@almadar/std 16.235.0 → 16.237.0

package/behaviors/lolo/ui/core/atoms/std-record-detail.lolo

@@ -2,8 +2,9 @@ app std-record-detail "1.0.0"
 "std-record-detail — single primitive: detail-panel. Owns the fetch-one-record state machine (loading → viewing → error, with RETRY), the record counterpart to std-browse's collection machine. Consumers configure fields/sections/actions and the title/subtitle/status bindings; the atom fetches by the id (or, for slug-routed records, the slug) carried on INIT and renders the panel. `detailLook` (panel default / slide-over / page / document) selects the render body, exactly as std-browse's browseLook selects a collection shape. The `document` look is for records whose shape IS a document (wiki page, note, article): the pure writing surface — a big inline-editable title with the rich-text body DIRECTLY beneath it, Edit/Done and the actions menu tucked into the header corner — where clicking the body drops a cursor in, every typing pause autosaves (CONTENT_SAVED, which the host persists QUIETLY — no refetch, or the editor unmounts mid-keystroke), and Done emits CONTENT_COMMITTED (the host refetches and snapshots version history on this one). Metadata never sits between the title and the words: compose the sibling RecordItemDetails trait beside the doc for a Gutenberg-style settings rail. A row minted blank by a document-first create arrives with draft=1 on INIT and opens straight in the editor. Pair with std-detail-layout for the back + breadcrumb chrome — that atom owns navigation, this one owns the record — exactly as a list page pairs std-browse with std-app-layout."
 ;; @capabilities "record detail, single record view, entity detail panel, drill-down record, show one record, record profile, detail page, view details, document editor, wiki page, note taking, article body, rich text editing, write and edit content"
 orbital RecordItemOrbital {
-  type RecordAction = { label : string!, event : event!, icon : string, variant : primary | secondary | ghost | danger }
-  type RecordFieldSpec = { key : string!, header : string, format : date | currency | number | boolean | percent }
+  type RecordAction = { label : string!, event : event!, icon : string, variant : primary | secondary | ghost | danger, roles : [string], when : SExpr }
+  type BadgeColor = "default" | "primary" | "secondary" | "success" | "warning" | "danger" | "error" | "info" | "neutral" | "destructive"
+  type RecordFieldSpec = { key : string!, header : string, format : date | currency | number | boolean | percent, variant : h3 | h4 | body | caption | badge | small | progress, colorMap : Map string BadgeColor, labels : Map string string }
   type MetaFieldSpec = { key : string!, label : string, kind : text | boolean | select | readonly, options : [string], icon : string, format : date | currency | number | boolean | percent }
   type RecordSection = { title : string!, fields : [string] }
 
@@ -448,12 +449,15 @@ orbital RecordItemOrbital {
       fields : [RecordFieldSpec] = [{
         header: Name
         key: name
+        variant: h4
       }, {
         header: Description
         key: description
+        variant: body
       }, {
         header: Status
         key: status
+        variant: badge
       }, {
         format: date
         header: Created
@@ -463,6 +467,11 @@ orbital RecordItemOrbital {
         @description "Each entry maps one entity field to a labelled row in the panel. Unlike a list row, a detail panel SHOULD label every field — the value stands alone here with no column header or repeated row position to name it."
         @synonyms "detail fields, record fields, panel fields, shown fields"
         @tier "presentation"
+      closeEvent : event = ""
+        @label "Which action closes the record?"
+        @description "The `actions` entry whose event matches renders as the panel's close (×) button. Empty = no close button (a routed detail page navigates back instead)."
+        @synonyms "close event, dismiss event, close button"
+        @tier "presentation"
       sections : [RecordSection] = []
         @label "How should the fields be grouped?"
         @description "Optional titled groups over `fields`, e.g. [{title: Contact, fields: [email, phone]}]. Group into sections of 3-5 once a record carries more than about seven fields — a flat list past that is the cognitive-load problem Almadar_UX.md §1.4 (Miller) describes. Empty = one ungrouped list, the default."
@@ -481,6 +490,10 @@ orbital RecordItemOrbital {
         @description "Buttons on the panel header. One primary at most; the rest collapse past maxInlineActions."
         @synonyms "record actions, detail actions, panel buttons"
         @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
       maxInlineActions : number = 3
         @label "How many actions before collapsing?"
         @description "Actions beyond this count collapse into a '⋯' overflow menu."
@@ -560,10 +573,11 @@ orbital RecordItemOrbital {
         @tier "presentation"
       bodyContent : render-ui = {
         children: [{
-          actions: @config.actions
-          entity: ?data
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          entity: @entity.loadedRow
           fields: @config.fields
-          initialData: ?data
+          closeEvent: @config.closeEvent
+          initialData: @entity.loadedRow
           maxInlineActions: @config.maxInlineActions
           sections: @config.sections
           showActions: @config.showActions
@@ -580,10 +594,11 @@ orbital RecordItemOrbital {
         @tier "internal"
       slideOverBodyContent : render-ui = {
         children: [{
-          actions: @config.actions
-          entity: ?data
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          entity: @entity.loadedRow
           fields: @config.fields
-          initialData: ?data
+          closeEvent: @config.closeEvent
+          initialData: @entity.loadedRow
           maxInlineActions: @config.maxInlineActions
           sections: @config.sections
           showActions: @config.showActions
@@ -601,10 +616,11 @@ orbital RecordItemOrbital {
         @tier "internal"
       pageBodyContent : render-ui = {
         children: [{
-          actions: @config.actions
-          entity: ?data
+          actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
+          entity: @entity.loadedRow
           fields: @config.fields
-          initialData: ?data
+          closeEvent: @config.closeEvent
+          initialData: @entity.loadedRow
           maxInlineActions: @config.maxInlineActions
           sections: @config.sections
           showActions: @config.showActions
@@ -621,7 +637,7 @@ orbital RecordItemOrbital {
         @description "Render-ui SExpr rendered after the record loads when detailLook = page: a full record page, width-capped so field rows do not stretch past a readable measure (Almadar_UI_Beauty.md §3)."
         @tier "internal"
       documentBodyContent : render-ui = {
-        actions: @config.actions
+        actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
         coverImage: @entity.coverUrl
         icon: @entity.iconName
         editEvent: (if @config.allowEdit EDIT_CONTENT null)
@@ -640,7 +656,7 @@ orbital RecordItemOrbital {
         @description "Render-ui SExpr for detailLook = document while reading: the pure writing surface — editable title with the rich-text body DIRECTLY beneath it, Edit and the actions menu tucked into the header corner. Metadata never sits between title and content; compose the sibling RecordItemDetails trait beside this one for the settings rail. Binds only @entity fields, never ?data, because it is also painted by arms whose payload is not the record."
         @tier "internal"
       documentEditingContent : render-ui = {
-        actions: @config.actions
+        actions: (array/filter @config.actions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
         coverImage: @entity.coverUrl
         icon: @entity.iconName
         autosaveHint: @config.autosaveHint

package/behaviors/lolo/ui/core/atoms/std-recurrence.lolo

@@ -1,6 +1,7 @@
 app std-recurrence "2.1.0"
 "std-recurrence — recurring-rule definition + upcoming runs (Stripe Subscriptions / Cron Hub style). The viewing state shows a plain-English rule sentence and the next N dated runs as an agenda timeline. Per-run exception modal supports skip / reschedule. Topology = loading / defining_rule / viewing / awaiting_exception_decision / cancelled / error."
 type ObjectSpec = { id : string, label : string, value : string }
+type ItemAction = { label : string!, event : event, roles : [string] }
 orbital RecurrenceOrbital {
     type OccurrenceItem = { id : string!, title : string!, description : string, date : string, status : "complete" | "active" | "pending" | "error", rawStatus : "scheduled" | "skipped" | "completed" | "rescheduled" }
 
@@ -139,7 +140,11 @@ orbital RecurrenceOrbital {
           }, {
             entity: @entity.occurrences
             fields: (title description date status)
-            itemActions: [{ event: OPEN_EXCEPTION, label: Manage }]
+            titleField: "title"
+            descriptionField: "description"
+            dateField: "date"
+            statusField: "status"
+            itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
             look: @config.timelineLook
             type: timeline
           }, {
@@ -543,6 +548,14 @@ orbital RecurrenceOrbital {
         @label "Timeline look"
         @description "Layer 2 visual treatment for the timeline."
         @tier "presentation"
+      itemActions : [ItemAction] = [{ event: OPEN_EXCEPTION, label: Manage }]
+        @label "Row actions"
+        @description "Actions offered on each row; give an item `roles` to show it only to those viewer roles."
+        @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/atoms/std-role-gate.lolo

@@ -0,0 +1,39 @@
+app std-role-gate "1.0.0"
+"std-role-gate — explicit role gate around ONE piece of UI. Renders its `content` trait only when `roles` is empty or lists the viewer's role; any other viewer gets nothing rendered. Wrap a single button, FAB or panel in it, bind `viewerRole` at the call site (e.g. `viewerRole: @user.role`), and list the roles that may see it."
+;; @capabilities "role gate, only for roles, hide for role, permission wrapper, restrict button to role, show only to admins, role-based visibility"
+;; @synonyms "role guard, permission gate, access gate, visible to roles, hide unless role, admin only"
+orbital RoleGateOrbital {
+  entity RoleGateData [runtime] {
+    id : string!
+  }
+
+  trait RoleGate -> @rebindable RoleGateData [interaction, instance] {
+    initial: idle
+
+    state idle {
+      INIT -> idle when (or (= (array/len @config.roles) 0) (array/includes @config.roles @config.viewerRole))
+        (render-ui main { children: [@config.content], type: box })
+      INIT -> idle when (not (or (= (array/len @config.roles) 0) (array/includes @config.roles @config.viewerRole)))
+        (render-ui main null)
+    }
+
+    config {
+      content : trait
+        @label "Gated content"
+        @description "The trait rendered when the viewer's role is allowed, e.g. a button or panel trait ref."
+        @synonyms "wrapped content, guarded element, protected button"
+        @tier "presentation"
+      roles : [string] = []
+        @label "Visible to roles"
+        @description "Roles (matched against viewerRole) that see the content. Empty = everyone; any other viewer sees nothing."
+        @synonyms "allowed roles, only for, who can see, permitted roles"
+        @tier "policy"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`); left empty, only an ungated (empty `roles`) gate renders."
+        @tier "policy"
+    }
+  }
+
+  page "/role-gate" as RoleGatePage -> RoleGate
+}

package/behaviors/lolo/ui/core/atoms/std-saved-search.lolo

@@ -1,5 +1,6 @@
 app std-saved-search "1.0.0"
 "std-saved-search — persisted query + alert subscription. Owns a SavedSearch entity (one row per saved query) and a single manage trait that lists saved searches in a data-grid, lets users toggle their alert subscription / rename the search / delete it, and persists each change."
+type ItemAction = { label : string!, event : event, variant : string, icon : string, roles : [string], when : SExpr }
 orbital SavedSearchOrbital {
     type SavedSearchLoaded = Event { data : [SavedSearch] } "Fired when the saved-search collection finishes loading"
 
@@ -9,6 +10,8 @@ orbital SavedSearchOrbital {
 
     type SavedSearchDeleted = Event { id : string! } "Fired after a saved-search row is deleted"
 
+    type SavedSearchCreated = Event SavedSearch "Fired after the current search is saved as a new row"
+
   entity SavedSearch [persistent: savedsearches] {
     id : string!
     name : string! @description "A user-defined label for the saved search." @synonyms "title, label, search name"
@@ -74,22 +77,8 @@ orbital SavedSearchOrbital {
               variant: badge
             }]
             gap: sm
-            itemActions: [{
-              event: TOGGLE_ALERT
-              icon: bell
-              label: "Toggle alert"
-              variant: secondary
-            }, {
-              event: EDIT
-              icon: pencil
-              label: Edit
-              variant: secondary
-            }, {
-              event: DELETE
-              icon: trash-2
-              label: Delete
-              variant: danger
-            }]
+            itemClickEvent: @config.itemClickEvent
+            itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
             look: @config.tableLook
             type: data-grid
           }]
@@ -137,6 +126,24 @@ orbital SavedSearchOrbital {
         (persist delete SavedSearch ?id {
           emit: { failure: SavedSearchLoadFailed, success: SavedSearchDeleted }
         })
+      ;; The page's live search, fed by whichever search/filter traits the
+      ;; consumer wires in, so SAVE_CURRENT captures what the viewer sees.
+      TRACK_QUERY -> browsing
+        (set @entity.query ?query)
+      ;; One filter change at a time (std-filter's FILTER shape); an empty
+      ;; value clears that filter, matching std-browse's REFETCH_FILTER.
+      TRACK_FILTERS -> browsing
+        (set @entity.filters (if ["=", ?value, ""] (object/omit @entity.filters [?field]) (object/set @entity.filters ?field ?value)))
+      SAVE_CURRENT -> browsing
+        (persist create SavedSearch {
+          name: (if @entity.query @entity.query @config.defaultSearchName)
+          query: @entity.query
+          filters: @entity.filters
+          userId: @user.id
+          createdAt: @now
+        } {
+          emit: { failure: SavedSearchLoadFailed, success: SavedSearchCreated }
+        })
       EDIT -> editing
         (set @entity.id ?id)
         (render-ui main {
@@ -194,6 +201,10 @@ orbital SavedSearchOrbital {
         (fetch SavedSearch {
           emit: { failure: SavedSearchLoadFailed, success: SavedSearchLoaded }
         })
+      SavedSearchCreated -> loading
+        (fetch SavedSearch {
+          emit: { failure: SavedSearchLoadFailed, success: SavedSearchLoaded }
+        })
       ;; editing.SAVE -> browsing lands here before the persist resolves; a
       ;; failure must be caught here too, not just by loading's twin arm.
       SavedSearchLoadFailed -> error
@@ -243,6 +254,7 @@ orbital SavedSearchOrbital {
         @tier "presentation"
       EDIT {
         id : string!
+        row : SavedSearch
       }
         @description "Indicates a saved search is being modified."
         @synonyms "modify, update, change"
@@ -280,6 +292,10 @@ orbital SavedSearchOrbital {
         @description "Indicates a failure to load saved search data."
         @synonyms "error, failure, load error"
         @tier "internal"
+      SavedSearchCreated
+        @description "Indicates the current search has been saved as a new row."
+        @synonyms "saved, created, bookmarked"
+        @tier "presentation"
       SavedSearchUpdated
         @description "Indicates a saved search has been modified and persisted."
         @synonyms "modified, changed, updated, persisted"
@@ -332,6 +348,27 @@ orbital SavedSearchOrbital {
         @description "Aborts the current operation or view."
         @synonyms "dismiss, close, undo"
         @tier "domain"
+      TRACK_QUERY {
+        query : string
+      }
+        @description "The page's current search text changed."
+        @synonyms "search changed, query changed, typed search"
+        @tier "domain"
+      TRACK_FILTERS {
+        field : string!
+        value : string!
+      }
+        @description "The page's current filters changed."
+        @synonyms "filters changed, criteria changed"
+        @tier "domain"
+      SAVE_CURRENT
+        @description "Save the page's current search and filters as a new saved search."
+        @synonyms "save search, bookmark search, remember search"
+        @tier "domain"
+      SavedSearchCreated
+        @description "The current search was saved as a new row."
+        @synonyms "saved, created, bookmarked"
+        @tier "presentation"
       SavedSearchLoaded {
         data : [SavedSearch]
       }
@@ -366,6 +403,37 @@ orbital SavedSearchOrbital {
         @label "Table look"
         @description "Layer 2 visual treatment for the data table rendered by this atom."
         @tier "presentation"
+      defaultSearchName : string = "Saved search"
+        @label "Default saved-search name"
+        @description "Name given to a saved search when the current search has no query text (filters only). Renamable afterwards."
+        @tier "presentation"
+      itemClickEvent : event = EDIT
+        @label "Row click"
+        @description "Event emitted when a row is clicked; opens the saved search for editing. Empty disables the row click."
+        @tier "presentation"
+      itemActions : [ItemAction] = [{
+        event: TOGGLE_ALERT
+        icon: bell
+        label: "Toggle alert"
+        variant: secondary
+      }, {
+        event: EDIT
+        icon: pencil
+        label: Edit
+        variant: secondary
+      }, {
+        event: DELETE
+        icon: trash-2
+        label: Delete
+        variant: danger
+      }]
+        @label "Row actions"
+        @description "Actions offered on each row; give an item `roles` to show it only to those viewer roles."
+        @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/atoms/std-selection.lolo

@@ -1,6 +1,7 @@
 app std-selection "1.0.0"
 "std-selection as a Function"
 type FilterSpec = { field : string!, label : string, options : [string] }
+type ItemAction = { label : string!, event : event, icon : string, roles : [string], when : SExpr }
 orbital SelectableItemOrbital {
     type SelectableItemLoaded = Event { data : [SelectableItem] } "Fired when SelectableItem finishes loading; payload.data holds the list"
 
@@ -86,11 +87,8 @@ orbital SelectableItemOrbital {
             className: "transition-shadow hover:shadow-md cursor-pointer"
             entity: ?data
             fields: []
-            itemActions: [{
-              event: SELECT
-              icon: check
-              label: Select
-            }]
+            itemClickEvent: @config.itemClickEvent
+            itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
             look: @config.tableLook
             pageSize: @config.displayPageSize
             renderItem: (fn item {
@@ -220,11 +218,8 @@ orbital SelectableItemOrbital {
             className: "transition-shadow hover:shadow-md cursor-pointer"
             entity: ?data
             fields: []
-            itemActions: [{
-              event: SELECT
-              icon: check
-              label: Select
-            }]
+            itemClickEvent: @config.itemClickEvent
+            itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
             look: @config.tableLook
             pageSize: @config.displayPageSize
             renderItem: (fn item {
@@ -387,6 +382,7 @@ orbital SelectableItemOrbital {
     listens {
       SELECT {
         id : string!
+        row : SelectableItem
       }
         @description "Indicates an item has been chosen."
         @synonyms "chosen, picked, highlighted"
@@ -467,6 +463,22 @@ orbital SelectableItemOrbital {
         @description "Rows visible per page before the data-grid's own pagination control appears — 20 matches the pick-list density sweet spot (Miller's law, 10-25 rows)."
         @synonyms "visible rows, items per page, display limit, show per page"
         @tier "presentation"
+      itemClickEvent : event = SELECT
+        @label "Row click"
+        @description "Event emitted when a row is clicked; clicking a row selects it. Empty disables the row click."
+        @tier "presentation"
+      itemActions : [ItemAction] = [{
+        event: SELECT
+        icon: check
+        label: Select
+      }]
+        @label "Row actions"
+        @description "Actions offered on each row; give an item `roles` to show it only to those viewer roles."
+        @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
     }
   }
 

package/behaviors/lolo/ui/core/atoms/std-stats.lolo

@@ -115,7 +115,7 @@ orbital StatsItemOrbital {
         @description "One stat card per entry; declares aggregation, format, and styling"
         @synonyms "list of KPI cards / stat tiles / metric cards. each entry has label / value / format / icon / variant / aggregation. user phrases: 'replace metrics with X, Y, Z' -> rewrite array; 'add Revenue tile' -> append entry; 'change KPIs to X' -> rewrite array"
         @tier "presentation"
-      title : string = Summary
+      title : string = ""
         @label "Section title"
         @description "Heading shown above the stat-card grid"
         @synonyms "the section header text. user phrases: 'rename section to X' / 'title the KPIs X' / 'change section title to X' -> X"
@@ -137,7 +137,7 @@ orbital StatsItemOrbital {
         @label "Stats look"
         @description "Layer 3 body layout: default per-metric stat-card grid ('cards'), Stripe-dashboard KPI tile row ('kpi-tiles'), single oversize hero number ('hero-metric'), or chart-first sparkline tile grid ('sparkline-row')."
         @tier "presentation"
-      bodyContent : render-ui = { data-theme: @config.theme, type: box, children: [{
+      bodyContent : render-ui = { data-theme: @config.theme, type: box, children: [(if ["!=", @config.title, ""] { content: @config.title, type: typography, variant: h3 } { children: [], gap: none, type: stack }), {
         entity: @entity.cards
         fields: []
         renderItem: (fn card {
@@ -163,7 +163,7 @@ orbital StatsItemOrbital {
         @label "Body content tree"
         @description "Render-ui SExpr rendered after metrics aggregate for statsLook='cards' — the canonical data-grid call mapping @entity.cards through stat-display. Other statsLook values render kpiTilesBodyContent / heroMetricBodyContent / sparklineRowBodyContent instead; all four share this trait's state machine, aggregation pipeline, and listens."
         @tier "internal"
-      kpiTilesBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [{
+      kpiTilesBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [(if ["!=", @config.title, ""] { content: @config.title, type: typography, variant: h3 } { children: [], gap: none, type: stack }), {
         className: w-full
         entity: @entity.cards
         fields: []
@@ -239,7 +239,7 @@ orbital StatsItemOrbital {
         @label "KPI tiles body content tree"
         @description "Render-ui SExpr for statsLook='kpi-tiles' — Stripe-dashboard style tile grid: huge typography number, label, trend indicator, sparkline hint."
         @tier "internal"
-      heroMetricBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [{
+      heroMetricBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [(if ["!=", @config.title, ""] { content: @config.title, type: typography, variant: h3 } { children: [], gap: none, type: stack }), {
         entity: @entity.cards
         fields: []
         gap: none
@@ -324,7 +324,7 @@ orbital StatsItemOrbital {
         @label "Hero metric body content tree"
         @description "Render-ui SExpr for statsLook='hero-metric' — one elevated card, one oversize number, background sparkline."
         @tier "internal"
-      sparklineRowBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [{
+      sparklineRowBodyContent : render-ui = { data-theme: @config.theme, type: box, children: [(if ["!=", @config.title, ""] { content: @config.title, type: typography, variant: h3 } { children: [], gap: none, type: stack }), {
         className: w-full
         entity: @entity.cards
         fields: []

package/behaviors/lolo/ui/core/atoms/std-tag-taxonomy.lolo

@@ -126,6 +126,7 @@ orbital TagTaxonomyOrbital {
               padding: sm
               type: card
             })
+            look: @config.tableLook
             type: data-grid
           }]
           direction: vertical
@@ -278,6 +279,7 @@ orbital TagTaxonomyOrbital {
               padding: sm
               type: card
             })
+            look: @config.tableLook
             type: data-grid
           }]
           direction: vertical
@@ -490,6 +492,7 @@ orbital TagTaxonomyOrbital {
               padding: sm
               type: card
             })
+            look: @config.tableLook
             type: data-grid
           }]
           direction: vertical

package/behaviors/lolo/ui/core/atoms/std-thread.lolo

@@ -1,6 +1,11 @@
 app std-thread "1.3.0"
-"std-thread — forum-style nested replies with collapse + flat-mode toggle. Owns ThreadPost (persistent). flat:true covers 1:1 linear inquiry threads; flat:false renders forum-style nested. INIT fetches, scoped by @config.threadRootId when set (blank = every root, the default). REPLY persists a child post under @payload.parentId, stamped with the real @user identity. A consumer that mounts this as page comments forwards its own document-opened signal to SET_THREAD_ROOT { rootId }, which stamps @entity.replyRootId (scratch — the persisted threadRootId column is written only by the reply persist create) and refetches filtered by the payload; a plain INIT re-entry now also falls back through @entity.replyRootId before @config.threadRootId, so it stays scoped to the last SET_THREAD_ROOT instead of re-widening — only the after-create/after-select refetches still scope directly off their own event payload. Layer 3 variants override `bodyContent` to deliver chat-bubble, email-threaded, or linear-comments UX while inheriting the same trait, state machine, emits, and listens. A non-empty sectionTitle switches the default bodyContent into titled-comments mode: header + post list + a standalone composer button (without it an empty thread has no REPLY emitter at all — the affordance only existed per-row)."
+"std-thread — forum-style nested replies with collapse. Owns ThreadPost (persistent). INIT fetches, scoped by @config.threadRootId when set (blank = every root, the default). REPLY persists a child post under @payload.parentId, stamped with the real @user identity. A consumer that mounts this as page comments forwards its own document-opened signal to SET_THREAD_ROOT { rootId }, which stamps @entity.replyRootId (scratch — the persisted threadRootId column is written only by the reply persist create) and refetches filtered by the payload; a plain INIT re-entry now also falls back through @entity.replyRootId before @config.threadRootId, so it stays scoped to the last SET_THREAD_ROOT instead of re-widening — only the after-create/after-select refetches still scope directly off their own event payload. Layer 3 variants override `bodyContent` to deliver chat-bubble, email-threaded, or linear-comments UX while inheriting the same trait, state machine, emits, and listens. A non-empty sectionTitle switches the default bodyContent into titled-comments mode: header + post list + a standalone composer button (without it an empty thread has no REPLY emitter at all — the affordance only existed per-row)."
+type ItemAction = { label : string!, event : event, icon : string, roles : [string], when : SExpr }
 orbital ThreadPostOrbital {
+  uses RoleGate from "std/behaviors/std-role-gate"
+
+  uses Button from "std/behaviors/ui-button"
+
   ;; Forward relation: array of child ThreadPost IDs whose parentId === this.id.
   ;; Lowers to `type: "relation", cardinality: "many"` (orbital-lolo lower.rs).
   ;; @rebindable rewrites the target to the rebound entity in variant atoms.
@@ -381,10 +386,6 @@ orbital ThreadPostOrbital {
     }
 
     config {
-      flat : boolean = false
-        @label "Flat thread"
-        @description "Render replies as a linear list instead of nested tree"
-        @tier "presentation"
       threadRootId : string = ""
         @label "Root post id"
         @description "Top-level post whose descendants are loaded, filters every fetch and defaults new top-level replies' threadRootId (blank = all roots, unfiltered)"
@@ -394,10 +395,6 @@ orbital ThreadPostOrbital {
         @label "Table look"
         @description "Layer 2 visual treatment for the data table rendered by this atom."
         @tier "presentation"
-      recipientName : string = Conversation
-        @label "recipientName"
-        @description "Header/recipient label for chat-style threads."
-        @tier "presentation"
       sectionTitle : string = ""
         @label "sectionTitle"
         @description "Section header rendered by the default bodyContent when non-empty, along with a standalone composer button — the only REPLY affordance an empty thread has. Blank (the default) keeps the bare post list for embedded threads that bring their own chrome (chat rails, custom comment sections)."
@@ -408,58 +405,6 @@ orbital ThreadPostOrbital {
         @description "Label of the standalone composer button rendered under the post list when sectionTitle is non-empty."
         @synonyms "reply label, comment button, add comment"
         @tier "presentation"
-      emailAuthorBinding : string = @item.authorName
-        @label "emailAuthorBinding"
-        @description "List-pane binding for the message author."
-        @tier "presentation"
-      emailSubjectBinding : string = @item.subject
-        @label "emailSubjectBinding"
-        @description "List-pane binding for the message subject."
-        @tier "presentation"
-      emailPreviewBinding : string = @item.preview
-        @label "emailPreviewBinding"
-        @description "List-pane binding for the message preview text."
-        @tier "presentation"
-      detailSubjectBinding : string = @entity.focusedRow.subject
-        @label "detailSubjectBinding"
-        @description "Detail-pane binding for the focused message subject."
-        @tier "presentation"
-      detailAuthorBinding : string = @entity.focusedRow.authorName
-        @label "detailAuthorBinding"
-        @description "Detail-pane binding for the focused message author."
-        @tier "presentation"
-      detailFromBinding : string = @entity.focusedRow.fromAddress
-        @label "detailFromBinding"
-        @description "Detail-pane binding for the From address."
-        @tier "presentation"
-      detailToBinding : string = @entity.focusedRow.toAddress
-        @label "detailToBinding"
-        @description "Detail-pane binding for the To address."
-        @tier "presentation"
-      detailDateBinding : string = @entity.focusedRow.createdAt
-        @label "detailDateBinding"
-        @description "Detail-pane binding for the timestamp."
-        @tier "presentation"
-      detailContentBinding : string = @entity.focusedRow.content
-        @label "detailContentBinding"
-        @description "Detail-pane binding for the message body."
-        @tier "presentation"
-      replyAuthorBinding : string = @reply.authorName
-        @label "replyAuthorBinding"
-        @description "Reply binding for the reply author."
-        @tier "presentation"
-      replyFromBinding : string = @reply.fromAddress
-        @label "replyFromBinding"
-        @description "Reply binding for the reply From address."
-        @tier "presentation"
-      replyDateBinding : string = @reply.createdAt
-        @label "replyDateBinding"
-        @description "Reply binding for the reply timestamp."
-        @tier "presentation"
-      replyContentBinding : string = @reply.content
-        @label "replyContentBinding"
-        @description "Reply binding for the reply body."
-        @tier "presentation"
       bodyContent : render-ui = {
         children: [(if ["!=", @config.sectionTitle, ""] {
           content: @config.sectionTitle
@@ -485,21 +430,11 @@ orbital ThreadPostOrbital {
             variant: caption
           }]
           gap: sm
-          itemActions: [{
-            event: REPLY
-            icon: message-square
-            label: Reply
-          }]
+          itemActions: (array/filter @config.itemActions (fn action (or (= (array/len (object/get @action roles [])) 0) (array/includes (object/get @action roles []) @config.viewerRole))))
           look: @config.tableLook
           type: data-list
           variant: card
-        }, (if ["!=", @config.sectionTitle, ""] {
-          action: REPLY
-          icon: message-square
-          label: @config.composerLabel
-          type: button
-          variant: secondary
-        } {
+        }, (if ["!=", @config.sectionTitle, ""] <trait.ThreadReplyGate /> {
           children: []
           gap: none
           type: stack
@@ -511,6 +446,39 @@ orbital ThreadPostOrbital {
         @label "Body content tree"
         @description "Render-ui SExpr rendered after thread posts load. Default is the canonical forum-style data-list. Layer 3 variants override this with their own tree (chat bubbles, email-threaded cards, linear comment stacks, etc.) to deliver entirely different thread UX while inheriting the same trait, state machine, emits, and listens."
         @tier "internal"
+      itemActions : [ItemAction] = [{
+        event: REPLY
+        icon: message-square
+        label: Reply
+      }]
+        @label "Row actions"
+        @description "Actions offered on each row; give an item `roles` to show it only to those viewer roles."
+        @tier "presentation"
+      viewerRole : string = ""
+        @label "Viewer's role"
+        @description "The signed-in viewer's role that each action's `roles` is checked against. Bind it explicitly at the call site (e.g. `viewerRole: @user.role`) in an app whose identity carries a role; left empty, only actions with no `roles` show."
+        @tier "policy"
+      replyRoles : [string] = []
+        @label "Roles that can reply"
+        @description "Roles (matched against viewerRole) that see the thread's Reply button. Empty = everyone."
+        @tier "policy"
+    }
+  }
+
+  trait ThreadReplyButton = Button.traits.ButtonRender {
+    config {
+      action: REPLY
+      icon: message-square
+      label: @config.composerLabel
+      variant: secondary
+    }
+  }
+
+  trait ThreadReplyGate = RoleGate.traits.RoleGate {
+    config {
+      roles: @config.replyRoles
+      viewerRole: @config.viewerRole
+      content: <trait.ThreadReplyButton />
     }
   }