@nocobase/app-plugin-foundation 0.0.0-stage → 0.1.0-beta.0

package/dist/shared/available-capabilities.js

@@ -0,0 +1,66 @@
+const CORE_RUNTIME = new Set([
+    'dataModeling',
+    'interface',
+    'operations',
+    'workflows',
+]);
+/** Show recognized installed capabilities as well as current runtime capabilities; installation never proves use. */
+export function availableCapabilities(observations, inventory) {
+    const known = observations.flatMap((capability) => {
+        const providers = inventory.entries.filter((entry) => entry.categories.includes(capability.key));
+        const registered = providers.some((entry) => entry.registration === 'observed' &&
+            (!inventory.serverRegistrationsComplete ||
+                capability.key === 'interface' ||
+                entry.evidence.some((source) => source !== 'manifest' && source !== 'clientContribution')));
+        if (registered)
+            return [capability];
+        if (CORE_RUNTIME.has(capability.key) && capability.status !== 'unused')
+            return [capability];
+        // Older runtimes expose only partial registration evidence; preserve capabilities whose use the collector proved.
+        if (!inventory.serverRegistrationsComplete &&
+            (capability.status === 'active' || capability.status === 'needsSetup'))
+            return [capability];
+        if (!providers.some((entry) => entry.installed))
+            return [];
+        // Keep installed-only capabilities visible, but stale tables and a manifest cannot establish current use.
+        // Preserve unreadable observations as unknown rather than turning collection failures into an unused state.
+        if (capability.status === null)
+            return [capability];
+        return [
+            {
+                ...capability,
+                status: 'unused',
+                reason: 'installedNotUsed',
+                facts: [],
+                parts: [],
+            },
+        ];
+    });
+    const extensions = inventory.entries
+        .filter((entry) => entry.kind === 'plugin' &&
+        entry.registration === 'observed' &&
+        entry.categories.length === 0)
+        .map((entry) => ({
+        key: `extension:${entry.name}`,
+        title: entry.displayName ?? entry.name,
+        ...(entry.description ? { description: entry.description } : {}),
+        status: null,
+        reason: 'unrecognizedExtension',
+        facts: [{ code: 'registeredExtension' }],
+        metrics: [],
+        parts: [],
+        packages: [{ name: entry.name, version: entry.version }],
+        completeness: 'complete',
+        issues: [],
+    }));
+    return [...known, ...extensions];
+}
+/** Client-only registrations are added to the same model without changing server usage evidence. */
+export function withAvailableCapabilities(overview, inventory) {
+    return {
+        ...overview,
+        inventory,
+        availableCapabilities: availableCapabilities(overview.capabilities, inventory),
+    };
+}
+//# sourceMappingURL=available-capabilities.js.map

package/dist/shared/available-capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"available-capabilities.js","sourceRoot":"","sources":["../../shared/available-capabilities.ts"],"names":[],"mappings":"AAMA,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc;IACd,WAAW;IACX,YAAY;IACZ,WAAW;CACZ,CAAC,CAAC;AAEH,qHAAqH;AACrH,MAAM,UAAU,qBAAqB,CACnC,YAA6C,EAC7C,SAAsC;IAEtC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACnD,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAC1C,CAAC;QACF,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAC/B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,YAAY,KAAK,UAAU;YACjC,CAAC,CAAC,SAAS,CAAC,2BAA2B;gBACrC,UAAU,CAAC,GAAG,KAAK,WAAW;gBAC9B,KAAK,CAAC,QAAQ,CAAC,IAAI,CACjB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,oBAAoB,CAC3D,CAAC,CACP,CAAC;QACF,IAAI,UAAU;YAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ;YACpE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,kHAAkH;QAClH,IACE,CAAC,SAAS,CAAC,2BAA2B;YACtC,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,YAAY,CAAC;YAEtE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QAC3D,0GAA0G;QAC1G,4GAA4G;QAC5G,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACpD,OAAO;YACL;gBACE,GAAG,UAAU;gBACb,MAAM,EAAE,QAAiB;gBACzB,MAAM,EAAE,kBAAkB;gBAC1B,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,EAAE;aACV;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO;SACjC,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvB,KAAK,CAAC,YAAY,KAAK,UAAU;QACjC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAChC;SACA,GAAG,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,CAAC;QACrC,GAAG,EAAE,aAAa,KAAK,CAAC,IAAI,EAAE;QAC9B,KAAK,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI;QACtC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,uBAAuB;QAC/B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACxD,YAAY,EAAE,UAAU;QACxB,MAAM,EAAE,EAAE;KACX,CAAC,CAAC,CAAC;IACN,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,yBAAyB,CACvC,QAA4B,EAC5B,SAAsC;IAEtC,OAAO;QACL,GAAG,QAAQ;QACX,SAAS;QACT,qBAAqB,EAAE,qBAAqB,CAC1C,QAAQ,CAAC,YAAY,EACrB,SAAS,CACV;KACF,CAAC;AACJ,CAAC"}

package/dist/shared/foundation.d.ts

@@ -0,0 +1,142 @@
+/**
+ * The contract between the server, which collects what an application uses of NocoBase Core, and the page that shows
+ * it. Values here are shared by both sides; everything else is a type, so nothing from `server/` reaches the browser.
+ */
+/** Built-in collector adapters, in their preferred display order; this is not the universe of available capabilities. */
+export declare const FOUNDATION_CAPABILITIES: readonly ["dataModeling", "files", "usersAndOrganizations", "permissions", "workflows", "aiAgents", "knowledge", "mail", "notifications", "integrations", "interface", "audit", "operations"];
+export type FoundationBuiltinCapabilityKey = (typeof FOUNDATION_CAPABILITIES)[number];
+export type FoundationCapabilityKey = string;
+/**
+ * `active`: the application uses it now. `needsSetup`: it is wired in but a required piece of configuration is missing.
+ * `unused`: not wired in, not enabled, or not provided. A capability whose collection failed has no status (`null`): a
+ * failure is never reported as `unused`.
+ */
+export type FoundationStatus = 'active' | 'needsSetup' | 'unused';
+export declare const FOUNDATION_STATUSES: readonly FoundationStatus[];
+/** How much of a capability's evidence could be read this time. */
+export type FoundationCompleteness = 'complete' | 'partial' | 'failed';
+/** A name as the application stores it: plain text, or a translation key in a namespace the page may have loaded. */
+export type FoundationText = string | {
+    readonly key: string;
+    readonly ns: string;
+};
+export type FoundationFactParam = string | number | readonly FoundationText[];
+/**
+ * One established fact about how the application uses a capability, such as "12 collections of its own". The page
+ * words it from `code`; `params` carries the values the wording quotes.
+ */
+export interface FoundationFact {
+    readonly code: string;
+    readonly params?: Readonly<Record<string, FoundationFactParam>>;
+}
+export type FoundationMetricUnit = 'count' | 'bytes' | 'tokens';
+export interface FoundationMetric {
+    readonly key: string;
+    /** Null when it could not be read; never a stand-in zero. */
+    readonly value: number | null;
+    readonly unit: FoundationMetricUnit;
+    /** False when some of the sources it adds up could not be read, so the value is a lower bound. */
+    readonly complete: boolean;
+}
+/** A part of a composite capability, such as accounts and organizations under users and organizations. */
+export interface FoundationPart {
+    readonly key: string;
+    readonly status: FoundationStatus;
+    readonly reason?: string;
+}
+export interface FoundationPackage {
+    readonly name: string;
+    /** The version the application actually resolves. */
+    readonly version: string | null;
+}
+export type FoundationIssueCode = 'COLLECTOR_FAILED' | 'COLLECTOR_TIMEOUT' | 'SOURCE_UNREADABLE';
+/** Something that could not be read. `source` names a Collection or a service, never an error message. */
+export interface FoundationIssue {
+    readonly code: FoundationIssueCode;
+    readonly source?: string;
+}
+export interface FoundationCapability {
+    readonly key: FoundationCapabilityKey;
+    readonly title?: FoundationText;
+    readonly description?: string;
+    readonly status: FoundationStatus | null;
+    /** Why the capability needs setup or is unused, such as `noChannel`. */
+    readonly reason?: string;
+    readonly facts: readonly FoundationFact[];
+    readonly metrics: readonly FoundationMetric[];
+    readonly parts: readonly FoundationPart[];
+    readonly packages: readonly FoundationPackage[];
+    readonly completeness: FoundationCompleteness;
+    readonly issues: readonly FoundationIssue[];
+}
+export interface FoundationOverview {
+    readonly capabilities: readonly FoundationCapability[];
+    /** Runtime-specific capability items; built-in adapter observations remain available above for existing consumers. */
+    readonly availableCapabilities?: readonly FoundationCapability[];
+    /** Additive for clients receiving an overview from an older server. */
+    readonly inventory?: FoundationProviderInventory;
+    /** Static integration evidence; the browser joins this with the current registered navigation. */
+    readonly moduleSources?: FoundationModuleSources;
+    /** When this result was collected, RFC 3339. A cached result keeps its original time. */
+    readonly checkedAt: string;
+    readonly durationMs: number;
+    /** The database connection the statistics read: always the default one. */
+    readonly connection: string;
+}
+export interface FoundationModuleSource {
+    readonly packageName: string;
+    readonly routeName: string;
+    /** Value imports reachable from the page; type-only imports and installed-only packages are excluded. */
+    readonly providers: readonly string[];
+    readonly apiProviders?: readonly string[];
+    readonly complete: boolean;
+}
+export interface FoundationModuleSources {
+    readonly routes: readonly FoundationModuleSource[];
+    readonly complete: boolean;
+}
+export interface FoundationModuleLink {
+    readonly capability: FoundationCapabilityKey;
+    readonly evidence: readonly ('page' | 'authentication' | 'authorization' | 'provider' | 'source' | 'apiSource')[];
+    readonly providers: readonly string[];
+}
+export interface FoundationBusinessModule {
+    readonly id: string;
+    readonly title: FoundationText;
+    readonly pageCount: number;
+    readonly complete: boolean;
+    readonly links: readonly FoundationModuleLink[];
+}
+/** Package discovery and usage detection are deliberately separate facts. */
+export interface FoundationProviderEntry {
+    readonly name: string;
+    readonly displayName?: string;
+    readonly description?: string;
+    readonly version: string | null;
+    readonly installed: boolean;
+    readonly kind: 'core' | 'plugin';
+    /** An explicit Foundation catalog entry, never inferred from an npm scope or a license string. */
+    readonly origin: 'nocobase' | 'unverified';
+    readonly categories: readonly FoundationCapabilityKey[];
+    /** Only public, current runtime contributions prove registration; absence means unknown, not disabled. */
+    readonly registration: 'observed' | 'unknown';
+    readonly evidence: readonly ('manifest' | 'databaseContribution' | 'apiContribution' | 'foundationRuntime' | 'serverRegistration' | 'clientContribution')[];
+}
+export interface FoundationProviderInventory {
+    readonly entries: readonly FoundationProviderEntry[];
+    readonly complete: boolean;
+    /** Symbolic sources only: never paths, dependency URLs, credentials or raw errors. */
+    readonly unreadable: readonly string[];
+    /** Whether the host supplied its complete explicit Server registration snapshot. */
+    readonly serverRegistrationsComplete?: boolean;
+}
+/** The key numbers above the capability details, each one a metric of a capability. */
+export declare const FOUNDATION_HIGHLIGHTS: readonly {
+    readonly capability: FoundationCapabilityKey;
+    readonly metric: string;
+}[];
+/** The URL namespace of the plugin's routes and the domain of its errors. */
+export declare const FOUNDATION_NAMESPACE = "foundation";
+/** The i18n namespace of the plugin's wording. */
+export declare const FOUNDATION_I18N_NAMESPACE = "@nocobase/app-plugin-foundation";
+//# sourceMappingURL=foundation.d.ts.map

package/dist/shared/foundation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"foundation.d.ts","sourceRoot":"","sources":["../../shared/foundation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,yHAAyH;AACzH,eAAO,MAAM,uBAAuB,+LAc1B,CAAC;AAEX,MAAM,MAAM,8BAA8B,GACxC,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3C,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE7C;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,CAAC;AAElE,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAI1D,CAAC;AAEF,mEAAmE;AACnE,MAAM,MAAM,sBAAsB,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEvE,qHAAqH;AACrH,MAAM,MAAM,cAAc,GACxB,MAAM,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,cAAc,EAAE,CAAC;AAE9E;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;CACjE;AAED,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEhE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,0GAA0G;AAC1G,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,mBAAmB,GAC7B,kBAAkB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAEjE,0GAA0G;AAC1G,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;CAC7C;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACvD,sHAAsH;IACtH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjE,uEAAuE;IACvE,QAAQ,CAAC,SAAS,CAAC,EAAE,2BAA2B,CAAC;IACjD,kGAAkG;IAClG,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACjD,yFAAyF;IACzF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yGAAyG;IACzG,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,CACxB,MAAM,GACN,gBAAgB,GAChB,eAAe,GACf,UAAU,GACV,QAAQ,GACR,WAAW,CACd,EAAE,CAAC;IACJ,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACjD;AAED,6EAA6E;AAC7E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;IACjC,kGAAkG;IAClG,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACxD,0GAA0G;IAC1G,QAAQ,CAAC,YAAY,EAAE,UAAU,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,CACxB,UAAU,GACV,sBAAsB,GACtB,iBAAiB,GACjB,mBAAmB,GACnB,oBAAoB,GACpB,oBAAoB,CACvB,EAAE,CAAC;CACL;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,sFAAsF;IACtF,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,oFAAoF;IACpF,QAAQ,CAAC,2BAA2B,CAAC,EAAE,OAAO,CAAC;CAChD;AAED,uFAAuF;AACvF,eAAO,MAAM,qBAAqB,EAAE,SAAS;IAC3C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,EAOA,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD,kDAAkD;AAClD,eAAO,MAAM,yBAAyB,oCAAoC,CAAC"}

package/dist/shared/foundation.js

@@ -0,0 +1,39 @@
+/**
+ * The contract between the server, which collects what an application uses of NocoBase Core, and the page that shows
+ * it. Values here are shared by both sides; everything else is a type, so nothing from `server/` reaches the browser.
+ */
+/** Built-in collector adapters, in their preferred display order; this is not the universe of available capabilities. */
+export const FOUNDATION_CAPABILITIES = [
+    'dataModeling',
+    'files',
+    'usersAndOrganizations',
+    'permissions',
+    'workflows',
+    'aiAgents',
+    'knowledge',
+    'mail',
+    'notifications',
+    'integrations',
+    'interface',
+    'audit',
+    'operations',
+];
+export const FOUNDATION_STATUSES = [
+    'active',
+    'needsSetup',
+    'unused',
+];
+/** The key numbers above the capability details, each one a metric of a capability. */
+export const FOUNDATION_HIGHLIGHTS = [
+    { capability: 'dataModeling', metric: 'businessRecords' },
+    { capability: 'usersAndOrganizations', metric: 'accounts' },
+    { capability: 'permissions', metric: 'grants' },
+    { capability: 'workflows', metric: 'transitions' },
+    { capability: 'notifications', metric: 'acceptedDeliveries' },
+    { capability: 'operations', metric: 'migrations' },
+];
+/** The URL namespace of the plugin's routes and the domain of its errors. */
+export const FOUNDATION_NAMESPACE = 'foundation';
+/** The i18n namespace of the plugin's wording. */
+export const FOUNDATION_I18N_NAMESPACE = '@nocobase/app-plugin-foundation';
+//# sourceMappingURL=foundation.js.map

package/dist/shared/foundation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"foundation.js","sourceRoot":"","sources":["../../shared/foundation.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,yHAAyH;AACzH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,cAAc;IACd,OAAO;IACP,uBAAuB;IACvB,aAAa;IACb,WAAW;IACX,UAAU;IACV,WAAW;IACX,MAAM;IACN,eAAe;IACf,cAAc;IACd,WAAW;IACX,OAAO;IACP,YAAY;CACJ,CAAC;AAaX,MAAM,CAAC,MAAM,mBAAmB,GAAgC;IAC9D,QAAQ;IACR,YAAY;IACZ,QAAQ;CACT,CAAC;AAsJF,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAG5B;IACJ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,iBAAiB,EAAE;IACzD,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,EAAE,UAAU,EAAE;IAC3D,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC/C,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE;IAClD,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,oBAAoB,EAAE;IAC7D,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE;CACnD,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAEjD,kDAAkD;AAClD,MAAM,CAAC,MAAM,yBAAyB,GAAG,iCAAiC,CAAC"}

package/package.json

@@ -1,6 +1,109 @@
 {
   "name": "@nocobase/app-plugin-foundation",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "displayName": "App Foundation",
+  "description": "Shows which NocoBase Core capabilities an application uses, with live evidence, for its unrestricted administrators.",
+  "version": "0.1.0-beta.0",
+  "type": "module",
+  "prettier": "@nocobase/dev-config/prettier",
+  "engines": {
+    "node": ">=24.0.0"
+  },
+  "sideEffects": false,
+  "exports": {
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "import": "./dist/server/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "import": "./dist/client/index.js"
+    },
+    "./client/plugin": {
+      "types": "./dist/client/plugin.d.ts",
+      "import": "./dist/client/plugin.js"
+    },
+    "./client/routes": {
+      "types": "./dist/client/routes.d.ts",
+      "import": "./dist/client/routes.js"
+    },
+    "./client/pages": {
+      "types": "./dist/client/components/foundation-page.d.ts",
+      "import": "./dist/client/components/foundation-page.js"
+    },
+    "./cli": {
+      "types": "./dist/cli/index.d.ts",
+      "import": "./dist/cli/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "imports": {
+    "#components/*": "./dist/client/components/*.js",
+    "#hooks/*": "./dist/client/hooks/*.js",
+    "#lib/*": "./dist/client/lib/*.js",
+    "#extensions/*": "./dist/client/extensions/*.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "skills"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "hono": "^4.13.2",
+    "zod": "^4.6.5",
+    "typescript": "^6.0.3"
+  },
+  "peerDependencies": {
+    "@base-ui/react": "^1.6.0",
+    "@tanstack/react-query": "^5.81.5",
+    "class-variance-authority": "^0.7.1",
+    "cn": "^0.4.0",
+    "lucide-react": "^0.487.0",
+    "react": "^19.0.0",
+    "@nocobase/app-cli": "^1.0.0-beta.26",
+    "@nocobase/app-client": "^4.0.0-beta.1",
+    "@nocobase/app-plugin-authentication": "^2.0.0-beta.12",
+    "@nocobase/app-plugin-authorization": "^1.0.0-beta.30",
+    "@nocobase/app-server": "^3.0.0-beta.1",
+    "@nocobase/db": "^1.0.0-beta.21",
+    "@nocobase/i18n": "^2.0.0-beta.1",
+    "@nocobase/service-provider": "^0.0.2-beta.2"
+  },
+  "devDependencies": {
+    "@testing-library/jest-dom": "^7.0.0",
+    "@testing-library/react": "^16.3.2",
+    "@types/node": "^24.0.0",
+    "@types/react": "^19.2.0",
+    "@vitejs/plugin-react": "^4.4.1",
+    "eslint": "^10.0.0",
+    "jsdom": "^30.0.1",
+    "prettier": "^3.9.6",
+    "react-dom": "^19.2.8",
+    "react-router": "^7.0.2",
+    "shadcn": "^4.13.1",
+    "tailwindcss": "^4.1.4",
+    "tw-animate-css": "^1.2.5",
+    "vitest": "^4.1.10",
+    "@nocobase/app-plugin-api-keys": "1.0.0-beta.18",
+    "@nocobase/app-plugin-mail": "1.0.0-beta.16",
+    "@nocobase/app-plugin-notification": "1.0.0-beta.29",
+    "@nocobase/app-plugin-notification-in-app": "1.0.0-beta.27",
+    "@nocobase/app-plugin-scheduler": "1.0.0-beta.19",
+    "@nocobase/app-testing": "0.1.0-beta.6",
+    "@nocobase/dev-config": "0.1.0-beta.24"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "lint": "eslint . --max-warnings 0",
+    "lint:fix": "eslint . --fix --max-warnings 0",
+    "format": "prettier . --write",
+    "format:check": "prettier . --check",
+    "check": "pnpm lint && pnpm format:check && pnpm typecheck && pnpm test && pnpm build",
+    "fix": "pnpm lint:fix && pnpm format"
+  }
 }

package/skills/nocobase-app-plugin-foundation/SKILL.md

@@ -0,0 +1,68 @@
+---
+name: nocobase-app-plugin-foundation
+description: Use when an application should show its administrators which NocoBase Core capabilities it uses (the App Foundation page), when registering or moving that page, or when asked why a capability shows as in use, needing setup, not used or undetermined there. Not for business permissions or for building other admin pages.
+---
+
+# App Foundation
+
+## Use this Skill when
+
+- The application should get the App Foundation page, or it should move or leave the menu.
+- Someone asks why a capability on that page is in use, needs setup, is not used yet or is undetermined, or where a number comes from.
+
+Do not use it to grant the page to a role: it admits only unrestricted access by design.
+
+## Public surfaces
+
+- Server plugin: `@nocobase/app-plugin-foundation/server` (default export). Exports `foundationServiceToken`, whose `overview({ refresh? })` answers the same result as the route.
+- Server route: `GET /api/foundation/overview`, optional `refresh=true`. Requires a session or API key of an identity with unrestricted access; anyone else gets `403` with reason `FOUNDATION_FORBIDDEN`.
+- Client plugin: `@nocobase/app-plugin-foundation/client` (default export). `foundation()` adds the page at `/foundation` with a menu entry; options `path`, `navigation: false`, `routes: false` and `settingsGroup: true`. The default template uses `settingsGroup: true` so a bare application already has a localized settings group containing only the protected Foundation page.
+- Page component: `FoundationPage` from `@nocobase/app-plugin-foundation/client/pages`, for an application that routes it itself (`foundation({ routes: false })`). Declare such a route with `authz: 'unrestricted'`.
+
+## Prerequisites
+
+The authentication and authorization plugins are registered, as in the default template. The page reads the query cache the application's routes provide.
+
+## App workflow
+
+1. Add the dependency and register the server plugin in `server/plugins.ts` and the client plugin in `client/plugins.ts`.
+2. Restart the application and open `/foundation` as an administrator holding the root Permission Set.
+3. Build the application as usual; refresh the page to see new capabilities light up.
+
+## Reading a status
+
+- Collected read-only by the plugin; nothing reports to it, so there is nothing to register per capability.
+- In use means wired in: a persisted lifecycle, an enabled schedule, a connected mailbox, a configured notification channel, an API key that has been used. Zero uses still count as in use.
+- Needs setup names what is missing in its reason, such as `noChannel` or `noDrive`.
+- Undetermined means the evidence could not be read this time, never that it is unused; the details list what could not be read.
+- Business record ownership uses `server/catalog.ts`. If an unclassified runtime extension makes ownership uncertain, business counts are withheld; add a supported ownership adapter rather than interpreting them as zero.
+
+## Verification
+
+- As the root administrator, `/foundation` shows the capabilities available in this runtime, and `GET /api/foundation/overview` answers `200`.
+- As any other user, the page is not in the menu, and the route answers `403 FOUNDATION_FORBIDDEN`.
+- After adding a Collection, a lifecycle or a notification channel and refreshing, the matching capability changes.
+
+## Reading the provider inventory
+
+The visible capability band is dynamic, not a fixed thirteen-item catalog. The optional overview `inventory` lists package manifests, catalog category associations and observed current registration separately. The browser adds Client route and provider owners as view-only evidence. Installation or registration alone never proves a package is configured or used; category usage must not be copied to every provider package.
+
+Unknown Pro and custom providers remain visible as unclassified extensions. An npm scope or proprietary license does not verify official origin or Pro identity. Discovery is bounded to direct dependencies, known providers and public observed contributions, so missing evidence means unknown rather than disabled. Do not write invented module associations, usage facts or provider status into application code to make the overview look complete.
+
+## Dynamic registration coverage
+
+The host records immutable explicit Server and Client plugin registrations, including provider-only and locales-only plugins. Foundation reads those snapshots itself. A registered Pro or custom provider with no category adapter becomes its own `extension:<packageName>` item; its package title and version are displayed, while usage remains pending recognition. Registration does not prove configuration or use. Unknown extensions enter the band only when registered. Recognized installed capabilities remain visible as unused when there is no current registration or usage evidence; a manifest or stale database tables alone never mark them active. Refreshing after unregistering removes the extension and safely selects another available item. Legacy adapter observations remain in `capabilities`; runtime-specific items are returned in optional `availableCapabilities`.
+
+## Business module matrix
+
+Modules follow current registered navigation, with descendant pages grouped under their top-level menu module and translated by their owning namespace. No business-module names or capability relationships are configured in the application. The matrix and module tags use the same dynamic capabilities as the band. Hover or focus a module to highlight its associations; select a checkmark to see evidence and the capability's existing “Without the foundation” explanation.
+
+The plugin combines page, authentication and authorization declarations, provider ownership and readable static page dependencies. Follow only referenced values from the selected page export; unused imports, unrelated shared-file exports and uncalled class methods are excluded. A statically matched literal API-client request can additionally establish dependencies on the matching root-mounted endpoint handlers and their referenced values, never every dependency in the router file. A multi-category provider identity alone does not establish all its categories. Opaque dependency injection and generic request wrappers stay unassociated. These references describe integration, not per-module runtime activity; do not turn them into execution counts. The server parses bounded package-local sources without importing application modules, running component loaders or exposing source paths. Deployed or custom layouts without readable declarations keep their runtime navigation and access evidence. Overrides, computed routing and opaque backend services may remain unassociated. Blank cells mean not identified, not unused. Keep all matrix logic in this plugin; no other plugin reports or application-specific mapping is required.
+
+Capability details include their associated business modules. API dependency associations require both the statically recognized HTTP method and path; an omitted method follows the API client's `GET` default. A refresh failure is shown while retaining the last successful result and its collection time. A `401` or `403` hides the cached overview. Do not describe cached data as freshly collected or type-only references as runtime integration.
+
+## Sidebar grouping
+
+The host can call `groupFoundationNavigation(items)` from `@nocobase/app-plugin-foundation/client` in its existing `client/lib/navigation-transform.ts` hook, after permission filtering. The helper places an already-visible Foundation entry last in the existing `settings` navigation group, avoiding a separate sidebar group gap. Pass the host’s group name as the second argument when different. It preserves route identity, `/foundation`, authorization and other navigation metadata, never creates a hidden entry and leaves Foundation standalone if no settings group exists. The App needs only the hook call; grouping logic stays in this plugin and does not change Core or the sidebar renderer.
+
+When business settings are added, preserve the template navigation transform: it merges the initial Foundation settings group into the application settings group without changing the page URL or access boundary. Do not remove the initial Foundation entry when keeping unused business administration unregistered.