@objectstack/plugin-sharing 9.9.1 → 9.11.0

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @objectstack/plugin-sharing@9.9.1 build /home/runner/work/framework/framework/packages/plugins/plugin-sharing
+> @objectstack/plugin-sharing@9.11.0 build /home/runner/work/framework/framework/packages/plugins/plugin-sharing
 > tsup --config ../../../tsup.config.ts
 
 CLI Building entry: src/index.ts
@@ -10,13 +10,13 @@
 CLI Cleaning output folder
 ESM Build start
 CJS Build start
-ESM dist/index.mjs     109.89 KB
-ESM dist/index.mjs.map 191.90 KB
-ESM ⚡️ Build success in 177ms
-CJS dist/index.js     111.86 KB
-CJS dist/index.js.map 191.93 KB
-CJS ⚡️ Build success in 177ms
+CJS dist/index.js     114.82 KB
+CJS dist/index.js.map 199.06 KB
+CJS ⚡️ Build success in 319ms
+ESM dist/index.mjs     112.85 KB
+ESM dist/index.mjs.map 199.03 KB
+ESM ⚡️ Build success in 326ms
 DTS Build start
-DTS ⚡️ Build success in 17884ms
-DTS dist/index.d.mts 400.34 KB
-DTS dist/index.d.ts  400.34 KB
+DTS ⚡️ Build success in 31341ms
+DTS dist/index.d.mts 403.41 KB
+DTS dist/index.d.ts  403.41 KB

package/CHANGELOG.md

@@ -1,5 +1,65 @@
 # @objectstack/plugin-sharing
 
+## 9.11.0
+
+### Minor Changes
+
+- 2365d07: feat(sharing): configurable role-hierarchy widening — `role_and_subordinates` recipient (ADR-0056 D6)
+
+  Role-hierarchy access widening ("a manager sees records shared with their team") is now
+  **implemented and configurable per sharing rule**, not a hardcoded no-op. The
+  `role_and_subordinates` recipient (declarable on `sys_sharing_rule.recipient_type`) expands,
+  at evaluation time, to the named role **plus every subordinate role** by walking the
+  `sys_role.parent` hierarchy via a new `RoleGraphService` (mirroring the department/team
+  graphs; cycle-safe). Previously `Role.parent` was declared but never consumed — a silent
+  no-op flagged by the ADR-0056 audit. This is the Salesforce "grant access using hierarchies"
+  model expressed declaratively: each rule chooses whether to roll up the hierarchy. Unit-proven
+  (role-graph traversal, subordinate-user expansion, cycle safety); the recipient is added to
+  the authoring select + the `SharingRuleRecipientType` contract.
+
+### Patch Changes
+
+- e7f6539: feat(spec,sharing): canonical OWD vocabulary on `object.sharingModel` (ADR-0056 D1)
+
+  Reconciles the Org-Wide-Default naming so authors use ONE vocabulary. `object.sharingModel`
+  now accepts the canonical OWD names — `private` | `public_read` | `public_read_write` |
+  `controlled_by_parent` — alongside the legacy `read` / `read_write` / `full` aliases (kept,
+  non-breaking). The sharing runtime maps them onto the three enforced behaviours
+  (`public_read` ≡ legacy `read` = everyone reads / owner writes; `public_read_write` =
+  unscoped). Unknown values remain rejected by the enum (authoring-time, fail-closed). The
+  showcase announcement now declares the canonical `public_read`, exercised end-to-end by the
+  public-read dogfood proof.
+
+- Updated dependencies [e7f6539]
+- Updated dependencies [2365d07]
+- Updated dependencies [6595b53]
+- Updated dependencies [fa8964d]
+- Updated dependencies [36138c7]
+- Updated dependencies [a8e4f3b]
+- Updated dependencies [4c213c2]
+- Updated dependencies [2afb612]
+  - @objectstack/spec@9.11.0
+  - @objectstack/objectql@9.11.0
+  - @objectstack/core@9.11.0
+  - @objectstack/platform-objects@9.11.0
+
+## 9.10.0
+
+### Patch Changes
+
+- Updated dependencies [db02bd5]
+- Updated dependencies [641675d]
+- Updated dependencies [94e9040]
+- Updated dependencies [4331adb]
+- Updated dependencies [1f88fd9]
+- Updated dependencies [1f88fd9]
+- Updated dependencies [e2b5324]
+- Updated dependencies [fd07027]
+  - @objectstack/spec@9.10.0
+  - @objectstack/platform-objects@9.10.0
+  - @objectstack/objectql@9.10.0
+  - @objectstack/core@9.10.0
+
 ## 9.9.1
 
 ### Patch Changes

package/dist/index.d.mts

@@ -475,6 +475,29 @@ declare const SysRecordShare: Omit<{
             titleField: string;
             progressField?: string | undefined;
             dependenciesField?: string | undefined;
+            colorField?: string | undefined;
+            parentField?: string | undefined;
+            typeField?: string | undefined;
+            baselineStartField?: string | undefined;
+            baselineEndField?: string | undefined;
+            groupByField?: string | undefined;
+            resourceView?: boolean | undefined;
+            assigneeField?: string | undefined;
+            effortField?: string | undefined;
+            capacity?: number | undefined;
+            tooltipFields?: (string | {
+                field: string;
+                label?: string | undefined;
+            })[] | undefined;
+            quickFilters?: {
+                field: string;
+                label?: string | undefined;
+                options?: (string | {
+                    value: string | number;
+                    label?: string | undefined;
+                })[] | undefined;
+            }[] | undefined;
+            autoZoomToFilter?: boolean | undefined;
         } | undefined;
         gallery?: {
             coverFit: "cover" | "contain";
@@ -638,7 +661,7 @@ declare const SysRecordShare: Omit<{
         clone: boolean;
         apiMethods?: ("search" | "create" | "import" | "delete" | "list" | "get" | "update" | "upsert" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "read" | "private" | "read_write" | undefined;
+    sharingModel?: "full" | "read" | "private" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -670,7 +693,7 @@ declare const SysRecordShare: Omit<{
         } | {
             language: "js";
             source: string;
-            capabilities: ("api.read" | "api.write" | "crypto.uuid" | "crypto.hash" | "log")[];
+            capabilities: ("api.read" | "api.write" | "api.transaction" | "crypto.uuid" | "crypto.hash" | "log")[];
             timeoutMs?: number | undefined;
             memoryMb?: number | undefined;
         } | undefined;
@@ -3248,6 +3271,29 @@ declare const SysSharingRule: Omit<{
             titleField: string;
             progressField?: string | undefined;
             dependenciesField?: string | undefined;
+            colorField?: string | undefined;
+            parentField?: string | undefined;
+            typeField?: string | undefined;
+            baselineStartField?: string | undefined;
+            baselineEndField?: string | undefined;
+            groupByField?: string | undefined;
+            resourceView?: boolean | undefined;
+            assigneeField?: string | undefined;
+            effortField?: string | undefined;
+            capacity?: number | undefined;
+            tooltipFields?: (string | {
+                field: string;
+                label?: string | undefined;
+            })[] | undefined;
+            quickFilters?: {
+                field: string;
+                label?: string | undefined;
+                options?: (string | {
+                    value: string | number;
+                    label?: string | undefined;
+                })[] | undefined;
+            }[] | undefined;
+            autoZoomToFilter?: boolean | undefined;
         } | undefined;
         gallery?: {
             coverFit: "cover" | "contain";
@@ -3411,7 +3457,7 @@ declare const SysSharingRule: Omit<{
         clone: boolean;
         apiMethods?: ("search" | "create" | "import" | "delete" | "list" | "get" | "update" | "upsert" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "read" | "private" | "read_write" | undefined;
+    sharingModel?: "full" | "read" | "private" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -3443,7 +3489,7 @@ declare const SysSharingRule: Omit<{
         } | {
             language: "js";
             source: string;
-            capabilities: ("api.read" | "api.write" | "crypto.uuid" | "crypto.hash" | "log")[];
+            capabilities: ("api.read" | "api.write" | "api.transaction" | "crypto.uuid" | "crypto.hash" | "log")[];
             timeoutMs?: number | undefined;
             memoryMb?: number | undefined;
         } | undefined;
@@ -6151,6 +6197,29 @@ declare const SysShareLink: Omit<{
             titleField: string;
             progressField?: string | undefined;
             dependenciesField?: string | undefined;
+            colorField?: string | undefined;
+            parentField?: string | undefined;
+            typeField?: string | undefined;
+            baselineStartField?: string | undefined;
+            baselineEndField?: string | undefined;
+            groupByField?: string | undefined;
+            resourceView?: boolean | undefined;
+            assigneeField?: string | undefined;
+            effortField?: string | undefined;
+            capacity?: number | undefined;
+            tooltipFields?: (string | {
+                field: string;
+                label?: string | undefined;
+            })[] | undefined;
+            quickFilters?: {
+                field: string;
+                label?: string | undefined;
+                options?: (string | {
+                    value: string | number;
+                    label?: string | undefined;
+                })[] | undefined;
+            }[] | undefined;
+            autoZoomToFilter?: boolean | undefined;
         } | undefined;
         gallery?: {
             coverFit: "cover" | "contain";
@@ -6314,7 +6383,7 @@ declare const SysShareLink: Omit<{
         clone: boolean;
         apiMethods?: ("search" | "create" | "import" | "delete" | "list" | "get" | "update" | "upsert" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "read" | "private" | "read_write" | undefined;
+    sharingModel?: "full" | "read" | "private" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -6346,7 +6415,7 @@ declare const SysShareLink: Omit<{
         } | {
             language: "js";
             source: string;
-            capabilities: ("api.read" | "api.write" | "crypto.uuid" | "crypto.hash" | "log")[];
+            capabilities: ("api.read" | "api.write" | "api.transaction" | "crypto.uuid" | "crypto.hash" | "log")[];
             timeoutMs?: number | undefined;
             memoryMb?: number | undefined;
         } | undefined;

package/dist/index.d.ts

@@ -475,6 +475,29 @@ declare const SysRecordShare: Omit<{
             titleField: string;
             progressField?: string | undefined;
             dependenciesField?: string | undefined;
+            colorField?: string | undefined;
+            parentField?: string | undefined;
+            typeField?: string | undefined;
+            baselineStartField?: string | undefined;
+            baselineEndField?: string | undefined;
+            groupByField?: string | undefined;
+            resourceView?: boolean | undefined;
+            assigneeField?: string | undefined;
+            effortField?: string | undefined;
+            capacity?: number | undefined;
+            tooltipFields?: (string | {
+                field: string;
+                label?: string | undefined;
+            })[] | undefined;
+            quickFilters?: {
+                field: string;
+                label?: string | undefined;
+                options?: (string | {
+                    value: string | number;
+                    label?: string | undefined;
+                })[] | undefined;
+            }[] | undefined;
+            autoZoomToFilter?: boolean | undefined;
         } | undefined;
         gallery?: {
             coverFit: "cover" | "contain";
@@ -638,7 +661,7 @@ declare const SysRecordShare: Omit<{
         clone: boolean;
         apiMethods?: ("search" | "create" | "import" | "delete" | "list" | "get" | "update" | "upsert" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "read" | "private" | "read_write" | undefined;
+    sharingModel?: "full" | "read" | "private" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -670,7 +693,7 @@ declare const SysRecordShare: Omit<{
         } | {
             language: "js";
             source: string;
-            capabilities: ("api.read" | "api.write" | "crypto.uuid" | "crypto.hash" | "log")[];
+            capabilities: ("api.read" | "api.write" | "api.transaction" | "crypto.uuid" | "crypto.hash" | "log")[];
             timeoutMs?: number | undefined;
             memoryMb?: number | undefined;
         } | undefined;
@@ -3248,6 +3271,29 @@ declare const SysSharingRule: Omit<{
             titleField: string;
             progressField?: string | undefined;
             dependenciesField?: string | undefined;
+            colorField?: string | undefined;
+            parentField?: string | undefined;
+            typeField?: string | undefined;
+            baselineStartField?: string | undefined;
+            baselineEndField?: string | undefined;
+            groupByField?: string | undefined;
+            resourceView?: boolean | undefined;
+            assigneeField?: string | undefined;
+            effortField?: string | undefined;
+            capacity?: number | undefined;
+            tooltipFields?: (string | {
+                field: string;
+                label?: string | undefined;
+            })[] | undefined;
+            quickFilters?: {
+                field: string;
+                label?: string | undefined;
+                options?: (string | {
+                    value: string | number;
+                    label?: string | undefined;
+                })[] | undefined;
+            }[] | undefined;
+            autoZoomToFilter?: boolean | undefined;
         } | undefined;
         gallery?: {
             coverFit: "cover" | "contain";
@@ -3411,7 +3457,7 @@ declare const SysSharingRule: Omit<{
         clone: boolean;
         apiMethods?: ("search" | "create" | "import" | "delete" | "list" | "get" | "update" | "upsert" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "read" | "private" | "read_write" | undefined;
+    sharingModel?: "full" | "read" | "private" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -3443,7 +3489,7 @@ declare const SysSharingRule: Omit<{
         } | {
             language: "js";
             source: string;
-            capabilities: ("api.read" | "api.write" | "crypto.uuid" | "crypto.hash" | "log")[];
+            capabilities: ("api.read" | "api.write" | "api.transaction" | "crypto.uuid" | "crypto.hash" | "log")[];
             timeoutMs?: number | undefined;
             memoryMb?: number | undefined;
         } | undefined;
@@ -6151,6 +6197,29 @@ declare const SysShareLink: Omit<{
             titleField: string;
             progressField?: string | undefined;
             dependenciesField?: string | undefined;
+            colorField?: string | undefined;
+            parentField?: string | undefined;
+            typeField?: string | undefined;
+            baselineStartField?: string | undefined;
+            baselineEndField?: string | undefined;
+            groupByField?: string | undefined;
+            resourceView?: boolean | undefined;
+            assigneeField?: string | undefined;
+            effortField?: string | undefined;
+            capacity?: number | undefined;
+            tooltipFields?: (string | {
+                field: string;
+                label?: string | undefined;
+            })[] | undefined;
+            quickFilters?: {
+                field: string;
+                label?: string | undefined;
+                options?: (string | {
+                    value: string | number;
+                    label?: string | undefined;
+                })[] | undefined;
+            }[] | undefined;
+            autoZoomToFilter?: boolean | undefined;
         } | undefined;
         gallery?: {
             coverFit: "cover" | "contain";
@@ -6314,7 +6383,7 @@ declare const SysShareLink: Omit<{
         clone: boolean;
         apiMethods?: ("search" | "create" | "import" | "delete" | "list" | "get" | "update" | "upsert" | "bulk" | "aggregate" | "history" | "restore" | "purge" | "export")[] | undefined;
     } | undefined;
-    sharingModel?: "full" | "read" | "private" | "read_write" | undefined;
+    sharingModel?: "full" | "read" | "private" | "public_read" | "public_read_write" | "controlled_by_parent" | "read_write" | undefined;
     publicSharing?: {
         enabled: boolean;
         allowedAudiences?: ("email" | "public" | "link_only" | "signed_in")[] | undefined;
@@ -6346,7 +6415,7 @@ declare const SysShareLink: Omit<{
         } | {
             language: "js";
             source: string;
-            capabilities: ("api.read" | "api.write" | "crypto.uuid" | "crypto.hash" | "log")[];
+            capabilities: ("api.read" | "api.write" | "api.transaction" | "crypto.uuid" | "crypto.hash" | "log")[];
             timeoutMs?: number | undefined;
             memoryMb?: number | undefined;
         } | undefined;