@objectstack/plugin-sharing 7.3.0 → 7.4.0

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @objectstack/plugin-sharing@7.3.0 build /home/runner/work/framework/framework/packages/plugins/plugin-sharing
+> @objectstack/plugin-sharing@7.4.0 build /home/runner/work/framework/framework/packages/plugins/plugin-sharing
 > tsup --config ../../../tsup.config.ts
 
 CLI Building entry: src/index.ts
@@ -10,13 +10,13 @@
 CLI Cleaning output folder
 ESM Build start
 CJS Build start
-ESM dist/index.mjs     48.89 KB
-ESM dist/index.mjs.map 110.16 KB
-ESM ⚡️ Build success in 134ms
-CJS dist/index.js     50.56 KB
-CJS dist/index.js.map 110.16 KB
-CJS ⚡️ Build success in 157ms
+ESM dist/index.mjs     109.73 KB
+ESM dist/index.mjs.map 191.43 KB
+ESM ⚡️ Build success in 263ms
+CJS dist/index.js     111.70 KB
+CJS dist/index.js.map 191.45 KB
+CJS ⚡️ Build success in 267ms
 DTS Build start
-DTS ⚡️ Build success in 21561ms
-DTS dist/index.d.mts 15.66 KB
-DTS dist/index.d.ts  15.66 KB
+DTS ⚡️ Build success in 26766ms
+DTS dist/index.d.mts 441.17 KB
+DTS dist/index.d.ts  441.17 KB

package/CHANGELOG.md

@@ -1,5 +1,88 @@
 # @objectstack/plugin-sharing
 
+## 7.4.0
+
+### Minor Changes
+
+- e478e0c: ADR-0029 K2 — security domain ownership (RBAC + sharing) + Setup nav contributions.
+
+  Moves the security objects out of the `@objectstack/platform-objects` monolith
+  into the two capability plugins that already register and operate them, split by
+  concern (the two are orthogonal — sharing objects never reference RBAC objects):
+
+  - **`@objectstack/plugin-security`** (RBAC) gains `sys_role`,
+    `sys_permission_set`, `sys_user_permission_set`, `sys_role_permission_set`,
+    and the `defaultPermissionSets` seed (which its `bootstrap-platform-admin`
+    already consumes). The RBAC + default-permission-set tests move with them.
+  - **`@objectstack/plugin-sharing`** gains `sys_record_share`,
+    `sys_sharing_rule`, `sys_share_link`.
+  - `@objectstack/platform-objects` no longer defines/exports any security
+    objects; the `/security` subpath is now an empty barrel. Runtime is unchanged
+    (both plugins already registered these objects at runtime).
+
+  **D7 navigation** — the Setup app's `group_access_control` is now assembled from
+  three sources: `plugin-security` contributes Roles / Permission Sets (priority
+  100), `plugin-sharing` contributes Sharing Rules / Record Shares (priority 200),
+  and `platform-objects` keeps only API Keys (`sys_api_key`, an identity object,
+  priority 300) — preserving the original menu order.
+
+  **i18n (D8)** — the objects are removed from the `platform-objects` i18n extract
+  config; existing generated bundles keep working at runtime (object-name keyed).
+  Migrating the i18n extraction to the owning plugins remains the tracked
+  follow-up.
+
+### Patch Changes
+
+- 4404572: ADR-0029 D8 — migrate i18n ownership for the moved domains to their plugins.
+
+  The object translations for the domains decomposed in K2.a/K2.b/K2 previously
+  lived in the `@objectstack/platform-objects` generated bundles even though the
+  objects now live in their capability plugins. This moves each domain's i18n
+  extraction + bundles to the owning plugin, preserving every hand-translated
+  string (zh-CN / ja-JP / es-ES):
+
+  - Each plugin gains a build-time `scripts/i18n-extract.config.ts` and a
+    `src/translations/` bundle (`{locale}.objects.generated.ts` + an `index.ts`
+    barrel), generated with `os i18n extract` and self-baselined so re-runs
+    preserve translations.
+  - Each plugin loads its bundle at runtime on `kernel:ready` via
+    `i18n.loadTranslations` (the i18n service is optional — load is best-effort).
+    - `plugin-webhooks` ← `sys_webhook`, `sys_webhook_delivery`
+    - `plugin-approvals` ← `sys_approval_request`, `sys_approval_action`
+    - `plugin-security` ← `sys_role`, `sys_permission_set`,
+      `sys_user_permission_set`, `sys_role_permission_set`
+    - `plugin-sharing` ← `sys_record_share`, `sys_sharing_rule`, `sys_share_link`
+  - `@objectstack/platform-objects` translation bundles are regenerated to drop
+    those objects' keys (its extract config already excluded them); all other
+    objects' translations and the metadata-form bundles are preserved.
+
+  Net runtime effect is unchanged (same translations load, now contributed by the
+  package that owns each object) — closing the D8 follow-up tracked since K2.a.
+
+- Updated dependencies [23c7107]
+- Updated dependencies [c72daad]
+- Updated dependencies [4404572]
+- Updated dependencies [eea3f1b]
+- Updated dependencies [e478e0c]
+- Updated dependencies [4cc2ced]
+- Updated dependencies [13632b1]
+- Updated dependencies [f115182]
+- Updated dependencies [2faf9f2]
+- Updated dependencies [2faf9f2]
+- Updated dependencies [2faf9f2]
+- Updated dependencies [2faf9f2]
+- Updated dependencies [a6d4cbb]
+- Updated dependencies [58b450b]
+- Updated dependencies [82eb6cf]
+- Updated dependencies [c381977]
+- Updated dependencies [13d8653]
+- Updated dependencies [ff3d006]
+- Updated dependencies [5e831de]
+  - @objectstack/spec@7.4.0
+  - @objectstack/objectql@7.4.0
+  - @objectstack/platform-objects@7.4.0
+  - @objectstack/core@7.4.0
+
 ## 7.3.0
 
 ### Patch Changes