@gooddata/sdk-ui-ext 11.45.0-alpha.0 → 11.45.0-alpha.2

package/esm/sdk-ui-ext.d.ts

@@ -15,6 +15,7 @@ import { AutomationType } from '@gooddata/sdk-backend-spi';
 import { ChartInlineVisualizationType } from '@gooddata/sdk-ui-charts';
 import { ComponentType } from 'react';
 import { CopyCodeOriginType } from '@gooddata/sdk-ui-kit';
+import { DataSourceAccessSource } from '@gooddata/sdk-model';
 import { Dispatch } from 'react';
 import { EmbedType } from '@gooddata/sdk-ui-kit';
 import { ExplicitDrill } from '@gooddata/sdk-ui';
@@ -47,6 +48,7 @@ import { IPivotTableConfig } from '@gooddata/sdk-ui-pivot';
 import { ISettings } from '@gooddata/sdk-model';
 import { ITab } from '@gooddata/sdk-ui-kit';
 import { ITheme } from '@gooddata/sdk-model';
+import type { IUiGranteeAsyncOption } from '@gooddata/sdk-ui-kit';
 import type { IUiGranteeAsyncOptions } from '@gooddata/sdk-ui-kit';
 import type { IUiPickedGrantee } from '@gooddata/sdk-ui-kit';
 import { IUserWorkspaceSettings } from '@gooddata/sdk-backend-spi';
@@ -656,6 +658,15 @@ export declare interface IGrantedDataSource {
     id: string;
     title: string;
     permission: DataSourcePermission;
+    /**
+     * True when the data source is accessible only indirectly - inherited through a user group rather
+     * than assigned directly. Such entries are shown read-only.
+     */
+    isInherited?: boolean;
+    /**
+     * How the subject gains access to the data source (DIRECT, GROUP), when known.
+     */
+    accessSource?: DataSourceAccessSource;
 }
 
 /**
@@ -729,7 +740,6 @@ export declare interface IInsightPickerProps {
     author?: string;
     enabledVisualizationClassesUrls?: string[];
     selectedInsightId?: string;
-    enableDescriptions?: boolean;
     metadataTimeZone?: string;
     enableSemanticSearch?: boolean;
     maxHeight?: number;
@@ -1454,11 +1464,13 @@ export declare interface IObjectShareControllerActions {
     closeAddGrantee: () => void;
     setPendingGrantees: (next: IUiPickedGrantee[]) => void;
     /**
-     * Loader for the add-grantee picker. Wraps `getAvailableAssignees` with
+     * Loader for the grantee pickers. Wraps `getAvailableAssignees` with
      * client-side search + already-picked filtering, returning the picker's
-     * `{ groups, users }` shape.
+     * `{ groups, users }` shape. By default excludes already-granted grantees
+     * (add-grantee picker); pass `includeGranted` to keep them (transfer-ownership
+     * picker, which may promote an existing viewer to owner).
      */
-    loadOptions: (search: string) => Promise<IUiGranteeAsyncOptions>;
+    loadOptions: (search: string, includeGranted?: boolean) => Promise<IUiGranteeAsyncOptions>;
     /** Commit all pending grantees to the backend. */
     confirmAddGrantees: () => Promise<void>;
     /** Change the permission level for a single grantee. Auto-saves. */
@@ -1482,13 +1494,31 @@ export declare interface IObjectShareControllerActions {
      * already-granted rule.
      */
     changeWorkspaceLevel: (level: "VIEW" | "SHARE") => Promise<void>;
+    /** Open the transfer-ownership subview with an empty picker. */
+    openTransferOwnership: () => void;
+    /** Close the transfer-ownership subview and clear its buffers; returns to main. */
+    closeTransferOwnership: () => void;
+    /**
+     * Pick (or replace) the candidate new owner. Recomputes whether that user
+     * already owns the object (`transferTargetIsOwner`).
+     */
+    setTransferTarget: (owner: IUiGranteeAsyncOption) => void;
+    /** Toggle "Also remove my access" in the transfer dialog. */
+    setTransferAlsoRemoveSelf: (next: boolean) => void;
+    /**
+     * Commit the ownership transfer: grant the picked user EDIT and downgrade the
+     * current user to VIEW (or remove them if "Also remove my access" is set), in
+     * one write. When the picked user already owns the object this transfers
+     * nothing and only applies the self-access choice. Auto-saves.
+     */
+    confirmTransferOwnership: () => Promise<void>;
 }
 
 /**
  * @internal
  */
 export declare interface IObjectShareControllerState {
-    subview: "main" | "addGrantee";
+    subview: "main" | "addGrantee" | "transferOwnership";
     status: "idle" | "loading" | "success" | "error" | "saving";
     error?: Error;
     /**
@@ -1537,6 +1567,26 @@ export declare interface IObjectShareControllerState {
     pendingGeneralAccess?: GeneralAccessValue;
     /** Grantees staged in the add-grantee dialog before confirmation. */
     pendingGrantees: IUiPickedGrantee[];
+    /**
+     * The user picked as the new owner in the transfer-ownership subview, or
+     * undefined before one is chosen. Only users can own an object, so this is
+     * never a group.
+     */
+    transferTarget: IUiGranteeAsyncOption | undefined;
+    /**
+     * Whether "Also remove my access" is checked in the transfer dialog. When
+     * true the current user's grant is removed after the transfer; otherwise it
+     * is downgraded to VIEW.
+     */
+    transferAlsoRemoveSelf: boolean;
+    /**
+     * Whether `transferTarget` already owns the object (already holds EDIT). When
+     * true there is nothing to transfer — consumers show the "already an owner"
+     * variant offering to remove the current user's own access instead.
+     */
+    transferTargetIsOwner: boolean;
+    /** Whether the transfer write (or self-removal) is in flight. */
+    transferSaving: boolean;
 }
 
 /**

package/esm/share/ObjectShareDialog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ObjectShareDialog.d.ts","sourceRoot":"","sources":["../../src/share/ObjectShareDialog.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAS1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAQpD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,gDAAgD;IAChD,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7C,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,4FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,EAC9B,MAAM,EACN,WAAW,EACX,MAAM,EACN,OAAO,EACP,OAAO,EACP,MAAM,EACN,aAAa,EACb,WAAW,EACX,UAAU,EACb,EAAE,uBAAuB,2CAmKzB"}
+{"version":3,"file":"ObjectShareDialog.d.ts","sourceRoot":"","sources":["../../src/share/ObjectShareDialog.tsx"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAW1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAQpD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACpC,gDAAgD;IAChD,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7C,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,MAAM,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,4FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,EAC9B,MAAM,EACN,WAAW,EACX,MAAM,EACN,OAAO,EACP,OAAO,EACP,MAAM,EACN,aAAa,EACb,WAAW,EACX,UAAU,EACb,EAAE,uBAAuB,2CAkPzB"}

package/esm/share/ObjectShareDialog.js

@@ -2,7 +2,7 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
 // (C) 2026 GoodData Corporation
 import { useCallback } from "react";
 import { useIntl } from "react-intl";
-import { UiAddGranteeDialog, UiConfirmDialog, UiGranteeRowControls, UiObjectShareDialog, } from "@gooddata/sdk-ui-kit";
+import { UiAddGranteeDialog, UiConfirmDialog, UiGranteeRowControls, UiObjectShareDialog, UiRadioRow, UiTransferOwnershipDialog, } from "@gooddata/sdk-ui-kit";
 import { objectShareMessages } from "./messages.js";
 import { useObjectShareController } from "./useObjectShareController.js";
 // The workspace row has no labels menu (see workspaceControls below), so its
@@ -43,8 +43,27 @@ export function ObjectShareDialog({ target, objectTitle, isOpen, onClose, onSave
         actions.reset();
         onClose();
     }, [actions, onClose]);
+    // Owner is always an individual user, so the transfer picker drops any groups
+    // the shared loader returns. `includeGranted` keeps already-granted users in
+    // the list — promoting an existing viewer to owner is a primary case.
+    //
+    // Depend on the stable `loadOptions` alone, not the whole `actions` object:
+    // `actions` changes identity as transfer state ticks (and as the picker's own
+    // name-cache writes re-derive grantees), and the autocomplete refetches page 0
+    // whenever its loader's identity changes — depending on `actions` here would
+    // self-feed into an infinite assignee-fetch loop.
+    const { loadOptions } = actions;
+    const loadOwnerOptions = useCallback(async (search) => {
+        const { users } = await loadOptions(search, true);
+        return { groups: [], users };
+    }, [loadOptions]);
     const isAddGranteeOpen = isOpen && state.subview === "addGrantee";
-    const isShareOpen = isOpen && state.subview !== "addGrantee";
+    // The transfer subview splits into two co-mounted dialogs: the transfer card
+    // while picking a non-owner, and the "already an owner" confirm once the picked
+    // user already owns the object.
+    const isTransferOpen = isOpen && state.subview === "transferOwnership" && !state.transferTargetIsOwner;
+    const isAlreadyOwnerOpen = isOpen && state.subview === "transferOwnership" && state.transferTargetIsOwner;
+    const isShareOpen = isOpen && state.subview === "main";
     const isConfirmOpen = isOpen && !!state.pendingGeneralAccess;
     // Don't allow mutations until the access list has loaded: before then the
     // controller reports empty grantees + RESTRICTED, which is a placeholder, not
@@ -55,8 +74,13 @@ export function ObjectShareDialog({ target, objectTitle, isOpen, onClose, onSave
     // wrong labels). `labelsResolved` is false while labels are still loading and
     // when their fetch failed, so a pending/failed label set blocks every
     // access-changing control here — Add, row controls and general access alike.
+    // Also locked while a transfer-ownership write is committing: the transfer
+    // dialog can be dismissed (Back/Cancel/close) mid-save, so without this the
+    // user could return here and mutate other grantees concurrently with the
+    // in-flight ownership write — racing the same object's permissions with no
+    // refetch to reconcile. `transferSaving` clears when the transfer settles.
     const isLoaded = state.status === "success";
-    const isMutable = isLoaded && state.labelsResolved;
+    const isMutable = isLoaded && state.labelsResolved && !state.transferSaving;
     const isAddDisabled = !isMutable;
     // Map the controller's labels to the picker's item shape; the primary label
     // is rendered locked (always selected, can't be unchecked).
@@ -78,13 +102,13 @@ export function ObjectShareDialog({ target, objectTitle, isOpen, onClose, onSave
                         // probe in flight) — removing or re-scoping before then
                         // would diff against the "assume all"/empty placeholder
                         // and silently orphan real per-label grants.
-                        isDisabled: g.pending !== undefined || !state.labelsResolved, onLabelsChange: (selectedIds) => {
+                        isDisabled: g.pending !== undefined || !state.labelsResolved || state.transferSaving, onLabelsChange: (selectedIds) => {
                             void actions.changeGranteeLabels(g.id, selectedIds);
                         }, onPermissionChange: (level) => {
                             void actions.changePermissionLevel(g.id, level);
                         }, onRemoveAccess: () => {
                             void actions.removeGrantee(g.id);
-                        } })),
+                        }, onTransferOwnership: actions.openTransferOwnership })),
                 })), onAddClick: actions.openAddGrantee, isAddDisabled: isAddDisabled, generalAccess: state.generalAccess, onGeneralAccessChange: actions.requestGeneralAccessChange, 
                 // Permission dropdown on the "All workspace members" row — only while
                 // workspace access is on (the rule must exist to be re-graded). No
@@ -112,6 +136,14 @@ export function ObjectShareDialog({ target, objectTitle, isOpen, onClose, onSave
                 // read as "no one has access".
                 error: state.status === "error" ? intl.formatMessage(objectShareMessages.loadError) : undefined }), _jsx(UiAddGranteeDialog, { isOpen: isAddGranteeOpen, objectTitle: objectTitle, loadOptions: actions.loadOptions, selectedGrantees: state.pendingGrantees, onSelectedGranteesChange: actions.setPendingGrantees, onBack: actions.closeAddGrantee, onClose: handleClose, onCancel: actions.closeAddGrantee, onShare: () => {
                     void actions.confirmAddGrantees();
+                } }), _jsx(UiTransferOwnershipDialog, { isOpen: isTransferOpen, objectTitle: objectTitle, loadOptions: loadOwnerOptions, selectedOwner: state.transferTarget, onSelectedOwnerChange: actions.setTransferTarget, alsoRemoveMyAccess: state.transferAlsoRemoveSelf, onAlsoRemoveMyAccessChange: actions.setTransferAlsoRemoveSelf, onBack: actions.closeTransferOwnership, onClose: handleClose, onCancel: actions.closeTransferOwnership, onTransfer: () => {
+                    void actions.confirmTransferOwnership();
+                }, isSaving: state.transferSaving }), _jsx(UiConfirmDialog, { isOpen: isAlreadyOwnerOpen, title: intl.formatMessage(objectShareMessages.transferAlreadyOwnerTitle, {
+                    name: state.transferTarget?.name ?? "",
+                }), description: _jsxs(_Fragment, { children: [
+                        _jsx("p", { children: intl.formatMessage(objectShareMessages.transferAlreadyOwnerDescription) }), _jsx(UiRadioRow, { name: "transfer-already-owner", checked: !state.transferAlsoRemoveSelf, onChange: () => actions.setTransferAlsoRemoveSelf(false), title: intl.formatMessage(objectShareMessages.transferAlreadyOwnerKeepAccess) }), _jsx(UiRadioRow, { name: "transfer-already-owner", checked: state.transferAlsoRemoveSelf, onChange: () => actions.setTransferAlsoRemoveSelf(true), title: intl.formatMessage(objectShareMessages.transferAlreadyOwnerRemoveAccess) })
+                    ] }), confirmLabel: intl.formatMessage(objectShareMessages.transferConfirmButton), confirmVariant: "primary", onCancel: actions.closeTransferOwnership, onClose: actions.closeTransferOwnership, onConfirm: () => {
+                    void actions.confirmTransferOwnership();
                 } }), _jsx(UiConfirmDialog, { isOpen: isConfirmOpen, title: intl.formatMessage(state.pendingGeneralAccess === "RESTRICTED"
                     ? objectShareMessages.confirmRestrictTitle
                     : objectShareMessages.confirmGrantWorkspaceTitle), description: intl.formatMessage(state.pendingGeneralAccess === "RESTRICTED"

package/esm/share/messages.d.ts

@@ -22,6 +22,21 @@ export declare const objectShareMessages: {
     confirmButton: {
         id: string;
     };
+    transferAlreadyOwnerTitle: {
+        id: string;
+    };
+    transferAlreadyOwnerDescription: {
+        id: string;
+    };
+    transferAlreadyOwnerKeepAccess: {
+        id: string;
+    };
+    transferAlreadyOwnerRemoveAccess: {
+        id: string;
+    };
+    transferConfirmButton: {
+        id: string;
+    };
     toastGranteeAdded: {
         id: string;
     };
@@ -31,6 +46,9 @@ export declare const objectShareMessages: {
     toastGeneralAccessUpdated: {
         id: string;
     };
+    toastOwnershipTransferred: {
+        id: string;
+    };
     toastError: {
         id: string;
     };

package/esm/share/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/share/messages.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAY9B,CAAC"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/share/messages.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkB9B,CAAC"}

package/esm/share/messages.js

@@ -14,9 +14,15 @@ export const objectShareMessages = defineMessages({
     confirmGrantWorkspaceTitle: { id: "objectShare.confirm.grantWorkspace.title" },
     confirmGrantWorkspaceDescription: { id: "objectShare.confirm.grantWorkspace.description" },
     confirmButton: { id: "objectShare.confirm.button" },
+    transferAlreadyOwnerTitle: { id: "objectShare.transfer.alreadyOwner.title" },
+    transferAlreadyOwnerDescription: { id: "objectShare.transfer.alreadyOwner.description" },
+    transferAlreadyOwnerKeepAccess: { id: "objectShare.transfer.alreadyOwner.keepAccess" },
+    transferAlreadyOwnerRemoveAccess: { id: "objectShare.transfer.alreadyOwner.removeAccess" },
+    transferConfirmButton: { id: "objectShare.transfer.confirmButton" },
     toastGranteeAdded: { id: "objectShare.toast.granteeAdded" },
     toastAccessUpdated: { id: "objectShare.toast.accessUpdated" },
     toastGeneralAccessUpdated: { id: "objectShare.toast.generalAccessUpdated" },
+    toastOwnershipTransferred: { id: "objectShare.toast.ownershipTransferred" },
     toastError: { id: "objectShare.toast.error" },
     toastLabelScopePartial: { id: "objectShare.toast.labelScopePartial" },
     loadError: { id: "objectShare.loadError" },

package/esm/share/objectShareController.types.d.ts

@@ -1,5 +1,5 @@
 import type { AccessGranularPermission, ObjRef } from "@gooddata/sdk-model";
-import type { GeneralAccessValue, IUiGranteeAsyncOptions, IUiPickedGrantee } from "@gooddata/sdk-ui-kit";
+import type { GeneralAccessValue, IUiGranteeAsyncOption, IUiGranteeAsyncOptions, IUiPickedGrantee } from "@gooddata/sdk-ui-kit";
 import type { IObjectAccessSummary, IObjectShareLabel } from "./types.js";
 /**
  * Permission level surfaced in the share dialog — the model's granular access
@@ -48,7 +48,7 @@ export interface IObjectShareGrantee {
  * @internal
  */
 export interface IObjectShareControllerState {
-    subview: "main" | "addGrantee";
+    subview: "main" | "addGrantee" | "transferOwnership";
     status: "idle" | "loading" | "success" | "error" | "saving";
     error?: Error;
     /**
@@ -97,6 +97,26 @@ export interface IObjectShareControllerState {
     pendingGeneralAccess?: GeneralAccessValue;
     /** Grantees staged in the add-grantee dialog before confirmation. */
     pendingGrantees: IUiPickedGrantee[];
+    /**
+     * The user picked as the new owner in the transfer-ownership subview, or
+     * undefined before one is chosen. Only users can own an object, so this is
+     * never a group.
+     */
+    transferTarget: IUiGranteeAsyncOption | undefined;
+    /**
+     * Whether "Also remove my access" is checked in the transfer dialog. When
+     * true the current user's grant is removed after the transfer; otherwise it
+     * is downgraded to VIEW.
+     */
+    transferAlsoRemoveSelf: boolean;
+    /**
+     * Whether `transferTarget` already owns the object (already holds EDIT). When
+     * true there is nothing to transfer — consumers show the "already an owner"
+     * variant offering to remove the current user's own access instead.
+     */
+    transferTargetIsOwner: boolean;
+    /** Whether the transfer write (or self-removal) is in flight. */
+    transferSaving: boolean;
 }
 /**
  * @internal
@@ -108,11 +128,13 @@ export interface IObjectShareControllerActions {
     closeAddGrantee: () => void;
     setPendingGrantees: (next: IUiPickedGrantee[]) => void;
     /**
-     * Loader for the add-grantee picker. Wraps `getAvailableAssignees` with
+     * Loader for the grantee pickers. Wraps `getAvailableAssignees` with
      * client-side search + already-picked filtering, returning the picker's
-     * `{ groups, users }` shape.
+     * `{ groups, users }` shape. By default excludes already-granted grantees
+     * (add-grantee picker); pass `includeGranted` to keep them (transfer-ownership
+     * picker, which may promote an existing viewer to owner).
      */
-    loadOptions: (search: string) => Promise<IUiGranteeAsyncOptions>;
+    loadOptions: (search: string, includeGranted?: boolean) => Promise<IUiGranteeAsyncOptions>;
     /** Commit all pending grantees to the backend. */
     confirmAddGrantees: () => Promise<void>;
     /** Change the permission level for a single grantee. Auto-saves. */
@@ -136,6 +158,24 @@ export interface IObjectShareControllerActions {
      * already-granted rule.
      */
     changeWorkspaceLevel: (level: "VIEW" | "SHARE") => Promise<void>;
+    /** Open the transfer-ownership subview with an empty picker. */
+    openTransferOwnership: () => void;
+    /** Close the transfer-ownership subview and clear its buffers; returns to main. */
+    closeTransferOwnership: () => void;
+    /**
+     * Pick (or replace) the candidate new owner. Recomputes whether that user
+     * already owns the object (`transferTargetIsOwner`).
+     */
+    setTransferTarget: (owner: IUiGranteeAsyncOption) => void;
+    /** Toggle "Also remove my access" in the transfer dialog. */
+    setTransferAlsoRemoveSelf: (next: boolean) => void;
+    /**
+     * Commit the ownership transfer: grant the picked user EDIT and downgrade the
+     * current user to VIEW (or remove them if "Also remove my access" is set), in
+     * one write. When the picked user already owns the object this transfers
+     * nothing and only applies the self-access choice. Auto-saves.
+     */
+    confirmTransferOwnership: () => Promise<void>;
 }
 /**
  * @internal

package/esm/share/objectShareController.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"objectShareController.types.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEzG,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAElE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC,kFAAkF;IAClF,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,0BAA0B,CAAC;IAClC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IACjD;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,GAAG,YAAY,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5D,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;;;OAMG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAE1C,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,aAAa,EAAE,kBAAkB,CAAC;IAClC;;;;;OAKG;IACH,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAE9B;;;OAGG;IACH,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAEpD,mEAAiE;IACjE,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,qEAAqE;IACrE,eAAe,EAAE,gBAAgB,EAAE,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC1C,sFAAsF;IACtF,KAAK,EAAE,MAAM,IAAI,CAAC;IAElB,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,kBAAkB,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;IACvD;;;;OAIG;IACH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,oEAAoE;IACpE,qBAAqB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,oCAAoC;IACpC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;;OAGG;IACH,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtF,+DAA+D;IAC/D,0BAA0B,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/D,yBAAyB,EAAE,MAAM,IAAI,CAAC;IACtC,4DAA4D;IAC5D,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;;;OAKG;IACH,oBAAoB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpE;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,KAAK,EAAE,2BAA2B,CAAC;IACnC,OAAO,EAAE,6BAA6B,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B"}
+{"version":3,"file":"objectShareController.types.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EACR,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,gBAAgB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAElE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC,kFAAkF;IAClF,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,0BAA0B,CAAC;IAClC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IACjD;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,mBAAmB,CAAC;IACrD,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5D,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;;;OAMG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAE1C,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,aAAa,EAAE,kBAAkB,CAAC;IAClC;;;;;OAKG;IACH,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAE9B;;;OAGG;IACH,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAEpD,mEAAiE;IACjE,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,qEAAqE;IACrE,eAAe,EAAE,gBAAgB,EAAE,CAAC;IAEpC;;;;OAIG;IACH,cAAc,EAAE,qBAAqB,GAAG,SAAS,CAAC;IAClD;;;;OAIG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,qBAAqB,EAAE,OAAO,CAAC;IAC/B,iEAAiE;IACjE,cAAc,EAAE,OAAO,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC1C,sFAAsF;IACtF,KAAK,EAAE,MAAM,IAAI,CAAC;IAElB,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,kBAAkB,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;IACvD;;;;;;OAMG;IACH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC3F,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,oEAAoE;IACpE,qBAAqB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,oCAAoC;IACpC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;;OAGG;IACH,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtF,+DAA+D;IAC/D,0BAA0B,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/D,yBAAyB,EAAE,MAAM,IAAI,CAAC;IACtC,4DAA4D;IAC5D,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;;;OAKG;IACH,oBAAoB,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjE,gEAAgE;IAChE,qBAAqB,EAAE,MAAM,IAAI,CAAC;IAClC,mFAAmF;IACnF,sBAAsB,EAAE,MAAM,IAAI,CAAC;IACnC;;;OAGG;IACH,iBAAiB,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAC1D,6DAA6D;IAC7D,yBAAyB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACnD;;;;;OAKG;IACH,wBAAwB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,KAAK,EAAE,2BAA2B,CAAC;IACnC,OAAO,EAAE,6BAA6B,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/esm/share/useAccessList.d.ts

@@ -36,8 +36,20 @@ export interface IAccessList {
     commit: (mutate: IGranularAccessGrantee[], successMessage: {
         id: string;
     }) => Promise<boolean>;
-    /** Picker loader — available assignees minus already-granted, filtered by query. */
-    loadOptions: (search: string) => Promise<IUiGranteeAsyncOptions>;
+    /**
+     * Picker loader — available assignees filtered by query. By default excludes
+     * already-granted grantees (add-grantee picker); pass `includeGranted` to keep
+     * them (transfer-ownership picker, which may promote an existing viewer).
+     */
+    loadOptions: (search: string, includeGranted?: boolean) => Promise<IUiGranteeAsyncOptions>;
+    /**
+     * The current user's ref, resolved on demand (and cached). Used by the
+     * transfer-ownership flow to write the current user's own grant change. The
+     * add-grantee *picker* excludes the current user, but `getAccessList` does
+     * not, so a self grant can still appear as a row. Rejects if the profile
+     * can't be read.
+     */
+    getCurrentUserRef: () => Promise<ObjRef>;
     /** Resolve a grantee id back to the picker's original ObjRef (preserves Uri vs Id ref). */
     refForId: (id: string) => ObjRef;
     /** Write through a local grantee-row change (insert / level / remove); rolled back by the caller. */

package/esm/share/useAccessList.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAccessList.d.ts","sourceRoot":"","sources":["../../src/share/useAccessList.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAEH,KAAK,sBAAsB,EAC3B,KAAK,MAAM,EAEd,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,sBAAsB,EAAmB,MAAM,sBAAsB,CAAC;AAW7G,OAAO,KAAK,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACzG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IACxB,iFAAiF;IACjF,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,wFAAwF;IACxF,OAAO,EAAE,OAAO,CAAC;IACjB,iGAA+F;IAC/F,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,uFAAqF;IACrF,aAAa,EAAE,kBAAkB,CAAC;IAClC,6FAA2F;IAC3F,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,iEAAiE;IACjE,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC1C,+DAA+D;IAC/D,MAAM,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAC9C,iDAAiD;IACjD,SAAS,EAAE,KAAK,GAAG,SAAS,CAAC;IAC7B;;;;;OAKG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAE3B,mFAAmF;IACnF,MAAM,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,cAAc,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F,sFAAoF;IACpF,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,2FAA2F;IAC3F,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC;IAEjC,qGAAqG;IACrG,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACzE,8EAA8E;IAC9E,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC3E;;;;OAIG;IACH,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAC1E,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CAC/E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CACzB,MAAM,EAAE,wBAAwB,GAAG,SAAS,EAC5C,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,GAClC,WAAW,CA4Qb"}
+{"version":3,"file":"useAccessList.d.ts","sourceRoot":"","sources":["../../src/share/useAccessList.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAEH,KAAK,sBAAsB,EAC3B,KAAK,MAAM,EAEd,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,sBAAsB,EAAmB,MAAM,sBAAsB,CAAC;AAW7G,OAAO,KAAK,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACzG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IACxB,iFAAiF;IACjF,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,wFAAwF;IACxF,OAAO,EAAE,OAAO,CAAC;IACjB,iGAA+F;IAC/F,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC,uFAAqF;IACrF,aAAa,EAAE,kBAAkB,CAAC;IAClC,6FAA2F;IAC3F,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC;IACjC,iEAAiE;IACjE,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC1C,+DAA+D;IAC/D,MAAM,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAC9C,iDAAiD;IACjD,SAAS,EAAE,KAAK,GAAG,SAAS,CAAC;IAC7B;;;;;OAKG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAE3B,mFAAmF;IACnF,MAAM,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,cAAc,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F;;;;OAIG;IACH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC3F;;;;;;OAMG;IACH,iBAAiB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACzC,2FAA2F;IAC3F,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC;IAEjC,qGAAqG;IACrG,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IACzE,8EAA8E;IAC9E,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC3E;;;;OAIG;IACH,iBAAiB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAC1E,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CAC/E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CACzB,MAAM,EAAE,wBAAwB,GAAG,SAAS,EAC5C,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,GAClC,WAAW,CAoSb"}

package/esm/share/useAccessList.js

@@ -1,5 +1,5 @@
 // (C) 2026 GoodData Corporation
-import { useCallback, useEffect, useMemo, useState } from "react";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { objRefToString, } from "@gooddata/sdk-model";
 import { useBackendStrict, useCancelablePromise, useWorkspaceStrict } from "@gooddata/sdk-ui";
 import { useToastMessage } from "@gooddata/sdk-ui-kit";
@@ -41,6 +41,9 @@ export function useAccessList(target, onSaved) {
     // Original ObjRef per grantee id, learned from the picker (the access-list id
     // is a serialized `kind:identifier`, which loses Uri-vs-Id). Reused for writes.
     const [knownRefs, setKnownRefs] = useState({});
+    // Memoized current-user-ref fetch — the profile doesn't change while mounted,
+    // so resolve it at most once and share the promise across callers.
+    const currentUserRefCache = useRef(undefined);
     const targetKey = target ? objRefToString(target.ref) : undefined;
     // Learn each assignee's real name + ref into the caches, keyed by the same
     // grantee id the rows use. Written from both the picker (loadOptions) and the
@@ -190,10 +193,14 @@ export function useAccessList(target, onSaved) {
         }
     }, [backend, workspace, target, toast, onSaved]);
     // Picker loader — fetches available assignees on demand, filters by the typed
-    // query, excludes anything already granted. Depends only on the granted set
-    // (grantees), so its identity changes only when that set actually changes. It
-    // must NOT write state that feeds its own deps.
-    const loadOptions = useCallback(async (search) => {
+    // query, and by default excludes anything already granted. Depends only on the
+    // granted set (grantees), so its identity changes only when that set actually
+    // changes. It must NOT write state that feeds its own deps.
+    //
+    // `includeGranted` keeps already-granted grantees in the result. The
+    // transfer-ownership picker needs this: promoting an existing viewer to owner
+    // is a primary case, and the add-grantee exclusion would otherwise hide them.
+    const loadOptions = useCallback(async (search, includeGranted = false) => {
         if (!target) {
             return { groups: [], users: [] };
         }
@@ -210,7 +217,7 @@ export function useAccessList(target, onSaved) {
         // even when the access-list grant later returns only a raw id. Safe here:
         // the caches aren't dependencies of loadOptions, so this won't re-trigger it.
         cacheAssignees(assignees);
-        const excluded = new Set(excludedIdsKey ? excludedIdsKey.split(",") : []);
+        const excluded = new Set(includeGranted || !excludedIdsKey ? [] : excludedIdsKey.split(","));
         const selectable = withIds
             .filter(({ id }) => !excluded.has(id)) // hide anyone already granted
             .filter(({ assignee }) => assigneeMatchesQuery(assignee, query));
@@ -231,6 +238,21 @@ export function useAccessList(target, onSaved) {
     // Reuse the picker's original ref (preserves UriRef vs IdentifierRef);
     // fall back to the serialized id only if it wasn't cached.
     const refForId = useCallback((id) => knownRefs[id] ?? { identifier: id.split(":", 2)[1] }, [knownRefs]);
+    const getCurrentUserRef = useCallback(async () => {
+        if (!currentUserRefCache.current) {
+            currentUserRefCache.current = backend
+                .currentUser()
+                .getUser()
+                .then((user) => user.ref)
+                .catch((error) => {
+                // Don't cache a rejected promise, or a transient profile-read
+                // failure would make every later transfer fail immediately.
+                currentUserRefCache.current = undefined;
+                throw error;
+            });
+        }
+        return currentUserRefCache.current;
+    }, [backend]);
     return {
         targetKey,
         hasList,
@@ -244,6 +266,7 @@ export function useAccessList(target, onSaved) {
         commit,
         loadOptions,
         refForId,
+        getCurrentUserRef,
         setGrantees,
         setGeneralAccess,
         setWorkspaceLevel,

package/esm/share/useObjectShareController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useObjectShareController.d.ts","sourceRoot":"","sources":["../../src/share/useObjectShareController.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAa1E,OAAO,EACH,KAAK,sBAAsB,EAI3B,KAAK,sBAAsB,EAE9B,MAAM,kCAAkC,CAAC;AAI1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,wBAAwB,GAAG,SAAS,EAC5C,OAAO,CAAC,EAAE,sBAAsB,GACjC,sBAAsB,CA8jBxB"}
+{"version":3,"file":"useObjectShareController.d.ts","sourceRoot":"","sources":["../../src/share/useObjectShareController.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAkB1E,OAAO,EACH,KAAK,sBAAsB,EAI3B,KAAK,sBAAsB,EAE9B,MAAM,kCAAkC,CAAC;AAI1C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,wBAAwB,GAAG,SAAS,EAC5C,OAAO,CAAC,EAAE,sBAAsB,GACjC,sBAAsB,CAwyBxB"}