@objectstack/platform-objects 6.8.1 → 7.0.0

package/dist/apps/index.d.mts

@@ -54,6 +54,35 @@ declare const SETUP_APP: App;
 
 declare const STUDIO_APP: App;
 
+/**
+ * Account App — personal self-service surface for the current user.
+ *
+ * Hidden from the App Switcher (`hidden: true`) and surfaced by the
+ * shell through the avatar / user dropdown instead — the same pattern
+ * GitHub, Google, and Salesforce use for personal settings.
+ *
+ * Replaces the legacy standalone `apps/account` SPA (M10.31): rather
+ * than ship a second shell just for security settings, we expose the
+ * same `sys_*` identity objects here and rely on RLS to scope rows to
+ * the caller. Crucially this app declares **no** `requiredPermissions`,
+ * so every authenticated user can reach it — unlike Setup which
+ * requires `setup.access` and therefore excludes the default
+ * `member_default` permission set.
+ *
+ * The C-tier `resultDialog` actions previously shipped on these objects
+ * make the experience equivalent to the old account SPA:
+ *   - `sys_two_factor.enable_two_factor` — QR + backup codes
+ *   - `sys_oauth_application.create` — one-time client_secret reveal
+ *   - `sys_account.link_social` — OAuth redirect URL
+ *
+ * The same objects also appear (admin-only) in `setup.app.ts`'s
+ * Advanced group, gated by `manage_platform_settings`, for tenant-wide
+ * inspection. The duplication is intentional: end users get a friendly
+ * self-service view, platform admins get the browsable tables.
+ */
+
+declare const ACCOUNT_APP: App;
+
 /**
  * System Overview Dashboard
  *
@@ -298,4 +327,4 @@ declare const jaJP: TranslationData;
  */
 declare const esES: TranslationData;
 
-export { SETUP_APP, STUDIO_APP, SetupAppTranslations, SystemOverviewDashboard, en, esES, jaJP, zhCN };
+export { ACCOUNT_APP, SETUP_APP, STUDIO_APP, SetupAppTranslations, SystemOverviewDashboard, en, esES, jaJP, zhCN };

package/dist/apps/index.d.ts

@@ -54,6 +54,35 @@ declare const SETUP_APP: App;
 
 declare const STUDIO_APP: App;
 
+/**
+ * Account App — personal self-service surface for the current user.
+ *
+ * Hidden from the App Switcher (`hidden: true`) and surfaced by the
+ * shell through the avatar / user dropdown instead — the same pattern
+ * GitHub, Google, and Salesforce use for personal settings.
+ *
+ * Replaces the legacy standalone `apps/account` SPA (M10.31): rather
+ * than ship a second shell just for security settings, we expose the
+ * same `sys_*` identity objects here and rely on RLS to scope rows to
+ * the caller. Crucially this app declares **no** `requiredPermissions`,
+ * so every authenticated user can reach it — unlike Setup which
+ * requires `setup.access` and therefore excludes the default
+ * `member_default` permission set.
+ *
+ * The C-tier `resultDialog` actions previously shipped on these objects
+ * make the experience equivalent to the old account SPA:
+ *   - `sys_two_factor.enable_two_factor` — QR + backup codes
+ *   - `sys_oauth_application.create` — one-time client_secret reveal
+ *   - `sys_account.link_social` — OAuth redirect URL
+ *
+ * The same objects also appear (admin-only) in `setup.app.ts`'s
+ * Advanced group, gated by `manage_platform_settings`, for tenant-wide
+ * inspection. The duplication is intentional: end users get a friendly
+ * self-service view, platform admins get the browsable tables.
+ */
+
+declare const ACCOUNT_APP: App;
+
 /**
  * System Overview Dashboard
  *
@@ -298,4 +327,4 @@ declare const jaJP: TranslationData;
  */
 declare const esES: TranslationData;
 
-export { SETUP_APP, STUDIO_APP, SetupAppTranslations, SystemOverviewDashboard, en, esES, jaJP, zhCN };
+export { ACCOUNT_APP, SETUP_APP, STUDIO_APP, SetupAppTranslations, SystemOverviewDashboard, en, esES, jaJP, zhCN };