test(metadata-protocol): author the OWD on every active-state object fixture

Re-measured today through the publish gate's call site: 56 active object
writes across 10 test files, every one of which security-owd-unset would
refuse once #8310 declares 'object' in runtimeTypes (up from PR #7886's
26/8 — the suite grew). Each fixture now authors sharingModel: 'private',
so the suite passes both before and after the #8310 flip.

Part of #8308.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Euoy6wyfzgiWtgCg4s6JK2

Author: claude

packages/metadata-protocol/src/protocol-publish-drafts-endpoint-gate.test.ts

@@ -218,6 +218,9 @@ const validEndpoint = (over: Record<string, unknown> = {}) => ({
 const objectBody = (name: string) => ({
     name,
     label: 'Thing',
+    // [#8308] Authored OWD: the publish gate refuses an OWD-less custom object
+    // (`security-owd-unset`) once #8310 declares `object` in `runtimeTypes`.
+    sharingModel: 'private',
     fields: { title: { type: 'text', label: 'Title' } },
 });
 

packages/metadata-protocol/src/protocol-publish-drafts-org-scope.test.ts

@@ -183,6 +183,9 @@ function makeStubEngine() {
 const objectBody = (name: string) => ({
     name,
     label: 'Project Task',
+    // [#8308] Authored OWD: the publish gate refuses an OWD-less custom object
+    // (`security-owd-unset`) once #8310 declares `object` in `runtimeTypes`.
+    sharingModel: 'private',
     fields: {
         title: { type: 'text', label: 'Title' },
         done: { type: 'boolean', label: 'Done' },

packages/metadata-protocol/src/protocol.audit-field-governance.test.ts

@@ -133,6 +133,9 @@ function makeStubEngine() {
 const artifactObject = (name: string) => ({
     name,
     label: 'Invoice',
+    // [#8308] Authored OWD: the publish gate refuses an OWD-less custom object
+    // (`security-owd-unset`) once #8310 declares `object` in `runtimeTypes`.
+    sharingModel: 'private',
     fields: {
         amount: { type: 'currency', label: 'Amount' },
         created_at: {

packages/metadata-protocol/src/protocol.injected-system-columns.test.ts

@@ -136,6 +136,9 @@ const storedBody = (rows: Map<string, Row>, name: string) =>
 const authored = (name: string) => ({
     name,
     label: 'Invoice',
+    // [#8308] Authored OWD: the publish gate refuses an OWD-less custom object
+    // (`security-owd-unset`) once #8310 declares `object` in `runtimeTypes`.
+    sharingModel: 'private',
     fields: { amount: { type: 'currency', label: 'Amount' } },
 });
 

packages/metadata-protocol/src/protocol.org-scoped-write-refused.test.ts

@@ -240,6 +240,11 @@ async function seedLegacyOrgDraft(
 const OBJECT = {
     name: 'org_widget',
     label: 'Org Widget',
+    // [#8308] Authored OWD. This file pins the NOT_OVERRIDABLE org-scope
+    // refusal, and the authoring gate runs BEFORE it — an OWD-less body would
+    // swap the observed refusal for `security-owd-unset` 422 once #8310
+    // declares `object` in `runtimeTypes`.
+    sharingModel: 'private',
     fields: { title: { type: 'text', label: 'Title' } },
 };
 

packages/metadata-protocol/src/protocol.read-decorations.test.ts

@@ -118,6 +118,9 @@ const storedBody = (rows: Map<string, Row>, name: string) => {
 const objectBody = (name: string) => ({
     name,
     label: 'Invoice',
+    // [#8308] Authored OWD: the publish gate refuses an OWD-less custom object
+    // (`security-owd-unset`) once #8310 declares `object` in `runtimeTypes`.
+    sharingModel: 'private',
     fields: { amount: { type: 'currency', label: 'Amount' } },
 });
 

packages/metadata-protocol/src/protocol.runtime-authoring-gate.test.ts

@@ -325,13 +325,20 @@ describe('runtime authoring gate on saveMetaItem (#4463)', () => {
         // `object` writes are deliberately outside P1 — see the registry's
         // RUNTIME_OBJECT_WRITES_P2 reason. A type nobody declared must pass
         // through untouched rather than be silently half-checked.
+        //
+        // [#8308] The body carries an authored `sharingModel` so this write is
+        // ALSO clean on the gated side: it succeeds today because nothing runs,
+        // and keeps succeeding when #8310 declares `object` in `runtimeTypes`
+        // (at which point this case's "no rule declares" premise ends — #8310
+        // owns re-pinning what this test asserts).
         const { protocol } = makeProtocol();
         const result = await protocol.saveMetaItem({
             type: 'object',
             name: 'leave_request',
             item: {
                 name: 'leave_request',
                 label: 'Leave Request',
+                sharingModel: 'private',
                 fields: { owner: { type: 'text', label: 'Owner' } },
             },
         });

packages/metadata-protocol/src/protocol.save-receipt-wording.test.ts

@@ -121,6 +121,11 @@ const OVERLAYLESS_PROBES: Record<string, Record<string, unknown>> = {
     object: {
         name: 'rc5_acct',
         label: 'Account',
+        // [#8308] Authored OWD: the publish gate refuses an OWD-less custom
+        // object (`security-owd-unset`) once #8310 declares `object` in
+        // `runtimeTypes` — and this probe pins the RECEIPT wording, not that
+        // refusal.
+        sharingModel: 'private',
         fields: { name: { type: 'text', label: 'Name' } },
     },
     hook: { name: 'rc5_acct', object: 'task', events: ['beforeUpdate'] },

packages/metadata-protocol/src/sys-metadata-repository.package-writability.test.ts

@@ -155,7 +155,10 @@ function makeFakeEngine() {
   };
 }
 
-const objectBody = { name: 'showcase_task', label: 'Task', fields: { name: { type: 'text', label: 'Name' } } };
+// [#8308] `sharingModel` authored: the publish gate refuses an OWD-less custom
+// object (`security-owd-unset`) once #8310 declares `object` in `runtimeTypes`,
+// and this file pins the package-writability refusals, not that one.
+const objectBody = { name: 'showcase_task', label: 'Task', sharingModel: 'private', fields: { name: { type: 'text', label: 'Name' } } };
 
 /**
  * `put` with everything but the base fixed, so each case differs in ONE way.

packages/metadata-protocol/src/view-container-runtime-expansion.test.ts

@@ -227,7 +227,10 @@ describe('#7736 a runtime-authored view container is served', () => {
             const { engine, rows } = makeStubEngine();
             const protocol = new ObjectStackProtocolImplementation(engine);
 
-            const authored = { name: 'crm_invoice', label: 'Invoice', fields: { amount: { type: 'currency', label: 'Amount' } } };
+            // [#8308] `sharingModel` authored: the publish gate refuses an
+            // OWD-less custom object once #8310 declares `object` in
+            // `runtimeTypes`; this case pins byte-identical storage, not that.
+            const authored = { name: 'crm_invoice', label: 'Invoice', sharingModel: 'private', fields: { amount: { type: 'currency', label: 'Amount' } } };
             await protocol.saveMetaItem({ type: 'object', name: 'crm_invoice', item: authored });
 
             const stored = Array.from(rows.values()).find((r) => r.name === 'crm_invoice')!;