Deploy AIOS web (React glide grid + FastAPI slice)

README.md

@@ -1,13 +1,13 @@
----
-title: Loopable
-emoji: 🗂
-colorFrom: indigo
-colorTo: gray
-sdk: docker
-app_port: 7860
-pinned: false
----
-
-Loopable — the AIOS platform shell: a React front end (Airtable-grade grid + dashboard pages)
-over a FastAPI service reusing the platform data layer. Login-gated: a branded login page over an HMAC-signed session cookie, with per-user
-business-unit scope and module grants. Separate from the Streamlit app.
+---
+title: Loopable
+emoji: 🗂
+colorFrom: indigo
+colorTo: gray
+sdk: docker
+app_port: 7860
+pinned: false
+---
+
+Loopable — the AIOS platform shell: a React front end (Airtable-grade grid + dashboard pages)
+over a FastAPI service reusing the platform data layer. Login-gated: a branded login page over an HMAC-signed session cookie, with per-user
+business-unit scope and module grants. Separate from the Streamlit app.

RELEASES.json

@@ -1,323 +1,323 @@
-{
- "current": "4579959",
- "releases": [
-  {
-   "version": "v53",
-   "sha": "89ed2cb",
-   "date": "2026-08-24",
-   "subject": "release v53"
-  },
-  {
-   "version": "v52",
-   "sha": "8263493",
-   "date": "2026-08-23",
-   "subject": "release v52"
-  },
-  {
-   "version": "v51",
-   "sha": "5740d20",
-   "date": "2026-08-23",
-   "subject": "release v51"
-  },
-  {
-   "version": "v50",
-   "sha": "8027c83",
-   "date": "2026-08-23",
-   "subject": "release v50"
-  },
-  {
-   "version": "v49",
-   "sha": "9a14c01",
-   "date": "2026-08-23",
-   "subject": "release v49"
-  },
-  {
-   "version": "v48",
-   "sha": "3c69fd9",
-   "date": "2026-08-23",
-   "subject": "release v48"
-  },
-  {
-   "version": "v47",
-   "sha": "917f9a0",
-   "date": "2026-08-23",
-   "subject": "release v47"
-  },
-  {
-   "version": "v46",
-   "sha": "a8dc531",
-   "date": "2026-08-23",
-   "subject": "release v46"
-  },
-  {
-   "version": "v45",
-   "sha": "0b2b501",
-   "date": "2026-08-23",
-   "subject": "release v45"
-  },
-  {
-   "version": "v44",
-   "sha": "a7877aa",
-   "date": "2026-08-23",
-   "subject": "Hotfix: allow renaming the active Map view"
-  },
-  {
-   "version": "v43",
-   "sha": "e2ba461",
-   "date": "2026-08-23",
-   "subject": "release v43"
-  },
-  {
-   "version": "v42",
-   "sha": "25b885e",
-   "date": "2026-08-23",
-   "subject": "release v42"
-  },
-  {
-   "version": "v41",
-   "sha": "1d6adcc",
-   "date": "2026-08-22",
-   "subject": "v41 vertical route navigation"
-  },
-  {
-   "version": "v40",
-   "sha": "1451837",
-   "date": "2026-08-22",
-   "subject": "release v40 route UI correction"
-  },
-  {
-   "version": "v39",
-   "sha": "a78bdf0",
-   "date": "2026-08-21",
-   "subject": "W39 clean stale migration targets"
-  },
-  {
-   "version": "v38",
-   "sha": "a556631",
-   "date": "2026-08-21",
-   "subject": "W39 reversible Live store cutover"
-  },
-  {
-   "version": "v37",
-   "sha": "1ddd8cf",
-   "date": "2026-08-21",
-   "subject": "W39: coalesce derived workspace reads"
-  },
-  {
-   "version": "v36",
-   "sha": "51db3b7",
-   "date": "2026-08-21",
-   "subject": "W39 share-field oid repair"
-  },
-  {
-   "version": "v35",
-   "sha": "0f64212",
-   "date": "2026-08-21",
-   "subject": "W39 visual QA fixture"
-  },
-  {
-   "version": "v34",
-   "sha": "cb4caa1",
-   "date": "2026-08-21",
-   "subject": "W39 Staging PostgreSQL egress controls"
-  },
-  {
-   "version": "v33",
-   "sha": "2b115e5",
-   "date": "2026-08-21",
-   "subject": "W39: stop nonproduction Postgres background egress"
-  },
-  {
-   "version": "v32",
-   "sha": "b47b27c",
-   "date": "2026-08-21",
-   "subject": "W39: repair Staging Postgres projection"
-  },
-  {
-   "version": "v31",
-   "sha": "8880a49",
-   "date": "2026-08-21",
-   "subject": "v31: Wave 39 staging candidate"
-  },
-  {
-   "version": "v30",
-   "sha": "71776ca",
-   "date": "2026-08-20",
-   "subject": "v30: W39-T29 Member-owned View first-share hotfix"
-  },
-  {
-   "version": "v29",
-   "sha": "55ced50",
-   "date": "2026-08-18",
-   "subject": "v29: the build staging has been running since 2026-08-18 (55ced50)."
-  },
-  {
-   "version": "v28",
-   "sha": "2793e4b",
-   "date": "2026-08-18",
-   "subject": "release v28"
-  },
-  {
-   "version": "v27",
-   "sha": "c05a794",
-   "date": "2026-08-18",
-   "subject": "release v27"
-  },
-  {
-   "version": "v25",
-   "sha": "bc24829",
-   "date": "2026-08-14",
-   "subject": "v25 - wave 32's LIVE build (deployed 2026-08-13, bc24829)"
-  },
-  {
-   "version": "v26",
-   "sha": "6a642e1",
-   "date": "2026-08-14",
-   "subject": "v26 - wave 33's build (deployed 2026-08-14, 6a642e1)"
-  },
-  {
-   "version": "v24",
-   "sha": "514d829",
-   "date": "2026-08-09",
-   "subject": "release v24"
-  },
-  {
-   "version": "v23",
-   "sha": "44cc283",
-   "date": "2026-08-09",
-   "subject": "release v23"
-  },
-  {
-   "version": "v22",
-   "sha": "f14e199",
-   "date": "2026-08-09",
-   "subject": "release v22"
-  },
-  {
-   "version": "v21",
-   "sha": "5fdffce",
-   "date": "2026-08-09",
-   "subject": "release v21"
-  },
-  {
-   "version": "v20",
-   "sha": "442e4a1",
-   "date": "2026-08-09",
-   "subject": "release v20"
-  },
-  {
-   "version": "v19",
-   "sha": "94cb4a4",
-   "date": "2026-08-09",
-   "subject": "release v19"
-  },
-  {
-   "version": "v18",
-   "sha": "0106ef9",
-   "date": "2026-08-09",
-   "subject": "release v18"
-  },
-  {
-   "version": "v17",
-   "sha": "308240c",
-   "date": "2026-08-09",
-   "subject": "release v17"
-  },
-  {
-   "version": "v16",
-   "sha": "a804df5",
-   "date": "2026-08-09",
-   "subject": "release v16"
-  },
-  {
-   "version": "v15",
-   "sha": "6b84d72",
-   "date": "2026-08-09",
-   "subject": "release v15"
-  },
-  {
-   "version": "v14",
-   "sha": "bee5eaf",
-   "date": "2026-08-07",
-   "subject": "release v14"
-  },
-  {
-   "version": "v13",
-   "sha": "314c0e3",
-   "date": "2026-08-06",
-   "subject": "release v13"
-  },
-  {
-   "version": "v12",
-   "sha": "4908f39",
-   "date": "2026-08-06",
-   "subject": "release v12"
-  },
-  {
-   "version": "v11",
-   "sha": "3126617",
-   "date": "2026-08-05",
-   "subject": "release v11"
-  },
-  {
-   "version": "v10",
-   "sha": "43f8042",
-   "date": "2026-08-05",
-   "subject": "release v10"
-  },
-  {
-   "version": "v9",
-   "sha": "2e26f57",
-   "date": "2026-08-05",
-   "subject": "release v9"
-  },
-  {
-   "version": "v8",
-   "sha": "8073b3e",
-   "date": "2026-08-05",
-   "subject": "release v8"
-  },
-  {
-   "version": "v7",
-   "sha": "b1c5a7e",
-   "date": "2026-08-05",
-   "subject": "release v7"
-  },
-  {
-   "version": "v6",
-   "sha": "a344020",
-   "date": "2026-08-05",
-   "subject": "release v6"
-  },
-  {
-   "version": "v5",
-   "sha": "c0b0fbb",
-   "date": "2026-08-05",
-   "subject": "release v5"
-  },
-  {
-   "version": "v4",
-   "sha": "de5037f",
-   "date": "2026-08-05",
-   "subject": "release v4"
-  },
-  {
-   "version": "v3",
-   "sha": "6b9fa62",
-   "date": "2026-08-05",
-   "subject": "release v3"
-  },
-  {
-   "version": "v2",
-   "sha": "fd05861",
-   "date": "2026-08-04",
-   "subject": "release v2"
-  },
-  {
-   "version": "v1",
-   "sha": "5b4e2c4",
-   "date": "2026-08-04",
-   "subject": "release v1"
-  }
- ]
+{
+ "current": "255773b",
+ "releases": [
+  {
+   "version": "v53",
+   "sha": "89ed2cb",
+   "date": "2026-08-24",
+   "subject": "release v53"
+  },
+  {
+   "version": "v52",
+   "sha": "8263493",
+   "date": "2026-08-23",
+   "subject": "release v52"
+  },
+  {
+   "version": "v51",
+   "sha": "5740d20",
+   "date": "2026-08-23",
+   "subject": "release v51"
+  },
+  {
+   "version": "v50",
+   "sha": "8027c83",
+   "date": "2026-08-23",
+   "subject": "release v50"
+  },
+  {
+   "version": "v49",
+   "sha": "9a14c01",
+   "date": "2026-08-23",
+   "subject": "release v49"
+  },
+  {
+   "version": "v48",
+   "sha": "3c69fd9",
+   "date": "2026-08-23",
+   "subject": "release v48"
+  },
+  {
+   "version": "v47",
+   "sha": "917f9a0",
+   "date": "2026-08-23",
+   "subject": "release v47"
+  },
+  {
+   "version": "v46",
+   "sha": "a8dc531",
+   "date": "2026-08-23",
+   "subject": "release v46"
+  },
+  {
+   "version": "v45",
+   "sha": "0b2b501",
+   "date": "2026-08-23",
+   "subject": "release v45"
+  },
+  {
+   "version": "v44",
+   "sha": "a7877aa",
+   "date": "2026-08-23",
+   "subject": "Hotfix: allow renaming the active Map view"
+  },
+  {
+   "version": "v43",
+   "sha": "e2ba461",
+   "date": "2026-08-23",
+   "subject": "release v43"
+  },
+  {
+   "version": "v42",
+   "sha": "25b885e",
+   "date": "2026-08-23",
+   "subject": "release v42"
+  },
+  {
+   "version": "v41",
+   "sha": "1d6adcc",
+   "date": "2026-08-22",
+   "subject": "v41 vertical route navigation"
+  },
+  {
+   "version": "v40",
+   "sha": "1451837",
+   "date": "2026-08-22",
+   "subject": "release v40 route UI correction"
+  },
+  {
+   "version": "v39",
+   "sha": "a78bdf0",
+   "date": "2026-08-21",
+   "subject": "W39 clean stale migration targets"
+  },
+  {
+   "version": "v38",
+   "sha": "a556631",
+   "date": "2026-08-21",
+   "subject": "W39 reversible Live store cutover"
+  },
+  {
+   "version": "v37",
+   "sha": "1ddd8cf",
+   "date": "2026-08-21",
+   "subject": "W39: coalesce derived workspace reads"
+  },
+  {
+   "version": "v36",
+   "sha": "51db3b7",
+   "date": "2026-08-21",
+   "subject": "W39 share-field oid repair"
+  },
+  {
+   "version": "v35",
+   "sha": "0f64212",
+   "date": "2026-08-21",
+   "subject": "W39 visual QA fixture"
+  },
+  {
+   "version": "v34",
+   "sha": "cb4caa1",
+   "date": "2026-08-21",
+   "subject": "W39 Staging PostgreSQL egress controls"
+  },
+  {
+   "version": "v33",
+   "sha": "2b115e5",
+   "date": "2026-08-21",
+   "subject": "W39: stop nonproduction Postgres background egress"
+  },
+  {
+   "version": "v32",
+   "sha": "b47b27c",
+   "date": "2026-08-21",
+   "subject": "W39: repair Staging Postgres projection"
+  },
+  {
+   "version": "v31",
+   "sha": "8880a49",
+   "date": "2026-08-21",
+   "subject": "v31: Wave 39 staging candidate"
+  },
+  {
+   "version": "v30",
+   "sha": "71776ca",
+   "date": "2026-08-20",
+   "subject": "v30: W39-T29 Member-owned View first-share hotfix"
+  },
+  {
+   "version": "v29",
+   "sha": "55ced50",
+   "date": "2026-08-18",
+   "subject": "v29: the build staging has been running since 2026-08-18 (55ced50)."
+  },
+  {
+   "version": "v28",
+   "sha": "2793e4b",
+   "date": "2026-08-18",
+   "subject": "release v28"
+  },
+  {
+   "version": "v27",
+   "sha": "c05a794",
+   "date": "2026-08-18",
+   "subject": "release v27"
+  },
+  {
+   "version": "v25",
+   "sha": "bc24829",
+   "date": "2026-08-14",
+   "subject": "v25 - wave 32's LIVE build (deployed 2026-08-13, bc24829)"
+  },
+  {
+   "version": "v26",
+   "sha": "6a642e1",
+   "date": "2026-08-14",
+   "subject": "v26 - wave 33's build (deployed 2026-08-14, 6a642e1)"
+  },
+  {
+   "version": "v24",
+   "sha": "514d829",
+   "date": "2026-08-09",
+   "subject": "release v24"
+  },
+  {
+   "version": "v23",
+   "sha": "44cc283",
+   "date": "2026-08-09",
+   "subject": "release v23"
+  },
+  {
+   "version": "v22",
+   "sha": "f14e199",
+   "date": "2026-08-09",
+   "subject": "release v22"
+  },
+  {
+   "version": "v21",
+   "sha": "5fdffce",
+   "date": "2026-08-09",
+   "subject": "release v21"
+  },
+  {
+   "version": "v20",
+   "sha": "442e4a1",
+   "date": "2026-08-09",
+   "subject": "release v20"
+  },
+  {
+   "version": "v19",
+   "sha": "94cb4a4",
+   "date": "2026-08-09",
+   "subject": "release v19"
+  },
+  {
+   "version": "v18",
+   "sha": "0106ef9",
+   "date": "2026-08-09",
+   "subject": "release v18"
+  },
+  {
+   "version": "v17",
+   "sha": "308240c",
+   "date": "2026-08-09",
+   "subject": "release v17"
+  },
+  {
+   "version": "v16",
+   "sha": "a804df5",
+   "date": "2026-08-09",
+   "subject": "release v16"
+  },
+  {
+   "version": "v15",
+   "sha": "6b84d72",
+   "date": "2026-08-09",
+   "subject": "release v15"
+  },
+  {
+   "version": "v14",
+   "sha": "bee5eaf",
+   "date": "2026-08-07",
+   "subject": "release v14"
+  },
+  {
+   "version": "v13",
+   "sha": "314c0e3",
+   "date": "2026-08-06",
+   "subject": "release v13"
+  },
+  {
+   "version": "v12",
+   "sha": "4908f39",
+   "date": "2026-08-06",
+   "subject": "release v12"
+  },
+  {
+   "version": "v11",
+   "sha": "3126617",
+   "date": "2026-08-05",
+   "subject": "release v11"
+  },
+  {
+   "version": "v10",
+   "sha": "43f8042",
+   "date": "2026-08-05",
+   "subject": "release v10"
+  },
+  {
+   "version": "v9",
+   "sha": "2e26f57",
+   "date": "2026-08-05",
+   "subject": "release v9"
+  },
+  {
+   "version": "v8",
+   "sha": "8073b3e",
+   "date": "2026-08-05",
+   "subject": "release v8"
+  },
+  {
+   "version": "v7",
+   "sha": "b1c5a7e",
+   "date": "2026-08-05",
+   "subject": "release v7"
+  },
+  {
+   "version": "v6",
+   "sha": "a344020",
+   "date": "2026-08-05",
+   "subject": "release v6"
+  },
+  {
+   "version": "v5",
+   "sha": "c0b0fbb",
+   "date": "2026-08-05",
+   "subject": "release v5"
+  },
+  {
+   "version": "v4",
+   "sha": "de5037f",
+   "date": "2026-08-05",
+   "subject": "release v4"
+  },
+  {
+   "version": "v3",
+   "sha": "6b9fa62",
+   "date": "2026-08-05",
+   "subject": "release v3"
+  },
+  {
+   "version": "v2",
+   "sha": "fd05861",
+   "date": "2026-08-04",
+   "subject": "release v2"
+  },
+  {
+   "version": "v1",
+   "sha": "5b4e2c4",
+   "date": "2026-08-04",
+   "subject": "release v1"
+  }
+ ]
 }

VERSION

@@ -1 +1 @@
-4579959
+255773b

api/routes_customers.py

@@ -21,6 +21,8 @@ SOURCE OF TRUTH; it does not make the two runtimes coherent. The fix is X4/Postg
 owner-blocked on B-3), and no test here may claim read-your-writes ACROSS runtimes — a TestClient
 proof is single-process and would report green on exactly the thing that is still broken.
 """
+import hashlib
+import json
 import math
 import time
 
@@ -1600,6 +1602,44 @@ def _route_delivery_recipient_or_400(raw):
     return recipient
 
 
+def _route_view_revision(view_id, config):
+    """Mint the route source's revision from the server-visible View config.
+
+    A browser may describe the saved View it used to construct a route, but it cannot choose the
+    revision that becomes durable provenance. The complete config comparison below catches a
+    stale browser before a route is scheduled; this digest then records the exact server View
+    state the accepted route came from. It is an audit fingerprint, never a permission token.
+    """
+    canonical = json.dumps({"viewId": str(view_id), "config": config},
+                           sort_keys=True, separators=(",", ":"), ensure_ascii=False)
+    return "view-config-v2-" + hashlib.sha256(canonical.encode("utf-8")).hexdigest()[:24]
+
+
+def _route_snapshot_for_view_or_409(snapshot, source_view):
+    """Accept a route only when the caller's View config is the View visible at this request.
+
+    Ordered stops remain the actual frozen work list. The source View is its separately auditable
+    provenance, so a forged revision must never be stored beside an otherwise valid View id.
+    Copy only canonical server facts forward; the submitted config is a compare-and-discard
+    concurrency guard, not another persisted configuration copy.
+    """
+    source_view_id = str(source_view.get("id") or "").strip()
+    source_config = source_view.get("config")
+    submitted_config = snapshot.get("sourceViewConfig")
+    if not source_view_id or not isinstance(source_config, dict):
+        raise err(409, "stale_route_source_view",
+                  "the saved route View changed; refresh it before scheduling this route")
+    if not isinstance(submitted_config, dict) or submitted_config != source_config:
+        raise err(409, "stale_route_source_view",
+                  "the saved route View changed; refresh it before scheduling this route")
+    return {
+        **snapshot,
+        "sourceViewId": source_view_id,
+        "sourceViewRevision": _route_view_revision(source_view_id, source_config),
+        "sourceViewName": str(source_view.get("name") or source_view_id),
+    }
+
+
 @router.get("/customers/route-deliveries")
 def route_delivery_list(session: Session = Depends(module_gate(MODULE))):
     """Saved C2 route deliveries owned by the caller (or all for an administrator)."""
@@ -1630,13 +1670,13 @@ def route_delivery_create(body: dict = Body(default=None),
     snapshot = body.get("routeSnapshot") if isinstance(body.get("routeSnapshot"), dict) else {}
     # A route snapshot is allowed to freeze its *stops*, never to invent its View provenance.
     # `map-current`/a route-plan fingerprint were a synthetic fallback that made an automation
-    # impossible to audit back to the actual filtered View.  Resolve the submitted id against
-    # this reader's visible View contract and retain the supplied canonical config revision.
+    # impossible to audit back to the actual filtered View. Resolve the submitted id against
+    # this reader's visible View contract, compare the complete config, and mint its revision
+    # server-side; a valid View id with a forged/stale revision is still not an honest snapshot.
     source_view_id = str(snapshot.get("sourceViewId") or "").strip()
-    source_revision = str(snapshot.get("sourceViewRevision") or "").strip()
-    if not source_view_id or source_view_id == "map-current" or not source_revision:
+    if not source_view_id or source_view_id == "map-current":
         raise err(400, "invalid_route_source_view",
-                  "choose an active saved View and include its frozen revision")
+                  "choose an active saved View for this frozen route")
     source_views = {str(view.get("id") or ""): view for view in
                     (grid_assembly(session, consume_corrections=False).get("views") or [])
                     if isinstance(view, dict) and view.get("id")}
@@ -1644,6 +1684,7 @@ def route_delivery_create(body: dict = Body(default=None),
     if source_view is None:
         raise err(400, "unknown_route_source_view",
                   "the route source View is no longer visible to this account")
+    snapshot = _route_snapshot_for_view_or_409(snapshot, source_view)
     raw = {
         "name": " ".join(str(body.get("name") or snapshot.get("sourceViewName") or "Scheduled route").split())[:120],
         "kind": "route_delivery",
@@ -1654,9 +1695,6 @@ def route_delivery_create(body: dict = Body(default=None),
             "recipient": recipient,
             "routeSnapshot": {
                 **snapshot,
-                "sourceViewId": source_view_id,
-                "sourceViewRevision": source_revision,
-                "sourceViewName": str(source_view.get("name") or source_view_id),
                 "mapsPerLink": snapshot.get("mapsPerLink", body.get("mapsPerLink", 10)),
             },
         },

web/src/customer-grid/CustomerGrid.tsx

@@ -268,27 +268,9 @@ function frozenCountOf(config: ViewConfig): number {
 }
 
 /**
- * A View has a durable id but no server-side revision counter on this wire.  A key-sorted,
- * deterministic configuration fingerprint is therefore the actual revision of the View state
- * that produced a frozen route snapshot.  It is provenance, not a permission token.
+ * Route provenance is minted by the API from this saved config.  The client only sends the
+ * current config as a compare guard, so a forged browser fingerprint cannot become durable.
  */
-function routeViewRevision(viewId: string, config: ViewConfig): string {
-  const canonical = (value: unknown): unknown => {
-    if (Array.isArray(value)) return value.map(canonical);
-    if (value && typeof value === "object") {
-      const out: Record<string, unknown> = {};
-      for (const key of Object.keys(value as Record<string, unknown>).sort())
-        out[key] = canonical((value as Record<string, unknown>)[key]);
-      return out;
-    }
-    return value;
-  };
-  const text = JSON.stringify(canonical({ viewId, config }));
-  let hash = 0x811c9dc5;
-  for (let index = 0; index < text.length; index += 1)
-    hash = Math.imul(hash ^ text.charCodeAt(index), 0x01000193);
-  return `view-config-v1-${(hash >>> 0).toString(36)}`;
-}
 /* WAVE 21 item 3 (R6): the id and the NAME both moved to `types.ts` — the id because a second
    copy of a pinned literal is the drift class this repo gates against, the name because it is
    now topic-derived and the host mints the same string. */
@@ -7199,7 +7181,9 @@ function CustomerGridSurface({
     ? {
         id: activeView.id,
         name: viewDisplayName(activeView),
-        revision: routeViewRevision(activeView.id, config),
+        // The API compares this complete saved config to its visible View and mints the durable
+        // revision itself. A browser may carry provenance, never choose it.
+        config: activeView.config,
       }
     : null;
   // Cohort mode's toolbar control (rendered by Toolbar via the `cohortAction` slot; the popover

web/src/customer-grid/MapView.tsx

@@ -54,7 +54,7 @@
 
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import type { KeyboardEvent as ReactKeyboardEvent, PointerEvent as ReactPointerEvent } from "react";
-import type { Field, Row } from "./types";
+import type { Field, Row, ViewConfig } from "./types";
 import { NAV_MINIMIZE_EVENT, signal } from "../apiContract";
 import { formatDisplay } from "./cells";
 import { LAND_PATH, LAKE_PATHS } from "./mapGeometry";
@@ -381,7 +381,8 @@ interface RouteDelivery {
 export interface RouteSourceView {
   id: string;
   name: string;
-  revision: string;
+  /** Exact saved config the API compares before minting immutable route provenance. */
+  config: ViewConfig;
 }
 
 interface MapPoint {
@@ -1534,10 +1535,10 @@ export function MapView({
           recipient: routeRecipient.trim(),
           schedule: { cron: "0 8 * * *", enabled: true },
           routeSnapshot: {
-            // This route's stop ids are frozen below. The View tuple is provenance, supplied by
-            // CustomerGrid from the actual active View and its canonical configuration revision.
+            // This route's stop ids are frozen below. The View config is only a compare guard:
+            // the API resolves this saved View and mints the durable revision itself.
             sourceViewId: activeView.id,
-            sourceViewRevision: activeView.revision,
+            sourceViewConfig: activeView.config,
             sourceViewName: activeView.name,
             timezone,
             routeField: saveTarget || openedRoute,