@nocobase/app-template-default 1.0.0-beta.57 → 1.0.0-beta.58

package/AGENTS.md

@@ -6,6 +6,8 @@ Do not create a plugin to add a feature. Plugins are separately published packag
 
 When users refer to annotations, marks, or selections in the current application, first run `pnpm exec agent-annotations list --json` from the application root to find Agent Annotations records, ask for clarification only if none match or the target remains unclear, and do not implement annotation requests when the user only asks where they are.
 
+The Workflow plugin is retained as a dependency but is disabled by default in Client, Server, and CLI. Its configuration and example sources are retained for explicit opt-in use.
+
 ## Default template scope
 
 Default is the clean application starting point. It registers product capabilities but no `app-plugin-*-example` plugins, example pages, application sample services, or sample APIs. Keep runnable demonstrations in `app-template-examples`. Application-owned server routes start empty; the only built-in application provider exposes Authorization Permission Sets as direct roles in the Users page. The only application page is a localized homepage.

package/README.MD

@@ -422,6 +422,10 @@ curl -H "x-api-key: <key>" http://127.0.0.1:13000/main/api/swagger
 
 Replace `/main` with the application's `APP_BASE_PATH`. An application without the authentication plugin registers no way to tell who is asking, so it does not serve the documentation at all and both URLs answer `404`. There is no setting that makes it public.
 
+## Optional Workflow plugin
+
+The Workflow plugin is disabled by default in Client, Server, and CLI. Its package dependency and `server/config/workflow.ts` are retained. To opt in, register the plugin with `pnpm nocobase plugin register @nocobase/app-plugin-workflow` and restore the `workflow` import, type, and entry in `server/config/index.ts`.
+
 ## Working with an AI agent
 
 `AGENTS.md` describes how to build features here, and `.agents/skills/` contains package-owned guidance generated by `pnpm nocobase skills sync`. Give an agent an API key when it needs to call the application: it learns the available endpoints from the API document above rather than from route sources. If you use Claude Code, `CLAUDE.md` points at the same guidance. Keep application-specific rules in committed `AGENTS.md` files because synchronization replaces package-owned Skill directories.
@@ -449,7 +453,7 @@ Remotes are saved in `.nocobase/hub.json`, which holds addresses only and belong
 
 The `hub` commands authenticate with a Hub publishing key, created in Hub rather than in this application. Open **API Keys** in the Hub navigation (`<Hub URL>/api-keys`); reaching that page requires `hub.app / manage-api-keys`, granted to `hub-administrator` and `hub-operator` by default. In **Create API Key**, select this application under **Applications**, or **All applications (including future apps)**, then grant the permissions the commands below need: **Upload release** for `pnpm nocobase hub upload`, and both **Upload release** and **Deploy release** for `pnpm nocobase hub deploy`.
 
-The plaintext key is shown once at creation; while the key stays active its creator can copy it again from the same page. Bound applications and granted permissions cannot be changed afterwards, so a key created without `Deploy release` has to be deleted and recreated rather than edited. A key never exceeds its creator's current permissions, so uploads fail if the creator later loses access to the bound application. See [Publish applications with Hub](https://github.com/nocobase/nocobase3/blob/develop/docs/docs/en/deployment/hub.md) for the console walkthrough.
+The plaintext key is shown once at creation; while the key stays active its creator can copy it again from the same page. Bound applications and granted permissions cannot be changed afterwards, so a key created without `Deploy release` has to be deleted and recreated rather than edited. A key never exceeds its creator's current permissions, so uploads fail if the creator later loses access to the bound application. See [Publish applications with Hub](https://github.com/nocobase/nocobase/blob/v3-develop/docs/docs/en/deployment/hub.md) for the console walkthrough.
 
 Save the key with `pnpm nocobase hub auth login`, which asks for it without echoing it and checks with the Hub that it opens the App. It is stored outside the project in `$XDG_CONFIG_HOME/nocobase/hub-credentials.json` (`~/.config` when that is unset, `%APPDATA%\nocobase` on Windows), readable by the owner only, one key per remote URL. The commands read no key or Hub address from `.env`, the environment or command-line flags. `hub auth status` reports whether each remote has a key the Hub accepts, and `hub auth logout` removes a saved key. In CI, pipe the key in from a secret:
 

package/cli/plugins.ts

@@ -1,14 +1,8 @@
 import { defineCliPlugins, type AppCliPlugins } from '@nocobase/app-cli';
-import aiEmployee from '@nocobase/app-plugin-ai-employee/cli';
 import scheduler from '@nocobase/app-plugin-scheduler/cli';
-import workflow from '@nocobase/app-plugin-workflow/cli';
 
 // Array order is command registration order. A plugin contributes its commands
 // by appearing in this list; removing its entry and its import removes them.
-const cliPlugins: AppCliPlugins = defineCliPlugins([
-  workflow,
-  scheduler,
-  aiEmployee,
-]);
+const cliPlugins: AppCliPlugins = defineCliPlugins([scheduler]);
 
 export default cliPlugins;

package/client/plugins.ts

@@ -5,7 +5,6 @@ import {
   defineClientPlugins,
   type AppClientPlugins,
 } from '@nocobase/app-client/plugins';
-import aiEmployee from '@nocobase/app-plugin-ai-employee/client';
 import apiKeys from '@nocobase/app-plugin-api-keys/client';
 import authentication from '@nocobase/app-plugin-authentication/client';
 import authorization from '@nocobase/app-plugin-authorization/client';
@@ -13,7 +12,6 @@ import databaseExplorer from '@nocobase/app-plugin-database-explorer/client';
 import users from '@nocobase/app-plugin-users/client';
 import notificationInApp from '@nocobase/app-plugin-notification-in-app/client';
 import i18n from '@nocobase/app-plugin-i18n/client';
-import workflow from '@nocobase/app-plugin-workflow/client';
 import notification from '@nocobase/app-plugin-notification/client';
 import scheduler from '@nocobase/app-plugin-scheduler/client';
 import file from '@nocobase/app-plugin-file/client';
@@ -22,7 +20,6 @@ import file from '@nocobase/app-plugin-file/client';
 // list; removing its entry and its import disables it.
 const clientPlugins: AppClientPlugins = defineClientPlugins([
   authentication(),
-  aiEmployee(),
   authorization(),
   defaultAccess(),
   sharingRules(),
@@ -32,7 +29,6 @@ const clientPlugins: AppClientPlugins = defineClientPlugins([
   apiKeys({ path: '/api-keys' }),
   i18n(),
   notificationInApp(),
-  workflow(),
   notification(),
   file(),
   scheduler(),

package/config.example.yml

@@ -84,22 +84,6 @@ notification:
     #   provider: dingtalk-webhook
     #   webhookUrl: https://oapi.dingtalk.com/robot/send?access_token=replace-with-the-token
 
-# Declarative LLM services are loaded from application config, keyed by service name.
-# The server reads this when it starts: restart it after editing, which `pnpm dev` does on its own.
-# Keep the key out of this file. Write it into config.yml with
-# `pnpm nocobase config set --from-env ai.llmServices.openai.options.apiKey=OPENAI_API_KEY`,
-# or map an injected environment variable onto that path in server/config/ai.ts.
-# ai:
-#   llmServices:
-#     openai:
-#       title: OpenAI
-#       provider: openai
-#       enabledModels:
-#         - label: GPT-4.1
-#           value: gpt-4.1
-#       enabled: true
-#       sort: 10
-
 # DB_DIALECT, DB_HOST, DB_PORT, DB_DATABASE, DB_USERNAME, DB_PASSWORD, DB_SSL and DB_FILENAME override the main
 # connection's fields from the environment.
 database:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nocobase/app-template-default",
   "displayName": "Default Template",
-  "version": "1.0.0-beta.57",
+  "version": "1.0.0-beta.58",
   "type": "module",
   "prettier": "@nocobase/dev-config/prettier",
   "engines": {
@@ -9,7 +9,7 @@
   },
   "nocobase": {
     "templateKind": "app",
-    "defaultTemplateVersion": "1.0.0-beta.57"
+    "defaultTemplateVersion": "1.0.0-beta.58"
   },
   "devDependencies": {
     "@ai-sdk/react": "2.0.0",
@@ -77,13 +77,13 @@
     "vitest": "^4.1.10",
     "tar": "^7.5.22",
     "@nocobase/app-client": "^2.0.0-beta.2",
-    "@nocobase/app-plugin-template-print": "0.0.2-beta.0",
-    "@nocobase/app-skills": "0.1.0-beta.25",
+    "@nocobase/app-plugin-template-print": "0.0.2-beta.1",
+    "@nocobase/app-skills": "0.1.0-beta.26",
+    "@nocobase/app-testing": "0.1.0-beta.1",
     "@nocobase/app-websocket": "^0.0.1",
-    "@nocobase/dev-config": "0.1.0-beta.19",
+    "@nocobase/dev-config": "0.1.0-beta.20",
     "@nocobase/drive": "^0.1.0-beta.4",
-    "@nocobase/app-testing": "0.1.0-beta.1",
-    "@nocobase/hub-cli": "^1.0.0-beta.1",
+    "@nocobase/hub-cli": "^1.0.0-beta.2",
     "@nocobase/logging": "^0.1.0-beta.6",
     "@nocobase/session": "^0.1.0-beta.2"
   },
@@ -124,7 +124,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/nocobase/nocobase3.git",
+    "url": "git+https://github.com/nocobase/nocobase.git",
     "directory": "packages/templates/app-template-default"
   },
   "browserslist": {
@@ -144,22 +144,21 @@
     "@oclif/core": "^4.14.0",
     "better-auth": "1.7.5",
     "hono": "^4.13.2",
-    "@nocobase/app-plugin-ai-employee": "^3.0.0-beta.1",
     "@nocobase/app-plugin-api-keys": "^1.0.0-beta.13",
     "@nocobase/app-plugin-authentication": "^2.0.0-beta.2",
     "@nocobase/app-plugin-authorization": "^1.0.0-beta.25",
     "@nocobase/app-plugin-database-explorer": "^1.0.0-beta.11",
-    "@nocobase/app-plugin-file": "^1.0.0-beta.20",
+    "@nocobase/app-plugin-file": "^1.0.0-beta.21",
     "@nocobase/app-plugin-i18n": "^1.0.0-beta.13",
     "@nocobase/app-plugin-notification": "^1.0.0-beta.24",
     "@nocobase/app-plugin-notification-in-app": "^1.0.0-beta.22",
     "@nocobase/app-plugin-notification-providers": "^0.2.0-beta.10",
-    "@nocobase/app-plugin-scheduler": "^1.0.0-beta.14",
+    "@nocobase/app-plugin-scheduler": "^1.0.0-beta.15",
     "@nocobase/app-plugin-users": "^2.0.0-beta.1",
-    "@nocobase/app-server": "^2.0.0-beta.1",
+    "@nocobase/app-plugin-workflow": "^2.0.0-beta.1",
+    "@nocobase/app-server": "^2.0.0-beta.2",
     "@nocobase/config": "^0.1.0-beta.2",
     "@nocobase/db": "^1.0.0-beta.18",
-    "@nocobase/app-plugin-workflow": "^2.0.0-beta.1",
     "@nocobase/db-sqlite": "^0.1.0-beta.4",
     "@nocobase/service-provider": "^0.0.2-beta.1",
     "@nocobase/snowflake": "^1.0.0-beta.3",
@@ -171,9 +170,8 @@
     "@nocobase/jobs": "^0.1.0-beta.2",
     "@nocobase/i18n": "^1.0.0-beta.5",
     "@nocobase/caching": "^0.1.0-beta.2",
-    "@nocobase/ai-employee": "^0.2.0-beta.8",
     "@nocobase/repository-input": "^0.1.0-beta.2",
-    "@nocobase/app-cli": "^1.0.0-beta.14"
+    "@nocobase/app-cli": "^1.0.0-beta.15"
   },
   "description": "NocoBase 3 application template with the standard product capabilities.",
   "imports": {

package/server/config/index.ts

@@ -20,8 +20,6 @@ import app from './app.js';
 import api from './api.js';
 import database from './database.js';
 import snowflake from './snowflake.js';
-import ai from './ai.js';
-import workflow from './workflow.js';
 import users from './users.js';
 
 const defaultConfigs: AppConfigFactory<{
@@ -43,8 +41,6 @@ const defaultConfigs: AppConfigFactory<{
   api: ReturnType<typeof api>;
   database: ReturnType<typeof database>;
   snowflake: ReturnType<typeof snowflake>;
-  ai: ReturnType<typeof ai>;
-  workflow: ReturnType<typeof workflow>;
   users: ReturnType<typeof users>;
 }> = defaultAppConfigs({
   auth,
@@ -65,8 +61,6 @@ const defaultConfigs: AppConfigFactory<{
   api,
   database,
   snowflake,
-  ai,
-  workflow,
   users,
 });
 

package/server/plugins.ts

@@ -3,7 +3,6 @@ import sharingRules from '@nocobase/app-plugin-authz-sharing-rules/server';
 import restrictionRules from '@nocobase/app-plugin-authz-restriction-rules/server';
 import apiKeys from '@nocobase/app-plugin-api-keys/server';
 import authentication from '@nocobase/app-plugin-authentication/server';
-import aiEmployee from '@nocobase/app-plugin-ai-employee/server/plugin';
 import authorization from '@nocobase/app-plugin-authorization/server';
 import databaseExplorer from '@nocobase/app-plugin-database-explorer/server';
 import users from '@nocobase/app-plugin-users/server';
@@ -11,7 +10,6 @@ import i18n from '@nocobase/app-plugin-i18n/server';
 import notification from '@nocobase/app-plugin-notification/server';
 import notificationInApp from '@nocobase/app-plugin-notification-in-app/server';
 import notificationProviders from '@nocobase/app-plugin-notification-providers/server';
-import workflow from '@nocobase/app-plugin-workflow/server';
 import {
   defineServerPlugins,
   type AppServerPlugins,
@@ -21,7 +19,6 @@ import file from '@nocobase/app-plugin-file/server';
 
 const serverPlugins: AppServerPlugins = defineServerPlugins([
   authentication,
-  aiEmployee,
   authorization,
   defaultAccess,
   sharingRules,
@@ -33,7 +30,6 @@ const serverPlugins: AppServerPlugins = defineServerPlugins([
   notification,
   notificationInApp,
   notificationProviders,
-  workflow,
   file,
   scheduler,
 ]);

package/tests/logic/config.test.ts

@@ -187,7 +187,7 @@ describe('application config', () => {
     expect(runtime.config.get('session.stores.redis.host')).toBe('127.0.0.1');
     expect(runtime.config.get('logging.console.pretty')).toBe(false);
     expect(runtime.config.get('session.cookie.secure')).toBe(true);
-    expect(runtime.config.get('workflow.production')).toBe(true);
+    expect(runtime.config.get('workflow')).toBeUndefined();
     delete runtime.env.APP_SERVER_PORT;
     delete runtime.env.APP_SERVER_START_LOG;
     await runtime.config.reload();

package/tests/logic/plugin-page-authz.test.ts

@@ -8,8 +8,7 @@ import { describe, expect, it } from 'vitest';
 
 import clientPlugins from '../../client/plugins.js';
 
-// The plugins whose pages the permission workspace offers as page grants. The AI employee settings are granted under
-// System management instead, one settings item per page.
+// The plugins whose pages the permission workspace offers as page grants.
 const PAGE_GRANT_PLUGINS = [
   '@nocobase/app-plugin-users',
   '@nocobase/app-plugin-notification',
@@ -42,28 +41,6 @@ describe('plugin page authorization', () => {
       new Set(PAGE_GRANT_PLUGINS),
     );
   });
-
-  it('checks a System management settings item on every AI employee settings page', () => {
-    const resolved = resolveAppClientContributions(
-      clientPlugins.plugins.map((plugin) => ({
-        packageName: plugin.packageName,
-        source: 'plugin' as const,
-        routes: plugin.routes,
-      })),
-    );
-    const pages = entryPages(resolved.settingsRouteTree).filter(
-      (route) => route.packageName === '@nocobase/app-plugin-ai-employee',
-    );
-    expect(pages.length).toBeGreaterThan(0);
-    for (const page of pages)
-      expect({ id: page.id, authz: page.authz }).toMatchObject({
-        id: page.id,
-        authz: {
-          resource: { type: 'settings', id: expect.stringMatching(/^ai\./) },
-          action: 'read',
-        },
-      });
-  });
 });
 
 /** Pages without a page above them: nested pages share their parent's check. */

package/vitest.config.ts

@@ -24,7 +24,14 @@ export default createReactVitestConfig({
     // those tests were never run at all.
     include: ['tests/**/*.test.{ts,tsx}'],
     // Playwright runs tests/playwright/ against a built application; its files are named *.test.ts too.
-    exclude: ['tests/playwright/**'],
+    exclude: [
+      'tests/playwright/**',
+      // TODO: Re-enable Workflow examples and page tests with the capability tests.
+      'tests/components/workflow-waiting-task.test.tsx',
+      'tests/logic/workflow-examples.test.ts',
+      'tests/logic/quotation-review-routes.test.ts',
+      'tests/logic/analytics-report-date.test.ts',
+    ],
     setupFiles: ['./tests/setup/client-config.ts'],
     // Keep the command usable if an application intentionally removes all scaffold tests before adding its own.
     passWithNoTests: true,

package/server/config/ai.ts

@@ -1,27 +0,0 @@
-import type { AppConfigFactory } from '@nocobase/app-server/config';
-import {
-  defineAIConfig,
-  type AIApplicationConfig,
-} from '@nocobase/app-plugin-ai-employee/server/config';
-
-const ai: AppConfigFactory<AIApplicationConfig> = defineAIConfig({
-  // Map a secret onto the field of one service it sets, keyed by that
-  // service's name, such as
-  // `OPENAI_API_KEY: envString('llmServices.openai.options.apiKey')` or
-  // `GITHUB_MCP_TOKEN: envString('mcpServers.github.headers.Authorization')`.
-  env: {},
-  defaults: () => ({
-    storage: {},
-    aiEmployee: { storage: {} },
-    aiKnowledgeBase: {
-      storage: {},
-      vectorDatabases: [],
-      manifests: [],
-    },
-    llmServices: {},
-    skills: { paths: [] },
-    mcpServers: {},
-  }),
-});
-
-export default ai;