@startsimpli/ui 0.4.147 → 0.4.148

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@startsimpli/ui",
-  "version": "0.4.147",
+  "version": "0.4.148",
   "description": "Shared UI components package for StartSimpli applications",
   "main": "./src/index.ts",
   "types": "./src/index.ts",
@@ -55,9 +55,9 @@
     "@codemirror/language": "^6.0.0",
     "@codemirror/state": "^6.0.0",
     "@codemirror/view": "^6.0.0",
-    "@startsimpli/i18n": "^0.1.3",
+    "@startsimpli/auth": "^0.4.39",
     "@startsimpli/api": "^0.5.66",
-    "@startsimpli/auth": "^0.4.39"
+    "@startsimpli/i18n": "^0.1.3"
   },
   "peerDependenciesMeta": {
     "@startsimpli/api": {
@@ -152,8 +152,8 @@
     "tailwindcss": "^3.4.19",
     "tsup": "^8.5.1",
     "typescript": "^6.0.3",
-    "@startsimpli/i18n": "0.1.3",
-    "@startsimpli/realtime": "0.0.2"
+    "@startsimpli/realtime": "0.0.2",
+    "@startsimpli/i18n": "0.1.3"
   },
   "keywords": [
     "ui",

package/src/components/track-changes/__tests__/rails.test.tsx

@@ -517,7 +517,17 @@ describe('createHttpTrackChangesClient', () => {
     await c.listComments!({ field: 'blog', status: 'all' })
     await c.roster!({})
     expect(f.mock.calls[0][0]).toBe('/api/v1/entities/d1/comments/?field=blog&status=all')
-    expect(f.mock.calls[1][0]).toBe('/api/v1/org/roster/')
+    expect(f.mock.calls[1][0]).toBe('/api/v1/org/roster/?record=d1')
+  })
+
+  it("asks for the RECORD's team, so only people who can read it are offered (bd startsim-whwxd, mention roster = team)", async () => {
+    const f = fake(200, { results: [], next_cursor: null })
+    const c = createHttpTrackChangesClient('rec-42', { headers: () => ({}), url: (p) => p, fetch: f })
+    await c.roster!({ cursor: 'abc' })
+    const url = new URL(f.mock.calls[0][0], 'https://t.test')
+    expect(url.pathname).toBe('/api/v1/org/roster')
+    expect(url.searchParams.get('record')).toBe('rec-42')
+    expect(url.searchParams.get('cursor')).toBe('abc')
   })
 
   it('throws the status and body on a refusal', async () => {

package/src/components/track-changes/http-client.ts

@@ -104,6 +104,9 @@ export function createHttpTrackChangesClient(
     reply: (threadId, req) => call<CommentWire>(`${base}/comments/${threadId}/replies`, { method: 'POST', body: req }),
     resolveThread: (threadId) => call(`${base}/comments/${threadId}/resolve`, { method: 'POST', body: {} }),
     reopenThread: (threadId) => call(`${base}/comments/${threadId}/reopen`, { method: 'POST', body: {} }),
-    roster: ({ cursor }) => call<RosterPageWire>(`/api/v1/org/roster`, { query: { cursor } }),
+    // The RECORD's team: the tenant keeps only colleagues who can read this
+    // record, so nobody is offered who could not open it (bd startsim-whwxd, mention roster = team).
+    roster: ({ cursor }) =>
+      call<RosterPageWire>(`/api/v1/org/roster`, { query: { record: String(recordId), cursor } }),
   };
 }