@object-ui/app-shell 4.0.12 → 4.2.1

package/CHANGELOG.md

@@ -1,5 +1,62 @@
 # @object-ui/app-shell — Changelog
 
+## 4.2.1
+
+### Patch Changes
+
+- 47c27c7: fix
+  - @object-ui/types@4.2.1
+  - @object-ui/core@4.2.1
+  - @object-ui/i18n@4.2.1
+  - @object-ui/react@4.2.1
+  - @object-ui/components@4.2.1
+  - @object-ui/fields@4.2.1
+  - @object-ui/layout@4.2.1
+  - @object-ui/data-objectstack@4.2.1
+  - @object-ui/auth@4.2.1
+  - @object-ui/permissions@4.2.1
+  - @object-ui/collaboration@4.2.1
+
+## 4.2.0
+
+### Patch Changes
+
+- 786de60: ReportView no longer caps the report content at `max-w-5xl` (1024px). Reports now use the full available content width, matching DashboardView behavior. Matrix and grid reports in particular benefit from the additional horizontal real estate.
+- Updated dependencies [eb738bd]
+- Updated dependencies [650392e]
+- Updated dependencies [84b4bf1]
+  - @object-ui/i18n@4.2.0
+  - @object-ui/components@4.2.0
+  - @object-ui/fields@4.2.0
+  - @object-ui/react@4.2.0
+  - @object-ui/layout@4.2.0
+  - @object-ui/types@4.2.0
+  - @object-ui/core@4.2.0
+  - @object-ui/data-objectstack@4.2.0
+  - @object-ui/auth@4.2.0
+  - @object-ui/permissions@4.2.0
+  - @object-ui/collaboration@4.2.0
+
+## 4.1.0
+
+### Patch Changes
+
+- b4ce9e2: Fix summary reports: render chart + KPIs, correct empty-table on server-aggregated data.
+  - `plugin-report`: `SpecReportGrid` now renders a KPI strip (per aggregating column) and a chart section above the grid for `summary` reports. KPI section auto-hides when no aggregating columns. New `buildChartData()` adapter buckets aggregated `ReportRow[]` to chart-ready data, auto-sorts pie/funnel descending, and falls back to row count when the chart `yAxis` points at a non-numeric column. When the data is server-aggregated, the grid switches columns to `[groupings, ${field}__${agg}]` so cells aren't empty against a raw-row column schema.
+  - `plugin-charts`: register `'column'` as an alias of `'bar'` in `ChartRenderer` / `AdvancedChartImpl` (Recharts only has `BarChart`).
+  - `app-shell`: `ReportView` now routes any object-backed report (matrix/joined/summary/tabular/columns/groupingsAcross) through the spec `ReportRenderer`; fully-legacy `fields`+`data` schemas still use `ReportViewer`.
+  - @object-ui/types@4.1.0
+  - @object-ui/core@4.1.0
+  - @object-ui/i18n@4.1.0
+  - @object-ui/react@4.1.0
+  - @object-ui/components@4.1.0
+  - @object-ui/fields@4.1.0
+  - @object-ui/layout@4.1.0
+  - @object-ui/data-objectstack@4.1.0
+  - @object-ui/auth@4.1.0
+  - @object-ui/permissions@4.1.0
+  - @object-ui/collaboration@4.1.0
+
 ## 4.0.12
 
 ### Patch Changes

package/dist/components/ManagedByBanner.d.ts

@@ -0,0 +1,16 @@
+export interface ManagedByBannerProps {
+    /** The `managedBy` flag from the object schema. */
+    managedBy?: string;
+    /** Optional override for the human-readable system name. */
+    label?: string;
+    /** Optional documentation link rendered as "Learn more →". */
+    docHref?: string;
+    /**
+     * Optional human-readable name for the source record / parent workflow
+     * referenced in `system`-bucket banners (e.g. "Opportunity"). When
+     * provided the banner reads "Use the Opportunity record's Submit for
+     * Approval action…" instead of the generic phrasing.
+     */
+    sourceRecordLabel?: string;
+}
+export declare function ManagedByBanner({ managedBy, label, docHref, sourceRecordLabel }: ManagedByBannerProps): import("react/jsx-runtime").JSX.Element | null;

package/dist/components/ManagedByBanner.js

@@ -0,0 +1,38 @@
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+import { ShieldAlert, Info, Lock, Archive } from 'lucide-react';
+const VARIANTS = {
+    config: {
+        icon: Info,
+        tone: 'border-sky-300/60 bg-sky-50 text-sky-900 dark:border-sky-500/40 dark:bg-sky-950/40 dark:text-sky-100',
+        title: 'Administrator configuration',
+        body: () => "These rows define how the platform behaves at runtime — they're authored here, but the runtime data they produce lives in a separate table. Changes take effect once a row is marked Active.",
+    },
+    system: {
+        icon: Lock,
+        tone: 'border-slate-300/60 bg-slate-50 text-slate-900 dark:border-slate-500/40 dark:bg-slate-950/40 dark:text-slate-100',
+        title: 'Managed by the platform',
+        body: (_display, src) => `Rows here are created and updated automatically by the platform engine. To start a new one, use the action button on the ${src ?? 'source record'} (e.g. "Submit for Approval", "Share", "Invite"). The list below is the audit / monitoring surface — actions like Approve, Recall, or Resend live on the row.`,
+    },
+    'append-only': {
+        icon: Archive,
+        tone: 'border-zinc-300/60 bg-zinc-50 text-zinc-900 dark:border-zinc-500/40 dark:bg-zinc-950/40 dark:text-zinc-100',
+        title: 'Read-only historical record',
+        body: () => "This is an immutable audit log. Rows cannot be created, edited, or deleted from the UI — they're written by the platform when events occur. Use Export to download for compliance review.",
+    },
+    'better-auth': {
+        icon: ShieldAlert,
+        tone: 'border-amber-300/60 bg-amber-50 text-amber-900 dark:border-amber-500/40 dark:bg-amber-950/40 dark:text-amber-100',
+        title: 'Managed by better-auth',
+        body: (display) => `This object's schema is owned by ${display}. Direct edits here bypass password hashing, session validation, two-factor checks, and audit hooks — and may corrupt account state. Use the dedicated identity workflows instead (Invite User, Reset Password, Revoke Session, Rotate Key, …).`,
+    },
+};
+export function ManagedByBanner({ managedBy, label, docHref, sourceRecordLabel }) {
+    if (!managedBy || managedBy === 'platform')
+        return null;
+    const variant = VARIANTS[managedBy];
+    if (!variant)
+        return null;
+    const display = label ?? managedBy;
+    const Icon = variant.icon;
+    return (_jsxs("div", { role: "note", "data-testid": "managed-by-banner", "data-bucket": managedBy, className: `flex items-start gap-3 border-b px-4 py-2.5 text-sm ${variant.tone}`, children: [_jsx(Icon, { className: "mt-0.5 h-4 w-4 flex-none" }), _jsxs("div", { className: "flex-1", children: [_jsxs("strong", { className: "font-semibold", children: [variant.title, "."] }), ' ', variant.body(display, sourceRecordLabel), docHref && (_jsxs(_Fragment, { children: [' ', _jsx("a", { href: docHref, target: "_blank", rel: "noreferrer", className: "underline underline-offset-2 hover:opacity-80", children: "Learn more \u2192" })] }))] })] }));
+}

package/dist/layout/AppHeader.js

@@ -19,7 +19,7 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
  */
 import { useLocation, useParams, Link, useNavigate } from 'react-router-dom';
 import { SidebarTrigger, Button, DropdownMenu, DropdownMenuTrigger, DropdownMenuContent, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuGroup, Avatar, AvatarImage, AvatarFallback, } from '@object-ui/components';
-import { Search, HelpCircle, ChevronDown, Settings, LogOut, User as UserIcon, Boxes, Bell, } from 'lucide-react';
+import { Search, HelpCircle, ChevronDown, Settings, LogOut, User as UserIcon, Boxes, Bell, CheckSquare, } from 'lucide-react';
 import { useState, useEffect, useCallback, useRef } from 'react';
 import { useOffline } from '@object-ui/react';
 import { PresenceAvatars } from '@object-ui/collaboration';
@@ -66,6 +66,9 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
     const presenceUnavailableRef = useRef(false);
     const activityUnavailableRef = useRef(false);
     const notificationsUnavailableRef = useRef(false);
+    /** M11.C15: pending approvals count for the topbar shortcut. */
+    const [pendingApprovalsCount, setPendingApprovalsCount] = useState(0);
+    const approvalsUnavailableRef = useRef(false);
     const fetchPresenceAndActivities = useCallback(async () => {
         if (!dataSource || !isApp)
             return;
@@ -107,10 +110,22 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
     }, [dataSource, isApp]);
     useEffect(() => { fetchPresenceAndActivities(); }, [fetchPresenceAndActivities]);
     /**
-     * M10.8: poll sys_notification for the signed-in user. Limited to
-     * the 20 most-recent entries; unread count drives the bell badge.
-     * Polls every 30s while the tab is foregrounded. Tolerates 404 so
-     * older deployments without sys_notification degrade silently.
+     * M10.8 + M11.B3: poll sys_notification for the signed-in user.
+     *
+     * - Limited to the 20 most-recent entries; unread count drives the bell badge.
+     * - Adaptive interval: 10s while the tab is foregrounded (was 30s) so the
+     *   bell reflects mentions / assignments within seconds without requiring a
+     *   server-push transport.
+     * - Immediate refetch on `visibilitychange` when the user returns to the
+     *   tab, so a backgrounded tab catches up the moment it regains focus.
+     * - On transient errors, switches to exponential backoff (cap 2 min) and
+     *   resets on the first successful fetch.
+     * - Tolerates 404 so deployments without sys_notification degrade silently.
+     *
+     * Full server-push (SSE / WebSocket) is tracked separately as a M12
+     * enhancement; this adaptive poll already reduces perceived latency from
+     * ~15s (average half of the old 30s window) to ~5s and is sufficient for
+     * pilots up to ~50 concurrent users.
      */
     useEffect(() => {
         if (!dataSource || !isApp || !user?.id)
@@ -118,6 +133,11 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
         if (notificationsUnavailableRef.current)
             return;
         let cancelled = false;
+        let timer = null;
+        const ACTIVE_INTERVAL_MS = 10000;
+        const HIDDEN_INTERVAL_MS = 60000;
+        const MAX_BACKOFF_MS = 120000;
+        let backoffMs = ACTIVE_INTERVAL_MS;
         const isMissingResource = (err) => err?.httpStatus === 404 || err?.status === 404 || err?.code === 'object_not_found';
         const fetchOnce = async () => {
             try {
@@ -130,24 +150,108 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
                     return;
                 if (Array.isArray(res?.data))
                     setNotifications(res.data);
+                backoffMs = ACTIVE_INTERVAL_MS;
             }
             catch (err) {
-                if (isMissingResource(err))
+                if (isMissingResource(err)) {
                     notificationsUnavailableRef.current = true;
+                    return;
+                }
+                backoffMs = Math.min(backoffMs * 2, MAX_BACKOFF_MS);
             }
         };
-        fetchOnce();
-        const handle = setInterval(() => {
-            if (typeof document !== 'undefined' && document.hidden)
+        const scheduleNext = () => {
+            if (cancelled || notificationsUnavailableRef.current)
                 return;
-            if (notificationsUnavailableRef.current) {
-                clearInterval(handle);
+            const hidden = typeof document !== 'undefined' && document.hidden;
+            const delay = hidden ? HIDDEN_INTERVAL_MS : backoffMs;
+            timer = setTimeout(async () => {
+                await fetchOnce();
+                scheduleNext();
+            }, delay);
+        };
+        const onVisibilityChange = () => {
+            if (cancelled)
+                return;
+            if (typeof document === 'undefined' || document.hidden)
                 return;
+            if (timer) {
+                clearTimeout(timer);
+                timer = null;
+            }
+            backoffMs = ACTIVE_INTERVAL_MS;
+            fetchOnce().finally(scheduleNext);
+        };
+        fetchOnce().finally(scheduleNext);
+        if (typeof document !== 'undefined') {
+            document.addEventListener('visibilitychange', onVisibilityChange);
+        }
+        return () => {
+            cancelled = true;
+            if (timer)
+                clearTimeout(timer);
+            if (typeof document !== 'undefined') {
+                document.removeEventListener('visibilitychange', onVisibilityChange);
             }
-            fetchOnce();
-        }, 30000);
-        return () => { cancelled = true; clearInterval(handle); };
+        };
     }, [dataSource, isApp, user?.id]);
+    /**
+     * M11.C15: poll pending-approvals count for the topbar shortcut badge.
+     * Hits the framework's `/api/v1/approvals/requests?status=pending`
+     * endpoint with the user's identities (id, email, role:<r>). Degrades
+     * silently to zero on 404 (approvals plugin not installed).
+     */
+    useEffect(() => {
+        if (!isApp || !user?.id)
+            return;
+        if (approvalsUnavailableRef.current)
+            return;
+        const serverUrl = (import.meta.env?.VITE_SERVER_URL || '').replace(/\/$/, '');
+        const base = `${serverUrl}/api/v1/approvals/requests`;
+        const identities = [];
+        if (user.id)
+            identities.push(user.id);
+        if (user.email)
+            identities.push(user.email);
+        for (const r of (user.roles || [])) {
+            if (r)
+                identities.push(`role:${r}`);
+        }
+        let cancelled = false;
+        let timer = null;
+        const POLL_MS = 30000;
+        const fetchOnce = async () => {
+            try {
+                const seen = new Set();
+                if (identities.length === 0)
+                    return;
+                for (const id of identities) {
+                    const qs = new URLSearchParams({ status: 'pending', approverId: id });
+                    const res = await fetch(`${base}?${qs}`, { credentials: 'include' });
+                    if (res.status === 404) {
+                        approvalsUnavailableRef.current = true;
+                        return;
+                    }
+                    if (!res.ok)
+                        return;
+                    const payload = await res.json().catch(() => null);
+                    for (const row of (payload?.data || []))
+                        seen.add(row.id);
+                }
+                if (!cancelled)
+                    setPendingApprovalsCount(seen.size);
+            }
+            catch { /* transient — keep last value */ }
+        };
+        const schedule = () => {
+            if (cancelled || approvalsUnavailableRef.current)
+                return;
+            timer = setTimeout(async () => { await fetchOnce(); schedule(); }, POLL_MS);
+        };
+        fetchOnce().finally(schedule);
+        return () => { cancelled = true; if (timer)
+            clearTimeout(timer); };
+    }, [isApp, user?.id]);
     const unreadCount = notifications.reduce((n, x) => n + (x.is_read ? 0 : 1), 0);
     const markNotificationRead = useCallback(async (id) => {
         setNotifications(prev => prev.map(n => n.id === id ? { ...n, is_read: true } : n));
@@ -271,7 +375,10 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
     return (_jsxs("div", { className: "flex items-center justify-between w-full h-full", children: [_jsxs("div", { className: "flex items-center min-w-0 flex-1", children: [_jsx(Link, { to: "/home", className: "flex items-center justify-center h-7 w-7 shrink-0 rounded-md bg-primary text-primary-foreground hover:bg-primary/90 transition-colors", title: "ObjectStack", children: _jsx(Boxes, { className: "h-4 w-4" }) }), resolvedVariant === 'home' && (_jsx("span", { className: "hidden sm:inline ml-2 text-sm font-semibold tracking-tight", children: "ObjectStack" })), resolvedVariant === 'orgs' && (_jsxs(_Fragment, { children: [_jsx(PathSep, {}), _jsx("span", { className: "text-sm font-medium text-foreground/80 px-1.5", children: t('organizations.title', { defaultValue: 'Organizations' }) })] })), isApp && (_jsxs(_Fragment, { children: [_jsx(SidebarTrigger, { className: "md:hidden shrink-0 ml-1", "aria-label": t('common.toggleSidebar') || 'Toggle sidebar' }), activeAppName && onAppChange ? (_jsxs(_Fragment, { children: [_jsx(PathSep, {}), _jsx(AppSwitcher, { activeAppName: activeAppName, onAppChange: onAppChange })] })) : appName ? (_jsxs(_Fragment, { children: [_jsx(PathSep, {}), _jsx("span", { className: "text-sm font-medium text-foreground/80 px-1.5", children: appName })] })) : null, extraSegments.map((seg, i) => {
                                 const isLast = i === extraSegments.length - 1;
                                 return (_jsxs("span", { className: "hidden sm:flex items-center min-w-0", children: [_jsx(PathSep, {}), seg.siblings && seg.siblings.length > 1 ? (_jsxs(DropdownMenu, { children: [_jsxs(DropdownMenuTrigger, { className: `flex items-center gap-1 rounded-md px-1.5 py-1 text-sm font-medium transition-colors outline-none hover:bg-accent hover:text-foreground ${!isLast ? 'text-foreground/60' : 'text-foreground/80'}`, children: [seg.label, _jsx(ChevronDown, { className: "h-3.5 w-3.5 text-muted-foreground" })] }), _jsxs(DropdownMenuContent, { align: "start", sideOffset: 8, className: "w-56 max-h-72 overflow-y-auto", children: [_jsx(DropdownMenuLabel, { className: "text-xs text-muted-foreground font-normal", children: "Switch Object" }), _jsx(DropdownMenuSeparator, {}), seg.siblings.map((sibling) => (_jsx(DropdownMenuItem, { asChild: true, children: _jsx(Link, { to: sibling.href, className: "w-full", children: sibling.label }) }, sibling.href)))] })] })) : seg.href ? (_jsx(Link, { to: seg.href, className: `rounded-md px-1.5 py-1 text-sm font-medium transition-colors hover:bg-accent hover:text-foreground truncate max-w-[160px] ${isLast ? 'text-foreground/80' : 'text-foreground/60'}`, children: seg.label })) : (_jsx("span", { className: `px-1.5 py-1 text-sm font-medium truncate max-w-[160px] ${isLast ? 'text-foreground/80' : 'text-foreground/60'}`, children: seg.label }))] }, i));
-                            }), _jsx("span", { className: "text-sm font-medium sm:hidden truncate min-w-0 ml-1", children: lastSegmentLabel })] }))] }), _jsxs("div", { className: "flex items-center gap-0.5 sm:gap-1 shrink-0 [&>*+*[data-topbar-group]]:ml-1 [&>[data-topbar-group]+[data-topbar-group]]:border-l [&>[data-topbar-group]+[data-topbar-group]]:border-border/60 [&>[data-topbar-group]+[data-topbar-group]]:pl-1 sm:[&>[data-topbar-group]+[data-topbar-group]]:pl-2 sm:[&>[data-topbar-group]+[data-topbar-group]]:ml-2", children: [!isOnline && (_jsxs("div", { className: "flex items-center gap-1 px-2 py-1 rounded-full bg-yellow-100 dark:bg-yellow-900/30 text-yellow-800 dark:text-yellow-200 text-xs font-medium", children: [_jsx("span", { className: "h-2 w-2 rounded-full bg-yellow-500 animate-pulse" }), "Offline"] })), isApp && connectionState && _jsx(ConnectionStatus, { state: connectionState }), isApp && activeUsers.length > 0 && (_jsx("div", { className: "hidden md:flex items-center shrink-0", title: "Users currently online", children: _jsx(PresenceAvatars, { users: activeUsers, size: "sm", maxVisible: 3, showStatus: true }) })), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 sm:gap-1 shrink-0", children: [_jsxs("button", { onClick: () => document.dispatchEvent(new KeyboardEvent('keydown', { key: 'k', metaKey: true })), className: "hidden lg:flex relative items-center gap-2 w-48 xl:w-64 h-8 px-3 text-sm rounded-md border bg-muted/50 text-muted-foreground hover:bg-muted transition-colors", children: [_jsx(Search, { className: "h-3.5 w-3.5 shrink-0" }), _jsx("span", { className: "flex-1 text-left text-xs", children: t('console.search', { defaultValue: 'Search...' }) }), _jsxs("kbd", { className: "pointer-events-none inline-flex h-5 items-center gap-0.5 rounded border bg-background px-1.5 text-[10px] font-medium text-muted-foreground", children: [_jsx("span", { className: "text-xs", children: "\u2318" }), "K"] })] }), _jsx(Button, { variant: "ghost", size: "icon", className: "lg:hidden h-8 w-8 shrink-0", onClick: () => document.dispatchEvent(new KeyboardEvent('keydown', { key: 'k', metaKey: true })), "aria-label": t('console.search', { defaultValue: 'Search...' }), children: _jsx(Search, { className: "h-4 w-4" }) })] }), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 shrink-0", children: [_jsx("div", { className: "hidden sm:flex shrink-0", children: _jsx(ActivityFeed, { activities: activeActivities }) }), _jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsxs(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 relative shrink-0", "aria-label": t('sidebar.notifications', { defaultValue: 'Notifications' }), children: [_jsx(Bell, { className: "h-4 w-4" }), unreadCount > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-4 min-w-[16px] rounded-full bg-red-500 text-[10px] leading-4 text-white text-center px-1", children: unreadCount > 9 ? '9+' : unreadCount }))] }) }), _jsxs(DropdownMenuContent, { align: "end", className: "w-80 max-h-96 overflow-auto", children: [_jsxs(DropdownMenuLabel, { className: "flex items-center justify-between", children: [_jsx("span", { children: t('sidebar.notifications', { defaultValue: 'Notifications' }) }), unreadCount > 0 && (_jsx("button", { type: "button", onClick: (e) => { e.preventDefault(); markAllRead(); }, className: "text-xs text-muted-foreground hover:text-foreground", children: t('notifications.markAllRead', { defaultValue: 'Mark all read' }) }))] }), _jsx(DropdownMenuSeparator, {}), notifications.length === 0 ? (_jsx("div", { className: "px-3 py-6 text-sm text-muted-foreground text-center", children: t('notifications.empty', { defaultValue: 'No notifications' }) })) : (notifications.map((n) => (_jsxs(DropdownMenuItem, { className: `flex flex-col items-start gap-1 ${n.is_read ? '' : 'bg-accent/40'}`, onSelect: () => {
+                            }), _jsx("span", { className: "text-sm font-medium sm:hidden truncate min-w-0 ml-1", children: lastSegmentLabel })] }))] }), _jsxs("div", { className: "flex items-center gap-0.5 sm:gap-1 shrink-0 [&>*+*[data-topbar-group]]:ml-1 [&>[data-topbar-group]+[data-topbar-group]]:border-l [&>[data-topbar-group]+[data-topbar-group]]:border-border/60 [&>[data-topbar-group]+[data-topbar-group]]:pl-1 sm:[&>[data-topbar-group]+[data-topbar-group]]:pl-2 sm:[&>[data-topbar-group]+[data-topbar-group]]:ml-2", children: [!isOnline && (_jsxs("div", { className: "flex items-center gap-1 px-2 py-1 rounded-full bg-yellow-100 dark:bg-yellow-900/30 text-yellow-800 dark:text-yellow-200 text-xs font-medium", children: [_jsx("span", { className: "h-2 w-2 rounded-full bg-yellow-500 animate-pulse" }), "Offline"] })), isApp && connectionState && _jsx(ConnectionStatus, { state: connectionState }), isApp && activeUsers.length > 0 && (_jsx("div", { className: "hidden md:flex items-center shrink-0", title: "Users currently online", children: _jsx(PresenceAvatars, { users: activeUsers, size: "sm", maxVisible: 3, showStatus: true }) })), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 sm:gap-1 shrink-0", children: [_jsxs("button", { onClick: () => document.dispatchEvent(new KeyboardEvent('keydown', { key: 'k', metaKey: true })), className: "hidden lg:flex relative items-center gap-2 w-48 xl:w-64 h-8 px-3 text-sm rounded-md border bg-muted/50 text-muted-foreground hover:bg-muted transition-colors", children: [_jsx(Search, { className: "h-3.5 w-3.5 shrink-0" }), _jsx("span", { className: "flex-1 text-left text-xs", children: t('console.search', { defaultValue: 'Search...' }) }), _jsxs("kbd", { className: "pointer-events-none inline-flex h-5 items-center gap-0.5 rounded border bg-background px-1.5 text-[10px] font-medium text-muted-foreground", children: [_jsx("span", { className: "text-xs", children: "\u2318" }), "K"] })] }), _jsx(Button, { variant: "ghost", size: "icon", className: "lg:hidden h-8 w-8 shrink-0", onClick: () => document.dispatchEvent(new KeyboardEvent('keydown', { key: 'k', metaKey: true })), "aria-label": t('console.search', { defaultValue: 'Search...' }), children: _jsx(Search, { className: "h-4 w-4" }) })] }), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 shrink-0", children: [_jsx("div", { className: "hidden sm:flex shrink-0", children: _jsx(ActivityFeed, { activities: activeActivities }) }), pendingApprovalsCount >= 0 && (_jsxs(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 relative shrink-0", "aria-label": t('sidebar.approvals', { defaultValue: 'Approvals' }), title: t('sidebar.approvals', { defaultValue: 'Approvals' }), onClick: () => {
+                                    const app = currentAppName ?? params.appName;
+                                    navigate(app ? `/apps/${app}/system/approvals` : '/apps/setup/system/approvals');
+                                }, children: [_jsx(CheckSquare, { className: "h-4 w-4" }), pendingApprovalsCount > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-4 min-w-[16px] rounded-full bg-amber-500 text-[10px] leading-4 text-white text-center px-1", children: pendingApprovalsCount > 9 ? '9+' : pendingApprovalsCount }))] })), _jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsxs(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 relative shrink-0", "aria-label": t('sidebar.notifications', { defaultValue: 'Notifications' }), children: [_jsx(Bell, { className: "h-4 w-4" }), unreadCount > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-4 min-w-[16px] rounded-full bg-red-500 text-[10px] leading-4 text-white text-center px-1", children: unreadCount > 9 ? '9+' : unreadCount }))] }) }), _jsxs(DropdownMenuContent, { align: "end", className: "w-80 max-h-96 overflow-auto", children: [_jsxs(DropdownMenuLabel, { className: "flex items-center justify-between", children: [_jsx("span", { children: t('sidebar.notifications', { defaultValue: 'Notifications' }) }), unreadCount > 0 && (_jsx("button", { type: "button", onClick: (e) => { e.preventDefault(); markAllRead(); }, className: "text-xs text-muted-foreground hover:text-foreground", children: t('notifications.markAllRead', { defaultValue: 'Mark all read' }) }))] }), _jsx(DropdownMenuSeparator, {}), notifications.length === 0 ? (_jsx("div", { className: "px-3 py-6 text-sm text-muted-foreground text-center", children: t('notifications.empty', { defaultValue: 'No notifications' }) })) : (notifications.map((n) => (_jsxs(DropdownMenuItem, { className: `flex flex-col items-start gap-1 ${n.is_read ? '' : 'bg-accent/40'}`, onSelect: () => {
                                                     markNotificationRead(n.id);
                                                     if (n.source_object && n.source_id) {
                                                         // Navigate to the related record; relative to /apps/<currentApp> if any.

package/dist/utils/crudAffordances.d.ts

@@ -0,0 +1,41 @@
+/**
+ * crudAffordances — UI-side mirror of the framework's
+ * `resolveCrudAffordances()` helper (see
+ * `@objectstack/spec/data/object.zod.ts`).
+ *
+ * The framework tags every object with a `managedBy` lifecycle bucket
+ * (`platform | config | system | append-only | better-auth`) and an
+ * optional `userActions` override block. UI components ask this helper
+ * "should I show the New / Import / Edit / Delete / Export buttons?" so
+ * the toolbar tracks the object's lifecycle automatically — no need for
+ * each view to special-case `sys_*` names.
+ *
+ * Keep this in lockstep with the framework helper. The bucket defaults
+ * mirror what Salesforce / ServiceNow / Workday / Notion do for the
+ * equivalent categories of system tables.
+ */
+export type ManagedByBucket = 'platform' | 'config' | 'system' | 'append-only' | 'better-auth';
+export interface CrudAffordances {
+    /** Generic "New" button for single-record creation. */
+    create: boolean;
+    /** CSV bulk-import wizard. */
+    import: boolean;
+    /** Inline + form editing of existing rows. */
+    edit: boolean;
+    /** Row-level + bulk delete. */
+    delete: boolean;
+    /** CSV / clipboard export. */
+    exportCsv: boolean;
+}
+export interface UserActionsOverride {
+    create?: boolean;
+    import?: boolean;
+    edit?: boolean;
+    delete?: boolean;
+    exportCsv?: boolean;
+}
+export interface SchemaLike {
+    managedBy?: string | null;
+    userActions?: UserActionsOverride | null;
+}
+export declare function resolveCrudAffordances(obj: SchemaLike | null | undefined): CrudAffordances;

package/dist/utils/crudAffordances.js

@@ -0,0 +1,35 @@
+/**
+ * crudAffordances — UI-side mirror of the framework's
+ * `resolveCrudAffordances()` helper (see
+ * `@objectstack/spec/data/object.zod.ts`).
+ *
+ * The framework tags every object with a `managedBy` lifecycle bucket
+ * (`platform | config | system | append-only | better-auth`) and an
+ * optional `userActions` override block. UI components ask this helper
+ * "should I show the New / Import / Edit / Delete / Export buttons?" so
+ * the toolbar tracks the object's lifecycle automatically — no need for
+ * each view to special-case `sys_*` names.
+ *
+ * Keep this in lockstep with the framework helper. The bucket defaults
+ * mirror what Salesforce / ServiceNow / Workday / Notion do for the
+ * equivalent categories of system tables.
+ */
+const DEFAULTS = {
+    platform: { create: true, import: true, edit: true, delete: true, exportCsv: true },
+    config: { create: true, import: false, edit: true, delete: true, exportCsv: true },
+    system: { create: false, import: false, edit: false, delete: false, exportCsv: true },
+    'append-only': { create: false, import: false, edit: false, delete: false, exportCsv: true },
+    'better-auth': { create: false, import: false, edit: false, delete: false, exportCsv: true },
+};
+export function resolveCrudAffordances(obj) {
+    const bucket = obj?.managedBy ?? 'platform';
+    const base = DEFAULTS[bucket] ?? DEFAULTS.platform;
+    const o = obj?.userActions ?? {};
+    return {
+        create: o.create ?? base.create,
+        import: o.import ?? base.import,
+        edit: o.edit ?? base.edit,
+        delete: o.delete ?? base.delete,
+        exportCsv: o.exportCsv ?? base.exportCsv,
+    };
+}

package/dist/views/ObjectView.js

@@ -26,6 +26,8 @@ import { MetadataPanel, useMetadataInspector } from './MetadataInspector';
 import { ViewConfigPanel } from './ViewConfigPanel';
 import { CreateViewDialog } from './CreateViewDialog';
 import { PageHeader } from '../layout/PageHeader';
+import { ManagedByBanner } from '../components/ManagedByBanner';
+import { resolveCrudAffordances } from '../utils/crudAffordances';
 import { useObjectActions } from '../hooks/useObjectActions';
 import { useObjectTranslation, useObjectLabel } from '@object-ui/i18n';
 import { usePermissions } from '@object-ui/permissions';
@@ -47,6 +49,40 @@ const VIEW_TYPE_ICONS = {
     chart: BarChart3,
 };
 const FALLBACK_USER = { id: 'current-user', name: 'Demo User' };
+/**
+ * Replace built-in tokens (e.g. `{current_user_id}`) inside a filter array
+ * with concrete values. Filters from platform-shipped `listViews` or saved
+ * `sys_view` rows may declare context-sensitive predicates like
+ * `{ field: 'submitter_id', operator: 'equals', value: '{current_user_id}' }`
+ * — those need to be substituted before the query reaches the API.
+ *
+ * Recognised tokens:
+ *   • `{current_user_id}` → the authenticated user's id
+ *
+ * Returns a deep-cloned copy with substitutions applied. Non-array input
+ * is returned unchanged.
+ */
+function substituteFilterTokens(filter, currentUserId) {
+    if (!Array.isArray(filter))
+        return filter;
+    const sub = (v) => {
+        if (typeof v === 'string') {
+            if (v === '{current_user_id}')
+                return currentUserId ?? v;
+            return v;
+        }
+        if (Array.isArray(v))
+            return v.map(sub);
+        if (v && typeof v === 'object') {
+            const out = {};
+            for (const k of Object.keys(v))
+                out[k] = sub(v[k]);
+            return out;
+        }
+        return v;
+    };
+    return filter.map(sub);
+}
 /**
  * Translate a NamedListView spec object (shape: `type`, `label`, `columns`,
  * `filter`, `sort`, `kanban`/`chart`/`gantt`/... sub-blocks, `bulkActions`,
@@ -457,6 +493,13 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
     }
     // Refresh trigger — bumped after view CRUD or external data mutations.
     const [refreshKey, setRefreshKey] = useState(0);
+    // Resolve which generic CRUD affordances belong in the toolbar for
+    // this object's lifecycle bucket (`managedBy`).  config tables show
+    // New/Edit/Delete but no CSV Import; system / append-only / better-auth
+    // hide the lot — those flows go through purpose-built actions on the
+    // source record (e.g. "Submit for Approval" on an Opportunity creates
+    // an `sys_approval_request`).  Permissions still gate the buttons.
+    const affordances = useMemo(() => resolveCrudAffordances(objectDef), [objectDef]);
     // Propagate externally-triggered refreshes (e.g. global ModalForm submit)
     // into our internal refreshKey so list/data effects re-run.
     useEffect(() => {
@@ -1285,9 +1328,10 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
             sort: viewDef.sort ?? listSchema.sort,
             filter: (() => {
                 const base = viewDef.filter ?? listSchema.filter;
+                const substituted = substituteFilterTokens(base, currentUser.id);
                 if (!urlFilters.length)
-                    return base;
-                const baseArr = Array.isArray(base) ? base : [];
+                    return substituted;
+                const baseArr = Array.isArray(substituted) ? substituted : [];
                 return [...baseArr, ...urlFilters];
             })(),
             hiddenFields: viewDef.hiddenFields ?? listSchema.hiddenFields,
@@ -1359,7 +1403,8 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
                     ...(Array.isArray(viewDef.filter) ? viewDef.filter : []),
                     ...urlFilters,
                 ];
-                return combined.length ? { filters: combined } : {};
+                const substituted = substituteFilterTokens(combined, currentUser.id);
+                return Array.isArray(substituted) && substituted.length ? { filters: substituted } : {};
             })()),
             ...(viewDef.sort?.length ? { sort: viewDef.sort } : {}),
             options: {
@@ -1489,7 +1534,7 @@ export function ObjectView({ dataSource, objects, onEdit, externalRefreshKey })
             }
         },
     }), [objectDef.name, onEdit, activeView?.showSearch, activeView?.showFilters, activeView?.showSort, navigate, viewId, isAdmin]);
-    return (_jsxs(ActionProvider, { context: { objectName: objectDef.name, user: currentUser }, onConfirm: confirmHandler, onToast: toastHandler, onNavigate: navigateHandler, onParamCollection: paramCollectionHandler, handlers: { api: apiHandler, flow: flowHandler, script: serverActionHandler, modal: serverActionHandler }, children: [_jsxs("div", { className: "h-full flex flex-col bg-background min-w-0 overflow-hidden", children: [_jsx(PageHeader, { title: objectLabel(objectDef), description: objectDef.description ? objectDesc(objectDef) : undefined, icon: (() => { const I = getIcon(objectDef?.icon); return _jsx(I, { className: "h-4 w-4" }); })(), actions: _jsxs(_Fragment, { children: [can(objectDef.name, 'create') && (_jsxs(Button, { size: "sm", onClick: actions.create, className: "shadow-none gap-1.5 sm:gap-2 h-8 sm:h-9", children: [_jsx(Plus, { className: "h-4 w-4" }), _jsx("span", { className: "hidden sm:inline", children: t('console.objectView.new') })] })), can(objectDef.name, 'create') && (_jsxs(Button, { size: "sm", variant: "outline", onClick: () => setShowImport(true), className: "shadow-none gap-1.5 sm:gap-2 h-8 sm:h-9", title: t('console.objectView.importTitle'), "data-testid": "object-view-import-button", children: [_jsx(Upload, { className: "h-4 w-4" }), _jsx("span", { className: "hidden sm:inline", children: t('console.objectView.import') })] })), objectDef.actions?.some((a) => a.locations?.includes('list_toolbar')) && (_jsx(SchemaRenderer, { schema: {
+    return (_jsxs(ActionProvider, { context: { objectName: objectDef.name, user: currentUser }, onConfirm: confirmHandler, onToast: toastHandler, onNavigate: navigateHandler, onParamCollection: paramCollectionHandler, handlers: { api: apiHandler, flow: flowHandler, script: serverActionHandler, modal: serverActionHandler }, children: [_jsxs("div", { className: "h-full flex flex-col bg-background min-w-0 overflow-hidden", children: [_jsx(ManagedByBanner, { managedBy: objectDef?.managedBy }), _jsx(PageHeader, { title: objectLabel(objectDef), description: objectDef.description ? objectDesc(objectDef) : undefined, icon: (() => { const I = getIcon(objectDef?.icon); return _jsx(I, { className: "h-4 w-4" }); })(), actions: _jsxs(_Fragment, { children: [affordances.create && can(objectDef.name, 'create') && (_jsxs(Button, { size: "sm", onClick: actions.create, className: "shadow-none gap-1.5 sm:gap-2 h-8 sm:h-9", children: [_jsx(Plus, { className: "h-4 w-4" }), _jsx("span", { className: "hidden sm:inline", children: t('console.objectView.new') })] })), affordances.import && can(objectDef.name, 'create') && (_jsxs(Button, { size: "sm", variant: "outline", onClick: () => setShowImport(true), className: "shadow-none gap-1.5 sm:gap-2 h-8 sm:h-9", title: t('console.objectView.importTitle'), "data-testid": "object-view-import-button", children: [_jsx(Upload, { className: "h-4 w-4" }), _jsx("span", { className: "hidden sm:inline", children: t('console.objectView.import') })] })), objectDef.actions?.some((a) => a.locations?.includes('list_toolbar')) && (_jsx(SchemaRenderer, { schema: {
                                         type: 'action:bar',
                                         location: 'list_toolbar',
                                         actions: (objectDef.actions || []).map((a) => ({

package/dist/views/RecordDetailView.js

@@ -17,6 +17,8 @@ import { toast } from 'sonner';
 import { Database, Users } from 'lucide-react';
 import { MetadataPanel, useMetadataInspector } from './MetadataInspector';
 import { SkeletonDetail } from '../skeletons';
+import { ManagedByBanner } from '../components/ManagedByBanner';
+import { resolveCrudAffordances } from '../utils/crudAffordances';
 import { ActionConfirmDialog } from './ActionConfirmDialog';
 import { ActionParamDialog } from './ActionParamDialog';
 import { useRecordBreadcrumbTitle } from '../context/NavigationContext';
@@ -701,13 +703,19 @@ export function RecordDetailView({ dataSource, objects, onEdit }) {
                 onRowDelete,
             };
         });
+        const affordances = resolveCrudAffordances(objectDef);
         return {
             type: 'detail-view',
             objectName: objectDef.name,
             resourceId: pureRecordId,
             showBack: true,
             onBack: 'history',
-            showEdit: true,
+            // Hide the Edit button for objects whose lifecycle isn't user-managed
+            // (approval requests, audit logs, better-auth tables, …).  The
+            // underlying form is also disabled when `managedBy !== 'platform'`
+            // (see plugin-form/ObjectForm), so even if a stray Edit URL is
+            // visited the inputs render read-only.
+            showEdit: affordances.edit,
             title: objectDef.label,
             primaryField,
             sections,
@@ -732,7 +740,7 @@ export function RecordDetailView({ dataSource, objects, onEdit }) {
     if (!objectDef) {
         return (_jsx("div", { className: "flex h-full items-center justify-center p-4", children: _jsxs(Empty, { children: [_jsx("div", { className: "mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-muted", children: _jsx(Database, { className: "h-6 w-6 text-muted-foreground" }) }), _jsx(EmptyTitle, { children: t('empty.objectNotFound') }), _jsx(EmptyDescription, { children: t('empty.objectNotFoundDescription', { name: objectName }) })] }) }));
     }
-    return (_jsxs("div", { className: "h-full bg-background overflow-hidden flex flex-col relative", children: [_jsx("div", { className: "absolute top-2 sm:top-4 right-2 sm:right-4 z-50 flex items-center gap-2", children: recordViewers.length > 0 && (_jsxs("div", { className: "flex items-center gap-1.5", title: t('recordDetail.viewersTooltip'), children: [_jsx(Users, { className: "h-3.5 w-3.5 text-muted-foreground" }), _jsx(PresenceAvatars, { users: recordViewers, size: "sm", maxVisible: 4, showStatus: true })] })) }), _jsxs("div", { className: "flex-1 overflow-hidden flex flex-row", children: [_jsx("div", { className: "flex-1 overflow-auto p-3 sm:p-4 lg:p-6 scroll-pb-48", children: _jsx(ActionProvider, { context: { record: {}, objectName, user: currentUser }, onConfirm: confirmHandler, onToast: toastHandler, onNavigate: navigateHandler, onParamCollection: paramCollectionHandler, handlers: { api: apiHandler, flow: flowHandler, script: serverActionHandler, modal: serverActionHandler }, children: _jsx(DetailView, { schema: detailSchema, dataSource: dataSource, objectLabel: objectLabel({ name: objectDef.name, label: objectDef.label }), onDataLoaded: (record) => {
+    return (_jsxs("div", { className: "h-full bg-background overflow-hidden flex flex-col relative", children: [_jsx(ManagedByBanner, { managedBy: objectDef?.managedBy }), _jsx("div", { className: "absolute top-2 sm:top-4 right-2 sm:right-4 z-50 flex items-center gap-2", children: recordViewers.length > 0 && (_jsxs("div", { className: "flex items-center gap-1.5", title: t('recordDetail.viewersTooltip'), children: [_jsx(Users, { className: "h-3.5 w-3.5 text-muted-foreground" }), _jsx(PresenceAvatars, { users: recordViewers, size: "sm", maxVisible: 4, showStatus: true })] })) }), _jsxs("div", { className: "flex-1 overflow-hidden flex flex-row", children: [_jsx("div", { className: "flex-1 overflow-auto p-3 sm:p-4 lg:p-6 scroll-pb-48", children: _jsx(ActionProvider, { context: { record: {}, objectName, user: currentUser }, onConfirm: confirmHandler, onToast: toastHandler, onNavigate: navigateHandler, onParamCollection: paramCollectionHandler, handlers: { api: apiHandler, flow: flowHandler, script: serverActionHandler, modal: serverActionHandler }, children: _jsx(DetailView, { schema: detailSchema, dataSource: dataSource, objectLabel: objectLabel({ name: objectDef.name, label: objectDef.label }), onDataLoaded: (record) => {
                                     if (!record || typeof record !== 'object')
                                         return;
                                     // Resolve the same way DetailView's header does, so the

package/dist/views/RecordFormPage.js

@@ -39,6 +39,7 @@ import { useMetadata } from '../providers/MetadataProvider';
 import { useAdapter } from '../providers/AdapterProvider';
 import { ExpressionProvider, evaluateVisibility } from '../providers/ExpressionProvider';
 import { SkeletonDetail } from '../skeletons';
+import { ManagedByBanner } from '../components/ManagedByBanner';
 import { useAuth } from '@object-ui/auth';
 import { ExpressionEvaluator } from '@object-ui/core';
 /**
@@ -161,7 +162,7 @@ export function RecordFormPage({ mode }) {
     if (!objectDef) {
         return (_jsx("div", { className: "flex h-full items-center justify-center p-4", children: _jsxs(Empty, { children: [_jsx("div", { className: "mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-muted", children: _jsx(Database, { className: "h-6 w-6 text-muted-foreground" }) }), _jsx(EmptyTitle, { children: t('empty.objectNotFound') }), _jsx(EmptyDescription, { children: t('empty.objectNotFoundDescription', { name: objectName }) }), _jsx("div", { className: "mt-4", children: _jsxs(Button, { variant: "outline", onClick: () => navigate(baseUrl), children: [_jsx(ArrowLeft, { className: "mr-2 h-4 w-4" }), t('empty.back')] }) })] }) }));
     }
-    return (_jsx(ExpressionProvider, { user: expressionUser, app: { name: appName }, data: {}, children: _jsxs("div", { className: "flex flex-col h-full overflow-hidden bg-background", "data-testid": "record-form-page", "data-mode": mode, children: [_jsxs("header", { className: "sticky top-0 z-10 flex items-center gap-3 border-b bg-background px-4 py-3 sm:px-6", children: [_jsx(Button, { variant: "ghost", size: "sm", onClick: goBack, "data-testid": "record-form-page-back", "aria-label": t('common.back', { defaultValue: 'Back' }), children: _jsx(ArrowLeft, { className: "h-4 w-4" }) }), _jsxs("nav", { "aria-label": "Breadcrumb", className: "flex items-center gap-2 text-sm text-muted-foreground", children: [_jsx(Link, { to: objectListUrl, className: "hover:text-foreground transition-colors", children: label }), _jsx("span", { "aria-hidden": "true", children: "/" }), _jsx("span", { className: "text-foreground font-medium", "data-testid": "record-form-page-title", children: pageTitle })] })] }), _jsx("div", { className: "flex-1 overflow-auto p-4 sm:p-6", children: _jsx("div", { className: "mx-auto max-w-4xl", children: _jsx(ObjectForm, { schema: {
+    return (_jsx(ExpressionProvider, { user: expressionUser, app: { name: appName }, data: {}, children: _jsxs("div", { className: "flex flex-col h-full overflow-hidden bg-background", "data-testid": "record-form-page", "data-mode": mode, children: [_jsxs("header", { className: "sticky top-0 z-10 flex items-center gap-3 border-b bg-background px-4 py-3 sm:px-6", children: [_jsx(Button, { variant: "ghost", size: "sm", onClick: goBack, "data-testid": "record-form-page-back", "aria-label": t('common.back', { defaultValue: 'Back' }), children: _jsx(ArrowLeft, { className: "h-4 w-4" }) }), _jsxs("nav", { "aria-label": "Breadcrumb", className: "flex items-center gap-2 text-sm text-muted-foreground", children: [_jsx(Link, { to: objectListUrl, className: "hover:text-foreground transition-colors", children: label }), _jsx("span", { "aria-hidden": "true", children: "/" }), _jsx("span", { className: "text-foreground font-medium", "data-testid": "record-form-page-title", children: pageTitle })] })] }), _jsx(ManagedByBanner, { managedBy: objectDef?.managedBy }), _jsx("div", { className: "flex-1 overflow-auto p-4 sm:p-6", children: _jsx("div", { className: "mx-auto max-w-4xl", children: _jsx(ObjectForm, { schema: {
                                 type: 'object-form',
                                 formType: 'simple',
                                 objectName: objectDef.name,

package/dist/views/ReportView.js

@@ -2,6 +2,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useState, useEffect, useCallback, useMemo, lazy, Suspense } from 'react';
 import { useParams } from 'react-router-dom';
 const ReportViewer = lazy(() => import('@object-ui/plugin-report').then((m) => ({ default: m.ReportViewer })));
+const ReportRenderer = lazy(() => import('@object-ui/plugin-report').then((m) => ({ default: m.ReportRenderer })));
 const ReportConfigPanel = lazy(() => import('@object-ui/plugin-report').then((m) => ({ default: m.ReportConfigPanel })));
 import { Empty, EmptyTitle, EmptyDescription } from '@object-ui/components';
 import { Pencil, BarChart3, Loader2 } from 'lucide-react';
@@ -326,6 +327,20 @@ export function ReportView({ dataSource }) {
     };
     // Use live-edited schema for preview (persists after closing panel until metadata refreshes)
     const previewReport = editSchema || reportData;
+    // Route any object-backed spec report (matrix/joined/tabular/summary) through
+    // the spec ReportRenderer dispatcher. It handles aggregation, charts, KPIs
+    // and drill protocol end-to-end. The legacy ReportViewer is only used as a
+    // last resort for fully-legacy schemas that lack `objectName` (e.g. inline
+    // `fields` + `data` arrays from older app code).
+    const useSpecRenderer = Boolean(previewReport &&
+        previewReport.objectName &&
+        (previewReport.type === 'matrix' ||
+            previewReport.type === 'joined' ||
+            previewReport.type === 'summary' ||
+            previewReport.type === 'tabular' ||
+            previewReport.type === undefined ||
+            (Array.isArray(previewReport.groupingsAcross) && previewReport.groupingsAcross.length > 0) ||
+            Array.isArray(previewReport.columns)));
     const reportForViewer = mapReportForViewer(previewReport);
     const viewerSchema = {
         type: 'report-viewer',
@@ -335,5 +350,5 @@ export function ReportView({ dataSource }) {
         allowExport: true,
         loading: dataLoading, // Loading state for data fetching
     };
-    return (_jsxs("div", { className: "flex flex-col h-full overflow-hidden bg-background", children: [_jsxs("div", { className: "flex flex-col sm:flex-row justify-between sm:items-center gap-3 sm:gap-4 p-4 sm:p-6 border-b shrink-0", children: [_jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("h1", { className: "text-lg sm:text-xl md:text-2xl font-bold tracking-tight truncate", children: previewReport.title || previewReport.label || 'Report Viewer' }), previewReport.description && (_jsx("p", { className: "text-sm text-muted-foreground mt-1 line-clamp-2", children: previewReport.description }))] }), _jsx("div", { className: "shrink-0 flex items-center gap-1.5", children: _jsxs("button", { type: "button", onClick: handleOpenConfigPanel, className: "inline-flex items-center gap-1.5 rounded-md border border-input bg-background px-2.5 py-1.5 text-xs font-medium text-muted-foreground shadow-sm hover:bg-accent hover:text-accent-foreground", "data-testid": "report-edit-button", children: [_jsx(Pencil, { className: "h-3.5 w-3.5" }), "Edit"] }) })] }), _jsxs("div", { className: "flex-1 overflow-hidden flex flex-col sm:flex-row relative", children: [_jsx("div", { className: "flex-1 min-w-0 overflow-auto p-4 sm:p-6 lg:p-8 bg-muted/5", children: _jsx("div", { className: "max-w-5xl mx-auto shadow-sm border rounded-lg sm:rounded-xl bg-background overflow-hidden min-h-150", children: _jsx(Suspense, { fallback: _jsx("div", { className: "p-8 text-sm text-muted-foreground", children: "Loading report\u2026" }), children: _jsx(ReportViewer, { schema: viewerSchema }) }) }) }), _jsx(Suspense, { fallback: null, children: _jsx(ReportConfigPanel, { open: configPanelOpen, onClose: handleCloseConfigPanel, config: reportConfig, onSave: handleReportConfigSave, onFieldChange: handleReportFieldChange, availableFields: availableFields }) }), _jsx(MetadataPanel, { open: showDebug, sections: [{ title: 'Report Configuration', data: previewReport }] })] })] }));
+    return (_jsxs("div", { className: "flex flex-col h-full overflow-hidden bg-background", children: [_jsxs("div", { className: "flex flex-col sm:flex-row justify-between sm:items-center gap-3 sm:gap-4 p-4 sm:p-6 border-b shrink-0", children: [_jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("h1", { className: "text-lg sm:text-xl md:text-2xl font-bold tracking-tight truncate", children: previewReport.title || previewReport.label || 'Report Viewer' }), previewReport.description && (_jsx("p", { className: "text-sm text-muted-foreground mt-1 line-clamp-2", children: previewReport.description }))] }), _jsx("div", { className: "shrink-0 flex items-center gap-1.5", children: _jsxs("button", { type: "button", onClick: handleOpenConfigPanel, className: "inline-flex items-center gap-1.5 rounded-md border border-input bg-background px-2.5 py-1.5 text-xs font-medium text-muted-foreground shadow-sm hover:bg-accent hover:text-accent-foreground", "data-testid": "report-edit-button", children: [_jsx(Pencil, { className: "h-3.5 w-3.5" }), "Edit"] }) })] }), _jsxs("div", { className: "flex-1 overflow-hidden flex flex-col sm:flex-row relative", children: [_jsx("div", { className: "flex-1 min-w-0 overflow-auto p-4 sm:p-6 lg:p-8 bg-muted/5", children: _jsx("div", { className: "w-full shadow-sm border rounded-lg sm:rounded-xl bg-background overflow-hidden min-h-150", children: _jsx(Suspense, { fallback: _jsx("div", { className: "p-8 text-sm text-muted-foreground", children: "Loading report\u2026" }), children: useSpecRenderer ? (_jsx("div", { className: "p-4 sm:p-6", children: _jsx(ReportRenderer, { schema: previewReport, dataSource: dataSource }) })) : (_jsx(ReportViewer, { schema: viewerSchema })) }) }) }), _jsx(Suspense, { fallback: null, children: _jsx(ReportConfigPanel, { open: configPanelOpen, onClose: handleCloseConfigPanel, config: reportConfig, onSave: handleReportConfigSave, onFieldChange: handleReportFieldChange, availableFields: availableFields }) }), _jsx(MetadataPanel, { open: showDebug, sections: [{ title: 'Report Configuration', data: previewReport }] })] })] }));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@object-ui/app-shell",
-  "version": "4.0.12",
+  "version": "4.2.1",
   "type": "module",
   "license": "MIT",
   "description": "Minimal application shell for ObjectUI - framework-agnostic rendering engine",
@@ -27,34 +27,34 @@
   "dependencies": {
     "lucide-react": "^1.16.0",
     "sonner": "^2.0.7",
-    "@object-ui/auth": "4.0.12",
-    "@object-ui/collaboration": "4.0.12",
-    "@object-ui/components": "4.0.12",
-    "@object-ui/core": "4.0.12",
-    "@object-ui/data-objectstack": "4.0.12",
-    "@object-ui/fields": "4.0.12",
-    "@object-ui/i18n": "4.0.12",
-    "@object-ui/layout": "4.0.12",
-    "@object-ui/permissions": "4.0.12",
-    "@object-ui/react": "4.0.12",
-    "@object-ui/types": "4.0.12"
+    "@object-ui/auth": "4.2.1",
+    "@object-ui/collaboration": "4.2.1",
+    "@object-ui/components": "4.2.1",
+    "@object-ui/core": "4.2.1",
+    "@object-ui/data-objectstack": "4.2.1",
+    "@object-ui/fields": "4.2.1",
+    "@object-ui/i18n": "4.2.1",
+    "@object-ui/layout": "4.2.1",
+    "@object-ui/permissions": "4.2.1",
+    "@object-ui/react": "4.2.1",
+    "@object-ui/types": "4.2.1"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",
     "react-dom": "^18.0.0 || ^19.0.0",
     "react-router-dom": "^6.0.0 || ^7.0.0",
-    "@object-ui/plugin-calendar": "4.0.12",
-    "@object-ui/plugin-charts": "4.0.12",
-    "@object-ui/plugin-chatbot": "4.0.12",
-    "@object-ui/plugin-dashboard": "4.0.12",
-    "@object-ui/plugin-designer": "4.0.12",
-    "@object-ui/plugin-detail": "4.0.12",
-    "@object-ui/plugin-form": "4.0.12",
-    "@object-ui/plugin-grid": "4.0.12",
-    "@object-ui/plugin-kanban": "4.0.12",
-    "@object-ui/plugin-list": "4.0.12",
-    "@object-ui/plugin-report": "4.0.12",
-    "@object-ui/plugin-view": "4.0.12"
+    "@object-ui/plugin-calendar": "^4.2.1",
+    "@object-ui/plugin-charts": "^4.2.1",
+    "@object-ui/plugin-chatbot": "^4.2.1",
+    "@object-ui/plugin-dashboard": "^4.2.1",
+    "@object-ui/plugin-designer": "^4.2.1",
+    "@object-ui/plugin-detail": "^4.2.1",
+    "@object-ui/plugin-form": "^4.2.1",
+    "@object-ui/plugin-grid": "^4.2.1",
+    "@object-ui/plugin-kanban": "^4.2.1",
+    "@object-ui/plugin-list": "^4.2.1",
+    "@object-ui/plugin-report": "^4.2.1",
+    "@object-ui/plugin-view": "^4.2.1"
   },
   "devDependencies": {
     "@types/node": "^25.9.0",