@orthacms/content-server 0.4.2 → 0.5.0

package/dist/lib/views/content-views.module.js

@@ -0,0 +1,63 @@
+"use strict";
+var ContentViewsModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContentViewsModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const workspace_grants_query_1 = require("../content-types/queries/workspace-grants.query");
+const views_tokens_1 = require("./views.tokens");
+const saved_view_repository_1 = require("./domain/saved-view.repository");
+const drizzle_saved_view_repository_1 = require("./infrastructure/persistence/drizzle-saved-view.repository");
+const saved_views_query_1 = require("./application/queries/saved-views.query");
+const saved_view_access_service_1 = require("./application/saved-view-access.service");
+const view_scope_service_1 = require("./application/view-scope.service");
+const create_saved_view_use_case_1 = require("./application/use-cases/create-saved-view.use-case");
+const update_saved_view_use_case_1 = require("./application/use-cases/update-saved-view.use-case");
+const delete_saved_view_use_case_1 = require("./application/use-cases/delete-saved-view.use-case");
+const set_default_view_use_case_1 = require("./application/use-cases/set-default-view.use-case");
+const saved_views_controller_1 = require("./http/controllers/saved-views.controller");
+/**
+ * The saved-views module.
+ *
+ * A **second** module from this package rather than a branch of
+ * `ContentModule`, because it needs its own `ServerPlugin` entry — the contract
+ * carries exactly one `migrations` descriptor per plugin, and content's is
+ * already spent on the host-owned generated collection tables. Splitting the
+ * module keeps that seam honest: the views feature owns fixed tables it ships
+ * migrations for, and the content model's tables stay the host's.
+ *
+ * It provides the registry the plugin factory hands it under its **own** token
+ * (`VIEW_CONTENT_REGISTRY`), so `ViewScopeService` can resolve a scope without
+ * importing `ContentModule` — which would make the two plugins' load order
+ * load-bearing — and without two global modules both claiming
+ * `CONTENT_REGISTRY`.
+ */
+let ContentViewsModule = ContentViewsModule_1 = class ContentViewsModule {
+    static forRoot(registry) {
+        return {
+            module: ContentViewsModule_1,
+            global: true,
+            controllers: [saved_views_controller_1.SavedViewsController],
+            providers: [
+                { provide: views_tokens_1.VIEW_CONTENT_REGISTRY, useValue: registry },
+                {
+                    provide: saved_view_repository_1.SAVED_VIEW_REPOSITORY,
+                    useClass: drizzle_saved_view_repository_1.DrizzleSavedViewRepository
+                },
+                workspace_grants_query_1.WorkspaceGrantsQuery,
+                saved_views_query_1.SavedViewsQuery,
+                saved_view_access_service_1.SavedViewAccessService,
+                view_scope_service_1.ViewScopeService,
+                create_saved_view_use_case_1.CreateSavedViewUseCase,
+                update_saved_view_use_case_1.UpdateSavedViewUseCase,
+                delete_saved_view_use_case_1.DeleteSavedViewUseCase,
+                set_default_view_use_case_1.SetDefaultViewUseCase
+            ],
+            exports: [saved_views_query_1.SavedViewsQuery]
+        };
+    }
+};
+exports.ContentViewsModule = ContentViewsModule;
+exports.ContentViewsModule = ContentViewsModule = ContentViewsModule_1 = tslib_1.__decorate([
+    (0, common_1.Module)({})
+], ContentViewsModule);

package/dist/lib/views/domain/errors/index.d.ts

@@ -0,0 +1,6 @@
+/** Transport-agnostic domain errors for saved views. */
+export { SavedViewNotFoundError } from './saved-view-not-found.error';
+export { SavedViewForbiddenError } from './saved-view-forbidden.error';
+export { SavedViewNameTakenError } from './saved-view-name-taken.error';
+export { SavedViewLimitError } from './saved-view-limit-error';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/views/domain/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/index.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/lib/views/domain/errors/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewLimitError = exports.SavedViewNameTakenError = exports.SavedViewForbiddenError = exports.SavedViewNotFoundError = void 0;
+/** Transport-agnostic domain errors for saved views. */
+var saved_view_not_found_error_1 = require("./saved-view-not-found.error");
+Object.defineProperty(exports, "SavedViewNotFoundError", { enumerable: true, get: function () { return saved_view_not_found_error_1.SavedViewNotFoundError; } });
+var saved_view_forbidden_error_1 = require("./saved-view-forbidden.error");
+Object.defineProperty(exports, "SavedViewForbiddenError", { enumerable: true, get: function () { return saved_view_forbidden_error_1.SavedViewForbiddenError; } });
+var saved_view_name_taken_error_1 = require("./saved-view-name-taken.error");
+Object.defineProperty(exports, "SavedViewNameTakenError", { enumerable: true, get: function () { return saved_view_name_taken_error_1.SavedViewNameTakenError; } });
+var saved_view_limit_error_1 = require("./saved-view-limit-error");
+Object.defineProperty(exports, "SavedViewLimitError", { enumerable: true, get: function () { return saved_view_limit_error_1.SavedViewLimitError; } });

package/dist/lib/views/domain/errors/saved-view-forbidden.error.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The caller may read the view but not perform this write — editing or deleting
+ * someone else's view, or sharing one without `views:share`. Distinct from
+ * {@link SavedViewNotFoundError} because the view's existence is already known
+ * to the caller (it is listed for them), so a 403 discloses nothing new.
+ */
+export declare class SavedViewForbiddenError extends Error {
+    constructor(reason: string);
+}
+//# sourceMappingURL=saved-view-forbidden.error.d.ts.map

package/dist/lib/views/domain/errors/saved-view-forbidden.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-forbidden.error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/saved-view-forbidden.error.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBAClC,MAAM,EAAE,MAAM;CAI7B"}

package/dist/lib/views/domain/errors/saved-view-forbidden.error.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewForbiddenError = void 0;
+/**
+ * The caller may read the view but not perform this write — editing or deleting
+ * someone else's view, or sharing one without `views:share`. Distinct from
+ * {@link SavedViewNotFoundError} because the view's existence is already known
+ * to the caller (it is listed for them), so a 403 discloses nothing new.
+ */
+class SavedViewForbiddenError extends Error {
+    constructor(reason) {
+        super(reason);
+        this.name = 'SavedViewForbiddenError';
+    }
+}
+exports.SavedViewForbiddenError = SavedViewForbiddenError;

package/dist/lib/views/domain/errors/saved-view-limit-error.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The caller has hit {@link VIEW_MAX_PER_SCOPE} views for one workspace + scope.
+ * A bound rather than a business rule: it keeps one account from filling the
+ * table, and the number is far above any realistic list of saved slices.
+ */
+export declare class SavedViewLimitError extends Error {
+    constructor();
+}
+//# sourceMappingURL=saved-view-limit-error.d.ts.map

package/dist/lib/views/domain/errors/saved-view-limit-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-limit-error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/saved-view-limit-error.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;;CAK7C"}

package/dist/lib/views/domain/errors/saved-view-limit-error.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewLimitError = void 0;
+const views_constants_1 = require("../../views.constants");
+/**
+ * The caller has hit {@link VIEW_MAX_PER_SCOPE} views for one workspace + scope.
+ * A bound rather than a business rule: it keeps one account from filling the
+ * table, and the number is far above any realistic list of saved slices.
+ */
+class SavedViewLimitError extends Error {
+    constructor() {
+        super(`You can save at most ${views_constants_1.VIEW_MAX_PER_SCOPE} views for one list.`);
+        this.name = 'SavedViewLimitError';
+    }
+}
+exports.SavedViewLimitError = SavedViewLimitError;

package/dist/lib/views/domain/errors/saved-view-name-taken.error.d.ts

@@ -0,0 +1,5 @@
+/** The caller already holds a view by this name in the same workspace + scope. */
+export declare class SavedViewNameTakenError extends Error {
+    constructor(name: string);
+}
+//# sourceMappingURL=saved-view-name-taken.error.d.ts.map

package/dist/lib/views/domain/errors/saved-view-name-taken.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-name-taken.error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/saved-view-name-taken.error.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,qBAAa,uBAAwB,SAAQ,KAAK;gBAClC,IAAI,EAAE,MAAM;CAI3B"}

package/dist/lib/views/domain/errors/saved-view-name-taken.error.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewNameTakenError = void 0;
+/** The caller already holds a view by this name in the same workspace + scope. */
+class SavedViewNameTakenError extends Error {
+    constructor(name) {
+        super(`You already have a view named "${name}" for this list.`);
+        this.name = 'SavedViewNameTakenError';
+    }
+}
+exports.SavedViewNameTakenError = SavedViewNameTakenError;

package/dist/lib/views/domain/errors/saved-view-not-found.error.d.ts

@@ -0,0 +1,9 @@
+/**
+ * A saved view the caller may not read, or that does not exist. One error for
+ * both so the API cannot be used to probe which views other people hold — the
+ * controller maps it to a 404 either way.
+ */
+export declare class SavedViewNotFoundError extends Error {
+    constructor(id: string);
+}
+//# sourceMappingURL=saved-view-not-found.error.d.ts.map

package/dist/lib/views/domain/errors/saved-view-not-found.error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-not-found.error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/errors/saved-view-not-found.error.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;gBACjC,EAAE,EAAE,MAAM;CAIzB"}

package/dist/lib/views/domain/errors/saved-view-not-found.error.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewNotFoundError = void 0;
+/**
+ * A saved view the caller may not read, or that does not exist. One error for
+ * both so the API cannot be used to probe which views other people hold — the
+ * controller maps it to a 404 either way.
+ */
+class SavedViewNotFoundError extends Error {
+    constructor(id) {
+        super(`Saved view "${id}" was not found.`);
+        this.name = 'SavedViewNotFoundError';
+    }
+}
+exports.SavedViewNotFoundError = SavedViewNotFoundError;

package/dist/lib/views/domain/events/saved-view-events.d.ts

@@ -0,0 +1,28 @@
+import { type DomainEvent } from '@orthacms/database';
+/**
+ * The domain events a saved view raises.
+ *
+ * A view is a bookmark rather than a grant — it is replayed through the
+ * ordinary list query with the reader's own permissions, so it can never show
+ * anyone a row they could not already reach. That is why only three of the five
+ * write routes raise anything:
+ *
+ * - **Create, update and delete are recorded.** A `workspace`-visible view is
+ *   shared state: it appears in every member's switcher, it is the thing a team
+ *   agrees "the review queue" means, and deleting one takes it away from
+ *   everybody. Sharing is even its own permission (`views:share`), which is the
+ *   product saying this is not purely personal.
+ * - **Setting a personal default raises nothing, deliberately.** It is the
+ *   reader's own landing choice — the same class of thing as `PUT
+ *   /preferences` — and it is set by clicking a view. A row per click would be
+ *   a usage metric wearing an audit row's clothes, and it would bury the three
+ *   kinds above in a log that has no way to filter by "interesting".
+ */
+export declare const SAVED_VIEW_EVENT_KINDS: {
+    readonly CREATED: "saved_view.created";
+    readonly UPDATED: "saved_view.updated";
+    readonly DELETED: "saved_view.deleted";
+};
+/** Builds a saved-view {@link DomainEvent}, stamping the aggregate type + id. */
+export declare function savedViewEvent(kind: string, viewId: string, payload: Record<string, unknown>): DomainEvent;
+//# sourceMappingURL=saved-view-events.d.ts.map

package/dist/lib/views/domain/events/saved-view-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view-events.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/domain/events/saved-view-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,sBAAsB;;;;CAIzB,CAAC;AAEX,iFAAiF;AACjF,wBAAgB,cAAc,CAC1B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,WAAW,CAOb"}

package/dist/lib/views/domain/events/saved-view-events.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SAVED_VIEW_EVENT_KINDS = void 0;
+exports.savedViewEvent = savedViewEvent;
+const database_1 = require("@orthacms/database");
+/**
+ * The domain events a saved view raises.
+ *
+ * A view is a bookmark rather than a grant — it is replayed through the
+ * ordinary list query with the reader's own permissions, so it can never show
+ * anyone a row they could not already reach. That is why only three of the five
+ * write routes raise anything:
+ *
+ * - **Create, update and delete are recorded.** A `workspace`-visible view is
+ *   shared state: it appears in every member's switcher, it is the thing a team
+ *   agrees "the review queue" means, and deleting one takes it away from
+ *   everybody. Sharing is even its own permission (`views:share`), which is the
+ *   product saying this is not purely personal.
+ * - **Setting a personal default raises nothing, deliberately.** It is the
+ *   reader's own landing choice — the same class of thing as `PUT
+ *   /preferences` — and it is set by clicking a view. A row per click would be
+ *   a usage metric wearing an audit row's clothes, and it would bury the three
+ *   kinds above in a log that has no way to filter by "interesting".
+ */
+exports.SAVED_VIEW_EVENT_KINDS = {
+    CREATED: 'saved_view.created',
+    UPDATED: 'saved_view.updated',
+    DELETED: 'saved_view.deleted'
+};
+/** Builds a saved-view {@link DomainEvent}, stamping the aggregate type + id. */
+function savedViewEvent(kind, viewId, payload) {
+    return (0, database_1.createDomainEvent)({
+        kind,
+        aggregateType: 'saved_view',
+        aggregateId: viewId,
+        payload
+    });
+}

package/dist/lib/views/domain/saved-view.d.ts

@@ -0,0 +1,66 @@
+/**
+ * A saved list view — the named slice of a collection an editor returns to.
+ *
+ * Framework-free by ADR-0003: this module is the contract the HTTP layer, the
+ * repository adapter and the admin all agree on, and it imports nothing.
+ */
+/** Who may see a saved view. */
+export declare const VIEW_VISIBILITY: {
+    /** Only its owner. */
+    readonly Private: "private";
+    /** Every member of the workspace it belongs to. */
+    readonly Workspace: "workspace";
+};
+/** One visibility value. */
+export type ViewVisibility = (typeof VIEW_VISIBILITY)[keyof typeof VIEW_VISIBILITY];
+/** Every visibility, for validators and the OpenAPI enum. */
+export declare const VIEW_VISIBILITY_VALUES: ("private" | "workspace")[];
+/**
+ * The slice a view restores, stored as one opaque-ish JSON document.
+ *
+ * Deliberately mirrors the **URL params** the records page already owns rather
+ * than re-modelling them: `filter` and `sort` are the raw `?filter=` / `?sort=`
+ * strings, so a view round-trips through the same code path a hand-edited link
+ * does. Two things are absent on purpose — `search` is a one-off question, not
+ * a property of the slice, and `page` is a reading position, so a view always
+ * opens on the first page.
+ */
+export interface SavedViewPayload {
+    /** The `?filter=` JSON string, or absent for no filter. */
+    filter?: string;
+    /** The `?sort=` spec (`updatedAt` / `-updatedAt`), or absent for unsorted. */
+    sort?: string;
+    /** Rows per page. */
+    pageSize?: number;
+    /** Visible column ids, **in display order**. */
+    columns?: string[];
+    /**
+     * Slot-owned list params (the i18n plugin's `?locale=`, and whatever a
+     * later plugin contributes), as an opaque string map. Opaque because the
+     * keys come from `RECORDS_TOOLBAR_SLOT.listParamKeys` at runtime — naming
+     * them here would break the next plugin's params silently.
+     */
+    extra?: Record<string, string>;
+}
+/** A saved view as the API returns it. */
+export interface SavedView {
+    /** Primary key. */
+    id: string;
+    /** The list this view belongs to (`content:<typeName>`). */
+    scope: string;
+    /** Display name, unique per owner within a workspace + scope. */
+    name: string;
+    /** Who may see it. */
+    visibility: ViewVisibility;
+    /** The user who created it. */
+    ownerId: string;
+    /** Whether the caller owns it — the admin gates Save and Delete on this. */
+    isOwn: boolean;
+    /** Whether it is the caller's default for this scope. */
+    isDefault: boolean;
+    /** The slice it restores. */
+    payload: SavedViewPayload;
+    /** Last-modified timestamp, ISO-8601. */
+    updatedAt: string;
+}
+//# sourceMappingURL=saved-view.d.ts.map

package/dist/lib/views/domain/saved-view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view.d.ts","sourceRoot":"","sources":["../../../../src/lib/views/domain/saved-view.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,gCAAgC;AAChC,eAAO,MAAM,eAAe;IACxB,sBAAsB;;IAEtB,mDAAmD;;CAE7C,CAAC;AAEX,4BAA4B;AAC5B,MAAM,MAAM,cAAc,GACtB,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAE3D,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,6BAAiC,CAAC;AAErE;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC7B,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACtB,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,UAAU,EAAE,cAAc,CAAC;IAC3B,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,KAAK,EAAE,OAAO,CAAC;IACf,yDAAyD;IACzD,SAAS,EAAE,OAAO,CAAC;IACnB,6BAA6B;IAC7B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACrB"}

package/dist/lib/views/domain/saved-view.js

@@ -0,0 +1,18 @@
+"use strict";
+/**
+ * A saved list view — the named slice of a collection an editor returns to.
+ *
+ * Framework-free by ADR-0003: this module is the contract the HTTP layer, the
+ * repository adapter and the admin all agree on, and it imports nothing.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VIEW_VISIBILITY_VALUES = exports.VIEW_VISIBILITY = void 0;
+/** Who may see a saved view. */
+exports.VIEW_VISIBILITY = {
+    /** Only its owner. */
+    Private: 'private',
+    /** Every member of the workspace it belongs to. */
+    Workspace: 'workspace'
+};
+/** Every visibility, for validators and the OpenAPI enum. */
+exports.VIEW_VISIBILITY_VALUES = Object.values(exports.VIEW_VISIBILITY);

package/dist/lib/views/domain/saved-view.repository.d.ts

@@ -0,0 +1,77 @@
+import type { SavedViewPayload, ViewVisibility } from './saved-view';
+/** A stored view row, before the per-caller flags are derived. */
+export interface SavedViewRecord {
+    /** Primary key. */
+    id: string;
+    /** The workspace it belongs to. */
+    workspaceId: string;
+    /** The list it is over. */
+    scope: string;
+    /** The user who saved it. */
+    ownerId: string;
+    /** Who may see it. */
+    visibility: ViewVisibility;
+    /** Display name. */
+    name: string;
+    /** The slice it restores. */
+    payload: SavedViewPayload;
+    /** Manual ordering within its scope. */
+    position: number;
+    /** Last-modified timestamp. */
+    updatedAt: Date;
+}
+/** Everything needed to store a new view. */
+export interface NewSavedView {
+    /** The workspace it belongs to. */
+    workspaceId: string;
+    /** The list it is over. */
+    scope: string;
+    /** The user saving it. */
+    ownerId: string;
+    /** Who may see it. */
+    visibility: ViewVisibility;
+    /** Display name. */
+    name: string;
+    /** The slice it restores. */
+    payload: SavedViewPayload;
+}
+/** The fields an update may change; absent keys are left alone. */
+export interface SavedViewPatch {
+    /** New display name. */
+    name?: string;
+    /** New visibility. */
+    visibility?: ViewVisibility;
+    /** New slice. */
+    payload?: SavedViewPayload;
+}
+/**
+ * Persistence port for saved views. The interface lives in `domain/` and the
+ * Drizzle adapter in `infrastructure/`, per ADR-0003 — nothing here knows about
+ * SQL, and the use-cases depend on this shape rather than on a table.
+ */
+export interface SavedViewRepository {
+    /**
+     * Every view in this workspace + scope the reader may see: their own
+     * (whatever the visibility) plus everyone's workspace-visible ones.
+     */
+    listVisible(workspaceId: string, scope: string, readerId: string): Promise<SavedViewRecord[]>;
+    /** One view by id, or `null` when it does not exist. */
+    findById(id: string): Promise<SavedViewRecord | null>;
+    /** How many views this owner already holds in this workspace + scope. */
+    countForOwner(workspaceId: string, scope: string, ownerId: string): Promise<number>;
+    /** Stores a new view and returns it. */
+    create(view: NewSavedView): Promise<SavedViewRecord>;
+    /** Applies a patch and returns the updated row. */
+    update(id: string, patch: SavedViewPatch): Promise<SavedViewRecord>;
+    /** Removes a view. Defaults pointing at it are cascaded away. */
+    delete(id: string): Promise<void>;
+    /** The view this reader defaults to for a scope, or `null`. */
+    findDefaultId(userId: string, scope: string): Promise<string | null>;
+    /** Makes `viewId` this user's default for the scope, replacing any prior. */
+    setDefault(userId: string, scope: string, viewId: string): Promise<void>;
+    /** Clears this user's default for the scope, if any. */
+    clearDefault(userId: string, scope: string): Promise<void>;
+}
+/** DI token for {@link SavedViewRepository}. */
+export declare const SAVED_VIEW_REPOSITORY: unique symbol;
+//# sourceMappingURL=saved-view.repository.d.ts.map

package/dist/lib/views/domain/saved-view.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-view.repository.d.ts","sourceRoot":"","sources":["../../../../src/lib/views/domain/saved-view.repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAErE,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC5B,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,UAAU,EAAE,cAAc,CAAC;IAC3B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,SAAS,EAAE,IAAI,CAAC;CACnB;AAED,6CAA6C;AAC7C,MAAM,WAAW,YAAY;IACzB,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,sBAAsB;IACtB,UAAU,EAAE,cAAc,CAAC;IAC3B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,OAAO,EAAE,gBAAgB,CAAC;CAC7B;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC3B,wBAAwB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,sBAAsB;IACtB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,iBAAiB;IACjB,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC;;;OAGG;IACH,WAAW,CACP,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAE9B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAEtD,yEAAyE;IACzE,aAAa,CACT,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB,wCAAwC;IACxC,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAErD,mDAAmD;IACnD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAEpE,iEAAiE;IACjE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElC,+DAA+D;IAC/D,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAErE,6EAA6E;IAC7E,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzE,wDAAwD;IACxD,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED,gDAAgD;AAChD,eAAO,MAAM,qBAAqB,eAAkC,CAAC"}

package/dist/lib/views/domain/saved-view.repository.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SAVED_VIEW_REPOSITORY = void 0;
+/** DI token for {@link SavedViewRepository}. */
+exports.SAVED_VIEW_REPOSITORY = Symbol('SAVED_VIEW_REPOSITORY');

package/dist/lib/views/http/controllers/saved-views.controller.d.ts

@@ -0,0 +1,45 @@
+import { type PublicUser } from '@orthacms/identity-server';
+import type { SavedView } from '../../domain/saved-view';
+import { SavedViewsQuery } from '../../application/queries/saved-views.query';
+import { CreateSavedViewUseCase } from '../../application/use-cases/create-saved-view.use-case';
+import { UpdateSavedViewUseCase } from '../../application/use-cases/update-saved-view.use-case';
+import { DeleteSavedViewUseCase } from '../../application/use-cases/delete-saved-view.use-case';
+import { SetDefaultViewUseCase } from '../../application/use-cases/set-default-view.use-case';
+import { ViewScopeService } from '../../application/view-scope.service';
+import { CreateViewDto, ListViewsQueryDto, UpdateViewDto } from '../dto/save-view.dto';
+/**
+ * `/api/views` — a member's saved list views for one content type.
+ *
+ * A genuine CRUD resource over one thing, so it stays a single controller
+ * rather than five. Every route is workspace-scoped (`WorkspaceGuard` reads
+ * `X-Workspace-Id` and 403s a non-member) and gated on `content:read`: a view
+ * is a saved way of reading content, so anyone who cannot read content has no
+ * use for one. Sharing needs `views:share` on top, checked per write because it
+ * depends on the *body*, not the route.
+ *
+ * The stored payload is **not** a grant. It is replayed through the ordinary
+ * list query with the reader's own permissions, workspace scope and content
+ * grants, so a shared view shows a narrower reader fewer rows — never more.
+ */
+export declare class SavedViewsController {
+    private readonly views;
+    private readonly scopes;
+    private readonly createView;
+    private readonly updateView;
+    private readonly deleteView;
+    private readonly setDefault;
+    constructor(views: SavedViewsQuery, scopes: ViewScopeService, createView: CreateSavedViewUseCase, updateView: UpdateSavedViewUseCase, deleteView: DeleteSavedViewUseCase, setDefault: SetDefaultViewUseCase);
+    /** Every view this member may see for a list: their own plus the shared ones. */
+    list(query: ListViewsQueryDto, workspaceId: string, user?: PublicUser): Promise<SavedView[]>;
+    /** Saves the current slice as a new view. */
+    create(body: CreateViewDto, workspaceId: string, user?: PublicUser): Promise<SavedView>;
+    /** Renames, re-shares, or re-captures a view the caller owns. */
+    update(id: string, body: UpdateViewDto, workspaceId: string, user?: PublicUser): Promise<SavedView>;
+    /** Deletes a view the caller owns. */
+    remove(id: string, workspaceId: string, user?: PublicUser): Promise<void>;
+    /** Lands this member on the view when they open the list. */
+    makeDefault(id: string, workspaceId: string, user?: PublicUser): Promise<void>;
+    /** Clears the caller's default, so the list opens unfiltered again. */
+    clearDefault(id: string, workspaceId: string, user?: PublicUser): Promise<void>;
+}
+//# sourceMappingURL=saved-views.controller.d.ts.map

package/dist/lib/views/http/controllers/saved-views.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"saved-views.controller.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/http/controllers/saved-views.controller.ts"],"names":[],"mappings":"AAiBA,OAAO,EAKH,KAAK,UAAU,EAClB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EACH,aAAa,EACb,iBAAiB,EACjB,aAAa,EAChB,MAAM,sBAAsB,CAAC;AAG9B;;;;;;;;;;;;;GAaG;AACH,qBAIa,oBAAoB;IAEzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,UAAU;gBALV,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,gBAAgB,EACxB,UAAU,EAAE,sBAAsB,EAClC,UAAU,EAAE,sBAAsB,EAClC,UAAU,EAAE,sBAAsB,EAClC,UAAU,EAAE,qBAAqB;IAGtD,iFAAiF;IAO3E,IAAI,CACG,KAAK,EAAE,iBAAiB,EACb,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,SAAS,EAAE,CAAC;IAMvB,6CAA6C;IAOvC,MAAM,CACA,IAAI,EAAE,aAAa,EACP,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,SAAS,CAAC;IAoBrB,iEAAiE;IAO3D,MAAM,CACoB,EAAE,EAAE,MAAM,EAC9B,IAAI,EAAE,aAAa,EACP,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,SAAS,CAAC;IASrB,sCAAsC;IAQhC,MAAM,CACoB,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,IAAI,CAAC;IAShB,6DAA6D;IAQvD,WAAW,CACe,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,IAAI,CAAC;IAShB,uEAAuE;IAQjE,YAAY,CACc,EAAE,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE,UAAU,GACjC,OAAO,CAAC,IAAI,CAAC;CAQnB"}