@adminiumjs/adminium 0.1.0-rc.1

package/dist/routes/me/schema.d.ts

@@ -0,0 +1,270 @@
+/**
+ * Zod schemas for the `me` resource (08-server-api.md §2.2): profile view and
+ * patch plus per-user preference axes (07-meta-store.md §3.4, §7.2 —
+ * `null` = "use workspace default").
+ */
+import { z } from 'zod';
+export declare const meReply: z.ZodObject<{
+    data: z.ZodObject<{
+        user: z.ZodObject<{
+            id: z.ZodString;
+            email: z.ZodString;
+            name: z.ZodString;
+            status: z.ZodEnum<{
+                active: "active";
+                invited: "invited";
+                suspended: "suspended";
+            }>;
+            totpEnabled: z.ZodBoolean;
+            lastLoginAt: z.ZodNullable<z.ZodNumber>;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type MeReply = z.infer<typeof meReply>;
+export declare const mePatchBody: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+    password: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type MePatchBody = z.infer<typeof mePatchBody>;
+/** Raw per-user row: `null` = inherit the workspace/system default. */
+export declare const mePrefsView: z.ZodObject<{
+    theme: z.ZodNullable<z.ZodEnum<{
+        light: "light";
+        dark: "dark";
+        system: "system";
+    }>>;
+    accent: z.ZodNullable<z.ZodEnum<{
+        indigo: "indigo";
+        blue: "blue";
+        teal: "teal";
+        violet: "violet";
+        rose: "rose";
+        red: "red";
+        orange: "orange";
+        black: "black";
+    }>>;
+    density: z.ZodNullable<z.ZodEnum<{
+        comfortable: "comfortable";
+        compact: "compact";
+    }>>;
+    locale: z.ZodNullable<z.ZodEnum<{
+        en_US: "en_US";
+        de_DE: "de_DE";
+        ar_EG: "ar_EG";
+        zh_CN: "zh_CN";
+        zh_TW: "zh_TW";
+        cs_CZ: "cs_CZ";
+        da_DK: "da_DK";
+        fr_FR: "fr_FR";
+    }>>;
+    dir: z.ZodNullable<z.ZodEnum<{
+        ltr: "ltr";
+        rtl: "rtl";
+    }>>;
+}, z.core.$strip>;
+/** §7.2 resolved axes + per-axis provenance for the settings UI. */
+export declare const mePrefsResolvedView: z.ZodObject<{
+    theme: z.ZodEnum<{
+        light: "light";
+        dark: "dark";
+        system: "system";
+    }>;
+    accent: z.ZodEnum<{
+        indigo: "indigo";
+        blue: "blue";
+        teal: "teal";
+        violet: "violet";
+        rose: "rose";
+        red: "red";
+        orange: "orange";
+        black: "black";
+    }>;
+    density: z.ZodEnum<{
+        comfortable: "comfortable";
+        compact: "compact";
+    }>;
+    locale: z.ZodEnum<{
+        en_US: "en_US";
+        de_DE: "de_DE";
+        ar_EG: "ar_EG";
+        zh_CN: "zh_CN";
+        zh_TW: "zh_TW";
+        cs_CZ: "cs_CZ";
+        da_DK: "da_DK";
+        fr_FR: "fr_FR";
+    }>;
+    dir: z.ZodEnum<{
+        ltr: "ltr";
+        rtl: "rtl";
+    }>;
+    source: z.ZodObject<{
+        theme: z.ZodEnum<{
+            user: "user";
+            global: "global";
+            system: "system";
+        }>;
+        accent: z.ZodEnum<{
+            user: "user";
+            global: "global";
+            system: "system";
+        }>;
+        density: z.ZodEnum<{
+            user: "user";
+            global: "global";
+            system: "system";
+        }>;
+        locale: z.ZodEnum<{
+            user: "user";
+            global: "global";
+            system: "system";
+        }>;
+        dir: z.ZodEnum<{
+            user: "user";
+            global: "global";
+            system: "system";
+        }>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const mePrefsReply: z.ZodObject<{
+    data: z.ZodObject<{
+        prefs: z.ZodObject<{
+            theme: z.ZodNullable<z.ZodEnum<{
+                light: "light";
+                dark: "dark";
+                system: "system";
+            }>>;
+            accent: z.ZodNullable<z.ZodEnum<{
+                indigo: "indigo";
+                blue: "blue";
+                teal: "teal";
+                violet: "violet";
+                rose: "rose";
+                red: "red";
+                orange: "orange";
+                black: "black";
+            }>>;
+            density: z.ZodNullable<z.ZodEnum<{
+                comfortable: "comfortable";
+                compact: "compact";
+            }>>;
+            locale: z.ZodNullable<z.ZodEnum<{
+                en_US: "en_US";
+                de_DE: "de_DE";
+                ar_EG: "ar_EG";
+                zh_CN: "zh_CN";
+                zh_TW: "zh_TW";
+                cs_CZ: "cs_CZ";
+                da_DK: "da_DK";
+                fr_FR: "fr_FR";
+            }>>;
+            dir: z.ZodNullable<z.ZodEnum<{
+                ltr: "ltr";
+                rtl: "rtl";
+            }>>;
+        }, z.core.$strip>;
+        resolved: z.ZodObject<{
+            theme: z.ZodEnum<{
+                light: "light";
+                dark: "dark";
+                system: "system";
+            }>;
+            accent: z.ZodEnum<{
+                indigo: "indigo";
+                blue: "blue";
+                teal: "teal";
+                violet: "violet";
+                rose: "rose";
+                red: "red";
+                orange: "orange";
+                black: "black";
+            }>;
+            density: z.ZodEnum<{
+                comfortable: "comfortable";
+                compact: "compact";
+            }>;
+            locale: z.ZodEnum<{
+                en_US: "en_US";
+                de_DE: "de_DE";
+                ar_EG: "ar_EG";
+                zh_CN: "zh_CN";
+                zh_TW: "zh_TW";
+                cs_CZ: "cs_CZ";
+                da_DK: "da_DK";
+                fr_FR: "fr_FR";
+            }>;
+            dir: z.ZodEnum<{
+                ltr: "ltr";
+                rtl: "rtl";
+            }>;
+            source: z.ZodObject<{
+                theme: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+                accent: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+                density: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+                locale: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+                dir: z.ZodEnum<{
+                    user: "user";
+                    global: "global";
+                    system: "system";
+                }>;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type MePrefsReply = z.infer<typeof mePrefsReply>;
+/** Absent = unchanged; `null` = clear back to inherit (07-meta-store.md §7.2). */
+export declare const mePrefsPatchBody: z.ZodObject<{
+    theme: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        light: "light";
+        dark: "dark";
+        system: "system";
+    }>>>;
+    accent: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        indigo: "indigo";
+        blue: "blue";
+        teal: "teal";
+        violet: "violet";
+        rose: "rose";
+        red: "red";
+        orange: "orange";
+        black: "black";
+    }>>>;
+    density: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        comfortable: "comfortable";
+        compact: "compact";
+    }>>>;
+    locale: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        en_US: "en_US";
+        de_DE: "de_DE";
+        ar_EG: "ar_EG";
+        zh_CN: "zh_CN";
+        zh_TW: "zh_TW";
+        cs_CZ: "cs_CZ";
+        da_DK: "da_DK";
+        fr_FR: "fr_FR";
+    }>>>;
+    dir: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        ltr: "ltr";
+        rtl: "rtl";
+    }>>>;
+}, z.core.$strip>;
+export type MePrefsPatchBody = z.infer<typeof mePrefsPatchBody>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/routes/me/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/routes/me/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;iBAAuD,CAAC;AAC5E,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C,eAAO,MAAM,WAAW;;;;iBAUpB,CAAC;AACL,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,uEAAuE;AACvE,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMtB,CAAC;AAIH,oEAAoE;AACpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAa9B,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,kFAAkF;AAClF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAM3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/routes/me/schema.js

@@ -0,0 +1,59 @@
+/**
+ * Zod schemas for the `me` resource (08-server-api.md §2.2): profile view and
+ * patch plus per-user preference axes (07-meta-store.md §3.4, §7.2 —
+ * `null` = "use workspace default").
+ */
+import { z } from 'zod';
+import { accentSchema, densitySchema, dirSchema, localeSchema, themeSchema, } from '@adminium/meta';
+import { authUserView } from '../auth/schema.js';
+export const meReply = z.object({ data: z.object({ user: authUserView }) });
+export const mePatchBody = z
+    .object({
+    name: z.string().trim().min(1).max(120).optional(),
+    email: z.string().trim().min(3).max(320).optional(),
+    /** Required when `email` changes (§2.2). */
+    password: z.string().min(1).max(200).optional(),
+})
+    .refine((body) => body.email === undefined || body.password !== undefined, {
+    message: 'password is required to change email',
+    path: ['password'],
+});
+/** Raw per-user row: `null` = inherit the workspace/system default. */
+export const mePrefsView = z.object({
+    theme: themeSchema.nullable(),
+    accent: accentSchema.nullable(),
+    density: densitySchema.nullable(),
+    locale: localeSchema.nullable(),
+    dir: dirSchema.nullable(),
+});
+const prefSource = z.enum(['system', 'global', 'user']);
+/** §7.2 resolved axes + per-axis provenance for the settings UI. */
+export const mePrefsResolvedView = z.object({
+    theme: themeSchema,
+    accent: accentSchema,
+    density: densitySchema,
+    locale: localeSchema,
+    dir: dirSchema,
+    source: z.object({
+        theme: prefSource,
+        accent: prefSource,
+        density: prefSource,
+        locale: prefSource,
+        dir: prefSource,
+    }),
+});
+export const mePrefsReply = z.object({
+    data: z.object({
+        prefs: mePrefsView,
+        resolved: mePrefsResolvedView,
+    }),
+});
+/** Absent = unchanged; `null` = clear back to inherit (07-meta-store.md §7.2). */
+export const mePrefsPatchBody = z.object({
+    theme: themeSchema.nullable().optional(),
+    accent: accentSchema.nullable().optional(),
+    density: densitySchema.nullable().optional(),
+    locale: localeSchema.nullable().optional(),
+    dir: dirSchema.nullable().optional(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/routes/me/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/me/schema.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,SAAS,EACT,YAAY,EACZ,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;AAG5E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnD,4CAA4C;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE;IACzE,OAAO,EAAE,sCAAsC;IAC/C,IAAI,EAAE,CAAC,UAAU,CAAC;CACnB,CAAC,CAAC;AAGL,uEAAuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;CAC1B,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAExD,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,YAAY;IACpB,GAAG,EAAE,SAAS;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,UAAU;QAClB,GAAG,EAAE,UAAU;KAChB,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,mBAAmB;KAC9B,CAAC;CACH,CAAC,CAAC;AAGH,kFAAkF;AAClF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC"}

package/dist/routes/me-views/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Per-user dashboard layout override routes (04-widget-registry.md §6.3):
+ *
+ *   PUT    /api/v1/me/views/:pageId/layout  → save the caller's own layout
+ *   DELETE /api/v1/me/views/:pageId/layout  → reset (remove the override)
+ *
+ * These write a private `adminium_views` row (`{ user_id, page_id,
+ * kind: 'layout', config }`). Unlike the shared-default PATCH on the pages
+ * route, an override needs no page-EDIT grant: any user who can view the page
+ * may rearrange it for themselves, so the guard is a live session plus page
+ * visibility (existing + enabled). Overrides are personal and reversible, so
+ * they are not audited — only shared-default writes are (see routes/pages).
+ *
+ * Resolution order (per-user override wins over the shared default) lives in
+ * the GET pages read path; "Reset layout" in the page kebab calls DELETE here.
+ */
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import { type MetaDb } from '@adminium/meta';
+export interface MeViewsRoutesDeps {
+    meta: MetaDb;
+}
+export declare function meViewsRoutes(deps: MeViewsRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/me-views/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/me-views/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAEvE,OAAO,EAAwB,KAAK,MAAM,EAAa,MAAM,gBAAgB,CAAC;AAK9E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAQD,wBAAgB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,qBAAqB,CA6D5E"}

package/dist/routes/me-views/index.js

@@ -0,0 +1,76 @@
+/**
+ * Per-user dashboard layout override routes (04-widget-registry.md §6.3):
+ *
+ *   PUT    /api/v1/me/views/:pageId/layout  → save the caller's own layout
+ *   DELETE /api/v1/me/views/:pageId/layout  → reset (remove the override)
+ *
+ * These write a private `adminium_views` row (`{ user_id, page_id,
+ * kind: 'layout', config }`). Unlike the shared-default PATCH on the pages
+ * route, an override needs no page-EDIT grant: any user who can view the page
+ * may rearrange it for themselves, so the guard is a live session plus page
+ * visibility (existing + enabled). Overrides are personal and reversible, so
+ * they are not audited — only shared-default writes are (see routes/pages).
+ *
+ * Resolution order (per-user override wins over the shared default) lives in
+ * the GET pages read path; "Reset layout" in the page kebab calls DELETE here.
+ */
+import { pagesRepo, viewsRepo } from '@adminium/meta';
+import { NotFoundError, UnauthorizedError } from '../../errors.js';
+import { meLayoutOkReply, meLayoutParams, meLayoutPutBody, meLayoutReply } from './schema.js';
+/** The acting session user id; API-key/keyless principals have no personal views. */
+function sessionUserId(request) {
+    if (request.apiKeyPrincipal !== null && request.apiKeyPrincipal !== undefined)
+        return null;
+    return request.user?.id ?? null;
+}
+export function meViewsRoutes(deps) {
+    const views = viewsRepo(deps.meta);
+    const pages = pagesRepo(deps.meta);
+    return async (app) => {
+        /** The acting session user, or 401 for keyless/API-key principals. */
+        function requireUserId(request) {
+            const userId = sessionUserId(request);
+            if (userId === null) {
+                throw new UnauthorizedError('UNAUTHENTICATED', 'A layout override requires a user session.');
+            }
+            return userId;
+        }
+        /** The page must exist and be enabled to hold an override (matches GET). */
+        async function requireVisiblePage(pageId) {
+            const page = await pages.findById(pageId);
+            if (page === null || !page.isEnabled) {
+                throw new NotFoundError(`page ${pageId} does not exist`);
+            }
+            return page;
+        }
+        app.put('/me/views/:pageId/layout', {
+            preHandler: app.requireAuth,
+            schema: { params: meLayoutParams, body: meLayoutPutBody, response: { 200: meLayoutReply } },
+        }, async (request) => {
+            const userId = requireUserId(request);
+            const { pageId } = request.params;
+            const page = await requireVisiblePage(pageId);
+            // Stamp the shared document's revision the override was authored
+            // against: the pages GET compares it to the live revision to surface
+            // `layoutStale` after a regeneration (or a shared PATCH) moves the
+            // default on. `pageLayoutSchema` strips unknown keys on read, so the
+            // stamp never leaks into a served layout.
+            await views.upsertLayoutOverride(pageId, userId, {
+                ...request.body,
+                pageRevision: page.revision,
+            });
+            return { data: { layout: request.body } };
+        });
+        app.delete('/me/views/:pageId/layout', {
+            preHandler: app.requireAuth,
+            schema: { params: meLayoutParams, response: { 200: meLayoutOkReply } },
+        }, async (request) => {
+            const userId = requireUserId(request);
+            const { pageId } = request.params;
+            await requireVisiblePage(pageId);
+            await views.deleteLayoutOverride(pageId, userId);
+            return { data: { ok: true } };
+        });
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/routes/me-views/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/routes/me-views/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,SAAS,EAAE,SAAS,EAA0B,MAAM,gBAAgB,CAAC;AAE9E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAM9F,qFAAqF;AACrF,SAAS,aAAa,CAAC,OAAuB;IAC5C,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3F,OAAQ,OAAiD,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnC,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,sEAAsE;QACtE,SAAS,aAAa,CAAC,OAAuB;YAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;YAC/F,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,4EAA4E;QAC5E,KAAK,UAAU,kBAAkB,CAAC,MAAc;YAC9C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACrC,MAAM,IAAI,aAAa,CAAC,QAAQ,MAAM,iBAAiB,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,GAAG,CAAC,GAAG,CACL,0BAA0B,EAC1B;YACE,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE;SAC5F,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC9C,iEAAiE;YACjE,qEAAqE;YACrE,mEAAmE;YACnE,qEAAqE;YACrE,0CAA0C;YAC1C,MAAM,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE;gBAC/C,GAAG,OAAO,CAAC,IAAI;gBACf,YAAY,EAAE,IAAI,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,MAAM,CACR,0BAA0B,EAC1B;YACE,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,MAAM,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE;SACvE,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YAClC,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,KAAK,CAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAa,EAAE,EAAE,CAAC;QACzC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/me-views/schema.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Zod schemas for the per-user dashboard layout override routes
+ * (04-widget-registry.md §6.3): `PUT`/`DELETE /api/v1/me/views/:pageId/layout`.
+ * The body is a full `pageLayout` document — the same schema the shared-default
+ * PATCH validates — so the two write paths never diverge on geometry rules.
+ */
+import { z } from 'zod';
+export declare const meLayoutParams: z.ZodObject<{
+    pageId: z.ZodString;
+}, z.core.$strip>;
+export declare const meLayoutPutBody: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    items: z.ZodArray<z.ZodObject<{
+        i: z.ZodString;
+        widget: z.ZodString;
+        x: z.ZodNumber;
+        y: z.ZodNumber;
+        w: z.ZodNumber;
+        h: z.ZodNumber;
+        config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const meLayoutReply: z.ZodObject<{
+    data: z.ZodObject<{
+        layout: z.ZodObject<{
+            version: z.ZodLiteral<1>;
+            items: z.ZodArray<z.ZodObject<{
+                i: z.ZodString;
+                widget: z.ZodString;
+                x: z.ZodNumber;
+                y: z.ZodNumber;
+                w: z.ZodNumber;
+                h: z.ZodNumber;
+                config: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const meLayoutOkReply: z.ZodObject<{
+    data: z.ZodObject<{
+        ok: z.ZodLiteral<true>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/routes/me-views/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/routes/me-views/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,cAAc;;iBAA0C,CAAC;AAEtE,eAAO,MAAM,eAAe;;;;;;;;;;;iBAAmB,CAAC;AAEhD,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;iBAA6D,CAAC;AACxF,eAAO,MAAM,eAAe;;;;iBAAwD,CAAC"}

package/dist/routes/me-views/schema.js

@@ -0,0 +1,13 @@
+/**
+ * Zod schemas for the per-user dashboard layout override routes
+ * (04-widget-registry.md §6.3): `PUT`/`DELETE /api/v1/me/views/:pageId/layout`.
+ * The body is a full `pageLayout` document — the same schema the shared-default
+ * PATCH validates — so the two write paths never diverge on geometry rules.
+ */
+import { z } from 'zod';
+import { pageLayoutSchema } from '../pages/layout-schema.js';
+export const meLayoutParams = z.object({ pageId: z.string().min(1) });
+export const meLayoutPutBody = pageLayoutSchema;
+export const meLayoutReply = z.object({ data: z.object({ layout: pageLayoutSchema }) });
+export const meLayoutOkReply = z.object({ data: z.object({ ok: z.literal(true) }) });
+//# sourceMappingURL=schema.js.map

package/dist/routes/me-views/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/routes/me-views/schema.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAEhD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;AACxF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC"}

package/dist/routes/notifications/index.d.ts

@@ -0,0 +1,19 @@
+import type { FastifyPluginAsyncZod } from 'fastify-type-provider-zod';
+import { type MetaDb } from '@adminium/meta';
+import { type NotificationPublisher } from '../../notifications/notify.js';
+/**
+ * Event keys with a live in-app producer TODAY — the prefs matrix lists these
+ * even before the user stores a deviation. Stored rows for other keys are
+ * merged in (they never vanish), so the catalog can grow producer-by-producer.
+ */
+export declare const NOTIFICATION_EVENT_KEYS: readonly string[];
+/** §8.2: the email/push channels exist in the matrix but cannot deliver yet. */
+export declare const EMAIL_CHANNEL_UNAVAILABLE_REASON = "No email transport (SMTP) is configured in this build \u2014 your email preferences are saved and take effect when email delivery arrives in a later release.";
+export declare const PUSH_CHANNEL_UNAVAILABLE_REASON = "Push delivery arrives in a later release \u2014 your push preferences are saved until then.";
+export interface NotificationsRoutesDeps {
+    meta: MetaDb;
+    /** `app.realtime` in compose; optional so tests can pass a recorder/omit. */
+    hub?: NotificationPublisher | undefined;
+}
+export declare function notificationsRoutes(deps: NotificationsRoutesDeps): FastifyPluginAsyncZod;
+//# sourceMappingURL=index.d.ts.map

package/dist/routes/notifications/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/routes/notifications/index.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAIL,KAAK,MAAM,EAGZ,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,+BAA+B,CAAC;AAevC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAIpD,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,gCAAgC,kKAC+G,CAAC;AAC7J,eAAO,MAAM,+BAA+B,gGAC8C,CAAC;AAE3F,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,GAAG,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;CACzC;AA+BD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,qBAAqB,CA2GxF"}

package/dist/routes/notifications/index.js

@@ -0,0 +1,123 @@
+import { DEFAULT_NOTIFICATION_CHANNELS, notificationPrefsRepo, notificationsRepo, } from '@adminium/meta';
+import { UnauthorizedError } from '../../errors.js';
+import { NOTIFICATION_READ_EVENT, notificationsChannel, } from '../../notifications/notify.js';
+import { notificationIdParams, notificationPrefsPutBody, notificationPrefsReply, notificationReadReply, notificationsListQuery, notificationsListReply, notificationsReadAllReply, notificationCursorRe, } from './schema.js';
+/**
+ * Event keys with a live in-app producer TODAY — the prefs matrix lists these
+ * even before the user stores a deviation. Stored rows for other keys are
+ * merged in (they never vanish), so the catalog can grow producer-by-producer.
+ */
+export const NOTIFICATION_EVENT_KEYS = [
+    'report.ready',
+    'report.failed',
+    'desktop.backup.completed',
+];
+/** §8.2: the email/push channels exist in the matrix but cannot deliver yet. */
+export const EMAIL_CHANNEL_UNAVAILABLE_REASON = 'No email transport (SMTP) is configured in this build — your email preferences are saved and take effect when email delivery arrives in a later release.';
+export const PUSH_CHANNEL_UNAVAILABLE_REASON = 'Push delivery arrives in a later release — your push preferences are saved until then.';
+function requireUserId(request) {
+    const user = request.user;
+    const id = user?.id ?? null;
+    if (id === null)
+        throw new UnauthorizedError();
+    return id;
+}
+function toView(row) {
+    return {
+        id: row.id,
+        kind: row.kind,
+        actorLabel: row.actorLabel,
+        title: row.title,
+        body: row.body,
+        entity: row.entity,
+        actionUrl: row.actionUrl,
+        readAt: row.readAt,
+        createdAt: row.createdAt,
+    };
+}
+function channelViews() {
+    return [
+        { id: 'inApp', available: true },
+        { id: 'email', available: false, reason: EMAIL_CHANNEL_UNAVAILABLE_REASON },
+        { id: 'push', available: false, reason: PUSH_CHANNEL_UNAVAILABLE_REASON },
+    ];
+}
+export function notificationsRoutes(deps) {
+    const { meta } = deps;
+    const notifications = notificationsRepo(meta);
+    const prefs = notificationPrefsRepo(meta);
+    function publishRead(userId, unreadCount) {
+        deps.hub?.publish(notificationsChannel(userId), NOTIFICATION_READ_EVENT, { unreadCount });
+    }
+    async function prefsView(userId) {
+        const stored = await prefs.listForUser(userId);
+        const byKey = new Map(stored.map((row) => [row.eventKey, row.channels]));
+        const keys = [
+            ...NOTIFICATION_EVENT_KEYS,
+            ...stored.map((row) => row.eventKey).filter((key) => !NOTIFICATION_EVENT_KEYS.includes(key)),
+        ];
+        return {
+            channels: channelViews(),
+            events: keys.map((key) => {
+                const channels = byKey.get(key) ?? { ...DEFAULT_NOTIFICATION_CHANNELS };
+                return { key, channels, custom: byKey.has(key) };
+            }),
+        };
+    }
+    return async (app) => {
+        app.get('/me/notifications', { schema: { querystring: notificationsListQuery, response: { 200: notificationsListReply } } }, async (request) => {
+            const userId = requireUserId(request);
+            const { unread, limit, before } = request.query;
+            let cursor;
+            if (before !== undefined) {
+                const match = notificationCursorRe.exec(before);
+                // Regex-validated by the schema; the split cannot fail here.
+                cursor = { createdAt: Number(match?.[1] ?? 0), id: match?.[2] ?? '' };
+            }
+            const rows = await notifications.listForUser(userId, {
+                unreadOnly: unread === 'true',
+                // Fetch one extra row to answer "is there a next page" honestly.
+                limit: limit + 1,
+                before: cursor,
+            });
+            const page = rows.slice(0, limit);
+            const last = page[page.length - 1];
+            return {
+                data: {
+                    items: page.map(toView),
+                    unreadCount: await notifications.unreadCount(userId),
+                    nextCursor: rows.length > limit && last !== undefined ? `${last.createdAt}:${last.id}` : null,
+                },
+            };
+        });
+        app.post('/me/notifications/:id/read', { schema: { params: notificationIdParams, response: { 200: notificationReadReply } } }, async (request) => {
+            const userId = requireUserId(request);
+            const updated = await notifications.markRead(request.params.id, userId);
+            const unreadCount = await notifications.unreadCount(userId);
+            if (updated)
+                publishRead(userId, unreadCount);
+            return { data: { updated, unreadCount } };
+        });
+        app.post('/me/notifications/read-all', { schema: { response: { 200: notificationsReadAllReply } } }, async (request) => {
+            const userId = requireUserId(request);
+            const updated = await notifications.markAllRead(userId);
+            if (updated > 0)
+                publishRead(userId, 0);
+            return { data: { updated, unreadCount: 0 } };
+        });
+        app.get('/me/notification-prefs', { schema: { response: { 200: notificationPrefsReply } } }, async (request) => {
+            const userId = requireUserId(request);
+            return { data: await prefsView(userId) };
+        });
+        app.put('/me/notification-prefs', { schema: { body: notificationPrefsPutBody, response: { 200: notificationPrefsReply } } }, async (request) => {
+            const userId = requireUserId(request);
+            // Intent is stored VERBATIM, email/push included — availability is a
+            // transport fact reported alongside, never a write filter (§8.2).
+            for (const event of request.body.events) {
+                await prefs.upsert(userId, event.key, event.channels);
+            }
+            return { data: await prefsView(userId) };
+        });
+    };
+}
+//# sourceMappingURL=index.js.map