@orthacms/content-server 0.4.2 → 0.4.3

package/dist/lib/views/application/saved-view-access.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-access.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/views/application/saved-view-access.service.ts"],"names":[],"mappings":"AACA,OAAO,EACH,YAAY,EAGZ,kBAAkB,EAClB,KAAK,UAAU,EAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAGvE;;;;;;;;;;;;;GAaG;AACH,qBACa,sBAAsB;IAE3B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBADZ,WAAW,EAAE,kBAAkB,EAC/B,YAAY,EAAE,YAAY;IAG/C,wCAAwC;IACxC,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI;IAQ1D;;;OAGG;IACG,sBAAsB,CACxB,UAAU,EAAE,cAAc,EAC1B,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC;CAanB"}

package/dist/lib/views/application/saved-view-access.service.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewAccessService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const identity_server_1 = require("@orthacms/identity-server");
+const saved_view_1 = require("../domain/saved-view");
+const errors_1 = require("../domain/errors");
+/**
+ * The two authorization rules saved views add on top of the route guards.
+ *
+ * The guards already establish that the caller is authenticated, a member of
+ * the open workspace, and may read content. What is left is per-row and
+ * per-visibility, so it cannot live in a decorator:
+ *
+ *  - **Only the owner writes.** Editing or deleting someone else's view is a
+ *    403 even for an administrator — a shared view is its author's, and the
+ *    remedy for disagreeing with one is "Save as new", not a silent rewrite.
+ *  - **Sharing is a permission.** Making a view workspace-visible needs
+ *    `views:share`; a member without it still saves as many private views as
+ *    they like.
+ */
+let SavedViewAccessService = class SavedViewAccessService {
+    permissions;
+    accessPolicy;
+    constructor(permissions, accessPolicy) {
+        this.permissions = permissions;
+        this.accessPolicy = accessPolicy;
+    }
+    /** Throws unless `user` owns `view`. */
+    assertOwned(view, user) {
+        if (view.ownerId !== user.id) {
+            throw new errors_1.SavedViewForbiddenError('Only the person who saved a view can change it. Use “Save as new” instead.');
+        }
+    }
+    /**
+     * Throws unless `user` may store a view at `visibility`. Private views need
+     * nothing beyond membership; workspace-visible ones need `views:share`.
+     */
+    async assertCanUseVisibility(visibility, user) {
+        if (visibility !== saved_view_1.VIEW_VISIBILITY.Workspace)
+            return;
+        const granted = await this.permissions.forRole(user.roleId);
+        const allowed = this.accessPolicy.can({ userId: user.id, grantedPermissions: new Set(granted) }, identity_server_1.Permission.create(identity_server_1.PERMISSIONS.VIEWS_SHARE));
+        if (!allowed) {
+            throw new errors_1.SavedViewForbiddenError('Sharing a view with the workspace requires the “views:share” permission.');
+        }
+    }
+};
+exports.SavedViewAccessService = SavedViewAccessService;
+exports.SavedViewAccessService = SavedViewAccessService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [identity_server_1.PermissionsService,
+        identity_server_1.AccessPolicy])
+], SavedViewAccessService);

package/dist/lib/views/application/use-cases/create-saved-view.use-case.d.ts

@@ -0,0 +1,27 @@
+import type { PublicUser } from '@orthacms/identity-server';
+import type { SavedView, SavedViewPayload, ViewVisibility } from '../../domain/saved-view';
+import { type SavedViewRepository } from '../../domain/saved-view.repository';
+import { SavedViewAccessService } from '../saved-view-access.service';
+/** Input for {@link CreateSavedViewUseCase}. */
+export interface CreateSavedViewInput {
+    /** The workspace the view belongs to. */
+    workspaceId: string;
+    /** The list it is over (`content:<typeName>`). */
+    scope: string;
+    /** Display name, already trimmed by the DTO. */
+    name: string;
+    /** Who may see it. */
+    visibility: ViewVisibility;
+    /** The slice it restores. */
+    payload: SavedViewPayload;
+    /** Whether to make it the caller's default for this scope. */
+    makeDefault?: boolean;
+}
+/** Saves a new view for the calling user. */
+export declare class CreateSavedViewUseCase {
+    private readonly repository;
+    private readonly access;
+    constructor(repository: SavedViewRepository, access: SavedViewAccessService);
+    execute(input: CreateSavedViewInput, user: PublicUser): Promise<SavedView>;
+}
+//# sourceMappingURL=create-saved-view.use-case.d.ts.map

package/dist/lib/views/application/use-cases/create-saved-view.use-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-saved-view.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/application/use-cases/create-saved-view.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,KAAK,EACR,SAAS,EACT,gBAAgB,EAChB,cAAc,EACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEH,KAAK,mBAAmB,EAC3B,MAAM,oCAAoC,CAAC;AAM5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAGtE,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACjC,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,UAAU,EAAE,cAAc,CAAC;IAC3B,6BAA6B;IAC7B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,8DAA8D;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,6CAA6C;AAC7C,qBACa,sBAAsB;IAG3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,sBAAsB;IAG7C,OAAO,CACT,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,SAAS,CAAC;CAwCxB"}

package/dist/lib/views/application/use-cases/create-saved-view.use-case.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateSavedViewUseCase = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const utils_server_1 = require("@orthacms/utils-server");
+const saved_view_repository_1 = require("../../domain/saved-view.repository");
+const errors_1 = require("../../domain/errors");
+const views_constants_1 = require("../../views.constants");
+const saved_view_access_service_1 = require("../saved-view-access.service");
+const saved_views_query_1 = require("../queries/saved-views.query");
+/** Saves a new view for the calling user. */
+let CreateSavedViewUseCase = class CreateSavedViewUseCase {
+    repository;
+    access;
+    constructor(repository, access) {
+        this.repository = repository;
+        this.access = access;
+    }
+    async execute(input, user) {
+        await this.access.assertCanUseVisibility(input.visibility, user);
+        const held = await this.repository.countForOwner(input.workspaceId, input.scope, user.id);
+        if (held >= views_constants_1.VIEW_MAX_PER_SCOPE)
+            throw new errors_1.SavedViewLimitError();
+        // The unique index is the arbiter, not the count above: two concurrent
+        // saves of the same name both pass a read-then-write check and one of
+        // them has to lose at the constraint. Translate that loss into the same
+        // 409 a sequential duplicate gets.
+        let created;
+        try {
+            created = await this.repository.create({
+                workspaceId: input.workspaceId,
+                scope: input.scope,
+                ownerId: user.id,
+                visibility: input.visibility,
+                name: input.name,
+                payload: input.payload
+            });
+        }
+        catch (error) {
+            if ((0, utils_server_1.isUniqueViolation)(error)) {
+                throw new errors_1.SavedViewNameTakenError(input.name);
+            }
+            throw error;
+        }
+        if (input.makeDefault) {
+            await this.repository.setDefault(user.id, input.scope, created.id);
+        }
+        return (0, saved_views_query_1.toSavedView)(created, user.id, input.makeDefault ? created.id : null);
+    }
+};
+exports.CreateSavedViewUseCase = CreateSavedViewUseCase;
+exports.CreateSavedViewUseCase = CreateSavedViewUseCase = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(saved_view_repository_1.SAVED_VIEW_REPOSITORY)),
+    tslib_1.__metadata("design:paramtypes", [Object, saved_view_access_service_1.SavedViewAccessService])
+], CreateSavedViewUseCase);

package/dist/lib/views/application/use-cases/delete-saved-view.use-case.d.ts

@@ -0,0 +1,15 @@
+import type { PublicUser } from '@orthacms/identity-server';
+import { type SavedViewRepository } from '../../domain/saved-view.repository';
+import { SavedViewAccessService } from '../saved-view-access.service';
+/**
+ * Deletes a view the caller owns. Anyone else's default pointing at it is
+ * cascaded away by the FK, so they fall back to the unfiltered list rather than
+ * to a dangling id.
+ */
+export declare class DeleteSavedViewUseCase {
+    private readonly repository;
+    private readonly access;
+    constructor(repository: SavedViewRepository, access: SavedViewAccessService);
+    execute(id: string, workspaceId: string, user: PublicUser): Promise<void>;
+}
+//# sourceMappingURL=delete-saved-view.use-case.d.ts.map

package/dist/lib/views/application/use-cases/delete-saved-view.use-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-saved-view.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/application/use-cases/delete-saved-view.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAEH,KAAK,mBAAmB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE;;;;GAIG;AACH,qBACa,sBAAsB;IAG3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,sBAAsB;IAG7C,OAAO,CACT,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC;CAQnB"}

package/dist/lib/views/application/use-cases/delete-saved-view.use-case.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeleteSavedViewUseCase = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const saved_view_repository_1 = require("../../domain/saved-view.repository");
+const errors_1 = require("../../domain/errors");
+const saved_view_access_service_1 = require("../saved-view-access.service");
+/**
+ * Deletes a view the caller owns. Anyone else's default pointing at it is
+ * cascaded away by the FK, so they fall back to the unfiltered list rather than
+ * to a dangling id.
+ */
+let DeleteSavedViewUseCase = class DeleteSavedViewUseCase {
+    repository;
+    access;
+    constructor(repository, access) {
+        this.repository = repository;
+        this.access = access;
+    }
+    async execute(id, workspaceId, user) {
+        const existing = await this.repository.findById(id);
+        if (!existing || existing.workspaceId !== workspaceId) {
+            throw new errors_1.SavedViewNotFoundError(id);
+        }
+        this.access.assertOwned(existing, user);
+        await this.repository.delete(id);
+    }
+};
+exports.DeleteSavedViewUseCase = DeleteSavedViewUseCase;
+exports.DeleteSavedViewUseCase = DeleteSavedViewUseCase = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(saved_view_repository_1.SAVED_VIEW_REPOSITORY)),
+    tslib_1.__metadata("design:paramtypes", [Object, saved_view_access_service_1.SavedViewAccessService])
+], DeleteSavedViewUseCase);

package/dist/lib/views/application/use-cases/set-default-view.use-case.d.ts

@@ -0,0 +1,23 @@
+import type { PublicUser } from '@orthacms/identity-server';
+import { type SavedViewRepository } from '../../domain/saved-view.repository';
+/**
+ * Points a user's default for one list at a view, or clears it.
+ *
+ * Deliberately **not** owner-gated: a default is the reader's own landing
+ * choice, so anyone who can see a shared view may land on it. What is gated is
+ * visibility — the view has to be one this caller can actually read, which is
+ * what the ownership-or-shared check below establishes.
+ */
+export declare class SetDefaultViewUseCase {
+    private readonly repository;
+    constructor(repository: SavedViewRepository);
+    execute(id: string, workspaceId: string, user: PublicUser): Promise<void>;
+    /**
+     * Clears the caller's default for the scope `id` belongs to. Addressed by
+     * view id rather than by scope so the route sits beside its `PUT`
+     * counterpart instead of colliding with `DELETE /views/:id`. Idempotent:
+     * clearing when the default points elsewhere, or nowhere, still succeeds.
+     */
+    executeClear(id: string, workspaceId: string, user: PublicUser): Promise<void>;
+}
+//# sourceMappingURL=set-default-view.use-case.d.ts.map

package/dist/lib/views/application/use-cases/set-default-view.use-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-default-view.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/application/use-cases/set-default-view.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,EAEH,KAAK,mBAAmB,EAC3B,MAAM,oCAAoC,CAAC;AAG5C;;;;;;;GAOG;AACH,qBACa,qBAAqB;IAG1B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,mBAAmB;IAG9C,OAAO,CACT,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,YAAY,CACd,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC;CAOnB"}

package/dist/lib/views/application/use-cases/set-default-view.use-case.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SetDefaultViewUseCase = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const saved_view_1 = require("../../domain/saved-view");
+const saved_view_repository_1 = require("../../domain/saved-view.repository");
+const errors_1 = require("../../domain/errors");
+/**
+ * Points a user's default for one list at a view, or clears it.
+ *
+ * Deliberately **not** owner-gated: a default is the reader's own landing
+ * choice, so anyone who can see a shared view may land on it. What is gated is
+ * visibility — the view has to be one this caller can actually read, which is
+ * what the ownership-or-shared check below establishes.
+ */
+let SetDefaultViewUseCase = class SetDefaultViewUseCase {
+    repository;
+    constructor(repository) {
+        this.repository = repository;
+    }
+    async execute(id, workspaceId, user) {
+        const existing = await this.repository.findById(id);
+        const readable = existing &&
+            existing.workspaceId === workspaceId &&
+            (existing.ownerId === user.id ||
+                existing.visibility === saved_view_1.VIEW_VISIBILITY.Workspace);
+        if (!existing || !readable)
+            throw new errors_1.SavedViewNotFoundError(id);
+        await this.repository.setDefault(user.id, existing.scope, id);
+    }
+    /**
+     * Clears the caller's default for the scope `id` belongs to. Addressed by
+     * view id rather than by scope so the route sits beside its `PUT`
+     * counterpart instead of colliding with `DELETE /views/:id`. Idempotent:
+     * clearing when the default points elsewhere, or nowhere, still succeeds.
+     */
+    async executeClear(id, workspaceId, user) {
+        const existing = await this.repository.findById(id);
+        if (!existing || existing.workspaceId !== workspaceId) {
+            throw new errors_1.SavedViewNotFoundError(id);
+        }
+        await this.repository.clearDefault(user.id, existing.scope);
+    }
+};
+exports.SetDefaultViewUseCase = SetDefaultViewUseCase;
+exports.SetDefaultViewUseCase = SetDefaultViewUseCase = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(saved_view_repository_1.SAVED_VIEW_REPOSITORY)),
+    tslib_1.__metadata("design:paramtypes", [Object])
+], SetDefaultViewUseCase);

package/dist/lib/views/application/use-cases/update-saved-view.use-case.d.ts

@@ -0,0 +1,21 @@
+import type { PublicUser } from '@orthacms/identity-server';
+import type { SavedView, SavedViewPayload, ViewVisibility } from '../../domain/saved-view';
+import { type SavedViewRepository } from '../../domain/saved-view.repository';
+import { SavedViewAccessService } from '../saved-view-access.service';
+/** The fields `PATCH /api/views/:id` may change. */
+export interface UpdateSavedViewInput {
+    /** New display name. */
+    name?: string;
+    /** New visibility. */
+    visibility?: ViewVisibility;
+    /** New slice. */
+    payload?: SavedViewPayload;
+}
+/** Renames, re-shares, or re-captures an existing view. */
+export declare class UpdateSavedViewUseCase {
+    private readonly repository;
+    private readonly access;
+    constructor(repository: SavedViewRepository, access: SavedViewAccessService);
+    execute(id: string, workspaceId: string, input: UpdateSavedViewInput, user: PublicUser): Promise<SavedView>;
+}
+//# sourceMappingURL=update-saved-view.use-case.d.ts.map

package/dist/lib/views/application/use-cases/update-saved-view.use-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-saved-view.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/application/use-cases/update-saved-view.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,KAAK,EACR,SAAS,EACT,gBAAgB,EAChB,cAAc,EACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEH,KAAK,mBAAmB,EAC3B,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAGtE,oDAAoD;AACpD,MAAM,WAAW,oBAAoB;IACjC,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,iBAAiB;IACjB,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,2DAA2D;AAC3D,qBACa,sBAAsB;IAG3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,sBAAsB;IAG7C,OAAO,CACT,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,SAAS,CAAC;CA4CxB"}

package/dist/lib/views/application/use-cases/update-saved-view.use-case.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateSavedViewUseCase = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const utils_server_1 = require("@orthacms/utils-server");
+const saved_view_repository_1 = require("../../domain/saved-view.repository");
+const errors_1 = require("../../domain/errors");
+const saved_view_access_service_1 = require("../saved-view-access.service");
+const saved_views_query_1 = require("../queries/saved-views.query");
+/** Renames, re-shares, or re-captures an existing view. */
+let UpdateSavedViewUseCase = class UpdateSavedViewUseCase {
+    repository;
+    access;
+    constructor(repository, access) {
+        this.repository = repository;
+        this.access = access;
+    }
+    async execute(id, workspaceId, input, user) {
+        const existing = await this.repository.findById(id);
+        // The workspace check is part of the not-found decision, not a separate
+        // 403: an id from another workspace must read exactly like an unknown
+        // one, or the endpoint becomes a probe for views elsewhere.
+        if (!existing || existing.workspaceId !== workspaceId) {
+            throw new errors_1.SavedViewNotFoundError(id);
+        }
+        this.access.assertOwned(existing, user);
+        if (input.visibility !== undefined) {
+            await this.access.assertCanUseVisibility(input.visibility, user);
+        }
+        // Every field is optional, so `{}` is a valid body — and it would reach
+        // Drizzle as `.set({})`, which throws rather than updating nothing.
+        // Answer the row unchanged instead: a patch that asks for no change has
+        // already got what it asked for.
+        const changes = input.name !== undefined ||
+            input.visibility !== undefined ||
+            input.payload !== undefined;
+        if (!changes) {
+            const currentDefault = await this.repository.findDefaultId(user.id, existing.scope);
+            return (0, saved_views_query_1.toSavedView)(existing, user.id, currentDefault);
+        }
+        let updated;
+        try {
+            updated = await this.repository.update(id, input);
+        }
+        catch (error) {
+            if ((0, utils_server_1.isUniqueViolation)(error)) {
+                throw new errors_1.SavedViewNameTakenError(input.name ?? existing.name);
+            }
+            throw error;
+        }
+        const defaultId = await this.repository.findDefaultId(user.id, updated.scope);
+        return (0, saved_views_query_1.toSavedView)(updated, user.id, defaultId);
+    }
+};
+exports.UpdateSavedViewUseCase = UpdateSavedViewUseCase;
+exports.UpdateSavedViewUseCase = UpdateSavedViewUseCase = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(saved_view_repository_1.SAVED_VIEW_REPOSITORY)),
+    tslib_1.__metadata("design:paramtypes", [Object, saved_view_access_service_1.SavedViewAccessService])
+], UpdateSavedViewUseCase);

package/dist/lib/views/application/view-scope.service.d.ts

@@ -0,0 +1,25 @@
+import type { ContentTypeRegistry } from '../../registry/content-type-registry';
+import { WorkspaceGrantsQuery } from '../../content-types/queries/workspace-grants.query';
+/**
+ * Resolves a view's `scope` to a content type the open workspace may actually
+ * reach.
+ *
+ * Without this the views endpoint would be a way around
+ * {@link ContentGrantGuard}: `scope` names a content type, and an unchecked one
+ * lets a caller confirm that `content:salaries` exists in some workspace by
+ * saving a view over it. So the answer for an unknown type and for an ungranted
+ * one is the **same 404** the entries routes give — grants read before any
+ * registry decision, same status, same message.
+ */
+export declare class ViewScopeService {
+    private readonly registry;
+    private readonly grants;
+    constructor(registry: ContentTypeRegistry, grants: WorkspaceGrantsQuery);
+    /**
+     * Throws `NotFoundException` unless `scope` names a content type this
+     * workspace was granted. The DTO has already enforced the
+     * `content:<typeName>` shape.
+     */
+    assertReachable(scope: string, workspaceId: string): Promise<void>;
+}
+//# sourceMappingURL=view-scope.service.d.ts.map

package/dist/lib/views/application/view-scope.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-scope.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/views/application/view-scope.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAC;AAG1F;;;;;;;;;;GAUG;AACH,qBACa,gBAAgB;IAGrB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,oBAAoB;IAGjD;;;;OAIG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAO3E"}

package/dist/lib/views/application/view-scope.service.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ViewScopeService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const views_tokens_1 = require("../views.tokens");
+const workspace_grants_query_1 = require("../../content-types/queries/workspace-grants.query");
+const views_constants_1 = require("../views.constants");
+/**
+ * Resolves a view's `scope` to a content type the open workspace may actually
+ * reach.
+ *
+ * Without this the views endpoint would be a way around
+ * {@link ContentGrantGuard}: `scope` names a content type, and an unchecked one
+ * lets a caller confirm that `content:salaries` exists in some workspace by
+ * saving a view over it. So the answer for an unknown type and for an ungranted
+ * one is the **same 404** the entries routes give — grants read before any
+ * registry decision, same status, same message.
+ */
+let ViewScopeService = class ViewScopeService {
+    registry;
+    grants;
+    constructor(registry, grants) {
+        this.registry = registry;
+        this.grants = grants;
+    }
+    /**
+     * Throws `NotFoundException` unless `scope` names a content type this
+     * workspace was granted. The DTO has already enforced the
+     * `content:<typeName>` shape.
+     */
+    async assertReachable(scope, workspaceId) {
+        const typeName = scope.slice(views_constants_1.CONTENT_SCOPE_PREFIX.length);
+        const granted = await this.grants.grantedSlugs(workspaceId);
+        if (!granted.has(typeName) || !this.registry.get(typeName)) {
+            throw new common_1.NotFoundException(`Unknown content type "${typeName}".`);
+        }
+    }
+};
+exports.ViewScopeService = ViewScopeService;
+exports.ViewScopeService = ViewScopeService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, views_tokens_1.InjectViewContentRegistry)()),
+    tslib_1.__metadata("design:paramtypes", [Function, workspace_grants_query_1.WorkspaceGrantsQuery])
+], ViewScopeService);

package/dist/lib/views/content-views.module.d.ts

@@ -0,0 +1,22 @@
+import { type DynamicModule } from '@nestjs/common';
+import type { ContentTypeRegistry } from '../registry/content-type-registry';
+/**
+ * The saved-views module.
+ *
+ * A **second** module from this package rather than a branch of
+ * `ContentModule`, because it needs its own `ServerPlugin` entry — the contract
+ * carries exactly one `migrations` descriptor per plugin, and content's is
+ * already spent on the host-owned generated collection tables. Splitting the
+ * module keeps that seam honest: the views feature owns fixed tables it ships
+ * migrations for, and the content model's tables stay the host's.
+ *
+ * It provides the registry the plugin factory hands it under its **own** token
+ * (`VIEW_CONTENT_REGISTRY`), so `ViewScopeService` can resolve a scope without
+ * importing `ContentModule` — which would make the two plugins' load order
+ * load-bearing — and without two global modules both claiming
+ * `CONTENT_REGISTRY`.
+ */
+export declare class ContentViewsModule {
+    static forRoot(registry: ContentTypeRegistry): DynamicModule;
+}
+//# sourceMappingURL=content-views.module.d.ts.map

package/dist/lib/views/content-views.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-views.module.d.ts","sourceRoot":"","sources":["../../../src/lib/views/content-views.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAa7E;;;;;;;;;;;;;;;GAeG;AACH,qBACa,kBAAkB;IAC3B,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,GAAG,aAAa;CAuB/D"}

package/dist/lib/views/content-views.module.js

@@ -0,0 +1,63 @@
+"use strict";
+var ContentViewsModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContentViewsModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const workspace_grants_query_1 = require("../content-types/queries/workspace-grants.query");
+const views_tokens_1 = require("./views.tokens");
+const saved_view_repository_1 = require("./domain/saved-view.repository");
+const drizzle_saved_view_repository_1 = require("./infrastructure/persistence/drizzle-saved-view.repository");
+const saved_views_query_1 = require("./application/queries/saved-views.query");
+const saved_view_access_service_1 = require("./application/saved-view-access.service");
+const view_scope_service_1 = require("./application/view-scope.service");
+const create_saved_view_use_case_1 = require("./application/use-cases/create-saved-view.use-case");
+const update_saved_view_use_case_1 = require("./application/use-cases/update-saved-view.use-case");
+const delete_saved_view_use_case_1 = require("./application/use-cases/delete-saved-view.use-case");
+const set_default_view_use_case_1 = require("./application/use-cases/set-default-view.use-case");
+const saved_views_controller_1 = require("./http/controllers/saved-views.controller");
+/**
+ * The saved-views module.
+ *
+ * A **second** module from this package rather than a branch of
+ * `ContentModule`, because it needs its own `ServerPlugin` entry — the contract
+ * carries exactly one `migrations` descriptor per plugin, and content's is
+ * already spent on the host-owned generated collection tables. Splitting the
+ * module keeps that seam honest: the views feature owns fixed tables it ships
+ * migrations for, and the content model's tables stay the host's.
+ *
+ * It provides the registry the plugin factory hands it under its **own** token
+ * (`VIEW_CONTENT_REGISTRY`), so `ViewScopeService` can resolve a scope without
+ * importing `ContentModule` — which would make the two plugins' load order
+ * load-bearing — and without two global modules both claiming
+ * `CONTENT_REGISTRY`.
+ */
+let ContentViewsModule = ContentViewsModule_1 = class ContentViewsModule {
+    static forRoot(registry) {
+        return {
+            module: ContentViewsModule_1,
+            global: true,
+            controllers: [saved_views_controller_1.SavedViewsController],
+            providers: [
+                { provide: views_tokens_1.VIEW_CONTENT_REGISTRY, useValue: registry },
+                {
+                    provide: saved_view_repository_1.SAVED_VIEW_REPOSITORY,
+                    useClass: drizzle_saved_view_repository_1.DrizzleSavedViewRepository
+                },
+                workspace_grants_query_1.WorkspaceGrantsQuery,
+                saved_views_query_1.SavedViewsQuery,
+                saved_view_access_service_1.SavedViewAccessService,
+                view_scope_service_1.ViewScopeService,
+                create_saved_view_use_case_1.CreateSavedViewUseCase,
+                update_saved_view_use_case_1.UpdateSavedViewUseCase,
+                delete_saved_view_use_case_1.DeleteSavedViewUseCase,
+                set_default_view_use_case_1.SetDefaultViewUseCase
+            ],
+            exports: [saved_views_query_1.SavedViewsQuery]
+        };
+    }
+};
+exports.ContentViewsModule = ContentViewsModule;
+exports.ContentViewsModule = ContentViewsModule = ContentViewsModule_1 = tslib_1.__decorate([
+    (0, common_1.Module)({})
+], ContentViewsModule);

package/dist/lib/views/domain/errors/index.d.ts

@@ -0,0 +1,6 @@
+/** Transport-agnostic domain errors for saved views. */
+export { SavedViewNotFoundError } from './saved-view-not-found.error';
+export { SavedViewForbiddenError } from './saved-view-forbidden.error';
+export { SavedViewNameTakenError } from './saved-view-name-taken.error';
+export { SavedViewLimitError } from './saved-view-limit-error';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/views/domain/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/index.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/lib/views/domain/errors/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewLimitError = exports.SavedViewNameTakenError = exports.SavedViewForbiddenError = exports.SavedViewNotFoundError = void 0;
+/** Transport-agnostic domain errors for saved views. */
+var saved_view_not_found_error_1 = require("./saved-view-not-found.error");
+Object.defineProperty(exports, "SavedViewNotFoundError", { enumerable: true, get: function () { return saved_view_not_found_error_1.SavedViewNotFoundError; } });
+var saved_view_forbidden_error_1 = require("./saved-view-forbidden.error");
+Object.defineProperty(exports, "SavedViewForbiddenError", { enumerable: true, get: function () { return saved_view_forbidden_error_1.SavedViewForbiddenError; } });
+var saved_view_name_taken_error_1 = require("./saved-view-name-taken.error");
+Object.defineProperty(exports, "SavedViewNameTakenError", { enumerable: true, get: function () { return saved_view_name_taken_error_1.SavedViewNameTakenError; } });
+var saved_view_limit_error_1 = require("./saved-view-limit-error");
+Object.defineProperty(exports, "SavedViewLimitError", { enumerable: true, get: function () { return saved_view_limit_error_1.SavedViewLimitError; } });

package/dist/lib/views/domain/errors/saved-view-forbidden.error.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The caller may read the view but not perform this write — editing or deleting
+ * someone else's view, or sharing one without `views:share`. Distinct from
+ * {@link SavedViewNotFoundError} because the view's existence is already known
+ * to the caller (it is listed for them), so a 403 discloses nothing new.
+ */
+export declare class SavedViewForbiddenError extends Error {
+    constructor(reason: string);
+}
+//# sourceMappingURL=saved-view-forbidden.error.d.ts.map

package/dist/lib/views/domain/errors/saved-view-forbidden.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-forbidden.error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/saved-view-forbidden.error.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBAClC,MAAM,EAAE,MAAM;CAI7B"}

package/dist/lib/views/domain/errors/saved-view-forbidden.error.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewForbiddenError = void 0;
+/**
+ * The caller may read the view but not perform this write — editing or deleting
+ * someone else's view, or sharing one without `views:share`. Distinct from
+ * {@link SavedViewNotFoundError} because the view's existence is already known
+ * to the caller (it is listed for them), so a 403 discloses nothing new.
+ */
+class SavedViewForbiddenError extends Error {
+    constructor(reason) {
+        super(reason);
+        this.name = 'SavedViewForbiddenError';
+    }
+}
+exports.SavedViewForbiddenError = SavedViewForbiddenError;

package/dist/lib/views/domain/errors/saved-view-limit-error.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The caller has hit {@link VIEW_MAX_PER_SCOPE} views for one workspace + scope.
+ * A bound rather than a business rule: it keeps one account from filling the
+ * table, and the number is far above any realistic list of saved slices.
+ */
+export declare class SavedViewLimitError extends Error {
+    constructor();
+}
+//# sourceMappingURL=saved-view-limit-error.d.ts.map

package/dist/lib/views/domain/errors/saved-view-limit-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-limit-error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/saved-view-limit-error.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;;CAK7C"}

package/dist/lib/views/domain/errors/saved-view-limit-error.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewLimitError = void 0;
+const views_constants_1 = require("../../views.constants");
+/**
+ * The caller has hit {@link VIEW_MAX_PER_SCOPE} views for one workspace + scope.
+ * A bound rather than a business rule: it keeps one account from filling the
+ * table, and the number is far above any realistic list of saved slices.
+ */
+class SavedViewLimitError extends Error {
+    constructor() {
+        super(`You can save at most ${views_constants_1.VIEW_MAX_PER_SCOPE} views for one list.`);
+        this.name = 'SavedViewLimitError';
+    }
+}
+exports.SavedViewLimitError = SavedViewLimitError;