`actions.mdx` built-in `share` action names `role` as a recipient kind — same retired vocabulary as #80

[os-zhuang]

Found while working #80. Out of that card's scope — #80's dispatch scoped the file surface to content/docs/resources/glossary.mdx and instructed that any hit outside it be reported rather than edited — so it is filed rather than folded in.

content/docs/build/interface/actions.mdx:170, in the "every object gets these for free" table:

Action	What it does
share	Direct share with a user / role

role is not a recipient kind. ShareRecipientType in packages/spec/src/security/sharing.zod.ts on objectstack@origin/main is exactly user / team / position / unit_and_subordinates / business_unit, and the schema records the rename in its own words: ADR-0090 D3 renamed role to position (and the pre-D3 group to team). This site's own changelog already states it — content/docs/resources/changelog.mdx:212 and :260.

This is the identical wording pattern #80 fixed in the glossary ("for a specific user / role / group"), in a second file. The PM's pre-dispatch corpus grep for #80 searched for role / group used as a recipient kind and reported no hits outside the glossary; this one was missed because it sits in a build/interface page rather than a permissions page.

Cost of leaving it: the same authoring trap as #80 — a reader takes the table at its word and reasons about a role recipient that matches nothing. Lower blast radius than the glossary (it is a one-cell table gloss, not a definition), but it is the last English page teaching the retired spelling.

Suggested fix — one table cell, matching the phrasing configure/permissions/record-access.mdx:66 already uses for the full set:

| share | Direct share with a user, team, position, or business unit |

Two adjacent observations from the same sweep, both weaker and both left for triage rather than filed separately:

• content/docs/index.mdx:43 describes ObjectOS as having the "same metadata-driven model (objects, fields, roles, sharing rules)" as Salesforce / NetSuite. roles there is retired ObjectStack vocabulary applied to our own model, though the sentence is comparative prose rather than an authoring instruction.
• content/docs/configure/permissions/record-access.mdx:15 glosses record shares as "Grant access to a specific user, position, or unit (with subordinates)" — three of the five kinds, silently dropping team and plain business_unit. No retired spelling, so nothing an author writes from it fails; it is the incomplete-subset pattern rather than the dead-vocabulary one. Note the same page names all five correctly at :66.

Verified against: packages/spec/src/security/sharing.zod.ts (ShareRecipientType and the removal note above it) on objectstack@origin/main.

---

Generated by Claude Code

[os-support-ai]

Triage: promoted to pm:queue. Scope covers two of the three items:

1. actions.mdx:170 — the one-cell fix, phrased per record-access.mdx:66 (user, team, position, or business unit), verified against ShareRecipientType as the card already did.
2. record-access.mdx:15 — complete the subset (it currently names three of five kinds); same vocabulary family, same source of truth, and the page's own :66 is the reference.

Excluded: index.mdx:43 — comparative prose describing the platform category (Salesforce/NetSuite's own vocabulary genuinely includes roles); editing it buys no authoring safety and the sentence is not an authoring instruction. If #79's Console-retirement pass ends up rewording that paragraph anyway, it can be reconsidered there.

---

Generated by Claude Code

[os-elon]

Claim: PM loop round 1 (objectos dispatch seat, /pm-dispatch objectos invoked directly by the maintainer; execution lane per the Option B fold-in, objectstack#9551)
Session: session_01Yaqu7kmKZM3tRPd9Y4xivo
Branch: claude/issue-91-share-recipient-vocabulary
Worktree: objectos-issue-91
Domain: no domain:* on this card; executes in the domain:devx lane per the objectos fold-in (⛔ not relabelled — domain:* has a single producer, the triage seat)
File surface: content/docs/build/interface/actions.mdx, content/docs/configure/permissions/record-access.mdx — English only (stop on breach; explain in the report)
Container & model: M, mode:subagent, model: opus — objectos's gate farm is type-check + build only, so prose correctness here is judged by review, not mechanically; that takes this off the sonnet mechanical floor
Clause-②: no — documentation prose; changes no contract accept/reject behaviour, widens no public surface
Serial constraints cleared: batch siblings #108 (index.mdx, build/marketplace.mdx, resources/glossary.mdx) and #72 (.github/workflows/ci.yml, package.json) — both disjoint. #94 holds quickstart.mdx, disjoint. No open PR touches either file.

Both landing points re-verified on origin/main@4204d5e by this seat

content/docs/build/interface/actions.mdx:170:| `share` | Direct share with a user / role |
content/docs/configure/permissions/record-access.mdx: "Record shares | Grant access to a specific user, position, or unit (with subordinates)"

Both present. The page's own full enumeration further down still reads "a user, team, position, business unit, or a unit and its subordinates" — that is the reference wording, and it confirms the :15 row is the incomplete-subset case the triage comment promoted.

---

Generated by Claude Code

[os-elon]

{
 "issue": 91,
 "status": "done",
 "branch": "claude/issue-91-share-recipient-vocabulary",
 "pr": "https://github.com/objectstack-ai/objectos/pull/110",
 "premise_still_valid": true,
 "summary": "Both promoted cells fixed at content/docs/build/interface/actions.mdx:170 and content/docs/configure/permissions/record-access.mdx:15; both now read the five-kind enumeration verbatim from record-access.mdx:66. Diverged from triage's suggested four-kind gloss for actions.mdx and used all five (rationale in PR body: shipping four-of-five next to the row whose defect IS the silent drop would re-file the same defect). index.mdx:43 untouched per triage exclusion. Card's claim that the schema records the role->position rename in its own words is off — sharing.zod.ts records group->team and the guest/queue exclusions only; the role rename is in objectstack docs/adr/0086:427, 0087:378, 0090:176 and this site's changelog.mdx:212/:260. The load-bearing fact (role is not a ShareRecipientType member) is confirmed directly from the enum. Card's 'last English page' claim is FALSE — see out_of_scope_findings.",
 "tests": "All at HEAD dcb25ee (post-commit, no edits after). `pnpm install --frozen-lockfile` exit 0. `pnpm turbo run type-check build test --continue --force --concurrency=2` exit 0 — '2 successful, 2 total / 0 cached', 'cache bypass, force executing' (no FULL TURBO); the `test` task matched no package script, i.e. #72's defect reproduced, not a green I earned. `node .github/scripts/check-translations.mjs` exit 0 'translations gate passed'. `node .github/scripts/check-translation-ownership.mjs --actor os-elon --files changed.txt` exit 0, 'touches 0 translation artifact(s) and 2 other file(s)' (still inert, #68). `check-translation-output.mjs --self-test` exit 0, '20 case(s) ... every rule demonstrated able to fail'. `check-translation-output.mjs --files changed.txt` exit 0, '127 pre-existing finding(s) reported'. Control-byte scan on both edited files: grep -naP over the C0 range, exit 1 (no match). No ablation applicable — prose-only diff, no gate under test.",
 "open_questions": [],
 "out_of_scope_findings": [
 "filed as #109: four more English pages teach retired `role` vocabulary — reference/cel.mdx:69 and :124 document and demonstrate `os.user.roles`, a key EvalUser does not have (packages/spec/src/identity/eval-user.zod.ts:126 declares `positions`, and :16 states it is the only canonical membership field, renamed from `roles` per ADR-0090 D3), so that authoring example reads an absent key; plus configure/notifications.mdx:76 and :83 and resources/glossary.mdx:161 naming `role` as a principal kind. No label (concrete defect, left for triage). `group` as a recipient kind: zero English hits."
 ]
}

Files changed (declared surface, no deviation): content/docs/build/interface/actions.mdx, content/docs/configure/permissions/record-access.mdx. English only; no locale sibling touched; no other file added or modified.

---

Generated by Claude Code

---

Generated by Claude Code