Mention-grants: Collaborator-based cross-space access for @-mentions#10895

Open

MichaelUray wants to merge 36 commits into

hcengineering:developfrom

MichaelUray:feat/huly-mention-grants

Commits on Jul 9, 2026

feat(core): add ClassCollaborators.mentionsGrantAccess opt-in flag
MichaelUray
committed
feat(model/core): wire mentionsGrantAccess into TClassCollaborators model class
MichaelUray
committed
feat(tracker): opt tracker.class.Issue into collaborator-grants-read + mentions-grant-access
MichaelUray
committed
feat(core/collaborators): add isomorphic resolveMentionGrantTarget helper
MichaelUray
committed
feat(middleware/guest-permissions): veto field updates from collab-only guests on opt-in classes
MichaelUray
committed
feat(tracker/utils): split canEditIssue into canEditIssueFields + canCommentOnIssue
MichaelUray
committed
feat(tracker/EditIssue): show comment composer separately from field editors
MichaelUray
committed
fix(chunter-resources): add @hcengineering/text-core dependency
MichaelUray
committed
feat(chunter-trigger): mention-grants-access uses shared helper + grant-target dedup
MichaelUray
committed
feat(chunter/ChatMessageInput): warn before mention auto-grants Issue access
MichaelUray
committed
feat(middleware/spaceSecurity): let Guests read collab-secured docs across spaces
MichaelUray
committed
feat(security): allow non-System callers to read their own Collaborator records
MichaelUray
committed
feat(security+nav): list collab-only spaces in workbench navigator for Guests
MichaelUray
committed
fix(nav): surface collab-only projects in tracker nav-tree
MichaelUray
committed
fix(tracker/nav): hide non-Issues sub-nodes on non-member projects
MichaelUray
committed
feat(tracker/nav): V1 - badge + tooltip for collab-only projects
MichaelUray
committed
test(tracker): V2 - mention-grant persists after issue moves to Done
MichaelUray
committed
feat(text-core): V3a - grantsAccess attr on mention references
MichaelUray
committed
feat(chunter): V3b - per-grantee grant choices in send disclosure
MichaelUray
committed
feat(chunter-trigger): V3c - honour grantsAccess='false' on mentions
MichaelUray
committed
feat(chunter-trigger): V3d - add-only re-grant on message edit
MichaelUray
committed
fix(chunter-trigger): V3d update-grant uses the edit actor + add tests
MichaelUray
committed
fix(chunter): preserve unsent comment when grant dialog is cancelled
MichaelUray
committed
test(middleware): stub hierarchy.getAncestors for guest-permission uncovered-class test
MichaelUray
committed
fix(workbench-resources/Navigator): correct activeClasses cast to Ref<Class<Space>>[]
MichaelUray
committed
fix: self-review BLOCKERs + IMPORTANT findings
MichaelUray
committed
fix(tracker/V1): guard space.members against null
MichaelUray
committed
docs(tracker/V1): note scope limit on sub-node hide
MichaelUray
committed
chore: apply repo formatting and lint fixes after develop merge
MichaelUray
committed
fix(middleware): backend-guard collab-read space-filter bypass (H5)
MichaelUray
committed
fix(middleware): collab-only Write-Veto deckt auch TxRemoveDoc (L-RM)
MichaelUray
committed
fix(middleware): guestPermissions fail-closed bei fehlendem Space (L-GP)
MichaelUray
committed
fix(chunter-resources): align text-core to workspace:^0.7.19
MichaelUray
committed

Commits on Jul 11, 2026