Share or Unshare Artifact

Grants and revokes access in one all-or-nothing call. Granting needs the Artifacts User permission (artifacts:create) and stays within the sharer’s sharing restrictions, set on the Members page: the member’s own restriction, else the most permissive of their teams’, else the defaults (organization, workspace and teams on; public off). Targets: {type: user, user_id|email} (a person of this workspace needs the workspace level; a person from another workspace of the same organization needs the organization level, which exists only when the workspace belongs to one), {type: team, team_id} (only a team the sharer belongs to), {type: workspace}, {type: public}. The first grant publishes the head when nothing is shared yet. public (anyone with the link) opens for any signed-in Tess user, from any organization; anonymous visitors are sent to login first.