@open-mercato/documents 0.6.8-develop.7016.1.4ed7b1e49d

package/dist/modules/documents/api/[id]/shares/route.js

@@ -0,0 +1,335 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { randomUUID } from "node:crypto";
+import { enforceCommandOptimisticLockWithGuards } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { findOneWithDecryption, findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { DocumentShare } from "../../../data/entities.js";
+import { documentShareCreateSchema, documentShareUpdateSchema } from "../../../data/validators.js";
+import { DOCUMENTS_ENTITY_IDS, DOCUMENTS_MAX_LISTED_SHARES } from "../../../lib/constants.js";
+import { sanitizeDocumentsDisplayLabel } from "../../../lib/displayLabels.js";
+import { resolveUserLabels } from "../../../lib/userLabels.js";
+import { resolveAuthPrincipalService } from "../../../lib/platformServices.js";
+import {
+  attachDocumentsOperationMetadata,
+  buildDocumentsCommandRuntimeContext,
+  resolveDocumentsCommandBus
+} from "../../_commands.js";
+import {
+  assertDocumentNotArchived,
+  handleDocumentsRouteError,
+  loadScopedShare,
+  readBody,
+  resolveActorUserId,
+  resolveDocumentCapabilityProjection,
+  resolveDocumentsContext,
+  routeErrorSchema,
+  runMutationGuardAfterSuccess,
+  serializeShare,
+  validateMutationGuard,
+  withDocumentsContextErrors
+} from "../../_shared.js";
+const shareDeleteSchema = z.object({
+  id: z.string().uuid()
+});
+const shareListResponseSchema = z.object({
+  items: z.array(z.object({
+    id: z.string().uuid(),
+    documentId: z.string().uuid(),
+    principalType: z.enum(["user", "role"]),
+    principalId: z.string().uuid(),
+    permission: z.enum(["viewer", "commenter", "editor"]),
+    createdByUserId: z.string().uuid(),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+    principalLabel: z.string().nullable(),
+    principalSecondary: z.string().nullable()
+  })),
+  truncated: z.boolean()
+});
+const shareMutationResponseSchema = z.object({
+  id: z.string().uuid(),
+  updatedAt: z.string()
+});
+const shareDeleteResponseSchema = z.object({
+  ok: z.boolean(),
+  id: z.string().uuid(),
+  updatedAt: z.string()
+});
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["documents.share"] },
+  POST: { requireAuth: true, requireFeatures: ["documents.share"] },
+  PUT: { requireAuth: true, requireFeatures: ["documents.share"] },
+  DELETE: { requireAuth: true, requireFeatures: ["documents.share"] }
+};
+async function resolveId(context) {
+  const params = await context.params;
+  return params.id;
+}
+async function assertCanShare(ctx, documentId) {
+  const projection = await resolveDocumentCapabilityProjection(ctx, documentId);
+  if (!projection.capabilities.canShare) {
+    throw new CrudHttpError(403, { error: "Forbidden" });
+  }
+}
+async function assertCanMutateShares(ctx, documentId) {
+  await assertCanShare(ctx, documentId);
+  await assertDocumentNotArchived(ctx, documentId);
+}
+function cleanString(value) {
+  return sanitizeDocumentsDisplayLabel(value);
+}
+async function resolvePrincipalLabels(container, scope, shares) {
+  const labels = /* @__PURE__ */ new Map();
+  const userIds = [...new Set(shares.filter((s) => s.principalType === "user").map((s) => s.principalId))];
+  const roleIds = [...new Set(shares.filter((s) => s.principalType === "role").map((s) => s.principalId))];
+  if (userIds.length > 0) {
+    const userLabels = await resolveUserLabels(container, scope, userIds);
+    for (const [userId, label] of userLabels.entries()) {
+      labels.set(userId, label);
+    }
+  }
+  if (roleIds.length > 0) {
+    const roles = await resolveAuthPrincipalService(container)?.resolveLabels({
+      type: "role",
+      ids: roleIds,
+      scope
+    }) ?? [];
+    for (const role of roles) {
+      const name = cleanString(role.label);
+      if (name) labels.set(role.id, { label: name, secondary: null });
+    }
+  }
+  return labels;
+}
+async function GET(request, context) {
+  try {
+    const documentId = await resolveId(context);
+    const ctx = await resolveDocumentsContext(request, ["documents.share"]);
+    await assertCanShare(ctx, documentId);
+    const loadedShares = await findWithDecryption(
+      ctx.em,
+      DocumentShare,
+      {
+        documentId,
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId,
+        deletedAt: null
+      },
+      { orderBy: { createdAt: "ASC", id: "ASC" }, limit: DOCUMENTS_MAX_LISTED_SHARES + 1 },
+      { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    );
+    const truncated = loadedShares.length > DOCUMENTS_MAX_LISTED_SHARES;
+    const shares = loadedShares.slice(0, DOCUMENTS_MAX_LISTED_SHARES);
+    const labels = await resolvePrincipalLabels(
+      ctx.container,
+      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },
+      shares
+    );
+    const items = shares.map((share) => {
+      const resolved = labels.get(share.principalId) ?? null;
+      return {
+        ...serializeShare(share),
+        principalLabel: resolved?.label ?? null,
+        principalSecondary: resolved?.secondary ?? null
+      };
+    });
+    return NextResponse.json({ items, truncated });
+  } catch (error) {
+    return handleDocumentsRouteError(error, "documents.shares.list");
+  }
+}
+async function POST(request, context) {
+  try {
+    const documentId = await resolveId(context);
+    const ctx = await resolveDocumentsContext(request, ["documents.share"]);
+    await assertCanMutateShares(ctx, documentId);
+    const input = documentShareCreateSchema.parse(await readBody(request));
+    const guardResourceId = `${documentId}:${input.principalType}:${input.principalId}`;
+    const guardResult = await validateMutationGuard(ctx, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,
+      resourceId: guardResourceId,
+      operation: "create",
+      mutationPayload: input,
+      mutationPayloadSchema: documentShareCreateSchema
+    });
+    const existing = await findOneWithDecryption(
+      ctx.em,
+      DocumentShare,
+      {
+        documentId,
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId,
+        principalType: input.principalType,
+        principalId: input.principalId
+      },
+      { filters: false, orderBy: { updatedAt: "DESC" } },
+      { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    );
+    const commandInput = {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      documentId,
+      shareId: existing?.id ?? randomUUID(),
+      actorUserId: resolveActorUserId(ctx.auth),
+      expectedUpdatedAt: existing?.updatedAt.toISOString() ?? null,
+      share: input
+    };
+    const execution = await resolveDocumentsCommandBus(ctx).execute(
+      "documents.share.create",
+      { input: commandInput, ctx: buildDocumentsCommandRuntimeContext(ctx) }
+    );
+    await runMutationGuardAfterSuccess(ctx, guardResult, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,
+      resourceId: guardResourceId,
+      operation: "create"
+    });
+    return attachDocumentsOperationMetadata(
+      NextResponse.json({ id: execution.result.id, updatedAt: execution.result.updatedAt }, { status: 201 }),
+      execution.logEntry,
+      { resourceKind: DOCUMENTS_ENTITY_IDS.documentShare, resourceId: execution.result.id }
+    );
+  } catch (error) {
+    return handleDocumentsRouteError(error, "documents.shares.create");
+  }
+}
+async function PUT(request, context) {
+  try {
+    const documentId = await resolveId(context);
+    const ctx = await resolveDocumentsContext(request, ["documents.share"]);
+    await assertCanMutateShares(ctx, documentId);
+    const input = documentShareUpdateSchema.parse(await readBody(request));
+    const share = await loadScopedShare(ctx, documentId, input.id);
+    await enforceCommandOptimisticLockWithGuards(ctx.container, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,
+      resourceId: share.id,
+      current: share.updatedAt,
+      request
+    });
+    const guardResult = await validateMutationGuard(ctx, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,
+      resourceId: share.id,
+      operation: "update",
+      mutationPayload: input,
+      mutationPayloadSchema: documentShareUpdateSchema
+    });
+    const commandInput = {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      documentId,
+      actorUserId: resolveActorUserId(ctx.auth),
+      expectedUpdatedAt: share.updatedAt.toISOString(),
+      share: input
+    };
+    const execution = await resolveDocumentsCommandBus(ctx).execute(
+      "documents.share.update",
+      { input: commandInput, ctx: buildDocumentsCommandRuntimeContext(ctx) }
+    );
+    await runMutationGuardAfterSuccess(ctx, guardResult, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,
+      resourceId: share.id,
+      operation: "update"
+    });
+    return attachDocumentsOperationMetadata(
+      NextResponse.json({ id: execution.result.id, updatedAt: execution.result.updatedAt }),
+      execution.logEntry,
+      { resourceKind: DOCUMENTS_ENTITY_IDS.documentShare, resourceId: execution.result.id }
+    );
+  } catch (error) {
+    return handleDocumentsRouteError(error, "documents.shares.update");
+  }
+}
+async function DELETE(request, context) {
+  try {
+    const documentId = await resolveId(context);
+    const ctx = await resolveDocumentsContext(request, ["documents.share"]);
+    await assertCanMutateShares(ctx, documentId);
+    const input = shareDeleteSchema.parse(await readBody(request));
+    const share = await loadScopedShare(ctx, documentId, input.id);
+    await enforceCommandOptimisticLockWithGuards(ctx.container, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,
+      resourceId: share.id,
+      current: share.updatedAt,
+      request
+    });
+    const guardResult = await validateMutationGuard(ctx, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,
+      resourceId: share.id,
+      operation: "delete"
+    });
+    const commandInput = {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      documentId,
+      shareId: share.id,
+      actorUserId: resolveActorUserId(ctx.auth),
+      expectedUpdatedAt: share.updatedAt.toISOString()
+    };
+    const execution = await resolveDocumentsCommandBus(ctx).execute(
+      "documents.share.delete",
+      { input: commandInput, ctx: buildDocumentsCommandRuntimeContext(ctx) }
+    );
+    await runMutationGuardAfterSuccess(ctx, guardResult, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,
+      resourceId: share.id,
+      operation: "delete"
+    });
+    return attachDocumentsOperationMetadata(
+      NextResponse.json({ ok: true, id: execution.result.id, updatedAt: execution.result.updatedAt }),
+      execution.logEntry,
+      { resourceKind: DOCUMENTS_ENTITY_IDS.documentShare, resourceId: execution.result.id }
+    );
+  } catch (error) {
+    return handleDocumentsRouteError(error, "documents.shares.delete");
+  }
+}
+const openApi = withDocumentsContextErrors({
+  tag: "Documents",
+  summary: "Document shares",
+  pathParams: z.object({ id: z.string().uuid() }),
+  methods: {
+    GET: {
+      summary: "List document shares",
+      responses: [{ status: 200, description: "Document shares", schema: shareListResponseSchema }],
+      errors: [{ status: 403, description: "Forbidden", schema: routeErrorSchema }]
+    },
+    POST: {
+      summary: "Share document",
+      requestBody: { contentType: "application/json", schema: documentShareCreateSchema },
+      responses: [{ status: 201, description: "Document shared", schema: shareMutationResponseSchema }],
+      errors: [
+        { status: 400, description: "Validation failed", schema: routeErrorSchema },
+        { status: 413, description: "Request body exceeds the safe resource bound", schema: routeErrorSchema }
+      ]
+    },
+    PUT: {
+      summary: "Update document share",
+      requestBody: { contentType: "application/json", schema: documentShareUpdateSchema },
+      responses: [{ status: 200, description: "Share updated", schema: shareMutationResponseSchema }],
+      errors: [
+        { status: 409, description: "Optimistic lock conflict", schema: routeErrorSchema },
+        { status: 413, description: "Request body exceeds the safe resource bound", schema: routeErrorSchema }
+      ]
+    },
+    DELETE: {
+      summary: "Remove document share",
+      requestBody: { contentType: "application/json", schema: shareDeleteSchema },
+      responses: [{ status: 200, description: "Share removed", schema: shareDeleteResponseSchema }],
+      errors: [
+        { status: 409, description: "Optimistic lock conflict", schema: routeErrorSchema },
+        { status: 413, description: "Request body exceeds the safe resource bound", schema: routeErrorSchema }
+      ]
+    }
+  }
+});
+var route_default = { GET, POST, PUT, DELETE };
+export {
+  DELETE,
+  GET,
+  POST,
+  PUT,
+  route_default as default,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/documents/api/[id]/shares/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/documents/api/%5Bid%5D/shares/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { randomUUID } from 'node:crypto'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption, findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { DocumentShare } from '../../../data/entities'\nimport { documentShareCreateSchema, documentShareUpdateSchema } from '../../../data/validators'\nimport { DOCUMENTS_ENTITY_IDS, DOCUMENTS_MAX_LISTED_SHARES } from '../../../lib/constants'\nimport { sanitizeDocumentsDisplayLabel } from '../../../lib/displayLabels'\nimport { resolveUserLabels } from '../../../lib/userLabels'\nimport { resolveAuthPrincipalService } from '../../../lib/platformServices'\nimport type {\n  ShareCreateCommandInput,\n  ShareDeleteCommandInput,\n  ShareUpdateCommandInput,\n  ShareCommandResult,\n} from '../../../commands/shares'\nimport {\n  attachDocumentsOperationMetadata,\n  buildDocumentsCommandRuntimeContext,\n  resolveDocumentsCommandBus,\n} from '../../_commands'\nimport {\n  assertDocumentNotArchived,\n  handleDocumentsRouteError,\n  loadScopedShare,\n  readBody,\n  resolveActorUserId,\n  resolveDocumentCapabilityProjection,\n  resolveDocumentsContext,\n  routeErrorSchema,\n  runMutationGuardAfterSuccess,\n  serializeShare,\n  validateMutationGuard,\n  withDocumentsContextErrors,\n} from '../../_shared'\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nconst shareDeleteSchema = z.object({\n  id: z.string().uuid(),\n})\n\nconst shareListResponseSchema = z.object({\n  items: z.array(z.object({\n    id: z.string().uuid(),\n    documentId: z.string().uuid(),\n    principalType: z.enum(['user', 'role']),\n    principalId: z.string().uuid(),\n    permission: z.enum(['viewer', 'commenter', 'editor']),\n    createdByUserId: z.string().uuid(),\n    createdAt: z.string(),\n    updatedAt: z.string(),\n    principalLabel: z.string().nullable(),\n    principalSecondary: z.string().nullable(),\n  })),\n  truncated: z.boolean(),\n})\n\nconst shareMutationResponseSchema = z.object({\n  id: z.string().uuid(),\n  updatedAt: z.string(),\n})\n\nconst shareDeleteResponseSchema = z.object({\n  ok: z.boolean(),\n  id: z.string().uuid(),\n  updatedAt: z.string(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['documents.share'] },\n  POST: { requireAuth: true, requireFeatures: ['documents.share'] },\n  PUT: { requireAuth: true, requireFeatures: ['documents.share'] },\n  DELETE: { requireAuth: true, requireFeatures: ['documents.share'] },\n}\n\nasync function resolveId(context: RouteContext): Promise<string> {\n  const params = await context.params\n  return params.id\n}\n\nasync function assertCanShare(\n  ctx: Awaited<ReturnType<typeof resolveDocumentsContext>>,\n  documentId: string,\n): Promise<void> {\n  const projection = await resolveDocumentCapabilityProjection(ctx, documentId)\n  if (!projection.capabilities.canShare) {\n    throw new CrudHttpError(403, { error: 'Forbidden' })\n  }\n}\n\nasync function assertCanMutateShares(\n  ctx: Awaited<ReturnType<typeof resolveDocumentsContext>>,\n  documentId: string,\n): Promise<void> {\n  await assertCanShare(ctx, documentId)\n  await assertDocumentNotArchived(ctx, documentId)\n}\n\ntype PrincipalLabel = { label: string; secondary?: string | null }\n\nfunction cleanString(value: unknown): string | null {\n  return sanitizeDocumentsDisplayLabel(value)\n}\n\nasync function resolvePrincipalLabels(\n  container: Awaited<ReturnType<typeof resolveDocumentsContext>>['container'],\n  scope: { tenantId: string; organizationId: string },\n  shares: DocumentShare[],\n): Promise<Map<string, PrincipalLabel>> {\n  const labels = new Map<string, PrincipalLabel>()\n  const userIds = [...new Set(shares.filter((s) => s.principalType === 'user').map((s) => s.principalId))]\n  const roleIds = [...new Set(shares.filter((s) => s.principalType === 'role').map((s) => s.principalId))]\n\n  if (userIds.length > 0) {\n    const userLabels = await resolveUserLabels(container, scope, userIds)\n    for (const [userId, label] of userLabels.entries()) {\n      labels.set(userId, label)\n    }\n  }\n\n  if (roleIds.length > 0) {\n    const roles = await resolveAuthPrincipalService(container)?.resolveLabels({\n      type: 'role', ids: roleIds, scope,\n    }) ?? []\n    for (const role of roles) {\n      const name = cleanString(role.label)\n      if (name) labels.set(role.id, { label: name, secondary: null })\n    }\n  }\n\n  return labels\n}\n\nexport async function GET(request: Request, context: RouteContext): Promise<Response> {\n  try {\n    const documentId = await resolveId(context)\n    const ctx = await resolveDocumentsContext(request, ['documents.share'])\n    await assertCanShare(ctx, documentId)\n    const loadedShares = await findWithDecryption(\n      ctx.em,\n      DocumentShare,\n      {\n        documentId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        deletedAt: null,\n      },\n      { orderBy: { createdAt: 'ASC', id: 'ASC' }, limit: DOCUMENTS_MAX_LISTED_SHARES + 1 },\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    const truncated = loadedShares.length > DOCUMENTS_MAX_LISTED_SHARES\n    const shares = loadedShares.slice(0, DOCUMENTS_MAX_LISTED_SHARES)\n    const labels = await resolvePrincipalLabels(\n      ctx.container,\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n      shares,\n    )\n    const items = shares.map((share) => {\n      const resolved = labels.get(share.principalId) ?? null\n      return {\n        ...serializeShare(share),\n        principalLabel: resolved?.label ?? null,\n        principalSecondary: resolved?.secondary ?? null,\n      }\n    })\n    return NextResponse.json({ items, truncated })\n  } catch (error) {\n    return handleDocumentsRouteError(error, 'documents.shares.list')\n  }\n}\n\nexport async function POST(request: Request, context: RouteContext): Promise<Response> {\n  try {\n    const documentId = await resolveId(context)\n    const ctx = await resolveDocumentsContext(request, ['documents.share'])\n    await assertCanMutateShares(ctx, documentId)\n    const input = documentShareCreateSchema.parse(await readBody(request))\n    const guardResourceId = `${documentId}:${input.principalType}:${input.principalId}`\n    const guardResult = await validateMutationGuard(ctx, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,\n      resourceId: guardResourceId,\n      operation: 'create',\n      mutationPayload: input,\n      mutationPayloadSchema: documentShareCreateSchema,\n    })\n\n    const existing = await findOneWithDecryption(\n      ctx.em,\n      DocumentShare,\n      {\n        documentId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n        principalType: input.principalType,\n        principalId: input.principalId,\n      },\n      { filters: false, orderBy: { updatedAt: 'DESC' } },\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    const commandInput: ShareCreateCommandInput = {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      documentId,\n      shareId: existing?.id ?? randomUUID(),\n      actorUserId: resolveActorUserId(ctx.auth),\n      expectedUpdatedAt: existing?.updatedAt.toISOString() ?? null,\n      share: input,\n    }\n    const execution = await resolveDocumentsCommandBus(ctx).execute<ShareCreateCommandInput, ShareCommandResult>(\n      'documents.share.create',\n      { input: commandInput, ctx: buildDocumentsCommandRuntimeContext(ctx) },\n    )\n    await runMutationGuardAfterSuccess(ctx, guardResult, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,\n      resourceId: guardResourceId,\n      operation: 'create',\n    })\n\n    return attachDocumentsOperationMetadata(\n      NextResponse.json({ id: execution.result.id, updatedAt: execution.result.updatedAt }, { status: 201 }),\n      execution.logEntry,\n      { resourceKind: DOCUMENTS_ENTITY_IDS.documentShare, resourceId: execution.result.id },\n    )\n  } catch (error) {\n    return handleDocumentsRouteError(error, 'documents.shares.create')\n  }\n}\n\nexport async function PUT(request: Request, context: RouteContext): Promise<Response> {\n  try {\n    const documentId = await resolveId(context)\n    const ctx = await resolveDocumentsContext(request, ['documents.share'])\n    await assertCanMutateShares(ctx, documentId)\n    const input = documentShareUpdateSchema.parse(await readBody(request))\n    const share = await loadScopedShare(ctx, documentId, input.id)\n    await enforceCommandOptimisticLockWithGuards(ctx.container, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,\n      resourceId: share.id,\n      current: share.updatedAt,\n      request,\n    })\n    const guardResult = await validateMutationGuard(ctx, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,\n      resourceId: share.id,\n      operation: 'update',\n      mutationPayload: input,\n      mutationPayloadSchema: documentShareUpdateSchema,\n    })\n\n    const commandInput: ShareUpdateCommandInput = {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      documentId,\n      actorUserId: resolveActorUserId(ctx.auth),\n      expectedUpdatedAt: share.updatedAt.toISOString(),\n      share: input,\n    }\n    const execution = await resolveDocumentsCommandBus(ctx).execute<ShareUpdateCommandInput, ShareCommandResult>(\n      'documents.share.update',\n      { input: commandInput, ctx: buildDocumentsCommandRuntimeContext(ctx) },\n    )\n    await runMutationGuardAfterSuccess(ctx, guardResult, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,\n      resourceId: share.id,\n      operation: 'update',\n    })\n\n    return attachDocumentsOperationMetadata(\n      NextResponse.json({ id: execution.result.id, updatedAt: execution.result.updatedAt }),\n      execution.logEntry,\n      { resourceKind: DOCUMENTS_ENTITY_IDS.documentShare, resourceId: execution.result.id },\n    )\n  } catch (error) {\n    return handleDocumentsRouteError(error, 'documents.shares.update')\n  }\n}\n\nexport async function DELETE(request: Request, context: RouteContext): Promise<Response> {\n  try {\n    const documentId = await resolveId(context)\n    const ctx = await resolveDocumentsContext(request, ['documents.share'])\n    await assertCanMutateShares(ctx, documentId)\n    const input = shareDeleteSchema.parse(await readBody(request))\n    const share = await loadScopedShare(ctx, documentId, input.id)\n    await enforceCommandOptimisticLockWithGuards(ctx.container, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,\n      resourceId: share.id,\n      current: share.updatedAt,\n      request,\n    })\n    const guardResult = await validateMutationGuard(ctx, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,\n      resourceId: share.id,\n      operation: 'delete',\n    })\n\n    const commandInput: ShareDeleteCommandInput = {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      documentId,\n      shareId: share.id,\n      actorUserId: resolveActorUserId(ctx.auth),\n      expectedUpdatedAt: share.updatedAt.toISOString(),\n    }\n    const execution = await resolveDocumentsCommandBus(ctx).execute<ShareDeleteCommandInput, ShareCommandResult>(\n      'documents.share.delete',\n      { input: commandInput, ctx: buildDocumentsCommandRuntimeContext(ctx) },\n    )\n    await runMutationGuardAfterSuccess(ctx, guardResult, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentShare,\n      resourceId: share.id,\n      operation: 'delete',\n    })\n\n    return attachDocumentsOperationMetadata(\n      NextResponse.json({ ok: true, id: execution.result.id, updatedAt: execution.result.updatedAt }),\n      execution.logEntry,\n      { resourceKind: DOCUMENTS_ENTITY_IDS.documentShare, resourceId: execution.result.id },\n    )\n  } catch (error) {\n    return handleDocumentsRouteError(error, 'documents.shares.delete')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = withDocumentsContextErrors({\n  tag: 'Documents',\n  summary: 'Document shares',\n  pathParams: z.object({ id: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: 'List document shares',\n      responses: [{ status: 200, description: 'Document shares', schema: shareListResponseSchema }],\n      errors: [{ status: 403, description: 'Forbidden', schema: routeErrorSchema }],\n    },\n    POST: {\n      summary: 'Share document',\n      requestBody: { contentType: 'application/json', schema: documentShareCreateSchema },\n      responses: [{ status: 201, description: 'Document shared', schema: shareMutationResponseSchema }],\n      errors: [\n        { status: 400, description: 'Validation failed', schema: routeErrorSchema },\n        { status: 413, description: 'Request body exceeds the safe resource bound', schema: routeErrorSchema },\n      ],\n    },\n    PUT: {\n      summary: 'Update document share',\n      requestBody: { contentType: 'application/json', schema: documentShareUpdateSchema },\n      responses: [{ status: 200, description: 'Share updated', schema: shareMutationResponseSchema }],\n      errors: [\n        { status: 409, description: 'Optimistic lock conflict', schema: routeErrorSchema },\n        { status: 413, description: 'Request body exceeds the safe resource bound', schema: routeErrorSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Remove document share',\n      requestBody: { contentType: 'application/json', schema: shareDeleteSchema },\n      responses: [{ status: 200, description: 'Share removed', schema: shareDeleteResponseSchema }],\n      errors: [\n        { status: 409, description: 'Optimistic lock conflict', schema: routeErrorSchema },\n        { status: 413, description: 'Request body exceeds the safe resource bound', schema: routeErrorSchema },\n      ],\n    },\n  },\n})\n\nexport default { GET, POST, PUT, DELETE }\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAG3B,SAAS,8CAA8C;AACvD,SAAS,qBAAqB;AAC9B,SAAS,uBAAuB,0BAA0B;AAC1D,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B,iCAAiC;AACrE,SAAS,sBAAsB,mCAAmC;AAClE,SAAS,qCAAqC;AAC9C,SAAS,yBAAyB;AAClC,SAAS,mCAAmC;AAO5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,IAAI,EAAE,OAAO,EAAE,KAAK;AACtB,CAAC;AAED,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,OAAO,EAAE,MAAM,EAAE,OAAO;AAAA,IACtB,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,IACpB,YAAY,EAAE,OAAO,EAAE,KAAK;AAAA,IAC5B,eAAe,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;AAAA,IACtC,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,IAC7B,YAAY,EAAE,KAAK,CAAC,UAAU,aAAa,QAAQ,CAAC;AAAA,IACpD,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,IACjC,WAAW,EAAE,OAAO;AAAA,IACpB,WAAW,EAAE,OAAO;AAAA,IACpB,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,IACpC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,CAAC,CAAC;AAAA,EACF,WAAW,EAAE,QAAQ;AACvB,CAAC;AAED,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,IAAI,EAAE,QAAQ;AAAA,EACd,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EAC/D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EAChE,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AAAA,EAC/D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,iBAAiB,EAAE;AACpE;AAEA,eAAe,UAAU,SAAwC;AAC/D,QAAM,SAAS,MAAM,QAAQ;AAC7B,SAAO,OAAO;AAChB;AAEA,eAAe,eACb,KACA,YACe;AACf,QAAM,aAAa,MAAM,oCAAoC,KAAK,UAAU;AAC5E,MAAI,CAAC,WAAW,aAAa,UAAU;AACrC,UAAM,IAAI,cAAc,KAAK,EAAE,OAAO,YAAY,CAAC;AAAA,EACrD;AACF;AAEA,eAAe,sBACb,KACA,YACe;AACf,QAAM,eAAe,KAAK,UAAU;AACpC,QAAM,0BAA0B,KAAK,UAAU;AACjD;AAIA,SAAS,YAAY,OAA+B;AAClD,SAAO,8BAA8B,KAAK;AAC5C;AAEA,eAAe,uBACb,WACA,OACA,QACsC;AACtC,QAAM,SAAS,oBAAI,IAA4B;AAC/C,QAAM,UAAU,CAAC,GAAG,IAAI,IAAI,OAAO,OAAO,CAAC,MAAM,EAAE,kBAAkB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACvG,QAAM,UAAU,CAAC,GAAG,IAAI,IAAI,OAAO,OAAO,CAAC,MAAM,EAAE,kBAAkB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAEvG,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,aAAa,MAAM,kBAAkB,WAAW,OAAO,OAAO;AACpE,eAAW,CAAC,QAAQ,KAAK,KAAK,WAAW,QAAQ,GAAG;AAClD,aAAO,IAAI,QAAQ,KAAK;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB,UAAM,QAAQ,MAAM,4BAA4B,SAAS,GAAG,cAAc;AAAA,MACxE,MAAM;AAAA,MAAQ,KAAK;AAAA,MAAS;AAAA,IAC9B,CAAC,KAAK,CAAC;AACP,eAAW,QAAQ,OAAO;AACxB,YAAM,OAAO,YAAY,KAAK,KAAK;AACnC,UAAI,KAAM,QAAO,IAAI,KAAK,IAAI,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,IAChE;AAAA,EACF;AAEA,SAAO;AACT;AAEA,eAAsB,IAAI,SAAkB,SAA0C;AACpF,MAAI;AACF,UAAM,aAAa,MAAM,UAAU,OAAO;AAC1C,UAAM,MAAM,MAAM,wBAAwB,SAAS,CAAC,iBAAiB,CAAC;AACtE,UAAM,eAAe,KAAK,UAAU;AACpC,UAAM,eAAe,MAAM;AAAA,MACzB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,WAAW;AAAA,MACb;AAAA,MACA,EAAE,SAAS,EAAE,WAAW,OAAO,IAAI,MAAM,GAAG,OAAO,8BAA8B,EAAE;AAAA,MACnF,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,UAAM,YAAY,aAAa,SAAS;AACxC,UAAM,SAAS,aAAa,MAAM,GAAG,2BAA2B;AAChE,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,MAC7D;AAAA,IACF;AACA,UAAM,QAAQ,OAAO,IAAI,CAAC,UAAU;AAClC,YAAM,WAAW,OAAO,IAAI,MAAM,WAAW,KAAK;AAClD,aAAO;AAAA,QACL,GAAG,eAAe,KAAK;AAAA,QACvB,gBAAgB,UAAU,SAAS;AAAA,QACnC,oBAAoB,UAAU,aAAa;AAAA,MAC7C;AAAA,IACF,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,OAAO,UAAU,CAAC;AAAA,EAC/C,SAAS,OAAO;AACd,WAAO,0BAA0B,OAAO,uBAAuB;AAAA,EACjE;AACF;AAEA,eAAsB,KAAK,SAAkB,SAA0C;AACrF,MAAI;AACF,UAAM,aAAa,MAAM,UAAU,OAAO;AAC1C,UAAM,MAAM,MAAM,wBAAwB,SAAS,CAAC,iBAAiB,CAAC;AACtE,UAAM,sBAAsB,KAAK,UAAU;AAC3C,UAAM,QAAQ,0BAA0B,MAAM,MAAM,SAAS,OAAO,CAAC;AACrE,UAAM,kBAAkB,GAAG,UAAU,IAAI,MAAM,aAAa,IAAI,MAAM,WAAW;AACjF,UAAM,cAAc,MAAM,sBAAsB,KAAK;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,iBAAiB;AAAA,MACjB,uBAAuB;AAAA,IACzB,CAAC;AAED,UAAM,WAAW,MAAM;AAAA,MACrB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,QACpB,eAAe,MAAM;AAAA,QACrB,aAAa,MAAM;AAAA,MACrB;AAAA,MACA,EAAE,SAAS,OAAO,SAAS,EAAE,WAAW,OAAO,EAAE;AAAA,MACjD,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,UAAM,eAAwC;AAAA,MAC5C,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,SAAS,UAAU,MAAM,WAAW;AAAA,MACpC,aAAa,mBAAmB,IAAI,IAAI;AAAA,MACxC,mBAAmB,UAAU,UAAU,YAAY,KAAK;AAAA,MACxD,OAAO;AAAA,IACT;AACA,UAAM,YAAY,MAAM,2BAA2B,GAAG,EAAE;AAAA,MACtD;AAAA,MACA,EAAE,OAAO,cAAc,KAAK,oCAAoC,GAAG,EAAE;AAAA,IACvE;AACA,UAAM,6BAA6B,KAAK,aAAa;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY;AAAA,MACZ,WAAW;AAAA,IACb,CAAC;AAED,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,IAAI,UAAU,OAAO,IAAI,WAAW,UAAU,OAAO,UAAU,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,MACrG,UAAU;AAAA,MACV,EAAE,cAAc,qBAAqB,eAAe,YAAY,UAAU,OAAO,GAAG;AAAA,IACtF;AAAA,EACF,SAAS,OAAO;AACd,WAAO,0BAA0B,OAAO,yBAAyB;AAAA,EACnE;AACF;AAEA,eAAsB,IAAI,SAAkB,SAA0C;AACpF,MAAI;AACF,UAAM,aAAa,MAAM,UAAU,OAAO;AAC1C,UAAM,MAAM,MAAM,wBAAwB,SAAS,CAAC,iBAAiB,CAAC;AACtE,UAAM,sBAAsB,KAAK,UAAU;AAC3C,UAAM,QAAQ,0BAA0B,MAAM,MAAM,SAAS,OAAO,CAAC;AACrE,UAAM,QAAQ,MAAM,gBAAgB,KAAK,YAAY,MAAM,EAAE;AAC7D,UAAM,uCAAuC,IAAI,WAAW;AAAA,MAC1D,cAAc,qBAAqB;AAAA,MACnC,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf;AAAA,IACF,CAAC;AACD,UAAM,cAAc,MAAM,sBAAsB,KAAK;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,MACX,iBAAiB;AAAA,MACjB,uBAAuB;AAAA,IACzB,CAAC;AAED,UAAM,eAAwC;AAAA,MAC5C,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,aAAa,mBAAmB,IAAI,IAAI;AAAA,MACxC,mBAAmB,MAAM,UAAU,YAAY;AAAA,MAC/C,OAAO;AAAA,IACT;AACA,UAAM,YAAY,MAAM,2BAA2B,GAAG,EAAE;AAAA,MACtD;AAAA,MACA,EAAE,OAAO,cAAc,KAAK,oCAAoC,GAAG,EAAE;AAAA,IACvE;AACA,UAAM,6BAA6B,KAAK,aAAa;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,IAAI,UAAU,OAAO,IAAI,WAAW,UAAU,OAAO,UAAU,CAAC;AAAA,MACpF,UAAU;AAAA,MACV,EAAE,cAAc,qBAAqB,eAAe,YAAY,UAAU,OAAO,GAAG;AAAA,IACtF;AAAA,EACF,SAAS,OAAO;AACd,WAAO,0BAA0B,OAAO,yBAAyB;AAAA,EACnE;AACF;AAEA,eAAsB,OAAO,SAAkB,SAA0C;AACvF,MAAI;AACF,UAAM,aAAa,MAAM,UAAU,OAAO;AAC1C,UAAM,MAAM,MAAM,wBAAwB,SAAS,CAAC,iBAAiB,CAAC;AACtE,UAAM,sBAAsB,KAAK,UAAU;AAC3C,UAAM,QAAQ,kBAAkB,MAAM,MAAM,SAAS,OAAO,CAAC;AAC7D,UAAM,QAAQ,MAAM,gBAAgB,KAAK,YAAY,MAAM,EAAE;AAC7D,UAAM,uCAAuC,IAAI,WAAW;AAAA,MAC1D,cAAc,qBAAqB;AAAA,MACnC,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM;AAAA,MACf;AAAA,IACF,CAAC;AACD,UAAM,cAAc,MAAM,sBAAsB,KAAK;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,UAAM,eAAwC;AAAA,MAC5C,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,SAAS,MAAM;AAAA,MACf,aAAa,mBAAmB,IAAI,IAAI;AAAA,MACxC,mBAAmB,MAAM,UAAU,YAAY;AAAA,IACjD;AACA,UAAM,YAAY,MAAM,2BAA2B,GAAG,EAAE;AAAA,MACtD;AAAA,MACA,EAAE,OAAO,cAAc,KAAK,oCAAoC,GAAG,EAAE;AAAA,IACvE;AACA,UAAM,6BAA6B,KAAK,aAAa;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY,MAAM;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,WAAO;AAAA,MACL,aAAa,KAAK,EAAE,IAAI,MAAM,IAAI,UAAU,OAAO,IAAI,WAAW,UAAU,OAAO,UAAU,CAAC;AAAA,MAC9F,UAAU;AAAA,MACV,EAAE,cAAc,qBAAqB,eAAe,YAAY,UAAU,OAAO,GAAG;AAAA,IACtF;AAAA,EACF,SAAS,OAAO;AACd,WAAO,0BAA0B,OAAO,yBAAyB;AAAA,EACnE;AACF;AAEO,MAAM,UAA2B,2BAA2B;AAAA,EACjE,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC9C,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,wBAAwB,CAAC;AAAA,MAC5F,QAAQ,CAAC,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,iBAAiB,CAAC;AAAA,IAC9E;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,0BAA0B;AAAA,MAClF,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,mBAAmB,QAAQ,4BAA4B,CAAC;AAAA,MAChG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,iBAAiB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,iBAAiB;AAAA,MACvG;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,0BAA0B;AAAA,MAClF,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,4BAA4B,CAAC;AAAA,MAC9F,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,iBAAiB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,iBAAiB;AAAA,MACvG;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,kBAAkB;AAAA,MAC1E,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,iBAAiB,QAAQ,0BAA0B,CAAC;AAAA,MAC5F,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,iBAAiB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,iBAAiB;AAAA,MACvG;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,IAAO,gBAAQ,EAAE,KAAK,MAAM,KAAK,OAAO;",
+  "names": []
+}

package/dist/modules/documents/api/[id]/unarchive/route.js

@@ -0,0 +1,39 @@
+import { z } from "zod";
+import { routeErrorSchema, withDocumentsContextErrors } from "../../_shared.js";
+import { runDocumentLifecycleRoute } from "../archive/route.js";
+const lifecycleResponseSchema = z.object({
+  id: z.string().uuid(),
+  archivedAt: z.string().nullable(),
+  updatedAt: z.string()
+});
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["documents.edit"] }
+};
+async function POST(request, context) {
+  return runDocumentLifecycleRoute(request, context, "documents.document.unarchive", "documents.unarchive");
+}
+const openApi = withDocumentsContextErrors({
+  tag: "Documents",
+  summary: "Unarchive document",
+  pathParams: z.object({ id: z.string().uuid() }),
+  methods: {
+    POST: {
+      summary: "Restore an archived document to its active editable state",
+      responses: [{ status: 200, description: "Active document state", schema: lifecycleResponseSchema }],
+      errors: [
+        { status: 401, description: "Unauthorized", schema: routeErrorSchema },
+        { status: 403, description: "Forbidden", schema: routeErrorSchema },
+        { status: 404, description: "Document not found", schema: routeErrorSchema },
+        { status: 409, description: "Document changed concurrently", schema: routeErrorSchema }
+      ]
+    }
+  }
+});
+var route_default = { POST };
+export {
+  POST,
+  route_default as default,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/documents/api/[id]/unarchive/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/documents/api/%5Bid%5D/unarchive/route.ts"],
+  "sourcesContent": ["import { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { routeErrorSchema, withDocumentsContextErrors } from '../../_shared'\nimport { runDocumentLifecycleRoute } from '../archive/route'\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nconst lifecycleResponseSchema = z.object({\n  id: z.string().uuid(),\n  archivedAt: z.string().nullable(),\n  updatedAt: z.string(),\n})\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['documents.edit'] },\n}\n\nexport async function POST(request: Request, context: RouteContext): Promise<Response> {\n  return runDocumentLifecycleRoute(request, context, 'documents.document.unarchive', 'documents.unarchive')\n}\n\nexport const openApi: OpenApiRouteDoc = withDocumentsContextErrors({\n  tag: 'Documents',\n  summary: 'Unarchive document',\n  pathParams: z.object({ id: z.string().uuid() }),\n  methods: {\n    POST: {\n      summary: 'Restore an archived document to its active editable state',\n      responses: [{ status: 200, description: 'Active document state', schema: lifecycleResponseSchema }],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: routeErrorSchema },\n        { status: 403, description: 'Forbidden', schema: routeErrorSchema },\n        { status: 404, description: 'Document not found', schema: routeErrorSchema },\n        { status: 409, description: 'Document changed concurrently', schema: routeErrorSchema },\n      ],\n    },\n  },\n})\n\nexport default { POST }\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,kBAAkB,kCAAkC;AAC7D,SAAS,iCAAiC;AAM1C,MAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,WAAW,EAAE,OAAO;AACtB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,eAAsB,KAAK,SAAkB,SAA0C;AACrF,SAAO,0BAA0B,SAAS,SAAS,gCAAgC,qBAAqB;AAC1G;AAEO,MAAM,UAA2B,2BAA2B;AAAA,EACjE,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC9C,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,wBAAwB,CAAC;AAAA,MAClG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,iBAAiB;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,iBAAiB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,iCAAiC,QAAQ,iBAAiB;AAAA,MACxF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,IAAO,gBAAQ,EAAE,KAAK;",
+  "names": []
+}

package/dist/modules/documents/api/[id]/versions/[versionId]/restore/route.js

@@ -0,0 +1,133 @@
+import { randomUUID } from "node:crypto";
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { enforceCommandOptimisticLockWithGuards } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { DocumentVersion } from "../../../../../data/entities.js";
+import { DOCUMENTS_ENTITY_IDS } from "../../../../../lib/constants.js";
+import { loadDocumentContent } from "../../../../../lib/contentService.js";
+import {
+  attachDocumentsOperationMetadata,
+  buildDocumentsCommandRuntimeContext,
+  resolveDocumentsCommandBus
+} from "../../../../_commands.js";
+import {
+  assertDocumentNotArchived,
+  handleDocumentsRouteError,
+  resolveActorUserId,
+  resolveDocumentCapabilityProjection,
+  resolveDocumentsContext,
+  routeErrorSchema,
+  runMutationGuardAfterSuccess,
+  validateMutationGuard,
+  withDocumentsContextErrors
+} from "../../../../_shared.js";
+const restoreResponseSchema = z.object({
+  contentHtml: z.string(),
+  contentText: z.string(),
+  updatedAt: z.string(),
+  restoredVersionId: z.string().uuid(),
+  preRestoreVersionId: z.string().uuid()
+});
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["documents.edit"] }
+};
+async function POST(request, context) {
+  try {
+    const { id: documentId, versionId } = await context.params;
+    const ctx = await resolveDocumentsContext(request, ["documents.edit"]);
+    const projection = await resolveDocumentCapabilityProjection(ctx, documentId);
+    if (!projection.capabilities.canEdit) throw new CrudHttpError(403, { error: "Forbidden" });
+    await assertDocumentNotArchived(ctx, documentId);
+    const targetVersion = await findOneWithDecryption(
+      ctx.em,
+      DocumentVersion,
+      {
+        id: versionId,
+        documentId,
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId
+      },
+      void 0,
+      { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    );
+    if (!targetVersion) throw new CrudHttpError(404, { error: "documents.versions.notFound" });
+    const guardResult = await validateMutationGuard(ctx, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,
+      resourceId: versionId,
+      operation: "custom",
+      mutationPayload: { action: "restore", documentId, versionId }
+    });
+    const currentContent = await loadDocumentContent(ctx.em, documentId, {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId
+    });
+    if (!currentContent) throw new CrudHttpError(404, { error: "documents.content.notFound" });
+    await enforceCommandOptimisticLockWithGuards(ctx.container, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentContent,
+      resourceId: currentContent.id,
+      current: currentContent.updatedAt,
+      request
+    });
+    const restoreEpoch = Math.max(Date.now(), currentContent.updatedAt.getTime() + 1);
+    const input = {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      documentId,
+      versionId,
+      preRestoreVersionId: randomUUID(),
+      actorUserId: resolveActorUserId(ctx.auth),
+      expectedContentUpdatedAt: currentContent.updatedAt.toISOString(),
+      restoreContentUpdatedAt: new Date(restoreEpoch).toISOString()
+    };
+    const execution = await resolveDocumentsCommandBus(ctx).execute(
+      "documents.version.restore",
+      { input, ctx: buildDocumentsCommandRuntimeContext(ctx) }
+    );
+    await runMutationGuardAfterSuccess(ctx, guardResult, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,
+      resourceId: versionId,
+      operation: "custom"
+    });
+    return attachDocumentsOperationMetadata(
+      NextResponse.json({
+        contentHtml: execution.result.contentHtml,
+        contentText: execution.result.contentText,
+        updatedAt: execution.result.updatedAt,
+        restoredVersionId: execution.result.restoredVersionId,
+        preRestoreVersionId: execution.result.preRestoreVersionId
+      }),
+      execution.logEntry,
+      { resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion, resourceId: versionId }
+    );
+  } catch (error) {
+    return handleDocumentsRouteError(error, "documents.versions.restore");
+  }
+}
+const openApi = withDocumentsContextErrors({
+  tag: "Documents",
+  summary: "Restore document version",
+  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),
+  methods: {
+    POST: {
+      summary: "Restore and materialize a historical document version",
+      responses: [{ status: 200, description: "Restored document content", schema: restoreResponseSchema }],
+      errors: [
+        { status: 401, description: "Unauthorized", schema: routeErrorSchema },
+        { status: 403, description: "Forbidden", schema: routeErrorSchema },
+        { status: 404, description: "Version or content not found", schema: routeErrorSchema },
+        { status: 409, description: "Document content changed", schema: routeErrorSchema },
+        { status: 422, description: "Version snapshot is invalid", schema: routeErrorSchema }
+      ]
+    }
+  }
+});
+var route_default = { POST };
+export {
+  POST,
+  route_default as default,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/documents/api/[id]/versions/[versionId]/restore/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../../src/modules/documents/api/%5Bid%5D/versions/%5BversionId%5D/restore/route.ts"],
+  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLockWithGuards } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { DocumentVersion } from '../../../../../data/entities'\nimport { DOCUMENTS_ENTITY_IDS } from '../../../../../lib/constants'\nimport { loadDocumentContent } from '../../../../../lib/contentService'\nimport type { RestoreVersionCommandInput } from '../../../../../commands/versions'\nimport {\n  attachDocumentsOperationMetadata,\n  buildDocumentsCommandRuntimeContext,\n  resolveDocumentsCommandBus,\n} from '../../../../_commands'\nimport {\n  assertDocumentNotArchived,\n  handleDocumentsRouteError,\n  resolveActorUserId,\n  resolveDocumentCapabilityProjection,\n  resolveDocumentsContext,\n  routeErrorSchema,\n  runMutationGuardAfterSuccess,\n  validateMutationGuard,\n  withDocumentsContextErrors,\n} from '../../../../_shared'\n\ntype RouteContext = {\n  params: Promise<{ id: string; versionId: string }> | { id: string; versionId: string }\n}\n\ntype RestoreResult = {\n  contentHtml: string\n  contentText: string\n  updatedAt: string\n  restoredVersionId: string\n  preRestoreVersionId: string\n}\n\nconst restoreResponseSchema = z.object({\n  contentHtml: z.string(),\n  contentText: z.string(),\n  updatedAt: z.string(),\n  restoredVersionId: z.string().uuid(),\n  preRestoreVersionId: z.string().uuid(),\n})\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['documents.edit'] },\n}\n\nexport async function POST(request: Request, context: RouteContext): Promise<Response> {\n  try {\n    const { id: documentId, versionId } = await context.params\n    const ctx = await resolveDocumentsContext(request, ['documents.edit'])\n    const projection = await resolveDocumentCapabilityProjection(ctx, documentId)\n    if (!projection.capabilities.canEdit) throw new CrudHttpError(403, { error: 'Forbidden' })\n    await assertDocumentNotArchived(ctx, documentId)\n\n    const targetVersion = await findOneWithDecryption(\n      ctx.em,\n      DocumentVersion,\n      {\n        id: versionId,\n        documentId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      },\n      undefined,\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    if (!targetVersion) throw new CrudHttpError(404, { error: 'documents.versions.notFound' })\n\n    // Preserve the existing version-level policy contract. The content-row\n    // optimistic lock below is deliberately independent and follows this guard.\n    const guardResult = await validateMutationGuard(ctx, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,\n      resourceId: versionId,\n      operation: 'custom',\n      mutationPayload: { action: 'restore', documentId, versionId },\n    })\n\n    const currentContent = await loadDocumentContent(ctx.em, documentId, {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    })\n    if (!currentContent) throw new CrudHttpError(404, { error: 'documents.content.notFound' })\n    await enforceCommandOptimisticLockWithGuards(ctx.container, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentContent,\n      resourceId: currentContent.id,\n      current: currentContent.updatedAt,\n      request,\n    })\n\n    const restoreEpoch = Math.max(Date.now(), currentContent.updatedAt.getTime() + 1)\n    const input: RestoreVersionCommandInput = {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      documentId,\n      versionId,\n      preRestoreVersionId: randomUUID(),\n      actorUserId: resolveActorUserId(ctx.auth),\n      expectedContentUpdatedAt: currentContent.updatedAt.toISOString(),\n      restoreContentUpdatedAt: new Date(restoreEpoch).toISOString(),\n    }\n    const execution = await resolveDocumentsCommandBus(ctx).execute<RestoreVersionCommandInput, RestoreResult>(\n      'documents.version.restore',\n      { input, ctx: buildDocumentsCommandRuntimeContext(ctx) },\n    )\n\n    await runMutationGuardAfterSuccess(ctx, guardResult, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,\n      resourceId: versionId,\n      operation: 'custom',\n    })\n    return attachDocumentsOperationMetadata(\n      NextResponse.json({\n        contentHtml: execution.result.contentHtml,\n        contentText: execution.result.contentText,\n        updatedAt: execution.result.updatedAt,\n        restoredVersionId: execution.result.restoredVersionId,\n        preRestoreVersionId: execution.result.preRestoreVersionId,\n      }),\n      execution.logEntry,\n      { resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion, resourceId: versionId },\n    )\n  } catch (error) {\n    return handleDocumentsRouteError(error, 'documents.versions.restore')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = withDocumentsContextErrors({\n  tag: 'Documents',\n  summary: 'Restore document version',\n  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),\n  methods: {\n    POST: {\n      summary: 'Restore and materialize a historical document version',\n      responses: [{ status: 200, description: 'Restored document content', schema: restoreResponseSchema }],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: routeErrorSchema },\n        { status: 403, description: 'Forbidden', schema: routeErrorSchema },\n        { status: 404, description: 'Version or content not found', schema: routeErrorSchema },\n        { status: 409, description: 'Document content changed', schema: routeErrorSchema },\n        { status: 422, description: 'Version snapshot is invalid', schema: routeErrorSchema },\n      ],\n    },\n  },\n})\n\nexport default { POST }\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,qBAAqB;AAC9B,SAAS,8CAA8C;AACvD,SAAS,6BAA6B;AACtC,SAAS,uBAAuB;AAChC,SAAS,4BAA4B;AACrC,SAAS,2BAA2B;AAEpC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcP,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,aAAa,EAAE,OAAO;AAAA,EACtB,aAAa,EAAE,OAAO;AAAA,EACtB,WAAW,EAAE,OAAO;AAAA,EACpB,mBAAmB,EAAE,OAAO,EAAE,KAAK;AAAA,EACnC,qBAAqB,EAAE,OAAO,EAAE,KAAK;AACvC,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,eAAsB,KAAK,SAAkB,SAA0C;AACrF,MAAI;AACF,UAAM,EAAE,IAAI,YAAY,UAAU,IAAI,MAAM,QAAQ;AACpD,UAAM,MAAM,MAAM,wBAAwB,SAAS,CAAC,gBAAgB,CAAC;AACrE,UAAM,aAAa,MAAM,oCAAoC,KAAK,UAAU;AAC5E,QAAI,CAAC,WAAW,aAAa,QAAS,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,YAAY,CAAC;AACzF,UAAM,0BAA0B,KAAK,UAAU;AAE/C,UAAM,gBAAgB,MAAM;AAAA,MAC1B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ;AAAA,QACA,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB;AAAA,MACA;AAAA,MACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,QAAI,CAAC,cAAe,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,8BAA8B,CAAC;AAIzF,UAAM,cAAc,MAAM,sBAAsB,KAAK;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,iBAAiB,EAAE,QAAQ,WAAW,YAAY,UAAU;AAAA,IAC9D,CAAC;AAED,UAAM,iBAAiB,MAAM,oBAAoB,IAAI,IAAI,YAAY;AAAA,MACnE,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB,CAAC;AACD,QAAI,CAAC,eAAgB,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,6BAA6B,CAAC;AACzF,UAAM,uCAAuC,IAAI,WAAW;AAAA,MAC1D,cAAc,qBAAqB;AAAA,MACnC,YAAY,eAAe;AAAA,MAC3B,SAAS,eAAe;AAAA,MACxB;AAAA,IACF,CAAC;AAED,UAAM,eAAe,KAAK,IAAI,KAAK,IAAI,GAAG,eAAe,UAAU,QAAQ,IAAI,CAAC;AAChF,UAAM,QAAoC;AAAA,MACxC,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA;AAAA,MACA,qBAAqB,WAAW;AAAA,MAChC,aAAa,mBAAmB,IAAI,IAAI;AAAA,MACxC,0BAA0B,eAAe,UAAU,YAAY;AAAA,MAC/D,yBAAyB,IAAI,KAAK,YAAY,EAAE,YAAY;AAAA,IAC9D;AACA,UAAM,YAAY,MAAM,2BAA2B,GAAG,EAAE;AAAA,MACtD;AAAA,MACA,EAAE,OAAO,KAAK,oCAAoC,GAAG,EAAE;AAAA,IACzD;AAEA,UAAM,6BAA6B,KAAK,aAAa;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY;AAAA,MACZ,WAAW;AAAA,IACb,CAAC;AACD,WAAO;AAAA,MACL,aAAa,KAAK;AAAA,QAChB,aAAa,UAAU,OAAO;AAAA,QAC9B,aAAa,UAAU,OAAO;AAAA,QAC9B,WAAW,UAAU,OAAO;AAAA,QAC5B,mBAAmB,UAAU,OAAO;AAAA,QACpC,qBAAqB,UAAU,OAAO;AAAA,MACxC,CAAC;AAAA,MACD,UAAU;AAAA,MACV,EAAE,cAAc,qBAAqB,iBAAiB,YAAY,UAAU;AAAA,IAC9E;AAAA,EACF,SAAS,OAAO;AACd,WAAO,0BAA0B,OAAO,4BAA4B;AAAA,EACtE;AACF;AAEO,MAAM,UAA2B,2BAA2B;AAAA,EACjE,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC5E,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,sBAAsB,CAAC;AAAA,MACpG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,iBAAiB;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,iBAAiB;AAAA,QACrF,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,iBAAiB;AAAA,QACjF,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,iBAAiB;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,IAAO,gBAAQ,EAAE,KAAK;",
+  "names": []
+}