@almadar/std 16.235.0 → 16.236.0

package/behaviors/lolo/ui/core/atoms/std-selection.lolo

@@ -1,6 +1,7 @@
 app std-selection "1.0.0"
 "std-selection as a Function"
 type FilterSpec = { field : string!, label : string, options : [string] }
+type ItemAction = { label : string!, event : event, icon : string, roles : [string], when : SExpr }
 orbital SelectableItemOrbital {
     type SelectableItemLoaded = Event { data : [SelectableItem] } "Fired when SelectableItem finishes loading; payload.data holds the list"
 
@@ -86,11 +87,7 @@ orbital SelectableItemOrbital {
             className: "transition-shadow hover:shadow-md cursor-pointer"
             entity: ?data
             fields: []
-            itemActions: [{
-              event: SELECT
-              icon: check
-              label: Select
-            }]
+            itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
             look: @config.tableLook
             pageSize: @config.displayPageSize
             renderItem: (fn item {
@@ -220,11 +217,7 @@ orbital SelectableItemOrbital {
             className: "transition-shadow hover:shadow-md cursor-pointer"
             entity: ?data
             fields: []
-            itemActions: [{
-              event: SELECT
-              icon: check
-              label: Select
-            }]
+            itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
             look: @config.tableLook
             pageSize: @config.displayPageSize
             renderItem: (fn item {
@@ -467,6 +460,18 @@ orbital SelectableItemOrbital {
         @description "Rows visible per page before the data-grid's own pagination control appears — 20 matches the pick-list density sweet spot (Miller's law, 10-25 rows)."
         @synonyms "visible rows, items per page, display limit, show per page"
         @tier "presentation"
+      itemActions : [ItemAction] = [{
+        event: SELECT
+        icon: check
+        label: Select
+      }]
+        @label "Row actions"
+        @description "Actions offered on each row; give an item `roles` to show it only to those viewer roles."
+        @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/atoms/std-stats.lolo

@@ -115,7 +115,7 @@ orbital StatsItemOrbital {
         @description "One stat card per entry; declares aggregation, format, and styling"
         @synonyms "list of KPI cards / stat tiles / metric cards. each entry has label / value / format / icon / variant / aggregation. user phrases: 'replace metrics with X, Y, Z' -> rewrite array; 'add Revenue tile' -> append entry; 'change KPIs to X' -> rewrite array"
         @tier "presentation"
-      title : string = Summary
+      title : string = ""
         @label "Section title"
         @description "Heading shown above the stat-card grid"
         @synonyms "the section header text. user phrases: 'rename section to X' / 'title the KPIs X' / 'change section title to X' -> X"
@@ -137,7 +137,7 @@ orbital StatsItemOrbital {
         @label "Stats look"
         @description "Layer 3 body layout: default per-metric stat-card grid ('cards'), Stripe-dashboard KPI tile row ('kpi-tiles'), single oversize hero number ('hero-metric'), or chart-first sparkline tile grid ('sparkline-row')."
         @tier "presentation"
-      bodyContent : render-ui = { data-theme: @config.theme, type: box, children: [{
+      bodyContent : render-ui = { data-theme: @config.theme, type: box, children: [(if ["!=", @config.title, ""] { content: @config.title, type: typography, variant: h3 } { children: [], gap: none, type: stack }), {
         entity: @entity.cards
         fields: []
         renderItem: (fn card {
@@ -163,7 +163,7 @@ orbital StatsItemOrbital {
         @label "Body content tree"
         @description "Render-ui SExpr rendered after metrics aggregate for statsLook='cards' — the canonical data-grid call mapping @entity.cards through stat-display. Other statsLook values render kpiTilesBodyContent / heroMetricBodyContent / sparklineRowBodyContent instead; all four share this trait's state machine, aggregation pipeline, and listens."
         @tier "internal"
-      kpiTilesBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [{
+      kpiTilesBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [(if ["!=", @config.title, ""] { content: @config.title, type: typography, variant: h3 } { children: [], gap: none, type: stack }), {
         className: w-full
         entity: @entity.cards
         fields: []
@@ -239,7 +239,7 @@ orbital StatsItemOrbital {
         @label "KPI tiles body content tree"
         @description "Render-ui SExpr for statsLook='kpi-tiles' — Stripe-dashboard style tile grid: huge typography number, label, trend indicator, sparkline hint."
         @tier "internal"
-      heroMetricBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [{
+      heroMetricBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [(if ["!=", @config.title, ""] { content: @config.title, type: typography, variant: h3 } { children: [], gap: none, type: stack }), {
         entity: @entity.cards
         fields: []
         gap: none
@@ -324,7 +324,7 @@ orbital StatsItemOrbital {
         @label "Hero metric body content tree"
         @description "Render-ui SExpr for statsLook='hero-metric' — one elevated card, one oversize number, background sparkline."
         @tier "internal"
-      sparklineRowBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [{
+      sparklineRowBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [(if ["!=", @config.title, ""] { content: @config.title, type: typography, variant: h3 } { children: [], gap: none, type: stack }), {
         className: w-full
         entity: @entity.cards
         fields: []

package/behaviors/lolo/ui/core/atoms/std-tag-taxonomy.lolo

@@ -126,6 +126,7 @@ orbital TagTaxonomyOrbital {
               padding: sm
               type: card
             })
+            look: @config.tableLook
             type: data-grid
           }]
           direction: vertical
@@ -278,6 +279,7 @@ orbital TagTaxonomyOrbital {
               padding: sm
               type: card
             })
+            look: @config.tableLook
             type: data-grid
           }]
           direction: vertical
@@ -490,6 +492,7 @@ orbital TagTaxonomyOrbital {
               padding: sm
               type: card
             })
+            look: @config.tableLook
             type: data-grid
           }]
           direction: vertical

package/behaviors/lolo/ui/core/atoms/std-thread.lolo

@@ -1,6 +1,11 @@
 app std-thread "1.3.0"
-"std-thread — forum-style nested replies with collapse + flat-mode toggle. Owns ThreadPost (persistent). flat:true covers 1:1 linear inquiry threads; flat:false renders forum-style nested. INIT fetches, scoped by @config.threadRootId when set (blank = every root, the default). REPLY persists a child post under @payload.parentId, stamped with the real @user identity. A consumer that mounts this as page comments forwards its own document-opened signal to SET_THREAD_ROOT { rootId }, which stamps @entity.replyRootId (scratch — the persisted threadRootId column is written only by the reply persist create) and refetches filtered by the payload; a plain INIT re-entry now also falls back through @entity.replyRootId before @config.threadRootId, so it stays scoped to the last SET_THREAD_ROOT instead of re-widening — only the after-create/after-select refetches still scope directly off their own event payload. Layer 3 variants override `bodyContent` to deliver chat-bubble, email-threaded, or linear-comments UX while inheriting the same trait, state machine, emits, and listens. A non-empty sectionTitle switches the default bodyContent into titled-comments mode: header + post list + a standalone composer button (without it an empty thread has no REPLY emitter at all — the affordance only existed per-row)."
+"std-thread — forum-style nested replies with collapse. Owns ThreadPost (persistent). INIT fetches, scoped by @config.threadRootId when set (blank = every root, the default). REPLY persists a child post under @payload.parentId, stamped with the real @user identity. A consumer that mounts this as page comments forwards its own document-opened signal to SET_THREAD_ROOT { rootId }, which stamps @entity.replyRootId (scratch — the persisted threadRootId column is written only by the reply persist create) and refetches filtered by the payload; a plain INIT re-entry now also falls back through @entity.replyRootId before @config.threadRootId, so it stays scoped to the last SET_THREAD_ROOT instead of re-widening — only the after-create/after-select refetches still scope directly off their own event payload. Layer 3 variants override `bodyContent` to deliver chat-bubble, email-threaded, or linear-comments UX while inheriting the same trait, state machine, emits, and listens. A non-empty sectionTitle switches the default bodyContent into titled-comments mode: header + post list + a standalone composer button (without it an empty thread has no REPLY emitter at all — the affordance only existed per-row)."
+type ItemAction = { label : string!, event : event, icon : string, roles : [string], when : SExpr }
 orbital ThreadPostOrbital {
+  uses RoleGate from "std/behaviors/std-role-gate"
+
+  uses Button from "std/behaviors/ui-button"
+
   ;; Forward relation: array of child ThreadPost IDs whose parentId === this.id.
   ;; Lowers to `type: "relation", cardinality: "many"` (orbital-lolo lower.rs).
   ;; @rebindable rewrites the target to the rebound entity in variant atoms.
@@ -381,10 +386,6 @@ orbital ThreadPostOrbital {
     }
 
     config {
-      flat : boolean = false
-        @label "Flat thread"
-        @description "Render replies as a linear list instead of nested tree"
-        @tier "presentation"
       threadRootId : string = ""
         @label "Root post id"
         @description "Top-level post whose descendants are loaded, filters every fetch and defaults new top-level replies' threadRootId (blank = all roots, unfiltered)"
@@ -394,10 +395,6 @@ orbital ThreadPostOrbital {
         @label "Table look"
         @description "Layer 2 visual treatment for the data table rendered by this atom."
         @tier "presentation"
-      recipientName : string = Conversation
-        @label "recipientName"
-        @description "Header/recipient label for chat-style threads."
-        @tier "presentation"
       sectionTitle : string = ""
         @label "sectionTitle"
         @description "Section header rendered by the default bodyContent when non-empty, along with a standalone composer button — the only REPLY affordance an empty thread has. Blank (the default) keeps the bare post list for embedded threads that bring their own chrome (chat rails, custom comment sections)."
@@ -408,58 +405,6 @@ orbital ThreadPostOrbital {
         @description "Label of the standalone composer button rendered under the post list when sectionTitle is non-empty."
         @synonyms "reply label, comment button, add comment"
         @tier "presentation"
-      emailAuthorBinding : string = @item.authorName
-        @label "emailAuthorBinding"
-        @description "List-pane binding for the message author."
-        @tier "presentation"
-      emailSubjectBinding : string = @item.subject
-        @label "emailSubjectBinding"
-        @description "List-pane binding for the message subject."
-        @tier "presentation"
-      emailPreviewBinding : string = @item.preview
-        @label "emailPreviewBinding"
-        @description "List-pane binding for the message preview text."
-        @tier "presentation"
-      detailSubjectBinding : string = @entity.focusedRow.subject
-        @label "detailSubjectBinding"
-        @description "Detail-pane binding for the focused message subject."
-        @tier "presentation"
-      detailAuthorBinding : string = @entity.focusedRow.authorName
-        @label "detailAuthorBinding"
-        @description "Detail-pane binding for the focused message author."
-        @tier "presentation"
-      detailFromBinding : string = @entity.focusedRow.fromAddress
-        @label "detailFromBinding"
-        @description "Detail-pane binding for the From address."
-        @tier "presentation"
-      detailToBinding : string = @entity.focusedRow.toAddress
-        @label "detailToBinding"
-        @description "Detail-pane binding for the To address."
-        @tier "presentation"
-      detailDateBinding : string = @entity.focusedRow.createdAt
-        @label "detailDateBinding"
-        @description "Detail-pane binding for the timestamp."
-        @tier "presentation"
-      detailContentBinding : string = @entity.focusedRow.content
-        @label "detailContentBinding"
-        @description "Detail-pane binding for the message body."
-        @tier "presentation"
-      replyAuthorBinding : string = @reply.authorName
-        @label "replyAuthorBinding"
-        @description "Reply binding for the reply author."
-        @tier "presentation"
-      replyFromBinding : string = @reply.fromAddress
-        @label "replyFromBinding"
-        @description "Reply binding for the reply From address."
-        @tier "presentation"
-      replyDateBinding : string = @reply.createdAt
-        @label "replyDateBinding"
-        @description "Reply binding for the reply timestamp."
-        @tier "presentation"
-      replyContentBinding : string = @reply.content
-        @label "replyContentBinding"
-        @description "Reply binding for the reply body."
-        @tier "presentation"
       bodyContent : render-ui = {
         children: [(if ["!=", @config.sectionTitle, ""] {
           content: @config.sectionTitle
@@ -485,21 +430,11 @@ orbital ThreadPostOrbital {
             variant: caption
           }]
           gap: sm
-          itemActions: [{
-            event: REPLY
-            icon: message-square
-            label: Reply
-          }]
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           look: @config.tableLook
           type: data-list
           variant: card
-        }, (if ["!=", @config.sectionTitle, ""] {
-          action: REPLY
-          icon: message-square
-          label: @config.composerLabel
-          type: button
-          variant: secondary
-        } {
+        }, (if ["!=", @config.sectionTitle, ""] <trait.ThreadReplyGate /> {
           children: []
           gap: none
           type: stack
@@ -511,6 +446,39 @@ orbital ThreadPostOrbital {
         @label "Body content tree"
         @description "Render-ui SExpr rendered after thread posts load. Default is the canonical forum-style data-list. Layer 3 variants override this with their own tree (chat bubbles, email-threaded cards, linear comment stacks, etc.) to deliver entirely different thread UX while inheriting the same trait, state machine, emits, and listens."
         @tier "internal"
+      itemActions : [ItemAction] = [{
+        event: REPLY
+        icon: message-square
+        label: Reply
+      }]
+        @label "Row actions"
+        @description "Actions offered on each row; give an item `roles` to show it only to those viewer roles."
+        @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
+      replyRoles : [string] = []
+        @label "Roles that can reply"
+        @description "Roles (matched against viewerRole) that see the thread's Reply button. Empty = everyone."
+        @tier "policy"
+    }
+  }
+
+  trait ThreadReplyButton = Button.traits.ButtonRender {
+    config {
+      action: REPLY
+      icon: message-square
+      label: @config.composerLabel
+      variant: secondary
+    }
+  }
+
+  trait ThreadReplyGate = RoleGate.traits.RoleGate {
+    config {
+      roles: @config.replyRoles
+      viewerRole: @config.viewerRole
+      content: <trait.ThreadReplyButton />
     }
   }
 

package/behaviors/lolo/ui/core/atoms/std-version-history.lolo

@@ -1,5 +1,6 @@
 app std-version-history "1.0.0"
 "std-version-history — wiki/CMS revision history with diff + rollback. Browses revisions; opens detail in `viewing_single`; compares the opened revision with the newest in `comparing`; Rollback emits RevisionRolledBack { row } for the consumer to restore onto its source document. `RevisionManage` is a rebindable single-entity trait: a consumer rebinds it to its own entity via `linkedEntity`. `config.scopeField` names the Revision field holding the parent document id; a page-mounted `{id}` route param scopes INIT's own fetch, and a consumer forwards SHOW_HISTORY { key } (via a `listens` override) to rescope the feed to one document — empty scopeField (default) or no id keeps today's unfiltered global feed. Rollback and retry refetches stay scoped."
+type ItemAction = { label : string!, event : event, variant : string, icon : string, roles : [string], when : SExpr }
 orbital RevisionOrbital {
     type RevisionLoaded = Event { data : [Revision] } "Fired when the revision collection finishes loading"
 
@@ -79,17 +80,7 @@ orbital RevisionOrbital {
               variant: caption
             }]
             gap: sm
-            itemActions: [{
-              event: OPEN_REVISION
-              icon: arrow-right
-              label: Open
-              variant: ghost
-            }, {
-              event: ROLLBACK
-              icon: rotate-ccw
-              label: Rollback
-              variant: danger
-            }]
+            itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
             look: @config.tableLook
             type: data-grid
           }]
@@ -600,6 +591,24 @@ orbital RevisionOrbital {
         @label "Scope field"
         @description "Revision entity field holding the parent document's id. When set, a page-mounted {id} route param scopes INIT's fetch, and a SHOW_HISTORY { key } event rescopes the feed, to rows whose scopeField equals the id/key; rollback and retry refetches stay scoped too. Empty (default) or no id = unfiltered global feed, unchanged from prior behavior."
         @tier "domain"
+      itemActions : [ItemAction] = [{
+        event: OPEN_REVISION
+        icon: arrow-right
+        label: Open
+        variant: ghost
+      }, {
+        event: ROLLBACK
+        icon: rotate-ccw
+        label: Rollback
+        variant: danger
+      }]
+        @label "Row actions"
+        @description "Actions offered on each row; give an item `roles` to show it only to those viewer roles."
+        @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/atoms/std-vote.lolo

@@ -235,10 +235,6 @@ orbital VoteOrbital {
     }
 
     config {
-      allowDown : boolean = true
-        @label "Allow downvotes"
-        @description "Show the downvote arrow alongside the upvote"
-        @tier "domain"
     }
   }
 

package/behaviors/lolo/ui/core/atoms/std-wizard.lolo

@@ -109,7 +109,7 @@ orbital WizardOrbital {
               }, { type: divider }, {
                 cancelEvent: CANCEL
                 entity: @entity
-                fields: @entity.currentFields
+                fields: (array/map @entity.currentFields (fn f { name: @f }))
                 mode: edit
                 showCancel: false
                 showSubmit: false
@@ -232,7 +232,7 @@ orbital WizardOrbital {
               }, { type: divider }, {
                 cancelEvent: CANCEL
                 entity: @entity
-                fields: @entity.currentFields
+                fields: (array/map @entity.currentFields (fn f { name: @f }))
                 mode: edit
                 showCancel: false
                 showSubmit: false
@@ -368,7 +368,7 @@ orbital WizardOrbital {
               }, { type: divider }, {
                 cancelEvent: CANCEL
                 entity: @entity
-                fields: @entity.currentFields
+                fields: (array/map @entity.currentFields (fn f { name: @f }))
                 mode: edit
                 showCancel: false
                 showSubmit: false

package/behaviors/lolo/ui/core/atoms/ui-presence.lolo

@@ -12,6 +12,9 @@ orbital PresenceOrbital {
     state idle {
       INIT -> idle
         (render-ui main {
+          animation: @config.animation
+          animate: @config.animate
+          onExited: @config.onExited
           show: @config.show
           className: @config.className
           children: @config.children
@@ -19,7 +22,25 @@ orbital PresenceOrbital {
         })
     }
 
+    emits {
+      @config.onExited -> external { }
+        @description "Fired after the exit animation completes (before unmount)."
+        @tier "essential"
+    }
+
     config {
+      animation : "modal" | "overlay" | "slide-up" | "drawer" | "popover" | "toast" | "fade" | "page" = modal
+        @label "Animation"
+        @description "Which motion preset to use (maps to `animate-<name>-in/out`)."
+        @tier "presentation"
+      animate : boolean
+        @label "Animate"
+        @description "Per-instance opt-out. Global opt-out is `--motion-enable` / reduced-motion. @default true"
+        @tier "presentation"
+      onExited : event = "EXITED"
+        @label "On Exited"
+        @description "Fired after the exit animation completes (before unmount)."
+        @tier "presentation"
       show : boolean = false
         @label "Show"
         @description "When false, the exit animation runs, then children unmount."

package/behaviors/lolo/ui/core/molecules/ui-breadcrumb.lolo

@@ -9,6 +9,7 @@ orbital BreadcrumbOrbital {
     icon : icon
     isCurrent : boolean
     event : event
+    roles : [string]
   }
 
   entity BreadcrumbItem [runtime] {
@@ -21,7 +22,7 @@ orbital BreadcrumbOrbital {
     state idle {
       INIT -> idle
         (render-ui main {
-          items: @config.items
+          items: (array/filter @config.items (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           fromNavStack: @config.fromNavStack
           itemEvent: @config.itemEvent
           separator: @config.separator
@@ -66,6 +67,10 @@ orbital BreadcrumbOrbital {
         @label "Class Name"
         @description "Additional CSS classes"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-chart.lolo

@@ -30,6 +30,7 @@ orbital ChartOrbital {
     event : event
     navigatesTo : string
     variant : "primary" | "secondary" | "ghost"
+    roles : [string]
   }
   type ChartError = {
     message : string!
@@ -60,8 +61,9 @@ orbital ChartOrbital {
           showValues: @config.showValues
           stack: @config.stack
           timeAxis: @config.timeAxis
+          period: @config.period
           drillEvent: @config.drillEvent
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           className: @config.className
@@ -120,6 +122,10 @@ orbital ChartOrbital {
         @label "Time Axis"
         @description "Format X-axis labels as time (ISO date in → 'Mar 2026'-style label out)"
         @tier "presentation"
+      period : "day" | "week" | "month" | "quarter" | "year" = day
+        @label "Period"
+        @description "Bucket granularity of a time axis — labels read 'Oct 2', 'Week of Sep 28', 'Oct 2026', 'Q4 2026' or '2026'"
+        @tier "presentation"
       drillEvent : string
         @label "Drill Event"
         @description "Event name emitted as `UI:{drillEvent}` with `{ label, value, seriesLabel? }` on data-point click"
@@ -140,6 +146,10 @@ orbital ChartOrbital {
         @label "Class Name"
         @description "Additional CSS classes"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-code-block.lolo

@@ -18,6 +18,7 @@ orbital CodeBlockOrbital {
     event : event
     navigatesTo : string
     variant : "primary" | "secondary" | "ghost"
+    roles : [string]
   }
   type CodeBlockError = {
     message : string!
@@ -66,7 +67,7 @@ orbital CodeBlockOrbital {
           showLineNumbers: @config.showLineNumbers
           wordWrap: @config.wordWrap
           files: @config.files
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           showCopy: @config.showCopy
@@ -106,7 +107,7 @@ orbital CodeBlockOrbital {
           showLineNumbers: @config.showLineNumbers
           wordWrap: @config.wordWrap
           files: @config.files
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           showCopy: @config.showCopy
@@ -146,7 +147,7 @@ orbital CodeBlockOrbital {
           showLineNumbers: @config.showLineNumbers
           wordWrap: @config.wordWrap
           files: @config.files
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           showCopy: @config.showCopy
@@ -186,7 +187,7 @@ orbital CodeBlockOrbital {
           showLineNumbers: @config.showLineNumbers
           wordWrap: @config.wordWrap
           files: @config.files
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           showCopy: @config.showCopy
@@ -226,7 +227,7 @@ orbital CodeBlockOrbital {
           showLineNumbers: @config.showLineNumbers
           wordWrap: @config.wordWrap
           files: @config.files
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           showCopy: @config.showCopy
@@ -266,7 +267,7 @@ orbital CodeBlockOrbital {
           showLineNumbers: @config.showLineNumbers
           wordWrap: @config.wordWrap
           files: @config.files
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           showCopy: @config.showCopy
@@ -306,7 +307,7 @@ orbital CodeBlockOrbital {
           showLineNumbers: @config.showLineNumbers
           wordWrap: @config.wordWrap
           files: @config.files
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           showCopy: @config.showCopy
@@ -346,7 +347,7 @@ orbital CodeBlockOrbital {
           showLineNumbers: @config.showLineNumbers
           wordWrap: @config.wordWrap
           files: @config.files
-          actions: @config.actions
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           isLoading: @config.isLoading
           error: @config.error
           showCopy: @config.showCopy
@@ -564,6 +565,10 @@ orbital CodeBlockOrbital {
         @label "Line Numbers"
         @description "Editable only: number the lines in a gutter (lines with errors in red). Default on."
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-command-palette.lolo

@@ -13,6 +13,7 @@ orbital CommandPaletteOrbital {
     event : event
     action : event
     actionPayload : @payload action
+    roles : [string]
   }
   type CommandPaletteSELECTCommand = {
     id : string!
@@ -41,7 +42,7 @@ orbital CommandPaletteOrbital {
         (render-ui main {
           open: @entity.open
           onOpenChange: @config.onOpenChange
-          commands: @config.commands
+          commands: (array/filter @config.commands (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           onSelect: @config.onSelect
           placeholder: @config.placeholder
           emptyLabel: @config.emptyLabel
@@ -53,7 +54,7 @@ orbital CommandPaletteOrbital {
         (render-ui main {
           open: @entity.open
           onOpenChange: @config.onOpenChange
-          commands: @config.commands
+          commands: (array/filter @config.commands (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           onSelect: @config.onSelect
           placeholder: @config.placeholder
           emptyLabel: @config.emptyLabel
@@ -110,6 +111,10 @@ orbital CommandPaletteOrbital {
         @label "Class Name"
         @description "Additional CSS classes on the overlay's dialog"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The viewer's role that each action's `roles` is checked against; bind it at the call site (e.g. `viewerRole: @user.role`). Empty = only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/molecules/ui-commit-row.lolo

@@ -104,9 +104,9 @@ orbital CommitRowOrbital {
         @label "Timestamp"
         @description "Display time (already formatted, e.g. '2 min ago')."
         @tier "presentation"
-      kind : "user" | "agent" | "restore" | "undo" | "redo" | "snapshot" = user
+      kind : "user" | "agent" | "restore" | "undo" | "redo" | "snapshot" | "merge" = user
         @label "Kind"
-        @description "What made this version (a user save, an agent turn, a restore, an undo/redo, a snapshot)."
+        @description "What made this version (a user save, an agent turn, a restore, an undo/redo, a snapshot, a merge of a teammate's work)."
         @tier "presentation"
       additions : number
         @label "Additions"

package/behaviors/lolo/ui/core/molecules/ui-confirm-dialog.lolo

@@ -27,6 +27,7 @@ orbital ConfirmDialogOrbital {
         (render-ui modal {
           isOpen: @config.isOpen
           onClose: @config.onClose
+          onExited: @config.onExited
           onConfirm: @config.onConfirm
           title: @config.title
           message: @config.message
@@ -58,6 +59,9 @@ orbital ConfirmDialogOrbital {
       @config.onClose -> external { }
         @description "Callback when dialog is closed (injected by slot wrapper)"
         @tier "essential"
+      @config.onExited -> external { }
+        @description "Fires after the exit animation completes (the dialog is about to unmount)."
+        @tier "essential"
       @config.onConfirm -> external { }
         @description "Callback when action is confirmed (injected by slot wrapper)"
         @tier "essential"
@@ -77,6 +81,10 @@ orbital ConfirmDialogOrbital {
         @label "On Close"
         @description "Callback when dialog is closed (injected by slot wrapper)"
         @tier "presentation"
+      onExited : event = "EXITED"
+        @label "On Exited"
+        @description "Fires after the exit animation completes (the dialog is about to unmount)."
+        @tier "presentation"
       onConfirm : event = "CONFIRM"
         @label "On Confirm"
         @description "Callback when action is confirmed (injected by slot wrapper)"