@orthacms/content-server 0.4.2 → 0.4.3

package/dist/lib/views/domain/errors/saved-view-name-taken.error.d.ts

@@ -0,0 +1,5 @@
+/** The caller already holds a view by this name in the same workspace + scope. */
+export declare class SavedViewNameTakenError extends Error {
+    constructor(name: string);
+}
+//# sourceMappingURL=saved-view-name-taken.error.d.ts.map

package/dist/lib/views/domain/errors/saved-view-name-taken.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-name-taken.error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/saved-view-name-taken.error.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,qBAAa,uBAAwB,SAAQ,KAAK;gBAClC,IAAI,EAAE,MAAM;CAI3B"}

package/dist/lib/views/domain/errors/saved-view-name-taken.error.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewNameTakenError = void 0;
+/** The caller already holds a view by this name in the same workspace + scope. */
+class SavedViewNameTakenError extends Error {
+    constructor(name) {
+        super(`You already have a view named "${name}" for this list.`);
+        this.name = 'SavedViewNameTakenError';
+    }
+}
+exports.SavedViewNameTakenError = SavedViewNameTakenError;

package/dist/lib/views/domain/errors/saved-view-not-found.error.d.ts

@@ -0,0 +1,9 @@
+/**
+ * A saved view the caller may not read, or that does not exist. One error for
+ * both so the API cannot be used to probe which views other people hold — the
+ * controller maps it to a 404 either way.
+ */
+export declare class SavedViewNotFoundError extends Error {
+    constructor(id: string);
+}
+//# sourceMappingURL=saved-view-not-found.error.d.ts.map

package/dist/lib/views/domain/errors/saved-view-not-found.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-not-found.error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/saved-view-not-found.error.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;gBACjC,EAAE,EAAE,MAAM;CAIzB"}

package/dist/lib/views/domain/errors/saved-view-not-found.error.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewNotFoundError = void 0;
+/**
+ * A saved view the caller may not read, or that does not exist. One error for
+ * both so the API cannot be used to probe which views other people hold — the
+ * controller maps it to a 404 either way.
+ */
+class SavedViewNotFoundError extends Error {
+    constructor(id) {
+        super(`Saved view "${id}" was not found.`);
+        this.name = 'SavedViewNotFoundError';
+    }
+}
+exports.SavedViewNotFoundError = SavedViewNotFoundError;

package/dist/lib/views/domain/saved-view.d.ts

@@ -0,0 +1,66 @@
+/**
+ * A saved list view — the named slice of a collection an editor returns to.
+ *
+ * Framework-free by ADR-0003: this module is the contract the HTTP layer, the
+ * repository adapter and the admin all agree on, and it imports nothing.
+ */
+/** Who may see a saved view. */
+export declare const VIEW_VISIBILITY: {
+    /** Only its owner. */
+    readonly Private: "private";
+    /** Every member of the workspace it belongs to. */
+    readonly Workspace: "workspace";
+};
+/** One visibility value. */
+export type ViewVisibility = (typeof VIEW_VISIBILITY)[keyof typeof VIEW_VISIBILITY];
+/** Every visibility, for validators and the OpenAPI enum. */
+export declare const VIEW_VISIBILITY_VALUES: ("private" | "workspace")[];
+/**
+ * The slice a view restores, stored as one opaque-ish JSON document.
+ *
+ * Deliberately mirrors the **URL params** the records page already owns rather
+ * than re-modelling them: `filter` and `sort` are the raw `?filter=` / `?sort=`
+ * strings, so a view round-trips through the same code path a hand-edited link
+ * does. Two things are absent on purpose — `search` is a one-off question, not
+ * a property of the slice, and `page` is a reading position, so a view always
+ * opens on the first page.
+ */
+export interface SavedViewPayload {
+    /** The `?filter=` JSON string, or absent for no filter. */
+    filter?: string;
+    /** The `?sort=` spec (`updatedAt` / `-updatedAt`), or absent for unsorted. */
+    sort?: string;
+    /** Rows per page. */
+    pageSize?: number;
+    /** Visible column ids, **in display order**. */
+    columns?: string[];
+    /**
+     * Slot-owned list params (the i18n plugin's `?locale=`, and whatever a
+     * later plugin contributes), as an opaque string map. Opaque because the
+     * keys come from `RECORDS_TOOLBAR_SLOT.listParamKeys` at runtime — naming
+     * them here would break the next plugin's params silently.
+     */
+    extra?: Record<string, string>;
+}
+/** A saved view as the API returns it. */
+export interface SavedView {
+    /** Primary key. */
+    id: string;
+    /** The list this view belongs to (`content:<typeName>`). */
+    scope: string;
+    /** Display name, unique per owner within a workspace + scope. */
+    name: string;
+    /** Who may see it. */
+    visibility: ViewVisibility;
+    /** The user who created it. */
+    ownerId: string;
+    /** Whether the caller owns it — the admin gates Save and Delete on this. */
+    isOwn: boolean;
+    /** Whether it is the caller's default for this scope. */
+    isDefault: boolean;
+    /** The slice it restores. */
+    payload: SavedViewPayload;
+    /** Last-modified timestamp, ISO-8601. */
+    updatedAt: string;
+}
+//# sourceMappingURL=saved-view.d.ts.map

package/dist/lib/views/domain/saved-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view.d.ts","sourceRoot":"","sources":["../../../../src/lib/views/domain/saved-view.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,gCAAgC;AAChC,eAAO,MAAM,eAAe;IACxB,sBAAsB;;IAEtB,mDAAmD;;CAE7C,CAAC;AAEX,4BAA4B;AAC5B,MAAM,MAAM,cAAc,GACtB,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAE3D,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,6BAAiC,CAAC;AAErE;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC7B,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACtB,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,UAAU,EAAE,cAAc,CAAC;IAC3B,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAC;IACf,yDAAyD;IACzD,SAAS,EAAE,OAAO,CAAC;IACnB,6BAA6B;IAC7B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACrB"}

package/dist/lib/views/domain/saved-view.js

@@ -0,0 +1,18 @@
+"use strict";
+/**
+ * A saved list view — the named slice of a collection an editor returns to.
+ *
+ * Framework-free by ADR-0003: this module is the contract the HTTP layer, the
+ * repository adapter and the admin all agree on, and it imports nothing.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VIEW_VISIBILITY_VALUES = exports.VIEW_VISIBILITY = void 0;
+/** Who may see a saved view. */
+exports.VIEW_VISIBILITY = {
+    /** Only its owner. */
+    Private: 'private',
+    /** Every member of the workspace it belongs to. */
+    Workspace: 'workspace'
+};
+/** Every visibility, for validators and the OpenAPI enum. */
+exports.VIEW_VISIBILITY_VALUES = Object.values(exports.VIEW_VISIBILITY);

package/dist/lib/views/domain/saved-view.repository.d.ts

@@ -0,0 +1,77 @@
+import type { SavedViewPayload, ViewVisibility } from './saved-view';
+/** A stored view row, before the per-caller flags are derived. */
+export interface SavedViewRecord {
+    /** Primary key. */
+    id: string;
+    /** The workspace it belongs to. */
+    workspaceId: string;
+    /** The list it is over. */
+    scope: string;
+    /** The user who saved it. */
+    ownerId: string;
+    /** Who may see it. */
+    visibility: ViewVisibility;
+    /** Display name. */
+    name: string;
+    /** The slice it restores. */
+    payload: SavedViewPayload;
+    /** Manual ordering within its scope. */
+    position: number;
+    /** Last-modified timestamp. */
+    updatedAt: Date;
+}
+/** Everything needed to store a new view. */
+export interface NewSavedView {
+    /** The workspace it belongs to. */
+    workspaceId: string;
+    /** The list it is over. */
+    scope: string;
+    /** The user saving it. */
+    ownerId: string;
+    /** Who may see it. */
+    visibility: ViewVisibility;
+    /** Display name. */
+    name: string;
+    /** The slice it restores. */
+    payload: SavedViewPayload;
+}
+/** The fields an update may change; absent keys are left alone. */
+export interface SavedViewPatch {
+    /** New display name. */
+    name?: string;
+    /** New visibility. */
+    visibility?: ViewVisibility;
+    /** New slice. */
+    payload?: SavedViewPayload;
+}
+/**
+ * Persistence port for saved views. The interface lives in `domain/` and the
+ * Drizzle adapter in `infrastructure/`, per ADR-0003 — nothing here knows about
+ * SQL, and the use-cases depend on this shape rather than on a table.
+ */
+export interface SavedViewRepository {
+    /**
+     * Every view in this workspace + scope the reader may see: their own
+     * (whatever the visibility) plus everyone's workspace-visible ones.
+     */
+    listVisible(workspaceId: string, scope: string, readerId: string): Promise<SavedViewRecord[]>;
+    /** One view by id, or `null` when it does not exist. */
+    findById(id: string): Promise<SavedViewRecord | null>;
+    /** How many views this owner already holds in this workspace + scope. */
+    countForOwner(workspaceId: string, scope: string, ownerId: string): Promise<number>;
+    /** Stores a new view and returns it. */
+    create(view: NewSavedView): Promise<SavedViewRecord>;
+    /** Applies a patch and returns the updated row. */
+    update(id: string, patch: SavedViewPatch): Promise<SavedViewRecord>;
+    /** Removes a view. Defaults pointing at it are cascaded away. */
+    delete(id: string): Promise<void>;
+    /** The view this reader defaults to for a scope, or `null`. */
+    findDefaultId(userId: string, scope: string): Promise<string | null>;
+    /** Makes `viewId` this user's default for the scope, replacing any prior. */
+    setDefault(userId: string, scope: string, viewId: string): Promise<void>;
+    /** Clears this user's default for the scope, if any. */
+    clearDefault(userId: string, scope: string): Promise<void>;
+}
+/** DI token for {@link SavedViewRepository}. */
+export declare const SAVED_VIEW_REPOSITORY: unique symbol;
+//# sourceMappingURL=saved-view.repository.d.ts.map

package/dist/lib/views/domain/saved-view.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view.repository.d.ts","sourceRoot":"","sources":["../../../../src/lib/views/domain/saved-view.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAErE,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC5B,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,UAAU,EAAE,cAAc,CAAC;IAC3B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,SAAS,EAAE,IAAI,CAAC;CACnB;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IACzB,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,UAAU,EAAE,cAAc,CAAC;IAC3B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,OAAO,EAAE,gBAAgB,CAAC;CAC7B;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC3B,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,iBAAiB;IACjB,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC;;;OAGG;IACH,WAAW,CACP,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAE9B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEtD,yEAAyE;IACzE,aAAa,CACT,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,wCAAwC;IACxC,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAErD,mDAAmD;IACnD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAEpE,iEAAiE;IACjE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElC,+DAA+D;IAC/D,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAErE,6EAA6E;IAC7E,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzE,wDAAwD;IACxD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED,gDAAgD;AAChD,eAAO,MAAM,qBAAqB,eAAkC,CAAC"}

package/dist/lib/views/domain/saved-view.repository.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SAVED_VIEW_REPOSITORY = void 0;
+/** DI token for {@link SavedViewRepository}. */
+exports.SAVED_VIEW_REPOSITORY = Symbol('SAVED_VIEW_REPOSITORY');

package/dist/lib/views/http/controllers/saved-views.controller.d.ts

@@ -0,0 +1,45 @@
+import { type PublicUser } from '@orthacms/identity-server';
+import type { SavedView } from '../../domain/saved-view';
+import { SavedViewsQuery } from '../../application/queries/saved-views.query';
+import { CreateSavedViewUseCase } from '../../application/use-cases/create-saved-view.use-case';
+import { UpdateSavedViewUseCase } from '../../application/use-cases/update-saved-view.use-case';
+import { DeleteSavedViewUseCase } from '../../application/use-cases/delete-saved-view.use-case';
+import { SetDefaultViewUseCase } from '../../application/use-cases/set-default-view.use-case';
+import { ViewScopeService } from '../../application/view-scope.service';
+import { CreateViewDto, ListViewsQueryDto, UpdateViewDto } from '../dto/save-view.dto';
+/**
+ * `/api/views` — a member's saved list views for one content type.
+ *
+ * A genuine CRUD resource over one thing, so it stays a single controller
+ * rather than five. Every route is workspace-scoped (`WorkspaceGuard` reads
+ * `X-Workspace-Id` and 403s a non-member) and gated on `content:read`: a view
+ * is a saved way of reading content, so anyone who cannot read content has no
+ * use for one. Sharing needs `views:share` on top, checked per write because it
+ * depends on the *body*, not the route.
+ *
+ * The stored payload is **not** a grant. It is replayed through the ordinary
+ * list query with the reader's own permissions, workspace scope and content
+ * grants, so a shared view shows a narrower reader fewer rows — never more.
+ */
+export declare class SavedViewsController {
+    private readonly views;
+    private readonly scopes;
+    private readonly createView;
+    private readonly updateView;
+    private readonly deleteView;
+    private readonly setDefault;
+    constructor(views: SavedViewsQuery, scopes: ViewScopeService, createView: CreateSavedViewUseCase, updateView: UpdateSavedViewUseCase, deleteView: DeleteSavedViewUseCase, setDefault: SetDefaultViewUseCase);
+    /** Every view this member may see for a list: their own plus the shared ones. */
+    list(query: ListViewsQueryDto, workspaceId: string, user?: PublicUser): Promise<SavedView[]>;
+    /** Saves the current slice as a new view. */
+    create(body: CreateViewDto, workspaceId: string, user?: PublicUser): Promise<SavedView>;
+    /** Renames, re-shares, or re-captures a view the caller owns. */
+    update(id: string, body: UpdateViewDto, workspaceId: string, user?: PublicUser): Promise<SavedView>;
+    /** Deletes a view the caller owns. */
+    remove(id: string, workspaceId: string, user?: PublicUser): Promise<void>;
+    /** Lands this member on the view when they open the list. */
+    makeDefault(id: string, workspaceId: string, user?: PublicUser): Promise<void>;
+    /** Clears the caller's default, so the list opens unfiltered again. */
+    clearDefault(id: string, workspaceId: string, user?: PublicUser): Promise<void>;
+}
+//# sourceMappingURL=saved-views.controller.d.ts.map

package/dist/lib/views/http/controllers/saved-views.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-views.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/http/controllers/saved-views.controller.ts"],"names":[],"mappings":"AAiBA,OAAO,EAKH,KAAK,UAAU,EAClB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EACH,aAAa,EACb,iBAAiB,EACjB,aAAa,EAChB,MAAM,sBAAsB,CAAC;AAG9B;;;;;;;;;;;;;GAaG;AACH,qBAIa,oBAAoB;IAEzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBALV,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,sBAAsB,EAClC,UAAU,EAAE,sBAAsB,EAClC,UAAU,EAAE,sBAAsB,EAClC,UAAU,EAAE,qBAAqB;IAGtD,iFAAiF;IAO3E,IAAI,CACG,KAAK,EAAE,iBAAiB,EACb,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,SAAS,EAAE,CAAC;IAMvB,6CAA6C;IAOvC,MAAM,CACA,IAAI,EAAE,aAAa,EACP,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,SAAS,CAAC;IAoBrB,iEAAiE;IAO3D,MAAM,CACoB,EAAE,EAAE,MAAM,EAC9B,IAAI,EAAE,aAAa,EACP,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,SAAS,CAAC;IASrB,sCAAsC;IAQhC,MAAM,CACoB,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,IAAI,CAAC;IAShB,6DAA6D;IAQvD,WAAW,CACe,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,IAAI,CAAC;IAShB,uEAAuE;IAQjE,YAAY,CACc,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,IAAI,CAAC;CAQnB"}

package/dist/lib/views/http/controllers/saved-views.controller.js

@@ -0,0 +1,216 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewsController = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const identity_server_1 = require("@orthacms/identity-server");
+const workspaces_server_1 = require("@orthacms/workspaces-server");
+const saved_view_1 = require("../../domain/saved-view");
+const saved_views_query_1 = require("../../application/queries/saved-views.query");
+const create_saved_view_use_case_1 = require("../../application/use-cases/create-saved-view.use-case");
+const update_saved_view_use_case_1 = require("../../application/use-cases/update-saved-view.use-case");
+const delete_saved_view_use_case_1 = require("../../application/use-cases/delete-saved-view.use-case");
+const set_default_view_use_case_1 = require("../../application/use-cases/set-default-view.use-case");
+const view_scope_service_1 = require("../../application/view-scope.service");
+const save_view_dto_1 = require("../dto/save-view.dto");
+const to_http_error_1 = require("./to-http-error");
+/**
+ * `/api/views` — a member's saved list views for one content type.
+ *
+ * A genuine CRUD resource over one thing, so it stays a single controller
+ * rather than five. Every route is workspace-scoped (`WorkspaceGuard` reads
+ * `X-Workspace-Id` and 403s a non-member) and gated on `content:read`: a view
+ * is a saved way of reading content, so anyone who cannot read content has no
+ * use for one. Sharing needs `views:share` on top, checked per write because it
+ * depends on the *body*, not the route.
+ *
+ * The stored payload is **not** a grant. It is replayed through the ordinary
+ * list query with the reader's own permissions, workspace scope and content
+ * grants, so a shared view shows a narrower reader fewer rows — never more.
+ */
+let SavedViewsController = class SavedViewsController {
+    views;
+    scopes;
+    createView;
+    updateView;
+    deleteView;
+    setDefault;
+    constructor(views, scopes, createView, updateView, deleteView, setDefault) {
+        this.views = views;
+        this.scopes = scopes;
+        this.createView = createView;
+        this.updateView = updateView;
+        this.deleteView = deleteView;
+        this.setDefault = setDefault;
+    }
+    /** Every view this member may see for a list: their own plus the shared ones. */
+    async list(query, workspaceId, user) {
+        const actor = requireUser(user);
+        await this.scopes.assertReachable(query.scope, workspaceId);
+        return this.views.list(workspaceId, query.scope, actor.id);
+    }
+    /** Saves the current slice as a new view. */
+    async create(body, workspaceId, user) {
+        const actor = requireUser(user);
+        await this.scopes.assertReachable(body.scope, workspaceId);
+        try {
+            return await this.createView.execute({
+                workspaceId,
+                scope: body.scope,
+                name: body.name,
+                visibility: body.visibility ?? saved_view_1.VIEW_VISIBILITY.Private,
+                payload: body.payload,
+                makeDefault: body.makeDefault
+            }, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+    /** Renames, re-shares, or re-captures a view the caller owns. */
+    async update(id, body, workspaceId, user) {
+        const actor = requireUser(user);
+        try {
+            return await this.updateView.execute(id, workspaceId, body, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+    /** Deletes a view the caller owns. */
+    async remove(id, workspaceId, user) {
+        const actor = requireUser(user);
+        try {
+            await this.deleteView.execute(id, workspaceId, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+    /** Lands this member on the view when they open the list. */
+    async makeDefault(id, workspaceId, user) {
+        const actor = requireUser(user);
+        try {
+            await this.setDefault.execute(id, workspaceId, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+    /** Clears the caller's default, so the list opens unfiltered again. */
+    async clearDefault(id, workspaceId, user) {
+        const actor = requireUser(user);
+        try {
+            await this.setDefault.executeClear(id, workspaceId, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+};
+exports.SavedViewsController = SavedViewsController;
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'List the saved views for one content type',
+        description: 'Returns the caller’s own views at any visibility plus every workspace-shared view for the scope, ordered for the switcher.'
+    }),
+    (0, common_1.Get)(),
+    tslib_1.__param(0, (0, common_1.Query)()),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [save_view_dto_1.ListViewsQueryDto, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "list", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Save a new view',
+        description: 'Stores the filter/sort/columns slice under a name. `visibility: workspace` additionally requires `views:share`.'
+    }),
+    (0, common_1.Post)(),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [save_view_dto_1.CreateViewDto, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "create", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Update a saved view',
+        description: 'Owner-only. Send just the fields that change — `payload` on Save, `name` on a rename, `visibility` on share/unshare.'
+    }),
+    (0, common_1.Patch)(':id'),
+    tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    tslib_1.__param(1, (0, common_1.Body)()),
+    tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, save_view_dto_1.UpdateViewDto, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "update", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Delete a saved view',
+        description: 'Owner-only. Any member’s default pointing at it is cleared by the cascade.'
+    }),
+    (0, common_1.Delete)(':id'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "remove", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Make a view the caller’s default',
+        description: 'Not owner-gated: a default is the reader’s own landing choice, so any view they can see may be one.'
+    }),
+    (0, common_1.Put)(':id/default'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "makeDefault", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Clear the caller’s default view',
+        description: 'The list then opens with no filter. Idempotent — clearing an absent default succeeds.'
+    }),
+    (0, common_1.Delete)(':id/default'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "clearDefault", null);
+exports.SavedViewsController = SavedViewsController = tslib_1.__decorate([
+    (0, swagger_1.ApiTags)('views'),
+    (0, common_1.UseGuards)(identity_server_1.PermissionsGuard, workspaces_server_1.WorkspaceGuard),
+    (0, identity_server_1.RequirePermissions)(identity_server_1.PERMISSIONS.CONTENT_READ),
+    (0, common_1.Controller)('views'),
+    tslib_1.__metadata("design:paramtypes", [saved_views_query_1.SavedViewsQuery,
+        view_scope_service_1.ViewScopeService,
+        create_saved_view_use_case_1.CreateSavedViewUseCase,
+        update_saved_view_use_case_1.UpdateSavedViewUseCase,
+        delete_saved_view_use_case_1.DeleteSavedViewUseCase,
+        set_default_view_use_case_1.SetDefaultViewUseCase])
+], SavedViewsController);
+/**
+ * Narrows the optional `@CurrentUser()` to a present one. Every route here is
+ * behind the app-wide `AuthGuard`, so this cannot fire in practice — it exists
+ * so the use-cases take a `PublicUser` rather than an optional one.
+ */
+function requireUser(user) {
+    if (!user)
+        throw new common_1.UnauthorizedException();
+    return user;
+}

package/dist/lib/views/http/controllers/to-http-error.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Maps the saved-view domain errors onto HTTP. Domain errors stay
+ * transport-agnostic (ADR-0003), so every controller funnels through this one
+ * translation rather than each restating the status codes.
+ *
+ * Anything unrecognised is rethrown untouched — swallowing it here would turn a
+ * genuine fault into a misleading 4xx.
+ */
+export declare function toHttpError(error: unknown): never;
+//# sourceMappingURL=to-http-error.d.ts.map

package/dist/lib/views/http/controllers/to-http-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"to-http-error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/http/controllers/to-http-error.ts"],"names":[],"mappings":"AAYA;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAcjD"}

package/dist/lib/views/http/controllers/to-http-error.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toHttpError = toHttpError;
+const common_1 = require("@nestjs/common");
+const errors_1 = require("../../domain/errors");
+/**
+ * Maps the saved-view domain errors onto HTTP. Domain errors stay
+ * transport-agnostic (ADR-0003), so every controller funnels through this one
+ * translation rather than each restating the status codes.
+ *
+ * Anything unrecognised is rethrown untouched — swallowing it here would turn a
+ * genuine fault into a misleading 4xx.
+ */
+function toHttpError(error) {
+    if (error instanceof errors_1.SavedViewNotFoundError) {
+        throw new common_1.NotFoundException(error.message);
+    }
+    if (error instanceof errors_1.SavedViewForbiddenError) {
+        throw new common_1.ForbiddenException(error.message);
+    }
+    if (error instanceof errors_1.SavedViewNameTakenError ||
+        error instanceof errors_1.SavedViewLimitError) {
+        throw new common_1.ConflictException(error.message);
+    }
+    throw error;
+}

package/dist/lib/views/http/dto/save-view.dto.d.ts

@@ -0,0 +1,54 @@
+import { type ViewVisibility } from '../../domain/saved-view';
+/**
+ * The slice a view stores. Mirrors the records page's URL params rather than
+ * re-modelling them, so a saved view and a hand-edited link travel the same
+ * code path. `search` and `page` are absent by design — see
+ * {@link SavedViewPayload}.
+ */
+export declare class ViewPayloadDto {
+    /** The `?filter=` JSON string. */
+    filter?: string;
+    /** The `?sort=` spec. */
+    sort?: string;
+    /** Rows per page. */
+    pageSize?: number;
+    /** Visible column ids, in display order. */
+    columns?: string[];
+    /** Slot-owned list params (e.g. the i18n plugin's `locale`). */
+    extra?: Record<string, string>;
+}
+/** Body of `POST /api/views`. */
+export declare class CreateViewDto {
+    /**
+     * The list this view is over. v1 accepts content collections only, so a
+     * typo cannot quietly create a view nothing will ever list.
+     */
+    scope: string;
+    /** Display name. */
+    name: string;
+    /** Who may see it. Defaults to private. */
+    visibility?: ViewVisibility;
+    /** The slice it restores. */
+    payload: ViewPayloadDto;
+    /** Whether to land on this view when opening the list. */
+    makeDefault?: boolean;
+}
+/**
+ * Body of `PATCH /api/views/:id`. Every field optional — the switcher sends
+ * only `payload` on “Save”, only `name` on a rename, and only `visibility` on
+ * share/unshare.
+ */
+export declare class UpdateViewDto {
+    /** New display name. */
+    name?: string;
+    /** New visibility. */
+    visibility?: ViewVisibility;
+    /** New slice. */
+    payload?: ViewPayloadDto;
+}
+/** Query of `GET /api/views`. */
+export declare class ListViewsQueryDto {
+    /** The list to return views for. */
+    scope: string;
+}
+//# sourceMappingURL=save-view.dto.d.ts.map

package/dist/lib/views/http/dto/save-view.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-view.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/http/dto/save-view.dto.ts"],"names":[],"mappings":"AAuBA,OAAO,EAGH,KAAK,cAAc,EACtB,MAAM,yBAAyB,CAAC;AAUjC;;;;;GAKG;AACH,qBAAa,cAAc;IACvB,kCAAkC;IAYlC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,yBAAyB;IAWzB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,qBAAqB;IAYrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,4CAA4C;IAa5C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,gEAAgE;IAWhE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,iCAAiC;AACjC,qBAAa,aAAa;IACtB;;;OAGG;IAaH,KAAK,EAAG,MAAM,CAAC;IAEf,oBAAoB;IAcpB,IAAI,EAAG,MAAM,CAAC;IAEd,2CAA2C;IAS3C,UAAU,CAAC,EAAE,cAAc,CAAC;IAE5B,6BAA6B;IAO7B,OAAO,EAAG,cAAc,CAAC;IAEzB,0DAA0D;IAQ1D,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,qBAAa,aAAa;IACtB,wBAAwB;IAcxB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,sBAAsB;IAItB,UAAU,CAAC,EAAE,cAAc,CAAC;IAE5B,iBAAiB;IAKjB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,iCAAiC;AACjC,qBAAa,iBAAiB;IAC1B,oCAAoC;IAapC,KAAK,EAAG,MAAM,CAAC;CAClB"}