@gooddata/sdk-ui-ext 11.52.0-alpha.6 → 11.52.0-alpha.7

package/esm/share/objectShareController.helpers.d.ts

@@ -58,13 +58,57 @@ export declare function directLevel(permissions: readonly string[]): ObjectShare
 export declare function levelsAbove(level: ObjectSharePermissionLevel | undefined): ObjectSharePermissionLevel[];
 /** Levels strictly below the given one, e.g. for disabling levels an inherited grant already exceeds. */
 export declare function levelsBelow(level: ObjectSharePermissionLevel): ObjectSharePermissionLevel[];
+/** The stronger of two levels; undefined only when both are. */
+export declare function maxLevel(a: ObjectSharePermissionLevel | undefined, b: ObjectSharePermissionLevel | undefined): ObjectSharePermissionLevel | undefined;
 /**
- * The effective permission to surface as a warning, or undefined when the direct
- * grant already covers it. Set only when the grantee *inherits* a level (e.g. via
- * a group) above the directly-granted one — i.e. the effective access is higher
- * than what the row's permission control shows.
+ * The inherited permission to surface as a warning, or undefined when the direct
+ * grant already covers it. Set when the grantee *inherits* a level (via a group or
+ * a parent workspace) that the direct grant does not reach — including the
+ * inherited-only case (`direct` undefined), where the whole displayed level comes
+ * from inheritance.
  */
-export declare function effectivePermissionAbove(direct: ObjectSharePermissionLevel, inheritedLevel: ObjectSharePermissionLevel | undefined): ObjectSharePermissionLevel | undefined;
+export declare function effectivePermissionAbove(direct: ObjectSharePermissionLevel | undefined, inheritedLevel: ObjectSharePermissionLevel | undefined): ObjectSharePermissionLevel | undefined;
+/**
+ * Whether picking `level` for this grantee would change the level they EFFECTIVELY hold.
+ *
+ * The permission menu shows the effective level, so a pick is only meaningful if it moves
+ * that: under an inherited EDIT, picking SHARE or VIEW cannot lower anything, it would just
+ * rewrite the grant made here where nobody can see it. Conversely a direct EDIT under an
+ * inherited SHARE CAN be lowered to VIEW, because the effective level then drops to SHARE.
+ *
+ * The single source of this rule. Everything that reacts to a pick must agree: the
+ * controller refuses a pick that changes nothing, so any confirm staged for one would ask
+ * the user to approve a change that then silently does not happen.
+ *
+ * @internal
+ */
+export declare function changesEffectiveLevel(grantee: Pick<IObjectShareGrantee, "level" | "inheritedLevel">, level: ObjectSharePermissionLevel): boolean;
+/**
+ * Whether revoking this grantee's direct grant would change the level they EFFECTIVELY
+ * hold. False when inheritance alone already covers the displayed level: the revoke still
+ * removes the local grant, but restricts nothing the grantee can do — so no
+ * "Restrict your access?" confirm may be staged for it ({@link changesEffectiveLevel}'s
+ * rule, applied to removal).
+ *
+ * @internal
+ */
+export declare function removalChangesEffectiveLevel(grantee: Pick<IObjectShareGrantee, "level" | "inheritedLevel">): boolean;
+/**
+ * The row fields to apply when THIS workspace's direct grant moves to `direct`:
+ * the displayed level recomposes against whatever is inherited, so a re-grade below
+ * an inherited level cannot make the row understate the grantee's real access.
+ *
+ * @internal
+ */
+export declare function withDirectLevel(grantee: IObjectShareGrantee, direct: ObjectSharePermissionLevel): IObjectShareGrantee;
+/**
+ * The row a grantee falls back to once their direct grant is revoked but inherited
+ * access remains — the row survives the removal as inherited-only rather than
+ * disappearing and reappearing on the next load.
+ *
+ * @internal
+ */
+export declare function withoutDirectGrant(grantee: IObjectShareGrantee, inheritedLevel: ObjectSharePermissionLevel): IObjectShareGrantee;
 export declare function granteesFromAccessList(list: IObjectAccessList | undefined): IObjectShareGrantee[];
 /**
  * A transient edit overlaid on a fetched grantee row (keyed by grantee id in
@@ -90,6 +134,17 @@ export type GranteeEdit = {
     kind: "removed";
     pending: boolean;
     settled?: GranteeEdit;
+}
+/**
+ * Pending marker only — the row renders exactly as it stands. For a write that
+ * locks the row without changing its access (a label-scope edit), so nothing has
+ * to invent a level: reusing the `level` overlay would record the DISPLAYED level
+ * as the direct grant, and that level is the effective one.
+ */
+ | {
+    kind: "locked";
+    pending: boolean;
+    settled?: GranteeEdit;
 };
 /**
  * Transient edit of the all-workspace-users rule (general access + its level),
@@ -118,12 +173,18 @@ export declare function toGranularGrantee(kind: "user" | "group", granteeRef: Ob
 /**
  * The principal a label-scope reconcile applies to: a named user/group, or the
  * implicit all-workspace-users rule (general access).
+ *
+ * `level` is the permission a label GRANT carries, so a label mirrors the level
+ * held on the object rather than always landing on VIEW. Defaults to VIEW when
+ * omitted; irrelevant for revokes, which write an empty permission set.
  */
-export type LabelScopePrincipal = {
+export type LabelScopePrincipal = ({
     kind: "user" | "group";
     granteeRef: ObjRef;
 } | {
     allWorkspaceUsers: true;
+}) & {
+    level?: ObjectSharePermissionLevel;
 };
 export declare function granularGranteeFor(principal: LabelScopePrincipal, level: ObjectSharePermissionLevel | "none"): IGranularAccessGrantee;
 /**
@@ -139,12 +200,42 @@ export declare function buildLabelMutations(principal: LabelScopePrincipal, desi
     grantee: IGranularAccessGrantee;
 }>;
 /**
- * Multi-principal variant of {@link buildLabelMutations}: groups the per-label
- * writes so each label is one write carrying every principal that changes on it.
- * Keys on `label.id`, not the raw `ObjRef` — a Map keyed on ObjRef would key on
- * object identity and fail to merge equal-but-distinct refs.
+ * Pure: the per-label writes that re-grade `principal`'s EXISTING label scope to
+ * `principal.level`. Unlike {@link buildLabelMutations} this is not a set diff —
+ * the scope is unchanged and every in-scope label is rewritten — so it is what a
+ * permission-level change on the object needs to keep its labels in step. `labels` is
+ * the permissionable set, so every write targets a label that can take a grant.
+ *
+ * The primary label is deliberately EXCLUDED. Its access is implicit — {@link
+ * buildLabelMutations} never grants or revokes it — so a grant written here would be
+ * one nothing can take away: a later removal diffs the primary as unchanged and leaves
+ * the grantee holding the primary label after their object access is gone.
+ */
+export declare function buildLabelRegrades(principals: LabelScopePrincipal[], scopeLabelIds: ReadonlySet<string>, labels: IObjectShareLabel[]): Array<{
+    id: string;
+    ref: ObjRef;
+    grantees: IGranularAccessGrantee[];
+}>;
+/**
+ * One principal's label-scope move. Held per principal because grantees added in
+ * a single step each pick their own scope, so one desired set can't stand for the
+ * whole batch.
+ *
+ * @internal
  */
-export declare function buildLabelMutationsForPrincipals(principals: LabelScopePrincipal[], desiredLabelIds: ReadonlySet<string>, currentLabelIds: ReadonlySet<string>, labels: IObjectShareLabel[]): Array<{
+export interface ILabelScopeChange {
+    principal: LabelScopePrincipal;
+    desiredLabelIds: ReadonlySet<string>;
+    currentLabelIds: ReadonlySet<string>;
+}
+/**
+ * Multi-principal variant of {@link buildLabelMutations}, each principal moving its
+ * own scope: groups the per-label writes so each label is one write carrying every
+ * principal that changes on it. Keys on `label.id`, not the raw `ObjRef` — a Map
+ * keyed on ObjRef would key on object identity and fail to merge
+ * equal-but-distinct refs.
+ */
+export declare function buildLabelMutationsForScopes(changes: readonly ILabelScopeChange[], labels: IObjectShareLabel[]): Array<{
     id: string;
     ref: ObjRef;
     grantees: IGranularAccessGrantee[];
@@ -154,11 +245,20 @@ export declare const NO_LABELS: IObjectShareLabel[];
 /** Shared empty id-set for "no labels in scope" diffs. */
 export declare const EMPTY_IDS: ReadonlySet<string>;
 /**
- * Whether a fetched grant for `granteeId` exists with a non-empty permission set.
- * Inspects the raw grants rather than `granteesFromAccessList`, which normalizes
- * every listed user/group to a VIEW level even when its `permissions` are empty —
- * so a revoked-but-still-listed entry would otherwise read as granted, mis-scoping
- * a per-label checkbox to a label the grantee can't actually access.
+ * Where `granteeId`'s access to this object comes from, or `undefined` when they hold it
+ * at all. The two flags are INDEPENDENT: a grantee can hold a grant made here *and*
+ * inherit one from a group or a parent workspace, and both facts matter — `direct` says
+ * there is something here to revoke, `inherited` says access survives revoking it.
+ * Collapsing them to a single winner is what made a dual-granted label read as
+ * inaccessible once its local grant was revoked.
+ *
+ * Inspects the raw grants rather than `granteesFromAccessList`, which normalizes every
+ * listed user/group to a VIEW level even when it carries no permissions — so a
+ * revoked-but-still-listed entry would otherwise read as granted, mis-scoping a per-label
+ * checkbox to a label the grantee can't actually access.
  */
-export declare function isGranteeGrantedIn(list: IObjectAccessList, id: string): boolean;
+export declare function granteeGrantIn(list: IObjectAccessList, id: string): {
+    direct: boolean;
+    inherited: boolean;
+} | undefined;
 //# sourceMappingURL=objectShareController.helpers.d.ts.map

package/esm/share/objectShareController.helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"objectShareController.helpers.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,MAAM,EAId,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,KAAK,EACR,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,0BAA0B,EAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,6FAA6F;AAC7F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GAC1B,qBAAqB,CAKvB;AAED,kHAAkH;AAClH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGvF;AAED,oHAAkH;AAClH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,qBAAqB,CAI9F;AAED,gGAA0F;AAC1F,wBAAgB,eAAe,CAC3B,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAQlC;AAED,wGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAMjG;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,CAY5F;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,GAAG,iBAAiB,EAAE,CAQ7F;AAED,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAM9F;AAOD,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,0BAA0B,GAAG,SAAS,CAErG;AAED,iGAA+F;AAC/F,wBAAgB,WAAW,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,0BAA0B,CAEtF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,0BAA0B,GAAG,SAAS,GAAG,0BAA0B,EAAE,CAEvG;AAED,yGAAyG;AACzG,wBAAgB,WAAW,CAAC,KAAK,EAAE,0BAA0B,GAAG,0BAA0B,EAAE,CAE3F;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,0BAA0B,EAClC,cAAc,EAAE,0BAA0B,GAAG,SAAS,GACvD,0BAA0B,GAAG,SAAS,CAExC;AAaD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,GAAG,mBAAmB,EAAE,CAyBjG;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,0BAA0B,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACtB,aAAa,EAAE,kBAAkB,CAAC;IAClC,KAAK,EAAE,0BAA0B,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CACzB,IAAI,EAAE,SAAS,mBAAmB,EAAE,EACpC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,EAC5C,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,YAAY,EAAE,aAAa,GAAG,SAAS,GACxC,mBAAmB,EAAE,CA4EvB;AAUD,wBAAgB,iBAAiB,CAC7B,IAAI,EAAE,MAAM,GAAG,OAAO,EACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,0BAA0B,GAAG,MAAM,GAC3C,sBAAsB,CAKxB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GACzB;IAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,iBAAiB,EAAE,IAAI,CAAA;CAAE,CAAC;AAElC,wBAAgB,kBAAkB,CAC9B,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,0BAA0B,GAAG,MAAM,0BAO7C;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAC/B,SAAS,EAAE,mBAAmB,EAC9B,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,MAAM,EAAE,iBAAiB,EAAE,GAC5B,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC,CAWzD;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC5C,UAAU,EAAE,mBAAmB,EAAE,EACjC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,MAAM,EAAE,iBAAiB,EAAE,GAC5B,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CAAE,CAAC,CAcxE;AAED,sFAAsF;AACtF,eAAO,MAAM,SAAS,EAAE,iBAAiB,EAAO,CAAC;AAEjD,0DAA0D;AAC1D,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,CAAqB,CAAC;AAEhE;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAU/E"}
+{"version":3,"file":"objectShareController.helpers.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,KAAK,MAAM,EAId,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,KAAK,EACR,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,0BAA0B,EAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,6FAA6F;AAC7F,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAErE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,KAAK,EAAE,MAAM,GAAG,SAAS,GAC1B,qBAAqB,CAKvB;AAED,kHAAkH;AAClH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGvF;AAED,oHAAkH;AAClH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,uBAAuB,GAAG,qBAAqB,CAI9F;AAED,gGAA0F;AAC1F,wBAAgB,eAAe,CAC3B,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,MAAM,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAQlC;AAED,wGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAMjG;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,CAY5F;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,GAAG,iBAAiB,EAAE,CAQ7F;AAED,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAM9F;AAOD,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,0BAA0B,GAAG,SAAS,CAErG;AAED,iGAA+F;AAC/F,wBAAgB,WAAW,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,0BAA0B,CAEtF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,0BAA0B,GAAG,SAAS,GAAG,0BAA0B,EAAE,CAEvG;AAED,yGAAyG;AACzG,wBAAgB,WAAW,CAAC,KAAK,EAAE,0BAA0B,GAAG,0BAA0B,EAAE,CAE3F;AAED,gEAAgE;AAChE,wBAAgB,QAAQ,CACpB,CAAC,EAAE,0BAA0B,GAAG,SAAS,EACzC,CAAC,EAAE,0BAA0B,GAAG,SAAS,GAC1C,0BAA0B,GAAG,SAAS,CAQxC;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACpC,MAAM,EAAE,0BAA0B,GAAG,SAAS,EAC9C,cAAc,EAAE,0BAA0B,GAAG,SAAS,GACvD,0BAA0B,GAAG,SAAS,CAOxC;AA6BD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACjC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,gBAAgB,CAAC,EAC9D,KAAK,EAAE,0BAA0B,GAClC,OAAO,CAET;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CACxC,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,gBAAgB,CAAC,GAC/D,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC3B,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,0BAA0B,GACnC,mBAAmB,CAOrB;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAC9B,OAAO,EAAE,mBAAmB,EAC5B,cAAc,EAAE,0BAA0B,GAC3C,mBAAmB,CAQrB;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,GAAG,mBAAmB,EAAE,CAyBjG;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GACjB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,0BAA0B,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE;AAC9D;;;;;GAKG;GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,CAAC;AAElE;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACtB,aAAa,EAAE,kBAAkB,CAAC;IAClC,KAAK,EAAE,0BAA0B,CAAC;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,gFAAgF;IAChF,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CACzB,IAAI,EAAE,SAAS,mBAAmB,EAAE,EACpC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,EAC5C,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,YAAY,EAAE,aAAa,GAAG,SAAS,GACxC,mBAAmB,EAAE,CAkFvB;AAUD,wBAAgB,iBAAiB,CAC7B,IAAI,EAAE,MAAM,GAAG,OAAO,EACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,0BAA0B,GAAG,MAAM,GAC3C,sBAAsB,CAKxB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAC5B;IAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,iBAAiB,EAAE,IAAI,CAAA;CAAE,CAChC,GAAG;IAAE,KAAK,CAAC,EAAE,0BAA0B,CAAA;CAAE,CAAC;AAE3C,wBAAgB,kBAAkB,CAC9B,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,0BAA0B,GAAG,MAAM,0BAO7C;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAC/B,SAAS,EAAE,mBAAmB,EAC9B,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EACpC,MAAM,EAAE,iBAAiB,EAAE,GAC5B,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC,CAczD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAC9B,UAAU,EAAE,mBAAmB,EAAE,EACjC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,EAClC,MAAM,EAAE,iBAAiB,EAAE,GAC5B,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CAAE,CAAC,CAaxE;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAC9B,SAAS,EAAE,mBAAmB,CAAC;IAC/B,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACxC;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CACxC,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,MAAM,EAAE,iBAAiB,EAAE,GAC5B,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CAAE,CAAC,CAmBxE;AAED,sFAAsF;AACtF,eAAO,MAAM,SAAS,EAAE,iBAAiB,EAAO,CAAC;AAEjD,0DAA0D;AAC1D,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,MAAM,CAAqB,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAC1B,IAAI,EAAE,iBAAiB,EACvB,EAAE,EAAE,MAAM,GACX;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,CAcrD"}

package/esm/share/objectShareController.helpers.js

@@ -115,25 +115,117 @@ export function levelsAbove(level) {
 export function levelsBelow(level) {
     return LEVELS_STRONGEST_FIRST.filter((l) => LEVEL_RANK[l] < LEVEL_RANK[level]);
 }
+/** The stronger of two levels; undefined only when both are. */
+export function maxLevel(a, b) {
+    if (a === undefined) {
+        return b;
+    }
+    if (b === undefined) {
+        return a;
+    }
+    return LEVEL_RANK[a] >= LEVEL_RANK[b] ? a : b;
+}
 /**
- * The effective permission to surface as a warning, or undefined when the direct
- * grant already covers it. Set only when the grantee *inherits* a level (e.g. via
- * a group) above the directly-granted one — i.e. the effective access is higher
- * than what the row's permission control shows.
+ * The inherited permission to surface as a warning, or undefined when the direct
+ * grant already covers it. Set when the grantee *inherits* a level (via a group or
+ * a parent workspace) that the direct grant does not reach — including the
+ * inherited-only case (`direct` undefined), where the whole displayed level comes
+ * from inheritance.
  */
 export function effectivePermissionAbove(direct, inheritedLevel) {
-    return inheritedLevel && LEVEL_RANK[inheritedLevel] > LEVEL_RANK[direct] ? inheritedLevel : undefined;
+    if (!inheritedLevel) {
+        return undefined;
+    }
+    return direct === undefined || LEVEL_RANK[inheritedLevel] > LEVEL_RANK[direct]
+        ? inheritedLevel
+        : undefined;
 }
-/** The permission-derived fields shared by every grantee row, regardless of kind. */
+/**
+ * The permission-derived fields of a grantee row, given the raw direct and
+ * inherited permission sets.
+ *
+ * The displayed `level` is the EFFECTIVE one — the stronger of the direct grant and
+ * anything inherited (from a group, or from a parent workspace in a hierarchy) —
+ * so a grantee who only inherits EDIT reads as "Can edit & share" rather than
+ * falling back to VIEW. `directLevel` keeps what THIS workspace grants (undefined
+ * when the access is inherited-only): it is what writes re-grade and what decides
+ * whether there is anything here to remove.
+ */
 function granteeAccess(permissions, inheritedPermissions) {
-    const level = directLevel(permissions);
+    const direct = strongestLevel(permissions);
     const inheritedLevel = strongestLevel(inheritedPermissions);
+    // A listed grantee with NEITHER set is a revoked-but-still-listed entry. VIEW is the
+    // historical placeholder for its level, and it counts as the DIRECT one: leaving
+    // `directLevel` undefined would classify the row as inherited-only, disabling Remove
+    // and claiming inherited access that does not exist.
+    const directLevel = direct ?? (inheritedLevel === undefined ? "VIEW" : undefined);
     return {
-        level,
-        effectivePermission: effectivePermissionAbove(level, inheritedLevel),
+        level: maxLevel(directLevel, inheritedLevel) ?? "VIEW",
+        directLevel,
+        effectivePermission: effectivePermissionAbove(direct, inheritedLevel),
         inheritedLevel,
     };
 }
+/**
+ * Whether picking `level` for this grantee would change the level they EFFECTIVELY hold.
+ *
+ * The permission menu shows the effective level, so a pick is only meaningful if it moves
+ * that: under an inherited EDIT, picking SHARE or VIEW cannot lower anything, it would just
+ * rewrite the grant made here where nobody can see it. Conversely a direct EDIT under an
+ * inherited SHARE CAN be lowered to VIEW, because the effective level then drops to SHARE.
+ *
+ * The single source of this rule. Everything that reacts to a pick must agree: the
+ * controller refuses a pick that changes nothing, so any confirm staged for one would ask
+ * the user to approve a change that then silently does not happen.
+ *
+ * @internal
+ */
+export function changesEffectiveLevel(grantee, level) {
+    return maxLevel(level, grantee.inheritedLevel) !== grantee.level;
+}
+/**
+ * Whether revoking this grantee's direct grant would change the level they EFFECTIVELY
+ * hold. False when inheritance alone already covers the displayed level: the revoke still
+ * removes the local grant, but restricts nothing the grantee can do — so no
+ * "Restrict your access?" confirm may be staged for it ({@link changesEffectiveLevel}'s
+ * rule, applied to removal).
+ *
+ * @internal
+ */
+export function removalChangesEffectiveLevel(grantee) {
+    return grantee.inheritedLevel !== grantee.level;
+}
+/**
+ * The row fields to apply when THIS workspace's direct grant moves to `direct`:
+ * the displayed level recomposes against whatever is inherited, so a re-grade below
+ * an inherited level cannot make the row understate the grantee's real access.
+ *
+ * @internal
+ */
+export function withDirectLevel(grantee, direct) {
+    return {
+        ...grantee,
+        level: maxLevel(direct, grantee.inheritedLevel) ?? direct,
+        directLevel: direct,
+        effectivePermission: effectivePermissionAbove(direct, grantee.inheritedLevel),
+    };
+}
+/**
+ * The row a grantee falls back to once their direct grant is revoked but inherited
+ * access remains — the row survives the removal as inherited-only rather than
+ * disappearing and reappearing on the next load.
+ *
+ * @internal
+ */
+export function withoutDirectGrant(grantee, inheritedLevel) {
+    return {
+        ...grantee,
+        level: inheritedLevel,
+        directLevel: undefined,
+        effectivePermission: inheritedLevel,
+        pending: undefined,
+    };
+}
 export function granteesFromAccessList(list) {
     if (!list) {
         return [];
@@ -185,11 +277,7 @@ export function mergeGrantees(base, edits, selfId, selfIdentity) {
             return settled.grantee;
         }
         if (g && settled?.kind === "level") {
-            return {
-                ...g,
-                level: settled.level,
-                effectivePermission: effectivePermissionAbove(settled.level, g.inheritedLevel),
-            };
+            return withDirectLevel(g, settled.level);
         }
         return g;
     };
@@ -203,19 +291,29 @@ export function mergeGrantees(base, edits, selfId, selfIdentity) {
         }
         if (edit.kind === "removed") {
             // Visible (muted, at its last committed state) only while the revoke is
-            // in flight; a settled removal renders nothing — its entry persists to
-            // keep the base row hidden.
+            // in flight.
             const committed = edit.pending ? committedRow(g, edit.settled) : undefined;
-            return committed ? { ...committed, pending: "removing" } : undefined;
+            if (committed) {
+                return { ...committed, pending: "removing" };
+            }
+            // A settled removal revokes only what THIS workspace granted. When the
+            // grantee still inherits access (a group, a parent workspace), the row
+            // survives as inherited-only — dropping it would claim the removal took
+            // away access it cannot reach. With nothing inherited the row is gone and
+            // the entry persists to keep the base row hidden.
+            return g?.inheritedLevel ? withoutDirectGrant(g, g.inheritedLevel) : undefined;
+        }
+        if (edit.kind === "locked") {
+            // Access unchanged: render whatever the row had COMMITTED and add the saving
+            // marker. Rendering the fetched row instead would undo the committed state
+            // for the duration of the write — a removal survivor would reappear with the
+            // direct grant it just lost.
+            const committed = edit.settled ? renderEntry(g, { ...edit.settled, pending: false }) : g;
+            return committed ? { ...committed, pending: edit.pending ? "saving" : undefined } : undefined;
         }
         if (edit.kind === "level") {
             return g
-                ? {
-                    ...g,
-                    level: edit.level,
-                    effectivePermission: effectivePermissionAbove(edit.level, g.inheritedLevel),
-                    pending: edit.pending ? "saving" : undefined,
-                }
+                ? { ...withDirectLevel(g, edit.level), pending: edit.pending ? "saving" : undefined }
                 : undefined;
         }
         return { ...edit.grantee, pending: edit.pending ? "saving" : undefined };
@@ -275,21 +373,51 @@ export function buildLabelMutations(principal, desiredLabelIds, currentLabelIds,
         if (wanted === had) {
             continue;
         }
-        writes.push({ ref: label.ref, grantee: granularGranteeFor(principal, wanted ? "VIEW" : "none") });
+        writes.push({
+            ref: label.ref,
+            grantee: granularGranteeFor(principal, wanted ? (principal.level ?? "VIEW") : "none"),
+        });
+    }
+    return writes;
+}
+/**
+ * Pure: the per-label writes that re-grade `principal`'s EXISTING label scope to
+ * `principal.level`. Unlike {@link buildLabelMutations} this is not a set diff —
+ * the scope is unchanged and every in-scope label is rewritten — so it is what a
+ * permission-level change on the object needs to keep its labels in step. `labels` is
+ * the permissionable set, so every write targets a label that can take a grant.
+ *
+ * The primary label is deliberately EXCLUDED. Its access is implicit — {@link
+ * buildLabelMutations} never grants or revokes it — so a grant written here would be
+ * one nothing can take away: a later removal diffs the primary as unchanged and leaves
+ * the grantee holding the primary label after their object access is gone.
+ */
+export function buildLabelRegrades(principals, scopeLabelIds, labels) {
+    const writes = [];
+    for (const label of labels) {
+        if (label.isPrimary || !scopeLabelIds.has(label.id)) {
+            continue;
+        }
+        writes.push({
+            id: label.id,
+            ref: label.ref,
+            grantees: principals.map((p) => granularGranteeFor(p, p.level ?? "VIEW")),
+        });
     }
     return writes;
 }
 /**
- * Multi-principal variant of {@link buildLabelMutations}: groups the per-label
- * writes so each label is one write carrying every principal that changes on it.
- * Keys on `label.id`, not the raw `ObjRef` — a Map keyed on ObjRef would key on
- * object identity and fail to merge equal-but-distinct refs.
+ * Multi-principal variant of {@link buildLabelMutations}, each principal moving its
+ * own scope: groups the per-label writes so each label is one write carrying every
+ * principal that changes on it. Keys on `label.id`, not the raw `ObjRef` — a Map
+ * keyed on ObjRef would key on object identity and fail to merge
+ * equal-but-distinct refs.
  */
-export function buildLabelMutationsForPrincipals(principals, desiredLabelIds, currentLabelIds, labels) {
+export function buildLabelMutationsForScopes(changes, labels) {
     const byLabel = new Map();
     for (const label of labels) {
-        for (const principal of principals) {
-            const writes = buildLabelMutations(principal, desiredLabelIds, currentLabelIds, [label]);
+        for (const change of changes) {
+            const writes = buildLabelMutations(change.principal, change.desiredLabelIds, change.currentLabelIds, [label]);
             if (writes.length === 0) {
                 continue;
             }
@@ -305,20 +433,29 @@ export const NO_LABELS = [];
 /** Shared empty id-set for "no labels in scope" diffs. */
 export const EMPTY_IDS = new Set();
 /**
- * Whether a fetched grant for `granteeId` exists with a non-empty permission set.
- * Inspects the raw grants rather than `granteesFromAccessList`, which normalizes
- * every listed user/group to a VIEW level even when its `permissions` are empty —
- * so a revoked-but-still-listed entry would otherwise read as granted, mis-scoping
- * a per-label checkbox to a label the grantee can't actually access.
+ * Where `granteeId`'s access to this object comes from, or `undefined` when they hold it
+ * at all. The two flags are INDEPENDENT: a grantee can hold a grant made here *and*
+ * inherit one from a group or a parent workspace, and both facts matter — `direct` says
+ * there is something here to revoke, `inherited` says access survives revoking it.
+ * Collapsing them to a single winner is what made a dual-granted label read as
+ * inaccessible once its local grant was revoked.
+ *
+ * Inspects the raw grants rather than `granteesFromAccessList`, which normalizes every
+ * listed user/group to a VIEW level even when it carries no permissions — so a
+ * revoked-but-still-listed entry would otherwise read as granted, mis-scoping a per-label
+ * checkbox to a label the grantee can't actually access.
  */
-export function isGranteeGrantedIn(list, id) {
-    return list.grants.some((g) => {
-        if (isGranularUserAccess(g)) {
-            return id === granteeId("user", g.user.ref) && g.permissions.length > 0;
+export function granteeGrantIn(list, id) {
+    const sourceOf = (permissions, inherited) => permissions.length > 0 || inherited.length > 0
+        ? { direct: permissions.length > 0, inherited: inherited.length > 0 }
+        : undefined;
+    for (const g of list.grants) {
+        if (isGranularUserAccess(g) && id === granteeId("user", g.user.ref)) {
+            return sourceOf(g.permissions, g.inheritedPermissions);
         }
-        if (isGranularUserGroupAccess(g)) {
-            return id === granteeId("group", g.userGroup.ref) && g.permissions.length > 0;
+        if (isGranularUserGroupAccess(g) && id === granteeId("group", g.userGroup.ref)) {
+            return sourceOf(g.permissions, g.inheritedPermissions);
         }
-        return false;
-    });
+    }
+    return undefined;
 }

package/esm/share/objectShareController.types.d.ts

@@ -46,18 +46,31 @@ export interface IObjectShareGrantee extends IGranteeIdentityFacts {
      * profile, so it holds for rows of any origin (fetched or optimistic).
      */
     isSelf?: boolean;
+    /**
+     * EFFECTIVE permission level shown on the row — the stronger of {@link directLevel}
+     * and {@link inheritedLevel}, so a grantee who only inherits a level is not
+     * understated as VIEW.
+     */
     level: ObjectSharePermissionLevel;
     /**
-     * Effective permission when it is *higher* than the directly-granted `level`
-     * because the grantee inherits a stronger permission (e.g. via a group).
-     * Undefined when the direct grant already is the effective permission. Drives
-     * the row's "effective permission" warning badge.
+     * Permission level granted by THIS workspace, or undefined when the grantee's
+     * access is inherited-only (a group, or a parent workspace in a hierarchy).
+     * This — not {@link level} — is what a re-grade writes and what decides whether
+     * there is a grant here to remove: inherited access cannot be revoked from here.
+     */
+    directLevel?: ObjectSharePermissionLevel;
+    /**
+     * Inherited permission to surface as a warning: set when inheritance carries the
+     * grantee above their direct grant (including inherited-only, where the whole
+     * displayed level is inherited). Undefined when the direct grant already covers
+     * the effective permission. Drives the row's warning badge.
      */
     effectivePermission?: ObjectSharePermissionLevel;
     /**
-     * Strongest permission the grantee inherits (e.g. via a group), regardless of
-     * the current direct `level`. Retained from the fetch so `effectivePermission`
-     * can be recomputed locally when the direct level changes (no refetch).
+     * Strongest permission the grantee inherits (via a group, or a parent workspace),
+     * regardless of the current direct level. Retained from the fetch so the
+     * displayed level and badge can be recomposed locally when the direct level
+     * changes (no refetch).
      */
     inheritedLevel?: ObjectSharePermissionLevel;
     /**
@@ -164,11 +177,22 @@ export interface IObjectShareControllerState {
      */
     labelsInitializing: boolean;
     /**
-     * Per-grantee label scope: grantee id → the label ids that grantee can access.
-     * The primary label is always included. Empty entry means "all labels" has not
-     * yet been resolved; consumers should treat a missing entry as all-selected.
+     * Per-grantee label scope: grantee id → the label ids that grantee can access,
+     * whether granted here or inherited. The primary label is always included.
+     *
+     * A MISSING entry means the scope is not resolved for that grantee — only then may a
+     * consumer fall back to all labels, and only once {@link labelsResolved}. An entry
+     * that is an EMPTY array is a resolved answer: no non-primary label is in scope.
      */
     selectedLabelIdsByGrantee: Record<string, string[]>;
+    /**
+     * The subset of {@link selectedLabelIdsByGrantee} a grantee only INHERITS (from a
+     * group, or a parent workspace) with no grant on the label in this workspace.
+     * Those labels are in scope but cannot be re-scoped here: there is nothing local
+     * to revoke, so consumers render them locked. Same rule as a grantee row whose
+     * object access is inherited-only, which cannot be removed either.
+     */
+    inheritedLabelIdsByGrantee: Record<string, string[]>;
     /** Pending confirm — when set, the confirm dialog is visible. */
     pendingGeneralAccess?: GeneralAccessValue;
     /** Grantees staged in the add-grantee dialog before confirmation. */

package/esm/share/objectShareController.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"objectShareController.types.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEzG,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IAClC,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,qBAAqB;IACxD,EAAE,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAC9D,kFAAkF;IAClF,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,0BAA0B,CAAC;IAClC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IACjD;;;;OAIG;IACH,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C;;;;OAIG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,GAAG,YAAY,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5D,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC1C,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC;;;;;OAKG;IACH,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC;;;;;OAKG;IACH,yBAAyB,EAAE,0BAA0B,EAAE,GAAG,SAAS,CAAC;IACpE;;;;OAIG;IACH,uBAAuB,EAAE,0BAA0B,EAAE,GAAG,SAAS,CAAC;IAClE;;;;;OAKG;IACH,qBAAqB,EAAE,OAAO,CAAC;IAC/B;;;;;;;;OAQG;IACH,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC3D,aAAa,EAAE,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,cAAc,EAAE,0BAA0B,CAAC;IAC3C;;;;;;OAMG;IACH,uBAAuB,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAChE;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAC9B;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAE9B;;;OAGG;IACH,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAEpD,mEAAiE;IACjE,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,qEAAqE;IACrE,eAAe,EAAE,gBAAgB,EAAE,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC1C,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,kBAAkB,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;IACvD;;;;OAIG;IACH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,oEAAoE;IACpE,qBAAqB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,oCAAoC;IACpC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;;OAGG;IACH,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtF,+DAA+D;IAC/D,0BAA0B,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/D,yBAAyB,EAAE,MAAM,IAAI,CAAC;IACtC,4DAA4D;IAC5D,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;;;OAKG;IACH,oBAAoB,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,KAAK,EAAE,2BAA2B,CAAC;IACnC,OAAO,EAAE,6BAA6B,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B"}
+{"version":3,"file":"objectShareController.types.d.ts","sourceRoot":"","sources":["../../src/share/objectShareController.types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEzG,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IAClC,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,qBAAqB;IACxD,EAAE,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAC9D,kFAAkF;IAClF,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,KAAK,EAAE,0BAA0B,CAAC;IAClC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,0BAA0B,CAAC;IACzC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;IACjD;;;;;OAKG;IACH,cAAc,CAAC,EAAE,0BAA0B,CAAC;IAC5C;;;;OAIG;IACH,OAAO,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,MAAM,GAAG,YAAY,CAAC;IAC/B,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5D,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC1C,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC;;;;;OAKG;IACH,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC;;;;;OAKG;IACH,yBAAyB,EAAE,0BAA0B,EAAE,GAAG,SAAS,CAAC;IACpE;;;;OAIG;IACH,uBAAuB,EAAE,0BAA0B,EAAE,GAAG,SAAS,CAAC;IAClE;;;;;OAKG;IACH,qBAAqB,EAAE,OAAO,CAAC;IAC/B;;;;;;;;OAQG;IACH,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC3D,aAAa,EAAE,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,cAAc,EAAE,0BAA0B,CAAC;IAC3C;;;;;;OAMG;IACH,uBAAuB,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAChE;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAC9B;;;;OAIG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAE9B;;;OAGG;IACH,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAC5B;;;;;;;OAOG;IACH,yBAAyB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD;;;;;;OAMG;IACH,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAErD,mEAAiE;IACjE,oBAAoB,CAAC,EAAE,kBAAkB,CAAC;IAC1C,qEAAqE;IACrE,eAAe,EAAE,gBAAgB,EAAE,CAAC;CACvC;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC1C,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,kBAAkB,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;IACvD;;;;OAIG;IACH,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAExC,oEAAoE;IACpE,qBAAqB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/F,oCAAoC;IACpC,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;;OAGG;IACH,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtF,+DAA+D;IAC/D,0BAA0B,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/D,yBAAyB,EAAE,MAAM,IAAI,CAAC;IACtC,4DAA4D;IAC5D,0BAA0B,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD;;;;;OAKG;IACH,oBAAoB,EAAE,CAAC,KAAK,EAAE,0BAA0B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC,KAAK,EAAE,2BAA2B,CAAC;IACnC,OAAO,EAAE,6BAA6B,CAAC;CAC1C;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B"}

package/esm/share/useAccessList.d.ts

@@ -65,6 +65,12 @@ export interface IAccessList {
      * plain level entry would drop the row from the merged view.
      */
     applyGranteeLevel: (id: string, level: ObjectSharePermissionLevel) => void;
+    /**
+     * Lock a row for a write that leaves its access unchanged (a label-scope edit):
+     * adds the pending marker only. Use this rather than re-applying the displayed
+     * level, which would persist the EFFECTIVE level as the row's direct grant.
+     */
+    applyGranteeLock: (id: string) => void;
     /** Overlay a pending removal; the row renders muted until the write settles. */
     applyGranteeRemove: (id: string) => void;
     /** Commit the pending edit for `id` after a successful write. */

package/esm/share/useAccessList.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAccessList.d.ts","sourceRoot":"","sources":["../../src/share/useAccessList.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACH,KAAK,sBAAsB,EAK9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,KAAK,gBAAgB,EAKxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,sBAAsB,EAAmB,MAAM,sBAAsB,CAAC;AAS7G,OAAO,EAEH,KAAK,SAAS,EASjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EACR,2BAA2B,EAC3B,mBAAmB,EACnB,aAAa,EACb,0BAA0B,EAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IACxB,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC;;;;;;OAMG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAChC,6EAA6E;IAC7E,YAAY,EAAE,aAAa,GAAG,SAAS,CAAC;IACxC;;;OAGG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAC9B,8DAA8D;IAC9D,aAAa,EAAE,kBAAkB,CAAC;IAClC,oFAAkF;IAClF,cAAc,EAAE,0BAA0B,CAAC;IAC3C;;;OAGG;IACH,uBAAuB,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAChE,wFAAwF;IACxF,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iFAAiF;IACjF,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC1C,qDAAqD;IACrD,MAAM,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAC9C,mDAAmD;IACnD,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAExC,mFAAmF;IACnF,MAAM,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,cAAc,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F,+FAA6F;IAC7F,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAEjE;;;;OAIG;IACH,eAAe,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACxD;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,KAAK,IAAI,CAAC;IAC3E,gFAAgF;IAChF,kBAAkB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,iEAAiE;IACjE,iBAAiB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;OAGG;IACH,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAEtC,oFAAoF;IACpF,aAAa,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;IAC1D,6DAA6D;IAC7D,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,8FAA8F;IAC9F,YAAY,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,GAAG,WAAW,CAyRvF"}
+{"version":3,"file":"useAccessList.d.ts","sourceRoot":"","sources":["../../src/share/useAccessList.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EACH,KAAK,sBAAsB,EAK9B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACH,KAAK,gBAAgB,EAKxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,sBAAsB,EAAmB,MAAM,sBAAsB,CAAC;AAS7G,OAAO,EAEH,KAAK,SAAS,EASjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EACR,2BAA2B,EAC3B,mBAAmB,EACnB,aAAa,EACb,0BAA0B,EAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IACxB,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAChC;;;;;;OAMG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAChC,6EAA6E;IAC7E,YAAY,EAAE,aAAa,GAAG,SAAS,CAAC;IACxC;;;OAGG;IACH,oBAAoB,EAAE,OAAO,CAAC;IAC9B,8DAA8D;IAC9D,aAAa,EAAE,kBAAkB,CAAC;IAClC,oFAAkF;IAClF,cAAc,EAAE,0BAA0B,CAAC;IAC3C;;;OAGG;IACH,uBAAuB,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAChE,wFAAwF;IACxF,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iFAAiF;IACjF,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAAC;IAC1C,qDAAqD;IACrD,MAAM,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IAC9C,mDAAmD;IACnD,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAExC,mFAAmF;IACnF,MAAM,EAAE,CAAC,MAAM,EAAE,sBAAsB,EAAE,EAAE,cAAc,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F,+FAA6F;IAC7F,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAEjE;;;;OAIG;IACH,eAAe,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACxD;;;;OAIG;IACH,iBAAiB,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,0BAA0B,KAAK,IAAI,CAAC;IAC3E;;;;OAIG;IACH,gBAAgB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,gFAAgF;IAChF,kBAAkB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,iEAAiE;IACjE,iBAAiB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;OAGG;IACH,eAAe,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAEtC,oFAAoF;IACpF,aAAa,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;IAC1D,6DAA6D;IAC7D,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,8FAA8F;IAC9F,YAAY,EAAE,MAAM,IAAI,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,GAAG,WAAW,CA8SvF"}