@objectstack/platform-objects 12.5.0 → 13.0.0

package/dist/apps/index.mjs

@@ -125,10 +125,22 @@ var SETUP_NAV_CONTRIBUTIONS = [
     priority: BASE_PRIORITY,
     items: [
       { id: "nav_users", type: "object", label: "Users", objectName: "sys_user", icon: "user" },
+      // The ACTIVE organization's record page (Members / Invitations / Teams
+      // tabs with the better-auth row actions), rendered inside the app shell
+      // (ADR-0081). `{current_org_id}` resolves from the session's active
+      // organization; unresolved (e.g. org-less admin before bootstrap) it
+      // falls back to the sys_organization list — one row in single-org.
+      { id: "nav_organization", type: "object", label: "Organization", objectName: "sys_organization", recordId: "{current_org_id}", icon: "building-2" },
       { id: "nav_business_units", type: "object", label: "Business Units", objectName: "sys_business_unit", icon: "building", requiresObject: "sys_business_unit" },
-      { id: "nav_teams", type: "object", label: "Teams", objectName: "sys_team", icon: "users-round", requiresService: "org-scoping" },
+      // Teams / Invitations no longer gate on `org-scoping` (ADR-0081 D1):
+      // the better-auth organization capability is always mounted, and
+      // plugin-auth's single-org default-org bootstrap guarantees an org to
+      // invite into — these are the OPEN member-management basics. Only the
+      // org LIST below keeps the gate: browsing organizations is meaningful
+      // only when more than one can exist (enterprise multi-org).
+      { id: "nav_teams", type: "object", label: "Teams", objectName: "sys_team", icon: "users-round" },
       { id: "nav_organizations", type: "object", label: "Organizations", objectName: "sys_organization", icon: "building-2", requiresService: "org-scoping" },
-      { id: "nav_invitations", type: "object", label: "Invitations", objectName: "sys_invitation", icon: "mail", requiresService: "org-scoping" }
+      { id: "nav_invitations", type: "object", label: "Invitations", objectName: "sys_invitation", icon: "mail" }
     ]
   },
   {
@@ -190,7 +202,11 @@ var SETUP_NAV_CONTRIBUTIONS = [
     priority: BASE_PRIORITY,
     items: [
       { id: "nav_oauth_apps", type: "object", label: "OAuth Applications", objectName: "sys_oauth_application", icon: "app-window" },
-      { id: "nav_jwks", type: "object", label: "Signing Keys (JWKS)", objectName: "sys_jwks", icon: "key-round" },
+      // nav_jwks is capability-gated (like nav_api_keys): sys_jwks is
+      // `access.default:'private'` (ADR-0066 ④ — signing keys), so a
+      // non-admin's list request 403s server-side; gating the nav item keeps
+      // the menu honest instead of showing an entry that can only error.
+      { id: "nav_jwks", type: "object", label: "Signing Keys (JWKS)", objectName: "sys_jwks", icon: "key-round", requiredPermissions: ["manage_platform_settings"] },
       // `sys_verification` (email/phone tokens) and `sys_device_code` (OAuth
       // device-grant codes) deliberately omit `list` from their `apiMethods`
       // (sensitive, ephemeral secrets — not browsable), so an object/list-view
@@ -1529,8 +1545,8 @@ var enObjects = {
       user_id: {
         label: "User"
       },
-      role_in_business_unit: {
-        label: "Role in Business Unit",
+      function_in_business_unit: {
+        label: "Function in Business Unit",
         help: "`lead` is the day-to-day head; `deputy` may stand in for the lead in approval routing.",
         options: {
           member: "member",
@@ -3482,6 +3498,7 @@ var en = {
         nav_marketplace_installed: { label: "Installed Apps" },
         // People & Organization
         nav_users: { label: "Users" },
+        nav_organization: { label: "Organization" },
         nav_business_units: { label: "Business Units" },
         nav_teams: { label: "Teams" },
         nav_organizations: { label: "Organizations" },
@@ -4275,8 +4292,8 @@ var zhCNObjects = {
       user_id: {
         label: "\u7528\u6237"
       },
-      role_in_business_unit: {
-        label: "\u4E1A\u52A1\u5355\u5143\u5185\u89D2\u8272",
+      function_in_business_unit: {
+        label: "\u4E1A\u52A1\u5355\u5143\u5185\u804C\u80FD",
         help: "`lead` \u8868\u793A\u65E5\u5E38\u8D1F\u8D23\u4EBA\uFF1B`deputy` \u53EF\u5728\u5BA1\u6279\u8DEF\u7531\u4E2D\u4EE3\u66FF\u8D1F\u8D23\u4EBA\u3002",
         options: {
           member: "\u6210\u5458",
@@ -6225,6 +6242,7 @@ var zhCN = {
         group_advanced: { label: "\u9AD8\u7EA7" },
         nav_system_overview: { label: "\u7CFB\u7EDF\u6982\u89C8" },
         nav_users: { label: "\u7528\u6237" },
+        nav_organization: { label: "\u7EC4\u7EC7" },
         nav_business_units: { label: "\u4E1A\u52A1\u5355\u5143" },
         nav_teams: { label: "\u56E2\u961F" },
         nav_organizations: { label: "\u7EC4\u7EC7" },
@@ -6984,8 +7002,8 @@ var jaJPObjects = {
       user_id: {
         label: "\u30E6\u30FC\u30B6\u30FC"
       },
-      role_in_business_unit: {
-        label: "\u30D3\u30B8\u30CD\u30B9\u30E6\u30CB\u30C3\u30C8\u5185\u30ED\u30FC\u30EB",
+      function_in_business_unit: {
+        label: "\u30D3\u30B8\u30CD\u30B9\u30E6\u30CB\u30C3\u30C8\u5185\u306E\u8077\u80FD",
         help: "`lead` \u306F\u65E5\u5E38\u306E\u8CAC\u4EFB\u8005\u3001`deputy` \u306F\u627F\u8A8D\u30EB\u30FC\u30C6\u30A3\u30F3\u30B0\u3067\u30EA\u30FC\u30C9\u306E\u4EE3\u7406\u3092\u52D9\u3081\u308B\u5834\u5408\u304C\u3042\u308A\u307E\u3059\u3002",
         options: {
           member: "\u30E1\u30F3\u30D0\u30FC",
@@ -8933,6 +8951,7 @@ var jaJP = {
         group_advanced: { label: "\u8A73\u7D30" },
         nav_system_overview: { label: "\u30B7\u30B9\u30C6\u30E0\u6982\u8981" },
         nav_users: { label: "\u30E6\u30FC\u30B6\u30FC" },
+        nav_organization: { label: "\u7D44\u7E54" },
         nav_business_units: { label: "\u30D3\u30B8\u30CD\u30B9\u30E6\u30CB\u30C3\u30C8" },
         nav_teams: { label: "\u30C1\u30FC\u30E0" },
         nav_organizations: { label: "\u7D44\u7E54" },
@@ -9690,8 +9709,8 @@ var esESObjects = {
       user_id: {
         label: "Usuario"
       },
-      role_in_business_unit: {
-        label: "Rol en el departamento",
+      function_in_business_unit: {
+        label: "Funci\xF3n en la unidad de negocio",
         help: "`lead` es el responsable del d\xEDa a d\xEDa; `deputy` puede sustituir al responsable en el enrutamiento de aprobaciones.",
         options: {
           member: "Miembro",
@@ -11639,6 +11658,7 @@ var esES = {
         group_advanced: { label: "Avanzado" },
         nav_system_overview: { label: "Resumen del Sistema" },
         nav_users: { label: "Usuarios" },
+        nav_organization: { label: "Organizaci\xF3n" },
         nav_business_units: { label: "Unidades de negocio" },
         nav_teams: { label: "Equipos" },
         nav_organizations: { label: "Organizaciones" },