@orthacms/content-server 0.4.2 → 0.5.0

package/dist/lib/views/application/saved-view-access.service.d.ts

@@ -0,0 +1,30 @@
+import { AccessPolicy, PermissionsService, type PublicUser } from '@orthacms/identity-server';
+import { type ViewVisibility } from '../domain/saved-view';
+import type { SavedViewRecord } from '../domain/saved-view.repository';
+/**
+ * The two authorization rules saved views add on top of the route guards.
+ *
+ * The guards already establish that the caller is authenticated, a member of
+ * the open workspace, and may read content. What is left is per-row and
+ * per-visibility, so it cannot live in a decorator:
+ *
+ *  - **Only the owner writes.** Editing or deleting someone else's view is a
+ *    403 even for an administrator — a shared view is its author's, and the
+ *    remedy for disagreeing with one is "Save as new", not a silent rewrite.
+ *  - **Sharing is a permission.** Making a view workspace-visible needs
+ *    `views:share`; a member without it still saves as many private views as
+ *    they like.
+ */
+export declare class SavedViewAccessService {
+    private readonly permissions;
+    private readonly accessPolicy;
+    constructor(permissions: PermissionsService, accessPolicy: AccessPolicy);
+    /** Throws unless `user` owns `view`. */
+    assertOwned(view: SavedViewRecord, user: PublicUser): void;
+    /**
+     * Throws unless `user` may store a view at `visibility`. Private views need
+     * nothing beyond membership; workspace-visible ones need `views:share`.
+     */
+    assertCanUseVisibility(visibility: ViewVisibility, user: PublicUser): Promise<void>;
+}
+//# sourceMappingURL=saved-view-access.service.d.ts.map

package/dist/lib/views/application/saved-view-access.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-access.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/views/application/saved-view-access.service.ts"],"names":[],"mappings":"AACA,OAAO,EACH,YAAY,EAGZ,kBAAkB,EAClB,KAAK,UAAU,EAClB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAGvE;;;;;;;;;;;;;GAaG;AACH,qBACa,sBAAsB;IAE3B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,YAAY;gBADZ,WAAW,EAAE,kBAAkB,EAC/B,YAAY,EAAE,YAAY;IAG/C,wCAAwC;IACxC,WAAW,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI;IAQ1D;;;OAGG;IACG,sBAAsB,CACxB,UAAU,EAAE,cAAc,EAC1B,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC;CAanB"}

package/dist/lib/views/application/saved-view-access.service.js

@@ -0,0 +1,55 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewAccessService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const identity_server_1 = require("@orthacms/identity-server");
+const saved_view_1 = require("../domain/saved-view");
+const errors_1 = require("../domain/errors");
+/**
+ * The two authorization rules saved views add on top of the route guards.
+ *
+ * The guards already establish that the caller is authenticated, a member of
+ * the open workspace, and may read content. What is left is per-row and
+ * per-visibility, so it cannot live in a decorator:
+ *
+ *  - **Only the owner writes.** Editing or deleting someone else's view is a
+ *    403 even for an administrator — a shared view is its author's, and the
+ *    remedy for disagreeing with one is "Save as new", not a silent rewrite.
+ *  - **Sharing is a permission.** Making a view workspace-visible needs
+ *    `views:share`; a member without it still saves as many private views as
+ *    they like.
+ */
+let SavedViewAccessService = class SavedViewAccessService {
+    permissions;
+    accessPolicy;
+    constructor(permissions, accessPolicy) {
+        this.permissions = permissions;
+        this.accessPolicy = accessPolicy;
+    }
+    /** Throws unless `user` owns `view`. */
+    assertOwned(view, user) {
+        if (view.ownerId !== user.id) {
+            throw new errors_1.SavedViewForbiddenError('Only the person who saved a view can change it. Use “Save as new” instead.');
+        }
+    }
+    /**
+     * Throws unless `user` may store a view at `visibility`. Private views need
+     * nothing beyond membership; workspace-visible ones need `views:share`.
+     */
+    async assertCanUseVisibility(visibility, user) {
+        if (visibility !== saved_view_1.VIEW_VISIBILITY.Workspace)
+            return;
+        const granted = await this.permissions.forRole(user.roleId);
+        const allowed = this.accessPolicy.can({ userId: user.id, grantedPermissions: new Set(granted) }, identity_server_1.Permission.create(identity_server_1.PERMISSIONS.VIEWS_SHARE));
+        if (!allowed) {
+            throw new errors_1.SavedViewForbiddenError('Sharing a view with the workspace requires the “views:share” permission.');
+        }
+    }
+};
+exports.SavedViewAccessService = SavedViewAccessService;
+exports.SavedViewAccessService = SavedViewAccessService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__metadata("design:paramtypes", [identity_server_1.PermissionsService,
+        identity_server_1.AccessPolicy])
+], SavedViewAccessService);

package/dist/lib/views/application/use-cases/create-saved-view.use-case.d.ts

@@ -0,0 +1,30 @@
+import type { PublicUser } from '@orthacms/identity-server';
+import { OutboxWriter, UnitOfWork } from '@orthacms/database';
+import type { SavedView, SavedViewPayload, ViewVisibility } from '../../domain/saved-view';
+import { type SavedViewRepository } from '../../domain/saved-view.repository';
+import { SavedViewAccessService } from '../saved-view-access.service';
+/** Input for {@link CreateSavedViewUseCase}. */
+export interface CreateSavedViewInput {
+    /** The workspace the view belongs to. */
+    workspaceId: string;
+    /** The list it is over (`content:<typeName>`). */
+    scope: string;
+    /** Display name, already trimmed by the DTO. */
+    name: string;
+    /** Who may see it. */
+    visibility: ViewVisibility;
+    /** The slice it restores. */
+    payload: SavedViewPayload;
+    /** Whether to make it the caller's default for this scope. */
+    makeDefault?: boolean;
+}
+/** Saves a new view for the calling user. */
+export declare class CreateSavedViewUseCase {
+    private readonly repository;
+    private readonly access;
+    private readonly uow;
+    private readonly outbox;
+    constructor(repository: SavedViewRepository, access: SavedViewAccessService, uow: UnitOfWork, outbox: OutboxWriter);
+    execute(input: CreateSavedViewInput, user: PublicUser): Promise<SavedView>;
+}
+//# sourceMappingURL=create-saved-view.use-case.d.ts.map

package/dist/lib/views/application/use-cases/create-saved-view.use-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-saved-view.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/application/use-cases/create-saved-view.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAEH,YAAY,EACZ,UAAU,EACb,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EACR,SAAS,EACT,gBAAgB,EAChB,cAAc,EACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEH,KAAK,mBAAmB,EAC3B,MAAM,oCAAoC,CAAC;AAM5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAGtE,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACjC,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,UAAU,EAAE,cAAc,CAAC;IAC3B,6BAA6B;IAC7B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,8DAA8D;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,6CAA6C;AAC7C,qBACa,sBAAsB;IAG3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAHN,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,YAAY;IAGnC,OAAO,CACT,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,SAAS,CAAC;CAiExB"}

package/dist/lib/views/application/use-cases/create-saved-view.use-case.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateSavedViewUseCase = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const database_1 = require("@orthacms/database");
+const saved_view_events_1 = require("../../domain/events/saved-view-events");
+const utils_server_1 = require("@orthacms/utils-server");
+const saved_view_repository_1 = require("../../domain/saved-view.repository");
+const errors_1 = require("../../domain/errors");
+const views_constants_1 = require("../../views.constants");
+const saved_view_access_service_1 = require("../saved-view-access.service");
+const saved_views_query_1 = require("../queries/saved-views.query");
+/** Saves a new view for the calling user. */
+let CreateSavedViewUseCase = class CreateSavedViewUseCase {
+    repository;
+    access;
+    uow;
+    outbox;
+    constructor(repository, access, uow, outbox) {
+        this.repository = repository;
+        this.access = access;
+        this.uow = uow;
+        this.outbox = outbox;
+    }
+    async execute(input, user) {
+        await this.access.assertCanUseVisibility(input.visibility, user);
+        const held = await this.repository.countForOwner(input.workspaceId, input.scope, user.id);
+        if (held >= views_constants_1.VIEW_MAX_PER_SCOPE)
+            throw new errors_1.SavedViewLimitError();
+        // The unique index is the arbiter, not the count above: two concurrent
+        // saves of the same name both pass a read-then-write check and one of
+        // them has to lose at the constraint. Translate that loss into the same
+        // 409 a sequential duplicate gets.
+        let created;
+        try {
+            created = await this.uow.run(async () => {
+                const row = await this.repository.create({
+                    workspaceId: input.workspaceId,
+                    scope: input.scope,
+                    ownerId: user.id,
+                    visibility: input.visibility,
+                    name: input.name,
+                    payload: input.payload
+                });
+                await this.outbox.append((0, database_1.attachActor)([
+                    (0, saved_view_events_1.savedViewEvent)(saved_view_events_1.SAVED_VIEW_EVENT_KINDS.CREATED, row.id, {
+                        workspaceId: input.workspaceId,
+                        scope: input.scope,
+                        name: input.name,
+                        // The half that makes the row worth
+                        // keeping: a `workspace` view is shared
+                        // state everyone in the switcher sees.
+                        visibility: input.visibility
+                    })
+                ], { id: user.id, email: user.email ?? null }));
+                return row;
+            });
+        }
+        catch (error) {
+            if ((0, utils_server_1.isUniqueViolation)(error)) {
+                throw new errors_1.SavedViewNameTakenError(input.name);
+            }
+            throw error;
+        }
+        if (input.makeDefault) {
+            // Outside the run on purpose: a personal default raises no event
+            // (see `saved-view-events.ts`), so it has nothing to commit with.
+            await this.repository.setDefault(user.id, input.scope, created.id);
+        }
+        return (0, saved_views_query_1.toSavedView)(created, user.id, input.makeDefault ? created.id : null);
+    }
+};
+exports.CreateSavedViewUseCase = CreateSavedViewUseCase;
+exports.CreateSavedViewUseCase = CreateSavedViewUseCase = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(saved_view_repository_1.SAVED_VIEW_REPOSITORY)),
+    tslib_1.__metadata("design:paramtypes", [Object, saved_view_access_service_1.SavedViewAccessService,
+        database_1.UnitOfWork,
+        database_1.OutboxWriter])
+], CreateSavedViewUseCase);

package/dist/lib/views/application/use-cases/delete-saved-view.use-case.d.ts

@@ -0,0 +1,18 @@
+import type { PublicUser } from '@orthacms/identity-server';
+import { OutboxWriter, UnitOfWork } from '@orthacms/database';
+import { type SavedViewRepository } from '../../domain/saved-view.repository';
+import { SavedViewAccessService } from '../saved-view-access.service';
+/**
+ * Deletes a view the caller owns. Anyone else's default pointing at it is
+ * cascaded away by the FK, so they fall back to the unfiltered list rather than
+ * to a dangling id.
+ */
+export declare class DeleteSavedViewUseCase {
+    private readonly repository;
+    private readonly access;
+    private readonly uow;
+    private readonly outbox;
+    constructor(repository: SavedViewRepository, access: SavedViewAccessService, uow: UnitOfWork, outbox: OutboxWriter);
+    execute(id: string, workspaceId: string, user: PublicUser): Promise<void>;
+}
+//# sourceMappingURL=delete-saved-view.use-case.d.ts.map

package/dist/lib/views/application/use-cases/delete-saved-view.use-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-saved-view.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/application/use-cases/delete-saved-view.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAEH,YAAY,EACZ,UAAU,EACb,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAEH,KAAK,mBAAmB,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAEtE;;;;GAIG;AACH,qBACa,sBAAsB;IAG3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAHN,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,YAAY;IAGnC,OAAO,CACT,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC;CA0BnB"}

package/dist/lib/views/application/use-cases/delete-saved-view.use-case.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeleteSavedViewUseCase = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const database_1 = require("@orthacms/database");
+const saved_view_events_1 = require("../../domain/events/saved-view-events");
+const saved_view_repository_1 = require("../../domain/saved-view.repository");
+const errors_1 = require("../../domain/errors");
+const saved_view_access_service_1 = require("../saved-view-access.service");
+/**
+ * Deletes a view the caller owns. Anyone else's default pointing at it is
+ * cascaded away by the FK, so they fall back to the unfiltered list rather than
+ * to a dangling id.
+ */
+let DeleteSavedViewUseCase = class DeleteSavedViewUseCase {
+    repository;
+    access;
+    uow;
+    outbox;
+    constructor(repository, access, uow, outbox) {
+        this.repository = repository;
+        this.access = access;
+        this.uow = uow;
+        this.outbox = outbox;
+    }
+    async execute(id, workspaceId, user) {
+        const existing = await this.repository.findById(id);
+        if (!existing || existing.workspaceId !== workspaceId) {
+            throw new errors_1.SavedViewNotFoundError(id);
+        }
+        this.access.assertOwned(existing, user);
+        await this.uow.run(async () => {
+            await this.repository.delete(id);
+            // The view's own details, because this is the last place they
+            // exist — and a shared view leaving everyone's switcher is a
+            // change to what a team can see, not just to one person's list.
+            await this.outbox.append((0, database_1.attachActor)([
+                (0, saved_view_events_1.savedViewEvent)(saved_view_events_1.SAVED_VIEW_EVENT_KINDS.DELETED, id, {
+                    workspaceId,
+                    scope: existing.scope,
+                    name: existing.name,
+                    visibility: existing.visibility
+                })
+            ], { id: user.id, email: user.email ?? null }));
+        });
+    }
+};
+exports.DeleteSavedViewUseCase = DeleteSavedViewUseCase;
+exports.DeleteSavedViewUseCase = DeleteSavedViewUseCase = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(saved_view_repository_1.SAVED_VIEW_REPOSITORY)),
+    tslib_1.__metadata("design:paramtypes", [Object, saved_view_access_service_1.SavedViewAccessService,
+        database_1.UnitOfWork,
+        database_1.OutboxWriter])
+], DeleteSavedViewUseCase);

package/dist/lib/views/application/use-cases/set-default-view.use-case.d.ts

@@ -0,0 +1,23 @@
+import type { PublicUser } from '@orthacms/identity-server';
+import { type SavedViewRepository } from '../../domain/saved-view.repository';
+/**
+ * Points a user's default for one list at a view, or clears it.
+ *
+ * Deliberately **not** owner-gated: a default is the reader's own landing
+ * choice, so anyone who can see a shared view may land on it. What is gated is
+ * visibility — the view has to be one this caller can actually read, which is
+ * what the ownership-or-shared check below establishes.
+ */
+export declare class SetDefaultViewUseCase {
+    private readonly repository;
+    constructor(repository: SavedViewRepository);
+    execute(id: string, workspaceId: string, user: PublicUser): Promise<void>;
+    /**
+     * Clears the caller's default for the scope `id` belongs to. Addressed by
+     * view id rather than by scope so the route sits beside its `PUT`
+     * counterpart instead of colliding with `DELETE /views/:id`. Idempotent:
+     * clearing when the default points elsewhere, or nowhere, still succeeds.
+     */
+    executeClear(id: string, workspaceId: string, user: PublicUser): Promise<void>;
+}
+//# sourceMappingURL=set-default-view.use-case.d.ts.map

package/dist/lib/views/application/use-cases/set-default-view.use-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-default-view.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/application/use-cases/set-default-view.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAE5D,OAAO,EAEH,KAAK,mBAAmB,EAC3B,MAAM,oCAAoC,CAAC;AAG5C;;;;;;;GAOG;AACH,qBACa,qBAAqB;IAG1B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBAAV,UAAU,EAAE,mBAAmB;IAG9C,OAAO,CACT,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC;IAWhB;;;;;OAKG;IACG,YAAY,CACd,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,IAAI,CAAC;CAOnB"}

package/dist/lib/views/application/use-cases/set-default-view.use-case.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SetDefaultViewUseCase = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const saved_view_1 = require("../../domain/saved-view");
+const saved_view_repository_1 = require("../../domain/saved-view.repository");
+const errors_1 = require("../../domain/errors");
+/**
+ * Points a user's default for one list at a view, or clears it.
+ *
+ * Deliberately **not** owner-gated: a default is the reader's own landing
+ * choice, so anyone who can see a shared view may land on it. What is gated is
+ * visibility — the view has to be one this caller can actually read, which is
+ * what the ownership-or-shared check below establishes.
+ */
+let SetDefaultViewUseCase = class SetDefaultViewUseCase {
+    repository;
+    constructor(repository) {
+        this.repository = repository;
+    }
+    async execute(id, workspaceId, user) {
+        const existing = await this.repository.findById(id);
+        const readable = existing &&
+            existing.workspaceId === workspaceId &&
+            (existing.ownerId === user.id ||
+                existing.visibility === saved_view_1.VIEW_VISIBILITY.Workspace);
+        if (!existing || !readable)
+            throw new errors_1.SavedViewNotFoundError(id);
+        await this.repository.setDefault(user.id, existing.scope, id);
+    }
+    /**
+     * Clears the caller's default for the scope `id` belongs to. Addressed by
+     * view id rather than by scope so the route sits beside its `PUT`
+     * counterpart instead of colliding with `DELETE /views/:id`. Idempotent:
+     * clearing when the default points elsewhere, or nowhere, still succeeds.
+     */
+    async executeClear(id, workspaceId, user) {
+        const existing = await this.repository.findById(id);
+        if (!existing || existing.workspaceId !== workspaceId) {
+            throw new errors_1.SavedViewNotFoundError(id);
+        }
+        await this.repository.clearDefault(user.id, existing.scope);
+    }
+};
+exports.SetDefaultViewUseCase = SetDefaultViewUseCase;
+exports.SetDefaultViewUseCase = SetDefaultViewUseCase = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(saved_view_repository_1.SAVED_VIEW_REPOSITORY)),
+    tslib_1.__metadata("design:paramtypes", [Object])
+], SetDefaultViewUseCase);

package/dist/lib/views/application/use-cases/update-saved-view.use-case.d.ts

@@ -0,0 +1,24 @@
+import type { PublicUser } from '@orthacms/identity-server';
+import { OutboxWriter, UnitOfWork } from '@orthacms/database';
+import type { SavedView, SavedViewPayload, ViewVisibility } from '../../domain/saved-view';
+import { type SavedViewRepository } from '../../domain/saved-view.repository';
+import { SavedViewAccessService } from '../saved-view-access.service';
+/** The fields `PATCH /api/views/:id` may change. */
+export interface UpdateSavedViewInput {
+    /** New display name. */
+    name?: string;
+    /** New visibility. */
+    visibility?: ViewVisibility;
+    /** New slice. */
+    payload?: SavedViewPayload;
+}
+/** Renames, re-shares, or re-captures an existing view. */
+export declare class UpdateSavedViewUseCase {
+    private readonly repository;
+    private readonly access;
+    private readonly uow;
+    private readonly outbox;
+    constructor(repository: SavedViewRepository, access: SavedViewAccessService, uow: UnitOfWork, outbox: OutboxWriter);
+    execute(id: string, workspaceId: string, input: UpdateSavedViewInput, user: PublicUser): Promise<SavedView>;
+}
+//# sourceMappingURL=update-saved-view.use-case.d.ts.map

package/dist/lib/views/application/use-cases/update-saved-view.use-case.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-saved-view.use-case.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/application/use-cases/update-saved-view.use-case.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAEH,YAAY,EACZ,UAAU,EACb,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EACR,SAAS,EACT,gBAAgB,EAChB,cAAc,EACjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEH,KAAK,mBAAmB,EAC3B,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAGtE,oDAAoD;AACpD,MAAM,WAAW,oBAAoB;IACjC,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,iBAAiB;IACjB,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,2DAA2D;AAC3D,qBACa,sBAAsB;IAG3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAHN,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,sBAAsB,EAC9B,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,YAAY;IAGnC,OAAO,CACT,EAAE,EAAE,MAAM,EACV,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,UAAU,GACjB,OAAO,CAAC,SAAS,CAAC;CA0ExB"}

package/dist/lib/views/application/use-cases/update-saved-view.use-case.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UpdateSavedViewUseCase = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const database_1 = require("@orthacms/database");
+const saved_view_events_1 = require("../../domain/events/saved-view-events");
+const utils_server_1 = require("@orthacms/utils-server");
+const saved_view_repository_1 = require("../../domain/saved-view.repository");
+const errors_1 = require("../../domain/errors");
+const saved_view_access_service_1 = require("../saved-view-access.service");
+const saved_views_query_1 = require("../queries/saved-views.query");
+/** Renames, re-shares, or re-captures an existing view. */
+let UpdateSavedViewUseCase = class UpdateSavedViewUseCase {
+    repository;
+    access;
+    uow;
+    outbox;
+    constructor(repository, access, uow, outbox) {
+        this.repository = repository;
+        this.access = access;
+        this.uow = uow;
+        this.outbox = outbox;
+    }
+    async execute(id, workspaceId, input, user) {
+        const existing = await this.repository.findById(id);
+        // The workspace check is part of the not-found decision, not a separate
+        // 403: an id from another workspace must read exactly like an unknown
+        // one, or the endpoint becomes a probe for views elsewhere.
+        if (!existing || existing.workspaceId !== workspaceId) {
+            throw new errors_1.SavedViewNotFoundError(id);
+        }
+        this.access.assertOwned(existing, user);
+        if (input.visibility !== undefined) {
+            await this.access.assertCanUseVisibility(input.visibility, user);
+        }
+        // Every field is optional, so `{}` is a valid body — and it would reach
+        // Drizzle as `.set({})`, which throws rather than updating nothing.
+        // Answer the row unchanged instead: a patch that asks for no change has
+        // already got what it asked for.
+        const changes = input.name !== undefined ||
+            input.visibility !== undefined ||
+            input.payload !== undefined;
+        if (!changes) {
+            const currentDefault = await this.repository.findDefaultId(user.id, existing.scope);
+            return (0, saved_views_query_1.toSavedView)(existing, user.id, currentDefault);
+        }
+        let updated;
+        try {
+            updated = await this.uow.run(async () => {
+                const row = await this.repository.update(id, input);
+                await this.outbox.append((0, database_1.attachActor)([
+                    (0, saved_view_events_1.savedViewEvent)(saved_view_events_1.SAVED_VIEW_EVENT_KINDS.UPDATED, id, {
+                        workspaceId,
+                        scope: existing.scope,
+                        name: row.name,
+                        // The keys the caller actually sent — a
+                        // patch, so "what changed" is the request.
+                        fields: Object.keys(input),
+                        // Called out on its own: sharing is a
+                        // permission of its own, and unsharing
+                        // takes a view out of every member's
+                        // switcher without telling them.
+                        visibility: {
+                            from: existing.visibility,
+                            to: row.visibility
+                        }
+                    })
+                ], { id: user.id, email: user.email ?? null }));
+                return row;
+            });
+        }
+        catch (error) {
+            if ((0, utils_server_1.isUniqueViolation)(error)) {
+                throw new errors_1.SavedViewNameTakenError(input.name ?? existing.name);
+            }
+            throw error;
+        }
+        const defaultId = await this.repository.findDefaultId(user.id, updated.scope);
+        return (0, saved_views_query_1.toSavedView)(updated, user.id, defaultId);
+    }
+};
+exports.UpdateSavedViewUseCase = UpdateSavedViewUseCase;
+exports.UpdateSavedViewUseCase = UpdateSavedViewUseCase = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, common_1.Inject)(saved_view_repository_1.SAVED_VIEW_REPOSITORY)),
+    tslib_1.__metadata("design:paramtypes", [Object, saved_view_access_service_1.SavedViewAccessService,
+        database_1.UnitOfWork,
+        database_1.OutboxWriter])
+], UpdateSavedViewUseCase);

package/dist/lib/views/application/view-scope.service.d.ts

@@ -0,0 +1,25 @@
+import type { ContentTypeRegistry } from '../../registry/content-type-registry';
+import { WorkspaceGrantsQuery } from '../../content-types/queries/workspace-grants.query';
+/**
+ * Resolves a view's `scope` to a content type the open workspace may actually
+ * reach.
+ *
+ * Without this the views endpoint would be a way around
+ * {@link ContentGrantGuard}: `scope` names a content type, and an unchecked one
+ * lets a caller confirm that `content:salaries` exists in some workspace by
+ * saving a view over it. So the answer for an unknown type and for an ungranted
+ * one is the **same 404** the entries routes give — grants read before any
+ * registry decision, same status, same message.
+ */
+export declare class ViewScopeService {
+    private readonly registry;
+    private readonly grants;
+    constructor(registry: ContentTypeRegistry, grants: WorkspaceGrantsQuery);
+    /**
+     * Throws `NotFoundException` unless `scope` names a content type this
+     * workspace was granted. The DTO has already enforced the
+     * `content:<typeName>` shape.
+     */
+    assertReachable(scope: string, workspaceId: string): Promise<void>;
+}
+//# sourceMappingURL=view-scope.service.d.ts.map

package/dist/lib/views/application/view-scope.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-scope.service.d.ts","sourceRoot":"","sources":["../../../../src/lib/views/application/view-scope.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAC;AAG1F;;;;;;;;;;GAUG;AACH,qBACa,gBAAgB;IAGrB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,QAAQ,EAAE,mBAAmB,EAC7B,MAAM,EAAE,oBAAoB;IAGjD;;;;OAIG;IACG,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAO3E"}

package/dist/lib/views/application/view-scope.service.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ViewScopeService = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const views_tokens_1 = require("../views.tokens");
+const workspace_grants_query_1 = require("../../content-types/queries/workspace-grants.query");
+const views_constants_1 = require("../views.constants");
+/**
+ * Resolves a view's `scope` to a content type the open workspace may actually
+ * reach.
+ *
+ * Without this the views endpoint would be a way around
+ * {@link ContentGrantGuard}: `scope` names a content type, and an unchecked one
+ * lets a caller confirm that `content:salaries` exists in some workspace by
+ * saving a view over it. So the answer for an unknown type and for an ungranted
+ * one is the **same 404** the entries routes give — grants read before any
+ * registry decision, same status, same message.
+ */
+let ViewScopeService = class ViewScopeService {
+    registry;
+    grants;
+    constructor(registry, grants) {
+        this.registry = registry;
+        this.grants = grants;
+    }
+    /**
+     * Throws `NotFoundException` unless `scope` names a content type this
+     * workspace was granted. The DTO has already enforced the
+     * `content:<typeName>` shape.
+     */
+    async assertReachable(scope, workspaceId) {
+        const typeName = scope.slice(views_constants_1.CONTENT_SCOPE_PREFIX.length);
+        const granted = await this.grants.grantedSlugs(workspaceId);
+        if (!granted.has(typeName) || !this.registry.get(typeName)) {
+            throw new common_1.NotFoundException(`Unknown content type "${typeName}".`);
+        }
+    }
+};
+exports.ViewScopeService = ViewScopeService;
+exports.ViewScopeService = ViewScopeService = tslib_1.__decorate([
+    (0, common_1.Injectable)(),
+    tslib_1.__param(0, (0, views_tokens_1.InjectViewContentRegistry)()),
+    tslib_1.__metadata("design:paramtypes", [Function, workspace_grants_query_1.WorkspaceGrantsQuery])
+], ViewScopeService);

package/dist/lib/views/content-views.module.d.ts

@@ -0,0 +1,22 @@
+import { type DynamicModule } from '@nestjs/common';
+import type { ContentTypeRegistry } from '../registry/content-type-registry';
+/**
+ * The saved-views module.
+ *
+ * A **second** module from this package rather than a branch of
+ * `ContentModule`, because it needs its own `ServerPlugin` entry — the contract
+ * carries exactly one `migrations` descriptor per plugin, and content's is
+ * already spent on the host-owned generated collection tables. Splitting the
+ * module keeps that seam honest: the views feature owns fixed tables it ships
+ * migrations for, and the content model's tables stay the host's.
+ *
+ * It provides the registry the plugin factory hands it under its **own** token
+ * (`VIEW_CONTENT_REGISTRY`), so `ViewScopeService` can resolve a scope without
+ * importing `ContentModule` — which would make the two plugins' load order
+ * load-bearing — and without two global modules both claiming
+ * `CONTENT_REGISTRY`.
+ */
+export declare class ContentViewsModule {
+    static forRoot(registry: ContentTypeRegistry): DynamicModule;
+}
+//# sourceMappingURL=content-views.module.d.ts.map

package/dist/lib/views/content-views.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-views.module.d.ts","sourceRoot":"","sources":["../../../src/lib/views/content-views.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE5D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAa7E;;;;;;;;;;;;;;;GAeG;AACH,qBACa,kBAAkB;IAC3B,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,GAAG,aAAa;CAuB/D"}