspace": workspace}
+
+
 # ── Health & Info ──────────────────────────────────────────────────────────────
 
 ENGINE_INSTALLERS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ltcai",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Lattice AI Workspace OS for local-first graph, memory, agent, workflow, and skill operations",
   "homepage": "https://github.com/TaeSooPark-PTS/LatticeAI#readme",
   "repository": {

package/static/scripts/workspace.js

@@ -3,6 +3,9 @@ const API_BASE = window.location.protocol === "file:" ? "http://localhost:4825"
 const state = {
   os: null,
   snapshots: [],
+  activeWorkspace: null,
+  registry: null,
+  managingWorkspace: null,
 };
 
 function $(id) {
@@ -21,6 +24,7 @@ function escapeHtml(value) {
 async function api(path, options = {}) {
   const headers = { ...(options.headers || {}) };
   if (options.body && !headers["Content-Type"]) headers["Content-Type"] = "application/json";
+  if (state.activeWorkspace && !headers["X-Workspace-Id"]) headers["X-Workspace-Id"] = state.activeWorkspace;
   const response = await fetch(API_BASE + path, { credentials: "include", ...options, headers });
   const text = await response.text();
   let data = {};
@@ -226,6 +230,103 @@ function renderTimeline(payload) {
   `).join("") : `<div class="timeline-item"><div class="meta-line">No timeline events.</div></div>`;
 }
 
+function renderWorkspaceRegistry(registry, edition) {
+  state.registry = registry;
+  if (!state.activeWorkspace) state.activeWorkspace = registry.active_workspace || "personal";
+  const workspaces = registry.workspaces || [];
+  const select = $("workspace-select");
+  if (select) {
+    select.innerHTML = workspaces.map((ws) => `
+      <option value="${escapeHtml(ws.workspace_id)}" ${ws.workspace_id === state.activeWorkspace ? "selected" : ""}>
+        ${escapeHtml(ws.name)}${ws.type === "organization" ? " (org)" : ""}${ws.status === "archived" ? " · archived" : ""}
+      </option>
+    `).join("");
+  }
+  const active = workspaces.find((ws) => ws.workspace_id === state.activeWorkspace);
+  const rolePill = $("workspace-role");
+  if (rolePill) rolePill.textContent = active ? (active.your_role || "—") : "";
+  if (edition) {
+    const pill = $("edition-pill");
+    if (pill) pill.textContent = edition.edition || "community";
+  }
+  const list = $("workspace-list");
+  if (list) {
+    list.innerHTML = workspaces.length ? workspaces.map((ws) => `
+      <div class="list-item">
+        <div class="list-title">
+          <span>${escapeHtml(ws.name)}</span>
+          <span class="status-pill">${escapeHtml(ws.type)}</span>
+        </div>
+        <div class="meta-line">id: ${escapeHtml(ws.workspace_id)} · members: ${escapeHtml(ws.member_count)} · role: ${escapeHtml(ws.your_role || "—")} · ${escapeHtml(ws.status || "active")}</div>
+        <div class="item-actions">
+          ${ws.workspace_id === state.activeWorkspace ? `<span class="status-pill">active</span>` : `<button class="small-action" data-ws-action="activate" data-ws="${escapeHtml(ws.workspace_id)}"><i class="ti ti-switch-horizontal"></i>Switch</button>`}
+          ${ws.type === "organization" ? `<button class="small-action" data-ws-action="members" data-ws="${escapeHtml(ws.workspace_id)}"><i class="ti ti-users"></i>Members</button>` : ""}
+          ${ws.type === "organization" && ws.status !== "archived" ? `<button class="small-action" data-ws-action="archive" data-ws="${escapeHtml(ws.workspace_id)}"><i class="ti ti-archive"></i>Archive</button>` : ""}
+        </div>
+      </div>
+    `).join("") : `<div class="list-item"><div class="meta-line">No workspaces.</div></div>`;
+  }
+  renderMembers(workspaces);
+}
+
+function renderMembers(workspaces) {
+  const panel = $("member-panel");
+  if (!panel) return;
+  if (!state.managingWorkspace) {
+    panel.hidden = true;
+    return;
+  }
+  const ws = (workspaces || []).find((item) => item.workspace_id === state.managingWorkspace);
+  if (!ws || ws.type !== "organization") {
+    panel.hidden = true;
+    return;
+  }
+  panel.hidden = false;
+  const title = $("member-panel-title");
+  if (title) title.textContent = `Members — ${ws.name}`;
+  const members = ws.members || [];
+  $("member-list").innerHTML = members.length ? members.map((m) => `
+    <div class="list-item">
+      <div class="list-title"><span>${escapeHtml(m.user_id)}</span><span class="status-pill">${escapeHtml(m.role)}</span></div>
+      <div class="item-actions">
+        <select class="small-action" data-member-role="${escapeHtml(m.user_id)}" data-ws="${escapeHtml(ws.workspace_id)}">
+          ${["owner", "admin", "member", "viewer"].map((r) => `<option value="${r}" ${m.role === r ? "selected" : ""}>${r}</option>`).join("")}
+        </select>
+        <button class="small-action" data-member-remove="${escapeHtml(m.user_id)}" data-ws="${escapeHtml(ws.workspace_id)}"><i class="ti ti-user-minus"></i>Remove</button>
+      </div>
+    </div>
+  `).join("") : `<div class="list-item"><div class="meta-line">No members yet.</div></div>`;
+}
+
+async function activateWorkspace(workspaceId) {
+  await api("/workspace/activate", { method: "POST", body: JSON.stringify({ workspace_id: workspaceId }) });
+  state.activeWorkspace = workspaceId;
+  toast(`Switched to ${workspaceId}`);
+  await refreshAll();
+}
+
+async function createOrg() {
+  const name = ($("org-name").value || "").trim();
+  if (!name) return;
+  const result = await api("/workspace/orgs", { method: "POST", body: JSON.stringify({ name, settings: {} }) });
+  $("org-name").value = "";
+  toast(`Created ${result.workspace.workspace_id}`);
+  state.managingWorkspace = result.workspace.workspace_id;
+  await refreshAll();
+}
+
+async function addMember(workspaceId) {
+  const userId = ($("member-user").value || "").trim();
+  if (!userId) return;
+  await api(`/workspace/orgs/${encodeURIComponent(workspaceId)}/members`, {
+    method: "POST",
+    body: JSON.stringify({ user_id: userId, role: $("member-role").value }),
+  });
+  $("member-user").value = "";
+  toast(`Added ${userId}`);
+  await refreshAll();
+}
+
 async function refreshAll() {
   const [os, onboarding, traces, indexing, snapshots, memories, computerMemory, agents, workflows, skills, timeline] = await Promise.all([
     api("/workspace/os"),
@@ -242,6 +343,7 @@ async function refreshAll() {
   ]);
   state.os = os;
   renderMetrics(os);
+  if (os.workspace_registry) renderWorkspaceRegistry(os.workspace_registry, os.edition);
   renderOnboarding(onboarding);
   renderTraces(traces);
   renderIndexing(indexing);
@@ -357,6 +459,47 @@ document.addEventListener("click", async (event) => {
     });
     toast(`Skill ${skillBtn.dataset.skillAction}`);
     await refreshAll();
+    return;
+  }
+
+  const wsBtn = event.target.closest("[data-ws-action]");
+  if (wsBtn) {
+    const action = wsBtn.dataset.wsAction;
+    const ws = wsBtn.dataset.ws;
+    if (action === "activate") {
+      await activateWorkspace(ws);
+    } else if (action === "members") {
+      state.managingWorkspace = ws;
+      if (state.registry) renderMembers(state.registry.workspaces);
+    } else if (action === "archive") {
+      await api(`/workspace/orgs/${encodeURIComponent(ws)}/archive`, { method: "POST" });
+      toast(`Archived ${ws}`);
+      await refreshAll();
+    }
+    return;
+  }
+
+  const removeBtn = event.target.closest("[data-member-remove]");
+  if (removeBtn) {
+    await api(`/workspace/orgs/${encodeURIComponent(removeBtn.dataset.ws)}/members/${encodeURIComponent(removeBtn.dataset.memberRemove)}`, { method: "DELETE" });
+    toast("Member removed");
+    await refreshAll();
+  }
+});
+
+document.addEventListener("change", async (event) => {
+  const roleSelect = event.target.closest("[data-member-role]");
+  if (roleSelect) {
+    try {
+      await api(`/workspace/orgs/${encodeURIComponent(roleSelect.dataset.ws)}/members/${encodeURIComponent(roleSelect.dataset.memberRole)}`, {
+        method: "PATCH",
+        body: JSON.stringify({ role: roleSelect.value }),
+      });
+      toast("Role updated");
+      await refreshAll();
+    } catch (err) {
+      toast(err.message);
+    }
   }
 });
 
@@ -378,5 +521,11 @@ document.addEventListener("DOMContentLoaded", () => {
   }));
   $("create-demo-workflow").addEventListener("click", () => createDemoWorkflow().catch((err) => toast(err.message)));
   $("reload-skills").addEventListener("click", () => refreshAll().catch((err) => toast(err.message)));
+  $("workspace-select").addEventListener("change", (event) => activateWorkspace(event.target.value).catch((err) => toast(err.message)));
+  $("create-org").addEventListener("click", () => createOrg().catch((err) => toast(err.message)));
+  $("new-org-btn").addEventListener("click", () => $("org-name").focus());
+  $("add-member").addEventListener("click", () => {
+    if (state.managingWorkspace) addMember(state.managingWorkspace).catch((err) => toast(err.message));
+  });
   refreshAll().catch((err) => toast(err.message));
 });

package/static/sw.js

@@ -1,6 +1,6 @@
 // Lattice AI Service Worker — enables PWA install on Android/iOS
 // Strategy: network-first for API, cache-first for static assets.
-const CACHE = "ltcai-v100";
+const CACHE = "ltcai-v110";
 const STATIC = [
   "/",
   "/workspace",

package/static/workspace.css

@@ -513,3 +513,34 @@ textarea {
     grid-template-columns: 1fr;
   }
 }
+
+/* Workspace switcher + organization management (v1.1.0) */
+.workspace-switcher {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  padding: 6px 10px;
+  border-radius: 10px;
+  background: rgba(255, 255, 255, 0.06);
+  border: 1px solid rgba(255, 255, 255, 0.12);
+}
+.workspace-switcher select {
+  background: transparent;
+  border: none;
+  color: inherit;
+  font: inherit;
+  font-weight: 600;
+  max-width: 220px;
+}
+.workspace-role-pill {
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  opacity: 0.75;
+}
+#member-panel {
+  margin-top: 16px;
+}
+#org-create-form {
+  margin-bottom: 12px;
+}

package/static/workspace.html

@@ -8,7 +8,7 @@
   <link rel="icon" type="image/png" sizes="32x32" href="/icons/favicon-32.png">
   <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap">
   <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@tabler/icons-webfont@latest/tabler-icons.min.css">
-  <link rel="stylesheet" href="/static/workspace.css?v=1.0.0">
+  <link rel="stylesheet" href="/static/workspace.css?v=1.1.0">
 </head>
 <body>
   <div class="workspace-shell">
@@ -41,6 +41,12 @@
           <h1>Workspace Command Center</h1>
         </div>
         <div class="top-actions">
+          <div class="workspace-switcher" title="Active workspace">
+            <i class="ti ti-building-community"></i>
+            <select id="workspace-select" aria-label="Active workspace"></select>
+            <span class="workspace-role-pill" id="workspace-role"></span>
+          </div>
+          <button class="icon-action" id="new-org-btn" title="New organization workspace"><i class="ti ti-plus"></i></button>
           <button class="icon-action" id="refresh-btn" title="Refresh"><i class="ti ti-refresh"></i></button>
           <button class="primary-action" id="snapshot-now"><i class="ti ti-device-floppy"></i><span>Snapshot</span></button>
         </div>
@@ -48,6 +54,39 @@
 
       <section class="metric-grid" id="metric-grid"></section>
 
+      <section class="workspace-band" id="organization">
+        <div class="section-head">
+          <div>
+            <div class="eyebrow">Workspaces</div>
+            <h2>Personal &amp; Organization</h2>
+          </div>
+          <span class="status-pill" id="edition-pill">community</span>
+        </div>
+        <div class="inline-form" id="org-create-form">
+          <input id="org-name" placeholder="New organization workspace name">
+          <button class="secondary-action" id="create-org"><i class="ti ti-building-plus"></i><span>Create Org</span></button>
+        </div>
+        <div id="workspace-list" class="list-stack"></div>
+        <div class="workspace-panel" id="member-panel" hidden>
+          <div class="section-head">
+            <div>
+              <div class="eyebrow">Members</div>
+              <h2 id="member-panel-title">Manage Members</h2>
+            </div>
+          </div>
+          <div class="inline-form split">
+            <input id="member-user" placeholder="user@example.com">
+            <select id="member-role">
+              <option value="admin">admin</option>
+              <option value="member" selected>member</option>
+              <option value="viewer">viewer</option>
+            </select>
+            <button class="secondary-action" id="add-member"><i class="ti ti-user-plus"></i><span>Add</span></button>
+          </div>
+          <div id="member-list" class="list-stack"></div>
+        </div>
+      </section>
+
       <section class="workspace-band onboarding-band" id="onboarding">
         <div class="section-head">
           <div>
@@ -194,6 +233,6 @@
   </div>
 
   <div class="toast" id="toast"></div>
-  <script src="/static/scripts/workspace.js?v=1.0.0"></script>
+  <script src="/static/scripts/workspace.js?v=1.1.0"></script>
 </body>
 </html>