@open-mercato/core 0.6.6-develop.6089.1.a7ed560528 → 0.6.6-develop.6121.1.5797a901b3

package/dist/modules/messages/commands/actions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/messages/commands/actions.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { registerCommand, type CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { extractUndoPayload, type UndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Message, MessageObject, MessageRecipient } from '../data/entities'\nimport { emitMessagesEvent } from '../events'\nimport {\n  findResolvedMessageActionById,\n  isTerminalMessageAction,\n  resolveActionCommandInput,\n  resolveActionHref,\n  resolveMessageActionData,\n} from '../lib/actions'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { assertOrganizationAccess, type MessageScopeInput } from './shared'\n\nconst recordTerminalActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  result: z.record(z.string(), z.unknown()),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable(),\n  userId: z.string().uuid(),\n})\n\ntype RecordTerminalActionInput = z.infer<typeof recordTerminalActionSchema>\n\nconst executeActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  payload: z.record(z.string(), z.unknown()).optional(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable(),\n  userId: z.string().uuid(),\n})\n\ntype ExecuteActionInput = z.infer<typeof executeActionSchema>\n\ntype ActionStateSnapshot = {\n  actionTaken: string | null\n  actionTakenByUserId: string | null\n  actionTakenAt: string | null\n  actionResult: Record<string, unknown> | null\n}\n\nfunction toIso(value: Date | null | undefined): string | null {\n  return value ? value.toISOString() : null\n}\n\nfunction toDate(value: string | null | undefined): Date | null {\n  if (!value) return null\n  return new Date(value)\n}\n\nasync function requireActionTarget(em: EntityManager, input: RecordTerminalActionInput) {\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    {\n      id: input.messageId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  if (!message) throw new Error('Message not found')\n  assertOrganizationAccess(input as MessageScopeInput, message)\n\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: input.messageId,\n    recipientUserId: input.userId,\n    deletedAt: null,\n  })\n  if (!recipient) throw new Error('Access denied')\n  return message\n}\n\nasync function requireActionMessage(em: EntityManager, input: ExecuteActionInput) {\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    {\n      id: input.messageId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  if (!message) throw new Error('Message not found')\n  assertOrganizationAccess(input as MessageScopeInput, message)\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: input.messageId,\n    recipientUserId: input.userId,\n    deletedAt: null,\n  })\n  if (!recipient) throw new Error('Access denied')\n  return message\n}\n\nfunction snapshotActionState(message: Message): ActionStateSnapshot {\n  return {\n    actionTaken: message.actionTaken ?? null,\n    actionTakenByUserId: message.actionTakenByUserId ?? null,\n    actionTakenAt: toIso(message.actionTakenAt),\n    actionResult: message.actionResult ?? null,\n  }\n}\n\nconst recordTerminalActionCommand: CommandHandler<unknown, { ok: true }> = {\n  id: 'messages.actions.record_terminal',\n  async prepare(rawInput, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    return { before: snapshotActionState(message) }\n  },\n  async execute(rawInput, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    if (message.actionTaken) {\n      throw new Error('Action already taken')\n    }\n    message.actionTaken = input.actionId\n    message.actionTakenByUserId = input.userId\n    message.actionTakenAt = new Date()\n    message.actionResult = input.result\n    await em.flush()\n    return { ok: true }\n  },\n  async captureAfter(rawInput, _result, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    return snapshotActionState(message)\n  },\n  buildLog: async ({ input, snapshots }) => {\n    const parsed = recordTerminalActionSchema.parse(input)\n    return {\n      actionLabel: 'Execute message terminal action',\n      resourceKind: 'messages.message',\n      resourceId: parsed.messageId,\n      tenantId: parsed.tenantId,\n      organizationId: parsed.organizationId,\n      payload: {\n        undo: {\n          before: (snapshots.before as ActionStateSnapshot | undefined) ?? null,\n          after: (snapshots.after as ActionStateSnapshot | undefined) ?? null,\n        } satisfies UndoPayload<ActionStateSnapshot>,\n      },\n      snapshotBefore: snapshots.before ?? null,\n      snapshotAfter: snapshots.after ?? null,\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const undo = extractUndoPayload<UndoPayload<ActionStateSnapshot>>(logEntry)\n    const before = undo?.before\n    if (!before) return\n    const messageId = logEntry?.resourceId as string | null\n    if (!messageId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await findOneWithDecryption(em, Message, { id: messageId })\n    if (!message) return\n    message.actionTaken = before.actionTaken\n    message.actionTakenByUserId = before.actionTakenByUserId\n    message.actionTakenAt = toDate(before.actionTakenAt)\n    message.actionResult = before.actionResult\n    await em.flush()\n  },\n}\n\nconst executeActionCommand: CommandHandler<\n  unknown,\n  { ok: true; actionId: string; result: Record<string, unknown>; operationLogEntry: unknown | null }\n> = {\n  id: 'messages.actions.execute',\n  async execute(rawInput, ctx) {\n    const input = executeActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionMessage(em, input)\n    const objects = await em.find(MessageObject, { messageId: message.id })\n    const action = findResolvedMessageActionById(message, objects, input.actionId)\n\n    if (!action) {\n      throw new Error('Action not found')\n    }\n\n    if (message.actionTaken) {\n      throw Object.assign(new Error('Action already taken'), { actionTaken: message.actionTaken })\n    }\n\n    const shouldRecordActionTaken = isTerminalMessageAction(action)\n\n    const actionData = resolveMessageActionData(message)\n    if (actionData?.expiresAt) {\n      if (new Date(actionData.expiresAt) < new Date()) {\n        throw new Error('Actions have expired')\n      }\n    } else {\n      const messageType = getMessageType(message.type)\n      if (messageType?.actionsExpireAfterHours && message.sentAt) {\n        const expiry = new Date(message.sentAt.getTime() + messageType.actionsExpireAfterHours * 60 * 60 * 1000)\n        if (expiry < new Date()) {\n          throw new Error('Actions have expired')\n        }\n      }\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as {\n      execute: (\n        commandId: string,\n        options: { input: unknown; ctx: unknown; metadata?: unknown }\n      ) => Promise<{ result: unknown; logEntry?: unknown }>\n    }\n\n    let result: Record<string, unknown> = {}\n    let operationLogEntry: unknown | null = null\n\n    if (action.commandId) {\n      try {\n        const actionInput = resolveActionCommandInput(\n          action,\n          message,\n          {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            userId: input.userId,\n          },\n          input.payload ?? {},\n        )\n\n        if (actionInput.id == null) {\n          const fallbackId = action.objectRef?.entityId ?? message.sourceEntityId ?? null\n          if (typeof fallbackId === 'string' && fallbackId.trim().length > 0) {\n            actionInput.id = fallbackId\n          }\n        }\n\n        const commandResult = await commandBus.execute(action.commandId, {\n          input: actionInput,\n          ctx: {\n            container: ctx.container,\n            auth: {\n              sub: input.userId,\n              tenantId: input.tenantId,\n              orgId: input.organizationId,\n            },\n            organizationScope: null,\n            selectedOrganizationId: input.organizationId,\n            organizationIds: input.organizationId ? [input.organizationId] : null,\n          },\n          metadata: {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            resourceKind: 'messages',\n          },\n        })\n\n        result = (commandResult.result as Record<string, unknown>) ?? {}\n        operationLogEntry = commandResult.logEntry ?? null\n      } catch (err) {\n        console.error('[messages] executeActionCommand sub-command failed', err)\n        throw new Error('Action failed')\n      }\n    } else if (action.href) {\n      const safeRedirect = resolveActionHref(action, message, {\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        userId: input.userId,\n      })\n      if (!safeRedirect) {\n        throw new Error('Action has an unsafe redirect target')\n      }\n      result = { redirect: safeRedirect }\n    } else {\n      throw new Error('Action has no executable target')\n    }\n\n    if (shouldRecordActionTaken) {\n      const terminalResult = await commandBus.execute('messages.actions.record_terminal', {\n        input: {\n          messageId: message.id,\n          actionId: action.id,\n          result,\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n          userId: input.userId,\n        },\n        ctx: {\n          container: ctx.container,\n          auth: ctx.auth ?? null,\n          organizationScope: null,\n          selectedOrganizationId: input.organizationId,\n          organizationIds: input.organizationId ? [input.organizationId] : null,\n        },\n      })\n      if (!operationLogEntry) {\n        operationLogEntry = terminalResult.logEntry ?? null\n      }\n      await emitMessagesEvent(\n        'messages.message.action_taken',\n        {\n          messageId: message.id,\n          actionId: action.id,\n          userId: input.userId,\n          recipientUserId: input.userId,\n          result,\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n        },\n        { persistent: true }\n      )\n    }\n\n    return {\n      ok: true,\n      actionId: action.id,\n      result,\n      operationLogEntry,\n    }\n  },\n}\n\nregisterCommand(recordTerminalActionCommand)\nregisterCommand(executeActionCommand)\n"],
-  "mappings": "AACA,SAAS,SAAS;AAClB,SAAS,uBAA4C;AACrD,SAAS,0BAA4C;AACrD,SAAS,6BAA6B;AACtC,SAAS,SAAS,eAAe,wBAAwB;AACzD,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,gCAAwD;AAEjE,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAID,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAWD,SAAS,MAAM,OAA+C;AAC5D,SAAO,QAAQ,MAAM,YAAY,IAAI;AACvC;AAEA,SAAS,OAAO,OAA+C;AAC7D,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,IAAI,KAAK,KAAK;AACvB;AAEA,eAAe,oBAAoB,IAAmB,OAAkC;AACtF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,mBAAmB;AACjD,2BAAyB,OAA4B,OAAO;AAE5D,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW,MAAM;AAAA,IACjB,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,eAAe;AAC/C,SAAO;AACT;AAEA,eAAe,qBAAqB,IAAmB,OAA2B;AAChF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,mBAAmB;AACjD,2BAAyB,OAA4B,OAAO;AAC5D,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW,MAAM;AAAA,IACjB,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,eAAe;AAC/C,SAAO;AACT;AAEA,SAAS,oBAAoB,SAAuC;AAClE,SAAO;AAAA,IACL,aAAa,QAAQ,eAAe;AAAA,IACpC,qBAAqB,QAAQ,uBAAuB;AAAA,IACpD,eAAe,MAAM,QAAQ,aAAa;AAAA,IAC1C,cAAc,QAAQ,gBAAgB;AAAA,EACxC;AACF;AAEA,MAAM,8BAAqE;AAAA,EACzE,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,WAAO,EAAE,QAAQ,oBAAoB,OAAO,EAAE;AAAA,EAChD;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,QAAI,QAAQ,aAAa;AACvB,YAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AACA,YAAQ,cAAc,MAAM;AAC5B,YAAQ,sBAAsB,MAAM;AACpC,YAAQ,gBAAgB,oBAAI,KAAK;AACjC,YAAQ,eAAe,MAAM;AAC7B,UAAM,GAAG,MAAM;AACf,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA,EACA,MAAM,aAAa,UAAU,SAAS,KAAK;AACzC,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,WAAO,oBAAoB,OAAO;AAAA,EACpC;AAAA,EACA,UAAU,OAAO,EAAE,OAAO,UAAU,MAAM;AACxC,UAAM,SAAS,2BAA2B,MAAM,KAAK;AACrD,WAAO;AAAA,MACL,aAAa;AAAA,MACb,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ,QAAS,UAAU,UAA8C;AAAA,UACjE,OAAQ,UAAU,SAA6C;AAAA,QACjE;AAAA,MACF;AAAA,MACA,gBAAgB,UAAU,UAAU;AAAA,MACpC,eAAe,UAAU,SAAS;AAAA,IACpC;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,OAAO,mBAAqD,QAAQ;AAC1E,UAAM,SAAS,MAAM;AACrB,QAAI,CAAC,OAAQ;AACb,UAAM,YAAY,UAAU;AAC5B,QAAI,CAAC,UAAW;AAChB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,sBAAsB,IAAI,SAAS,EAAE,IAAI,UAAU,CAAC;AAC1E,QAAI,CAAC,QAAS;AACd,YAAQ,cAAc,OAAO;AAC7B,YAAQ,sBAAsB,OAAO;AACrC,YAAQ,gBAAgB,OAAO,OAAO,aAAa;AACnD,YAAQ,eAAe,OAAO;AAC9B,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,MAAM,uBAGF;AAAA,EACF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,oBAAoB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,qBAAqB,IAAI,KAAK;AACpD,UAAM,UAAU,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,QAAQ,GAAG,CAAC;AACtE,UAAM,SAAS,8BAA8B,SAAS,SAAS,MAAM,QAAQ;AAE7E,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,MAAM,kBAAkB;AAAA,IACpC;AAEA,QAAI,QAAQ,aAAa;AACvB,YAAM,OAAO,OAAO,IAAI,MAAM,sBAAsB,GAAG,EAAE,aAAa,QAAQ,YAAY,CAAC;AAAA,IAC7F;AAEA,UAAM,0BAA0B,wBAAwB,MAAM;AAE9D,UAAM,aAAa,yBAAyB,OAAO;AACnD,QAAI,YAAY,WAAW;AACzB,UAAI,IAAI,KAAK,WAAW,SAAS,IAAI,oBAAI,KAAK,GAAG;AAC/C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAAA,IACF,OAAO;AACL,YAAM,cAAc,eAAe,QAAQ,IAAI;AAC/C,UAAI,aAAa,2BAA2B,QAAQ,QAAQ;AAC1D,cAAM,SAAS,IAAI,KAAK,QAAQ,OAAO,QAAQ,IAAI,YAAY,0BAA0B,KAAK,KAAK,GAAI;AACvG,YAAI,SAAS,oBAAI,KAAK,GAAG;AACvB,gBAAM,IAAI,MAAM,sBAAsB;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AAOrD,QAAI,SAAkC,CAAC;AACvC,QAAI,oBAAoC;AAExC,QAAI,OAAO,WAAW;AACpB,UAAI;AACF,cAAM,cAAc;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,UACA,MAAM,WAAW,CAAC;AAAA,QACpB;AAEA,YAAI,YAAY,MAAM,MAAM;AAC1B,gBAAM,aAAa,OAAO,WAAW,YAAY,QAAQ,kBAAkB;AAC3E,cAAI,OAAO,eAAe,YAAY,WAAW,KAAK,EAAE,SAAS,GAAG;AAClE,wBAAY,KAAK;AAAA,UACnB;AAAA,QACF;AAEA,cAAM,gBAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,UAC/D,OAAO;AAAA,UACP,KAAK;AAAA,YACH,WAAW,IAAI;AAAA,YACf,MAAM;AAAA,cACJ,KAAK,MAAM;AAAA,cACX,UAAU,MAAM;AAAA,cAChB,OAAO,MAAM;AAAA,YACf;AAAA,YACA,mBAAmB;AAAA,YACnB,wBAAwB,MAAM;AAAA,YAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,UACnE;AAAA,UACA,UAAU;AAAA,YACR,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,cAAc;AAAA,UAChB;AAAA,QACF,CAAC;AAED,iBAAU,cAAc,UAAsC,CAAC;AAC/D,4BAAoB,cAAc,YAAY;AAAA,MAChD,SAAS,KAAK;AACZ,gBAAQ,MAAM,sDAAsD,GAAG;AACvE,cAAM,IAAI,MAAM,eAAe;AAAA,MACjC;AAAA,IACF,WAAW,OAAO,MAAM;AACtB,YAAM,eAAe,kBAAkB,QAAQ,SAAS;AAAA,QACtD,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB,CAAC;AACD,UAAI,CAAC,cAAc;AACjB,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,eAAS,EAAE,UAAU,aAAa;AAAA,IACpC,OAAO;AACL,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACnD;AAEA,QAAI,yBAAyB;AAC3B,YAAM,iBAAiB,MAAM,WAAW,QAAQ,oCAAoC;AAAA,QAClF,OAAO;AAAA,UACL,WAAW,QAAQ;AAAA,UACnB,UAAU,OAAO;AAAA,UACjB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,QAChB;AAAA,QACA,KAAK;AAAA,UACH,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,mBAAmB;AAAA,UACnB,wBAAwB,MAAM;AAAA,UAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACnE;AAAA,MACF,CAAC;AACD,UAAI,CAAC,mBAAmB;AACtB,4BAAoB,eAAe,YAAY;AAAA,MACjD;AACA,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,WAAW,QAAQ;AAAA,UACnB,UAAU,OAAO;AAAA,UACjB,QAAQ,MAAM;AAAA,UACd,iBAAiB,MAAM;AAAA,UACvB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,gBAAgB,2BAA2B;AAC3C,gBAAgB,oBAAoB;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport { z } from 'zod'\nimport { registerCommand, type CommandHandler } from '@open-mercato/shared/lib/commands'\nimport { extractUndoPayload, type UndoPayload } from '@open-mercato/shared/lib/commands/undo'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { Message, MessageObject, MessageRecipient } from '../data/entities'\nimport { emitMessagesEvent } from '../events'\nimport {\n  findResolvedMessageActionById,\n  isTerminalMessageAction,\n  resolveActionCommandInput,\n  resolveActionHref,\n  resolveMessageActionData,\n} from '../lib/actions'\nimport { getMessageType } from '../lib/message-types-registry'\nimport { assertOrganizationAccess, type MessageScopeInput } from './shared'\n\nconst actionStateSnapshotSchema = z.object({\n  actionTaken: z.string().nullable(),\n  actionTakenByUserId: z.string().nullable(),\n  actionTakenAt: z.string().nullable(),\n  actionResult: z.record(z.string(), z.unknown()).nullable(),\n})\n\nconst recordTerminalActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  result: z.record(z.string(), z.unknown()),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable(),\n  userId: z.string().uuid(),\n  // Optional pre-claim snapshot supplied by `messages.actions.execute` so the\n  // undo log records the true (un-taken) state even though the terminal action\n  // was atomically claimed before this finalizer runs.\n  previousState: actionStateSnapshotSchema.optional(),\n})\n\ntype RecordTerminalActionInput = z.infer<typeof recordTerminalActionSchema>\n\nconst executeActionSchema = z.object({\n  messageId: z.string().uuid(),\n  actionId: z.string().min(1),\n  payload: z.record(z.string(), z.unknown()).optional(),\n  tenantId: z.string().uuid(),\n  organizationId: z.string().uuid().nullable(),\n  userId: z.string().uuid(),\n})\n\ntype ExecuteActionInput = z.infer<typeof executeActionSchema>\n\ntype ActionStateSnapshot = {\n  actionTaken: string | null\n  actionTakenByUserId: string | null\n  actionTakenAt: string | null\n  actionResult: Record<string, unknown> | null\n}\n\nfunction toIso(value: Date | null | undefined): string | null {\n  return value ? value.toISOString() : null\n}\n\nfunction toDate(value: string | null | undefined): Date | null {\n  if (!value) return null\n  return new Date(value)\n}\n\nasync function requireActionTarget(em: EntityManager, input: RecordTerminalActionInput) {\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    {\n      id: input.messageId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  if (!message) throw new Error('Message not found')\n  assertOrganizationAccess(input as MessageScopeInput, message)\n\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: input.messageId,\n    recipientUserId: input.userId,\n    deletedAt: null,\n  })\n  if (!recipient) throw new Error('Access denied')\n  return message\n}\n\nasync function requireActionMessage(em: EntityManager, input: ExecuteActionInput) {\n  const message = await findOneWithDecryption(\n    em,\n    Message,\n    {\n      id: input.messageId,\n      tenantId: input.tenantId,\n      deletedAt: null,\n    },\n    undefined,\n    { tenantId: input.tenantId, organizationId: input.organizationId },\n  )\n  if (!message) throw new Error('Message not found')\n  assertOrganizationAccess(input as MessageScopeInput, message)\n  const recipient = await em.findOne(MessageRecipient, {\n    messageId: input.messageId,\n    recipientUserId: input.userId,\n    deletedAt: null,\n  })\n  if (!recipient) throw new Error('Access denied')\n  return message\n}\n\nfunction snapshotActionState(message: Message): ActionStateSnapshot {\n  return {\n    actionTaken: message.actionTaken ?? null,\n    actionTakenByUserId: message.actionTakenByUserId ?? null,\n    actionTakenAt: toIso(message.actionTakenAt),\n    actionResult: message.actionResult ?? null,\n  }\n}\n\nconst recordTerminalActionCommand: CommandHandler<unknown, { ok: true }> = {\n  id: 'messages.actions.record_terminal',\n  async prepare(rawInput, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    return { before: snapshotActionState(message) }\n  },\n  async execute(rawInput, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    const claimedByCaller =\n      message.actionTaken === input.actionId && message.actionTakenByUserId === input.userId\n    if (!claimedByCaller) {\n      if (message.actionTaken) {\n        throw new Error('Action already taken')\n      }\n      // Atomic compare-and-set: only one concurrent request transitions the\n      // message out of the un-taken state. nativeUpdate runs as a single\n      // `UPDATE ... WHERE action_taken IS NULL` so the loser matches 0 rows.\n      const claimedRows = await em.nativeUpdate(\n        Message,\n        { id: input.messageId, tenantId: input.tenantId, actionTaken: null, deletedAt: null },\n        {\n          actionTaken: input.actionId,\n          actionTakenByUserId: input.userId,\n          actionTakenAt: new Date(),\n        },\n      )\n      if (claimedRows === 0) {\n        throw new Error('Action already taken')\n      }\n      message.actionTaken = input.actionId\n      message.actionTakenByUserId = input.userId\n    }\n    if (!message.actionTakenAt) {\n      message.actionTakenAt = new Date()\n    }\n    // action_result is an encrypted column, so it must be written through the\n    // flush path (the encryption subscriber) rather than nativeUpdate.\n    message.actionResult = input.result\n    await em.flush()\n    return { ok: true }\n  },\n  async captureAfter(rawInput, _result, ctx) {\n    const input = recordTerminalActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionTarget(em, input)\n    return snapshotActionState(message)\n  },\n  buildLog: async ({ input, snapshots }) => {\n    const parsed = recordTerminalActionSchema.parse(input)\n    // When the action was pre-claimed by `messages.actions.execute`, the\n    // prepare-captured snapshot already reflects the claimed state, so prefer\n    // the explicit pre-claim snapshot for the undo baseline.\n    const before =\n      (parsed.previousState as ActionStateSnapshot | undefined) ??\n      (snapshots.before as ActionStateSnapshot | undefined) ??\n      null\n    return {\n      actionLabel: 'Execute message terminal action',\n      resourceKind: 'messages.message',\n      resourceId: parsed.messageId,\n      tenantId: parsed.tenantId,\n      organizationId: parsed.organizationId,\n      payload: {\n        undo: {\n          before,\n          after: (snapshots.after as ActionStateSnapshot | undefined) ?? null,\n        } satisfies UndoPayload<ActionStateSnapshot>,\n      },\n      snapshotBefore: before,\n      snapshotAfter: snapshots.after ?? null,\n    }\n  },\n  undo: async ({ logEntry, ctx }) => {\n    const undo = extractUndoPayload<UndoPayload<ActionStateSnapshot>>(logEntry)\n    const before = undo?.before\n    if (!before) return\n    const messageId = logEntry?.resourceId as string | null\n    if (!messageId) return\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await findOneWithDecryption(em, Message, { id: messageId })\n    if (!message) return\n    message.actionTaken = before.actionTaken\n    message.actionTakenByUserId = before.actionTakenByUserId\n    message.actionTakenAt = toDate(before.actionTakenAt)\n    message.actionResult = before.actionResult\n    await em.flush()\n  },\n}\n\nconst executeActionCommand: CommandHandler<\n  unknown,\n  { ok: true; actionId: string; result: Record<string, unknown>; operationLogEntry: unknown | null }\n> = {\n  id: 'messages.actions.execute',\n  async execute(rawInput, ctx) {\n    const input = executeActionSchema.parse(rawInput)\n    const em = (ctx.container.resolve('em') as EntityManager).fork()\n    const message = await requireActionMessage(em, input)\n    const objects = await em.find(MessageObject, { messageId: message.id })\n    const action = findResolvedMessageActionById(message, objects, input.actionId)\n\n    if (!action) {\n      throw new Error('Action not found')\n    }\n\n    if (message.actionTaken) {\n      throw Object.assign(new Error('Action already taken'), { actionTaken: message.actionTaken })\n    }\n\n    const shouldRecordActionTaken = isTerminalMessageAction(action)\n\n    const actionData = resolveMessageActionData(message)\n    if (actionData?.expiresAt) {\n      if (new Date(actionData.expiresAt) < new Date()) {\n        throw new Error('Actions have expired')\n      }\n    } else {\n      const messageType = getMessageType(message.type)\n      if (messageType?.actionsExpireAfterHours && message.sentAt) {\n        const expiry = new Date(message.sentAt.getTime() + messageType.actionsExpireAfterHours * 60 * 60 * 1000)\n        if (expiry < new Date()) {\n          throw new Error('Actions have expired')\n        }\n      }\n    }\n\n    // Capture the un-taken state for the undo log before reserving the action.\n    const previousState = snapshotActionState(message)\n    let claimedTerminal = false\n    const releaseTerminalClaim = async () => {\n      if (!claimedTerminal) return\n      claimedTerminal = false\n      await em.nativeUpdate(\n        Message,\n        {\n          id: message.id,\n          tenantId: input.tenantId,\n          actionTaken: action.id,\n          actionTakenByUserId: input.userId,\n        },\n        { actionTaken: null, actionTakenByUserId: null, actionTakenAt: null },\n      )\n    }\n\n    if (shouldRecordActionTaken) {\n      // Atomically reserve the terminal action BEFORE running the target\n      // command so concurrent requests cannot both execute it. The losing\n      // request matches 0 rows and surfaces the existing 409 response.\n      const claimedRows = await em.nativeUpdate(\n        Message,\n        { id: message.id, tenantId: input.tenantId, actionTaken: null, deletedAt: null },\n        {\n          actionTaken: action.id,\n          actionTakenByUserId: input.userId,\n          actionTakenAt: new Date(),\n        },\n      )\n      if (claimedRows === 0) {\n        const current = await findOneWithDecryption(\n          em,\n          Message,\n          { id: message.id, tenantId: input.tenantId, deletedAt: null },\n          undefined,\n          { tenantId: input.tenantId, organizationId: input.organizationId },\n        )\n        throw Object.assign(new Error('Action already taken'), {\n          actionTaken: current?.actionTaken ?? message.actionTaken ?? action.id,\n        })\n      }\n      claimedTerminal = true\n    }\n\n    const commandBus = ctx.container.resolve('commandBus') as {\n      execute: (\n        commandId: string,\n        options: { input: unknown; ctx: unknown; metadata?: unknown }\n      ) => Promise<{ result: unknown; logEntry?: unknown }>\n    }\n\n    let result: Record<string, unknown> = {}\n    let operationLogEntry: unknown | null = null\n\n    if (action.commandId) {\n      try {\n        const actionInput = resolveActionCommandInput(\n          action,\n          message,\n          {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            userId: input.userId,\n          },\n          input.payload ?? {},\n        )\n\n        if (actionInput.id == null) {\n          const fallbackId = action.objectRef?.entityId ?? message.sourceEntityId ?? null\n          if (typeof fallbackId === 'string' && fallbackId.trim().length > 0) {\n            actionInput.id = fallbackId\n          }\n        }\n\n        const commandResult = await commandBus.execute(action.commandId, {\n          input: actionInput,\n          ctx: {\n            container: ctx.container,\n            auth: {\n              sub: input.userId,\n              tenantId: input.tenantId,\n              orgId: input.organizationId,\n            },\n            organizationScope: null,\n            selectedOrganizationId: input.organizationId,\n            organizationIds: input.organizationId ? [input.organizationId] : null,\n          },\n          metadata: {\n            tenantId: input.tenantId,\n            organizationId: input.organizationId,\n            resourceKind: 'messages',\n          },\n        })\n\n        result = (commandResult.result as Record<string, unknown>) ?? {}\n        operationLogEntry = commandResult.logEntry ?? null\n      } catch (err) {\n        console.error('[messages] executeActionCommand sub-command failed', err)\n        // The target command never completed \u2014 release the reservation so the\n        // action stays retryable, matching the pre-claim failure semantics.\n        await releaseTerminalClaim()\n        throw new Error('Action failed')\n      }\n    } else if (action.href) {\n      const safeRedirect = resolveActionHref(action, message, {\n        tenantId: input.tenantId,\n        organizationId: input.organizationId,\n        userId: input.userId,\n      })\n      if (!safeRedirect) {\n        await releaseTerminalClaim()\n        throw new Error('Action has an unsafe redirect target')\n      }\n      result = { redirect: safeRedirect }\n    } else {\n      await releaseTerminalClaim()\n      throw new Error('Action has no executable target')\n    }\n\n    if (shouldRecordActionTaken) {\n      const terminalResult = await commandBus.execute('messages.actions.record_terminal', {\n        input: {\n          messageId: message.id,\n          actionId: action.id,\n          result,\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n          userId: input.userId,\n          previousState,\n        },\n        ctx: {\n          container: ctx.container,\n          auth: ctx.auth ?? null,\n          organizationScope: null,\n          selectedOrganizationId: input.organizationId,\n          organizationIds: input.organizationId ? [input.organizationId] : null,\n        },\n      })\n      if (!operationLogEntry) {\n        operationLogEntry = terminalResult.logEntry ?? null\n      }\n      await emitMessagesEvent(\n        'messages.message.action_taken',\n        {\n          messageId: message.id,\n          actionId: action.id,\n          userId: input.userId,\n          recipientUserId: input.userId,\n          result,\n          tenantId: input.tenantId,\n          organizationId: input.organizationId,\n        },\n        { persistent: true }\n      )\n    }\n\n    return {\n      ok: true,\n      actionId: action.id,\n      result,\n      operationLogEntry,\n    }\n  },\n}\n\nregisterCommand(recordTerminalActionCommand)\nregisterCommand(executeActionCommand)\n"],
+  "mappings": "AACA,SAAS,SAAS;AAClB,SAAS,uBAA4C;AACrD,SAAS,0BAA4C;AACrD,SAAS,6BAA6B;AACtC,SAAS,SAAS,eAAe,wBAAwB;AACzD,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,sBAAsB;AAC/B,SAAS,gCAAwD;AAEjE,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAC3D,CAAC;AAED,MAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACxC,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA;AAAA;AAAA;AAAA,EAIxB,eAAe,0BAA0B,SAAS;AACpD,CAAC;AAID,MAAM,sBAAsB,EAAE,OAAO;AAAA,EACnC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,UAAU,EAAE,OAAO,EAAE,KAAK;AAAA,EAC1B,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAWD,SAAS,MAAM,OAA+C;AAC5D,SAAO,QAAQ,MAAM,YAAY,IAAI;AACvC;AAEA,SAAS,OAAO,OAA+C;AAC7D,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,IAAI,KAAK,KAAK;AACvB;AAEA,eAAe,oBAAoB,IAAmB,OAAkC;AACtF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,mBAAmB;AACjD,2BAAyB,OAA4B,OAAO;AAE5D,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW,MAAM;AAAA,IACjB,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,eAAe;AAC/C,SAAO;AACT;AAEA,eAAe,qBAAqB,IAAmB,OAA2B;AAChF,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,MACE,IAAI,MAAM;AAAA,MACV,UAAU,MAAM;AAAA,MAChB,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,EACnE;AACA,MAAI,CAAC,QAAS,OAAM,IAAI,MAAM,mBAAmB;AACjD,2BAAyB,OAA4B,OAAO;AAC5D,QAAM,YAAY,MAAM,GAAG,QAAQ,kBAAkB;AAAA,IACnD,WAAW,MAAM;AAAA,IACjB,iBAAiB,MAAM;AAAA,IACvB,WAAW;AAAA,EACb,CAAC;AACD,MAAI,CAAC,UAAW,OAAM,IAAI,MAAM,eAAe;AAC/C,SAAO;AACT;AAEA,SAAS,oBAAoB,SAAuC;AAClE,SAAO;AAAA,IACL,aAAa,QAAQ,eAAe;AAAA,IACpC,qBAAqB,QAAQ,uBAAuB;AAAA,IACpD,eAAe,MAAM,QAAQ,aAAa;AAAA,IAC1C,cAAc,QAAQ,gBAAgB;AAAA,EACxC;AACF;AAEA,MAAM,8BAAqE;AAAA,EACzE,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,WAAO,EAAE,QAAQ,oBAAoB,OAAO,EAAE;AAAA,EAChD;AAAA,EACA,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,UAAM,kBACJ,QAAQ,gBAAgB,MAAM,YAAY,QAAQ,wBAAwB,MAAM;AAClF,QAAI,CAAC,iBAAiB;AACpB,UAAI,QAAQ,aAAa;AACvB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAIA,YAAM,cAAc,MAAM,GAAG;AAAA,QAC3B;AAAA,QACA,EAAE,IAAI,MAAM,WAAW,UAAU,MAAM,UAAU,aAAa,MAAM,WAAW,KAAK;AAAA,QACpF;AAAA,UACE,aAAa,MAAM;AAAA,UACnB,qBAAqB,MAAM;AAAA,UAC3B,eAAe,oBAAI,KAAK;AAAA,QAC1B;AAAA,MACF;AACA,UAAI,gBAAgB,GAAG;AACrB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AACA,cAAQ,cAAc,MAAM;AAC5B,cAAQ,sBAAsB,MAAM;AAAA,IACtC;AACA,QAAI,CAAC,QAAQ,eAAe;AAC1B,cAAQ,gBAAgB,oBAAI,KAAK;AAAA,IACnC;AAGA,YAAQ,eAAe,MAAM;AAC7B,UAAM,GAAG,MAAM;AACf,WAAO,EAAE,IAAI,KAAK;AAAA,EACpB;AAAA,EACA,MAAM,aAAa,UAAU,SAAS,KAAK;AACzC,UAAM,QAAQ,2BAA2B,MAAM,QAAQ;AACvD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,oBAAoB,IAAI,KAAK;AACnD,WAAO,oBAAoB,OAAO;AAAA,EACpC;AAAA,EACA,UAAU,OAAO,EAAE,OAAO,UAAU,MAAM;AACxC,UAAM,SAAS,2BAA2B,MAAM,KAAK;AAIrD,UAAM,SACH,OAAO,iBACP,UAAU,UACX;AACF,WAAO;AAAA,MACL,aAAa;AAAA,MACb,cAAc;AAAA,MACd,YAAY,OAAO;AAAA,MACnB,UAAU,OAAO;AAAA,MACjB,gBAAgB,OAAO;AAAA,MACvB,SAAS;AAAA,QACP,MAAM;AAAA,UACJ;AAAA,UACA,OAAQ,UAAU,SAA6C;AAAA,QACjE;AAAA,MACF;AAAA,MACA,gBAAgB;AAAA,MAChB,eAAe,UAAU,SAAS;AAAA,IACpC;AAAA,EACF;AAAA,EACA,MAAM,OAAO,EAAE,UAAU,IAAI,MAAM;AACjC,UAAM,OAAO,mBAAqD,QAAQ;AAC1E,UAAM,SAAS,MAAM;AACrB,QAAI,CAAC,OAAQ;AACb,UAAM,YAAY,UAAU;AAC5B,QAAI,CAAC,UAAW;AAChB,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,sBAAsB,IAAI,SAAS,EAAE,IAAI,UAAU,CAAC;AAC1E,QAAI,CAAC,QAAS;AACd,YAAQ,cAAc,OAAO;AAC7B,YAAQ,sBAAsB,OAAO;AACrC,YAAQ,gBAAgB,OAAO,OAAO,aAAa;AACnD,YAAQ,eAAe,OAAO;AAC9B,UAAM,GAAG,MAAM;AAAA,EACjB;AACF;AAEA,MAAM,uBAGF;AAAA,EACF,IAAI;AAAA,EACJ,MAAM,QAAQ,UAAU,KAAK;AAC3B,UAAM,QAAQ,oBAAoB,MAAM,QAAQ;AAChD,UAAM,KAAM,IAAI,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC/D,UAAM,UAAU,MAAM,qBAAqB,IAAI,KAAK;AACpD,UAAM,UAAU,MAAM,GAAG,KAAK,eAAe,EAAE,WAAW,QAAQ,GAAG,CAAC;AACtE,UAAM,SAAS,8BAA8B,SAAS,SAAS,MAAM,QAAQ;AAE7E,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI,MAAM,kBAAkB;AAAA,IACpC;AAEA,QAAI,QAAQ,aAAa;AACvB,YAAM,OAAO,OAAO,IAAI,MAAM,sBAAsB,GAAG,EAAE,aAAa,QAAQ,YAAY,CAAC;AAAA,IAC7F;AAEA,UAAM,0BAA0B,wBAAwB,MAAM;AAE9D,UAAM,aAAa,yBAAyB,OAAO;AACnD,QAAI,YAAY,WAAW;AACzB,UAAI,IAAI,KAAK,WAAW,SAAS,IAAI,oBAAI,KAAK,GAAG;AAC/C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAAA,IACF,OAAO;AACL,YAAM,cAAc,eAAe,QAAQ,IAAI;AAC/C,UAAI,aAAa,2BAA2B,QAAQ,QAAQ;AAC1D,cAAM,SAAS,IAAI,KAAK,QAAQ,OAAO,QAAQ,IAAI,YAAY,0BAA0B,KAAK,KAAK,GAAI;AACvG,YAAI,SAAS,oBAAI,KAAK,GAAG;AACvB,gBAAM,IAAI,MAAM,sBAAsB;AAAA,QACxC;AAAA,MACF;AAAA,IACF;AAGA,UAAM,gBAAgB,oBAAoB,OAAO;AACjD,QAAI,kBAAkB;AACtB,UAAM,uBAAuB,YAAY;AACvC,UAAI,CAAC,gBAAiB;AACtB,wBAAkB;AAClB,YAAM,GAAG;AAAA,QACP;AAAA,QACA;AAAA,UACE,IAAI,QAAQ;AAAA,UACZ,UAAU,MAAM;AAAA,UAChB,aAAa,OAAO;AAAA,UACpB,qBAAqB,MAAM;AAAA,QAC7B;AAAA,QACA,EAAE,aAAa,MAAM,qBAAqB,MAAM,eAAe,KAAK;AAAA,MACtE;AAAA,IACF;AAEA,QAAI,yBAAyB;AAI3B,YAAM,cAAc,MAAM,GAAG;AAAA,QAC3B;AAAA,QACA,EAAE,IAAI,QAAQ,IAAI,UAAU,MAAM,UAAU,aAAa,MAAM,WAAW,KAAK;AAAA,QAC/E;AAAA,UACE,aAAa,OAAO;AAAA,UACpB,qBAAqB,MAAM;AAAA,UAC3B,eAAe,oBAAI,KAAK;AAAA,QAC1B;AAAA,MACF;AACA,UAAI,gBAAgB,GAAG;AACrB,cAAM,UAAU,MAAM;AAAA,UACpB;AAAA,UACA;AAAA,UACA,EAAE,IAAI,QAAQ,IAAI,UAAU,MAAM,UAAU,WAAW,KAAK;AAAA,UAC5D;AAAA,UACA,EAAE,UAAU,MAAM,UAAU,gBAAgB,MAAM,eAAe;AAAA,QACnE;AACA,cAAM,OAAO,OAAO,IAAI,MAAM,sBAAsB,GAAG;AAAA,UACrD,aAAa,SAAS,eAAe,QAAQ,eAAe,OAAO;AAAA,QACrE,CAAC;AAAA,MACH;AACA,wBAAkB;AAAA,IACpB;AAEA,UAAM,aAAa,IAAI,UAAU,QAAQ,YAAY;AAOrD,QAAI,SAAkC,CAAC;AACvC,QAAI,oBAAoC;AAExC,QAAI,OAAO,WAAW;AACpB,UAAI;AACF,cAAM,cAAc;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,YACE,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,QAAQ,MAAM;AAAA,UAChB;AAAA,UACA,MAAM,WAAW,CAAC;AAAA,QACpB;AAEA,YAAI,YAAY,MAAM,MAAM;AAC1B,gBAAM,aAAa,OAAO,WAAW,YAAY,QAAQ,kBAAkB;AAC3E,cAAI,OAAO,eAAe,YAAY,WAAW,KAAK,EAAE,SAAS,GAAG;AAClE,wBAAY,KAAK;AAAA,UACnB;AAAA,QACF;AAEA,cAAM,gBAAgB,MAAM,WAAW,QAAQ,OAAO,WAAW;AAAA,UAC/D,OAAO;AAAA,UACP,KAAK;AAAA,YACH,WAAW,IAAI;AAAA,YACf,MAAM;AAAA,cACJ,KAAK,MAAM;AAAA,cACX,UAAU,MAAM;AAAA,cAChB,OAAO,MAAM;AAAA,YACf;AAAA,YACA,mBAAmB;AAAA,YACnB,wBAAwB,MAAM;AAAA,YAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,UACnE;AAAA,UACA,UAAU;AAAA,YACR,UAAU,MAAM;AAAA,YAChB,gBAAgB,MAAM;AAAA,YACtB,cAAc;AAAA,UAChB;AAAA,QACF,CAAC;AAED,iBAAU,cAAc,UAAsC,CAAC;AAC/D,4BAAoB,cAAc,YAAY;AAAA,MAChD,SAAS,KAAK;AACZ,gBAAQ,MAAM,sDAAsD,GAAG;AAGvE,cAAM,qBAAqB;AAC3B,cAAM,IAAI,MAAM,eAAe;AAAA,MACjC;AAAA,IACF,WAAW,OAAO,MAAM;AACtB,YAAM,eAAe,kBAAkB,QAAQ,SAAS;AAAA,QACtD,UAAU,MAAM;AAAA,QAChB,gBAAgB,MAAM;AAAA,QACtB,QAAQ,MAAM;AAAA,MAChB,CAAC;AACD,UAAI,CAAC,cAAc;AACjB,cAAM,qBAAqB;AAC3B,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AACA,eAAS,EAAE,UAAU,aAAa;AAAA,IACpC,OAAO;AACL,YAAM,qBAAqB;AAC3B,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACnD;AAEA,QAAI,yBAAyB;AAC3B,YAAM,iBAAiB,MAAM,WAAW,QAAQ,oCAAoC;AAAA,QAClF,OAAO;AAAA,UACL,WAAW,QAAQ;AAAA,UACnB,UAAU,OAAO;AAAA,UACjB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,UACtB,QAAQ,MAAM;AAAA,UACd;AAAA,QACF;AAAA,QACA,KAAK;AAAA,UACH,WAAW,IAAI;AAAA,UACf,MAAM,IAAI,QAAQ;AAAA,UAClB,mBAAmB;AAAA,UACnB,wBAAwB,MAAM;AAAA,UAC9B,iBAAiB,MAAM,iBAAiB,CAAC,MAAM,cAAc,IAAI;AAAA,QACnE;AAAA,MACF,CAAC;AACD,UAAI,CAAC,mBAAmB;AACtB,4BAAoB,eAAe,YAAY;AAAA,MACjD;AACA,YAAM;AAAA,QACJ;AAAA,QACA;AAAA,UACE,WAAW,QAAQ;AAAA,UACnB,UAAU,OAAO;AAAA,UACjB,QAAQ,MAAM;AAAA,UACd,iBAAiB,MAAM;AAAA,UACvB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,gBAAgB,MAAM;AAAA,QACxB;AAAA,QACA,EAAE,YAAY,KAAK;AAAA,MACrB;AAAA,IACF;AAEA,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,UAAU,OAAO;AAAA,MACjB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEA,gBAAgB,2BAA2B;AAC3C,gBAAgB,oBAAoB;",
   "names": []
 }

package/dist/modules/perspectives/api/[tableId]/[perspectiveId]/route.js

@@ -2,6 +2,10 @@ import { NextResponse } from "next/server";
 import { z } from "zod";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { deleteUserPerspective } from "@open-mercato/core/modules/perspectives/services/perspectiveService";
 import { perspectivesTag, perspectivesErrorSchema, perspectivesSuccessSchema } from "../../openapi.js";
 const metadata = {
@@ -33,7 +37,21 @@ async function DELETE(req, ctx) {
       return null;
     }
   })();
-  await deleteUserPerspective(em, cache, {
+  const guardResult = await validateCrudMutationGuard(container, {
+    tenantId: auth.tenantId ?? "",
+    organizationId: auth.orgId ?? null,
+    userId: auth.sub,
+    resourceKind: "perspectives.perspective",
+    resourceId: perspectiveId,
+    operation: "delete",
+    requestMethod: req.method,
+    requestHeaders: req.headers,
+    mutationPayload: { tableId, perspectiveId }
+  });
+  if (guardResult && !guardResult.ok) {
+    return NextResponse.json(guardResult.body, { status: guardResult.status });
+  }
+  const deleted = await deleteUserPerspective(em, cache, {
     scope: {
       userId: auth.sub,
       tenantId: auth.tenantId ?? null,
@@ -42,6 +60,19 @@ async function DELETE(req, ctx) {
     tableId,
     perspectiveId
   });
+  if (deleted && guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId ?? "",
+      organizationId: auth.orgId ?? null,
+      userId: auth.sub,
+      resourceKind: "perspectives.perspective",
+      resourceId: perspectiveId,
+      operation: "delete",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: guardResult.metadata ?? null
+    });
+  }
   return NextResponse.json({ success: true });
 }
 const perspectiveDeletePathParamsSchema = z.object({

package/dist/modules/perspectives/api/[tableId]/[perspectiveId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/perspectives/api/%5BtableId%5D/%5BperspectiveId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { deleteUserPerspective } from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { perspectivesTag, perspectivesErrorSchema, perspectivesSuccessSchema } from '../../openapi'\n\nexport const metadata = {\n  DELETE: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nexport async function DELETE(req: Request, ctx: { params: { tableId: string; perspectiveId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  const perspectiveId = decodeParam(ctx.params?.perspectiveId).trim()\n  if (!tableId || !perspectiveId) {\n    return NextResponse.json({ error: 'Invalid parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n\n  await deleteUserPerspective(em, cache, {\n    scope: {\n      userId: auth.sub,\n      tenantId: auth.tenantId ?? null,\n      organizationId: auth.orgId ?? null,\n    },\n    tableId,\n    perspectiveId,\n  })\n\n  return NextResponse.json({ success: true })\n}\n\nconst perspectiveDeletePathParamsSchema = z.object({\n  tableId: z.string().min(1),\n  perspectiveId: z.string().uuid(),\n})\n\nconst perspectiveDeleteDoc: OpenApiMethodDoc = {\n  summary: 'Delete a personal perspective',\n  description: 'Removes a perspective owned by the current user for the given table.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Perspective removed.', schema: perspectivesSuccessSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid identifiers supplied', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 404, description: 'Perspective not found', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Delete personal perspective',\n  pathParams: perspectiveDeletePathParamsSchema,\n  methods: {\n    DELETE: perspectiveDeleteDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,6BAA6B;AAEtC,SAAS,iBAAiB,yBAAyB,iCAAiC;AAE7E,MAAM,WAAW;AAAA,EACtB,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACrE;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,OAAO,KAAc,KAA6D;AACtG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,QAAM,gBAAgB,YAAY,IAAI,QAAQ,aAAa,EAAE,KAAK;AAClE,MAAI,CAAC,WAAW,CAAC,eAAe;AAC9B,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEH,QAAM,sBAAsB,IAAI,OAAO;AAAA,IACrC,OAAO;AAAA,MACL,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,SAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAC5C;AAEA,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,eAAe,EAAE,OAAO,EAAE,KAAK;AACjC,CAAC;AAED,MAAM,uBAAyC;AAAA,EAC7C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,0BAA0B;AAAA,EACxF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,wBAAwB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,wBAAwB;AAAA,EACvF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,QAAQ;AAAA,EACV;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { deleteUserPerspective } from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { perspectivesTag, perspectivesErrorSchema, perspectivesSuccessSchema } from '../../openapi'\n\nexport const metadata = {\n  DELETE: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nexport async function DELETE(req: Request, ctx: { params: { tableId: string; perspectiveId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  const perspectiveId = decodeParam(ctx.params?.perspectiveId).trim()\n  if (!tableId || !perspectiveId) {\n    return NextResponse.json({ error: 'Invalid parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId ?? '',\n    organizationId: auth.orgId ?? null,\n    userId: auth.sub,\n    resourceKind: 'perspectives.perspective',\n    resourceId: perspectiveId,\n    operation: 'delete',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { tableId, perspectiveId },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  const deleted = await deleteUserPerspective(em, cache, {\n    scope: {\n      userId: auth.sub,\n      tenantId: auth.tenantId ?? null,\n      organizationId: auth.orgId ?? null,\n    },\n    tableId,\n    perspectiveId,\n  })\n\n  if (deleted && guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.perspective',\n      resourceId: perspectiveId,\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ success: true })\n}\n\nconst perspectiveDeletePathParamsSchema = z.object({\n  tableId: z.string().min(1),\n  perspectiveId: z.string().uuid(),\n})\n\nconst perspectiveDeleteDoc: OpenApiMethodDoc = {\n  summary: 'Delete a personal perspective',\n  description: 'Removes a perspective owned by the current user for the given table.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Perspective removed.', schema: perspectivesSuccessSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid identifiers supplied', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 404, description: 'Perspective not found', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Delete personal perspective',\n  pathParams: perspectiveDeletePathParamsSchema,\n  methods: {\n    DELETE: perspectiveDeleteDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AAEtC,SAAS,iBAAiB,yBAAyB,iCAAiC;AAE7E,MAAM,WAAW;AAAA,EACtB,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACrE;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,OAAO,KAAc,KAA6D;AACtG,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,QAAM,gBAAgB,YAAY,IAAI,QAAQ,aAAa,EAAE,KAAK;AAClE,MAAI,CAAC,WAAW,CAAC,eAAe;AAC9B,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEH,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,SAAS,cAAc;AAAA,EAC5C,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,QAAM,UAAU,MAAM,sBAAsB,IAAI,OAAO;AAAA,IACrD,OAAO;AAAA,MACL,QAAQ,KAAK;AAAA,MACb,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,WAAW,aAAa,MAAM,YAAY,uBAAuB;AACnE,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAC5C;AAEA,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,eAAe,EAAE,OAAO,EAAE,KAAK;AACjC,CAAC;AAED,MAAM,uBAAyC;AAAA,EAC7C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,wBAAwB,QAAQ,0BAA0B;AAAA,EACxF;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,wBAAwB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,wBAAwB;AAAA,EACvF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,QAAQ;AAAA,EACV;AACF;",
   "names": []
 }

package/dist/modules/perspectives/api/[tableId]/roles/[roleId]/route.js

@@ -2,6 +2,10 @@ import { NextResponse } from "next/server";
 import { z } from "zod";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { clearRolePerspectives } from "@open-mercato/core/modules/perspectives/services/perspectiveService";
 import { Role } from "@open-mercato/core/modules/auth/data/entities";
 import { perspectivesTag, perspectivesErrorSchema, perspectivesSuccessSchema } from "../../../openapi.js";
@@ -37,12 +41,39 @@ async function DELETE(req, ctx) {
   const scope = auth.tenantId ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] } : { tenantId: null };
   const role = await em.findOne(Role, { id: roleId, deletedAt: null, ...scope });
   if (!role) return NextResponse.json({ error: "Role not found" }, { status: 404 });
-  await clearRolePerspectives(em, cache, {
+  const guardResult = await validateCrudMutationGuard(container, {
+    tenantId: auth.tenantId ?? "",
+    organizationId: auth.orgId ?? null,
+    userId: auth.sub,
+    resourceKind: "perspectives.role_perspective",
+    resourceId: roleId,
+    operation: "delete",
+    requestMethod: req.method,
+    requestHeaders: req.headers,
+    mutationPayload: { tableId, roleId }
+  });
+  if (guardResult && !guardResult.ok) {
+    return NextResponse.json(guardResult.body, { status: guardResult.status });
+  }
+  const clearedCount = await clearRolePerspectives(em, cache, {
     tableId,
     tenantId: auth.tenantId ?? null,
     organizationId: auth.orgId ?? null,
     roleIds: [roleId]
   });
+  if (clearedCount > 0 && guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId ?? "",
+      organizationId: auth.orgId ?? null,
+      userId: auth.sub,
+      resourceKind: "perspectives.role_perspective",
+      resourceId: roleId,
+      operation: "delete",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: guardResult.metadata ?? null
+    });
+  }
   return NextResponse.json({ success: true });
 }
 const rolePerspectiveDeleteParamsSchema = z.object({

package/dist/modules/perspectives/api/[tableId]/roles/[roleId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/perspectives/api/%5BtableId%5D/roles/%5BroleId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { clearRolePerspectives } from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { perspectivesTag, perspectivesErrorSchema, perspectivesSuccessSchema } from '../../../openapi'\n\nexport const metadata = {\n  DELETE: { requireAuth: true, requireFeatures: ['perspectives.role_defaults'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nexport async function DELETE(req: Request, ctx: { params: { tableId: string; roleId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  const roleId = decodeParam(ctx.params?.roleId).trim()\n  if (!tableId || !roleId) {\n    return NextResponse.json({ error: 'Invalid parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n\n  const scope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null, ...(scope as any) } as any)\n  if (!role) return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n\n  await clearRolePerspectives(em, cache, {\n    tableId,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n    roleIds: [roleId],\n  })\n\n  return NextResponse.json({ success: true })\n}\n\nconst rolePerspectiveDeleteParamsSchema = z.object({\n  tableId: z.string().min(1),\n  roleId: z.string().uuid(),\n})\n\nconst rolePerspectiveDeleteDoc: OpenApiMethodDoc = {\n  summary: 'Clear role perspectives for a table',\n  description: 'Removes all role-level perspectives associated with the provided role identifier for the table.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Role perspectives cleared.', schema: perspectivesSuccessSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid identifiers supplied', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature', schema: perspectivesErrorSchema },\n    { status: 404, description: 'Role not found in scope', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Delete role-level perspectives',\n  pathParams: rolePerspectiveDeleteParamsSchema,\n  methods: {\n    DELETE: rolePerspectiveDeleteDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,6BAA6B;AACtC,SAAS,YAAY;AAErB,SAAS,iBAAiB,yBAAyB,iCAAiC;AAE7E,MAAM,WAAW;AAAA,EACtB,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,OAAO,KAAc,KAAsD;AAC/F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,QAAM,SAAS,YAAY,IAAI,QAAQ,MAAM,EAAE,KAAK;AACpD,MAAI,CAAC,WAAW,CAAC,QAAQ;AACvB,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEH,QAAM,QAAQ,KAAK,WACf,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AAErB,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,MAAM,GAAI,MAAc,CAAQ;AAC7F,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhF,QAAM,sBAAsB,IAAI,OAAO;AAAA,IACrC;AAAA,IACA,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,SAAS,CAAC,MAAM;AAAA,EAClB,CAAC;AAED,SAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAC5C;AAEA,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAED,MAAM,2BAA6C;AAAA,EACjD,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,0BAA0B;AAAA,EAC9F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,wBAAwB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,wBAAwB;AAAA,IAC1G,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,QAAQ;AAAA,EACV;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { clearRolePerspectives } from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { perspectivesTag, perspectivesErrorSchema, perspectivesSuccessSchema } from '../../../openapi'\n\nexport const metadata = {\n  DELETE: { requireAuth: true, requireFeatures: ['perspectives.role_defaults'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nexport async function DELETE(req: Request, ctx: { params: { tableId: string; roleId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  const roleId = decodeParam(ctx.params?.roleId).trim()\n  if (!tableId || !roleId) {\n    return NextResponse.json({ error: 'Invalid parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n\n  const scope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null, ...(scope as any) } as any)\n  if (!role) return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId ?? '',\n    organizationId: auth.orgId ?? null,\n    userId: auth.sub,\n    resourceKind: 'perspectives.role_perspective',\n    resourceId: roleId,\n    operation: 'delete',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { tableId, roleId },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  const clearedCount = await clearRolePerspectives(em, cache, {\n    tableId,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n    roleIds: [roleId],\n  })\n\n  if (clearedCount > 0 && guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: roleId,\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ success: true })\n}\n\nconst rolePerspectiveDeleteParamsSchema = z.object({\n  tableId: z.string().min(1),\n  roleId: z.string().uuid(),\n})\n\nconst rolePerspectiveDeleteDoc: OpenApiMethodDoc = {\n  summary: 'Clear role perspectives for a table',\n  description: 'Removes all role-level perspectives associated with the provided role identifier for the table.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Role perspectives cleared.', schema: perspectivesSuccessSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid identifiers supplied', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature', schema: perspectivesErrorSchema },\n    { status: 404, description: 'Role not found in scope', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Delete role-level perspectives',\n  pathParams: rolePerspectiveDeleteParamsSchema,\n  methods: {\n    DELETE: rolePerspectiveDeleteDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,YAAY;AAErB,SAAS,iBAAiB,yBAAyB,iCAAiC;AAE7E,MAAM,WAAW;AAAA,EACtB,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,OAAO,KAAc,KAAsD;AAC/F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,QAAM,SAAS,YAAY,IAAI,QAAQ,MAAM,EAAE,KAAK;AACpD,MAAI,CAAC,WAAW,CAAC,QAAQ;AACvB,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEH,QAAM,QAAQ,KAAK,WACf,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AAErB,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,MAAM,GAAI,MAAc,CAAQ;AAC7F,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhF,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,SAAS,OAAO;AAAA,EACrC,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,QAAM,eAAe,MAAM,sBAAsB,IAAI,OAAO;AAAA,IAC1D;AAAA,IACA,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,SAAS,CAAC,MAAM;AAAA,EAClB,CAAC;AAED,MAAI,eAAe,KAAK,aAAa,MAAM,YAAY,uBAAuB;AAC5E,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAC5C;AAEA,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAED,MAAM,2BAA6C;AAAA,EACjD,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,0BAA0B;AAAA,EAC9F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,wBAAwB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,wBAAwB;AAAA,IAC1G,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,QAAQ;AAAA,EACV;AACF;",
   "names": []
 }

package/dist/modules/perspectives/api/[tableId]/route.js

@@ -4,6 +4,10 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { withAtomicFlush } from "@open-mercato/shared/lib/commands/flush";
 import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import {
+  runCrudMutationGuardAfterSuccess,
+  validateCrudMutationGuard
+} from "@open-mercato/shared/lib/crud/mutation-guard";
 import { perspectiveSaveSchema } from "@open-mercato/core/modules/perspectives/data/validators";
 import {
   loadPerspectivesState,
@@ -127,6 +131,7 @@ async function POST(req, ctx) {
   const applyToRoles = Array.from(new Set(parsed.data.applyToRoles ?? [])).filter((id) => id.trim().length > 0);
   const clearRoleIds = Array.from(new Set(parsed.data.clearRoleIds ?? [])).filter((id) => id.trim().length > 0);
   const hasRoleOps = applyToRoles.length > 0 || clearRoleIds.length > 0;
+  const targetRoleIds = Array.from(/* @__PURE__ */ new Set([...applyToRoles, ...clearRoleIds]));
   if (hasRoleOps) {
     const canApplyToRoles = await rbac.userHasAllFeatures?.(
       auth.sub,
@@ -137,7 +142,6 @@ async function POST(req, ctx) {
       return NextResponse.json({ error: "Forbidden", requiredFeatures: ["perspectives.role_defaults"] }, { status: 403 });
     }
     const roleScope = auth.tenantId ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] } : { tenantId: null };
-    const targetRoleIds = Array.from(/* @__PURE__ */ new Set([...applyToRoles, ...clearRoleIds]));
     const roles = await em.find(Role, {
       id: { $in: targetRoleIds },
       ...roleScope,
@@ -149,8 +153,48 @@ async function POST(req, ctx) {
       return NextResponse.json({ error: "Invalid roles", missing }, { status: 400 });
     }
   }
+  const guardResourceId = parsed.data.perspectiveId ?? tableId;
+  const guardResult = await validateCrudMutationGuard(container, {
+    tenantId: auth.tenantId ?? "",
+    organizationId: auth.orgId ?? null,
+    userId: auth.sub,
+    resourceKind: "perspectives.perspective",
+    resourceId: guardResourceId,
+    operation: "custom",
+    requestMethod: req.method,
+    requestHeaders: req.headers,
+    mutationPayload: { ...parsed.data, tableId }
+  });
+  if (guardResult && !guardResult.ok) {
+    return NextResponse.json(guardResult.body, { status: guardResult.status });
+  }
+  let roleGuardResult = null;
+  if (hasRoleOps) {
+    roleGuardResult = await validateCrudMutationGuard(container, {
+      tenantId: auth.tenantId ?? "",
+      organizationId: auth.orgId ?? null,
+      userId: auth.sub,
+      resourceKind: "perspectives.role_perspective",
+      resourceId: targetRoleIds.join(","),
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      mutationPayload: {
+        tableId,
+        applyToRoles,
+        clearRoleIds,
+        name: parsed.data.name,
+        settings: parsed.data.settings,
+        setRoleDefault: parsed.data.setRoleDefault ?? false
+      }
+    });
+  }
+  if (roleGuardResult && !roleGuardResult.ok) {
+    return NextResponse.json(roleGuardResult.body, { status: roleGuardResult.status });
+  }
   let saved = null;
   let updatedRolePerspectives = null;
+  let clearedRolePerspectiveCount = 0;
   try {
     await withAtomicFlush(em, [
       async () => {
@@ -178,7 +222,7 @@ async function POST(req, ctx) {
       },
       async () => {
         if (clearRoleIds.length) {
-          await clearRolePerspectives(em, cache, {
+          clearedRolePerspectiveCount = await clearRolePerspectives(em, cache, {
             tableId,
             tenantId: auth.tenantId ?? null,
             organizationId: auth.orgId ?? null,
@@ -193,6 +237,33 @@ async function POST(req, ctx) {
     }
     throw err;
   }
+  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId ?? "",
+      organizationId: auth.orgId ?? null,
+      userId: auth.sub,
+      resourceKind: "perspectives.perspective",
+      resourceId: guardResourceId,
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: guardResult.metadata ?? null
+    });
+  }
+  const didWriteRolePerspectives = applyToRoles.length > 0 || clearedRolePerspectiveCount > 0;
+  if (didWriteRolePerspectives && roleGuardResult?.ok && roleGuardResult.shouldRunAfterSuccess) {
+    await runCrudMutationGuardAfterSuccess(container, {
+      tenantId: auth.tenantId ?? "",
+      organizationId: auth.orgId ?? null,
+      userId: auth.sub,
+      resourceKind: "perspectives.role_perspective",
+      resourceId: targetRoleIds.join(","),
+      operation: "custom",
+      requestMethod: req.method,
+      requestHeaders: req.headers,
+      metadata: roleGuardResult.metadata ?? null
+    });
+  }
   return NextResponse.json({
     perspective: saved,
     rolePerspectives: updatedRolePerspectives ?? [],

package/dist/modules/perspectives/api/[tableId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/perspectives/api/%5BtableId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { perspectiveSaveSchema } from '@open-mercato/core/modules/perspectives/data/validators'\nimport {\n  loadPerspectivesState,\n  saveUserPerspective,\n  saveRolePerspectives,\n  clearRolePerspectives,\n  type PerspectiveScope,\n} from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  perspectivesTag,\n  perspectivesErrorSchema,\n  perspectivesIndexResponseSchema,\n  perspectiveSaveResponseSchema,\n} from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n  POST: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nfunction buildScope(auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>): PerspectiveScope {\n  return {\n    userId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n  }\n}\n\nexport async function GET(_req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(_req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const assignedRoleNames = Array.isArray(auth.roles)\n    ? Array.from(new Set(auth.roles.filter((role): role is string => typeof role === 'string' && role.trim().length > 0)))\n    : []\n  const assignedRoles = assignedRoleNames.length\n    ? await em.find(Role, {\n        name: { $in: assignedRoleNames as any },\n        deletedAt: null,\n      } as any, { orderBy: { name: 'asc' } })\n    : []\n  const assignedRoleIds = assignedRoles.map((role) => role.id)\n\n  const canApplyToRoles = await rbac.userHasAllFeatures?.(\n    auth.sub,\n    ['perspectives.role_defaults'],\n    { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n  ) ?? false\n\n  const roleScope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n  const availableRoles = canApplyToRoles\n    ? await em.find(Role, { ...roleScope as any, deletedAt: null } as any, { orderBy: { name: 'asc' } })\n    : assignedRoles\n\n  const state = await loadPerspectivesState(em, cache, {\n    scope: buildScope(auth),\n    tableId,\n    roleIds: assignedRoleIds,\n  })\n\n  const rolePerspectiveByRole = new Map<string, { hasDefault: boolean; count: number }>()\n  for (const item of state.rolePerspectives) {\n    const entry = rolePerspectiveByRole.get(item.roleId) ?? { hasDefault: false, count: 0 }\n    entry.count += 1\n    entry.hasDefault = entry.hasDefault || item.isDefault\n    rolePerspectiveByRole.set(item.roleId, entry)\n  }\n\n  return NextResponse.json({\n    tableId,\n    perspectives: state.personal,\n    defaultPerspectiveId: state.personalDefaultId,\n    rolePerspectives: state.rolePerspectives.map((rp) => ({\n      ...rp,\n      roleName: availableRoles.find((role) => role.id === rp.roleId)?.name ?? assignedRoles.find((role) => role.id === rp.roleId)?.name ?? null,\n    })),\n    roles: availableRoles.map((role) => {\n      const stats = rolePerspectiveByRole.get(role.id)\n      return {\n        id: role.id,\n        name: role.name,\n        hasPerspective: Boolean(stats?.count),\n        hasDefault: Boolean(stats?.hasDefault),\n      }\n    }),\n    canApplyToRoles,\n  })\n}\n\nexport async function POST(req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 })\n  }\n\n  const parsed = perspectiveSaveSchema.safeParse(parsedBody)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const scope = buildScope(auth)\n\n  const applyToRoles = Array.from(new Set(parsed.data.applyToRoles ?? [])).filter((id) => id.trim().length > 0)\n  const clearRoleIds = Array.from(new Set(parsed.data.clearRoleIds ?? [])).filter((id) => id.trim().length > 0)\n  const hasRoleOps = applyToRoles.length > 0 || clearRoleIds.length > 0\n\n  if (hasRoleOps) {\n    const canApplyToRoles = await rbac.userHasAllFeatures?.(\n      auth.sub,\n      ['perspectives.role_defaults'],\n      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n    ) ?? false\n\n    if (!canApplyToRoles) {\n      return NextResponse.json({ error: 'Forbidden', requiredFeatures: ['perspectives.role_defaults'] }, { status: 403 })\n    }\n\n    const roleScope = auth.tenantId\n      ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n      : { tenantId: null }\n    const targetRoleIds = Array.from(new Set([...applyToRoles, ...clearRoleIds]))\n    const roles = await em.find(Role, {\n      id: { $in: targetRoleIds as any },\n      ...(roleScope as any),\n      deletedAt: null,\n    } as any)\n    const validRoleIds = new Set(roles.map((role) => role.id))\n\n    const missing = targetRoleIds.filter((id) => !validRoleIds.has(id))\n    if (missing.length) {\n      return NextResponse.json({ error: 'Invalid roles', missing }, { status: 400 })\n    }\n  }\n\n  let saved: Awaited<ReturnType<typeof saveUserPerspective>> | null = null\n  let updatedRolePerspectives: Awaited<ReturnType<typeof saveRolePerspectives>> | null = null\n\n  try {\n    await withAtomicFlush(em, [\n    async () => {\n      saved = await saveUserPerspective(em, cache, {\n        scope,\n        tableId,\n        input: parsed.data,\n        request: req,\n      })\n    },\n    async () => {\n      if (applyToRoles.length) {\n        updatedRolePerspectives = await saveRolePerspectives(em, cache, {\n          tableId,\n          tenantId: auth.tenantId ?? null,\n          organizationId: auth.orgId ?? null,\n          input: {\n            roleIds: applyToRoles,\n            name: parsed.data.name,\n            settings: parsed.data.settings,\n            setDefault: parsed.data.setRoleDefault ?? false,\n          },\n        })\n      }\n    },\n    async () => {\n      if (clearRoleIds.length) {\n        await clearRolePerspectives(em, cache, {\n          tableId,\n          tenantId: auth.tenantId ?? null,\n          organizationId: auth.orgId ?? null,\n          roleIds: clearRoleIds,\n        })\n      }\n    },\n    ], { transaction: true })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  return NextResponse.json({\n    perspective: saved,\n    rolePerspectives: updatedRolePerspectives ?? [],\n    clearedRoleIds: clearRoleIds ?? [],\n  })\n}\n\nconst perspectivePathParamsSchema = z.object({\n  tableId: z.string().min(1),\n})\n\nconst perspectivesGetDoc: OpenApiMethodDoc = {\n  summary: 'Load perspectives for a table',\n  description: 'Returns personal perspectives and available role defaults for the requested table identifier.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Current perspectives and defaults.', schema: perspectivesIndexResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid table identifier', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n  ],\n}\n\nconst perspectivesPostDoc: OpenApiMethodDoc = {\n  summary: 'Create or update a perspective',\n  description: 'Saves a personal perspective and optionally applies the same configuration to selected roles.',\n  tags: [perspectivesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: perspectiveSaveSchema,\n    description: 'Perspective payload including optional role defaults.',\n  },\n  responses: [\n    { status: 200, description: 'Perspective saved successfully.', schema: perspectiveSaveResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed or invalid roles provided', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature for role updates', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Manage table perspectives',\n  pathParams: perspectivePathParamsSchema,\n  methods: {\n    GET: perspectivesGetDoc,\n    POST: perspectivesPostDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,YAAY;AAErB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,MAAqF;AACvG,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,EAChC;AACF;AAEA,eAAsB,IAAI,MAAe,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,IAAI;AAC1C,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,oBAAoB,MAAM,QAAQ,KAAK,KAAK,IAC9C,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IACnH,CAAC;AACL,QAAM,gBAAgB,kBAAkB,SACpC,MAAM,GAAG,KAAK,MAAM;AAAA,IAClB,MAAM,EAAE,KAAK,kBAAyB;AAAA,IACtC,WAAW;AAAA,EACb,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACtC,CAAC;AACL,QAAM,kBAAkB,cAAc,IAAI,CAAC,SAAS,KAAK,EAAE;AAE3D,QAAM,kBAAkB,MAAM,KAAK;AAAA,IACjC,KAAK;AAAA,IACL,CAAC,4BAA4B;AAAA,IAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,EACxE,KAAK;AAEL,QAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,QAAM,iBAAiB,kBACnB,MAAM,GAAG,KAAK,MAAM,EAAE,GAAG,WAAkB,WAAW,KAAK,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACjG;AAEJ,QAAM,QAAQ,MAAM,sBAAsB,IAAI,OAAO;AAAA,IACnD,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AAED,QAAM,wBAAwB,oBAAI,IAAoD;AACtF,aAAW,QAAQ,MAAM,kBAAkB;AACzC,UAAM,QAAQ,sBAAsB,IAAI,KAAK,MAAM,KAAK,EAAE,YAAY,OAAO,OAAO,EAAE;AACtF,UAAM,SAAS;AACf,UAAM,aAAa,MAAM,cAAc,KAAK;AAC5C,0BAAsB,IAAI,KAAK,QAAQ,KAAK;AAAA,EAC9C;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,IAC5B,kBAAkB,MAAM,iBAAiB,IAAI,CAAC,QAAQ;AAAA,MACpD,GAAG;AAAA,MACH,UAAU,eAAe,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ,cAAc,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,IACvI,EAAE;AAAA,IACF,OAAO,eAAe,IAAI,CAAC,SAAS;AAClC,YAAM,QAAQ,sBAAsB,IAAI,KAAK,EAAE;AAC/C,aAAO;AAAA,QACL,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,gBAAgB,QAAQ,OAAO,KAAK;AAAA,QACpC,YAAY,QAAQ,OAAO,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAAA,IACD;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,SAAS,sBAAsB,UAAU,UAAU;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,QAAQ,WAAW,IAAI;AAE7B,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,aAAa,aAAa,SAAS,KAAK,aAAa,SAAS;AAEpE,MAAI,YAAY;AACd,UAAM,kBAAkB,MAAM,KAAK;AAAA,MACjC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,IACxE,KAAK;AAEL,QAAI,CAAC,iBAAiB;AACpB,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,kBAAkB,CAAC,4BAA4B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH;AAEA,UAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,UAAM,gBAAgB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,cAAc,GAAG,YAAY,CAAC,CAAC;AAC5E,UAAM,QAAQ,MAAM,GAAG,KAAK,MAAM;AAAA,MAChC,IAAI,EAAE,KAAK,cAAqB;AAAA,MAChC,GAAI;AAAA,MACJ,WAAW;AAAA,IACb,CAAQ;AACR,UAAM,eAAe,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAEzD,UAAM,UAAU,cAAc,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAClE,QAAI,QAAQ,QAAQ;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAAA,EACF;AAEA,MAAI,QAAgE;AACpE,MAAI,0BAAmF;AAEvF,MAAI;AACF,UAAM,gBAAgB,IAAI;AAAA,MAC1B,YAAY;AACV,gBAAQ,MAAM,oBAAoB,IAAI,OAAO;AAAA,UAC3C;AAAA,UACA;AAAA,UACA,OAAO,OAAO;AAAA,UACd,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,oCAA0B,MAAM,qBAAqB,IAAI,OAAO;AAAA,YAC9D;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,OAAO;AAAA,cACL,SAAS;AAAA,cACT,MAAM,OAAO,KAAK;AAAA,cAClB,UAAU,OAAO,KAAK;AAAA,cACtB,YAAY,OAAO,KAAK,kBAAkB;AAAA,YAC5C;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,gBAAM,sBAAsB,IAAI,OAAO;AAAA,YACrC;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACA,GAAG,EAAE,aAAa,KAAK,CAAC;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,aAAa;AAAA,IACb,kBAAkB,2BAA2B,CAAC;AAAA,IAC9C,gBAAgB,gBAAgB,CAAC;AAAA,EACnC,CAAC;AACH;AAEA,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,qBAAuC;AAAA,EAC3C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,gCAAgC;AAAA,EAC5G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,wBAAwB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEA,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,8BAA8B;AAAA,EACvG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,+CAA+C,QAAQ,wBAAwB;AAAA,IAC3G,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,+DAA+D,QAAQ,wBAAwB;AAAA,EAC7H;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { perspectiveSaveSchema } from '@open-mercato/core/modules/perspectives/data/validators'\nimport {\n  loadPerspectivesState,\n  saveUserPerspective,\n  saveRolePerspectives,\n  clearRolePerspectives,\n  type PerspectiveScope,\n} from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  perspectivesTag,\n  perspectivesErrorSchema,\n  perspectivesIndexResponseSchema,\n  perspectiveSaveResponseSchema,\n} from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n  POST: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nfunction buildScope(auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>): PerspectiveScope {\n  return {\n    userId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n  }\n}\n\nexport async function GET(_req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(_req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const assignedRoleNames = Array.isArray(auth.roles)\n    ? Array.from(new Set(auth.roles.filter((role): role is string => typeof role === 'string' && role.trim().length > 0)))\n    : []\n  const assignedRoles = assignedRoleNames.length\n    ? await em.find(Role, {\n        name: { $in: assignedRoleNames as any },\n        deletedAt: null,\n      } as any, { orderBy: { name: 'asc' } })\n    : []\n  const assignedRoleIds = assignedRoles.map((role) => role.id)\n\n  const canApplyToRoles = await rbac.userHasAllFeatures?.(\n    auth.sub,\n    ['perspectives.role_defaults'],\n    { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n  ) ?? false\n\n  const roleScope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n  const availableRoles = canApplyToRoles\n    ? await em.find(Role, { ...roleScope as any, deletedAt: null } as any, { orderBy: { name: 'asc' } })\n    : assignedRoles\n\n  const state = await loadPerspectivesState(em, cache, {\n    scope: buildScope(auth),\n    tableId,\n    roleIds: assignedRoleIds,\n  })\n\n  const rolePerspectiveByRole = new Map<string, { hasDefault: boolean; count: number }>()\n  for (const item of state.rolePerspectives) {\n    const entry = rolePerspectiveByRole.get(item.roleId) ?? { hasDefault: false, count: 0 }\n    entry.count += 1\n    entry.hasDefault = entry.hasDefault || item.isDefault\n    rolePerspectiveByRole.set(item.roleId, entry)\n  }\n\n  return NextResponse.json({\n    tableId,\n    perspectives: state.personal,\n    defaultPerspectiveId: state.personalDefaultId,\n    rolePerspectives: state.rolePerspectives.map((rp) => ({\n      ...rp,\n      roleName: availableRoles.find((role) => role.id === rp.roleId)?.name ?? assignedRoles.find((role) => role.id === rp.roleId)?.name ?? null,\n    })),\n    roles: availableRoles.map((role) => {\n      const stats = rolePerspectiveByRole.get(role.id)\n      return {\n        id: role.id,\n        name: role.name,\n        hasPerspective: Boolean(stats?.count),\n        hasDefault: Boolean(stats?.hasDefault),\n      }\n    }),\n    canApplyToRoles,\n  })\n}\n\nexport async function POST(req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 })\n  }\n\n  const parsed = perspectiveSaveSchema.safeParse(parsedBody)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const scope = buildScope(auth)\n\n  const applyToRoles = Array.from(new Set(parsed.data.applyToRoles ?? [])).filter((id) => id.trim().length > 0)\n  const clearRoleIds = Array.from(new Set(parsed.data.clearRoleIds ?? [])).filter((id) => id.trim().length > 0)\n  const hasRoleOps = applyToRoles.length > 0 || clearRoleIds.length > 0\n  const targetRoleIds = Array.from(new Set([...applyToRoles, ...clearRoleIds]))\n\n  if (hasRoleOps) {\n    const canApplyToRoles = await rbac.userHasAllFeatures?.(\n      auth.sub,\n      ['perspectives.role_defaults'],\n      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n    ) ?? false\n\n    if (!canApplyToRoles) {\n      return NextResponse.json({ error: 'Forbidden', requiredFeatures: ['perspectives.role_defaults'] }, { status: 403 })\n    }\n\n    const roleScope = auth.tenantId\n      ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n      : { tenantId: null }\n    const roles = await em.find(Role, {\n      id: { $in: targetRoleIds as any },\n      ...(roleScope as any),\n      deletedAt: null,\n    } as any)\n    const validRoleIds = new Set(roles.map((role) => role.id))\n\n    const missing = targetRoleIds.filter((id) => !validRoleIds.has(id))\n    if (missing.length) {\n      return NextResponse.json({ error: 'Invalid roles', missing }, { status: 400 })\n    }\n  }\n\n  const guardResourceId = parsed.data.perspectiveId ?? tableId\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId ?? '',\n    organizationId: auth.orgId ?? null,\n    userId: auth.sub,\n    resourceKind: 'perspectives.perspective',\n    resourceId: guardResourceId,\n    operation: 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { ...parsed.data, tableId },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let roleGuardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>> | null = null\n  if (hasRoleOps) {\n    roleGuardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: targetRoleIds.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        tableId,\n        applyToRoles,\n        clearRoleIds,\n        name: parsed.data.name,\n        settings: parsed.data.settings,\n        setRoleDefault: parsed.data.setRoleDefault ?? false,\n      },\n    })\n  }\n  if (roleGuardResult && !roleGuardResult.ok) {\n    return NextResponse.json(roleGuardResult.body, { status: roleGuardResult.status })\n  }\n\n  let saved: Awaited<ReturnType<typeof saveUserPerspective>> | null = null\n  let updatedRolePerspectives: Awaited<ReturnType<typeof saveRolePerspectives>> | null = null\n  let clearedRolePerspectiveCount = 0\n\n  try {\n    await withAtomicFlush(em, [\n      async () => {\n        saved = await saveUserPerspective(em, cache, {\n          scope,\n          tableId,\n          input: parsed.data,\n          request: req,\n        })\n      },\n      async () => {\n        if (applyToRoles.length) {\n          updatedRolePerspectives = await saveRolePerspectives(em, cache, {\n            tableId,\n            tenantId: auth.tenantId ?? null,\n            organizationId: auth.orgId ?? null,\n            input: {\n              roleIds: applyToRoles,\n              name: parsed.data.name,\n              settings: parsed.data.settings,\n              setDefault: parsed.data.setRoleDefault ?? false,\n            },\n          })\n        }\n      },\n      async () => {\n        if (clearRoleIds.length) {\n          clearedRolePerspectiveCount = await clearRolePerspectives(em, cache, {\n            tableId,\n            tenantId: auth.tenantId ?? null,\n            organizationId: auth.orgId ?? null,\n            roleIds: clearRoleIds,\n          })\n        }\n      },\n    ], { transaction: true })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.perspective',\n      resourceId: guardResourceId,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  const didWriteRolePerspectives = applyToRoles.length > 0 || clearedRolePerspectiveCount > 0\n  if (didWriteRolePerspectives && roleGuardResult?.ok && roleGuardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: targetRoleIds.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: roleGuardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({\n    perspective: saved,\n    rolePerspectives: updatedRolePerspectives ?? [],\n    clearedRoleIds: clearRoleIds ?? [],\n  })\n}\n\nconst perspectivePathParamsSchema = z.object({\n  tableId: z.string().min(1),\n})\n\nconst perspectivesGetDoc: OpenApiMethodDoc = {\n  summary: 'Load perspectives for a table',\n  description: 'Returns personal perspectives and available role defaults for the requested table identifier.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Current perspectives and defaults.', schema: perspectivesIndexResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid table identifier', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n  ],\n}\n\nconst perspectivesPostDoc: OpenApiMethodDoc = {\n  summary: 'Create or update a perspective',\n  description: 'Saves a personal perspective and optionally applies the same configuration to selected roles.',\n  tags: [perspectivesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: perspectiveSaveSchema,\n    description: 'Perspective payload including optional role defaults.',\n  },\n  responses: [\n    { status: 200, description: 'Perspective saved successfully.', schema: perspectiveSaveResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed or invalid roles provided', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature for role updates', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Manage table perspectives',\n  pathParams: perspectivePathParamsSchema,\n  methods: {\n    GET: perspectivesGetDoc,\n    POST: perspectivesPostDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,YAAY;AAErB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,MAAqF;AACvG,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,EAChC;AACF;AAEA,eAAsB,IAAI,MAAe,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,IAAI;AAC1C,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,oBAAoB,MAAM,QAAQ,KAAK,KAAK,IAC9C,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IACnH,CAAC;AACL,QAAM,gBAAgB,kBAAkB,SACpC,MAAM,GAAG,KAAK,MAAM;AAAA,IAClB,MAAM,EAAE,KAAK,kBAAyB;AAAA,IACtC,WAAW;AAAA,EACb,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACtC,CAAC;AACL,QAAM,kBAAkB,cAAc,IAAI,CAAC,SAAS,KAAK,EAAE;AAE3D,QAAM,kBAAkB,MAAM,KAAK;AAAA,IACjC,KAAK;AAAA,IACL,CAAC,4BAA4B;AAAA,IAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,EACxE,KAAK;AAEL,QAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,QAAM,iBAAiB,kBACnB,MAAM,GAAG,KAAK,MAAM,EAAE,GAAG,WAAkB,WAAW,KAAK,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACjG;AAEJ,QAAM,QAAQ,MAAM,sBAAsB,IAAI,OAAO;AAAA,IACnD,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AAED,QAAM,wBAAwB,oBAAI,IAAoD;AACtF,aAAW,QAAQ,MAAM,kBAAkB;AACzC,UAAM,QAAQ,sBAAsB,IAAI,KAAK,MAAM,KAAK,EAAE,YAAY,OAAO,OAAO,EAAE;AACtF,UAAM,SAAS;AACf,UAAM,aAAa,MAAM,cAAc,KAAK;AAC5C,0BAAsB,IAAI,KAAK,QAAQ,KAAK;AAAA,EAC9C;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,IAC5B,kBAAkB,MAAM,iBAAiB,IAAI,CAAC,QAAQ;AAAA,MACpD,GAAG;AAAA,MACH,UAAU,eAAe,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ,cAAc,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,IACvI,EAAE;AAAA,IACF,OAAO,eAAe,IAAI,CAAC,SAAS;AAClC,YAAM,QAAQ,sBAAsB,IAAI,KAAK,EAAE;AAC/C,aAAO;AAAA,QACL,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,gBAAgB,QAAQ,OAAO,KAAK;AAAA,QACpC,YAAY,QAAQ,OAAO,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAAA,IACD;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,SAAS,sBAAsB,UAAU,UAAU;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,QAAQ,WAAW,IAAI;AAE7B,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,aAAa,aAAa,SAAS,KAAK,aAAa,SAAS;AACpE,QAAM,gBAAgB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,cAAc,GAAG,YAAY,CAAC,CAAC;AAE5E,MAAI,YAAY;AACd,UAAM,kBAAkB,MAAM,KAAK;AAAA,MACjC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,IACxE,KAAK;AAEL,QAAI,CAAC,iBAAiB;AACpB,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,kBAAkB,CAAC,4BAA4B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH;AAEA,UAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,UAAM,QAAQ,MAAM,GAAG,KAAK,MAAM;AAAA,MAChC,IAAI,EAAE,KAAK,cAAqB;AAAA,MAChC,GAAI;AAAA,MACJ,WAAW;AAAA,IACb,CAAQ;AACR,UAAM,eAAe,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAEzD,UAAM,UAAU,cAAc,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAClE,QAAI,QAAQ,QAAQ;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAAA,EACF;AAEA,QAAM,kBAAkB,OAAO,KAAK,iBAAiB;AACrD,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,GAAG,OAAO,MAAM,QAAQ;AAAA,EAC7C,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,kBAAgF;AACpF,MAAI,YAAY;AACd,sBAAkB,MAAM,0BAA0B,WAAW;AAAA,MAC3D,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,cAAc,KAAK,GAAG;AAAA,MAClC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM,OAAO,KAAK;AAAA,QAClB,UAAU,OAAO,KAAK;AAAA,QACtB,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,MAChD;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,mBAAmB,CAAC,gBAAgB,IAAI;AAC1C,WAAO,aAAa,KAAK,gBAAgB,MAAM,EAAE,QAAQ,gBAAgB,OAAO,CAAC;AAAA,EACnF;AAEA,MAAI,QAAgE;AACpE,MAAI,0BAAmF;AACvF,MAAI,8BAA8B;AAElC,MAAI;AACF,UAAM,gBAAgB,IAAI;AAAA,MACxB,YAAY;AACV,gBAAQ,MAAM,oBAAoB,IAAI,OAAO;AAAA,UAC3C;AAAA,UACA;AAAA,UACA,OAAO,OAAO;AAAA,UACd,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,oCAA0B,MAAM,qBAAqB,IAAI,OAAO;AAAA,YAC9D;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,OAAO;AAAA,cACL,SAAS;AAAA,cACT,MAAM,OAAO,KAAK;AAAA,cAClB,UAAU,OAAO,KAAK;AAAA,cACtB,YAAY,OAAO,KAAK,kBAAkB;AAAA,YAC5C;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,wCAA8B,MAAM,sBAAsB,IAAI,OAAO;AAAA,YACnE;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,GAAG,EAAE,aAAa,KAAK,CAAC;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,QAAM,2BAA2B,aAAa,SAAS,KAAK,8BAA8B;AAC1F,MAAI,4BAA4B,iBAAiB,MAAM,gBAAgB,uBAAuB;AAC5F,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,cAAc,KAAK,GAAG;AAAA,MAClC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,gBAAgB,YAAY;AAAA,IACxC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,aAAa;AAAA,IACb,kBAAkB,2BAA2B,CAAC;AAAA,IAC9C,gBAAgB,gBAAgB,CAAC;AAAA,EACnC,CAAC;AACH;AAEA,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,qBAAuC;AAAA,EAC3C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,gCAAgC;AAAA,EAC5G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,wBAAwB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEA,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,8BAA8B;AAAA,EACvG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,+CAA+C,QAAQ,wBAAwB;AAAA,IAC3G,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,+DAA+D,QAAQ,wBAAwB;AAAA,EAC7H;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/perspectives/services/perspectiveService.js

@@ -202,13 +202,14 @@ async function deleteUserPerspective(em, cache, options) {
     tableId,
     deletedAt: null
   });
-  if (!existing) return;
+  if (!existing) return false;
   existing.deletedAt = /* @__PURE__ */ new Date();
   existing.isDefault = false;
   await em.flush();
   if (cache?.deleteByTags) {
     await cache.deleteByTags([userTag(scope, tableId)]);
   }
+  return true;
 }
 async function saveRolePerspectives(em, cache, options) {
   const { tableId, input } = options;
@@ -282,8 +283,8 @@ async function clearRolePerspectives(em, cache, options) {
   const { tableId, roleIds } = options;
   const tenantId = options.tenantId ?? null;
   const organizationId = options.organizationId ?? null;
-  if (!roleIds.length) return;
-  await em.nativeUpdate(
+  if (!roleIds.length) return 0;
+  const affected = await em.nativeUpdate(
     RolePerspective,
     {
       roleId: { $in: roleIds },
@@ -298,6 +299,7 @@ async function clearRolePerspectives(em, cache, options) {
     const tags = roleIds.map((roleId) => roleTag(roleId, tableId, tenantId));
     await cache.deleteByTags(tags);
   }
+  return affected;
 }
 export {
   clearRolePerspectives,