fix(setup): position holder picker shows email beside the name - #27427

Requested by Warren · project thread
Fixes #27410

Clause-②: no
Metadata-protocol: none

维护者速读

• 改了什么:Setup › 岗位 › 添加持有人 的用户选择框,在姓名列旁边多画一列邮箱。
• 为什么改:原来只列姓名,两个同名的人分不清,授予岗位前也无法确认是哪个账号;同页的持有人列表本来就在姓名下显示邮箱。
• 风险与回滚:只给选择框传了列和对象 schema;看不到 sys_user.email 的人仍只看到姓名列(选择框自身的字段读权限规则);回滚即还原本 PR。
• 先看:ui/packages/app-shell/src/views/metadata-admin/PositionHoldersSection.tsx(RecordPickerDialog 的 columns 与 objectSchema)、同目录新测试 PositionHoldersSection.pickerColumns-27410.test.tsx。
• 两分钟验证:pnpm --dir ui exec vitest run packages/app-shell/src/views/metadata-admin/PositionHoldersSection,预期 4 个文件 17 个用例全绿。
• 需要你做的:无,席位落地。

What changes

PositionHoldersSection now opens its RecordPickerDialog on sys_user with:

• columns: a Name column (name, the field sys_user declares as its nameField) and an Email column (email, its login identity), with headers from the section's own en/zh copy.
• objectSchema: sys_user as the registry serves it, read from the useMetadata() objects the section already holds (no new fetch). The name column resolves each person's title through it, as a lookup's dropdown does.

Nothing else moves. Per the card's ruling, the picker's own read rule (readableColumns) decides what it draws: the section adds no permission check of its own and reads the email no other way.

Why

The picker drew only its default display column, so two people of one name could not be told apart, while the holder rows on the same section already show each holder's email under the name. Row 2 of #27356.

Tests

New file PositionHoldersSection.pickerColumns-27410.test.tsx, against the real RecordPickerDialog (the existing suites stub it):

• the picker draws a name column and an email column (cells read by data-lookup-cell);
• CONTROL: choosing a person still creates the sys_user_position row by name;
• CONTROL: under a real PermissionProvider policy that denies sys_user.email to the viewer, the picker draws the name column only and no email text.

Ablation (one-shot, node scripts/ablation-replace.mjs --delete on the columns prop, under the lock): the email-column test goes red (1 failed, 2 passed), and the restore leg reports blob 7283c48e2e90 equal to HEAD with git diff HEAD empty.

Acceptance notes

• AssignedUsersSection (a permission set's holders) opens the same RecordPickerDialog on sys_user with no columns, so its picker lists names only too. Read from the source, not filed here; reported to the seat.

Verification

All readings on head d2e47a1a (origin/main merged).

Changeset: .changeset/27410-position-holder-picker-email.md, @object-ui/app-shell and @object-ui/console patch (app-shell is private and versioned; console ships it).

Human Minimum

• 1. Schemas start as Zod; packages/spec holds no runtime logic. (not touched)
• 2. Every name I added uses the casing for its kind.
• 3. No formatter ran; pnpm lint passes. (CI runs it)
• 4. One issue, one branch off an up-to-date main, one pull request.
• 5. A change that publishes carries a changeset, and both declaration lines are filled in here and in the changeset.
• 6. packages/spec touched: its generated artifacts are regenerated and committed. (not touched)
• 7. No hand edits to content/docs/references/, packages/*/CHANGELOG.md or content/docs/releases/.
• 8. Title, body and comments are in English.
• The Before Submitting list in CONTRIBUTING.md is done.

Generated by Claude Code