@open-mercato/core 0.6.6-develop.6255.1.a6ee4a57c1 → 0.6.6-develop.6257.1.6d0af84d26

package/dist/modules/perspectives/api/[tableId]/roles/[roleId]/route.js

@@ -2,6 +2,7 @@ import { NextResponse } from "next/server";
 import { z } from "zod";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
 import {
   runCrudMutationGuardAfterSuccess,
   validateCrudMutationGuard
@@ -21,6 +22,10 @@ const decodeParam = (value) => {
     return raw;
   }
 };
+const rolePerspectiveDeleteBodySchema = z.object({
+  roleExpectedUpdatedAtByRoleId: z.record(z.string().uuid(), z.string().min(1).nullable()).optional(),
+  roleExpectedUpdatedAtByPerspectiveId: z.record(z.string().uuid(), z.string().min(1).nullable()).optional()
+}).optional();
 async function DELETE(req, ctx) {
   const auth = await getAuthFromRequest(req);
   if (!auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
@@ -29,6 +34,21 @@ async function DELETE(req, ctx) {
   if (!tableId || !roleId) {
     return NextResponse.json({ error: "Invalid parameters" }, { status: 400 });
   }
+  let parsedBody = void 0;
+  if (req.body && (req.headers.get("content-type") ?? "").includes("application/json")) {
+    try {
+      const rawBody = await req.text();
+      if (rawBody.trim().length > 0) {
+        const parsed = rolePerspectiveDeleteBodySchema.safeParse(JSON.parse(rawBody));
+        if (!parsed.success) {
+          return NextResponse.json({ error: "Invalid payload", details: parsed.error.flatten() }, { status: 400 });
+        }
+        parsedBody = parsed.data;
+      }
+    } catch {
+      return NextResponse.json({ error: "Invalid JSON" }, { status: 400 });
+    }
+  }
   const container = await createRequestContainer();
   const em = container.resolve("em");
   const cache = (() => {
@@ -55,12 +75,23 @@ async function DELETE(req, ctx) {
   if (guardResult && !guardResult.ok) {
     return NextResponse.json(guardResult.body, { status: guardResult.status });
   }
-  const clearedCount = await clearRolePerspectives(em, cache, {
-    tableId,
-    tenantId: auth.tenantId ?? null,
-    organizationId: auth.orgId ?? null,
-    roleIds: [roleId]
-  });
+  let clearedCount = 0;
+  try {
+    clearedCount = await clearRolePerspectives(em, cache, {
+      tableId,
+      tenantId: auth.tenantId ?? null,
+      organizationId: auth.orgId ?? null,
+      roleIds: [roleId],
+      expectedUpdatedAtByRoleId: parsedBody?.roleExpectedUpdatedAtByRoleId,
+      expectedUpdatedAtByPerspectiveId: parsedBody?.roleExpectedUpdatedAtByPerspectiveId,
+      request: req
+    });
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    throw err;
+  }
   if (clearedCount > 0 && guardResult?.ok && guardResult.shouldRunAfterSuccess) {
     await runCrudMutationGuardAfterSuccess(container, {
       tenantId: auth.tenantId ?? "",
@@ -84,6 +115,11 @@ const rolePerspectiveDeleteDoc = {
   summary: "Clear role perspectives for a table",
   description: "Removes all role-level perspectives associated with the provided role identifier for the table.",
   tags: [perspectivesTag],
+  requestBody: {
+    contentType: "application/json",
+    schema: rolePerspectiveDeleteBodySchema,
+    description: "Optional per-role or per-perspective optimistic-lock tokens."
+  },
   responses: [
     { status: 200, description: "Role perspectives cleared.", schema: perspectivesSuccessSchema }
   ],
@@ -91,6 +127,7 @@ const rolePerspectiveDeleteDoc = {
     { status: 400, description: "Invalid identifiers supplied", schema: perspectivesErrorSchema },
     { status: 401, description: "Authentication required", schema: perspectivesErrorSchema },
     { status: 403, description: "Missing perspectives.role_defaults feature", schema: perspectivesErrorSchema },
+    { status: 409, description: "Optimistic lock conflict", schema: perspectivesErrorSchema },
     { status: 404, description: "Role not found in scope", schema: perspectivesErrorSchema }
   ]
 };

package/dist/modules/perspectives/api/[tableId]/roles/[roleId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/perspectives/api/%5BtableId%5D/roles/%5BroleId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { clearRolePerspectives } from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { perspectivesTag, perspectivesErrorSchema, perspectivesSuccessSchema } from '../../../openapi'\n\nexport const metadata = {\n  DELETE: { requireAuth: true, requireFeatures: ['perspectives.role_defaults'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nexport async function DELETE(req: Request, ctx: { params: { tableId: string; roleId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  const roleId = decodeParam(ctx.params?.roleId).trim()\n  if (!tableId || !roleId) {\n    return NextResponse.json({ error: 'Invalid parameters' }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n\n  const scope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null, ...(scope as any) } as any)\n  if (!role) return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId ?? '',\n    organizationId: auth.orgId ?? null,\n    userId: auth.sub,\n    resourceKind: 'perspectives.role_perspective',\n    resourceId: roleId,\n    operation: 'delete',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { tableId, roleId },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  const clearedCount = await clearRolePerspectives(em, cache, {\n    tableId,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n    roleIds: [roleId],\n  })\n\n  if (clearedCount > 0 && guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: roleId,\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ success: true })\n}\n\nconst rolePerspectiveDeleteParamsSchema = z.object({\n  tableId: z.string().min(1),\n  roleId: z.string().uuid(),\n})\n\nconst rolePerspectiveDeleteDoc: OpenApiMethodDoc = {\n  summary: 'Clear role perspectives for a table',\n  description: 'Removes all role-level perspectives associated with the provided role identifier for the table.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Role perspectives cleared.', schema: perspectivesSuccessSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid identifiers supplied', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature', schema: perspectivesErrorSchema },\n    { status: 404, description: 'Role not found in scope', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Delete role-level perspectives',\n  pathParams: rolePerspectiveDeleteParamsSchema,\n  methods: {\n    DELETE: rolePerspectiveDeleteDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,YAAY;AAErB,SAAS,iBAAiB,yBAAyB,iCAAiC;AAE7E,MAAM,WAAW;AAAA,EACtB,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,OAAO,KAAc,KAAsD;AAC/F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,QAAM,SAAS,YAAY,IAAI,QAAQ,MAAM,EAAE,KAAK;AACpD,MAAI,CAAC,WAAW,CAAC,QAAQ;AACvB,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEH,QAAM,QAAQ,KAAK,WACf,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AAErB,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,MAAM,GAAI,MAAc,CAAQ;AAC7F,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhF,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,SAAS,OAAO;AAAA,EACrC,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,QAAM,eAAe,MAAM,sBAAsB,IAAI,OAAO;AAAA,IAC1D;AAAA,IACA,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,SAAS,CAAC,MAAM;AAAA,EAClB,CAAC;AAED,MAAI,eAAe,KAAK,aAAa,MAAM,YAAY,uBAAuB;AAC5E,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAC5C;AAEA,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAED,MAAM,2BAA6C;AAAA,EACjD,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,0BAA0B;AAAA,EAC9F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,wBAAwB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,wBAAwB;AAAA,IAC1G,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,QAAQ;AAAA,EACV;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { clearRolePerspectives } from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { perspectivesTag, perspectivesErrorSchema, perspectivesSuccessSchema } from '../../../openapi'\n\nexport const metadata = {\n  DELETE: { requireAuth: true, requireFeatures: ['perspectives.role_defaults'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nconst rolePerspectiveDeleteBodySchema = z.object({\n  roleExpectedUpdatedAtByRoleId: z.record(z.string().uuid(), z.string().min(1).nullable()).optional(),\n  roleExpectedUpdatedAtByPerspectiveId: z.record(z.string().uuid(), z.string().min(1).nullable()).optional(),\n}).optional()\n\nexport async function DELETE(req: Request, ctx: { params: { tableId: string; roleId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  const roleId = decodeParam(ctx.params?.roleId).trim()\n  if (!tableId || !roleId) {\n    return NextResponse.json({ error: 'Invalid parameters' }, { status: 400 })\n  }\n\n  let parsedBody: z.infer<typeof rolePerspectiveDeleteBodySchema> = undefined\n  if (req.body && (req.headers.get('content-type') ?? '').includes('application/json')) {\n    try {\n      const rawBody = await req.text()\n      if (rawBody.trim().length > 0) {\n        const parsed = rolePerspectiveDeleteBodySchema.safeParse(JSON.parse(rawBody))\n        if (!parsed.success) {\n          return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n        }\n        parsedBody = parsed.data\n      }\n    } catch {\n      return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 })\n    }\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n\n  const scope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n\n  const role = await em.findOne(Role, { id: roleId, deletedAt: null, ...(scope as any) } as any)\n  if (!role) return NextResponse.json({ error: 'Role not found' }, { status: 404 })\n\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId ?? '',\n    organizationId: auth.orgId ?? null,\n    userId: auth.sub,\n    resourceKind: 'perspectives.role_perspective',\n    resourceId: roleId,\n    operation: 'delete',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { tableId, roleId },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let clearedCount = 0\n  try {\n    clearedCount = await clearRolePerspectives(em, cache, {\n      tableId,\n      tenantId: auth.tenantId ?? null,\n      organizationId: auth.orgId ?? null,\n      roleIds: [roleId],\n      expectedUpdatedAtByRoleId: parsedBody?.roleExpectedUpdatedAtByRoleId,\n      expectedUpdatedAtByPerspectiveId: parsedBody?.roleExpectedUpdatedAtByPerspectiveId,\n      request: req,\n    })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  if (clearedCount > 0 && guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: roleId,\n      operation: 'delete',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({ success: true })\n}\n\nconst rolePerspectiveDeleteParamsSchema = z.object({\n  tableId: z.string().min(1),\n  roleId: z.string().uuid(),\n})\n\nconst rolePerspectiveDeleteDoc: OpenApiMethodDoc = {\n  summary: 'Clear role perspectives for a table',\n  description: 'Removes all role-level perspectives associated with the provided role identifier for the table.',\n  tags: [perspectivesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: rolePerspectiveDeleteBodySchema,\n    description: 'Optional per-role or per-perspective optimistic-lock tokens.',\n  },\n  responses: [\n    { status: 200, description: 'Role perspectives cleared.', schema: perspectivesSuccessSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid identifiers supplied', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature', schema: perspectivesErrorSchema },\n    { status: 409, description: 'Optimistic lock conflict', schema: perspectivesErrorSchema },\n    { status: 404, description: 'Role not found in scope', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Delete role-level perspectives',\n  pathParams: rolePerspectiveDeleteParamsSchema,\n  methods: {\n    DELETE: rolePerspectiveDeleteDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC,SAAS,YAAY;AAErB,SAAS,iBAAiB,yBAAyB,iCAAiC;AAE7E,MAAM,WAAW;AAAA,EACtB,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,4BAA4B,EAAE;AAC/E;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,kCAAkC,EAAE,OAAO;AAAA,EAC/C,+BAA+B,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,EAAE,SAAS;AAAA,EAClG,sCAAsC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,EAAE,SAAS;AAC3G,CAAC,EAAE,SAAS;AAEZ,eAAsB,OAAO,KAAc,KAAsD;AAC/F,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,QAAM,SAAS,YAAY,IAAI,QAAQ,MAAM,EAAE,KAAK;AACpD,MAAI,CAAC,WAAW,CAAC,QAAQ;AACvB,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,MAAI,aAA8D;AAClE,MAAI,IAAI,SAAS,IAAI,QAAQ,IAAI,cAAc,KAAK,IAAI,SAAS,kBAAkB,GAAG;AACpF,QAAI;AACF,YAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,UAAI,QAAQ,KAAK,EAAE,SAAS,GAAG;AAC7B,cAAM,SAAS,gCAAgC,UAAU,KAAK,MAAM,OAAO,CAAC;AAC5E,YAAI,CAAC,OAAO,SAAS;AACnB,iBAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,QACzG;AACA,qBAAa,OAAO;AAAA,MACtB;AAAA,IACF,QAAQ;AACN,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAAA,EACF;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AAEH,QAAM,QAAQ,KAAK,WACf,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AAErB,QAAM,OAAO,MAAM,GAAG,QAAQ,MAAM,EAAE,IAAI,QAAQ,WAAW,MAAM,GAAI,MAAc,CAAQ;AAC7F,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAEhF,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,SAAS,OAAO;AAAA,EACrC,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,eAAe;AACnB,MAAI;AACF,mBAAe,MAAM,sBAAsB,IAAI,OAAO;AAAA,MACpD;AAAA,MACA,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,SAAS,CAAC,MAAM;AAAA,MAChB,2BAA2B,YAAY;AAAA,MACvC,kCAAkC,YAAY;AAAA,MAC9C,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,MAAI,eAAe,KAAK,aAAa,MAAM,YAAY,uBAAuB;AAC5E,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK,EAAE,SAAS,KAAK,CAAC;AAC5C;AAEA,MAAM,oCAAoC,EAAE,OAAO;AAAA,EACjD,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,QAAQ,EAAE,OAAO,EAAE,KAAK;AAC1B,CAAC;AAED,MAAM,2BAA6C;AAAA,EACjD,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,0BAA0B;AAAA,EAC9F;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,wBAAwB;AAAA,IAC5F,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,8CAA8C,QAAQ,wBAAwB;AAAA,IAC1G,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,wBAAwB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,QAAQ;AAAA,EACV;AACF;",
   "names": []
 }

package/dist/modules/perspectives/api/[tableId]/route.js

@@ -71,13 +71,19 @@ async function GET(_req, ctx) {
   ) ?? false;
   const roleScope = auth.tenantId ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] } : { tenantId: null };
   const availableRoles = canApplyToRoles ? await em.find(Role, { ...roleScope, deletedAt: null }, { orderBy: { name: "asc" } }) : assignedRoles;
+  const manageableRoleIds = canApplyToRoles ? availableRoles.map((role) => role.id) : assignedRoleIds;
   const state = await loadPerspectivesState(em, cache, {
     scope: buildScope(auth),
     tableId,
     roleIds: assignedRoleIds
   });
+  const manageableState = manageableRoleIds.length === assignedRoleIds.length && manageableRoleIds.every((roleId) => assignedRoleIds.includes(roleId)) ? state : await loadPerspectivesState(em, cache, {
+    scope: buildScope(auth),
+    tableId,
+    roleIds: manageableRoleIds
+  });
   const rolePerspectiveByRole = /* @__PURE__ */ new Map();
-  for (const item of state.rolePerspectives) {
+  for (const item of manageableState.rolePerspectives) {
     const entry = rolePerspectiveByRole.get(item.roleId) ?? { hasDefault: false, count: 0 };
     entry.count += 1;
     entry.hasDefault = entry.hasDefault || item.isDefault;
@@ -91,6 +97,10 @@ async function GET(_req, ctx) {
       ...rp,
       roleName: availableRoles.find((role) => role.id === rp.roleId)?.name ?? assignedRoles.find((role) => role.id === rp.roleId)?.name ?? null
     })),
+    manageableRolePerspectives: manageableState.rolePerspectives.map((rp) => ({
+      ...rp,
+      roleName: availableRoles.find((role) => role.id === rp.roleId)?.name ?? assignedRoles.find((role) => role.id === rp.roleId)?.name ?? null
+    })),
     roles: availableRoles.map((role) => {
       const stats = rolePerspectiveByRole.get(role.id);
       return {
@@ -217,7 +227,10 @@ async function POST(req, ctx) {
               name: parsed.data.name,
               settings: parsed.data.settings,
               setDefault: parsed.data.setRoleDefault ?? false
-            }
+            },
+            expectedUpdatedAtByRoleId: parsed.data.roleExpectedUpdatedAtByRoleId,
+            expectedUpdatedAtByPerspectiveId: parsed.data.roleExpectedUpdatedAtByPerspectiveId,
+            request: req
           });
         }
       },
@@ -227,7 +240,10 @@ async function POST(req, ctx) {
             tableId,
             tenantId: auth.tenantId ?? null,
             organizationId: auth.orgId ?? null,
-            roleIds: clearRoleIds
+            roleIds: clearRoleIds,
+            expectedUpdatedAtByRoleId: parsed.data.roleExpectedUpdatedAtByRoleId,
+            expectedUpdatedAtByPerspectiveId: parsed.data.roleExpectedUpdatedAtByPerspectiveId,
+            request: req
           });
         }
       }
@@ -301,7 +317,8 @@ const perspectivesPostDoc = {
   errors: [
     { status: 400, description: "Validation failed or invalid roles provided", schema: perspectivesErrorSchema },
     { status: 401, description: "Authentication required", schema: perspectivesErrorSchema },
-    { status: 403, description: "Missing perspectives.role_defaults feature for role updates", schema: perspectivesErrorSchema }
+    { status: 403, description: "Missing perspectives.role_defaults feature for role updates", schema: perspectivesErrorSchema },
+    { status: 409, description: "Optimistic lock conflict", schema: perspectivesErrorSchema }
   ]
 };
 const openApi = {

package/dist/modules/perspectives/api/[tableId]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/perspectives/api/%5BtableId%5D/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { perspectiveSaveSchema } from '@open-mercato/core/modules/perspectives/data/validators'\nimport {\n  loadPerspectivesState,\n  saveUserPerspective,\n  saveRolePerspectives,\n  clearRolePerspectives,\n  type PerspectiveScope,\n} from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  perspectivesTag,\n  perspectivesErrorSchema,\n  perspectivesIndexResponseSchema,\n  perspectiveSaveResponseSchema,\n} from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n  POST: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nfunction buildScope(auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>): PerspectiveScope {\n  return {\n    userId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n  }\n}\n\nexport async function GET(_req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(_req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const assignedRoleNames = Array.isArray(auth.roles)\n    ? Array.from(new Set(auth.roles.filter((role): role is string => typeof role === 'string' && role.trim().length > 0)))\n    : []\n  const assignedRoles = assignedRoleNames.length && auth.tenantId\n    ? await em.find(Role, {\n        name: { $in: assignedRoleNames as any },\n        tenantId: auth.tenantId,\n        deletedAt: null,\n      } as any, { orderBy: { name: 'asc' } })\n    : []\n  const assignedRoleIds = assignedRoles.map((role) => role.id)\n\n  const canApplyToRoles = await rbac.userHasAllFeatures?.(\n    auth.sub,\n    ['perspectives.role_defaults'],\n    { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n  ) ?? false\n\n  const roleScope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n  const availableRoles = canApplyToRoles\n    ? await em.find(Role, { ...roleScope as any, deletedAt: null } as any, { orderBy: { name: 'asc' } })\n    : assignedRoles\n\n  const state = await loadPerspectivesState(em, cache, {\n    scope: buildScope(auth),\n    tableId,\n    roleIds: assignedRoleIds,\n  })\n\n  const rolePerspectiveByRole = new Map<string, { hasDefault: boolean; count: number }>()\n  for (const item of state.rolePerspectives) {\n    const entry = rolePerspectiveByRole.get(item.roleId) ?? { hasDefault: false, count: 0 }\n    entry.count += 1\n    entry.hasDefault = entry.hasDefault || item.isDefault\n    rolePerspectiveByRole.set(item.roleId, entry)\n  }\n\n  return NextResponse.json({\n    tableId,\n    perspectives: state.personal,\n    defaultPerspectiveId: state.personalDefaultId,\n    rolePerspectives: state.rolePerspectives.map((rp) => ({\n      ...rp,\n      roleName: availableRoles.find((role) => role.id === rp.roleId)?.name ?? assignedRoles.find((role) => role.id === rp.roleId)?.name ?? null,\n    })),\n    roles: availableRoles.map((role) => {\n      const stats = rolePerspectiveByRole.get(role.id)\n      return {\n        id: role.id,\n        name: role.name,\n        hasPerspective: Boolean(stats?.count),\n        hasDefault: Boolean(stats?.hasDefault),\n      }\n    }),\n    canApplyToRoles,\n  })\n}\n\nexport async function POST(req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 })\n  }\n\n  const parsed = perspectiveSaveSchema.safeParse(parsedBody)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const scope = buildScope(auth)\n\n  const applyToRoles = Array.from(new Set(parsed.data.applyToRoles ?? [])).filter((id) => id.trim().length > 0)\n  const clearRoleIds = Array.from(new Set(parsed.data.clearRoleIds ?? [])).filter((id) => id.trim().length > 0)\n  const hasRoleOps = applyToRoles.length > 0 || clearRoleIds.length > 0\n  const targetRoleIds = Array.from(new Set([...applyToRoles, ...clearRoleIds]))\n\n  if (hasRoleOps) {\n    const canApplyToRoles = await rbac.userHasAllFeatures?.(\n      auth.sub,\n      ['perspectives.role_defaults'],\n      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n    ) ?? false\n\n    if (!canApplyToRoles) {\n      return NextResponse.json({ error: 'Forbidden', requiredFeatures: ['perspectives.role_defaults'] }, { status: 403 })\n    }\n\n    const roleScope = auth.tenantId\n      ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n      : { tenantId: null }\n    const roles = await em.find(Role, {\n      id: { $in: targetRoleIds as any },\n      ...(roleScope as any),\n      deletedAt: null,\n    } as any)\n    const validRoleIds = new Set(roles.map((role) => role.id))\n\n    const missing = targetRoleIds.filter((id) => !validRoleIds.has(id))\n    if (missing.length) {\n      return NextResponse.json({ error: 'Invalid roles', missing }, { status: 400 })\n    }\n  }\n\n  const guardResourceId = parsed.data.perspectiveId ?? tableId\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId ?? '',\n    organizationId: auth.orgId ?? null,\n    userId: auth.sub,\n    resourceKind: 'perspectives.perspective',\n    resourceId: guardResourceId,\n    operation: 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { ...parsed.data, tableId },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let roleGuardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>> | null = null\n  if (hasRoleOps) {\n    roleGuardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: targetRoleIds.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        tableId,\n        applyToRoles,\n        clearRoleIds,\n        name: parsed.data.name,\n        settings: parsed.data.settings,\n        setRoleDefault: parsed.data.setRoleDefault ?? false,\n      },\n    })\n  }\n  if (roleGuardResult && !roleGuardResult.ok) {\n    return NextResponse.json(roleGuardResult.body, { status: roleGuardResult.status })\n  }\n\n  let saved: Awaited<ReturnType<typeof saveUserPerspective>> | null = null\n  let updatedRolePerspectives: Awaited<ReturnType<typeof saveRolePerspectives>> | null = null\n  let clearedRolePerspectiveCount = 0\n\n  try {\n    await withAtomicFlush(em, [\n      async () => {\n        saved = await saveUserPerspective(em, cache, {\n          scope,\n          tableId,\n          input: parsed.data,\n          request: req,\n        })\n      },\n      async () => {\n        if (applyToRoles.length) {\n          updatedRolePerspectives = await saveRolePerspectives(em, cache, {\n            tableId,\n            tenantId: auth.tenantId ?? null,\n            organizationId: auth.orgId ?? null,\n            input: {\n              roleIds: applyToRoles,\n              name: parsed.data.name,\n              settings: parsed.data.settings,\n              setDefault: parsed.data.setRoleDefault ?? false,\n            },\n          })\n        }\n      },\n      async () => {\n        if (clearRoleIds.length) {\n          clearedRolePerspectiveCount = await clearRolePerspectives(em, cache, {\n            tableId,\n            tenantId: auth.tenantId ?? null,\n            organizationId: auth.orgId ?? null,\n            roleIds: clearRoleIds,\n          })\n        }\n      },\n    ], { transaction: true })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.perspective',\n      resourceId: guardResourceId,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  const didWriteRolePerspectives = applyToRoles.length > 0 || clearedRolePerspectiveCount > 0\n  if (didWriteRolePerspectives && roleGuardResult?.ok && roleGuardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: targetRoleIds.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: roleGuardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({\n    perspective: saved,\n    rolePerspectives: updatedRolePerspectives ?? [],\n    clearedRoleIds: clearRoleIds ?? [],\n  })\n}\n\nconst perspectivePathParamsSchema = z.object({\n  tableId: z.string().min(1),\n})\n\nconst perspectivesGetDoc: OpenApiMethodDoc = {\n  summary: 'Load perspectives for a table',\n  description: 'Returns personal perspectives and available role defaults for the requested table identifier.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Current perspectives and defaults.', schema: perspectivesIndexResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid table identifier', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n  ],\n}\n\nconst perspectivesPostDoc: OpenApiMethodDoc = {\n  summary: 'Create or update a perspective',\n  description: 'Saves a personal perspective and optionally applies the same configuration to selected roles.',\n  tags: [perspectivesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: perspectiveSaveSchema,\n    description: 'Perspective payload including optional role defaults.',\n  },\n  responses: [\n    { status: 200, description: 'Perspective saved successfully.', schema: perspectiveSaveResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed or invalid roles provided', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature for role updates', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Manage table perspectives',\n  pathParams: perspectivePathParamsSchema,\n  methods: {\n    GET: perspectivesGetDoc,\n    POST: perspectivesPostDoc,\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,YAAY;AAErB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,MAAqF;AACvG,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,EAChC;AACF;AAEA,eAAsB,IAAI,MAAe,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,IAAI;AAC1C,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,oBAAoB,MAAM,QAAQ,KAAK,KAAK,IAC9C,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IACnH,CAAC;AACL,QAAM,gBAAgB,kBAAkB,UAAU,KAAK,WACnD,MAAM,GAAG,KAAK,MAAM;AAAA,IAClB,MAAM,EAAE,KAAK,kBAAyB;AAAA,IACtC,UAAU,KAAK;AAAA,IACf,WAAW;AAAA,EACb,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACtC,CAAC;AACL,QAAM,kBAAkB,cAAc,IAAI,CAAC,SAAS,KAAK,EAAE;AAE3D,QAAM,kBAAkB,MAAM,KAAK;AAAA,IACjC,KAAK;AAAA,IACL,CAAC,4BAA4B;AAAA,IAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,EACxE,KAAK;AAEL,QAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,QAAM,iBAAiB,kBACnB,MAAM,GAAG,KAAK,MAAM,EAAE,GAAG,WAAkB,WAAW,KAAK,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACjG;AAEJ,QAAM,QAAQ,MAAM,sBAAsB,IAAI,OAAO;AAAA,IACnD,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AAED,QAAM,wBAAwB,oBAAI,IAAoD;AACtF,aAAW,QAAQ,MAAM,kBAAkB;AACzC,UAAM,QAAQ,sBAAsB,IAAI,KAAK,MAAM,KAAK,EAAE,YAAY,OAAO,OAAO,EAAE;AACtF,UAAM,SAAS;AACf,UAAM,aAAa,MAAM,cAAc,KAAK;AAC5C,0BAAsB,IAAI,KAAK,QAAQ,KAAK;AAAA,EAC9C;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,IAC5B,kBAAkB,MAAM,iBAAiB,IAAI,CAAC,QAAQ;AAAA,MACpD,GAAG;AAAA,MACH,UAAU,eAAe,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ,cAAc,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,IACvI,EAAE;AAAA,IACF,OAAO,eAAe,IAAI,CAAC,SAAS;AAClC,YAAM,QAAQ,sBAAsB,IAAI,KAAK,EAAE;AAC/C,aAAO;AAAA,QACL,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,gBAAgB,QAAQ,OAAO,KAAK;AAAA,QACpC,YAAY,QAAQ,OAAO,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAAA,IACD;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,SAAS,sBAAsB,UAAU,UAAU;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,QAAQ,WAAW,IAAI;AAE7B,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,aAAa,aAAa,SAAS,KAAK,aAAa,SAAS;AACpE,QAAM,gBAAgB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,cAAc,GAAG,YAAY,CAAC,CAAC;AAE5E,MAAI,YAAY;AACd,UAAM,kBAAkB,MAAM,KAAK;AAAA,MACjC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,IACxE,KAAK;AAEL,QAAI,CAAC,iBAAiB;AACpB,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,kBAAkB,CAAC,4BAA4B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH;AAEA,UAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,UAAM,QAAQ,MAAM,GAAG,KAAK,MAAM;AAAA,MAChC,IAAI,EAAE,KAAK,cAAqB;AAAA,MAChC,GAAI;AAAA,MACJ,WAAW;AAAA,IACb,CAAQ;AACR,UAAM,eAAe,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAEzD,UAAM,UAAU,cAAc,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAClE,QAAI,QAAQ,QAAQ;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAAA,EACF;AAEA,QAAM,kBAAkB,OAAO,KAAK,iBAAiB;AACrD,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,GAAG,OAAO,MAAM,QAAQ;AAAA,EAC7C,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,kBAAgF;AACpF,MAAI,YAAY;AACd,sBAAkB,MAAM,0BAA0B,WAAW;AAAA,MAC3D,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,cAAc,KAAK,GAAG;AAAA,MAClC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM,OAAO,KAAK;AAAA,QAClB,UAAU,OAAO,KAAK;AAAA,QACtB,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,MAChD;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,mBAAmB,CAAC,gBAAgB,IAAI;AAC1C,WAAO,aAAa,KAAK,gBAAgB,MAAM,EAAE,QAAQ,gBAAgB,OAAO,CAAC;AAAA,EACnF;AAEA,MAAI,QAAgE;AACpE,MAAI,0BAAmF;AACvF,MAAI,8BAA8B;AAElC,MAAI;AACF,UAAM,gBAAgB,IAAI;AAAA,MACxB,YAAY;AACV,gBAAQ,MAAM,oBAAoB,IAAI,OAAO;AAAA,UAC3C;AAAA,UACA;AAAA,UACA,OAAO,OAAO;AAAA,UACd,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,oCAA0B,MAAM,qBAAqB,IAAI,OAAO;AAAA,YAC9D;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,OAAO;AAAA,cACL,SAAS;AAAA,cACT,MAAM,OAAO,KAAK;AAAA,cAClB,UAAU,OAAO,KAAK;AAAA,cACtB,YAAY,OAAO,KAAK,kBAAkB;AAAA,YAC5C;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,wCAA8B,MAAM,sBAAsB,IAAI,OAAO;AAAA,YACnE;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,GAAG,EAAE,aAAa,KAAK,CAAC;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,QAAM,2BAA2B,aAAa,SAAS,KAAK,8BAA8B;AAC1F,MAAI,4BAA4B,iBAAiB,MAAM,gBAAgB,uBAAuB;AAC5F,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,cAAc,KAAK,GAAG;AAAA,MAClC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,gBAAgB,YAAY;AAAA,IACxC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,aAAa;AAAA,IACb,kBAAkB,2BAA2B,CAAC;AAAA,IAC9C,gBAAgB,gBAAgB,CAAC;AAAA,EACnC,CAAC;AACH;AAEA,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,qBAAuC;AAAA,EAC3C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,gCAAgC;AAAA,EAC5G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,wBAAwB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEA,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,8BAA8B;AAAA,EACvG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,+CAA+C,QAAQ,wBAAwB;AAAA,IAC3G,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,+DAA+D,QAAQ,wBAAwB;AAAA,EAC7H;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { withAtomicFlush } from '@open-mercato/shared/lib/commands/flush'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport {\n  runCrudMutationGuardAfterSuccess,\n  validateCrudMutationGuard,\n} from '@open-mercato/shared/lib/crud/mutation-guard'\nimport { perspectiveSaveSchema } from '@open-mercato/core/modules/perspectives/data/validators'\nimport {\n  loadPerspectivesState,\n  saveUserPerspective,\n  saveRolePerspectives,\n  clearRolePerspectives,\n  type PerspectiveScope,\n} from '@open-mercato/core/modules/perspectives/services/perspectiveService'\nimport { Role } from '@open-mercato/core/modules/auth/data/entities'\nimport type { OpenApiMethodDoc, OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport {\n  perspectivesTag,\n  perspectivesErrorSchema,\n  perspectivesIndexResponseSchema,\n  perspectiveSaveResponseSchema,\n} from '../openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n  POST: { requireAuth: true, requireFeatures: ['perspectives.use'] },\n}\n\nconst decodeParam = (value: string | string[] | undefined): string => {\n  if (!value) return ''\n  const raw = Array.isArray(value) ? value[0] : value\n  try {\n    return decodeURIComponent(raw)\n  } catch {\n    return raw\n  }\n}\n\nfunction buildScope(auth: NonNullable<Awaited<ReturnType<typeof getAuthFromRequest>>>): PerspectiveScope {\n  return {\n    userId: auth.sub,\n    tenantId: auth.tenantId ?? null,\n    organizationId: auth.orgId ?? null,\n  }\n}\n\nexport async function GET(_req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(_req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const assignedRoleNames = Array.isArray(auth.roles)\n    ? Array.from(new Set(auth.roles.filter((role): role is string => typeof role === 'string' && role.trim().length > 0)))\n    : []\n  const assignedRoles = assignedRoleNames.length && auth.tenantId\n    ? await em.find(Role, {\n        name: { $in: assignedRoleNames as any },\n        tenantId: auth.tenantId,\n        deletedAt: null,\n      } as any, { orderBy: { name: 'asc' } })\n    : []\n  const assignedRoleIds = assignedRoles.map((role) => role.id)\n\n  const canApplyToRoles = await rbac.userHasAllFeatures?.(\n    auth.sub,\n    ['perspectives.role_defaults'],\n    { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n  ) ?? false\n\n  const roleScope = auth.tenantId\n    ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n    : { tenantId: null }\n  const availableRoles = canApplyToRoles\n    ? await em.find(Role, { ...roleScope as any, deletedAt: null } as any, { orderBy: { name: 'asc' } })\n    : assignedRoles\n  const manageableRoleIds = canApplyToRoles\n    ? availableRoles.map((role) => role.id)\n    : assignedRoleIds\n\n  const state = await loadPerspectivesState(em, cache, {\n    scope: buildScope(auth),\n    tableId,\n    roleIds: assignedRoleIds,\n  })\n  const manageableState = manageableRoleIds.length === assignedRoleIds.length\n    && manageableRoleIds.every((roleId) => assignedRoleIds.includes(roleId))\n    ? state\n    : await loadPerspectivesState(em, cache, {\n      scope: buildScope(auth),\n      tableId,\n      roleIds: manageableRoleIds,\n    })\n\n  const rolePerspectiveByRole = new Map<string, { hasDefault: boolean; count: number }>()\n  for (const item of manageableState.rolePerspectives) {\n    const entry = rolePerspectiveByRole.get(item.roleId) ?? { hasDefault: false, count: 0 }\n    entry.count += 1\n    entry.hasDefault = entry.hasDefault || item.isDefault\n    rolePerspectiveByRole.set(item.roleId, entry)\n  }\n\n  return NextResponse.json({\n    tableId,\n    perspectives: state.personal,\n    defaultPerspectiveId: state.personalDefaultId,\n    rolePerspectives: state.rolePerspectives.map((rp) => ({\n      ...rp,\n      roleName: availableRoles.find((role) => role.id === rp.roleId)?.name ?? assignedRoles.find((role) => role.id === rp.roleId)?.name ?? null,\n    })),\n    manageableRolePerspectives: manageableState.rolePerspectives.map((rp) => ({\n      ...rp,\n      roleName: availableRoles.find((role) => role.id === rp.roleId)?.name ?? assignedRoles.find((role) => role.id === rp.roleId)?.name ?? null,\n    })),\n    roles: availableRoles.map((role) => {\n      const stats = rolePerspectiveByRole.get(role.id)\n      return {\n        id: role.id,\n        name: role.name,\n        hasPerspective: Boolean(stats?.count),\n        hasDefault: Boolean(stats?.hasDefault),\n      }\n    }),\n    canApplyToRoles,\n  })\n}\n\nexport async function POST(req: Request, ctx: { params: { tableId: string } }) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tableId = decodeParam(ctx.params?.tableId).trim()\n  if (!tableId) return NextResponse.json({ error: 'Invalid table id' }, { status: 400 })\n\n  let parsedBody: unknown\n  try {\n    parsedBody = await req.json()\n  } catch {\n    return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 })\n  }\n\n  const parsed = perspectiveSaveSchema.safeParse(parsedBody)\n  if (!parsed.success) {\n    return NextResponse.json({ error: 'Invalid payload', details: parsed.error.flatten() }, { status: 400 })\n  }\n\n  const container = await createRequestContainer()\n  const em = container.resolve('em') as import('@mikro-orm/postgresql').EntityManager\n  const cache = ((): import('@open-mercato/cache').CacheStrategy | null => {\n    try {\n      return container.resolve('cache') as import('@open-mercato/cache').CacheStrategy\n    } catch {\n      return null\n    }\n  })()\n  const rbac = container.resolve('rbacService') as {\n    userHasAllFeatures?: (\n      userId: string,\n      features: string[],\n      scope: { tenantId: string | null; organizationId: string | null },\n    ) => Promise<boolean>\n  }\n\n  const scope = buildScope(auth)\n\n  const applyToRoles = Array.from(new Set(parsed.data.applyToRoles ?? [])).filter((id) => id.trim().length > 0)\n  const clearRoleIds = Array.from(new Set(parsed.data.clearRoleIds ?? [])).filter((id) => id.trim().length > 0)\n  const hasRoleOps = applyToRoles.length > 0 || clearRoleIds.length > 0\n  const targetRoleIds = Array.from(new Set([...applyToRoles, ...clearRoleIds]))\n\n  if (hasRoleOps) {\n    const canApplyToRoles = await rbac.userHasAllFeatures?.(\n      auth.sub,\n      ['perspectives.role_defaults'],\n      { tenantId: auth.tenantId ?? null, organizationId: auth.orgId ?? null },\n    ) ?? false\n\n    if (!canApplyToRoles) {\n      return NextResponse.json({ error: 'Forbidden', requiredFeatures: ['perspectives.role_defaults'] }, { status: 403 })\n    }\n\n    const roleScope = auth.tenantId\n      ? { $or: [{ tenantId: auth.tenantId }, { tenantId: null }] }\n      : { tenantId: null }\n    const roles = await em.find(Role, {\n      id: { $in: targetRoleIds as any },\n      ...(roleScope as any),\n      deletedAt: null,\n    } as any)\n    const validRoleIds = new Set(roles.map((role) => role.id))\n\n    const missing = targetRoleIds.filter((id) => !validRoleIds.has(id))\n    if (missing.length) {\n      return NextResponse.json({ error: 'Invalid roles', missing }, { status: 400 })\n    }\n  }\n\n  const guardResourceId = parsed.data.perspectiveId ?? tableId\n  const guardResult = await validateCrudMutationGuard(container, {\n    tenantId: auth.tenantId ?? '',\n    organizationId: auth.orgId ?? null,\n    userId: auth.sub,\n    resourceKind: 'perspectives.perspective',\n    resourceId: guardResourceId,\n    operation: 'custom',\n    requestMethod: req.method,\n    requestHeaders: req.headers,\n    mutationPayload: { ...parsed.data, tableId },\n  })\n  if (guardResult && !guardResult.ok) {\n    return NextResponse.json(guardResult.body, { status: guardResult.status })\n  }\n\n  let roleGuardResult: Awaited<ReturnType<typeof validateCrudMutationGuard>> | null = null\n  if (hasRoleOps) {\n    roleGuardResult = await validateCrudMutationGuard(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: targetRoleIds.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      mutationPayload: {\n        tableId,\n        applyToRoles,\n        clearRoleIds,\n        name: parsed.data.name,\n        settings: parsed.data.settings,\n        setRoleDefault: parsed.data.setRoleDefault ?? false,\n      },\n    })\n  }\n  if (roleGuardResult && !roleGuardResult.ok) {\n    return NextResponse.json(roleGuardResult.body, { status: roleGuardResult.status })\n  }\n\n  let saved: Awaited<ReturnType<typeof saveUserPerspective>> | null = null\n  let updatedRolePerspectives: Awaited<ReturnType<typeof saveRolePerspectives>> | null = null\n  let clearedRolePerspectiveCount = 0\n\n  try {\n    await withAtomicFlush(em, [\n      async () => {\n        saved = await saveUserPerspective(em, cache, {\n          scope,\n          tableId,\n          input: parsed.data,\n          request: req,\n        })\n      },\n      async () => {\n        if (applyToRoles.length) {\n          updatedRolePerspectives = await saveRolePerspectives(em, cache, {\n            tableId,\n            tenantId: auth.tenantId ?? null,\n            organizationId: auth.orgId ?? null,\n            input: {\n              roleIds: applyToRoles,\n              name: parsed.data.name,\n              settings: parsed.data.settings,\n              setDefault: parsed.data.setRoleDefault ?? false,\n            },\n            expectedUpdatedAtByRoleId: parsed.data.roleExpectedUpdatedAtByRoleId,\n            expectedUpdatedAtByPerspectiveId: parsed.data.roleExpectedUpdatedAtByPerspectiveId,\n            request: req,\n          })\n        }\n      },\n      async () => {\n        if (clearRoleIds.length) {\n          clearedRolePerspectiveCount = await clearRolePerspectives(em, cache, {\n            tableId,\n            tenantId: auth.tenantId ?? null,\n            organizationId: auth.orgId ?? null,\n            roleIds: clearRoleIds,\n            expectedUpdatedAtByRoleId: parsed.data.roleExpectedUpdatedAtByRoleId,\n            expectedUpdatedAtByPerspectiveId: parsed.data.roleExpectedUpdatedAtByPerspectiveId,\n            request: req,\n          })\n        }\n      },\n    ], { transaction: true })\n  } catch (err) {\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  if (guardResult?.ok && guardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.perspective',\n      resourceId: guardResourceId,\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: guardResult.metadata ?? null,\n    })\n  }\n\n  const didWriteRolePerspectives = applyToRoles.length > 0 || clearedRolePerspectiveCount > 0\n  if (didWriteRolePerspectives && roleGuardResult?.ok && roleGuardResult.shouldRunAfterSuccess) {\n    await runCrudMutationGuardAfterSuccess(container, {\n      tenantId: auth.tenantId ?? '',\n      organizationId: auth.orgId ?? null,\n      userId: auth.sub,\n      resourceKind: 'perspectives.role_perspective',\n      resourceId: targetRoleIds.join(','),\n      operation: 'custom',\n      requestMethod: req.method,\n      requestHeaders: req.headers,\n      metadata: roleGuardResult.metadata ?? null,\n    })\n  }\n\n  return NextResponse.json({\n    perspective: saved,\n    rolePerspectives: updatedRolePerspectives ?? [],\n    clearedRoleIds: clearRoleIds ?? [],\n  })\n}\n\nconst perspectivePathParamsSchema = z.object({\n  tableId: z.string().min(1),\n})\n\nconst perspectivesGetDoc: OpenApiMethodDoc = {\n  summary: 'Load perspectives for a table',\n  description: 'Returns personal perspectives and available role defaults for the requested table identifier.',\n  tags: [perspectivesTag],\n  responses: [\n    { status: 200, description: 'Current perspectives and defaults.', schema: perspectivesIndexResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Invalid table identifier', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n  ],\n}\n\nconst perspectivesPostDoc: OpenApiMethodDoc = {\n  summary: 'Create or update a perspective',\n  description: 'Saves a personal perspective and optionally applies the same configuration to selected roles.',\n  tags: [perspectivesTag],\n  requestBody: {\n    contentType: 'application/json',\n    schema: perspectiveSaveSchema,\n    description: 'Perspective payload including optional role defaults.',\n  },\n  responses: [\n    { status: 200, description: 'Perspective saved successfully.', schema: perspectiveSaveResponseSchema },\n  ],\n  errors: [\n    { status: 400, description: 'Validation failed or invalid roles provided', schema: perspectivesErrorSchema },\n    { status: 401, description: 'Authentication required', schema: perspectivesErrorSchema },\n    { status: 403, description: 'Missing perspectives.role_defaults feature for role updates', schema: perspectivesErrorSchema },\n    { status: 409, description: 'Optimistic lock conflict', schema: perspectivesErrorSchema },\n  ],\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: perspectivesTag,\n  summary: 'Manage table perspectives',\n  pathParams: perspectivePathParamsSchema,\n  methods: {\n    GET: perspectivesGetDoc,\n    POST: perspectivesPostDoc,\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AACvC,SAAS,uBAAuB;AAChC,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,YAAY;AAErB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AAAA,EAChE,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,kBAAkB,EAAE;AACnE;AAEA,MAAM,cAAc,CAAC,UAAiD;AACpE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC9C,MAAI;AACF,WAAO,mBAAmB,GAAG;AAAA,EAC/B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WAAW,MAAqF;AACvG,SAAO;AAAA,IACL,QAAQ,KAAK;AAAA,IACb,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,EAChC;AACF;AAEA,eAAsB,IAAI,MAAe,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,IAAI;AAC1C,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,oBAAoB,MAAM,QAAQ,KAAK,KAAK,IAC9C,MAAM,KAAK,IAAI,IAAI,KAAK,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,YAAY,KAAK,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IACnH,CAAC;AACL,QAAM,gBAAgB,kBAAkB,UAAU,KAAK,WACnD,MAAM,GAAG,KAAK,MAAM;AAAA,IAClB,MAAM,EAAE,KAAK,kBAAyB;AAAA,IACtC,UAAU,KAAK;AAAA,IACf,WAAW;AAAA,EACb,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACtC,CAAC;AACL,QAAM,kBAAkB,cAAc,IAAI,CAAC,SAAS,KAAK,EAAE;AAE3D,QAAM,kBAAkB,MAAM,KAAK;AAAA,IACjC,KAAK;AAAA,IACL,CAAC,4BAA4B;AAAA,IAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,EACxE,KAAK;AAEL,QAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,QAAM,iBAAiB,kBACnB,MAAM,GAAG,KAAK,MAAM,EAAE,GAAG,WAAkB,WAAW,KAAK,GAAU,EAAE,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC,IACjG;AACJ,QAAM,oBAAoB,kBACtB,eAAe,IAAI,CAAC,SAAS,KAAK,EAAE,IACpC;AAEJ,QAAM,QAAQ,MAAM,sBAAsB,IAAI,OAAO;AAAA,IACnD,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AACD,QAAM,kBAAkB,kBAAkB,WAAW,gBAAgB,UAChE,kBAAkB,MAAM,CAAC,WAAW,gBAAgB,SAAS,MAAM,CAAC,IACrE,QACA,MAAM,sBAAsB,IAAI,OAAO;AAAA,IACvC,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,EACX,CAAC;AAEH,QAAM,wBAAwB,oBAAI,IAAoD;AACtF,aAAW,QAAQ,gBAAgB,kBAAkB;AACnD,UAAM,QAAQ,sBAAsB,IAAI,KAAK,MAAM,KAAK,EAAE,YAAY,OAAO,OAAO,EAAE;AACtF,UAAM,SAAS;AACf,UAAM,aAAa,MAAM,cAAc,KAAK;AAC5C,0BAAsB,IAAI,KAAK,QAAQ,KAAK;AAAA,EAC9C;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA,cAAc,MAAM;AAAA,IACpB,sBAAsB,MAAM;AAAA,IAC5B,kBAAkB,MAAM,iBAAiB,IAAI,CAAC,QAAQ;AAAA,MACpD,GAAG;AAAA,MACH,UAAU,eAAe,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ,cAAc,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,IACvI,EAAE;AAAA,IACF,4BAA4B,gBAAgB,iBAAiB,IAAI,CAAC,QAAQ;AAAA,MACxE,GAAG;AAAA,MACH,UAAU,eAAe,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ,cAAc,KAAK,CAAC,SAAS,KAAK,OAAO,GAAG,MAAM,GAAG,QAAQ;AAAA,IACvI,EAAE;AAAA,IACF,OAAO,eAAe,IAAI,CAAC,SAAS;AAClC,YAAM,QAAQ,sBAAsB,IAAI,KAAK,EAAE;AAC/C,aAAO;AAAA,QACL,IAAI,KAAK;AAAA,QACT,MAAM,KAAK;AAAA,QACX,gBAAgB,QAAQ,OAAO,KAAK;AAAA,QACpC,YAAY,QAAQ,OAAO,UAAU;AAAA,MACvC;AAAA,IACF,CAAC;AAAA,IACD;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,KAAK,KAAc,KAAsC;AAC7E,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,UAAU,YAAY,IAAI,QAAQ,OAAO,EAAE,KAAK;AACtD,MAAI,CAAC,QAAS,QAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAErF,MAAI;AACJ,MAAI;AACF,iBAAa,MAAM,IAAI,KAAK;AAAA,EAC9B,QAAQ;AACN,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,SAAS,sBAAsB,UAAU,UAAU;AACzD,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,aAAa,KAAK,EAAE,OAAO,mBAAmB,SAAS,OAAO,MAAM,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACzG;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,QAAM,SAAS,MAA0D;AACvE,QAAI;AACF,aAAO,UAAU,QAAQ,OAAO;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF,GAAG;AACH,QAAM,OAAO,UAAU,QAAQ,aAAa;AAQ5C,QAAM,QAAQ,WAAW,IAAI;AAE7B,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,eAAe,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,KAAK,EAAE,SAAS,CAAC;AAC5G,QAAM,aAAa,aAAa,SAAS,KAAK,aAAa,SAAS;AACpE,QAAM,gBAAgB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,cAAc,GAAG,YAAY,CAAC,CAAC;AAE5E,MAAI,YAAY;AACd,UAAM,kBAAkB,MAAM,KAAK;AAAA,MACjC,KAAK;AAAA,MACL,CAAC,4BAA4B;AAAA,MAC7B,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,KAAK,SAAS,KAAK;AAAA,IACxE,KAAK;AAEL,QAAI,CAAC,iBAAiB;AACpB,aAAO,aAAa,KAAK,EAAE,OAAO,aAAa,kBAAkB,CAAC,4BAA4B,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACpH;AAEA,UAAM,YAAY,KAAK,WACnB,EAAE,KAAK,CAAC,EAAE,UAAU,KAAK,SAAS,GAAG,EAAE,UAAU,KAAK,CAAC,EAAE,IACzD,EAAE,UAAU,KAAK;AACrB,UAAM,QAAQ,MAAM,GAAG,KAAK,MAAM;AAAA,MAChC,IAAI,EAAE,KAAK,cAAqB;AAAA,MAChC,GAAI;AAAA,MACJ,WAAW;AAAA,IACb,CAAQ;AACR,UAAM,eAAe,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC;AAEzD,UAAM,UAAU,cAAc,OAAO,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;AAClE,QAAI,QAAQ,QAAQ;AAClB,aAAO,aAAa,KAAK,EAAE,OAAO,iBAAiB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAAA,EACF;AAEA,QAAM,kBAAkB,OAAO,KAAK,iBAAiB;AACrD,QAAM,cAAc,MAAM,0BAA0B,WAAW;AAAA,IAC7D,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,KAAK,SAAS;AAAA,IAC9B,QAAQ,KAAK;AAAA,IACb,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,WAAW;AAAA,IACX,eAAe,IAAI;AAAA,IACnB,gBAAgB,IAAI;AAAA,IACpB,iBAAiB,EAAE,GAAG,OAAO,MAAM,QAAQ;AAAA,EAC7C,CAAC;AACD,MAAI,eAAe,CAAC,YAAY,IAAI;AAClC,WAAO,aAAa,KAAK,YAAY,MAAM,EAAE,QAAQ,YAAY,OAAO,CAAC;AAAA,EAC3E;AAEA,MAAI,kBAAgF;AACpF,MAAI,YAAY;AACd,sBAAkB,MAAM,0BAA0B,WAAW;AAAA,MAC3D,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,cAAc,KAAK,GAAG;AAAA,MAClC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,iBAAiB;AAAA,QACf;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM,OAAO,KAAK;AAAA,QAClB,UAAU,OAAO,KAAK;AAAA,QACtB,gBAAgB,OAAO,KAAK,kBAAkB;AAAA,MAChD;AAAA,IACF,CAAC;AAAA,EACH;AACA,MAAI,mBAAmB,CAAC,gBAAgB,IAAI;AAC1C,WAAO,aAAa,KAAK,gBAAgB,MAAM,EAAE,QAAQ,gBAAgB,OAAO,CAAC;AAAA,EACnF;AAEA,MAAI,QAAgE;AACpE,MAAI,0BAAmF;AACvF,MAAI,8BAA8B;AAElC,MAAI;AACF,UAAM,gBAAgB,IAAI;AAAA,MACxB,YAAY;AACV,gBAAQ,MAAM,oBAAoB,IAAI,OAAO;AAAA,UAC3C;AAAA,UACA;AAAA,UACA,OAAO,OAAO;AAAA,UACd,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,oCAA0B,MAAM,qBAAqB,IAAI,OAAO;AAAA,YAC9D;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,OAAO;AAAA,cACL,SAAS;AAAA,cACT,MAAM,OAAO,KAAK;AAAA,cAClB,UAAU,OAAO,KAAK;AAAA,cACtB,YAAY,OAAO,KAAK,kBAAkB;AAAA,YAC5C;AAAA,YACA,2BAA2B,OAAO,KAAK;AAAA,YACvC,kCAAkC,OAAO,KAAK;AAAA,YAC9C,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAAA,MACA,YAAY;AACV,YAAI,aAAa,QAAQ;AACvB,wCAA8B,MAAM,sBAAsB,IAAI,OAAO;AAAA,YACnE;AAAA,YACA,UAAU,KAAK,YAAY;AAAA,YAC3B,gBAAgB,KAAK,SAAS;AAAA,YAC9B,SAAS;AAAA,YACT,2BAA2B,OAAO,KAAK;AAAA,YACvC,kCAAkC,OAAO,KAAK;AAAA,YAC9C,SAAS;AAAA,UACX,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF,GAAG,EAAE,aAAa,KAAK,CAAC;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,MAAI,aAAa,MAAM,YAAY,uBAAuB;AACxD,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,YAAY,YAAY;AAAA,IACpC,CAAC;AAAA,EACH;AAEA,QAAM,2BAA2B,aAAa,SAAS,KAAK,8BAA8B;AAC1F,MAAI,4BAA4B,iBAAiB,MAAM,gBAAgB,uBAAuB;AAC5F,UAAM,iCAAiC,WAAW;AAAA,MAChD,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,SAAS;AAAA,MAC9B,QAAQ,KAAK;AAAA,MACb,cAAc;AAAA,MACd,YAAY,cAAc,KAAK,GAAG;AAAA,MAClC,WAAW;AAAA,MACX,eAAe,IAAI;AAAA,MACnB,gBAAgB,IAAI;AAAA,MACpB,UAAU,gBAAgB,YAAY;AAAA,IACxC,CAAC;AAAA,EACH;AAEA,SAAO,aAAa,KAAK;AAAA,IACvB,aAAa;AAAA,IACb,kBAAkB,2BAA2B,CAAC;AAAA,IAC9C,gBAAgB,gBAAgB,CAAC;AAAA,EACnC,CAAC;AACH;AAEA,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,qBAAuC;AAAA,EAC3C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,gCAAgC;AAAA,EAC5G;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,wBAAwB;AAAA,IACxF,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,EACzF;AACF;AAEA,MAAM,sBAAwC;AAAA,EAC5C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,MAAM,CAAC,eAAe;AAAA,EACtB,aAAa;AAAA,IACX,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,aAAa;AAAA,EACf;AAAA,EACA,WAAW;AAAA,IACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,8BAA8B;AAAA,EACvG;AAAA,EACA,QAAQ;AAAA,IACN,EAAE,QAAQ,KAAK,aAAa,+CAA+C,QAAQ,wBAAwB;AAAA,IAC3G,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,wBAAwB;AAAA,IACvF,EAAE,QAAQ,KAAK,aAAa,+DAA+D,QAAQ,wBAAwB;AAAA,IAC3H,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,wBAAwB;AAAA,EAC1F;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,SAAS;AAAA,IACP,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;",
   "names": []
 }

package/dist/modules/perspectives/api/openapi.js

@@ -24,6 +24,7 @@ const perspectivesIndexResponseSchema = z.object({
   perspectives: z.array(perspectiveDtoSchema),
   defaultPerspectiveId: z.string().uuid().nullable(),
   rolePerspectives: z.array(rolePerspectiveDtoSchema),
+  manageableRolePerspectives: z.array(rolePerspectiveDtoSchema),
   roles: z.array(
     z.object({
       id: z.string().uuid(),

package/dist/modules/perspectives/api/openapi.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/perspectives/api/openapi.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport { perspectiveSettingsSchema } from '../data/validators'\n\nexport const perspectivesTag = 'Perspectives'\n\nexport const perspectivesErrorSchema = z.object({\n  error: z.string(),\n}).passthrough()\n\nexport const perspectiveDtoSchema = z.object({\n  id: z.string().uuid(),\n  name: z.string(),\n  tableId: z.string(),\n  settings: perspectiveSettingsSchema,\n  isDefault: z.boolean(),\n  createdAt: z.string(),\n  updatedAt: z.string().nullable(),\n})\n\nexport const rolePerspectiveDtoSchema = perspectiveDtoSchema.extend({\n  roleId: z.string().uuid(),\n  tenantId: z.string().uuid().nullable(),\n  organizationId: z.string().uuid().nullable(),\n  roleName: z.string().nullable(),\n})\n\nexport const perspectivesIndexResponseSchema = z.object({\n  tableId: z.string(),\n  perspectives: z.array(perspectiveDtoSchema),\n  defaultPerspectiveId: z.string().uuid().nullable(),\n  rolePerspectives: z.array(rolePerspectiveDtoSchema),\n  roles: z.array(\n    z.object({\n      id: z.string().uuid(),\n      name: z.string(),\n      hasPerspective: z.boolean(),\n      hasDefault: z.boolean(),\n    }),\n  ),\n  canApplyToRoles: z.boolean(),\n})\n\nexport const perspectiveSaveResponseSchema = z.object({\n  perspective: perspectiveDtoSchema,\n  rolePerspectives: z.array(rolePerspectiveDtoSchema),\n  clearedRoleIds: z.array(z.string().uuid()),\n})\n\nexport const perspectivesSuccessSchema = z.object({\n  success: z.literal(true),\n})\n\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,iCAAiC;AAEnC,MAAM,kBAAkB;AAExB,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,OAAO,EAAE,OAAO;AAClB,CAAC,EAAE,YAAY;AAER,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,MAAM,EAAE,OAAO;AAAA,EACf,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU;AAAA,EACV,WAAW,EAAE,QAAQ;AAAA,EACrB,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,2BAA2B,qBAAqB,OAAO;AAAA,EAClE,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAEM,MAAM,kCAAkC,EAAE,OAAO;AAAA,EACtD,SAAS,EAAE,OAAO;AAAA,EAClB,cAAc,EAAE,MAAM,oBAAoB;AAAA,EAC1C,sBAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACjD,kBAAkB,EAAE,MAAM,wBAAwB;AAAA,EAClD,OAAO,EAAE;AAAA,IACP,EAAE,OAAO;AAAA,MACP,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACpB,MAAM,EAAE,OAAO;AAAA,MACf,gBAAgB,EAAE,QAAQ;AAAA,MAC1B,YAAY,EAAE,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH;AAAA,EACA,iBAAiB,EAAE,QAAQ;AAC7B,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,aAAa;AAAA,EACb,kBAAkB,EAAE,MAAM,wBAAwB;AAAA,EAClD,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAC3C,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,SAAS,EAAE,QAAQ,IAAI;AACzB,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport { perspectiveSettingsSchema } from '../data/validators'\n\nexport const perspectivesTag = 'Perspectives'\n\nexport const perspectivesErrorSchema = z.object({\n  error: z.string(),\n}).passthrough()\n\nexport const perspectiveDtoSchema = z.object({\n  id: z.string().uuid(),\n  name: z.string(),\n  tableId: z.string(),\n  settings: perspectiveSettingsSchema,\n  isDefault: z.boolean(),\n  createdAt: z.string(),\n  updatedAt: z.string().nullable(),\n})\n\nexport const rolePerspectiveDtoSchema = perspectiveDtoSchema.extend({\n  roleId: z.string().uuid(),\n  tenantId: z.string().uuid().nullable(),\n  organizationId: z.string().uuid().nullable(),\n  roleName: z.string().nullable(),\n})\n\nexport const perspectivesIndexResponseSchema = z.object({\n  tableId: z.string(),\n  perspectives: z.array(perspectiveDtoSchema),\n  defaultPerspectiveId: z.string().uuid().nullable(),\n  rolePerspectives: z.array(rolePerspectiveDtoSchema),\n  manageableRolePerspectives: z.array(rolePerspectiveDtoSchema),\n  roles: z.array(\n    z.object({\n      id: z.string().uuid(),\n      name: z.string(),\n      hasPerspective: z.boolean(),\n      hasDefault: z.boolean(),\n    }),\n  ),\n  canApplyToRoles: z.boolean(),\n})\n\nexport const perspectiveSaveResponseSchema = z.object({\n  perspective: perspectiveDtoSchema,\n  rolePerspectives: z.array(rolePerspectiveDtoSchema),\n  clearedRoleIds: z.array(z.string().uuid()),\n})\n\nexport const perspectivesSuccessSchema = z.object({\n  success: z.literal(true),\n})\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAClB,SAAS,iCAAiC;AAEnC,MAAM,kBAAkB;AAExB,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,OAAO,EAAE,OAAO;AAClB,CAAC,EAAE,YAAY;AAER,MAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,MAAM,EAAE,OAAO;AAAA,EACf,SAAS,EAAE,OAAO;AAAA,EAClB,UAAU;AAAA,EACV,WAAW,EAAE,QAAQ;AAAA,EACrB,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,SAAS;AACjC,CAAC;AAEM,MAAM,2BAA2B,qBAAqB,OAAO;AAAA,EAClE,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,SAAS;AAChC,CAAC;AAEM,MAAM,kCAAkC,EAAE,OAAO;AAAA,EACtD,SAAS,EAAE,OAAO;AAAA,EAClB,cAAc,EAAE,MAAM,oBAAoB;AAAA,EAC1C,sBAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACjD,kBAAkB,EAAE,MAAM,wBAAwB;AAAA,EAClD,4BAA4B,EAAE,MAAM,wBAAwB;AAAA,EAC5D,OAAO,EAAE;AAAA,IACP,EAAE,OAAO;AAAA,MACP,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,MACpB,MAAM,EAAE,OAAO;AAAA,MACf,gBAAgB,EAAE,QAAQ;AAAA,MAC1B,YAAY,EAAE,QAAQ;AAAA,IACxB,CAAC;AAAA,EACH;AAAA,EACA,iBAAiB,EAAE,QAAQ;AAC7B,CAAC;AAEM,MAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,aAAa;AAAA,EACb,kBAAkB,EAAE,MAAM,wBAAwB;AAAA,EAClD,gBAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;AAC3C,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,SAAS,EAAE,QAAQ,IAAI;AACzB,CAAC;",
   "names": []
 }

package/dist/modules/perspectives/data/validators.js

@@ -14,6 +14,8 @@ const perspectiveSaveSchema = z.object({
   isDefault: z.boolean().optional(),
   applyToRoles: z.array(z.string().uuid()).optional(),
   clearRoleIds: z.array(z.string().uuid()).optional(),
+  roleExpectedUpdatedAtByRoleId: z.record(z.string().uuid(), z.string().min(1).nullable()).optional(),
+  roleExpectedUpdatedAtByPerspectiveId: z.record(z.string().uuid(), z.string().min(1).nullable()).optional(),
   setRoleDefault: z.boolean().optional()
 });
 const perspectiveDeleteSchema = z.object({

package/dist/modules/perspectives/data/validators.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/perspectives/data/validators.ts"],
-  "sourcesContent": ["import { z } from 'zod'\nimport type { PerspectiveSettings } from '@open-mercato/shared/modules/perspectives/types'\n\nexport const perspectiveSettingsSchema: z.ZodType<PerspectiveSettings> = z.object({\n  columnOrder: z.array(z.string().min(1)).max(120).optional(),\n  columnVisibility: z.record(z.string(), z.boolean()).optional(),\n  filters: z.record(z.string(), z.unknown()).optional(),\n  sorting: z\n    .array(z.object({ id: z.string().min(1), desc: z.boolean().optional() }))\n    .max(20)\n    .optional(),\n  pageSize: z.number().int().positive().max(500).optional(),\n  searchValue: z.string().max(200).optional(),\n})\n\nexport type { PerspectiveSettings }\n\nexport const perspectiveSaveSchema = z.object({\n  perspectiveId: z.string().uuid().optional(),\n  name: z.string().min(1).max(120),\n  settings: perspectiveSettingsSchema,\n  isDefault: z.boolean().optional(),\n  applyToRoles: z.array(z.string().uuid()).optional(),\n  clearRoleIds: z.array(z.string().uuid()).optional(),\n  setRoleDefault: z.boolean().optional(),\n})\n\nexport const perspectiveDeleteSchema = z.object({\n  force: z.boolean().optional(),\n})\n\nexport const rolePerspectiveSaveSchema = z.object({\n  roleIds: z.array(z.string().uuid()).min(1),\n  name: z.string().min(1).max(120),\n  settings: perspectiveSettingsSchema,\n  setDefault: z.boolean().optional(),\n})\n\nexport type PerspectiveSaveInput = z.infer<typeof perspectiveSaveSchema>\nexport type RolePerspectiveSaveInput = z.infer<typeof rolePerspectiveSaveSchema>\n"],
-  "mappings": "AAAA,SAAS,SAAS;AAGX,MAAM,4BAA4D,EAAE,OAAO;AAAA,EAChF,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1D,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC7D,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,SAAS,EACN,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EACvE,IAAI,EAAE,EACN,SAAS;AAAA,EACZ,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxD,aAAa,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAC5C,CAAC;AAIM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,UAAU;AAAA,EACV,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAClD,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAClD,gBAAgB,EAAE,QAAQ,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,OAAO,EAAE,QAAQ,EAAE,SAAS;AAC9B,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC;AAAA,EACzC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,UAAU;AAAA,EACV,YAAY,EAAE,QAAQ,EAAE,SAAS;AACnC,CAAC;",
+  "sourcesContent": ["import { z } from 'zod'\nimport type { PerspectiveSettings } from '@open-mercato/shared/modules/perspectives/types'\n\nexport const perspectiveSettingsSchema: z.ZodType<PerspectiveSettings> = z.object({\n  columnOrder: z.array(z.string().min(1)).max(120).optional(),\n  columnVisibility: z.record(z.string(), z.boolean()).optional(),\n  filters: z.record(z.string(), z.unknown()).optional(),\n  sorting: z\n    .array(z.object({ id: z.string().min(1), desc: z.boolean().optional() }))\n    .max(20)\n    .optional(),\n  pageSize: z.number().int().positive().max(500).optional(),\n  searchValue: z.string().max(200).optional(),\n})\n\nexport type { PerspectiveSettings }\n\nexport const perspectiveSaveSchema = z.object({\n  perspectiveId: z.string().uuid().optional(),\n  name: z.string().min(1).max(120),\n  settings: perspectiveSettingsSchema,\n  isDefault: z.boolean().optional(),\n  applyToRoles: z.array(z.string().uuid()).optional(),\n  clearRoleIds: z.array(z.string().uuid()).optional(),\n  roleExpectedUpdatedAtByRoleId: z.record(z.string().uuid(), z.string().min(1).nullable()).optional(),\n  roleExpectedUpdatedAtByPerspectiveId: z.record(z.string().uuid(), z.string().min(1).nullable()).optional(),\n  setRoleDefault: z.boolean().optional(),\n})\n\nexport const perspectiveDeleteSchema = z.object({\n  force: z.boolean().optional(),\n})\n\nexport const rolePerspectiveSaveSchema = z.object({\n  roleIds: z.array(z.string().uuid()).min(1),\n  name: z.string().min(1).max(120),\n  settings: perspectiveSettingsSchema,\n  setDefault: z.boolean().optional(),\n})\n\nexport type PerspectiveSaveInput = z.infer<typeof perspectiveSaveSchema>\nexport type RolePerspectiveSaveInput = z.infer<typeof rolePerspectiveSaveSchema>\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAGX,MAAM,4BAA4D,EAAE,OAAO;AAAA,EAChF,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC1D,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC7D,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,SAAS,EACN,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EACvE,IAAI,EAAE,EACN,SAAS;AAAA,EACZ,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxD,aAAa,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAC5C,CAAC;AAIM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC1C,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,UAAU;AAAA,EACV,WAAW,EAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAClD,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,SAAS;AAAA,EAClD,+BAA+B,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,EAAE,SAAS;AAAA,EAClG,sCAAsC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,EAAE,SAAS;AAAA,EACzG,gBAAgB,EAAE,QAAQ,EAAE,SAAS;AACvC,CAAC;AAEM,MAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,OAAO,EAAE,QAAQ,EAAE,SAAS;AAC9B,CAAC;AAEM,MAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC;AAAA,EACzC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC/B,UAAU;AAAA,EACV,YAAY,EAAE,QAAQ,EAAE,SAAS;AACnC,CAAC;",
   "names": []
 }

package/dist/modules/perspectives/services/perspectiveService.js

@@ -1,5 +1,36 @@
-import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import {
+  buildOptimisticLockConflictBody,
+  enforceCommandOptimisticLock,
+  enforceRecordGoneIsConflict
+} from "@open-mercato/shared/lib/crud/optimistic-lock-command";
 import { Perspective, RolePerspective } from "../data/entities.js";
+const PERSPECTIVE_RESOURCE_KIND = "perspectives.perspective";
+const ROLE_PERSPECTIVE_RESOURCE_KIND = "perspectives.role_perspective";
+function resolveRoleLockInput(expectedUpdatedAtByRoleId, roleId, request) {
+  if (expectedUpdatedAtByRoleId && Object.prototype.hasOwnProperty.call(expectedUpdatedAtByRoleId, roleId)) {
+    return { expected: expectedUpdatedAtByRoleId[roleId] ?? null, request: null };
+  }
+  return { expected: void 0, request: request ?? null };
+}
+function resolveRoleRecordLockInput(expectedUpdatedAtByPerspectiveId, expectedUpdatedAtByRoleId, record, request) {
+  if (expectedUpdatedAtByPerspectiveId && Object.prototype.hasOwnProperty.call(expectedUpdatedAtByPerspectiveId, record.id)) {
+    return { expected: expectedUpdatedAtByPerspectiveId[record.id] ?? null, request: null };
+  }
+  return resolveRoleLockInput(expectedUpdatedAtByRoleId, record.roleId, request);
+}
+function firstExpectedUpdatedAt(expectedUpdatedAtById) {
+  if (!expectedUpdatedAtById) return null;
+  for (const value of Object.values(expectedUpdatedAtById)) {
+    if (value instanceof Date) return value;
+    if (typeof value === "string" && value.trim().length > 0) return value;
+  }
+  return null;
+}
+function throwMissingRoleRecordVersionConflict(record) {
+  const current = record.updatedAt instanceof Date && Number.isFinite(record.updatedAt.getTime()) ? record.updatedAt.toISOString() : (/* @__PURE__ */ new Date(0)).toISOString();
+  throw new CrudHttpError(409, buildOptimisticLockConflictBody(current, current));
+}
 const CACHE_TTL_MS = 5 * 60 * 1e3;
 const nullish = (value) => value == null ? null : value;
 const scopeKey = (scope) => `${scope.userId}:${scope.tenantId ?? "null"}:${scope.organizationId ?? "null"}`;
@@ -133,7 +164,7 @@ async function saveUserPerspective(em, cache, options) {
       throw Object.assign(new Error("Perspective not found"), { code: "NOT_FOUND" });
     }
     enforceCommandOptimisticLock({
-      resourceKind: "perspectives.perspective",
+      resourceKind: PERSPECTIVE_RESOURCE_KIND,
       resourceId: entity.id,
       current: entity.updatedAt ?? null,
       request: options.request ?? null
@@ -202,7 +233,20 @@ async function deleteUserPerspective(em, cache, options) {
     tableId,
     deletedAt: null
   });
-  if (!existing) return false;
+  if (!existing) {
+    enforceRecordGoneIsConflict({
+      resourceKind: PERSPECTIVE_RESOURCE_KIND,
+      resourceId: perspectiveId,
+      request: options.request ?? null
+    });
+    return false;
+  }
+  enforceCommandOptimisticLock({
+    resourceKind: PERSPECTIVE_RESOURCE_KIND,
+    resourceId: existing.id,
+    current: existing.updatedAt ?? null,
+    request: options.request ?? null
+  });
   existing.deletedAt = /* @__PURE__ */ new Date();
   existing.isDefault = false;
   await em.flush();
@@ -217,7 +261,7 @@ async function saveRolePerspectives(em, cache, options) {
   const organizationId = options.organizationId ?? null;
   const now = /* @__PURE__ */ new Date();
   const touchedRoleIds = /* @__PURE__ */ new Set();
-  const results = [];
+  const resultRecords = [];
   const recordByRole = /* @__PURE__ */ new Map();
   if (input.roleIds.length) {
     const existingRecords = await em.find(RolePerspective, {
@@ -230,6 +274,22 @@ async function saveRolePerspectives(em, cache, options) {
     });
     for (const existing of existingRecords) recordByRole.set(existing.roleId, existing);
   }
+  const defaultRecordsByRole = /* @__PURE__ */ new Map();
+  if (input.setDefault === true && input.roleIds.length) {
+    const existingDefaultRecords = await em.find(RolePerspective, {
+      roleId: { $in: input.roleIds },
+      tableId,
+      tenantId,
+      organizationId,
+      isDefault: true,
+      deletedAt: null
+    });
+    for (const existing of existingDefaultRecords) {
+      const records = defaultRecordsByRole.get(existing.roleId) ?? [];
+      records.push(existing);
+      defaultRecordsByRole.set(existing.roleId, records);
+    }
+  }
   for (const roleId of input.roleIds) {
     let record = recordByRole.get(roleId) ?? null;
     if (!record) {
@@ -247,12 +307,37 @@ async function saveRolePerspectives(em, cache, options) {
       em.persist(record);
       recordByRole.set(roleId, record);
     } else {
+      enforceCommandOptimisticLock({
+        resourceKind: ROLE_PERSPECTIVE_RESOURCE_KIND,
+        resourceId: record.id,
+        current: record.updatedAt ?? null,
+        ...resolveRoleRecordLockInput(
+          options.expectedUpdatedAtByPerspectiveId,
+          options.expectedUpdatedAtByRoleId,
+          record,
+          options.request ?? null
+        )
+      });
       record.settingsJson = input.settings;
       record.updatedAt = now;
       if (input.setDefault === true) record.isDefault = true;
       if (input.setDefault === false) record.isDefault = false;
     }
     if (input.setDefault === true) {
+      for (const defaultRecord of defaultRecordsByRole.get(roleId) ?? []) {
+        if (defaultRecord.id === record.id) continue;
+        enforceCommandOptimisticLock({
+          resourceKind: ROLE_PERSPECTIVE_RESOURCE_KIND,
+          resourceId: defaultRecord.id,
+          current: defaultRecord.updatedAt ?? null,
+          ...resolveRoleRecordLockInput(
+            options.expectedUpdatedAtByPerspectiveId,
+            options.expectedUpdatedAtByRoleId,
+            defaultRecord,
+            options.request ?? null
+          )
+        });
+      }
       await em.nativeUpdate(
         RolePerspective,
         {
@@ -261,6 +346,7 @@ async function saveRolePerspectives(em, cache, options) {
           tenantId,
           organizationId,
           id: { $ne: record.id },
+          isDefault: true,
           deletedAt: null
         },
         { isDefault: false, updatedAt: now }
@@ -268,7 +354,7 @@ async function saveRolePerspectives(em, cache, options) {
       record.isDefault = true;
     }
     touchedRoleIds.add(roleId);
-    results.push(toResolvedRolePerspective(record));
+    resultRecords.push(record);
   }
   if (input.roleIds.length) {
     await em.flush();
@@ -277,13 +363,56 @@ async function saveRolePerspectives(em, cache, options) {
     const tags = Array.from(touchedRoleIds).map((roleId) => roleTag(roleId, tableId, tenantId));
     await cache.deleteByTags(tags);
   }
-  return results;
+  return resultRecords.map(toResolvedRolePerspective);
 }
 async function clearRolePerspectives(em, cache, options) {
   const { tableId, roleIds } = options;
   const tenantId = options.tenantId ?? null;
   const organizationId = options.organizationId ?? null;
   if (!roleIds.length) return 0;
+  const existingRecords = await em.find(RolePerspective, {
+    roleId: { $in: roleIds },
+    tableId,
+    tenantId,
+    organizationId,
+    deletedAt: null
+  });
+  const recordsByRole = /* @__PURE__ */ new Map();
+  for (const record of existingRecords) {
+    const records = recordsByRole.get(record.roleId) ?? [];
+    records.push(record);
+    recordsByRole.set(record.roleId, records);
+  }
+  for (const roleId of roleIds) {
+    const records = recordsByRole.get(roleId) ?? [];
+    const lockInput = resolveRoleLockInput(options.expectedUpdatedAtByRoleId, roleId, options.request ?? null);
+    if (!records.length) {
+      const expected = firstExpectedUpdatedAt(options.expectedUpdatedAtByPerspectiveId);
+      enforceRecordGoneIsConflict({
+        resourceKind: ROLE_PERSPECTIVE_RESOURCE_KIND,
+        resourceId: roleId,
+        expected: expected ?? lockInput.expected,
+        request: expected ? null : lockInput.request
+      });
+      continue;
+    }
+    for (const record of records) {
+      if (options.expectedUpdatedAtByPerspectiveId && !Object.prototype.hasOwnProperty.call(options.expectedUpdatedAtByPerspectiveId, record.id)) {
+        throwMissingRoleRecordVersionConflict(record);
+      }
+      enforceCommandOptimisticLock({
+        resourceKind: ROLE_PERSPECTIVE_RESOURCE_KIND,
+        resourceId: record.id,
+        current: record.updatedAt ?? null,
+        ...resolveRoleRecordLockInput(
+          options.expectedUpdatedAtByPerspectiveId,
+          options.expectedUpdatedAtByRoleId,
+          record,
+          options.request ?? null
+        )
+      });
+    }
+  }
   const affected = await em.nativeUpdate(
     RolePerspective,
     {