Skip to content

docs: fix BU subtree attribution in two docstrings (#8098) - #8168

Merged
os-zhuang merged 2 commits into
mainfrom
claude/issue-8098-bu-subtree-docstrings
Aug 12, 2026
Merged

docs: fix BU subtree attribution in two docstrings (#8098)#8168
os-zhuang merged 2 commits into
mainfrom
claude/issue-8098-bu-subtree-docstrings

Conversation

@os-zhuang

Copy link
Copy Markdown
Contributor

Fixes #8098

What changed

Two docstrings still attributed the BU subtree expansion to the
business_unit sharing-rule recipient, after #7807 (PR #8097, 9b519815)
narrowed business_unit to expand exactly one unit's members and moved the
subtree walk onto unit_and_subordinates. Both Drives: bullets are
corrected to name unit_and_subordinates as the subtree consumer, and
business_unit as the narrow (single-unit) one — mirroring the vocabulary
business-unit-graph.ts:47-52 already uses for this exact split:

  • packages/spec/src/contracts/sharing-service.ts — the
    IBusinessUnitGraphService docstring. The walk description above the
    Drives: bullet stays as-is: it correctly describes what
    expandUsers (the contract member) does. Only the attribution — which
    recipient that walk drives — was wrong.
  • packages/platform-objects/src/identity/sys-business-unit.object.ts — the
    same Drives: bullet on the sys_business_unit object docstring.

Why (the #7807 split)

#7807 found that business_unit and unit_and_subordinates sharing-rule
recipients were both resolving through the same subtree walk
(BusinessUnitGraphService.expandUsers), so a rule anchored at a division
silently reached every department and office beneath it — an over-grant.
PR #8097 split the two: business_unit now resolves through the new
expandUnitMembers (exactly one unit's members), while
unit_and_subordinates keeps expandUsers (the subtree walk). The spec's
authoring declaration (ShareRecipientType) and the lint red-line table were
already correct throughout and were explicitly out of scope for #8097; these
two docstrings are prose on the graph-service contract and the object
definition that never got updated to match.

Acceptance-invariance evidence

Every changed line is a comment line inside a JSDoc block — no non-comment
line changes, so the acceptance/validation face is byte-identical before and
after:

diff --git a/packages/platform-objects/src/identity/sys-business-unit.object.ts b/packages/platform-objects/src/identity/sys-business-unit.object.ts
@@ -14,7 +14,8 @@ import { ObjectSchema, Field } from '@objectstack/spec/data';
  * structure works identically regardless of value.
  *
  * Drives:
- *   - `recipient_type='business_unit'` sharing rules
+ *   - `recipient_type='unit_and_subordinates'` sharing rules (subtree walk);
+ *     `business_unit` expands only the one named unit's members
  *   - `bu:` approver prefix in the approval engine
  *   - Report rollups and manager chains in CRM/PM apps
  *
diff --git a/packages/spec/src/contracts/sharing-service.ts b/packages/spec/src/contracts/sharing-service.ts
@@ -562,7 +562,8 @@ export interface ITeamGraphService {
  *
  * Walks `parent_business_unit_id` to expand a department into the union of
  * its members and all descendant members. Drives:
- *   - `recipient_type='business_unit'` sharing rules
+ *   - `recipient_type='unit_and_subordinates'` sharing rules (this subtree
+ *     walk); `business_unit` expands only the one named unit's members
  *   - `bu:` approver prefix in the approval engine
  *   - report rollups, manager chains, and similar org-aware logic
  */

Changeset — MEASURED, not assumed

The two triage comments disagreed (docs-only ⇒ skip-changeset vs. patch). Decided
by this lane's criterion: does the prose reach a consumer (reference page,
dist/**/*.d.ts hover, or a parse-reachable error string)?

  • Reference pages: the docs generator walks .zod.ts files only
    (build-docs.ts:186). Neither sharing-service.ts (a plain .ts contract
    file) nor sys-business-unit.object.ts is a .zod.ts file, so neither
    feeds a reference page.

  • packages/spec built .d.ts hoverIBusinessUnitGraphService is
    exported, so built:

    pnpm --filter '@objectstack/formula^...' build   # dependency closure
    pnpm --filter @objectstack/spec build             # (pulled in as a dep of the closure above)
    grep -n "expands only the one named unit\|recipient_type='unit_and_subordinates'" \
      packages/spec/dist/contracts/index.d.ts
    

    Result — hit:

    packages/spec/dist/contracts/index.d.ts:6698: *   - `recipient_type='unit_and_subordinates'` sharing rules (this subtree
    packages/spec/dist/contracts/index.d.ts:6699: *     walk); `business_unit` expands only the one named unit's members
    

    packages/spec/package.json ships dist in its files field, so this
    reaches a real consumer's editor hover. ⇒ patch for @objectstack/spec.

  • packages/platform-objects built .d.ts hoverSysBusinessUnit is
    exported from the package root:

    pnpm --filter '@objectstack/platform-objects^...' build   # dependency closure
    pnpm --filter @objectstack/platform-objects build
    grep -n "expands only the one named unit\|recipient_type='unit_and_subordinates'" \
      packages/platform-objects/dist/identity/index.d.ts
    

    Result — hit:

    packages/platform-objects/dist/identity/index.d.ts:20050: *   - `recipient_type='unit_and_subordinates'` sharing rules (subtree walk);
    packages/platform-objects/dist/identity/index.d.ts:20051: *     `business_unit` expands only the one named unit's members
    

    packages/platform-objects/package.json ships dist in its files
    field too, and SysBusinessUnit is re-exported from dist/index.d.ts.
    patch for @objectstack/platform-objects.

Conclusion: both hit ⇒ .changeset/bu-subtree-docstring-attribution.md
added with "@objectstack/spec": patch and
"@objectstack/platform-objects": patch. No skip-changeset label applied.

Tests / local gates

All run from a fresh worktree at origin/main @ a0151e98, build-closure-first,
under the shared verification lock:

pnpm check:adr-anchors                                            → OK
pnpm check:changeset-gate-self-tests                               → OK
pnpm --filter @objectstack/lint run check:doc-formula-expressions  → OK (24 self-test cases + real scan clean)
pnpm check:docs-audit-scope                                        → OK
pnpm check:i18n                                                    → OK (9 packages in sync)
pnpm check:merge-driver                                            → OK
pnpm check:release-body                                            → OK
pnpm check:spec-parsed-alias                                       → OK
node scripts/check-nul-bytes.mjs                                   → OK
pnpm --filter @objectstack/plugin-sharing exec vitest run \
  src/business-unit-graph.test.ts --maxWorkers=2                   → 14 passed (1 file)
pnpm --filter @objectstack/spec typecheck                          → OK
pnpm --filter @objectstack/platform-objects typecheck              → OK

No non-comment line changed in either touched file (see the diff above), so no
new/updated behavioural tests were needed; the plugin-sharing suite pins the
runtime behaviour these docstrings now describe correctly.


Generated by Claude Code

claude added 2 commits August 12, 2026 18:17
#7807 (PR #8097, 9b51981) narrowed the business_unit sharing-rule
recipient to expand exactly one unit's members; unit_and_subordinates
kept the subtree walk. These two docstrings never got the memo and
still attributed the subtree expansion to business_unit. Correct the
Drives: attribution in both.

Fixes #8098
Measured: IBusinessUnitGraphService (packages/spec) and SysBusinessUnit
(packages/platform-objects) docstrings both reach built dist/**/*.d.ts
hover surfaces, so patch changesets are needed for both packages.
@vercel

vercel Bot commented Aug 12, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
objectstack Ignored Ignored Aug 12, 2026 6:35pm

Request Review

@github-actions

Copy link
Copy Markdown
Contributor

📓 Docs Drift Check

This PR changes 2 package(s): @objectstack/platform-objects, @objectstack/spec.

106 hand-written doc(s) reference the affected code and may need an implementation-accuracy re-verification:

  • content/docs/ai/agents.mdx (via @objectstack/spec)
  • content/docs/ai/skills-reference.mdx (via @objectstack/spec)
  • content/docs/ai/skills.mdx (via @objectstack/spec)
  • content/docs/api/client-sdk.mdx (via @objectstack/spec)
  • content/docs/api/environment-routing.mdx (via @objectstack/spec)
  • content/docs/api/error-catalog.mdx (via @objectstack/spec)
  • content/docs/api/error-handling-client.mdx (via @objectstack/spec)
  • content/docs/api/error-handling-server.mdx (via @objectstack/spec)
  • content/docs/api/index.mdx (via @objectstack/spec)
  • content/docs/automation/approvals.mdx (via @objectstack/spec)
  • content/docs/automation/connectors.mdx (via @objectstack/spec)
  • content/docs/automation/flows.mdx (via @objectstack/spec)
  • content/docs/automation/hook-bodies.mdx (via packages/spec)
  • content/docs/automation/hooks.mdx (via @objectstack/spec)
  • content/docs/automation/index.mdx (via @objectstack/spec)
  • content/docs/automation/webhooks.mdx (via @objectstack/spec)
  • content/docs/automation/workflows.mdx (via @objectstack/spec)
  • content/docs/concepts/architecture.mdx (via @objectstack/spec)
  • content/docs/concepts/design-principles.mdx (via packages/spec)
  • content/docs/concepts/index.mdx (via @objectstack/spec)
  • content/docs/concepts/metadata-driven.mdx (via @objectstack/spec)
  • content/docs/concepts/metadata-lifecycle.mdx (via packages/spec)
  • content/docs/concepts/north-star.mdx (via @objectstack/spec)
  • content/docs/data-modeling/analytics.mdx (via @objectstack/spec)
  • content/docs/data-modeling/drivers.mdx (via @objectstack/spec)
  • content/docs/data-modeling/external-datasources.mdx (via @objectstack/spec)
  • content/docs/data-modeling/field-types.mdx (via @objectstack/spec)
  • content/docs/data-modeling/fields.mdx (via @objectstack/spec)
  • content/docs/data-modeling/formulas.mdx (via @objectstack/spec)
  • content/docs/data-modeling/index.mdx (via @objectstack/spec)
  • content/docs/data-modeling/objects.mdx (via @objectstack/spec)
  • content/docs/data-modeling/queries.mdx (via @objectstack/spec)
  • content/docs/data-modeling/schema-design.mdx (via @objectstack/spec)
  • content/docs/data-modeling/seed-data.mdx (via @objectstack/spec)
  • content/docs/data-modeling/validation-rules.mdx (via @objectstack/spec)
  • content/docs/data-modeling/validation.mdx (via @objectstack/spec)
  • content/docs/deployment/cli.mdx (via @objectstack/spec)
  • content/docs/deployment/tenancy-modes.mdx (via @objectstack/spec)
  • content/docs/deployment/troubleshooting.mdx (via @objectstack/spec)
  • content/docs/deployment/validating-metadata.mdx (via @objectstack/spec)
  • content/docs/getting-started/build-with-claude-code.mdx (via @objectstack/spec)
  • content/docs/getting-started/common-patterns.mdx (via @objectstack/spec)
  • content/docs/getting-started/examples.mdx (via @objectstack/spec)
  • content/docs/getting-started/quick-reference.mdx (via @objectstack/spec)
  • content/docs/getting-started/quick-start.mdx (via @objectstack/spec)
  • content/docs/getting-started/your-first-project.mdx (via @objectstack/spec)
  • content/docs/kernel/cluster.mdx (via @objectstack/spec)
  • content/docs/kernel/contracts/auth-service.mdx (via packages/spec)
  • content/docs/kernel/contracts/cache-service.mdx (via packages/spec)
  • content/docs/kernel/contracts/data-engine.mdx (via @objectstack/spec)
  • content/docs/kernel/contracts/index.mdx (via @objectstack/spec)
  • content/docs/kernel/contracts/metadata-service.mdx (via packages/spec)
  • content/docs/kernel/contracts/storage-service.mdx (via @objectstack/spec)
  • content/docs/kernel/index.mdx (via packages/spec)
  • content/docs/kernel/runtime-services/data-service.mdx (via @objectstack/spec)
  • content/docs/kernel/runtime-services/email-service.mdx (via packages/spec)
  • content/docs/kernel/runtime-services/examples.mdx (via @objectstack/spec)
  • content/docs/kernel/runtime-services/index.mdx (via packages/spec)
  • content/docs/kernel/runtime-services/queue-service.mdx (via packages/spec)
  • content/docs/kernel/runtime-services/sharing-service.mdx (via @objectstack/spec)
  • content/docs/kernel/runtime-services/sms-service.mdx (via packages/spec)
  • content/docs/kernel/runtime-services/storage-service.mdx (via @objectstack/spec)
  • content/docs/kernel/services-checklist.mdx (via @objectstack/spec)
  • content/docs/kernel/services.mdx (via @objectstack/spec)
  • content/docs/permissions/authorization.mdx (via @objectstack/spec)
  • content/docs/permissions/permission-sets.mdx (via @objectstack/spec)
  • content/docs/permissions/permissions-matrix.mdx (via @objectstack/spec)
  • content/docs/permissions/positions.mdx (via @objectstack/spec)
  • content/docs/permissions/rls.mdx (via @objectstack/spec)
  • content/docs/permissions/sharing-rules.mdx (via @objectstack/spec)
  • content/docs/permissions/system-context.mdx (via packages/spec)
  • content/docs/plugins/adding-a-metadata-type.mdx (via @objectstack/spec)
  • content/docs/plugins/development.mdx (via @objectstack/spec)
  • content/docs/plugins/index.mdx (via @objectstack/spec)
  • content/docs/plugins/packages.mdx (via @objectstack/platform-objects, @objectstack/spec)
  • content/docs/protocol/backward-compatibility.mdx (via @objectstack/spec)
  • content/docs/protocol/diagram.mdx (via packages/spec)
  • content/docs/protocol/kernel/config-resolution.mdx (via @objectstack/spec)
  • content/docs/protocol/kernel/http-protocol.mdx (via @objectstack/spec)
  • content/docs/protocol/kernel/i18n-standard.mdx (via @objectstack/spec)
  • content/docs/protocol/kernel/index.mdx (via @objectstack/spec)
  • content/docs/protocol/kernel/lifecycle.mdx (via @objectstack/spec)
  • content/docs/protocol/kernel/plugin-spec.mdx (via @objectstack/spec)
  • content/docs/protocol/knowledge.mdx (via @objectstack/spec)
  • content/docs/protocol/objectql/index.mdx (via @objectstack/spec)
  • content/docs/protocol/objectql/query-syntax.mdx (via @objectstack/spec)
  • content/docs/protocol/objectql/schema.mdx (via @objectstack/spec)
  • content/docs/protocol/objectql/security.mdx (via packages/spec)
  • content/docs/protocol/objectql/state-machine.mdx (via @objectstack/spec)
  • content/docs/protocol/objectui/actions.mdx (via @objectstack/spec)
  • content/docs/protocol/objectui/concept.mdx (via @objectstack/spec)
  • content/docs/protocol/objectui/index.mdx (via @objectstack/spec)
  • content/docs/protocol/objectui/layout-dsl.mdx (via @objectstack/spec)
  • content/docs/protocol/objectui/record-alert.mdx (via @objectstack/spec)
  • content/docs/protocol/objectui/widget-contract.mdx (via @objectstack/spec)
  • content/docs/ui/actions.mdx (via @objectstack/spec)
  • content/docs/ui/apps.mdx (via @objectstack/spec)
  • content/docs/ui/create-vs-edit-form.mdx (via @objectstack/spec)
  • content/docs/ui/dashboards.mdx (via @objectstack/spec)
  • content/docs/ui/field-grouping-and-order.mdx (via @objectstack/spec)
  • content/docs/ui/forms.mdx (via @objectstack/spec)
  • content/docs/ui/index.mdx (via @objectstack/spec)
  • content/docs/ui/public-data-collection.mdx (via @objectstack/spec)
  • content/docs/ui/setup-app.mdx (via @objectstack/platform-objects, @objectstack/spec)
  • content/docs/ui/translations.mdx (via @objectstack/spec)
  • content/docs/ui/views.mdx (via @objectstack/spec)

7 release-owned page(s) also reference the affected code. These are read-only:

  • content/docs/releases/implementation-status.mdx (via @objectstack/spec)
  • content/docs/releases/index.mdx (via @objectstack/spec)
  • content/docs/releases/v12.mdx (via @objectstack/spec)
  • content/docs/releases/v13.mdx (via @objectstack/spec)
  • content/docs/releases/v16.mdx (via @objectstack/spec)
  • content/docs/releases/v17.mdx (via @objectstack/spec)
  • content/docs/releases/v9.mdx (via @objectstack/spec)

content/docs/releases/ is RELEASE-OWNED (AGENTS.md "Documentation Guardrails"): release
notes are written centrally at release time, and a code PR that edits them is the exact PR
that guardrail exists to stop. They are still audited — read-only. If one of them is actually
wrong, file an issue or open a dedicated docs-only PR; do not edit it here.

Advisory only. To re-verify, run the docs-accuracy-audit workflow scoped to these files:
node scripts/docs-audit/affected-docs.mjs origin/main → pass the list as args.docs.

@github-actions github-actions Bot added size/s documentation Improvements or additions to documentation tooling labels Aug 12, 2026
@os-zhuang
os-zhuang marked this pull request as ready for review August 12, 2026 19:07
@os-zhuang
os-zhuang added this pull request to the merge queue Aug 12, 2026
Merged via the queue into main with commit 37785ed Aug 12, 2026
27 checks passed
@os-zhuang
os-zhuang deleted the claude/issue-8098-bu-subtree-docstrings branch August 12, 2026 19:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation size/s tooling

Projects

None yet

Development

Successfully merging this pull request may close these issues.

docs drift: two contract docstrings still attribute the BU SUBTREE expansion to the business_unit recipient (fixed narrow in #7807)

2 participants