@objectstack/platform-objects 9.11.0 → 10.0.0

package/dist/identity/index.mjs

@@ -376,6 +376,19 @@ var SysUser = ObjectSchema.create({
       required: false,
       group: "Profile"
     }),
+    // ── Organization ─────────────────────────────────────────────
+    manager_id: Field.lookup("sys_user", {
+      label: "Manager",
+      required: false,
+      group: "Organization",
+      description: "This user's direct manager. Forms the reporting chain the `own_and_reports` hierarchy scope walks (ADR-0057 / @objectstack/security-enterprise)."
+    }),
+    primary_business_unit_id: Field.lookup("sys_business_unit", {
+      label: "Primary Business Unit",
+      required: false,
+      group: "Organization",
+      description: "The user's primary business unit \u2014 a denormalised projection of sys_business_unit_member.is_primary, maintained by plugin-sharing (ADR-0057 addendum D12). Lets a user-lookup filter candidates by business unit without traversing the membership junction. Do not edit directly; set it via business-unit membership."
+    }),
     // ── System (auto-managed, hidden from create/edit forms) ─────
     id: Field.text({
       label: "User ID",
@@ -1156,7 +1169,10 @@ var SysMember = ObjectSchema.create({
     }),
     organization_id: Field.lookup("sys_organization", {
       label: "Organization",
-      required: true
+      // Optional: single-tenant has no sys_organization row and no auto-stamp
+      // (org-scoping is multi-tenant-only). Multi-tenant: OrgScopingPlugin stamps it
+      // and tenant-isolation RLS hides null-org rows (fail-closed). ADR-0057 addendum.
+      required: false
     }),
     user_id: Field.lookup("sys_user", {
       label: "User",
@@ -1343,7 +1359,10 @@ var SysInvitation = ObjectSchema.create({
     }),
     organization_id: Field.lookup("sys_organization", {
       label: "Organization",
-      required: true
+      // Optional: single-tenant has no sys_organization row and no auto-stamp
+      // (org-scoping is multi-tenant-only). Multi-tenant: OrgScopingPlugin stamps it
+      // and tenant-isolation RLS hides null-org rows (fail-closed). ADR-0057 addendum.
+      required: false
     }),
     email: Field.email({
       label: "Email",
@@ -1503,8 +1522,13 @@ var SysTeam = ObjectSchema.create({
     }),
     organization_id: Field.lookup("sys_organization", {
       label: "Organization",
-      required: true,
-      description: "Parent organization for this team",
+      // Optional: single-tenant deployments have no organization row (org-scoping
+      // is multi-tenant-only, nothing auto-stamps one) — requiring it would make
+      // the object uncreatable single-tenant. In multi-tenant, OrgScopingPlugin
+      // auto-stamps this from the active tenant and tenant-isolation RLS hides any
+      // null-org row (fail-closed). ADR-0057 addendum.
+      required: false,
+      description: "Parent organization for this team. Null in single-tenant; auto-stamped in multi-tenant.",
       group: "Identity"
     }),
     // ── System ───────────────────────────────────────────────────
@@ -1633,24 +1657,42 @@ var SysTeamMember = ObjectSchema.create({
     mru: false
   }
 });
-var SysDepartment = ObjectSchema.create({
-  name: "sys_department",
-  label: "Department",
-  pluralLabel: "Departments",
+var SysBusinessUnit = ObjectSchema.create({
+  name: "sys_business_unit",
+  label: "Business Unit",
+  pluralLabel: "Business Units",
   icon: "building",
   isSystem: true,
   managedBy: "platform",
-  description: "Hierarchical org-skeleton node (department / division / business unit / office).",
+  description: "Canonical Business Unit tree \u2014 hierarchical org/data-partition node (company / division / department / region / office). ADR-0057 D2.",
   displayNameField: "name",
   titleFormat: "{name}",
-  compactLayout: ["name", "kind", "parent_department_id", "manager_user_id"],
+  compactLayout: ["name", "kind", "parent_business_unit_id", "manager_user_id"],
   listViews: {
+    // Org chart — the hierarchy view. Surfaces the self-referencing
+    // `parent_business_unit_id` tree (ADR-0057 D2) as an indented, expand/
+    // collapse tree-grid. Listed first so it's the default tab; the grids
+    // below stay for search / filter / bulk edit.
+    org_chart: {
+      type: "tree",
+      name: "org_chart",
+      label: "Org Chart",
+      data: { provider: "object", object: "sys_business_unit" },
+      columns: ["name", "kind", "manager_user_id", "active"],
+      tree: {
+        parentField: "parent_business_unit_id",
+        labelField: "name",
+        fields: ["kind", "manager_user_id", "active"],
+        defaultExpandedDepth: 1
+      },
+      sort: [{ field: "name", order: "asc" }]
+    },
     active: {
       type: "grid",
       name: "active",
       label: "Active",
-      data: { provider: "object", object: "sys_department" },
-      columns: ["name", "code", "kind", "parent_department_id", "manager_user_id", "effective_from"],
+      data: { provider: "object", object: "sys_business_unit" },
+      columns: ["name", "code", "kind", "parent_business_unit_id", "manager_user_id", "effective_from"],
       filter: [{ field: "active", operator: "equals", value: true }],
       sort: [{ field: "name", order: "asc" }],
       pagination: { pageSize: 100 }
@@ -1659,7 +1701,7 @@ var SysDepartment = ObjectSchema.create({
       type: "grid",
       name: "inactive",
       label: "Inactive",
-      data: { provider: "object", object: "sys_department" },
+      data: { provider: "object", object: "sys_business_unit" },
       columns: ["name", "code", "kind", "effective_to"],
       filter: [{ field: "active", operator: "equals", value: false }],
       sort: [{ field: "effective_to", order: "desc" }],
@@ -1669,8 +1711,8 @@ var SysDepartment = ObjectSchema.create({
       type: "grid",
       name: "by_kind",
       label: "By Kind",
-      data: { provider: "object", object: "sys_department" },
-      columns: ["kind", "name", "code", "parent_department_id", "manager_user_id", "active"],
+      data: { provider: "object", object: "sys_business_unit" },
+      columns: ["kind", "name", "code", "parent_business_unit_id", "manager_user_id", "active"],
       sort: [{ field: "kind", order: "asc" }, { field: "name", order: "asc" }],
       grouping: { fields: [{ field: "kind", order: "asc", collapsed: false }] },
       pagination: { pageSize: 100 }
@@ -1679,8 +1721,8 @@ var SysDepartment = ObjectSchema.create({
       type: "grid",
       name: "all_departments",
       label: "All",
-      data: { provider: "object", object: "sys_department" },
-      columns: ["name", "code", "kind", "parent_department_id", "manager_user_id", "active"],
+      data: { provider: "object", object: "sys_business_unit" },
+      columns: ["name", "code", "kind", "parent_business_unit_id", "manager_user_id", "active"],
       sort: [{ field: "name", order: "asc" }],
       pagination: { pageSize: 100 }
     }
@@ -1703,7 +1745,7 @@ var SysDepartment = ObjectSchema.create({
       group: "Identity"
     }),
     kind: Field.select(
-      ["company", "division", "department", "team", "office", "cost_center"],
+      ["company", "division", "department", "office", "cost_center"],
       {
         label: "Kind",
         required: true,
@@ -1713,23 +1755,28 @@ var SysDepartment = ObjectSchema.create({
       }
     ),
     // ── Hierarchy ────────────────────────────────────────────────
-    parent_department_id: Field.lookup("sys_department", {
-      label: "Parent Department",
+    parent_business_unit_id: Field.lookup("sys_business_unit", {
+      label: "Parent Business Unit",
       required: false,
       description: "Self-reference for the org tree. Null = root of tenant.",
       group: "Hierarchy"
     }),
     organization_id: Field.lookup("sys_organization", {
       label: "Organization",
-      required: true,
-      description: "Tenant scope.",
+      // Optional: single-tenant deployments have no organization row (org-scoping
+      // is multi-tenant-only, nothing auto-stamps one) — requiring it would make
+      // the object uncreatable single-tenant. In multi-tenant, OrgScopingPlugin
+      // auto-stamps this from the active tenant and tenant-isolation RLS hides any
+      // null-org row (fail-closed). ADR-0057 addendum.
+      required: false,
+      description: "Tenant scope. Null in single-tenant; auto-stamped in multi-tenant.",
       group: "Hierarchy"
     }),
     // ── Leadership ───────────────────────────────────────────────
     manager_user_id: Field.lookup("sys_user", {
-      label: "Department Head",
+      label: "Business Unit Head",
       required: false,
-      description: "User responsible for this org unit (department head / lead).",
+      description: "User responsible for this org unit (business unit head / lead).",
       group: "Leadership"
     }),
     // ── Lifecycle ────────────────────────────────────────────────
@@ -1743,13 +1790,13 @@ var SysDepartment = ObjectSchema.create({
     effective_from: Field.datetime({
       label: "Effective From",
       required: false,
-      description: "When this department came into existence (HRIS sync).",
+      description: "When this business unit came into existence (HRIS sync).",
       group: "Lifecycle"
     }),
     effective_to: Field.datetime({
       label: "Effective To",
       required: false,
-      description: "When this department was retired (HRIS sync).",
+      description: "When this business unit was retired (HRIS sync).",
       group: "Lifecycle"
     }),
     external_ref: Field.text({
@@ -1761,7 +1808,7 @@ var SysDepartment = ObjectSchema.create({
     }),
     // ── System ───────────────────────────────────────────────────
     id: Field.text({
-      label: "Department ID",
+      label: "Business Unit ID",
       required: true,
       readonly: true,
       group: "System"
@@ -1781,7 +1828,7 @@ var SysDepartment = ObjectSchema.create({
   },
   indexes: [
     { fields: ["organization_id"] },
-    { fields: ["parent_department_id"] },
+    { fields: ["parent_business_unit_id"] },
     { fields: ["code", "organization_id"], unique: true },
     { fields: ["active"] }
   ],
@@ -1794,16 +1841,16 @@ var SysDepartment = ObjectSchema.create({
     mru: false
   }
 });
-var SysDepartmentMember = ObjectSchema.create({
-  name: "sys_department_member",
-  label: "Department Member",
-  pluralLabel: "Department Members",
+var SysBusinessUnitMember = ObjectSchema.create({
+  name: "sys_business_unit_member",
+  label: "Business Unit Member",
+  pluralLabel: "Business Unit Members",
   icon: "user-cog",
   isSystem: true,
   managedBy: "platform",
-  description: "User assignment to a department (matrix-org friendly, effective-dated).",
-  titleFormat: "{user_id} in {department_id}",
-  compactLayout: ["user_id", "department_id", "role_in_department", "is_primary"],
+  description: "User assignment to a business unit (matrix-org friendly, effective-dated).",
+  titleFormat: "{user_id} in {business_unit_id}",
+  compactLayout: ["user_id", "business_unit_id", "role_in_business_unit", "is_primary"],
   fields: {
     id: Field.text({
       label: "Member ID",
@@ -1811,8 +1858,8 @@ var SysDepartmentMember = ObjectSchema.create({
       readonly: true,
       group: "System"
     }),
-    department_id: Field.lookup("sys_department", {
-      label: "Department",
+    business_unit_id: Field.lookup("sys_business_unit", {
+      label: "Business Unit",
       required: true,
       group: "Assignment"
     }),
@@ -1821,10 +1868,10 @@ var SysDepartmentMember = ObjectSchema.create({
       required: true,
       group: "Assignment"
     }),
-    role_in_department: Field.select(
+    role_in_business_unit: Field.select(
       ["member", "lead", "deputy"],
       {
-        label: "Role in Department",
+        label: "Role in Business Unit",
         required: false,
         defaultValue: "member",
         description: "`lead` is the day-to-day head; `deputy` may stand in for the lead in approval routing.",
@@ -1835,7 +1882,7 @@ var SysDepartmentMember = ObjectSchema.create({
       label: "Primary Assignment",
       required: false,
       defaultValue: true,
-      description: "When the user is in multiple departments, this marks the canonical one for reporting.",
+      description: "When the user is in multiple business units, this marks the canonical one for reporting.",
       group: "Assignment"
     }),
     effective_from: Field.datetime({
@@ -1862,7 +1909,7 @@ var SysDepartmentMember = ObjectSchema.create({
     })
   },
   indexes: [
-    { fields: ["department_id", "user_id"], unique: true },
+    { fields: ["business_unit_id", "user_id"], unique: true },
     { fields: ["user_id"] },
     { fields: ["is_primary"] }
   ],
@@ -3108,6 +3155,6 @@ var SysJwks = ObjectSchema.create({
   }
 });
 
-export { SysAccount, SysApiKey, SysDepartment, SysDepartmentMember, SysDeviceCode, SysInvitation, SysJwks, SysMember, SysOauthAccessToken, SysOauthApplication, SysOauthConsent, SysOauthRefreshToken, SysOrganization, SysSession, SysTeam, SysTeamMember, SysTwoFactor, SysUser, SysUserPreference, SysVerification };
+export { SysAccount, SysApiKey, SysBusinessUnit, SysBusinessUnitMember, SysDeviceCode, SysInvitation, SysJwks, SysMember, SysOauthAccessToken, SysOauthApplication, SysOauthConsent, SysOauthRefreshToken, SysOrganization, SysSession, SysTeam, SysTeamMember, SysTwoFactor, SysUser, SysUserPreference, SysVerification };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map