Akhil/add workspace - #230

Merged

itsmeakhil merged 80 commits into

mainfrom

akhil/add-workspace

Jun 29, 2026

Commits on Jun 26, 2026

docs: spec for workspaces foundation (sub-project A)

itsmeakhil
and
claude
committed
7fa48b2
docs: implementation plan for workspaces foundation (sub-project A)

itsmeakhil
and
claude
committed
ec93c15
feat(workspaces): mongo schemas + repo + system-org seed
itsmeakhil
committed
eddcd73
fix(workspaces): add get_system_org_id + race-safe upserts

itsmeakhil
and
claude
committed
10a924e
feat(workspaces): WorkspaceContext + get_workspace_ctx middleware

itsmeakhil
and
claude
committed
d313c4f
feat(workspaces): first-login hook ensures Personal workspace

itsmeakhil
and
claude
committed
3d338a6
fix(workspaces): revert unauthorized Python 3.9 compat rewrites

itsmeakhil
and
claude
committed
5edb861
feat(workspaces): per-user lazy backfill background task

itsmeakhil
and
claude
committed
7a41c02
feat(workspaces): GET orgs/workspaces + POST active route

itsmeakhil
and
claude
committed
cb7cd83
refactor(passwords): scope queries by workspace context

itsmeakhil
and
claude
committed
6d652bb
refactor(bookmarks): scope queries by workspace context

itsmeakhil
and
claude
committed
9f40a66
fix(workspaces): apply_legacy_or_filter preserves caller $or

itsmeakhil
and
claude
committed
427d391
refactor(tasks): scope queries by workspace context

itsmeakhil
and
claude
committed
7c1c388
refactor(notes): scope queries by workspace context

itsmeakhil
and
claude
committed
0f2400b
fix(workspaces): backfill spec uses created_by for all 17 collections

itsmeakhil
and
claude
committed
b855bbd
refactor(environment-manager): scope queries by workspace context

itsmeakhil
and
claude
committed
1f5bcc2
refactor(api-key-vault): scope queries by workspace context

itsmeakhil
and
claude
committed
1fc8d79
refactor(code-snippets): scope queries by workspace context

itsmeakhil
and
claude
committed
e5171e2
refactor(nosql): scope queries by workspace context

itsmeakhil
and
claude
committed
4b5ca44
fix(nosql): drop stale "upsert" wording from save_connection route summary

itsmeakhil
and
claude
committed
0ba0d31
refactor(api-client): scope queries by workspace context

itsmeakhil
and
claude
committed
dd300b9
refactor(sql-client): scope queries by workspace context

itsmeakhil
and
claude
committed
732ddf3
refactor(s3-drive): scope queries by workspace context

itsmeakhil
and
claude
committed
1a0a61e
refactor(redis-commander): scope queries by workspace context

itsmeakhil
and
claude
committed
b86a876
refactor(url-shortener): scope queries by workspace context

itsmeakhil
and
claude
committed
8f1886c
refactor(json-formatter): scope queries by workspace context

itsmeakhil
and
claude
committed
3734879
chore(dns-lookup): document stateless-tool exemption from workspace scope

itsmeakhil
and
claude
committed
a4de0f4
feat(workspaces): web API client + Zustand store

itsmeakhil
and
claude
committed
7198c97
feat(workspaces): display-only switcher pill in navbar

itsmeakhil
and
claude
committed
9c4d750
feat(workspaces): re-key pinned tools by workspace

itsmeakhil
and
claude
committed
5c6473d
feat(workspaces): sync pinned tools as keyed map

itsmeakhil
and
claude
committed
d00c8e0
feat(workspaces): boot wiring + first-login migration banner

itsmeakhil
and
claude
committed
57fc606
fix(workspaces): final review wave — pinned-tools field names, auth_user cache invalidation, personal-ws assertion

itsmeakhil
and
claude
committed
c60acf7
fix(workspaces): stable empty-array ref for pinned-tools selector

itsmeakhil
and
claude
committed
e27e4db
docs: spec for workspaces collaboration + E2EE (sub-projects B + C)

itsmeakhil
and
claude
committed
6be2ad0
docs: implementation plan for workspaces collaboration + E2EE (B + C)

itsmeakhil
and
claude
committed
cd58dd4
docs: renumber B/C tasks to 1..33 for SDD task-brief script
itsmeakhil
committed
e737de8
feat(workspaces): invitations collection + soft-delete repo helpers

itsmeakhil
and
claude
committed
c771d94

Commits on Jun 27, 2026

feat(workspaces): Resend email wrapper with dev-mode logger

itsmeakhil
and
claude
committed
7114798
feat(workspaces): hardcoded RBAC matrix + require_permission dep

itsmeakhil
and
claude
committed
2124e72
feat(workspaces): role cascade — org owner/admin implicit ws admin

itsmeakhil
and
claude
committed
e9408fc
feat(workspaces): org create/rename/soft-delete + cascade

itsmeakhil
and
claude
committed
99c18f1
feat(workspaces): shared workspace create/rename/soft-delete

itsmeakhil
and
claude
committed
47650b1
feat(workspaces): member CRUD with role cascade + sole-owner guard

itsmeakhil
and
claude
committed
b19a74c
feat(workspaces): invitation create / accept / revoke flows

itsmeakhil
and
claude
committed
cd7af25
feat(workspaces): wrap all 14 scoped routes with require_permission

itsmeakhil
and
claude
committed
60b6973
feat(workspaces): 30-day soft-delete sweeper background task

itsmeakhil
and
claude
committed
70769e0
feat(workspaces): frontend RBAC matrix + useToolPermission hook

itsmeakhil
and
claude
committed
cdcdffb
fix(workspaces): mirror encrypted-tool keys in frontend RBAC matrix + defensive guard

itsmeakhil
and
claude
committed
a5bfe73
feat(workspaces): sidebar role-gates tools + filters pinned by permission

itsmeakhil
and
claude
committed
c44ca6c
feat(workspaces): switcher dropdown with org groups and create CTAs

itsmeakhil
and
claude
committed
be92c26
feat(workspaces): create-org / create-workspace / invite-member dialogs

itsmeakhil
and
claude
committed
eb5624b
feat(workspaces): /settings/workspaces management page

itsmeakhil
and
claude
committed
b707979
feat(workspaces): pending invitations badge + token-auto-accept on login

itsmeakhil
and
claude
committed
a1e88d6
fix(workspaces): expose invitation token on response so in-app accept works

itsmeakhil
and
claude
committed
87a532e
feat(workspaces): encrypted-tool placeholder in shared workspaces

itsmeakhil
and
claude
committed
6b15a52
feat(workspaces): BroadcastChannel cross-tab sync for active workspace

itsmeakhil
and
claude
committed
37fb625
feat(workspaces): client-side crypto helpers (X25519/P-256 + AES-GCM)

itsmeakhil
and
claude
committed
657277d
feat(workspaces): users.encryption schema + keypair endpoints

itsmeakhil
and
claude
committed
aaf3a64
feat(workspaces): per-member DEK wrap + rotate + pending-wraps routes

itsmeakhil
and
claude
committed
6fe5b4d
fix(workspaces): pending-wraps requires admin; absent-field match; preserve createdAt

itsmeakhil
and
claude
committed
d0d6683
feat(workspaces): user keypair store + unwrap-on-master-unlock

itsmeakhil
and
claude
committed
5e7defe
fix(workspaces): clear keypair on sidebar signout + getKeypair handles 404

itsmeakhil
and
claude
committed
f4f2b91
feat(workspaces): workspace DEK store with lazy hydrate

itsmeakhil
and
claude
committed
371979a
feat(workspaces): password manager uses workspace DEK in shared workspaces

itsmeakhil
and
claude
committed
aca52ff
fix(workspaces): hoist password-manager hooks above conditional placeholder return

itsmeakhil
and
claude
committed
bfbd383
feat(workspaces): environment manager uses workspace DEK in shared workspaces

itsmeakhil
and
claude
committed
d78906e
feat(workspaces): api key vault uses workspace DEK in shared workspaces

itsmeakhil
and
claude
committed
0b0ffc5
feat(workspaces): enable encrypted tools CTA + initial DEK wrap

itsmeakhil
and
claude
committed
a1ab321
fix(workspaces): use master-vault salt when publishing user keypair

itsmeakhil
and
claude
committed
78a4045
feat(workspaces): pending wraps prompt + cross-member completion

itsmeakhil
and
claude
committed
ab887d2
feat(workspaces): rotate-key UI + trigger

itsmeakhil
and
claude
committed
728f20f
feat(workspaces): client-side DEK rotation + re-encrypt loop

itsmeakhil
and
claude
committed
65152a7
feat(workspaces): Hoppscotch-style top-right cluster — switcher + + + gear

itsmeakhil
and
claude
committed
f72af12

Commits on Jun 29, 2026

UI
itsmeakhil
committed
5161948
ui
itsmeakhil
committed
371b01e
fix: TaskContainer event.key guard + RBAC flips encrypted-tool row when DEK enabled

itsmeakhil
and
claude
committed
849fb76
UI
itsmeakhil
committed
60bbf32
fix(workspaces): TypeScript strictness — Uint8Array<ArrayBufferLike> → BufferSource

itsmeakhil
and
claude
committed
a0ee8ec
UI
itsmeakhil
committed
db16a94