@stndrds/schema 1.0.0-alpha.350 → 1.0.0-alpha.352

package/dist/{index-B-mUjnh9.d.mts → index-DmS-DtU4.d.ts}

@@ -1,21 +1,14 @@
 
-import { n as Attribute } from "./attributes-mMmH-WOx.mjs";
-import { r as Uuid } from "./utils-r53z9KnF.mjs";
-import { i as ValidationResult, r as ValidationMessages } from "./index-BV4yNsr7.mjs";
+import { n as Attribute } from "./attributes-gEcJp-WP.js";
+import { r as Uuid } from "./utils-C6VEXia7.js";
+import { i as ValidationResult, r as ValidationMessages } from "./index-Bbc3qfJ3.js";
 import { z as z$1 } from "zod";
 import { IconName } from "@stndrds/constants";
 //#region src/types/document-layout.d.ts
 interface DocumentLayout {
-  /** Named sub-folders auto-created at the top of the record's drive when first used via attach --variant. */
-  variants?: Record<string, DocumentLayoutVariant>;
   /** Dev-declared folder structures the user can instantiate via the UI inside a record's drive. */
   presets?: FolderPreset[];
 }
-interface DocumentLayoutVariant {
-  /** Display title for the auto-created sub-folder. */
-  title: string;
-  description?: string;
-}
 interface FolderPreset {
   id: string;
   label: string;
@@ -33,6 +26,45 @@ interface PresetNode {
 /** Max depth allowed for preset.structure to keep instantiation predictable. */
 declare const MAX_PRESET_DEPTH = 5;
 //#endregion
+//#region src/types/record-access.d.ts
+/** Roles a record access grant can carry (spec §5.1). */
+declare const RECORD_ACCESS_ROLES: readonly ["reader", "editor"];
+type RecordAccessRole = (typeof RECORD_ACCESS_ROLES)[number];
+/**
+ * Why a grant exists — the equivalent of Salesforce's `RowCause` (spec §3):
+ * automatic grants are recomputed without ever touching manual shares.
+ */
+declare const RECORD_ACCESS_SOURCES: readonly ["manual", "meeting_attendee"];
+type RecordAccessSource = (typeof RECORD_ACCESS_SOURCES)[number];
+/** What the reading actor may do with a record (spec §6.6). */
+type ViewerAccess = "owner" | "editor" | "reader" | "workspace";
+/** One beneficiary of a private record: its effective role and every source that grants it. */
+interface RecordAudienceGrant {
+  actorId: Uuid;
+  role: RecordAccessRole;
+  sources: RecordAccessSource[];
+}
+/** Who can reach a record beyond its owner (`GET /records/:object/:id/access`). */
+interface RecordAudience {
+  recordId: Uuid;
+  visibility: ResourceVisibility;
+  ownedBy: Uuid | null;
+  grants: RecordAudienceGrant[];
+}
+/** Narrow an untrusted value (HTTP body, CLI flag) to a grant role. */
+declare function parseRecordAccessRole(value: unknown): RecordAccessRole;
+/**
+ * The single derivation of `viewerAccess`, from the row's owner and the
+ * `viewer_grant` storage computed FOR this viewer. A private record that is
+ * neither owned nor granted can only have been read by the system reader,
+ * which reads and never writes: `reader`.
+ */
+declare function deriveViewerAccess(record: {
+  visibility: ResourceVisibility;
+  ownedBy: string | null;
+  viewerGrant?: RecordAccessRole | null;
+}, actorIds: readonly string[]): ViewerAccess;
+//#endregion
 //#region src/types/objects.d.ts
 /** Visibility scopes shared by resources that can be workspace-wide or actor-private. */
 declare const RESOURCE_VISIBILITIES: readonly ["workspace", "private"];
@@ -151,6 +183,13 @@ interface ObjectRecord<TValues extends Record<string, unknown> = Record<string,
   visibility: ResourceVisibility;
   /** Owning actor for private records; always null for workspace records. */
   ownedBy: Uuid | null;
+  /**
+   * What the reading actor may do with this record (spec §6.6): its owner,
+   * an editor or reader by grant, or any member of a workspace record.
+   * Computed for the viewer that read the row; absent on records built in
+   * memory and on rows read without a viewer. Never broadcast nor indexed.
+   */
+  viewerAccess?: ViewerAccess;
   /**
    * Display label computed from the object's labelExpression.
    * Computed dynamically based on record values.
@@ -342,4 +381,4 @@ declare function getMissingRequiredAttributes(objectDef: ObjectDefinition, data:
  */
 declare function isRecordComplete(objectDef: ObjectDefinition, data: Record<string, unknown>): boolean;
 //#endregion
-export { FolderPreset as A, ResourceVisibility as C, parseResourceVisibility as D, Timestamps as E, PresetNode as M, DocumentLayout as O, ReservedObjectName as S, SystemFieldName as T, ObjectRecord as _, validateDraft as a, RESOURCE_VISIBILITIES as b, validateObjectOrThrow as c, createAttributeValidator as d, createFormAttributeValidator as f, ObjectDefinition as g, ObjectAttribute as h, validateAttribute as i, MAX_PRESET_DEPTH as j, DocumentLayoutVariant as k, createDraftValidator as l, ListViewTabVisibility as m, isRecordComplete as n, validateDraftOrThrow as o, LIST_VIEW_TAB_VISIBILITIES as p, rejectUnknownAttributesOrThrow as r, validateObject as s, getMissingRequiredAttributes as t, createObjectValidator as u, RESERVED_ATTRIBUTE_NAMES as v, SYSTEM_FIELD_NAMES as w, ReservedAttributeName as x, RESERVED_OBJECT_NAMES as y };
+export { RecordAccessRole as A, PresetNode as B, ResourceVisibility as C, parseResourceVisibility as D, Timestamps as E, deriveViewerAccess as F, parseRecordAccessRole as I, DocumentLayout as L, RecordAudience as M, RecordAudienceGrant as N, RECORD_ACCESS_ROLES as O, ViewerAccess as P, FolderPreset as R, ReservedObjectName as S, SystemFieldName as T, ObjectRecord as _, validateDraft as a, RESOURCE_VISIBILITIES as b, validateObjectOrThrow as c, createAttributeValidator as d, createFormAttributeValidator as f, ObjectDefinition as g, ObjectAttribute as h, validateAttribute as i, RecordAccessSource as j, RECORD_ACCESS_SOURCES as k, createDraftValidator as l, ListViewTabVisibility as m, isRecordComplete as n, validateDraftOrThrow as o, LIST_VIEW_TAB_VISIBILITIES as p, rejectUnknownAttributesOrThrow as r, validateObject as s, getMissingRequiredAttributes as t, createObjectValidator as u, RESERVED_ATTRIBUTE_NAMES as v, SYSTEM_FIELD_NAMES as w, ReservedAttributeName as x, RESERVED_OBJECT_NAMES as y, MAX_PRESET_DEPTH as z };

package/dist/{index-CRtiKFTH.d.ts → index-UYQmTrEG.d.ts}

@@ -1,5 +1,5 @@
 
-import { i as AttributeType, n as Attribute } from "./attributes-C2gm0hUJ.js";
+import { i as AttributeType, n as Attribute } from "./attributes-gEcJp-WP.js";
 import { z as z$1 } from "zod";
 import { IconName } from "@stndrds/constants";
 //#region src/types/mutations.d.ts
@@ -172,6 +172,19 @@ declare const statusOptionWriteSchema: z$1.ZodObject<{
     finished: "finished";
   }>;
 }, z$1.core.$strict>;
+/**
+ * Drops, from every option of an attribute config or body, the keys
+ * `optionSchema` does not know — typically an `id` the code builder accepted
+ * without complaint (#4356). Sync stores options through it, and the schema
+ * state reads them through it, so one stale key no longer 400s the whole state.
+ * The options of a `relation()`/`document()`'s `.qualifyWith()` properties are
+ * validated by the same schema, so each property definition goes through it too.
+ *
+ * Order is kept, and a config with nothing to drop is returned as is. A list
+ * or option that is not the expected shape is left for strict validation to
+ * refuse.
+ */
+declare function withoutUnknownOptionKeys<T extends object>(config: T): T;
 /**
  * Property types whose config differs from `baseConfigSchema` only by
  * independent optional scalars — no options array, no relation targets. Same
@@ -251,4 +264,4 @@ declare function parseAttributeConfigForCreate(type: AttributeType, input: unkno
  */
 declare function parseAttributeConfigForUpdate(stored: Attribute, patch: Partial<AddAttributeInput>): Record<string, unknown>;
 //#endregion
-export { UpdateObjectInput as S, statusOptionWriteSchema as _, getAttributeConfigWriteSchema as a, RelationOption as b, parseAttributeConfigForCreate as c, propertyAttributeWireSchema as d, propertySchemaSchema as f, statusGroupSchema as g, selectOptionWriteSchema as h, getAttributeConfigSchema as i, parseAttributeConfigForUpdate as l, refuseForeignKeys as m, WIRE_OMITTED_CONFIG_KEYS as n, multiselectOptionWriteSchema as o, propertySchemaWireSchema as p, attributeConfigSchemas as r, parseAttributeConfig as s, SIMPLE_PROPERTY_TYPES as t, propertyAttributeSchema as u, AddAttributeInput as v, RelationOptionsResponse as x, CreateCustomObjectInput as y };
+export { UpdateObjectInput as C, RelationOptionsResponse as S, statusOptionWriteSchema as _, getAttributeConfigWriteSchema as a, CreateCustomObjectInput as b, parseAttributeConfigForCreate as c, propertyAttributeWireSchema as d, propertySchemaSchema as f, statusGroupSchema as g, selectOptionWriteSchema as h, getAttributeConfigSchema as i, parseAttributeConfigForUpdate as l, refuseForeignKeys as m, WIRE_OMITTED_CONFIG_KEYS as n, multiselectOptionWriteSchema as o, propertySchemaWireSchema as p, attributeConfigSchemas as r, parseAttributeConfig as s, SIMPLE_PROPERTY_TYPES as t, propertyAttributeSchema as u, withoutUnknownOptionKeys as v, RelationOption as x, AddAttributeInput as y };