ScreenTinker 8db171d979 feat(workspaces): members page read-only view (slice 2A) ... Adds the workspace members page at #/workspace/:id/members. Read-only listing only - mutations land in slice 2B, accept-invite URL handler lands in slice 2C. Three sections render based on access path: - Members: direct workspace_members rows with role + join date - Organization access: org_owner/org_admin who reach this workspace via org-level access (via_org=true). 75% opacity + italic "via organization" label to distinguish from direct membership. Section hidden if empty. - Pending invites: workspace_invites rows (admin-only - section silently absent for non-admins via 403-suppress) Switcher dropdown adds a "members" icon next to the rename pencil, gated on can_admin (same predicate). Icon visible on hover, mirrors the existing pencil pattern. 24 i18n keys added under members.* (read-only set; mutation keys land in 2B). Backend coverage from c4fbd2b unchanged; pre-flight curl verification (13/13 cases) confirmed all 7 endpoints work as documented before slice 2 first-exercised the four previously untested ones (GET /invites, DELETE /invites/:id, PUT /members/:userId, DELETE /members/:userId). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-16 13:00:51 -05:00
..
toast.js	QA fixes: toast aria-live + scope playlist flex-wrap to mobile	2026-04-21 16:00:41 -05:00
workspace-rename-modal.js	feat(workspaces): rename via switcher dropdown - new PATCH /api/workspaces/:id route, per-row pencil affordance in switcher (visible only when caller can_admin), small rename modal with name + slug fields, validation (name <=80 chars, slug ^[a-z0-9]+(?:-[a-z0-9]+)*$ <=60 chars, blank slug -> NULL), 409 on per-org slug collision. Permission gating via new canAdminWorkspace(db, user, ws) helper in lib/permissions.js - reused-ready for future Phase 3 admin actions. /me query now joins organization_members to compute can_admin per accessible_workspaces entry. Drive-by fixes surfaced: (1) activityLogger method filter was missing PATCH, added; (2) routes that operate on a target workspace by URL param need to stamp req.workspaceId from the param so activityLogger captures the right tenant attribution - documented in the route. Smoke fixture: switcher-test@local.test is workspace_admin of Studio A and workspace_editor of Field Crew (no org_owner) so the can_admin true/false split is exercised in one login.	2026-05-12 11:06:55 -05:00
workspace-switcher.js	feat(workspaces): members page read-only view (slice 2A)	2026-05-16 13:00:51 -05:00