From dcc07ee7087dbfd78bc15a474000f1716f686d5c Mon Sep 17 00:00:00 2001
From: Priec <filippriec@gmail.com>
Date: Tue, 11 Aug 2026 21:07:21 +0200
Subject: [PATCH] versioning of FK for archiving

---
 client                                       |   2 +-
 common/proto/table_definition.proto          |   9 +
 common/proto/tables_data.proto               |  52 +++
 common/src/grpc_error.rs                     |   1 +
 common/src/proto/descriptor.bin              | Bin 158173 -> 162092 bytes
 common/src/proto/komp_ac.table_definition.rs |   9 +
 common/src/proto/komp_ac.tables_data.rs      | 410 +++++++++++++++++++
 server                                       |   2 +-
 web/src/pages/add_table/draft.rs             |  14 +-
 web/src/pages/add_table/loader.rs            |  23 +-
 web/src/pages/add_table/logic.rs             |   3 +-
 web/src/pages/add_table/state.rs             |   3 +
 web/templates/pages/add_table/builder.html   |  12 +
 13 files changed, 529 insertions(+), 11 deletions(-)

diff --git a/client b/client
index 1e3c9de4..a330f747 160000
--- a/client
+++ b/client
@@ -1 +1 @@
-Subproject commit 1e3c9de431a28de635ef4caac5c7ea69835b0822
+Subproject commit a330f747090baf32825ae6a7caf5f8d95de6d863
diff --git a/common/proto/table_definition.proto b/common/proto/table_definition.proto
index 3cd4b0a6..35a71436 100644
--- a/common/proto/table_definition.proto
+++ b/common/proto/table_definition.proto
@@ -83,6 +83,11 @@ message PostTableDefinitionRequest {
   // to individual MONEY-column currencies: tables may hold money in any currency, and amounts convert
   // to this one when they reach the ledger.
   string accounting_currency = 8;
+
+  // When true, the table is stored once in the global physical schema and is
+  // visible from every profile. profile_name and accounting_currency are ignored.
+  bool global = 9;
+
 }
 
 // Defines the input for explicitly creating tables backed by one invoice
@@ -237,6 +242,9 @@ message ProfileTreeResponse {
 
     // "dynamic" for user-defined tables, "system" for backend-managed tables.
     string table_kind = 5;
+
+    // True when this table is shared by every profile.
+    bool global = 6;
   }
 
   // Profile (schema) entry.
@@ -313,6 +321,7 @@ message TableDetail {
   repeated string row_display_columns = 6;
   map<string, ColumnBehavior> column_behaviors = 7;
   string table_kind = 8;
+  bool global = 9;
 }
 
 // Server-owned behavior for one logical column returned in table details.
diff --git a/common/proto/tables_data.proto b/common/proto/tables_data.proto
index 128970b2..eb855980 100644
--- a/common/proto/tables_data.proto
+++ b/common/proto/tables_data.proto
@@ -47,6 +47,18 @@ service TablesData {
   // - Updates the row and returns the id; queues search indexing (best effort)
   rpc PutTableData(PutTableDataRequest) returns (PutTableDataResponse);
 
+  // Performs a PUT after the user explicitly accepted its cross-profile impact.
+  // This is meaningful only for global tables; ordinary tables behave exactly
+  // like PutTableData.
+  rpc PutTableDataConfirmed(PutTableDataRequest) returns (PutTableDataResponse);
+
+  // Lists the other profiles whose rows currently point at this global row.
+  rpc GetGlobalTableUpdateImpact(GlobalTableUpdateImpactRequest) returns (GlobalTableUpdateImpactResponse);
+
+  // Snapshots the current version of a global row and advances its version.
+  // Existing references remain immutable; new references use the new version.
+  rpc ArchiveGlobalTableData(ArchiveGlobalTableDataRequest) returns (ArchiveGlobalTableDataResponse);
+
   // Soft-delete a single record (sets deleted = true) if it exists and is not already deleted.
   //
   // Behavior:
@@ -68,6 +80,9 @@ service TablesData {
   // - If the physical table is missing but the definition exists, returns INTERNAL
   rpc GetTableData(GetTableDataRequest) returns (GetTableDataResponse);
 
+  // Fetches one exact version of a global row.
+  rpc GetGlobalTableDataVersion(GetGlobalTableDataVersionRequest) returns (GetTableDataResponse);
+
   // Count non-deleted rows in a table.
   //
   // Behavior:
@@ -214,6 +229,32 @@ message PutTableDataResponse {
   int64 row_revision = 4;
 }
 
+message GlobalTableUpdateImpactRequest {
+  string profile_name = 1;
+  string table_name = 2;
+  int64 id = 3;
+}
+
+message GlobalTableUpdateImpactResponse {
+  repeated string affected_profiles = 1;
+}
+
+message ArchiveGlobalTableDataRequest {
+  string profile_name = 1;
+  string table_name = 2;
+  int64 id = 3;
+  int64 expected_revision = 4;
+}
+
+message ArchiveGlobalTableDataResponse {
+  bool success = 1;
+  int64 archived_version = 2;
+  string archived_at = 3;
+  repeated string affected_profiles = 4;
+  int64 current_version = 5;
+  int64 row_revision = 6;
+}
+
 // Soft-delete a single row.
 message DeleteTableDataRequest {
   // Required. Profile (schema) name.
@@ -245,6 +286,14 @@ message GetTableDataRequest {
 
   // Required. Id of the row to fetch.
   int64 id = 3;
+
+}
+
+message GetGlobalTableDataVersionRequest {
+  string profile_name = 1;
+  string table_name = 2;
+  int64 id = 3;
+  int64 version = 4;
 }
 
 // Row payload: all columns returned as strings.
@@ -264,6 +313,9 @@ message GetTableDataResponse {
   // identified by its id alone.
   repeated string row_display_values = 2;
   repeated string row_display_columns = 3;
+
+  // Version paired with each global-link column in this row.
+  map<string, int64> link_versions = 4;
 }
 
 // Count non-deleted rows.
diff --git a/common/src/grpc_error.rs b/common/src/grpc_error.rs
index 0a905dfa..80245001 100644
--- a/common/src/grpc_error.rs
+++ b/common/src/grpc_error.rs
@@ -2,3 +2,4 @@ pub const ERROR_REASON_METADATA_KEY: &str = "komp-ac-error-reason";
 pub const COMPUTED_VALUE_MISMATCH_REASON: &str = "computed-value-mismatch";
 pub const ROW_STALE_REASON: &str = "row-stale";
 pub const ROW_ID_CONFLICT_REASON: &str = "row-id-conflict";
+pub const GLOBAL_UPDATE_CONFIRMATION_REASON: &str = "global-update-confirmation";
diff --git a/common/src/proto/descriptor.bin b/common/src/proto/descriptor.bin
index 41529625c3c97a21763d2b4ffbecce7f3cda18a3..b102d93328d9cea2bcf4cd7a32ad29ad17f16e28 100644
GIT binary patch
delta 12361
zcmaJ{X>?UZw!V9xlbd@_2uThhge$`VRK`Rkv6;mIoJAT0M10~UTp$n<I=O(f!)+TL
z2m+!E#h~z1g!fRidD^7088kd)IXv-!L%V1d*HRP}8;7QydEc%&l^c8c-dg#Q?^J!e
z_TIItPM!MhJ4fP=e;NPX(=>1hAAdm&9zvH;W8<AeD4<fm#EVX=shgavDUAozBQ`oj
zjhlwj#}2P_)!i3UBYmnax`bZu(xP{?W$(lcFLzXZ-PGz;Pk!F6vGP({;L=x(f4ZD%
z|DO@gy^^+ic?%SIxqc2s4mfIg4tHt%W(-Y?xi?Z`fZAI{?HX%uqKk4f+sJd>2uFSA
z2KE!{DHuOJRU4%1=cM`s>FKE;ot#{g3aT4|hICzhYD!R7TLp+7XfyEzv!~B*sIE%Z
z1PxWwQ?rsmvUUmxUNE=1p<2jO>+5C(sky28`N3?7r6yHw|Cto8P0mVbhWgD=YBM}Y
z*2Da?S{bX{^ICa1;#`h+7qy6ha`P>6fC`Jeb*{%Q`EGTjwsChAm2##!*3-*FaKsVc
znZXH70D!R>9J2_<X2jcC1Y<Kw+lMqX&E(Rsi9nm#Oe1NFx3O)Y%`9mb(%5%uFj_`@
zCuZ<!nt2RfP4jRJUQP3G0JFGPXwq>7nFJ6!FfuEz$hN`AEdLyfgx8~|cY=@r_T7fa
zt(5pH1?tdL`XJK~J4d_4l7w^^4FC+LL$82fFdaq%1cT`?8WxA=a7R5B0BCcXX_ACF
zag!jlfi~x?4&i7>!d&j`&6FgtPQu(~p4gllH}iou@aA^x6!HM(u?Z9{7;auO%>iv*
zyjAFmBRvZWz0ru;@!i`Zcd7@c)9B1?v0mDgBLUyeW{Ln{>h`dNfMDwO+}7F@5KP@(
z<cBmg-NBV%6JZ+e2&che!Ya8VuZL}uo;}aA2uAMcSJBG58V<RB^e&35Q1h$llF~fS
zK@s}yT@>r&m7ySAxaKY(^*_~gcK>`N2oG}P2|^7ax-THqNeB_(0z#owXf_%bsh%_F
zg0e+f3MRu{M3_WF!E69x7RPG}>SBqyX9i6evV;(h>4Qb@E}^`$EQEz6)S;V&u&{*A
z?d}cI7J!ziU?vU8EX!KJ1i8xyg=q|8h5-Hc77B+tNbzt^#E-6|$SNYF*~!5KxGPaj
zXmWERl8^fcYX)Wnp%G9=FA&b(C()a}=cDz0LP?s=5;tI}h3I@gp$sp?H01cvwG??-
zwW^_^g=;BR>Md~)Opc7Vsc}LL-9zP@YzpxdrZ!PLU%L+o_cxJjEwYQ`plaPcjead{
z$SK>CCCT`EY~Ilcq&<@Ni!=w`>{o9$&?RO2i3>u*Vrf4WYL{Ub3jh!<*J%pS0d+;1
zep7aUP_UBO9G1);pxhD*r4zMJc=I*I_1%N&c$#i2JD7D$O70-V&D`YZMRJge+j^rk
z1rzs@S}})4m%o%9B?pw3DA)R#gHc{0zm0bpavAlbuTtc7)p{<CD0r1(o$=Ilqms(k
z)a1EzMcHfC5FWzNYlH<R-UGtWYlIahV@D<YBkHZWH2S<F)?GZ5r-bEgD3Zq`g!Mff
zW9RzOw<xlZ)eZCL68|lVo#kBzOSuk;>TTlp)#LMMWYOE?6?;9ss5}?9j;g#{sdwd3
zay_rW%QcTN%2CQ|n|*+Bj!JRuppc0k$JC5l>B-7tEt%rqG0H1xW{QW$WDa_3SICck
zK>QDN?R@H0^Z}vURobAueca>f?)h}hfaB!GLp~nE;Bi7x8{hB%29Ha~14AM@oFKP2
z(Ni62qE4#UZ>h8b4{S7~b9RFA3YtxbPbXx?ZVyeM{!Xenzok2epCmUsl&t)dl;5tI
zD06a>O1owsz|u)N=Ui`GXbJd~>VF&EF#J?YOR@u;qWm_^M5)wMRNOuLK$z64w>KfQ
zglhdt9l4DrX1;0}jMVE_*{LC2v0us5ToMv7)M?2_zu<ZtPl9>+pfVjtlk6E~I*t!h
zg30s$>9~<iS&lIh6Zgtc62wyUrzxIIqLlq<Nn%euvFt~`BmNz$s@ti1(Rbt(VT+d{
zlUJ(ygW7mIU0d-(HWK|hb$`fCi+-cx0W4k`5;5c%b=Dm;;?gtOWa1TyX*omrewaHv
zkdD-*ef9x-J0n}FE;?~w0jo#upguzvaJaAMas*};aGtN15+IB$;5KHP2ZV_Q+^I8`
z5W6uyx|kzNRjWH`WbtB-1>Rr;9TUS#m=lRIHM@yQ)WSQdYdId6_Y<07atVj;CqS57
z!kDRRU^4DUmvdyLdi_qiI<uT(U1Z;O<6?3JOlqfqFb{ynARr8`um%BPaD^B&R5aep
z+%=@)oh;D2#o{_?_c9iyY#e~Pb36Tda7%z;>Rt}I=#9klqpLWg)YBQdG_#6hat3j6
zaD;EGnY(BcK=2LF_y!1zt2y4mw!+|Q?i_?vG_J`~@k$eDsp8C<ELD72W2wLP7^`!w
zjSC2I0h+h~VQMXh?^ZyVTFbtP3lOH(N?7M3<#~Q|14lNigTJG`nGKBXQNqfTur@M|
zK$00C7z8x06hIi<$l)Fh2!k6Ld$ggV@c}lkU{ED2Kob_AZjBd)h9#^AxJ|L9X7VJg
z2klG)feV-$c9u9E<d`|ypcUK)?M&wh+Qe*16$n&7OO>r<6UWR<qg8jt20RWaXyr#A
z=EycC_4m7I%vBFFj)4+MD@np5)*B$01T>KV!sH{i?f_x(5%J~<O-18Yb^q__s-au$
zytLA}*vfe(ctGjIMQ7{q0AXP(ckiL+CEt&3=g5Dm_6smC+Zji3aVcM1dW^&401#XP
zG*JS=;A3!58w7;G$2eckszOEM<2D)~PytOefVwqYmVlr>ZgZQ-mwDO29E65tUI6W|
zVtI#@juZ>}g1bX@2{SCv6KoDyXq0&Yw8P50Ji+176Ro;4jzETrs(zBWV<t3=Lz!U9
zm0kZy#z%x1R*v#dGR{JVi@tvVH*A!>8_-f^<NiaID%<uSvQ+GWJF^}~bNXs*xlwR;
zW?hbgyOZIvoOD|I(LZwJPwMnS8j<-U$9ijLTFb2MvZ)7xGl0e*APnxZg#-wLyKL%P
zOKuyPFVJxSAtiujh5_MfBjd9|QUIts_w1`-2{24Gaz!Q16YLiF(LZzKztn60N>^t7
z%rW`Aaoqy(Z4c&GbAaF*pz#e57WZ&?t_6g_J&bd$p`vlGEye;}QGli@0Cj6vjDVo-
zwZ)hzkc!&JY&-`-T!1DnK*Y6=!_NyqnA*qT=LH~4?PGji7%zbK+pVyG@%1avT5@1%
zKjYLU8A2;8?dOt=sS99D#$ISlf%`1uL)vu4x0pa{O3Lq9yQ>!H8-r&V-_l`cSbCQ6
zF>NfN?{mx*VPg)w0JNj#WZ=eg+^O6)gZmtx-!J5%bCa#V0=dBuXlF#qugR7lT0w1+
z@-xHc;&7jx%v?|b&9+^@xu70kTz}-Z*U88Q_khgic$7z>A3eyC*VI>wX<WfU*(xWX
zJPM^eUQ{>SO%uyrw3hG?mR{ssvylP9(2KH*kJS`3zM_uZP2>B$lBGyFypp9zIlLm2
z>oo<{aEQ4>;xhI93F@oXFQG2wcwmAq)CF*e<Lz|506{*)iL-DhVz<bT9^uH_>f<GJ
zN#+R0%xkDf9DkkJ?D#-P1)wQTKzQ>y$IKTFAPm0F_`;Da7D>6iVP7RcpaL3S0Cj8J
z8kRubV7y9%nkkaHe$(!hK;Qyeu2_DP<7THsE4Xjkow7*KTg=5eNFY!FEmbP_Eyh_>
z$_=f$GtPy^V^r#2nA;BwTcuQiEmwBRzi`}ImYwo1+^$sLH~4<^uN-+_CGVlDGJln0
zoLKZFeec*U3kU`QjX^*de8+BCfH3%u-LiZM@?BfMK%fFzs-*8-Tfb-p^<7)P8DG-(
zo?R$F-~w8%SbooL+h_&%J-coDf{taWl0HC7mGm9UQYC%IggOuv)CS*Q9Qg<bfd5!V
zzsh`I51wr#2_M>15D-iPn&kutlONhs5Fku`Xiq_H#MR^W6a)k+pz#J!w}z)6Kv0j%
zVz>z2<QDtUPdM_0N-d{h#h=JYb2w(CSe*F`Gm`j~Iat5CoO+kzfw75Z*!;}S2_S5K
zCUde-ZfT3fpHr&)3R+ZtD$5Z+PT9#oA8<~|WR$~?wtn<$j(n$%uAs7lujTcA0}Qnl
zH%_Z|_tK4Jr)@6q5Qa|MTmZt*X~~6r610`Ezg3&=rJ?2D+OhFao^qH2Kv2Gw9N<F$
zujlBG9JxouSJKr5KXOhxl&YJfzlYDLs+DwYa3)-z@(?w1Mpn^Fh!hxh7dq;-mGpAw
zg${R;B_U7IYoXJnt9RP;0$i$|xsSdHmOAFth)z;|OC6Zn;vfShesr}HIna3cetLxb
z)ebH$WVb4jyMwh3?^lag(-?oPgS&%+as_|}$<7A#*=l;Ra)T3oZtKTzYJ(GgZtDjK
zcY}lV`>AE3$7Xe64V|pq+>$A2+U(?+uVi6LqBc92q-G|Z-l9AO<`&1*pQqXtNyHWh
zXDhiS5T>k<EyCQ&p|^Ojy|MQ?>OmFTTT*4UY<F-0WT~=VwmaA$<z_-`VZ+&>7Olt4
z#16+bHyipfh&!BiotufW*X(e*cEfd(Az~rybllE~YW4C)N~p6p&`pEzAnUfA&2~Dt
z<F#YU>1?NiYu<Nks_=r`<+x`hULke<Ix1GLZlLEY@FZ(Q-jcf<Y|_?<yeD@#*rvyX
ze&9{HTfMN6##ZibNtAcwZYQ1%Kwgr&C4iUh=rNo=)O8Qgf1kgv<wV86+~?qMZ-<P5
zxz9mG%WYSQR7R7!_CdO$yvYgA6nH4_dM7-d0K!I-Q(`_>0b!x3@xX)h(Q4<hCDizM
zKfXIBQSWuST&qLZi@q{;_LO8gb>*zt$*S}!$|+YDRd5G&=vQ1Yx$8);^Z(IvbgE%?
zU2Q|k@9h;Or%p{(rBhQTg$heUDFsfC_~=60pjD)rR72NI<aNBbzG`~)+?27aE*!vP
zWUxZ@!~iZUIzwKkpLh7Fg8O88dWA_tn=%PnPD6EFZ7D;maz+=}=i|&{zq6NTA5BW8
zOC9uzkM``Ni_^dCu=~pn`?yM~np0m{pQ=qa51gY1ZjI;i*p7=6V13=ZN%bjFp5R`z
zvFiXHPaRi~7hIl7w@BmgWI7qLewOdT4y9hMjn37BSlD&Fqi!3>d)xcBc=<KewKJ_V
z4W;6FUcbTWp@H11+cjtkO*f3FP1nyK-Aa1fM~VJkT;26BT~L@9<`uQ<tiGt^QuW}&
zluwSDI*3p3KjMwQ9?YYtwC$)lX<aDd_oa2UQ>*J|rKb2jWW=`WmLWW>^J4N6Kaa6x
zQTgiM26DT$zgTf<zl(979LTZ3zu2B`uCu$yE4jF3=`{P~_tUQYyl$FXN2h)>C)JQn
zh!Z9GKeM2g58)3x-Ql(Wx$iCJ$G<>KmzMnU>@^M>$^{fZG1X|DN7VQWc>+yo+<75C
zAIm(0*F-deEz_ywQHjSX7?rA@T30`-AxH+J#$F#Jr>0Z&TFRW$fPYfA&aSDhs!rF;
z50X_?so7XhL3O$zsH(4PXebL;R#2^%X}K3%FL#glo0Uq|R@Y9OI;RHeD7YBGNTZn=
zb2Zs8IH;?iQeB&b0-Bcf-VjVqO;65EVMMI>n)zN(Q#~^kw47xlev0#unJS}lrIRBF
z!dhhqEjkI3$OetX4TyvZt*SrIOk5dUQ{4cs)6+Alpbk21y;WNqaA#WAkP5I!5R_Rv
z@OO4yb!|FGrolio({vF?pJo?u^mO`1<xnXuKxB0KcNu08T<CvQwfC?|HDtEIoJy>w
zU`%Z?GrM7Wo%SSUhYP~R71T||9AwAR5^!?L+$7{>Bo(BvBl0}rR>Xq@2lc6`DXe$t
zQ4gURDs=U%S#xwo2M4vOc`Z9&LW9diq?YH+wnC@zdU6Iw<(5GL%0WPbI}Wl40Sz8e
z<$cCFsgV4JH{NwQ&!9@YkDTFAtrde61#5UopOA%DlQX>kNbd{;CN$>y&M3Y-@r9!v
zn#|`k4!@F*PzJ9hXH--^ZDiD3@JF>d*COyooj(FcS)s>#XACD3eS*tUX=v&VsH?D6
zY$*Snzvj8Z8_XFKm3tc*B!)r81Q%(P0K_O`uAbyAGO@*dXChBXd_!v3G;XIRU(Fw%
z7YBc0R6a$89|wP8X<v&#pE!8D_qd^ZzEjmW{~GQ^=XqdNH7C>qtExGn9#~Z)CU^l(
zV-Y`RT4Xt-&uh7J>uIqL-fX;9<-q04P(NME^}Ve!k7qDxm3bf-5oKN<gmHfIom#bV
zBrobyi?cI)g%KRGoZ3*u)+a2d7RRLL<9Y-fua;5cHP`VTcYu6+;UI;#_A-i?*EAsB
z+RLb0cm45Yj#<k@wGgjyl7)8pfEs!|cP>~-v5s2C)hF5e)y(VpyfP?|=8FOkVd#FV
zeF5V2f4^v7-QkBm*RD~Y-pt)9@IQ`GYpenW2;v$F&(eS(t|6Q}<f<R1THjr#I*#SC
ze(Naw0>(p7))8)jBqTsk)`|EyKvRG=625ACsm+scoLD!O+n3{k`FzHY3P9dSG4nwQ
zsJr8XQf`zXdTgf1!|J`U+_zveVWO^tNv(K1q&kh`tIHoEHg}#z?|6vL>8ZUiYR5y=
zr_4JWh8#coC`F!7Y8-bfc$DyED$1RR^X@kF;yC_wzil=HT9$XWS=n3b@_?B1Yc&P#
zZimpD7^XIl<YDS>O_ZZnj^}6@o|^9`DD=8hcohkVn6^toZqyc#!yW3tc)n@q4y$21
zx(;?wUT5t+AS~>lz{Ca!3p)t+x#u7l$oe}e@{GFa20puBCqdd60=rtye@fkZ17BG7
zl&u3igrTQw9RR}6Q??FV8D*EL1N@IV*kxk?lr~!jfFSOYI=D%Xg&20LQ4{#)p}TDi
zm>1OYZpt%PyMVB;o4S}QFhE$?O=aaML9L1JrO2D=(+PZT!CsM4`@*i4#P_RY6ZNUU
z|8NL;wMnYc#rNB3F}nDEnHH%sEsHm)XPc-JM2Vy+OO!~Oey)u}O={=$(?mq_ygGg(
zSC&6-ixOfuD9=-P;b^q+=LxspuezFpNDen%F_A}c*<o9NMjbzF3lLCxNdb=09DL=x
zq5dVw*HuCVhl6iqN0U31Hz;O)uwXRuH$+{NMGwLIZHj!TuDBVC{%u(T&4Tw)HTPz|
zqU@-hY$JFdwUccG@1u6Iwc!1(Om@$*cWrWv;Qg+hW<WUou1s?;I31Pc{=T|+689;4
z-@1#3aQA(}<(MpYKv3SNwk2MFO#%8qZJ5LZGZ3Q9B9H1t{()WOfYOPu$nld5k<~w<
z$fu-#lHtln(?=AO7ZRj(S)d<>Kgke;yaAeu07T!9ZAAdW>c>(MhAJ1MC&Hg(fGb4-
zXt`1pCu~um72Fe26o!kqKe4}*$kkUzfF>9~P(QK70SM|RQXCQtl+2S9`I`ij!4Gca
zL+&KS%=NO?Ge4*Bq8bP#0ch@o0pZ~1_E#)`pngui`5g=(M)_QR2P30E-28$fr^A%t
zUFm*7p{%17&MzfpgJgP)#0hNTHWKHTHfKiS{L<zOGNp*$IEL3&aXEfDCW0wa@wH6_
z5S#=wsQ?7wYnuu{IQg|ng;0V1PUhA`5U7BbD*OK5ZPBAucQ(J$aUqa?Lz&2#FhIQ4
z-EVA7Knca|4uyIm5X=Ia_Z}eneruNiAk2O%OF)A0#9gT9R=t#x05l$<QMcmfIg&V!
zGg1@Z$uD9I7m4^D@3F8|5&>w^YIM=>DZCany6E?&z-3q%`oYdS5au1w%sU_~L8mwO
z$AItxDt$LEW89F${9q<tOo96&u~mU(BLTD#$VT!b#mwC{`hxl+;cnXmfWALv0}vSt
z&{E~9<R`mAac$=Kg0Vz<!VZ+(-*aRIE53!hwaG)*-!pziCR?_acNePJ)3{&xLVF`;
zWZi}K2GPj63*`n;Hft!izPp&!b4^rHX;j_CS*FawVtbE>R>ZJa?h(ykn1rRQ&fLPi
z!IU{zYA@me!CY!D;sL>2Di`sx|7uNlIjftKJn{k~=`PPQCFl5!fSFq(=`Lr~qP%S(
z>E6eY)vVr6a_8b!=y@OG_D){qTGd^}s(3Pwy}*dNtL#0d5p`GDdrTwhu9ADq3t$wI
ztm4Q+tTs*N^NRCfRLQNV#He-I^{l$wh!~A5yWVEU$g=BgUX3if-sV-yvJZrLHL7g0
zT5eR?2W(!AD*J%s^?W@h^17MTwkq7PKy^i4H{0w0!oAI?bY1y?$m?dKzG;>65sv&j
zo6Wm5dOpH2`DvmH4G{}<i@o<ZQYD~SF-EG~Vk0q9<raxVZ#&Q%efLp&@ec%#04-N)
z<WU=o(Iy|Y7yqqg$J%P8L?BQBO`QXRy43~)h+wu_DY3Pnq1&u(0thak<w}`s<CxJ+
z(2CyM827G2F{6+~ALGbAl{<w86c?Z)#Pbf`7x+Xmy6Dr5W2W#d8U*1Jr=+Ltb-s~B
zpXL(tixeY^KFzqH+=nk&P+@5|bI-(+q+T9G<*LV2UIfWg#9KT!a{>rQcW3oP$<J=~
z&FK-XaCEo)8bGE6ny2qRlT{{VM**~!Bwf#BEy?)LWR*!t&@-HYG$}t#faa-H+wO@$
zL3ptg%uZIzZ=dE>r>6(0WYzTW<GM^PpMt8onmM!Zxh%ii#y7tCxR-4XmXH-FzUDK)
zh^u?Kt@$i6+Uj1$@4)2jSco&xa~wIS22bOz#f9+jInkPA@o0_lK)84S5DY|1Q#M9w
zJYY-CNR0>V;wh9!UkDcu0GKainUc^KY{8)walar1C%>|VX!sIGj;Q|A`Lg07bbLvE
zVj<o@3>0P3EM)-Lgo<gr0YukVtT%wL`HJ;M>xPGnHx))UY?d&MYzPU{d~X4Qc}TpO
qsK><g9#-S3d3;}^86LI;42U5QbIfS1Ml(DNon&$pmrCinivI;|&<`5`

delta 9185
zcmYjWYj{;fmc4tQb6+QfBqt$21af()0TLbw3JU1(uoV$sARx4e5(I5X2sEGq*K{y|
z5Rjm$XzVa5h|(hThjN8(`4|~-6a*Uqr-z5b$b2xSWoX9%rm;U~?W$9`{JX2F)~a25
z@2XR^@4G+5Pkj}C?tL0OgzNXITZhna+K^g0gc20)_91y))xY0M1*+eD6jg;|Xn3m2
zFnZ46D~|fdf1nh7r6vxiqw#_#z36>a6*Fe7-*%yWYWfJOap^?r{4Zz@rRLm4Z+RJ)
z*OM3Z!xY->sA*B|n!0@)O^(s{)N51d;b>N)>#<9|J3Tau3Rbyl!xU<tx;UNwPRZ%9
zA}_;pUE+}MlyiaC#tRDw3yN7pK=F1KIY1pc1~hcd;0{3-fi|O+M$#A0wSAz?$ZsFe
z*ms`5Y)La6gZD%$kHLGQbvg#`iPq@=W^%7U(s2cO7C~fYMvg@gnd$emNO(6EdH+T5
z1pDrs&^#(QNeR{R1f5OJiS^WGu{fb3SPcLKD*~&4AXpKs1_*)`!D?6xuH?>oE&$Lf
zTWR8i%D8b5`ar9^u2V1@oG_OQjT4x~33FR{qB%Ei;(<Q!=63E9@BpgVEEGMURkhL_
z(5m8X0#h6rnU(E5fK@xbyCC#572J_{puDo8YW}>${F&v6$17%6sxM~Iu;hYRFD>tg
z6Be=w8vx`NazqOPL4IMhtwoSunBxaDbS>htpo<WiML}pBrU+2RjkZrl7WK6VB8vu;
zW_Y7vr0a(lhgPbFCuw-T=Q+qr-&q{%;`Kp_x?<Q;b@55+Q6^~v4BM6lO9#T(r9s*N
zL3Sz9rc^VL{MG92r)XetHGz<+=?INmO$ccK;h}0mOebgxvSgXs`V>tXvW&10GlnB*
zrHtz=gu*iF)ZIcTETijh@NUrxK+DzeU(t}{^0WfN<t`_rsS!lH0R4^@3WqvLDsedE
zM^;g24G|pdgt0t#6><w*Za4&AxT^^}2r`1u3E0j;7{8jZdNZ~^dg}-YY6i=?0XtZT
z!F7bB9EJdd{m42B?N=qUX=wI3igoZ-I#^6t=6fae>}*;^C9hZ)q7_oFP&`wlWDv}M
zg|c(JMmbZ$$YD2?DyyJZ!^NpIN#;*kzhe+cDe?R5ngeTgtE=;Ac=2xHtUy?lc2l-C
z8M@dGfH1j2Q-JoUCx1<Ii}w&x)z~7Q-9yoQ3uO>>EbyMz6xVk@R<Q;2Z1Klw!{m(o
znBpcjVZCKOro49EeVT&6eWJE6pa)7mNzW1n<r9ipJHwde6Y_JtJK)QRANh<zhgH9Y
zG%D*eiWQ>ObtB@+18Uhqy0iFz6+$C~4iL7MSPuxH1BAULb4O(Pht&TqqzC#QvgV>u
zS_zxoP{fai2)lhG=8pQ2BNY0H)H91{xPOFV*Ln9sDe54pjuM|#hZfP;oTKFBc|~4C
z+QqEns`zQ@U3Q#Y&&%?nrWvywr;K*#2F!C@l4~mkOpG|8RzFSK%1&I%6#Gt4Mt&<(
zEIc7G=&em5Kk^Onf2)dTs8`N6gkht#pnQwmGiu8-G-l8la^nFX%@908NNQsn8X$N^
zmOMBhV!&B)^9qVo;au*b#ym?MO3`3fL)vF&DI=>@LToxK5nCKcApg!Q^(-yD>pZ#X
zsbuG$r_A=PM2X3H>d-CS0HyQP^Lp>0Knb{o+&%?&sQaf;zM8+7hK@u-T2sz~7Rt<R
zm5`imp}ZT?4O*jDZ*NkdiM+j_{&z7=9(du}Wl82<NC$~@?p}}}6=_$qANhg!3aOu#
z&<#01keB1#trg{y=l-b5meM_?Kc*G+=g$2x?I``lLjxQ&A|PVQ%j*55G-|}<^rG;I
zgQG4}rXQ>U4Kk2&JEj}3sLOK5=`;`nu96y(q&`Eh+H*3>A;?^%3|}WVAVjWGt~q!C
zA#s(u6e6kFjrozEDfAn)DM@4Vex_K$yA_L$iEuS@K|!(FTgmyV^K;a#1P$i+M>iy^
z86OPUK7f#{W_WB2B;$VMc@C{mv!A28lh1RktDK~6TqJ8DsVP8+AD|HggkY@|1cYF%
z2pTFnmos+@sQ5k#G~boDcG_~rRuNkO_2BmUz;^S2A+?+nUG>)X@LAx{T6Iq~jYzKI
znA{Ou-0)!AYUZw50tmJN8ruM&xSHdgY%c^?b73N&qO&ed#YaY<rHV0iX{y*#XQ}sl
zjQz64t_uk30yOIagwz@izIK3+TEo6s7a*k8$g=vw<r#jYo<mAK`Wxz(tY;ipvaAeQ
z)_TTuL_7loK|piJ143{;2d5?=1lKc8O+!WJOKd)hpvtlU&9VS>Z#+8?mSw%fxp|tJ
z%#dZhY$FW>E?_hmEbDlgV<vUb3+~G{(iwspm`$nzfeL7;vc(%XW+IJVJs3ygLvTSG
zKk_PvHZZ9*HT2-<R~c6_SxFmlLX))y2$FziC4i7@vUvvx$tJPpPEAE;v+BK!MvrQ?
zacQG{(aafU@qjXjb9(6I0YagfZ@5v%CDV_*!J#co1>F<(&M8-~*HGtVi6?gwHxs-!
z7`JD!GE=O4lY?(I5Ud0=3kSs5H(|4$0}yk($(eGM6e>D5+64lE3TPGxsC$E*3g{%I
zJJ?y75~@wii9lFF1!$)g<xP@Jl0O)WX*V$r4l^y#TWoGZ=#)?a+G!<JZ*g!xM6Vu<
zdrBKGDJCP+H?z4^2?7_;a^*nY%((ZPY3264nQ>t;(_-w~X=>O&OO-3d+i9v?Dc(*~
zaV);Wx3-!b0r#Esv=MOMNt+x2_Z^1Gavf>wN49ckyINaIqmo-W)>|9XR-*Qvbv+OS
z0gW+$5PZ+(79a%Qvz~7&zTL(=P%jb)9sx8F285~G7`J|L0iYgS)K9~FU`TD_(lUMT
z&+;QXIP?cKYdPJO+`%z<eYkFx*!Di+t2sch4ba#I2*vj~xO@Ua@O{SR(@@d*flbCN
zol$@$D*$zGkc@z!eqfU^nI##uli64fgmnR$bpc{sJ2`j*077af2X6pCNbO|20gM$u
zDSJ9*F&?Y}t&#(!6ys_o9zrjaQk<VO$0M*N<9IYu;C{$>`<lUcDhaewl71iBgEmXQ
z_CI7ie}lnL`jGMdHA)z}i@7xD48saQJ8SrtFk=^YDY4z)?&AIf0xkycwmT+^CH(+x
zL?r!o+w?;(sJkWoCLsN?{m32;eX2fPNe^Z1krQwdLYyrj-mCh&K$8dTwdXn-A+(pH
z=6nK#&|W#5$7>2Y_u*VG_=TF%LLJnfUZ7hBpuv0;vUPCxrO6W9eL^0m$%yTK=1#bk
z9d4n1YW6DXT7m|%glrwo{Ty$vR}TpCelEBUw;pzL{K)4V`cnOI6%9{*&N1_y$&n=-
zU^YiO5PSk?QVkH+9^jaHQ~*No0OL_1p~#WsIcUEXK%fE|TL5)$+zQJ=4l=$KLQUpK
zmVRN+Js@xaEmxGk;J7*W&<pMt_T0-6bci`mFA@k;KueW8Jj8MHra`YBjEkSK7<qS?
zx#Qq~D~ShexpM9u=D1asbMG*>?||DTc99?XibMaZ2G-H&<X4P)nkf3>zN7X40)il*
z5d?(bQF{OZLhz_PfP7ixF`JD*paNQ|xbK+FM)ZPuOtMkC&lmR{w`mUqE}-R#@^O0z
zqZi!c_7L_3eVwL?`v5If-1l{wD(?GQsDt5xTt9MxL#OeDU$Ta7N}jMc%Up57Nqfx!
zf+V2HXh2AwwAUO!NS?IUoLn*Wl)dHvfeL7>0o1+0H3tyXQ?eOuhc(eWKXQgc=hfh~
zbX(pTxk`>iMDoO#ZxNA#o6ODmjkVOf1Pw+L-O&8j#sm<W-%3oDk!GX!oVvP}YD><g
zIbz2-8;m?{$2kc`3G8U+M_M@aSGDa$D$Z(=kM%?dwG%VGS1m8n!^PiQU!V~}-&<b*
zV)F0B7joxsC%(9-s@Boal8bh3G)gN6J^%#eqWAzeeSB;qKQbN<r`FNkSwC{PJyO*T
z>nG?Xb#p!4leiS@PiaKXT#{Y%IaUe`-K(rN*3*H)tIS<wOGqn5UFELbyh~;jV6|Ga
zo~|US9dj+jAW6S!2T~gycp%@8ta3uTQ*XUQZ<4>tL9IYet9*H`*EzgXO>UqE{W=HF
z^-ty1jSlh7I<>cfJ}X=21TS3O45QXL!3$S6V7coY?B5p4#E1s<k)rR*8m?uEn;M)9
z^BfhXII6)xkXo5Ax=EdG1hdI;WBNrW1H}<d4sJ^FFxL%WHVN}B4y;AP>#3h#p&P06
z^=qlJTV8iibFoy}FRwc|Af*@}S~zevs)w6U4A|(nrkJ3cLEPxHFKi{sS+mjU)*Tfd
zL&QdS+i?pEW~mLoMV0+Z6HO^YL)vV8({fN`wR7vcmV-L$DeEeH?zXBGuhBQ9Td!rx
zhi<Ebli4!mQ@7Q@+5BKIdDM5et5<(Z<IA>RON@fJ-HE5Ij)J&dtUh3;jNvY#x;N7o
z{Xe)iIx#RmaByX}Q^vsjz(E>IRViQ6VVCN<f$l8X<pkFPG|IQ#32qpG(AeeVn@1=h
z6n3T520Hf=|9(!Yx{OzZQ<Xz_6!9fecMju^xZq~B_a;<Q{^d5#R7*EfruvWD_!R#X
zPW{vEd>^U05&S20Y9ybGKR?0z1+hVWJc=jbzlTnD@F%g1zp&><LO3y<L8%`1^OMvU
z5qAbf^uGzxfg<>z{6098!-8bo&11cvQFH`E5qV_lqX+o!)E6HXXJkaaxH1kkd}n0t
z^%j9Ovi~Tr*35;f@R-!t@wf!_MTDI(5jpaO6$Wcehkh1;HRjd{-n)i{67{%L^+Vi?
zN)TOVTtqJG!is=3uJbJxfi-T_B(D&=7A~I{TB`nS0vEQO80+L!A`r4KoyjUXk*oSn
z#)%0HX@lbApf(Kzjmh@B#5VJtsobGpp_(*}Z&T+c@`&D3TbbCD&eY&<2fZVmsn}Nk
z9M@C9vL&g9Ch;HLfo2}uO`Rp7Zo#agyrjEaMa2e*!4i~`60jVnUNwd4)aXaJFsqtk
zoxNfR>Qk>qEqa9e7T4I)BpQ)5HMTSfh^(oR(&P=Ag3elXWhQqo#mR>)S8EHDrr1_X
z!MO_vVl5$IrS5|h(05m=UQ@Yvz)A{kOK61LO2YkLF0O!}td!dDAWZ>6mAhj>FZJ#$
z?xZ$N<&Gt2Fjp<o7wFX#GnWrQJsg)0DKDS`_9BJWtG`U;epxRPqIDM}b@{7a^?sD^
zE~_Ut4`5ULs;8bs+6q(ps;551UJnR4ex!jy8;A<>6T{WdFd<jYum-6+Nr_edKXDt?
z@kjao;zsKW{m+TpNWmKx5Vkc+eeNDjfk2ZQH;wNtZc0<+JZ`dea{P$`N|X5FVNHSi
zn$?%nc*@XbTQzg=l|(CL6l%i(q0meTvn)U;G!x$SJ+TfK?|KUTPR)9Zdt|*qC~*ye
zuKdY@<My@3cv$g9n*#d36?dae0sZF+V2}c?%(B^}0DdC{Hrq7-N}o*uKv=L@QecXn
z3v1Y-e)%{*GIWbw144o|Y@rPEo(F`&7V2u=J%CWyLd7M>KK*aSdxST|mB;z|?DwR|
z-4D9@&x-A&_AcPwWdN{fyR`@qdfROv0HL>C0wEcu|FPIXDrYX2s=d=WGGIrVC`;L4
z!(slm*dgH<pov(@PW)d{&_gYri`2|3=iCxBnAF5S79j7W;K6DBz}QKsejIW&8%FF)
zjW6f>xMZJA!?4cheKrjNWt61hgPMcy;(k(nD|jpxDcA7*>FMMezMo>|Zzc0j#(t@|
z%HGG{5}#A(xEenbd;fFU39Wxi98@(k`Oe~lHt^<eiGw!q=5L9EHt_myiNg~3qT<8W
zPv&ol!#3oAu==osycevF$gV%4#?InC#Ye2UXoR^(2=6J`^?;xpp?3M+&6)yqOl_XU
zgZmy!Q)JH_vwJ<FeRGVk*Nd=1{Q2=`3jHUkuV!=iJo)7QneZo~<OWK|@*jlB4FI_9
zgf-n%nNQf<FjeLgHaDVT<Y|)|WdLBFPBSGrPTS-_FKj+7$zkTiqR)`}at`t_s$Uvs
z>_Py+JVU|z5D?5W@~4voIV$L^333tubDm8z#RX?=kkPBhBFM74Q4>E;p%$D{?Gq1H
z%$Q$1z5G|@^UD)e<?|{l=FBS(3V3p<I4}Q9$(f=n=HC(L7K}-ZtNL|$V%Chrv_w_K
z!o<R9^AhT(3LZ8PV_*aZnWu@VqJL)-#8lD0lLQ$EBTz-ZK%vW|Dk`~eUL12>uzOUO
z(k}*aFqQO+)|;l1e$mFkRMIcnIG`HtyZ;mH(bt~hqKy8qJuZobOUt6U+@}lxMqaX>
z0tDrf-F<-Y)Fs({Lt!M!>3^fp3+kIH9+c-{;NN6R{1ul1Q&X==^`6JGsSGuA985L#
zp=C<yHJoq$3;={^4dd>(M_xgmOu0fGoX@+H_>H}~!WL@)VciN_tO1mv?3+^>5JD@Y
z`YP{K6v^=gv}GS4C;^(X4<M9Qrj=yUmA34IUMQ{Pwy68aVTl5J9pel5!UFD=n}Lya
z@&uOzMd93c*Q(!Fa-UNChUQxPcml-8wf3<G2+g(f*pu@TRdnC2SJ`v9tjrYH>(fM8
zR=s`kp%=t@dGSdp0F~|rRJv8|LcSxn4F;kl-c#G6Yu$~;7E|eNw34RM-DqtwmF`As
z3(D5=5fxiXO@aHG61mud61llnm;!f`*fJT5Xd^CeR+|>_gnsyq)uT{u&TT*tn>l6+
T<>Jw1JRKj4R902YuPFV0NxW_G

diff --git a/common/src/proto/komp_ac.table_definition.rs b/common/src/proto/komp_ac.table_definition.rs
index 257ebf27..c8c6d77f 100644
--- a/common/src/proto/komp_ac.table_definition.rs
+++ b/common/src/proto/komp_ac.table_definition.rs
@@ -37,6 +37,10 @@ pub struct PostTableDefinitionRequest {
     /// to this one when they reach the ledger.
     #[prost(string, tag = "8")]
     pub accounting_currency: ::prost::alloc::string::String,
+    /// When true, the table is stored once in the global physical schema and is
+    /// visible from every profile. profile_name and accounting_currency are ignored.
+    #[prost(bool, tag = "9")]
+    pub global: bool,
 }
 /// Defines the input for explicitly creating tables backed by one invoice
 /// template. typst_source must contain exactly one field declaration:
@@ -215,6 +219,9 @@ pub mod profile_tree_response {
         /// "dynamic" for user-defined tables, "system" for backend-managed tables.
         #[prost(string, tag = "5")]
         pub table_kind: ::prost::alloc::string::String,
+        /// True when this table is shared by every profile.
+        #[prost(bool, tag = "6")]
+        pub global: bool,
     }
     /// Profile (schema) entry.
     #[derive(Clone, PartialEq, ::prost::Message)]
@@ -324,6 +331,8 @@ pub struct TableDetail {
     >,
     #[prost(string, tag = "8")]
     pub table_kind: ::prost::alloc::string::String,
+    #[prost(bool, tag = "9")]
+    pub global: bool,
 }
 /// Server-owned behavior for one logical column returned in table details.
 #[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
diff --git a/common/src/proto/komp_ac.tables_data.rs b/common/src/proto/komp_ac.tables_data.rs
index 627c388a..161d1d8b 100644
--- a/common/src/proto/komp_ac.tables_data.rs
+++ b/common/src/proto/komp_ac.tables_data.rs
@@ -149,6 +149,46 @@ pub struct PutTableDataResponse {
     #[prost(int64, tag = "4")]
     pub row_revision: i64,
 }
+#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
+pub struct GlobalTableUpdateImpactRequest {
+    #[prost(string, tag = "1")]
+    pub profile_name: ::prost::alloc::string::String,
+    #[prost(string, tag = "2")]
+    pub table_name: ::prost::alloc::string::String,
+    #[prost(int64, tag = "3")]
+    pub id: i64,
+}
+#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
+pub struct GlobalTableUpdateImpactResponse {
+    #[prost(string, repeated, tag = "1")]
+    pub affected_profiles: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
+}
+#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
+pub struct ArchiveGlobalTableDataRequest {
+    #[prost(string, tag = "1")]
+    pub profile_name: ::prost::alloc::string::String,
+    #[prost(string, tag = "2")]
+    pub table_name: ::prost::alloc::string::String,
+    #[prost(int64, tag = "3")]
+    pub id: i64,
+    #[prost(int64, tag = "4")]
+    pub expected_revision: i64,
+}
+#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
+pub struct ArchiveGlobalTableDataResponse {
+    #[prost(bool, tag = "1")]
+    pub success: bool,
+    #[prost(int64, tag = "2")]
+    pub archived_version: i64,
+    #[prost(string, tag = "3")]
+    pub archived_at: ::prost::alloc::string::String,
+    #[prost(string, repeated, tag = "4")]
+    pub affected_profiles: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
+    #[prost(int64, tag = "5")]
+    pub current_version: i64,
+    #[prost(int64, tag = "6")]
+    pub row_revision: i64,
+}
 /// Soft-delete a single row.
 #[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
 pub struct DeleteTableDataRequest {
@@ -185,6 +225,17 @@ pub struct GetTableDataRequest {
     #[prost(int64, tag = "3")]
     pub id: i64,
 }
+#[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
+pub struct GetGlobalTableDataVersionRequest {
+    #[prost(string, tag = "1")]
+    pub profile_name: ::prost::alloc::string::String,
+    #[prost(string, tag = "2")]
+    pub table_name: ::prost::alloc::string::String,
+    #[prost(int64, tag = "3")]
+    pub id: i64,
+    #[prost(int64, tag = "4")]
+    pub version: i64,
+}
 /// Row payload: all columns returned as strings.
 #[derive(Clone, PartialEq, ::prost::Message)]
 pub struct GetTableDataResponse {
@@ -209,6 +260,9 @@ pub struct GetTableDataResponse {
     pub row_display_values: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
     #[prost(string, repeated, tag = "3")]
     pub row_display_columns: ::prost::alloc::vec::Vec<::prost::alloc::string::String>,
+    /// Version paired with each global-link column in this row.
+    #[prost(map = "string, int64", tag = "4")]
+    pub link_versions: ::std::collections::HashMap<::prost::alloc::string::String, i64>,
 }
 /// Count non-deleted rows.
 #[derive(Clone, PartialEq, Eq, Hash, ::prost::Message)]
@@ -443,6 +497,99 @@ pub mod tables_data_client {
                 );
             self.inner.unary(req, path, codec).await
         }
+        /// Performs a PUT after the user explicitly accepted its cross-profile impact.
+        /// This is meaningful only for global tables; ordinary tables behave exactly
+        /// like PutTableData.
+        pub async fn put_table_data_confirmed(
+            &mut self,
+            request: impl tonic::IntoRequest<super::PutTableDataRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::PutTableDataResponse>,
+            tonic::Status,
+        > {
+            self.inner
+                .ready()
+                .await
+                .map_err(|e| {
+                    tonic::Status::unknown(
+                        format!("Service was not ready: {}", e.into()),
+                    )
+                })?;
+            let codec = tonic_prost::ProstCodec::default();
+            let path = http::uri::PathAndQuery::from_static(
+                "/komp_ac.tables_data.TablesData/PutTableDataConfirmed",
+            );
+            let mut req = request.into_request();
+            req.extensions_mut()
+                .insert(
+                    GrpcMethod::new(
+                        "komp_ac.tables_data.TablesData",
+                        "PutTableDataConfirmed",
+                    ),
+                );
+            self.inner.unary(req, path, codec).await
+        }
+        /// Lists the other profiles whose rows currently point at this global row.
+        pub async fn get_global_table_update_impact(
+            &mut self,
+            request: impl tonic::IntoRequest<super::GlobalTableUpdateImpactRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::GlobalTableUpdateImpactResponse>,
+            tonic::Status,
+        > {
+            self.inner
+                .ready()
+                .await
+                .map_err(|e| {
+                    tonic::Status::unknown(
+                        format!("Service was not ready: {}", e.into()),
+                    )
+                })?;
+            let codec = tonic_prost::ProstCodec::default();
+            let path = http::uri::PathAndQuery::from_static(
+                "/komp_ac.tables_data.TablesData/GetGlobalTableUpdateImpact",
+            );
+            let mut req = request.into_request();
+            req.extensions_mut()
+                .insert(
+                    GrpcMethod::new(
+                        "komp_ac.tables_data.TablesData",
+                        "GetGlobalTableUpdateImpact",
+                    ),
+                );
+            self.inner.unary(req, path, codec).await
+        }
+        /// Snapshots the current version of a global row and advances its version.
+        /// Existing references remain immutable; new references use the new version.
+        pub async fn archive_global_table_data(
+            &mut self,
+            request: impl tonic::IntoRequest<super::ArchiveGlobalTableDataRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::ArchiveGlobalTableDataResponse>,
+            tonic::Status,
+        > {
+            self.inner
+                .ready()
+                .await
+                .map_err(|e| {
+                    tonic::Status::unknown(
+                        format!("Service was not ready: {}", e.into()),
+                    )
+                })?;
+            let codec = tonic_prost::ProstCodec::default();
+            let path = http::uri::PathAndQuery::from_static(
+                "/komp_ac.tables_data.TablesData/ArchiveGlobalTableData",
+            );
+            let mut req = request.into_request();
+            req.extensions_mut()
+                .insert(
+                    GrpcMethod::new(
+                        "komp_ac.tables_data.TablesData",
+                        "ArchiveGlobalTableData",
+                    ),
+                );
+            self.inner.unary(req, path, codec).await
+        }
         /// Soft-delete a single record (sets deleted = true) if it exists and is not already deleted.
         ///
         /// Behavior:
@@ -514,6 +661,36 @@ pub mod tables_data_client {
                 );
             self.inner.unary(req, path, codec).await
         }
+        /// Fetches one exact version of a global row.
+        pub async fn get_global_table_data_version(
+            &mut self,
+            request: impl tonic::IntoRequest<super::GetGlobalTableDataVersionRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::GetTableDataResponse>,
+            tonic::Status,
+        > {
+            self.inner
+                .ready()
+                .await
+                .map_err(|e| {
+                    tonic::Status::unknown(
+                        format!("Service was not ready: {}", e.into()),
+                    )
+                })?;
+            let codec = tonic_prost::ProstCodec::default();
+            let path = http::uri::PathAndQuery::from_static(
+                "/komp_ac.tables_data.TablesData/GetGlobalTableDataVersion",
+            );
+            let mut req = request.into_request();
+            req.extensions_mut()
+                .insert(
+                    GrpcMethod::new(
+                        "komp_ac.tables_data.TablesData",
+                        "GetGlobalTableDataVersion",
+                    ),
+                );
+            self.inner.unary(req, path, codec).await
+        }
         /// Count non-deleted rows in a table.
         ///
         /// Behavior:
@@ -655,6 +832,33 @@ pub mod tables_data_server {
             tonic::Response<super::PutTableDataResponse>,
             tonic::Status,
         >;
+        /// Performs a PUT after the user explicitly accepted its cross-profile impact.
+        /// This is meaningful only for global tables; ordinary tables behave exactly
+        /// like PutTableData.
+        async fn put_table_data_confirmed(
+            &self,
+            request: tonic::Request<super::PutTableDataRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::PutTableDataResponse>,
+            tonic::Status,
+        >;
+        /// Lists the other profiles whose rows currently point at this global row.
+        async fn get_global_table_update_impact(
+            &self,
+            request: tonic::Request<super::GlobalTableUpdateImpactRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::GlobalTableUpdateImpactResponse>,
+            tonic::Status,
+        >;
+        /// Snapshots the current version of a global row and advances its version.
+        /// Existing references remain immutable; new references use the new version.
+        async fn archive_global_table_data(
+            &self,
+            request: tonic::Request<super::ArchiveGlobalTableDataRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::ArchiveGlobalTableDataResponse>,
+            tonic::Status,
+        >;
         /// Soft-delete a single record (sets deleted = true) if it exists and is not already deleted.
         ///
         /// Behavior:
@@ -688,6 +892,14 @@ pub mod tables_data_server {
             tonic::Response<super::GetTableDataResponse>,
             tonic::Status,
         >;
+        /// Fetches one exact version of a global row.
+        async fn get_global_table_data_version(
+            &self,
+            request: tonic::Request<super::GetGlobalTableDataVersionRequest>,
+        ) -> std::result::Result<
+            tonic::Response<super::GetTableDataResponse>,
+            tonic::Status,
+        >;
         /// Count non-deleted rows in a table.
         ///
         /// Behavior:
@@ -934,6 +1146,152 @@ pub mod tables_data_server {
                     };
                     Box::pin(fut)
                 }
+                "/komp_ac.tables_data.TablesData/PutTableDataConfirmed" => {
+                    #[allow(non_camel_case_types)]
+                    struct PutTableDataConfirmedSvc<T: TablesData>(pub Arc<T>);
+                    impl<
+                        T: TablesData,
+                    > tonic::server::UnaryService<super::PutTableDataRequest>
+                    for PutTableDataConfirmedSvc<T> {
+                        type Response = super::PutTableDataResponse;
+                        type Future = BoxFuture<
+                            tonic::Response<Self::Response>,
+                            tonic::Status,
+                        >;
+                        fn call(
+                            &mut self,
+                            request: tonic::Request<super::PutTableDataRequest>,
+                        ) -> Self::Future {
+                            let inner = Arc::clone(&self.0);
+                            let fut = async move {
+                                <T as TablesData>::put_table_data_confirmed(&inner, request)
+                                    .await
+                            };
+                            Box::pin(fut)
+                        }
+                    }
+                    let accept_compression_encodings = self.accept_compression_encodings;
+                    let send_compression_encodings = self.send_compression_encodings;
+                    let max_decoding_message_size = self.max_decoding_message_size;
+                    let max_encoding_message_size = self.max_encoding_message_size;
+                    let inner = self.inner.clone();
+                    let fut = async move {
+                        let method = PutTableDataConfirmedSvc(inner);
+                        let codec = tonic_prost::ProstCodec::default();
+                        let mut grpc = tonic::server::Grpc::new(codec)
+                            .apply_compression_config(
+                                accept_compression_encodings,
+                                send_compression_encodings,
+                            )
+                            .apply_max_message_size_config(
+                                max_decoding_message_size,
+                                max_encoding_message_size,
+                            );
+                        let res = grpc.unary(method, req).await;
+                        Ok(res)
+                    };
+                    Box::pin(fut)
+                }
+                "/komp_ac.tables_data.TablesData/GetGlobalTableUpdateImpact" => {
+                    #[allow(non_camel_case_types)]
+                    struct GetGlobalTableUpdateImpactSvc<T: TablesData>(pub Arc<T>);
+                    impl<
+                        T: TablesData,
+                    > tonic::server::UnaryService<super::GlobalTableUpdateImpactRequest>
+                    for GetGlobalTableUpdateImpactSvc<T> {
+                        type Response = super::GlobalTableUpdateImpactResponse;
+                        type Future = BoxFuture<
+                            tonic::Response<Self::Response>,
+                            tonic::Status,
+                        >;
+                        fn call(
+                            &mut self,
+                            request: tonic::Request<
+                                super::GlobalTableUpdateImpactRequest,
+                            >,
+                        ) -> Self::Future {
+                            let inner = Arc::clone(&self.0);
+                            let fut = async move {
+                                <T as TablesData>::get_global_table_update_impact(
+                                        &inner,
+                                        request,
+                                    )
+                                    .await
+                            };
+                            Box::pin(fut)
+                        }
+                    }
+                    let accept_compression_encodings = self.accept_compression_encodings;
+                    let send_compression_encodings = self.send_compression_encodings;
+                    let max_decoding_message_size = self.max_decoding_message_size;
+                    let max_encoding_message_size = self.max_encoding_message_size;
+                    let inner = self.inner.clone();
+                    let fut = async move {
+                        let method = GetGlobalTableUpdateImpactSvc(inner);
+                        let codec = tonic_prost::ProstCodec::default();
+                        let mut grpc = tonic::server::Grpc::new(codec)
+                            .apply_compression_config(
+                                accept_compression_encodings,
+                                send_compression_encodings,
+                            )
+                            .apply_max_message_size_config(
+                                max_decoding_message_size,
+                                max_encoding_message_size,
+                            );
+                        let res = grpc.unary(method, req).await;
+                        Ok(res)
+                    };
+                    Box::pin(fut)
+                }
+                "/komp_ac.tables_data.TablesData/ArchiveGlobalTableData" => {
+                    #[allow(non_camel_case_types)]
+                    struct ArchiveGlobalTableDataSvc<T: TablesData>(pub Arc<T>);
+                    impl<
+                        T: TablesData,
+                    > tonic::server::UnaryService<super::ArchiveGlobalTableDataRequest>
+                    for ArchiveGlobalTableDataSvc<T> {
+                        type Response = super::ArchiveGlobalTableDataResponse;
+                        type Future = BoxFuture<
+                            tonic::Response<Self::Response>,
+                            tonic::Status,
+                        >;
+                        fn call(
+                            &mut self,
+                            request: tonic::Request<super::ArchiveGlobalTableDataRequest>,
+                        ) -> Self::Future {
+                            let inner = Arc::clone(&self.0);
+                            let fut = async move {
+                                <T as TablesData>::archive_global_table_data(
+                                        &inner,
+                                        request,
+                                    )
+                                    .await
+                            };
+                            Box::pin(fut)
+                        }
+                    }
+                    let accept_compression_encodings = self.accept_compression_encodings;
+                    let send_compression_encodings = self.send_compression_encodings;
+                    let max_decoding_message_size = self.max_decoding_message_size;
+                    let max_encoding_message_size = self.max_encoding_message_size;
+                    let inner = self.inner.clone();
+                    let fut = async move {
+                        let method = ArchiveGlobalTableDataSvc(inner);
+                        let codec = tonic_prost::ProstCodec::default();
+                        let mut grpc = tonic::server::Grpc::new(codec)
+                            .apply_compression_config(
+                                accept_compression_encodings,
+                                send_compression_encodings,
+                            )
+                            .apply_max_message_size_config(
+                                max_decoding_message_size,
+                                max_encoding_message_size,
+                            );
+                        let res = grpc.unary(method, req).await;
+                        Ok(res)
+                    };
+                    Box::pin(fut)
+                }
                 "/komp_ac.tables_data.TablesData/DeleteTableData" => {
                     #[allow(non_camel_case_types)]
                     struct DeleteTableDataSvc<T: TablesData>(pub Arc<T>);
@@ -1024,6 +1382,58 @@ pub mod tables_data_server {
                     };
                     Box::pin(fut)
                 }
+                "/komp_ac.tables_data.TablesData/GetGlobalTableDataVersion" => {
+                    #[allow(non_camel_case_types)]
+                    struct GetGlobalTableDataVersionSvc<T: TablesData>(pub Arc<T>);
+                    impl<
+                        T: TablesData,
+                    > tonic::server::UnaryService<
+                        super::GetGlobalTableDataVersionRequest,
+                    > for GetGlobalTableDataVersionSvc<T> {
+                        type Response = super::GetTableDataResponse;
+                        type Future = BoxFuture<
+                            tonic::Response<Self::Response>,
+                            tonic::Status,
+                        >;
+                        fn call(
+                            &mut self,
+                            request: tonic::Request<
+                                super::GetGlobalTableDataVersionRequest,
+                            >,
+                        ) -> Self::Future {
+                            let inner = Arc::clone(&self.0);
+                            let fut = async move {
+                                <T as TablesData>::get_global_table_data_version(
+                                        &inner,
+                                        request,
+                                    )
+                                    .await
+                            };
+                            Box::pin(fut)
+                        }
+                    }
+                    let accept_compression_encodings = self.accept_compression_encodings;
+                    let send_compression_encodings = self.send_compression_encodings;
+                    let max_decoding_message_size = self.max_decoding_message_size;
+                    let max_encoding_message_size = self.max_encoding_message_size;
+                    let inner = self.inner.clone();
+                    let fut = async move {
+                        let method = GetGlobalTableDataVersionSvc(inner);
+                        let codec = tonic_prost::ProstCodec::default();
+                        let mut grpc = tonic::server::Grpc::new(codec)
+                            .apply_compression_config(
+                                accept_compression_encodings,
+                                send_compression_encodings,
+                            )
+                            .apply_max_message_size_config(
+                                max_decoding_message_size,
+                                max_encoding_message_size,
+                            );
+                        let res = grpc.unary(method, req).await;
+                        Ok(res)
+                    };
+                    Box::pin(fut)
+                }
                 "/komp_ac.tables_data.TablesData/GetTableDataCount" => {
                     #[allow(non_camel_case_types)]
                     struct GetTableDataCountSvc<T: TablesData>(pub Arc<T>);
diff --git a/server b/server
index 3bf72f51..ac0c12a7 160000
--- a/server
+++ b/server
@@ -1 +1 @@
-Subproject commit 3bf72f51a61614837c1a1703afca42e334c78511
+Subproject commit ac0c12a7ac86887fbaaefb2915d0b08ddd4493bb
diff --git a/web/src/pages/add_table/draft.rs b/web/src/pages/add_table/draft.rs
index 863ffc52..84320c73 100644
--- a/web/src/pages/add_table/draft.rs
+++ b/web/src/pages/add_table/draft.rs
@@ -35,6 +35,7 @@ pub(crate) struct TableDraft {
     /// Profile name typed in when creating a new profile.
     pub profile_name_input: String,
     pub creating_new_profile: bool,
+    pub global: bool,
     pub accounting_currency: String,
 
     pub table_name: String,
@@ -69,11 +70,11 @@ impl TableDraft {
     // ---- field visibility (the same rules the TUI canvas applies) --------
 
     pub(crate) fn show_profile_name_input(&self) -> bool {
-        self.creating_new_profile
+        self.creating_new_profile && !self.global
     }
 
     pub(crate) fn show_accounting_currency(&self) -> bool {
-        self.creating_new_profile
+        self.creating_new_profile && !self.global
     }
 
     // ---- mutations -------------------------------------------------------
@@ -211,10 +212,10 @@ impl TableDraft {
     /// Every check the client runs before it will save.
     pub(crate) fn validate(&self) -> Result<(), String> {
         let profile_name = self.effective_profile_name();
-        if self.creating_new_profile && profile_name.is_empty() {
+        if !self.global && self.creating_new_profile && profile_name.is_empty() {
             return Err("Enter a name for the new profile.".to_string());
         }
-        if let Some(error) = validate_identifier(&profile_name, "Profile name", false) {
+        if !self.global && let Some(error) = validate_identifier(&profile_name, "Profile name", false) {
             return Err(error);
         }
         if let Some(error) = validate_accounting_currency(self) {
@@ -244,18 +245,19 @@ impl TableDraft {
             profile_name: self.effective_profile_name(),
             columns: proto_columns(&self.columns.added),
             indexes: self.columns.selected_index_names(),
-            accounting_currency: if self.creating_new_profile {
+            accounting_currency: if self.creating_new_profile && !self.global {
                 self.accounting_currency.trim().to_ascii_uppercase()
             } else {
                 String::new()
             },
             row_display_columns: self.row_display_columns.clone(),
+            global: self.global,
         })
     }
 }
 
 pub(crate) fn validate_accounting_currency(draft: &TableDraft) -> Option<String> {
-    if !draft.creating_new_profile {
+    if !draft.creating_new_profile || draft.global {
         return None;
     }
     let currency = draft.accounting_currency.to_ascii_uppercase();
diff --git a/web/src/pages/add_table/loader.rs b/web/src/pages/add_table/loader.rs
index 2f3fe748..5d348f50 100644
--- a/web/src/pages/add_table/loader.rs
+++ b/web/src/pages/add_table/loader.rs
@@ -60,7 +60,26 @@ pub(crate) async fn load_page(
         .into_inner();
 
     let effective_profile = draft.effective_profile_name();
-    match tree
+    if draft.global {
+        let global_tables = tree
+            .profiles
+            .iter()
+            .flat_map(|profile| profile.tables.iter())
+            .filter(|table| table.global)
+            .map(|table| table.name.clone())
+            .collect::<std::collections::BTreeSet<_>>()
+            .into_iter()
+            .collect::<Vec<_>>();
+        draft.existing_profile_tables = tree
+            .profiles
+            .iter()
+            .flat_map(|profile| profile.tables.iter())
+            .map(|table| table.name.clone())
+            .collect::<std::collections::BTreeSet<_>>()
+            .into_iter()
+            .collect();
+        draft.set_available_relation_tables(global_tables);
+    } else { match tree
         .profiles
         .iter()
         .find(|profile| profile.name == effective_profile)
@@ -82,7 +101,7 @@ pub(crate) async fn load_page(
             draft.existing_profile_tables.clear();
             draft.relation_tables.clear();
         }
-    }
+    }}
 
     Ok(AddTablePageState {
         nav: crate::ui::Nav::new(headers, "admin").with_authorization(&authorization),
diff --git a/web/src/pages/add_table/logic.rs b/web/src/pages/add_table/logic.rs
index 3a08caa3..1ab99ef9 100644
--- a/web/src/pages/add_table/logic.rs
+++ b/web/src/pages/add_table/logic.rs
@@ -98,7 +98,8 @@ pub(crate) async fn create_table(
     };
 
     let mut definitions = state.definitions;
-    match definitions.post_table_definition(request).await {
+    let result = definitions.post_table_definition(request).await;
+    match result {
         Ok(response) if response.get_ref().success => {
             let location = format!(
                 "/admin/table-definition?profile={profile_name}&table={}",
diff --git a/web/src/pages/add_table/state.rs b/web/src/pages/add_table/state.rs
index 7e5d1aa6..1ec2e174 100644
--- a/web/src/pages/add_table/state.rs
+++ b/web/src/pages/add_table/state.rs
@@ -34,6 +34,8 @@ pub(crate) struct BuilderForm {
     #[serde(default)]
     pub accounting_currency: String,
     #[serde(default)]
+    pub global: bool,
+    #[serde(default)]
     pub table_name: String,
 
     // The pending column being described in the input panel.
@@ -134,6 +136,7 @@ impl BuilderForm {
             profile_name_input: self.profile_name_input.clone(),
             creating_new_profile,
             accounting_currency: self.accounting_currency.clone(),
+            global: self.global,
             table_name: self.table_name.clone(),
             columns,
             relation_tables: self.relation_tables.clone(),
diff --git a/web/templates/pages/add_table/builder.html b/web/templates/pages/add_table/builder.html
index 235b3ee8..b7c6855a 100644
--- a/web/templates/pages/add_table/builder.html
+++ b/web/templates/pages/add_table/builder.html
@@ -24,6 +24,15 @@
 <section class="builder-section">
   <h2>Table</h2>
   <div class="form-grid">
+    <label>Scope
+      <span><input type="checkbox" name="global" value="true"
+             {% if page.draft.global %}checked{% endif %}
+             hx-post="/admin/tables/builder" hx-trigger="change"
+             hx-include="#table-form" hx-target="#builder" hx-swap="innerHTML"
+             hx-vals='{"action": "refresh"}'> Shared across profiles</span>
+    </label>
+
+    {% if !page.draft.global %}
     <label>Profile
       <select name="profile_name" hx-post="/admin/tables/builder" hx-trigger="change"
               hx-include="#table-form" hx-target="#builder" hx-swap="innerHTML"
@@ -35,6 +44,9 @@
         <option value="__new__" {% if page.draft.creating_new_profile %}selected{% endif %}>+ New profile…</option>
       </select>
     </label>
+    {% else %}
+      <input type="hidden" name="profile_name" value="{{ page.draft.profile_name }}">
+    {% endif %}
 
     {% if page.draft.show_profile_name_input() %}
       <label>New profile name