@nocobase/app-template-default 1.0.0-beta.88 → 1.0.0-beta.90

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nocobase/app-template-default",
   "displayName": "Default Template",
-  "version": "1.0.0-beta.88",
+  "version": "1.0.0-beta.90",
   "type": "module",
   "prettier": "@nocobase/dev-config/prettier",
   "engines": {
@@ -9,7 +9,7 @@
   },
   "nocobase": {
     "templateKind": "app",
-    "defaultTemplateVersion": "1.0.0-beta.88"
+    "defaultTemplateVersion": "1.0.0-beta.90"
   },
   "devDependencies": {
     "@ai-sdk/react": "4.0.131",
@@ -74,9 +74,9 @@
     "elkjs": "^0.10.2",
     "@types/jsdom": "^30.0.0",
     "@noble/hashes": "2.3.0",
-    "@nocobase/app-client": "^4.0.0-beta.8",
+    "@nocobase/app-client": "^4.0.0-beta.9",
     "@nocobase/app-plugin-template-print": "0.0.2-beta.2",
-    "@nocobase/app-skills": "0.1.0-beta.59",
+    "@nocobase/app-skills": "0.1.0-beta.61",
     "@nocobase/app-testing": "0.1.0-beta.8",
     "@nocobase/app-websocket": "^0.1.0-beta.1",
     "@nocobase/dev-config": "0.1.0-beta.25",
@@ -143,40 +143,40 @@
     "better-auth": "1.7.5",
     "hono": "^4.13.2",
     "@nocobase/concurrency": "^0.1.0-beta.1",
-    "@nocobase/app-plugin-concurrency": "^0.1.0-beta.2",
-    "@nocobase/app-plugin-agents": "^2.0.0-beta.4",
+    "@nocobase/app-plugin-concurrency": "^0.1.0-beta.3",
+    "@nocobase/app-plugin-agents": "^2.0.0-beta.7",
     "@nocobase/app-plugin-api-keys": "^1.0.0-beta.21",
-    "@nocobase/app-plugin-authentication": "^2.0.0-beta.19",
-    "@nocobase/app-plugin-authorization": "^1.0.0-beta.36",
+    "@nocobase/app-plugin-authentication": "^2.0.0-beta.20",
+    "@nocobase/app-plugin-authorization": "^1.0.0-beta.37",
     "@nocobase/app-plugin-database-explorer": "^1.0.0-beta.19",
-    "@nocobase/app-plugin-file": "^1.0.0-beta.29",
-    "@nocobase/app-plugin-foundation": "^0.1.0-beta.14",
-    "@nocobase/app-plugin-i18n": "^1.0.0-beta.21",
-    "@nocobase/app-plugin-knowledge": "^0.1.0-beta.17",
-    "@nocobase/app-plugin-mail": "^1.0.0-beta.21",
-    "@nocobase/app-plugin-notification": "^2.0.0-beta.5",
-    "@nocobase/app-plugin-notification-in-app": "^2.0.0-beta.2",
-    "@nocobase/app-plugin-notification-providers": "^1.0.0-beta.18",
-    "@nocobase/app-plugin-scheduler": "^1.0.0-beta.23",
-    "@nocobase/app-plugin-users": "^2.0.0-beta.15",
-    "@nocobase/app-server": "^5.0.0-beta.1",
+    "@nocobase/app-plugin-file": "^1.0.0-beta.30",
+    "@nocobase/app-plugin-foundation": "^0.1.0-beta.17",
+    "@nocobase/app-plugin-i18n": "^1.0.0-beta.22",
+    "@nocobase/app-plugin-knowledge": "^0.1.0-beta.18",
+    "@nocobase/app-plugin-mail": "^1.0.0-beta.22",
+    "@nocobase/app-plugin-notification": "^2.0.0-beta.6",
+    "@nocobase/app-plugin-notification-in-app": "^2.0.0-beta.3",
+    "@nocobase/app-plugin-notification-providers": "^1.0.0-beta.19",
+    "@nocobase/app-plugin-scheduler": "^1.0.0-beta.24",
+    "@nocobase/app-plugin-users": "^2.0.0-beta.17",
+    "@nocobase/app-server": "^5.0.0-beta.2",
     "@nocobase/config": "^0.1.0-beta.3",
-    "@nocobase/db": "^1.0.0-beta.25",
+    "@nocobase/db": "^1.0.0-beta.26",
     "@nocobase/db-sqlite": "^0.1.0-beta.6",
     "@nocobase/service-provider": "^0.0.2-beta.2",
     "@nocobase/snowflake": "^1.0.0-beta.4",
-    "@nocobase/app-plugin-authz-default-access": "^1.0.0-beta.19",
-    "@nocobase/app-plugin-authz-sharing-rules": "^1.0.0-beta.18",
-    "@nocobase/app-plugin-authz-restriction-rules": "^1.0.0-beta.17",
+    "@nocobase/app-plugin-authz-default-access": "^1.0.0-beta.20",
+    "@nocobase/app-plugin-authz-sharing-rules": "^1.0.0-beta.19",
+    "@nocobase/app-plugin-authz-restriction-rules": "^1.0.0-beta.18",
     "@nocobase/authorization": "^1.0.0-beta.16",
-    "@nocobase/queue": "^1.0.0-beta.10",
-    "@nocobase/jobs": "^1.0.0-beta.5",
+    "@nocobase/queue": "^1.0.0-beta.11",
+    "@nocobase/jobs": "^1.0.0-beta.6",
     "@nocobase/lifecycle": "^0.1.0-beta.4",
-    "@nocobase/i18n": "^2.0.0-beta.1",
+    "@nocobase/i18n": "^2.0.0-beta.2",
     "@nocobase/caching": "^1.0.0-beta.4",
     "@nocobase/repository-input": "^0.1.0-beta.3",
     "@nocobase/app-cli": "^1.0.0-beta.32",
-    "@nocobase/realtime": "^1.0.0-beta.0"
+    "@nocobase/realtime": "^1.0.0-beta.2"
   },
   "description": "NocoBase 3 application template with the standard product capabilities.",
   "imports": {

package/server/config/auth.ts

@@ -12,7 +12,7 @@ import { bearer, deviceAuthorization, username } from 'better-auth/plugins';
  */
 const CLI_CLIENT_IDS: readonly string[] = ['nocobase-cli'];
 
-// Use mailers for shared sending; defineAuthConfig retains AUTH_EMAIL_* for legacy inline senders.
+// Select a named sender with passwordReset.mailer; defineAuthConfig retains AUTH_EMAIL_* for legacy inline senders.
 // Automatic recovery requires passwordReset.enabled: true; leave the switch absent for custom callback compatibility.
 const auth: AppConfigFactory<AuthConfig> = defineAuthConfig({
   defaults: {

package/server/config/index.ts

@@ -18,6 +18,7 @@ import queue from './queue.js';
 import jobs from './jobs.js';
 import scheduler from './scheduler.js';
 import caching from './caching.js';
+import realtime from './realtime.js';
 import i18n from './i18n.js';
 import app from './app.js';
 import api from './api.js';
@@ -43,6 +44,7 @@ const defaultConfigs: AppConfigFactory<{
   jobs: ReturnType<typeof jobs>;
   scheduler: ReturnType<typeof scheduler>;
   caching: ReturnType<typeof caching>;
+  realtime: ReturnType<typeof realtime>;
   i18n: ReturnType<typeof i18n>;
   app: ReturnType<typeof app>;
   api: ReturnType<typeof api>;
@@ -67,6 +69,7 @@ const defaultConfigs: AppConfigFactory<{
   jobs,
   scheduler,
   caching,
+  realtime,
   i18n,
   app,
   api,

package/server/config/jobs.ts

@@ -2,14 +2,22 @@ import {
   defineAppConfig,
   type AppConfigFactory,
 } from '@nocobase/app-server/config';
-import type { AppJobsConfig } from '@nocobase/app-server/jobs';
+import {
+  validateAppJobsConfig,
+  type AppJobsConfig,
+} from '@nocobase/app-server/jobs';
 
-/** Single-process persistence. Distributed jobs require an explicitly registered backend plugin. */
-const jobs: AppConfigFactory<AppJobsConfig> = defineAppConfig(({ paths }) => ({
-  memory: {
-    adapter: 'memory',
-    persistence: { path: paths.storage('jobs') },
-  },
-}));
+/** Single-process persistence. Without default, the built-in local configuration remains selected. */
+const jobs: AppConfigFactory<AppJobsConfig> = defineAppConfig({
+  defaults: ({ paths }) => ({
+    backends: {
+      memory: {
+        adapter: 'memory',
+        persistence: { path: paths.storage('jobs') },
+      },
+    },
+  }),
+  validate: validateAppJobsConfig,
+});
 
 export default jobs;

package/server/config/queue.ts

@@ -2,21 +2,22 @@ import {
   defineAppConfig,
   type AppConfigFactory,
 } from '@nocobase/app-server/config';
-import type { AppQueueConfig } from '@nocobase/app-server/queue';
+import {
+  validateAppQueueConfig,
+  type AppQueueConfig,
+} from '@nocobase/app-server/queue';
 
-/**
- * Configurations queues can run on. None is the default: until `queue.default` names one, queues run on the
- * built-in memory configuration, which serves one process and writes its pending jobs under storage/queue when the
- * application stops, and which is reported at startup outside development. Name `memory` to keep that choice without
- * the report. Shared Redis queues require explicit registration of @nocobase/app-plugin-queue-redis/server.
- */
-const queue: AppConfigFactory<AppQueueConfig> = defineAppConfig(
-  ({ paths }) => ({
-    memory: {
-      adapter: 'inMemory',
-      persistence: { path: paths.storage('queue') },
+/** Single-process persistence. Without default, the built-in local configuration remains selected. */
+const queue: AppConfigFactory<AppQueueConfig> = defineAppConfig({
+  defaults: ({ paths }) => ({
+    backends: {
+      memory: {
+        adapter: 'inMemory',
+        persistence: { path: paths.storage('queue') },
+      },
     },
   }),
-);
+  validate: validateAppQueueConfig,
+});
 
 export default queue;

package/server/config/realtime.ts

@@ -0,0 +1,4 @@
+import { defineRealtimeConfig } from '@nocobase/app-server/realtime';
+
+// Keep broker absent so an explicit broker without adapter fails validation.
+export default defineRealtimeConfig();

package/tests/client/auth-i18n.test.tsx

@@ -149,6 +149,6 @@ describe('authentication translations', () => {
     await act(() => value.changeLanguage('zh-CN'));
     expect(screen.getByText('此密码重置链接无效或已过期。')).toBeVisible();
     expect(screen.getByText('如果账户存在，重置链接已发送。')).toBeVisible();
-    expect(screen.getByRole('status', { name: '加载中' })).toBeVisible();
+    expect(await screen.findByRole('status', { name: '加载中' })).toBeVisible();
   });
 });

package/tests/client/authenticated-client-fixture.test.tsx

@@ -0,0 +1,37 @@
+import { expect, it } from 'vitest';
+import { createAuthenticatedClientRenderer } from '../helpers/authenticated-client.js';
+
+const render = createAuthenticatedClientRenderer();
+const identities = new Set<string>();
+const permissionSets = new Set<string>();
+const resource = { type: 'settings', id: 'authorization.default-access' };
+
+it.each([
+  { name: 'administrator', member: false, granted: false },
+  { name: 'permitted member', member: true, granted: true },
+  { name: 'unpermitted member', member: true, granted: false },
+])(
+  'isolates the $name session and grants in a reused application',
+  async ({ member, granted }) => {
+    const view = await render(<span>Isolated client</span>, {
+      member,
+      grants: granted ? [{ resource, actions: [{ action: 'read' }] }] : [],
+    });
+    expect(identities.has(view.session.user.id)).toBe(false);
+    expect(permissionSets.has(view.permissionSetKey)).toBe(false);
+    identities.add(view.session.user.id);
+    permissionSets.add(view.permissionSetKey);
+    expect(view.identity().session?.user.id).toBe(view.session.user.id);
+
+    const response = await view.session.fetch('/authorization/permissions');
+    expect(response.status).toBe(200);
+    const { data } = await response.json();
+    expect(data.unrestricted).toBe(!member);
+    const permission = expect.objectContaining({
+      resource,
+      actions: expect.arrayContaining(['read']),
+    });
+    if (granted) expect(data.permissions).toContainEqual(permission);
+    else expect(data.permissions).not.toContainEqual(permission);
+  },
+);

package/tests/client/back-button.test.tsx

@@ -8,6 +8,8 @@ import type { ReactElement, ReactNode } from 'react';
 import { createMemoryRouter, Outlet, RouterProvider } from 'react-router';
 import { describe, expect, it } from 'vitest';
 
+import type { AppClientRegisteredRoute } from '@nocobase/app-client/plugins';
+import { RouteTreeProvider } from '../../client/routing/route-context.js';
 import { BackButton } from '#components/back-button';
 
 import enUS from '../../client/locales/en-US.js';
@@ -41,6 +43,25 @@ function renderAt(url: string, child: ReactElement) {
     ],
     { initialEntries: [url] },
   );
+  const registered = ['/projects', '/overview'].map(
+    (path) =>
+      ({
+        path,
+        id: path,
+        name: path,
+        packageName: 'test',
+        auth: 'required',
+        authz: 'skip',
+        componentLoader: async () => ({ default: () => null }),
+      }) as AppClientRegisteredRoute,
+  );
+  // The provider needs to be within the router, so wrap each route's page.
+  const routes = router.routes;
+  for (const entry of routes) {
+    entry.element = (
+      <RouteTreeProvider routes={registered}>{entry.element}</RouteTreeProvider>
+    );
+  }
   render(<RouterProvider router={router} />, { wrapper: I18n });
   return router;
 }
@@ -77,4 +98,17 @@ describe('BackButton', () => {
       screen.getByRole('link', { name: 'Back to the overview' }),
     ).toHaveAttribute('href', '/overview');
   });
+  it.each(['https://example.com/overview', '//example.com', '/missing'])(
+    'falls back safely for %s without naming the invalid destination',
+    (to) => {
+      renderAt(
+        '/projects/12',
+        <BackButton to={to}>Private destination</BackButton>,
+      );
+      expect(
+        screen.getByRole('link', { name: enUS.navigation.back }),
+      ).toHaveAttribute('href', '/projects');
+      expect(screen.queryByText('Private destination')).not.toBeInTheDocument();
+    },
+  );
 });

package/tests/client/client-route-recovery.test.tsx

@@ -2,7 +2,8 @@ import type {
   AppClientRegisteredRoute,
   AppClientRouteComponentModule,
 } from '@nocobase/app-client/plugins';
-import { act, screen } from '@testing-library/react';
+import { act, fireEvent, screen, waitFor } from '@testing-library/react';
+import { Activity, useState } from 'react';
 import { describe, expect, it } from 'vitest';
 
 import { ClientRoute } from '../../client/routing/client-route.tsx';
@@ -49,6 +50,97 @@ const healthyModule: AppClientRouteComponentModule = {
 };
 
 describe('client route loading recovery', () => {
+  it('keeps a loaded wrapped component when an ancestor Activity reconnects its effects', async () => {
+    let loads = 0;
+    const componentLoader = async () => {
+      loads += 1;
+      return {
+        default: function Editor() {
+          const [draft, setDraft] = useState('');
+          return (
+            <input
+              aria-label='Draft'
+              value={draft}
+              onChange={(event) => setDraft(event.target.value)}
+            />
+          );
+        },
+      };
+    };
+    const definition = { ...route, componentLoader };
+    const view = (hidden: boolean) => (
+      <Activity mode={hidden ? 'hidden' : 'visible'}>
+        <ClientRoute route={definition} />
+      </Activity>
+    );
+    const { rerender } = await renderWithApp(view(false), options);
+    const input = await screen.findByRole(
+      'textbox',
+      { name: 'Draft' },
+      ROUTE_LOAD_TIMEOUT,
+    );
+    fireEvent.change(input, { target: { value: 'Keep this draft' } });
+    rerender(view(true));
+    await waitFor(() => expect(input).not.toBeVisible());
+    rerender(view(false));
+    await waitFor(() => expect(input).toBeVisible());
+    expect(screen.getByRole('textbox', { name: 'Draft' })).toBe(input);
+    expect(input).toHaveValue('Keep this draft');
+    expect(loads).toBe(1);
+  });
+
+  it('loads a replacement after a successful module and ignores a superseded successful response', async () => {
+    const pending = Promise.withResolvers<AppClientRouteComponentModule>();
+    const { rerender } = await renderWithApp(
+      <ClientRoute
+        route={{ ...route, componentLoader: async () => healthyModule }}
+      />,
+      options,
+    );
+    await screen.findByText('Recovered page', {}, ROUTE_LOAD_TIMEOUT);
+    rerender(
+      <ClientRoute
+        route={{ ...route, componentLoader: () => pending.promise }}
+      />,
+    );
+    const replacement = { default: () => <h2>Replacement page</h2> };
+    rerender(
+      <ClientRoute
+        route={{ ...route, componentLoader: async () => replacement }}
+      />,
+    );
+    await screen.findByText('Replacement page', {}, ROUTE_LOAD_TIMEOUT);
+    await act(async () =>
+      pending.resolve({ default: () => <h2>Stale page</h2> }),
+    );
+    expect(screen.getByText('Replacement page')).toBeVisible();
+    expect(screen.queryByText('Stale page')).toBeNull();
+  });
+
+  it('invokes the same loader again on retry after a failed attempt', async () => {
+    let loads = 0;
+    const componentLoader = async () => {
+      loads += 1;
+      if (loads === 1) throw new Error('Temporary failure');
+      return healthyModule;
+    };
+    await renderWithApp(
+      <ClientRoute route={{ ...route, componentLoader }} />,
+      options,
+    );
+    fireEvent.click(
+      await screen.findByRole(
+        'button',
+        { name: 'Retry', exact: true },
+        ROUTE_LOAD_TIMEOUT,
+      ),
+    );
+    expect(
+      await screen.findByText('Recovered page', {}, ROUTE_LOAD_TIMEOUT),
+    ).toBeVisible();
+    expect(loads).toBe(2);
+  });
+
   it('clears a previous failure when the same mounted route loads successfully', async () => {
     const { rerender } = await renderWithApp(
       <ClientRoute route={route} />,

package/tests/client/client-routes.test.ts

@@ -186,16 +186,17 @@ describe('app client routes', () => {
       { name: 'home', authorizedAs: null },
       { name: 'inbox', authorizedAs: null },
       { name: 'settingsHome', authorizedAs: null },
+      { name: 'databaseExplorer', authorizedAs: 'database-explorer' },
     ]);
   });
 
-  it('keeps a bare application free of settings modules and supports settings registration as business capabilities are developed', async () => {
-    // Only the settings home, which lists what the viewer may open and grants nothing itself.
+  it('includes database browsing and supports business settings registration', async () => {
+    // The built-in database browser joins the settings home without enabling business administration.
     expect(
       pagePaths(resolveRoutes().routes).filter((path) =>
         path.startsWith('/settings'),
       ),
-    ).toEqual(['/settings']);
+    ).toEqual(['/settings', '/settings/database-explorer']);
     const built = resolveAppClientContributions([
       {
         packageName: '@nocobase/app-template-default',
@@ -231,6 +232,7 @@ describe('app client routes', () => {
         name,
         authorizedAs: 'settings:authorization.default-access',
       })),
+      { name: 'databaseExplorer', authorizedAs: 'database-explorer' },
     ]);
     for (const loader of componentLoadersIn(built.routes))
       await expect(loader()).resolves.toMatchObject({

package/tests/client/database-explorer-integration.test.tsx

@@ -0,0 +1,30 @@
+import { screen } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { expect, it } from 'vitest';
+import DatabaseExplorerPage from '../../client/pages/settings/database-explorer/index.js';
+import { createAuthenticatedClientRenderer } from '../helpers/authenticated-client.js';
+
+const renderAuthenticated = createAuthenticatedClientRenderer();
+
+it('browses real database tables and fields as an administrator', async () => {
+  await renderAuthenticated(<DatabaseExplorerPage />, {
+    route: '/settings/database-explorer',
+  });
+  const user = userEvent.setup();
+  const tables = await screen.findAllByRole('button', { pressed: false });
+  expect(tables.length).toBeGreaterThan(0);
+  await user.click(tables[0]);
+  expect(await screen.findByRole('table')).toBeInTheDocument();
+  expect(screen.getAllByRole('cell').length).toBeGreaterThan(0);
+});
+
+it('keeps database information inaccessible to an ordinary member', async () => {
+  await renderAuthenticated(<DatabaseExplorerPage />, {
+    route: '/settings/database-explorer',
+    member: true,
+  });
+  expect(await screen.findByRole('alert')).toHaveTextContent(
+    'You do not have permission',
+  );
+  expect(screen.queryByRole('combobox')).not.toBeInTheDocument();
+});

package/tests/client/database-explorer.test.tsx

@@ -0,0 +1,152 @@
+import {
+  answerApi,
+  renderWithApp,
+  type ApiCall,
+} from '@nocobase/app-testing/client';
+import { act, screen, within } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { expect, it } from 'vitest';
+import DatabaseExplorerPage from '../../client/pages/settings/database-explorer/index.js';
+import enUS from '../../client/locales/en-US.js';
+import packageMetadata from '../../package.json' with { type: 'json' };
+
+const table = (name: string) => ({
+  name,
+  tableName: name,
+  schema: '',
+  kind: 'table',
+});
+const detail = (name: string) => ({
+  data: {
+    collection: {
+      name,
+      collection: { fields: [{ name, type: 'string' }] },
+      warnings: [],
+    },
+    metadata: null,
+  },
+});
+const connections = {
+  data: [{ name: 'main', isDefault: true, dialect: 'postgres' }],
+};
+function mount(api: (call: ApiCall) => unknown) {
+  return renderWithApp(<DatabaseExplorerPage />, {
+    route: '/settings/database-explorer',
+    namespace: packageMetadata.name,
+    namespaces: { [packageMetadata.name]: enUS },
+    fetch: answerApi(api),
+  });
+}
+
+it('searches all pages of tables and displays the selected table fields', async () => {
+  const user = userEvent.setup();
+  let pages = 0;
+  await mount(({ path }) => {
+    if (path.endsWith('/connections')) return connections;
+    if (path.endsWith('/collections'))
+      return ++pages === 1
+        ? { data: [table('orders')], meta: { nextPageToken: 'next' } }
+        : { data: [table('customers')] };
+    if (path.endsWith('/collections/customers')) return detail('customer_name');
+    throw new Error(`Unexpected request: ${path}`);
+  });
+  await screen.findByRole('button', { name: 'customers' });
+  await user.type(
+    screen.getByRole('textbox', { name: 'Search tables' }),
+    'customers',
+  );
+  expect(
+    screen.queryByRole('button', { name: 'orders' }),
+  ).not.toBeInTheDocument();
+  await user.click(screen.getByRole('button', { name: 'customers' }));
+  expect(
+    await screen.findByRole('cell', { name: 'customer_name' }),
+  ).toBeInTheDocument();
+  await user.type(
+    screen.getByRole('textbox', { name: 'Search fields' }),
+    'missing',
+  );
+  expect(screen.getByText('No fields found.')).toBeInTheDocument();
+  expect(pages).toBe(2);
+});
+
+it('does not display a late response for a previously selected table', async () => {
+  const user = userEvent.setup();
+  const slow = Promise.withResolvers<unknown>();
+  await mount(({ path }) => {
+    if (path.endsWith('/connections')) return connections;
+    if (path.endsWith('/collections'))
+      return { data: [table('orders'), table('customers')] };
+    if (path.endsWith('/orders')) return slow.promise;
+    if (path.endsWith('/customers')) return detail('customer_name');
+    throw new Error(`Unexpected request: ${path}`);
+  });
+  await user.click(await screen.findByRole('button', { name: 'orders' }));
+  expect(
+    within(screen.getByRole('region', { name: 'Fields' })).getByRole('status'),
+  ).toHaveTextContent('Loading');
+  await user.click(screen.getByRole('button', { name: 'customers' }));
+  await screen.findByRole('cell', { name: 'customer_name' });
+  await act(async () => slow.resolve(detail('order_name')));
+  expect(
+    screen.queryByRole('cell', { name: 'order_name' }),
+  ).not.toBeInTheDocument();
+});
+
+it('offers retry for a failed connection listing and handles an empty listing', async () => {
+  let attempts = 0;
+  const user = userEvent.setup();
+  await mount(() =>
+    ++attempts === 1 ? new Response(null, { status: 503 }) : { data: [] },
+  );
+  expect(await screen.findByRole('alert')).toHaveTextContent(
+    'Unable to load database information.',
+  );
+  await user.click(screen.getByRole('button', { name: 'Retry' }));
+  expect(
+    await screen.findByText('No database connections are configured.'),
+  ).toBeInTheDocument();
+});
+
+it('explains forbidden access without offering a retry', async () => {
+  await mount(() => new Response(null, { status: 403 }));
+  expect(await screen.findByRole('alert')).toHaveTextContent(
+    'You do not have permission',
+  );
+  expect(
+    screen.queryByRole('button', { name: 'Retry' }),
+  ).not.toBeInTheDocument();
+});
+
+it('clears the selected table when switching connections', async () => {
+  const user = userEvent.setup();
+  await mount(({ path }) => {
+    if (path.endsWith('/connections'))
+      return {
+        data: [
+          ...connections.data,
+          { name: 'external', isDefault: false, dialect: 'postgres' },
+        ],
+      };
+    if (path.endsWith('main/collections')) return { data: [table('orders')] };
+    if (path.endsWith('external/collections'))
+      return { data: [table('contacts')] };
+    if (path.endsWith('/orders')) return detail('order_name');
+    throw new Error(`Unexpected request: ${path}`);
+  });
+  await user.click(await screen.findByRole('button', { name: 'orders' }));
+  await screen.findByRole('cell', { name: 'order_name' });
+  await user.click(
+    screen.getByRole('combobox', { name: 'Database connection' }),
+  );
+  await user.click(await screen.findByRole('option', { name: /external/ }));
+  expect(
+    await screen.findByRole('button', { name: 'contacts' }),
+  ).toBeInTheDocument();
+  expect(
+    screen.queryByRole('cell', { name: 'order_name' }),
+  ).not.toBeInTheDocument();
+  expect(
+    screen.getByText('Select a table to view its fields.'),
+  ).toBeInTheDocument();
+});