studiograph 1.3.48-next.26 → 1.3.48-next.261

package/dist/server/routes/share-api.js

@@ -1,51 +1,260 @@
 /**
- * Share Link API routes
+ * Public read-only share links.
  *
- * Create, list, and revoke public share links for rendered entities
- * (documents, decks). The public /share/:token route is registered
- * separately in view-public.ts (before auth middleware).
+ * The app's first anonymous surface. Three routes:
+ *
+ *   POST /api/repos/:repo/entities/:type/:id/share-link   (AUTHED)  — mint/reuse
+ *   GET  /api/share/:token                                (PUBLIC)  — read body
+ *   GET  /api/share/:token/asset/:assetId/:filename       (PUBLIC)  — embedded asset
+ *
+ * Authorization model:
+ *  - Mint is write-gated (mirrors revoke). Personal folders ARE publishable by
+ *    their owner — the publish right is orthogonal to teammate visibility, and
+ *    the single mint caller is already owner-gated. Today read ⟺ write for
+ *    shared folders, so write-gating is a no-op now but keeps publish/unpublish
+ *    coherent and pre-empts a future read-only role from minting a link it
+ *    couldn't revoke.
+ *  - The two PUBLIC routes are bypassed in the global auth hook; the opaque
+ *    token (looked up in share_links, fail-closed on missing/revoked) IS the
+ *    authorization. A revoked token stops resolving for BOTH the body and its
+ *    assets immediately.
+ *  - The public read returns ONLY { title, entityType, content } — frontmatter
+ *    and metadata never cross the boundary (test-enforced). Asset URLs in the
+ *    body are rewritten to token-scoped /api/share/:token/asset/... links.
+ *  - A public asset must be EMBEDDED in the shared entry and owned by the
+ *    entry's repo OR a workspace-wide shared store (same scope as the
+ *    artifact-asset token path — font kits/shared images live there), so a
+ *    crafted body can't republish another entry's, a private repo's, or an
+ *    un-embedded asset.
+ */
+import * as access from '../../services/access-control.js';
+import { rewriteImmutableAssetUrls, extractImmutableAssetRefs } from '../../core/embeds.js';
+import { encodeAssetFilename } from '../../services/assets/index.js';
+import { serveIndexedAsset, isProxyableAssetFilename } from './asset-api.js';
+/**
+ * Whether a folder may be published at all. Solo (private) folders ARE
+ * publishable: the owner's right to publish their own content externally is
+ * orthogonal to teammate visibility, and the single `mint()` caller is already
+ * membership-gated (a non-member 404s before reaching here). The gate now
+ * degrades to a repo-existence check, but it stays a named gate — and keeps its
+ * four call sites — because it's where a future non-publishable repo class
+ * (e.g. a `system` / workspace-wide asset store added to RepoConfig) would be
+ * rejected.
  */
-const RENDERABLE_TYPES = new Set(['document', 'deck']);
-export async function registerShareApiRoutes(fastify, authService) {
-    // POST /api/share — create a share link
-    fastify.post('/api/share', async (req, reply) => {
+function isPublishableRepo(workspaceManager, repo) {
+    const config = workspaceManager.getRepoConfig(repo);
+    if (!config)
+        return false;
+    return true;
+}
+function entityTitle(data, fallbackId) {
+    const name = data?.name ?? data?.title;
+    return typeof name === 'string' && name.trim() ? name : fallbackId;
+}
+/** The entry's stable creation timestamp, used to detect a delete+recreate at
+ *  the same coords. Returns null when absent (then identity isn't enforced). */
+function entityTimestamp(entity) {
+    const ts = entity?.data?.created_at;
+    return typeof ts === 'string' && ts ? ts : null;
+}
+/**
+ * Resolve the entry a live share link points at, applying the existence +
+ * entity-identity guards both public routes share: the repo + entry must still
+ * exist, and when both the link and the current entry carry a created_at they
+ * must match (else the original entry was deleted and a new one took its coords
+ * — fail closed so the old token can't serve unrelated content). Returns the
+ * entity, or null when any guard trips. Callers have already validated the
+ * token + publishable gate.
+ */
+function resolveSharedEntity(workspaceManager, link) {
+    let graph;
+    try {
+        graph = workspaceManager.getGraph(link.repo);
+    }
+    catch {
+        return null;
+    }
+    let entity;
+    try {
+        entity = graph.get(link.entryType, link.entryId);
+    }
+    catch {
+        return null;
+    }
+    if (!entity)
+        return null;
+    const currentTs = entityTimestamp(entity);
+    if (link.entityCreatedAt && currentTs && currentTs !== link.entityCreatedAt)
+        return null;
+    return entity;
+}
+export async function registerShareApiRoutes(fastify, workspaceManager, authService, shareLinkService) {
+    // POST /api/repos/:repo/entities/:type/:id/share-link — mint or reuse the
+    // active public link for an entry. Authed (not bypassed in the auth hook).
+    fastify.post('/api/repos/:repo/entities/:type/:id/share-link', async (req, reply) => {
         const user = req.user;
         if (!user)
             return reply.status(401).send({ error: 'Authentication required' });
-        const { repo, entityType, entityId, expiresAt, password } = req.body ?? {};
-        if (!repo || !entityType || !entityId) {
-            return reply.status(400).send({ error: 'repo, entityType, and entityId are required' });
+        const { repo, type, id } = req.params;
+        if (!access.hasRepoAccess(user, repo, workspaceManager, authService)) {
+            return reply.status(404).send({ error: `Folder "${repo}" not found` });
         }
-        if (!RENDERABLE_TYPES.has(entityType)) {
-            return reply.status(400).send({ error: `Sharing not supported for entity type "${entityType}"` });
+        // Write-gate publishing to match revoke (DELETE below). Today read ⟺ write
+        // for shared folders, so this is a no-op, but it keeps the two halves of
+        // the feature coherent and pre-empts a future read-only/viewer role from
+        // being able to mint a permanent public link it couldn't revoke.
+        if (!access.canWriteRepo(user, repo, workspaceManager, authService)) {
+            return reply.status(403).send({ error: 'You do not have write access to this folder' });
         }
-        const token = authService.createShareLink(repo, entityType, entityId, user.id, {
-            expiresAt: expiresAt || undefined,
-            password: password || undefined,
-        });
-        const host = req.headers['x-forwarded-host'] || req.headers.host || 'localhost';
-        const proto = req.headers['x-forwarded-proto'] || 'http';
-        const url = `${proto}://${host}/share/${token}`;
-        return reply.send({ token, url });
+        if (!isPublishableRepo(workspaceManager, repo)) {
+            return reply.status(403).send({ error: 'This folder cannot be shared publicly.' });
+        }
+        // Confirm the entity exists before minting, and capture its created_at so
+        // a later delete+recreate at the same coords can't inherit this token.
+        let graph;
+        try {
+            graph = workspaceManager.getGraph(repo);
+        }
+        catch (err) {
+            return reply.status(404).send({ error: err.message });
+        }
+        let entityCreatedAt = null;
+        try {
+            const entity = graph.get(type, id);
+            if (!entity)
+                return reply.status(404).send({ error: `Entity not found: ${type}/${id}` });
+            entityCreatedAt = entityTimestamp(entity);
+        }
+        catch (err) {
+            return reply.status(404).send({ error: err.message ?? `Entity not found: ${type}/${id}` });
+        }
+        const link = shareLinkService.mint(repo, type, id, user.id, entityCreatedAt);
+        return reply.send({ path: `/share/${link.token}`, token: link.token });
     });
-    // GET /api/share/:repo/:entityType/:entityId — list share links for an entity
-    fastify.get('/api/share/:repo/:entityType/:entityId', async (req, reply) => {
+    // GET /api/repos/:repo/entities/:type/:id/share-link — share status for an
+    // entry, so the entry view can show "Unshare" only when a live link exists.
+    // Read-gated (authed). Returns the active link, or nulls when not shared.
+    fastify.get('/api/repos/:repo/entities/:type/:id/share-link', async (req, reply) => {
         const user = req.user;
         if (!user)
             return reply.status(401).send({ error: 'Authentication required' });
-        const { repo, entityType, entityId } = req.params;
-        const links = authService.listShareLinks(repo, entityType, entityId);
-        return reply.send(links);
+        const { repo, type, id } = req.params;
+        if (!access.hasRepoAccess(user, repo, workspaceManager, authService)) {
+            return reply.status(404).send({ error: `Folder "${repo}" not found` });
+        }
+        // Defense in depth against a future non-publishable repo class: report
+        // not-shared rather than handing out a token that the read path would
+        // refuse to resolve anyway.
+        if (!isPublishableRepo(workspaceManager, repo)) {
+            return reply.send({ path: null, token: null });
+        }
+        const link = shareLinkService.getActiveByEntry(repo, type, id);
+        return reply.send(link ? { path: `/share/${link.token}`, token: link.token } : { path: null, token: null });
     });
-    // DELETE /api/share/:token — revoke a share link
-    fastify.delete('/api/share/:token', async (req, reply) => {
+    // DELETE /api/repos/:repo/entities/:type/:id/share-link — revoke the entry's
+    // active public link (the per-entry "Unshare" action). Write-gated: anyone
+    // who can edit the entry can take it offline (publicness is a property of the
+    // entry, not of whoever first shared it). Idempotent — revoked:false when the
+    // entry wasn't shared.
+    fastify.delete('/api/repos/:repo/entities/:type/:id/share-link', async (req, reply) => {
         const user = req.user;
         if (!user)
             return reply.status(401).send({ error: 'Authentication required' });
-        const ok = authService.revokeShareLink(req.params.token);
-        if (!ok)
+        const { repo, type, id } = req.params;
+        if (!access.hasRepoAccess(user, repo, workspaceManager, authService)) {
+            return reply.status(404).send({ error: `Folder "${repo}" not found` });
+        }
+        if (!access.canWriteRepo(user, repo, workspaceManager, authService)) {
+            return reply.status(403).send({ error: 'You do not have write access to this folder' });
+        }
+        return reply.send({ revoked: shareLinkService.revokeByEntry(repo, type, id) });
+    });
+    // GET /api/share/:token — PUBLIC read. Returns title + body only.
+    fastify.get('/api/share/:token', async (req, reply) => {
+        const link = shareLinkService.resolve(req.params.token);
+        // Missing OR revoked → 404 (fail-closed, no existence oracle).
+        if (!link)
+            return reply.status(404).send({ error: 'Share link not found' });
+        // Defense in depth: even a valid token never serves a now-unpublishable
+        // folder (a future non-publishable repo class).
+        if (!isPublishableRepo(workspaceManager, link.repo)) {
+            return reply.status(404).send({ error: 'Share link not found' });
+        }
+        // Existence + entity-identity guard (a delete+recreate at the same coords
+        // fails closed). Shared with the asset route below.
+        const entity = resolveSharedEntity(workspaceManager, link);
+        if (!entity)
             return reply.status(404).send({ error: 'Share link not found' });
-        return reply.send({ ok: true });
+        const rawContent = entity.document?.content ?? '';
+        // Mutable + security-sensitive: never let a proxy/CDN cache it, so edits
+        // and a revoke take effect immediately (D4).
+        reply.header('Cache-Control', 'no-store');
+        // SECURITY BOUNDARY: title + body + type ONLY. Frontmatter / metadata must
+        // never cross to a guest (test-enforced in share-api.test.ts).
+        return reply.send({
+            title: entityTitle(entity.data, link.entryId),
+            entityType: entity.entityType ?? link.entryType,
+            // D5: the rewriter hands back the DECODED raw filename; the emitted
+            // URL re-encodes it so spaces/parens can't break markdown/HTML parsing
+            // (the serve route's Fastify-decoded param compares raw again).
+            content: rewriteImmutableAssetUrls(rawContent, (assetId, filename) => `/api/share/${link.token}/asset/${assetId}/${encodeAssetFilename(filename)}`),
+        });
+    });
+    // GET / HEAD /api/share/:token/asset/:assetId/:filename — PUBLIC asset.
+    fastify.route({
+        method: ['GET', 'HEAD'],
+        url: '/api/share/:token/asset/:assetId/:filename',
+        handler: async (req, reply) => {
+            const { token, assetId, filename } = req.params;
+            const isHead = req.method === 'HEAD';
+            const link = shareLinkService.resolve(token);
+            if (!link)
+                return reply.status(404).send({ error: 'Asset not found' });
+            if (!isPublishableRepo(workspaceManager, link.repo)) {
+                return reply.status(404).send({ error: 'Asset not found' });
+            }
+            const row = workspaceManager.getAssetIndex().get(assetId);
+            // Unknown id and filename mismatch fail closed. Repo scope mirrors the
+            // artifact-asset token path: the asset must be owned by the shared
+            // entry's repo OR live in a workspace-wide shared store (font kits and
+            // shared images live in `workspace-assets`; every member can already
+            // read them, and the embed check below still requires the SHARER to
+            // have referenced the asset in the published body — so sharing an entry
+            // publishes exactly what it embeds, nothing else). Other cross-repo
+            // assets stay 404.
+            const repoAllowed = !!row && (row.repo === link.repo || access.isWorkspaceWide(row.repo, workspaceManager));
+            if (!row || row.filename !== filename || !repoAllowed) {
+                return reply.status(404).send({ error: 'Asset not found' });
+            }
+            // The asset must be EMBEDDED in the shared entry — not merely a same-repo
+            // sibling. Re-resolve the entry through the same existence + identity
+            // guard the body read uses (so an asset 404s after a delete+recreate),
+            // then confirm the body references this immutable asset URL. Uses the
+            // same grammar `rewriteImmutableAssetUrls` rewrote it from on the read.
+            // Both sides of the compare are the RAW identity (D5): the refs decode
+            // the body's percent-encoded segment; `filename` is Fastify-decoded.
+            const entity = resolveSharedEntity(workspaceManager, link);
+            if (!entity)
+                return reply.status(404).send({ error: 'Asset not found' });
+            const embedded = extractImmutableAssetRefs(entity.document?.content ?? '');
+            if (!embedded.some((ref) => ref.assetId === assetId && ref.filename === filename)) {
+                return reply.status(404).send({ error: 'Asset not found' });
+            }
+            // TRANSPORT: images + fonts stream same-origin (proxyR2) instead of the
+            // default R2 302 — a sandboxed share-page artifact iframe pins its CSP
+            // to this route's path, and WebKit (and the CSP spec for redirects)
+            // blocks the cross-origin bucket hop, so fixing the share CSP alone
+            // would still show broken images (the Phase 0 Safari class). Other
+            // types a shared doc may link (e.g. PDFs) load top-level, where the
+            // redirect is fine — they keep the cached 302 / direct stream rather
+            // than inheriting the proxy's image/font-only gate.
+            return serveIndexedAsset(workspaceManager, reply, {
+                assetId, filename, repo: row.repo, isHead, size: row.size,
+                ...(isProxyableAssetFilename(filename)
+                    ? { proxyR2: true, ifNoneMatch: req.headers['if-none-match'] }
+                    : {}),
+            });
+        },
     });
 }
 //# sourceMappingURL=share-api.js.map

package/dist/server/routes/share-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"share-api.js","sourceRoot":"","sources":["../../../src/server/routes/share-api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwB,EACxB,WAAwB;IAGxB,wCAAwC;IACxC,OAAO,CAAC,IAAI,CACV,YAAY,EACZ,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAE/E,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAS,CAAC;QAClF,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,UAAU,GAAG,EAAE,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,eAAe,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE;YAC7E,SAAS,EAAE,SAAS,IAAI,SAAS;YACjC,QAAQ,EAAE,QAAQ,IAAI,SAAS;SAChC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QAChF,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;QACzD,MAAM,GAAG,GAAG,GAAG,KAAK,MAAM,IAAI,UAAU,KAAK,EAAE,CAAC;QAEhD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,CAAC,CACF,CAAC;IAEF,8EAA8E;IAC9E,OAAO,CAAC,GAAG,CACT,wCAAwC,EACxC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAE/E,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAClD,MAAM,KAAK,GAAG,WAAW,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACrE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CACF,CAAC;IAEF,iDAAiD;IACjD,OAAO,CAAC,MAAM,CACZ,mBAAmB,EACnB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAE/E,MAAM,EAAE,GAAG,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"share-api.js","sourceRoot":"","sources":["../../../src/server/routes/share-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,KAAK,MAAM,MAAM,kCAAkC,CAAC;AAG3D,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAC5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAE7E;;;;;;;;;GASG;AACH,SAAS,iBAAiB,CAAC,gBAAkC,EAAE,IAAY;IACzE,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,IAAyC,EAAE,UAAkB;IAChF,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,CAAC;IACvC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;AACrE,CAAC;AAED;gFACgF;AAChF,SAAS,eAAe,CAAC,MAAW;IAClC,MAAM,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC;IACpC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,gBAAkC,EAAE,IAA0F;IACzJ,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QAAC,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IACrD,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACtB,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAuB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACvE,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACtB,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,eAAe,IAAI,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IACzF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwB,EACxB,gBAAkC,EAClC,WAAwB,EACxB,gBAAkC;IAGlC,0EAA0E;IAC1E,2EAA2E;IAC3E,OAAO,CAAC,IAAI,CACV,gDAAgD,EAChD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC/E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,2EAA2E;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,iEAAiE;QACjE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,0EAA0E;QAC1E,uEAAuE;QACvE,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YAAC,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAChD,OAAO,GAAQ,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAAC,CAAC;QAC3E,IAAI,eAAe,GAAkB,IAAI,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,IAAkB,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACzF,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,qBAAqB,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC,CACF,CAAC;IAEF,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,OAAO,CAAC,GAAG,CACT,gDAAgD,EAChD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC/E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,4BAA4B;QAC5B,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9G,CAAC,CACF,CAAC;IAEF,6EAA6E;IAC7E,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,uBAAuB;IACvB,OAAO,CAAC,MAAM,CACZ,gDAAgD,EAChD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC/E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YACrE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;YACpE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gBAAgB,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC,CACF,CAAC;IAEF,kEAAkE;IAClE,OAAO,CAAC,GAAG,CACT,mBAAmB,EACnB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,+DAA+D;QAC/D,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC5E,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,0EAA0E;QAC1E,oDAAoD;QACpD,MAAM,MAAM,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAE9E,MAAM,UAAU,GAAW,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;QAC1D,yEAAyE;QACzE,6CAA6C;QAC7C,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC1C,2EAA2E;QAC3E,+DAA+D;QAC/D,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,IAA2C,EAAE,IAAI,CAAC,OAAO,CAAC;YACpF,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS;YAC/C,oEAAoE;YACpE,uEAAuE;YACvE,gEAAgE;YAChE,OAAO,EAAE,yBAAyB,CAChC,UAAU,EACV,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,cAAc,IAAI,CAAC,KAAK,UAAU,OAAO,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CACpG;SACF,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,wEAAwE;IACxE,OAAO,CAAC,KAAK,CAAmE;QAC9E,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,GAAG,EAAE,4CAA4C;QACjD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAmB,EAAE,EAAE;YAC1C,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;YAErC,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAEvE,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,uEAAuE;YACvE,mEAAmE;YACnE,uEAAuE;YACvE,qEAAqE;YACrE,oEAAoE;YACpE,wEAAwE;YACxE,oEAAoE;YACpE,mBAAmB;YACnB,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAC5G,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,0EAA0E;YAC1E,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,MAAM,GAAG,mBAAmB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACzE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE,CAAC;gBAClF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9D,CAAC;YAED,wEAAwE;YACxE,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,oEAAoE;YACpE,qEAAqE;YACrE,oDAAoD;YACpD,OAAO,iBAAiB,CAAC,gBAAgB,EAAE,KAAK,EAAE;gBAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI;gBACzD,GAAG,CAAC,wBAAwB,CAAC,QAAQ,CAAC;oBACpC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAuB,EAAE;oBACpF,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/server/routes/views-api.d.ts

@@ -1,8 +1,17 @@
 /**
  * Views API routes
  *
- * Per-user saved views backed by AuthService SQLite.
- * Views are scoped to the authenticated user (or user_id=0 in no-auth mode).
+ * Per-user saved views backed by AuthService SQLite (Saved-Views Phase 2).
+ * A view = a durable named lens (visualization + filters + sort/group, in
+ * `config`) pinned to a `scope` (recent / type:<t> / folder:<id>). Views are
+ * scoped to the authenticated user (or user_id=0 in no-auth mode).
+ *
+ * Scope resolution + access-control filtering live here (not in AuthService),
+ * because they need the WorkspaceManager (filesystem) + access-control helpers:
+ *   - `folder` save scopes mint/read the folder's stable sidecar id (D2).
+ *   - on read, each stored scope is resolved to a concrete `ResolvedScope`
+ *     and folder-scoped views the caller can no longer access are filtered out
+ *     (§4a); a folder whose id no longer resolves is tombstoned as `gone`.
  */
 import type { FastifyInstance } from 'fastify';
 import { AuthService } from '../../services/auth-service.js';

package/dist/server/routes/views-api.js

@@ -1,47 +1,130 @@
 /**
  * Views API routes
  *
- * Per-user saved views backed by AuthService SQLite.
- * Views are scoped to the authenticated user (or user_id=0 in no-auth mode).
+ * Per-user saved views backed by AuthService SQLite (Saved-Views Phase 2).
+ * A view = a durable named lens (visualization + filters + sort/group, in
+ * `config`) pinned to a `scope` (recent / type:<t> / folder:<id>). Views are
+ * scoped to the authenticated user (or user_id=0 in no-auth mode).
+ *
+ * Scope resolution + access-control filtering live here (not in AuthService),
+ * because they need the WorkspaceManager (filesystem) + access-control helpers:
+ *   - `folder` save scopes mint/read the folder's stable sidecar id (D2).
+ *   - on read, each stored scope is resolved to a concrete `ResolvedScope`
+ *     and folder-scoped views the caller can no longer access are filtered out
+ *     (§4a); a folder whose id no longer resolves is tombstoned as `gone`.
  */
+import { hasRepoAccess, canWriteRepo } from '../../services/access-control.js';
+import { reqGitUser } from './graph-api-access.js';
+import { parseScope, buildTypeScope, buildFolderScope, isValidSaveScope, } from '../../core/view-scope.js';
 export async function registerViewsApiRoutes(fastify, authService, workspaceManager) {
     function getUserId(req) {
         return req.user?.id ?? 0;
     }
-    function getEntityTypeCounts() {
-        const counts = {};
-        try {
-            for (const repo of workspaceManager.getAllRepoConfigs()) {
-                const graph = workspaceManager.getGraph(repo.name);
-                const entities = graph.search({});
-                for (const e of entities) {
-                    const type = e.data?.entity_type;
-                    if (type)
-                        counts[type] = (counts[type] ?? 0) + 1;
+    /**
+     * Resolve a stored scope string to a `ResolvedScope` for the given caller.
+     * A folder scope the caller can no longer reach — folder deleted (id resolves
+     * to nothing) OR access revoked (`hasRepoAccess` false) — becomes `gone`, a
+     * removable tombstone. We deliberately do NOT hide it: getUserViews returns
+     * the caller's OWN views, so a hidden pin would be an invisible row the owner
+     * can never delete. `gone` keeps it dimmed-but-removable in the sidebar.
+     */
+    function resolveScopeForCaller(scope, user, folderIndex) {
+        const parsed = parseScope(scope);
+        switch (parsed.kind) {
+            case 'recent':
+                return { kind: 'recent' };
+            case 'type':
+                return { kind: 'type', entityType: parsed.entityType };
+            case 'invalid':
+                return { kind: 'gone' };
+            case 'folder': {
+                const loc = folderIndex
+                    ? (folderIndex.get(parsed.folderId) ?? null)
+                    : workspaceManager.resolveFolderById(parsed.folderId);
+                if (!loc)
+                    return { kind: 'gone' };
+                if (!hasRepoAccess(user, loc.repo, workspaceManager, authService))
+                    return { kind: 'gone' };
+                return { kind: 'folder', repo: loc.repo, folderPath: loc.folderPath };
+            }
+        }
+    }
+    function enrichViews(views, user) {
+        // Resolve every folder scope against ONE folder-id index built in a single
+        // pass over all repos, instead of one `resolveFolderById` per view (each of
+        // which re-walks every repo's folder tree). Only built when a folder view is
+        // present so the common all-recent case stays a pure SQL read.
+        const folderIndex = views.some((v) => parseScope(v.scope).kind === 'folder')
+            ? workspaceManager.buildFolderIdIndex()
+            : undefined;
+        return views.map((v) => ({ ...v, resolvedScope: resolveScopeForCaller(v.scope, user, folderIndex) }));
+    }
+    /**
+     * Convert a client SaveScope into the stored scope string. Folder scopes
+     * mint/read the folder's stable sidecar id so the view survives rename/move
+     * (D2). Throws on an invalid scope (caller returns 400).
+     */
+    function storeScope(scope, req) {
+        switch (scope.kind) {
+            case 'recent':
+                return 'recent';
+            case 'type':
+                return buildTypeScope(scope.entityType);
+            case 'folder': {
+                // ensureFolderId mints + git-commits a sidecar in the target repo, so it
+                // is a write. Gate it on write access BEFORE touching the repo — without
+                // this an authed non-member could force a sidecar commit in a folder
+                // they can't access (read-time enrichment would later hide the view, but
+                // the unauthorized write already happened).
+                const user = req.user;
+                if (!canWriteRepo(user, scope.repo, workspaceManager, authService)) {
+                    throw new Error('No write access to that folder');
                 }
+                const id = workspaceManager.ensureFolderId(scope.repo, scope.folderPath, reqGitUser(req));
+                return buildFolderScope(id);
             }
         }
-        catch { /* ignore */ }
-        return counts;
     }
-    // GET /api/views — list user's views (auto-creates defaults on first access)
+    // GET /api/views — list the caller's own (∪ adopted) views, scope-resolved
+    // and access-filtered.
     fastify.get('/api/views', async (req, reply) => {
         const userId = getUserId(req);
-        authService.ensureDefaultViews(userId, getEntityTypeCounts());
-        return reply.send(authService.getUserViews(userId));
+        const user = req.user;
+        return reply.send(enrichViews(authService.getUserViews(userId), user));
     });
     // POST /api/views — create a new view
     fastify.post('/api/views', async (req, reply) => {
         const userId = getUserId(req);
         const user = req.user;
-        const { name, viewType, config } = req.body ?? {};
+        const { name, viewType, config, scope } = req.body ?? {};
         if (!name) {
             return reply.status(400).send({ error: 'name is required' });
         }
-        const view = authService.createUserView(userId, name, viewType ?? 'list', config ?? {}, user?.displayName ?? user?.email);
-        return reply.send(view);
+        const saveScope = scope ?? { kind: 'recent' };
+        if (!isValidSaveScope(saveScope)) {
+            return reply.status(400).send({ error: 'invalid scope' });
+        }
+        let storedScope;
+        try {
+            storedScope = storeScope(saveScope, req);
+        }
+        catch (err) {
+            return reply.status(400).send({ error: err?.message ?? 'could not resolve scope' });
+        }
+        const view = authService.createUserView(userId, name, viewType ?? 'list', config ?? {}, user?.displayName ?? user?.email, storedScope);
+        const resolvedScope = resolveScopeForCaller(view.scope, user);
+        return reply.send({ ...view, resolvedScope });
+    });
+    // POST /api/views/reorder — persist the caller's pinned-view order. Static
+    // path, so find-my-way matches it before `/api/views/:id`. Atomic in the DB
+    // layer (one transaction) so a drag-reorder can't leave a scrambled order.
+    fastify.post('/api/views/reorder', async (req, reply) => {
+        const userId = getUserId(req);
+        const ids = Array.isArray(req.body?.ids) ? req.body.ids.filter((n) => Number.isInteger(n)) : [];
+        authService.reorderUserViews(userId, ids);
+        return reply.send({ ok: true });
     });
-    // POST /api/views/:id/share — toggle view visibility
+    // POST /api/views/:id/share — toggle view visibility (inert until Phase 4)
     fastify.post('/api/views/:id/share', async (req, reply) => {
         const userId = getUserId(req);
         const viewId = Number(req.params.id);
@@ -53,7 +136,7 @@ export async function registerViewsApiRoutes(fastify, authService, workspaceMana
         authService.setViewVisibility(viewId, userId, visibility);
         return reply.send({ ok: true, visibility });
     });
-    // PUT /api/views/:id — update a view
+    // PUT /api/views/:id — update a view (rename / re-scope / re-config / reorder)
     fastify.put('/api/views/:id', async (req, reply) => {
         const userId = getUserId(req);
         const viewId = Number(req.params.id);
@@ -61,9 +144,23 @@ export async function registerViewsApiRoutes(fastify, authService, workspaceMana
         if (!existing) {
             return reply.status(404).send({ error: 'View not found' });
         }
+        let storedScope;
+        if (req.body?.scope !== undefined) {
+            if (!isValidSaveScope(req.body.scope)) {
+                return reply.status(400).send({ error: 'invalid scope' });
+            }
+            try {
+                storedScope = storeScope(req.body.scope, req);
+            }
+            catch (err) {
+                return reply.status(400).send({ error: err?.message ?? 'could not resolve scope' });
+            }
+        }
         authService.updateUserView(viewId, userId, {
             name: req.body?.name,
             config: req.body?.config,
+            viewType: req.body?.viewType,
+            scope: storedScope,
             sortOrder: req.body?.sortOrder,
         });
         return reply.send({ ok: true });
@@ -79,5 +176,9 @@ export async function registerViewsApiRoutes(fastify, authService, workspaceMana
         authService.deleteUserView(viewId, userId);
         return reply.send({ ok: true });
     });
+    // NOTE: the workspace_views multi-view-checkoff API (/api/workspace-views)
+    // was removed in Saved-Views Phase 1 — the single-current-view + scratch
+    // model replaced it. The auth.db table is left inert (no destructive
+    // migration on live workspaces).
 }
 //# sourceMappingURL=views-api.js.map

package/dist/server/routes/views-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"views-api.js","sourceRoot":"","sources":["../../../src/server/routes/views-api.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwB,EACxB,WAAwB,EACxB,gBAAkC;IAGlC,SAAS,SAAS,CAAC,GAAQ;QACzB,OAAS,GAAW,CAAC,IAA6B,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,SAAS,mBAAmB;QAC1B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,iBAAiB,EAAE,EAAE,CAAC;gBACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,WAAqB,CAAC;oBAC3C,IAAI,IAAI;wBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,6EAA6E;IAC7E,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,WAAW,CAAC,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,OAAO,CAAC,IAAI,CACV,YAAY,EACZ,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1H,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CACF,CAAC;IAEF,qDAAqD;IACrD,OAAO,CAAC,IAAI,CACV,sBAAsB,EACtB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,SAAS,CAAC;QACrD,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9C,CAAC,CACF,CAAC;IAEF,qCAAqC;IACrC,OAAO,CAAC,GAAG,CACT,gBAAgB,EAChB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE;YACzC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI;YACpB,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM;YACxB,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS;SAC/B,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CACF,CAAC;IAEF,wCAAwC;IACxC,OAAO,CAAC,MAAM,CACZ,gBAAgB,EAChB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"views-api.js","sourceRoot":"","sources":["../../../src/server/routes/views-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,gBAAgB,GAGjB,MAAM,0BAA0B,CAAC;AAKlC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwB,EACxB,WAAwB,EACxB,gBAAkC;IAGlC,SAAS,SAAS,CAAC,GAAQ;QACzB,OAAS,GAAW,CAAC,IAA6B,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;OAOG;IACH,SAAS,qBAAqB,CAC5B,KAAa,EACb,IAA0B,EAC1B,WAA+D;QAE/D,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC5B,KAAK,MAAM;gBACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;YACzD,KAAK,SAAS;gBACZ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC1B,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,GAAG,GAAG,WAAW;oBACrB,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;oBAC5C,CAAC,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACxD,IAAI,CAAC,GAAG;oBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAClC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC3F,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,WAAW,CAAC,KAAiB,EAAE,IAA0B;QAChE,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,+DAA+D;QAC/D,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;YAC1E,CAAC,CAAC,gBAAgB,CAAC,kBAAkB,EAAE;YACvC,CAAC,CAAC,SAAS,CAAC;QACd,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC;IAED;;;;OAIG;IACH,SAAS,UAAU,CAAC,KAAgB,EAAE,GAAQ;QAC5C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,OAAO,QAAQ,CAAC;YAClB,KAAK,MAAM;gBACT,OAAO,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC1C,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,yEAAyE;gBACzE,yEAAyE;gBACzE,qEAAqE;gBACrE,yEAAyE;gBACzE,4CAA4C;gBAC5C,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;gBACvD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;oBACnE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM,EAAE,GAAG,gBAAgB,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1F,OAAO,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,uBAAuB;IACvB,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,OAAO,CAAC,IAAI,CACV,YAAY,EACZ,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAI,GAAW,CAAC,IAA4B,CAAC;QACvD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QACzD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,SAAS,GAAc,KAAK,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACzD,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,yBAAyB,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,cAAc,CACrC,MAAM,EACN,IAAI,EACJ,QAAQ,IAAI,MAAM,EAClB,MAAM,IAAI,EAAE,EACZ,IAAI,EAAE,WAAW,IAAI,IAAI,EAAE,KAAK,EAChC,WAAW,CACZ,CAAC;QACF,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAChD,CAAC,CACF,CAAC;IAEF,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,OAAO,CAAC,IAAI,CAA8B,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,WAAW,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,OAAO,CAAC,IAAI,CACV,sBAAsB,EACtB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,UAAU,IAAI,SAAS,CAAC;QACrD,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9C,CAAC,CACF,CAAC;IAEF,+EAA+E;IAC/E,OAAO,CAAC,GAAG,CACT,gBAAgB,EAChB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,WAA+B,CAAC;QACpC,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC;gBACH,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,yBAAyB,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE;YACzC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI;YACpB,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM;YACxB,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ;YAC5B,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS;SAC/B,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CACF,CAAC;IAEF,wCAAwC;IACxC,OAAO,CAAC,MAAM,CACZ,gBAAgB,EAChB,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CACF,CAAC;IAEF,2EAA2E;IAC3E,yEAAyE;IACzE,qEAAqE;IACrE,iCAAiC;AACnC,CAAC"}

package/dist/server/routes/workspace-api.d.ts

@@ -6,4 +6,5 @@
 import type { FastifyInstance } from 'fastify';
 import { WorkspaceManager } from '../../core/workspace-manager.js';
 import { GitUser } from '../../services/git.js';
-export declare function registerWorkspaceApiRoutes(fastify: FastifyInstance, workspaceManager: WorkspaceManager, gitUser: GitUser): Promise<void>;
+import { type AuthService } from '../../services/auth-service.js';
+export declare function registerWorkspaceApiRoutes(fastify: FastifyInstance, workspaceManager: WorkspaceManager, gitUser: GitUser, authService: AuthService): Promise<void>;