@ai-matrx/sharing 0.0.0 → 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,16 @@
+# Changelog
+
+## 0.1.1
+
+- **"Can't remove it" is a summon overlay (X3).** `offerOwnerChoices` / `ensureRemovable` open `CANT_REMOVE_DIALOG` (`"cantRemoveDialog"`) through the host's overlay doors and await summon's `requestOverlay`; new `requestCantRemove(request): Promise<"hidden" | "closed">` (one screen per record). Removed: `cantRemoveOpener` (kit opener), `CantRemoveDialogHostBody`, the `ensureDialogHosts` env field. New env field `overlays: { open(id, instanceId, data), close(id, instanceId) }`; new public module `./access/react/cantRemoveDialog.render`. **Consumer action:** pass `overlays` to `configureAccessUi` (dispatch summon open/close), register overlay `cantRemoveDialog` with that render; matrx-frontend's own copy (`features/access-gate/cant-remove/*`) then goes.
+- **Reconciled with the web's copies (2026-10-21).** Ported the web's changes made after the sheet moved: `GuestBadge` (a person outside the thing's organization is marked Guest in the share list; `PermissionWithDetails.grantedToUser.isGuest` parsed from `get_resource_permissions`), `WhoCouldSeeOn` (a record owner asks who could see it at a past moment, `custom.who_could_see_on`) shown in the share dialog for records, and the registry's display labels (Sending mailbox, Applet, Flashcard Deck, Quiz session, Cloud document, Contact, Form, Google file).
+- **New section `/access/react` (2026-10-17).** The access gate screens and hooks (`AccessGate`, `AccessDenied`, `SlugAccessGate`, `GovernedActionDialog`, `RequestAccess*`, `AccessRequestsSurface`, `HiddenByMe*`, `useAccessGate`, `configureAccessUi`, …) moved here verbatim from `@ai-matrx/data/access/react`, stamped `"use client"`. Runtime dependencies: `@ai-matrx/data`, `@ai-matrx/design-system`, `@ai-matrx/kit`, `@ai-matrx/auth`, `lucide-react`. Consumer action: import from `@ai-matrx/sharing/access/react`; keep calling `configureAccess` (from `@ai-matrx/data/access`) and `configureAccessUi` once at boot.
+
+## 0.1.0
+
+Skeleton release: the name's sections exist (`/core`, `/react`) and export nothing yet. The frozen API lands with its Wave 1 unit (BUILD-BOOK §3.2).
+
+### Consumer action
+
+None. Do not adopt until a unit ships the API.
+

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AI Matrix Engine
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,34 @@
 # @ai-matrx/sharing
 
-Name reservation only. No usable API; do not adopt this bootstrap. Real releases come from AI-Matrix-Engine/aidream.
+Sharing for every AI Matrx entity: the permission doors, share links, and the share dialog.
+
+**Status:** `/access/react` ships (the access gate screens, moved from `@ai-matrx/data`). `/core` and `/react` are reserved and export nothing yet; their API arrives with the Wave 1 unit of the Office build (`common-docs/projects/office-suite/BUILD-BOOK.md` §3.2).
+
+## Sections
+
+- `@ai-matrx/sharing/core`
+- `@ai-matrx/sharing/react`
+- `@ai-matrx/sharing/access/react` — `"use client"`: request access, access denied, governed actions, hidden-by-me
+
+## `@ai-matrx/sharing/access/react` — the access gate screens
+
+`"use client"` entry. Every screen and hook of the access gate: `AccessGate`, `AccessDenied` / `AccessDeniedView`,
+`SlugAccessGate`, `SettingAccessGate`, `ForbiddenSurfaceView`, `RequestAccess`, `RequestAccessPanel`, `BlindAccessAsk`,
+`UnresolvedEntityRef`, `ServerReadRecheck`, `GovernedActionDialog`, `HiddenByMeButton`, `HiddenFilter`,
+`ResourceActionRequestButtons`, `SettingRequestActionButtons`, `AccessRequestsSurface`; hooks `useAccessGate`,
+`useAccessStates`, `useHiddenByMe` (+ `useHiddenItems`, `useHideForMe`, `useRemovalRights`), `useRequestAccess`; and the
+"can't remove it" opener (`ensureRemovable`, `offerOwnerChoices`, `cantRemoveOpener`, `CantRemoveDialogHostBody`).
+Built on `@ai-matrx/design-system` and `lucide-react`; no `next/*`, no app imports.
+
+**`configureAccessUi(env)`** (module-level, merges; `<AccessUiProvider env>` overrides a subtree; `useAccessUi()` reads the
+merged result). The pure half's Supabase client / `ensureOrgId` / CMS tokens come from `configureAccess` in `@ai-matrx/data/access` — call both once at boot; the screens read the same `@ai-matrx/data/access` module the app configures.
+
+| Field | Kind | Default when absent |
+|---|---|---|
+| `useLoginHref()`, `useCurrentUser()` `{id, displayName, email}`, `toast` `{success, error, warning, info?}` | REQUIRED | reading one throws an error naming `configureAccessUi({ field })` |
+| `Link`, `router` `{push, back, refresh}`, `searchParam(name)`, `confirm(options)`, `Textarea`, `renderUserIdentity`, `renderEntityRef`, `renderErrorMenu`, `navItemClasses`, `manualRequestActionKey` | optional, working default | plain `<a>`, browser history/reload, kit `confirm()`, design-system `Textarea`, avatar + name, plain name (not a door), no error menu, app-shell nav CSS variables, `request_access.manual` |
+| `entityRegistry.tryGetEntityInfo`, `trash.restore`, `recordUnavailableCapture.resolve`, `settingRequestActions.get`, `resourceActionRequests.get`, `cms.createAccessRequest`, `settingDoorHref`, `reportFeedback`, `presentOrganizationRefusal`, `overlays` | optional app feature | owners/records render as plain names; Restore, CMS asks, setting asks and platform-team asks FAIL VISIBLY naming the missing field; unknown request actions render without the primary action button; the rest are no-ops |
+
+Hook-valued fields are called inside components: set them once at boot. `ForbiddenSurface` (async, reads `headers()` and the
+session verdict) cannot live in a client entry, so the package ships `ForbiddenSurfaceView`; the app keeps a ~10-line server
+wrapper in `forbidden.tsx` that reads the verdict and request path and renders it.

package/dist/access-react-cant-remove-dialog.cjs

@@ -0,0 +1,52 @@
+"use client";
+"use strict";
+"use client";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/access/react/cantRemoveDialog.render.tsx
+var cantRemoveDialog_render_exports = {};
+__export(cantRemoveDialog_render_exports, {
+  default: () => render
+});
+module.exports = __toCommonJS(cantRemoveDialog_render_exports);
+var import_react = require("@ai-matrx/summon/react");
+var import_react2 = require("@ai-matrx/sharing/access/react");
+var import_jsx_runtime = require("react/jsx-runtime");
+function render({ data, close }) {
+  const { request, settle } = (0, import_react.useOverlayRequest)(data, close);
+  if (!request) return null;
+  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(
+    import_react2.GovernedActionDialog,
+    {
+      open: true,
+      onOpenChange: (next) => {
+        if (!next) settle("closed");
+      },
+      resourceType: request.token,
+      resourceId: request.id,
+      itemName: request.itemName,
+      itemLabel: request.itemLabel,
+      action: request.action,
+      href: request.href ?? null,
+      onHidden: () => settle("hidden")
+    },
+    `${request.token}:${request.id}`
+  );
+}
+//# sourceMappingURL=access-react-cant-remove-dialog.cjs.map

package/dist/access-react-cant-remove-dialog.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access/react/cantRemoveDialog.render.tsx"],"sourcesContent":["\"use client\";\n/**\n * The `cantRemoveDialog` overlay's render (`CANT_REMOVE_DIALOG`): answers the pending `requestCantRemove`\n * request with `GovernedActionDialog`. A host registers the overlay id with this module as its render.\n * Imports the package by name so the dialog shares the host's one `configureAccessUi` environment.\n */\nimport { useOverlayRequest, type OverlayRenderProps } from \"@ai-matrx/summon/react\";\nimport { GovernedActionDialog, type CantRemoveOutcome, type CantRemoveRequest } from \"@ai-matrx/sharing/access/react\";\n\nexport default function render({ data, close }: OverlayRenderProps) {\n  const { request, settle } = useOverlayRequest<CantRemoveRequest, CantRemoveOutcome>(data, close);\n  if (!request) return null;\n  return (\n    <GovernedActionDialog\n      key={`${request.token}:${request.id}`}\n      open\n      onOpenChange={(next) => {\n        if (!next) settle(\"closed\");\n      }}\n      resourceType={request.token}\n      resourceId={request.id}\n      itemName={request.itemName}\n      itemLabel={request.itemLabel}\n      action={request.action}\n      href={request.href ?? null}\n      // The hidden-ids store refreshed inside the hide, so every list of this kind re-renders.\n      onHidden={() => settle(\"hidden\")}\n    />\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAMA,mBAA2D;AAC3D,IAAAA,gBAAqF;AAMjF;AAJW,SAAR,OAAwB,EAAE,MAAM,MAAM,GAAuB;AAClE,QAAM,EAAE,SAAS,OAAO,QAAI,gCAAwD,MAAM,KAAK;AAC/F,MAAI,CAAC,QAAS,QAAO;AACrB,SACE;AAAA,IAAC;AAAA;AAAA,MAEC,MAAI;AAAA,MACJ,cAAc,CAAC,SAAS;AACtB,YAAI,CAAC,KAAM,QAAO,QAAQ;AAAA,MAC5B;AAAA,MACA,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,UAAU,QAAQ;AAAA,MAClB,WAAW,QAAQ;AAAA,MACnB,QAAQ,QAAQ;AAAA,MAChB,MAAM,QAAQ,QAAQ;AAAA,MAEtB,UAAU,MAAM,OAAO,QAAQ;AAAA;AAAA,IAZ1B,GAAG,QAAQ,KAAK,IAAI,QAAQ,EAAE;AAAA,EAarC;AAEJ;","names":["import_react"]}

package/dist/access-react-cant-remove-dialog.d.cts

@@ -0,0 +1,6 @@
+import * as react from 'react';
+import { OverlayRenderProps } from '@ai-matrx/summon/react';
+
+declare function render({ data, close }: OverlayRenderProps): react.JSX.Element | null;
+
+export { render as default };

package/dist/access-react-cant-remove-dialog.d.ts

@@ -0,0 +1,6 @@
+import * as react from 'react';
+import { OverlayRenderProps } from '@ai-matrx/summon/react';
+
+declare function render({ data, close }: OverlayRenderProps): react.JSX.Element | null;
+
+export { render as default };

package/dist/access-react-cant-remove-dialog.js

@@ -0,0 +1,32 @@
+"use client";
+"use client";
+
+// src/access/react/cantRemoveDialog.render.tsx
+import { useOverlayRequest } from "@ai-matrx/summon/react";
+import { GovernedActionDialog } from "@ai-matrx/sharing/access/react";
+import { jsx } from "react/jsx-runtime";
+function render({ data, close }) {
+  const { request, settle } = useOverlayRequest(data, close);
+  if (!request) return null;
+  return /* @__PURE__ */ jsx(
+    GovernedActionDialog,
+    {
+      open: true,
+      onOpenChange: (next) => {
+        if (!next) settle("closed");
+      },
+      resourceType: request.token,
+      resourceId: request.id,
+      itemName: request.itemName,
+      itemLabel: request.itemLabel,
+      action: request.action,
+      href: request.href ?? null,
+      onHidden: () => settle("hidden")
+    },
+    `${request.token}:${request.id}`
+  );
+}
+export {
+  render as default
+};
+//# sourceMappingURL=access-react-cant-remove-dialog.js.map

package/dist/access-react-cant-remove-dialog.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/access/react/cantRemoveDialog.render.tsx"],"sourcesContent":["\"use client\";\n/**\n * The `cantRemoveDialog` overlay's render (`CANT_REMOVE_DIALOG`): answers the pending `requestCantRemove`\n * request with `GovernedActionDialog`. A host registers the overlay id with this module as its render.\n * Imports the package by name so the dialog shares the host's one `configureAccessUi` environment.\n */\nimport { useOverlayRequest, type OverlayRenderProps } from \"@ai-matrx/summon/react\";\nimport { GovernedActionDialog, type CantRemoveOutcome, type CantRemoveRequest } from \"@ai-matrx/sharing/access/react\";\n\nexport default function render({ data, close }: OverlayRenderProps) {\n  const { request, settle } = useOverlayRequest<CantRemoveRequest, CantRemoveOutcome>(data, close);\n  if (!request) return null;\n  return (\n    <GovernedActionDialog\n      key={`${request.token}:${request.id}`}\n      open\n      onOpenChange={(next) => {\n        if (!next) settle(\"closed\");\n      }}\n      resourceType={request.token}\n      resourceId={request.id}\n      itemName={request.itemName}\n      itemLabel={request.itemLabel}\n      action={request.action}\n      href={request.href ?? null}\n      // The hidden-ids store refreshed inside the hide, so every list of this kind re-renders.\n      onHidden={() => settle(\"hidden\")}\n    />\n  );\n}\n"],"mappings":";;;;AAMA,SAAS,yBAAkD;AAC3D,SAAS,4BAA4E;AAMjF;AAJW,SAAR,OAAwB,EAAE,MAAM,MAAM,GAAuB;AAClE,QAAM,EAAE,SAAS,OAAO,IAAI,kBAAwD,MAAM,KAAK;AAC/F,MAAI,CAAC,QAAS,QAAO;AACrB,SACE;AAAA,IAAC;AAAA;AAAA,MAEC,MAAI;AAAA,MACJ,cAAc,CAAC,SAAS;AACtB,YAAI,CAAC,KAAM,QAAO,QAAQ;AAAA,MAC5B;AAAA,MACA,cAAc,QAAQ;AAAA,MACtB,YAAY,QAAQ;AAAA,MACpB,UAAU,QAAQ;AAAA,MAClB,WAAW,QAAQ;AAAA,MACnB,QAAQ,QAAQ;AAAA,MAChB,MAAM,QAAQ,QAAQ;AAAA,MAEtB,UAAU,MAAM,OAAO,QAAQ;AAAA;AAAA,IAZ1B,GAAG,QAAQ,KAAK,IAAI,QAAQ,EAAE;AAAA,EAarC;AAEJ;","names":[]}