@open-mercato/documents 0.6.8-develop.7016.1.4ed7b1e49d

package/dist/modules/documents/api/[id]/versions/[versionId]/route.js

@@ -0,0 +1,93 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { CrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { findOneWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { DocumentVersion } from "../../../../data/entities.js";
+import { resolveUserLabels } from "../../../../lib/userLabels.js";
+import { materializeDocumentVersionPreview } from "../../../../lib/versionContent.js";
+import { sanitizeDocumentVersionLabel } from "../../../../lib/versionLabels.js";
+import {
+  handleDocumentsRouteError,
+  resolveDocumentCapabilityProjection,
+  resolveDocumentsContext,
+  routeErrorSchema,
+  withDocumentsContextErrors
+} from "../../../_shared.js";
+const versionDetailResponseSchema = z.object({
+  id: z.string().uuid(),
+  label: z.string().nullable(),
+  creatorLabel: z.string(),
+  createdAt: z.string(),
+  contentHtml: z.string()
+});
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["documents.view"] }
+};
+async function GET(request, context) {
+  try {
+    const { id: documentId, versionId } = await context.params;
+    const ctx = await resolveDocumentsContext(request, ["documents.view"]);
+    const projection = await resolveDocumentCapabilityProjection(ctx, documentId);
+    if (!projection.capabilities.canView) throw new CrudHttpError(403, { error: "Forbidden" });
+    const version = await findOneWithDecryption(
+      ctx.em,
+      DocumentVersion,
+      {
+        id: versionId,
+        documentId,
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId
+      },
+      void 0,
+      { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    );
+    if (!version) throw new CrudHttpError(404, { error: "documents.versions.notFound" });
+    const labels = await resolveUserLabels(
+      ctx.container,
+      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },
+      [version.createdByUserId]
+    );
+    const { translate } = await resolveTranslations();
+    const creatorLabel = labels.get(version.createdByUserId)?.label ?? translate("documents.collaboration.genericCollaborator", "Collaborator");
+    return NextResponse.json({
+      id: version.id,
+      label: sanitizeDocumentVersionLabel(version.label),
+      creatorLabel,
+      createdAt: version.createdAt.toISOString(),
+      contentHtml: materializeDocumentVersionPreview({
+        documentId,
+        yjsSnapshot: version.yjsSnapshot,
+        contentHtml: version.contentHtml,
+        entityRefFallbackLabel: translate("documents.links.restrictedRecord", "Restricted record")
+      })
+    });
+  } catch (error) {
+    return handleDocumentsRouteError(error, "documents.versions.detail");
+  }
+}
+const openApi = withDocumentsContextErrors({
+  tag: "Documents",
+  summary: "Preview document version",
+  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),
+  methods: {
+    GET: {
+      summary: "Read a sanitized historical document preview",
+      responses: [{ status: 200, description: "Historical document preview", schema: versionDetailResponseSchema }],
+      errors: [
+        { status: 401, description: "Unauthorized", schema: routeErrorSchema },
+        { status: 403, description: "Forbidden", schema: routeErrorSchema },
+        { status: 404, description: "Version not found", schema: routeErrorSchema },
+        { status: 422, description: "Version snapshot is invalid", schema: routeErrorSchema }
+      ]
+    }
+  }
+});
+var route_default = { GET };
+export {
+  GET,
+  route_default as default,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/documents/api/[id]/versions/[versionId]/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/documents/api/%5Bid%5D/versions/%5BversionId%5D/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { CrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { findOneWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { DocumentVersion } from '../../../../data/entities'\nimport { resolveUserLabels } from '../../../../lib/userLabels'\nimport { materializeDocumentVersionPreview } from '../../../../lib/versionContent'\nimport { sanitizeDocumentVersionLabel } from '../../../../lib/versionLabels'\nimport {\n  handleDocumentsRouteError,\n  resolveDocumentCapabilityProjection,\n  resolveDocumentsContext,\n  routeErrorSchema,\n  withDocumentsContextErrors,\n} from '../../../_shared'\n\ntype RouteContext = {\n  params: Promise<{ id: string; versionId: string }> | { id: string; versionId: string }\n}\n\nconst versionDetailResponseSchema = z.object({\n  id: z.string().uuid(),\n  label: z.string().nullable(),\n  creatorLabel: z.string(),\n  createdAt: z.string(),\n  contentHtml: z.string(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['documents.view'] },\n}\n\nexport async function GET(request: Request, context: RouteContext): Promise<Response> {\n  try {\n    const { id: documentId, versionId } = await context.params\n    const ctx = await resolveDocumentsContext(request, ['documents.view'])\n    const projection = await resolveDocumentCapabilityProjection(ctx, documentId)\n    if (!projection.capabilities.canView) throw new CrudHttpError(403, { error: 'Forbidden' })\n\n    const version = await findOneWithDecryption(\n      ctx.em,\n      DocumentVersion,\n      {\n        id: versionId,\n        documentId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      },\n      undefined,\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    if (!version) throw new CrudHttpError(404, { error: 'documents.versions.notFound' })\n\n    const labels = await resolveUserLabels(\n      ctx.container,\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n      [version.createdByUserId],\n    )\n    const { translate } = await resolveTranslations()\n    const creatorLabel = labels.get(version.createdByUserId)?.label\n      ?? translate('documents.collaboration.genericCollaborator', 'Collaborator')\n\n    return NextResponse.json({\n      id: version.id,\n      label: sanitizeDocumentVersionLabel(version.label),\n      creatorLabel,\n      createdAt: version.createdAt.toISOString(),\n      contentHtml: materializeDocumentVersionPreview({\n        documentId,\n        yjsSnapshot: version.yjsSnapshot,\n        contentHtml: version.contentHtml,\n        entityRefFallbackLabel: translate('documents.links.restrictedRecord', 'Restricted record'),\n      }),\n    })\n  } catch (error) {\n    return handleDocumentsRouteError(error, 'documents.versions.detail')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = withDocumentsContextErrors({\n  tag: 'Documents',\n  summary: 'Preview document version',\n  pathParams: z.object({ id: z.string().uuid(), versionId: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: 'Read a sanitized historical document preview',\n      responses: [{ status: 200, description: 'Historical document preview', schema: versionDetailResponseSchema }],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: routeErrorSchema },\n        { status: 403, description: 'Forbidden', schema: routeErrorSchema },\n        { status: 404, description: 'Version not found', schema: routeErrorSchema },\n        { status: 422, description: 'Version snapshot is invalid', schema: routeErrorSchema },\n      ],\n    },\n  },\n})\n\nexport default { GET }\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,qBAAqB;AAC9B,SAAS,6BAA6B;AACtC,SAAS,2BAA2B;AACpC,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,yCAAyC;AAClD,SAAS,oCAAoC;AAC7C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAMP,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,cAAc,EAAE,OAAO;AAAA,EACvB,WAAW,EAAE,OAAO;AAAA,EACpB,aAAa,EAAE,OAAO;AACxB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAChE;AAEA,eAAsB,IAAI,SAAkB,SAA0C;AACpF,MAAI;AACF,UAAM,EAAE,IAAI,YAAY,UAAU,IAAI,MAAM,QAAQ;AACpD,UAAM,MAAM,MAAM,wBAAwB,SAAS,CAAC,gBAAgB,CAAC;AACrE,UAAM,aAAa,MAAM,oCAAoC,KAAK,UAAU;AAC5E,QAAI,CAAC,WAAW,aAAa,QAAS,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,YAAY,CAAC;AAEzF,UAAM,UAAU,MAAM;AAAA,MACpB,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ;AAAA,QACA,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB;AAAA,MACA;AAAA,MACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,QAAI,CAAC,QAAS,OAAM,IAAI,cAAc,KAAK,EAAE,OAAO,8BAA8B,CAAC;AAEnF,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,MAC7D,CAAC,QAAQ,eAAe;AAAA,IAC1B;AACA,UAAM,EAAE,UAAU,IAAI,MAAM,oBAAoB;AAChD,UAAM,eAAe,OAAO,IAAI,QAAQ,eAAe,GAAG,SACrD,UAAU,+CAA+C,cAAc;AAE5E,WAAO,aAAa,KAAK;AAAA,MACvB,IAAI,QAAQ;AAAA,MACZ,OAAO,6BAA6B,QAAQ,KAAK;AAAA,MACjD;AAAA,MACA,WAAW,QAAQ,UAAU,YAAY;AAAA,MACzC,aAAa,kCAAkC;AAAA,QAC7C;AAAA,QACA,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,wBAAwB,UAAU,oCAAoC,mBAAmB;AAAA,MAC3F,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,0BAA0B,OAAO,2BAA2B;AAAA,EACrE;AACF;AAEO,MAAM,UAA2B,2BAA2B;AAAA,EACjE,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,GAAG,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC5E,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,4BAA4B,CAAC;AAAA,MAC5G,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,iBAAiB;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,iBAAiB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,+BAA+B,QAAQ,iBAAiB;AAAA,MACtF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,IAAO,gBAAQ,EAAE,IAAI;",
+  "names": []
+}

package/dist/modules/documents/api/[id]/versions/route.js

@@ -0,0 +1,193 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { randomUUID } from "node:crypto";
+import { findAndCountWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { DocumentVersion } from "../../../data/entities.js";
+import { DOCUMENTS_ENTITY_IDS } from "../../../lib/constants.js";
+import { DOCUMENTS_VERSION_LIST_PAGE_SIZE } from "../../../lib/historyLimits.js";
+import { assertTier } from "../../../lib/permissions.js";
+import { resolveUserLabels } from "../../../lib/userLabels.js";
+import {
+  assertDocumentNotArchived,
+  handleDocumentsRouteError,
+  readBody,
+  resolveDocumentsContext,
+  routeErrorSchema,
+  runMutationGuardAfterSuccess,
+  validateMutationGuard,
+  withDocumentsContextErrors
+} from "../../_shared.js";
+import {
+  attachDocumentsOperationMetadata,
+  buildDocumentsCommandRuntimeContext,
+  resolveDocumentsCommandBus
+} from "../../_commands.js";
+import { documentVersionLabelSchema } from "../../../data/validators.js";
+import { sanitizeDocumentVersionLabel } from "../../../lib/versionLabels.js";
+const versionCreateSchema = z.object({
+  label: documentVersionLabelSchema
+});
+const versionListQuerySchema = z.object({
+  page: z.coerce.number().int().min(1).max(1e4).default(1),
+  pageSize: z.coerce.number().int().min(1).max(DOCUMENTS_VERSION_LIST_PAGE_SIZE).default(DOCUMENTS_VERSION_LIST_PAGE_SIZE)
+});
+const versionListItemSchema = z.object({
+  id: z.string().uuid(),
+  label: z.string().nullable(),
+  createdByUserId: z.string().uuid(),
+  createdByLabel: z.string().nullable(),
+  createdAt: z.string()
+});
+const versionListResponseSchema = z.object({
+  items: z.array(versionListItemSchema),
+  page: z.number().int().positive(),
+  pageSize: z.number().int().positive(),
+  total: z.number().int().nonnegative(),
+  totalPages: z.number().int().positive()
+});
+const versionCreateResponseSchema = z.object({
+  id: z.string().uuid(),
+  label: z.string().nullable(),
+  createdByUserId: z.string().uuid(),
+  createdAt: z.string()
+});
+const metadata = {
+  GET: { requireAuth: true, requireFeatures: ["documents.view"] },
+  POST: { requireAuth: true, requireFeatures: ["documents.edit"] }
+};
+async function resolveId(context) {
+  const params = await context.params;
+  return params.id;
+}
+function serializeVersion(version) {
+  return {
+    id: version.id,
+    label: sanitizeDocumentVersionLabel(version.label),
+    createdByUserId: version.createdByUserId,
+    createdAt: version.createdAt.toISOString()
+  };
+}
+async function GET(request, context) {
+  try {
+    const documentId = await resolveId(context);
+    const ctx = await resolveDocumentsContext(request, ["documents.view"]);
+    await assertTier(ctx.em, documentId, ctx.auth, "viewer");
+    const url = new URL(request.url);
+    const query = versionListQuerySchema.parse(Object.fromEntries(url.searchParams.entries()));
+    const [versions, total] = await findAndCountWithDecryption(
+      ctx.em,
+      DocumentVersion,
+      {
+        documentId,
+        tenantId: ctx.tenantId,
+        organizationId: ctx.organizationId
+      },
+      {
+        fields: ["id", "label", "createdByUserId", "createdAt"],
+        orderBy: { createdAt: "DESC", id: "ASC" },
+        limit: query.pageSize,
+        offset: (query.page - 1) * query.pageSize
+      },
+      { tenantId: ctx.tenantId, organizationId: ctx.organizationId }
+    );
+    const labels = await resolveUserLabels(
+      ctx.container,
+      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },
+      versions.map((version) => version.createdByUserId)
+    );
+    return NextResponse.json({
+      items: versions.map((version) => ({
+        ...serializeVersion(version),
+        createdByLabel: labels.get(version.createdByUserId)?.label ?? null
+      })),
+      page: query.page,
+      pageSize: query.pageSize,
+      total,
+      totalPages: Math.max(1, Math.ceil(total / query.pageSize))
+    });
+  } catch (error) {
+    return handleDocumentsRouteError(error, "documents.versions.list");
+  }
+}
+async function POST(request, context) {
+  try {
+    const documentId = await resolveId(context);
+    const ctx = await resolveDocumentsContext(request, ["documents.edit"]);
+    await assertTier(ctx.em, documentId, ctx.auth, "editor");
+    await assertDocumentNotArchived(ctx, documentId);
+    const input = versionCreateSchema.parse(await readBody(request));
+    const guardResult = await validateMutationGuard(ctx, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,
+      resourceId: documentId,
+      operation: "create",
+      mutationPayload: input,
+      mutationPayloadSchema: versionCreateSchema
+    });
+    const commandInput = {
+      ...input,
+      documentId,
+      versionId: randomUUID(),
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId
+    };
+    const { result, logEntry } = await resolveDocumentsCommandBus(ctx).execute("documents.version.create", {
+      input: commandInput,
+      ctx: buildDocumentsCommandRuntimeContext(ctx)
+    });
+    await runMutationGuardAfterSuccess(ctx, guardResult, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,
+      resourceId: documentId,
+      operation: "create"
+    });
+    const response = NextResponse.json({
+      id: result.id,
+      label: sanitizeDocumentVersionLabel(result.label),
+      createdByUserId: result.createdByUserId,
+      createdAt: result.createdAt
+    }, { status: 201 });
+    return attachDocumentsOperationMetadata(response, logEntry, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,
+      resourceId: result.id
+    });
+  } catch (error) {
+    return handleDocumentsRouteError(error, "documents.versions.create");
+  }
+}
+const openApi = withDocumentsContextErrors({
+  tag: "Documents",
+  summary: "Document versions",
+  pathParams: z.object({ id: z.string().uuid() }),
+  methods: {
+    GET: {
+      summary: "List document versions",
+      query: versionListQuerySchema,
+      responses: [{ status: 200, description: "Document version metadata", schema: versionListResponseSchema }],
+      errors: [
+        { status: 401, description: "Unauthorized", schema: routeErrorSchema },
+        { status: 403, description: "Forbidden", schema: routeErrorSchema }
+      ]
+    },
+    POST: {
+      summary: "Create document version snapshot",
+      requestBody: { contentType: "application/json", schema: versionCreateSchema },
+      responses: [{ status: 201, description: "Version snapshot created", schema: versionCreateResponseSchema }],
+      errors: [
+        { status: 400, description: "Validation failed", schema: routeErrorSchema },
+        { status: 401, description: "Unauthorized", schema: routeErrorSchema },
+        { status: 403, description: "Forbidden", schema: routeErrorSchema },
+        { status: 413, description: "Request body, document content, or version history exceeds its safe storage bound", schema: routeErrorSchema }
+      ]
+    }
+  }
+});
+var route_default = { GET, POST };
+export {
+  GET,
+  POST,
+  route_default as default,
+  metadata,
+  openApi,
+  versionCreateSchema,
+  versionListQuerySchema
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/documents/api/[id]/versions/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/documents/api/%5Bid%5D/versions/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport { randomUUID } from 'node:crypto'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { findAndCountWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { DocumentVersion } from '../../../data/entities'\nimport { DOCUMENTS_ENTITY_IDS } from '../../../lib/constants'\nimport { DOCUMENTS_VERSION_LIST_PAGE_SIZE } from '../../../lib/historyLimits'\nimport { assertTier } from '../../../lib/permissions'\nimport { resolveUserLabels } from '../../../lib/userLabels'\nimport {\n  assertDocumentNotArchived,\n  handleDocumentsRouteError,\n  readBody,\n  resolveDocumentsContext,\n  routeErrorSchema,\n  runMutationGuardAfterSuccess,\n  validateMutationGuard,\n  withDocumentsContextErrors,\n} from '../../_shared'\nimport {\n  attachDocumentsOperationMetadata,\n  buildDocumentsCommandRuntimeContext,\n  resolveDocumentsCommandBus,\n} from '../../_commands'\nimport type { CreateVersionCommandInput } from '../../../commands/versions'\nimport { documentVersionLabelSchema } from '../../../data/validators'\nimport { sanitizeDocumentVersionLabel } from '../../../lib/versionLabels'\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nexport const versionCreateSchema = z.object({\n  label: documentVersionLabelSchema,\n})\n\nexport const versionListQuerySchema = z.object({\n  page: z.coerce.number().int().min(1).max(10_000).default(1),\n  pageSize: z.coerce.number().int().min(1).max(DOCUMENTS_VERSION_LIST_PAGE_SIZE)\n    .default(DOCUMENTS_VERSION_LIST_PAGE_SIZE),\n})\n\nconst versionListItemSchema = z.object({\n  id: z.string().uuid(),\n  label: z.string().nullable(),\n  createdByUserId: z.string().uuid(),\n  createdByLabel: z.string().nullable(),\n  createdAt: z.string(),\n})\n\nconst versionListResponseSchema = z.object({\n  items: z.array(versionListItemSchema),\n  page: z.number().int().positive(),\n  pageSize: z.number().int().positive(),\n  total: z.number().int().nonnegative(),\n  totalPages: z.number().int().positive(),\n})\n\nconst versionCreateResponseSchema = z.object({\n  id: z.string().uuid(),\n  label: z.string().nullable(),\n  createdByUserId: z.string().uuid(),\n  createdAt: z.string(),\n})\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['documents.view'] },\n  POST: { requireAuth: true, requireFeatures: ['documents.edit'] },\n}\n\nasync function resolveId(context: RouteContext): Promise<string> {\n  const params = await context.params\n  return params.id\n}\n\nfunction serializeVersion(version: DocumentVersion): z.infer<typeof versionCreateResponseSchema> {\n  return {\n    id: version.id,\n    label: sanitizeDocumentVersionLabel(version.label),\n    createdByUserId: version.createdByUserId,\n    createdAt: version.createdAt.toISOString(),\n  }\n}\n\nexport async function GET(request: Request, context: RouteContext): Promise<Response> {\n  try {\n    const documentId = await resolveId(context)\n    const ctx = await resolveDocumentsContext(request, ['documents.view'])\n    await assertTier(ctx.em, documentId, ctx.auth, 'viewer')\n    const url = new URL(request.url)\n    const query = versionListQuerySchema.parse(Object.fromEntries(url.searchParams.entries()))\n    const [versions, total] = await findAndCountWithDecryption(\n      ctx.em,\n      DocumentVersion,\n      {\n        documentId,\n        tenantId: ctx.tenantId,\n        organizationId: ctx.organizationId,\n      },\n      {\n        fields: ['id', 'label', 'createdByUserId', 'createdAt'],\n        orderBy: { createdAt: 'DESC', id: 'ASC' },\n        limit: query.pageSize,\n        offset: (query.page - 1) * query.pageSize,\n      },\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n    )\n    const labels = await resolveUserLabels(\n      ctx.container,\n      { tenantId: ctx.tenantId, organizationId: ctx.organizationId },\n      versions.map((version) => version.createdByUserId),\n    )\n\n    return NextResponse.json({\n      items: versions.map((version) => ({\n        ...serializeVersion(version),\n        createdByLabel: labels.get(version.createdByUserId)?.label ?? null,\n      })),\n      page: query.page,\n      pageSize: query.pageSize,\n      total,\n      totalPages: Math.max(1, Math.ceil(total / query.pageSize)),\n    })\n  } catch (error) {\n    return handleDocumentsRouteError(error, 'documents.versions.list')\n  }\n}\n\nexport async function POST(request: Request, context: RouteContext): Promise<Response> {\n  try {\n    const documentId = await resolveId(context)\n    const ctx = await resolveDocumentsContext(request, ['documents.edit'])\n    await assertTier(ctx.em, documentId, ctx.auth, 'editor')\n    await assertDocumentNotArchived(ctx, documentId)\n    const input = versionCreateSchema.parse(await readBody(request))\n    const guardResult = await validateMutationGuard(ctx, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,\n      resourceId: documentId,\n      operation: 'create',\n      mutationPayload: input,\n      mutationPayloadSchema: versionCreateSchema,\n    })\n    const commandInput: CreateVersionCommandInput = {\n      ...input,\n      documentId,\n      versionId: randomUUID(),\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n    }\n    const { result, logEntry } = await resolveDocumentsCommandBus(ctx).execute<\n      CreateVersionCommandInput,\n      z.infer<typeof versionCreateResponseSchema>\n    >('documents.version.create', {\n      input: commandInput,\n      ctx: buildDocumentsCommandRuntimeContext(ctx),\n    })\n    await runMutationGuardAfterSuccess(ctx, guardResult, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,\n      resourceId: documentId,\n      operation: 'create',\n    })\n\n    const response = NextResponse.json({\n      id: result.id,\n      label: sanitizeDocumentVersionLabel(result.label),\n      createdByUserId: result.createdByUserId,\n      createdAt: result.createdAt,\n    }, { status: 201 })\n    return attachDocumentsOperationMetadata(response, logEntry, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentVersion,\n      resourceId: result.id,\n    })\n  } catch (error) {\n    return handleDocumentsRouteError(error, 'documents.versions.create')\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = withDocumentsContextErrors({\n  tag: 'Documents',\n  summary: 'Document versions',\n  pathParams: z.object({ id: z.string().uuid() }),\n  methods: {\n    GET: {\n      summary: 'List document versions',\n      query: versionListQuerySchema,\n      responses: [{ status: 200, description: 'Document version metadata', schema: versionListResponseSchema }],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: routeErrorSchema },\n        { status: 403, description: 'Forbidden', schema: routeErrorSchema },\n      ],\n    },\n    POST: {\n      summary: 'Create document version snapshot',\n      requestBody: { contentType: 'application/json', schema: versionCreateSchema },\n      responses: [{ status: 201, description: 'Version snapshot created', schema: versionCreateResponseSchema }],\n      errors: [\n        { status: 400, description: 'Validation failed', schema: routeErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: routeErrorSchema },\n        { status: 403, description: 'Forbidden', schema: routeErrorSchema },\n        { status: 413, description: 'Request body, document content, or version history exceeds its safe storage bound', schema: routeErrorSchema },\n      ],\n    },\n  },\n})\n\nexport default { GET, POST }\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAClB,SAAS,kBAAkB;AAE3B,SAAS,kCAAkC;AAC3C,SAAS,uBAAuB;AAChC,SAAS,4BAA4B;AACrC,SAAS,wCAAwC;AACjD,SAAS,kBAAkB;AAC3B,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,kCAAkC;AAC3C,SAAS,oCAAoC;AAMtC,MAAM,sBAAsB,EAAE,OAAO;AAAA,EAC1C,OAAO;AACT,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,MAAM,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAM,EAAE,QAAQ,CAAC;AAAA,EAC1D,UAAU,EAAE,OAAO,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,gCAAgC,EAC1E,QAAQ,gCAAgC;AAC7C,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EACpC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACxC,CAAC;AAED,MAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,WAAW,EAAE,OAAO;AACtB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC9D,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACjE;AAEA,eAAe,UAAU,SAAwC;AAC/D,QAAM,SAAS,MAAM,QAAQ;AAC7B,SAAO,OAAO;AAChB;AAEA,SAAS,iBAAiB,SAAuE;AAC/F,SAAO;AAAA,IACL,IAAI,QAAQ;AAAA,IACZ,OAAO,6BAA6B,QAAQ,KAAK;AAAA,IACjD,iBAAiB,QAAQ;AAAA,IACzB,WAAW,QAAQ,UAAU,YAAY;AAAA,EAC3C;AACF;AAEA,eAAsB,IAAI,SAAkB,SAA0C;AACpF,MAAI;AACF,UAAM,aAAa,MAAM,UAAU,OAAO;AAC1C,UAAM,MAAM,MAAM,wBAAwB,SAAS,CAAC,gBAAgB,CAAC;AACrE,UAAM,WAAW,IAAI,IAAI,YAAY,IAAI,MAAM,QAAQ;AACvD,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,QAAQ,uBAAuB,MAAM,OAAO,YAAY,IAAI,aAAa,QAAQ,CAAC,CAAC;AACzF,UAAM,CAAC,UAAU,KAAK,IAAI,MAAM;AAAA,MAC9B,IAAI;AAAA,MACJ;AAAA,MACA;AAAA,QACE;AAAA,QACA,UAAU,IAAI;AAAA,QACd,gBAAgB,IAAI;AAAA,MACtB;AAAA,MACA;AAAA,QACE,QAAQ,CAAC,MAAM,SAAS,mBAAmB,WAAW;AAAA,QACtD,SAAS,EAAE,WAAW,QAAQ,IAAI,MAAM;AAAA,QACxC,OAAO,MAAM;AAAA,QACb,SAAS,MAAM,OAAO,KAAK,MAAM;AAAA,MACnC;AAAA,MACA,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,IAC/D;AACA,UAAM,SAAS,MAAM;AAAA,MACnB,IAAI;AAAA,MACJ,EAAE,UAAU,IAAI,UAAU,gBAAgB,IAAI,eAAe;AAAA,MAC7D,SAAS,IAAI,CAAC,YAAY,QAAQ,eAAe;AAAA,IACnD;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,OAAO,SAAS,IAAI,CAAC,aAAa;AAAA,QAChC,GAAG,iBAAiB,OAAO;AAAA,QAC3B,gBAAgB,OAAO,IAAI,QAAQ,eAAe,GAAG,SAAS;AAAA,MAChE,EAAE;AAAA,MACF,MAAM,MAAM;AAAA,MACZ,UAAU,MAAM;AAAA,MAChB;AAAA,MACA,YAAY,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,MAAM,QAAQ,CAAC;AAAA,IAC3D,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,0BAA0B,OAAO,yBAAyB;AAAA,EACnE;AACF;AAEA,eAAsB,KAAK,SAAkB,SAA0C;AACrF,MAAI;AACF,UAAM,aAAa,MAAM,UAAU,OAAO;AAC1C,UAAM,MAAM,MAAM,wBAAwB,SAAS,CAAC,gBAAgB,CAAC;AACrE,UAAM,WAAW,IAAI,IAAI,YAAY,IAAI,MAAM,QAAQ;AACvD,UAAM,0BAA0B,KAAK,UAAU;AAC/C,UAAM,QAAQ,oBAAoB,MAAM,MAAM,SAAS,OAAO,CAAC;AAC/D,UAAM,cAAc,MAAM,sBAAsB,KAAK;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,iBAAiB;AAAA,MACjB,uBAAuB;AAAA,IACzB,CAAC;AACD,UAAM,eAA0C;AAAA,MAC9C,GAAG;AAAA,MACH;AAAA,MACA,WAAW,WAAW;AAAA,MACtB,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,IACtB;AACA,UAAM,EAAE,QAAQ,SAAS,IAAI,MAAM,2BAA2B,GAAG,EAAE,QAGjE,4BAA4B;AAAA,MAC5B,OAAO;AAAA,MACP,KAAK,oCAAoC,GAAG;AAAA,IAC9C,CAAC;AACD,UAAM,6BAA6B,KAAK,aAAa;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY;AAAA,MACZ,WAAW;AAAA,IACb,CAAC;AAED,UAAM,WAAW,aAAa,KAAK;AAAA,MACjC,IAAI,OAAO;AAAA,MACX,OAAO,6BAA6B,OAAO,KAAK;AAAA,MAChD,iBAAiB,OAAO;AAAA,MACxB,WAAW,OAAO;AAAA,IACpB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClB,WAAO,iCAAiC,UAAU,UAAU;AAAA,MAC1D,cAAc,qBAAqB;AAAA,MACnC,YAAY,OAAO;AAAA,IACrB,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,0BAA0B,OAAO,2BAA2B;AAAA,EACrE;AACF;AAEO,MAAM,UAA2B,2BAA2B;AAAA,EACjE,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC9C,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,OAAO;AAAA,MACP,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,6BAA6B,QAAQ,0BAA0B,CAAC;AAAA,MACxG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,iBAAiB;AAAA,MACpE;AAAA,IACF;AAAA,IACA,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aAAa,EAAE,aAAa,oBAAoB,QAAQ,oBAAoB;AAAA,MAC5E,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,4BAA4B,CAAC;AAAA,MACzG,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,iBAAiB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,iBAAiB;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,qFAAqF,QAAQ,iBAAiB;AAAA,MAC5I;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,IAAO,gBAAQ,EAAE,KAAK,KAAK;",
+  "names": []
+}

package/dist/modules/documents/api/[id]/watch/route.js

@@ -0,0 +1,97 @@
+import { randomUUID } from "node:crypto";
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { DOCUMENTS_ENTITY_IDS } from "../../../lib/constants.js";
+import {
+  buildDocumentsCommandRuntimeContext,
+  resolveDocumentsCommandBus
+} from "../../_commands.js";
+import {
+  handleDocumentsRouteError,
+  resolveActorUserId,
+  resolveDocumentsContext,
+  routeErrorSchema,
+  runMutationGuardAfterSuccess,
+  validateMutationGuard,
+  withDocumentsContextErrors
+} from "../../_shared.js";
+const toggleResponseSchema = z.object({
+  id: z.string().uuid(),
+  active: z.boolean()
+});
+const metadata = {
+  POST: { requireAuth: true, requireFeatures: ["documents.view"] },
+  DELETE: { requireAuth: true, requireFeatures: ["documents.view"] }
+};
+async function runWatchToggle(request, context, commandId, operation, errorScope) {
+  try {
+    const { id: documentId } = await context.params;
+    const ctx = await resolveDocumentsContext(request, ["documents.view"]);
+    const guardResult = await validateMutationGuard(ctx, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentWatcher,
+      resourceId: documentId,
+      operation,
+      mutationPayload: { documentId }
+    });
+    const input = {
+      tenantId: ctx.tenantId,
+      organizationId: ctx.organizationId,
+      documentId,
+      watcherId: randomUUID(),
+      actorUserId: resolveActorUserId(ctx.auth)
+    };
+    const commandBus = resolveDocumentsCommandBus(ctx);
+    const { result } = await commandBus.execute(
+      commandId,
+      { input, ctx: buildDocumentsCommandRuntimeContext(ctx) }
+    );
+    await runMutationGuardAfterSuccess(ctx, guardResult, {
+      resourceKind: DOCUMENTS_ENTITY_IDS.documentWatcher,
+      resourceId: documentId,
+      operation
+    });
+    return NextResponse.json({ id: result.id, active: result.active });
+  } catch (error) {
+    return handleDocumentsRouteError(error, errorScope);
+  }
+}
+async function POST(request, context) {
+  return runWatchToggle(request, context, "documents.watch.create", "create", "documents.watch.create");
+}
+async function DELETE(request, context) {
+  return runWatchToggle(request, context, "documents.watch.delete", "delete", "documents.watch.delete");
+}
+const openApi = withDocumentsContextErrors({
+  tag: "Documents",
+  summary: "Document watch toggle",
+  pathParams: z.object({ id: z.string().uuid() }),
+  methods: {
+    POST: {
+      summary: "Watch a document for activity notifications",
+      responses: [{ status: 200, description: "Watch state", schema: toggleResponseSchema }],
+      errors: [
+        { status: 401, description: "Unauthorized", schema: routeErrorSchema },
+        { status: 403, description: "Forbidden", schema: routeErrorSchema },
+        { status: 404, description: "Document not found", schema: routeErrorSchema },
+        { status: 422, description: "Watcher limit reached", schema: routeErrorSchema }
+      ]
+    },
+    DELETE: {
+      summary: "Stop watching a document (allowed even after access loss)",
+      responses: [{ status: 200, description: "Watch state", schema: toggleResponseSchema }],
+      errors: [
+        { status: 401, description: "Unauthorized", schema: routeErrorSchema },
+        { status: 403, description: "Forbidden", schema: routeErrorSchema }
+      ]
+    }
+  }
+});
+var route_default = { POST, DELETE };
+export {
+  DELETE,
+  POST,
+  route_default as default,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/documents/api/[id]/watch/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../src/modules/documents/api/%5Bid%5D/watch/route.ts"],
+  "sourcesContent": ["import { randomUUID } from 'node:crypto'\nimport { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { DOCUMENTS_ENTITY_IDS } from '../../../lib/constants'\nimport type { WatchCommandInput, WatchCommandResult } from '../../../commands/watchers'\nimport {\n  buildDocumentsCommandRuntimeContext,\n  resolveDocumentsCommandBus,\n} from '../../_commands'\nimport {\n  handleDocumentsRouteError,\n  resolveActorUserId,\n  resolveDocumentsContext,\n  routeErrorSchema,\n  runMutationGuardAfterSuccess,\n  validateMutationGuard,\n  type DocumentsRouteContext,\n  withDocumentsContextErrors,\n} from '../../_shared'\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nconst toggleResponseSchema = z.object({\n  id: z.string().uuid(),\n  active: z.boolean(),\n})\n\nexport const metadata = {\n  POST: { requireAuth: true, requireFeatures: ['documents.view'] },\n  DELETE: { requireAuth: true, requireFeatures: ['documents.view'] },\n}\n\nasync function runWatchToggle(\n  request: Request,\n  context: RouteContext,\n  commandId: 'documents.watch.create' | 'documents.watch.delete',\n  operation: 'create' | 'delete',\n  errorScope: string,\n): Promise<Response> {\n  try {\n    const { id: documentId } = await context.params\n    const ctx: DocumentsRouteContext = await resolveDocumentsContext(request, ['documents.view'])\n    const guardResult = await validateMutationGuard(ctx, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentWatcher,\n      resourceId: documentId,\n      operation,\n      mutationPayload: { documentId },\n    })\n\n    const input: WatchCommandInput = {\n      tenantId: ctx.tenantId,\n      organizationId: ctx.organizationId,\n      documentId,\n      watcherId: randomUUID(),\n      actorUserId: resolveActorUserId(ctx.auth),\n    }\n    const commandBus: CommandBus = resolveDocumentsCommandBus(ctx)\n    const { result } = await commandBus.execute<WatchCommandInput, WatchCommandResult>(\n      commandId,\n      { input, ctx: buildDocumentsCommandRuntimeContext(ctx) },\n    )\n    await runMutationGuardAfterSuccess(ctx, guardResult, {\n      resourceKind: DOCUMENTS_ENTITY_IDS.documentWatcher,\n      resourceId: documentId,\n      operation,\n    })\n    return NextResponse.json({ id: result.id, active: result.active })\n  } catch (error) {\n    return handleDocumentsRouteError(error, errorScope)\n  }\n}\n\nexport async function POST(request: Request, context: RouteContext): Promise<Response> {\n  return runWatchToggle(request, context, 'documents.watch.create', 'create', 'documents.watch.create')\n}\n\nexport async function DELETE(request: Request, context: RouteContext): Promise<Response> {\n  return runWatchToggle(request, context, 'documents.watch.delete', 'delete', 'documents.watch.delete')\n}\n\nexport const openApi: OpenApiRouteDoc = withDocumentsContextErrors({\n  tag: 'Documents',\n  summary: 'Document watch toggle',\n  pathParams: z.object({ id: z.string().uuid() }),\n  methods: {\n    POST: {\n      summary: 'Watch a document for activity notifications',\n      responses: [{ status: 200, description: 'Watch state', schema: toggleResponseSchema }],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: routeErrorSchema },\n        { status: 403, description: 'Forbidden', schema: routeErrorSchema },\n        { status: 404, description: 'Document not found', schema: routeErrorSchema },\n        { status: 422, description: 'Watcher limit reached', schema: routeErrorSchema },\n      ],\n    },\n    DELETE: {\n      summary: 'Stop watching a document (allowed even after access loss)',\n      responses: [{ status: 200, description: 'Watch state', schema: toggleResponseSchema }],\n      errors: [\n        { status: 401, description: 'Unauthorized', schema: routeErrorSchema },\n        { status: 403, description: 'Forbidden', schema: routeErrorSchema },\n      ],\n    },\n  },\n})\n\nexport default { POST, DELETE }\n"],
+  "mappings": "AAAA,SAAS,kBAAkB;AAC3B,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,4BAA4B;AAErC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AAMP,MAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,QAAQ,EAAE,QAAQ;AACpB,CAAC;AAEM,MAAM,WAAW;AAAA,EACtB,MAAM,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AAAA,EAC/D,QAAQ,EAAE,aAAa,MAAM,iBAAiB,CAAC,gBAAgB,EAAE;AACnE;AAEA,eAAe,eACb,SACA,SACA,WACA,WACA,YACmB;AACnB,MAAI;AACF,UAAM,EAAE,IAAI,WAAW,IAAI,MAAM,QAAQ;AACzC,UAAM,MAA6B,MAAM,wBAAwB,SAAS,CAAC,gBAAgB,CAAC;AAC5F,UAAM,cAAc,MAAM,sBAAsB,KAAK;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY;AAAA,MACZ;AAAA,MACA,iBAAiB,EAAE,WAAW;AAAA,IAChC,CAAC;AAED,UAAM,QAA2B;AAAA,MAC/B,UAAU,IAAI;AAAA,MACd,gBAAgB,IAAI;AAAA,MACpB;AAAA,MACA,WAAW,WAAW;AAAA,MACtB,aAAa,mBAAmB,IAAI,IAAI;AAAA,IAC1C;AACA,UAAM,aAAyB,2BAA2B,GAAG;AAC7D,UAAM,EAAE,OAAO,IAAI,MAAM,WAAW;AAAA,MAClC;AAAA,MACA,EAAE,OAAO,KAAK,oCAAoC,GAAG,EAAE;AAAA,IACzD;AACA,UAAM,6BAA6B,KAAK,aAAa;AAAA,MACnD,cAAc,qBAAqB;AAAA,MACnC,YAAY;AAAA,MACZ;AAAA,IACF,CAAC;AACD,WAAO,aAAa,KAAK,EAAE,IAAI,OAAO,IAAI,QAAQ,OAAO,OAAO,CAAC;AAAA,EACnE,SAAS,OAAO;AACd,WAAO,0BAA0B,OAAO,UAAU;AAAA,EACpD;AACF;AAEA,eAAsB,KAAK,SAAkB,SAA0C;AACrF,SAAO,eAAe,SAAS,SAAS,0BAA0B,UAAU,wBAAwB;AACtG;AAEA,eAAsB,OAAO,SAAkB,SAA0C;AACvF,SAAO,eAAe,SAAS,SAAS,0BAA0B,UAAU,wBAAwB;AACtG;AAEO,MAAM,UAA2B,2BAA2B;AAAA,EACjE,KAAK;AAAA,EACL,SAAS;AAAA,EACT,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAAA,EAC9C,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,eAAe,QAAQ,qBAAqB,CAAC;AAAA,MACrF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,iBAAiB;AAAA,QAClE,EAAE,QAAQ,KAAK,aAAa,sBAAsB,QAAQ,iBAAiB;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,iBAAiB;AAAA,MAChF;AAAA,IACF;AAAA,IACA,QAAQ;AAAA,MACN,SAAS;AAAA,MACT,WAAW,CAAC,EAAE,QAAQ,KAAK,aAAa,eAAe,QAAQ,qBAAqB,CAAC;AAAA,MACrF,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,iBAAiB;AAAA,QACrE,EAAE,QAAQ,KAAK,aAAa,aAAa,QAAQ,iBAAiB;AAAA,MACpE;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAED,IAAO,gBAAQ,EAAE,MAAM,OAAO;",
+  "names": []
+}

package/dist/modules/documents/api/_commands.js

@@ -0,0 +1,34 @@
+import { serializeOperationMetadata } from "@open-mercato/shared/lib/commands/operationMetadata";
+function resolveDocumentsCommandBus(ctx) {
+  return ctx.container.resolve("commandBus");
+}
+function buildDocumentsCommandRuntimeContext(ctx) {
+  return {
+    container: ctx.container,
+    auth: ctx.auth,
+    organizationScope: null,
+    selectedOrganizationId: ctx.organizationId,
+    organizationIds: [ctx.organizationId],
+    request: ctx.request
+  };
+}
+function attachDocumentsOperationMetadata(response, logEntry, defaults) {
+  if (!logEntry?.id || !logEntry.undoToken || !logEntry.commandId) return response;
+  const executedAt = logEntry.createdAt instanceof Date ? logEntry.createdAt.toISOString() : typeof logEntry.createdAt === "string" && logEntry.createdAt ? logEntry.createdAt : (/* @__PURE__ */ new Date()).toISOString();
+  response.headers.set("x-om-operation", serializeOperationMetadata({
+    id: logEntry.id,
+    undoToken: logEntry.undoToken,
+    commandId: logEntry.commandId,
+    actionLabel: logEntry.actionLabel ?? null,
+    resourceKind: logEntry.resourceKind ?? defaults.resourceKind,
+    resourceId: logEntry.resourceId ?? defaults.resourceId ?? null,
+    executedAt
+  }));
+  return response;
+}
+export {
+  attachDocumentsOperationMetadata,
+  buildDocumentsCommandRuntimeContext,
+  resolveDocumentsCommandBus
+};
+//# sourceMappingURL=_commands.js.map

package/dist/modules/documents/api/_commands.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/documents/api/_commands.ts"],
+  "sourcesContent": ["import type { CommandBus, CommandRuntimeContext } from '@open-mercato/shared/lib/commands'\nimport { serializeOperationMetadata } from '@open-mercato/shared/lib/commands/operationMetadata'\nimport type { DocumentsRouteContext } from './_shared'\n\ntype OperationLogLike = {\n  id?: string | null\n  undoToken?: string | null\n  commandId?: string | null\n  actionLabel?: string | null\n  resourceKind?: string | null\n  resourceId?: string | null\n  createdAt?: Date | string | null\n}\n\nexport function resolveDocumentsCommandBus(ctx: DocumentsRouteContext): CommandBus {\n  return ctx.container.resolve('commandBus') as CommandBus\n}\n\nexport function buildDocumentsCommandRuntimeContext(\n  ctx: DocumentsRouteContext,\n): CommandRuntimeContext {\n  return {\n    container: ctx.container,\n    auth: ctx.auth,\n    organizationScope: null,\n    selectedOrganizationId: ctx.organizationId,\n    organizationIds: [ctx.organizationId],\n    request: ctx.request,\n  }\n}\n\nexport function attachDocumentsOperationMetadata(\n  response: Response,\n  logEntry: OperationLogLike | null | undefined,\n  defaults: { resourceKind: string; resourceId?: string | null },\n): Response {\n  if (!logEntry?.id || !logEntry.undoToken || !logEntry.commandId) return response\n  const executedAt = logEntry.createdAt instanceof Date\n    ? logEntry.createdAt.toISOString()\n    : typeof logEntry.createdAt === 'string' && logEntry.createdAt\n      ? logEntry.createdAt\n      : new Date().toISOString()\n  response.headers.set('x-om-operation', serializeOperationMetadata({\n    id: logEntry.id,\n    undoToken: logEntry.undoToken,\n    commandId: logEntry.commandId,\n    actionLabel: logEntry.actionLabel ?? null,\n    resourceKind: logEntry.resourceKind ?? defaults.resourceKind,\n    resourceId: logEntry.resourceId ?? defaults.resourceId ?? null,\n    executedAt,\n  }))\n  return response\n}\n"],
+  "mappings": "AACA,SAAS,kCAAkC;AAapC,SAAS,2BAA2B,KAAwC;AACjF,SAAO,IAAI,UAAU,QAAQ,YAAY;AAC3C;AAEO,SAAS,oCACd,KACuB;AACvB,SAAO;AAAA,IACL,WAAW,IAAI;AAAA,IACf,MAAM,IAAI;AAAA,IACV,mBAAmB;AAAA,IACnB,wBAAwB,IAAI;AAAA,IAC5B,iBAAiB,CAAC,IAAI,cAAc;AAAA,IACpC,SAAS,IAAI;AAAA,EACf;AACF;AAEO,SAAS,iCACd,UACA,UACA,UACU;AACV,MAAI,CAAC,UAAU,MAAM,CAAC,SAAS,aAAa,CAAC,SAAS,UAAW,QAAO;AACxE,QAAM,aAAa,SAAS,qBAAqB,OAC7C,SAAS,UAAU,YAAY,IAC/B,OAAO,SAAS,cAAc,YAAY,SAAS,YACjD,SAAS,aACT,oBAAI,KAAK,GAAE,YAAY;AAC7B,WAAS,QAAQ,IAAI,kBAAkB,2BAA2B;AAAA,IAChE,IAAI,SAAS;AAAA,IACb,WAAW,SAAS;AAAA,IACpB,WAAW,SAAS;AAAA,IACpB,aAAa,SAAS,eAAe;AAAA,IACrC,cAAc,SAAS,gBAAgB,SAAS;AAAA,IAChD,YAAY,SAAS,cAAc,SAAS,cAAc;AAAA,IAC1D;AAAA,EACF,CAAC,CAAC;AACF,SAAO;AACT;",
+  "names": []
+}