fix: preserve account access compatibility

docs/api/openapi.yaml

@@ -36712,12 +36712,20 @@ components:
             banner can name the person without joining two fields. Null when the caller is in their own record, and
             ALWAYS null on the Bearer transport: a token carries its selector per request and this endpoint refuses
             one."
+        recordKind:
+          type: string
+          enum:
+            - self
+            - shared
+            - managed
+          description: The server-resolved kind of the record currently in view. `self` applies when `active` is null.
         canSwitch:
           type: boolean
           description: Whether there is anywhere to switch to. Bind it directly.
       required:
         - accounts
         - active
+        - recordKind
         - canSwitch
       additionalProperties: false
       description: "Account sharing, resolved. This block is the ONLY source of switchability and writability: the server
@@ -36743,9 +36751,8 @@ components:
           enum:
             - read
             - write
-            - manage
-          description: The grant's resolved level, under the name v1.36.0 published. Identical to `level` — both come from one
-            server-side expression — and kept because shipped clients read it. New code reads `level`.
+          description: The legacy grant level that shipped clients decode. MANAGE serializes as `write` here; new code reads
+            canonical `level`.
         level:
           type: string
           enum:
@@ -36755,6 +36762,13 @@ components:
           description: The grant's resolved level. `manage` additionally admits changing and removing entries on the delegable
             surfaces; it never reaches the identity surfaces (settings, connections, tokens, consent, grant management),
             which stay refused on an invited record at every level. Render it; never derive it from `canWrite`.
+        recordKind:
+          type: string
+          enum:
+            - self
+            - shared
+            - managed
+          description: Server-resolved presentation metadata for the record. It is never accepted as an authorization input.
         sections:
           anyOf:
             - type: array
@@ -36778,6 +36792,7 @@ components:
         - displayName
         - access
         - level
+        - recordKind
         - sections
         - canWrite
       additionalProperties: false