@objectstack/platform-objects 10.3.0 → 11.1.0

package/dist/apps/index.mjs

@@ -116,7 +116,7 @@ var SETUP_NAV_CONTRIBUTIONS = [
     items: [
       { id: "nav_users", type: "object", label: "Users", objectName: "sys_user", icon: "user" },
       { id: "nav_business_units", type: "object", label: "Business Units", objectName: "sys_business_unit", icon: "building", requiresObject: "sys_business_unit" },
-      { id: "nav_teams", type: "object", label: "Teams", objectName: "sys_team", icon: "users-round" },
+      { id: "nav_teams", type: "object", label: "Teams", objectName: "sys_team", icon: "users-round", requiresService: "org-scoping" },
       { id: "nav_organizations", type: "object", label: "Organizations", objectName: "sys_organization", icon: "building-2", requiresService: "org-scoping" },
       { id: "nav_invitations", type: "object", label: "Invitations", objectName: "sys_invitation", icon: "mail", requiresService: "org-scoping" }
     ]
@@ -144,6 +144,16 @@ var SETUP_NAV_CONTRIBUTIONS = [
     priority: BASE_PRIORITY,
     items: [
       { id: "nav_settings_hub", type: "url", label: "All Settings", url: "/apps/setup/system/settings", icon: "settings-2", requiredPermissions: ["manage_platform_settings"] },
+      // Workspace identity first — Localization (order 2) and Company (order 3)
+      // are the lowest-`order` settings manifests and the first thing a new
+      // company admin configures. They ship as `service-settings` manifests
+      // (tenant scope, read=`setup.access`) but were never pinned here, so they
+      // were reachable only by drilling into the "All Settings" hub. Mainstream
+      // admin consoles (Salesforce "Company Information", ServiceNow) surface
+      // both directly. No `requiredPermissions` — matches Branding (read perm is
+      // the app's base `setup.access`).
+      { id: "nav_settings_localization", type: "url", label: "Localization", url: "/apps/setup/system/settings/localization", icon: "globe" },
+      { id: "nav_settings_company", type: "url", label: "Company", url: "/apps/setup/system/settings/company", icon: "building-2" },
       { id: "nav_settings_branding", type: "url", label: "Branding", url: "/apps/setup/system/settings/branding", icon: "palette" },
       { id: "nav_settings_auth", type: "url", label: "Authentication", url: "/apps/setup/system/settings/auth", icon: "lock-keyhole", requiredPermissions: ["manage_platform_settings"] },
       { id: "nav_settings_mail", type: "url", label: "Email", url: "/apps/setup/system/settings/mail", icon: "mail", requiredPermissions: ["manage_platform_settings"] },
@@ -171,8 +181,12 @@ var SETUP_NAV_CONTRIBUTIONS = [
     items: [
       { id: "nav_oauth_apps", type: "object", label: "OAuth Applications", objectName: "sys_oauth_application", icon: "app-window" },
       { id: "nav_jwks", type: "object", label: "Signing Keys (JWKS)", objectName: "sys_jwks", icon: "key-round" },
-      { id: "nav_verifications", type: "object", label: "Verifications", objectName: "sys_verification", icon: "mail-check" },
-      { id: "nav_device_codes", type: "object", label: "Device Codes", objectName: "sys_device_code", icon: "qr-code" },
+      // `sys_verification` (email/phone tokens) and `sys_device_code` (OAuth
+      // device-grant codes) deliberately omit `list` from their `apiMethods`
+      // (sensitive, ephemeral secrets — not browsable), so an object/list-view
+      // nav entry for them can only ever render "failed to load". They're
+      // reachable by id (get) when needed; no browse menu. (Re-adding requires
+      // enabling `list` on the object — a security decision.)
       { id: "nav_accounts", type: "object", label: "Identity Links", objectName: "sys_account", icon: "link-2" },
       { id: "nav_user_preferences", type: "object", label: "User Preferences", objectName: "sys_user_preference", icon: "sliders" }
     ]
@@ -558,7 +572,13 @@ var ACCOUNT_APP = {
           objectName: "sys_member",
           viewName: "mine",
           icon: "building-2",
-          requiresObject: "sys_member"
+          // Membership is a multi-org concept: in single-org mode the
+          // `mine` view is always empty (no sys_organization rows, no
+          // auto-stamped memberships). Gate on the org-scoping service so
+          // this entry disappears entirely — matching Organizations/
+          // Invitations in setup-nav. `requiresObject: 'sys_member'` was
+          // the wrong gate (the system object is always registered).
+          requiresService: "org-scoping"
         }
       ]
     },
@@ -651,6 +671,12 @@ var SystemOverviewDashboard = Dashboard.create({
       values: ["org_count"],
       title: "Organizations",
       type: "metric",
+      // Organizations only exist under multi-tenant org-scoping. In a
+      // single-tenant runtime the count is always 0 and the matching
+      // nav entries (nav_organizations / nav_invitations) are hidden via
+      // `requiresService: 'org-scoping'` — gate this KPI the same way so the
+      // overview doesn't dangle a metric the admin can't act on.
+      requiresService: "org-scoping",
       layout: { x: 3, y: 0, w: 3, h: 2 },
       colorVariant: "orange",
       description: "Total organizations on the platform"
@@ -6166,6 +6192,7 @@ var zhCN = {
         group_apps: { label: "\u5E94\u7528" },
         nav_marketplace_browse: { label: "\u6D4F\u89C8\u5E94\u7528\u5E02\u573A" },
         nav_marketplace_installed: { label: "\u5DF2\u5B89\u88C5\u5E94\u7528" },
+        nav_cloud_connection: { label: "\u4E91\u8FDE\u63A5" },
         group_people_org: { label: "\u4EBA\u5458\u4E0E\u7EC4\u7EC7" },
         group_access_control: { label: "\u8BBF\u95EE\u63A7\u5236" },
         group_approvals: { label: "\u5BA1\u6279" },
@@ -6180,6 +6207,7 @@ var zhCN = {
         nav_organizations: { label: "\u7EC4\u7EC7" },
         nav_invitations: { label: "\u9080\u8BF7" },
         nav_roles: { label: "\u89D2\u8272" },
+        nav_capabilities: { label: "\u80FD\u529B" },
         nav_permission_sets: { label: "\u6743\u9650\u96C6" },
         nav_sharing_rules: { label: "\u5171\u4EAB\u89C4\u5219" },
         nav_record_shares: { label: "\u8BB0\u5F55\u5171\u4EAB" },
@@ -6188,6 +6216,8 @@ var zhCN = {
         nav_approval_requests: { label: "\u5BA1\u6279\u7533\u8BF7" },
         nav_approval_actions: { label: "\u5BA1\u6279\u5386\u53F2" },
         nav_settings_hub: { label: "\u5168\u90E8\u8BBE\u7F6E" },
+        nav_settings_localization: { label: "\u672C\u5730\u5316" },
+        nav_settings_company: { label: "\u516C\u53F8\u4FE1\u606F" },
         nav_settings_mail: { label: "\u90AE\u4EF6" },
         nav_settings_branding: { label: "\u54C1\u724C" },
         nav_settings_auth: { label: "\u8BA4\u8BC1" },
@@ -6201,10 +6231,9 @@ var zhCN = {
         nav_sessions: { label: "\u4F1A\u8BDD" },
         nav_audit_logs: { label: "\u5BA1\u8BA1\u65E5\u5FD7" },
         nav_notifications: { label: "\u901A\u77E5" },
+        nav_datasources: { label: "\u6570\u636E\u6E90" },
         nav_oauth_apps: { label: "OAuth \u5E94\u7528" },
         nav_jwks: { label: "\u7B7E\u540D\u5BC6\u94A5 (JWKS)" },
-        nav_verifications: { label: "\u9A8C\u8BC1\u8BB0\u5F55" },
-        nav_device_codes: { label: "\u8BBE\u5907\u4EE3\u7801" },
         nav_accounts: { label: "\u8EAB\u4EFD\u94FE\u63A5" },
         nav_user_preferences: { label: "\u7528\u6237\u504F\u597D" },
         nav_metadata: { label: "\u5168\u90E8\u5143\u6570\u636E" }