@object-ui/app-shell 11.0.0 → 11.3.0

package/CHANGELOG.md

@@ -1,5 +1,149 @@
 # @object-ui/app-shell — Changelog
 
+## 11.3.0
+
+### Patch Changes
+
+- ca4a795: fix(app-shell): restore admin design surface gated on the removed `user.role='admin'` overwrite
+
+  ADR-0068 (a3a5abff8) stopped the server `customSession` from overwriting
+  `user.role = 'admin'` for workspace owners/admins — canonical roles now arrive
+  in `user.roles[]` (`org_owner` / `org_admin`) with `user.isPlatformAdmin` as a
+  derived alias, and `useIsWorkspaceAdmin()` was introduced to read them. Four
+  runtime views were missed in that migration and still gated their admin design
+  tools on the now-defunct `user?.role === 'admin'`, so workspace owners/admins
+  silently lost:
+
+  - **ObjectView** — the list "+ New view" button plus rename/delete/pin/
+    set-default/config/manage-views and the view config panel.
+  - **PageView / DashboardView / ReportView** — the inline "Edit"/config entry
+    points for the shared page / dashboard / report definitions.
+
+  All four now call `useIsWorkspaceAdmin()` (same helper already adopted by
+  AppSidebar, UnifiedSidebar, HomePage, Marketplace…). No behavior change for
+  genuine platform admins; restores the surface for org owners/admins.
+
+- Updated dependencies [d88c8ec]
+- Updated dependencies [b7237bb]
+- Updated dependencies [d23d6eb]
+  - @object-ui/components@11.3.0
+  - @object-ui/i18n@11.3.0
+  - @object-ui/core@11.3.0
+  - @object-ui/fields@11.3.0
+  - @object-ui/layout@11.3.0
+  - @object-ui/plugin-editor@11.3.0
+  - @object-ui/react@11.3.0
+  - @object-ui/data-objectstack@11.3.0
+  - @object-ui/types@11.3.0
+  - @object-ui/auth@11.3.0
+  - @object-ui/permissions@11.3.0
+  - @object-ui/collaboration@11.3.0
+  - @object-ui/providers@11.3.0
+
+## 11.2.0
+
+### Minor Changes
+
+- 490ba55: feat(cloud): state-aware onboarding next-step widget for the Cloud Welcome page
+
+  The Cloud control-plane Welcome page is static SDUI, but the most useful thing it
+  can show — "what do I do next?" — depends on live state the metadata can't carry:
+  does the caller's org already have its production environment? New signups are
+  auto-provisioned one, so a static "Step 1: create an environment" is wrong for
+  most first-time users.
+
+  Add `cloud:onboarding-next`, a registered SDUI widget that resolves
+  `hasProductionEnv` from the same org-scoped `/cloud/environment-entitlements`
+  endpoint the environment list uses, and renders the right primary action:
+
+  - no production env → **Create your environment** (the real first step);
+  - has production env → **Open Production** (full-page nav that follows the SSO
+    302 into the env) + **Manage environments**;
+  - loading → a neutral skeleton (no CTA flash / layout jump);
+  - unknown / error → degrades to the open-production actions, so the button
+    always works.
+
+  Routes and the SSO endpoint come from the page metadata (`properties`), so the
+  Cloud app owns its URLs and copy; the widget owns only the state logic.
+
+- 32dbd6a: feat(detail): `relatedLayout: 'tabs'` — surface related tables as peer tabs via config
+
+  Record detail pages can now show each related table as its own top-level tab
+  instead of stacking them all inside a single **Related** tab — no custom page
+  required. Set `detail.relatedLayout: 'tabs'` on the object; the synthesized
+  record page then emits one tab per related list (label = the related list's
+  `title`, falling back to its `objectName`, carrying its `icon`), slotted between
+  the **Details** tab and **Activity** / **History**.
+
+  - `buildDefaultPageSchema` (`@object-ui/plugin-detail`): new
+    `BuildPageOptions.relatedLayout?: 'stack' | 'tabs'` threaded through
+    `buildDefaultTabs` (the single choke point for the related-tab emission).
+    `'tabs'` fans the related children out into peer tabs; `'stack'` (default)
+    keeps the legacy single **Related** tab — **zero regression** when omitted.
+    Still honours `hideRelatedTab` (no related tabs emitted) in both modes.
+  - `RecordDetailView` (`@object-ui/app-shell`): reads
+    `objectDef.detail.relatedLayout` per object and forwards it to the synth.
+
+### Patch Changes
+
+- Updated dependencies [9e7a986]
+- Updated dependencies [1311749]
+  - @object-ui/components@11.2.0
+  - @object-ui/core@11.2.0
+  - @object-ui/fields@11.2.0
+  - @object-ui/layout@11.2.0
+  - @object-ui/plugin-editor@11.2.0
+  - @object-ui/data-objectstack@11.2.0
+  - @object-ui/react@11.2.0
+  - @object-ui/types@11.2.0
+  - @object-ui/i18n@11.2.0
+  - @object-ui/auth@11.2.0
+  - @object-ui/permissions@11.2.0
+  - @object-ui/collaboration@11.2.0
+  - @object-ui/providers@11.2.0
+
+## 11.1.0
+
+### Minor Changes
+
+- 6fb6738: Auth: remediation overlay for the ADR-0069 session gate (enforced MFA / password expiry)
+
+  The ObjectStack backend now blocks logged-in users from protected resources with `403 { error: { code: 'MFA_REQUIRED' | 'PASSWORD_EXPIRED' } }`. The Console now detects this on every API response and raises a full-screen, guided remediation flow instead of leaving the user on failing requests.
+
+  - `@object-ui/auth`: the authenticated fetch wrapper detects the gate and broadcasts it via a tiny module-level emitter; `AuthProvider` exposes `remediationRequired` + `setRemediationRequired`; the `twoFactorClient` plugin is enabled and `enrollTotp` / `verifyTotp` are added to the auth client (`changePassword` already existed).
+  - `@object-ui/app-shell`: a `RemediationOverlay` (mounted in `ConsoleShell`) renders the guided flow — change an expired password, or enrol an authenticator (password confirm → QR + backup codes → verify TOTP) — then reloads so the app re-fetches cleanly. Auth + metadata + `me/*` reads stay reachable (server allow-list), so the overlay renders above a normally-loading shell.
+
+### Patch Changes
+
+- e2c9b0d: fix(first-run): two first-time-user friction fixes found via a full ObjectOS Cloud signup walkthrough.
+
+  - **Page-load race**: an app whose landing is a `type:'page'` (SDUI page) flashed a false "page not found" / blank body on the very first render — `PageView` treated the lazily-loading (empty) `pages` array as "page doesn't exist". It now shows a loading state until the `page` metadata type is actually resolved (`getTypeStatus('page')`), then trusts the not-found. This is exactly the post-signup landing, where the app's home page is the first thing rendered.
+  - **Redundant launcher hop**: after creating/switching a workspace, the user was hard-reloaded to `/home` (the workspace launcher) even when the workspace has a single app — an extra, contentless layer. `OrganizationsPage` and `WorkspaceSwitcher` now reload to the console ROOT (`resolveRootUrl`), so `RootLandingRedirect` resolves the right landing: a single-app workspace lands straight IN that app; multi-app workspaces still fall back to `/home`.
+
+- 6726a2b: First-run UX polish (objectstack-ai/objectui#2038) — copy improvements found via the ObjectOS Cloud signup walkthrough:
+
+  - **"Organization" → "Workspace"** across the org picker (`organizations.*` strings, en + zh). The create flow + WorkspaceSwitcher already say "workspace"; the picker ("Your Organizations / No organizations yet") was the lone holdout. Now consistent.
+  - **Non-admin empty state** — "There are no applications available to you yet. Please contact your workspace administrator." → "Your workspace is being set up — apps your admin shares with you will show up here." (less dead-end, en + zh).
+  - **Cold-start reassurance** — new `console.loadingHint` line under the LoadingScreen steps: "Setting up a new environment can take a few moments." (en + zh).
+  - **Signup value-prop** — register subtitle "Enter your information to get started" → "Create your account to start building." (en + zh).
+
+- 8e2223c: fix(home): the workspace empty-state title hardcoded "Welcome to ObjectUI" — a stale brand a first-time user sees on their empty `/home`. Read the product name from the runtime-config branding (`getRuntimeConfig().branding.productName`, server-pushed, fallback "ObjectOS") like LoadingScreen does, so it shows the deployment's real product (e.g. "Welcome to ObjectOS Cloud").
+- Updated dependencies [6fb6738]
+- Updated dependencies [6726a2b]
+  - @object-ui/auth@11.1.0
+  - @object-ui/i18n@11.1.0
+  - @object-ui/components@11.1.0
+  - @object-ui/fields@11.1.0
+  - @object-ui/react@11.1.0
+  - @object-ui/layout@11.1.0
+  - @object-ui/plugin-editor@11.1.0
+  - @object-ui/types@11.1.0
+  - @object-ui/core@11.1.0
+  - @object-ui/data-objectstack@11.1.0
+  - @object-ui/permissions@11.1.0
+  - @object-ui/collaboration@11.1.0
+  - @object-ui/providers@11.1.0
+
 ## 7.3.0
 
 ### Patch Changes

package/dist/chrome/LoadingScreen.js

@@ -36,5 +36,5 @@ export function LoadingScreen({ message, error, onRetry, retrying }) {
         }, 1200);
         return () => clearInterval(timer);
     }, [message, error, loadingSteps.length]);
-    return (_jsx("div", { className: "flex flex-col items-center justify-center h-screen bg-background", children: _jsxs("div", { className: "flex flex-col items-center gap-6", children: [_jsxs("div", { className: "relative", children: [_jsx("div", { className: "absolute inset-0 bg-primary/20 rounded-2xl blur-xl animate-pulse" }), _jsx("div", { className: "relative bg-linear-to-br from-primary to-primary/80 p-4 rounded-2xl shadow-lg", children: _jsx(Database, { className: "h-10 w-10 text-primary-foreground" }) })] }), _jsxs("div", { className: "text-center space-y-2", children: [_jsx("h1", { className: "text-2xl font-bold tracking-tight", children: getProductName() }), _jsx("p", { className: "text-sm text-muted-foreground", children: strings.initializing })] }), error ? (_jsxs("div", { className: "flex flex-col items-center gap-4 max-w-md w-full px-6", children: [_jsxs("div", { className: "flex flex-col items-center gap-3 p-5 rounded-lg border border-destructive/30 bg-destructive/5 w-full", children: [_jsxs("div", { className: "flex items-center gap-2 text-destructive", children: [_jsx(AlertCircle, { className: "h-5 w-5 shrink-0" }), _jsx("span", { className: "text-sm font-semibold", children: strings.error.connectionFailed })] }), _jsx("p", { className: "text-xs text-muted-foreground text-center break-words", children: error }), _jsx("p", { className: "text-xs text-muted-foreground text-center", children: strings.error.checkServer })] }), onRetry && (_jsx(Button, { onClick: onRetry, disabled: retrying, variant: "default", size: "sm", className: "gap-2", children: retrying ? (_jsxs(_Fragment, { children: [_jsx(Loader2, { className: "h-4 w-4 animate-spin" }), strings.actions.retrying] })) : (_jsxs(_Fragment, { children: [_jsx(RefreshCw, { className: "h-4 w-4" }), strings.actions.retry] })) }))] })) : message ? (_jsxs("div", { className: "flex items-center gap-3 px-4 py-2 bg-muted/50 rounded-full", children: [_jsx(Spinner, { className: "h-4 w-4 text-primary" }), _jsx("span", { className: "text-sm text-muted-foreground", children: message })] })) : (_jsx("div", { className: "flex flex-col gap-2 w-64", children: loadingSteps.map((step, index) => (_jsxs("div", { className: "flex items-center gap-2.5 text-sm transition-opacity duration-300", style: { opacity: index <= currentStep ? 1 : 0.3 }, children: [index < currentStep ? (_jsx(CheckCircle2, { className: "h-4 w-4 text-primary shrink-0" })) : index === currentStep ? (_jsx(Loader2, { className: "h-4 w-4 text-primary shrink-0 animate-spin" })) : (_jsx("div", { className: "h-4 w-4 rounded-full border border-muted-foreground/30 shrink-0" })), _jsx("span", { className: index <= currentStep ? 'text-foreground' : 'text-muted-foreground', children: step })] }, step))) }))] }) }));
+    return (_jsx("div", { className: "flex flex-col items-center justify-center h-screen bg-background", children: _jsxs("div", { className: "flex flex-col items-center gap-6", children: [_jsxs("div", { className: "relative", children: [_jsx("div", { className: "absolute inset-0 bg-primary/20 rounded-2xl blur-xl animate-pulse" }), _jsx("div", { className: "relative bg-linear-to-br from-primary to-primary/80 p-4 rounded-2xl shadow-lg", children: _jsx(Database, { className: "h-10 w-10 text-primary-foreground" }) })] }), _jsxs("div", { className: "text-center space-y-2", children: [_jsx("h1", { className: "text-2xl font-bold tracking-tight", children: getProductName() }), _jsx("p", { className: "text-sm text-muted-foreground", children: strings.initializing })] }), error ? (_jsxs("div", { className: "flex flex-col items-center gap-4 max-w-md w-full px-6", children: [_jsxs("div", { className: "flex flex-col items-center gap-3 p-5 rounded-lg border border-destructive/30 bg-destructive/5 w-full", children: [_jsxs("div", { className: "flex items-center gap-2 text-destructive", children: [_jsx(AlertCircle, { className: "h-5 w-5 shrink-0" }), _jsx("span", { className: "text-sm font-semibold", children: strings.error.connectionFailed })] }), _jsx("p", { className: "text-xs text-muted-foreground text-center break-words", children: error }), _jsx("p", { className: "text-xs text-muted-foreground text-center", children: strings.error.checkServer })] }), onRetry && (_jsx(Button, { onClick: onRetry, disabled: retrying, variant: "default", size: "sm", className: "gap-2", children: retrying ? (_jsxs(_Fragment, { children: [_jsx(Loader2, { className: "h-4 w-4 animate-spin" }), strings.actions.retrying] })) : (_jsxs(_Fragment, { children: [_jsx(RefreshCw, { className: "h-4 w-4" }), strings.actions.retry] })) }))] })) : message ? (_jsxs("div", { className: "flex items-center gap-3 px-4 py-2 bg-muted/50 rounded-full", children: [_jsx(Spinner, { className: "h-4 w-4 text-primary" }), _jsx("span", { className: "text-sm text-muted-foreground", children: message })] })) : (_jsxs("div", { className: "flex flex-col gap-2 w-64", children: [loadingSteps.map((step, index) => (_jsxs("div", { className: "flex items-center gap-2.5 text-sm transition-opacity duration-300", style: { opacity: index <= currentStep ? 1 : 0.3 }, children: [index < currentStep ? (_jsx(CheckCircle2, { className: "h-4 w-4 text-primary shrink-0" })) : index === currentStep ? (_jsx(Loader2, { className: "h-4 w-4 text-primary shrink-0 animate-spin" })) : (_jsx("div", { className: "h-4 w-4 rounded-full border border-muted-foreground/30 shrink-0" })), _jsx("span", { className: index <= currentStep ? 'text-foreground' : 'text-muted-foreground', children: step })] }, step))), _jsx("p", { className: "mt-1 text-xs text-muted-foreground", children: strings.loadingHint })] }))] }) }));
 }

package/dist/console/ConsoleShell.js

@@ -25,6 +25,7 @@ import { FavoritesProvider } from '../context/FavoritesProvider';
 import { RecentItemsProvider } from '../context/RecentItemsProvider';
 import { UserStateAdaptersProvider, useAttachUserStateAdapters, } from '../context/UserStateAdapters';
 import { ThemeProvider } from '../chrome/ThemeProvider';
+import { RemediationOverlay } from './RemediationOverlay';
 export function LoadingFallback() {
     return (_jsx("div", { className: "h-screen flex items-center justify-center text-sm text-muted-foreground", children: "Loading\u2026" }));
 }
@@ -43,7 +44,7 @@ export function LoadingFallback() {
  *   </BrowserRouter>
  */
 export function ConsoleShell({ children }) {
-    return (_jsx(ThemeProvider, { defaultTheme: "system", storageKey: "object-ui-theme", children: _jsx(NavigationProvider, { children: _jsx(UserStateAdaptersProvider, { children: _jsx(FavoritesProvider, { children: _jsx(RecentItemsProvider, { children: _jsx(Suspense, { fallback: _jsx(LoadingFallback, {}), children: children }) }) }) }) }) }));
+    return (_jsx(ThemeProvider, { defaultTheme: "system", storageKey: "object-ui-theme", children: _jsx(NavigationProvider, { children: _jsx(UserStateAdaptersProvider, { children: _jsx(FavoritesProvider, { children: _jsxs(RecentItemsProvider, { children: [_jsx(Suspense, { fallback: _jsx(LoadingFallback, {}), children: children }), _jsx(RemediationOverlay, {})] }) }) }) }) }));
 }
 /**
  * ConnectedShell — mounts the data layer (AdapterProvider + MetadataProvider).

package/dist/console/RemediationOverlay.d.ts

@@ -0,0 +1,17 @@
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+/**
+ * ADR-0069 — full-screen remediation overlay.
+ *
+ * When the backend blocks a logged-in user with `403 PASSWORD_EXPIRED` /
+ * `MFA_REQUIRED`, the API fetch interceptor raises `remediationRequired` on the
+ * auth context. This overlay guides the user through the fix (change the
+ * expired password, or enrol an authenticator) instead of leaving them staring
+ * at failing requests. On success it reloads so the app re-fetches cleanly.
+ */
+export declare function RemediationOverlay(): import("react").JSX.Element | null;

package/dist/console/RemediationOverlay.js

@@ -0,0 +1,113 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * ObjectUI
+ * Copyright (c) 2024-present ObjectStack Inc.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+import { useState } from 'react';
+import { useAuth } from '@object-ui/auth';
+import { Button, Input, Label } from '@object-ui/components';
+import { toCanvas } from 'qrcode';
+/**
+ * ADR-0069 — full-screen remediation overlay.
+ *
+ * When the backend blocks a logged-in user with `403 PASSWORD_EXPIRED` /
+ * `MFA_REQUIRED`, the API fetch interceptor raises `remediationRequired` on the
+ * auth context. This overlay guides the user through the fix (change the
+ * expired password, or enrol an authenticator) instead of leaving them staring
+ * at failing requests. On success it reloads so the app re-fetches cleanly.
+ */
+export function RemediationOverlay() {
+    const { remediationRequired } = useAuth();
+    if (!remediationRequired)
+        return null;
+    return (_jsx("div", { className: "fixed inset-0 z-[200] flex items-center justify-center bg-background/95 p-4 backdrop-blur-sm", children: _jsx("div", { className: "w-full max-w-md rounded-xl border bg-card p-6 shadow-xl", children: remediationRequired.code === 'PASSWORD_EXPIRED' ? (_jsx(ExpiredPasswordForm, { message: remediationRequired.message })) : (_jsx(MfaEnrollForm, { message: remediationRequired.message })) }) }));
+}
+function SignOutLink() {
+    const { signOut } = useAuth();
+    return (_jsx("button", { type: "button", onClick: () => { void signOut(); }, className: "mt-4 w-full text-center text-xs text-muted-foreground hover:text-foreground hover:underline", children: "Sign out instead" }));
+}
+function ExpiredPasswordForm({ message }) {
+    const { changePassword, setRemediationRequired } = useAuth();
+    const [current, setCurrent] = useState('');
+    const [next, setNext] = useState('');
+    const [confirm, setConfirm] = useState('');
+    const [busy, setBusy] = useState(false);
+    const [error, setError] = useState(null);
+    const submit = async (e) => {
+        e.preventDefault();
+        setError(null);
+        if (next !== confirm) {
+            setError('New passwords do not match.');
+            return;
+        }
+        setBusy(true);
+        try {
+            await changePassword(current, next);
+            setRemediationRequired(null);
+            window.location.reload();
+        }
+        catch (err) {
+            setError(err instanceof Error ? err.message : 'Could not change password.');
+            setBusy(false);
+        }
+    };
+    return (_jsxs("form", { onSubmit: submit, className: "space-y-4", children: [_jsxs("div", { children: [_jsx("h2", { className: "text-lg font-semibold", children: "Your password has expired" }), _jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: message || 'Please set a new password to continue.' })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "rem-cur", children: "Current password" }), _jsx(Input, { id: "rem-cur", type: "password", autoComplete: "current-password", value: current, onChange: (e) => setCurrent(e.target.value), required: true })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "rem-new", children: "New password" }), _jsx(Input, { id: "rem-new", type: "password", autoComplete: "new-password", value: next, onChange: (e) => setNext(e.target.value), required: true })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "rem-conf", children: "Confirm new password" }), _jsx(Input, { id: "rem-conf", type: "password", autoComplete: "new-password", value: confirm, onChange: (e) => setConfirm(e.target.value), required: true })] }), error ? _jsx("p", { className: "text-sm text-destructive", children: error }) : null, _jsx(Button, { type: "submit", className: "w-full", disabled: busy, children: busy ? 'Updating…' : 'Change password & continue' }), _jsx(SignOutLink, {})] }));
+}
+function TotpQr({ uri }) {
+    const [error, setError] = useState(null);
+    const ref = (node) => {
+        if (!node || !uri)
+            return;
+        toCanvas(node, uri, { width: 184, margin: 1 }, (err) => { if (err)
+            setError(err.message); });
+    };
+    return (_jsx("div", { className: "flex justify-center rounded-md border bg-white p-3", children: error ? _jsx("span", { className: "text-sm text-destructive", children: error }) : _jsx("canvas", { ref: ref }) }));
+}
+function MfaEnrollForm({ message }) {
+    const { enrollTotp, verifyTotp, setRemediationRequired } = useAuth();
+    const [step, setStep] = useState('password');
+    const [password, setPassword] = useState('');
+    const [code, setCode] = useState('');
+    const [totpUri, setTotpUri] = useState('');
+    const [backupCodes, setBackupCodes] = useState([]);
+    const [busy, setBusy] = useState(false);
+    const [error, setError] = useState(null);
+    const start = async (e) => {
+        e.preventDefault();
+        setError(null);
+        setBusy(true);
+        try {
+            const { totpURI, backupCodes: codes } = await enrollTotp(password);
+            setTotpUri(totpURI);
+            setBackupCodes(codes ?? []);
+            setStep('verify');
+        }
+        catch (err) {
+            setError(err instanceof Error ? err.message : 'Could not start enrollment.');
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    const verify = async (e) => {
+        e.preventDefault();
+        setError(null);
+        setBusy(true);
+        try {
+            await verifyTotp(code.trim());
+            setRemediationRequired(null);
+            window.location.reload();
+        }
+        catch (err) {
+            setError(err instanceof Error ? err.message : 'Invalid code. Try again.');
+            setBusy(false);
+        }
+    };
+    if (step === 'password') {
+        return (_jsxs("form", { onSubmit: start, className: "space-y-4", children: [_jsxs("div", { children: [_jsx("h2", { className: "text-lg font-semibold", children: "Set up two-factor authentication" }), _jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: message || 'Your organization requires an authenticator app to continue.' })] }), _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "rem-pw", children: "Confirm your password" }), _jsx(Input, { id: "rem-pw", type: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value), required: true })] }), error ? _jsx("p", { className: "text-sm text-destructive", children: error }) : null, _jsx(Button, { type: "submit", className: "w-full", disabled: busy, children: busy ? 'Preparing…' : 'Continue' }), _jsx(SignOutLink, {})] }));
+    }
+    return (_jsxs("form", { onSubmit: verify, className: "space-y-4", children: [_jsxs("div", { children: [_jsx("h2", { className: "text-lg font-semibold", children: "Scan with your authenticator" }), _jsx("p", { className: "mt-1 text-sm text-muted-foreground", children: "Scan this QR code with Google Authenticator, 1Password, Authy, etc., then enter the 6-digit code." })] }), totpUri ? _jsx(TotpQr, { uri: totpUri }) : null, backupCodes.length > 0 ? (_jsxs("details", { className: "rounded-md border bg-muted/40 p-3 text-xs", children: [_jsx("summary", { className: "cursor-pointer font-medium", children: "Save your backup codes" }), _jsx("p", { className: "mt-1 text-muted-foreground", children: "Store these somewhere safe \u2014 each can be used once if you lose your device." }), _jsx("div", { className: "mt-2 grid grid-cols-2 gap-1 font-mono", children: backupCodes.map((c) => _jsx("span", { children: c }, c)) })] })) : null, _jsxs("div", { className: "space-y-2", children: [_jsx(Label, { htmlFor: "rem-code", children: "6-digit code" }), _jsx(Input, { id: "rem-code", inputMode: "numeric", autoComplete: "one-time-code", maxLength: 8, placeholder: "123456", value: code, onChange: (e) => setCode(e.target.value), required: true })] }), error ? _jsx("p", { className: "text-sm text-destructive", children: error }) : null, _jsx(Button, { type: "submit", className: "w-full", disabled: busy, children: busy ? 'Verifying…' : 'Verify & continue' }), _jsx(SignOutLink, {})] }));
+}

package/dist/console/ai/AiChatPage.d.ts

@@ -91,5 +91,41 @@ export declare function matchAiChatShortcut(e: {
     shiftKey: boolean;
     altKey: boolean;
 }): AiChatShortcut | null;
+/** A composer submission held until the conversation id that will carry it exists. */
+export interface PendingFirstMessage {
+    content: string;
+    files?: File[];
+}
+/**
+ * Guards the empty-state FIRST send against the conversation-id remount race.
+ *
+ * On a fresh `/ai/:agent` the composer (and its suggestion chips) go live the
+ * instant the agent resolves — BEFORE `POST /conversations` has minted the id.
+ * `<ChatPane>` is keyed on that id (`…:pending` → `…:<id>`), so the moment it
+ * resolves React UNMOUNTS the pane and mounts a fresh one. A first message
+ * submitted in that window lives inside the doomed pane: its optimistic bubble
+ * is discarded and the just-started `…/chat` request is aborted before it
+ * reaches the wire — so it vanishes silently (input cleared, no bubble, no
+ * error). Distinct from the #2047 path, where `…/chat` WAS sent and failed.
+ *
+ * The fix: when we have a server endpoint but no id yet, stash the send in a ref
+ * the PAGE owns (so it outlives the pane remount) and replay it the moment an id
+ * exists — in the freshly-mounted pane (or in place if no remount happened). A
+ * send made once the id is present (the normal path, and every send after the
+ * first) goes straight through. Local/echo mode (no `chatApi`) also sends
+ * immediately, so the offline-demo bot keeps responding.
+ *
+ * Exported for unit testing.
+ */
+export declare function useDeferredFirstSend(opts: {
+    /** The chat endpoint — defined once an agent is resolved (server-backed mode). */
+    chatApi: string | undefined;
+    /** The conversation id; undefined while `POST /conversations` is in flight. */
+    conversationId: string | undefined;
+    /** Page-owned stash that OUTLIVES the keyed `<ChatPane>` remount. */
+    pendingRef: React.MutableRefObject<PendingFirstMessage | null>;
+    /** The real send (resetSuppression + sendMessage + onSent). */
+    doSend: (content: string, files?: File[]) => void;
+}): (content: string, files?: File[]) => void;
 export declare function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentProp }?: AiChatPageProps): React.JSX.Element;
 export default AiChatPage;

package/dist/console/ai/AiChatPage.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 // Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
 /**
  * AiChatPage — full-page ChatGPT-style AI surface.
@@ -17,7 +17,7 @@ import { useNavigate, useParams, useSearchParams } from 'react-router-dom';
 import { useAuth } from '@object-ui/auth';
 import { useObjectTranslation } from '@object-ui/i18n';
 import { toast } from 'sonner';
-import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, Button, ShareDialog, Sheet, SheetContent, SheetDescription, SheetHeader, SheetTitle, Empty, EmptyTitle, EmptyDescription, cn, } from '@object-ui/components';
+import { Select, SelectContent, SelectItem, SelectTrigger, SelectValue, Tabs, TabsList, TabsTrigger, Button, ShareDialog, Sheet, SheetContent, SheetDescription, SheetHeader, SheetTitle, Empty, EmptyTitle, EmptyDescription, cn, } from '@object-ui/components';
 import { Bug, PanelLeft, PanelLeftClose, PanelLeftOpen, Share2 } from 'lucide-react';
 import { ChatbotEnhanced, useAgents, useObjectChat, useAiModels, useHitlInChat, resolveDefaultAgentName, PLATFORM_DEFAULT_AGENT, agentRouteName, resolveAgentParam, isBuiltinAgentName, isBuildAgent, isAskAgent, publishHealthFromResponse, detectDraftResult, detectProposedPlan, buildProgressFromDraftReview, } from '@object-ui/plugin-chatbot';
 import { AppHeader } from '../../layout/AppHeader';
@@ -347,6 +347,55 @@ export function matchAiChatShortcut(e) {
             return null;
     }
 }
+/**
+ * Guards the empty-state FIRST send against the conversation-id remount race.
+ *
+ * On a fresh `/ai/:agent` the composer (and its suggestion chips) go live the
+ * instant the agent resolves — BEFORE `POST /conversations` has minted the id.
+ * `<ChatPane>` is keyed on that id (`…:pending` → `…:<id>`), so the moment it
+ * resolves React UNMOUNTS the pane and mounts a fresh one. A first message
+ * submitted in that window lives inside the doomed pane: its optimistic bubble
+ * is discarded and the just-started `…/chat` request is aborted before it
+ * reaches the wire — so it vanishes silently (input cleared, no bubble, no
+ * error). Distinct from the #2047 path, where `…/chat` WAS sent and failed.
+ *
+ * The fix: when we have a server endpoint but no id yet, stash the send in a ref
+ * the PAGE owns (so it outlives the pane remount) and replay it the moment an id
+ * exists — in the freshly-mounted pane (or in place if no remount happened). A
+ * send made once the id is present (the normal path, and every send after the
+ * first) goes straight through. Local/echo mode (no `chatApi`) also sends
+ * immediately, so the offline-demo bot keeps responding.
+ *
+ * Exported for unit testing.
+ */
+export function useDeferredFirstSend(opts) {
+    const { chatApi, conversationId, pendingRef, doSend } = opts;
+    const apiMode = Boolean(chatApi);
+    // Replay a deferred first message the instant a conversation id exists — in
+    // the freshly-mounted pane after the remount, or in place if none happened.
+    // Clearing the ref before sending makes the replay fire at most once even
+    // though `doSend` (and StrictMode's double-invoke) re-run this effect.
+    useEffect(() => {
+        if (!apiMode || !conversationId)
+            return;
+        const pending = pendingRef.current;
+        if (!pending)
+            return;
+        pendingRef.current = null;
+        doSend(pending.content, pending.files);
+    }, [apiMode, conversationId, pendingRef, doSend]);
+    return useCallback((content, files) => {
+        // Server-backed, but the id is still being minted: sending now would be
+        // lost — a convId-less `/chat` the server won't persist, or a request torn
+        // down when the pane remounts as the id resolves. Stash it; the effect
+        // above replays it once the id lands.
+        if (apiMode && !conversationId) {
+            pendingRef.current = { content, files };
+            return;
+        }
+        doSend(content, files);
+    }, [apiMode, conversationId, pendingRef, doSend]);
+}
 export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentProp } = {}) {
     const { user } = useAuth();
     const { t } = useObjectTranslation();
@@ -587,6 +636,11 @@ export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentPro
             return;
         setTitleHints((current) => current[conversationId] === hint ? current : { ...current, [conversationId]: hint });
     }, [conversationId, initialMessages]);
+    // Holds an empty-state first message submitted before the conversation id was
+    // minted. Owned by the PAGE (not the keyed <ChatPane>) so it survives the
+    // remount that the id-resolution triggers; the freshly-mounted pane replays it
+    // via useDeferredFirstSend. See that hook for the full race.
+    const pendingFirstMessageRef = useRef(null);
     const handleSent = useCallback((firstUserMessage) => {
         // New user turn → bump sidebar list so the row's preview/timestamp refreshes.
         setRefreshKey((k) => k + 1);
@@ -612,11 +666,11 @@ export function AiChatPage({ apiBase: apiBaseProp, defaultAgent: defaultAgentPro
         void t1;
         void t2;
     }, [conversationId]);
-    return (_jsxs("div", { className: "flex h-svh w-full flex-col bg-background", "data-testid": "ai-chat-page", children: [_jsxs("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background/95 px-2 backdrop-blur sm:px-4", children: [!noAgents && (_jsxs(_Fragment, { children: [_jsx(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 shrink-0 md:hidden", onClick: () => setMobileChatsOpen(true), "aria-label": t('console.ai.openChats'), "data-testid": "ai-chat-mobile-sidebar-trigger", children: _jsx(PanelLeft, { className: "h-4 w-4" }) }), _jsx(Button, { variant: "ghost", size: "icon", className: "hidden h-8 w-8 shrink-0 md:inline-flex", onClick: toggleChatsCollapsed, "aria-label": chatsCollapsed
-                                    ? t('console.ai.showChats', { defaultValue: 'Show chats' })
-                                    : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), title: chatsCollapsed
-                                    ? t('console.ai.showChats', { defaultValue: 'Show chats' })
-                                    : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), "data-testid": "ai-chat-collapse-sidebar-trigger", "aria-pressed": chatsCollapsed, children: chatsCollapsed ? _jsx(PanelLeftOpen, { className: "h-4 w-4" }) : _jsx(PanelLeftClose, { className: "h-4 w-4" }) })] })), _jsx("div", { className: "min-w-0 flex-1", children: _jsx(AppHeader, { variant: "home" }) })] }), noAgents ? (_jsx(AiUnavailable, { hasError: Boolean(agentsError), onRetry: refetchAgents, onHome: () => navigate('/home'), t: t })) : (_jsxs(_Fragment, { children: [_jsx(Sheet, { open: mobileChatsOpen, onOpenChange: setMobileChatsOpen, children: _jsxs(SheetContent, { side: "left", className: "w-[320px] p-0 sm:max-w-[360px]", "data-testid": "ai-chat-mobile-sidebar", children: [_jsxs(SheetHeader, { className: "sr-only", children: [_jsx(SheetTitle, { children: t('console.ai.chats') }), _jsx(SheetDescription, { children: t('console.ai.chatsDescription') })] }), _jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "h-full border-r-0", onNavigate: () => setMobileChatsOpen(false) })] }) }), conversationId && (_jsx(ShareDialog, { open: shareOpen, onOpenChange: setShareOpen, objectName: "ai_conversations", recordId: conversationId, recordLabel: "this conversation", apiBase: restApiBase, publicBaseUrl: publicShareBase })), conversationId && isBuildAgent(activeAgent) && (_jsx(BuildDebugDrawer, { apiBase: apiBase, conversationId: conversationId, open: debugOpen, onOpenChange: setDebugOpen })), _jsxs("div", { className: "flex min-h-0 flex-1 w-full bg-muted/20", children: [!chatsCollapsed && (_jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "hidden w-72 shrink-0 border-r md:flex" })), _jsx("main", { className: "flex min-w-0 flex-1 flex-col", children: _jsx(ChatPane, { agents: agents, agentsLoading: agentsLoading, agentsError: agentsError, activeAgent: activeAgent, chatApi: chatApi, apiBase: apiBase, conversationId: conversationId, editPackageId: editPackageId, initialMessages: initialMessages, onSent: handleSent, onShare: () => setShareOpen(true), onDebug: () => setDebugOpen(true), showDebug: isBuildAgent(activeAgent), onCanvasOpenChange: handleCanvasOpenChange }, `${chatApi ?? 'local'}:${conversationId ?? 'pending'}`) })] })] }))] }));
+    return (_jsxs("div", { className: "flex h-svh w-full flex-col bg-background", "data-testid": "ai-chat-page", children: [_jsxs("header", { className: "sticky top-0 z-30 flex h-14 w-full shrink-0 items-center gap-2 border-b bg-background/95 px-2 backdrop-blur sm:px-4", children: [!noAgents && (_jsx(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 shrink-0 md:hidden", onClick: () => setMobileChatsOpen(true), "aria-label": t('console.ai.openChats'), "data-testid": "ai-chat-mobile-sidebar-trigger", children: _jsx(PanelLeft, { className: "h-4 w-4" }) })), _jsx("div", { className: "min-w-0 flex-1", children: _jsx(AppHeader, { variant: "home" }) })] }), noAgents ? (_jsx(AiUnavailable, { hasError: Boolean(agentsError), onRetry: refetchAgents, onHome: () => navigate('/home'), t: t })) : (_jsxs(_Fragment, { children: [_jsx(Sheet, { open: mobileChatsOpen, onOpenChange: setMobileChatsOpen, children: _jsxs(SheetContent, { side: "left", className: "w-[320px] p-0 sm:max-w-[360px]", "data-testid": "ai-chat-mobile-sidebar", children: [_jsxs(SheetHeader, { className: "sr-only", children: [_jsx(SheetTitle, { children: t('console.ai.chats') }), _jsx(SheetDescription, { children: t('console.ai.chatsDescription') })] }), _jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "h-full border-r-0", onNavigate: () => setMobileChatsOpen(false) })] }) }), conversationId && (_jsx(ShareDialog, { open: shareOpen, onOpenChange: setShareOpen, objectName: "ai_conversations", recordId: conversationId, recordLabel: "this conversation", apiBase: restApiBase, publicBaseUrl: publicShareBase })), conversationId && isBuildAgent(activeAgent) && (_jsx(BuildDebugDrawer, { apiBase: apiBase, conversationId: conversationId, open: debugOpen, onOpenChange: setDebugOpen })), _jsxs("div", { className: "flex min-h-0 flex-1 w-full bg-background", children: [_jsxs("div", { className: "hidden shrink-0 flex-col border-r md:flex", children: [!chatsCollapsed && (_jsx(ConversationsSidebar, { userId: userId, apiBase: apiBase, activeAgent: activeAgent, refreshKey: refreshKey, titleHints: titleHints, className: "w-72 min-h-0 flex-1 border-r-0" })), _jsx("div", { className: cn('mt-auto p-2', chatsCollapsed ? 'w-12' : 'w-72 border-t'), children: _jsx(Button, { variant: "ghost", size: "icon", className: "h-8 w-8", onClick: toggleChatsCollapsed, "aria-label": chatsCollapsed
+                                                ? t('console.ai.showChats', { defaultValue: 'Show chats' })
+                                                : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), title: chatsCollapsed
+                                                ? t('console.ai.showChats', { defaultValue: 'Show chats' })
+                                                : t('console.ai.hideChats', { defaultValue: 'Hide chats' }), "data-testid": "ai-chat-collapse-sidebar-trigger", "aria-pressed": chatsCollapsed, children: chatsCollapsed ? _jsx(PanelLeftOpen, { className: "h-4 w-4" }) : _jsx(PanelLeftClose, { className: "h-4 w-4" }) }) })] }), _jsx("main", { className: "flex min-w-0 flex-1 flex-col", children: _jsx(ChatPane, { agents: agents, agentsLoading: agentsLoading, agentsError: agentsError, activeAgent: activeAgent, chatApi: chatApi, apiBase: apiBase, conversationId: conversationId, editPackageId: editPackageId, initialMessages: initialMessages, pendingFirstMessageRef: pendingFirstMessageRef, onSent: handleSent, onShare: () => setShareOpen(true), onDebug: () => setDebugOpen(true), showDebug: isBuildAgent(activeAgent), onCanvasOpenChange: handleCanvasOpenChange }, `${chatApi ?? 'local'}:${conversationId ?? 'pending'}`) })] })] }))] }));
 }
 /**
  * Graceful state for `/ai` when the agent catalog resolved empty — shown
@@ -634,7 +688,7 @@ function AiUnavailable({ hasError, onRetry, onHome, t, }) {
                             defaultValue: "This deployment doesn't have an AI assistant enabled. Everything else works as usual.",
                         }) }), _jsxs("div", { className: "mt-6 flex flex-col items-center gap-3 sm:flex-row", children: [hasError && (_jsx(Button, { variant: "outline", onClick: onRetry, "data-testid": "ai-unavailable-retry", children: t('console.ai.unavailableRetry', { defaultValue: 'Try again' }) })), _jsx(Button, { onClick: onHome, "data-testid": "ai-unavailable-home", children: t('console.ai.unavailableHome', { defaultValue: 'Back to home' }) })] })] }) }));
 }
-function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, apiBase, conversationId, editPackageId, initialMessages, onSent, onShare, onDebug, showDebug, onCanvasOpenChange, }) {
+function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, apiBase, conversationId, editPackageId, initialMessages, pendingFirstMessageRef, onSent, onShare, onDebug, showDebug, onCanvasOpenChange, }) {
     const { t } = useObjectTranslation();
     const navigate = useNavigate();
     // The agent dropdown is a LAUNCHER now (not an in-surface mode toggle): it
@@ -755,12 +809,24 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
             sendMessage(prompt);
         },
     });
-    const handleSend = useCallback((content, files) => {
+    // The real send, shared by a normal submit and by the deferred-first-message
+    // replay below (resetSuppression → send → onSent, in that order).
+    const doSend = useCallback((content, files) => {
         resetSuppression();
         sendMessage(content, files);
         onSent(content);
-    }, [sendMessage, onSent]);
-    const headerSlot = (_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2 border-b border-border/50 px-4 pb-2 pt-3 sm:px-6", children: [_jsx("div", { className: "flex min-w-0 flex-1 items-center gap-2", children: showAgentLauncher ? (_jsxs(Select, { value: activeAgent, onValueChange: (name) => navigate(`/ai/${agentRouteName(name)}`), disabled: agentsLoading, children: [_jsx(SelectTrigger, { className: "h-7 w-auto min-w-0 border-0 bg-transparent px-1.5 text-xs shadow-none hover:bg-accent focus:ring-0 focus:ring-offset-0 focus-visible:ring-1 focus-visible:ring-border/80 focus-visible:ring-offset-0 sm:min-w-[160px]", "data-testid": "ai-chat-agent-picker", "aria-label": t('console.ai.switchAssistant', { defaultValue: 'Switch assistant' }), children: _jsx(SelectValue, { placeholder: t('console.ai.chooseAgent', { defaultValue: 'Choose assistant…' }) }) }), _jsx(SelectContent, { align: "start", children: agents.map((agent) => (_jsxs(SelectItem, { value: agent.name, className: "text-xs", children: [_jsx("span", { className: "font-medium", children: localizeAgentLabel(t, agent.name, agent.label) }), agent.description ? (_jsx("span", { className: "block text-muted-foreground text-[10px] truncate max-w-[260px]", children: agent.description })) : null] }, agent.name))) })] })) : (_jsx("span", { className: "truncate text-xs font-medium text-foreground/85", children: activeAgentLabel })) }), _jsxs("div", { className: "flex shrink-0 items-center gap-1", children: [showDebug && onDebug ? (_jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onDebug, disabled: !conversationId, "aria-label": "Build Doctor", "data-testid": "ai-chat-debug-button", title: conversationId ? 'Build Doctor — what actually landed?' : 'Send a message first', children: _jsx(Bug, { className: "h-3.5 w-3.5" }) })) : null, _jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onShare, disabled: !conversationId, "aria-label": t('console.ai.share'), "data-testid": "ai-chat-share-button", title: conversationId ? t('console.ai.shareTitle') : t('console.ai.shareDisabledTitle'), children: _jsx(Share2, { className: "h-3.5 w-3.5" }) })] }), agentsError ? (_jsx("span", { className: "basis-full text-[10px] text-amber-700 dark:text-amber-400", title: agentsError.message, children: t('console.ai.offlineDemoMode') })) : null] }));
+    }, [resetSuppression, sendMessage, onSent]);
+    // Guards the empty-state first send against the conversation-id remount race:
+    // a send made before the id is minted is stashed in the page-owned ref and
+    // replayed once the id lands, so the magic-moment first message reliably
+    // reaches `…/chat` instead of being dropped. See useDeferredFirstSend.
+    const handleSend = useDeferredFirstSend({
+        chatApi,
+        conversationId,
+        pendingRef: pendingFirstMessageRef,
+        doSend,
+    });
+    const headerSlot = (_jsxs("div", { className: "flex flex-wrap items-center justify-between gap-2 border-b border-border/50 px-4 pb-2 pt-3 sm:px-6", children: [_jsx("div", { className: "flex min-w-0 flex-1 items-center gap-2", children: showAgentLauncher ? (agents.length <= 3 ? (_jsx(Tabs, { value: activeAgent, onValueChange: (name) => navigate(`/ai/${agentRouteName(name)}`), children: _jsx(TabsList, { className: "h-7 gap-0.5 p-0.5", "data-testid": "ai-chat-agent-picker", "aria-label": t('console.ai.switchAssistant', { defaultValue: 'Switch assistant' }), children: agents.map((agent) => (_jsx(TabsTrigger, { value: agent.name, disabled: agentsLoading, title: agent.description || undefined, className: "h-6 px-2.5 text-xs", children: localizeAgentLabel(t, agent.name, agent.label) }, agent.name))) }) })) : (_jsxs(Select, { value: activeAgent, onValueChange: (name) => navigate(`/ai/${agentRouteName(name)}`), disabled: agentsLoading, children: [_jsx(SelectTrigger, { className: "h-7 w-auto min-w-0 border-0 bg-transparent px-1.5 text-xs shadow-none hover:bg-accent focus:ring-0 focus:ring-offset-0 focus-visible:ring-1 focus-visible:ring-border/80 focus-visible:ring-offset-0 sm:min-w-[160px]", "data-testid": "ai-chat-agent-picker", "aria-label": t('console.ai.switchAssistant', { defaultValue: 'Switch assistant' }), children: _jsx(SelectValue, { placeholder: t('console.ai.chooseAgent', { defaultValue: 'Choose assistant…' }) }) }), _jsx(SelectContent, { align: "start", children: agents.map((agent) => (_jsxs(SelectItem, { value: agent.name, className: "text-xs", children: [_jsx("span", { className: "font-medium", children: localizeAgentLabel(t, agent.name, agent.label) }), agent.description ? (_jsx("span", { className: "block text-muted-foreground text-[10px] truncate max-w-[260px]", children: agent.description })) : null] }, agent.name))) })] }))) : (_jsx("span", { className: "truncate text-xs font-medium text-foreground/85", children: activeAgentLabel })) }), _jsxs("div", { className: "flex shrink-0 items-center gap-1", children: [showDebug && onDebug ? (_jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onDebug, disabled: !conversationId, "aria-label": "Build Doctor", "data-testid": "ai-chat-debug-button", title: conversationId ? 'Build Doctor — what actually landed?' : 'Send a message first', children: _jsx(Bug, { className: "h-3.5 w-3.5" }) })) : null, _jsx(Button, { variant: "ghost", size: "icon", className: "h-7 w-7 text-muted-foreground hover:text-foreground", onClick: onShare, disabled: !conversationId, "aria-label": t('console.ai.share'), "data-testid": "ai-chat-share-button", title: conversationId ? t('console.ai.shareTitle') : t('console.ai.shareDisabledTitle'), children: _jsx(Share2, { className: "h-3.5 w-3.5" }) })] }), agentsError ? (_jsx("span", { className: "basis-full text-[10px] text-amber-700 dark:text-amber-400", title: agentsError.message, children: t('console.ai.offlineDemoMode') })) : null] }));
     return (_jsxs("div", { ref: split.containerRef, className: "relative flex min-h-0 flex-1 px-0", children: [_jsx("div", { "data-chat-column": true, className: canvasApp
                     ? 'flex min-h-0 shrink-0 justify-center'
                     : 'flex min-h-0 flex-1 justify-center', style: canvasApp ? { width: split.width } : undefined, children: _jsx(ChatbotEnhanced, { className: "min-h-0 flex-1 bg-background md:max-w-5xl", onUpgrade: () => window.open(cloudPricingDeepLink(), '_blank', 'noopener,noreferrer'), surface: "plain", maxHeight: "100%", headerSlot: headerSlot, messages: messages, placeholder: activeAgent
@@ -784,6 +850,23 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
                         connectionWaiting: t('console.ai.connectionWaiting', { defaultValue: 'Waiting for server…' }),
                         connectionStalledLabel: t('console.ai.connectionStalled', { defaultValue: 'Still working…' }),
                         connectionOfflineLabel: t('console.ai.connectionOffline', { defaultValue: 'Connection lost — reconnecting…' }),
+                        // Friendly in-progress feedback for the long, atomic propose_blueprint
+                        // call — a lead-in plus rotating hints so the wait reads as deliberate
+                        // design work, not a hang. Each hint is translated individually (the
+                        // established per-string pattern; avoids an i18n returnObjects array).
+                        designingPlanLabel: t('console.ai.designingPlan', { defaultValue: 'Designing your app…' }),
+                        designingPlanHints: [
+                            t('console.ai.designingPlanHint.data', { defaultValue: 'Mapping out the data you’ll track…' }),
+                            t('console.ai.designingPlanHint.objects', { defaultValue: 'Shaping objects and their fields…' }),
+                            t('console.ai.designingPlanHint.relations', { defaultValue: 'Connecting related records…' }),
+                            t('console.ai.designingPlanHint.lookups', { defaultValue: 'Setting up relationships and lookups…' }),
+                            t('console.ai.designingPlanHint.views', { defaultValue: 'Planning the screens and views…' }),
+                            t('console.ai.designingPlanHint.forms', { defaultValue: 'Laying out forms and lists…' }),
+                            t('console.ai.designingPlanHint.defaults', { defaultValue: 'Adding sensible defaults and validations…' }),
+                            t('console.ai.designingPlanHint.dashboard', { defaultValue: 'Sketching a dashboard to track it…' }),
+                            t('console.ai.designingPlanHint.review', { defaultValue: 'Double-checking the structure hangs together…' }),
+                            t('console.ai.designingPlanHint.finalize', { defaultValue: 'Pulling the plan together…' }),
+                        ],
                         toolDetailsHidden: t('console.ai.toolDetailsHidden'),
                         copy: t('console.ai.copy'),
                         copied: t('console.ai.copied'),
@@ -792,6 +875,12 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
                         submit: t('console.ai.submit'),
                         uploadFiles: t('console.ai.uploadFiles'),
                         stopResponse: t('console.ai.stopResponse'),
+                        sendFailedRateLimited: t('console.ai.sendFailedRateLimited', {
+                            defaultValue: "You're sending messages too quickly. Your message is kept below — wait a moment and try again.",
+                        }),
+                        sendFailedGeneric: t('console.ai.sendFailedGeneric', {
+                            defaultValue: "Couldn't send your message. It's kept below — please try again.",
+                        }),
                         trace: t('console.ai.trace'),
                         viewTrace: t('console.ai.viewTrace'),
                     }, 
@@ -851,9 +940,11 @@ function ChatPane({ agents, agentsLoading, agentsError, activeAgent, chatApi, ap
                             });
                             return false;
                         }
-                    }, publishDraftsLabel: t('console.ai.publishDrafts', { defaultValue: 'Publish' }), publishedLabel: t('console.ai.published', { defaultValue: 'Published' }), nextStepsLabel: t('console.ai.nextSteps', { defaultValue: "What's next" }), planTitleLabel: t('console.ai.planTitle', { defaultValue: 'Proposed plan' }), planQuestionsLabel: t('console.ai.planQuestions', { defaultValue: 'Confirm before building' }), planAssumptionsLabel: t('console.ai.planAssumptions', { defaultValue: 'Assumptions' }), planApproveHintLabel: t('console.ai.planApproveHint', {
+                    }, publishDraftsLabel: t('console.ai.publishDrafts', { defaultValue: 'Publish' }), publishedLabel: t('console.ai.published', { defaultValue: 'Published' }), nextStepsLabel: t('console.ai.nextSteps', { defaultValue: "What's next" }), planTitleLabel: t('console.ai.planTitle', { defaultValue: 'Proposed plan' }), planQuestionsLabel: t('console.ai.planQuestions', { defaultValue: 'Confirm before building' }), planAssumptionsLabel: t('console.ai.planAssumptions', { defaultValue: 'Assumptions' }), planDeferredLabel: t('console.ai.planDeferred', { defaultValue: 'Not yet built' }), planApproveHintLabel: t('console.ai.planApproveHint', {
                         defaultValue: 'Reply to approve or adjust this plan.',
-                    }), planApproveLabel: t('console.ai.planApprove', { defaultValue: 'Build it' }), planAdjustLabel: t('console.ai.planAdjust', { defaultValue: 'Adjust' }), planBuiltLabel: t('console.ai.planBuilt', { defaultValue: 'Built' }), planApproveMessage: t('console.ai.planApproveMessage', {
+                    }), planApproveLabel: t('console.ai.planApprove', { defaultValue: 'Build it' }), planAdjustLabel: t('console.ai.planAdjust', { defaultValue: 'Adjust' }), planBuiltLabel: t('console.ai.planBuilt', { defaultValue: 'Built' }), planReadyLabel: t('console.ai.planReady', {
+                        defaultValue: 'The plan is ready. Build it now, or tell me what to adjust.',
+                    }), planApproveMessage: t('console.ai.planApproveMessage', {
                         defaultValue: 'Looks good — build it as proposed.',
                     }), planApproveDefaultsMessage: t('console.ai.planApproveDefaultsMessage', {
                         defaultValue: 'Build it with your best assumptions; use sensible defaults for the open questions.',

package/dist/console/home/CloudOnboardingNext.d.ts

@@ -0,0 +1,10 @@
+interface CloudOnboardingNextProps {
+    properties?: {
+        /** Backend SSO-open endpoint (full-page nav that 302s into the prod env). */
+        openProductionUrl?: string;
+        /** SPA route to the environments list (create / open / manage). */
+        environmentsRoute?: string;
+    };
+}
+export declare function CloudOnboardingNext({ properties }: CloudOnboardingNextProps): import("react").JSX.Element;
+export {};