Function listAccessibleWorkspaceRowsForUser

apps/sim/lib/workspaces/utils.ts:84–127

(
  userId: string,
  scope: WorkspaceScope = 'active'
)

 * derived from organization owner/admin role. Deduped with explicit rows first.
 */
export async function listAccessibleWorkspaceRowsForUser(
  userId: string,
  scope: WorkspaceScope = 'active'
): Promise<
  Array<{ workspace: typeof workspaceTable.$inferSelect; permissionType: PermissionType }>
> {
  const explicit = await db
    .select({ workspace: workspaceTable, permissionType: permissions.permissionType })
    .from(permissions)
    .innerJoin(workspaceTable, eq(permissions.entityId, workspaceTable.id))
    .where(
      scope === 'all'
        ? and(eq(permissions.userId, userId), eq(permissions.entityType, 'workspace'))
        : scope === 'archived'
          ? and(
              eq(permissions.userId, userId),
              eq(permissions.entityType, 'workspace'),
              sql`${workspaceTable.archivedAt} IS NOT NULL`
            )
          : and(
              eq(permissions.userId, userId),
              eq(permissions.entityType, 'workspace'),
              isNull(workspaceTable.archivedAt)
            )
    )
    .orderBy(desc(workspaceTable.createdAt))

  const orgRows = await getOrgAdminWorkspaceRows(userId, scope)
  if (orgRows.length === 0) {
    return explicit
  }

  const orgWorkspaceIds = new Set(orgRows.map((ws) => ws.id))
  const seen = new Set(explicit.map((row) => row.workspace.id))

  const elevatedExplicit = explicit.map((row) =>
    orgWorkspaceIds.has(row.workspace.id) ? { ...row, permissionType: 'admin' as const } : row
  )
  const derived = orgRows
    .filter((ws) => !seen.has(ws.id))
    .map((ws) => ({ workspace: ws, permissionType: 'admin' as const }))

  return [...elevatedExplicit, ...derived]
}

export async function listUserWorkspaces(userId: string, scope: WorkspaceScope = 'active') {
  const rows = await listAccessibleWorkspaceRowsForUser(userId, scope)