fix(platform-objects): name a team membership by the person and the team, and give a team's Members list its own columns - #30452

Requested by Bill · project thread

domain:server#5 · os-bill · session_01Utp6CYVV6fcAQrNTDQRvPb

维护者速读

• 改了什么：团队成员记录的标题从「用户 id in 团队 id」改为「用户名 in 团队名」（用户名为空时用邮箱），写法与业务单元成员一致；团队页的成员列表声明自己的列（用户、加入时间），不再以标题列打头；用户的团队列表同样声明（团队、加入时间）。
• 为什么改：Setup 打开一个团队，成员列表首列是两串原始 id，宽屏右侧成员卡片的每一行、成员记录自己的页头也一样，管理员看不出是谁。
• 风险与回滚：只改平台自带对象 sys_team_member 的声明，不存列、不迁移数据；标题按读者权限读一跳，读不到用户或团队时标题为空而不是显示 id。回滚即撤本 PR。
• 先看：packages/platform-objects/src/identity/sys-team-member.object.ts 的 display_title 公式与两个 lookup 上的 relatedListColumns；identity-display-title.test.ts 新增的 sys_team_member 描述块。
• 两分钟验证：pnpm --filter @objectstack/platform-objects exec vitest run src/identity/identity-display-title.test.ts src/identity/sys-team-derived-related-lists.test.ts，预期 40 条全绿；在 main 的字节上其中 6 条红。
• 需要你做的：无，席位落地。

Fixes #30421

Clause-②: no — a platform object's shipped declaration: no exported member, accepted value or authorable key changes; what a read serves for the computed display_title changes from two ids to two names
Metadata-protocol: none — shipped platform metadata, not what a metadata author writes
Skills-docs: none — git grep -e sys_team_member -e relatedListColumns -- 'skills/**' hits skills/objectstack-data/rules/relationships.md:329,350 and skills/objectstack-ui/rules/record-page.md:22, which describe relatedListColumns in general and stay true

What changes

The card's Expected: a team page's members list shows the user plus a useful second column such as when they joined, and no column of raw ids; the same for a user page's teams list.

The seat's ruling, corrected mid-card. The order ruled the producer declaration (relatedListColumns) and ruled out a formula title that reads related titles, as a change to how formula titles compute. Measured before the change: that capability already ships (ADR-0079 addendum 2026-10-18, a formula title reads one hop through a reference), and sys_business_unit_member and sys_user_permission_set already use it; and relatedListColumns reaches only the table, while the record page's related column draws each member row titled by the record title (objectui RelatedList.tsx, compact card: getRecordDisplayName). The seat then ruled, verbatim:

席位 5 裁定 #30421：测量成立，我更正原裁定的理由。本 PR 一并修标题公式。display_title 改为经 lookup 读一跳的名字，写法与 sys_business_unit_member 一致（ADR-0079 2026-10-18 附录），这样紧凑卡片、成员记录 H1 和引用处都不再显示原始 id。lookup 读不到名字时（用户或团队已删除、无读权限），回落的写法也照 sys_business_unit_member 的现有做法，不要自造。relatedListColumns 两处保留（表格列）。

1. The record title (sys-team-member.object.ts, display_title). It was record.user_id + ' in ' + record.team_id, the two stored ids. It is now the expression sys_business_unit_member uses, with the team in place of the unit: the user's name, or their email where the name is blank, then ' in ', then the team's name, each read one hop through its lookup. Both hops are read as the reader (the engine's caller authority): a user or team the reader may not read, or one that no longer exists, leaves the title null, never an id. Neither lookup is read bare beside its hop; sys_team.name is required stored text, so there is no second hop. The field's label and description are unchanged, so no translation bundle moves. This is what the members panel in the record page's related column, a membership's own H1, and every reference to the row now show.

2. The team page's Members list (team_id lookup). A derived related list with no authored columns leads with the child's record title (ADR-0079, objectui leadWithNameField) and then its highlightFields. The reader of the relationship's columns is objectui's deriveRelatedLists (ui/packages/app-shell/src/utils/deriveRelatedLists.ts, relatedListColumns on the FK field becomes the list's columns), and RelatedList draws authored columns as written, with no name lead, dropping only the key back to the parent. team_id now declares relatedListColumns: ['user_id', 'created_at']: the list shows the user and when the membership began. Kept beside the title fix: with names, the led Title column would still repeat the User column and the team the page is about.

3. A user's Teams list (user_id lookup) declares relatedListColumns: ['team_id', 'created_at'], the ruled pair. It is latent in Setup today: sys_user_detail is an authored kind: 'full' page, which draws only the lists it names, and it names no team memberships. It applies on a user page that derives its lists.

Changeset: @objectstack/platform-objects patch, both declaration lines.

Tests

• identity-display-title.test.ts (the shared title harness): the sys_team_member row now carries the related rows the read path preloads and is titled Ada Lovelace in Core Platform, still equal to the retired template's text and never containing an id; a new describe pins that the formula reads both lookups only through the hop (team_id.name, user_id.email, user_id.name), that a blank name falls back to the email, and that a lookup carrying no related row leaves the title null (three spellings: both, either one).
• sys-team-derived-related-lists.test.ts (the shared team related-list harness): a new top-level describe pins both lookups' relatedListColumns, that neither names the record title, that every column is a field of the member row, and that neither names the key the list drops.

Acceptance notes

• Other platform join objects whose formula title reads a lookup's stored id, measured on packages/platform-objects/src/**: sys_member (USER_ID (role); both parents' pages are authored and name their columns, so no list leads with it), sys_two_factor (Two-factor for USER_ID; its parent's page is the authored sys_user_detail, which does not list it), sys_scim_projection_grant and sys_scim_group_member (no Setup navigation reaches sys_scim_user or sys_scim_group, and no authored page lists them). None is a related list a Setup page draws, so none is changed here (the order's rule); their own record titles still read ids, reported to the seat.
• The membership's title now depends on the reader: a reader who may read the membership but not the user or the team sees an empty title. That is the rule sys_business_unit_member already follows, by the seat's ruling.

Verification

All readings on head d2e37144 (the fix's five commits plus one merge of main at fdd06415, which touched no file here and none of the package's tests), except the per-step red and ablation legs, each named with its commit.

red (main's sys-team-member.object.ts restored over the tree only, tests at d2e37144):
  vitest run identity-display-title.test.ts sys-team-derived-related-lists.test.ts
  -> Tests 6 failed | 34 passed (40): the four sys_team_member title cases, both relatedListColumns cases
  restored with git checkout HEAD; blob == HEAD (39e32e6eb25e), git status clean
green (d2e37144): same two files -> Test Files 2 passed (2), Tests 40 passed (40)
ablation 1 (on f8594ce9): ablation-replace --delete "relatedListColumns: ['user_id', 'created_at'],"
  anchor x1 -> x0 -> Tests 1 failed | 6 passed (7) (the team_id case); restored, blob == HEAD, git diff HEAD empty
ablation 2 (on d2e37144): ablation-replace, the hop expression -> "record.user_id + ' in ' + record.team_id"
  anchor x1 -> x0, replacement x0 -> x1 -> Tests 4 failed | 29 passed (33); restored, blob == HEAD, git diff HEAD empty

PASS registered nameField: "display_title"
PASS registered relatedListColumns team_id: ["user_id","created_at"]
PASS registered relatedListColumns user_id: ["team_id","created_at"]
PASS write response title: "Ada Lovelace in Core Platform"
PASS findOne title: "Ada Lovelace in Core Platform"
PASS row keeps the keys: [true,true]
PASS servedRecordTitle: "Ada Lovelace in Core Platform"
PASS projected find (list Title column): [{"display_title":"Ada Lovelace in Core Platform"}]
PASS follows a team rename: "Ada Lovelace in Core Platform Team"
PASS blank name falls back to email: "grace@example.com in Core Platform Team"
PASS reader who may read both: "Ada Lovelace in Core Platform Team"
PASS reader who may not read the user: title null: null
PASS no hidden name leaks into the row: false
PASS no raw id in the title: false
MEASURE: all checks hold

@objectstack/platform-objects (d2e37144): Test Files 110 passed (110), Tests 1519 passed (1519)
@objectstack/platform-objects typecheck: exit 0 (check:test-typecheck OK, debt unchanged: 1 file / 3 errors)
suites outside the package that read sys_team_member, against this package's rebuilt dist:
  plugin-auth better-auth-schema-parity + managed-extension-fields: 58 passed
  plugin-security default-row-scope-declarations + rbac-objects + shipped-sets-identity-default-row-scope + business-unit-member-title: 191 passed
  plugin-sharing recipient-reads-complete: 16 passed
  plugin-approvals team-member-org-screen + team-position-holders-complete.integration + business-unit-holders-complete.integration: 37 passed
  runtime action-execution-destructive: 57 passed
pnpm lint (eslint . --no-inline-config): exit 0; the three changed source files re-linted on the clean tree: exit 0

Dogfood: not owed (no ! in the title, no (narrowing) arm).

Generated by Claude Code