@@ -0,0 +1,19 @@
+---
+'@object-ui/fields': patch
+'@object-ui/components': patch
+'@object-ui/app-shell': patch
+'@object-ui/cli': patch
+'@objectstack/plugin-sharing': patch
+---
+
+feat(console): the sharing-rule object picker lists only the objects a rule can take effect on, business objects first
+
+Clause-②: yes (widening) — `field:shareable-object-ref` joins `@object-ui/fields`' registered widget keys (`RegisteredFieldWidgetType`) and the console's known schema types; nothing is narrowed and no translation key is added.
+Metadata-protocol: none
+
+The object field of a new sharing rule listed every registered object, most of them platform `sys_*` objects, including ones a save refuses with `SHARING_NOT_ENABLED` and the credential and session objects. It now lists only what `GET /api/v1/sharing/shareable-objects` answers: the objects a rule saved on would take effect on, business objects first and then platform objects, each group by label, in the order the server sends.
+
+- **The widget (`@object-ui/fields`).** `field:shareable-object-ref` reads the list through the host's authenticated fetch (`SchemaRendererContext.apiFetch`) and stores the object's name, as `object-ref` does, with the same `Label (name)` spelling. A stored name the list does not hold stays on screen as its own option, so editing a rule never drops it. The read-only face is `object-ref`'s.
+- **When the list is not served.** A `403` (the caller is not a sharing-rule administrator), a `501` (sharing rules do not run on this deployment), any other failed or unreadable answer, and a host with no authenticated fetch all give the `object-ref` picker over every registered object, as before. The field is never an empty picker; the save doors still decide which object a rule may name.
+- **The declaration (`@objectstack/plugin-sharing`).** `sys_sharing_rule.object_name` declares `widget: 'shareable-object-ref'` (was `object-ref`). A console without the widget draws the field as a text box, as with any unregistered widget.
+- **The list cell, the record form and the grid.** The new key draws the same object label cell as `object-ref` (`@object-ui/app-shell`), the record form hands it the data source its fallback reads (`@object-ui/components`), and it is not edited inline in a grid cell, like the other widget-hint pickers.
@@ -17,7 +17,8 @@ import * as SharingObjects from './index.js';
  * `sys_record_share.by_object`, where the field is a pointer pair's type half.
  *
  * A field stores an object's API name when it declares the `object-ref`
- * widget (the object picker) or when it is the `referenceVia` sibling of a
+ * widget (the object picker) or `shareable-object-ref` (the sharing-rule object
+ * picker, the same stored name) or when it is the `referenceVia` sibling of a
  * pointer pair. Enumerated over every object this package ships
  * (`objects/index.ts`), so a view added later is judged without anyone
  * listing it here.
@@ -40,7 +41,7 @@ describe('sharing list views — no grouping on a field that stores an object AP
   function apiNameFields(object: ObjectDef): string[] {
     const names = new Set<string>();
     for (const [name, def] of Object.entries(object.fields)) {
-      if (def?.widget === 'object-ref') names.add(name);
+      if (def?.widget === 'object-ref' || def?.widget === 'shareable-object-ref') names.add(name);
       if (typeof def?.referenceVia === 'string') names.add(def.referenceVia);
     }
     return [...names].sort();
@@ -77,6 +78,6 @@ describe('sharing list views — no grouping on a field that stores an object AP
     expect(view?.sort?.[0]).toEqual({ field: 'object_name', order: 'asc' });
     expect(view?.columns?.[0]).toBe('object_name');
     const fields = SysSharingRule.fields as Record<string, { widget?: unknown }>;
-    expect(fields.object_name.widget).toBe('object-ref');
+    expect(fields.object_name.widget).toBe('shareable-object-ref');
   });
 });
@@ -71,7 +71,7 @@ export const SysSharingRule = ObjectSchema.create({
       columns: ['object_name', 'label', 'recipient_type', 'access_level', 'active'],
       // [#24701] Ordered by the target object, not grouped on it: a group header
       // draws `object_name` as its stored API name, while the Object cell draws
-      // the object's icon and label (its `object-ref` widget). No column stores
+      // the object's icon and label (its object-picker widget). No column stores
       // the label, so no grouping key could carry it. The sort keeps one
       // object's rules together (`sys-sharing-rule.by-object.test.ts`).
       sort: [{ field: 'object_name', order: 'asc' }, { field: 'label', order: 'asc' }],
@@ -132,10 +132,12 @@ export const SysSharingRule = ObjectSchema.create({
       label: 'Object',
       required: true,
       maxLength: 100,
-      // Rendered as an object picker (choose a registered object by name)
-      // instead of a free-text machine-name input. Falls back to a text input
-      // when the `field:object-ref` widget is unavailable.
-      widget: 'object-ref',
+      // Rendered as the sharing-rule object picker: only the objects a rule
+      // can take effect on (`GET /api/v1/sharing/shareable-objects`, the save
+      // doors' own verdict), business objects first. It is the `object-ref`
+      // picker when that door does not answer the list, and a text input when
+      // the `field:shareable-object-ref` widget is unavailable.
+      widget: 'shareable-object-ref',
       description: 'The object whose records this rule shares.',
       group: 'Target',
     }),
 
@@ -368,7 +368,7 @@ const DECLARED_BY_12130: Readonly<Record<string, readonly string[]>> = {
   // recorder sees. The effects file measures where it lands, type by type.
   className: [
     'checkboxes', 'currency', 'filter-condition', 'multiselect', 'object-ref', 'password',
-    'percent', 'radio', 'rating', 'recipient-picker', 'tags',
+    'percent', 'radio', 'rating', 'recipient-picker', 'shareable-object-ref', 'tags',
   ],
 };
 
 
@@ -175,6 +175,7 @@ export const PARAM_VALUE_SHAPES: Readonly<Record<string, ParamValueShapeSpec>> =
   // Widget-hint-only pickers — reached via a field `widget:` override, never a
   // bare param `type`. Present for total FORM_FIELD_TYPES coverage only.
   'object-ref': { base: 'string', cardinality: 'scalar', widgetHintOnly: true, note: 'Object name string. Widget-hint only — not a declarable param type.' },
+  'shareable-object-ref': { base: 'string', cardinality: 'scalar', widgetHintOnly: true, note: 'Object name string (an object a sharing rule can take effect on). Widget-hint only — not a declarable param type.' },
   'filter-condition': { base: 'object', cardinality: 'scalar', widgetHintOnly: true, note: 'Filter/criteria object. Widget-hint only — not a declarable param type.' },
   'recipient-picker': { base: 'string', cardinality: 'scalar', widgetHintOnly: true, note: 'Recipient id string. Widget-hint only — not a declarable param type.' },
   'position-ref': { base: 'string', cardinality: 'scalar', widgetHintOnly: true, note: 'Position name string. Widget-hint only — not a declarable param type.' },
 
@@ -47,4 +47,6 @@ export function RecipientCell(props: CellRendererProps) {
 }
 
 registerFieldRenderer('object-ref', ObjectRefCell);
+// The sharing-rule object picker stores an object name too: the same face.
+registerFieldRenderer('shareable-object-ref', ObjectRefCell);
 registerFieldRenderer('recipient-picker', RecipientCell);
@@ -163,6 +163,7 @@ export const KNOWN_SCHEMA_TYPES: readonly string[] = [
   'field:recipient-picker',
   'field:richtext',
   'field:select',
+  'field:shareable-object-ref',
   'field:signature',
   'field:slider',
   'field:summary',
 
@@ -740,6 +740,9 @@ function reportUnrecognizedRulesOnce(fieldName: string, unrecognized: string[]):
  */
 const DATA_SOURCE_ONLY_WIDGET_TYPES = new Set([
   'object-ref', 'filter-condition', 'recipient-picker',
+  // The sharing-rule object picker is `object-ref` when its door does not
+  // answer, and that list is read through `dataSource.getObjects`.
+  'shareable-object-ref',
   // objectui#7611: the registry-name pickers read their catalog through
   // `dataSource.listMetadataItems`.
   'position-ref', 'permission-ref',
 
@@ -188,7 +188,7 @@ export const INLINE_EXCLUDED_FIELD_TYPES = new Set<string>([
   'object', 'grid', 'vector',
   // Widget-hint-only pickers — authored in the record form (they depend on
   // sibling fields / a loaded object catalog), not inline in a grid cell.
-  'object-ref', 'filter-condition', 'recipient-picker',
+  'object-ref', 'shareable-object-ref', 'filter-condition', 'recipient-picker',
   'position-ref', 'permission-ref',
   'notification-topic', 'notification-channel',
 ]);
 
@@ -297,6 +297,9 @@ const OBJECT_LITERAL_CENSUS: ReadonlyArray<readonly [type: string, text: string,
   // the text cell's face for it, exactly as `text` does.
   ['object-ref', '[Object]', false],
   ['recipient-picker', '[Object]', false],
+  // objectstack#31217: the sharing-rule object picker's key, the same default
+  // text face as `object-ref`.
+  ['shareable-object-ref', '[Object]', false],
   // ── objectstack#27861: the registry-name read faces ─────────────────────
   // `{}` names no item, so nothing is asked and both draw the text cell's
   // face for it, exactly as `text` does.
@@ -364,6 +367,7 @@ const POPULATED_CENSUS: ReadonlyArray<readonly [type: string, value: unknown]> =
   ['grid', [[1]]],
   ['record_pointer_card', { objectName: 'invoice', recordId: 'inv_1' }],
   ['object-ref', 'crm_account'],
+  ['shareable-object-ref', 'crm_account'],
   ['recipient-picker', 'sales_manager'],
   ['position-ref', 'sales_manager'],
   ['permission-ref', 'admin_full_access'],
Original file line number	Diff line number	Diff line change
`@@ -47,4 +47,6 @@ export function RecipientCell(props: CellRendererProps) {`
`47`	`47`	`}`
`48`	`48`
`49`	`49`	`registerFieldRenderer('object-ref', ObjectRefCell);`
	`50`	`+// The sharing-rule object picker stores an object name too: the same face.`
	`51`	`+registerFieldRenderer('shareable-object-ref', ObjectRefCell);`
`50`	`52`	`registerFieldRenderer('recipient-picker', RecipientCell);`