@crossworks/content-core 0.232.356 → 0.232.362

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossworks/content-core",
-  "version": "0.232.356",
+  "version": "0.232.362",
   "description": "Browser-safe content logic — markdown, blocks, pages, tables, formulas — shared by the server and any client. Zero server deps by design: nothing here may reach @mantle/db, node-only APIs, or the network (the jackdaw-repo-split P0 boundary).",
   "exports": {
     "./app-nav": "./src/app-nav.ts",
@@ -31,7 +31,7 @@
     "./tree": "./src/tree.ts"
   },
   "dependencies": {
-    "@mantle/client-types": "npm:@crossworks/client-types@0.232.356",
+    "@mantle/client-types": "npm:@crossworks/client-types@0.232.362",
     "marked": "^18.0.11",
     "mathjs": "15.2.0"
   },

package/src/table-model.ts

@@ -857,6 +857,13 @@ export type TableRow = {
   rowCount: number;
   /** Access level (admin > team > client > public); the owner UI's badge. */
   audience: AccessLevel;
+  /** The share it inherits from a folder above it (team or client), or
+   *  null; it is read at the more open of this and `audience`. Optional:
+   *  absent from brains before the folder audit fixes. */
+  inherited?: 'team' | 'client' | null;
+  /** The share it is read at through something that embeds it (migration
+   *  0208), or null. Optional: absent from brains before it. */
+  embedded?: 'team' | 'client' | null;
   createdAt: string;
   updatedAt: string;
 };

package/src/tree.ts

@@ -17,20 +17,26 @@ import type { AccessLevel } from '@mantle/client-types';
 const LEVEL_RANK: Record<AccessLevel, number> = { public: 0, client: 1, team: 2, admin: 3 };
 
 /**
- * The level an item is read at: the more open of its own level and the share
- * it inherits from a folder (public < client < team < admin). This is the
- * level its pill shows, its embeds follow and its indexed page text is
- * folded for. Folding for the more open reader is safe for every reader of
- * the row: what a public or client reader may see, every reader above may
- * too. (Which ROLES read the row is the database's union of the two:
- * nodes_viewer_read, migration 0204.)
+ * The level an item is read at: the most open of its own level, the share it
+ * inherits from a folder, and the share of something that embeds it
+ * (public < client < team < admin). This is the level its pill shows and its
+ * indexed page text is folded for. Folding for the more open reader is safe
+ * for every reader of the row: what a public or client reader may see, every
+ * reader above may too. (Which ROLES read the row is the database's union of
+ * the three: nodes_viewer_read, migrations 0204 and 0208.)
  */
 export function effectiveLevel(
   own: AccessLevel,
   inherited: TreeShareLevel | null | undefined,
+  /** The share of something that embeds the item (a shared note's image),
+   *  when the brain sends it. */
+  embedded?: TreeShareLevel | null,
 ): AccessLevel {
-  if (!inherited) return own;
-  return LEVEL_RANK[inherited] < LEVEL_RANK[own] ? inherited : own;
+  let level = own;
+  for (const share of [inherited, embedded]) {
+    if (share && LEVEL_RANK[share] < LEVEL_RANK[level]) level = share;
+  }
+  return level;
 }
 
 function labels(path: string): string[] {
@@ -72,9 +78,9 @@ export function isTreeFolderPathAllowed(path: string): boolean {
 
 /**
  * Cut a folder path that would sit too deep back to the deepest allowed
- * level: the extra levels are lifted into the third. Inbound paths use it (an
- * agent's `mkdir -p`, the crawler, Accept), so a deep chain lands in the
- * deepest folder instead of failing.
+ * level: the extra levels are lifted into the third. For clients; the brain's
+ * inbound paths clamp with their own helpers (Files: clampFilesFolderPath;
+ * Accept: accept-place.ts; member rows: carrySpaceRows).
  */
 export function clampTreePath(path: string): string {
   const parts = labels(path);