@object-ui/app-shell 4.0.12 → 4.3.0

package/CHANGELOG.md

@@ -1,5 +1,107 @@
 # @object-ui/app-shell — Changelog
 
+## 4.3.0
+
+### Patch Changes
+
+- 079c3b2: feat(plugin-report): per-block field resolution for joined reports
+
+  Joined report blocks can override `objectName` to query a different
+  object than the container, but the editor was always offering the
+  container's fields — wrong field names, wrong types, broken granularity
+  and chart-axis filtering.
+
+  `ReportConfigPanel` now accepts an optional `getFieldsForObject`
+  resolver. `JoinedBlocksEditor` uses it to source fields for each
+  block based on `block.objectName ?? containerObjectName`, falling
+  back to the static `availableFields` when the resolver returns
+  `undefined` (unknown object).
+
+  `ReportView` wires the resolver against the app's loaded `objects`
+  list and reuses the same parsing path internally to derive its
+  top-level `availableFields`, removing the duplicated schema lookup.
+
+  5 new RTL tests verify the resolver wiring, fallback behaviour,
+  add-block flow, and inline duplicate-name validation (111 plugin-report
+  tests green).
+
+- 154a36c: fix
+- fed4897: fix
+- Updated dependencies [f196cf4]
+- Updated dependencies [ee1cc96]
+- Updated dependencies [0b032be]
+- Updated dependencies [115d36a]
+- Updated dependencies [4e7bc1b]
+- Updated dependencies [8442c05]
+  - @object-ui/i18n@4.3.0
+  - @object-ui/components@4.3.0
+  - @object-ui/fields@4.3.0
+  - @object-ui/react@4.3.0
+  - @object-ui/layout@4.3.0
+  - @object-ui/types@4.3.0
+  - @object-ui/core@4.3.0
+  - @object-ui/data-objectstack@4.3.0
+  - @object-ui/auth@4.3.0
+  - @object-ui/permissions@4.3.0
+  - @object-ui/collaboration@4.3.0
+
+## 4.2.1
+
+### Patch Changes
+
+- 47c27c7: fix
+  - @object-ui/types@4.2.1
+  - @object-ui/core@4.2.1
+  - @object-ui/i18n@4.2.1
+  - @object-ui/react@4.2.1
+  - @object-ui/components@4.2.1
+  - @object-ui/fields@4.2.1
+  - @object-ui/layout@4.2.1
+  - @object-ui/data-objectstack@4.2.1
+  - @object-ui/auth@4.2.1
+  - @object-ui/permissions@4.2.1
+  - @object-ui/collaboration@4.2.1
+
+## 4.2.0
+
+### Patch Changes
+
+- 786de60: ReportView no longer caps the report content at `max-w-5xl` (1024px). Reports now use the full available content width, matching DashboardView behavior. Matrix and grid reports in particular benefit from the additional horizontal real estate.
+- Updated dependencies [eb738bd]
+- Updated dependencies [650392e]
+- Updated dependencies [84b4bf1]
+  - @object-ui/i18n@4.2.0
+  - @object-ui/components@4.2.0
+  - @object-ui/fields@4.2.0
+  - @object-ui/react@4.2.0
+  - @object-ui/layout@4.2.0
+  - @object-ui/types@4.2.0
+  - @object-ui/core@4.2.0
+  - @object-ui/data-objectstack@4.2.0
+  - @object-ui/auth@4.2.0
+  - @object-ui/permissions@4.2.0
+  - @object-ui/collaboration@4.2.0
+
+## 4.1.0
+
+### Patch Changes
+
+- b4ce9e2: Fix summary reports: render chart + KPIs, correct empty-table on server-aggregated data.
+  - `plugin-report`: `SpecReportGrid` now renders a KPI strip (per aggregating column) and a chart section above the grid for `summary` reports. KPI section auto-hides when no aggregating columns. New `buildChartData()` adapter buckets aggregated `ReportRow[]` to chart-ready data, auto-sorts pie/funnel descending, and falls back to row count when the chart `yAxis` points at a non-numeric column. When the data is server-aggregated, the grid switches columns to `[groupings, ${field}__${agg}]` so cells aren't empty against a raw-row column schema.
+  - `plugin-charts`: register `'column'` as an alias of `'bar'` in `ChartRenderer` / `AdvancedChartImpl` (Recharts only has `BarChart`).
+  - `app-shell`: `ReportView` now routes any object-backed report (matrix/joined/summary/tabular/columns/groupingsAcross) through the spec `ReportRenderer`; fully-legacy `fields`+`data` schemas still use `ReportViewer`.
+  - @object-ui/types@4.1.0
+  - @object-ui/core@4.1.0
+  - @object-ui/i18n@4.1.0
+  - @object-ui/react@4.1.0
+  - @object-ui/components@4.1.0
+  - @object-ui/fields@4.1.0
+  - @object-ui/layout@4.1.0
+  - @object-ui/data-objectstack@4.1.0
+  - @object-ui/auth@4.1.0
+  - @object-ui/permissions@4.1.0
+  - @object-ui/collaboration@4.1.0
+
 ## 4.0.12
 
 ### Patch Changes

package/dist/components/ManagedByBadge.d.ts

@@ -0,0 +1,10 @@
+export interface ManagedByBadgeProps {
+    /** The `managedBy` flag from the object schema. */
+    managedBy?: string;
+    /** Optional override for the human-readable system name shown in the tooltip. */
+    label?: string;
+    /** Optional extra classes. */
+    className?: string;
+}
+export declare function ManagedByBadge({ managedBy, label, className }: ManagedByBadgeProps): import("react/jsx-runtime").JSX.Element | null;
+export default ManagedByBadge;

package/dist/components/ManagedByBadge.js

@@ -0,0 +1,44 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { ShieldAlert, Settings2, Lock, Archive } from 'lucide-react';
+import { Badge, Tooltip, TooltipTrigger, TooltipContent, TooltipProvider, cn, } from '@object-ui/components';
+const VARIANTS = {
+    config: {
+        icon: Settings2,
+        short: 'Admin config',
+        title: 'Administrator configuration',
+        body: () => 'These rows define how the platform behaves at runtime. Author them here; the runtime data they produce lives in a separate table.',
+        tone: 'border-sky-300/60 bg-sky-50 text-sky-900 hover:bg-sky-100 dark:border-sky-500/40 dark:bg-sky-950/40 dark:text-sky-100',
+    },
+    system: {
+        icon: Lock,
+        short: 'System-managed',
+        title: 'Managed by the platform',
+        body: () => 'Rows here are created automatically when actions run on the source record. The list below is a read-only monitoring surface — row-level actions (Approve, Recall, Resend, …) live on each row.',
+        tone: 'border-slate-300/60 bg-slate-50 text-slate-900 hover:bg-slate-100 dark:border-slate-500/40 dark:bg-slate-950/40 dark:text-slate-100',
+    },
+    'append-only': {
+        icon: Archive,
+        short: 'Read-only · Audit log',
+        title: 'Read-only historical record',
+        body: () => "Immutable audit log. Rows cannot be created, edited, or deleted from the UI — they're written by the platform when events occur. Use Export to download for compliance review.",
+        tone: 'border-zinc-300/60 bg-zinc-50 text-zinc-900 hover:bg-zinc-100 dark:border-zinc-500/40 dark:bg-zinc-950/40 dark:text-zinc-100',
+    },
+    'better-auth': {
+        icon: ShieldAlert,
+        short: 'Identity',
+        title: 'Managed by the identity provider',
+        body: (display) => `This object's schema is owned by ${display}. Direct edits bypass password hashing, session validation, two-factor checks, and audit hooks. Use the dedicated identity workflows instead (Invite User, Reset Password, Revoke Session, Rotate Key, …).`,
+        tone: 'border-amber-300/60 bg-amber-50 text-amber-900 hover:bg-amber-100 dark:border-amber-500/40 dark:bg-amber-950/40 dark:text-amber-100',
+    },
+};
+export function ManagedByBadge({ managedBy, label, className }) {
+    if (!managedBy || managedBy === 'platform')
+        return null;
+    const variant = VARIANTS[managedBy];
+    if (!variant)
+        return null;
+    const Icon = variant.icon;
+    const display = label ?? 'better-auth';
+    return (_jsx(TooltipProvider, { delayDuration: 200, children: _jsxs(Tooltip, { children: [_jsx(TooltipTrigger, { asChild: true, children: _jsxs(Badge, { variant: "outline", "data-testid": "managed-by-badge", "data-bucket": managedBy, className: cn('gap-1 font-normal text-[11px] leading-none py-0.5 px-1.5 cursor-help', variant.tone, className), children: [_jsx(Icon, { className: "h-3 w-3", "aria-hidden": "true" }), _jsx("span", { children: variant.short })] }) }), _jsxs(TooltipContent, { side: "bottom", align: "start", className: "max-w-xs text-xs leading-relaxed", children: [_jsx("p", { className: "font-semibold mb-1", children: variant.title }), _jsx("p", { className: "text-muted-foreground", children: variant.body(display) })] })] }) }));
+}
+export default ManagedByBadge;

package/dist/layout/ActivityFeed.js

@@ -9,7 +9,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  */
 import { useState } from 'react';
 import { Button, Badge, Sheet, SheetContent, SheetHeader, SheetTitle, SheetTrigger, } from '@object-ui/components';
-import { Bell, Plus, Pencil, Trash2, MessageSquare, Filter } from 'lucide-react';
+import { Activity, Plus, Pencil, Trash2, MessageSquare, Filter } from 'lucide-react';
 import { useObjectTranslation } from '@object-ui/i18n';
 const typeConfig = {
     create: { icon: Plus, color: 'text-green-500' },
@@ -57,11 +57,11 @@ export function ActivityFeed({ activities = [], className }) {
         delete: t('layout.activityFeed.typeDelete'),
         comment: t('layout.activityFeed.typeComment'),
     };
-    return (_jsxs(Sheet, { open: open, onOpenChange: setOpen, children: [_jsx(SheetTrigger, { asChild: true, children: _jsxs(Button, { variant: "ghost", size: "icon", className: className ?? 'h-8 w-8', "aria-label": t('layout.activityFeed.ariaLabel'), children: [_jsx(Bell, { className: "h-4 w-4" }), activities.length > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-3.5 w-3.5 rounded-full bg-primary text-[9px] font-bold text-primary-foreground flex items-center justify-center", children: activities.length > 9 ? '9+' : activities.length }))] }) }), _jsxs(SheetContent, { side: "right", className: "w-80 sm:w-96", children: [_jsx(SheetHeader, { children: _jsxs(SheetTitle, { className: "flex items-center justify-between", children: [t('layout.activityFeed.title'), _jsxs(Button, { variant: showFilters ? 'secondary' : 'ghost', size: "sm", className: "h-7 px-2", onClick: () => setShowFilters(!showFilters), children: [_jsx(Filter, { className: "h-3.5 w-3.5 mr-1" }), t('layout.activityFeed.filter')] })] }) }), showFilters && (_jsx("div", { className: "flex flex-wrap gap-1.5 mt-3 px-1", children: Object.keys(typeConfig).map(type => {
+    return (_jsxs(Sheet, { open: open, onOpenChange: setOpen, children: [_jsx(SheetTrigger, { asChild: true, children: _jsxs(Button, { variant: "ghost", size: "icon", className: className ?? 'h-8 w-8', "aria-label": t('layout.activityFeed.ariaLabel'), children: [_jsx(Activity, { className: "h-4 w-4" }), activities.length > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-3.5 w-3.5 rounded-full bg-primary text-[9px] font-bold text-primary-foreground flex items-center justify-center", children: activities.length > 9 ? '9+' : activities.length }))] }) }), _jsxs(SheetContent, { side: "right", className: "w-80 sm:w-96", children: [_jsx(SheetHeader, { children: _jsxs(SheetTitle, { className: "flex items-center justify-between", children: [t('layout.activityFeed.title'), _jsxs(Button, { variant: showFilters ? 'secondary' : 'ghost', size: "sm", className: "h-7 px-2", onClick: () => setShowFilters(!showFilters), children: [_jsx(Filter, { className: "h-3.5 w-3.5 mr-1" }), t('layout.activityFeed.filter')] })] }) }), showFilters && (_jsx("div", { className: "flex flex-wrap gap-1.5 mt-3 px-1", children: Object.keys(typeConfig).map(type => {
                             const { icon: Icon, color } = typeConfig[type];
                             const active = notificationPreferences[type];
                             return (_jsxs(Badge, { variant: active ? 'default' : 'outline', className: "cursor-pointer select-none gap-1", onClick: () => togglePreference(type), children: [_jsx(Icon, { className: `h-3 w-3 ${active ? '' : color}` }), typeLabels[type]] }, type));
-                        }) })), filteredActivities.length === 0 ? (_jsxs("div", { className: "flex flex-col items-center justify-center gap-2 py-16 text-muted-foreground", children: [_jsx(Bell, { className: "h-8 w-8 opacity-40" }), _jsx("p", { className: "text-sm", children: t('layout.activityFeed.empty') })] })) : (_jsx("ul", { className: "mt-4 space-y-1 overflow-y-auto max-h-[calc(100vh-8rem)]", children: filteredActivities.map((item) => {
+                        }) })), filteredActivities.length === 0 ? (_jsxs("div", { className: "flex flex-col items-center justify-center gap-2 py-16 text-muted-foreground", children: [_jsx(Activity, { className: "h-8 w-8 opacity-40" }), _jsx("p", { className: "text-sm", children: t('layout.activityFeed.empty') })] })) : (_jsx("ul", { className: "mt-4 space-y-1 overflow-y-auto max-h-[calc(100vh-8rem)]", children: filteredActivities.map((item) => {
                             const { icon: Icon, color } = typeConfig[item.type];
                             return (_jsxs("li", { className: "flex items-start gap-3 rounded-md px-2 py-2 hover:bg-muted/50 transition-colors", children: [_jsx("span", { className: `mt-0.5 shrink-0 ${color}`, children: _jsx(Icon, { className: "h-4 w-4" }) }), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsx("p", { className: "text-sm leading-snug", children: item.description }), _jsxs("p", { className: "mt-0.5 text-xs text-muted-foreground", children: [item.user, " \u00B7 ", formatRelativeTime(item.timestamp, t)] })] })] }, item.id));
                         }) }))] })] }));

package/dist/layout/AppHeader.js

@@ -19,7 +19,7 @@ import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-run
  */
 import { useLocation, useParams, Link, useNavigate } from 'react-router-dom';
 import { SidebarTrigger, Button, DropdownMenu, DropdownMenuTrigger, DropdownMenuContent, DropdownMenuItem, DropdownMenuLabel, DropdownMenuSeparator, DropdownMenuGroup, Avatar, AvatarImage, AvatarFallback, } from '@object-ui/components';
-import { Search, HelpCircle, ChevronDown, Settings, LogOut, User as UserIcon, Boxes, Bell, } from 'lucide-react';
+import { Search, HelpCircle, ChevronDown, Settings, LogOut, User as UserIcon, Boxes, Bell, CheckSquare, } from 'lucide-react';
 import { useState, useEffect, useCallback, useRef } from 'react';
 import { useOffline } from '@object-ui/react';
 import { PresenceAvatars } from '@object-ui/collaboration';
@@ -66,6 +66,9 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
     const presenceUnavailableRef = useRef(false);
     const activityUnavailableRef = useRef(false);
     const notificationsUnavailableRef = useRef(false);
+    /** M11.C15: pending approvals count for the topbar shortcut. */
+    const [pendingApprovalsCount, setPendingApprovalsCount] = useState(0);
+    const approvalsUnavailableRef = useRef(false);
     const fetchPresenceAndActivities = useCallback(async () => {
         if (!dataSource || !isApp)
             return;
@@ -107,10 +110,22 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
     }, [dataSource, isApp]);
     useEffect(() => { fetchPresenceAndActivities(); }, [fetchPresenceAndActivities]);
     /**
-     * M10.8: poll sys_notification for the signed-in user. Limited to
-     * the 20 most-recent entries; unread count drives the bell badge.
-     * Polls every 30s while the tab is foregrounded. Tolerates 404 so
-     * older deployments without sys_notification degrade silently.
+     * M10.8 + M11.B3: poll sys_notification for the signed-in user.
+     *
+     * - Limited to the 20 most-recent entries; unread count drives the bell badge.
+     * - Adaptive interval: 10s while the tab is foregrounded (was 30s) so the
+     *   bell reflects mentions / assignments within seconds without requiring a
+     *   server-push transport.
+     * - Immediate refetch on `visibilitychange` when the user returns to the
+     *   tab, so a backgrounded tab catches up the moment it regains focus.
+     * - On transient errors, switches to exponential backoff (cap 2 min) and
+     *   resets on the first successful fetch.
+     * - Tolerates 404 so deployments without sys_notification degrade silently.
+     *
+     * Full server-push (SSE / WebSocket) is tracked separately as a M12
+     * enhancement; this adaptive poll already reduces perceived latency from
+     * ~15s (average half of the old 30s window) to ~5s and is sufficient for
+     * pilots up to ~50 concurrent users.
      */
     useEffect(() => {
         if (!dataSource || !isApp || !user?.id)
@@ -118,6 +133,11 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
         if (notificationsUnavailableRef.current)
             return;
         let cancelled = false;
+        let timer = null;
+        const ACTIVE_INTERVAL_MS = 10000;
+        const HIDDEN_INTERVAL_MS = 60000;
+        const MAX_BACKOFF_MS = 120000;
+        let backoffMs = ACTIVE_INTERVAL_MS;
         const isMissingResource = (err) => err?.httpStatus === 404 || err?.status === 404 || err?.code === 'object_not_found';
         const fetchOnce = async () => {
             try {
@@ -130,24 +150,108 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
                     return;
                 if (Array.isArray(res?.data))
                     setNotifications(res.data);
+                backoffMs = ACTIVE_INTERVAL_MS;
             }
             catch (err) {
-                if (isMissingResource(err))
+                if (isMissingResource(err)) {
                     notificationsUnavailableRef.current = true;
+                    return;
+                }
+                backoffMs = Math.min(backoffMs * 2, MAX_BACKOFF_MS);
             }
         };
-        fetchOnce();
-        const handle = setInterval(() => {
-            if (typeof document !== 'undefined' && document.hidden)
+        const scheduleNext = () => {
+            if (cancelled || notificationsUnavailableRef.current)
                 return;
-            if (notificationsUnavailableRef.current) {
-                clearInterval(handle);
+            const hidden = typeof document !== 'undefined' && document.hidden;
+            const delay = hidden ? HIDDEN_INTERVAL_MS : backoffMs;
+            timer = setTimeout(async () => {
+                await fetchOnce();
+                scheduleNext();
+            }, delay);
+        };
+        const onVisibilityChange = () => {
+            if (cancelled)
+                return;
+            if (typeof document === 'undefined' || document.hidden)
                 return;
+            if (timer) {
+                clearTimeout(timer);
+                timer = null;
+            }
+            backoffMs = ACTIVE_INTERVAL_MS;
+            fetchOnce().finally(scheduleNext);
+        };
+        fetchOnce().finally(scheduleNext);
+        if (typeof document !== 'undefined') {
+            document.addEventListener('visibilitychange', onVisibilityChange);
+        }
+        return () => {
+            cancelled = true;
+            if (timer)
+                clearTimeout(timer);
+            if (typeof document !== 'undefined') {
+                document.removeEventListener('visibilitychange', onVisibilityChange);
             }
-            fetchOnce();
-        }, 30000);
-        return () => { cancelled = true; clearInterval(handle); };
+        };
     }, [dataSource, isApp, user?.id]);
+    /**
+     * M11.C15: poll pending-approvals count for the topbar shortcut badge.
+     * Hits the framework's `/api/v1/approvals/requests?status=pending`
+     * endpoint with the user's identities (id, email, role:<r>). Degrades
+     * silently to zero on 404 (approvals plugin not installed).
+     */
+    useEffect(() => {
+        if (!isApp || !user?.id)
+            return;
+        if (approvalsUnavailableRef.current)
+            return;
+        const serverUrl = (import.meta.env?.VITE_SERVER_URL || '').replace(/\/$/, '');
+        const base = `${serverUrl}/api/v1/approvals/requests`;
+        const identities = [];
+        if (user.id)
+            identities.push(user.id);
+        if (user.email)
+            identities.push(user.email);
+        for (const r of (user.roles || [])) {
+            if (r)
+                identities.push(`role:${r}`);
+        }
+        let cancelled = false;
+        let timer = null;
+        const POLL_MS = 30000;
+        const fetchOnce = async () => {
+            try {
+                const seen = new Set();
+                if (identities.length === 0)
+                    return;
+                for (const id of identities) {
+                    const qs = new URLSearchParams({ status: 'pending', approverId: id });
+                    const res = await fetch(`${base}?${qs}`, { credentials: 'include' });
+                    if (res.status === 404) {
+                        approvalsUnavailableRef.current = true;
+                        return;
+                    }
+                    if (!res.ok)
+                        return;
+                    const payload = await res.json().catch(() => null);
+                    for (const row of (payload?.data || []))
+                        seen.add(row.id);
+                }
+                if (!cancelled)
+                    setPendingApprovalsCount(seen.size);
+            }
+            catch { /* transient — keep last value */ }
+        };
+        const schedule = () => {
+            if (cancelled || approvalsUnavailableRef.current)
+                return;
+            timer = setTimeout(async () => { await fetchOnce(); schedule(); }, POLL_MS);
+        };
+        fetchOnce().finally(schedule);
+        return () => { cancelled = true; if (timer)
+            clearTimeout(timer); };
+    }, [isApp, user?.id]);
     const unreadCount = notifications.reduce((n, x) => n + (x.is_read ? 0 : 1), 0);
     const markNotificationRead = useCallback(async (id) => {
         setNotifications(prev => prev.map(n => n.id === id ? { ...n, is_read: true } : n));
@@ -271,7 +375,10 @@ export function AppHeader({ variant, appName, objects, connectionState, presence
     return (_jsxs("div", { className: "flex items-center justify-between w-full h-full", children: [_jsxs("div", { className: "flex items-center min-w-0 flex-1", children: [_jsx(Link, { to: "/home", className: "flex items-center justify-center h-7 w-7 shrink-0 rounded-md bg-primary text-primary-foreground hover:bg-primary/90 transition-colors", title: "ObjectStack", children: _jsx(Boxes, { className: "h-4 w-4" }) }), resolvedVariant === 'home' && (_jsx("span", { className: "hidden sm:inline ml-2 text-sm font-semibold tracking-tight", children: "ObjectStack" })), resolvedVariant === 'orgs' && (_jsxs(_Fragment, { children: [_jsx(PathSep, {}), _jsx("span", { className: "text-sm font-medium text-foreground/80 px-1.5", children: t('organizations.title', { defaultValue: 'Organizations' }) })] })), isApp && (_jsxs(_Fragment, { children: [_jsx(SidebarTrigger, { className: "md:hidden shrink-0 ml-1", "aria-label": t('common.toggleSidebar') || 'Toggle sidebar' }), activeAppName && onAppChange ? (_jsxs(_Fragment, { children: [_jsx(PathSep, {}), _jsx(AppSwitcher, { activeAppName: activeAppName, onAppChange: onAppChange })] })) : appName ? (_jsxs(_Fragment, { children: [_jsx(PathSep, {}), _jsx("span", { className: "text-sm font-medium text-foreground/80 px-1.5", children: appName })] })) : null, extraSegments.map((seg, i) => {
                                 const isLast = i === extraSegments.length - 1;
                                 return (_jsxs("span", { className: "hidden sm:flex items-center min-w-0", children: [_jsx(PathSep, {}), seg.siblings && seg.siblings.length > 1 ? (_jsxs(DropdownMenu, { children: [_jsxs(DropdownMenuTrigger, { className: `flex items-center gap-1 rounded-md px-1.5 py-1 text-sm font-medium transition-colors outline-none hover:bg-accent hover:text-foreground ${!isLast ? 'text-foreground/60' : 'text-foreground/80'}`, children: [seg.label, _jsx(ChevronDown, { className: "h-3.5 w-3.5 text-muted-foreground" })] }), _jsxs(DropdownMenuContent, { align: "start", sideOffset: 8, className: "w-56 max-h-72 overflow-y-auto", children: [_jsx(DropdownMenuLabel, { className: "text-xs text-muted-foreground font-normal", children: "Switch Object" }), _jsx(DropdownMenuSeparator, {}), seg.siblings.map((sibling) => (_jsx(DropdownMenuItem, { asChild: true, children: _jsx(Link, { to: sibling.href, className: "w-full", children: sibling.label }) }, sibling.href)))] })] })) : seg.href ? (_jsx(Link, { to: seg.href, className: `rounded-md px-1.5 py-1 text-sm font-medium transition-colors hover:bg-accent hover:text-foreground truncate max-w-[160px] ${isLast ? 'text-foreground/80' : 'text-foreground/60'}`, children: seg.label })) : (_jsx("span", { className: `px-1.5 py-1 text-sm font-medium truncate max-w-[160px] ${isLast ? 'text-foreground/80' : 'text-foreground/60'}`, children: seg.label }))] }, i));
-                            }), _jsx("span", { className: "text-sm font-medium sm:hidden truncate min-w-0 ml-1", children: lastSegmentLabel })] }))] }), _jsxs("div", { className: "flex items-center gap-0.5 sm:gap-1 shrink-0 [&>*+*[data-topbar-group]]:ml-1 [&>[data-topbar-group]+[data-topbar-group]]:border-l [&>[data-topbar-group]+[data-topbar-group]]:border-border/60 [&>[data-topbar-group]+[data-topbar-group]]:pl-1 sm:[&>[data-topbar-group]+[data-topbar-group]]:pl-2 sm:[&>[data-topbar-group]+[data-topbar-group]]:ml-2", children: [!isOnline && (_jsxs("div", { className: "flex items-center gap-1 px-2 py-1 rounded-full bg-yellow-100 dark:bg-yellow-900/30 text-yellow-800 dark:text-yellow-200 text-xs font-medium", children: [_jsx("span", { className: "h-2 w-2 rounded-full bg-yellow-500 animate-pulse" }), "Offline"] })), isApp && connectionState && _jsx(ConnectionStatus, { state: connectionState }), isApp && activeUsers.length > 0 && (_jsx("div", { className: "hidden md:flex items-center shrink-0", title: "Users currently online", children: _jsx(PresenceAvatars, { users: activeUsers, size: "sm", maxVisible: 3, showStatus: true }) })), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 sm:gap-1 shrink-0", children: [_jsxs("button", { onClick: () => document.dispatchEvent(new KeyboardEvent('keydown', { key: 'k', metaKey: true })), className: "hidden lg:flex relative items-center gap-2 w-48 xl:w-64 h-8 px-3 text-sm rounded-md border bg-muted/50 text-muted-foreground hover:bg-muted transition-colors", children: [_jsx(Search, { className: "h-3.5 w-3.5 shrink-0" }), _jsx("span", { className: "flex-1 text-left text-xs", children: t('console.search', { defaultValue: 'Search...' }) }), _jsxs("kbd", { className: "pointer-events-none inline-flex h-5 items-center gap-0.5 rounded border bg-background px-1.5 text-[10px] font-medium text-muted-foreground", children: [_jsx("span", { className: "text-xs", children: "\u2318" }), "K"] })] }), _jsx(Button, { variant: "ghost", size: "icon", className: "lg:hidden h-8 w-8 shrink-0", onClick: () => document.dispatchEvent(new KeyboardEvent('keydown', { key: 'k', metaKey: true })), "aria-label": t('console.search', { defaultValue: 'Search...' }), children: _jsx(Search, { className: "h-4 w-4" }) })] }), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 shrink-0", children: [_jsx("div", { className: "hidden sm:flex shrink-0", children: _jsx(ActivityFeed, { activities: activeActivities }) }), _jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsxs(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 relative shrink-0", "aria-label": t('sidebar.notifications', { defaultValue: 'Notifications' }), children: [_jsx(Bell, { className: "h-4 w-4" }), unreadCount > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-4 min-w-[16px] rounded-full bg-red-500 text-[10px] leading-4 text-white text-center px-1", children: unreadCount > 9 ? '9+' : unreadCount }))] }) }), _jsxs(DropdownMenuContent, { align: "end", className: "w-80 max-h-96 overflow-auto", children: [_jsxs(DropdownMenuLabel, { className: "flex items-center justify-between", children: [_jsx("span", { children: t('sidebar.notifications', { defaultValue: 'Notifications' }) }), unreadCount > 0 && (_jsx("button", { type: "button", onClick: (e) => { e.preventDefault(); markAllRead(); }, className: "text-xs text-muted-foreground hover:text-foreground", children: t('notifications.markAllRead', { defaultValue: 'Mark all read' }) }))] }), _jsx(DropdownMenuSeparator, {}), notifications.length === 0 ? (_jsx("div", { className: "px-3 py-6 text-sm text-muted-foreground text-center", children: t('notifications.empty', { defaultValue: 'No notifications' }) })) : (notifications.map((n) => (_jsxs(DropdownMenuItem, { className: `flex flex-col items-start gap-1 ${n.is_read ? '' : 'bg-accent/40'}`, onSelect: () => {
+                            }), _jsx("span", { className: "text-sm font-medium sm:hidden truncate min-w-0 ml-1", children: lastSegmentLabel })] }))] }), _jsxs("div", { className: "flex items-center gap-0.5 sm:gap-1 shrink-0 [&>*+*[data-topbar-group]]:ml-1 [&>[data-topbar-group]+[data-topbar-group]]:border-l [&>[data-topbar-group]+[data-topbar-group]]:border-border/60 [&>[data-topbar-group]+[data-topbar-group]]:pl-1 sm:[&>[data-topbar-group]+[data-topbar-group]]:pl-2 sm:[&>[data-topbar-group]+[data-topbar-group]]:ml-2", children: [!isOnline && (_jsxs("div", { className: "flex items-center gap-1 px-2 py-1 rounded-full bg-yellow-100 dark:bg-yellow-900/30 text-yellow-800 dark:text-yellow-200 text-xs font-medium", children: [_jsx("span", { className: "h-2 w-2 rounded-full bg-yellow-500 animate-pulse" }), "Offline"] })), isApp && connectionState && _jsx(ConnectionStatus, { state: connectionState }), isApp && activeUsers.length > 0 && (_jsx("div", { className: "hidden md:flex items-center shrink-0", title: "Users currently online", children: _jsx(PresenceAvatars, { users: activeUsers, size: "sm", maxVisible: 3, showStatus: true }) })), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 sm:gap-1 shrink-0", children: [_jsxs("button", { onClick: () => document.dispatchEvent(new KeyboardEvent('keydown', { key: 'k', metaKey: true })), className: "hidden lg:flex relative items-center gap-2 w-48 xl:w-64 h-8 px-3 text-sm rounded-md border bg-muted/50 text-muted-foreground hover:bg-muted transition-colors", children: [_jsx(Search, { className: "h-3.5 w-3.5 shrink-0" }), _jsx("span", { className: "flex-1 text-left text-xs", children: t('console.search', { defaultValue: 'Search...' }) }), _jsxs("kbd", { className: "pointer-events-none inline-flex h-5 items-center gap-0.5 rounded border bg-background px-1.5 text-[10px] font-medium text-muted-foreground", children: [_jsx("span", { className: "text-xs", children: "\u2318" }), "K"] })] }), _jsx(Button, { variant: "ghost", size: "icon", className: "lg:hidden h-8 w-8 shrink-0", onClick: () => document.dispatchEvent(new KeyboardEvent('keydown', { key: 'k', metaKey: true })), "aria-label": t('console.search', { defaultValue: 'Search...' }), children: _jsx(Search, { className: "h-4 w-4" }) })] }), _jsxs("div", { "data-topbar-group": true, className: "flex items-center gap-0.5 shrink-0", children: [_jsx("div", { className: "hidden sm:flex shrink-0", children: _jsx(ActivityFeed, { activities: activeActivities }) }), pendingApprovalsCount >= 0 && (_jsxs(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 relative shrink-0", "aria-label": t('sidebar.approvals', { defaultValue: 'Approvals' }), title: t('sidebar.approvals', { defaultValue: 'Approvals' }), onClick: () => {
+                                    const app = currentAppName ?? params.appName;
+                                    navigate(app ? `/apps/${app}/system/approvals` : '/apps/setup/system/approvals');
+                                }, children: [_jsx(CheckSquare, { className: "h-4 w-4" }), pendingApprovalsCount > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-4 min-w-[16px] rounded-full bg-amber-500 text-[10px] leading-4 text-white text-center px-1", children: pendingApprovalsCount > 9 ? '9+' : pendingApprovalsCount }))] })), _jsxs(DropdownMenu, { children: [_jsx(DropdownMenuTrigger, { asChild: true, children: _jsxs(Button, { variant: "ghost", size: "icon", className: "h-8 w-8 relative shrink-0", "aria-label": t('sidebar.notifications', { defaultValue: 'Notifications' }), children: [_jsx(Bell, { className: "h-4 w-4" }), unreadCount > 0 && (_jsx("span", { className: "absolute -top-0.5 -right-0.5 h-4 min-w-[16px] rounded-full bg-red-500 text-[10px] leading-4 text-white text-center px-1", children: unreadCount > 9 ? '9+' : unreadCount }))] }) }), _jsxs(DropdownMenuContent, { align: "end", className: "w-80 max-h-96 overflow-auto", children: [_jsxs(DropdownMenuLabel, { className: "flex items-center justify-between", children: [_jsx("span", { children: t('sidebar.notifications', { defaultValue: 'Notifications' }) }), unreadCount > 0 && (_jsx("button", { type: "button", onClick: (e) => { e.preventDefault(); markAllRead(); }, className: "text-xs text-muted-foreground hover:text-foreground", children: t('notifications.markAllRead', { defaultValue: 'Mark all read' }) }))] }), _jsx(DropdownMenuSeparator, {}), notifications.length === 0 ? (_jsx("div", { className: "px-3 py-6 text-sm text-muted-foreground text-center", children: t('notifications.empty', { defaultValue: 'No notifications' }) })) : (notifications.map((n) => (_jsxs(DropdownMenuItem, { className: `flex flex-col items-start gap-1 ${n.is_read ? '' : 'bg-accent/40'}`, onSelect: () => {
                                                     markNotificationRead(n.id);
                                                     if (n.source_object && n.source_id) {
                                                         // Navigate to the related record; relative to /apps/<currentApp> if any.

package/dist/utils/crudAffordances.d.ts

@@ -0,0 +1,41 @@
+/**
+ * crudAffordances — UI-side mirror of the framework's
+ * `resolveCrudAffordances()` helper (see
+ * `@objectstack/spec/data/object.zod.ts`).
+ *
+ * The framework tags every object with a `managedBy` lifecycle bucket
+ * (`platform | config | system | append-only | better-auth`) and an
+ * optional `userActions` override block. UI components ask this helper
+ * "should I show the New / Import / Edit / Delete / Export buttons?" so
+ * the toolbar tracks the object's lifecycle automatically — no need for
+ * each view to special-case `sys_*` names.
+ *
+ * Keep this in lockstep with the framework helper. The bucket defaults
+ * mirror what Salesforce / ServiceNow / Workday / Notion do for the
+ * equivalent categories of system tables.
+ */
+export type ManagedByBucket = 'platform' | 'config' | 'system' | 'append-only' | 'better-auth';
+export interface CrudAffordances {
+    /** Generic "New" button for single-record creation. */
+    create: boolean;
+    /** CSV bulk-import wizard. */
+    import: boolean;
+    /** Inline + form editing of existing rows. */
+    edit: boolean;
+    /** Row-level + bulk delete. */
+    delete: boolean;
+    /** CSV / clipboard export. */
+    exportCsv: boolean;
+}
+export interface UserActionsOverride {
+    create?: boolean;
+    import?: boolean;
+    edit?: boolean;
+    delete?: boolean;
+    exportCsv?: boolean;
+}
+export interface SchemaLike {
+    managedBy?: string | null;
+    userActions?: UserActionsOverride | null;
+}
+export declare function resolveCrudAffordances(obj: SchemaLike | null | undefined): CrudAffordances;

package/dist/utils/crudAffordances.js

@@ -0,0 +1,35 @@
+/**
+ * crudAffordances — UI-side mirror of the framework's
+ * `resolveCrudAffordances()` helper (see
+ * `@objectstack/spec/data/object.zod.ts`).
+ *
+ * The framework tags every object with a `managedBy` lifecycle bucket
+ * (`platform | config | system | append-only | better-auth`) and an
+ * optional `userActions` override block. UI components ask this helper
+ * "should I show the New / Import / Edit / Delete / Export buttons?" so
+ * the toolbar tracks the object's lifecycle automatically — no need for
+ * each view to special-case `sys_*` names.
+ *
+ * Keep this in lockstep with the framework helper. The bucket defaults
+ * mirror what Salesforce / ServiceNow / Workday / Notion do for the
+ * equivalent categories of system tables.
+ */
+const DEFAULTS = {
+    platform: { create: true, import: true, edit: true, delete: true, exportCsv: true },
+    config: { create: true, import: false, edit: true, delete: true, exportCsv: true },
+    system: { create: false, import: false, edit: false, delete: false, exportCsv: true },
+    'append-only': { create: false, import: false, edit: false, delete: false, exportCsv: true },
+    'better-auth': { create: false, import: false, edit: false, delete: false, exportCsv: true },
+};
+export function resolveCrudAffordances(obj) {
+    const bucket = obj?.managedBy ?? 'platform';
+    const base = DEFAULTS[bucket] ?? DEFAULTS.platform;
+    const o = obj?.userActions ?? {};
+    return {
+        create: o.create ?? base.create,
+        import: o.import ?? base.import,
+        edit: o.edit ?? base.edit,
+        delete: o.delete ?? base.delete,
+        exportCsv: o.exportCsv ?? base.exportCsv,
+    };
+}

package/dist/utils/managedByEmptyState.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Derive a context-aware empty-state config for object lists whose
+ * `managedBy` bucket means the user can't create rows directly from
+ * this list view.
+ *
+ * Background: previously the entire affordance story was carried by a
+ * full-width banner pinned to the top of every list/detail/form page.
+ * That violated the principle most enterprise platforms (Salesforce,
+ * ServiceNow, SAP Fiori, Notion, Linear) settled on long ago: hide the
+ * affordance you don't want users to take, and use the *empty state* as
+ * the only place to explain why the list is empty and where new entries
+ * come from.
+ *
+ * This helper returns an `emptyState` payload compatible with the
+ * `ListView` schema (`{ title, message, icon }`). It only fires for the
+ * buckets where the default empty state ("No records yet") would be
+ * misleading; for `platform`/`config` it returns `undefined` so the
+ * caller falls back to the user-defined view-level empty state.
+ *
+ * The bucket → message mapping mirrors `ManagedByBadge` so that the badge
+ * (in the header) and the empty state (in the body) tell a consistent
+ * story without repeating themselves verbatim.
+ */
+export interface ManagedByEmptyState {
+    title: string;
+    message: string;
+    icon: string;
+}
+export declare function resolveManagedByEmptyState(managedBy: string | undefined | null): ManagedByEmptyState | undefined;

package/dist/utils/managedByEmptyState.js

@@ -0,0 +1,24 @@
+export function resolveManagedByEmptyState(managedBy) {
+    switch (managedBy) {
+        case 'system':
+            return {
+                icon: 'Lock',
+                title: 'Nothing here yet',
+                message: 'Entries appear automatically when their source action runs (e.g. Submit for Approval, Share, Invite). Trigger one of those on a source record to create a row.',
+            };
+        case 'append-only':
+            return {
+                icon: 'Archive',
+                title: 'No events recorded',
+                message: 'This is an immutable audit log. Rows are written by the platform when events occur — you can export the history but cannot create entries from here.',
+            };
+        case 'better-auth':
+            return {
+                icon: 'ShieldAlert',
+                title: 'No identity records',
+                message: 'Identity rows are managed by the authentication provider. Use the dedicated identity workflows (Invite User, Reset Password, …) to create new entries.',
+            };
+        default:
+            return undefined;
+    }
+}

package/dist/utils/resolveActionParams.d.ts

@@ -0,0 +1,86 @@
+/**
+ * resolveActionParams — Resolves field-backed action parameters against
+ * runtime object metadata.
+ *
+ * Action params (`packages/spec/src/ui/action.zod.ts ActionParamSchema`) may
+ * either be declared inline (`{ name, label, type, ... }`) or reference an
+ * existing object field via `{ field, objectOverride? }`. Field-backed
+ * params inherit label (i18n via `fieldLabel()`), type, options, validation,
+ * placeholder, and help text from the object's field definition. Inline
+ * properties on a field-backed param act as overrides.
+ *
+ * The resolver flattens each param to the runtime `ActionParamDef` shape
+ * expected by `ActionParamDialog`, so the dialog itself stays agnostic to
+ * field references.
+ */
+import type { ActionParamDef } from '@object-ui/core';
+/**
+ * `ActionParamDialog` switches on raw `FieldType` values
+ * (`text` / `email` / `select` / `textarea` / `number` / `url` / `date` / …),
+ * matching the `FieldType` enum in `@objectstack/spec`. **Do not** route
+ * through `mapFieldTypeToFormType()` here — that helper translates into the
+ * FormField widget vocabulary (`field:select`, …) which the dialog does not
+ * understand.
+ */
+/** Raw param as authored on a schema action (post-zod). */
+export interface RawActionParam {
+    name?: string;
+    field?: string;
+    objectOverride?: string;
+    label?: string;
+    type?: string;
+    required?: boolean;
+    options?: Array<{
+        label: string;
+        value: string;
+    }>;
+    placeholder?: string;
+    helpText?: string;
+    defaultValue?: unknown;
+    /** When true, seed defaultValue from the row record using the field name. */
+    defaultFromRow?: boolean;
+}
+/** Field metadata as exposed by `useMetadata().objects[].fields`. */
+interface RuntimeField {
+    type?: string;
+    label?: string;
+    required?: boolean;
+    placeholder?: string;
+    help?: string;
+    description?: string;
+    options?: Array<{
+        label: string;
+        value: string;
+    } | string>;
+    multiple?: boolean;
+    defaultValue?: unknown;
+}
+interface RuntimeObject {
+    name?: string;
+    fields?: Record<string, RuntimeField>;
+}
+export interface ResolveActionParamsContext {
+    /** Default object name when a param's `objectOverride` is absent. */
+    objectName: string;
+    /** All known runtime objects (`useMetadata().objects`). */
+    objects: RuntimeObject[];
+    /** i18n resolver — `useObjectLabel().fieldLabel`. */
+    fieldLabel: (objectName: string, fieldName: string, fallback: string) => string;
+    /** Optional option-label translator — `useObjectLabel().fieldOptionLabel`. */
+    fieldOptionLabel?: (objectName: string, fieldName: string, optionValue: string, fallback: string) => string;
+    /**
+     * Row record providing default values for params with `defaultFromRow` set.
+     * Used by list_item actions (edit/delete dialogs) so the dialog opens with
+     * the row's current values pre-filled.
+     */
+    row?: Record<string, unknown>;
+}
+/**
+ * Resolve a single raw param against object metadata. Inline params pass
+ * through (with safe defaults); field-backed params inherit from the
+ * referenced field and accept inline overrides on top.
+ */
+export declare function resolveActionParam(param: RawActionParam, ctx: ResolveActionParamsContext): ActionParamDef;
+/** Resolve an array of raw action params. */
+export declare function resolveActionParams(params: RawActionParam[] | undefined, ctx: ResolveActionParamsContext): ActionParamDef[];
+export {};