@nocobase/plugin-flow-engine 2.2.0-alpha.11 → 2.2.0-alpha.12

package/dist/ai/docs/runjs/context/ai.md

@@ -1,23 +1,51 @@
 ---
 title: "ctx.ai"
-description: "Use ctx.ai in RunJS to trigger AI employee tasks, either with inline task content or with tasks configured on an AI employee action."
-keywords: "ctx.ai,AI employee,triggerTask,triggerModelTask,RunJS,NocoBase"
+description: "Use ctx.ai in RunJS to trigger AI employee tasks in the global conversation or a specified AI Chat Box, either with inline task content or with tasks configured on an AI employee action."
+keywords: "ctx.ai,AI employee,uploadFile,attachments,triggerTask,triggerModelTask,onResponseLoadingChange,chatBoxUid,AI Chat Box,RunJS,NocoBase"
 ---
 
 # ctx.ai
 
 Use `ctx.ai` in RunJS to trigger **AI employee tasks**. It works well in JSBlock, JSAction, and other interactions where a button, form, or business flow needs to hand work to a specific AI employee.
 
-`ctx.ai` only triggers tasks. It does not return the execution result of the AI employee task. After the call, the task enters the AI employee conversation flow, and the result is handled by the AI employee session.
+`ctx.ai` uploads AI task attachments and triggers tasks. File uploads can be awaited, but task triggering does not return the execution result of the AI employee task. After the call, the task enters the AI employee conversation flow, and the result is handled by the AI employee session.
 
 :::warning Note
 
-`ctx.ai` is provided by the AI plugin. If the AI plugin is not enabled, or the current RunJS environment has not loaded the corresponding client capability, `ctx.ai` may not exist. You can check `ctx.ai?.triggerTask` or `ctx.ai?.triggerModelTask` before calling it.
+`ctx.ai` is provided by the AI plugin. If the AI plugin is not enabled, or the current RunJS environment has not loaded the corresponding client capability, `ctx.ai` may not exist. You can check `ctx.ai?.uploadFile`, `ctx.ai?.triggerTask`, or `ctx.ai?.triggerModelTask` before calling it.
 
 :::
 
 ## Methods
 
+### ctx.ai.uploadFile()
+
+Upload one file and return an attachment object that can be passed directly to an AI employee task.
+
+```ts
+const attachment = await ctx.ai.uploadFile(file, options);
+```
+
+| Parameter | Type | Description |
+|------|------|------|
+| `file` | `File` | Browser file object to upload. |
+| `options.onProgress` | `(percent: number) => void` | Upload progress callback. `percent` ranges from `0` to `100`. |
+| `options.signal` | `AbortSignal` | Signal used to cancel the upload. |
+
+The upload uses the file storage configured by the AI plugin and creates a record in `aiFiles`. The returned object includes fields such as `id`, `filename`, `url`, and `source`:
+
+```ts
+const attachment = await ctx.ai.uploadFile(file, {
+  onProgress(percent) {
+    console.log('upload progress', percent);
+  },
+});
+
+// attachment can be placed directly in message.attachments
+```
+
+The Promise is rejected when the upload fails. Removing an attachment from the local UI does not delete the record already created in `aiFiles`, matching the behavior of the default AI chat window.
+
 ### ctx.ai.triggerTask()
 
 Trigger an AI employee task directly.
@@ -30,8 +58,10 @@ ctx.ai.triggerTask(options: TriggerTaskOptions): void
 |------|------|------|
 | `aiEmployee` | `string \| AIEmployee` | AI employee. When a string is passed, NocoBase matches `AIEmployee.username` exactly, and the AI employee must be accessible to the current user. |
 | `tasks` | `Task[]` | Tasks to trigger. |
+| `chatBoxUid` | `string` | FlowModel uid of the AI Chat Box block that should receive the task. |
 | `open` | `boolean` | Whether to open the AI employee conversation panel. |
 | `auto` | `boolean` | Whether to use the auto-trigger semantics of an AI employee action. |
+| `onResponseLoadingChange` | `(loading: boolean) => void` | Model response loading callback. It only runs when this task is sent automatically. |
 
 Common `Task` fields:
 
@@ -40,12 +70,160 @@ Common `Task` fields:
 | `title` | `string` | Task title. |
 | `message.system` | `string` | System message, used to constrain the AI employee's role and output requirements. |
 | `message.user` | `string` | User message, which is the main instruction for this task. |
+| `message.attachments` | `Attachment[]` | Attachments used by the task, usually returned by `ctx.ai.uploadFile()`. |
 | `message.workContext` | `ContextItem[]` | Page block context used by the task. |
 | `autoSend` | `boolean` | Whether to send the task message automatically. |
 | `webSearch` | `boolean` | Whether Web search is allowed for this task. |
 | `model` | `{ llmService: string; model: string } \| null` | Model used by this task. |
 | `skillSettings` | `SkillSettings` | Skills and tools available to this task. |
 
+### Track the Response Loading State
+
+Pass `onResponseLoadingChange` in the top-level options to track the model response loading state for this task. The callback receives `true` when NocoBase starts waiting for the model response, and `false` when the response completes, is canceled, or fails. If the React component has declared `setResponseLoading` with `useState`, you can write:
+
+```tsx
+ctx.ai.triggerTask({
+  aiEmployee: 'nathan',
+  open: true,
+  tasks: [
+    {
+      title: ctx.t('Review current page'),
+      message: {
+        user: 'Review the current page and summarize the main risks.',
+      },
+      autoSend: true,
+    },
+  ],
+  onResponseLoadingChange(loading) {
+    setResponseLoading(loading);
+  },
+});
+```
+
+`onResponseLoadingChange` only tracks the model response started directly by this `triggerTask()` call. With `autoSend: false`, the task is placed in the chat draft and the callback does not run. If the user sends the draft later, that manual send does not reuse this callback.
+
+In a React component inside a JS block, this state update rerenders the component while it remains mounted.
+
+### Target an AI Chat Box
+
+Set `chatBoxUid` on the top-level `triggerTask()` options to trigger the task in a mounted AI Chat Box block instead of the global AI employee dialog.
+
+```ts
+ctx.ai.triggerTask({
+  aiEmployee: 'nathan',
+  chatBoxUid: 'AI_CHAT_BOX_BLOCK_UID',
+  open: true,
+  tasks: [
+    {
+      title: ctx.t('Review current page'),
+      message: {
+        user: 'Review the current page and summarize the main risks.',
+      },
+    },
+  ],
+});
+```
+
+The uid must belong to the outer AI Chat Box block currently mounted on the page. Do not put this routing value inside `tasks`. If the target block cannot be found, NocoBase reports an error and does not fall back to the global dialog. When `chatBoxUid` is omitted, the task uses the global AI employee dialog.
+
+### Upload and Send Attachments in JSBlock
+
+The following example renders file upload, task instructions, and a send button in JSBlock. Uploaded files are passed to the AI employee through `message.attachments`:
+
+```tsx
+if (!ctx.ai?.uploadFile || !ctx.ai?.triggerTask) {
+  ctx.message.error(ctx.t('AI employee task API is not available.'));
+  return;
+}
+
+const { React } = ctx.libs;
+const { useState } = React;
+const { Button, Card, Input, Space, Upload } = ctx.libs.antd;
+const { InboxOutlined, SendOutlined } = ctx.libs.antdIcons;
+
+const AttachmentTask = () => {
+  const [prompt, setPrompt] = useState('');
+  const [fileList, setFileList] = useState([]);
+
+  const uploadAttachment = async ({ file, onError, onProgress, onSuccess }) => {
+    try {
+      const attachment = await ctx.ai.uploadFile(file, {
+        onProgress(percent) {
+          onProgress?.({ percent });
+        },
+      });
+      onSuccess?.(attachment);
+    } catch (error) {
+      onError?.(error instanceof Error ? error : new Error(ctx.t('File upload failed')));
+    }
+  };
+
+  const sendTask = () => {
+    const attachments = fileList
+      .filter((file) => file.status === 'done' && file.response)
+      .map((file) => file.response);
+
+    if (!prompt.trim()) {
+      ctx.message.warning(ctx.t('Enter task instructions'));
+      return;
+    }
+
+    ctx.ai.triggerTask({
+      aiEmployee: 'viz',
+      open: true,
+      tasks: [
+        {
+          title: ctx.t('Analyze uploaded files'),
+          message: {
+            user: prompt.trim(),
+            attachments,
+          },
+          autoSend: true,
+        },
+      ],
+    });
+    setPrompt('');
+    setFileList([]);
+  };
+
+  const uploading = fileList.some((file) => file.status === 'uploading');
+
+  return (
+    <Card title={ctx.t('AI file analysis')}>
+      <Space direction="vertical" size="middle" style={{ width: '100%' }}>
+        <Upload.Dragger
+          multiple
+          fileList={fileList}
+          customRequest={uploadAttachment}
+          onChange={({ fileList: nextFileList }) => setFileList(nextFileList)}
+        >
+          <p className="ant-upload-drag-icon"><InboxOutlined /></p>
+          <p>{ctx.t('Click or drag files here to upload')}</p>
+        </Upload.Dragger>
+        <Input.TextArea
+          value={prompt}
+          onChange={(event) => setPrompt(event.target.value)}
+          placeholder={ctx.t('Describe the task for the AI employee')}
+          autoSize={{ minRows: 3, maxRows: 8 }}
+        />
+        <Button
+          type="primary"
+          icon={<SendOutlined />}
+          disabled={uploading || !prompt.trim()}
+          onClick={sendTask}
+        >
+          {ctx.t('Send to AI')}
+        </Button>
+      </Space>
+    </Card>
+  );
+};
+
+ctx.render(<AttachmentTask />);
+```
+
+With `autoSend: false`, the attachments and task instructions are placed in the AI chat draft instead of being sent immediately.
+
 ### Add Page Block Context
 
 `message.workContext` currently passes page blocks. Put the FlowModel uid of the target page block into it:
@@ -163,9 +341,15 @@ ctx.ai.triggerModelTask(uid: string, taskIndex: number, options?: TriggerModelTa
 | `taskIndex` | `number` | Task index, starting from `0`. |
 | `options.open` | `boolean` | Whether to open the AI employee conversation panel. |
 | `options.auto` | `boolean` | Whether to use the auto-trigger semantics of an AI employee action. |
+| `options.attachments` | `Attachment[]` | Attachments dynamically appended to the configured task. |
+| `options.onResponseLoadingChange` | `(loading: boolean) => void` | Model response loading callback. It only runs when the configured task is sent automatically. |
 
 This method reads the AI employee and task configuration from the target model. It is useful when the task has already been configured on an AI employee action on the page, and RunJS only needs to trigger it.
 
+The public `triggerModelTask()` options do not accept `chatBoxUid`. To target an AI Chat Box, configure `chatBoxUid` on the preset task of the AI employee action. `triggerModelTask()` continues to reuse that preset value.
+
+`options.onResponseLoadingChange` behaves the same as the option on `triggerTask()`. Whether it runs depends on the configured task's `autoSend` value. It does not run when that task uses `autoSend: false`.
+
 ```ts
 if (!ctx.ai?.triggerModelTask) {
   ctx.message.error(ctx.t('AI employee task API is not available.'));
@@ -176,6 +360,7 @@ const weeklyReviewActionUid = 'AI_EMPLOYEE_ACTION_MODEL_UID';
 
 ctx.ai.triggerModelTask(weeklyReviewActionUid, 0, {
   open: true,
+  attachments,
 });
 
 ctx.message.success(ctx.t('Configured AI employee task triggered.'));
@@ -195,9 +380,14 @@ If the target model does not exist, has no AI employee configured, or the specif
 ## Notes
 
 - `triggerTask()` and `triggerModelTask()` are fire-and-forget. They do not return the execution result of the AI employee task.
+- `uploadFile()` returns a Promise. Wait for the upload to finish before triggering a task that uses the attachment.
 - `aiEmployee` strings only match `AIEmployee.username` exactly. They do not match nicknames, job titles, or translated names.
 - `triggerModelTask()` uses a `0`-based `taskIndex`.
 - `triggerModelTask()` reads task configuration from the target AI employee action model. If the task needs work context, configure `message.workContext` on that task.
+- Top-level `triggerTask().chatBoxUid` must reference an AI Chat Box block currently mounted on the page.
+- `triggerModelTask()` keeps using `chatBoxUid` configured on its preset task.
+- Dynamic `triggerModelTask()` attachments are appended to the preset task's existing `message.attachments` without changing the saved task configuration.
+- `onResponseLoadingChange` only tracks a model response automatically sent by the current call. It does not track a message the user sends manually later.
 
 ## Related
 

package/dist/externalVersion.js

@@ -8,16 +8,16 @@
  */
 
 module.exports = {
-  "@nocobase/client": "2.2.0-alpha.11",
+  "@nocobase/client": "2.2.0-alpha.12",
   "lodash": "4.18.1",
-  "@nocobase/database": "2.2.0-alpha.11",
-  "@nocobase/data-source-manager": "2.2.0-alpha.11",
-  "@nocobase/resourcer": "2.2.0-alpha.11",
-  "@nocobase/utils": "2.2.0-alpha.11",
-  "@nocobase/cache": "2.2.0-alpha.11",
-  "@nocobase/server": "2.2.0-alpha.11",
-  "@nocobase/actions": "2.2.0-alpha.11",
+  "@nocobase/database": "2.2.0-alpha.12",
+  "@nocobase/data-source-manager": "2.2.0-alpha.12",
+  "@nocobase/resourcer": "2.2.0-alpha.12",
+  "@nocobase/utils": "2.2.0-alpha.12",
+  "@nocobase/cache": "2.2.0-alpha.12",
+  "@nocobase/server": "2.2.0-alpha.12",
+  "@nocobase/actions": "2.2.0-alpha.12",
   "sequelize": "6.35.2",
   "@formily/json-schema": "2.3.7",
-  "@nocobase/ai": "2.2.0-alpha.11"
+  "@nocobase/ai": "2.2.0-alpha.12"
 };

package/dist/node_modules/@ant-design/icons-svg/package.json

@@ -1 +1 @@
-{"name":"@ant-design/icons-svg","version":"4.3.1","sideEffects":false,"description":"Abstract nodes for ant design icons.","contributors":["HeskeyBaozi <hezhiyu233@foxmail.com>"],"homepage":"https://github.com/ant-design/ant-design-icons/","license":"MIT","main":"lib/index.js","module":"es/index.js","files":["lib","es","inline-svg","inline-namespaced-svg"],"repository":{"type":"git","url":"git+https://github.com/ant-design/ant-design-icons.git"},"scripts":{"g":"npm run generate","generate":"cross-env NODE_ENV=production gulp --require ts-node/register/transpile-only","type-check":"tsc --noEmit","build:es":"tsc --project tsconfig.build.json --module esnext --outDir es","build:lib":"tsc --project tsconfig.build.json --module commonjs --outDir lib","build":"cross-env NODE_ENV=production && npm run build:es && npm run build:lib","test":"cross-env NODE_ENV=test && npm run test:unit","test:unit":"jest","prepublishOnly":"npm run test && npm run g && npm run build && npm run type-check && npm run digest","digest":"node scripts/digest.js"},"bugs":{"url":"https://github.com/ant-design/ant-design-icons/issues"},"devDependencies":{"@babel/core":"^7.8.6","@babel/preset-env":"^7.8.6","@babel/preset-typescript":"^7.8.3","@rgrove/parse-xml":"^2.0.2","@types/gulp":"^4.0.6","@types/gulp-concat":"^0.0.32","@types/gulp-rename":"^0.0.33","@types/jest":"^25.1.3","@types/lodash.camelcase":"^4.3.6","@types/lodash.template":"^4.4.6","@types/lodash.upperfirst":"^4.3.6","@types/node":"^13.9.3","@types/ramda":"^0.26.43","@types/rgrove__parse-xml":"^1.1.0","@types/svgo":"^1.3.1","@types/through2":"^2.0.34","@typescript-eslint/eslint-plugin":"^2.21.0","@typescript-eslint/parser":"^2.21.0","babel-jest":"^25.1.0","cross-env":"^7.0.0","del":"^5.1.0","eslint":"^7.16.0","globby":"^11.0.0","gulp":"^4.0.2","gulp-clone":"^2.0.1","gulp-concat":"^2.6.1","gulp-header":"^2.0.9","gulp-rename":"^2.0.0","jest":"^25.1.0","lodash.camelcase":"^4.3.0","lodash.template":"^4.5.0","lodash.upperfirst":"^4.3.1","ramda":"^0.27.0","svgo":"^1.3.2","through2":"^3.0.1","ts-node":"^8.6.2","typescript":"^4.0.0","vinyl":"^2.2.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_lastModified":"2026-07-28T07:40:06.190Z"}
+{"name":"@ant-design/icons-svg","version":"4.3.1","sideEffects":false,"description":"Abstract nodes for ant design icons.","contributors":["HeskeyBaozi <hezhiyu233@foxmail.com>"],"homepage":"https://github.com/ant-design/ant-design-icons/","license":"MIT","main":"lib/index.js","module":"es/index.js","files":["lib","es","inline-svg","inline-namespaced-svg"],"repository":{"type":"git","url":"git+https://github.com/ant-design/ant-design-icons.git"},"scripts":{"g":"npm run generate","generate":"cross-env NODE_ENV=production gulp --require ts-node/register/transpile-only","type-check":"tsc --noEmit","build:es":"tsc --project tsconfig.build.json --module esnext --outDir es","build:lib":"tsc --project tsconfig.build.json --module commonjs --outDir lib","build":"cross-env NODE_ENV=production && npm run build:es && npm run build:lib","test":"cross-env NODE_ENV=test && npm run test:unit","test:unit":"jest","prepublishOnly":"npm run test && npm run g && npm run build && npm run type-check && npm run digest","digest":"node scripts/digest.js"},"bugs":{"url":"https://github.com/ant-design/ant-design-icons/issues"},"devDependencies":{"@babel/core":"^7.8.6","@babel/preset-env":"^7.8.6","@babel/preset-typescript":"^7.8.3","@rgrove/parse-xml":"^2.0.2","@types/gulp":"^4.0.6","@types/gulp-concat":"^0.0.32","@types/gulp-rename":"^0.0.33","@types/jest":"^25.1.3","@types/lodash.camelcase":"^4.3.6","@types/lodash.template":"^4.4.6","@types/lodash.upperfirst":"^4.3.6","@types/node":"^13.9.3","@types/ramda":"^0.26.43","@types/rgrove__parse-xml":"^1.1.0","@types/svgo":"^1.3.1","@types/through2":"^2.0.34","@typescript-eslint/eslint-plugin":"^2.21.0","@typescript-eslint/parser":"^2.21.0","babel-jest":"^25.1.0","cross-env":"^7.0.0","del":"^5.1.0","eslint":"^7.16.0","globby":"^11.0.0","gulp":"^4.0.2","gulp-clone":"^2.0.1","gulp-concat":"^2.6.1","gulp-header":"^2.0.9","gulp-rename":"^2.0.0","jest":"^25.1.0","lodash.camelcase":"^4.3.0","lodash.template":"^4.5.0","lodash.upperfirst":"^4.3.1","ramda":"^0.27.0","svgo":"^1.3.2","through2":"^3.0.1","ts-node":"^8.6.2","typescript":"^4.0.0","vinyl":"^2.2.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org"},"_lastModified":"2026-07-30T03:54:05.520Z"}

package/dist/node_modules/acorn/package.json

@@ -1 +1 @@
-{"name":"acorn","description":"ECMAScript parser","homepage":"https://github.com/acornjs/acorn","main":"dist/acorn.js","types":"dist/acorn.d.ts","module":"dist/acorn.mjs","exports":{".":[{"import":"./dist/acorn.mjs","require":"./dist/acorn.js","default":"./dist/acorn.js"},"./dist/acorn.js"],"./package.json":"./package.json"},"version":"8.11.2","engines":{"node":">=0.4.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"license":"MIT","scripts":{"prepare":"cd ..; npm run build:main"},"bin":{"acorn":"./bin/acorn"},"_lastModified":"2026-07-28T07:40:07.187Z"}
+{"name":"acorn","description":"ECMAScript parser","homepage":"https://github.com/acornjs/acorn","main":"dist/acorn.js","types":"dist/acorn.d.ts","module":"dist/acorn.mjs","exports":{".":[{"import":"./dist/acorn.mjs","require":"./dist/acorn.js","default":"./dist/acorn.js"},"./dist/acorn.js"],"./package.json":"./package.json"},"version":"8.11.2","engines":{"node":">=0.4.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"license":"MIT","scripts":{"prepare":"cd ..; npm run build:main"},"bin":{"acorn":"./bin/acorn"},"_lastModified":"2026-07-30T03:54:06.651Z"}

package/dist/node_modules/acorn-jsx/package.json

@@ -1 +1 @@
-{"name":"acorn-jsx","description":"Modern, fast React.js JSX parser","homepage":"https://github.com/acornjs/acorn-jsx","version":"5.3.2","maintainers":[{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"http://rreverser.com/"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn-jsx"},"license":"MIT","scripts":{"test":"node test/run.js"},"peerDependencies":{"acorn":"^6.0.0 || ^7.0.0 || ^8.0.0"},"devDependencies":{"acorn":"^8.0.1"},"_lastModified":"2026-07-28T07:40:07.667Z"}
+{"name":"acorn-jsx","description":"Modern, fast React.js JSX parser","homepage":"https://github.com/acornjs/acorn-jsx","version":"5.3.2","maintainers":[{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"http://rreverser.com/"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn-jsx"},"license":"MIT","scripts":{"test":"node test/run.js"},"peerDependencies":{"acorn":"^6.0.0 || ^7.0.0 || ^8.0.0"},"devDependencies":{"acorn":"^8.0.1"},"_lastModified":"2026-07-30T03:54:07.073Z"}

package/dist/node_modules/acorn-walk/package.json

@@ -1 +1 @@
-{"name":"acorn-walk","description":"ECMAScript (ESTree) AST walker","homepage":"https://github.com/acornjs/acorn","main":"dist/walk.js","types":"dist/walk.d.ts","module":"dist/walk.mjs","exports":{".":[{"import":"./dist/walk.mjs","require":"./dist/walk.js","default":"./dist/walk.js"},"./dist/walk.js"],"./package.json":"./package.json"},"version":"8.3.4","engines":{"node":">=0.4.0"},"dependencies":{"acorn":"^8.11.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"scripts":{"prepare":"cd ..; npm run build:walk"},"license":"MIT","_lastModified":"2026-07-28T07:40:07.791Z"}
+{"name":"acorn-walk","description":"ECMAScript (ESTree) AST walker","homepage":"https://github.com/acornjs/acorn","main":"dist/walk.js","types":"dist/walk.d.ts","module":"dist/walk.mjs","exports":{".":[{"import":"./dist/walk.mjs","require":"./dist/walk.js","default":"./dist/walk.js"},"./dist/walk.js"],"./package.json":"./package.json"},"version":"8.3.4","engines":{"node":">=0.4.0"},"dependencies":{"acorn":"^8.11.0"},"maintainers":[{"name":"Marijn Haverbeke","email":"marijnh@gmail.com","web":"https://marijnhaverbeke.nl"},{"name":"Ingvar Stepanyan","email":"me@rreverser.com","web":"https://rreverser.com/"},{"name":"Adrian Heine","web":"http://adrianheine.de"}],"repository":{"type":"git","url":"https://github.com/acornjs/acorn.git"},"scripts":{"prepare":"cd ..; npm run build:walk"},"license":"MIT","_lastModified":"2026-07-30T03:54:07.185Z"}

package/dist/node_modules/ses/package.json

@@ -1 +1 @@
-{"name":"ses","version":"1.14.0","description":"Hardened JavaScript for Fearless Cooperation","keywords":["lockdown","harden","Compartment","assert","security","confinement","isolation","object capabilities","ocaps","secure execution","third-party code","prototype pollution","supply-chain attack","plugin"],"author":"Agoric","license":"Apache-2.0","homepage":"https://github.com/Agoric/SES-shim/tree/master/packages/ses#readme","repository":{"type":"git","url":"git+https://github.com/endojs/endo.git","directory":"packages/ses"},"bugs":{"url":"https://github.com/endojs/endo/issues"},"type":"module","main":"./dist/ses.cjs","module":"./index.js","unpkg":"./dist/ses.umd.js","types":"./types.d.ts","exports":{".":{"import":{"types":"./types.d.ts","xs":"./src-xs/index.js","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./lockdown":{"import":{"types":"./types.d.ts","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./hermes":{"require":{"types":"./dist/types.d.cts","default":"./dist/ses-hermes.cjs"}},"./tools.js":"./tools.js","./assert-shim.js":"./assert-shim.js","./lockdown-shim.js":{"xs":"./src-xs/lockdown-shim.js","default":"./lockdown-shim.js"},"./compartment-shim.js":{"xs":"./src-xs/compartment-shim.js","default":"./compartment-shim.js"},"./console-shim.js":"./console-shim.js","./package.json":"./package.json"},"scripts":{"build:vanilla":"node scripts/bundle.js","build:hermes":"node scripts/bundle.js hermes","build":"yarn build:vanilla && yarn build:hermes","clean":"rm -rf dist","cover":"c8 ava","demo":"python3 -m http.server","lint":"yarn lint:types && yarn lint:eslint","lint-fix":"eslint --fix .","lint:eslint":"eslint .","lint:types":"tsc","prepare":"npm run clean && npm run build","qt":"ava","test":"tsd && ava","test:hermes":"./scripts/hermes-test.sh","test:xs":"xst dist/ses.umd.js test/_lockdown-safe.js && node scripts/generate-test-xs.js && xst tmp/test-xs.js && rm -rf tmp","postpack":"git clean -fX \"*.d.ts*\" \"*.d.cts*\" \"*.d.mts*\" \"*.tsbuildinfo\""},"dependencies":{"@endo/cache-map":"^1.1.0","@endo/env-options":"^1.1.11","@endo/immutable-arraybuffer":"^1.1.2"},"devDependencies":{"@babel/generator":"^7.26.3","@babel/parser":"~7.26.2","@babel/traverse":"~7.25.9","@babel/types":"~7.26.0","@endo/compartment-mapper":"^1.6.3","@endo/module-source":"^1.3.3","@endo/test262-runner":"^0.1.48","@types/babel__traverse":"^7.20.5","ava":"^6.1.3","babel-eslint":"^10.1.0","c8":"^7.14.0","core-js":"^3.31.0","eslint":"^8.57.1","eslint-config-airbnb-base":"^15.0.0","eslint-config-prettier":"^9.1.0","eslint-plugin-eslint-comments":"^3.2.0","eslint-plugin-import":"^2.31.0","hermes-engine-cli":"^0.12.0","prettier":"^3.5.3","terser":"^5.16.6","tsd":"^0.31.2","typescript":"~5.8.3"},"files":["./*.d.ts","./*.js","./*.map","LICENSE*","SECURITY*","dist","lib","src","tools"],"publishConfig":{"access":"public"},"eslintConfig":{"extends":["plugin:@endo/ses"]},"ava":{"files":["test/**/*.test.*"],"timeout":"2m"},"typeCoverage":{"atLeast":81.17},"gitHead":"9815aea9541f241389d2135c6097a7442bdffa17","_lastModified":"2026-07-28T07:40:06.746Z"}
+{"name":"ses","version":"1.14.0","description":"Hardened JavaScript for Fearless Cooperation","keywords":["lockdown","harden","Compartment","assert","security","confinement","isolation","object capabilities","ocaps","secure execution","third-party code","prototype pollution","supply-chain attack","plugin"],"author":"Agoric","license":"Apache-2.0","homepage":"https://github.com/Agoric/SES-shim/tree/master/packages/ses#readme","repository":{"type":"git","url":"git+https://github.com/endojs/endo.git","directory":"packages/ses"},"bugs":{"url":"https://github.com/endojs/endo/issues"},"type":"module","main":"./dist/ses.cjs","module":"./index.js","unpkg":"./dist/ses.umd.js","types":"./types.d.ts","exports":{".":{"import":{"types":"./types.d.ts","xs":"./src-xs/index.js","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./lockdown":{"import":{"types":"./types.d.ts","default":"./index.js"},"require":{"types":"./dist/types.d.cts","default":"./dist/ses.cjs"}},"./hermes":{"require":{"types":"./dist/types.d.cts","default":"./dist/ses-hermes.cjs"}},"./tools.js":"./tools.js","./assert-shim.js":"./assert-shim.js","./lockdown-shim.js":{"xs":"./src-xs/lockdown-shim.js","default":"./lockdown-shim.js"},"./compartment-shim.js":{"xs":"./src-xs/compartment-shim.js","default":"./compartment-shim.js"},"./console-shim.js":"./console-shim.js","./package.json":"./package.json"},"scripts":{"build:vanilla":"node scripts/bundle.js","build:hermes":"node scripts/bundle.js hermes","build":"yarn build:vanilla && yarn build:hermes","clean":"rm -rf dist","cover":"c8 ava","demo":"python3 -m http.server","lint":"yarn lint:types && yarn lint:eslint","lint-fix":"eslint --fix .","lint:eslint":"eslint .","lint:types":"tsc","prepare":"npm run clean && npm run build","qt":"ava","test":"tsd && ava","test:hermes":"./scripts/hermes-test.sh","test:xs":"xst dist/ses.umd.js test/_lockdown-safe.js && node scripts/generate-test-xs.js && xst tmp/test-xs.js && rm -rf tmp","postpack":"git clean -fX \"*.d.ts*\" \"*.d.cts*\" \"*.d.mts*\" \"*.tsbuildinfo\""},"dependencies":{"@endo/cache-map":"^1.1.0","@endo/env-options":"^1.1.11","@endo/immutable-arraybuffer":"^1.1.2"},"devDependencies":{"@babel/generator":"^7.26.3","@babel/parser":"~7.26.2","@babel/traverse":"~7.25.9","@babel/types":"~7.26.0","@endo/compartment-mapper":"^1.6.3","@endo/module-source":"^1.3.3","@endo/test262-runner":"^0.1.48","@types/babel__traverse":"^7.20.5","ava":"^6.1.3","babel-eslint":"^10.1.0","c8":"^7.14.0","core-js":"^3.31.0","eslint":"^8.57.1","eslint-config-airbnb-base":"^15.0.0","eslint-config-prettier":"^9.1.0","eslint-plugin-eslint-comments":"^3.2.0","eslint-plugin-import":"^2.31.0","hermes-engine-cli":"^0.12.0","prettier":"^3.5.3","terser":"^5.16.6","tsd":"^0.31.2","typescript":"~5.8.3"},"files":["./*.d.ts","./*.js","./*.map","LICENSE*","SECURITY*","dist","lib","src","tools"],"publishConfig":{"access":"public"},"eslintConfig":{"extends":["plugin:@endo/ses"]},"ava":{"files":["test/**/*.test.*"],"timeout":"2m"},"typeCoverage":{"atLeast":81.17},"gitHead":"9815aea9541f241389d2135c6097a7442bdffa17","_lastModified":"2026-07-30T03:54:06.206Z"}

package/dist/node_modules/zod/package.json

@@ -1 +1 @@
-{"name":"zod","version":"4.3.5","type":"module","license":"MIT","author":"Colin McDonnell <zod@colinhacks.com>","description":"TypeScript-first schema declaration and validation library with static type inference","homepage":"https://zod.dev","llms":"https://zod.dev/llms.txt","llmsFull":"https://zod.dev/llms-full.txt","mcpServer":"https://mcp.inkeep.com/zod/mcp","funding":"https://github.com/sponsors/colinhacks","sideEffects":false,"files":["src","**/*.js","**/*.mjs","**/*.cjs","**/*.d.ts","**/*.d.mts","**/*.d.cts","**/package.json"],"keywords":["typescript","schema","validation","type","inference"],"main":"./index.cjs","types":"./index.d.cts","module":"./index.js","zshy":{"exports":{"./package.json":"./package.json",".":"./src/index.ts","./mini":"./src/mini/index.ts","./locales":"./src/locales/index.ts","./v3":"./src/v3/index.ts","./v4":"./src/v4/index.ts","./v4-mini":"./src/v4-mini/index.ts","./v4/mini":"./src/v4/mini/index.ts","./v4/core":"./src/v4/core/index.ts","./v4/locales":"./src/v4/locales/index.ts","./v4/locales/*":"./src/v4/locales/*"},"conditions":{"@zod/source":"src"}},"exports":{"./package.json":"./package.json",".":{"@zod/source":"./src/index.ts","types":"./index.d.cts","import":"./index.js","require":"./index.cjs"},"./mini":{"@zod/source":"./src/mini/index.ts","types":"./mini/index.d.cts","import":"./mini/index.js","require":"./mini/index.cjs"},"./locales":{"@zod/source":"./src/locales/index.ts","types":"./locales/index.d.cts","import":"./locales/index.js","require":"./locales/index.cjs"},"./v3":{"@zod/source":"./src/v3/index.ts","types":"./v3/index.d.cts","import":"./v3/index.js","require":"./v3/index.cjs"},"./v4":{"@zod/source":"./src/v4/index.ts","types":"./v4/index.d.cts","import":"./v4/index.js","require":"./v4/index.cjs"},"./v4-mini":{"@zod/source":"./src/v4-mini/index.ts","types":"./v4-mini/index.d.cts","import":"./v4-mini/index.js","require":"./v4-mini/index.cjs"},"./v4/mini":{"@zod/source":"./src/v4/mini/index.ts","types":"./v4/mini/index.d.cts","import":"./v4/mini/index.js","require":"./v4/mini/index.cjs"},"./v4/core":{"@zod/source":"./src/v4/core/index.ts","types":"./v4/core/index.d.cts","import":"./v4/core/index.js","require":"./v4/core/index.cjs"},"./v4/locales":{"@zod/source":"./src/v4/locales/index.ts","types":"./v4/locales/index.d.cts","import":"./v4/locales/index.js","require":"./v4/locales/index.cjs"},"./v4/locales/*":{"@zod/source":"./src/v4/locales/*","types":"./v4/locales/*","import":"./v4/locales/*","require":"./v4/locales/*"}},"repository":{"type":"git","url":"git+https://github.com/colinhacks/zod.git"},"bugs":{"url":"https://github.com/colinhacks/zod/issues"},"support":{"backing":{"npm-funding":true}},"scripts":{"clean":"git clean -xdf . -e node_modules","build":"zshy --project tsconfig.build.json","postbuild":"tsx ../../scripts/write-stub-package-jsons.ts && pnpm biome check --write .","test:watch":"pnpm vitest","test":"pnpm vitest run","prepublishOnly":"tsx ../../scripts/check-versions.ts"},"_lastModified":"2026-07-28T07:40:09.044Z"}
+{"name":"zod","version":"4.3.5","type":"module","license":"MIT","author":"Colin McDonnell <zod@colinhacks.com>","description":"TypeScript-first schema declaration and validation library with static type inference","homepage":"https://zod.dev","llms":"https://zod.dev/llms.txt","llmsFull":"https://zod.dev/llms-full.txt","mcpServer":"https://mcp.inkeep.com/zod/mcp","funding":"https://github.com/sponsors/colinhacks","sideEffects":false,"files":["src","**/*.js","**/*.mjs","**/*.cjs","**/*.d.ts","**/*.d.mts","**/*.d.cts","**/package.json"],"keywords":["typescript","schema","validation","type","inference"],"main":"./index.cjs","types":"./index.d.cts","module":"./index.js","zshy":{"exports":{"./package.json":"./package.json",".":"./src/index.ts","./mini":"./src/mini/index.ts","./locales":"./src/locales/index.ts","./v3":"./src/v3/index.ts","./v4":"./src/v4/index.ts","./v4-mini":"./src/v4-mini/index.ts","./v4/mini":"./src/v4/mini/index.ts","./v4/core":"./src/v4/core/index.ts","./v4/locales":"./src/v4/locales/index.ts","./v4/locales/*":"./src/v4/locales/*"},"conditions":{"@zod/source":"src"}},"exports":{"./package.json":"./package.json",".":{"@zod/source":"./src/index.ts","types":"./index.d.cts","import":"./index.js","require":"./index.cjs"},"./mini":{"@zod/source":"./src/mini/index.ts","types":"./mini/index.d.cts","import":"./mini/index.js","require":"./mini/index.cjs"},"./locales":{"@zod/source":"./src/locales/index.ts","types":"./locales/index.d.cts","import":"./locales/index.js","require":"./locales/index.cjs"},"./v3":{"@zod/source":"./src/v3/index.ts","types":"./v3/index.d.cts","import":"./v3/index.js","require":"./v3/index.cjs"},"./v4":{"@zod/source":"./src/v4/index.ts","types":"./v4/index.d.cts","import":"./v4/index.js","require":"./v4/index.cjs"},"./v4-mini":{"@zod/source":"./src/v4-mini/index.ts","types":"./v4-mini/index.d.cts","import":"./v4-mini/index.js","require":"./v4-mini/index.cjs"},"./v4/mini":{"@zod/source":"./src/v4/mini/index.ts","types":"./v4/mini/index.d.cts","import":"./v4/mini/index.js","require":"./v4/mini/index.cjs"},"./v4/core":{"@zod/source":"./src/v4/core/index.ts","types":"./v4/core/index.d.cts","import":"./v4/core/index.js","require":"./v4/core/index.cjs"},"./v4/locales":{"@zod/source":"./src/v4/locales/index.ts","types":"./v4/locales/index.d.cts","import":"./v4/locales/index.js","require":"./v4/locales/index.cjs"},"./v4/locales/*":{"@zod/source":"./src/v4/locales/*","types":"./v4/locales/*","import":"./v4/locales/*","require":"./v4/locales/*"}},"repository":{"type":"git","url":"git+https://github.com/colinhacks/zod.git"},"bugs":{"url":"https://github.com/colinhacks/zod/issues"},"support":{"backing":{"npm-funding":true}},"scripts":{"clean":"git clean -xdf . -e node_modules","build":"zshy --project tsconfig.build.json","postbuild":"tsx ../../scripts/write-stub-package-jsons.ts && pnpm biome check --write .","test:watch":"pnpm vitest","test":"pnpm vitest run","prepublishOnly":"tsx ../../scripts/check-versions.ts"},"_lastModified":"2026-07-30T03:54:08.193Z"}

package/dist/server/flow-surfaces/navigation-targets.d.ts

@@ -12,6 +12,7 @@ export declare const DEFAULT_MOBILE_UI_LAYOUT_UID = "mobile-layout-model";
 export declare const DEFAULT_ADMIN_MULTI_PORTAL_UID = "__default_admin__";
 export declare const DEFAULT_MOBILE_MULTI_PORTAL_UID = "__default_mobile__";
 export type FlowSurfaceNavigationRequestRoles = readonly string[] | string;
+type FlowSurfacePortalRouteScopeKind = 'layout' | 'portal';
 export type FlowSurfaceResolvedMultiPortal = {
     uid: string;
     title: string;
@@ -22,6 +23,8 @@ export type FlowSurfaceResolvedMultiPortal = {
     enabled: true;
     layoutUid: string;
     layoutType?: string;
+    portalType: 'no-code';
+    routeScopeKind: FlowSurfacePortalRouteScopeKind;
 };
 export type FlowSurfaceNavigationTarget = {
     kind: 'layout' | 'portal';
@@ -56,6 +59,7 @@ export declare class FlowSurfaceNavigationTargetsService {
     hasUiLayoutCapability(): boolean;
     normalizePortalUid(value: unknown): string;
     listNavigationTargets(currentRoles?: FlowSurfaceNavigationRequestRoles, transaction?: Transaction): Promise<FlowSurfaceNavigationTargetsResult>;
+    resolveDefaultPortal(options: Omit<PortalResolveOptions, 'path'>): Promise<FlowSurfaceResolvedMultiPortal>;
     resolvePortal(portalUidValue: unknown, options: PortalResolveOptions): Promise<FlowSurfaceResolvedMultiPortal>;
     readRoutePortalUids(routeId: unknown, transaction?: Transaction): Promise<string[]>;
     assertRouteBelongsToPortal(actionName: string, routeId: unknown, portalUid: string, path: string, transaction?: Transaction): Promise<void>;
@@ -64,7 +68,10 @@ export declare class FlowSurfaceNavigationTargetsService {
         transaction?: Transaction;
     }): Promise<void>;
     private listLayoutTargets;
+    private getEnabledPortalInventory;
     private listAccessiblePortalTargets;
+    private comparePortalPriority;
+    private getPortalPriority;
     private canAccessPortal;
     private collectRouteTreeIds;
     private removeDefaultLayoutRoutePermissions;

package/dist/server/flow-surfaces/navigation-targets.js

@@ -38,7 +38,6 @@ const DEFAULT_ADMIN_UI_LAYOUT_UID = "admin-layout-model";
 const DEFAULT_MOBILE_UI_LAYOUT_UID = "mobile-layout-model";
 const DEFAULT_ADMIN_MULTI_PORTAL_UID = "__default_admin__";
 const DEFAULT_MOBILE_MULTI_PORTAL_UID = "__default_mobile__";
-const RESERVED_MULTI_PORTAL_UIDS = /* @__PURE__ */ new Set([DEFAULT_ADMIN_MULTI_PORTAL_UID, DEFAULT_MOBILE_MULTI_PORTAL_UID]);
 function readRecordField(record, field) {
   if (!record || typeof record !== "object") {
     return void 0;
@@ -60,6 +59,9 @@ function normalizeRoles(currentRoles) {
 function normalizeRelationRouteId(routeId) {
   return routeId === null || typeof routeId === "undefined" ? void 0 : routeId;
 }
+function isDefaultLayoutMultiPortalUid(uid) {
+  return uid === DEFAULT_ADMIN_MULTI_PORTAL_UID || uid === DEFAULT_MOBILE_MULTI_PORTAL_UID;
+}
 class FlowSurfaceNavigationTargetsService {
   constructor(db) {
     this.db = db;
@@ -85,9 +87,17 @@ class FlowSurfaceNavigationTargetsService {
     return portalUid || void 0;
   }
   async listNavigationTargets(currentRoles, transaction) {
-    const layoutTargets = await this.listLayoutTargets(transaction);
+    var _a;
+    let layoutTargets = await this.listLayoutTargets(transaction);
     const multiPortal = this.hasMultiPortalCapability();
-    const portalTargets = multiPortal ? await this.listAccessiblePortalTargets(currentRoles, transaction) : [];
+    const portalInventory = multiPortal ? await this.getEnabledPortalInventory(currentRoles, transaction) : { accessible: [] };
+    const portalTargets = multiPortal ? await this.listAccessiblePortalTargets(portalInventory.accessible, transaction) : [];
+    if (multiPortal) {
+      layoutTargets = layoutTargets.map(({ default: _default, ...target }) => target);
+      if (portalInventory.accessible.length === 1 && ((_a = portalTargets[0]) == null ? void 0 : _a.uid) === readStringField(portalInventory.accessible[0], "uid")) {
+        portalTargets[0] = { ...portalTargets[0], default: true };
+      }
+    }
     return {
       version: "1",
       capabilities: {
@@ -96,6 +106,60 @@ class FlowSurfaceNavigationTargetsService {
       targets: [...layoutTargets, ...portalTargets]
     };
   }
+  async resolveDefaultPortal(options) {
+    if (!this.hasMultiPortalCapability()) {
+      (0, import_errors.throwBadRequest)(`flowSurfaces ${options.actionName} requires the Multi-portal capability`, {
+        ruleId: "navigation-portal-unsupported",
+        path: "navigation"
+      });
+    }
+    const inventory = await this.getEnabledPortalInventory(options.currentRoles, options.transaction);
+    if (!inventory.enabled.length) {
+      (0, import_errors.throwBadRequest)(`flowSurfaces ${options.actionName} requires an enabled portal`, {
+        ruleId: "navigation-portal-not-found",
+        path: "navigation",
+        details: {
+          uiBuilderAllowed: false,
+          adminLayoutFallbackAllowed: false,
+          agentInstruction: "Stop this Flow Surfaces write. Ask the user to create and enable a Portal before retrying; do not fall back to the Admin layout."
+        }
+      });
+    }
+    if (!inventory.accessible.length) {
+      (0, import_errors.throwForbidden)(
+        `flowSurfaces ${options.actionName} current roles cannot access an enabled portal`,
+        "FLOW_SURFACE_NAVIGATION_PORTAL_FORBIDDEN",
+        {
+          ruleId: "navigation-portal-forbidden",
+          path: "navigation"
+        }
+      );
+    }
+    if (inventory.accessible.length > 1) {
+      (0, import_errors.throwBadRequest)(`flowSurfaces ${options.actionName} requires an explicit portal selection`, {
+        ruleId: "navigation-portal-selection-required",
+        path: "navigation",
+        details: {
+          candidates: inventory.accessible.map((portal) => {
+            const uid = readStringField(portal, "uid");
+            return {
+              uid,
+              portalName: readStringField(portal, "portalName") || null,
+              title: readStringField(portal, "title") || uid,
+              portalType: readStringField(portal, "portalType") || null
+            };
+          }),
+          uiBuilderAllowed: false,
+          adminLayoutFallbackAllowed: false,
+          agentInstruction: "Stop this Flow Surfaces write and ask the user to select one candidate before retrying; do not choose by Portal type or fall back to the Admin layout."
+        }
+      });
+    }
+    return this.resolvePortal(readStringField(inventory.accessible[0], "uid"), {
+      ...options,
+      path: "navigation"
+    });
+  }
   async resolvePortal(portalUidValue, options) {
     const portalUid = this.normalizePortalUid(portalUidValue);
     if (!portalUid) {
@@ -111,19 +175,9 @@ class FlowSurfaceNavigationTargetsService {
         details: { portalUid }
       });
     }
-    if (RESERVED_MULTI_PORTAL_UIDS.has(portalUid)) {
-      (0, import_errors.throwBadRequest)(
-        `flowSurfaces ${options.actionName} ${options.path} cannot use reserved default portal uid '${portalUid}'; use layoutUid semantics instead`,
-        {
-          ruleId: "navigation-portal-reserved",
-          path: options.path,
-          details: { portalUid }
-        }
-      );
-    }
     const portal = await this.db.getRepository("multiPortals").findOne({
       filter: { uid: portalUid },
-      fields: ["uid", "title", "icon", "routeName", "routePath", "authCheck", "enabled", "uiLayoutUid"],
+      fields: ["uid", "title", "icon", "portalType", "portalName", "routePath", "authCheck", "enabled", "uiLayoutUid"],
       transaction: options.transaction
     });
     if (!portal) {
@@ -133,6 +187,18 @@ class FlowSurfaceNavigationTargetsService {
         details: { portalUid }
       });
     }
+    const routeScopeKind = isDefaultLayoutMultiPortalUid(portalUid) ? "layout" : "portal";
+    if (routeScopeKind === "portal" && !await this.canAccessPortal(portalUid, options.currentRoles, options.transaction)) {
+      (0, import_errors.throwForbidden)(
+        `flowSurfaces ${options.actionName} current roles cannot access portal '${portalUid}'`,
+        "FLOW_SURFACE_NAVIGATION_PORTAL_FORBIDDEN",
+        {
+          ruleId: "navigation-portal-forbidden",
+          path: options.path,
+          details: { portalUid }
+        }
+      );
+    }
     if (readRecordField(portal, "enabled") !== true) {
       (0, import_errors.throwBadRequest)(`flowSurfaces ${options.actionName} portal '${portalUid}' is disabled`, {
         ruleId: "navigation-portal-disabled",
@@ -140,6 +206,33 @@ class FlowSurfaceNavigationTargetsService {
         details: { portalUid }
       });
     }
+    const portalType = readStringField(portal, "portalType");
+    if (portalType !== "no-code") {
+      if (portalType === "ai") {
+        (0, import_errors.throwBadRequest)(
+          `flowSurfaces ${options.actionName} cannot use UI Builder or Flow Surfaces for AI Portal '${portalUid}'; stop and implement the request in the Portal source code`,
+          {
+            ruleId: "navigation-portal-type-unsupported",
+            path: options.path,
+            details: {
+              portalUid,
+              portalType,
+              portalName: readStringField(portal, "portalName") || null,
+              expectedPortalType: "no-code",
+              uiBuilderAllowed: false,
+              adminLayoutFallbackAllowed: false,
+              implementationPath: "ai-portal-source",
+              agentInstruction: "Stop this Flow Surfaces write. Run nb portal info <portalName> -j to resolve localPath, then implement the request in that AI Portal source code. Do not retry with an Admin layout."
+            }
+          }
+        );
+      }
+      (0, import_errors.throwBadRequest)(`flowSurfaces ${options.actionName} portal '${portalUid}' does not support no-code routes`, {
+        ruleId: "navigation-portal-type-unsupported",
+        path: options.path,
+        details: { portalUid, portalType: portalType || null }
+      });
+    }
     const layoutUid = readStringField(portal, "uiLayoutUid");
     if (!layoutUid || !this.db.getCollection("uiLayouts")) {
       (0, import_errors.throwBadRequest)(`flowSurfaces ${options.actionName} portal '${portalUid}' has no available backing UI layout`, {
@@ -173,27 +266,18 @@ class FlowSurfaceNavigationTargetsService {
         }
       );
     }
-    if (!await this.canAccessPortal(portalUid, options.currentRoles, options.transaction)) {
-      (0, import_errors.throwForbidden)(
-        `flowSurfaces ${options.actionName} current roles cannot access portal '${portalUid}'`,
-        "FLOW_SURFACE_NAVIGATION_PORTAL_FORBIDDEN",
-        {
-          ruleId: "navigation-portal-forbidden",
-          path: options.path,
-          details: { portalUid }
-        }
-      );
-    }
     return {
       uid: portalUid,
       title: readStringField(portal, "title") || portalUid,
       icon: readStringField(portal, "icon") || null,
-      routeName: readStringField(portal, "routeName"),
+      routeName: readStringField(portal, "portalName"),
       routePath: readStringField(portal, "routePath"),
       authCheck: readRecordField(portal, "authCheck") === true,
       enabled: true,
       layoutUid,
-      layoutType: readStringField(layout, "layoutType")
+      layoutType: readStringField(layout, "layoutType"),
+      portalType,
+      routeScopeKind
     };
   }
   async readRoutePortalUids(routeId, transaction) {
@@ -293,43 +377,48 @@ class FlowSurfaceNavigationTargetsService {
       return left.uid.localeCompare(right.uid);
     });
   }
-  async listAccessiblePortalTargets(currentRoles, transaction) {
+  async getEnabledPortalInventory(currentRoles, transaction) {
+    const enabled = await this.db.getRepository("multiPortals").find({
+      filter: { enabled: true },
+      fields: ["uid", "title", "icon", "portalType", "portalName", "routePath", "authCheck", "enabled", "uiLayoutUid"],
+      sort: ["uid"],
+      transaction
+    });
+    enabled.sort(
+      (left, right) => String(readStringField(left, "uid") || "").localeCompare(String(readStringField(right, "uid") || ""))
+    );
     const roles = normalizeRoles(currentRoles);
-    let accessiblePortalUids;
-    if (!roles.includes("root")) {
-      if (!roles.length || !this.db.getCollection("rolesMultiPortals")) {
-        return [];
-      }
+    const isRoot = roles.includes("root");
+    const accessiblePortalUids = /* @__PURE__ */ new Set();
+    if (!isRoot && roles.length && this.db.getCollection("rolesMultiPortals")) {
       const grants = await this.db.getRepository("rolesMultiPortals").find({
-        fields: ["multiPortalUid"],
         filter: { roleName: roles },
+        fields: ["multiPortalUid"],
         transaction
       });
-      accessiblePortalUids = Array.from(
-        new Set(
-          grants.map((grant) => readStringField(grant, "multiPortalUid")).filter((portalUid) => !!portalUid)
-        )
-      );
-      if (!accessiblePortalUids.length) {
-        return [];
+      for (const grant of grants) {
+        const portalUid = readStringField(grant, "multiPortalUid");
+        if (portalUid) {
+          accessiblePortalUids.add(portalUid);
+        }
       }
     }
-    const accessiblePortalUidSet = accessiblePortalUids ? new Set(accessiblePortalUids) : void 0;
-    const filter = {
-      enabled: true,
-      "uid.$notIn": Array.from(RESERVED_MULTI_PORTAL_UIDS)
-    };
-    const portals = await this.db.getRepository("multiPortals").find({
-      filter,
-      fields: ["uid", "title", "icon", "routeName", "routePath", "authCheck", "enabled", "uiLayoutUid"],
-      sort: ["uid"],
-      transaction
+    const accessible = enabled.filter((portal) => {
+      const portalUid = readStringField(portal, "uid");
+      return !!portalUid && (isRoot || isDefaultLayoutMultiPortalUid(portalUid) || accessiblePortalUids.has(portalUid));
     });
+    return { enabled, accessible };
+  }
+  async listAccessiblePortalTargets(portals, transaction) {
     const targets = [];
     for (const portal of portals) {
       const portalUid = readStringField(portal, "uid");
       const layoutUid = readStringField(portal, "uiLayoutUid");
-      if (!portalUid || accessiblePortalUidSet && !accessiblePortalUidSet.has(portalUid) || !layoutUid || !this.db.getCollection("uiLayouts")) {
+      const portalType = readStringField(portal, "portalType");
+      if (!portalUid || portalType !== "no-code") {
+        continue;
+      }
+      if (!layoutUid || !this.db.getCollection("uiLayouts")) {
         continue;
       }
       const layout = await this.db.getRepository("uiLayouts").findOne({
@@ -348,12 +437,30 @@ class FlowSurfaceNavigationTargetsService {
         icon: readStringField(portal, "icon") || null,
         layoutUid,
         layoutType: readStringField(layout, "layoutType"),
-        routeName: readStringField(portal, "routeName"),
+        routeName: readStringField(portal, "portalName"),
         routePath: readStringField(portal, "routePath"),
         authCheck: readRecordField(portal, "authCheck") === true
       });
     }
-    return targets;
+    return targets.sort((left, right) => this.comparePortalPriority(left, right));
+  }
+  comparePortalPriority(left, right) {
+    const priorityDelta = this.getPortalPriority(left) - this.getPortalPriority(right);
+    if (priorityDelta) {
+      return priorityDelta;
+    }
+    return String(readStringField(left, "uid") || "").localeCompare(String(readStringField(right, "uid") || ""));
+  }
+  getPortalPriority(portal) {
+    const uiLayout = readRecordField(portal, "uiLayout");
+    const layoutType = readStringField(portal, "layoutType") || readStringField(uiLayout, "layoutType");
+    if (readStringField(portal, "uid") === DEFAULT_ADMIN_MULTI_PORTAL_UID) {
+      return 0;
+    }
+    if (layoutType !== "mobile") {
+      return 1;
+    }
+    return 2;
   }
   async canAccessPortal(portalUid, currentRoles, transaction) {
     const roles = normalizeRoles(currentRoles);

package/dist/server/flow-surfaces/service.d.ts

@@ -96,6 +96,12 @@ export declare class FlowSurfacesService {
     private resolveDesktopRouteLayoutUidFilter;
     private assertNavigationTargetIsExclusive;
     private readDesktopRouteScope;
+    private buildDesktopRouteScopeForPortal;
+    private assertAdminLayoutCreateScope;
+    private getPortalRouteFilterUid;
+    private assertRouteBelongsToResolvedPortal;
+    private resolveDefaultDesktopRouteScope;
+    private resolveDesktopRouteMatchScope;
     private resolveRequestedDesktopRouteScope;
     private resolveExistingDesktopRouteScope;
     private attachDesktopRouteScopeToRouteAndChildren;
@@ -227,6 +233,7 @@ export declare class FlowSurfacesService {
     private dispatchPlanOnlyAction;
     private resolveApplyBlueprintReplaceTargetInfo;
     private resolveApplyBlueprintCreateNavigationGroup;
+    private resolveApplyBlueprintDefaultNavigationTarget;
     private normalizeApplyBlueprintCreateMobileNavigation;
     private assertApplyBlueprintCreateNavigationTarget;
     private resolveApplyBlueprintCreatePageIdentity;

package/dist/server/flow-surfaces/service.js

@@ -1204,6 +1204,83 @@ class FlowSurfacesService {
       layoutUids: await this.readDesktopRouteUiLayoutUids(routeId, transaction)
     };
   }
+  buildDesktopRouteScopeForPortal(portal) {
+    return {
+      portalUids: portal.routeScopeKind === "portal" ? [portal.uid] : [],
+      layoutUids: portal.routeScopeKind === "layout" ? [portal.layoutUid] : [],
+      selectedPortal: portal,
+      layoutType: portal.layoutType
+    };
+  }
+  assertAdminLayoutCreateScope(actionName, scope, path) {
+    if (!this.navigationTargets.hasMultiPortalCapability() || scope.selectedPortal || !scope.layoutUids.includes(import_navigation_targets.DEFAULT_ADMIN_UI_LAYOUT_UID)) {
+      return;
+    }
+    (0, import_errors.throwBadRequest)(`flowSurfaces ${actionName} cannot create navigation directly in the Admin layout`, {
+      ruleId: "navigation-admin-layout-not-portal-target",
+      path,
+      details: {
+        layoutUid: import_navigation_targets.DEFAULT_ADMIN_UI_LAYOUT_UID,
+        uiBuilderAllowed: false,
+        adminLayoutFallbackAllowed: false,
+        agentInstruction: "Resolve the target Portal first. For a no-code Portal, pass portalUid (navigation.portalUid in applyBlueprint); for an AI Portal, stop this Flow Surfaces write and implement the request in the Portal source code."
+      }
+    });
+  }
+  getPortalRouteFilterUid(portal) {
+    return (portal == null ? void 0 : portal.routeScopeKind) === "portal" ? portal.uid : void 0;
+  }
+  async assertRouteBelongsToResolvedPortal(actionName, route, portal, path, transaction) {
+    if (portal.routeScopeKind === "layout") {
+      await this.assertDesktopRouteBelongsToUiLayout(actionName, route, portal.layoutUid, path, transaction);
+      return;
+    }
+    await this.navigationTargets.assertRouteBelongsToPortal(
+      actionName,
+      this.readRouteField(route, "id"),
+      portal.uid,
+      path,
+      transaction
+    );
+  }
+  async resolveDefaultDesktopRouteScope(actionName, options = {}) {
+    if (this.navigationTargets.hasMultiPortalCapability()) {
+      const portal = await this.navigationTargets.resolveDefaultPortal({
+        actionName,
+        currentRoles: options.currentRoles,
+        transaction: options.transaction
+      });
+      return this.buildDesktopRouteScopeForPortal(portal);
+    }
+    const layoutUids = await this.resolveDefaultDesktopRouteUiLayoutUids(options.transaction);
+    return {
+      portalUids: [],
+      layoutUids,
+      layoutType: layoutUids.length === 1 ? await this.getDesktopRouteUiLayoutTypeByUid(layoutUids[0], options.transaction) : void 0
+    };
+  }
+  async resolveDesktopRouteMatchScope(layoutUid, portalUid, actionName, options = {}) {
+    if (portalUid) {
+      const portal = await this.navigationTargets.resolvePortal(portalUid, {
+        actionName,
+        path: "values.navigation.portalUid",
+        currentRoles: options.currentRoles,
+        transaction: options.transaction
+      });
+      return {
+        layoutUids: portal.routeScopeKind === "layout" ? [portal.layoutUid] : void 0,
+        portalUid: this.getPortalRouteFilterUid(portal)
+      };
+    }
+    if (this.normalizeDesktopRouteLayoutUidFilter(layoutUid).length) {
+      return { layoutUids: layoutUid, portalUid: void 0 };
+    }
+    const defaultScope = await this.resolveDefaultDesktopRouteScope(actionName, options);
+    return {
+      layoutUids: defaultScope.layoutUids.length ? defaultScope.layoutUids : void 0,
+      portalUid: this.getPortalRouteFilterUid(defaultScope.selectedPortal)
+    };
+  }
   async resolveRequestedDesktopRouteScope(values, parentRoute, actionName, options = {}) {
     const layoutUid = this.normalizeExplicitDesktopRouteLayoutUid(values.layoutUid);
     const portalUid = this.navigationTargets.normalizePortalUid(values.portalUid);
@@ -1219,22 +1296,19 @@ class FlowSurfacesService {
         transaction: options.transaction
       });
       if (parentRoute) {
-        await this.navigationTargets.assertRouteBelongsToPortal(
+        await this.assertRouteBelongsToResolvedPortal(
           actionName,
-          this.readRouteField(parentRoute, "id"),
-          portal.uid,
+          parentRoute,
+          portal,
           "values.parentMenuRouteId",
           options.transaction
         );
       }
-      return {
-        portalUids: [portal.uid],
-        layoutUids: [],
-        selectedPortal: portal,
-        layoutType: portal.layoutType
-      };
+      return this.buildDesktopRouteScopeForPortal(portal);
     }
     if (layoutUid) {
+      const scope2 = { portalUids: [], layoutUids: [layoutUid] };
+      this.assertAdminLayoutCreateScope(actionName, scope2, "values.layoutUid");
       await this.assertEnabledDesktopRouteUiLayoutUid(layoutUid, actionName, "values.layoutUid", options.transaction);
       if (parentRoute) {
         await this.assertDesktopRouteBelongsToUiLayout(
@@ -1246,8 +1320,7 @@ class FlowSurfacesService {
         );
       }
       return {
-        portalUids: [],
-        layoutUids: [layoutUid],
+        ...scope2,
         layoutType: await this.getDesktopRouteUiLayoutTypeByUid(layoutUid, options.transaction)
       };
     }
@@ -1280,10 +1353,17 @@ class FlowSurfacesService {
         };
       }
     }
+    if (!parentRoute) {
+      return this.resolveDefaultDesktopRouteScope(actionName, options);
+    }
     const layoutUids = await this.resolveInheritedDesktopRouteUiLayoutUids(parentRoute, options.transaction);
-    return {
+    const scope = {
       portalUids: [],
-      layoutUids,
+      layoutUids
+    };
+    this.assertAdminLayoutCreateScope(actionName, scope, "values.parentMenuRouteId");
+    return {
+      ...scope,
       layoutType: layoutUids.length === 1 ? await this.getDesktopRouteUiLayoutTypeByUid(layoutUids[0], options.transaction) : void 0
     };
   }
@@ -1302,20 +1382,18 @@ class FlowSurfacesService {
         currentRoles: options.currentRoles,
         transaction: options.transaction
       });
-      await this.navigationTargets.assertRouteBelongsToPortal(
+      await this.assertRouteBelongsToResolvedPortal(
         actionName,
-        this.readRouteField(route, "id"),
-        portal.uid,
+        route,
+        portal,
         "values.menuRouteId",
         options.transaction
       );
-      return {
-        ...routeScope,
-        selectedPortal: portal,
-        layoutType: portal.layoutType
-      };
+      return this.buildDesktopRouteScopeForPortal(portal);
     }
     if (layoutUid) {
+      const scope2 = { ...routeScope, layoutUids: [layoutUid] };
+      this.assertAdminLayoutCreateScope(actionName, scope2, "values.layoutUid");
       await this.assertEnabledDesktopRouteUiLayoutUid(layoutUid, actionName, "values.layoutUid", options.transaction);
       await this.assertDesktopRouteBelongsToUiLayout(
         actionName,
@@ -1325,7 +1403,7 @@ class FlowSurfacesService {
         options.transaction
       );
       return {
-        ...routeScope,
+        ...scope2,
         layoutType: await this.getDesktopRouteUiLayoutTypeByUid(layoutUid, options.transaction)
       };
     }
@@ -1355,10 +1433,22 @@ class FlowSurfacesService {
         layoutType: portal.layoutType
       };
     }
-    const layoutUids = routeScope.layoutUids.length ? routeScope.layoutUids : await this.ensureDesktopRouteUiLayouts(route, options.transaction);
-    return {
+    let layoutUids = routeScope.layoutUids;
+    if (!layoutUids.length) {
+      const parentRouteId = this.readRouteField(route, "parentId");
+      const parentRoute = import_lodash.default.isNil(parentRouteId) ? null : await this.findMenuRouteById(parentRouteId, options.transaction);
+      layoutUids = await this.resolveInheritedDesktopRouteUiLayoutUids(parentRoute, options.transaction);
+    }
+    const scope = {
       portalUids: [],
-      layoutUids,
+      layoutUids
+    };
+    this.assertAdminLayoutCreateScope(actionName, scope, "values.menuRouteId");
+    if (!routeScope.layoutUids.length) {
+      await this.setDesktopRouteUiLayouts(this.readRouteField(route, "id"), layoutUids, options.transaction);
+    }
+    return {
+      ...scope,
       layoutType: layoutUids.length === 1 ? await this.getDesktopRouteUiLayoutTypeByUid(layoutUids[0], options.transaction) : void 0
     };
   }
@@ -1518,7 +1608,6 @@ class FlowSurfacesService {
     }
   }
   async createFlowMenuGroup(values, options = {}) {
-    var _a;
     const parentRoute = await this.assertMenuParentIsGroup(values.parentMenuRouteId, options.transaction);
     const parentId = this.readRouteField(parentRoute, "id") ?? null;
     const routeScope = await this.resolveRequestedDesktopRouteScope(values, parentRoute, "createMenu", options);
@@ -1528,7 +1617,7 @@ class FlowSurfacesService {
       title,
       options.transaction,
       routeScope.layoutUids,
-      (_a = routeScope.selectedPortal) == null ? void 0 : _a.uid
+      this.getPortalRouteFilterUid(routeScope.selectedPortal)
     );
     if (existingGroups.length === 1) {
       return this.buildMenuResult(existingGroups[0]);
@@ -3569,7 +3658,7 @@ class FlowSurfacesService {
       tabs
     };
   }
-  async resolveApplyBlueprintCreateNavigationGroup(document, transaction) {
+  async resolveApplyBlueprintCreateNavigationGroup(document, options = {}) {
     var _a;
     if (document.mode !== "create" || !import_lodash.default.isPlainObject((_a = document.navigation) == null ? void 0 : _a.group)) {
       return document;
@@ -3583,12 +3672,13 @@ class FlowSurfacesService {
     }
     const layoutUid = this.normalizeExplicitDesktopRouteLayoutUid(document.navigation.layoutUid);
     const portalUid = this.navigationTargets.normalizePortalUid(document.navigation.portalUid);
+    const matchScope = await this.resolveDesktopRouteMatchScope(layoutUid, portalUid, "applyBlueprint", options);
     const matchedRoutes = await this.findMenuGroupRoutesByParentIdAndTitle(
       null,
       groupTitle,
-      transaction,
-      layoutUid || await this.resolveDefaultDesktopRouteUiLayoutUids(transaction),
-      portalUid
+      options.transaction,
+      matchScope.layoutUids,
+      matchScope.portalUid
     );
     if (!matchedRoutes.length) {
       return document;
@@ -3614,6 +3704,24 @@ class FlowSurfacesService {
       }
     };
   }
+  async resolveApplyBlueprintDefaultNavigationTarget(document, options = {}) {
+    var _a, _b, _c, _d;
+    if (document.mode !== "create" || ((_a = document.navigation) == null ? void 0 : _a.layoutUid) || ((_b = document.navigation) == null ? void 0 : _b.portalUid) || !import_lodash.default.isUndefined((_d = (_c = document.navigation) == null ? void 0 : _c.group) == null ? void 0 : _d.routeId) || !this.navigationTargets.hasMultiPortalCapability()) {
+      return document;
+    }
+    const portal = await this.navigationTargets.resolveDefaultPortal({
+      actionName: "applyBlueprint",
+      currentRoles: options.currentRoles,
+      transaction: options.transaction
+    });
+    return {
+      ...document,
+      navigation: {
+        ...document.navigation,
+        portalUid: portal.uid
+      }
+    };
+  }
   async normalizeApplyBlueprintCreateMobileNavigation(document, options = {}) {
     var _a, _b;
     if (document.mode !== "create") {
@@ -3669,15 +3777,20 @@ class FlowSurfacesService {
         return;
       }
       const groupRoute2 = await this.assertMenuParentIsGroup(groupRouteId2, options.transaction);
-      await this.navigationTargets.assertRouteBelongsToPortal(
+      await this.assertRouteBelongsToResolvedPortal(
         "applyBlueprint",
-        this.readRouteField(groupRoute2, "id"),
-        portal.uid,
+        groupRoute2,
+        portal,
         "values.navigation.group.routeId",
         options.transaction
       );
       return;
     }
+    this.assertAdminLayoutCreateScope(
+      "applyBlueprint",
+      { portalUids: [], layoutUids: [layoutUid] },
+      "values.navigation.layoutUid"
+    );
     await this.assertEnabledDesktopRouteUiLayoutUid(
       layoutUid,
       "applyBlueprint",
@@ -3700,7 +3813,7 @@ class FlowSurfacesService {
       options.transaction
     );
   }
-  async resolveApplyBlueprintCreatePageIdentity(document, transaction) {
+  async resolveApplyBlueprintCreatePageIdentity(document, options = {}) {
     var _a, _b, _c, _d, _e, _f, _g;
     if (document.mode !== "create") {
       return document;
@@ -3713,12 +3826,10 @@ class FlowSurfacesService {
     if (!pageTitle || !hasGroupRouteId && !layoutUid && !portalUid) {
       return document;
     }
-    const groupRoute = hasGroupRouteId ? await this.findMenuRouteById(groupRouteId, transaction) : null;
+    const groupRoute = hasGroupRouteId ? await this.findMenuRouteById(groupRouteId, options.transaction) : null;
+    const groupScope = groupRoute && !portalUid ? await this.readDesktopRouteScope(groupRoute, options.transaction) : void 0;
     if (!portalUid && groupRoute) {
-      const groupPortalUids = await this.navigationTargets.readRoutePortalUids(
-        this.readRouteField(groupRoute, "id"),
-        transaction
-      );
+      const groupPortalUids = (groupScope == null ? void 0 : groupScope.portalUids) || [];
       if (groupPortalUids.length > 1) {
         (0, import_errors.throwBadRequest)(
           `flowSurfaces applyBlueprint navigation.group.routeId '${groupRouteId}' belongs to multiple portals; pass navigation.portalUid explicitly`,
@@ -3734,13 +3845,23 @@ class FlowSurfacesService {
       }
       portalUid = groupPortalUids[0];
     }
-    const layoutUidFilter = portalUid ? void 0 : layoutUid || (groupRoute ? await this.resolveInheritedDesktopRouteUiLayoutUids(groupRoute, transaction) : void 0);
+    const portalMatchScope = portalUid ? await this.resolveDesktopRouteMatchScope(layoutUid, portalUid, "applyBlueprint", options) : void 0;
+    let layoutUidFilter = (portalMatchScope == null ? void 0 : portalMatchScope.layoutUids) || layoutUid;
+    if (!portalMatchScope && !layoutUid && groupRoute) {
+      layoutUidFilter = (groupScope == null ? void 0 : groupScope.layoutUids.length) ? groupScope.layoutUids : await this.resolveInheritedDesktopRouteUiLayoutUids(groupRoute, options.transaction);
+      this.assertAdminLayoutCreateScope(
+        "applyBlueprint",
+        { portalUids: [], layoutUids: this.normalizeDesktopRouteLayoutUidFilter(layoutUidFilter) },
+        "values.navigation.group.routeId"
+      );
+    }
+    const portalUidFilter = portalMatchScope == null ? void 0 : portalMatchScope.portalUid;
     const matchedPages = await this.findFlowPageRoutesByParentIdAndTitle(
       hasGroupRouteId ? groupRouteId : null,
       pageTitle,
-      transaction,
+      options.transaction,
       layoutUidFilter,
-      portalUid
+      portalUidFilter
     );
     if (!matchedPages.length) {
       return document;
@@ -3769,14 +3890,15 @@ class FlowSurfacesService {
   }
   async prepareApplyBlueprintRequest(values, options = {}, createdKanbanSortFields) {
     var _a;
-    const initialDocument = (0, import_blueprint.prepareFlowSurfaceApplyBlueprintDocument)(values);
+    const parsedDocument = (0, import_blueprint.prepareFlowSurfaceApplyBlueprintDocument)(values);
+    const initialDocument = await this.resolveApplyBlueprintDefaultNavigationTarget(parsedDocument, options);
     await this.assertApplyBlueprintCreateNavigationTarget(initialDocument, options);
     const mobileNormalizedDocument = await this.normalizeApplyBlueprintCreateMobileNavigation(initialDocument, options);
     const groupResolvedDocument = await this.resolveApplyBlueprintCreateNavigationGroup(
       mobileNormalizedDocument,
-      options.transaction
+      options
     );
-    const document = await this.resolveApplyBlueprintCreatePageIdentity(groupResolvedDocument, options.transaction);
+    const document = await this.resolveApplyBlueprintCreatePageIdentity(groupResolvedDocument, options);
     await this.prepareApplyBlueprintKanbanBlocks(document, options.transaction, createdKanbanSortFields);
     const replaceTarget = document.mode === "replace" && document.target ? await this.resolveApplyBlueprintReplaceTargetInfo(document.target.pageSchemaUid, options.transaction) : void 0;
     if (document.mode === "replace" && document.tabs.length > 1 && typeof ((_a = document.page) == null ? void 0 : _a.enableTabs) === "undefined" && (replaceTarget == null ? void 0 : replaceTarget.pageEnableTabs) === false) {
@@ -4445,7 +4567,18 @@ class FlowSurfacesService {
     await (0, import_authoring_validation.assertFlowSurfaceAuthoringPayload)("applyBlueprint", values, {
       transaction: options.transaction,
       enabledPackages,
-      findMenuGroupRoutesByTitle: (title, transaction, targetLayoutUid, targetPortalUid) => this.findMenuGroupRoutesByTitle(title, transaction, targetLayoutUid, targetPortalUid),
+      findMenuGroupRoutesByTitle: async (title, transaction, targetLayoutUid, targetPortalUid) => {
+        const matchScope = await this.resolveDesktopRouteMatchScope(
+          targetLayoutUid,
+          targetPortalUid,
+          "applyBlueprint",
+          {
+            transaction,
+            currentRoles: options.currentRoles
+          }
+        );
+        return this.findMenuGroupRoutesByTitle(title, transaction, matchScope.layoutUids, matchScope.portalUid);
+      },
       getUiLayoutTypeByUid: (layoutUid2, transaction) => this.getDesktopRouteUiLayoutTypeByUid(layoutUid2, transaction),
       getPortalLayoutTypeByUid: async (targetPortalUid, transaction) => {
         if ((resolvedPortal == null ? void 0 : resolvedPortal.uid) === targetPortalUid) {
@@ -6515,18 +6648,18 @@ class FlowSurfacesService {
         currentRoles: options.currentRoles,
         transaction: options.transaction
       });
-      await this.navigationTargets.assertRouteBelongsToPortal(
+      await this.assertRouteBelongsToResolvedPortal(
         "updateMenu",
-        this.readRouteField(route, "id"),
-        portal.uid,
+        route,
+        portal,
         "values.menuRouteId",
         options.transaction
       );
       if (nextParentRoute) {
-        await this.navigationTargets.assertRouteBelongsToPortal(
+        await this.assertRouteBelongsToResolvedPortal(
           "updateMenu",
-          this.readRouteField(nextParentRoute, "id"),
-          portal.uid,
+          nextParentRoute,
+          portal,
           "values.parentMenuRouteId",
           options.transaction
         );

package/package.json

@@ -4,7 +4,7 @@
   "displayName.zh-CN": "前端流引擎",
   "description": "",
   "description.zh-CN": "",
-  "version": "2.2.0-alpha.11",
+  "version": "2.2.0-alpha.12",
   "main": "./dist/server/index.js",
   "license": "Apache-2.0",
   "devDependencies": {
@@ -26,5 +26,5 @@
     "@nocobase/test": "2.x",
     "@nocobase/utils": "2.x"
   },
-  "gitHead": "c9ff1f51e5c33bc6437b64eb779212be71b78f58"
+  "gitHead": "96ae69754a6398de63037ead3a4aad5e5d0ab918"
 }