ScreenTinker d2a3bdfd15 fix(auth/me): broaden non-admin accessible_workspaces to include org_owner/org_admin paths ... The non-admin branch of /me's accessible_workspaces query drove from workspace_members, so users with org_owner or org_admin on an organization but no direct workspace_members row were missing those workspaces from their /me response - and therefore from the switcher dropdown. Mirrors the access logic in accessibleWorkspaceIds() (lib/tenancy.js) while keeping the full-row SELECT shape /me needs. Verified end-to-end with switcher-test@local.test acting as org_owner of Acme Studios with no workspace_members row on Studio B - Studio B now appears in /me's accessible_workspaces with workspace_role: null, can_admin: true. Also updates the stale TODO comment in tenancy.js that flagged this exact gap. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-16 11:50:37 -05:00
..
command-queue.js	feat(socket): delivery queue for offline-device emits	2026-05-14 13:06:43 -05:00
permissions.js	feat(workspaces): rename via switcher dropdown - new PATCH /api/workspaces/:id route, per-row pencil affordance in switcher (visible only when caller can_admin), small rename modal with name + slug fields, validation (name <=80 chars, slug ^[a-z0-9]+(?:-[a-z0-9]+)*$ <=60 chars, blank slug -> NULL), 409 on per-org slug collision. Permission gating via new canAdminWorkspace(db, user, ws) helper in lib/permissions.js - reused-ready for future Phase 3 admin actions. /me query now joins organization_members to compute can_admin per accessible_workspaces entry. Drive-by fixes surfaced: (1) activityLogger method filter was missing PATCH, added; (2) routes that operate on a target workspace by URL param need to stamp req.workspaceId from the param so activityLogger captures the right tenant attribution - documented in the route. Smoke fixture: switcher-test@local.test is workspace_admin of Studio A and workspace_editor of Field Crew (no org_owner) so the can_admin true/false split is exercised in one login.	2026-05-12 11:06:55 -05:00
socket-rooms.js	feat(socket): Phase 2.3 workspace-scoped dashboard socket rooms + per-command permission gates. Dashboard namespace was previously a flat broadcast - every connected dashboard received every device's status/screenshot/playback events platform-wide (foreign device names + IPs included). Inbound socket commands gated by a legacy admin/superadmin role check that was dead code post-Phase-1 rename.	2026-05-12 11:34:24 -05:00
tenancy.js	fix(auth/me): broaden non-admin accessible_workspaces to include org_owner/org_admin paths	2026-05-16 11:50:37 -05:00