@orthacms/content-server 0.4.2 → 0.5.0

package/dist/lib/views/http/controllers/saved-views.controller.js

@@ -0,0 +1,216 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SavedViewsController = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const identity_server_1 = require("@orthacms/identity-server");
+const workspaces_server_1 = require("@orthacms/workspaces-server");
+const saved_view_1 = require("../../domain/saved-view");
+const saved_views_query_1 = require("../../application/queries/saved-views.query");
+const create_saved_view_use_case_1 = require("../../application/use-cases/create-saved-view.use-case");
+const update_saved_view_use_case_1 = require("../../application/use-cases/update-saved-view.use-case");
+const delete_saved_view_use_case_1 = require("../../application/use-cases/delete-saved-view.use-case");
+const set_default_view_use_case_1 = require("../../application/use-cases/set-default-view.use-case");
+const view_scope_service_1 = require("../../application/view-scope.service");
+const save_view_dto_1 = require("../dto/save-view.dto");
+const to_http_error_1 = require("./to-http-error");
+/**
+ * `/api/views` — a member's saved list views for one content type.
+ *
+ * A genuine CRUD resource over one thing, so it stays a single controller
+ * rather than five. Every route is workspace-scoped (`WorkspaceGuard` reads
+ * `X-Workspace-Id` and 403s a non-member) and gated on `content:read`: a view
+ * is a saved way of reading content, so anyone who cannot read content has no
+ * use for one. Sharing needs `views:share` on top, checked per write because it
+ * depends on the *body*, not the route.
+ *
+ * The stored payload is **not** a grant. It is replayed through the ordinary
+ * list query with the reader's own permissions, workspace scope and content
+ * grants, so a shared view shows a narrower reader fewer rows — never more.
+ */
+let SavedViewsController = class SavedViewsController {
+    views;
+    scopes;
+    createView;
+    updateView;
+    deleteView;
+    setDefault;
+    constructor(views, scopes, createView, updateView, deleteView, setDefault) {
+        this.views = views;
+        this.scopes = scopes;
+        this.createView = createView;
+        this.updateView = updateView;
+        this.deleteView = deleteView;
+        this.setDefault = setDefault;
+    }
+    /** Every view this member may see for a list: their own plus the shared ones. */
+    async list(query, workspaceId, user) {
+        const actor = requireUser(user);
+        await this.scopes.assertReachable(query.scope, workspaceId);
+        return this.views.list(workspaceId, query.scope, actor.id);
+    }
+    /** Saves the current slice as a new view. */
+    async create(body, workspaceId, user) {
+        const actor = requireUser(user);
+        await this.scopes.assertReachable(body.scope, workspaceId);
+        try {
+            return await this.createView.execute({
+                workspaceId,
+                scope: body.scope,
+                name: body.name,
+                visibility: body.visibility ?? saved_view_1.VIEW_VISIBILITY.Private,
+                payload: body.payload,
+                makeDefault: body.makeDefault
+            }, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+    /** Renames, re-shares, or re-captures a view the caller owns. */
+    async update(id, body, workspaceId, user) {
+        const actor = requireUser(user);
+        try {
+            return await this.updateView.execute(id, workspaceId, body, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+    /** Deletes a view the caller owns. */
+    async remove(id, workspaceId, user) {
+        const actor = requireUser(user);
+        try {
+            await this.deleteView.execute(id, workspaceId, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+    /** Lands this member on the view when they open the list. */
+    async makeDefault(id, workspaceId, user) {
+        const actor = requireUser(user);
+        try {
+            await this.setDefault.execute(id, workspaceId, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+    /** Clears the caller's default, so the list opens unfiltered again. */
+    async clearDefault(id, workspaceId, user) {
+        const actor = requireUser(user);
+        try {
+            await this.setDefault.executeClear(id, workspaceId, actor);
+        }
+        catch (error) {
+            (0, to_http_error_1.toHttpError)(error);
+        }
+    }
+};
+exports.SavedViewsController = SavedViewsController;
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'List the saved views for one content type',
+        description: 'Returns the caller’s own views at any visibility plus every workspace-shared view for the scope, ordered for the switcher.'
+    }),
+    (0, common_1.Get)(),
+    tslib_1.__param(0, (0, common_1.Query)()),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [save_view_dto_1.ListViewsQueryDto, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "list", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Save a new view',
+        description: 'Stores the filter/sort/columns slice under a name. `visibility: workspace` additionally requires `views:share`.'
+    }),
+    (0, common_1.Post)(),
+    tslib_1.__param(0, (0, common_1.Body)()),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [save_view_dto_1.CreateViewDto, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "create", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Update a saved view',
+        description: 'Owner-only. Send just the fields that change — `payload` on Save, `name` on a rename, `visibility` on share/unshare.'
+    }),
+    (0, common_1.Patch)(':id'),
+    tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    tslib_1.__param(1, (0, common_1.Body)()),
+    tslib_1.__param(2, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(3, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, save_view_dto_1.UpdateViewDto, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "update", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Delete a saved view',
+        description: 'Owner-only. Any member’s default pointing at it is cleared by the cascade.'
+    }),
+    (0, common_1.Delete)(':id'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "remove", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Make a view the caller’s default',
+        description: 'Not owner-gated: a default is the reader’s own landing choice, so any view they can see may be one.'
+    }),
+    (0, common_1.Put)(':id/default'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "makeDefault", null);
+tslib_1.__decorate([
+    (0, swagger_1.ApiOperation)({
+        summary: 'Clear the caller’s default view',
+        description: 'The list then opens with no filter. Idempotent — clearing an absent default succeeds.'
+    }),
+    (0, common_1.Delete)(':id/default'),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    tslib_1.__param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    tslib_1.__param(1, (0, workspaces_server_1.CurrentWorkspace)()),
+    tslib_1.__param(2, (0, identity_server_1.CurrentUser)()),
+    tslib_1.__metadata("design:type", Function),
+    tslib_1.__metadata("design:paramtypes", [String, String, Object]),
+    tslib_1.__metadata("design:returntype", Promise)
+], SavedViewsController.prototype, "clearDefault", null);
+exports.SavedViewsController = SavedViewsController = tslib_1.__decorate([
+    (0, swagger_1.ApiTags)('views'),
+    (0, common_1.UseGuards)(identity_server_1.PermissionsGuard, workspaces_server_1.WorkspaceGuard),
+    (0, identity_server_1.RequirePermissions)(identity_server_1.PERMISSIONS.CONTENT_READ),
+    (0, common_1.Controller)('views'),
+    tslib_1.__metadata("design:paramtypes", [saved_views_query_1.SavedViewsQuery,
+        view_scope_service_1.ViewScopeService,
+        create_saved_view_use_case_1.CreateSavedViewUseCase,
+        update_saved_view_use_case_1.UpdateSavedViewUseCase,
+        delete_saved_view_use_case_1.DeleteSavedViewUseCase,
+        set_default_view_use_case_1.SetDefaultViewUseCase])
+], SavedViewsController);
+/**
+ * Narrows the optional `@CurrentUser()` to a present one. Every route here is
+ * behind the app-wide `AuthGuard`, so this cannot fire in practice — it exists
+ * so the use-cases take a `PublicUser` rather than an optional one.
+ */
+function requireUser(user) {
+    if (!user)
+        throw new common_1.UnauthorizedException();
+    return user;
+}

package/dist/lib/views/http/controllers/to-http-error.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Maps the saved-view domain errors onto HTTP. Domain errors stay
+ * transport-agnostic (ADR-0003), so every controller funnels through this one
+ * translation rather than each restating the status codes.
+ *
+ * Anything unrecognised is rethrown untouched — swallowing it here would turn a
+ * genuine fault into a misleading 4xx.
+ */
+export declare function toHttpError(error: unknown): never;
+//# sourceMappingURL=to-http-error.d.ts.map

package/dist/lib/views/http/controllers/to-http-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"to-http-error.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/http/controllers/to-http-error.ts"],"names":[],"mappings":"AAYA;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAcjD"}

package/dist/lib/views/http/controllers/to-http-error.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toHttpError = toHttpError;
+const common_1 = require("@nestjs/common");
+const errors_1 = require("../../domain/errors");
+/**
+ * Maps the saved-view domain errors onto HTTP. Domain errors stay
+ * transport-agnostic (ADR-0003), so every controller funnels through this one
+ * translation rather than each restating the status codes.
+ *
+ * Anything unrecognised is rethrown untouched — swallowing it here would turn a
+ * genuine fault into a misleading 4xx.
+ */
+function toHttpError(error) {
+    if (error instanceof errors_1.SavedViewNotFoundError) {
+        throw new common_1.NotFoundException(error.message);
+    }
+    if (error instanceof errors_1.SavedViewForbiddenError) {
+        throw new common_1.ForbiddenException(error.message);
+    }
+    if (error instanceof errors_1.SavedViewNameTakenError ||
+        error instanceof errors_1.SavedViewLimitError) {
+        throw new common_1.ConflictException(error.message);
+    }
+    throw error;
+}

package/dist/lib/views/http/dto/save-view.dto.d.ts

@@ -0,0 +1,54 @@
+import { type ViewVisibility } from '../../domain/saved-view';
+/**
+ * The slice a view stores. Mirrors the records page's URL params rather than
+ * re-modelling them, so a saved view and a hand-edited link travel the same
+ * code path. `search` and `page` are absent by design — see
+ * {@link SavedViewPayload}.
+ */
+export declare class ViewPayloadDto {
+    /** The `?filter=` JSON string. */
+    filter?: string;
+    /** The `?sort=` spec. */
+    sort?: string;
+    /** Rows per page. */
+    pageSize?: number;
+    /** Visible column ids, in display order. */
+    columns?: string[];
+    /** Slot-owned list params (e.g. the i18n plugin's `locale`). */
+    extra?: Record<string, string>;
+}
+/** Body of `POST /api/views`. */
+export declare class CreateViewDto {
+    /**
+     * The list this view is over. v1 accepts content collections only, so a
+     * typo cannot quietly create a view nothing will ever list.
+     */
+    scope: string;
+    /** Display name. */
+    name: string;
+    /** Who may see it. Defaults to private. */
+    visibility?: ViewVisibility;
+    /** The slice it restores. */
+    payload: ViewPayloadDto;
+    /** Whether to land on this view when opening the list. */
+    makeDefault?: boolean;
+}
+/**
+ * Body of `PATCH /api/views/:id`. Every field optional — the switcher sends
+ * only `payload` on “Save”, only `name` on a rename, and only `visibility` on
+ * share/unshare.
+ */
+export declare class UpdateViewDto {
+    /** New display name. */
+    name?: string;
+    /** New visibility. */
+    visibility?: ViewVisibility;
+    /** New slice. */
+    payload?: ViewPayloadDto;
+}
+/** Query of `GET /api/views`. */
+export declare class ListViewsQueryDto {
+    /** The list to return views for. */
+    scope: string;
+}
+//# sourceMappingURL=save-view.dto.d.ts.map

package/dist/lib/views/http/dto/save-view.dto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"save-view.dto.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/http/dto/save-view.dto.ts"],"names":[],"mappings":"AAuBA,OAAO,EAGH,KAAK,cAAc,EACtB,MAAM,yBAAyB,CAAC;AAUjC;;;;;GAKG;AACH,qBAAa,cAAc;IACvB,kCAAkC;IAYlC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,yBAAyB;IAWzB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,qBAAqB;IAYrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,4CAA4C;IAa5C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAEnB,gEAAgE;IAWhE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,iCAAiC;AACjC,qBAAa,aAAa;IACtB;;;OAGG;IAaH,KAAK,EAAG,MAAM,CAAC;IAEf,oBAAoB;IAcpB,IAAI,EAAG,MAAM,CAAC;IAEd,2CAA2C;IAS3C,UAAU,CAAC,EAAE,cAAc,CAAC;IAE5B,6BAA6B;IAO7B,OAAO,EAAG,cAAc,CAAC;IAEzB,0DAA0D;IAQ1D,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,qBAAa,aAAa;IACtB,wBAAwB;IAcxB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,sBAAsB;IAItB,UAAU,CAAC,EAAE,cAAc,CAAC;IAE5B,iBAAiB;IAKjB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,iCAAiC;AACjC,qBAAa,iBAAiB;IAC1B,oCAAoC;IAapC,KAAK,EAAG,MAAM,CAAC;CAClB"}

package/dist/lib/views/http/dto/save-view.dto.js

@@ -0,0 +1,230 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ListViewsQueryDto = exports.UpdateViewDto = exports.CreateViewDto = exports.ViewPayloadDto = void 0;
+const tslib_1 = require("tslib");
+const swagger_1 = require("@nestjs/swagger");
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const class_transformer_2 = require("class-transformer");
+const entries_constants_1 = require("../../../entries/entries.constants");
+const saved_view_1 = require("../../domain/saved-view");
+const views_constants_1 = require("../../views.constants");
+const view_payload_validator_1 = require("./view-payload.validator");
+/**
+ * The slice a view stores. Mirrors the records page's URL params rather than
+ * re-modelling them, so a saved view and a hand-edited link travel the same
+ * code path. `search` and `page` are absent by design — see
+ * {@link SavedViewPayload}.
+ */
+class ViewPayloadDto {
+    /** The `?filter=` JSON string. */
+    filter;
+    /** The `?sort=` spec. */
+    sort;
+    /** Rows per page. */
+    pageSize;
+    /** Visible column ids, in display order. */
+    columns;
+    /** Slot-owned list params (e.g. the i18n plugin's `locale`). */
+    extra;
+}
+exports.ViewPayloadDto = ViewPayloadDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        maxLength: entries_constants_1.FILTER_MAX_LENGTH,
+        example: '{"op":"and","rules":[{"field":"status","op":"eq","value":"review"}]}',
+        description: 'The filter tree as a JSON string, byte-identical to the `?filter=` query param. Stored opaquely and re-validated against the type when replayed.'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(entries_constants_1.FILTER_MAX_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], ViewPayloadDto.prototype, "filter", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        maxLength: 255,
+        example: '-updatedAt',
+        description: 'Sort spec: a column id (ascending) or `-`-prefixed (descending).'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(255),
+    tslib_1.__metadata("design:type", String)
+], ViewPayloadDto.prototype, "sort", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: 'integer',
+        minimum: 1,
+        maximum: entries_constants_1.MAX_PAGE_SIZE,
+        example: 25,
+        description: 'Rows per page this view opens with.'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsInt)(),
+    (0, class_validator_1.Min)(1),
+    (0, class_validator_1.Max)(entries_constants_1.MAX_PAGE_SIZE),
+    tslib_1.__metadata("design:type", Number)
+], ViewPayloadDto.prototype, "pageSize", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: [String],
+        maxItems: views_constants_1.VIEW_MAX_COLUMNS,
+        example: ['title', 'status', 'updatedAt'],
+        description: 'Visible column ids **in display order**. Ids the type no longer has are dropped when the view is applied.'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayMaxSize)(views_constants_1.VIEW_MAX_COLUMNS),
+    (0, class_validator_1.IsString)({ each: true }),
+    (0, class_validator_1.MaxLength)(views_constants_1.VIEW_COLUMN_MAX_LENGTH, { each: true }),
+    tslib_1.__metadata("design:type", Array)
+], ViewPayloadDto.prototype, "columns", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: 'object',
+        additionalProperties: { type: 'string' },
+        example: { locale: 'en' },
+        description: 'Slot-contributed list params, as a flat string map. Opaque on purpose — the keys come from plugin-registered toolbar items at runtime.'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsObject)(),
+    (0, view_payload_validator_1.IsViewExtraParams)(),
+    tslib_1.__metadata("design:type", Object)
+], ViewPayloadDto.prototype, "extra", void 0);
+/** Body of `POST /api/views`. */
+class CreateViewDto {
+    /**
+     * The list this view is over. v1 accepts content collections only, so a
+     * typo cannot quietly create a view nothing will ever list.
+     */
+    scope;
+    /** Display name. */
+    name;
+    /** Who may see it. Defaults to private. */
+    visibility;
+    /** The slice it restores. */
+    payload;
+    /** Whether to land on this view when opening the list. */
+    makeDefault;
+}
+exports.CreateViewDto = CreateViewDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: String,
+        maxLength: views_constants_1.VIEW_SCOPE_MAX_LENGTH,
+        example: 'content:article',
+        description: 'The list this view belongs to. Must be `content:<typeName>`.'
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(views_constants_1.VIEW_SCOPE_MAX_LENGTH),
+    (0, class_validator_1.Matches)(new RegExp(`^${views_constants_1.CONTENT_SCOPE_PREFIX}[A-Za-z0-9_-]+$`), {
+        message: `scope must be "${views_constants_1.CONTENT_SCOPE_PREFIX}<typeName>"`
+    }),
+    tslib_1.__metadata("design:type", String)
+], CreateViewDto.prototype, "scope", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: String,
+        minLength: 1,
+        maxLength: views_constants_1.VIEW_NAME_MAX_LENGTH,
+        example: 'Needs review',
+        description: 'Display name, unique per person within one list.'
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_transformer_2.Transform)(({ value }) => typeof value === 'string' ? value.trim() : value),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(views_constants_1.VIEW_NAME_MAX_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], CreateViewDto.prototype, "name", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        enum: saved_view_1.VIEW_VISIBILITY_VALUES,
+        default: saved_view_1.VIEW_VISIBILITY.Private,
+        description: '`private` (only you) or `workspace` (every member). Sharing requires the `views:share` permission.'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(saved_view_1.VIEW_VISIBILITY_VALUES),
+    tslib_1.__metadata("design:type", String)
+], CreateViewDto.prototype, "visibility", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: () => ViewPayloadDto,
+        description: 'The filter/sort/columns/page-size slice this view stores.'
+    }),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => ViewPayloadDto),
+    tslib_1.__metadata("design:type", ViewPayloadDto)
+], CreateViewDto.prototype, "payload", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: Boolean,
+        default: false,
+        description: 'Make this the caller’s default view for the list.'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsBoolean)(),
+    tslib_1.__metadata("design:type", Boolean)
+], CreateViewDto.prototype, "makeDefault", void 0);
+/**
+ * Body of `PATCH /api/views/:id`. Every field optional — the switcher sends
+ * only `payload` on “Save”, only `name` on a rename, and only `visibility` on
+ * share/unshare.
+ */
+class UpdateViewDto {
+    /** New display name. */
+    name;
+    /** New visibility. */
+    visibility;
+    /** New slice. */
+    payload;
+}
+exports.UpdateViewDto = UpdateViewDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        type: String,
+        minLength: 1,
+        maxLength: views_constants_1.VIEW_NAME_MAX_LENGTH,
+        example: 'Needs review'
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    (0, class_transformer_2.Transform)(({ value }) => typeof value === 'string' ? value.trim() : value),
+    (0, class_validator_1.MinLength)(1),
+    (0, class_validator_1.MaxLength)(views_constants_1.VIEW_NAME_MAX_LENGTH),
+    tslib_1.__metadata("design:type", String)
+], UpdateViewDto.prototype, "name", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ enum: saved_view_1.VIEW_VISIBILITY_VALUES }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsIn)(saved_view_1.VIEW_VISIBILITY_VALUES),
+    tslib_1.__metadata("design:type", String)
+], UpdateViewDto.prototype, "visibility", void 0);
+tslib_1.__decorate([
+    (0, swagger_1.ApiPropertyOptional)({ type: () => ViewPayloadDto }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.ValidateNested)(),
+    (0, class_transformer_1.Type)(() => ViewPayloadDto),
+    tslib_1.__metadata("design:type", ViewPayloadDto)
+], UpdateViewDto.prototype, "payload", void 0);
+/** Query of `GET /api/views`. */
+class ListViewsQueryDto {
+    /** The list to return views for. */
+    scope;
+}
+exports.ListViewsQueryDto = ListViewsQueryDto;
+tslib_1.__decorate([
+    (0, swagger_1.ApiProperty)({
+        type: String,
+        maxLength: views_constants_1.VIEW_SCOPE_MAX_LENGTH,
+        example: 'content:article',
+        description: 'The list to return saved views for (`content:<typeName>`).'
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.MaxLength)(views_constants_1.VIEW_SCOPE_MAX_LENGTH),
+    (0, class_validator_1.Matches)(new RegExp(`^${views_constants_1.CONTENT_SCOPE_PREFIX}[A-Za-z0-9_-]+$`), {
+        message: `scope must be "${views_constants_1.CONTENT_SCOPE_PREFIX}<typeName>"`
+    }),
+    tslib_1.__metadata("design:type", String)
+], ListViewsQueryDto.prototype, "scope", void 0);

package/dist/lib/views/http/dto/view-payload.validator.d.ts

@@ -0,0 +1,20 @@
+import { type ValidationOptions, type ValidatorConstraintInterface } from 'class-validator';
+/**
+ * Validates a payload's `extra` bag: the slot-owned list params (the i18n
+ * plugin's `?locale=`, and whatever a later plugin contributes) as a flat
+ * string map.
+ *
+ * class-validator cannot decorate a `Record`'s dynamic keys, and the keys here
+ * are genuinely dynamic — they come from `RECORDS_TOOLBAR_SLOT.listParamKeys`
+ * at runtime, so naming them in a DTO would silently break the next plugin's
+ * params. What we can still enforce is the shape and a bound: flat, strings on
+ * both sides, and small. That turns a malformed bag into a clean 400 instead of
+ * a jsonb column quietly swallowing a nested object nothing can replay.
+ */
+export declare class ViewExtraParamsConstraint implements ValidatorConstraintInterface {
+    validate(value: unknown): boolean;
+    defaultMessage(): string;
+}
+/** Applies {@link ViewExtraParamsConstraint} to a property. */
+export declare function IsViewExtraParams(options?: ValidationOptions): (object: object, propertyName: string) => void;
+//# sourceMappingURL=view-payload.validator.d.ts.map

package/dist/lib/views/http/dto/view-payload.validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-payload.validator.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/http/dto/view-payload.validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,KAAK,iBAAiB,EACtB,KAAK,4BAA4B,EACpC,MAAM,iBAAiB,CAAC;AAMzB;;;;;;;;;;;GAWG;AACH,qBACa,yBAA0B,YAAW,4BAA4B;IAC1E,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAcjC,cAAc,IAAI,MAAM;CAG3B;AAED,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,iBAAiB,IACxC,QAAQ,MAAM,EAAE,cAAc,MAAM,KAAG,IAAI,CAQ/D"}

package/dist/lib/views/http/dto/view-payload.validator.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ViewExtraParamsConstraint = void 0;
+exports.IsViewExtraParams = IsViewExtraParams;
+const tslib_1 = require("tslib");
+const class_validator_1 = require("class-validator");
+const views_constants_1 = require("../../views.constants");
+/**
+ * Validates a payload's `extra` bag: the slot-owned list params (the i18n
+ * plugin's `?locale=`, and whatever a later plugin contributes) as a flat
+ * string map.
+ *
+ * class-validator cannot decorate a `Record`'s dynamic keys, and the keys here
+ * are genuinely dynamic — they come from `RECORDS_TOOLBAR_SLOT.listParamKeys`
+ * at runtime, so naming them in a DTO would silently break the next plugin's
+ * params. What we can still enforce is the shape and a bound: flat, strings on
+ * both sides, and small. That turns a malformed bag into a clean 400 instead of
+ * a jsonb column quietly swallowing a nested object nothing can replay.
+ */
+let ViewExtraParamsConstraint = class ViewExtraParamsConstraint {
+    validate(value) {
+        if (value === null || typeof value !== 'object')
+            return false;
+        if (Array.isArray(value))
+            return false;
+        const entries = Object.entries(value);
+        if (entries.length > views_constants_1.VIEW_MAX_EXTRA_KEYS)
+            return false;
+        return entries.every(([key, param]) => key.length > 0 &&
+            key.length <= views_constants_1.VIEW_EXTRA_MAX_LENGTH &&
+            typeof param === 'string' &&
+            param.length <= views_constants_1.VIEW_EXTRA_MAX_LENGTH);
+    }
+    defaultMessage() {
+        return `extra must be a flat map of at most ${views_constants_1.VIEW_MAX_EXTRA_KEYS} string values, each at most ${views_constants_1.VIEW_EXTRA_MAX_LENGTH} characters`;
+    }
+};
+exports.ViewExtraParamsConstraint = ViewExtraParamsConstraint;
+exports.ViewExtraParamsConstraint = ViewExtraParamsConstraint = tslib_1.__decorate([
+    (0, class_validator_1.ValidatorConstraint)({ name: 'viewExtraParams' })
+], ViewExtraParamsConstraint);
+/** Applies {@link ViewExtraParamsConstraint} to a property. */
+function IsViewExtraParams(options) {
+    return function (object, propertyName) {
+        (0, class_validator_1.registerDecorator)({
+            target: object.constructor,
+            propertyName,
+            options,
+            validator: ViewExtraParamsConstraint
+        });
+    };
+}

package/dist/lib/views/infrastructure/persistence/drizzle-saved-view.repository.d.ts

@@ -0,0 +1,26 @@
+import { UnitOfWork } from '@orthacms/database';
+import type { NewSavedView, SavedViewPatch, SavedViewRecord, SavedViewRepository } from '../../domain/saved-view.repository';
+/** Drizzle adapter for {@link SavedViewRepository}. */
+export declare class DrizzleSavedViewRepository implements SavedViewRepository {
+    private readonly uow;
+    constructor(uow: UnitOfWork);
+    /**
+     * The executor to run against: the ambient transaction when a caller opened
+     * one, the base connection otherwise.
+     *
+     * It exists so a view write and the `saved_view.*` event describing it
+     * commit together. Outside a unit of work this is the old behaviour
+     * exactly — `UnitOfWork.current()` falls back to the pool.
+     */
+    private get db();
+    listVisible(workspaceId: string, scope: string, readerId: string): Promise<SavedViewRecord[]>;
+    findById(id: string): Promise<SavedViewRecord | null>;
+    countForOwner(workspaceId: string, scope: string, ownerId: string): Promise<number>;
+    create(view: NewSavedView): Promise<SavedViewRecord>;
+    update(id: string, patch: SavedViewPatch): Promise<SavedViewRecord>;
+    delete(id: string): Promise<void>;
+    findDefaultId(userId: string, scope: string): Promise<string | null>;
+    setDefault(userId: string, scope: string, viewId: string): Promise<void>;
+    clearDefault(userId: string, scope: string): Promise<void>;
+}
+//# sourceMappingURL=drizzle-saved-view.repository.d.ts.map

package/dist/lib/views/infrastructure/persistence/drizzle-saved-view.repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drizzle-saved-view.repository.d.ts","sourceRoot":"","sources":["../../../../../src/lib/views/infrastructure/persistence/drizzle-saved-view.repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAiB,MAAM,oBAAoB,CAAC;AAG/D,OAAO,KAAK,EACR,YAAY,EACZ,cAAc,EACd,eAAe,EACf,mBAAmB,EACtB,MAAM,oCAAoC,CAAC;AAiC5C,uDAAuD;AACvD,qBACa,0BAA2B,YAAW,mBAAmB;IACtD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,UAAU;IAE5C;;;;;;;OAOG;IACH,OAAO,KAAK,EAAE,GAEb;IAEK,WAAW,CACb,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC;IAuBvB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IASrD,aAAa,CACf,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC;IAcZ,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC;IAepD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAoBnE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAcpE,UAAU,CACZ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAYV,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAUnE"}